openvas-manager-6.0.9/TODO000644 001751 001751 00000004471 12557600613 016364 0ustar00michaelmichael000000 000000 -*- ChangeLog -*- 2009-07-13 Matthew Mundell Ensure that if a CREATE_TASK fails half way, the new task is removed from the database. Probably the task should be added to the database at the end of the CREATE_TASK instead of at the beginning. 2009-06-12 Matthew Mundell Where necessary, buffer the XML output for a command before queuing it, in case there is an error later on in the command. This way an error response could be sent to the client, instead of half a success response with a closed connection. An example is the CLIENT_GET_STATUS case of omp_xml_handle_end_element where send_reports could fail after the initial part of is queued. A problem with this is that some responses are very big, and need to be sent to the client incrementally. 2009-06-12 Matthew Mundell Add function names to log and error messages. 2009-06-12 Matthew Mundell Convert data going out to the server to 8859-1. 2009-06-12 Matthew Mundell Handle errors from the SQL properly. 2009-06-12 Matthew Mundell Check carefully that removing a running task works OK. An OTP SCAN_END can arrive at any time, and if the task has been marked for removal the SCAN_END handler will remove the task and associated reports immediately. This could cause problems if an OMP command is accessing the task or reports. 2009-06-12 Matthew Mundell Use Glib everywhere and use it consistently. For example, some parts of the manager use char* while other parts use gchar*. 2009-06-12 Matthew Mundell Consider the effects of Glib's out of memory handling. Of special concern is the main manager process, where it may be better to try release memory than to exit the manager entirely. 2009-06-16 Matthew Mundell In libmanage (src/manage.c), consider separating functions that communicate with the server (start_task, stop_task, request_*, acknowledge_bye) from data storage and manipulation functions (like make_task, next_task, task_name and delete report). This could make it easier to use the library outside the manager. openvas-manager-6.0.9/VERSION.in000644 001751 001751 00000000027 12557600617 017346 0ustar00michaelmichael000000 000000 @CPACK_PACKAGE_VERSION@openvas-manager-6.0.9/doc/omp.html000644 001751 001751 00003641342 12757560562 020143 0ustar00michaelmichael000000 000000 OMP

OMP: OpenVAS Management Protocol

Version: 6.0

The "management" protocol of the Open Vulnerability Assessment System.

Contents

  1. Summary of Data Types
  2. Summary of Elements
  3. Summary of Commands
  4. RNC Preamble
  5. Data Type Details
  6. Element Details
  7. Command Details
  8. Compatibility Changes in Version 6.0

1 Summary of Data Types

alive_test
An alive test.
base64
Base64 encoded data.
boolean
A true or false value.
boolean_atoi
A true or false value, after conversion to an integer.
ctime
A date and time, in the C `ctime' format.
type_name
A name of a data type.
integer
An integer.
iso_time
A date and time, in ISO 8601 format.
levels
A string that may include the characters h, m, l, g and d.
name
A name.
port
A port.
user_list
A space separated list of users.
oid
An Object Identifier (OID).
severity
A severity score.
sort_order
A string describing an order for sorting.
status
The success or failure status of a command.
task_status
A task run status.
task_trend
The trend of results for a task.
threat
A threat level.
time_unit
A unit of time.
timezone
A timezone.
uuid
A Universally Unique Identifier (UUID).
uuid_or_empty
A Universally Unique Identifier (UUID), or the empty string.

2 Summary of Elements

c
A reference to a command.
e
A reference to an element.
r
A reference to a response.
o
An optional pattern item.
g
A group of pattern items.
any
Pattern item indicating "any number of".
pattern
The pattern element of a command or command descendant.
command_definition
Definition of a command in OMP describing HELP command.
note
A note.
override
An override.
result
A result.
report
Actually attributes and either base64 or a report.

3 Summary of Commands

authenticate
Authenticate with the manager.
commands
Run a list of commands.
create_agent
Create an agent.
create_config
Create a config.
create_alert
Create an alert.
create_filter
Create a filter.
create_group
Create a group.
create_lsc_credential
Create an LSC credential.
create_note
Create a note.
create_override
Create an override.
create_permission
Create a permission.
create_port_list
Create a port list.
create_port_range
Create a port range.
create_report
Create a report.
create_report_format
Create a report format.
create_role
Create a role.
create_scanner
Create a scanner.
create_schedule
Create a schedule.
create_slave
Create a slave.
create_tag
Create a tag.
create_target
Create a target.
create_task
Create a task.
create_user
Create a user.
delete_agent
Delete an agent.
delete_config
Delete a config.
delete_alert
Delete an alert.
delete_filter
Delete a filter.
delete_group
Delete a group.
delete_lsc_credential
Delete an LSC credential.
delete_note
Delete a note.
delete_override
Delete an override.
delete_report
Delete a report.
delete_permission
Delete a permission.
delete_port_list
Delete a port list.
delete_port_range
Delete a port range.
delete_report_format
Delete a report format.
delete_role
Delete a role.
delete_scanner
Delete a scanner.
delete_schedule
Delete a schedule.
delete_slave
Delete a slave.
delete_tag
Delete a tag.
delete_target
Delete a target.
delete_task
Delete a task.
delete_user
Delete a user.
describe_auth
Describe authentication methods.
describe_cert
Describe the CERT feed.
describe_feed
Describe the NVT feed.
describe_scap
Describe the SCAP feed.
empty_trashcan
Empty the trashcan.
get_agents
Get one or many agents.
get_configs
Get one or many configs.
get_aggregates
Get aggregates of various resources.
get_alerts
Get one or many alerts.
get_filters
Get one or many filters.
get_groups
Get one or many groups.
get_info
Get information for items of given type.
get_lsc_credentials
Get one or many LSC credentials.
get_notes
Get one or many notes.
get_nvts
Get one or many NVTs.
get_nvt_families
Get a list of all NVT families.
get_nvt_feed_version
Get NVT Feed version.
get_overrides
Get one or many overrides.
get_permissions
Get one or many permissions.
get_port_lists
Get one or many port lists.
get_preferences
Get one or many preferences.
get_reports
Get one or many reports.
get_report_formats
Get one or many report formats.
get_results
Get results.
get_roles
Get one or many roles.
get_scanners
Get one or many scanners.
get_schedules
Get one or many schedules.
get_settings
Get one or many settings.
get_slaves
Get one or many slaves.
get_system_reports
Get one or many system reports.
get_tags
Get one or many tags.
get_targets
Get one or many targets.
get_tasks
Get one or many tasks.
get_users
Get one or many users.
get_version
Get the OpenVAS Manager Protocol version.
help
Get the help text.
modify_agent
Modify an existing agent.
modify_alert
Modify an existing alert.
modify_auth
Modify the authentication methods.
modify_config
Modify an existing config.
modify_filter
Modify an existing filter.
modify_group
Modify an existing group.
modify_lsc_credential
Modify an existing LSC credential.
modify_note
Modify an existing note.
modify_override
Modify an existing override.
modify_permission
Modify a permission.
modify_port_list
Modify an existing port list.
modify_report
Modify an existing report.
modify_report_format
Update an existing report format.
modify_role
Modify an existing role.
modify_scanner
Modify an existing scanner.
modify_schedule
Modify an existing schedule.
modify_setting
Modify an existing setting.
modify_slave
Modify an existing slave.
modify_target
Modify an existing target.
modify_tag
Modify a tag.
modify_task
Modify an existing task.
modify_user
Modify a user.
restore
Restore a resource.
resume_task
Resume a task.
run_wizard
Run a wizard.
start_task
Manually start an existing task.
stop_task
Stop a running task.
sync_cert
Synchronize with a CERT feed.
sync_feed
Synchronize with an NVT feed.
sync_scap
Synchronize with a SCAP feed.
test_alert
Run an alert.
verify_agent
Verify an agent.
verify_report_format
Verify a report format.

4 RNC Preamble

### Preamble

start = command | response

command
  = authenticate
    | commands
    | create_agent
    | create_config
    | create_alert
    | create_filter
    | create_group
    | create_lsc_credential
    | create_note
    | create_override
    | create_permission
    | create_port_list
    | create_port_range
    | create_report
    | create_report_format
    | create_role
    | create_scanner
    | create_schedule
    | create_slave
    | create_tag
    | create_target
    | create_task
    | create_user
    | delete_agent
    | delete_config
    | delete_alert
    | delete_filter
    | delete_group
    | delete_lsc_credential
    | delete_note
    | delete_override
    | delete_report
    | delete_permission
    | delete_port_list
    | delete_port_range
    | delete_report_format
    | delete_role
    | delete_scanner
    | delete_schedule
    | delete_slave
    | delete_tag
    | delete_target
    | delete_task
    | delete_user
    | describe_auth
    | describe_cert
    | describe_feed
    | describe_scap
    | empty_trashcan
    | get_agents
    | get_configs
    | get_aggregates
    | get_alerts
    | get_filters
    | get_groups
    | get_info
    | get_lsc_credentials
    | get_notes
    | get_nvts
    | get_nvt_families
    | get_nvt_feed_version
    | get_overrides
    | get_permissions
    | get_port_lists
    | get_preferences
    | get_reports
    | get_report_formats
    | get_results
    | get_roles
    | get_scanners
    | get_schedules
    | get_settings
    | get_slaves
    | get_system_reports
    | get_tags
    | get_targets
    | get_tasks
    | get_users
    | get_version
    | help
    | modify_agent
    | modify_alert
    | modify_auth
    | modify_config
    | modify_filter
    | modify_group
    | modify_lsc_credential
    | modify_note
    | modify_override
    | modify_permission
    | modify_port_list
    | modify_report
    | modify_report_format
    | modify_role
    | modify_scanner
    | modify_schedule
    | modify_setting
    | modify_slave
    | modify_target
    | modify_tag
    | modify_task
    | modify_user
    | restore
    | resume_task
    | run_wizard
    | start_task
    | stop_task
    | sync_cert
    | sync_feed
    | sync_scap
    | test_alert
    | verify_agent
    | verify_report_format

response
  = authenticate_response
    | commands_response
    | create_agent_response
    | create_config_response
    | create_alert_response
    | create_filter_response
    | create_group_response
    | create_lsc_credential_response
    | create_note_response
    | create_override_response
    | create_permission_response
    | create_port_list_response
    | create_port_range_response
    | create_report_response
    | create_report_format_response
    | create_role_response
    | create_scanner_response
    | create_schedule_response
    | create_slave_response
    | create_tag_response
    | create_target_response
    | create_task_response
    | create_user_response
    | delete_agent_response
    | delete_config_response
    | delete_alert_response
    | delete_filter_response
    | delete_group_response
    | delete_lsc_credential_response
    | delete_note_response
    | delete_override_response
    | delete_report_response
    | delete_permission_response
    | delete_port_list_response
    | delete_port_range_response
    | delete_report_format_response
    | delete_role_response
    | delete_scanner_response
    | delete_schedule_response
    | delete_slave_response
    | delete_tag_response
    | delete_target_response
    | delete_task_response
    | delete_user_response
    | describe_auth_response
    | describe_cert_response
    | describe_feed_response
    | describe_scap_response
    | empty_trashcan_response
    | get_agents_response
    | get_configs_response
    | get_aggregates_response
    | get_alerts_response
    | get_filters_response
    | get_groups_response
    | get_info_response
    | get_lsc_credentials_response
    | get_notes_response
    | get_nvts_response
    | get_nvt_families_response
    | get_nvt_feed_version_response
    | get_overrides_response
    | get_permissions_response
    | get_port_lists_response
    | get_preferences_response
    | get_reports_response
    | get_report_formats_response
    | get_results_response
    | get_roles_response
    | get_scanners_response
    | get_schedules_response
    | get_settings_response
    | get_slaves_response
    | get_system_reports_response
    | get_tags_response
    | get_targets_response
    | get_tasks_response
    | get_users_response
    | get_version_response
    | help_response
    | modify_agent_response
    | modify_alert_response
    | modify_auth_response
    | modify_config_response
    | modify_filter_response
    | modify_group_response
    | modify_lsc_credential_response
    | modify_note_response
    | modify_override_response
    | modify_permission_response
    | modify_port_list_response
    | modify_report_response
    | modify_report_format_response
    | modify_role_response
    | modify_scanner_response
    | modify_schedule_response
    | modify_setting_response
    | modify_slave_response
    | modify_target_response
    | modify_tag_response
    | modify_task_response
    | modify_user_response
    | restore_response
    | resume_task_response
    | run_wizard_response
    | start_task_response
    | stop_task_response
    | sync_cert_response
    | sync_feed_response
    | sync_scap_response
    | test_alert_response
    | verify_agent_response
    | verify_report_format_response

5 Data Type Details

5.1 Data Type alive_test

In short: An alive test.

5.1.1 RNC

alive_test = xsd:token { pattern = "ICMP, TCP Service & ARP Ping|TCP Service & ARP Ping|I↵
CMP & ARP Ping|ICMP & TCP Service Ping|ARP Ping|TCP Service Ping|ICMP Ping|S↵
can Config Default" }

5.2 Data Type base64

In short: Base64 encoded data.

5.2.1 RNC

base64 = xsd:base64Binary

5.3 Data Type boolean

In short: A true or false value.

Zero is false, anything else is true. As a result, the empty string is considered true.

5.3.1 RNC

boolean = text

5.4 Data Type boolean_atoi

In short: A true or false value, after conversion to an integer.

Zero is false, anything else is true. The value is first converted to an integer, as by the C `atoi' routine. This means that an empty string is considered false.

5.4.1 RNC

boolean_atoi = text

5.5 Data Type ctime

In short: A date and time, in the C `ctime' format.

An example string in this format is "Wed Jun 30 21:49:08 1993\n".

5.5.1 RNC

ctime = text

5.6 Data Type type_name

In short: A name of a data type.

5.6.1 RNC

type_name = xsd:Name

5.7 Data Type integer

In short: An integer.

5.7.1 RNC

integer = xsd:integer

5.8 Data Type iso_time

In short: A date and time, in ISO 8601 format.

An example string in this format is "2011-11-08T19:57:06+02:00".

5.8.1 RNC

iso_time = text

5.9 Data Type levels

In short: A string that may include the characters h, m, l, g and d.

5.9.1 RNC

levels = xsd:token { pattern = "h?m?l?g?d?" }

5.10 Data Type name

In short: A name.

Typically this is the name of one of the manager resources, like a task or target.

5.10.1 RNC

name = xsd:string

5.11 Data Type port

In short: A port.

5.11.1 RNC

port = xsd:token { pattern = "[0-9]{1,5}" }

5.12 Data Type user_list

In short: A space separated list of users.

5.12.1 RNC

user_list = text

5.13 Data Type oid

In short: An Object Identifier (OID).

5.13.1 RNC

oid = xsd:token { pattern = "[0-9\.]{1,80}" }

5.14 Data Type severity

In short: A severity score.

A severity score is a decimal number between 0.0 and 10.0 (inclusive) with one digit after the decimal point or a special negative value (-1.0, -2.0 or -3.0). If a single severity score defines a constraint, e.g. on whether an override applies, for values 0.0 and lower the severity must be equal to match while for > 0.0 the compared value must be greater or equal.

5.14.1 RNC

severity = xsd:token { pattern = "-[1-3](\.0)?|[0-9](\.[0-9])?|10(\.0)?" }

5.15 Data Type sort_order

In short: A string describing an order for sorting.

The string "descending" denotes descending order, anything else means ascending.

5.15.1 RNC

sort_order = text

5.16 Data Type status

In short: The success or failure status of a command.

5.16.1 RNC

status = xsd:token { pattern = "200|201|202|400|401|403|404|409|500|503" }

5.17 Data Type task_status

In short: A task run status.

5.17.1 RNC

task_status = xsd:token { pattern = "Delete Requested|Done|New|Requested|Running|Stop Requ↵
ested|Stopped|Internal Error" }

5.18 Data Type task_trend

In short: The trend of results for a task.

5.18.1 RNC

task_trend = xsd:token { pattern = "up|down|more|less|same" }

5.19 Data Type threat

In short: A threat level.

Threat levels are a textual classification of severity scores only supported for importing reports from OpenVAS-6 and older. The use of these elements is deprecated as they are otherwise replaced by severity elements, which should be used instead.

5.19.1 RNC

threat = xsd:token { pattern = "High|Medium|Low|Alarm|Log|Debug" }

5.20 Data Type time_unit

In short: A unit of time.

5.20.1 RNC

time_unit = xsd:token { pattern = "second|minute|hour|day|week|month|year|decade" }

5.21 Data Type timezone

In short: A timezone.

The format of a timezone is the same as that of the TZ environment variable on GNU/Linux systems. That is, the same value accepted by the tzset C function. There are three versions of the format. Note the lack of spaces in the examples.

"std offset" defines a simple timezone. For example, "FOO+2" defines a timezone FOO which is 2 hours behind UTC.

"std offset dst [offset],start[/time],end[/time]" defines a timezone, including daylight savings time. For example, "NZST-12.00:00NZDT-13:00:00,M10.1.0,M3.3.0".

":[filespec]" refers to a predefined timezone. For example, ":Africa/Johannesburg". Note that the colon is optional. Certain acronyms are predefined, such as GB, NZ and CET.

5.21.1 RNC

timezone = text

5.22 Data Type uuid

In short: A Universally Unique Identifier (UUID).

5.22.1 RNC

uuid = xsd:token { pattern = "[0-9abcdefABCDEF\-]{1,40}" }

5.23 Data Type uuid_or_empty

In short: A Universally Unique Identifier (UUID), or the empty string.

5.23.1 RNC

uuid_or_empty = xsd:token { pattern = "[0-9abcdefABCDEF\-]{0,40}" }

6 Element Details

6.1 Element c

In short: A reference to a command.

6.1.1 Structure

    6.1.2 RNC

    c
 = element c
     {
       text
     }

    6.2 Element e

    In short: A reference to an element.

    6.2.1 Structure

      6.2.2 RNC

      e
 = element e
     {
       text
     }

      6.3 Element r

      In short: A reference to a response.

      6.3.1 Structure

        6.3.2 RNC

        r
 = element r
     {
       text
     }

        6.4 Element o

        In short: An optional pattern item.

        6.4.1 Structure

          • One of
            • <c>
              A reference to a command.
            • <e>
              A reference to an element.
            • <r>
              A reference to a response.
            • <g>
              A group of pattern items.

        6.4.2 RNC

        o
 = element o
     {
       ( c
           | e
           | r
           | g )
     }

        6.5 Element g

        In short: A group of pattern items.

        6.5.1 Structure

          • <c> *
            A reference to a command.
          • <e> *
            A reference to an element.
          • <r> *
            A reference to a response.
          • <o> *
            An optional pattern item.
          • <any> *
            Pattern item indicating "any number of".

        6.5.2 RNC

        g
 = element g
     {
       c*
       & e*
       & r*
       & o*
       & any*
     }

        6.6 Element any

        In short: Pattern item indicating "any number of".

        6.6.1 Structure

          • One of
            • <c>
              A reference to a command.
            • <e>
              A reference to an element.
            • <r>
              A reference to a response.
            • <g>
              A group of pattern items.

        6.6.2 RNC

        any
 = element any
     {
       ( c
           | e
           | r
           | g )
     }

        6.7 Element pattern

        In short: The pattern element of a command or command descendant.

        It's actually either a 't' element, or the word "text", or "".

        6.7.1 Structure

          • <attrib> *
            An attribute.
            • <name>
              • <type>
                • <required>
                • <c> *
                  A reference to a command.
                • <e> *
                  A reference to an element.
                • <r> *
                  A reference to a response.
                • <o> *
                  An optional pattern item.
                • <g> *
                  A group of pattern items.
                • <any> *
                  Pattern item indicating "any number of".
                • <t> ?
                  The type of the text of the element.

                6.7.2 RNC

                pattern
 = element pattern
     {
       text
       & pattern_attrib*
       & c*
       & e*
       & r*
       & o*
       & g*
       & any*
       & pattern_t?
     }

pattern_attrib
 = element attrib
     {
       pattern_attrib_name
       & pattern_attrib_type
       & pattern_attrib_required
     }

pattern_attrib_name
 = element name
     {
       type_name
     }

pattern_attrib_type
 = element type
     {
       type_name
     }

pattern_attrib_required
 = element required
     {
       boolean
     }

pattern_t
 = element t
     {
       type_name
     }

                6.8 Element command_definition

                In short: Definition of a command in OMP describing HELP command.

                6.8.1 Structure

                  • <name>
                    The name of the command.
                    • <summary> ?
                      A summary of the command.
                      • <description> ?
                        A description of the command.
                        • <p> *
                          A paragraph.
                        • One of
                        • <example> *
                          • <summary> ?
                            • <description> ?
                              • <request>
                                Example request.
                                • <response>
                                  Response to example request.

                              6.8.2 RNC

                              command_definition
 = element command_definition
     {
       command_definition_name
       & command_definition_summary?
       & command_definition_description?
       & ( ( command_definition_pattern
           & command_definition_response )
           | ( command_definition_type
           & command_definition_ele* ) )
       & command_definition_example*
     }

command_definition_name
 = element name
     {
       type_name
     }

command_definition_summary
 = element summary
     {
       text
     }

command_definition_description
 = element description
     {
       text
       & command_definition_description_p*
     }

command_definition_description_p
 = element p
     {
       text
     }

command_definition_pattern
 = element pattern    # type pattern
     {
       text
       & pattern_attrib*
       & c*
       & e*
       & r*
       & o*
       & g*
       & any*
       & pattern_t?
     }

command_definition_response
 = element response    # type pattern
     {
       text
       & pattern_attrib*
       & c*
       & e*
       & r*
       & o*
       & g*
       & any*
       & pattern_t?
     }

command_definition_example
 = element example
     {
       command_definition_example_summary?
       & command_definition_example_description?
       & command_definition_example_request
       & command_definition_example_response
     }

command_definition_example_summary
 = element summary
     {
       text
     }

command_definition_example_description
 = element description
     {
       text
     }

command_definition_example_request
 = element request
     {
       text
     }

command_definition_example_response
 = element response
     {
       text
     }

command_definition_type
 = element type
     {
       text
     }

command_definition_ele
 = element ele    # type command_definition
     {
       command_definition_name
       & command_definition_summary?
       & command_definition_description?
       & ( ( command_definition_pattern
           & command_definition_response )
           | ( command_definition_type
           & command_definition_ele* ) )
       & command_definition_example*
     }

                              6.9 Element note

                              In short: A note.

                              6.9.1 Structure

                                • @id (uuid)
                                • <permissions>
                                  Permissions that the current user has on the note.
                                  • <permission> *
                                    • <name>
                                      The name of the permission.
                                  • <owner>
                                    Owner of the note.
                                    • <name>
                                      The name of the owner.
                                    • <nvt>
                                      • @oid (oid)
                                      • <name>
                                      • <text>
                                        The text of the note.
                                        • @excerpt (boolean) Whether the content is an excerpt of the full text.
                                      • <creation_time>
                                        Date and time the note was created.
                                        • <modification_time>
                                          Date and time the note was last modified.
                                          • <writable>
                                            • <in_use>
                                              • <active>
                                                Whether the note is active.
                                                • <orphan>
                                                  Whether the note is an orphan.
                                                  • <user_tags>
                                                    Info on tags attached to the note.
                                                    • <count>
                                                      Number of attached tags.
                                                      • <tag> *
                                                        Short info on an individual tag (only if details were requested).
                                                        • @id (uuid) UUID of the tag.
                                                        • <name>
                                                          Name of the tag (usually namespace:predicate).
                                                          • <value>
                                                            Value of the tag.
                                                            • <comment>
                                                              Comment for the tag.
                                                          • The group?
                                                            • <hosts>
                                                              A textual list of hosts.
                                                              • <port>
                                                                Port to which note applies.
                                                                • <severity>
                                                                  Severity to which note applies.
                                                                  • <threat>
                                                                    Threat level to which note applies.
                                                                    • <task>
                                                                      Task to which note applies.
                                                                    • <end_time> ?
                                                                      End time of the note in case of limit, else empty.
                                                                      • <result> ?
                                                                        Result to which note applies.
                                                                        • @id (uuid)
                                                                        • <host>
                                                                          • <port>
                                                                            • <nvt>
                                                                              • @oid (oid)
                                                                              • <name>
                                                                                • <cvss_base>
                                                                                  • <cve> ?
                                                                                    CVE value associated with the NVT.
                                                                                    • <bid> ?
                                                                                      BID associated with the NVT.
                                                                                    • <severity>
                                                                                      • <threat>
                                                                                        • <qod>
                                                                                          The quality of detection (QoD) of the result.
                                                                                          • <value>
                                                                                            The numeric QoD value.
                                                                                            • <type>
                                                                                              The QoD type.
                                                                                            • <description>

                                                                                        6.9.2 RNC

                                                                                        note
 = element note
     {
       attribute id { uuid }
       & note_permissions
       & note_owner
       & note_nvt
       & note_text
       & note_creation_time
       & note_modification_time
       & note_writable
       & note_in_use
       & note_active
       & note_orphan
       & note_user_tags
       & ( note_hosts
           & note_port
           & note_severity
           & note_threat
           & note_task
           & note_end_time?
           & note_result? )?
     }

note_permissions
 = element permissions
     {
       note_permissions_permission*
     }

note_permissions_permission
 = element permission
     {
       note_permissions_permission_name
     }

note_permissions_permission_name
 = element name
     {
       name
     }

note_owner
 = element owner
     {
       note_owner_name
     }

note_owner_name
 = element name
     {
       name
     }

note_nvt
 = element nvt
     {
       attribute oid { oid }
       & note_nvt_name
     }

note_nvt_name
 = element name
     {
       name
     }

note_creation_time
 = element creation_time
     {
       iso_time
     }

note_modification_time
 = element modification_time
     {
       iso_time
     }

note_writable
 = element writable
     {
       boolean
     }

note_in_use
 = element in_use
     {
       boolean
     }

note_active
 = element active
     {
       boolean
     }

note_text
 = element text
     {
       text
       & attribute excerpt { boolean }
     }

note_orphan
 = element orphan
     {
       boolean
     }

note_user_tags
 = element user_tags
     {
       note_user_tags_count
       & note_user_tags_tag*
     }

note_user_tags_count
 = element count
     {
       integer
     }

note_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & note_user_tags_tag_name
       & note_user_tags_tag_value
       & note_user_tags_tag_comment
     }

note_user_tags_tag_name
 = element name
     {
       text
     }

note_user_tags_tag_value
 = element value
     {
       text
     }

note_user_tags_tag_comment
 = element comment
     {
       text
     }

note_hosts
 = element hosts
     {
       text
     }

note_port
 = element port
     {
       text
     }

note_severity
 = element severity
     {
       severity
     }

note_threat
 = element threat
     {
       threat
     }

note_task
 = element task
     {
       attribute id { uuid }
     }

note_active
 = element active
     {
       integer
     }

note_end_time
 = element end_time
     {
       text
     }

note_result
 = element result
     {
       attribute id { uuid }
       & note_result_host
       & note_result_port
       & note_result_nvt
       & note_result_severity
       & note_result_threat
       & note_result_qod
       & note_result_description
     }

note_result_host
 = element host
     {
       text
     }

note_result_port
 = element port
     {
       text
     }

note_result_nvt
 = element nvt
     {
       attribute oid { oid }
       & note_result_nvt_name
       & note_result_nvt_cvss_base
       & note_result_nvt_cve?
       & note_result_nvt_bid?
     }

note_result_nvt_name
 = element name
     {
       name
     }

note_result_nvt_cvss_base
 = element cvss_base
     {
       text
     }

note_result_nvt_cve
 = element cve
     {
       text
     }

note_result_nvt_bid
 = element bid
     {
       integer
     }

note_result_severity
 = element severity
     {
       severity
     }

note_result_threat
 = element threat
     {
       threat
     }

note_result_qod
 = element qod
     {
       note_result_qod_value
       & note_result_qod_type
     }

note_result_qod_value
 = element value
     {
       integer
     }

note_result_qod_type
 = element type
     {
       text
     }

note_result_description
 = element description
     {
       text
     }

                                                                                        6.10 Element override

                                                                                        In short: An override.

                                                                                        6.10.1 Structure

                                                                                          • @id (uuid)
                                                                                          • <permissions>
                                                                                            Permissions that the current user has on the note.
                                                                                            • <permission> *
                                                                                              • <name>
                                                                                                The name of the permission.
                                                                                            • <owner>
                                                                                              Owner of the override.
                                                                                              • <name>
                                                                                              • <nvt>
                                                                                                • @oid (oid)
                                                                                                • <name>
                                                                                                • <creation_time>
                                                                                                  Date and time the override was created.
                                                                                                  • <modification_time>
                                                                                                    Date and time the override was last modified.
                                                                                                    • <writable>
                                                                                                      • <in_use>
                                                                                                        • <active>
                                                                                                          Whether the override is currently active.
                                                                                                          • <text>
                                                                                                            The text of the override.
                                                                                                            • @excerpt (boolean) Whether the contents is an excerpt of the full text.
                                                                                                          • <threat>
                                                                                                            Threat level to which override applies, derived from severity.
                                                                                                            • <severity>
                                                                                                              Severity score to which override applies.
                                                                                                              • <new_threat>
                                                                                                                New threat for result.
                                                                                                                • <new_severity>
                                                                                                                  New severity score for result.
                                                                                                                  • <orphan>
                                                                                                                    Whether the override is an orphan.
                                                                                                                    • <permissions>
                                                                                                                      Permissions that the current user has on the note.
                                                                                                                      • <permission> *
                                                                                                                        • <name>
                                                                                                                          The name of the permission.
                                                                                                                      • <user_tags>
                                                                                                                        Info on tags attached to the override.
                                                                                                                        • <count>
                                                                                                                          Number of attached tags.
                                                                                                                          • <tag> *
                                                                                                                            Short info on an individual tag (only if details were requested).
                                                                                                                            • @id (uuid) UUID of the tag.
                                                                                                                            • <name>
                                                                                                                              Name of the tag (usually namespace:predicate).
                                                                                                                              • <value>
                                                                                                                                Value of the tag.
                                                                                                                                • <comment>
                                                                                                                                  Comment for the tag.
                                                                                                                              • The group?
                                                                                                                                • <hosts>
                                                                                                                                  A textual list of hosts.
                                                                                                                                  • <port>
                                                                                                                                    Port to which override applies.
                                                                                                                                    • <task>
                                                                                                                                      Task to which override applies.
                                                                                                                                    • <end_time> ?
                                                                                                                                      Override end time in case of limit, else empty.
                                                                                                                                      • <result> ?
                                                                                                                                        Result to which override applies.
                                                                                                                                        • @id (uuid)
                                                                                                                                        • <host>
                                                                                                                                          • <port>
                                                                                                                                            • <nvt>
                                                                                                                                              • @oid (oid)
                                                                                                                                              • <name>
                                                                                                                                                • <cvss_base>
                                                                                                                                                  • <cve> ?
                                                                                                                                                    CVE value associated with the NVT.
                                                                                                                                                    • <bid> ?
                                                                                                                                                      BID associated with the NVT.
                                                                                                                                                    • <threat>
                                                                                                                                                      • <severity>
                                                                                                                                                        • <qod>
                                                                                                                                                          The quality of detection (QoD) of the result.
                                                                                                                                                          • <value>
                                                                                                                                                            The numeric QoD value.
                                                                                                                                                            • <type>
                                                                                                                                                              The QoD type.
                                                                                                                                                            • <description>

                                                                                                                                                        6.10.2 RNC

                                                                                                                                                        override
 = element override
     {
       attribute id { uuid }
       & override_permissions
       & override_owner
       & override_nvt
       & override_creation_time
       & override_modification_time
       & override_writable
       & override_in_use
       & override_active
       & override_text
       & override_threat
       & override_severity
       & override_new_threat
       & override_new_severity
       & override_orphan
       & override_permissions
       & override_user_tags
       & ( override_hosts
           & override_port
           & override_task
           & override_end_time?
           & override_result? )?
     }

override_permissions
 = element permissions
     {
       override_permissions_permission*
     }

override_permissions_permission
 = element permission
     {
       override_permissions_permission_name
     }

override_permissions_permission_name
 = element name
     {
       name
     }

override_owner
 = element owner
     {
       override_owner_name
     }

override_owner_name
 = element name
     {
       name
     }

override_nvt
 = element nvt
     {
       attribute oid { oid }
       & override_nvt_name
     }

override_nvt_name
 = element name
     {
       name
     }

override_creation_time
 = element creation_time
     {
       iso_time
     }

override_modification_time
 = element modification_time
     {
       iso_time
     }

override_writable
 = element writable
     {
       boolean
     }

override_in_use
 = element in_use
     {
       boolean
     }

override_active
 = element active
     {
       boolean
     }

override_text
 = element text
     {
       text
       & attribute excerpt { boolean }
     }

override_threat
 = element threat
     {
       threat
     }

override_severity
 = element severity
     {
       severity
     }

override_new_threat
 = element new_threat
     {
       threat
     }

override_new_severity
 = element new_severity
     {
       severity
     }

override_orphan
 = element orphan
     {
       boolean
     }

override_user_tags
 = element user_tags
     {
       override_user_tags_count
       & override_user_tags_tag*
     }

override_user_tags_count
 = element count
     {
       integer
     }

override_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & override_user_tags_tag_name
       & override_user_tags_tag_value
       & override_user_tags_tag_comment
     }

override_user_tags_tag_name
 = element name
     {
       text
     }

override_user_tags_tag_value
 = element value
     {
       text
     }

override_user_tags_tag_comment
 = element comment
     {
       text
     }

override_hosts
 = element hosts
     {
       text
     }

override_port
 = element port
     {
       text
     }

override_task
 = element task
     {
       attribute id { uuid }
     }

override_active
 = element active
     {
       integer
     }

override_end_time
 = element end_time
     {
       text
     }

override_result
 = element result
     {
       attribute id { uuid }
       & override_result_host
       & override_result_port
       & override_result_nvt
       & override_result_threat
       & override_result_severity
       & override_result_qod
       & override_result_description
     }

override_result_host
 = element host
     {
       text
     }

override_result_port
 = element port
     {
       text
     }

override_result_nvt
 = element nvt
     {
       attribute oid { oid }
       & override_result_nvt_name
       & override_result_nvt_cvss_base
       & override_result_nvt_cve?
       & override_result_nvt_bid?
     }

override_result_nvt_name
 = element name
     {
       name
     }

override_result_nvt_cvss_base
 = element cvss_base
     {
       text
     }

override_result_nvt_cve
 = element cve
     {
       text
     }

override_result_nvt_bid
 = element bid
     {
       integer
     }

override_result_threat
 = element threat
     {
       threat
     }

override_result_severity
 = element severity
     {
       severity
     }

override_result_qod
 = element qod
     {
       override_result_qod_value
       & override_result_qod_type
     }

override_result_qod_value
 = element value
     {
       integer
     }

override_result_qod_type
 = element type
     {
       text
     }

override_result_description
 = element description
     {
       text
     }

                                                                                                                                                        6.11 Element result

                                                                                                                                                        In short: A result.

                                                                                                                                                        6.11.1 Structure

                                                                                                                                                          • @id (uuid)
                                                                                                                                                          • <name>
                                                                                                                                                            The name of the result.
                                                                                                                                                            • <owner>
                                                                                                                                                              Owner of the result.
                                                                                                                                                              • <name>
                                                                                                                                                                The name of the owner.
                                                                                                                                                              • <comment>
                                                                                                                                                                The comment on the result.
                                                                                                                                                                • <creation_time>
                                                                                                                                                                  Date and time the result was created.
                                                                                                                                                                  • <modification_time>
                                                                                                                                                                    Date and time the result was last modified.
                                                                                                                                                                    • <user_tags> ?
                                                                                                                                                                      Info on tags attached to the result (not in delta results).
                                                                                                                                                                      • <count>
                                                                                                                                                                        Number of attached tags.
                                                                                                                                                                        • <tag> *
                                                                                                                                                                          Short info on an individual tag (only if details were requested).
                                                                                                                                                                          • @id (uuid) UUID of the tag.
                                                                                                                                                                          • <name>
                                                                                                                                                                            Name of the tag (usually namespace:predicate).
                                                                                                                                                                            • <value>
                                                                                                                                                                              Value of the tag.
                                                                                                                                                                              • <comment>
                                                                                                                                                                                Comment for the tag.
                                                                                                                                                                            • <report> ?
                                                                                                                                                                              Report the result belongs to (only when details were requested).
                                                                                                                                                                              • @id (uuid) UUID of the report the result belongs to.
                                                                                                                                                                            • <task> ?
                                                                                                                                                                              Task the result applies to (only when details were requested).
                                                                                                                                                                              • @id (uuid) UUID of the task the result applies to.
                                                                                                                                                                              • <name>
                                                                                                                                                                                Name of the task the result applies to.
                                                                                                                                                                              • <host>
                                                                                                                                                                                • <port>
                                                                                                                                                                                  • <nvt>
                                                                                                                                                                                    NVT to which result applies.
                                                                                                                                                                                    • @oid (oid)
                                                                                                                                                                                    • <name>
                                                                                                                                                                                      The name of the NVT.
                                                                                                                                                                                      • <family>
                                                                                                                                                                                        The family the NVT is in.
                                                                                                                                                                                        • <cvss_base>
                                                                                                                                                                                          CVSS base value associated with the NVT.
                                                                                                                                                                                          • <cve>
                                                                                                                                                                                            CVE associated with the NVT.
                                                                                                                                                                                            • <bid>
                                                                                                                                                                                              BID associated with the NVT.
                                                                                                                                                                                              • <tags>
                                                                                                                                                                                                Tags associated with the NVT.
                                                                                                                                                                                                • <cert>
                                                                                                                                                                                                  List of CERT advisories referencing this NVT via CVEs.
                                                                                                                                                                                                  • <cert_ref> *
                                                                                                                                                                                                    A CERT advisory reference.
                                                                                                                                                                                                    • @id (text) ID of the advisory.
                                                                                                                                                                                                    • @type (text) Type of the advisory (e.g. "DFN-CERT", "CERT-BUND").
                                                                                                                                                                                                • <xref>
                                                                                                                                                                                                  XREFs associated with the NVT.
                                                                                                                                                                                                • <scan_nvt_version>
                                                                                                                                                                                                  Version of the NVT used in the scan.
                                                                                                                                                                                                  • <threat>
                                                                                                                                                                                                    • <severity>
                                                                                                                                                                                                      • <qod>
                                                                                                                                                                                                        The quality of detection (QoD) of the result.
                                                                                                                                                                                                        • <value>
                                                                                                                                                                                                          The numeric QoD value.
                                                                                                                                                                                                          • <type>
                                                                                                                                                                                                            The QoD type.
                                                                                                                                                                                                          • <original_threat> ?
                                                                                                                                                                                                            Original threat when overridden.
                                                                                                                                                                                                            • <original_severity> ?
                                                                                                                                                                                                              Original severity when overridden.
                                                                                                                                                                                                              • <description>
                                                                                                                                                                                                                Description of the result.
                                                                                                                                                                                                                • <delta> ?
                                                                                                                                                                                                                  Delta state.
                                                                                                                                                                                                                  • <result> ?
                                                                                                                                                                                                                    Delta result.
                                                                                                                                                                                                                    • <diff> ?
                                                                                                                                                                                                                      (text)
                                                                                                                                                                                                                      Comparison between descriptions.
                                                                                                                                                                                                                      • <notes> ?
                                                                                                                                                                                                                        List of notes on the result.
                                                                                                                                                                                                                      • <overrides> ?
                                                                                                                                                                                                                        List of overrides on the result.
                                                                                                                                                                                                                    • <details>
                                                                                                                                                                                                                      Any details associated with the result.
                                                                                                                                                                                                                      • <detail> *
                                                                                                                                                                                                                        A detail associated with the result.
                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                          The name of the detail.
                                                                                                                                                                                                                          • <value>
                                                                                                                                                                                                                            The value of the detail.
                                                                                                                                                                                                                        • <detection>
                                                                                                                                                                                                                          Detection details.
                                                                                                                                                                                                                          • <result>
                                                                                                                                                                                                                            Detection result.
                                                                                                                                                                                                                            • @id (uuid) UUID of the detection result.
                                                                                                                                                                                                                            • <details>
                                                                                                                                                                                                                              • <detail> *
                                                                                                                                                                                                                                A detail associated with the detection result.
                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                  The name of the detail.
                                                                                                                                                                                                                                  • <value>
                                                                                                                                                                                                                                    The value of the detail.
                                                                                                                                                                                                                            • <notes> ?
                                                                                                                                                                                                                              List of notes on the result.
                                                                                                                                                                                                                            • <overrides> ?
                                                                                                                                                                                                                              List of overrides on the result.

                                                                                                                                                                                                                          6.11.2 RNC

                                                                                                                                                                                                                          result
 = element result
     {
       attribute id { uuid }
       & result_name
       & result_owner
       & result_comment
       & result_creation_time
       & result_modification_time
       & result_user_tags?
       & result_report?
       & result_task?
       & result_host
       & result_port
       & result_nvt
       & result_scan_nvt_version
       & result_threat
       & result_severity
       & result_qod
       & result_original_threat?
       & result_original_severity?
       & result_description
       & result_delta?
       & result_details
       & result_detection
       & result_notes?
       & result_overrides?
     }

result_name
 = element name
     {
       text
     }

result_owner
 = element owner
     {
       result_owner_name
     }

result_owner_name
 = element name
     {
       name
     }

result_comment
 = element comment
     {
       text
     }

result_creation_time
 = element creation_time
     {
       iso_time
     }

result_modification_time
 = element modification_time
     {
       iso_time
     }

result_user_tags
 = element user_tags
     {
       result_user_tags_count
       & result_user_tags_tag*
     }

result_user_tags_count
 = element count
     {
       integer
     }

result_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & result_user_tags_tag_name
       & result_user_tags_tag_value
       & result_user_tags_tag_comment
     }

result_user_tags_tag_name
 = element name
     {
       text
     }

result_user_tags_tag_value
 = element value
     {
       text
     }

result_user_tags_tag_comment
 = element comment
     {
       text
     }

result_report
 = element report
     {
       attribute id { uuid }
     }

result_task
 = element task
     {
       attribute id { uuid }
       & result_task_name
     }

result_task_name
 = element name
     {
       text
     }

result_host
 = element host
     {
       text
     }

result_port
 = element port
     {
       text
     }

result_nvt
 = element nvt
     {
       attribute oid { oid }
       & result_nvt_name
       & result_nvt_family
       & result_nvt_cvss_base
       & result_nvt_cve
       & result_nvt_bid
       & result_nvt_tags
       & result_nvt_cert
       & result_nvt_xref
     }

result_nvt_name
 = element name
     {
       name
     }

result_nvt_family
 = element family
     {
       name
     }

result_nvt_cvss_base
 = element cvss_base
     {
       integer
     }

result_nvt_cve
 = element cve
     {
       text
     }

result_nvt_bid
 = element bid
     {
       text
     }

result_nvt_tags
 = element tags
     {
       text
     }

result_nvt_cert
 = element cert
     {
       result_nvt_cert_cert_ref*
     }

result_nvt_cert_cert_ref
 = element cert_ref
     {
       attribute id { text }?
       & attribute type { text }?
     }

result_nvt_xref
 = element xref
     {
       text
     }

result_scan_nvt_version
 = element scan_nvt_version
     {
       text
     }

result_threat
 = element threat
     {
       threat
     }

result_severity
 = element severity
     {
       severity
     }

result_qod
 = element qod
     {
       result_qod_value
       & result_qod_type
     }

result_qod_value
 = element value
     {
       integer
     }

result_qod_type
 = element type
     {
       text
     }

result_original_threat
 = element original_threat
     {
       threat
     }

result_original_severity
 = element original_severity
     {
       severity
     }

result_description
 = element description
     {
       text
     }

result_delta
 = element delta
     {
       text
       & result_delta_result?
       & result_delta_diff?
       & result_delta_notes?
       & result_delta_overrides?
     }

result_delta_result
 = element result    # type result
     {
       attribute id { uuid }
       & result_name
       & result_owner
       & result_comment
       & result_creation_time
       & result_modification_time
       & result_user_tags?
       & result_report?
       & result_task?
       & result_host
       & result_port
       & result_nvt
       & result_scan_nvt_version
       & result_threat
       & result_severity
       & result_qod
       & result_original_threat?
       & result_original_severity?
       & result_description
       & result_delta?
       & result_details
       & result_detection
       & result_notes?
       & result_overrides?
     }

result_delta_diff
 = element diff    # type text
     {
     }

result_delta_notes
 = element notes
     {
       result_delta_notes_note*
     }

result_delta_notes_note
 = element note    # type note
     {
       attribute id { uuid }
       & note_permissions
       & note_owner
       & note_nvt
       & note_text
       & note_creation_time
       & note_modification_time
       & note_writable
       & note_in_use
       & note_active
       & note_orphan
       & note_user_tags
       & ( note_hosts
           & note_port
           & note_severity
           & note_threat
           & note_task
           & note_end_time?
           & note_result? )?
     }

result_delta_overrides
 = element overrides
     {
       result_delta_overrides_override*
     }

result_delta_overrides_override
 = element override    # type override
     {
       attribute id { uuid }
       & override_permissions
       & override_owner
       & override_nvt
       & override_creation_time
       & override_modification_time
       & override_writable
       & override_in_use
       & override_active
       & override_text
       & override_threat
       & override_severity
       & override_new_threat
       & override_new_severity
       & override_orphan
       & override_permissions
       & override_user_tags
       & ( override_hosts
           & override_port
           & override_task
           & override_end_time?
           & override_result? )?
     }

result_details
 = element details
     {
       result_details_detail*
     }

result_details_detail
 = element detail
     {
       result_details_detail_name
       & result_details_detail_value
     }

result_details_detail_name
 = element name
     {
       text
     }

result_details_detail_value
 = element value
     {
       text
     }

result_detection
 = element detection
     {
       result_detection_result
     }

result_detection_result
 = element result
     {
       attribute id { uuid }
       & result_detection_result_details
     }

result_detection_result_details
 = element details
     {
       result_detection_result_details_detail*
     }

result_detection_result_details_detail
 = element detail
     {
       result_detection_result_details_detail_name
       & result_detection_result_details_detail_value
     }

result_detection_result_details_detail_name
 = element name
     {
       text
     }

result_detection_result_details_detail_value
 = element value
     {
       text
     }

result_notes
 = element notes
     {
       result_notes_note*
     }

result_notes_note
 = element note    # type note
     {
       attribute id { uuid }
       & note_permissions
       & note_owner
       & note_nvt
       & note_text
       & note_creation_time
       & note_modification_time
       & note_writable
       & note_in_use
       & note_active
       & note_orphan
       & note_user_tags
       & ( note_hosts
           & note_port
           & note_severity
           & note_threat
           & note_task
           & note_end_time?
           & note_result? )?
     }

result_overrides
 = element overrides
     {
       result_overrides_override*
     }

result_overrides_override
 = element override    # type override
     {
       attribute id { uuid }
       & override_permissions
       & override_owner
       & override_nvt
       & override_creation_time
       & override_modification_time
       & override_writable
       & override_in_use
       & override_active
       & override_text
       & override_threat
       & override_severity
       & override_new_threat
       & override_new_severity
       & override_orphan
       & override_permissions
       & override_user_tags
       & ( override_hosts
           & override_port
           & override_task
           & override_end_time?
           & override_result? )?
     }

                                                                                                                                                                                                                          6.12 Element report

                                                                                                                                                                                                                          In short: Actually attributes and either base64 or a report.

                                                                                                                                                                                                                          6.12.1 Structure

                                                                                                                                                                                                                            • @id (uuid)
                                                                                                                                                                                                                            • @format_id (uuid)
                                                                                                                                                                                                                            • @extension (text)
                                                                                                                                                                                                                            • @content_type (text)
                                                                                                                                                                                                                            • @type ("scan", "assets" or "prognostic")
                                                                                                                                                                                                                            • <owner>
                                                                                                                                                                                                                              Owner of the report.
                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                The name of the owner.
                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                Creation time as compatibility placeholder.
                                                                                                                                                                                                                                • <comment>
                                                                                                                                                                                                                                  The comment on the report.
                                                                                                                                                                                                                                  • <creation_time>
                                                                                                                                                                                                                                    Date and time the report was created.
                                                                                                                                                                                                                                    • <modification_time>
                                                                                                                                                                                                                                      Date and time the report was last modified.
                                                                                                                                                                                                                                      • <writable>
                                                                                                                                                                                                                                        Whether the report is writable.
                                                                                                                                                                                                                                        • <in_use>
                                                                                                                                                                                                                                          Whether the report is in use.
                                                                                                                                                                                                                                          • <task>
                                                                                                                                                                                                                                            The task the report belongs to.
                                                                                                                                                                                                                                            • @id (uuid)
                                                                                                                                                                                                                                            • <name>
                                                                                                                                                                                                                                              The name of the task.
                                                                                                                                                                                                                                            • <report_format>
                                                                                                                                                                                                                                              The report format used.
                                                                                                                                                                                                                                              • @id (uuid)
                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                The name of the report format.
                                                                                                                                                                                                                                              • <report>
                                                                                                                                                                                                                                                • @id (uuid)
                                                                                                                                                                                                                                                • @type ("scan", "assets" or "prognostic")
                                                                                                                                                                                                                                                • <omp>
                                                                                                                                                                                                                                                  Information of the OMP server.
                                                                                                                                                                                                                                                  • <version>
                                                                                                                                                                                                                                                    The OMP version.
                                                                                                                                                                                                                                                  • <report_format>
                                                                                                                                                                                                                                                    • <param>
                                                                                                                                                                                                                                                      Report format parameter.
                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                        Parameter name.
                                                                                                                                                                                                                                                        • <value>
                                                                                                                                                                                                                                                          Parameter value.
                                                                                                                                                                                                                                                      • <sort>
                                                                                                                                                                                                                                                        Result sorting information.
                                                                                                                                                                                                                                                        • <field>
                                                                                                                                                                                                                                                          Sort field.
                                                                                                                                                                                                                                                          • <order>
                                                                                                                                                                                                                                                            Sort order of field.
                                                                                                                                                                                                                                                        • <filters>
                                                                                                                                                                                                                                                          Result filtering information.
                                                                                                                                                                                                                                                          • @id (uuid) Filter used if any, else 0.
                                                                                                                                                                                                                                                          • <term>
                                                                                                                                                                                                                                                            Filter term.
                                                                                                                                                                                                                                                            • <phrase>
                                                                                                                                                                                                                                                              Search phrase.
                                                                                                                                                                                                                                                              • <notes>
                                                                                                                                                                                                                                                                Whether notes are included.
                                                                                                                                                                                                                                                                • <overrides>
                                                                                                                                                                                                                                                                  Whether overrides are included.
                                                                                                                                                                                                                                                                  • <apply_overrides>
                                                                                                                                                                                                                                                                    Whether overrides are applied.
                                                                                                                                                                                                                                                                    • <result_hosts_only>
                                                                                                                                                                                                                                                                      Whether only those hosts that have results are included.
                                                                                                                                                                                                                                                                      • <min_cvss_base>
                                                                                                                                                                                                                                                                        Minimum CVSS base if in effect, else empty string.
                                                                                                                                                                                                                                                                        • <min_qod>
                                                                                                                                                                                                                                                                          Minimum QoD if in effect, else empty string.
                                                                                                                                                                                                                                                                          • <autofp>
                                                                                                                                                                                                                                                                            Whether to trust vendor security updates. 1 full match, 2 partial.
                                                                                                                                                                                                                                                                            • <filter> *
                                                                                                                                                                                                                                                                              Level filter.
                                                                                                                                                                                                                                                                              • <host> ?
                                                                                                                                                                                                                                                                                • <ip>
                                                                                                                                                                                                                                                                                  IP of single host in report (for "delta" and "prognostic").
                                                                                                                                                                                                                                                                                • <delta> ?
                                                                                                                                                                                                                                                                                  Delta states.
                                                                                                                                                                                                                                                                                  • <changed>
                                                                                                                                                                                                                                                                                    Whether changed results are included.
                                                                                                                                                                                                                                                                                    • <gone>
                                                                                                                                                                                                                                                                                      Whether results that have vanished are included.
                                                                                                                                                                                                                                                                                      • <new>
                                                                                                                                                                                                                                                                                        Whether new results are included.
                                                                                                                                                                                                                                                                                        • <same>
                                                                                                                                                                                                                                                                                          Whether results that are equal are included.
                                                                                                                                                                                                                                                                                      • <severity_class>
                                                                                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                                                                                          Short severity class name.
                                                                                                                                                                                                                                                                                          • <full_name>
                                                                                                                                                                                                                                                                                            Full severity class name.
                                                                                                                                                                                                                                                                                            • <severity_range> *
                                                                                                                                                                                                                                                                                              Severity range.
                                                                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                                                                Name of severity range.
                                                                                                                                                                                                                                                                                                • <min>
                                                                                                                                                                                                                                                                                                  Minimum CVSS value.
                                                                                                                                                                                                                                                                                                  • <max>
                                                                                                                                                                                                                                                                                                    Maximum CVSS value.
                                                                                                                                                                                                                                                                                                • <delta> ?
                                                                                                                                                                                                                                                                                                  • <report>
                                                                                                                                                                                                                                                                                                    Second report, for delta reports.
                                                                                                                                                                                                                                                                                                    • @id (uuid)
                                                                                                                                                                                                                                                                                                    • <scan_run_status>
                                                                                                                                                                                                                                                                                                      Run status of task scan at time of report.
                                                                                                                                                                                                                                                                                                      • <timestamp>
                                                                                                                                                                                                                                                                                                        The time the scan was requested.
                                                                                                                                                                                                                                                                                                        • <scan_start>
                                                                                                                                                                                                                                                                                                          Start time of scan.
                                                                                                                                                                                                                                                                                                          • <scan_end>
                                                                                                                                                                                                                                                                                                            End time of scan.
                                                                                                                                                                                                                                                                                                        • The group?
                                                                                                                                                                                                                                                                                                          • <timezone>
                                                                                                                                                                                                                                                                                                            Name of timezone used for dates.
                                                                                                                                                                                                                                                                                                            • <timezone_abbrev>
                                                                                                                                                                                                                                                                                                              Abbreviation used for timezone.
                                                                                                                                                                                                                                                                                                              • <permissions>
                                                                                                                                                                                                                                                                                                                Permissions that the current user has on the report.
                                                                                                                                                                                                                                                                                                                • <permission> *
                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                    The name of the permission.
                                                                                                                                                                                                                                                                                                                • <user_tags>
                                                                                                                                                                                                                                                                                                                  Info on tags attached to the report.
                                                                                                                                                                                                                                                                                                                  • <count>
                                                                                                                                                                                                                                                                                                                    Number of attached tags.
                                                                                                                                                                                                                                                                                                                    • <tag> *
                                                                                                                                                                                                                                                                                                                      Short info on an individual tag (only if details were requested).
                                                                                                                                                                                                                                                                                                                      • @id (uuid) UUID of the tag.
                                                                                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                                                                                        Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                        • <value>
                                                                                                                                                                                                                                                                                                                          Value of the tag.
                                                                                                                                                                                                                                                                                                                          • <comment>
                                                                                                                                                                                                                                                                                                                            Comment for the tag.
                                                                                                                                                                                                                                                                                                                        • <scan_run_status>
                                                                                                                                                                                                                                                                                                                          Run status of task scan at time of report.
                                                                                                                                                                                                                                                                                                                          • <result_count>
                                                                                                                                                                                                                                                                                                                            Counts of results produced by scan.
                                                                                                                                                                                                                                                                                                                            • <full>
                                                                                                                                                                                                                                                                                                                              Total number of results produced by scan.
                                                                                                                                                                                                                                                                                                                              • <filtered>
                                                                                                                                                                                                                                                                                                                                Number of results after filtering.
                                                                                                                                                                                                                                                                                                                                • <debug>
                                                                                                                                                                                                                                                                                                                                  Number of "debug" results (threat level Debug).
                                                                                                                                                                                                                                                                                                                                  • <full>
                                                                                                                                                                                                                                                                                                                                    Total number of results.
                                                                                                                                                                                                                                                                                                                                    • <filtered>
                                                                                                                                                                                                                                                                                                                                      Number of results after filtering.
                                                                                                                                                                                                                                                                                                                                    • <hole>
                                                                                                                                                                                                                                                                                                                                      Number of "hole" results (threat level High).
                                                                                                                                                                                                                                                                                                                                      • <full>
                                                                                                                                                                                                                                                                                                                                        Total number of results.
                                                                                                                                                                                                                                                                                                                                        • <filtered>
                                                                                                                                                                                                                                                                                                                                          Number of results after filtering.
                                                                                                                                                                                                                                                                                                                                        • <info>
                                                                                                                                                                                                                                                                                                                                          Number of "info" results (threat level Low).
                                                                                                                                                                                                                                                                                                                                          • <full>
                                                                                                                                                                                                                                                                                                                                            Total number of results.
                                                                                                                                                                                                                                                                                                                                            • <filtered>
                                                                                                                                                                                                                                                                                                                                              Number of results after filtering.
                                                                                                                                                                                                                                                                                                                                            • <log>
                                                                                                                                                                                                                                                                                                                                              Number of "log" results (threat level Log).
                                                                                                                                                                                                                                                                                                                                              • <full>
                                                                                                                                                                                                                                                                                                                                                Total number of results.
                                                                                                                                                                                                                                                                                                                                                • <filtered>
                                                                                                                                                                                                                                                                                                                                                  Number of results after filtering.
                                                                                                                                                                                                                                                                                                                                                • <warning>
                                                                                                                                                                                                                                                                                                                                                  Number of "warning" results (threat level Medium).
                                                                                                                                                                                                                                                                                                                                                  • <full>
                                                                                                                                                                                                                                                                                                                                                    Total number of results.
                                                                                                                                                                                                                                                                                                                                                    • <filtered>
                                                                                                                                                                                                                                                                                                                                                      Number of results after filtering.
                                                                                                                                                                                                                                                                                                                                                  • <severity>
                                                                                                                                                                                                                                                                                                                                                    • <full>
                                                                                                                                                                                                                                                                                                                                                      Maximum severity of the full report.
                                                                                                                                                                                                                                                                                                                                                      • <filtered>
                                                                                                                                                                                                                                                                                                                                                        Maximum severity of the report after filtering.
                                                                                                                                                                                                                                                                                                                                                      • <host_count> ?
                                                                                                                                                                                                                                                                                                                                                        Counts of hosts in the results.
                                                                                                                                                                                                                                                                                                                                                        • <full>
                                                                                                                                                                                                                                                                                                                                                          Total number of hosts.
                                                                                                                                                                                                                                                                                                                                                          • <filtered>
                                                                                                                                                                                                                                                                                                                                                            Number of hosts after filtering.
                                                                                                                                                                                                                                                                                                                                                          • <task>
                                                                                                                                                                                                                                                                                                                                                            • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                            • <name>
                                                                                                                                                                                                                                                                                                                                                              The name of the task.
                                                                                                                                                                                                                                                                                                                                                              • <comment>
                                                                                                                                                                                                                                                                                                                                                                Comment for the task.
                                                                                                                                                                                                                                                                                                                                                                • <target>
                                                                                                                                                                                                                                                                                                                                                                  The target of the task.
                                                                                                                                                                                                                                                                                                                                                                  • @id (uuid) The UUID of the target.
                                                                                                                                                                                                                                                                                                                                                                  • <trash>
                                                                                                                                                                                                                                                                                                                                                                    Whether the target is in the trashcan.
                                                                                                                                                                                                                                                                                                                                                                  • <progress>
                                                                                                                                                                                                                                                                                                                                                                    The percentage of the task that is complete.
                                                                                                                                                                                                                                                                                                                                                                    • <user_tags>
                                                                                                                                                                                                                                                                                                                                                                      Info on tags attached to the task.
                                                                                                                                                                                                                                                                                                                                                                      • <count>
                                                                                                                                                                                                                                                                                                                                                                        Number of attached tags.
                                                                                                                                                                                                                                                                                                                                                                        • <tag> *
                                                                                                                                                                                                                                                                                                                                                                          Short info on an individual tag.
                                                                                                                                                                                                                                                                                                                                                                          • @id (uuid) UUID of the tag.
                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                            Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                                                                            • <value>
                                                                                                                                                                                                                                                                                                                                                                              Value of the tag.
                                                                                                                                                                                                                                                                                                                                                                              • <comment>
                                                                                                                                                                                                                                                                                                                                                                                Comment for the tag.
                                                                                                                                                                                                                                                                                                                                                                          • <scan>
                                                                                                                                                                                                                                                                                                                                                                            Info from scan time.
                                                                                                                                                                                                                                                                                                                                                                            • <task>
                                                                                                                                                                                                                                                                                                                                                                              • <slave>
                                                                                                                                                                                                                                                                                                                                                                                The task slave.
                                                                                                                                                                                                                                                                                                                                                                                • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                  • <host>
                                                                                                                                                                                                                                                                                                                                                                                    • <port>
                                                                                                                                                                                                                                                                                                                                                                                    • <preferences>
                                                                                                                                                                                                                                                                                                                                                                                      Currently only "source_iface".
                                                                                                                                                                                                                                                                                                                                                                                      • <preference> *
                                                                                                                                                                                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                                                                                                                                                                                          Full name of preference, suitable for end users.
                                                                                                                                                                                                                                                                                                                                                                                          • <scanner_name>
                                                                                                                                                                                                                                                                                                                                                                                            Compact name of preference, from scanner.
                                                                                                                                                                                                                                                                                                                                                                                            • <value>
                                                                                                                                                                                                                                                                                                                                                                                      • <ports>
                                                                                                                                                                                                                                                                                                                                                                                      • <results>
                                                                                                                                                                                                                                                                                                                                                                                      • <hosts>
                                                                                                                                                                                                                                                                                                                                                                                        • One of
                                                                                                                                                                                                                                                                                                                                                                                      • <closed_cves>
                                                                                                                                                                                                                                                                                                                                                                                        .
                                                                                                                                                                                                                                                                                                                                                                                        • <count>
                                                                                                                                                                                                                                                                                                                                                                                          The number of closed CVEs.
                                                                                                                                                                                                                                                                                                                                                                                        • <vulns>
                                                                                                                                                                                                                                                                                                                                                                                          .
                                                                                                                                                                                                                                                                                                                                                                                          • <count>
                                                                                                                                                                                                                                                                                                                                                                                            The number of Vulnerabilities.
                                                                                                                                                                                                                                                                                                                                                                                          • <os>
                                                                                                                                                                                                                                                                                                                                                                                            .
                                                                                                                                                                                                                                                                                                                                                                                            • <count>
                                                                                                                                                                                                                                                                                                                                                                                              The number of operating systems.
                                                                                                                                                                                                                                                                                                                                                                                            • <apps>
                                                                                                                                                                                                                                                                                                                                                                                              .
                                                                                                                                                                                                                                                                                                                                                                                              • <count>
                                                                                                                                                                                                                                                                                                                                                                                                The number of Applications.
                                                                                                                                                                                                                                                                                                                                                                                              • <ssl_certs>
                                                                                                                                                                                                                                                                                                                                                                                                .
                                                                                                                                                                                                                                                                                                                                                                                                • <count>
                                                                                                                                                                                                                                                                                                                                                                                                  The number of SSL certificates.
                                                                                                                                                                                                                                                                                                                                                                                                • <host> *
                                                                                                                                                                                                                                                                                                                                                                                                  • <ip>
                                                                                                                                                                                                                                                                                                                                                                                                    IP of the host.
                                                                                                                                                                                                                                                                                                                                                                                                    • <start>
                                                                                                                                                                                                                                                                                                                                                                                                      Scan start time for this host.
                                                                                                                                                                                                                                                                                                                                                                                                      • <end>
                                                                                                                                                                                                                                                                                                                                                                                                        Scan end time for this host.
                                                                                                                                                                                                                                                                                                                                                                                                        • <detail> *
                                                                                                                                                                                                                                                                                                                                                                                                          A detail associated with the host.
                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                            The name of the detail.
                                                                                                                                                                                                                                                                                                                                                                                                            • <value>
                                                                                                                                                                                                                                                                                                                                                                                                              The value of the detail.
                                                                                                                                                                                                                                                                                                                                                                                                              • <source>
                                                                                                                                                                                                                                                                                                                                                                                                                Where the detail comes from.
                                                                                                                                                                                                                                                                                                                                                                                                                • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                  The type of the detail source.
                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                    The name of the detail source.
                                                                                                                                                                                                                                                                                                                                                                                                                    • <description>
                                                                                                                                                                                                                                                                                                                                                                                                                      A description of the detail source.
                                                                                                                                                                                                                                                                                                                                                                                                                • <timestamp>
                                                                                                                                                                                                                                                                                                                                                                                                                  The time the scan was requested.
                                                                                                                                                                                                                                                                                                                                                                                                                  • <scan_start>
                                                                                                                                                                                                                                                                                                                                                                                                                    Start time of scan.
                                                                                                                                                                                                                                                                                                                                                                                                                    • <host_start> *
                                                                                                                                                                                                                                                                                                                                                                                                                      Start time of a particular host.
                                                                                                                                                                                                                                                                                                                                                                                                                      • <host>
                                                                                                                                                                                                                                                                                                                                                                                                                      • <host_end> *
                                                                                                                                                                                                                                                                                                                                                                                                                        End time of a particular host.
                                                                                                                                                                                                                                                                                                                                                                                                                        • <host>
                                                                                                                                                                                                                                                                                                                                                                                                                        • <scan_end>
                                                                                                                                                                                                                                                                                                                                                                                                                          End time of scan.
                                                                                                                                                                                                                                                                                                                                                                                                                          • <errors>
                                                                                                                                                                                                                                                                                                                                                                                                                            • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                              The number of error messages.
                                                                                                                                                                                                                                                                                                                                                                                                                              • <error> *
                                                                                                                                                                                                                                                                                                                                                                                                                                An error message.
                                                                                                                                                                                                                                                                                                                                                                                                                                • <host>
                                                                                                                                                                                                                                                                                                                                                                                                                                  The host of the error message.
                                                                                                                                                                                                                                                                                                                                                                                                                                  • <port>
                                                                                                                                                                                                                                                                                                                                                                                                                                    The port of the error message.
                                                                                                                                                                                                                                                                                                                                                                                                                                    • <description>
                                                                                                                                                                                                                                                                                                                                                                                                                                      The description of the error message.
                                                                                                                                                                                                                                                                                                                                                                                                                                      • <nvt>
                                                                                                                                                                                                                                                                                                                                                                                                                                        The NVT that generated the error message.
                                                                                                                                                                                                                                                                                                                                                                                                                                        • @oid ()
                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                          The name of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                          • <cvss_base>
                                                                                                                                                                                                                                                                                                                                                                                                                                            The base CVSS score of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                          • <scan_nvt_version>
                                                                                                                                                                                                                                                                                                                                                                                                                                            The NVT version that generated the error.
                                                                                                                                                                                                                                                                                                                                                                                                                                            • <severity>
                                                                                                                                                                                                                                                                                                                                                                                                                                              The severity score of the error message.

                                                                                                                                                                                                                                                                                                                                                                                                                                    6.12.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                    report
 = element report
     {
       text # RNC limitation: base64
       & attribute id { uuid }
       & attribute format_id { uuid }
       & attribute extension { text }
       & attribute content_type { text }
       & attribute type { xsd:token { pattern = "scan|assets|prognostic" } }?
       & report_owner
       & report_name
       & report_comment
       & report_creation_time
       & report_modification_time
       & report_writable
       & report_in_use
       & report_task
       & report_report_format
       & report_report
     }

report_owner
 = element owner
     {
       report_owner_name
     }

report_owner_name
 = element name
     {
       name
     }

report_name
 = element name
     {
       ""
     }

report_comment
 = element comment
     {
       text
     }

report_creation_time
 = element creation_time
     {
       iso_time
     }

report_modification_time
 = element modification_time
     {
       iso_time
     }

report_in_use
 = element in_use
     {
       boolean
     }

report_writable
 = element writable
     {
       boolean
     }

report_task
 = element task
     {
       attribute id { uuid }
       & report_task_name
     }

report_task_name
 = element name
     {
       name
     }

report_report_format
 = element report_format
     {
       attribute id { uuid }
       & report_report_format_name
     }

report_report_format_name
 = element name
     {
       name
     }

report_report
 = element report
     {
       attribute id { uuid }
       & attribute type { xsd:token { pattern = "scan|assets|prognostic" } }?
       & report_report_omp
       & report_report_report_format
       & report_report_sort
       & report_report_filters
       & report_report_severity_class
       & report_report_delta?
       & ( report_report_timezone
           & report_report_timezone_abbrev
           & report_report_permissions
           & report_report_user_tags
           & report_report_scan_run_status
           & report_report_result_count
           & report_report_severity
           & report_report_host_count?
           & report_report_task
           & report_report_scan
           & report_report_ports
           & report_report_results
           & report_report_hosts
           & report_report_closed_cves
           & report_report_vulns
           & report_report_os
           & report_report_apps
           & report_report_ssl_certs
           & report_report_host*
           & report_report_timestamp
           & report_report_scan_start
           & report_report_host_start*
           & report_report_host_end*
           & report_report_scan_end
           & report_report_errors )?
     }

report_report_omp
 = element omp
     {
       report_report_omp_version
     }

report_report_omp_version
 = element version
     {
       text
     }

report_report_report_format
 = element report_format
     {
       report_report_report_format_param
     }

report_report_report_format_param
 = element param
     {
       report_report_report_format_param_name
       & report_report_report_format_param_value
     }

report_report_report_format_param_name
 = element name
     {
       text
     }

report_report_report_format_param_value
 = element value
     {
       text
     }

report_report_delta
 = element delta
     {
       report_report_delta_report
     }

report_report_delta_report
 = element report
     {
       attribute id { uuid }
       & report_report_delta_report_scan_run_status
       & report_report_delta_report_timestamp
       & report_report_delta_report_scan_start
       & report_report_delta_report_scan_end
     }

report_report_delta_report_scan_run_status
 = element scan_run_status
     {
       task_status
     }

report_report_delta_report_timestamp
 = element timestamp
     {
       iso_time
     }

report_report_delta_report_scan_start
 = element scan_start
     {
       iso_time
     }

report_report_delta_report_scan_end
 = element scan_end
     {
       iso_time
     }

report_report_sort
 = element sort
     {
       report_report_sort_field
     }

report_report_sort_field
 = element field
     {
       text
       & report_report_sort_field_order
     }

report_report_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

report_report_filters
 = element filters
     {
       text # RNC limitation: levels
       & attribute id { uuid }?
       & report_report_filters_term
       & report_report_filters_phrase
       & report_report_filters_notes
       & report_report_filters_overrides
       & report_report_filters_apply_overrides
       & report_report_filters_result_hosts_only
       & report_report_filters_min_cvss_base
       & report_report_filters_min_qod
       & report_report_filters_autofp
       & report_report_filters_filter*
       & report_report_filters_host?
       & report_report_filters_delta?
     }

report_report_filters_term
 = element term
     {
       text
     }

report_report_filters_phrase
 = element phrase
     {
       text
     }

report_report_filters_notes
 = element notes
     {
       xsd:token { pattern = "0|1" }
     }

report_report_filters_overrides
 = element overrides
     {
       xsd:token { pattern = "0|1" }
     }

report_report_filters_apply_overrides
 = element apply_overrides
     {
       xsd:token { pattern = "0|1" }
     }

report_report_filters_result_hosts_only
 = element result_hosts_only
     {
       xsd:token { pattern = "0|1" }
     }

report_report_filters_min_cvss_base
 = element min_cvss_base
     {
       text
     }

report_report_filters_min_qod
 = element min_qod
     {
       text
     }

report_report_filters_autofp
 = element autofp
     {
       xsd:token { pattern = "0|1|2" }
     }

report_report_filters_filter
 = element filter
     {
       xsd:token { pattern = "High|Medium|Low|Log|Debug" }
     }

report_report_filters_host
 = element host
     {
       report_report_filters_host_ip
     }

report_report_filters_host_ip
 = element ip
     {
       text
     }

report_report_filters_delta
 = element delta
     {
       text
       & report_report_filters_delta_changed
       & report_report_filters_delta_gone
       & report_report_filters_delta_new
       & report_report_filters_delta_same
     }

report_report_filters_delta_changed
 = element changed
     {
       boolean
     }

report_report_filters_delta_gone
 = element gone
     {
       boolean
     }

report_report_filters_delta_new
 = element new
     {
       boolean
     }

report_report_filters_delta_same
 = element same
     {
       boolean
     }

report_report_timezone
 = element timezone
     {
       timezone
     }

report_report_timezone_abbrev
 = element timezone_abbrev
     {
       text
     }

report_report_permissions
 = element permissions
     {
       report_report_permissions_permission*
     }

report_report_permissions_permission
 = element permission
     {
       report_report_permissions_permission_name
     }

report_report_permissions_permission_name
 = element name
     {
       name
     }

report_report_user_tags
 = element user_tags
     {
       report_report_user_tags_count
       & report_report_user_tags_tag*
     }

report_report_user_tags_count
 = element count
     {
       integer
     }

report_report_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & report_report_user_tags_tag_name
       & report_report_user_tags_tag_value
       & report_report_user_tags_tag_comment
     }

report_report_user_tags_tag_name
 = element name
     {
       text
     }

report_report_user_tags_tag_value
 = element value
     {
       text
     }

report_report_user_tags_tag_comment
 = element comment
     {
       text
     }

report_report_scan_run_status
 = element scan_run_status
     {
       task_status
     }

report_report_result_count
 = element result_count
     {
       text
       & report_report_result_count_full
       & report_report_result_count_filtered
       & report_report_result_count_debug
       & report_report_result_count_hole
       & report_report_result_count_info
       & report_report_result_count_log
       & report_report_result_count_warning
     }

report_report_result_count_full
 = element full
     {
       integer
     }

report_report_result_count_filtered
 = element filtered
     {
       integer
     }

report_report_result_count_debug
 = element debug
     {
       report_report_result_count_debug_full
       & report_report_result_count_debug_filtered
     }

report_report_result_count_debug_full
 = element full
     {
       integer
     }

report_report_result_count_debug_filtered
 = element filtered
     {
       integer
     }

report_report_result_count_hole
 = element hole
     {
       report_report_result_count_hole_full
       & report_report_result_count_hole_filtered
     }

report_report_result_count_hole_full
 = element full
     {
       integer
     }

report_report_result_count_hole_filtered
 = element filtered
     {
       integer
     }

report_report_result_count_info
 = element info
     {
       report_report_result_count_info_full
       & report_report_result_count_info_filtered
     }

report_report_result_count_info_full
 = element full
     {
       integer
     }

report_report_result_count_info_filtered
 = element filtered
     {
       integer
     }

report_report_result_count_log
 = element log
     {
       report_report_result_count_log_full
       & report_report_result_count_log_filtered
     }

report_report_result_count_log_full
 = element full
     {
       integer
     }

report_report_result_count_log_filtered
 = element filtered
     {
       integer
     }

report_report_result_count_warning
 = element warning
     {
       report_report_result_count_warning_full
       & report_report_result_count_warning_filtered
     }

report_report_result_count_warning_full
 = element full
     {
       integer
     }

report_report_result_count_warning_filtered
 = element filtered
     {
       integer
     }

report_report_severity
 = element severity
     {
       report_report_severity_full
       & report_report_severity_filtered
     }

report_report_severity_full
 = element full
     {
       severity
     }

report_report_severity_filtered
 = element filtered
     {
       severity
     }

report_report_severity_class
 = element severity_class
     {
       report_report_severity_class_name
       & report_report_severity_class_full_name
       & report_report_severity_class_severity_range*
     }

report_report_severity_class_name
 = element name
     {
       
        ERROR
      
     }

report_report_severity_class_full_name
 = element full_name
     {
       text
     }

report_report_severity_class_severity_range
 = element severity_range
     {
       report_report_severity_class_severity_range_name
       & report_report_severity_class_severity_range_min
       & report_report_severity_class_severity_range_max
     }

report_report_severity_class_severity_range_name
 = element name
     {
       name
     }

report_report_severity_class_severity_range_min
 = element min
     {
       integer
     }

report_report_severity_class_severity_range_max
 = element max
     {
       integer
     }

report_report_host_count
 = element host_count
     {
       report_report_host_count_full
       & report_report_host_count_filtered
     }

report_report_host_count_full
 = element full
     {
       integer
     }

report_report_host_count_filtered
 = element filtered
     {
       integer
     }

report_report_task
 = element task
     {
       attribute id { uuid }
       & report_report_task_name
       & report_report_task_comment
       & report_report_task_target
       & report_report_task_progress
       & report_report_task_user_tags
     }

report_report_task_name
 = element name
     {
       name
     }

report_report_task_comment
 = element comment
     {
       text
     }

report_report_task_target
 = element target
     {
       attribute id { uuid }?
       & report_report_task_target_trash
     }

report_report_task_target_trash
 = element trash    # type boolean
     {
     }

report_report_task_progress
 = element progress
     {
       integer
     }

report_report_task_user_tags
 = element user_tags
     {
       report_report_task_user_tags_count
       & report_report_task_user_tags_tag*
     }

report_report_task_user_tags_count
 = element count
     {
       integer
     }

report_report_task_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & report_report_task_user_tags_tag_name
       & report_report_task_user_tags_tag_value
       & report_report_task_user_tags_tag_comment
     }

report_report_task_user_tags_tag_name
 = element name
     {
       text
     }

report_report_task_user_tags_tag_value
 = element value
     {
       text
     }

report_report_task_user_tags_tag_comment
 = element comment
     {
       text
     }

report_report_scan
 = element scan
     {
       report_report_scan_task
     }

report_report_scan_task
 = element task
     {
       report_report_scan_task_slave
       & report_report_scan_task_preferences
     }

report_report_scan_task_slave
 = element slave
     {
       attribute id { uuid }
       & report_report_scan_task_slave_name
       & report_report_scan_task_slave_host
       & report_report_scan_task_slave_port
     }

report_report_scan_task_slave_name
 = element name
     {
       name
     }

report_report_scan_task_slave_host
 = element host
     {
       text
     }

report_report_scan_task_slave_port
 = element port
     {
       text
     }

report_report_scan_task_preferences
 = element preferences
     {
       report_report_scan_task_preferences_preference*
     }

report_report_scan_task_preferences_preference
 = element preference
     {
       report_report_scan_task_preferences_preference_name
       & report_report_scan_task_preferences_preference_scanner_name
       & report_report_scan_task_preferences_preference_value
     }

report_report_scan_task_preferences_preference_name
 = element name
     {
       text
     }

report_report_scan_task_preferences_preference_scanner_name
 = element scanner_name
     {
       text
     }

report_report_scan_task_preferences_preference_value
 = element value
     {
       text
     }

report_report_ports
 = element ports
     {
       attribute start { integer }
       & attribute max { integer }
       & report_report_ports_port*
     }

report_report_ports_port
 = element port
     {
       text
       & report_report_ports_port_host
       & report_report_ports_port_severity
       & report_report_ports_port_threat
     }

report_report_ports_port_host
 = element host
     {
       text
     }

report_report_ports_port_severity
 = element severity
     {
       severity
     }

report_report_ports_port_threat
 = element threat
     {
       threat
     }

report_report_results
 = element results
     {
       attribute start { integer }
       & attribute max { integer }
       & report_report_results_result*
     }

report_report_results_result
 = element result    # type result
     {
       attribute id { uuid }
       & result_name
       & result_owner
       & result_comment
       & result_creation_time
       & result_modification_time
       & result_user_tags?
       & result_report?
       & result_task?
       & result_host
       & result_port
       & result_nvt
       & result_scan_nvt_version
       & result_threat
       & result_severity
       & result_qod
       & result_original_threat?
       & result_original_severity?
       & result_description
       & result_delta?
       & result_details
       & result_detection
       & result_notes?
       & result_overrides?
     }

report_report_hosts
 = element hosts
     {
       ( ( attribute start { integer }
           & attribute max { integer } )
           | report_report_hosts_count )
     }

report_report_hosts_count
 = element count
     {
     }

report_report_closed_cves
 = element closed_cves
     {
       report_report_closed_cves_count
     }

report_report_closed_cves_count
 = element count
     {
     }

report_report_vulns
 = element vulns
     {
       report_report_vulns_count
     }

report_report_vulns_count
 = element count
     {
     }

report_report_os
 = element os
     {
       report_report_os_count
     }

report_report_os_count
 = element count
     {
     }

report_report_apps
 = element apps
     {
       report_report_apps_count
     }

report_report_apps_count
 = element count
     {
     }

report_report_ssl_certs
 = element ssl_certs
     {
       report_report_ssl_certs_count
     }

report_report_ssl_certs_count
 = element count
     {
     }

report_report_host
 = element host
     {
       report_report_host_ip
       & report_report_host_start
       & report_report_host_end
       & report_report_host_detail*
     }

report_report_host_ip
 = element ip
     {
       text
     }

report_report_host_start
 = element start
     {
       text
     }

report_report_host_end
 = element end
     {
       text
     }

report_report_host_detail
 = element detail
     {
       report_report_host_detail_name
       & report_report_host_detail_value
       & report_report_host_detail_source
     }

report_report_host_detail_name
 = element name
     {
       text
     }

report_report_host_detail_value
 = element value
     {
       text
     }

report_report_host_detail_source
 = element source
     {
       report_report_host_detail_source_type
       & report_report_host_detail_source_name
       & report_report_host_detail_source_description
     }

report_report_host_detail_source_type
 = element type
     {
       text
     }

report_report_host_detail_source_name
 = element name
     {
       text
     }

report_report_host_detail_source_description
 = element description
     {
       text
     }

report_report_timestamp
 = element timestamp
     {
       iso_time
     }

report_report_scan_start
 = element scan_start
     {
       iso_time
     }

report_report_host_start
 = element host_start
     {
       text # RNC limitation: iso_time
       & report_report_host_start_host
     }

report_report_host_start_host
 = element host
     {
       text
     }

report_report_host_end
 = element host_end
     {
       text # RNC limitation: iso_time
       & report_report_host_end_host
     }

report_report_host_end_host
 = element host
     {
       text
     }

report_report_scan_end
 = element scan_end
     {
       iso_time
     }

report_report_errors
 = element errors
     {
       report_report_errors_count
       & report_report_errors_error*
     }

report_report_errors_count
 = element count
     {
     }

report_report_errors_error
 = element error
     {
       report_report_errors_error_host
       & report_report_errors_error_port
       & report_report_errors_error_description
       & report_report_errors_error_nvt
       & report_report_errors_error_scan_nvt_version
       & report_report_errors_error_severity
     }

report_report_errors_error_host
 = element host
     {
       text
     }

report_report_errors_error_port
 = element port
     {
       port
     }

report_report_errors_error_description
 = element description
     {
       text
     }

report_report_errors_error_nvt
 = element nvt
     {
       attribute oid {  }
       & report_report_errors_error_nvt_name
       & report_report_errors_error_nvt_cvss_base
     }

report_report_errors_error_nvt_name
 = element name
     {
       text
     }

report_report_errors_error_nvt_cvss_base
 = element cvss_base
     {
       severity
     }

report_report_errors_error_scan_nvt_version
 = element scan_nvt_version
     {
       text
     }

report_report_errors_error_severity
 = element severity
     {
       severity
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                    7 Command Details

                                                                                                                                                                                                                                                                                                                                                                                                                                    7.1 Command authenticate

                                                                                                                                                                                                                                                                                                                                                                                                                                    In short: Authenticate with the manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                    The client uses the authenticate command to authenticate with the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                    The client normally executes this command at the beginning of each connection. The only commands permitted before authentication are get_version and commands.

                                                                                                                                                                                                                                                                                                                                                                                                                                    7.1.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                    • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                      • <credentials>
                                                                                                                                                                                                                                                                                                                                                                                                                                        • <username>
                                                                                                                                                                                                                                                                                                                                                                                                                                          The login name of the user.
                                                                                                                                                                                                                                                                                                                                                                                                                                          • <password>
                                                                                                                                                                                                                                                                                                                                                                                                                                            The user's password.
                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                          • <role>
                                                                                                                                                                                                                                                                                                                                                                                                                                            ("User", "Admin", "Super Admin" or "Observer")
                                                                                                                                                                                                                                                                                                                                                                                                                                            The user's role.
                                                                                                                                                                                                                                                                                                                                                                                                                                            • <timezone>
                                                                                                                                                                                                                                                                                                                                                                                                                                              The user's timezone.

                                                                                                                                                                                                                                                                                                                                                                                                                                            7.1.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                            Command
                                                                                                                                                                                                                                                                                                                                                                                                                                            authenticate
 = element authenticate
     {
       authenticate_credentials
     }

authenticate_credentials
 = element credentials
     {
       authenticate_credentials_username
       & authenticate_credentials_password
     }

authenticate_credentials_username
 = element username
     {
       text
     }

authenticate_credentials_password
 = element password
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                                                                                                                                                            authenticate_response
 = element authenticate_response
     {
       attribute status { status }
       & attribute status_text { text }
       & authenticate_response_role
       & authenticate_response_timezone
     }

authenticate_response_role
 = element role    # type UserAdminSuper AdminObserver
     {
     }

authenticate_response_timezone
 = element timezone
     {
       timezone
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                            7.1.3 Example: Authenticate with a good password

                                                                                                                                                                                                                                                                                                                                                                                                                                            Client
                                                                                                                                                                                                                                                                                                                                                                                                                                             <authenticate>
   <credentials>
     <username>sally</username>
     <password>secret</password>
   </credentials>
 </authenticate>
                                                                                                                                                                                                                                                                                                                                                                                                                                            Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                             <authenticate_response status="200"
                        status_text="OK">
   <role>User</role>
   <timezone>UTC</timezone>
 </authenticate_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                            7.1.3 Example: Authenticate with a bad password

                                                                                                                                                                                                                                                                                                                                                                                                                                            Client
                                                                                                                                                                                                                                                                                                                                                                                                                                             <authenticate>
   <credentials>
     <username>sally</username>
     <password>secrte</password>
   </credentials>
 </authenticate>
                                                                                                                                                                                                                                                                                                                                                                                                                                            Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                             <authenticate_response status="400"
                        status_text="Authentication failed"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                            7.2 Command commands

                                                                                                                                                                                                                                                                                                                                                                                                                                            In short: Run a list of commands.

                                                                                                                                                                                                                                                                                                                                                                                                                                            The client uses the commands command to run a list of commands. The elements are executed as OMP commands in the given sequence. The reply contains the result of each command, in the same order as the given commands.

                                                                                                                                                                                                                                                                                                                                                                                                                                            7.2.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                            7.2.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                            Command
                                                                                                                                                                                                                                                                                                                                                                                                                                            commands
 = element commands
     {
       ( authenticate
           | commands
           | create_agent
           | create_alert
           | create_config
           | create_filter
           | create_group
           | create_lsc_credential
           | create_note
           | create_override
           | create_permission
           | create_port_list
           | create_port_range
           | create_report_format
           | create_role
           | create_scanner
           | create_schedule
           | create_slave
           | create_tag
           | create_target
           | create_task
           | create_user
           | delete_agent
           | delete_alert
           | delete_config
           | delete_filter
           | delete_group
           | delete_lsc_credential
           | delete_note
           | delete_override
           | delete_permission
           | delete_report
           | delete_report_format
           | delete_role
           | delete_port_list
           | delete_port_range
           | delete_scanner
           | delete_schedule
           | delete_slave
           | delete_tag
           | delete_target
           | delete_task
           | delete_user
           | describe_auth
           | describe_cert
           | describe_feed
           | describe_scap
           | empty_trashcan
           | get_agents
           | get_alerts
           | get_configs
           | get_filters
           | get_groups
           | get_info
           | get_lsc_credentials
           | get_notes
           | get_nvts
           | get_nvt_families
           | get_nvt_feed_version
           | get_overrides
           | get_permissions
           | get_port_lists
           | get_preferences
           | get_reports
           | get_report_formats
           | get_results
           | get_roles
           | get_scanners
           | get_schedules
           | get_settings
           | get_slaves
           | get_system_reports
           | get_tags
           | get_targets
           | get_tasks
           | get_users
           | get_version
           | help
           | modify_agent
           | modify_alert
           | modify_auth
           | modify_config
           | modify_filter
           | modify_group
           | modify_lsc_credential
           | modify_note
           | modify_override
           | modify_permission
           | modify_port_list
           | modify_report
           | modify_report_format
           | modify_role
           | modify_scanner
           | modify_schedule
           | modify_setting
           | modify_slave
           | modify_tag
           | modify_target
           | modify_task
           | modify_user
           | restore
           | resume_task
           | run_wizard
           | start_task
           | stop_task
           | sync_feed
           | sync_scap
           | sync_cert
           | test_alert )*
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                                                                                                                                                            commands_response
 = element commands_response
     {
       attribute status { status }
       & attribute status_text { text }
       & ( authenticate_response
           | commands_response
           | create_agent_response
           | create_alert_response
           | create_config_response
           | create_filter_response
           | create_group_response
           | create_lsc_credential_response
           | create_note_response
           | create_override_response
           | create_permission_response
           | create_port_list_response
           | create_port_range_response
           | create_role_response
           | create_scanner_response
           | create_schedule_response
           | create_slave_response
           | create_tag_response
           | create_target_response
           | create_task_response
           | create_user_response
           | delete_agent_response
           | delete_alert_response
           | delete_config_response
           | delete_filter_response
           | delete_group_response
           | delete_lsc_credential_response
           | delete_note_response
           | delete_override_response
           | delete_permission_response
           | delete_port_list_response
           | delete_port_range_response
           | delete_report_response
           | delete_report_format_response
           | delete_role_response
           | delete_scanner_response
           | delete_schedule_response
           | delete_slave_response
           | delete_tag_response
           | delete_target_response
           | delete_task_response
           | delete_user_response
           | describe_auth_response
           | describe_cert_response
           | describe_feed_response
           | describe_scap_response
           | empty_trashcan_response
           | get_agents_response
           | get_alerts_response
           | get_configs_response
           | get_groups_response
           | get_info_response
           | get_lsc_credentials_response
           | get_filters_response
           | get_notes_response
           | get_nvts_response
           | get_nvt_families_response
           | get_nvt_feed_version_response
           | get_overrides_response
           | get_permissions_response
           | get_port_lists_response
           | get_preferences_response
           | get_reports_response
           | get_report_formats_response
           | get_results_response
           | get_roles_response
           | get_slaves_response
           | get_scanners_response
           | get_schedules_response
           | get_settings_response
           | get_system_reports_response
           | get_tags_response
           | get_targets_response
           | get_tasks_response
           | get_users_response
           | get_version_response
           | help_response
           | modify_agent_response
           | modify_alert_response
           | modify_auth_response
           | modify_config_response
           | modify_filter_response
           | modify_group_response
           | modify_lsc_credential_response
           | modify_note_response
           | modify_override_response
           | modify_permission_response
           | modify_port_list_response
           | modify_report_response
           | modify_report_format_response
           | modify_role_response
           | modify_scanner_response
           | modify_schedule_response
           | modify_setting_response
           | modify_slave_response
           | modify_tag_response
           | modify_target_response
           | modify_task_response
           | modify_user_response
           | restore_response
           | resume_task_response
           | run_wizard_response
           | start_task_response
           | stop_task_response
           | sync_feed_response
           | sync_scap_response
           | sync_cert_response
           | test_alert_response )*
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                            7.3 Command create_agent

                                                                                                                                                                                                                                                                                                                                                                                                                                            In short: Create an agent.

                                                                                                                                                                                                                                                                                                                                                                                                                                            The client uses the create_agent command to create a new agent.

                                                                                                                                                                                                                                                                                                                                                                                                                                            7.3.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                            • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                              • <installer>
                                                                                                                                                                                                                                                                                                                                                                                                                                                A file that installs the agent on a target machine.
                                                                                                                                                                                                                                                                                                                                                                                                                                                • <signature>
                                                                                                                                                                                                                                                                                                                                                                                                                                                  A detached OpenPGP signature of the installer.
                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                  A name for the installer.
                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                    A comment on the agent.
                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <copy> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                      The UUID of an existing agent.
                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <howto_install> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                        A file that describes how to install the agent.
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <howto_use> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                          A file that describes how to use the agent.
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.3.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                        create_agent
 = element create_agent
     {
       create_agent_installer
       & create_agent_name
       & create_agent_comment?
       & create_agent_copy?
       & create_agent_howto_install?
       & create_agent_howto_use?
     }

create_agent_installer
 = element installer
     {
       text # RNC limitation: base64
       & create_agent_installer_signature
     }

create_agent_installer_signature
 = element signature
     {
       base64
     }

create_agent_name
 = element name
     {
       name
     }

create_agent_comment
 = element comment
     {
       text
     }

create_agent_copy
 = element copy
     {
       uuid
     }

create_agent_howto_install
 = element howto_install
     {
       base64
     }

create_agent_howto_use
 = element howto_use
     {
       base64
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                        create_agent_response
 = element create_agent_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.3.3 Example: Create an agent

                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                         <create_agent>
   <installer>
     asdf3235saf3kjBVF...
     <signature>iEYEABECAAYFA...</signature>
   </installer>
   <name>SLAD</name>
 </create_agent>
                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                         <create_agent_response status="201"
                        status_text="OK, resource created"
                        id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.4 Command create_config

                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Create a config.

                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_config command to create a new config.

                                                                                                                                                                                                                                                                                                                                                                                                                                                        This command can be called in three ways:

                                                                                                                                                                                                                                                                                                                                                                                                                                                        • With a copy element. The new config is a copy of the existing config, with the given name.
                                                                                                                                                                                                                                                                                                                                                                                                                                                        • With an embedded get_configs response element. The config is created as defined by the get_configs response element. Name is actually optional in this case. The config is given the name of the config in the get_configs response. If there is already a config with this name, then a number is attached to the name to make it unique.

                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.4.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                            A comment on the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                            • One of
                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <copy>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                The UUID of an existing config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <get_configs_response>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Response to get_configs command.
                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                A name for the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.4.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                              Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                              create_config
 = element create_config
     {
       create_config_comment?
       & ( create_config_copy
           | get_configs_response )
       & create_config_name
     }

create_config_comment
 = element comment
     {
       text
     }

create_config_copy
 = element copy
     {
       uuid
     }

create_config_name
 = element name
     {
       name
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                              Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                              create_config_response
 = element create_config_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.4.3 Example: Copy a config

                                                                                                                                                                                                                                                                                                                                                                                                                                                              Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                               <create_config>
   <copy>daba56c8-73ec-11df-a475-002264764cea</copy>
   <name>Full</name>
 </create_config>
                                                                                                                                                                                                                                                                                                                                                                                                                                                              Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                               <create_config_response status="201"
                         status_text="OK, resource created"
                         id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.4.3 Example: Create a config from a GET_CONFIGS response

                                                                                                                                                                                                                                                                                                                                                                                                                                                              Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                               <create_config>
   <get_configs_response>
     <config id="daba56c8-73ec-11df-a475-002264764cea">
       <name>Full and fast</name>
       ...
     </config>
   </get_configs_response>
 </create_config>
                                                                                                                                                                                                                                                                                                                                                                                                                                                              Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                               <create_config_response status="201"
                         status_text="OK, resource created"
                         id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.5 Command create_alert

                                                                                                                                                                                                                                                                                                                                                                                                                                                              In short: Create an alert.

                                                                                                                                                                                                                                                                                                                                                                                                                                                              The client uses the create_alert command to create a new alert.

                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.5.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  A name for the alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    A comment on the alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <copy> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The UUID of an existing alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <condition>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The condition that must be satisfied for the alert to occur.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <data> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Some data that defines the condition.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The name of the condition data.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <event>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The event that must happen for the alert to occur.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <data> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Some data that defines the event.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The name of the event data.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <method>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The method by which the user is alerted.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <data> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Some data that defines the method.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The name of the method data.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <filter>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filter to apply when executing alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.5.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          create_alert
 = element create_alert
     {
       create_alert_name
       & create_alert_comment?
       & create_alert_copy?
       & create_alert_condition
       & create_alert_event
       & create_alert_method
       & create_alert_filter
     }

create_alert_name
 = element name
     {
       name
     }

create_alert_comment
 = element comment
     {
       text
     }

create_alert_copy
 = element copy
     {
       uuid
     }

create_alert_condition
 = element condition
     {
       text
       & create_alert_condition_data*
     }

create_alert_condition_data
 = element data
     {
       text
       & create_alert_condition_data_name
     }

create_alert_condition_data_name
 = element name
     {
       text
     }

create_alert_event
 = element event
     {
       text
       & create_alert_event_data*
     }

create_alert_event_data
 = element data
     {
       text
       & create_alert_event_data_name
     }

create_alert_event_data_name
 = element name
     {
       text
     }

create_alert_method
 = element method
     {
       text
       & create_alert_method_data*
     }

create_alert_method_data
 = element data
     {
       text
       & create_alert_method_data_name
     }

create_alert_method_data_name
 = element name
     {
       text
     }

create_alert_filter
 = element filter
     {
       attribute id { uuid }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          create_alert_response
 = element create_alert_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.5.3 Example: Create an alert

                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <create_alert>
   <name>emergency</name>
   <condition>
     Severity at least
     <data>
       5.5
       <name>severity</name>
     </data>
   </condition>
   <event>
     Task run status changed
     <data>
       Done
       <name>status</name>
     </data>
   </event>
   <method>
     Email
     <data>
       sally@example.org
       <name>to_address</name>
     </data>
     <data>
       bob@example.org
       <name>from_address</name>
     </data>
   </method>
 </create_alert>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <create_alert_response status="201"
                        status_text="OK, resource created"
                        id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.6 Command create_filter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                          In short: Create a filter.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The client uses the create_filter command to create a new filter.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.6.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              A name for the filter.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <make_unique>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Whether to append a unique suffix if the name already exists.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                A comment on the filter.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <copy> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The UUID of an existing filter.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <term> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <type> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Resource type.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    7.6.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    create_filter
 = element create_filter
     {
       create_filter_name
       & create_filter_comment?
       & create_filter_copy?
       & create_filter_term?
       & create_filter_type?
     }

create_filter_name
 = element name
     {
       text # RNC limitation: name
       & create_filter_name_make_unique
     }

create_filter_name_make_unique
 = element make_unique
     {
       boolean
     }

create_filter_comment
 = element comment
     {
       text
     }

create_filter_copy
 = element copy
     {
       uuid
     }

create_filter_term
 = element term
     {
       text
     }

create_filter_type
 = element type
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    create_filter_response
 = element create_filter_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    7.6.3 Example: Create a filter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     <create_filter>
   <name>Single Targets</name>
   <comment>Targets with only one host</comment>
   <term>ips=1 first=1 rows=-2</term>
   <type>target</type>
 </create_filter>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     <create_filter_response status="201"
                         status_text="OK, resource created"
                         id="254cd3ef-bbe1-4d58-859d-21b8d0c046c7"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    7.7 Command create_group

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    In short: Create a group.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The client uses the create_group command to create a new group.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    7.7.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        A name for the group.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          A comment on the group.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <copy> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The UUID of an existing group.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <users> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Comma separated list of user names.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.7.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            create_group
 = element create_group
     {
       create_group_name
       & create_group_comment?
       & create_group_copy?
       & create_group_users?
     }

create_group_name
 = element name
     {
       name
     }

create_group_comment
 = element comment
     {
       text
     }

create_group_copy
 = element copy
     {
       uuid
     }

create_group_users
 = element users
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            create_group_response
 = element create_group_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.7.3 Example: Create a group

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             <create_group>
   <name>Managers</name>
   <users>sarah, bob</users>
 </create_group>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             <create_group_response status="201"
                        status_text="OK, resource created"
                        id="d94211b6-ba40-11e3-bcb1-406186ea4fc5"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.8 Command create_lsc_credential

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            In short: Create an LSC credential.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The client uses the create_lsc_credential command to create a new LSC credential.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            If the command includes a key, then the manager creates a key-based credential from the key. If the command includes a password, then the manager creates a password only credential. Otherwise the manager autogenerates a key-based credential.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.8.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                A name for the LSC credential.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  A comment on the LSC credential.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <copy> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The UUID of an existing LSC credential.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <key> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <phrase>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Key passphrase.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <private>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Private key.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <login>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The user name of the credential.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <password> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The password for the credential login.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.8.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          create_lsc_credential
 = element create_lsc_credential
     {
       create_lsc_credential_name
       & create_lsc_credential_comment?
       & create_lsc_credential_copy?
       & create_lsc_credential_key?
       & create_lsc_credential_login
       & create_lsc_credential_password?
     }

create_lsc_credential_name
 = element name
     {
       name
     }

create_lsc_credential_comment
 = element comment
     {
       text
     }

create_lsc_credential_copy
 = element copy
     {
       uuid
     }

create_lsc_credential_key
 = element key
     {
       create_lsc_credential_key_phrase
       & create_lsc_credential_key_private
     }

create_lsc_credential_key_phrase
 = element phrase
     {
       text
     }

create_lsc_credential_key_private
 = element private
     {
       text
     }

create_lsc_credential_login
 = element login
     {
       text
     }

create_lsc_credential_password
 = element password
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          create_lsc_credential_response
 = element create_lsc_credential_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.8.3 Example: Create an LSC credential

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <create_lsc_credential>
   <name>cluster sally</name>
   <login>sally</login>
   <password>secret</password>
   <comment>Sally's login to the cluster.</comment>
 </create_lsc_credential>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <create_lsc_credential_response status="201"
                                 status_text="OK, resource created"
                                 id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.9 Command create_note

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          In short: Create a note.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The client uses the create_note command to create a new note.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.9.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <text>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The text of the note.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <nvt>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                NVT to which note applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <active> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Seconds note will be active. -1 on always, 0 off.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  A comment on the note.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <copy> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The UUID of an existing note.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <hosts> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      A textual list of hosts.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <port> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Port to which note applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <result> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Result to which note applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <severity> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Severity to which note applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <task> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Task to which note applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <threat> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Threat level to which note applies. Will be converted to severity.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.9.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          create_note
 = element create_note
     {
       create_note_text
       & create_note_nvt
       & create_note_active?
       & create_note_comment?
       & create_note_copy?
       & create_note_hosts?
       & create_note_port?
       & create_note_result?
       & create_note_severity?
       & create_note_task?
       & create_note_threat?
     }

create_note_text
 = element text
     {
       text
     }

create_note_nvt
 = element nvt
     {
       attribute oid { oid }
     }

create_note_active
 = element active
     {
       integer
     }

create_note_comment
 = element comment
     {
       text
     }

create_note_copy
 = element copy
     {
       uuid
     }

create_note_hosts
 = element hosts
     {
       text
     }

create_note_port
 = element port
     {
       text
     }

create_note_result
 = element result
     {
       attribute id { uuid }
     }

create_note_severity
 = element severity
     {
       severity
     }

create_note_task
 = element task
     {
       attribute id { uuid }
     }

create_note_threat
 = element threat
     {
       threat
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          create_note_response
 = element create_note_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.9.3 Example: Create a note

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <create_note>
   <text>This issue should be resolved after the upgrade.</text>
   <nvt>1.3.6.1.4.1.25623.1.0.10330</nvt>
   <result>254cd3ef-bbe1-4d58-859d-21b8d0c046c6</result>
 </create_note>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <create_note_response status="202"
                       status_text="OK, resource created"
                       id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.10 Command create_override

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          In short: Create an override.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The client uses the create_override command to create a new override.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.10.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <text>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The text of the override.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <nvt>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                NVT to which override applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <active> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Seconds override will be active. -1 on always, 0 off.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  A comment on the override.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <copy> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The UUID of an existing override.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <hosts> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      A textual list of hosts.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <new_severity> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        New severity for result.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <new_threat> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          New threat level for result, will be converted to a new_severity.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <port> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Port to which override applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <result> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Result to which override applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <severity> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Severity score to which override applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <task> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Task to which override applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <threat> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Threat level to which override applies, will be converted to severity.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.10.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              create_override
 = element create_override
     {
       create_override_text
       & create_override_nvt
       & create_override_active?
       & create_override_comment?
       & create_override_copy?
       & create_override_hosts?
       & create_override_new_severity?
       & create_override_new_threat?
       & create_override_port?
       & create_override_result?
       & create_override_severity?
       & create_override_task?
       & create_override_threat?
     }

create_override_text
 = element text
     {
       text
     }

create_override_active
 = element active
     {
       integer
     }

create_override_nvt
 = element nvt
     {
       attribute oid { oid }
     }

create_override_comment
 = element comment
     {
       text
     }

create_override_copy
 = element copy
     {
       uuid
     }

create_override_hosts
 = element hosts
     {
       text
     }

create_override_new_severity
 = element new_severity
     {
       severity
     }

create_override_new_threat
 = element new_threat
     {
       threat
     }

create_override_port
 = element port
     {
       text
     }

create_override_result
 = element result
     {
       attribute id { uuid }
     }

create_override_severity
 = element severity
     {
       severity
     }

create_override_task
 = element task
     {
       attribute id { uuid }
     }

create_override_threat
 = element threat
     {
       threat
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              create_override_response
 = element create_override_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.10.3 Example: Create an override

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <create_override>
   <text>This is actually of little concern.</text>
   <nvt>1.3.6.1.4.1.25623.1.0.10330</nvt>
   <new_threat>Low</new_threat>
   <result>254cd3ef-bbe1-4d58-859d-21b8d0c046c6</result>
 </create_override>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <create_override_response status="201"
                           status_text="OK, resource created"
                           id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.11 Command create_permission

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              In short: Create a permission.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The client uses the create_permission command to create a new permission.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.11.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  A permission name, currently the name of a command.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <subject>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    A subject to whom the permission is granted.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      OMP type of the subject: user, group or role.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <resource> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      A resource to which the permission applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        OMP type, for Super permissions: user, group or role.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <copy> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        UUID of an existing permission to copy.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Comment on the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.11.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        create_permission
 = element create_permission
     {
       create_permission_name
       & create_permission_subject
       & create_permission_resource?
       & create_permission_copy?
       & create_permission_comment?
     }

create_permission_name
 = element name
     {
       text
     }

create_permission_subject
 = element subject
     {
       attribute id { uuid }?
       & create_permission_subject_type
     }

create_permission_subject_type
 = element type
     {
       text
     }

create_permission_resource
 = element resource
     {
       attribute id { uuid }?
       & create_permission_resource_type
     }

create_permission_resource_type
 = element type
     {
       text
     }

create_permission_copy
 = element copy
     {
       uuid
     }

create_permission_comment
 = element comment
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        create_permission_response
 = element create_permission_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.11.3 Example: Grant a user permission to view a target

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <create_permission>
   <name>get_target</name>
   <resource id="b493b7a8-7489-11df-a3ec-002264764cea"/>
   <subject id="66abe5ce-c011-11e3-b96e-406186ea4fc5">
     <type>user</type>
   </subject>
 </create_permission>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <create_permission_response status="201"
                             status_text="OK, resource created"
                             id="7ee79232-c011-11e3-b560-406186ea4fc5"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.11.3 Example: Grant a role permission to create users

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <create_permission>
   <name>create_user</name>
   <subject id="9b0cbd98-c011-11e3-a26e-406186ea4fc5">
     <type>role</type>
   </subject>
 </create_permission>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <create_permission_response status="201"
                             status_text="OK, resource created"
                             id="b98ad69c-c011-11e3-b001-406186ea4fc5"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.12 Command create_port_list

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Create a port list.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_port_list command to create a new port list.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The get_port_lists_response element overrides the port_range element.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.12.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The name of the port list.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              A comment on the port list.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <copy> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The UUID of an existing agent.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <port_range>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Comma or newline separated list of ranges.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <get_port_lists_response>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Response to get_port_lists command.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.12.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                create_port_list
 = element create_port_list
     {
       create_port_list_name
       & create_port_list_comment?
       & create_port_list_copy?
       & create_port_list_port_range
       & get_port_lists_response
     }

create_port_list_name
 = element name
     {
       name
     }

create_port_list_comment
 = element comment
     {
       text
     }

create_port_list_copy
 = element copy
     {
       uuid
     }

create_port_list_port_range
 = element port_range
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                create_port_list_response
 = element create_port_list_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.12.3 Example: Create a port list

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <create_port_list>
   <name>All TCP</name>
   <comment>All possible TCP ports</comment>
   <port_range>T:1-65535</port_range>
 </create_port_list>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <create_port_list_response status="201"
                            status_text="OK, resource created"
                            id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.13 Command create_port_range

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                In short: Create a port range.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The client uses the create_port_range command to create a new port range.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.13.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    A comment on the port range.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <port_list>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The port list to which to add the range.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <start>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The first port in the range.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <end>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The last port in the range.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The type of the ports: TCP, UDP, ....
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.13.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        create_port_range
 = element create_port_range
     {
       create_port_range_comment?
       & create_port_range_port_list
       & create_port_range_start
       & create_port_range_end
       & create_port_range_type
     }

create_port_range_comment
 = element comment
     {
       text
     }

create_port_range_port_list
 = element port_list
     {
       attribute id { uuid }
     }

create_port_range_start
 = element start
     {
       port
     }

create_port_range_end
 = element end
     {
       port
     }

create_port_range_type
 = element type
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        create_port_range_response
 = element create_port_range_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.13.3 Example: Add a port range to a port list

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <create_port_range>
   <port_list id="354cd3ef-bbe1-4d58-859d-21b8d0c046c4"/>
   <start>777</start>
   <end>779</end>
   <type>TCP</type>
 </create_port_range>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <create_port_range_response status="201"
                             status_text="OK, resource created"
                             id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.14 Command create_report

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Create a report.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_report command to import a report.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.14.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <report>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            A report wrapper, as in the GET_REPORTS response.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <task>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Task for report: id to use existing task, name to create new task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The name of the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Comment for the new task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.14.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              create_report
 = element create_report
     {
       create_report_report
       & create_report_task
     }

create_report_report
 = element report    # type report
     {
       text # RNC limitation: base64
       & attribute id { uuid }
       & attribute format_id { uuid }
       & attribute extension { text }
       & attribute content_type { text }
       & attribute type { xsd:token { pattern = "scan|assets|prognostic" } }?
       & report_owner
       & report_name
       & report_comment
       & report_creation_time
       & report_modification_time
       & report_writable
       & report_in_use
       & report_task
       & report_report_format
       & report_report
     }

create_report_task
 = element task
     {
       attribute id { uuid }?
       & create_report_task_name?
       & create_report_task_comment?
     }

create_report_task_name
 = element name
     {
       name
     }

create_report_task_comment
 = element comment
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              create_report_response
 = element create_report_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.14.3 Example: Create a report in a new task

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <create_report>
   <report id="a0704abb-2120-489f-959f-251c9f4ffebd">
     <name>CPE</name>
     <extension>csv</extension>
     <content_type>text/csv</content_type>
     <summary>Common Product Enumeration CSV table.</summary>
     <description>
       CPE stands for Common Product Enumeration. It is a
       ...
     </description>
     <global>1</global>
     <predefined>1</predefined>
     <trust>
       yes
       <time>Thu Dec 2 13:22:26 2010</time>
     </trust>
     <active>1</active>
   </report>
   <task>
     <name>Imported reports</name>
   </task>
 </create_report>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <create_report_response status="201"
                         status_text="OK, resource created"
                         id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.15 Command create_report_format

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              In short: Create a report format.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The client uses the create_report_format command to create a new report format.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.15.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • One of
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <copy>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The UUID of an existing report format.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <get_report_formats_response>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response to get_report_formats command.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.15.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                create_report_format
 = element create_report_format
     {
       ( create_report_format_copy
           | get_report_formats_response )
     }

create_report_format_copy
 = element copy
     {
       uuid
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                create_report_format_response
 = element create_report_format_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.15.3 Example: Create a report format

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <create_report_format>
   <get_report_formats_response>
     <report_format id="a0704abb-2120-489f-959f-251c9f4ffebd">
       <name>CPE</name>
       <extension>csv</extension>
       <content_type>text/csv</content_type>
       <summary>Common Product Enumeration CSV table.</summary>
       <description>
         CPE stands for Common Product Enumeration. It is a
         ...
       </description>
       <global>1</global>
       <predefined>1</predefined>
       <trust>
         yes
         <time>Thu Dec 2 13:22:26 2010</time>
       </trust>
       <active>1</active>
     </report_format>
   </get_report_formats_response>
 </create_report_format>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <create_report_format_response status="201"
                                status_text="OK, resource created"
                                id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.16 Command create_role

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                In short: Create a role.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The client uses the create_role command to create a new role.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.16.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    A name for the role.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      A comment on the role.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <copy> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The UUID of an existing role.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <users> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Comma separated list of user names.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.16.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        create_role
 = element create_role
     {
       create_role_name
       & create_role_comment?
       & create_role_copy?
       & create_role_users?
     }

create_role_name
 = element name
     {
       name
     }

create_role_comment
 = element comment
     {
       text
     }

create_role_copy
 = element copy
     {
       uuid
     }

create_role_users
 = element users
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        create_role_response
 = element create_role_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.16.3 Example: Create a role

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <create_role>
   <name>SCAP Observer</name>
   <users>sarah, bob</users>
 </create_role>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <create_role_response status="201"
                       status_text="OK, resource created"
                       id="b64c81b2-b9de-11e3-a2e9-406186ea4fc5"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.17 Command create_scanner

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Create a scanner.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_scanner command to create a new scanner.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.17.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            A name for the scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              A comment on the scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <copy> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The UUID of an existing scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <host>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The host of the scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <port>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The port of the scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The type of the scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <ca_pub>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Certificate of CA to verify scanner certificate..
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <key_pub>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Certificate to authenticate with to the Scanner..
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <key_priv>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Private key to authenticate with to the Scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.17.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          create_scanner
 = element create_scanner
     {
       create_scanner_name
       & create_scanner_comment?
       & create_scanner_copy?
       & create_scanner_host
       & create_scanner_port
       & create_scanner_type
       & create_scanner_ca_pub
       & create_scanner_key_pub
       & create_scanner_key_priv
     }

create_scanner_name
 = element name
     {
       name
     }

create_scanner_comment
 = element comment
     {
       text
     }

create_scanner_copy
 = element copy
     {
       uuid
     }

create_scanner_host
 = element host
     {
       text
     }

create_scanner_port
 = element port
     {
       text
     }

create_scanner_type
 = element type
     {
       text
     }

create_scanner_ca_pub
 = element ca_pub
     {
       text
     }

create_scanner_key_pub
 = element key_pub
     {
       text
     }

create_scanner_key_priv
 = element key_priv
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          create_scanner_response
 = element create_scanner_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.17.3 Example: Create a scanner

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <create_scanner>
   <name>Default Scanner</name>
   <host>localhost</host>
   <port>9391</port>
   <type>2</type>
   <ca_pub>...</ca_pub>
   <key_pub>...</key_pub>
   <key_priv>...</key_priv>
 </create_scanner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <create_scanner_response status="201"
                          status_text="OK, resource created"
                          id="814cd30f-dee1-4d58-851d-21b8d0c048e3"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.18 Command create_schedule

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          In short: Create a schedule.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The client uses the create_schedule command to create a new schedule.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.18.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              A name for the schedule.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                A comment on the schedule.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <copy> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The UUID of an existing schedule.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <first_time> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The first time the schedule will run.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <minute>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <hour>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <day_of_month>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <month>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <year>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <duration> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              How long the Manager will run the scheduled task for.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <unit>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Duration time unit.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <period> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                How often the Manager will repeat the scheduled task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <unit>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Period time unit.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <timezone> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The timezone the schedule will follow.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.18.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                create_schedule
 = element create_schedule
     {
       create_schedule_name
       & create_schedule_comment?
       & create_schedule_copy?
       & create_schedule_first_time?
       & create_schedule_duration?
       & create_schedule_period?
       & create_schedule_timezone?
     }

create_schedule_name
 = element name
     {
       name
     }

create_schedule_comment
 = element comment
     {
       text
     }

create_schedule_copy
 = element copy
     {
       uuid
     }

create_schedule_first_time
 = element first_time
     {
       create_schedule_first_time_minute
       & create_schedule_first_time_hour
       & create_schedule_first_time_day_of_month
       & create_schedule_first_time_month
       & create_schedule_first_time_year
     }

create_schedule_first_time_minute
 = element minute
     {
       integer
     }

create_schedule_first_time_hour
 = element hour
     {
       integer
     }

create_schedule_first_time_day_of_month
 = element day_of_month
     {
       integer
     }

create_schedule_first_time_month
 = element month
     {
       integer
     }

create_schedule_first_time_year
 = element year
     {
       integer
     }

create_schedule_duration
 = element duration
     {
       create_schedule_duration_unit
     }

create_schedule_duration_unit
 = element unit
     {
       time_unit
     }

create_schedule_period
 = element period
     {
       create_schedule_period_unit
     }

create_schedule_period_unit
 = element unit
     {
       time_unit
     }

create_schedule_timezone
 = element timezone
     {
       timezone
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                create_schedule_response
 = element create_schedule_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.18.3 Example: Create a schedule

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <create_schedule>
   <name>Every night</name>
   <first_time>
     <day_of_month>1</day_of_month>
     <hour>0</hour>
     <minute>0</minute>
     <month>1</month>
     <year>2011</year>
   </first_time>
   <duration>
     3
     <unit>hour</unit>
   </duration>
   <period>
     1
     <unit>day</unit>
   </period>
 </create_schedule>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <create_schedule_response status="201"
                           status_text="OK, resource created"
                           id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.19 Command create_slave

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                In short: Create a slave.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The client uses the create_slave command to create a new slave.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.19.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    A name for the slave.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      A comment on the slave.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <copy> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The UUID of an existing slave.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <host>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The host that the slave Manager is running on.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <port>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The port that the slave Manager is serving on the host.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <login>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Login name on the slave Manager.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <password> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Password for login on the slave Manager.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.19.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              create_slave
 = element create_slave
     {
       create_slave_name
       & create_slave_comment?
       & create_slave_copy?
       & create_slave_host
       & create_slave_port
       & create_slave_login
       & create_slave_password?
     }

create_slave_name
 = element name
     {
       name
     }

create_slave_comment
 = element comment
     {
       text
     }

create_slave_copy
 = element copy
     {
       uuid
     }

create_slave_host
 = element host
     {
       text
     }

create_slave_port
 = element port
     {
       text
     }

create_slave_login
 = element login
     {
       text
     }

create_slave_password
 = element password
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              create_slave_response
 = element create_slave_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.19.3 Example: Create a slave

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <create_slave>
   <name>Bangkok</name>
   <comment>Manager in Bangkok department.</comment>
   <host>192.0.32.10</host>
   <login>sally</login>
   <password>secret</password>
 </create_slave>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <create_slave_response status="201"
                        status_text="OK, resource created"
                        id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.20 Command create_tag

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              In short: Create a tag.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The client uses the create_tag command to create a new tag. A name and the resource type must be provided. If a resource ID is also given, it must refer to an existing resource.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.20.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  A full tag name consisting of namespace and predicate.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <resource>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Identifies a resource the tag is to be attached to.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @id (uuid) ID of the resource the tag is to be attached to.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      OMP type of the resource the tag is to be attached to.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <copy> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      UUID of an existing tag to copy.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <value> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Value associated with the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Comment to add to the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <active> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Whether the tag is active.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.20.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          create_tag
 = element create_tag
     {
       create_tag_name
       & create_tag_resource
       & create_tag_copy?
       & create_tag_value?
       & create_tag_comment?
       & create_tag_active?
     }

create_tag_name
 = element name
     {
       text
     }

create_tag_resource
 = element resource
     {
       attribute id { uuid }?
       & create_tag_resource_type
     }

create_tag_resource_type
 = element type
     {
       text
     }

create_tag_copy
 = element copy
     {
       uuid
     }

create_tag_value
 = element value
     {
       text
     }

create_tag_comment
 = element comment
     {
       text
     }

create_tag_active
 = element active
     {
       boolean
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          create_tag_response
 = element create_tag_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.20.3 Example: Create a tag attached to a target

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <create_tag>
   <name>geo:long</name>
   <resource id="b493b7a8-7489-11df-a3ec-002264764cea">
     <type>target</type>
   </resource>
   <value>52.2788</value>
 </create_tag>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <create_tag_response status="201"
                      status_text="OK, resource created"
                      id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.21 Command create_target

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          In short: Create a target.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The client uses the create_target command to create a new target.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          If the list of hosts is empty, the command must also include a target locator.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.21.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              A name for the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <make_unique>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Whether to append a unique suffix if the name already exists.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                A comment on the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <copy> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The UUID of an existing target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <hosts>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    A textual list of hosts, which may be empty.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <exclude_hosts> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      A list of hosts to exclude.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <ssh_lsc_credential> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        SSH login credentials for target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <port> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The port the LSCs will use.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <smb_lsc_credential> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          SMB login credentials for target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <esxi_lsc_credential> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          ESXi credential to use on target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <alive_tests> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Which alive tests to use.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <reverse_lookup_only> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Whether to scan only hosts that have names.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <reverse_lookup_unify> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Whether to scan only one IP when multiple IPs have the same name.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <port_range> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Port range for the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <port_list> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Port list for the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.21.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              create_target
 = element create_target
     {
       create_target_name
       & create_target_comment?
       & create_target_copy?
       & create_target_hosts
       & create_target_exclude_hosts?
       & create_target_ssh_lsc_credential?
       & create_target_smb_lsc_credential?
       & create_target_esxi_lsc_credential?
       & create_target_alive_tests?
       & create_target_reverse_lookup_only?
       & create_target_reverse_lookup_unify?
       & create_target_port_range?
       & create_target_port_list?
     }

create_target_name
 = element name
     {
       text # RNC limitation: name
       & create_target_name_make_unique
     }

create_target_name_make_unique
 = element make_unique
     {
       boolean
     }

create_target_comment
 = element comment
     {
       text
     }

create_target_copy
 = element copy
     {
       uuid
     }

create_target_hosts
 = element hosts
     {
       text
     }

create_target_exclude_hosts
 = element exclude_hosts
     {
       text
     }

create_target_ssh_lsc_credential
 = element ssh_lsc_credential
     {
       attribute id { uuid }
       & create_target_ssh_lsc_credential_port?
     }

create_target_ssh_lsc_credential_port
 = element port
     {
       text
     }

create_target_smb_lsc_credential
 = element smb_lsc_credential
     {
       attribute id { uuid }
     }

create_target_esxi_lsc_credential
 = element esxi_lsc_credential
     {
       attribute id { uuid }
     }

create_target_alive_tests
 = element alive_tests
     {
       alive_test
     }

create_target_reverse_lookup_only
 = element reverse_lookup_only
     {
       boolean
     }

create_target_reverse_lookup_unify
 = element reverse_lookup_unify
     {
       boolean
     }

create_target_port_range
 = element port_range
     {
       text
     }

create_target_port_list
 = element port_list
     {
       attribute id { uuid }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              create_target_response
 = element create_target_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.21.3 Example: Create a target, giving a host list

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <create_target>
   <name>All GNU/Linux machines</name>
   <hosts>192.168.1.0/24</hosts>
 </create_target>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <create_target_response status="201"
                         status_text="OK, resource created"
                         id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.22 Command create_task

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              In short: Create a task.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The client uses the create_task command to create a new task.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.22.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  A name for the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    A comment on the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <copy> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The UUID of an existing task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <alterable> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Whether the task is alterable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <config>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The scan configuration used by the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <target>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The hosts scanned by the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <hosts_ordering> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The order hosts are scanned in.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <scanner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The scanner to use for scanning the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <alert> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            An alert that applies to the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <schedule> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            When the task will run.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <schedule_periods> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            A limit to the number of times the task will be scheduled, or 0 for no limit.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <slave> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Slave that the task will run on.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <observers> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Users allowed to observe this task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <preferences> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <preference> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <scanner_name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Compact name of preference, from scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.22.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                create_task
 = element create_task
     {
       create_task_name
       & create_task_comment?
       & create_task_copy?
       & create_task_alterable?
       & create_task_config
       & create_task_target
       & create_task_hosts_ordering?
       & create_task_scanner
       & create_task_alert*
       & create_task_schedule?
       & create_task_schedule_periods?
       & create_task_slave?
       & create_task_observers?
       & create_task_preferences?
     }

create_task_name
 = element name
     {
       name
     }

create_task_comment
 = element comment
     {
       text
     }

create_task_copy
 = element copy
     {
       uuid
     }

create_task_alterable
 = element alterable
     {
       boolean
     }

create_task_config
 = element config
     {
       attribute id { uuid }
     }

create_task_target
 = element target
     {
       attribute id { uuid }
     }

create_task_hosts_ordering
 = element hosts_ordering
     {
       text
     }

create_task_scanner
 = element scanner
     {
       attribute id { uuid }
     }

create_task_alert
 = element alert
     {
       attribute id { uuid }
     }

create_task_schedule
 = element schedule
     {
       attribute id { uuid }
     }

create_task_schedule_periods
 = element schedule_periods
     {
       integer
     }

create_task_slave
 = element slave
     {
       attribute id { uuid }
     }

create_task_observers
 = element observers
     {
       user_list
     }

create_task_preferences
 = element preferences
     {
       create_task_preferences_preference*
     }

create_task_preferences_preference
 = element preference
     {
       create_task_preferences_preference_scanner_name
       & create_task_preferences_preference_value
     }

create_task_preferences_preference_scanner_name
 = element scanner_name
     {
       text
     }

create_task_preferences_preference_value
 = element value
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                create_task_response
 = element create_task_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.22.3 Example: Create a task, giving a host list

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <create_task>
   <name>Scan Webserver</name>
   <comment>Hourly scan of the webserver</comment>
   <config id="daba56c8-73ec-11df-a475-002264764cea"/>
   <target id="b493b7a8-7489-11df-a3ec-002264764cea"/>
   <scanner id="15348381-3180-213f-4eec-123591912388"/>
 </create_task>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <create_task_response status="201"
                       status_text="OK, resource created"
                       id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.23 Command create_user

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                In short: Create a user.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The client uses the create_user command to create a new user.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.23.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The name of the user to be created.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <copy> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The UUID of an existing user.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <hosts> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        User access rules: a textual list of hosts.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @allow (boolean) If 1, allow only listed, otherwise forbid listed.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <ifaces> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        User access rules: a textual list of ifaces.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @allow (boolean) If 1, allow only listed, otherwise forbid listed.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <password> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The password for the user.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <role> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          A role of the user.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.23.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      create_user
 = element create_user
     {
       create_user_name
       & create_user_copy?
       & create_user_hosts?
       & create_user_ifaces?
       & create_user_password?
       & create_user_role*
     }

create_user_name
 = element name
     {
       text
     }

create_user_copy
 = element copy
     {
       uuid
     }

create_user_hosts
 = element hosts
     {
       text
       & attribute allow { boolean }?
     }

create_user_ifaces
 = element ifaces
     {
       text
       & attribute allow { boolean }?
     }

create_user_password
 = element password
     {
       text
     }

create_user_role
 = element role
     {
       attribute id { uuid }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      create_user_response
 = element create_user_response
     {
       attribute status { status }
       & attribute status_text { text }
       & attribute id { uuid }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.23.3 Example: Create a user

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <create_user>
   <name>foobar</name>
   <password>f00bar</password>
   <role id="8d453140-b74d-11e2-b0be-406186ea4fc5"/>
 </create_user>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <create_user_response status="201"
                       status_text="OK, resource created"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.24 Command delete_agent

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete an agent.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_agent command to delete an existing agent.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.24.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @agent_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @ultimate (boolean) Whether to remove entirely, or to the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.24.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_agent
 = element delete_agent
     {
       attribute agent_id { uuid }
       & attribute ultimate { boolean }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_agent_response
 = element delete_agent_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.24.3 Example: Delete an agent

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_agent agent_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_agent_response status="200"
                        status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.25 Command delete_config

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete a config.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_config command to delete an existing config.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.25.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @config_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @ultimate (boolean) Whether to remove entirely, or to the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.25.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_config
 = element delete_config
     {
       attribute config_id { uuid }
       & attribute ultimate { boolean }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_config_response
 = element delete_config_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.25.3 Example: Delete a config

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_config config_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_config_response status="200"
                         status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.26 Command delete_alert

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete an alert.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_alert command to delete an existing alert.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.26.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @alert_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @ultimate (boolean) Whether to remove entirely, or to the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.26.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_alert
 = element delete_alert
     {
       attribute alert_id { uuid }
       & attribute ultimate { boolean }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_alert_response
 = element delete_alert_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.26.3 Example: Delete an alert

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_alert alert_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_alert_response status="200"
                        status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.27 Command delete_filter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete a filter.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_filter command to delete an existing filter.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.27.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @filter_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @ultimate (boolean) Whether to remove entirely, or to the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.27.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_filter
 = element delete_filter
     {
       attribute filter_id { uuid }
       & attribute ultimate { boolean }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_filter_response
 = element delete_filter_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.27.3 Example: Delete a filter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_filter filter_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_filter_response status="200"
                         status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.28 Command delete_group

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete a group.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_group command to delete an existing group.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.28.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @group_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @ultimate (boolean) Whether to remove entirely, or to the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.28.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_group
 = element delete_group
     {
       attribute group_id { uuid }
       & attribute ultimate { boolean }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_group_response
 = element delete_group_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.28.3 Example: Delete a group

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_group group_id="d94211b6-ba40-11e3-bcb1-406186ea4fc5"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_group_response status="200"
                        status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.29 Command delete_lsc_credential

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete an LSC credential.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_lsc_credential command to delete an existing LSC credential.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.29.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @lsc_credential_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @ultimate (boolean) Whether to remove entirely, or to the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.29.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_lsc_credential
 = element delete_lsc_credential
     {
       attribute lsc_credential_id { uuid }
       & attribute ultimate { boolean }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_lsc_credential_response
 = element delete_lsc_credential_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.29.3 Example: Delete an LSC credential

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_lsc_credential lsc_credential_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_lsc_credential_response status="200"
                                 status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.30 Command delete_note

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete a note.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_note command to delete an existing note.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.30.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @note_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @ultimate (boolean) Whether to remove entirely, or to the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.30.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_note
 = element delete_note
     {
       attribute note_id { uuid }
       & attribute ultimate { boolean }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_note_response
 = element delete_note_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.30.3 Example: Delete a note

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_note note_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_note_response status="200"
                       status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.31 Command delete_override

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete an override.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_override command to delete an existing override.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.31.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @override_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @ultimate (boolean) Whether to remove entirely, or to the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.31.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_override
 = element delete_override
     {
       attribute override_id { uuid }
       & attribute ultimate { boolean }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_override_response
 = element delete_override_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.31.3 Example: Delete an override

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_override override_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_override_response status="200"
                           status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.32 Command delete_report

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete a report.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_report command to delete an existing report.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.32.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.32.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_report
 = element delete_report
     {
       attribute report_id { uuid }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_report_response
 = element delete_report_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.32.3 Example: Delete a report

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_report report_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_report_response status="200"
                         status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.33 Command delete_permission

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete a permission.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_permission command to delete an existing permission.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.33.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @permission_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @ultimate (boolean) Whether to remove entirely, or to the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.33.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_permission
 = element delete_permission
     {
       attribute permission_id { uuid }
       & attribute ultimate { boolean }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_permission_response
 = element delete_permission_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.33.3 Example: Delete a permission

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_permission permission_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_permission_response status="200"
                             status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.34 Command delete_port_list

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete a port list.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_port_list command to delete an existing port list.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.34.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @port_list_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @ultimate (boolean) Whether to remove entirely, or to the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.34.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_port_list
 = element delete_port_list
     {
       attribute port_list_id { uuid }
       & attribute ultimate { boolean }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_port_list_response
 = element delete_port_list_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.34.3 Example: Delete a port list

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_port_list port_list_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_port_list_response status="200"
                            status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.35 Command delete_port_range

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete a port range.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_port_range command to delete an existing port range.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.35.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @port_range_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.35.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_port_range
 = element delete_port_range
     {
       attribute port_range_id { uuid }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_port_range_response
 = element delete_port_range_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.35.3 Example: Delete a port range

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_port_range port_range_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_port_range_response status="200"
                             status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.36 Command delete_report_format

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete a report format.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_report_format command to delete an existing report format.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.36.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @report_format_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @ultimate (boolean) Whether to remove entirely, or to the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.36.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_report_format
 = element delete_report_format
     {
       attribute report_format_id { uuid }
       & attribute ultimate { boolean }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_report_format_response
 = element delete_report_format_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.36.3 Example: Delete a report format

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_report_format report_format_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_report_format_response status="200"
                                status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.37 Command delete_role

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete a role.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_role command to delete an existing role.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.37.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @role_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @ultimate (boolean) Whether to remove entirely, or to the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.37.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_role
 = element delete_role
     {
       attribute role_id { uuid }
       & attribute ultimate { boolean }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_role_response
 = element delete_role_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.37.3 Example: Delete a role

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_role role_id="b64c81b2-b9de-11e3-a2e9-406186ea4fc5"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_role_response status="200"
                       status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.38 Command delete_scanner

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete a scanner.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_scanner command to delete an existing scanner.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.38.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @scanner_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @ultimate (boolean) Whether to remove entirely, or to the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.38.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_scanner
 = element delete_scanner
     {
       attribute scanner_id { uuid }
       & attribute ultimate { boolean }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_scanner_response
 = element delete_scanner_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.38.3 Example: Delete a scanner

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_scanner scanner_id="817a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_scanner_response status="200"
                          status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.39 Command delete_schedule

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete a schedule.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_schedule command to delete an existing schedule.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.39.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @schedule_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @ultimate (boolean) Whether to remove entirely, or to the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.39.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_schedule
 = element delete_schedule
     {
       attribute schedule_id { uuid }
       & attribute ultimate { boolean }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_schedule_response
 = element delete_schedule_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.39.3 Example: Delete a schedule

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_schedule schedule_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_schedule_response status="200"
                           status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.40 Command delete_slave

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete a slave.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_slave command to delete an existing slave.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.40.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @slave_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @ultimate (boolean) Whether to remove entirely, or to the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.40.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_slave
 = element delete_slave
     {
       attribute slave_id { uuid }
       & attribute ultimate { boolean }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_slave_response
 = element delete_slave_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.40.3 Example: Delete a slave

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_slave slave_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_slave_response status="200"
                        status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.41 Command delete_tag

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete a tag.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_tag command to delete an existing tag.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.41.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @tag_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @ultimate (boolean) Whether to remove entirely, or to the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.41.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_tag
 = element delete_tag
     {
       attribute tag_id { uuid }
       & attribute ultimate { boolean }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_tag_response
 = element delete_tag_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.41.3 Example: Delete a tag

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_tag target_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_tag_response status="200"
                      status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.42 Command delete_target

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete a target.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_target command to delete an existing target.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.42.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @target_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @ultimate (boolean) Whether to remove entirely, or to the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.42.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_target
 = element delete_target
     {
       attribute target_id { uuid }
       & attribute ultimate { boolean }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_target_response
 = element delete_target_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.42.3 Example: Delete a target

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_target target_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_target_response status="200"
                         status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.43 Command delete_task

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete a task.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_task command to delete an existing task, including all reports associated with the task.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.43.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @task_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @ultimate (boolean) Whether to remove entirely, or to the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.43.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_task
 = element delete_task
     {
       attribute task_id { uuid }
       & attribute ultimate { boolean }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      delete_task_response
 = element delete_task_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.43.3 Example: Delete a task

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_task task_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <delete_task_response status="200"
                       status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.44 Command delete_user

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Delete a user.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the delete_user command to delete an existing user.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Administrator.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.44.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @user_id (uuid) The ID of the user to be deleted. Overrides name.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The name of the user to be deleted.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.44.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        delete_user
 = element delete_user
     {
       attribute user_id { uuid }
       & delete_user_name
     }

delete_user_name
 = element name
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        delete_user_response
 = element delete_user_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.44.3 Example: Delete a user

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <delete_user name="foobar"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <delete_user_response status="200"
                       status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.45 Command describe_auth

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Describe authentication methods.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the "describe_auth" command to get details about the used authentication methods.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The Manager will reply with a list of all used authentication methods if such a list is available.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.45.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Empty single element.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <group>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Config group.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @name (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <auth_conf_setting>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @key (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @value (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.45.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        describe_auth
 = element describe_auth
     {
       ""
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        describe_auth_response
 = element describe_auth_response
     {
       attribute status { status }
       & attribute status_text { text }
       & describe_auth_response_group
     }

describe_auth_response_group
 = element group
     {
       attribute name { text }
       & describe_auth_response_group_auth_conf_setting
     }

describe_auth_response_group_auth_conf_setting
 = element auth_conf_setting
     {
       attribute key { text }
       & attribute value { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.45.3 Example: Describe the authentication methods

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <describe_auth/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <describe_auth_response status="200"
                         status_text="OK">
   <group name="Foo">
     <auth_conf_setting key="Bar"
                        value="Baz"/>
   </group>
 </describe_auth_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.46 Command describe_cert

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Describe the CERT feed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the "describe_cert" command to get details about the CERT feed used by the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The Manager will reply with a cert element containing information about the CERT feed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.46.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Empty single element.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <cert>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The name of the CERT feed.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <version>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The version of the CERT feed.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <description>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  A description of the CERT feed.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <sync_not_available> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Present if CERT syncing is not available.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <error>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Description of why sync is not available.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <currently_syncing> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Present if a CERT sync is underway.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <timestamp>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Time sync started.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <user>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Name of user who is performing sync.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    7.46.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    describe_cert
 = element describe_cert
     {
       ""
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    describe_cert_response
 = element describe_cert_response
     {
       attribute status { status }
       & attribute status_text { text }
       & describe_cert_response_cert
     }

describe_cert_response_cert
 = element cert
     {
       describe_cert_response_cert_name
       & describe_cert_response_cert_version
       & describe_cert_response_cert_description
       & describe_cert_response_cert_sync_not_available?
       & describe_cert_response_cert_currently_syncing?
     }

describe_cert_response_cert_name
 = element name
     {
       text
     }

describe_cert_response_cert_version
 = element version
     {
       text
     }

describe_cert_response_cert_description
 = element description
     {
       text
     }

describe_cert_response_cert_sync_not_available
 = element sync_not_available
     {
       describe_cert_response_cert_sync_not_available_error
     }

describe_cert_response_cert_sync_not_available_error
 = element error
     {
     }

describe_cert_response_cert_currently_syncing
 = element currently_syncing
     {
       describe_cert_response_cert_currently_syncing_timestamp
       & describe_cert_response_cert_currently_syncing_user
     }

describe_cert_response_cert_currently_syncing_timestamp
 = element timestamp
     {
       text
     }

describe_cert_response_cert_currently_syncing_user
 = element user
     {
       text
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    7.46.3 Example: Describe the CERT feed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     <describe_cert/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     <describe_cert_response status="200"
                         status_text="OK">
   <cert>
     <name>OpenVAS CERT Feed</name>
     <version>201301040805</version>
     <description>
       The 'OpenVAS CERT Feed' is provided by 'The OpenVAS Project'.
       ...
     </description>
   </cert>
 </describe_cert_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    7.47 Command describe_feed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    In short: Describe the NVT feed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The client uses the "describe_feed" command to get details about the NVT feed used by the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The Manager will reply with a feed element containing information about the NVT feed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    7.47.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Empty single element.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <feed>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The name of the feed.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <version>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The version of the feed.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <description>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              A description of the feed.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <sync_not_available> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Present if CERT syncing is not available.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <error>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Description of why sync is not available.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <currently_syncing> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Present if an NVT sync is underway.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <timestamp>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Time sync started.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <user>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Name of user who is performing sync.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.47.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                describe_feed
 = element describe_feed
     {
       ""
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                describe_feed_response
 = element describe_feed_response
     {
       attribute status { status }
       & attribute status_text { text }
       & describe_feed_response_feed
     }

describe_feed_response_feed
 = element feed
     {
       describe_feed_response_feed_name
       & describe_feed_response_feed_version
       & describe_feed_response_feed_description
       & describe_feed_response_feed_sync_not_available?
       & describe_feed_response_feed_currently_syncing?
     }

describe_feed_response_feed_name
 = element name
     {
       text
     }

describe_feed_response_feed_version
 = element version
     {
       text
     }

describe_feed_response_feed_description
 = element description
     {
       text
     }

describe_feed_response_feed_sync_not_available
 = element sync_not_available
     {
       describe_feed_response_feed_sync_not_available_error
     }

describe_feed_response_feed_sync_not_available_error
 = element error
     {
     }

describe_feed_response_feed_currently_syncing
 = element currently_syncing
     {
       describe_feed_response_feed_currently_syncing_timestamp
       & describe_feed_response_feed_currently_syncing_user
     }

describe_feed_response_feed_currently_syncing_timestamp
 = element timestamp
     {
       text
     }

describe_feed_response_feed_currently_syncing_user
 = element user
     {
       text
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.47.3 Example: Describe the feed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <describe_feed/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <describe_feed_response status="200"
                         status_text="OK">
   <feed>
     <name>OpenVAS NVT Feed</name>
     <version>201011221324</version>
     <description>
       The 'OpenVAS NVT Feed' is provided by 'The OpenVAS Project'.
       ...
     </description>
   </feed>
 </describe_feed_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.48 Command describe_scap

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                In short: Describe the SCAP feed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The client uses the "describe_scap" command to get details about the SCAP feed used by the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The Manager will reply with a scap element containing information about the SCAP feed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.48.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Empty single element.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <scap>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The name of the scap feed.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <version>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The version of the scap feed.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <description>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          A description of the scap feed.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <sync_not_available> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Present if CERT syncing is not available.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <error>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Description of why sync is not available.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <currently_syncing> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Present if a CERT sync is underway.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <timestamp>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Time sync started.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <user>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Name of user who is performing sync.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.48.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            describe_scap
 = element describe_scap
     {
       ""
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            describe_scap_response
 = element describe_scap_response
     {
       attribute status { status }
       & attribute status_text { text }
       & describe_scap_response_scap
     }

describe_scap_response_scap
 = element scap
     {
       describe_scap_response_scap_name
       & describe_scap_response_scap_version
       & describe_scap_response_scap_description
       & describe_scap_response_scap_sync_not_available?
       & describe_scap_response_scap_currently_syncing?
     }

describe_scap_response_scap_name
 = element name
     {
       text
     }

describe_scap_response_scap_version
 = element version
     {
       text
     }

describe_scap_response_scap_description
 = element description
     {
       text
     }

describe_scap_response_scap_sync_not_available
 = element sync_not_available
     {
       describe_scap_response_scap_sync_not_available_error
     }

describe_scap_response_scap_sync_not_available_error
 = element error
     {
     }

describe_scap_response_scap_currently_syncing
 = element currently_syncing
     {
       describe_scap_response_scap_currently_syncing_timestamp
       & describe_scap_response_scap_currently_syncing_user
     }

describe_scap_response_scap_currently_syncing_timestamp
 = element timestamp
     {
       text
     }

describe_scap_response_scap_currently_syncing_user
 = element user
     {
       text
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.48.3 Example: Describe the scap feed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             <describe_scap/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             <describe_scap_response status="200"
                         status_text="OK">
   <scap>
     <name>OpenVAS NVT SCAP</name>
     <version>201011221324</version>
     <description>
       The 'OpenVAS SCAP Feed' is provided by 'The OpenVAS Project'.
       ...
     </description>
   </scap>
 </describe_scap_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.49 Command empty_trashcan

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            In short: Empty the trashcan.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The client uses the empty_trashcan command to empty the trashcan.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.49.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Empty single element.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.49.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            empty_trashcan
 = element empty_trashcan
     {
       ""
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            empty_trashcan_response
 = element empty_trashcan_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.49.3 Example: Empty the trashcan

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             <empty_trashcan/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             <empty_trashcan_response status="200"
                          status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.50 Command get_agents

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            In short: Get one or many agents.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The client uses the get_agents command to get agent information. If the command sent by the client was valid, the manager will reply with a list of agents to the client.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            If the request includes a format then the agents in the response include installer elements, otherwise they include trust state and time. If the details attribute is set, the response will include the installer.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.50.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @agent_id (uuid) ID of single agent to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @filt_id (uuid) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @trash (boolean) Whether to get the trashcan agents instead.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @details (boolean) Whether to include agents package information when no format was provided.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @format ("installer", "howto_install" or "howto_use")
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <agent> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <owner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Owner of the agent.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The name of the owner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The name of the agent.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The comment on the agent.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <creation_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Date and time the agent was created.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <modification_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Date and time the agent was last modified.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <in_use>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Whether the agent is in use.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <writable>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Whether the agent is writable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <permissions>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Permissions that the current user has on the agent.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <permission> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The name of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <user_tags>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Info on tags attached to the agent.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Number of attached tags.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <tag> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Short info on an individual tag (only if details were requested).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @id (uuid) UUID of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Value of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Comment for the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • One of
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <installer>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <trust>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Whether signature verification succeeded.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                When the signature was verified.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <package>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Either the installer or one of the HOWTOs.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <filename>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The filename of the package.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <agents>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @start (integer) First agent.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @max (integer) Maximum number of agents.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <agent_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Number of agents after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Number of agents on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.50.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        get_agents
 = element get_agents
     {
       attribute agent_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute trash { boolean }?
       & attribute details { boolean }?
       & attribute format { xsd:token { pattern = "installer|howto_install|howto_use" } }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        get_agents_response
 = element get_agents_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_agents_response_agent*
       & get_agents_response_filters
       & get_agents_response_sort
       & get_agents_response_agents
       & get_agents_response_agent_count
     }

get_agents_response_agent
 = element agent
     {
       attribute id { uuid }
       & get_agents_response_agent_owner
       & get_agents_response_agent_name
       & get_agents_response_agent_comment
       & get_agents_response_agent_creation_time
       & get_agents_response_agent_modification_time
       & get_agents_response_agent_in_use
       & get_agents_response_agent_writable
       & get_agents_response_agent_permissions
       & get_agents_response_agent_user_tags
       & ( get_agents_response_agent_installer
           | get_agents_response_agent_package )
     }

get_agents_response_agent_owner
 = element owner
     {
       get_agents_response_agent_owner_name
     }

get_agents_response_agent_owner_name
 = element name
     {
       name
     }

get_agents_response_agent_name
 = element name
     {
       name
     }

get_agents_response_agent_comment
 = element comment
     {
       text
     }

get_agents_response_agent_creation_time
 = element creation_time
     {
       iso_time
     }

get_agents_response_agent_modification_time
 = element modification_time
     {
       iso_time
     }

get_agents_response_agent_in_use
 = element in_use
     {
       boolean
     }

get_agents_response_agent_writable
 = element writable
     {
       boolean
     }

get_agents_response_agent_permissions
 = element permissions
     {
       get_agents_response_agent_permissions_permission*
     }

get_agents_response_agent_permissions_permission
 = element permission
     {
       get_agents_response_agent_permissions_permission_name
     }

get_agents_response_agent_permissions_permission_name
 = element name
     {
       name
     }

get_agents_response_agent_user_tags
 = element user_tags
     {
       get_agents_response_agent_user_tags_count
       & get_agents_response_agent_user_tags_tag*
     }

get_agents_response_agent_user_tags_count
 = element count
     {
       integer
     }

get_agents_response_agent_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & get_agents_response_agent_user_tags_tag_name
       & get_agents_response_agent_user_tags_tag_value
       & get_agents_response_agent_user_tags_tag_comment
     }

get_agents_response_agent_user_tags_tag_name
 = element name
     {
       text
     }

get_agents_response_agent_user_tags_tag_value
 = element value
     {
       text
     }

get_agents_response_agent_user_tags_tag_comment
 = element comment
     {
       text
     }

get_agents_response_agent_installer
 = element installer
     {
       get_agents_response_agent_installer_trust
     }

get_agents_response_agent_installer_trust
 = element trust
     {
       text # RNC limitation: xsd:token { pattern = "yes|no|unknown" }
       & get_agents_response_agent_installer_trust_time
     }

get_agents_response_agent_installer_trust_time
 = element time
     {
       iso_time
     }

get_agents_response_agent_package
 = element package
     {
       text # RNC limitation: base64
       & get_agents_response_agent_package_filename
     }

get_agents_response_agent_package_filename
 = element filename
     {
       text
     }

get_agents_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_agents_response_filters_term
       & get_agents_response_filters_name?
       & get_agents_response_filters_keywords
     }

get_agents_response_filters_term
 = element term
     {
       text
     }

get_agents_response_filters_name
 = element name
     {
       text
     }

get_agents_response_filters_keywords
 = element keywords
     {
       get_agents_response_filters_keywords_keyword*
     }

get_agents_response_filters_keywords_keyword
 = element keyword
     {
       get_agents_response_filters_keywords_keyword_column
       & get_agents_response_filters_keywords_keyword_relation
       & get_agents_response_filters_keywords_keyword_value
     }

get_agents_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_agents_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_agents_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_agents_response_sort
 = element sort
     {
       text
       & get_agents_response_sort_field
     }

get_agents_response_sort_field
 = element field
     {
       get_agents_response_sort_field_order
     }

get_agents_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_agents_response_agents
 = element agents
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_agents_response_agent_count
 = element agent_count
     {
       get_agents_response_agent_count_filtered
       & get_agents_response_agent_count_page
     }

get_agents_response_agent_count_filtered
 = element filtered
     {
       integer
     }

get_agents_response_agent_count_page
 = element page
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.50.3 Example: Get one or many agents

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <get_agents/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <get_agents_response status="200"
                      status_text="OK">
   <agent id="c33864a9-d3fd-44b3-8717-972bfb01dfcf">
     <name>Custom Scan Agent</name>
     <comment>Custom agent for use on the Web servers.</comment>
     <creation_time>2012-01-23T10:44:00+01:00</creation_time>
     <modification_time>2013-01-23T10:44:00+01:00</modification_time>
     <writable>1</writable>
     <in_use>0</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <installer>
       <trust>
         yes
         <time>Wed Jun 30 21:49:08 2012</time>
       </trust>
     </installer>
   </agent>
   ...
 </get_agents_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.50.3 Example: Get one agent

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <get_agents agent_id="c33864a9-d3fd-44b3-8717-972bfb01dfcf"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <get_agents_response status="200"
                      status_text="OK">
   <agent id="c33864a9-d3fd-44b3-8717-972bfb01dfcf">
     <name>Custom Scan Agent</name>
     <comment>Custom agent for use on the Web servers.</comment>
     <creation_time>2012-01-23T10:44:00+01:00</creation_time>
     <modification_time>2013-01-23T10:44:00+01:00</modification_time>
     <writable>1</writable>
     <in_use>0</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <installer>
       <trust>
         yes
         <time>Wed Jun 30 21:49:08 2012</time>
       </trust>
     </installer>
   </agent>
 </get_agents_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.50.3 Example: Get one agent, including the installer package

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <get_agents agent_id="c33864a9-d3fd-44b3-8717-972bfb01dfcf"
             format="installer"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <get_agents_response status="200"
                      status_text="OK">
   <agent id="c33864a9-d3fd-44b3-8717-972bfb01dfcf">
     <name>Custom Scan Agent</name>
     <comment>Custom agent for use on the Web servers.</comment>
     <creation_time>2012-01-23T10:44:00+01:00</creation_time>
     <modification_time>2013-01-23T10:44:00+01:00</modification_time>
     <writable>1</writable>
     <in_use>0</in_use>
     <package format="installer">
       CgoKCgoKCgoKCgoKCSAgI...
       <filename>agent.deb</filename>
     </package>
   </agent>
 </get_agents_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.51 Command get_configs

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Get one or many configs.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_configs command to get config information. If the command sent by the client was valid, the manager will reply with a list of configs to the client.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.51.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @config_id (uuid) ID of single config to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @filt_id (uuid) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @trash (boolean) Whether to get the trashcan configs instead.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @details (boolean) Whether to get config families, preferences, nvt selectors and tasks.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @families (boolean) Whether to include the families if no details are requested.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @preferences (boolean) Whether to include the preferences if no details are requested.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @tasks (boolean) Whether to get tasks using this config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <config> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <owner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Owner of the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The name of the owner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The name of the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The comment on the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <creation_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Creation time of the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <modification_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Last time the config was modified.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <family_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The number of families selected by the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <growing>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Whether new families are automatically added to the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <nvt_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The number of NVTs selected by the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <growing>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Whether new NVTs are automatically added to the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The type the config..
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <max_nvt_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Total number of NVTs in the families selected by the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <known_nvt_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Total number of known NVTs selected by the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <in_use>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Whether any tasks are using the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <writable>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Whether any tasks are using the config, including trashcan tasks.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <permissions>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Permissions that the current user has on the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <permission> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The name of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <user_tags>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Info on tags attached to the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Number of attached tags.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <tag> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Short info on an individual tag (only if details were requested).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @id (uuid) UUID of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Value of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Comment for the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <tasks>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                All tasks using the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <task> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The name of the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Permissions the user has on the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <families> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    All families selected by the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <family> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The name of the family.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <nvt_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The number of NVTs selected in the family.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <max_nvt_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The total number of NVTs in the family.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <growing>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Whether new NVTs in the family are automatically added to the selection.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <preferences> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Preferences for all NVTs selected by the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <preference> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <nvt>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                NVT to which preference applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @oid (oid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The name of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The name of the preference.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The type of preference.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The value of the preference.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <default>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The default value of the preference.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <alt> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          An alternate value for the preference.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <nvt_selectors> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        All NVT selectors of the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <nvt_selector> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          An NVT selector.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Name of the selector.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <include>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Whether the selector is an include selector.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Selector type: 0 = all, 1 = family, 2 = NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <family_or_nvt>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Name of the family or OID of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <configs>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @start (integer) First config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @max (integer) Maximum number of configs.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <config_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Number of configs after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Number of configs on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.51.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          get_configs
 = element get_configs
     {
       attribute config_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute trash { boolean }?
       & attribute details { boolean }?
       & attribute families { boolean }?
       & attribute preferences { boolean }?
       & attribute tasks { boolean }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          get_configs_response
 = element get_configs_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_configs_response_config*
       & get_configs_response_filters
       & get_configs_response_sort
       & get_configs_response_configs
       & get_configs_response_config_count
     }

get_configs_response_config
 = element config
     {
       attribute id { uuid }
       & get_configs_response_config_owner
       & get_configs_response_config_name
       & get_configs_response_config_comment
       & get_configs_response_config_creation_time
       & get_configs_response_config_modification_time
       & get_configs_response_config_family_count
       & get_configs_response_config_nvt_count
       & get_configs_response_config_type
       & get_configs_response_config_max_nvt_count
       & get_configs_response_config_known_nvt_count
       & get_configs_response_config_in_use
       & get_configs_response_config_writable
       & get_configs_response_config_permissions
       & get_configs_response_config_user_tags
       & get_configs_response_config_tasks
       & get_configs_response_config_families?
       & get_configs_response_config_preferences?
       & get_configs_response_config_nvt_selectors?
     }

get_configs_response_config_owner
 = element owner
     {
       get_configs_response_config_owner_name
     }

get_configs_response_config_owner_name
 = element name
     {
       name
     }

get_configs_response_config_name
 = element name
     {
       name
     }

get_configs_response_config_comment
 = element comment
     {
       text
     }

get_configs_response_config_creation_time
 = element creation_time
     {
       iso_time
     }

get_configs_response_config_modification_time
 = element modification_time
     {
       iso_time
     }

get_configs_response_config_family_count
 = element family_count
     {
       text # RNC limitation: integer
       & get_configs_response_config_family_count_growing
     }

get_configs_response_config_family_count_growing
 = element growing
     {
       boolean
     }

get_configs_response_config_nvt_count
 = element nvt_count
     {
       text # RNC limitation: integer
       & get_configs_response_config_nvt_count_growing
     }

get_configs_response_config_nvt_count_growing
 = element growing
     {
       boolean
     }

get_configs_response_config_type
 = element type
     {
       text
     }

get_configs_response_config_max_nvt_count
 = element max_nvt_count
     {
       integer
     }

get_configs_response_config_known_nvt_count
 = element known_nvt_count
     {
       integer
     }

get_configs_response_config_in_use
 = element in_use
     {
       boolean
     }

get_configs_response_config_writable
 = element writable
     {
       boolean
     }

get_configs_response_config_permissions
 = element permissions
     {
       get_configs_response_config_permissions_permission*
     }

get_configs_response_config_permissions_permission
 = element permission
     {
       get_configs_response_config_permissions_permission_name
     }

get_configs_response_config_permissions_permission_name
 = element name
     {
       name
     }

get_configs_response_config_user_tags
 = element user_tags
     {
       get_configs_response_config_user_tags_count
       & get_configs_response_config_user_tags_tag*
     }

get_configs_response_config_user_tags_count
 = element count
     {
       integer
     }

get_configs_response_config_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & get_configs_response_config_user_tags_tag_name
       & get_configs_response_config_user_tags_tag_value
       & get_configs_response_config_user_tags_tag_comment
     }

get_configs_response_config_user_tags_tag_name
 = element name
     {
       text
     }

get_configs_response_config_user_tags_tag_value
 = element value
     {
       text
     }

get_configs_response_config_user_tags_tag_comment
 = element comment
     {
       text
     }

get_configs_response_config_tasks
 = element tasks
     {
       get_configs_response_config_tasks_task*
     }

get_configs_response_config_tasks_task
 = element task
     {
       attribute id { uuid }
       & get_configs_response_config_tasks_task_name
       & get_configs_response_config_tasks_task_permissions?
     }

get_configs_response_config_tasks_task_name
 = element name
     {
       name
     }

get_configs_response_config_tasks_task_permissions
 = element permissions
     {
       ""
     }

get_configs_response_config_families
 = element families
     {
       get_configs_response_config_families_family*
     }

get_configs_response_config_families_family
 = element family
     {
       get_configs_response_config_families_family_name
       & get_configs_response_config_families_family_nvt_count
       & get_configs_response_config_families_family_max_nvt_count
       & get_configs_response_config_families_family_growing
     }

get_configs_response_config_families_family_name
 = element name
     {
       name
     }

get_configs_response_config_families_family_type
 = element type
     {
       integer
     }

get_configs_response_config_families_family_nvt_count
 = element nvt_count
     {
       integer
     }

get_configs_response_config_families_family_max_nvt_count
 = element max_nvt_count
     {
       integer
     }

get_configs_response_config_families_family_growing
 = element growing
     {
       boolean
     }

get_configs_response_config_preferences
 = element preferences
     {
       get_configs_response_config_preferences_preference*
     }

get_configs_response_config_preferences_preference
 = element preference
     {
       get_configs_response_config_preferences_preference_nvt
       & get_configs_response_config_preferences_preference_name
       & get_configs_response_config_preferences_preference_type
       & get_configs_response_config_preferences_preference_value
       & get_configs_response_config_preferences_preference_default
       & get_configs_response_config_preferences_preference_alt*
     }

get_configs_response_config_preferences_preference_nvt
 = element nvt
     {
       attribute oid { oid }
       & get_configs_response_config_preferences_preference_nvt_name
     }

get_configs_response_config_preferences_preference_nvt_name
 = element name
     {
       name
     }

get_configs_response_config_preferences_preference_name
 = element name
     {
       name
     }

get_configs_response_config_preferences_preference_type
 = element type
     {
       text
     }

get_configs_response_config_preferences_preference_value
 = element value
     {
       text
     }

get_configs_response_config_preferences_preference_default
 = element default
     {
       text
     }

get_configs_response_config_preferences_preference_alt
 = element alt
     {
       text
     }

get_configs_response_config_nvt_selectors
 = element nvt_selectors
     {
       get_configs_response_config_nvt_selectors_nvt_selector*
     }

get_configs_response_config_nvt_selectors_nvt_selector
 = element nvt_selector
     {
       get_configs_response_config_nvt_selectors_nvt_selector_name
       & get_configs_response_config_nvt_selectors_nvt_selector_include
       & get_configs_response_config_nvt_selectors_nvt_selector_type
       & get_configs_response_config_nvt_selectors_nvt_selector_family_or_nvt
     }

get_configs_response_config_nvt_selectors_nvt_selector_name
 = element name
     {
       text
     }

get_configs_response_config_nvt_selectors_nvt_selector_include
 = element include
     {
       boolean
     }

get_configs_response_config_nvt_selectors_nvt_selector_type
 = element type
     {
       integer
     }

get_configs_response_config_nvt_selectors_nvt_selector_family_or_nvt
 = element family_or_nvt
     {
       text
     }

get_configs_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_configs_response_filters_term
       & get_configs_response_filters_name?
       & get_configs_response_filters_keywords
     }

get_configs_response_filters_term
 = element term
     {
       text
     }

get_configs_response_filters_name
 = element name
     {
       text
     }

get_configs_response_filters_keywords
 = element keywords
     {
       get_configs_response_filters_keywords_keyword*
     }

get_configs_response_filters_keywords_keyword
 = element keyword
     {
       get_configs_response_filters_keywords_keyword_column
       & get_configs_response_filters_keywords_keyword_relation
       & get_configs_response_filters_keywords_keyword_value
     }

get_configs_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_configs_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_configs_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_configs_response_sort
 = element sort
     {
       text
       & get_configs_response_sort_field
     }

get_configs_response_sort_field
 = element field
     {
       get_configs_response_sort_field_order
     }

get_configs_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_configs_response_configs
 = element configs
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_configs_response_config_count
 = element config_count
     {
       get_configs_response_config_count_filtered
       & get_configs_response_config_count_page
     }

get_configs_response_config_count_filtered
 = element filtered
     {
       integer
     }

get_configs_response_config_count_page
 = element page
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.51.3 Example: Get one or many configs

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <get_configs/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <get_configs_response status="200"
                       status_text="OK">
   <config id="daba56c8-73ec-11df-a475-002264764cea">
     <name>Full and fast</name>
     <comment>
       All NVT's; optimized by using previously collected information.
     </comment>
     <creation_time>2012-11-23T10:44:00+01:00</creation_time>
     <modification_time>2013-01-23T10:44:00+01:00</modification_time>
     <family_count>
       4
       <growing>1</growing>
     </family_count>
     <nvt_count>
       12
       <growing>1</growing>
     </nvt_count>
     <in_use>1</in_use>
     <writable>0</writable>
     <user_tags>
       <count>0</count>
     </user_tags>
   </config>
   ...
 </get_configs_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.51.3 Example: Get a single config, including preference, family lists and tasks using this config

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <get_configs config_id="daba56c8-73ec-11df-a475-002264764cea"
              preferences="1"
              families="1"
              tasks="1"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <get_configs_response status="200"
                       status_text="OK">
   <config id="daba56c8-73ec-11df-a475-002264764cea">
     <name>Full and fast</name>
     <comment>
       All NVT's; optimized by using previously collected information.
     </comment>
     <family_count>
       4
       <growing>1</growing>
     </family_count>
     <nvt_count>
       12
       <growing>1</growing>
     </nvt_count>
     <in_use>1</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <tasks>
       <task id="13bb418a-4220-4575-b35b-ec398bff7417">
         <name>Web Servers</name>
       </task>
       ...
     </tasks>
     <families>
       <family>
         <name>Credentials</name>
         <nvt_count>8</nvt_count>
         <max_nvt_count>8</max_nvt_count>
         <growing>1</growing>
       </family>
       ...
     </families>
     <preferences>
       <preference>
         <nvt oid="1.3.6.1.4.1.25623.1.0.10330">
           <name>Services</name>
         </nvt>
         <name>Network connection timeout :</name>
         <type>entry</type>
         <value>5</value>
       </preference>
       ...
     </preferences>
   </config>
   ...
 </get_configs_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.52 Command get_aggregates

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          In short: Get aggregates of various resources.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The client uses the get_aggregate command to get aggregated data like counts or averages of various resources.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Unlike other get_... commands, get_aggregates ignores the filter keywords "first" and "rows". It also does not support selecting single items by id or getting items from the trashcan.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.52.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @filter (text) Filter term to use to filter query of the resources to aggregate.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @filt_id (uuid) ID of filter to use to filter query of the resources to aggregate.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @type (text) The OMP resource type to gather data from.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @data_column (text) The column to get the data to aggregate from.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @group_column (text) The field to group the resources by.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <aggregate> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              A collection of aggregated data of the selected type.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <data_type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The resource type the data is aggregated from.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <data_column> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The column the data is aggregated from.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <group_column> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The column the data is grouped by.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • One of
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <group> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Aggregate data for a group of resources.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Value of the group column.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Number of resources in the group.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <c_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Cumulative number of resources in all groups up to and including the current one.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • The group?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <min>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Minimum value of the data column.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <max>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Maximum value of the data column.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <mean>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Arithmetic mean of the numeric values of the data.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <sum>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Sum of the numeric values of the data column.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <c_sum>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Cumulative sum of the numeric values of the data column for all groups up to and including the current one.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <overall>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Aggregate data for all resources of the selected type.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Overall number of resources.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <min>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Overall minimum value of the data column.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <max>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Overall maximum value of the data column.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <mean>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Overall arithmetic mean of the numeric values of the data.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <sum>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Overall sum of the numeric values of the data column.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <column_info>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Info on the aggregate columns.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <aggregate_column> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Info on one column of the aggregate.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Name of the column as it appears in the group or overall element.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <stat>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The type of statistic in the column, e.g. min, max, mean.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The resource type.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Name of the column in the non-aggregated table.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <data_type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The data type of the column, e.g. integer, text, cvss.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The filter text.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.52.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              get_aggregates
 = element get_aggregates
     {
       attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute type { text }
       & attribute data_column { text }?
       & attribute group_column { text }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              get_aggregates_response
 = element get_aggregates_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_aggregates_response_aggregate*
       & get_aggregates_response_filters
     }

get_aggregates_response_aggregate
 = element aggregate
     {
       get_aggregates_response_aggregate_data_type
       & get_aggregates_response_aggregate_data_column?
       & get_aggregates_response_aggregate_group_column?
       & ( get_aggregates_response_aggregate_group*
           | get_aggregates_response_aggregate_overall )
       & get_aggregates_response_aggregate_column_info
     }

get_aggregates_response_aggregate_data_type
 = element data_type
     {
       text
     }

get_aggregates_response_aggregate_data_column
 = element data_column
     {
       text
     }

get_aggregates_response_aggregate_group_column
 = element group_column
     {
       text
     }

get_aggregates_response_aggregate_group
 = element group
     {
       text
     }

get_aggregates_response_aggregate_group
 = element group
     {
       get_aggregates_response_aggregate_group_value
       & get_aggregates_response_aggregate_group_count
       & get_aggregates_response_aggregate_group_c_count
       & ( get_aggregates_response_aggregate_group_min
           & get_aggregates_response_aggregate_group_max
           & get_aggregates_response_aggregate_group_mean
           & get_aggregates_response_aggregate_group_sum
           & get_aggregates_response_aggregate_group_c_sum )?
     }

get_aggregates_response_aggregate_group_value
 = element value
     {
       text
     }

get_aggregates_response_aggregate_group_count
 = element count
     {
       integer
     }

get_aggregates_response_aggregate_group_c_count
 = element c_count
     {
       integer
     }

get_aggregates_response_aggregate_group_min
 = element min
     {
       text
     }

get_aggregates_response_aggregate_group_max
 = element max
     {
       text
     }

get_aggregates_response_aggregate_group_mean
 = element mean
     {
       text
     }

get_aggregates_response_aggregate_group_sum
 = element sum
     {
       text
     }

get_aggregates_response_aggregate_group_c_sum
 = element c_sum
     {
       text
     }

get_aggregates_response_aggregate_overall
 = element overall
     {
       get_aggregates_response_aggregate_overall_count
       & get_aggregates_response_aggregate_overall_min
       & get_aggregates_response_aggregate_overall_max
       & get_aggregates_response_aggregate_overall_mean
       & get_aggregates_response_aggregate_overall_sum
     }

get_aggregates_response_aggregate_overall_count
 = element count
     {
       integer
     }

get_aggregates_response_aggregate_overall_min
 = element min
     {
       text
     }

get_aggregates_response_aggregate_overall_max
 = element max
     {
       text
     }

get_aggregates_response_aggregate_overall_mean
 = element mean
     {
       text
     }

get_aggregates_response_aggregate_overall_sum
 = element sum
     {
       text
     }

get_aggregates_response_aggregate_column_info
 = element column_info
     {
       get_aggregates_response_aggregate_column_info_aggregate_column*
     }

get_aggregates_response_aggregate_column_info_aggregate_column
 = element aggregate_column
     {
       get_aggregates_response_aggregate_column_info_aggregate_column_name
       & get_aggregates_response_aggregate_column_info_aggregate_column_stat
       & get_aggregates_response_aggregate_column_info_aggregate_column_type
       & get_aggregates_response_aggregate_column_info_aggregate_column_column
       & get_aggregates_response_aggregate_column_info_aggregate_column_data_type
     }

get_aggregates_response_aggregate_column_info_aggregate_column_name
 = element name
     {
       text
     }

get_aggregates_response_aggregate_column_info_aggregate_column_stat
 = element stat
     {
       text
     }

get_aggregates_response_aggregate_column_info_aggregate_column_type
 = element type
     {
       text
     }

get_aggregates_response_aggregate_column_info_aggregate_column_column
 = element column
     {
       text
     }

get_aggregates_response_aggregate_column_info_aggregate_column_data_type
 = element data_type
     {
       text
     }

get_aggregates_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_aggregates_response_filters_term
       & get_aggregates_response_filters_name?
       & get_aggregates_response_filters_keywords
     }

get_aggregates_response_filters_term
 = element term
     {
       text
     }

get_aggregates_response_filters_name
 = element name
     {
       text
     }

get_aggregates_response_filters_keywords
 = element keywords
     {
       get_aggregates_response_filters_keywords_keyword*
     }

get_aggregates_response_filters_keywords_keyword
 = element keyword
     {
       get_aggregates_response_filters_keywords_keyword_column
       & get_aggregates_response_filters_keywords_keyword_relation
       & get_aggregates_response_filters_keywords_keyword_value
     }

get_aggregates_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_aggregates_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_aggregates_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.52.3 Example: Get severity statistics of NVTs by family

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_aggregates type="nvt"
                 group_column="family"
                 data_column="severity"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_aggregates_response status_text="OK"
                          status="200">
   <aggregate>
     <data_type>nvt</data_type>
     <data_column>severity</data_column>
     <group_column>family</group_column>
     <group>
       <value>AIX Local Security Checks</value>
       <count>1</count>
       <c_count>1</c_count>
       <min>3.3</min>
       <max>3.3</max>
       <mean>3.3</mean>
       <sum>3.3</sum>
       <c_sum>3.3</c_sum>
     </group>
     <group>
       <value>Brute force attacks</value>
       <count>8</count>
       <c_count>9</c_count>
       <min>0</min>
       <max>7.8</max>
       <mean>6.275</mean>
       <sum>50.2</sum>
       <c_sum>53.5</c_sum>
     </group>
     <group>
       <value>Buffer overflow</value>
       <count>519</count>
       <c_count>528</c_count>
       <min>10</min>
       <max>9.7</max>
       <mean>8.63083</mean>
       <sum>4479.4</sum>
       <c_sum>4532.9</c_sum>
     </group>
     ...
     <column_info>
       <aggregate_column>
         <name>value</name>
         <stat>value</stat>
         <type>nvt</type>
         <column>family</column>
         <data_type>text</data_type>
       </aggregate_column>
       <aggregate_column>
         <name>count</name>
         <stat>count</stat>
         <type>nvt</type>
         <column/>
         <data_type>integer</data_type>
       </aggregate_column>
       <aggregate_column>
         <name>c_count</name>
         <stat>c_count</stat>
         <type>nvt</type>
         <column/>
         <data_type>integer</data_type>
       </aggregate_column>
       <aggregate_column>
         <name>min</name>
         <stat>min</stat>
         <type>nvt</type>
         <column>severity</column>
         <data_type>cvss</data_type>
       </aggregate_column>
       ...
     </column_info>
   </aggregate>
   <filters id="">
     <term>first=1 rows=-1 sort=name</term>
     <keywords>
       <keyword>
         <column>first</column>
         <relation>=</relation>
         <value>1</value>
       </keyword>
       <keyword>
         <column>rows</column>
         <relation>=</relation>
         <value>-1</value>
       </keyword>
       <keyword>
         <column>sort</column>
         <relation>=</relation>
         <value>name</value>
       </keyword>
     </keywords>
   </filters>
 </get_aggregates_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.53 Command get_alerts

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              In short: Get one or many alerts.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The client uses the get_alerts command to get alert information. If the command sent by the client was valid, the manager will reply with a list of alerts to the client.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.53.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @alert_id (uuid) ID of single alert to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @filt_id (uuid) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @trash (boolean) Whether to get the trashcan alerts instead.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @tasks (boolean) Whether to get the tasks using the alerts.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <alert> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <owner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Owner of the alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The name of the owner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The name of the alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The comment on the alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <creation_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Creation time of the alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <modification_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Last time the alert was modified.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <in_use>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Whether any tasks are using the alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <writable>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Whether the alert is writable or not.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <permissions>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Permissions that the current user has on the alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <permission> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The name of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <user_tags>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Info on tags attached to the alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Number of attached tags.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <tag> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Short info on an individual tag (only if details were requested).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @id (uuid) UUID of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Value of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Comment for the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <condition>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The condition that must be satisfied for the alert to occur.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <data> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Some data that defines the condition.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The name of the condition data.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <event>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The event that must happen for the alert to occur.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <data> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Some data that defines the event.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The name of the event data.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <method>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The method by which he alert must occur.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <data> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Some data that defines the method.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The name of the method data.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <filter>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The name of the filter.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Permissions the user has on the filter.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <trash>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Whether the filter is in the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <tasks> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Tasks using the alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <task> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The name of the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Permissions the user has on the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <alerts>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @start (integer) First alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @max (integer) Maximum number of alerts.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <alert_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Number of alerts after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Number of alerts on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.53.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      get_alerts
 = element get_alerts
     {
       attribute alert_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute trash { boolean }?
       & attribute tasks { boolean }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      get_alerts_response
 = element get_alerts_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_alerts_response_alert*
       & get_alerts_response_filters
       & get_alerts_response_sort
       & get_alerts_response_alerts
       & get_alerts_response_alert_count
     }

get_alerts_response_alert
 = element alert
     {
       attribute id { uuid }
       & get_alerts_response_alert_owner
       & get_alerts_response_alert_name
       & get_alerts_response_alert_comment
       & get_alerts_response_alert_creation_time
       & get_alerts_response_alert_modification_time
       & get_alerts_response_alert_in_use
       & get_alerts_response_alert_writable
       & get_alerts_response_alert_permissions
       & get_alerts_response_alert_user_tags
       & get_alerts_response_alert_condition
       & get_alerts_response_alert_event
       & get_alerts_response_alert_method
       & get_alerts_response_alert_filter
       & get_alerts_response_alert_tasks?
     }

get_alerts_response_alert_owner
 = element owner
     {
       get_alerts_response_alert_owner_name
     }

get_alerts_response_alert_owner_name
 = element name
     {
       name
     }

get_alerts_response_alert_name
 = element name
     {
       name
     }

get_alerts_response_alert_comment
 = element comment
     {
       text
     }

get_alerts_response_alert_in_use
 = element in_use
     {
       boolean
     }

get_alerts_response_alert_writable
 = element writable
     {
       boolean
     }

get_alerts_response_alert_creation_time
 = element creation_time
     {
       iso_time
     }

get_alerts_response_alert_modification_time
 = element modification_time
     {
       iso_time
     }

get_alerts_response_alert_permissions
 = element permissions
     {
       get_alerts_response_alert_permissions_permission*
     }

get_alerts_response_alert_permissions_permission
 = element permission
     {
       get_alerts_response_alert_permissions_permission_name
     }

get_alerts_response_alert_permissions_permission_name
 = element name
     {
       name
     }

get_alerts_response_alert_user_tags
 = element user_tags
     {
       get_alerts_response_alert_user_tags_count
       & get_alerts_response_alert_user_tags_tag*
     }

get_alerts_response_alert_user_tags_count
 = element count
     {
       integer
     }

get_alerts_response_alert_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & get_alerts_response_alert_user_tags_tag_name
       & get_alerts_response_alert_user_tags_tag_value
       & get_alerts_response_alert_user_tags_tag_comment
     }

get_alerts_response_alert_user_tags_tag_name
 = element name
     {
       text
     }

get_alerts_response_alert_user_tags_tag_value
 = element value
     {
       text
     }

get_alerts_response_alert_user_tags_tag_comment
 = element comment
     {
       text
     }

get_alerts_response_alert_condition
 = element condition
     {
       text
       & get_alerts_response_alert_condition_data*
     }

get_alerts_response_alert_condition_data
 = element data
     {
       text
       & get_alerts_response_alert_condition_data_name
     }

get_alerts_response_alert_condition_data_name
 = element name
     {
       text
     }

get_alerts_response_alert_event
 = element event
     {
       text
       & get_alerts_response_alert_event_data*
     }

get_alerts_response_alert_event_data
 = element data
     {
       text
       & get_alerts_response_alert_event_data_name
     }

get_alerts_response_alert_event_data_name
 = element name
     {
       text
     }

get_alerts_response_alert_method
 = element method
     {
       text
       & get_alerts_response_alert_method_data*
     }

get_alerts_response_alert_method_data
 = element data
     {
       text
       & get_alerts_response_alert_method_data_name
     }

get_alerts_response_alert_method_data_name
 = element name
     {
       text
     }

get_alerts_response_alert_filter
 = element filter
     {
       attribute id { uuid }?
       & get_alerts_response_alert_filter_name
       & get_alerts_response_alert_filter_permissions?
       & get_alerts_response_alert_filter_trash
     }

get_alerts_response_alert_filter_name
 = element name
     {
       name
     }

get_alerts_response_alert_filter_permissions
 = element permissions
     {
       ""
     }

get_alerts_response_alert_filter_trash
 = element trash
     {
       boolean
     }

get_alerts_response_alert_tasks
 = element tasks
     {
       get_alerts_response_alert_tasks_task*
     }

get_alerts_response_alert_tasks_task
 = element task
     {
       attribute id { uuid }
       & get_alerts_response_alert_tasks_task_name
       & get_alerts_response_alert_tasks_task_permissions?
     }

get_alerts_response_alert_tasks_task_name
 = element name
     {
       name
     }

get_alerts_response_alert_tasks_task_permissions
 = element permissions
     {
       ""
     }

get_alerts_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_alerts_response_filters_term
       & get_alerts_response_filters_name?
       & get_alerts_response_filters_keywords
     }

get_alerts_response_filters_term
 = element term
     {
       text
     }

get_alerts_response_filters_name
 = element name
     {
       text
     }

get_alerts_response_filters_keywords
 = element keywords
     {
       get_alerts_response_filters_keywords_keyword*
     }

get_alerts_response_filters_keywords_keyword
 = element keyword
     {
       get_alerts_response_filters_keywords_keyword_column
       & get_alerts_response_filters_keywords_keyword_relation
       & get_alerts_response_filters_keywords_keyword_value
     }

get_alerts_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_alerts_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_alerts_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_alerts_response_sort
 = element sort
     {
       text
       & get_alerts_response_sort_field
     }

get_alerts_response_sort_field
 = element field
     {
       get_alerts_response_sort_field_order
     }

get_alerts_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_alerts_response_alerts
 = element alerts
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_alerts_response_alert_count
 = element alert_count
     {
       get_alerts_response_alert_count_filtered
       & get_alerts_response_alert_count_page
     }

get_alerts_response_alert_count_filtered
 = element filtered
     {
       integer
     }

get_alerts_response_alert_count_page
 = element page
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.53.3 Example: Get the alerts

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <get_alerts/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <get_alerts_response status="200"
                      status_text="OK">
   <alert id="6181e65d-8ba0-4937-9c44-8f2b10b0def7">
     <name>Team alert</name>
     <comment/>
     <creation_time>2012-04-27T12:44:00+01:00</creation_time>
     <modification_time>2012-08-28T12:14:00+01:00</modification_time>
     <writable>1</writable>
     <in_use>1</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <condition>
       Threat level at least
       <data>
         High
         <name>level</name>
       </data>
     </condition>
     <event>
       Task run status changed
       <data>
         Done
         <name>status</name>
       </data>
     </event>
     <method>
       Email
       <data>
         team@example.org
         <name>to_address</name>
       </data>
       <data>
         admin@example.org
         <name>from_address</name>
       </data>
       <data>
         0
         <name>notice</name>
       </data>
     </method>
   </alert>
   ...
 </get_alerts_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.54 Command get_filters

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Get one or many filters.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the get_filters command to get filter information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.54.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @filter_id (uuid) ID of single filter to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @filt_id (uuid) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @trash (boolean) Whether to get the trashcan filters instead.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @alerts (boolean) Whether to include list of alerts that use the filter.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <filter> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <owner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Owner of the filter.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The name of the owner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The name of the filter.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The comment on the filter.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Resource type filter applies to. Blank for all.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <creation_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Date and time the filter was created.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <modification_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Date and time the filter was last modified.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <in_use>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Whether any tasks are using the filter.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <writable>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Whether the filter is writable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <permissions>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Permissions that the current user has on the filter.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <permission> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The name of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <user_tags>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Info on tags attached to the filter.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Number of attached tags.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <tag> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Short info on an individual tag (only if details were requested).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @id (uuid) UUID of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Value of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Comment for the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <alerts> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        All alerts using the filter.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <alert> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The name of the alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Permissions the user has on the alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @start (integer) First filter.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @max (integer) Maximum number of filters.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @start (integer) First filter.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @max (integer) Maximum number of filters.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <filter_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Number of filters after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Number of filters on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.54.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                get_filters
 = element get_filters
     {
       attribute filter_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute trash { boolean }?
       & attribute alerts { boolean }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                get_filters_response
 = element get_filters_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_filters_response_filter*
       & get_filters_response_filters
       & get_filters_response_sort
       & get_filters_response_filters
       & get_filters_response_filter_count
     }

get_filters_response_filter
 = element filter
     {
       attribute id { uuid }
       & get_filters_response_filter_owner
       & get_filters_response_filter_name
       & get_filters_response_filter_comment
       & get_filters_response_filter_term
       & get_filters_response_filter_type
       & get_filters_response_filter_creation_time
       & get_filters_response_filter_modification_time
       & get_filters_response_filter_in_use
       & get_filters_response_filter_writable
       & get_filters_response_filter_permissions
       & get_filters_response_filter_user_tags
       & get_filters_response_filter_alerts?
     }

get_filters_response_filter_owner
 = element owner
     {
       get_filters_response_filter_owner_name
     }

get_filters_response_filter_owner_name
 = element name
     {
       name
     }

get_filters_response_filter_name
 = element name
     {
       name
     }

get_filters_response_filter_comment
 = element comment
     {
       text
     }

get_filters_response_filter_term
 = element term
     {
       text
     }

get_filters_response_filter_type
 = element type
     {
       text
     }

get_filters_response_filter_creation_time
 = element creation_time
     {
       iso_time
     }

get_filters_response_filter_modification_time
 = element modification_time
     {
       iso_time
     }

get_filters_response_filter_in_use
 = element in_use
     {
       boolean
     }

get_filters_response_filter_writable
 = element writable
     {
       boolean
     }

get_filters_response_filter_permissions
 = element permissions
     {
       get_filters_response_filter_permissions_permission*
     }

get_filters_response_filter_permissions_permission
 = element permission
     {
       get_filters_response_filter_permissions_permission_name
     }

get_filters_response_filter_permissions_permission_name
 = element name
     {
       name
     }

get_filters_response_filter_user_tags
 = element user_tags
     {
       get_filters_response_filter_user_tags_count
       & get_filters_response_filter_user_tags_tag*
     }

get_filters_response_filter_user_tags_count
 = element count
     {
       integer
     }

get_filters_response_filter_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & get_filters_response_filter_user_tags_tag_name
       & get_filters_response_filter_user_tags_tag_value
       & get_filters_response_filter_user_tags_tag_comment
     }

get_filters_response_filter_user_tags_tag_name
 = element name
     {
       text
     }

get_filters_response_filter_user_tags_tag_value
 = element value
     {
       text
     }

get_filters_response_filter_user_tags_tag_comment
 = element comment
     {
       text
     }

get_filters_response_filter_alerts
 = element alerts
     {
       get_filters_response_filter_alerts_alert*
     }

get_filters_response_filter_alerts_alert
 = element alert
     {
       attribute id { uuid }
       & get_filters_response_filter_alerts_alert_name
       & get_filters_response_filter_alerts_alert_permissions?
     }

get_filters_response_filter_alerts_alert_name
 = element name
     {
       name
     }

get_filters_response_filter_alerts_alert_permissions
 = element permissions
     {
       ""
     }

get_filters_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_filters_response_filters_term
       & get_filters_response_filters_name?
       & get_filters_response_filters_keywords
     }

get_filters_response_filters_term
 = element term
     {
       text
     }

get_filters_response_filters_name
 = element name
     {
       text
     }

get_filters_response_filters_keywords
 = element keywords
     {
       get_filters_response_filters_keywords_keyword*
     }

get_filters_response_filters_keywords_keyword
 = element keyword
     {
       get_filters_response_filters_keywords_keyword_column
       & get_filters_response_filters_keywords_keyword_relation
       & get_filters_response_filters_keywords_keyword_value
     }

get_filters_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_filters_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_filters_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_filters_response_sort
 = element sort
     {
       text
       & get_filters_response_sort_field
     }

get_filters_response_sort_field
 = element field
     {
       get_filters_response_sort_field_order
     }

get_filters_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_filters_response_filters
 = element filters
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_filters_response_filter_count
 = element filter_count
     {
       get_filters_response_filter_count_filtered
       & get_filters_response_filter_count_page
     }

get_filters_response_filter_count_filtered
 = element filtered
     {
       integer
     }

get_filters_response_filter_count_page
 = element page
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.54.3 Example: Get one or many filters

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <get_filters/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <get_filters_response status="200"
                       status_text="OK">
   <filter id="b493b7a8-7489-11df-a3ec-001164764cea">
     <name>Single Targets</name>
     <comment>Targets with only one host</comment>
     <term>ips=1 first=1 rows=-2</term>
     <type>target</type>
     <in_use>1</in_use>
     <writable>1</writable>
     <user_tags>
       <count>0</count>
     </user_tags>
     <creation_time>Sun Jun 27 08:49:46 2010</creation_time>
     <modification_time>Sun Jun 27 08:49:46 2010</modification_time>
   </filter>
   ...
 </get_filters_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.54.3 Example: Get single filter, including alerts that use the filter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <get_filters filter_id="c33864a9-d3fd-44b3-8717-972bfb01dfc0"
              tasks="1"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <get_filters_response status="200"
                       status_text="OK">
   <filter id="c33864a9-d3fd-44b3-8717-972bfb01dfc0">
     <name>Local</name>
     <comment>Any item with name containing 'local'.</comment>
     <term>name~local first=1 rows=-2</term>
     <type/>
     <in_use>1</in_use>
     <writable>1</writable>
     <user_tags>
       <count>0</count>
     </user_tags>
     <creation_time>Sun Jun 27 08:49:43 2010</creation_time>
     <modification_time>Sun Jun 27 08:49:43 2010</modification_time>
     <alerts>
       <alert id="13bb418a-4220-4575-b35b-ec398bff7418">
         <name>Local Mailer</name>
       </alert>
       ...
     </alerts>
   </filter>
 </get_filters_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.55 Command get_groups

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                In short: Get one or many groups.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The client uses the get_groups command to get group information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.55.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @group_id (uuid) ID of single group to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @filt_id (uuid) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @trash (boolean) Whether to get the trashcan groups instead.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <group> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <owner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Owner of the group.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The name of the owner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The name of the group.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The comment on the group.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <creation_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Date and time the group was created.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <modification_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Date and time the group was last modified.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <writable>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Whether the group is writable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <in_use>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Whether the group is in use.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <permissions>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Permissions that the current user has on the group.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <permission> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The name of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <user_tags>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Info on tags attached to the group.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Number of attached tags.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <tag> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Short info on an individual tag (only if details were requested).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @id (uuid) UUID of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Value of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Comment for the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <users>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              A comma-separated list of the users in the group.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <groups>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @start (integer) First group.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @max (integer) Maximum number of groups.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <group_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Number of groups after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Number of groups on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.55.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          get_groups
 = element get_groups
     {
       attribute group_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute trash { boolean }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          get_groups_response
 = element get_groups_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_groups_response_group*
       & get_groups_response_filters
       & get_groups_response_sort
       & get_groups_response_groups
       & get_groups_response_group_count
     }

get_groups_response_group
 = element group
     {
       attribute id { uuid }
       & get_groups_response_group_owner
       & get_groups_response_group_name
       & get_groups_response_group_comment
       & get_groups_response_group_creation_time
       & get_groups_response_group_modification_time
       & get_groups_response_group_writable
       & get_groups_response_group_in_use
       & get_groups_response_group_permissions
       & get_groups_response_group_user_tags
       & get_groups_response_group_users
     }

get_groups_response_group_owner
 = element owner
     {
       get_groups_response_group_owner_name
     }

get_groups_response_group_owner_name
 = element name
     {
       name
     }

get_groups_response_group_name
 = element name
     {
       name
     }

get_groups_response_group_comment
 = element comment
     {
       text
     }

get_groups_response_group_creation_time
 = element creation_time
     {
       iso_time
     }

get_groups_response_group_modification_time
 = element modification_time
     {
       iso_time
     }

get_groups_response_group_users
 = element users
     {
       text
     }

get_groups_response_group_writable
 = element writable
     {
       boolean
     }

get_groups_response_group_in_use
 = element in_use
     {
       boolean
     }

get_groups_response_group_permissions
 = element permissions
     {
       get_groups_response_group_permissions_permission*
     }

get_groups_response_group_permissions_permission
 = element permission
     {
       get_groups_response_group_permissions_permission_name
     }

get_groups_response_group_permissions_permission_name
 = element name
     {
       name
     }

get_groups_response_group_user_tags
 = element user_tags
     {
       get_groups_response_group_user_tags_count
       & get_groups_response_group_user_tags_tag*
     }

get_groups_response_group_user_tags_count
 = element count
     {
       integer
     }

get_groups_response_group_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & get_groups_response_group_user_tags_tag_name
       & get_groups_response_group_user_tags_tag_value
       & get_groups_response_group_user_tags_tag_comment
     }

get_groups_response_group_user_tags_tag_name
 = element name
     {
       text
     }

get_groups_response_group_user_tags_tag_value
 = element value
     {
       text
     }

get_groups_response_group_user_tags_tag_comment
 = element comment
     {
       text
     }

get_groups_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_groups_response_filters_term
       & get_groups_response_filters_name?
       & get_groups_response_filters_keywords
     }

get_groups_response_filters_term
 = element term
     {
       text
     }

get_groups_response_filters_name
 = element name
     {
       text
     }

get_groups_response_filters_keywords
 = element keywords
     {
       get_groups_response_filters_keywords_keyword*
     }

get_groups_response_filters_keywords_keyword
 = element keyword
     {
       get_groups_response_filters_keywords_keyword_column
       & get_groups_response_filters_keywords_keyword_relation
       & get_groups_response_filters_keywords_keyword_value
     }

get_groups_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_groups_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_groups_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_groups_response_sort
 = element sort
     {
       text
       & get_groups_response_sort_field
     }

get_groups_response_sort_field
 = element field
     {
       get_groups_response_sort_field_order
     }

get_groups_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_groups_response_groups
 = element groups
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_groups_response_group_count
 = element group_count
     {
       get_groups_response_group_count_filtered
       & get_groups_response_group_count_page
     }

get_groups_response_group_count_filtered
 = element filtered
     {
       integer
     }

get_groups_response_group_count_page
 = element page
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.55.3 Example: Get one or many groups

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <get_groups/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <get_groups_response status="200"
                      status_text="OK">
   <group id="b493b7a8-7489-11df-a3ec-002264764cea">
     <name>Management</name>
     <comment>Managers</comment>
     <creation_time>Sun Jun 27 08:49:43 2010</creation_time>
     <modification_time>Sun Jun 27 08:49:43 2010</modification_time>
     <writable>1</writable>
     <in_use>0</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <users>sarah, frank</users>
   </group>
   ...
   <filters id="">
     <term>first=1 rows=-1 sort=name</term>
     <keywords>
       <keyword>
         <column>first</column>
         <relation>=</relation>
         <value>1</value>
       </keyword>
       ...
     </keywords>
   </filters>
   <sort>
     <field>
       name
       <order>ascending</order>
     </field>
   </sort>
   <groups max="-1"
           start="1"/>
   <group_count>
     1
     <filtered>1</filtered>
     <page>1</page>
   </group_count>
 </get_groups_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.56 Command get_info

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          In short: Get information for items of given type.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The client uses the get_info command to get information about static data from an external source, like CVE or CPE. If the command sent by the client was valid, the manager will reply with a list of info elements of a given type to the client.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.56.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @type (text) Type must be either CERT_BUND_ADV, CPE, CVE, DFN_CERT_ADV, OVALDEF, NVT or ALLINFO.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @name (text) Name or identifier of the requested information.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @info_id (text) ID of single info to get. Conflicts with name.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @filt_id (uuid) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @details (boolean) Whether to include information about references to this information.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <info> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @id (integer) A unique number identifying this info, if available.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <owner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Owner of the info.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The name of the owner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The name of the info.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The comment on the info.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <creation_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Date and time the info was created.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <modification_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Date and time the info was last modified.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <permissions>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Permissions that the current user has on the info.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <permission> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The name of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <user_tags>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Info on tags attached to the info.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Number of attached tags.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <tag> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Short info on an individual tag (only if details were requested).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @id (uuid) UUID of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Value of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Comment for the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <update_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Date and time the source of the info was read.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • One of
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <cert_bund_adv>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        An CERT-Bund advisory info element.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <title>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Title of the advisory.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <summary>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Summary text of the advisory.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <max_cvss>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Highest CVSS score of CVEs referenced by the advisory.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <cve_refs>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Number of CVEs referenced by this advisory.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <raw_data> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Source representation of the information. Only when details were requested.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <cpe>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  A CPE info element.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <nvd_id>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The NVD ID of the CPE.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <title> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The title of the CPE.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <max_cvss>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The highest CVSS recorder for this CPE.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <cve_refs>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The number CVE of references to this CPE.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <status>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The status of this CPE.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <cves> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              CVEs referring to this CPE. Only when details were requested.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <cve> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                CVE referring to this CPE.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <raw_data> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Source representation of the information. Only when details were requested.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <cve>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                A CVE info element.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <cvss>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  CVSS Base Score.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <vector>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    CVSS Access Vector metric.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <complexity>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      CVSS Attack Complexity metric.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <authentication>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        CVSS Authentication metric.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <confidentiality_impact>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          CVSS Confidentiality impact metric.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <integrity_impact>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            CVSS Integrity impact metric.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <availability_impact>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              CVSS Availability impact metric.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <description>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The CVE's description.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <products>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Space separated list of CPEs affected by this.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <nvts> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    NVTs addressing this CVE. Only when details were requested.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <nvt> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      NVT referring to this CPE.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @oid (oid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Name of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <cert> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      List of CERT advisories referencing this CVE.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <cert_ref> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        A CERT advisory reference.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @type (text) Type of the advisory (e.g. "DFN-CERT", "CERT-BUND").
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The name / ID of the advisory.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <title>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The title of the advisory.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <warning> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            A warning message, e.g. when the database is unavailable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <raw_data> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Source representation of the information. Only when details were requested.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <dfn_cert_adv>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            An DFN-CERT advisory info element.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <title>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Title of the advisory.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <summary>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Summary text of the advisory.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <max_cvss>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Highest CVSS score of CVEs referenced by the advisory.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <cve_refs>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Number of CVEs referenced by this advisory.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <raw_data> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Source representation of the information. Only when details were requested.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <ovaldef>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      An OVAL definition info element.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <version>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Version number of the OVAL definition.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <deprecated>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Whether the definition is deprecated.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <status>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Lifecycle status text of the definition.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <class>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Definition class of the definition.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <title>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Title of the definition.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <max_cvss>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Highest CVSS score of CVEs referenced by the definition.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <cve_refs>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Number of CVEs referenced by the definition.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <file>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Path to the source xml file, relative to the SCAP data directory.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <description> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Longer description of the definition. Only when details were requested.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <raw_data> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Source representation of the information. Only when details were requested.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <nvt>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          A NVT info element.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <allinfo>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            A SecInfo entry. Could be CPE, CVE, NVT, OVALDEF or DFN-CERT Advisory.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Type of SecInfo entry.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <extra>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Extra information from the entry like title or description.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <severity>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Severity rating (CVSS score) of the entry.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <details>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Are details included in this response.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <info_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Number of info elements after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Number of info elements on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.56.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            get_info
 = element get_info
     {
       attribute type { text }
       & attribute name { text }?
       & attribute info_id { text }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute details { boolean }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            get_info_response
 = element get_info_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_info_response_info*
       & get_info_response_filters
       & get_info_response_sort
       & get_info_response_details
       & get_info_response_info_count
     }

get_info_response_info
 = element info
     {
       attribute id { integer }?
       & get_info_response_info_owner
       & get_info_response_info_name
       & get_info_response_info_comment
       & get_info_response_info_creation_time
       & get_info_response_info_modification_time
       & get_info_response_info_permissions
       & get_info_response_info_user_tags
       & get_info_response_info_update_time
       & ( get_info_response_info_cert_bund_adv
           | get_info_response_info_cpe
           | get_info_response_info_cve
           | get_info_response_info_dfn_cert_adv
           | get_info_response_info_ovaldef
           | get_info_response_info_nvt
           | get_info_response_info_allinfo )
     }

get_info_response_info_owner
 = element owner
     {
       get_info_response_info_owner_name
     }

get_info_response_info_owner_name
 = element name
     {
       name
     }

get_info_response_info_name
 = element name
     {
       name
     }

get_info_response_info_comment
 = element comment
     {
       text
     }

get_info_response_info_creation_time
 = element creation_time
     {
       iso_time
     }

get_info_response_info_modification_time
 = element modification_time
     {
       iso_time
     }

get_info_response_info_update_time
 = element update_time
     {
       iso_time
     }

get_info_response_info_permissions
 = element permissions
     {
       get_info_response_info_permissions_permission*
     }

get_info_response_info_permissions_permission
 = element permission
     {
       get_info_response_info_permissions_permission_name
     }

get_info_response_info_permissions_permission_name
 = element name
     {
       name
     }

get_info_response_info_user_tags
 = element user_tags
     {
       get_info_response_info_user_tags_count
       & get_info_response_info_user_tags_tag*
     }

get_info_response_info_user_tags_count
 = element count
     {
       integer
     }

get_info_response_info_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & get_info_response_info_user_tags_tag_name
       & get_info_response_info_user_tags_tag_value
       & get_info_response_info_user_tags_tag_comment
     }

get_info_response_info_user_tags_tag_name
 = element name
     {
       text
     }

get_info_response_info_user_tags_tag_value
 = element value
     {
       text
     }

get_info_response_info_user_tags_tag_comment
 = element comment
     {
       text
     }

get_info_response_info_cert_bund_adv
 = element cert_bund_adv
     {
       get_info_response_info_cert_bund_adv_title
       & get_info_response_info_cert_bund_adv_summary
       & get_info_response_info_cert_bund_adv_max_cvss
       & get_info_response_info_cert_bund_adv_cve_refs
       & get_info_response_info_cert_bund_adv_raw_data?
     }

get_info_response_info_cert_bund_adv_title
 = element title
     {
       text
     }

get_info_response_info_cert_bund_adv_summary
 = element summary
     {
       text
     }

get_info_response_info_cert_bund_adv_max_cvss
 = element max_cvss
     {
       text
     }

get_info_response_info_cert_bund_adv_cve_refs
 = element cve_refs
     {
       integer
     }

get_info_response_info_cert_bund_adv_raw_data
 = element raw_data
     {
       text
     }

get_info_response_info_cpe
 = element cpe
     {
       get_info_response_info_cpe_nvd_id
       & get_info_response_info_cpe_title?
       & get_info_response_info_cpe_max_cvss
       & get_info_response_info_cpe_cve_refs
       & get_info_response_info_cpe_status
       & get_info_response_info_cpe_cves?
       & get_info_response_info_cpe_raw_data?
     }

get_info_response_info_cpe_nvd_id
 = element nvd_id
     {
       text
     }

get_info_response_info_cpe_title
 = element title
     {
       text
     }

get_info_response_info_cpe_max_cvss
 = element max_cvss
     {
       integer
     }

get_info_response_info_cpe_cve_refs
 = element cve_refs
     {
       integer
     }

get_info_response_info_cpe_status
 = element status
     {
       text
     }

get_info_response_info_cpe_cves
 = element cves
     {
       get_info_response_info_cpe_cves_cve*
     }

get_info_response_info_cpe_cves_cve
 = element cve
     {
       text
     }

get_info_response_info_cpe_raw_data
 = element raw_data
     {
       text
     }

get_info_response_info_nvt
 = element nvt
     {
       text
     }

get_info_response_info_cve
 = element cve
     {
       get_info_response_info_cve_cvss
       & get_info_response_info_cve_vector
       & get_info_response_info_cve_complexity
       & get_info_response_info_cve_authentication
       & get_info_response_info_cve_confidentiality_impact
       & get_info_response_info_cve_integrity_impact
       & get_info_response_info_cve_availability_impact
       & get_info_response_info_cve_description
       & get_info_response_info_cve_products
       & get_info_response_info_cve_nvts?
       & get_info_response_info_cve_cert?
       & get_info_response_info_cve_raw_data?
     }

get_info_response_info_cve_cvss
 = element cvss
     {
       text
     }

get_info_response_info_cve_vector
 = element vector
     {
       text
     }

get_info_response_info_cve_complexity
 = element complexity
     {
       text
     }

get_info_response_info_cve_authentication
 = element authentication
     {
       text
     }

get_info_response_info_cve_confidentiality_impact
 = element confidentiality_impact
     {
       text
     }

get_info_response_info_cve_integrity_impact
 = element integrity_impact
     {
       text
     }

get_info_response_info_cve_availability_impact
 = element availability_impact
     {
       text
     }

get_info_response_info_cve_description
 = element description
     {
       text
     }

get_info_response_info_cve_products
 = element products
     {
       text
     }

get_info_response_info_cve_nvts
 = element nvts
     {
       get_info_response_info_cve_nvts_nvt*
     }

get_info_response_info_cve_nvts_nvt
 = element nvt
     {
       attribute oid { oid }?
       & get_info_response_info_cve_nvts_nvt_name
     }

get_info_response_info_cve_nvts_nvt_name
 = element name
     {
       text
     }

get_info_response_info_cve_cert
 = element cert
     {
       get_info_response_info_cve_cert_cert_ref*
       & get_info_response_info_cve_cert_warning?
     }

get_info_response_info_cve_cert_cert_ref
 = element cert_ref
     {
       attribute type { text }?
       & get_info_response_info_cve_cert_cert_ref_name
       & get_info_response_info_cve_cert_cert_ref_title
     }

get_info_response_info_cve_cert_cert_ref_name
 = element name
     {
       text
     }

get_info_response_info_cve_cert_cert_ref_title
 = element title
     {
       text
     }

get_info_response_info_cve_cert_warning
 = element warning
     {
       text
     }

get_info_response_info_cve_raw_data
 = element raw_data
     {
       text
     }

get_info_response_info_dfn_cert_adv
 = element dfn_cert_adv
     {
       get_info_response_info_dfn_cert_adv_title
       & get_info_response_info_dfn_cert_adv_summary
       & get_info_response_info_dfn_cert_adv_max_cvss
       & get_info_response_info_dfn_cert_adv_cve_refs
       & get_info_response_info_dfn_cert_adv_raw_data?
     }

get_info_response_info_dfn_cert_adv_title
 = element title
     {
       text
     }

get_info_response_info_dfn_cert_adv_summary
 = element summary
     {
       text
     }

get_info_response_info_dfn_cert_adv_max_cvss
 = element max_cvss
     {
       text
     }

get_info_response_info_dfn_cert_adv_cve_refs
 = element cve_refs
     {
       integer
     }

get_info_response_info_dfn_cert_adv_raw_data
 = element raw_data
     {
       text
     }

get_info_response_info_ovaldef
 = element ovaldef
     {
       get_info_response_info_ovaldef_version
       & get_info_response_info_ovaldef_deprecated
       & get_info_response_info_ovaldef_status
       & get_info_response_info_ovaldef_class
       & get_info_response_info_ovaldef_title
       & get_info_response_info_ovaldef_max_cvss
       & get_info_response_info_ovaldef_cve_refs
       & get_info_response_info_ovaldef_file
       & get_info_response_info_ovaldef_description?
       & get_info_response_info_ovaldef_raw_data?
     }

get_info_response_info_ovaldef_version
 = element version
     {
       integer
     }

get_info_response_info_ovaldef_deprecated
 = element deprecated
     {
       boolean
     }

get_info_response_info_ovaldef_status
 = element status
     {
       text
     }

get_info_response_info_ovaldef_class
 = element class
     {
       text
     }

get_info_response_info_ovaldef_title
 = element title
     {
       text
     }

get_info_response_info_ovaldef_max_cvss
 = element max_cvss
     {
       text
     }

get_info_response_info_ovaldef_cve_refs
 = element cve_refs
     {
       integer
     }

get_info_response_info_ovaldef_file
 = element file
     {
       text
     }

get_info_response_info_ovaldef_description
 = element description
     {
       text
     }

get_info_response_info_ovaldef_raw_data
 = element raw_data
     {
       text
     }

get_info_response_info_allinfo
 = element allinfo
     {
       get_info_response_info_allinfo_type
       & get_info_response_info_allinfo_extra
       & get_info_response_info_allinfo_severity
     }

get_info_response_info_allinfo_type
 = element type
     {
       text
     }

get_info_response_info_allinfo_extra
 = element extra
     {
       text
     }

get_info_response_info_allinfo_severity
 = element severity
     {
       severity
     }

get_info_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_info_response_filters_term
       & get_info_response_filters_name?
       & get_info_response_filters_keywords
     }

get_info_response_filters_term
 = element term    # type text
     {
     }

get_info_response_filters_name
 = element name
     {
       text
     }

get_info_response_filters_keywords
 = element keywords
     {
       get_info_response_filters_keywords_keyword*
     }

get_info_response_filters_keywords_keyword
 = element keyword
     {
       get_info_response_filters_keywords_keyword_column
       & get_info_response_filters_keywords_keyword_relation
       & get_info_response_filters_keywords_keyword_value
     }

get_info_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_info_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_info_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_info_response_sort
 = element sort
     {
       text
       & get_info_response_sort_field
     }

get_info_response_sort_field
 = element field
     {
       get_info_response_sort_field_order
     }

get_info_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_info_response_info_count
 = element info_count
     {
       get_info_response_info_count_filtered
       & get_info_response_info_count_page
     }

get_info_response_info_count_filtered
 = element filtered
     {
       integer
     }

get_info_response_info_count_page
 = element page
     {
       integer
     }

get_info_response_details
 = element details    # type boolean
     {
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.56.3 Example: Get a info about cpe:/a:gnu:gzip:1.3.3 with all details

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             <get_info type="CPE"
           name="cpe:/a:gnu:gzip:1.3.3"
           details="1"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             <get_info_response status_text="OK"
                    status="200">
   <info id="28139">
     <name>cpe:/a:gnu:gzip:1.3.3</name>
     <comment/>
     <creation_time>2007-09-14T17:36:49Z</creation_time>
     <modification_time>2007-09-14T17:36:49Z</modification_time>
     <writable>0</writable>
     <in_use>0</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <update_time>2012-10-26T13:18:00.000+0000</update_time>
     <cpe>
       <title>GNU Gzip 1.3.3</title>
       <max_cvss>10.0</max_cvss>
       <cve_refs>5</cve_refs>
       <status>DRAFT</status>
       <cves>
         <cve>
           <entry id="CVE-2004-0603">
             <vuln:cvss>
               <cvss:base_metrics>
                 <cvss:score>10.0</cvss:score>
               </cvss:base_metrics>
             </vuln:cvss>
           </entry>
         </cve>
         <cve>
           <entry id="CVE-2010-0001">
             <vuln:cvss>
               <cvss:base_metrics>
                 <cvss:score>6.8</cvss:score>
               </cvss:base_metrics>
             </vuln:cvss>
           </entry>
         </cve>
         <cve>
           <entry id="CVE-2009-2624">
             <vuln:cvss>
               <cvss:base_metrics>
                 <cvss:score>6.8</cvss:score>
               </cvss:base_metrics>
             </vuln:cvss>
           </entry>
         </cve>
         <cve>
           <entry id="CVE-2005-1228">
             <vuln:cvss>
               <cvss:base_metrics>
                 <cvss:score>5.0</cvss:score>
               </cvss:base_metrics>
             </vuln:cvss>
           </entry>
         </cve>
         <cve>
           <entry id="CVE-2005-0988">
             <vuln:cvss>
               <cvss:base_metrics>
                 <cvss:score>3.7</cvss:score>
               </cvss:base_metrics>
             </vuln:cvss>
           </entry>
         </cve>
       </cves>
       <raw_data>
         <cpe-item name="cpe:/a:gnu:gzip:1.3.3">
           <title xml:lang="en-US">GNU Gzip 1.3.3</title>
           <meta:item-metadata nvd-id="28139"
                               status="DRAFT"
                               modification-date="2007-09-14T17:36:49.090Z"/>
         </cpe-item>
       </raw_data>
     </cpe>
   </info>
   <details>1</details>
   <filters id="(null)">
     <term/>
   </filters>
   <sort>
     <field>
       name
       <order>ascending</order>
     </field>
   </sort>
   <info max="-1"
         start="1"/>
   <info_count>
     <filtered>1</filtered>
     <page>1</page>
   </info_count>
 </get_info_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.56.3 Example: Get a info CVE-1999-0010 without details

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             <get_info name="CVE-2011-0018"
           type="cve"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             <get_info_response status_text="OK"
                    status="200">
   <info id="CVE-2011-0018">
     <name>CVE-2011-0018</name>
     <comment/>
     <creation_time>2011-01-28T16:00:02Z</creation_time>
     <modification_time>2011-02-05T07:01:22Z</modification_time>
     <writable>0</writable>
     <in_use>0</in_use>
     <update_time>2012-10-26T13:18:00.000+0000</update_time>
     <user_tags>
       <count>0</count>
     </user_tags>
     <cve>
       <cvss>9.0</cvss>
       <vector>NETWORK</vector>
       <complexity>LOW</complexity>
       <authentication>SINGLE_INSTANCE</authentication>
       <confidentiality_impact>COMPLETE</confidentiality_impact>
       <integrity_impact>COMPLETE</integrity_impact>
       <availability_impact>COMPLETE</availability_impact>
       <description>
         The email function in manage_sql.c in ...(truncated for example)
       </description>
       <products>
         cpe:/a:openvas:openvas_manager:1.0.1 ...(truncated for example)
       </products>
     </cve>
   </info>
   <filters id="(null)">
     <term/>
   </filters>
   <sort>
     <field>
       name
       <order>ascending</order>
     </field>
   </sort>
   <info max="-1"
         start="1"/>
   <info_count>
     <filtered>1</filtered>
     <page>1</page>
   </info_count>
 </get_info_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.57 Command get_lsc_credentials

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            In short: Get one or many LSC credentials.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The client uses the get_lsc_credentials command to get LSC credentials information. If the command sent by the client was valid, the manager will reply with a list of LSC credentials to the client.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.57.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @lsc_credential_id (uuid) ID of single LSC credential to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @filt_id (uuid) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @trash (boolean) Whether to get the trashcan LSC credentials instead.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @targets (boolean) Whether to include a list of targets using the credentials.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @format ("key", "rpm", "deb" or "exe")
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <lsc_credential> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <owner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Owner of the LSC credential.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The name of the owner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The name of the LSC credential.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <login>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The username of the LSC credential.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The comment on the LSC credential.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <creation_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Date and time the info was created.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <modification_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Date and time the info was last modified.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <writable>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Whether this credential is writable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <in_use>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Whether any targets are using the LSC credential.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <permissions>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Permissions that the current user has on the LSC credential.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <permission> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The name of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <user_tags>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Info on tags attached to the credential.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Number of attached tags.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <tag> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Short info on an individual tag (only if details were requested).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @id (uuid) UUID of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Value of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Comment for the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The type of the LSC credential.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <targets>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              All targets using this LSC credential.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <target> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The name of the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Permissions the user has on the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • One of
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <public_key>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <package>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @format ("rpm", "deb" or "exe")
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <lsc_credentials>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @start (integer) First LSC credential.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @max (integer) Maximum number of LSC credentials.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <lsc_credential_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Number of LSC credentials after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Number of LSC credentials on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.57.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              get_lsc_credentials
 = element get_lsc_credentials
     {
       attribute lsc_credential_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute trash { boolean }?
       & attribute targets { boolean }?
       & attribute format { xsd:token { pattern = "key|rpm|deb|exe" } }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              get_lsc_credentials_response
 = element get_lsc_credentials_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_lsc_credentials_response_lsc_credential*
       & get_lsc_credentials_response_filters
       & get_lsc_credentials_response_sort
       & get_lsc_credentials_response_lsc_credentials
       & get_lsc_credentials_response_lsc_credential_count
     }

get_lsc_credentials_response_lsc_credential
 = element lsc_credential
     {
       attribute id { uuid }
       & get_lsc_credentials_response_lsc_credential_owner
       & get_lsc_credentials_response_lsc_credential_name
       & get_lsc_credentials_response_lsc_credential_login
       & get_lsc_credentials_response_lsc_credential_comment
       & get_lsc_credentials_response_lsc_credential_creation_time
       & get_lsc_credentials_response_lsc_credential_modification_time
       & get_lsc_credentials_response_lsc_credential_writable
       & get_lsc_credentials_response_lsc_credential_in_use
       & get_lsc_credentials_response_lsc_credential_permissions
       & get_lsc_credentials_response_lsc_credential_user_tags
       & get_lsc_credentials_response_lsc_credential_type
       & get_lsc_credentials_response_lsc_credential_targets
       & ( get_lsc_credentials_response_lsc_credential_public_key
           | get_lsc_credentials_response_lsc_credential_package )
     }

get_lsc_credentials_response_lsc_credential_owner
 = element owner
     {
       get_lsc_credentials_response_lsc_credential_owner_name
     }

get_lsc_credentials_response_lsc_credential_owner_name
 = element name
     {
       name
     }

get_lsc_credentials_response_lsc_credential_name
 = element name
     {
       name
     }

get_lsc_credentials_response_lsc_credential_login
 = element login
     {
       name
     }

get_lsc_credentials_response_lsc_credential_comment
 = element comment
     {
       text
     }

get_lsc_credentials_response_lsc_credential_creation_time
 = element creation_time
     {
       iso_time
     }

get_lsc_credentials_response_lsc_credential_modification_time
 = element modification_time
     {
       iso_time
     }

get_lsc_credentials_response_lsc_credential_writable
 = element writable
     {
       boolean
     }

get_lsc_credentials_response_lsc_credential_in_use
 = element in_use
     {
       boolean
     }

get_lsc_credentials_response_lsc_credential_permissions
 = element permissions
     {
       get_lsc_credentials_response_lsc_credential_permissions_permission*
     }

get_lsc_credentials_response_lsc_credential_permissions_permission
 = element permission
     {
       get_lsc_credentials_response_lsc_credential_permissions_permission_name
     }

get_lsc_credentials_response_lsc_credential_permissions_permission_name
 = element name
     {
       name
     }

get_lsc_credentials_response_lsc_credential_user_tags
 = element user_tags
     {
       get_lsc_credentials_response_lsc_credential_user_tags_count
       & get_lsc_credentials_response_lsc_credential_user_tags_tag*
     }

get_lsc_credentials_response_lsc_credential_user_tags_count
 = element count
     {
       integer
     }

get_lsc_credentials_response_lsc_credential_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & get_lsc_credentials_response_lsc_credential_user_tags_tag_name
       & get_lsc_credentials_response_lsc_credential_user_tags_tag_value
       & get_lsc_credentials_response_lsc_credential_user_tags_tag_comment
     }

get_lsc_credentials_response_lsc_credential_user_tags_tag_name
 = element name
     {
       text
     }

get_lsc_credentials_response_lsc_credential_user_tags_tag_value
 = element value
     {
       text
     }

get_lsc_credentials_response_lsc_credential_user_tags_tag_comment
 = element comment
     {
       text
     }

get_lsc_credentials_response_lsc_credential_type
 = element type
     {
       xsd:token { pattern = "gen|pass" }
     }

get_lsc_credentials_response_lsc_credential_targets
 = element targets
     {
       get_lsc_credentials_response_lsc_credential_targets_target*
     }

get_lsc_credentials_response_lsc_credential_targets_target
 = element target
     {
       attribute id { uuid }
       & get_lsc_credentials_response_lsc_credential_targets_target_name
       & get_lsc_credentials_response_lsc_credential_targets_target_permissions?
     }

get_lsc_credentials_response_lsc_credential_targets_target_name
 = element name
     {
       name
     }

get_lsc_credentials_response_lsc_credential_targets_target_permissions
 = element permissions
     {
       ""
     }

get_lsc_credentials_response_lsc_credential_public_key
 = element public_key
     {
       text
     }

get_lsc_credentials_response_lsc_credential_package
 = element package
     {
       base64
       & attribute format { xsd:token { pattern = "rpm|deb|exe" } }
     }

get_lsc_credentials_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_lsc_credentials_response_filters_term
       & get_lsc_credentials_response_filters_name?
       & get_lsc_credentials_response_filters_keywords
     }

get_lsc_credentials_response_filters_term
 = element term
     {
       text
     }

get_lsc_credentials_response_filters_name
 = element name
     {
       text
     }

get_lsc_credentials_response_filters_keywords
 = element keywords
     {
       get_lsc_credentials_response_filters_keywords_keyword*
     }

get_lsc_credentials_response_filters_keywords_keyword
 = element keyword
     {
       get_lsc_credentials_response_filters_keywords_keyword_column
       & get_lsc_credentials_response_filters_keywords_keyword_relation
       & get_lsc_credentials_response_filters_keywords_keyword_value
     }

get_lsc_credentials_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_lsc_credentials_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_lsc_credentials_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_lsc_credentials_response_sort
 = element sort
     {
       text
       & get_lsc_credentials_response_sort_field
     }

get_lsc_credentials_response_sort_field
 = element field
     {
       get_lsc_credentials_response_sort_field_order
     }

get_lsc_credentials_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_lsc_credentials_response_lsc_credentials
 = element lsc_credentials
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_lsc_credentials_response_lsc_credential_count
 = element lsc_credential_count
     {
       get_lsc_credentials_response_lsc_credential_count_filtered
       & get_lsc_credentials_response_lsc_credential_count_page
     }

get_lsc_credentials_response_lsc_credential_count_filtered
 = element filtered
     {
       integer
     }

get_lsc_credentials_response_lsc_credential_count_page
 = element page
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.57.3 Example: Get one or many the LSC credentials

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_lsc_credentials/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_lsc_credentials_response status="200"
                               status_text="OK">
   <lsc_credential id="c33864a9-d3fd-44b3-8717-972bfb01dfcf">
     <name>sally</name>
     <login>sally</login>
     <comment/>
     <creation_time>2012-12-14T17:11:25+01:00</creation_time>
     <modification_time>2012-05-28T11:19:20+01:00</modification_time>
     <writable>1</writable>
     <in_use>0</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <type>gen</type>
   </lsc_credential>
   <lsc_credential id="8e305b0b-260d-450d-91a8-dadf0b144e15">
     <name>bob</name>
     <comment>Bob on the web server.</comment>
     <creation_time>2013-01-03T15:49:35+01:00</creation_time>
     <modification_time>2013-01-18T12:07:00+01:00</modification_time>
     <writable>1</writable>
     <in_use>1</in_use>
     <login>bob</login>
     <type>pass</type>
   </lsc_credential>
   ...
 </get_lsc_credentials_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.57.3 Example: Get a single LSC credential, its public key and targets using it

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_lsc_credentials lsc_credential_id="8e305b0b-260d-450d-91a8-dadf0b144e15"
                      format="key"
                      targets="1"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_lsc_credentials_response status="200"
                               status_text="OK">
   <lsc_credential id="8e305b0b-260d-450d-91a8-dadf0b144e15">
     <name>bob</name>
     <comment>Bob on the web server.</comment>
     <creation_time>2012-11-03T15:41:35+01:00</creation_time>
     <modification_time>2012-11-18T13:17:00+01:00</modification_time>
     <writable>1</writable>
     <in_use>1</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <login>bob</login>
     <type>pass</type>
     <targets>
       <target id="1f28d970-17ef-4c69-ba8a-13827059f2b9">
         <name>Web server</name>
       </target>
     </targets>
     <public_key>
       ssh-rsa AAAAB3...Z64IcQ== Key generated by OpenVAS Manager
     </public_key>
   </lsc_credential>
 </get_lsc_credentials_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.57.3 Example: Get the Debian package of a single LSC credential

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_lsc_credentials lsc_credential_id="8e305b0b-260d-450d-91a8-dadf0b144e15"
                      format="deb"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_lsc_credentials_response status="200"
                               status_text="OK">
   <lsc_credential id="8e305b0b-260d-450d-91a8-dadf0b144e15">
     <name>bob</name>
     <login>bob</login>
     <comment>Bob on the web server.</comment>
     <creation_time>2012-11-03T15:41:35+01:00</creation_time>
     <modification_time>2012-11-18T13:17:00+01:00</modification_time>
     <writable>1</writable>
     <in_use>1</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <type>pass</type>
     <targets>
       <target id="1f28d970-17ef-4c69-ba8a-13827059f2b9">
         <name>Web server</name>
       </target>
     </targets>
     <package format="deb">ITxhcmNoPgpk...DmvF0AKAAACg==</package>
   </lsc_credential>
 </get_lsc_credentials_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.58 Command get_notes

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              In short: Get one or many notes.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The client uses the get_notes command to get note information. If the command sent by the client was valid, the manager will reply with a list of notes to the client.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.58.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @note_id (uuid) ID of single note to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @filt_id (uuid) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @nvt_oid (oid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @task_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @details (boolean)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @result (boolean)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <note> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <notes>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @start (integer) First note.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @max (integer) Maximum number of notes.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <note_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Number of notes after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Number of notes on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.58.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                get_notes
 = element get_notes
     {
       attribute note_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute nvt_oid { oid }?
       & attribute task_id { uuid }?
       & attribute details { boolean }?
       & attribute result { boolean }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                get_notes_response
 = element get_notes_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_notes_response_note*
       & get_notes_response_filters
       & get_notes_response_sort
       & get_notes_response_notes
       & get_notes_response_note_count
     }

get_notes_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_notes_response_filters_term
       & get_notes_response_filters_name?
       & get_notes_response_filters_keywords
     }

get_notes_response_filters_term
 = element term
     {
       text
     }

get_notes_response_filters_name
 = element name
     {
       text
     }

get_notes_response_filters_keywords
 = element keywords
     {
       get_notes_response_filters_keywords_keyword*
     }

get_notes_response_filters_keywords_keyword
 = element keyword
     {
       get_notes_response_filters_keywords_keyword_column
       & get_notes_response_filters_keywords_keyword_relation
       & get_notes_response_filters_keywords_keyword_value
     }

get_notes_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_notes_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_notes_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_notes_response_sort
 = element sort
     {
       text
       & get_notes_response_sort_field
     }

get_notes_response_sort_field
 = element field
     {
       get_notes_response_sort_field_order
     }

get_notes_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_notes_response_notes
 = element notes
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_notes_response_note_count
 = element note_count
     {
       get_notes_response_note_count_filtered
       & get_notes_response_note_count_page
     }

get_notes_response_note_count_filtered
 = element filtered
     {
       integer
     }

get_notes_response_note_count_page
 = element page
     {
       integer
     }

get_notes_response_note
 = element note    # type note
     {
       attribute id { uuid }
       & note_permissions
       & note_owner
       & note_nvt
       & note_text
       & note_creation_time
       & note_modification_time
       & note_writable
       & note_in_use
       & note_active
       & note_orphan
       & note_user_tags
       & ( note_hosts
           & note_port
           & note_severity
           & note_threat
           & note_task
           & note_end_time?
           & note_result? )?
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.58.3 Example: Get one or many notes

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <get_notes/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <get_notes_response status="200"
                     status_text="OK">
   <note id="b76b81a7-9df8-42df-afff-baa9d4620128">
     <nvt oid="1.3.6.1.4.1.25623.1.0.75">
       <name>Test NVT: long lines</name>
     </nvt>
     <creation_time>2013-01-09T09:47:41+01:00</creation_time>
     <modification_time>2013-01-09T09:47:41+01:00</modification_time>
     <writable>1</writable>
     <in_use>0</in_use>
     <active>1</active>
     <orphan>1</orphan>
     <user_tags>
       <count>0</count>
     </user_tags>
     <text excerpt="0">This is the full text of the note.</text>
   </note>
   ...
 </get_notes_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.58.3 Example: Get details of a single note and result to which it applies

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <get_notes note_id="7f618bbb-4664-419e-9bbf-367d93954cb0"
            details="1"
            result="1"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <get_notes_response status="200"
                     status_text="OK">
   <note id="7f618bbb-4664-419e-9bbf-367d93954cb0">
     <nvt oid="1.3.6.1.4.1.25623.1.0.77">
       <name>Test NVT: control chars in report result</name>
     </nvt>
     <creation_time>Sun Jun 27 08:49:46 2010</creation_time>
     <modification_time>Sun Jun 27 08:49:46 2010</modification_time>
     <writable>1</writable>
     <in_use>0</in_use>
     <active>1</active>
     <end_time/>
     <text>note fixed to result</text>
     <hosts>127.0.0.1</hosts>
     <port>general/tcp</port>
     <threat>Medium</threat>
     <task id="40b236a9-2b0f-4813-b8c7-bc2b98d9d7e4">
       <name>test</name>
     </task>
     <orphan>0</orphan>
     <user_tags>
       <count>0</count>
     </user_tags>
     <result id="0c95e6b3-1100-4dfd-88f1-4bed1fad29de">
       <host>127.0.0.1</host>
       <port>general/tcp</port>
       <nvt oid="1.3.6.1.4.1.25623.1.0.77">
         <name>Test NVT: control chars in report result</name>
         <cvss_base/>
         <cve/>
         <bid/>
       </nvt>
       <threat>Medium</threat>
       <description>Warning with control char between fullstops: . .</description>
     </result>
   </note>
   ...
 </get_notes_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.59 Command get_nvts

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                In short: Get one or many NVTs.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The client uses the get_nvts command to get NVT information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                This command may always include a details flag, a config, a sort order and a sort field. If the command includes a details flag, the manager also consults the timeout, preference_count and preferences flags.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The NVT OID, family name and config attributes limit the listing to a single NVT or all NVTs in a particular family and/or config.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                If the details flag is present the manager will send full details of the NVT, otherwise it will send just the NVT name.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                With the preferences flag the manager includes in the listing, the values of each listed NVT's preferences for the given config. The timeout flag does the same for the special timeout preference. If the config contains no values for a preference, the default value of the preference is returned. The same applies if no config is given.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                If the manager possesses an NVT collection, it will reply with the NVT information. If the manager cannot access a list of available NVTs at that time, it will reply with the 503 response.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.59.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @nvt_oid (oid) Single NVT to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @details (boolean) Whether to include full details.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @preferences (boolean) Whether to include preference.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @preference_count (boolean) Whether to include preference count.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @timeout (boolean) Whether to include the special timeout preference.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @config_id (uuid) ID of config to which to limit the NVT listing.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @family (text) Family to which to limit NVT listing.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @sort_order (sort_order)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @sort_field (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <nvt>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @oid (oid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The name of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <user_tags>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Info on tags attached to the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Number of attached tags.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <tag> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Short info on an individual tag (only if details were requested).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @id (uuid) UUID of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Value of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Comment for the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • The group?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <creation_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The creation time of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <modification_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The modification time of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <category>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The category of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <copyright>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Copyright info of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <summary>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Short description of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <family>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Name of the family the NVT belongs to.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <version>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Version of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <cvss_base>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                CVSS base score of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <qod>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The quality of detection (QoD) of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The numeric QoD value.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The QoD type.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <cve_id>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      IDs of the CVEs the NVT adresses.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <cert_refs>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        List of CERT advisories referencing this NVT via CVEs.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <cert_ref> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          A CERT advisory reference.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @id (text) ID of the advisory.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @type (text) Type of the advisory (e.g. "DFN-CERT", "CERT-BUND").
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <warning> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          A warning message, e.g. when the database is not.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <bugtraq_id>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          List of Bugtraq IDs of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <xrefs>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            List of other references of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <tags>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The tags of the NVT, separated by vertical bars.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <preference_count> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The number of preferences for the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <timeout> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The timeout of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <preferences> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    List of preferences of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <timeout>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The timeout of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <preference> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <nvt>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          NVT to which preference applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @oid (oid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The name of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The name of the preference.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The type of the preference.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The value of the preference.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <alt> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  An alternate value of the preference.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <default>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The default value of the preference.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.59.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          get_nvts
 = element get_nvts
     {
       attribute nvt_oid { oid }
       & attribute details { boolean }?
       & attribute preferences { boolean }?
       & attribute preference_count { boolean }?
       & attribute timeout { boolean }?
       & attribute config_id { uuid }?
       & attribute family { text }?
       & attribute sort_order { sort_order }?
       & attribute sort_field { text }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          get_nvts_response
 = element get_nvts_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_nvts_response_nvt
     }

get_nvts_response_nvt
 = element nvt
     {
       attribute oid { oid }
       & get_nvts_response_nvt_name
       & get_nvts_response_nvt_user_tags
       & ( get_nvts_response_nvt_creation_time
           & get_nvts_response_nvt_modification_time
           & get_nvts_response_nvt_category
           & get_nvts_response_nvt_copyright
           & get_nvts_response_nvt_summary
           & get_nvts_response_nvt_family
           & get_nvts_response_nvt_version
           & get_nvts_response_nvt_cvss_base
           & get_nvts_response_nvt_qod
           & get_nvts_response_nvt_cve_id
           & get_nvts_response_nvt_cert_refs
           & get_nvts_response_nvt_bugtraq_id
           & get_nvts_response_nvt_xrefs
           & get_nvts_response_nvt_tags
           & get_nvts_response_nvt_preference_count?
           & get_nvts_response_nvt_timeout?
           & get_nvts_response_nvt_preferences? )?
     }

get_nvts_response_nvt_name
 = element name
     {
       name
     }

get_nvts_response_nvt_category
 = element category
     {
       text
     }

get_nvts_response_nvt_creation_time
 = element creation_time
     {
       iso_time
     }

get_nvts_response_nvt_modification_time
 = element modification_time
     {
       iso_time
     }

get_nvts_response_nvt_user_tags
 = element user_tags
     {
       get_nvts_response_nvt_user_tags_count
       & get_nvts_response_nvt_user_tags_tag*
     }

get_nvts_response_nvt_user_tags_count
 = element count
     {
       integer
     }

get_nvts_response_nvt_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & get_nvts_response_nvt_user_tags_tag_name
       & get_nvts_response_nvt_user_tags_tag_value
       & get_nvts_response_nvt_user_tags_tag_comment
     }

get_nvts_response_nvt_user_tags_tag_name
 = element name
     {
       text
     }

get_nvts_response_nvt_user_tags_tag_value
 = element value
     {
       text
     }

get_nvts_response_nvt_user_tags_tag_comment
 = element comment
     {
       text
     }

get_nvts_response_nvt_copyright
 = element copyright
     {
       text
     }

get_nvts_response_nvt_summary
 = element summary
     {
       text
     }

get_nvts_response_nvt_family
 = element family
     {
       text
     }

get_nvts_response_nvt_version
 = element version
     {
       text
     }

get_nvts_response_nvt_cvss_base
 = element cvss_base
     {
       text
     }

get_nvts_response_nvt_qod
 = element qod
     {
       get_nvts_response_nvt_qod_value
       & get_nvts_response_nvt_qod_type
     }

get_nvts_response_nvt_qod_value
 = element value
     {
       integer
     }

get_nvts_response_nvt_qod_type
 = element type
     {
       text
     }

get_nvts_response_nvt_cve_id
 = element cve_id
     {
       text
     }

get_nvts_response_nvt_bugtraq_id
 = element bugtraq_id
     {
       text
     }

get_nvts_response_nvt_cert_refs
 = element cert_refs
     {
       get_nvts_response_nvt_cert_refs_cert_ref*
       & get_nvts_response_nvt_cert_refs_warning?
     }

get_nvts_response_nvt_cert_refs_cert_ref
 = element cert_ref
     {
       attribute id { text }?
       & attribute type { text }?
     }

get_nvts_response_nvt_cert_refs_warning
 = element warning
     {
       text
     }

get_nvts_response_nvt_xrefs
 = element xrefs
     {
       text
     }

get_nvts_response_nvt_tags
 = element tags
     {
       text
     }

get_nvts_response_nvt_preference_count
 = element preference_count
     {
       text
     }

get_nvts_response_nvt_timeout
 = element timeout
     {
       text
     }

get_nvts_response_nvt_preferences
 = element preferences
     {
       text
       & get_nvts_response_nvt_preferences_timeout
       & get_nvts_response_nvt_preferences_preference*
     }

get_nvts_response_nvt_preferences_timeout
 = element timeout
     {
       text
     }

get_nvts_response_nvt_preferences_preference
 = element preference
     {
       get_nvts_response_nvt_preferences_preference_nvt
       & get_nvts_response_nvt_preferences_preference_name
       & get_nvts_response_nvt_preferences_preference_type
       & get_nvts_response_nvt_preferences_preference_value
       & get_nvts_response_nvt_preferences_preference_alt*
       & get_nvts_response_nvt_preferences_preference_default
     }

get_nvts_response_nvt_preferences_preference_nvt
 = element nvt
     {
       attribute oid { oid }
       & get_nvts_response_nvt_preferences_preference_nvt_name
     }

get_nvts_response_nvt_preferences_preference_nvt_name
 = element name
     {
       name
     }

get_nvts_response_nvt_preferences_preference_name
 = element name
     {
       text
     }

get_nvts_response_nvt_preferences_preference_type
 = element type
     {
       text
     }

get_nvts_response_nvt_preferences_preference_value
 = element value
     {
       text
     }

get_nvts_response_nvt_preferences_preference_alt
 = element alt
     {
       text
     }

get_nvts_response_nvt_preferences_preference_default
 = element default
     {
       text
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.59.3 Example: Get full NVT listing with details

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <get_nvts details="1"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <get_nvts_response status="200"
                    status_text="OK">
   <nvt oid="1.3.6.1.4.1.25623.1.7.13005">
     <name>Services</name>
     <creation_time>2011-01-14T10:12:23+01:00</creation_time>
     <modification_time>2012-09-19T20:56:15+02:00</modification_time>
     <user_tags>
       <count>0</count>
     </user_tags>
     <category>Services</category>
     <copyright>GNU GPL v2</copyright>
     <summary>Find what is listening on which port</summary>
     <family>Service detection</family>
     <version>$Revision: 1852 $</version>
     <cvss_base/>
     <cve_id>NOCVE</cve_id>
     <bugtraq_id>NOBID</bugtraq_id>
     <cert_refs/>
     <xrefs>NOXREF</xrefs>
     <tags>NOTAG</tags>
     <preference_count>-1</preference_count>
     <timeout/>
     <preferences>
       <timeout/>
       <preference>
         <nvt oid="1.3.6.1.4.1.25623.1.0.10330">
           <name>Services</name>
         </nvt>
         <name>Network connection timeout :</name>
         <type>entry</type>
         <value>5</value>
         <default>5</default>
       </preference>
       ...
     </preferences>
   </nvt>
   <nvt oid="1.3.6.1.4.1.25623.1.7.13006">
     <name>FooBar 21</name>
     <creation_time>2011-01-14T10:12:23+01:00</creation_time>
     <modification_time>2012-09-19T20:56:15+02:00</modification_time>
     <category>Services</category>
     <copyright>GNU GPL v2</copyright>
     <description>
       This script detects whether the FooBar 2.1 XSS vulnerability is present.
     </description>
     ...
   </nvt>
   ...
 </get_nvts_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.59.3 Example: Get minimal information about one NVT

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <get_nvts nvt_oid="1.3.6.1.4.1.25623.1.0.10330"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <get_nvts_response status="200"
                    status_text="OK">
   <nvt oid="1.3.6.1.4.1.25623.1.0.10330">
     <name>Services</name>
     <user_tags>
       <count>0</count>
     </user_tags>
   </nvt>
 </get_nvts_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.60 Command get_nvt_families

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          In short: Get a list of all NVT families.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The client uses the get_nvt_families command to get NVT family information. If the command sent by the client was valid, the manager will reply with a list of NVT families to the client.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.60.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <families>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <family> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The name of the family.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <max_nvt_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The number of NVTs in the family.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.60.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              get_nvt_families
 = element get_nvt_families
     {
       attribute sort_order { sort_order }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              get_nvt_families_response
 = element get_nvt_families_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_nvt_families_response_families
     }

get_nvt_families_response_families
 = element families
     {
       get_nvt_families_response_families_family*
     }

get_nvt_families_response_families_family
 = element family
     {
       get_nvt_families_response_families_family_name
       & get_nvt_families_response_families_family_max_nvt_count
     }

get_nvt_families_response_families_family_name
 = element name
     {
       name
     }

get_nvt_families_response_families_family_max_nvt_count
 = element max_nvt_count
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.60.3 Example: Get the NVT families

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_nvt_families/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_nvt_families_response status="200"
                            status_text="OK">
   <families>
     <family>
       <name>Credentials</name>
       <max_nvt_count>8</max_nvt_count>
     </family>
     <family>
       <name>Port scanners</name>
       <max_nvt_count>12</max_nvt_count>
     </family>
     ...
   </families>
 </get_nvt_families_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.61 Command get_nvt_feed_version

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              In short: Get NVT Feed version.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The client uses the get_nvt_feed_version command to request a feed version for the complete NVT collection available through this manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              If the manager possesses such a collection, it will reply with a response code indicating success, and the feed version files. If the manager cannot access a list of available NVTs at present, it will reply with the 503 response.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.61.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Empty single element.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <version>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  NVT Feed version.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.61.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                get_nvt_feed_version
 = element get_nvt_feed_version
     {
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                get_nvt_feed_version_response
 = element get_nvt_feed_version_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_nvt_feed_version_response_version
     }

get_nvt_feed_version_response_version
 = element version    # type integer
     {
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.61.3 Example: Get the NVT feed version

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <get_nvt_feed_version/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <get_nvt_feed_version_response status="200"
                                status_text="OK">
   <version>201303060811</version>
 </get_nvt_feed_version_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.62 Command get_overrides

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                In short: Get one or many overrides.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The client uses the get_overrides command to get override information. If the command sent by the client was valid, the manager will reply with a list of overrides to the client.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.62.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @override_id (uuid) ID of single override to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @filt_id (uuid) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @nvt_oid (oid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @task_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @details (boolean)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @result (boolean)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <override> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <overrides>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @start (integer) First override.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @max (integer) Maximum number of overrides.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <override_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Number of overrides after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Number of overrides on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.62.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  get_overrides
 = element get_overrides
     {
       attribute override_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute nvt_oid { oid }?
       & attribute task_id { uuid }?
       & attribute details { boolean }?
       & attribute result { boolean }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  get_overrides_response
 = element get_overrides_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_overrides_response_override*
       & get_overrides_response_filters
       & get_overrides_response_sort
       & get_overrides_response_overrides
       & get_overrides_response_override_count
     }

get_overrides_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_overrides_response_filters_term
       & get_overrides_response_filters_name?
       & get_overrides_response_filters_keywords
     }

get_overrides_response_filters_term
 = element term
     {
       text
     }

get_overrides_response_filters_name
 = element name
     {
       text
     }

get_overrides_response_filters_keywords
 = element keywords
     {
       get_overrides_response_filters_keywords_keyword*
     }

get_overrides_response_filters_keywords_keyword
 = element keyword
     {
       get_overrides_response_filters_keywords_keyword_column
       & get_overrides_response_filters_keywords_keyword_relation
       & get_overrides_response_filters_keywords_keyword_value
     }

get_overrides_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_overrides_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_overrides_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_overrides_response_sort
 = element sort
     {
       text
       & get_overrides_response_sort_field
     }

get_overrides_response_sort_field
 = element field
     {
       get_overrides_response_sort_field_order
     }

get_overrides_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_overrides_response_overrides
 = element overrides
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_overrides_response_override_count
 = element override_count
     {
       get_overrides_response_override_count_filtered
       & get_overrides_response_override_count_page
     }

get_overrides_response_override_count_filtered
 = element filtered
     {
       integer
     }

get_overrides_response_override_count_page
 = element page
     {
       integer
     }

get_overrides_response_override
 = element override    # type override
     {
       attribute id { uuid }
       & override_permissions
       & override_owner
       & override_nvt
       & override_creation_time
       & override_modification_time
       & override_writable
       & override_in_use
       & override_active
       & override_text
       & override_threat
       & override_severity
       & override_new_threat
       & override_new_severity
       & override_orphan
       & override_permissions
       & override_user_tags
       & ( override_hosts
           & override_port
           & override_task
           & override_end_time?
           & override_result? )?
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.62.3 Example: Get one or many overrides

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   <get_overrides/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   <get_overrides_response status="200"
                         status_text="OK">
   <override id="b76b81a7-9df8-42df-afff-baa9d4620128">
     <nvt oid="1.3.6.1.4.1.25623.1.0.75">
       <name>Test NVT: long lines</name>
     </nvt>
     <creation_time>2013-01-09T09:50:10+01:00</creation_time>
     <modification_time>2013-01-09T09:50:10+01:00</modification_time>
     <writable>1</writable>
     <in_use>0</in_use>
     <active>1</active>
     <text excerpt="0">This is the full text of the override.</text>
     <new_threat>Log</new_threat>
     <new_severity>0.0</new_severity>
     <orphan>1</orphan>
     <user_tags>
       <count>0</count>
     </user_tags>
   </override>
   ...
 </get_overrides_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.62.3 Example: Get details of a single override

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   <get_overrides override_id="7f618bbb-4664-419e-9bbf-367d93954cb0"
                details="1"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   <get_overrides_response status="200"
                         status_text="OK">
   <override id="7f618bbb-4664-419e-9bbf-367d93954cb0">
     <nvt oid="1.3.6.1.4.1.25623.1.0.77">
       <name>Test NVT: control chars in report result</name>
     </nvt>
     <creation_time>Sun Jun 27 08:49:46 2010</creation_time>
     <modification_time>Sun Jun 27 08:49:46 2010</modification_time>
     <writable>1</writable>
     <in_use>0</in_use>
     <active>1</active>
     <end_time/>
     <text>override fixed to result</text>
     <hosts>127.0.0.1</hosts>
     <port>general/tcp</port>
     <threat>Medium</threat>
     <new_threat>Low</new_threat>
     <new_severity>2.0</new_severity>
     <task id="40b236a9-2b0f-4813-b8c7-bc2b98d9d7e4">
       <name>test</name>
     </task>
     <orphan>0</orphan>
     <user_tags>
       <count>0</count>
     </user_tags>
     <result id="0c95e6b3-1100-4dfd-88f1-4bed1fad29de"/>
   </override>
   ...
 </get_overrides_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.63 Command get_permissions

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  In short: Get one or many permissions.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The client uses the get_permissions command to get permission information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.63.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @permission_id (uuid) ID of single permission to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @filt_id (uuid) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @trash (boolean) Whether to get the trashcan permissions instead.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <permission> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <owner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Owner of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The name of the owner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The name of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The comment on the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <creation_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Date and time the permission was created.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <modification_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Date and time the permission was last modified.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <writable>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Whether the permission is writable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <in_use>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Whether the permission is in use.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <permissions>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Permissions that the current user has on the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <permission> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The name of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <user_tags>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Info on tags attached to the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Number of attached tags.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <tag> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Short info on an individual tag (only if details were requested).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @id (uuid) UUID of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Value of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Comment for the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <resource>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The resource the permission applies to.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @id (uuid) UUID if permission applies to a resource, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The OMP type of the resource.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <trash>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Whether the resource is in the trash.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <deleted>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Whether the resource has been deleted.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <subject>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The subject the permission applies to.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @id (uuid) UUID of the subject.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The OMP type of the subject: group, role or user.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <trash>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Whether the subject is in the trash.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <permissions>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @start (integer) First permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @max (integer) Maximum number of permissions.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <permission_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Number of permissions after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Number of permissions on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.63.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        get_permissions
 = element get_permissions
     {
       attribute permission_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute trash { boolean }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        get_permissions_response
 = element get_permissions_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_permissions_response_permission*
       & get_permissions_response_filters
       & get_permissions_response_sort
       & get_permissions_response_permissions
       & get_permissions_response_permission_count
     }

get_permissions_response_permission
 = element permission
     {
       attribute id { uuid }
       & get_permissions_response_permission_owner
       & get_permissions_response_permission_name
       & get_permissions_response_permission_comment
       & get_permissions_response_permission_creation_time
       & get_permissions_response_permission_modification_time
       & get_permissions_response_permission_writable
       & get_permissions_response_permission_in_use
       & get_permissions_response_permission_permissions
       & get_permissions_response_permission_user_tags
       & get_permissions_response_permission_resource
       & get_permissions_response_permission_subject
     }

get_permissions_response_permission_owner
 = element owner
     {
       get_permissions_response_permission_owner_name
     }

get_permissions_response_permission_owner_name
 = element name
     {
       name
     }

get_permissions_response_permission_name
 = element name
     {
       name
     }

get_permissions_response_permission_comment
 = element comment
     {
       text
     }

get_permissions_response_permission_creation_time
 = element creation_time
     {
       iso_time
     }

get_permissions_response_permission_modification_time
 = element modification_time
     {
       iso_time
     }

get_permissions_response_permission_resource
 = element resource
     {
       attribute id { uuid }?
       & get_permissions_response_permission_resource_name
       & get_permissions_response_permission_resource_type
       & get_permissions_response_permission_resource_trash
       & get_permissions_response_permission_resource_deleted
     }

get_permissions_response_permission_resource_name
 = element name
     {
       text
     }

get_permissions_response_permission_resource_type
 = element type
     {
       text
     }

get_permissions_response_permission_resource_trash
 = element trash
     {
       boolean
     }

get_permissions_response_permission_resource_deleted
 = element deleted
     {
       boolean
     }

get_permissions_response_permission_subject
 = element subject
     {
       attribute id { uuid }?
       & get_permissions_response_permission_subject_name
       & get_permissions_response_permission_subject_type
       & get_permissions_response_permission_subject_trash
     }

get_permissions_response_permission_subject_name
 = element name
     {
       text
     }

get_permissions_response_permission_subject_type
 = element type
     {
       text
     }

get_permissions_response_permission_subject_trash
 = element trash
     {
       boolean
     }

get_permissions_response_permission_subject_deleted
 = element deleted
     {
       boolean
     }

get_permissions_response_permission_writable
 = element writable
     {
       boolean
     }

get_permissions_response_permission_in_use
 = element in_use
     {
       boolean
     }

get_permissions_response_permission_permissions
 = element permissions
     {
       get_permissions_response_permission_permissions_permission*
     }

get_permissions_response_permission_permissions_permission
 = element permission
     {
       get_permissions_response_permission_permissions_permission_name
     }

get_permissions_response_permission_permissions_permission_name
 = element name
     {
       name
     }

get_permissions_response_permission_user_tags
 = element user_tags
     {
       get_permissions_response_permission_user_tags_count
       & get_permissions_response_permission_user_tags_tag*
     }

get_permissions_response_permission_user_tags_count
 = element count
     {
       integer
     }

get_permissions_response_permission_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & get_permissions_response_permission_user_tags_tag_name
       & get_permissions_response_permission_user_tags_tag_value
       & get_permissions_response_permission_user_tags_tag_comment
     }

get_permissions_response_permission_user_tags_tag_name
 = element name
     {
       text
     }

get_permissions_response_permission_user_tags_tag_value
 = element value
     {
       text
     }

get_permissions_response_permission_user_tags_tag_comment
 = element comment
     {
       text
     }

get_permissions_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_permissions_response_filters_term
       & get_permissions_response_filters_name?
       & get_permissions_response_filters_keywords
     }

get_permissions_response_filters_term
 = element term
     {
       text
     }

get_permissions_response_filters_name
 = element name
     {
       text
     }

get_permissions_response_filters_keywords
 = element keywords
     {
       get_permissions_response_filters_keywords_keyword*
     }

get_permissions_response_filters_keywords_keyword
 = element keyword
     {
       get_permissions_response_filters_keywords_keyword_column
       & get_permissions_response_filters_keywords_keyword_relation
       & get_permissions_response_filters_keywords_keyword_value
     }

get_permissions_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_permissions_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_permissions_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_permissions_response_sort
 = element sort
     {
       text
       & get_permissions_response_sort_field
     }

get_permissions_response_sort_field
 = element field
     {
       get_permissions_response_sort_field_order
     }

get_permissions_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_permissions_response_permissions
 = element permissions
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_permissions_response_permission_count
 = element permission_count
     {
       get_permissions_response_permission_count_filtered
       & get_permissions_response_permission_count_page
     }

get_permissions_response_permission_count_filtered
 = element filtered
     {
       integer
     }

get_permissions_response_permission_count_page
 = element page
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.63.3 Example: Get one or many permissions

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <get_permissions/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <get_permissions_response status="200"
                           status_text="OK">
   <permission id="b493b7a8-7489-11df-a3ec-002264764cea">
     <name>Management</name>
     <comment>Managers</comment>
     <creation_time>Sun Jun 27 08:49:43 2010</creation_time>
     <modification_time>Sun Jun 27 08:49:43 2010</modification_time>
     <writable>1</writable>
     <in_use>0</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <users>sarah, frank</users>
   </permission>
   ...
   <filters id="">
     <term>first=1 rows=-1 sort=name</term>
     <keywords>
       <keyword>
         <column>first</column>
         <relation>=</relation>
         <value>1</value>
       </keyword>
       ...
     </keywords>
   </filters>
   <sort>
     <field>
       name
       <order>ascending</order>
     </field>
   </sort>
   <permissions max="-1"
                start="1"/>
   <permission_count>
     1
     <filtered>1</filtered>
     <page>1</page>
   </permission_count>
 </get_permissions_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.64 Command get_port_lists

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Get one or many port lists.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_port_lists command to get port list information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.64.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @port_list_id (uuid) ID of single port list to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @filt_id (uuid) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @details (boolean) Whether to include full port list details.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @targets (boolean) Whether to include targets using this port list.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @trash (boolean) Whether to get the trashcan port lists instead.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <port_list> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <owner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Owner of the port list.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The name of the owner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The name of the port list.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The comment on the port list.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <creation_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <modification_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <writable>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Whether the port list is writable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <in_use>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Whether any targets are using the port list.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <permissions>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Permissions that the current user has on the port list.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <permission> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The name of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <user_tags>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Info on tags attached to the port list.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Number of attached tags.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <tag> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Short info on an individual tag (only if details were requested).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @id (uuid) UUID of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Value of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Comment for the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <port_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <all>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Total number of ports.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <tcp>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Total number of TCP ports.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <udp>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Total number of UDP ports.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <port_ranges> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <port_range> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <start>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                First port in range.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <end>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Last port in range.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The type of port: TCP, UDP, ....
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The comment on the port range.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <targets> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The targets using the port list.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <target> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The name of the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Permissions the user has on the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <port_lists>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @start (integer) First port list.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @max (integer) Maximum number of port lists.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <port_list_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Number of port lists after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Number of port lists on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.64.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  get_port_lists
 = element get_port_lists
     {
       attribute port_list_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute details { boolean }?
       & attribute targets { boolean }?
       & attribute trash { boolean }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  get_port_lists_response
 = element get_port_lists_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_port_lists_response_port_list*
       & get_port_lists_response_filters
       & get_port_lists_response_sort
       & get_port_lists_response_port_lists
       & get_port_lists_response_port_list_count
     }

get_port_lists_response_port_list
 = element port_list
     {
       attribute id { uuid }
       & get_port_lists_response_port_list_owner
       & get_port_lists_response_port_list_name
       & get_port_lists_response_port_list_comment
       & get_port_lists_response_port_list_creation_time
       & get_port_lists_response_port_list_modification_time
       & get_port_lists_response_port_list_writable
       & get_port_lists_response_port_list_in_use
       & get_port_lists_response_port_list_permissions
       & get_port_lists_response_port_list_user_tags
       & get_port_lists_response_port_list_port_count
       & get_port_lists_response_port_list_port_ranges?
       & get_port_lists_response_port_list_targets?
     }

get_port_lists_response_port_list_owner
 = element owner
     {
       get_port_lists_response_port_list_owner_name
     }

get_port_lists_response_port_list_owner_name
 = element name
     {
       name
     }

get_port_lists_response_port_list_name
 = element name
     {
       name
     }

get_port_lists_response_port_list_comment
 = element comment
     {
       text
     }

get_port_lists_response_port_list_creation_time
 = element creation_time
     {
       iso_time
     }

get_port_lists_response_port_list_modification_time
 = element modification_time
     {
       iso_time
     }

get_port_lists_response_port_list_writable
 = element writable
     {
       boolean
     }

get_port_lists_response_port_list_in_use
 = element in_use
     {
       boolean
     }

get_port_lists_response_port_list_permissions
 = element permissions
     {
       get_port_lists_response_port_list_permissions_permission*
     }

get_port_lists_response_port_list_permissions_permission
 = element permission
     {
       get_port_lists_response_port_list_permissions_permission_name
     }

get_port_lists_response_port_list_permissions_permission_name
 = element name
     {
       name
     }

get_port_lists_response_port_list_user_tags
 = element user_tags
     {
       get_port_lists_response_port_list_user_tags_count
       & get_port_lists_response_port_list_user_tags_tag*
     }

get_port_lists_response_port_list_user_tags_count
 = element count
     {
       integer
     }

get_port_lists_response_port_list_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & get_port_lists_response_port_list_user_tags_tag_name
       & get_port_lists_response_port_list_user_tags_tag_value
       & get_port_lists_response_port_list_user_tags_tag_comment
     }

get_port_lists_response_port_list_user_tags_tag_name
 = element name
     {
       text
     }

get_port_lists_response_port_list_user_tags_tag_value
 = element value
     {
       text
     }

get_port_lists_response_port_list_user_tags_tag_comment
 = element comment
     {
       text
     }

get_port_lists_response_port_list_port_count
 = element port_count
     {
       get_port_lists_response_port_list_port_count_all
       & get_port_lists_response_port_list_port_count_tcp
       & get_port_lists_response_port_list_port_count_udp
     }

get_port_lists_response_port_list_port_count_all
 = element all
     {
       integer
     }

get_port_lists_response_port_list_port_count_tcp
 = element tcp
     {
       integer
     }

get_port_lists_response_port_list_port_count_udp
 = element udp
     {
       integer
     }

get_port_lists_response_port_list_port_ranges
 = element port_ranges
     {
       get_port_lists_response_port_list_port_ranges_port_range*
     }

get_port_lists_response_port_list_port_ranges_port_range
 = element port_range
     {
       attribute id { uuid }
       & get_port_lists_response_port_list_port_ranges_port_range_start
       & get_port_lists_response_port_list_port_ranges_port_range_end
       & get_port_lists_response_port_list_port_ranges_port_range_type
       & get_port_lists_response_port_list_port_ranges_port_range_comment
     }

get_port_lists_response_port_list_port_ranges_port_range_start
 = element start
     {
       integer
     }

get_port_lists_response_port_list_port_ranges_port_range_end
 = element end
     {
       integer
     }

get_port_lists_response_port_list_port_ranges_port_range_type
 = element type
     {
       text
     }

get_port_lists_response_port_list_port_ranges_port_range_comment
 = element comment
     {
       text
     }

get_port_lists_response_port_list_targets
 = element targets
     {
       get_port_lists_response_port_list_targets_target*
     }

get_port_lists_response_port_list_targets_target
 = element target
     {
       attribute id { uuid }
       & get_port_lists_response_port_list_targets_target_name
       & get_port_lists_response_port_list_targets_target_permissions?
     }

get_port_lists_response_port_list_targets_target_name
 = element name
     {
       name
     }

get_port_lists_response_port_list_targets_target_permissions
 = element permissions
     {
       ""
     }

get_port_lists_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_port_lists_response_filters_term
       & get_port_lists_response_filters_name?
       & get_port_lists_response_filters_keywords
     }

get_port_lists_response_filters_term
 = element term
     {
       text
     }

get_port_lists_response_filters_name
 = element name
     {
       text
     }

get_port_lists_response_filters_keywords
 = element keywords
     {
       get_port_lists_response_filters_keywords_keyword*
     }

get_port_lists_response_filters_keywords_keyword
 = element keyword
     {
       get_port_lists_response_filters_keywords_keyword_column
       & get_port_lists_response_filters_keywords_keyword_relation
       & get_port_lists_response_filters_keywords_keyword_value
     }

get_port_lists_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_port_lists_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_port_lists_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_port_lists_response_sort
 = element sort
     {
       text
       & get_port_lists_response_sort_field
     }

get_port_lists_response_sort_field
 = element field
     {
       get_port_lists_response_sort_field_order
     }

get_port_lists_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_port_lists_response_port_lists
 = element port_lists
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_port_lists_response_port_list_count
 = element port_list_count
     {
       get_port_lists_response_port_list_count_filtered
       & get_port_lists_response_port_list_count_page
     }

get_port_lists_response_port_list_count_filtered
 = element filtered
     {
       integer
     }

get_port_lists_response_port_list_count_page
 = element page
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.64.3 Example: Export a port list

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   <get_port_lists port_list_id="b993b6f5-f9fb-4e6e-9c94-dd46c00e058d"
                 details="1"
                 targets="1"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   <get_port_lists_response status="200"
                          status_text="OK">
   <port_list id="b993b6f5-f9fb-4e6e-9c94-dd46c00e058d">
     <name>All TCP</name>
     <comment>Every single TCP port.</comment>
     <creation_time>2012-12-31T16:38:45+01:00</creation_time>
     <modification_time>2012-12-31T16:38:45+01:00</modification_time>
     <writable>0</writable>
     <in_use>1</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <port_count>
       <all>65535</all>
       <tcp>65535</tcp>
       <udp>0</udp>
     </port_count>
     <port_ranges>
       <port_range>
         <type>TCP</type>
         <start>1</start>
         <end>65535</end>
       </port_range>
     </port_ranges>
     <targets>
       <target id="1f28d970-17ef-4c69-ba8a-13827059f2b9">
         <name>Web server</name>
       </target>
     </targets>
   </port_list>
 </get_port_lists_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.65 Command get_preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  In short: Get one or many preferences.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The client uses the get_preferences command to get preference information. If the command sent by the client was valid, the manager will reply with a list of preferences to the client. If the manager cannot access a list of available NVTs at present, it will reply with the 503 response.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  When the command includes a config_id attribute, the preference element includes the preference name, type and value, and the NVT to which the preference applies. Otherwise, the preference element includes just the name and value, with the NVT and type built into the name.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.65.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @nvt_oid (oid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @config_id (uuid) ID of config of which to show preference values.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @preference (text) The name of a particular preference to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <preference> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <nvt>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        NVT to which preference applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @oid (oid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The name of the NVT.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The name of the preference.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The type of preference.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The value of the preference.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <alt> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                An alternate value of the preference.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <default>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The default value of the preference.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.65.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              get_preferences
 = element get_preferences
     {
       attribute nvt_oid { oid }?
       & attribute config_id { uuid }?
       & attribute preference { text }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              get_preferences_response
 = element get_preferences_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_preferences_response_preference*
     }

get_preferences_response_preference
 = element preference
     {
       get_preferences_response_preference_nvt
       & get_preferences_response_preference_name
       & get_preferences_response_preference_type
       & get_preferences_response_preference_value
       & get_preferences_response_preference_alt*
       & get_preferences_response_preference_default
     }

get_preferences_response_preference_nvt
 = element nvt
     {
       attribute oid { oid }
       & get_preferences_response_preference_nvt_name
     }

get_preferences_response_preference_nvt_name
 = element name
     {
       name
     }

get_preferences_response_preference_name
 = element name
     {
       name
     }

get_preferences_response_preference_type
 = element type
     {
       text
     }

get_preferences_response_preference_value
 = element value
     {
       text
     }

get_preferences_response_preference_alt
 = element alt
     {
       text
     }

get_preferences_response_preference_default
 = element default
     {
       text
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.65.3 Example: Get default preferences for all NVTs

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_preferences/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_preferences_response status="200"
                           status_text="OK">
   <preference>
     <name>Services[entry]:Network connection timeout :</name>
     <value>5</value>
   </preference>
   ...
 </get_preferences_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.65.3 Example: Get default preferences for a single NVT

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_preferences nvt_oid="1.3.6.1.4.1.25623.1.0.10330"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_preferences_response status="200"
                           status_text="OK">
   <preference>
     <name>Services[entry]:Network connection timeout :</name>
     <value>5</value>
     <default>5</default>
   </preference>
   ...
 </get_preferences_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.65.3 Example: Get preferences from a config for all NVTs

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_preferences config_id="daba56c8-73ec-11df-a475-002264764cea"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_preferences_response status="200"
                           status_text="OK">
   <preference>
     <nvt oid="1.3.6.1.4.1.25623.1.0.10330">
       <name>Services</name>
     </nvt>
     <name>Network connection timeout :</name>
     <type>entry</type>
     <value>5</value>
   </preference>
   ...
 </get_preferences_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.65.3 Example: Get preferences from a config for a single NVT

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_preferences config_id="daba56c8-73ec-11df-a475-002264764cea"
                  nvt_oid="1.3.6.1.4.1.25623.1.0.10330"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_preferences nvt_oid="1.3.6.1.4.1.25623.1.0.10330">
   <preference>
     <nvt oid="1.3.6.1.4.1.25623.1.0.10330">
       <name>Services</name>
     </nvt>
     <name>Network connection timeout :</name>
     <type>entry</type>
     <value>5</value>
     <default>5</default>
   </preference>
 </get_preferences>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.66 Command get_reports

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              In short: Get one or many reports.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The client uses the get_reports command to get report information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The XML report format is sent as XML. All other formats are sent in Base64 encoding.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.66.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @report_id (uuid) ID of single report to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @filter (text) Filter term to use to filter results, when getting a single report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @filt_id (uuid) ID of filter to use to filter results, when getting a single report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @report_filter (uuid) Filter term to use to filter reports.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @report_filt_id (uuid) ID of filter to use to filter reports.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @type ("scan", "assets" or "prognostic") Type of report to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @format_id (uuid) ID of required report format.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @alert_id (uuid) ID of alert to pass generated report to.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @first_result (integer) First result to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @max_results (integer) Maximum number of results to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @sort_order (sort_order)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @sort_field (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @apply_overrides (boolean) Whether to apply overrides to the results.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @levels (levels) Which threat levels to include in the report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @search_phrase (text) A string that all results in the report must contain.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @min_cvss_base (integer) Minimum CVSS base of results in report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @min_qod (integer) Minimum QoD of results in report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @notes (boolean) Whether to include notes in the report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @note_details (boolean) If notes are included, whether to include note details.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @overrides (boolean) Whether to include overrides in the report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @override_details (boolean) If overrides are included, whether to include override details.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @result_hosts_only (boolean) Whether to include only those hosts that have results.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @host (text) For "assets" or "prognostic", single host to retrieve.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @host_first_result (integer) For "assets" or "prognostic", first host to retrieve.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @host_max_results (integer) For "assets" or "prognostic", maximum hosts to retrieve.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @host_levels (levels) For "assets" or "prognostic", which threat levels to include in hosts.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @host_search_phrase (text) For "assets" or "prognostic", the search phrase to limit hosts to.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @pos (integer) For type "assets", position of report used, from end.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @delta_report_id (uuid) ID of second report, for producing a delta report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @delta_states () Letters for results to include: c)hanged, g)one, n)ew, s)ame.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @autofp ("0", "1" or "2") Whether to trust vendor security updates. 1 full match, 2 partial.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @result_hosts_only (boolean) Whether to include only hosts with results.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @ignore_pagination (boolean) Whether to ignore info used to split the report into pages like the filter terms "first" and "rows"..
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @timezone (timezone) The timezone to use for dates in the report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <report> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Actually attributes and either base64 or a report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • The group?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <reports>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @start (integer) First report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @max (integer) Maximum number of reports.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <report_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Number of reports after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Number of reports on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.66.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                get_reports
 = element get_reports
     {
       attribute report_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute report_filter { uuid }?
       & attribute report_filt_id { uuid }?
       & attribute type { xsd:token { pattern = "scan|assets|prognostic" } }?
       & attribute format_id { uuid }?
       & attribute alert_id { uuid }?
       & attribute first_result { integer }?
       & attribute max_results { integer }?
       & attribute sort_order { sort_order }?
       & attribute sort_field { text }?
       & attribute apply_overrides { boolean }?
       & attribute levels { levels }?
       & attribute search_phrase { text }?
       & attribute min_cvss_base { integer }?
       & attribute min_qod { integer }?
       & attribute notes { boolean }?
       & attribute note_details { boolean }?
       & attribute overrides { boolean }?
       & attribute override_details { boolean }?
       & attribute result_hosts_only { boolean }?
       & attribute host { text }?
       & attribute host_first_result { integer }?
       & attribute host_max_results { integer }?
       & attribute host_levels { levels }?
       & attribute host_search_phrase { text }?
       & attribute pos { integer }?
       & attribute delta_report_id { uuid }?
       & attribute delta_states {  }?
       & attribute autofp { xsd:token { pattern = "0|1|2" } }?
       & attribute result_hosts_only { boolean }?
       & attribute ignore_pagination { boolean }?
       & attribute timezone { timezone }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                get_reports_response
 = element get_reports_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_reports_response_report*
       & ( get_reports_response_filters
           & get_reports_response_sort
           & get_reports_response_reports
           & get_reports_response_report_count )?
     }

get_reports_response_report
 = element report    # type report
     {
       text # RNC limitation: base64
       & attribute id { uuid }
       & attribute format_id { uuid }
       & attribute extension { text }
       & attribute content_type { text }
       & attribute type { xsd:token { pattern = "scan|assets|prognostic" } }?
       & report_owner
       & report_name
       & report_comment
       & report_creation_time
       & report_modification_time
       & report_writable
       & report_in_use
       & report_task
       & report_report_format
       & report_report
     }

get_reports_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_reports_response_filters_term
       & get_reports_response_filters_name?
       & get_reports_response_filters_keywords
     }

get_reports_response_filters_term
 = element term
     {
       text
     }

get_reports_response_filters_name
 = element name
     {
       text
     }

get_reports_response_filters_keywords
 = element keywords
     {
       get_reports_response_filters_keywords_keyword*
     }

get_reports_response_filters_keywords_keyword
 = element keyword
     {
       get_reports_response_filters_keywords_keyword_column
       & get_reports_response_filters_keywords_keyword_relation
       & get_reports_response_filters_keywords_keyword_value
     }

get_reports_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_reports_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_reports_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_reports_response_sort
 = element sort
     {
       text
       & get_reports_response_sort_field
     }

get_reports_response_sort_field
 = element field
     {
       get_reports_response_sort_field_order
     }

get_reports_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_reports_response_reports
 = element reports
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_reports_response_report_count
 = element report_count
     {
       get_reports_response_report_count_filtered
       & get_reports_response_report_count_page
     }

get_reports_response_report_count_filtered
 = element filtered
     {
       integer
     }

get_reports_response_report_count_page
 = element page
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.66.3 Example: Get a report in PDF

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <get_reports report_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"
              format_id="1a60a67e-97d0-4cbf-bc77-f71b08e7043d"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <get_reports_response status="200"
                       status_text="OK">
   <report id="267a3405-e84a-47da-97b2-5fa0d2e8995e"
           format_id="1a60a67e-97d0-4cbf-bc77-f71b08e7043d"
           extension="pdf"
           content_type="application/pdf">hsisn3qaVFhkjFRG4...</report>
 </get_reports_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.66.3 Example: Get a report in XML

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <get_reports report_id="f0fdf522-276d-4893-9274-fb8699dc2270"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <get_reports_response status="200"
                       status_text="OK">
   <report id="f0fdf522-276d-4893-9274-fb8699dc2270"
           format_id="d5da9f67-8551-4e51-807b-b6a873d70e34"
           extension="xml"
           content_type="text/xml">
     <report id="f0fdf522-276d-4893-9274-fb8699dc2270">
       <omp>
         <version>6.0</version>
       </omp>
       <sort>
         <field>
           type
           <order>descending</order>
         </field>
       </sort>
       <filters id="0">
         hmlgd
         <term/>
         <phrase/>
         <notes>0</notes>
         <overrides>0</overrides>
         <apply_overrides>0</apply_overrides>
         <result_hosts_only>1</result_hosts_only>
         <min_cvss_base/>
         <autofp>0</autofp>
         <result_hosts_only>1</result_hosts_only>
         <filter>High</filter>
         <filter>Medium</filter>
         <filter>Low</filter>
         <filter>Log</filter>
         <filter>Debug</filter>
       </filters>
       <user_tags>
         <count>0</count>
       </user_tags>
       <scan_run_status>Done</scan_run_status>
       <hosts>
         <count>1</count>
       </hosts>
       <closed_cves>
         <count>0</count>
       </closed_cves>
       <vulns>
         <count>3</count>
       </vulns>
       <os>
         <count>1</count>
       </os>
       <apps>
         <count>2</count>
       </apps>
       <ssl_certs>
         <count>0</count>
       </ssl_certs>
       <result_count>
         <full>10</full>
         <filtered>10</filtered>
         <debug>
           <full>0</full>
           <filtered>0</filtered>
         </debug>
         <hole>
           <full>0</full>
           <filtered>0</filtered>
         </hole>
         <info>
           <full>7</full>
           <filtered>7</filtered>
         </info>
         <log>
           <full>0</full>
           <filtered>0</filtered>
         </log>
         <warning>
           <full>3</full>
           <filtered>3</filtered>
         </warning>
       </result_count>
       <task id="13bb418a-4220-4575-b35b-ec398bff7417">
         <name>dik mm</name>
       </task>
       <scan>
         <task/>
       </scan>
       <timestamp>2010-02-02T19:11:21+00:00</timestamp>
       <scan_start>2010-02-02T19:11:21+00:00</scan_start>
       <timezone>UTC</timezone>
       <timezone_abbrev>UTC</timezone_abbrev>
       <ports start="1"
              max="-1">
         <port>
           general/tcp
           <host>127.0.1.1</host>
           <severity>5.0</severity>
           <threat>Medium</threat>
         </port>
         ...
       </ports>
       <results start="1"
                max="-1">
         <result id="634f7a2e-8ca1-43b7-b6d7-0d4841449508">
           <host>127.0.1.1</host>
           <port>general/tcp</port>
           <nvt oid="1.3.6.1.4.1.25623.1.0.74">
             <name>Test NVT: fields with ISO-8859-1 chars ()</name>
             <cvss_base>5.0</cvss_base>
             <cve>CVE-2013-1406</cve>
             <bid>51702</bid>
             <tags>NOTAGS</tags>
             <cert>
               <cert_ref id="DFN-CERT-2013-0246"
                         type="DFN-CERT"/>
             </cert>
             <xref>NOXREF</xref>
           </nvt>
           <threat>Medium</threat>
           <description>Test with umlaut Warning Port 0.</description>
         </result>
         ...
       </results>
       <host_start>
         2010-02-02T19:11:21+00:00
         <host>127.0.1.1</host>
       </host_start>
       <host_end>
         2010-02-02T19:11:52+00:00
         <host>127.0.1.1</host>
       </host_end>
       <scan_end>2010-02-02T19:11:52+00:00</scan_end>
       <errors>
         <count>0</count>
       </errors>
     </report>
   </report>
 </get_reports_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.67 Command get_report_formats

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                In short: Get one or many report formats.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The client uses the get_report_formats command to get report format information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.67.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @report_format_id (uuid) ID of single report format to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @filt_id (uuid) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @trash (boolean) Whether to get the trashcan report formats instead.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @alerts (boolean) Whether to include alerts that use the report format.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @params (boolean) Whether to include report format parameters.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @details (boolean) Include report format file, signature and parameters.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <report_format> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <owner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Owner of the report format.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The name of the owner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The name of the report format.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <creation_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <modification_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <writable>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Whether the report format is global or in use.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <in_use>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Whether any alerts are using the report format.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <permissions>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Permissions that the current user has on the report format.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <permission> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The name of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <user_tags>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Info on tags attached to the report format.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Number of attached tags.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <tag> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Short info on an individual tag (only if details were requested).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @id (uuid) UUID of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Value of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Comment for the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <extension>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <content_type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <summary>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <description>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <global>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <predefined>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <alerts> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Alerts using the report format.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <alert> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @id (uuid) UUID of the alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Name of the alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Permissions the user has on the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • The group?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <file> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              One of the files used to generate the report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @name (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <signature>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The report format signature.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <trust>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Whether signature verification succeeded.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @name (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The time the trust was checked.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <active>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Whether the report format is active.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <param> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The name of the param.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The type of the param.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <min> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Minimum.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <max> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Maximum.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <options> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Selection options.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <option> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Option value.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The value of the param.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <default>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The fallback value of the param.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <report_formats>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @start (integer) First report format.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @max (integer) Maximum number of report formats.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <report_format_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Number of report formats after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Number of report formats on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.67.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        get_report_formats
 = element get_report_formats
     {
       attribute report_format_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute trash { boolean }?
       & attribute alerts { boolean }?
       & attribute params { boolean }?
       & attribute details { boolean }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        get_report_formats_response
 = element get_report_formats_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_report_formats_response_report_format*
       & get_report_formats_response_filters
       & get_report_formats_response_sort
       & get_report_formats_response_report_formats
       & get_report_formats_response_report_format_count
     }

get_report_formats_response_report_format
 = element report_format
     {
       attribute id { uuid }
       & get_report_formats_response_report_format_owner
       & get_report_formats_response_report_format_name
       & get_report_formats_response_report_format_creation_time
       & get_report_formats_response_report_format_modification_time
       & get_report_formats_response_report_format_writable
       & get_report_formats_response_report_format_in_use
       & get_report_formats_response_report_format_permissions
       & get_report_formats_response_report_format_user_tags
       & get_report_formats_response_report_format_extension
       & get_report_formats_response_report_format_content_type
       & get_report_formats_response_report_format_summary
       & get_report_formats_response_report_format_description
       & get_report_formats_response_report_format_global
       & get_report_formats_response_report_format_predefined
       & get_report_formats_response_report_format_alerts?
       & ( get_report_formats_response_report_format_file*
           & get_report_formats_response_report_format_signature )?
       & get_report_formats_response_report_format_trust
       & get_report_formats_response_report_format_active
       & get_report_formats_response_report_format_param*
     }

get_report_formats_response_report_format_owner
 = element owner
     {
       get_report_formats_response_report_format_owner_name
     }

get_report_formats_response_report_format_owner_name
 = element name
     {
       name
     }

get_report_formats_response_report_format_name
 = element name
     {
       name
     }

get_report_formats_response_report_format_creation_time
 = element creation_time
     {
       iso_time
     }

get_report_formats_response_report_format_modification_time
 = element modification_time
     {
       iso_time
     }

get_report_formats_response_report_format_writable
 = element writable
     {
       boolean
     }

get_report_formats_response_report_format_in_use
 = element in_use
     {
       boolean
     }

get_report_formats_response_report_format_permissions
 = element permissions
     {
       get_report_formats_response_report_format_permissions_permission*
     }

get_report_formats_response_report_format_permissions_permission
 = element permission
     {
       get_report_formats_response_report_format_permissions_permission_name
     }

get_report_formats_response_report_format_permissions_permission_name
 = element name
     {
       name
     }

get_report_formats_response_report_format_user_tags
 = element user_tags
     {
       get_report_formats_response_report_format_user_tags_count
       & get_report_formats_response_report_format_user_tags_tag*
     }

get_report_formats_response_report_format_user_tags_count
 = element count
     {
       integer
     }

get_report_formats_response_report_format_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & get_report_formats_response_report_format_user_tags_tag_name
       & get_report_formats_response_report_format_user_tags_tag_value
       & get_report_formats_response_report_format_user_tags_tag_comment
     }

get_report_formats_response_report_format_user_tags_tag_name
 = element name
     {
       text
     }

get_report_formats_response_report_format_user_tags_tag_value
 = element value
     {
       text
     }

get_report_formats_response_report_format_user_tags_tag_comment
 = element comment
     {
       text
     }

get_report_formats_response_report_format_summary
 = element summary
     {
       text
     }

get_report_formats_response_report_format_description
 = element description
     {
       text
     }

get_report_formats_response_report_format_extension
 = element extension
     {
       text
     }

get_report_formats_response_report_format_global
 = element global
     {
       boolean
     }

get_report_formats_response_report_format_content_type
 = element content_type
     {
       text
     }

get_report_formats_response_report_format_predefined
 = element predefined
     {
       boolean
     }

get_report_formats_response_report_format_alerts
 = element alerts
     {
       get_report_formats_response_report_format_alerts_alert*
     }

get_report_formats_response_report_format_alerts_alert
 = element alert
     {
       attribute id { uuid }
       & get_report_formats_response_report_format_alerts_alert_name
       & get_report_formats_response_report_format_alerts_alert_permissions?
     }

get_report_formats_response_report_format_alerts_alert_name
 = element name
     {
       name
     }

get_report_formats_response_report_format_alerts_alert_permissions
 = element permissions
     {
       ""
     }

get_report_formats_response_report_format_param
 = element param
     {
       get_report_formats_response_report_format_param_name
       & get_report_formats_response_report_format_param_type
       & get_report_formats_response_report_format_param_value
       & get_report_formats_response_report_format_param_default
     }

get_report_formats_response_report_format_param_name
 = element name
     {
       name
     }

get_report_formats_response_report_format_param_type
 = element type
     {
       text # RNC limitation: xsd:token { pattern = "boolean|integer|selection|string|text" }
       & get_report_formats_response_report_format_param_type_min?
       & get_report_formats_response_report_format_param_type_max?
       & get_report_formats_response_report_format_param_type_options?
     }

get_report_formats_response_report_format_param_type_min
 = element min
     {
       text
     }

get_report_formats_response_report_format_param_type_max
 = element max
     {
       text
     }

get_report_formats_response_report_format_param_type_options
 = element options
     {
       get_report_formats_response_report_format_param_type_options_option*
     }

get_report_formats_response_report_format_param_type_options_option
 = element option
     {
       text
     }

get_report_formats_response_report_format_param_value
 = element value
     {
       text
     }

get_report_formats_response_report_format_param_default
 = element default
     {
       text
     }

get_report_formats_response_report_format_file
 = element file
     {
       text # RNC limitation: base64
       & attribute name { text }
     }

get_report_formats_response_report_format_signature
 = element signature
     {
       text
     }

get_report_formats_response_report_format_trust
 = element trust
     {
       text # RNC limitation: xsd:token { pattern = "yes|no|unknown" }
       & attribute name { text }
       & get_report_formats_response_report_format_trust_time
     }

get_report_formats_response_report_format_trust_time
 = element time
     {
       iso_time
     }

get_report_formats_response_report_format_active
 = element active
     {
       boolean
     }

get_report_formats_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_report_formats_response_filters_term
       & get_report_formats_response_filters_name?
       & get_report_formats_response_filters_keywords
     }

get_report_formats_response_filters_term
 = element term
     {
       text
     }

get_report_formats_response_filters_name
 = element name
     {
       text
     }

get_report_formats_response_filters_keywords
 = element keywords
     {
       get_report_formats_response_filters_keywords_keyword*
     }

get_report_formats_response_filters_keywords_keyword
 = element keyword
     {
       get_report_formats_response_filters_keywords_keyword_column
       & get_report_formats_response_filters_keywords_keyword_relation
       & get_report_formats_response_filters_keywords_keyword_value
     }

get_report_formats_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_report_formats_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_report_formats_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_report_formats_response_sort
 = element sort
     {
       text
       & get_report_formats_response_sort_field
     }

get_report_formats_response_sort_field
 = element field
     {
       get_report_formats_response_sort_field_order
     }

get_report_formats_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_report_formats_response_report_formats
 = element report_formats
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_report_formats_response_report_format_count
 = element report_format_count
     {
       get_report_formats_response_report_format_count_filtered
       & get_report_formats_response_report_format_count_page
     }

get_report_formats_response_report_format_count_filtered
 = element filtered
     {
       integer
     }

get_report_formats_response_report_format_count_page
 = element page
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.67.3 Example: Get information about a report format

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <get_report_formats report_format_id="b993b6f5-f9fb-4e6e-9c94-dd46c00e058d"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <get_report_formats_response status="200"
                              status_text="OK">
   <report_format id="b993b6f5-f9fb-4e6e-9c94-dd46c00e058d">
     <name>HTML</name>
     <creation_time>2013-01-31T16:46:32+01:00</creation_time>
     <modification_time>2013-01-31T16:46:32+01:00</modification_time>
     <writable>1</writable>
     <in_use>0</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <extension>html</extension>
     <content_type>text/html</content_type>
     <summary>Single page HTML report.</summary>
     <description>
       A single HTML page listing results of a scan. Style information
       ...
     </description>
     <global>1</global>
     <predefined>1</predefined>
     <trust>
       no
       <time>Thu Dec 2 13:22:26 2010</time>
     </trust>
     <active>1</active>
   </report_format>
   ...
 </get_report_formats_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.67.3 Example: Export a report format

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <get_report_formats report_format_id="b993b6f5-f9fb-4e6e-9c94-dd46c00e058d"
                     details="1"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <get_report_formats_response status="200"
                              status_text="OK">
   <report_format id="b993b6f5-f9fb-4e6e-9c94-dd46c00e058d">
     <name>HTML</name>
     <comment/>
     <creation_time>2013-01-18T18:23:53+01:00</creation_time>
     <modification_time>2013-01-18T18:24:10+01:00</modification_time>
     <writable>1</writable>
     <in_use>0</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <extension>html</extension>
     <content_type>text/html</content_type>
     <summary>Single page HTML report.</summary>
     <description>
       A single HTML page listing results of a scan. Style information
       ...
     </description>
     <global>1</global>
     <predefined>1</predefined>
     <file name="HTML.xsl">
       PD9ldD4K
       ...
     </file>
     <file name="generate">
       IyEvAk
       ...
     </file>
     <signature/>
   </report_format>
   ...
 </get_report_formats_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.68 Command get_results

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Get results.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_results command to get result information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        If the request includes a notes flag, an overrides flag or an apply_overrides flag and any of these is true, then the request must also include a task ID.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.68.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @result_id (uuid) ID of single result to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @filt_id (uuid) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @task_id (uuid) ID of task for note and override handling.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @notes (boolean) Whether to include notes in the result.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @note_details (boolean) If notes are included, whether to include note details.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @overrides (boolean) Whether to include overrides in the result.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @override_details (boolean) If overrides are included, whether to include override details.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @apply_overrides (boolean) Whether to override result threat levels.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @autofp ("0", "1" or "2") Whether to trust vendor security updates. 1 full match, 2 partial.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @details (boolean) Whether to include additional details of the results.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <result> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <results>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @start (integer) First result.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @max (integer) Maximum number of results.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <result_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Number of results after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Number of results on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.68.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          get_results
 = element get_results
     {
       attribute result_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute task_id { uuid }?
       & attribute notes { boolean }?
       & attribute note_details { boolean }?
       & attribute overrides { boolean }?
       & attribute override_details { boolean }?
       & attribute apply_overrides { boolean }?
       & attribute autofp { xsd:token { pattern = "0|1|2" } }?
       & attribute details { boolean }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          get_results_response
 = element get_results_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_results_response_result*
       & get_results_response_filters
       & get_results_response_sort
       & get_results_response_results
       & get_results_response_result_count
     }

get_results_response_result
 = element result    # type result
     {
       attribute id { uuid }
       & result_name
       & result_owner
       & result_comment
       & result_creation_time
       & result_modification_time
       & result_user_tags?
       & result_report?
       & result_task?
       & result_host
       & result_port
       & result_nvt
       & result_scan_nvt_version
       & result_threat
       & result_severity
       & result_qod
       & result_original_threat?
       & result_original_severity?
       & result_description
       & result_delta?
       & result_details
       & result_detection
       & result_notes?
       & result_overrides?
     }

get_results_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_results_response_filters_term
       & get_results_response_filters_name?
       & get_results_response_filters_keywords
     }

get_results_response_filters_term
 = element term
     {
       text
     }

get_results_response_filters_name
 = element name
     {
       text
     }

get_results_response_filters_keywords
 = element keywords
     {
       get_results_response_filters_keywords_keyword*
     }

get_results_response_filters_keywords_keyword
 = element keyword
     {
       get_results_response_filters_keywords_keyword_column
       & get_results_response_filters_keywords_keyword_relation
       & get_results_response_filters_keywords_keyword_value
     }

get_results_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_results_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_results_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_results_response_sort
 = element sort
     {
       text
       & get_results_response_sort_field
     }

get_results_response_sort_field
 = element field
     {
       get_results_response_sort_field_order
     }

get_results_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_results_response_results
 = element results
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_results_response_result_count
 = element result_count
     {
       get_results_response_result_count_filtered
       & get_results_response_result_count_page
     }

get_results_response_result_count_filtered
 = element filtered
     {
       integer
     }

get_results_response_result_count_page
 = element page
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.68.3 Example: Get one or many results

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <get_results/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <get_results_response status="200"
                       status_text="OK">
   <result id="634f7a2e-8ca1-43b7-b6d7-0d4841449508">
     <owner>
       <name>admin</name>
     </owner>
     <comment/>
     <creation_time>2014-05-23T09:22:12Z</creation_time>
     <modification_time>2014-05-23T09:22:12Z</modification_time>
     <user_tags>
       <count>0</count>
     </user_tags>
     <host>127.0.1.1</host>
     <port>general/tcp</port>
     <nvt oid="1.3.6.1.4.1.25623.1.0.74">
       <name>Test NVT: fields with ISO-8859-1 chars</name>
       <cvss_base>5.0</cvss_base>
       <cve>CVE-2009-3095</cve>
       <bid>36254</bid>
       <tags>NOTAGS</tags>
       <cert/>
       <xref>NOXREF</xref>
     </nvt>
     <threat>Medium</threat>
     <description>Test with umlaut.</description>
   </result>
   ...
   <filters id="">
     <term>first=1 rows=-1 sort=name</term>
     <keywords>
       <keyword>
         <column>first</column>
         <relation>=</relation>
         <value>1</value>
       </keyword>
       ...
     </keywords>
   </filters>
   <sort>
     <field>
       name
       <order>ascending</order>
     </field>
   </sort>
   <results max="-1"
            start="1"/>
   <result_count>
     124
     <filtered>124</filtered>
     <page>124</page>
   </result_count>
 </get_results_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.68.3 Example: Get a result, including notes and overrides

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <get_results result_id="cac9e7c8-c726-49fd-a710-5f99079ab93e"
              task_id="40b236a9-2b0f-4813-b8c7-bc2b98d9d7e4"
              notes="1"
              overrides="1"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <get_results_response status="200"
                       status_text="OK">
   <result id="cac9e7c8-c726-49fd-a710-5f99079ab93e">
     <owner>
       <name>admin</name>
     </owner>
     <comment/>
     <creation_time>2014-05-23T09:22:12Z</creation_time>
     <modification_time>2014-05-23T09:22:12Z</modification_time>
     <user_tags>
       <count>0</count>
     </user_tags>
     <host>127.0.0.1</host>
     <port>general/tcp</port>
     <nvt oid="1.3.6.1.4.1.25623.1.0.75">
       <name>Test NVT: long lines</name>
       <cvss_base>9</cvss_base>
       <cve>CVE-2009-3095</cve>
       <bid>36254</bid>
       <tags>NOTAGS</tags>
       <cert/>
       <xref>NOXREF</xref>
     </nvt>
     <threat>High</threat>
     <description>Test with very long warning.</description>
     <original_threat>Medium</original_threat>
     <notes/>
     <overrides>
       <override id="b0832812-75f1-45eb-b676-99c6e6bf2b24">
         <nvt oid="1.3.6.1.4.1.25623.1.0.75">
           <name>Test NVT: long lines</name>
         </nvt>
         <text excerpt="0">Test override</text>
         <new_threat>High</new_threat>
         <orphan>0</orphan>
       </override>
     </overrides>
   </result>
   <filters id="">
     <term>first=1 rows=-1 sort=name</term>
     <keywords>
       <keyword>
         <column>first</column>
         <relation>=</relation>
         <value>1</value>
       </keyword>
       ...
     </keywords>
   </filters>
   <sort>
     <field>
       name
       <order>ascending</order>
     </field>
   </sort>
   <results max="-1"
            start="1"/>
   <result_count>
     1
     <filtered>1</filtered>
     <page>1</page>
   </result_count>
 </get_results_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.69 Command get_roles

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          In short: Get one or many roles.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The client uses the get_roles command to get role information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.69.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @role_id (uuid) ID of single role to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @filt_id (uuid) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @trash (boolean) Whether to get the trashcan roles instead.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <role> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <owner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Owner of the role.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The name of the owner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The name of the role.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The comment on the role.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <creation_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Date and time the role was created.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <modification_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Date and time the role was last modified.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <writable>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Whether the role is writable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <in_use>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Whether the role is in use.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <permissions>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Permissions that the current user has on the role.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <permission> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The name of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <user_tags>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Info on tags attached to the role.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Number of attached tags.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <tag> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Short info on an individual tag (only if details were requested).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @id (uuid) UUID of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Value of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Comment for the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <users>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        A comma-separated list of the users who have this role.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <roles>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @start (integer) First role.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @max (integer) Maximum number of roles.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <role_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Number of roles after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Number of roles on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    7.69.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    get_roles
 = element get_roles
     {
       attribute role_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute trash { boolean }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    get_roles_response
 = element get_roles_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_roles_response_role*
       & get_roles_response_filters
       & get_roles_response_sort
       & get_roles_response_roles
       & get_roles_response_role_count
     }

get_roles_response_role
 = element role
     {
       attribute id { uuid }
       & get_roles_response_role_owner
       & get_roles_response_role_name
       & get_roles_response_role_comment
       & get_roles_response_role_creation_time
       & get_roles_response_role_modification_time
       & get_roles_response_role_writable
       & get_roles_response_role_in_use
       & get_roles_response_role_permissions
       & get_roles_response_role_user_tags
       & get_roles_response_role_users
     }

get_roles_response_role_owner
 = element owner
     {
       get_roles_response_role_owner_name
     }

get_roles_response_role_owner_name
 = element name
     {
       name
     }

get_roles_response_role_name
 = element name
     {
       name
     }

get_roles_response_role_comment
 = element comment
     {
       text
     }

get_roles_response_role_creation_time
 = element creation_time
     {
       iso_time
     }

get_roles_response_role_modification_time
 = element modification_time
     {
       iso_time
     }

get_roles_response_role_users
 = element users
     {
       text
     }

get_roles_response_role_writable
 = element writable
     {
       boolean
     }

get_roles_response_role_in_use
 = element in_use
     {
       boolean
     }

get_roles_response_role_permissions
 = element permissions
     {
       get_roles_response_role_permissions_permission*
     }

get_roles_response_role_permissions_permission
 = element permission
     {
       get_roles_response_role_permissions_permission_name
     }

get_roles_response_role_permissions_permission_name
 = element name
     {
       name
     }

get_roles_response_role_user_tags
 = element user_tags
     {
       get_roles_response_role_user_tags_count
       & get_roles_response_role_user_tags_tag*
     }

get_roles_response_role_user_tags_count
 = element count
     {
       integer
     }

get_roles_response_role_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & get_roles_response_role_user_tags_tag_name
       & get_roles_response_role_user_tags_tag_value
       & get_roles_response_role_user_tags_tag_comment
     }

get_roles_response_role_user_tags_tag_name
 = element name
     {
       text
     }

get_roles_response_role_user_tags_tag_value
 = element value
     {
       text
     }

get_roles_response_role_user_tags_tag_comment
 = element comment
     {
       text
     }

get_roles_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_roles_response_filters_term
       & get_roles_response_filters_name?
       & get_roles_response_filters_keywords
     }

get_roles_response_filters_term
 = element term
     {
       text
     }

get_roles_response_filters_name
 = element name
     {
       text
     }

get_roles_response_filters_keywords
 = element keywords
     {
       get_roles_response_filters_keywords_keyword*
     }

get_roles_response_filters_keywords_keyword
 = element keyword
     {
       get_roles_response_filters_keywords_keyword_column
       & get_roles_response_filters_keywords_keyword_relation
       & get_roles_response_filters_keywords_keyword_value
     }

get_roles_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_roles_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_roles_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_roles_response_sort
 = element sort
     {
       text
       & get_roles_response_sort_field
     }

get_roles_response_sort_field
 = element field
     {
       get_roles_response_sort_field_order
     }

get_roles_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_roles_response_roles
 = element roles
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_roles_response_role_count
 = element role_count
     {
       get_roles_response_role_count_filtered
       & get_roles_response_role_count_page
     }

get_roles_response_role_count_filtered
 = element filtered
     {
       integer
     }

get_roles_response_role_count_page
 = element page
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    7.69.3 Example: Get one or many roles

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     <get_roles/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     <get_roles_response status="200"
                     status_text="OK">
   <role id="b493b7a8-7489-11df-a3ec-002264764cea">
     <name>Management</name>
     <comment>Managers</comment>
     <creation_time>Sun Jun 27 08:49:43 2010</creation_time>
     <modification_time>Sun Jun 27 08:49:43 2010</modification_time>
     <writable>1</writable>
     <in_use>0</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <users>sarah, frank</users>
   </role>
   ...
   <filters id="">
     <term>first=1 rows=-1 sort=name</term>
     <keywords>
       <keyword>
         <column>first</column>
         <relation>=</relation>
         <value>1</value>
       </keyword>
       ...
     </keywords>
   </filters>
   <sort>
     <field>
       name
       <order>ascending</order>
     </field>
   </sort>
   <roles max="-1"
          start="1"/>
   <role_count>
     1
     <filtered>1</filtered>
     <page>1</page>
   </role_count>
 </get_roles_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    7.70 Command get_scanners

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    In short: Get one or many scanners.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The client uses the get_scanners command to get scanner information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    7.70.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @scanner_id (uuid) ID of single scanner to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @filt_id (uuid) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @trash (boolean) Whether to get the trashcan scanners instead.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @details (boolean) Whether to include extra details like tasks using this scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <scanner> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <owner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Owner of the scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The name of the owner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The name of the scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The comment on the scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <creation_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <modification_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <writable>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Whether the scanner is writable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <in_use>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Whether any tasks are using the scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <permissions>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Permissions that the current user has on the scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <permission> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The name of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <user_tags>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Info on tags attached to the chedule.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Number of attached tags.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <tag> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Short info on an individual tag (only if details were requested).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @id (uuid) UUID of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Value of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Comment for the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <host>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Host of the scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <port>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Port of the scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Type of the scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <ca_pub>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        CA Certificate to verify the scanner's certificate.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <key_pub>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Certificate of credentials to authenticate with.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <tasks> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <task> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The name of the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Permissions the user has on the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <scanners>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @start (integer) First scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @max (integer) Maximum number of scanners.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <scanner_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Number of scanners after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Number of scanners on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.70.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          get_scanners
 = element get_scanners
     {
       attribute scanner_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute trash { boolean }?
       & attribute details { boolean }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          get_scanners_response
 = element get_scanners_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_scanners_response_scanner*
       & get_scanners_response_filters
       & get_scanners_response_sort
       & get_scanners_response_scanners
       & get_scanners_response_scanner_count
     }

get_scanners_response_scanner
 = element scanner
     {
       attribute id { uuid }
       & get_scanners_response_scanner_owner
       & get_scanners_response_scanner_name
       & get_scanners_response_scanner_comment
       & get_scanners_response_scanner_creation_time
       & get_scanners_response_scanner_modification_time
       & get_scanners_response_scanner_writable
       & get_scanners_response_scanner_in_use
       & get_scanners_response_scanner_permissions
       & get_scanners_response_scanner_user_tags
       & get_scanners_response_scanner_host
       & get_scanners_response_scanner_port
       & get_scanners_response_scanner_type
       & get_scanners_response_scanner_ca_pub
       & get_scanners_response_scanner_key_pub
       & get_scanners_response_scanner_tasks?
     }

get_scanners_response_scanner_owner
 = element owner
     {
       get_scanners_response_scanner_owner_name
     }

get_scanners_response_scanner_owner_name
 = element name
     {
       name
     }

get_scanners_response_scanner_name
 = element name
     {
       name
     }

get_scanners_response_scanner_comment
 = element comment
     {
       text
     }

get_scanners_response_scanner_creation_time
 = element creation_time
     {
       iso_time
     }

get_scanners_response_scanner_modification_time
 = element modification_time
     {
       iso_time
     }

get_scanners_response_scanner_writable
 = element writable
     {
       boolean
     }

get_scanners_response_scanner_in_use
 = element in_use
     {
       boolean
     }

get_scanners_response_scanner_permissions
 = element permissions
     {
       get_scanners_response_scanner_permissions_permission*
     }

get_scanners_response_scanner_permissions_permission
 = element permission
     {
       get_scanners_response_scanner_permissions_permission_name
     }

get_scanners_response_scanner_permissions_permission_name
 = element name
     {
       name
     }

get_scanners_response_scanner_user_tags
 = element user_tags
     {
       get_scanners_response_scanner_user_tags_count
       & get_scanners_response_scanner_user_tags_tag*
     }

get_scanners_response_scanner_user_tags_count
 = element count
     {
       integer
     }

get_scanners_response_scanner_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & get_scanners_response_scanner_user_tags_tag_name
       & get_scanners_response_scanner_user_tags_tag_value
       & get_scanners_response_scanner_user_tags_tag_comment
     }

get_scanners_response_scanner_user_tags_tag_name
 = element name
     {
       text
     }

get_scanners_response_scanner_user_tags_tag_value
 = element value
     {
       text
     }

get_scanners_response_scanner_user_tags_tag_comment
 = element comment
     {
       text
     }

get_scanners_response_scanner_host
 = element host
     {
       text
     }

get_scanners_response_scanner_port
 = element port
     {
       text
     }

get_scanners_response_scanner_type
 = element type
     {
       text
     }

get_scanners_response_scanner_ca_pub
 = element ca_pub
     {
       text
     }

get_scanners_response_scanner_key_pub
 = element key_pub
     {
       text
     }

get_scanners_response_scanner_tasks
 = element tasks
     {
       get_scanners_response_scanner_tasks_task*
     }

get_scanners_response_scanner_tasks_task
 = element task
     {
       attribute id { uuid }
       & get_scanners_response_scanner_tasks_task_name
       & get_scanners_response_scanner_tasks_task_permissions?
     }

get_scanners_response_scanner_tasks_task_name
 = element name
     {
       name
     }

get_scanners_response_scanner_tasks_task_permissions
 = element permissions
     {
       ""
     }

get_scanners_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_scanners_response_filters_term
       & get_scanners_response_filters_name?
       & get_scanners_response_filters_keywords
     }

get_scanners_response_filters_term
 = element term
     {
       text
     }

get_scanners_response_filters_name
 = element name
     {
       text
     }

get_scanners_response_filters_keywords
 = element keywords
     {
       get_scanners_response_filters_keywords_keyword*
     }

get_scanners_response_filters_keywords_keyword
 = element keyword
     {
       get_scanners_response_filters_keywords_keyword_column
       & get_scanners_response_filters_keywords_keyword_relation
       & get_scanners_response_filters_keywords_keyword_value
     }

get_scanners_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_scanners_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_scanners_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_scanners_response_sort
 = element sort
     {
       text
       & get_scanners_response_sort_field
     }

get_scanners_response_sort_field
 = element field
     {
       get_scanners_response_sort_field_order
     }

get_scanners_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_scanners_response_scanners
 = element scanners
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_scanners_response_scanner_count
 = element scanner_count
     {
       get_scanners_response_scanner_count_filtered
       & get_scanners_response_scanner_count_page
     }

get_scanners_response_scanner_count_filtered
 = element filtered
     {
       integer
     }

get_scanners_response_scanner_count_page
 = element page
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.70.3 Example: Get full details of a single scanner

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <get_scanners details="1"
               scanner_id="c33864a9-d3fd-44b3-8717-972bfb01dfcf"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <get_scanners_response status="200"
                        status_text="OK">
   <scanner id="c33864a9-d3fd-44b3-8717-972bfb01dfcf">
     <name>Default Scanner</name>
     <comment/>
     <creation_time>2014-01-01T13:57:25+01:00</creation_time>
     <modification_time>2014-01-18T12:07:36+01:00</modification_time>
     <writable>0</writable>
     <in_use>1</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <host>localhost</host>
     <port>9391</port>
     <type>2</type>
     <ca_pub>...</ca_pub>
     <key_pub>...</key_pub>
     <tasks>
       <task id="813864a9-d3fd-44b3-8717-972bfb01dfc0">
         <name>Debian desktops</name>
       </task>
       ...
     </tasks>
   </scanner>
   <truncate>...</truncate>
 </get_scanners_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.71 Command get_schedules

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          In short: Get one or many schedules.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The client uses the get_schedules command to get schedule information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.71.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @schedule_id (uuid) ID of single schedule to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @filt_id (uuid) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @trash (boolean) Whether to get the trashcan schedules instead.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @tasks (boolean) Whether to include tasks using the schedules.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <schedule> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <owner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Owner of the schedule.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The name of the owner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The name of the schedule.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The comment on the schedule.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <creation_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <modification_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <writable>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Whether the schedule is writable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <in_use>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Whether any tasks are using the schedule.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <permissions>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Permissions that the current user has on the schedule.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <permission> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The name of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <user_tags>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Info on tags attached to the schedule.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Number of attached tags.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <tag> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Short info on an individual tag (only if details were requested).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @id (uuid) UUID of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Value of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Comment for the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <first_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        First time the task ran or will run.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <next_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The next time the task will run.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <timezone>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The timezone that the schedule follows.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <timezone_abbrev>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The abbreviated name of the timezone.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <period>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                How often the task will run, in seconds.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <period_months>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  How often the task will run, months portion.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <simple_period>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Simple representation of period, if available.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <unit> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <duration>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      How long the task will run for (0 for entire task).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <simple_duration>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Simple representation of duration, if available.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <unit> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <tasks> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <task> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The name of the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Permissions the user has on the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <schedules>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @start (integer) First schedule.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @max (integer) Maximum number of schedules.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <schedule_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Number of schedules after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Number of schedules on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.71.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        get_schedules
 = element get_schedules
     {
       attribute schedule_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute trash { boolean }?
       & attribute tasks { boolean }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        get_schedules_response
 = element get_schedules_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_schedules_response_schedule*
       & get_schedules_response_filters
       & get_schedules_response_sort
       & get_schedules_response_schedules
       & get_schedules_response_schedule_count
     }

get_schedules_response_schedule
 = element schedule
     {
       attribute id { uuid }
       & get_schedules_response_schedule_owner
       & get_schedules_response_schedule_name
       & get_schedules_response_schedule_comment
       & get_schedules_response_schedule_creation_time
       & get_schedules_response_schedule_modification_time
       & get_schedules_response_schedule_writable
       & get_schedules_response_schedule_in_use
       & get_schedules_response_schedule_permissions
       & get_schedules_response_schedule_user_tags
       & get_schedules_response_schedule_first_time
       & get_schedules_response_schedule_next_time
       & get_schedules_response_schedule_timezone
       & get_schedules_response_schedule_timezone_abbrev
       & get_schedules_response_schedule_period
       & get_schedules_response_schedule_period_months
       & get_schedules_response_schedule_simple_period
       & get_schedules_response_schedule_duration
       & get_schedules_response_schedule_simple_duration
       & get_schedules_response_schedule_tasks?
     }

get_schedules_response_schedule_owner
 = element owner
     {
       get_schedules_response_schedule_owner_name
     }

get_schedules_response_schedule_owner_name
 = element name
     {
       name
     }

get_schedules_response_schedule_name
 = element name
     {
       name
     }

get_schedules_response_schedule_comment
 = element comment
     {
       text
     }

get_schedules_response_schedule_creation_time
 = element creation_time
     {
       iso_time
     }

get_schedules_response_schedule_modification_time
 = element modification_time
     {
       iso_time
     }

get_schedules_response_schedule_writable
 = element writable
     {
       boolean
     }

get_schedules_response_schedule_in_use
 = element in_use
     {
       boolean
     }

get_schedules_response_schedule_permissions
 = element permissions
     {
       get_schedules_response_schedule_permissions_permission*
     }

get_schedules_response_schedule_permissions_permission
 = element permission
     {
       get_schedules_response_schedule_permissions_permission_name
     }

get_schedules_response_schedule_permissions_permission_name
 = element name
     {
       name
     }

get_schedules_response_schedule_user_tags
 = element user_tags
     {
       get_schedules_response_schedule_user_tags_count
       & get_schedules_response_schedule_user_tags_tag*
     }

get_schedules_response_schedule_user_tags_count
 = element count
     {
       integer
     }

get_schedules_response_schedule_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & get_schedules_response_schedule_user_tags_tag_name
       & get_schedules_response_schedule_user_tags_tag_value
       & get_schedules_response_schedule_user_tags_tag_comment
     }

get_schedules_response_schedule_user_tags_tag_name
 = element name
     {
       text
     }

get_schedules_response_schedule_user_tags_tag_value
 = element value
     {
       text
     }

get_schedules_response_schedule_user_tags_tag_comment
 = element comment
     {
       text
     }

get_schedules_response_schedule_first_time
 = element first_time
     {
       iso_time
     }

get_schedules_response_schedule_next_time
 = element next_time
     {
       iso_time
     }

get_schedules_response_schedule_timezone
 = element timezone
     {
       timezone
     }

get_schedules_response_schedule_timezone_abbrev
 = element timezone_abbrev
     {
       text
     }

get_schedules_response_schedule_period
 = element period
     {
       integer
     }

get_schedules_response_schedule_period_months
 = element period_months
     {
       integer
     }

get_schedules_response_schedule_simple_period
 = element simple_period
     {
       text
       & get_schedules_response_schedule_simple_period_unit?
     }

get_schedules_response_schedule_simple_period_unit
 = element unit
     {
       time_unit
     }

get_schedules_response_schedule_duration
 = element duration
     {
       integer
     }

get_schedules_response_schedule_simple_duration
 = element simple_duration
     {
       text
       & get_schedules_response_schedule_simple_duration_unit?
     }

get_schedules_response_schedule_simple_duration_unit
 = element unit
     {
       time_unit
     }

get_schedules_response_schedule_tasks
 = element tasks
     {
       get_schedules_response_schedule_tasks_task*
     }

get_schedules_response_schedule_tasks_task
 = element task
     {
       attribute id { uuid }
       & get_schedules_response_schedule_tasks_task_name
       & get_schedules_response_schedule_tasks_task_permissions?
     }

get_schedules_response_schedule_tasks_task_name
 = element name
     {
       name
     }

get_schedules_response_schedule_tasks_task_permissions
 = element permissions
     {
       ""
     }

get_schedules_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_schedules_response_filters_term
       & get_schedules_response_filters_name?
       & get_schedules_response_filters_keywords
     }

get_schedules_response_filters_term
 = element term
     {
       text
     }

get_schedules_response_filters_name
 = element name
     {
       text
     }

get_schedules_response_filters_keywords
 = element keywords
     {
       get_schedules_response_filters_keywords_keyword*
     }

get_schedules_response_filters_keywords_keyword
 = element keyword
     {
       get_schedules_response_filters_keywords_keyword_column
       & get_schedules_response_filters_keywords_keyword_relation
       & get_schedules_response_filters_keywords_keyword_value
     }

get_schedules_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_schedules_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_schedules_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_schedules_response_sort
 = element sort
     {
       text
       & get_schedules_response_sort_field
     }

get_schedules_response_sort_field
 = element field
     {
       get_schedules_response_sort_field_order
     }

get_schedules_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_schedules_response_schedules
 = element schedules
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_schedules_response_schedule_count
 = element schedule_count
     {
       get_schedules_response_schedule_count_filtered
       & get_schedules_response_schedule_count_page
     }

get_schedules_response_schedule_count_filtered
 = element filtered
     {
       integer
     }

get_schedules_response_schedule_count_page
 = element page
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.71.3 Example: Get full details of a single schedule

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <get_schedules schedule_id="c33864a9-d3fd-44b3-8717-972bfb01dfcf"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <get_schedules_response status="200"
                         status_text="OK">
   <schedule id="c33864a9-d3fd-44b3-8717-972bfb01dfcf">
     <name>Overnight</name>
     <comment>3 hours, starting at 12h00.</comment>
     <creation_time>2013-01-01T13:57:25+01:00</creation_time>
     <modification_time>2013-01-18T12:07:36+01:00</modification_time>
     <writable>0</writable>
     <in_use>1</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <first_time>Tue Jun 29 00:00:00 2010</first_time>
     <next_time>Tue Jun 29 00:00:00 2010</next_time>
     <period>86400</period>
     <period_months>0</period_months>
     <simple_period>
       1
       <unit>day</unit>
     </simple_period>
     <duration>10800</duration>
     <simple_duration>
       3
       <unit>hour</unit>
     </simple_duration>
     <timezone>Europe/Berlin</timezone>
     <timezone_abbrev>CEST</timezone_abbrev>
     <tasks>
       <task id="d4daf4c4-25c7-40ac-87d3-38e489f34330">
         <name>Task 1</name>
       </task>
     </tasks>
   </schedule>
   <truncate>...</truncate>
 </get_schedules_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.72 Command get_settings

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Get one or many settings.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_settings command to get the settings.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.72.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @setting_id (uuid) ID of single setting to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @filter (text) Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @first (integer) First result.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @max (integer) Maximum number of results in response.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @sort_order (sort_order)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @sort_field (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <settings>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @start (integer) First setting.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @max (integer) Maximum number of settings.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <setting> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <setting_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Number of settings after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Number of settings on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    7.72.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    get_settings
 = element get_settings
     {
       attribute setting_id { uuid }?
       & attribute filter { text }?
       & attribute first { integer }?
       & attribute max { integer }?
       & attribute sort_order { sort_order }?
       & attribute sort_field { text }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    get_settings_response
 = element get_settings_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_settings_response_filters
       & get_settings_response_settings
       & get_settings_response_setting*
       & get_settings_response_setting_count
     }

get_settings_response_filters
 = element filters
     {
       get_settings_response_filters_term
     }

get_settings_response_filters_term
 = element term
     {
       text
     }

get_settings_response_settings
 = element settings
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_settings_response_setting
 = element setting
     {
       get_settings_response_setting_name
       & get_settings_response_setting_comment
       & get_settings_response_setting_value
     }

get_settings_response_setting_name
 = element name
     {
       text
     }

get_settings_response_setting_comment
 = element comment
     {
       text
     }

get_settings_response_setting_value
 = element value
     {
       text
     }

get_settings_response_setting_count
 = element setting_count
     {
       get_settings_response_setting_count_filtered
       & get_settings_response_setting_count_page
     }

get_settings_response_setting_count_filtered
 = element filtered
     {
       integer
     }

get_settings_response_setting_count_page
 = element page
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    7.72.3 Example: Get one or many settings

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     <get_settings/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     <get_settings_response status="200"
                        status_text="OK">
   <settings>
     <setting id="5f5a8712-8017-11e1-8556-406186ea4fc5">
       <name>Rows Per Page</name>
       <value>15</value>
     </setting>
   </settings>
 </get_settings_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    7.73 Command get_slaves

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    In short: Get one or many slaves.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The client uses the get_slaves command to get slave information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    7.73.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @slave_id (uuid) ID of single slave to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @filt_id (uuid) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @trash (boolean) Whether to get the trashcan slaves instead.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @tasks (boolean) Whether to include a list of tasks using the slave.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <slave> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <owner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Owner of the slave.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The name of the owner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The name of the slave.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The comment on the slave.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <creation_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <modification_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <writable>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Whether the slave is writable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <in_use>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Whether any slaves are using the slave.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <permissions>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Permissions that the current user has on the slave.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <permission> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The name of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <user_tags>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Info on tags attached to the slave.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Number of attached tags.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <tag> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Short info on an individual tag (only if details were requested).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @id (uuid) UUID of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Value of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Comment for the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <host>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The host that the slave Manager is running on.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <port>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The port that the slave Manager is serving on the host.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <login>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Login name on the slave Manager.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <tasks> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <task> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The name of the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Permissions the user has on the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <slaves>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @start (integer) First slave.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @max (integer) Maximum number of slaves.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <slave_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Number of slaves after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Number of slaves on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.73.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      get_slaves
 = element get_slaves
     {
       attribute slave_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute trash { boolean }?
       & attribute tasks { boolean }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      get_slaves_response
 = element get_slaves_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_slaves_response_slave*
       & get_slaves_response_filters
       & get_slaves_response_sort
       & get_slaves_response_slaves
       & get_slaves_response_slave_count
     }

get_slaves_response_slave
 = element slave
     {
       attribute id { uuid }
       & get_slaves_response_slave_owner
       & get_slaves_response_slave_name
       & get_slaves_response_slave_comment
       & get_slaves_response_slave_creation_time
       & get_slaves_response_slave_modification_time
       & get_slaves_response_slave_writable
       & get_slaves_response_slave_in_use
       & get_slaves_response_slave_permissions
       & get_slaves_response_slave_user_tags
       & get_slaves_response_slave_host
       & get_slaves_response_slave_port
       & get_slaves_response_slave_login
       & get_slaves_response_slave_tasks?
     }

get_slaves_response_slave_owner
 = element owner
     {
       get_slaves_response_slave_owner_name
     }

get_slaves_response_slave_owner_name
 = element name
     {
       name
     }

get_slaves_response_slave_name
 = element name
     {
       name
     }

get_slaves_response_slave_comment
 = element comment
     {
       text
     }

get_slaves_response_slave_creation_time
 = element creation_time
     {
       iso_time
     }

get_slaves_response_slave_modification_time
 = element modification_time
     {
       iso_time
     }

get_slaves_response_slave_writable
 = element writable
     {
       boolean
     }

get_slaves_response_slave_in_use
 = element in_use
     {
       boolean
     }

get_slaves_response_slave_permissions
 = element permissions
     {
       get_slaves_response_slave_permissions_permission*
     }

get_slaves_response_slave_permissions_permission
 = element permission
     {
       get_slaves_response_slave_permissions_permission_name
     }

get_slaves_response_slave_permissions_permission_name
 = element name
     {
       name
     }

get_slaves_response_slave_user_tags
 = element user_tags
     {
       get_slaves_response_slave_user_tags_count
       & get_slaves_response_slave_user_tags_tag*
     }

get_slaves_response_slave_user_tags_count
 = element count
     {
       integer
     }

get_slaves_response_slave_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & get_slaves_response_slave_user_tags_tag_name
       & get_slaves_response_slave_user_tags_tag_value
       & get_slaves_response_slave_user_tags_tag_comment
     }

get_slaves_response_slave_user_tags_tag_name
 = element name
     {
       text
     }

get_slaves_response_slave_user_tags_tag_value
 = element value
     {
       text
     }

get_slaves_response_slave_user_tags_tag_comment
 = element comment
     {
       text
     }

get_slaves_response_slave_host
 = element host
     {
       text
     }

get_slaves_response_slave_port
 = element port
     {
       text
     }

get_slaves_response_slave_login
 = element login
     {
       text
     }

get_slaves_response_slave_tasks
 = element tasks
     {
       get_slaves_response_slave_tasks_task*
     }

get_slaves_response_slave_tasks_task
 = element task
     {
       attribute id { uuid }
       & get_slaves_response_slave_tasks_task_name
       & get_slaves_response_slave_tasks_task_permissions?
     }

get_slaves_response_slave_tasks_task_name
 = element name
     {
       name
     }

get_slaves_response_slave_tasks_task_permissions
 = element permissions
     {
       ""
     }

get_slaves_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_slaves_response_filters_term
       & get_slaves_response_filters_name?
       & get_slaves_response_filters_keywords
     }

get_slaves_response_filters_term
 = element term
     {
       text
     }

get_slaves_response_filters_name
 = element name
     {
       text
     }

get_slaves_response_filters_keywords
 = element keywords
     {
       get_slaves_response_filters_keywords_keyword*
     }

get_slaves_response_filters_keywords_keyword
 = element keyword
     {
       get_slaves_response_filters_keywords_keyword_column
       & get_slaves_response_filters_keywords_keyword_relation
       & get_slaves_response_filters_keywords_keyword_value
     }

get_slaves_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_slaves_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_slaves_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_slaves_response_sort
 = element sort
     {
       text
       & get_slaves_response_sort_field
     }

get_slaves_response_sort_field
 = element field
     {
       get_slaves_response_sort_field_order
     }

get_slaves_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_slaves_response_slaves
 = element slaves
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_slaves_response_slave_count
 = element slave_count
     {
       get_slaves_response_slave_count_filtered
       & get_slaves_response_slave_count_page
     }

get_slaves_response_slave_count_filtered
 = element filtered
     {
       integer
     }

get_slaves_response_slave_count_page
 = element page
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.73.3 Example: Get one or many slaves, including task lists

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <get_slaves tasks="1"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <get_slaves_response status="200"
                      status_text="OK">
   <slave id="c33864a9-d3fd-44b3-8717-972bfb01dfcf">
     <name>Bangkok</name>
     <comment>Manager in Bangkok department.</comment>
     <creation_time>2012-11-09T13:57:25+01:00</creation_time>
     <modification_time>2012-12-28T12:07:36+01:00</modification_time>
     <writable>1</writable>
     <in_use>0</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <host>192.0.32.10</host>
     <login>sally</login>
     <tasks>
       <task id="c33864a9-d3fd-44b3-8717-972bfb01dfc0">
         <name>Debian desktops</name>
       </task>
       ...
     </tasks>
   </slave>
   ...
 </get_slaves_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.74 Command get_system_reports

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Get one or many system reports.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the get_system_reports command to get system reports.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.74.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @name (text) A string describing the required report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @duration (integer) The number of seconds into the past that the report should include.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @brief (boolean) Whether to include the actual reports.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @slave_id (uuid) Slave from which to get report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <system_report> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The name of the system report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <title>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The title of the system report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <report> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @format ("png" or "txt")
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @duration (integer)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.74.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          get_system_reports
 = element get_system_reports
     {
       attribute name { text }?
       & attribute duration { integer }?
       & attribute brief { boolean }?
       & attribute slave_id { uuid }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          get_system_reports_response
 = element get_system_reports_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_system_reports_response_system_report*
     }

get_system_reports_response_system_report
 = element system_report
     {
       get_system_reports_response_system_report_name
       & get_system_reports_response_system_report_title
       & get_system_reports_response_system_report_report?
     }

get_system_reports_response_system_report_name
 = element name
     {
       name
     }

get_system_reports_response_system_report_title
 = element title
     {
       text
     }

get_system_reports_response_system_report_report
 = element report
     {
       text # RNC limitation: base64
       & attribute format { xsd:token { pattern = "png|txt" } }
       & attribute duration { integer }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.74.3 Example: Get listing of available system reports

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <get_system_reports brief="1"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <get_system_reports_response status="200"
                              status_text="OK">
   <system_report>
     <name>proc</name>
     <title>Processes</title>
   </system_report>
   <system_report>
     <name>load</name>
     <title>System Load</title>
   </system_report>
   <system_report>
     <name>cpu_0</name>
     <title>CPU Usage: CPU 0</title>
   </system_report>
   ...
 </get_system_reports_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.74.3 Example: Get a system report

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <get_system_reports name="proc"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <get_system_reports_response status="200"
                              status_text="OK">
   <system_report>
     <name>proc</name>
     <title>Processes</title>
     <report format="png"
             duration="86400">
       iVBORw0KGgoAAAANSUhEUgAAArkAAAE...2bEdAAAAAElFTkSuQmCC
     </report>
   </system_report>
 </get_system_reports_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.75 Command get_tags

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          In short: Get one or many tags.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The client uses the get_tags command to get tag information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.75.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @tag_id (uuid) ID of single tag to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @filt_id (text) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @trash (boolean) Whether to get tags from the trashcan instead.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @names_only (boolean) Whether to get only distinct tag names.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <tag> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Information on a single tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @id (uuid) uuid of the tag (omitted when using names_only).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • The group?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <permissions>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Permissions that the current user has on the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <permission> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The name of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <owner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Owner of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The name of the owner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Comment for the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <creation_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Date and time the tag was created.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <modification_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Date and time the tag was last modified.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <writable>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Whether the tag is writable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <in_use>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Whether any tasks are using the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <resource>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Identifies a resource the tag is attached to.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @id (uuid) ID of the resource the tag is attached to.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    OMP type of the resource the tag is attached to.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Name of the attach resource if available, empty otherwise.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <trash>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Whether the resource is in the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Permissions the user has on the resource.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Value associated with the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <active>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Whether the tag is active.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <orphan>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Whether the tag is attached to a nonexistent resource.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <tags>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <tag_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Number of tags after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Number of tags on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.75.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        get_tags
 = element get_tags
     {
       attribute tag_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { text }?
       & attribute trash { boolean }?
       & attribute names_only { boolean }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        get_tags_response
 = element get_tags_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_tags_response_tag*
       & get_tags_response_filters
       & get_tags_response_sort
       & get_tags_response_tags
       & get_tags_response_tag_count
     }

get_tags_response_tag
 = element tag
     {
       attribute id { uuid }?
       & get_tags_response_tag_name
       & ( get_tags_response_tag_permissions
           & get_tags_response_tag_owner
           & get_tags_response_tag_comment
           & get_tags_response_tag_creation_time
           & get_tags_response_tag_modification_time
           & get_tags_response_tag_writable
           & get_tags_response_tag_in_use
           & get_tags_response_tag_resource
           & get_tags_response_tag_value
           & get_tags_response_tag_active
           & get_tags_response_tag_orphan )?
     }

get_tags_response_tag_permissions
 = element permissions
     {
       get_tags_response_tag_permissions_permission*
     }

get_tags_response_tag_permissions_permission
 = element permission
     {
       get_tags_response_tag_permissions_permission_name
     }

get_tags_response_tag_permissions_permission_name
 = element name
     {
       name
     }

get_tags_response_tag_owner
 = element owner
     {
       get_tags_response_tag_owner_name
     }

get_tags_response_tag_owner_name
 = element name
     {
       name
     }

get_tags_response_tag_name
 = element name
     {
       text
     }

get_tags_response_tag_comment
 = element comment
     {
       text
     }

get_tags_response_tag_creation_time
 = element creation_time
     {
       iso_time
     }

get_tags_response_tag_modification_time
 = element modification_time
     {
       iso_time
     }

get_tags_response_tag_writable
 = element writable
     {
       boolean
     }

get_tags_response_tag_in_use
 = element in_use
     {
       boolean
     }

get_tags_response_tag_resource
 = element resource
     {
       attribute id { uuid }
       & get_tags_response_tag_resource_type
       & get_tags_response_tag_resource_name
       & get_tags_response_tag_resource_trash
       & get_tags_response_tag_resource_permissions?
     }

get_tags_response_tag_resource_type
 = element type
     {
       text
     }

get_tags_response_tag_resource_name
 = element name
     {
       text
     }

get_tags_response_tag_resource_trash
 = element trash
     {
       boolean
     }

get_tags_response_tag_resource_permissions
 = element permissions
     {
       ""
     }

get_tags_response_tag_value
 = element value
     {
       text
     }

get_tags_response_tag_active
 = element active
     {
       boolean
     }

get_tags_response_tag_orphan
 = element orphan
     {
       boolean
     }

get_tags_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_tags_response_filters_term
       & get_tags_response_filters_name?
       & get_tags_response_filters_keywords
     }

get_tags_response_filters_term
 = element term
     {
       text
     }

get_tags_response_filters_name
 = element name
     {
       text
     }

get_tags_response_filters_keywords
 = element keywords
     {
       get_tags_response_filters_keywords_keyword*
     }

get_tags_response_filters_keywords_keyword
 = element keyword
     {
       get_tags_response_filters_keywords_keyword_column
       & get_tags_response_filters_keywords_keyword_relation
       & get_tags_response_filters_keywords_keyword_value
     }

get_tags_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_tags_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_tags_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_tags_response_sort
 = element sort
     {
       text
       & get_tags_response_sort_field
     }

get_tags_response_sort_field
 = element field
     {
       get_tags_response_sort_field_order
     }

get_tags_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_tags_response_tags
 = element tags
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_tags_response_tag_count
 = element tag_count
     {
       get_tags_response_tag_count_filtered
       & get_tags_response_tag_count_page
     }

get_tags_response_tag_count_filtered
 = element filtered
     {
       integer
     }

get_tags_response_tag_count_page
 = element page
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.75.3 Example: Get one or many tags

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <get_tags/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <get_tags_response status="200"
                    status_text="OK">
   <tag id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6">
     <name>geo:long</name>
     <comment/>
     <creation_time>Fri Apr 12 08:49:43 2013</creation_time>
     <modification_time>Fri Apr 12 08:49:43 2013</modification_time>
     <writable>1</writable>
     <in_use>0</in_use>
     <resource id="b493b7a8-7489-11df-a3ec-002264764cea">
       <type>target</type>
       <name>Server 1</name>
       <trash>0</trash>
     </resource>
     <value>52.2788</value>
     <active>1</active>
     <orphaned>0</orphaned>
   </tag>
   ...
 </get_tags_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.76 Command get_targets

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Get one or many targets.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_targets command to get target information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.76.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @target_id (uuid) ID of single target to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @filt_id (uuid) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @trash (boolean) Whether to get the trashcan targets instead.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @tasks (boolean) Whether to include list of tasks that use the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <target> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <owner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Owner of the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The name of the owner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The name of the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The comment on the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <creation_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Date and time the target was created.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <modification_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Date and time the target was last modified.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <writable>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Whether the target is writable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <in_use>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Whether any tasks are using the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <permissions>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Permissions that the current user has on the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <permission> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The name of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <user_tags>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Info on tags attached to the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Number of attached tags.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <tag> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Short info on an individual tag (only if details were requested).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @id (uuid) UUID of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Value of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Comment for the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <hosts>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      A list of hosts.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <exclude_hosts>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        A list of hosts to exclude.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <max_hosts>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The maximum number of hosts defined by the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <ssh_lsc_credential>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @id (uuid_or_empty)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The name of the SSH LSC credential.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Permissions the user has on the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <port>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The port the LSCs will use.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <trash>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Whether the LSC credential is in the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <smb_lsc_credential>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @id (uuid_or_empty)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The name of the SMB LSC credential.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Permissions the user has on the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <trash>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Whether the LSC credential is in the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <esxi_lsc_credential>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @id (uuid_or_empty)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The name of the ESXi LSC credential.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Permissions the user has on the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <trash>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Whether the LSC credential is in the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <permissions>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Permissions that the current user has on the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <permission> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The name of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <port_range>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Port range of the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <port_list>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The name of the port_list.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Permissions the user has on the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <trash>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Whether the port_list is in the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <alive_tests>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Which alive tests to use.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <reverse_lookup_only>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Whether to scan only hosts that have names.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <reverse_lookup_unify>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Whether to scan only one IP when multiple IPs have the same name.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <tasks> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                All tasks using the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <task> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The name of the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Permissions the user has on the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <targets>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @start (integer) First target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @max (integer) Maximum number of targets.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <target_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Number of targets after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Number of targets on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.76.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              get_targets
 = element get_targets
     {
       attribute target_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute trash { boolean }?
       & attribute tasks { boolean }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              get_targets_response
 = element get_targets_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_targets_response_target*
       & get_targets_response_filters
       & get_targets_response_sort
       & get_targets_response_targets
       & get_targets_response_target_count
     }

get_targets_response_target
 = element target
     {
       attribute id { uuid }
       & get_targets_response_target_owner
       & get_targets_response_target_name
       & get_targets_response_target_comment
       & get_targets_response_target_creation_time
       & get_targets_response_target_modification_time
       & get_targets_response_target_writable
       & get_targets_response_target_in_use
       & get_targets_response_target_permissions
       & get_targets_response_target_user_tags
       & get_targets_response_target_hosts
       & get_targets_response_target_exclude_hosts
       & get_targets_response_target_max_hosts
       & get_targets_response_target_ssh_lsc_credential
       & get_targets_response_target_smb_lsc_credential
       & get_targets_response_target_esxi_lsc_credential
       & get_targets_response_target_permissions
       & get_targets_response_target_port_range
       & get_targets_response_target_port_list
       & get_targets_response_target_alive_tests
       & get_targets_response_target_reverse_lookup_only
       & get_targets_response_target_reverse_lookup_unify
       & get_targets_response_target_tasks?
     }

get_targets_response_target_owner
 = element owner
     {
       get_targets_response_target_owner_name
     }

get_targets_response_target_owner_name
 = element name
     {
       name
     }

get_targets_response_target_name
 = element name
     {
       name
     }

get_targets_response_target_comment
 = element comment
     {
       text
     }

get_targets_response_target_creation_time
 = element creation_time
     {
       iso_time
     }

get_targets_response_target_modification_time
 = element modification_time
     {
       iso_time
     }

get_targets_response_target_hosts
 = element hosts
     {
       text
     }

get_targets_response_target_exclude_hosts
 = element exclude_hosts
     {
       text
     }

get_targets_response_target_max_hosts
 = element max_hosts
     {
       integer
     }

get_targets_response_target_writable
 = element writable
     {
       boolean
     }

get_targets_response_target_in_use
 = element in_use
     {
       boolean
     }

get_targets_response_target_permissions
 = element permissions
     {
       get_targets_response_target_permissions_permission*
     }

get_targets_response_target_permissions_permission
 = element permission
     {
       get_targets_response_target_permissions_permission_name
     }

get_targets_response_target_permissions_permission_name
 = element name
     {
       name
     }

get_targets_response_target_user_tags
 = element user_tags
     {
       get_targets_response_target_user_tags_count
       & get_targets_response_target_user_tags_tag*
     }

get_targets_response_target_user_tags_count
 = element count
     {
       integer
     }

get_targets_response_target_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & get_targets_response_target_user_tags_tag_name
       & get_targets_response_target_user_tags_tag_value
       & get_targets_response_target_user_tags_tag_comment
     }

get_targets_response_target_user_tags_tag_name
 = element name
     {
       text
     }

get_targets_response_target_user_tags_tag_value
 = element value
     {
       text
     }

get_targets_response_target_user_tags_tag_comment
 = element comment
     {
       text
     }

get_targets_response_target_ssh_lsc_credential
 = element ssh_lsc_credential
     {
       attribute id { uuid_or_empty }
       & get_targets_response_target_ssh_lsc_credential_name
       & get_targets_response_target_ssh_lsc_credential_permissions?
       & get_targets_response_target_ssh_lsc_credential_port
       & get_targets_response_target_ssh_lsc_credential_trash
     }

get_targets_response_target_ssh_lsc_credential_name
 = element name
     {
       name
     }

get_targets_response_target_ssh_lsc_credential_permissions
 = element permissions
     {
       ""
     }

get_targets_response_target_ssh_lsc_credential_port
 = element port
     {
       text
     }

get_targets_response_target_ssh_lsc_credential_trash
 = element trash
     {
       boolean
     }

get_targets_response_target_smb_lsc_credential
 = element smb_lsc_credential
     {
       attribute id { uuid_or_empty }
       & get_targets_response_target_smb_lsc_credential_name
       & get_targets_response_target_smb_lsc_credential_permissions?
       & get_targets_response_target_smb_lsc_credential_trash
     }

get_targets_response_target_smb_lsc_credential_name
 = element name
     {
       name
     }

get_targets_response_target_smb_lsc_credential_permissions
 = element permissions
     {
       ""
     }

get_targets_response_target_smb_lsc_credential_trash
 = element trash
     {
       boolean
     }

get_targets_response_target_esxi_lsc_credential
 = element esxi_lsc_credential
     {
       attribute id { uuid_or_empty }
       & get_targets_response_target_esxi_lsc_credential_name
       & get_targets_response_target_esxi_lsc_credential_permissions?
       & get_targets_response_target_esxi_lsc_credential_trash
     }

get_targets_response_target_esxi_lsc_credential_name
 = element name
     {
       name
     }

get_targets_response_target_esxi_lsc_credential_permissions
 = element permissions
     {
       ""
     }

get_targets_response_target_esxi_lsc_credential_trash
 = element trash
     {
       boolean
     }

get_targets_response_target_port_range
 = element port_range
     {
       name
     }

get_targets_response_target_port_list
 = element port_list
     {
       attribute id { uuid }
       & get_targets_response_target_port_list_name
       & get_targets_response_target_port_list_permissions?
       & get_targets_response_target_port_list_trash
     }

get_targets_response_target_port_list_name
 = element name
     {
       name
     }

get_targets_response_target_port_list_permissions
 = element permissions
     {
       ""
     }

get_targets_response_target_port_list_trash
 = element trash
     {
       boolean
     }

get_targets_response_target_alive_tests
 = element alive_tests
     {
       alive_test
     }

get_targets_response_target_reverse_lookup_only
 = element reverse_lookup_only
     {
       boolean
     }

get_targets_response_target_reverse_lookup_unify
 = element reverse_lookup_unify
     {
       boolean
     }

get_targets_response_target_tasks
 = element tasks
     {
       get_targets_response_target_tasks_task*
     }

get_targets_response_target_tasks_task
 = element task
     {
       attribute id { uuid }
       & get_targets_response_target_tasks_task_name
       & get_targets_response_target_tasks_task_permissions?
     }

get_targets_response_target_tasks_task_name
 = element name
     {
       name
     }

get_targets_response_target_tasks_task_permissions
 = element permissions
     {
       ""
     }

get_targets_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_targets_response_filters_term
       & get_targets_response_filters_name?
       & get_targets_response_filters_keywords
     }

get_targets_response_filters_term
 = element term
     {
       text
     }

get_targets_response_filters_name
 = element name
     {
       text
     }

get_targets_response_filters_keywords
 = element keywords
     {
       get_targets_response_filters_keywords_keyword*
     }

get_targets_response_filters_keywords_keyword
 = element keyword
     {
       get_targets_response_filters_keywords_keyword_column
       & get_targets_response_filters_keywords_keyword_relation
       & get_targets_response_filters_keywords_keyword_value
     }

get_targets_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_targets_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_targets_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_targets_response_sort
 = element sort
     {
       text
       & get_targets_response_sort_field
     }

get_targets_response_sort_field
 = element field
     {
       get_targets_response_sort_field_order
     }

get_targets_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_targets_response_targets
 = element targets
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_targets_response_target_count
 = element target_count
     {
       get_targets_response_target_count_filtered
       & get_targets_response_target_count_page
     }

get_targets_response_target_count_filtered
 = element filtered
     {
       integer
     }

get_targets_response_target_count_page
 = element page
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.76.3 Example: Get one or many targets

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_targets/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_targets_response status="200"
                       status_text="OK">
   <target id="b493b7a8-7489-11df-a3ec-002264764cea">
     <name>Localhost</name>
     <comment/>
     <creation_time>Sun Jun 27 08:49:43 2010</creation_time>
     <modification_time>Sun Jun 27 08:49:43 2010</modification_time>
     <writable>0</writable>
     <in_use>7</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <hosts>localhost</hosts>
     <max_hosts>1</max_hosts>
     <ssh_lsc_credential id="">
       <name/>
     </ssh_lsc_credential>
     <smb_lsc_credential id="">
       <name/>
     </smb_lsc_credential>
     <esxi_lsc_credential id="">
       <name/>
     </esxi_lsc_credential>
   </target>
   ...
 </get_targets_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.76.3 Example: Get a single target, including tasks using the target

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_targets target_id="1f28d970-17ef-4c69-ba8a-13827059f2b9"
              tasks="1"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <get_targets_response status="200"
                       status_text="OK">
   <target id="1f28d970-17ef-4c69-ba8a-13827059f2b9">
     <name>dik</name>
     <comment>dik mm</comment>
     <creation_time>Sun Jun 27 08:49:43 2010</creation_time>
     <modification_time>Sun Jun 27 08:49:43 2010</modification_time>
     <writable>0</writable>
     <in_use>4</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <hosts>dik.example.org</hosts>
     <max_hosts>1</max_hosts>
     <ssh_lsc_credential id="58ff2793-2dc7-43fe-85f9-20bfac5a87e4">
       <name>mm</name>
     </ssh_lsc_credential>
     <smb_lsc_credential id="">
       <name/>
     </smb_lsc_credential>
     <esxi_lsc_credential id="">
       <name/>
     </esxi_lsc_credential>
     <tasks>
       <task id="13bb418a-4220-4575-b35b-ec398bff7417">
         <name>dik mm</name>
       </task>
       ...
     </tasks>
   </target>
 </get_targets_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.77 Command get_tasks

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              In short: Get one or many tasks.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The client uses the get_tasks command to get task information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              As a convenience for clients the response includes a task count and the values of the sort order, sort field and apply overrides flag that the manager applied when selecting the tasks.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.77.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @task_id (uuid) ID of single task to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @filt_id (uuid) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @trash (boolean) Whether to get the trashcan tasks instead.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @details (boolean) Whether to include full task details.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <apply_overrides>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <task> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <owner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Owner of the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The name of the owner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The name of the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The comment on the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <creation_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Creation time of the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <modification_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Last time the task was modified.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <writable>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Whether the task is writable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <in_use>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Whether this task is currently in use.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <permissions>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Permissions that the current user has on the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <permission> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The name of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <user_tags>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Info on tags attached to the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Number of attached tags.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <tag> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Short info on an individual tag (only if details were requested).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @id (uuid) UUID of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Value of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Comment for the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <status>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The run status of the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <progress>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The percentage of the task that is complete.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <host_progress> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Percentage complete for a particular host.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <host>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <alterable>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Whether the task is an Alterable Task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <config>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The scan configuration used by the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The name of the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Permissions the user has on the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <trash>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Whether the config is in the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <target>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The hosts scanned by the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The name of the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Permissions the user has on the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <trash>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Whether the target is in the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <hosts_ordering>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The order hosts are scanned in.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <scanner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The scanner used to scan the target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The name of the scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Permissions the user has on the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Type of the scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <alert>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        An alert that applies to the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @id (uuid_or_empty)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The name of the alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Permissions the user has on the alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <trash>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Whether the alert is in the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <observers>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Users allowed to observe this task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <group> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Group allowed to observe this task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The name of the group.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <role> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Role allowed to observe this task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The name of the role.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <schedule>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  When the task will run.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @id (uuid_or_empty)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The name of the schedule.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Permissions the user has on the schedule.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <trash>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Whether the schedule is in the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <schedule_periods>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        A limit to the number of times the task will be scheduled, or 0 for no limit.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <slave>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The slave that the task will run on.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The name of the slave.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Permissions the user has on the slave.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <trash>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Whether the slave is in the trashcan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <report_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Number of reports.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <finished>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Number of reports where the scan completed.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <trend>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <current_report> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <report>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <timestamp>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <first_report> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <report>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <timestamp>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <scan_end>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <result_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Result counts for this report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <debug>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <false_positive>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <log>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <info>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <warning>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <hole>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <severity>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Maximum severity of the report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <last_report> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <report>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <timestamp>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <scan_end>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <result_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Result counts for this report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <debug>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <false_positive>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <log>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <info>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <warning>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <hole>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <severity>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Maximum severity of the report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <second_last_report> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <report>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <timestamp>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <scan_end>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <result_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Result counts for this report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <debug>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <false_positive>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <log>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <info>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <warning>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <hole>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <severity>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Maximum severity of the report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <reports> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <report> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <timestamp>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <scan_end>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <scan_run_status>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Run status of task scan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <result_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Result counts for this report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <debug>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <false_positive>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <log>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <info>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <warning>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <hole>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <severity>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Maximum severity of the report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <result_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Result count for the entire task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <preferences>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <preference> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Full name of preference, suitable for end users.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <scanner_name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Compact name of preference, from scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <tasks>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @start (integer) First task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @max (integer) Maximum number of tasks.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <task_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Number of tasks after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Number of tasks on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.77.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  get_tasks
 = element get_tasks
     {
       attribute task_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
       & attribute trash { boolean }?
       & attribute details { boolean }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  get_tasks_response
 = element get_tasks_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_tasks_response_apply_overrides
       & get_tasks_response_task*
       & get_tasks_response_filters
       & get_tasks_response_sort
       & get_tasks_response_tasks
       & get_tasks_response_task_count
     }

get_tasks_response_apply_overrides
 = element apply_overrides
     {
       xsd:token { pattern = "0|1" }
     }

get_tasks_response_task
 = element task
     {
       attribute id { uuid }
       & get_tasks_response_task_owner
       & get_tasks_response_task_name
       & get_tasks_response_task_comment
       & get_tasks_response_task_creation_time
       & get_tasks_response_task_modification_time
       & get_tasks_response_task_writable
       & get_tasks_response_task_in_use
       & get_tasks_response_task_permissions
       & get_tasks_response_task_user_tags
       & get_tasks_response_task_status
       & get_tasks_response_task_progress
       & get_tasks_response_task_alterable
       & get_tasks_response_task_config
       & get_tasks_response_task_target
       & get_tasks_response_task_hosts_ordering
       & get_tasks_response_task_scanner
       & get_tasks_response_task_alert
       & get_tasks_response_task_observers
       & get_tasks_response_task_schedule
       & get_tasks_response_task_schedule_periods
       & get_tasks_response_task_slave
       & get_tasks_response_task_report_count
       & get_tasks_response_task_trend
       & get_tasks_response_task_current_report?
       & get_tasks_response_task_first_report?
       & get_tasks_response_task_last_report?
       & get_tasks_response_task_second_last_report?
       & get_tasks_response_task_reports*
       & get_tasks_response_task_result_count
       & get_tasks_response_task_preferences
     }

get_tasks_response_task_owner
 = element owner
     {
       get_tasks_response_task_owner_name
     }

get_tasks_response_task_owner_name
 = element name
     {
       name
     }

get_tasks_response_task_name
 = element name
     {
       name
     }

get_tasks_response_task_comment
 = element comment
     {
       text
     }

get_tasks_response_task_creation_time
 = element creation_time
     {
       iso_time
     }

get_tasks_response_task_modification_time
 = element modification_time
     {
       iso_time
     }

get_tasks_response_task_writable
 = element writable
     {
       boolean
     }

get_tasks_response_task_in_use
 = element in_use
     {
       boolean
     }

get_tasks_response_task_permissions
 = element permissions
     {
       get_tasks_response_task_permissions_permission*
     }

get_tasks_response_task_permissions_permission
 = element permission
     {
       get_tasks_response_task_permissions_permission_name
     }

get_tasks_response_task_permissions_permission_name
 = element name
     {
       name
     }

get_tasks_response_task_user_tags
 = element user_tags
     {
       get_tasks_response_task_user_tags_count
       & get_tasks_response_task_user_tags_tag*
     }

get_tasks_response_task_user_tags_count
 = element count
     {
       integer
     }

get_tasks_response_task_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & get_tasks_response_task_user_tags_tag_name
       & get_tasks_response_task_user_tags_tag_value
       & get_tasks_response_task_user_tags_tag_comment
     }

get_tasks_response_task_user_tags_tag_name
 = element name
     {
       text
     }

get_tasks_response_task_user_tags_tag_value
 = element value
     {
       text
     }

get_tasks_response_task_user_tags_tag_comment
 = element comment
     {
       text
     }

get_tasks_response_task_status
 = element status
     {
       task_status
     }

get_tasks_response_task_progress
 = element progress
     {
       text # RNC limitation: integer
       & get_tasks_response_task_progress_host_progress*
     }

get_tasks_response_task_progress_host_progress
 = element host_progress
     {
       text # RNC limitation: integer
       & get_tasks_response_task_progress_host_progress_host
     }

get_tasks_response_task_progress_host_progress_host
 = element host
     {
       text
     }

get_tasks_response_task_alterable
 = element alterable
     {
       boolean
     }

get_tasks_response_task_config
 = element config
     {
       attribute id { uuid }
       & get_tasks_response_task_config_name
       & get_tasks_response_task_config_permissions?
       & get_tasks_response_task_config_trash
     }

get_tasks_response_task_config_name
 = element name
     {
       name
     }

get_tasks_response_task_config_permissions
 = element permissions
     {
       ""
     }

get_tasks_response_task_config_trash
 = element trash
     {
       boolean
     }

get_tasks_response_task_target
 = element target
     {
       attribute id { uuid }
       & get_tasks_response_task_target_name
       & get_tasks_response_task_target_permissions?
       & get_tasks_response_task_target_trash
     }

get_tasks_response_task_target_name
 = element name
     {
       name
     }

get_tasks_response_task_target_permissions
 = element permissions
     {
       ""
     }

get_tasks_response_task_target_trash
 = element trash
     {
       boolean
     }

get_tasks_response_task_hosts_ordering
 = element hosts_ordering
     {
       text
     }

get_tasks_response_task_scanner
 = element scanner
     {
       attribute id { uuid }
       & get_tasks_response_task_scanner_name
       & get_tasks_response_task_scanner_permissions?
       & get_tasks_response_task_scanner_type
     }

get_tasks_response_task_scanner_name
 = element name
     {
       name
     }

get_tasks_response_task_scanner_type
 = element type
     {
       integer
     }

get_tasks_response_task_scanner_permissions
 = element permissions
     {
       ""
     }

get_tasks_response_task_alert
 = element alert
     {
       attribute id { uuid_or_empty }
       & get_tasks_response_task_alert_name
       & get_tasks_response_task_alert_permissions?
       & get_tasks_response_task_alert_trash
     }

get_tasks_response_task_alert_name
 = element name
     {
       name
     }

get_tasks_response_task_alert_permissions
 = element permissions
     {
       ""
     }

get_tasks_response_task_alert_trash
 = element trash
     {
       boolean
     }

get_tasks_response_task_observers
 = element observers
     {
       text # RNC limitation: user_list
       & get_tasks_response_task_observers_group*
       & get_tasks_response_task_observers_role*
     }

get_tasks_response_task_observers_group
 = element group
     {
       attribute id { uuid }
       & get_tasks_response_task_observers_group_name
     }

get_tasks_response_task_observers_group_name
 = element name
     {
       name
     }

get_tasks_response_task_observers_role
 = element role
     {
       attribute id { uuid }
       & get_tasks_response_task_observers_role_name
     }

get_tasks_response_task_observers_role_name
 = element name
     {
       name
     }

get_tasks_response_task_schedule
 = element schedule
     {
       attribute id { uuid_or_empty }
       & get_tasks_response_task_schedule_name
       & get_tasks_response_task_schedule_permissions?
       & get_tasks_response_task_schedule_trash
     }

get_tasks_response_task_schedule_name
 = element name
     {
       name
     }

get_tasks_response_task_schedule_permissions
 = element permissions
     {
       ""
     }

get_tasks_response_task_schedule_trash
 = element trash
     {
       boolean
     }

get_tasks_response_task_schedule_periods
 = element schedule_periods
     {
       integer
     }

get_tasks_response_task_slave
 = element slave
     {
       attribute id { uuid }
       & get_tasks_response_task_slave_name
       & get_tasks_response_task_slave_permissions?
       & get_tasks_response_task_slave_trash
     }

get_tasks_response_task_slave_name
 = element name
     {
       name
     }

get_tasks_response_task_slave_permissions
 = element permissions
     {
       ""
     }

get_tasks_response_task_slave_trash
 = element trash
     {
       boolean
     }

get_tasks_response_task_report_count
 = element report_count
     {
       text # RNC limitation: integer
       & get_tasks_response_task_report_count_finished
     }

get_tasks_response_task_report_count_finished
 = element finished
     {
       integer
     }

get_tasks_response_task_trend
 = element trend
     {
       task_trend
     }

get_tasks_response_task_current_report
 = element current_report
     {
       get_tasks_response_task_current_report_report
     }

get_tasks_response_task_current_report_report
 = element report
     {
       attribute id { uuid }
       & get_tasks_response_task_current_report_report_timestamp
     }

get_tasks_response_task_current_report_report_timestamp
 = element timestamp
     {
       iso_time
     }

get_tasks_response_task_first_report
 = element first_report
     {
       get_tasks_response_task_first_report_report
     }

get_tasks_response_task_first_report_report
 = element report
     {
       attribute id { uuid }
       & get_tasks_response_task_first_report_report_timestamp
       & get_tasks_response_task_first_report_report_scan_end
       & get_tasks_response_task_first_report_report_result_count
       & get_tasks_response_task_first_report_report_severity
     }

get_tasks_response_task_first_report_report_timestamp
 = element timestamp
     {
       iso_time
     }

get_tasks_response_task_first_report_report_scan_end
 = element scan_end
     {
       iso_time
     }

get_tasks_response_task_first_report_report_result_count
 = element result_count
     {
       get_tasks_response_task_first_report_report_result_count_debug
       & get_tasks_response_task_first_report_report_result_count_false_positive
       & get_tasks_response_task_first_report_report_result_count_log
       & get_tasks_response_task_first_report_report_result_count_info
       & get_tasks_response_task_first_report_report_result_count_warning
       & get_tasks_response_task_first_report_report_result_count_hole
     }

get_tasks_response_task_first_report_report_result_count_debug
 = element debug
     {
       integer
     }

get_tasks_response_task_first_report_report_result_count_false_positive
 = element false_positive
     {
       integer
     }

get_tasks_response_task_first_report_report_result_count_log
 = element log
     {
       integer
     }

get_tasks_response_task_first_report_report_result_count_info
 = element info
     {
       integer
     }

get_tasks_response_task_first_report_report_result_count_warning
 = element warning
     {
       integer
     }

get_tasks_response_task_first_report_report_result_count_hole
 = element hole
     {
       integer
     }

get_tasks_response_task_first_report_report_severity
 = element severity
     {
       severity
     }

get_tasks_response_task_last_report
 = element last_report
     {
       get_tasks_response_task_last_report_report
     }

get_tasks_response_task_last_report_report
 = element report
     {
       attribute id { uuid }
       & get_tasks_response_task_last_report_report_timestamp
       & get_tasks_response_task_last_report_report_scan_end
       & get_tasks_response_task_last_report_report_result_count
       & get_tasks_response_task_last_report_report_severity
     }

get_tasks_response_task_last_report_report_timestamp
 = element timestamp
     {
       iso_time
     }

get_tasks_response_task_last_report_report_scan_end
 = element scan_end
     {
       iso_time
     }

get_tasks_response_task_last_report_report_result_count
 = element result_count
     {
       get_tasks_response_task_last_report_report_result_count_debug
       & get_tasks_response_task_last_report_report_result_count_false_positive
       & get_tasks_response_task_last_report_report_result_count_log
       & get_tasks_response_task_last_report_report_result_count_info
       & get_tasks_response_task_last_report_report_result_count_warning
       & get_tasks_response_task_last_report_report_result_count_hole
     }

get_tasks_response_task_last_report_report_result_count_debug
 = element debug
     {
       integer
     }

get_tasks_response_task_last_report_report_result_count_false_positive
 = element false_positive
     {
       integer
     }

get_tasks_response_task_last_report_report_result_count_log
 = element log
     {
       integer
     }

get_tasks_response_task_last_report_report_result_count_info
 = element info
     {
       integer
     }

get_tasks_response_task_last_report_report_result_count_warning
 = element warning
     {
       integer
     }

get_tasks_response_task_last_report_report_result_count_hole
 = element hole
     {
       integer
     }

get_tasks_response_task_last_report_report_severity
 = element severity
     {
       severity
     }

get_tasks_response_task_second_last_report
 = element second_last_report
     {
       get_tasks_response_task_second_last_report_report
     }

get_tasks_response_task_second_last_report_report
 = element report
     {
       attribute id { uuid }
       & get_tasks_response_task_second_last_report_report_timestamp
       & get_tasks_response_task_second_last_report_report_scan_end
       & get_tasks_response_task_second_last_report_report_result_count
       & get_tasks_response_task_second_last_report_report_severity
     }

get_tasks_response_task_second_last_report_report_timestamp
 = element timestamp
     {
       iso_time
     }

get_tasks_response_task_second_last_report_report_scan_end
 = element scan_end
     {
       iso_time
     }

get_tasks_response_task_second_last_report_report_result_count
 = element result_count
     {
       get_tasks_response_task_second_last_report_report_result_count_debug
       & get_tasks_response_task_second_last_report_report_result_count_false_positive
       & get_tasks_response_task_second_last_report_report_result_count_log
       & get_tasks_response_task_second_last_report_report_result_count_info
       & get_tasks_response_task_second_last_report_report_result_count_warning
       & get_tasks_response_task_second_last_report_report_result_count_hole
     }

get_tasks_response_task_second_last_report_report_result_count_debug
 = element debug
     {
       integer
     }

get_tasks_response_task_second_last_report_report_result_count_false_positive
 = element false_positive
     {
       integer
     }

get_tasks_response_task_second_last_report_report_result_count_log
 = element log
     {
       integer
     }

get_tasks_response_task_second_last_report_report_result_count_info
 = element info
     {
       integer
     }

get_tasks_response_task_second_last_report_report_result_count_warning
 = element warning
     {
       integer
     }

get_tasks_response_task_second_last_report_report_result_count_hole
 = element hole
     {
       integer
     }

get_tasks_response_task_second_last_report_report_severity
 = element severity
     {
       severity
     }

get_tasks_response_task_reports
 = element reports
     {
       get_tasks_response_task_reports_report*
     }

get_tasks_response_task_reports_report
 = element report
     {
       attribute id { uuid }
       & get_tasks_response_task_reports_report_timestamp
       & get_tasks_response_task_reports_report_scan_end
       & get_tasks_response_task_reports_report_scan_run_status
       & get_tasks_response_task_reports_report_result_count
       & get_tasks_response_task_reports_report_severity
     }

get_tasks_response_task_reports_report_timestamp
 = element timestamp
     {
       iso_time
     }

get_tasks_response_task_reports_report_scan_end
 = element scan_end
     {
       iso_time
     }

get_tasks_response_task_reports_report_scan_run_status
 = element scan_run_status
     {
       task_status
     }

get_tasks_response_task_reports_report_result_count
 = element result_count
     {
       get_tasks_response_task_reports_report_result_count_debug
       & get_tasks_response_task_reports_report_result_count_false_positive
       & get_tasks_response_task_reports_report_result_count_log
       & get_tasks_response_task_reports_report_result_count_info
       & get_tasks_response_task_reports_report_result_count_warning
       & get_tasks_response_task_reports_report_result_count_hole
     }

get_tasks_response_task_reports_report_result_count_debug
 = element debug
     {
       integer
     }

get_tasks_response_task_reports_report_result_count_false_positive
 = element false_positive
     {
       integer
     }

get_tasks_response_task_reports_report_result_count_log
 = element log
     {
       integer
     }

get_tasks_response_task_reports_report_result_count_info
 = element info
     {
       integer
     }

get_tasks_response_task_reports_report_result_count_warning
 = element warning
     {
       integer
     }

get_tasks_response_task_reports_report_result_count_hole
 = element hole
     {
       integer
     }

get_tasks_response_task_reports_report_severity
 = element severity
     {
       severity
     }

get_tasks_response_task_result_count
 = element result_count
     {
       text
     }

get_tasks_response_task_preferences
 = element preferences
     {
       get_tasks_response_task_preferences_preference*
     }

get_tasks_response_task_preferences_preference
 = element preference
     {
       get_tasks_response_task_preferences_preference_name
       & get_tasks_response_task_preferences_preference_scanner_name
       & get_tasks_response_task_preferences_preference_value
     }

get_tasks_response_task_preferences_preference_name
 = element name
     {
       text
     }

get_tasks_response_task_preferences_preference_scanner_name
 = element scanner_name
     {
       text
     }

get_tasks_response_task_preferences_preference_value
 = element value
     {
       text
     }

get_tasks_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_tasks_response_filters_term
       & get_tasks_response_filters_name?
       & get_tasks_response_filters_keywords
     }

get_tasks_response_filters_term
 = element term
     {
       text
     }

get_tasks_response_filters_name
 = element name
     {
       text
     }

get_tasks_response_filters_keywords
 = element keywords
     {
       get_tasks_response_filters_keywords_keyword*
     }

get_tasks_response_filters_keywords_keyword
 = element keyword
     {
       get_tasks_response_filters_keywords_keyword_column
       & get_tasks_response_filters_keywords_keyword_relation
       & get_tasks_response_filters_keywords_keyword_value
     }

get_tasks_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_tasks_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_tasks_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_tasks_response_sort
 = element sort
     {
       text
       & get_tasks_response_sort_field
     }

get_tasks_response_sort_field
 = element field
     {
       get_tasks_response_sort_field_order
     }

get_tasks_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_tasks_response_tasks
 = element tasks
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_tasks_response_task_count
 = element task_count
     {
       get_tasks_response_task_count_filtered
       & get_tasks_response_task_count_page
     }

get_tasks_response_task_count_filtered
 = element filtered
     {
       integer
     }

get_tasks_response_task_count_page
 = element page
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.77.3 Example: Get one or many tasks

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   <get_tasks/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   <get_tasks_response status="200"
                     status_text="OK">
   <apply_overrides>0</apply_overrides>
   <task id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6">
     <name>Scan Webserver</name>
     <comment>Scan of the web server.</comment>
     <creation_time>2013-01-03T13:50:03+01:00</creation_time>
     <modification_time>2013-01-11T16:03:24+01:00</modification_time>
     <writable>1</writable>
     <in_use>0</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <owner>
       <name>admin</name>
     </owner>
     <observers/>
     <alterable>0</alterable>
     <config id="daba56c8-73ec-11df-a475-002264764cea">
       <name>Full and fast</name>
     </config>
     <target id="1f28d970-17ef-4c69-ba8a-13827059f2b9">
       <name>dik</name>
     </target>
     <scanner id="34891919-37ff-5c69-1a2a-089e9018308a">
       <name>foo scanner</name>
       <type>2</type>
     </scanner>
     <slave id="">
       <name/>
     </slave>
     <status>Done</status>
     <progress>-1</progress>
     <report_count>
       2
       <finished>2</finished>
     </report_count>
     <trend/>
     <schedule id="">
       <name/>
       <next_time>over</next_time>
     </schedule>
     <first_report>
       <report id="f0fdf522-276d-4893-9274-fb8699dc2270">
         <timestamp>Mon Feb 1 19:11:20 2010</timestamp>
         <result_count>
           <debug>0</debug>
           <hole>0</hole>
           <info>7</info>
           <log>0</log>
           <warning>3</warning>
         </result_count>
         <severity>5.0</severity>
       </report>
     </first_report>
     <last_report>
       <report id="f0fdf522-276d-4893-9274-fb8699dc2270">
         <timestamp>Mon Feb 1 19:11:20 2010</timestamp>
         <result_count>
           <debug>0</debug>
           <hole>0</hole>
           <info>7</info>
           <log>0</log>
           <warning>3</warning>
         </result_count>
         <severity>5.0</severity>
       </report>
     </last_report>
     <second_last_report>
       <report id="f0fdf522-276d-4893-9274-fb8699dc2270">
         <timestamp>Mon Feb 1 19:11:20 2010</timestamp>
         <result_count>
           <debug>0</debug>
           <hole>0</hole>
           <info>7</info>
           <log>0</log>
           <warning>3</warning>
         </result_count>
         <severity>5.0</severity>
       </report>
     </second_last_report>
     <alert id="">
       <name/>
     </alert>
     <preferences>
       <preference>
         <name>Maximum concurrently executed NVTs per host</name>
         <scanner_name>max_checks</scanner_name>
         <value>4</value>
       </preference>
       <preference>
         <name>Maximum concurrently scanned hosts</name>
         <scanner_name>max_hosts</scanner_name>
         <value>20</value>
       </preference>
       <preference>
         <name>Add results to Asset Management</name>
         <scanner_name>in_assets</scanner_name>
         <value>yes</value>
       </preference>
     </preferences>
   </task>
   <task id="f14747d3-a4d7-4e79-99bb-a0a1276cb78c">
     <name>Scan Mailserver</name>
     ...
   </task>
 </get_tasks_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.77.3 Example: Get a single task, including all reports

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   <get_tasks task_id="f14747d3-a4d7-4e79-99bb-a0a1276cb78c"
            details="1"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   <get_tasks_response status="200"
                     status_text="OK">
   <apply_overrides>0</apply_overrides>
   <task id="13bb418a-4220-4575-b35b-ec398bff7417">
     <name>Scan Mailserver</name>
     <comment>Scan of the web server.</comment>
     <creation_time>2013-01-03T13:50:03+01:00</creation_time>
     <modification_time>2013-01-11T16:03:24+01:00</modification_time>
     <writable>1</writable>
     <in_use>0</in_use>
     <user_tags>
       <count>0</count>
     </user_tags>
     <owner>
       <name>admin</name>
     </owner>
     <observers/>
     <alterable>1</alterable>
     <config id="daba56c8-73ec-11df-a475-002264764cea">
       <name>Full and fast</name>
     </config>
     <target id="1f28d970-17ef-4c69-ba8a-13827059f2b9">
       <name>dik</name>
     </target>
     <slave id="">
       <name/>
     </slave>
     <status>Done</status>
     <progress>-1</progress>
     <report_count>
       2
       <finished>2</finished>
     </report_count>
     <trend/>
     <schedule id="">
       <name/>
       <next_time>over</next_time>
     </schedule>
     <first_report>
       <report id="f0fdf522-276d-4893-9274-fb8699dc2270">
         <timestamp>Mon Feb 1 19:11:20 2010</timestamp>
         <result_count>
           <debug>0</debug>
           <hole>0</hole>
           <info>7</info>
           <log>0</log>
           <warning>3</warning>
         </result_count>
         <severity>5.0</severity>
       </report>
     </first_report>
     <last_report>
       <report id="2688e6c7-db29-4505-80f1-0fd4a09e1011">
         <timestamp>Mon Feb 1 19:11:20 2010</timestamp>
         <result_count>
           <debug>0</debug>
           <hole>0</hole>
           <info>7</info>
           <log>0</log>
           <warning>3</warning>
         </result_count>
         <severity>5.0</severity>
       </report>
     </last_report>
     <second_last_report>
       <report id="f0fdf522-276d-4893-9274-fb8699dc2270">
         <timestamp>Mon Feb 1 19:11:20 2010</timestamp>
         <result_count>
           <debug>0</debug>
           <hole>0</hole>
           <info>7</info>
           <log>0</log>
           <warning>3</warning>
         </result_count>
         <severity>5.0</severity>
       </report>
     </second_last_report>
     <alert id="">
       <name/>
     </alert>
     <reports>
       <report id="f0fdf522-276d-4893-9274-fb8699dc2270">
         <timestamp>Mon Feb 1 18:51:38 2010</timestamp>
         <scan_run_status>Done</scan_run_status>
         <result_count>
           <debug>0</debug>
           <hole>0</hole>
           <info>7</info>
           <log>0</log>
           <warning>3</warning>
         </result_count>
       </report>
       <report id="2688e6c7-db29-4505-80f1-0fd4a09e1011">
         <timestamp>Mon Feb 1 19:11:20 2010</timestamp>
         <scan_run_status>Done</scan_run_status>
         <result_count>
           <debug>0</debug>
           <hole>0</hole>
           <info>7</info>
           <log>0</log>
           <warning>3</warning>
         </result_count>
         <severity>5.0</severity>
       </report>
       <preferences>
         <preference>
           <name>Maximum concurrently executed NVTs per host</name>
           <scanner_name>max_checks</scanner_name>
           <value>4</value>
         </preference>
         <preference>
           <name>Maximum concurrently scanned hosts</name>
           <scanner_name>max_hosts</scanner_name>
           <value>20</value>
         </preference>
         <preference>
           <name>Add results to Asset Management</name>
           <scanner_name>in_assets</scanner_name>
           <value>yes</value>
         </preference>
       </preferences>
     </reports>
   </task>
   <filters id="0">
     <term/>
   </filters>
   <sort>
     <field>
       name
       <order>ascending</order>
     </field>
   </sort>
   <tasks max="-1"
          start="1"/>
   <task_count>
     3
     <filtered>1</filtered>
     <page>1</page>
   </task_count>
 </get_tasks_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.78 Command get_users

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  In short: Get one or many users.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The client uses the "get_users" command to retrieve the list of user accounts on the Scanner.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.78.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @user_id (uuid) ID of single user to get.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @filter (text) Filter term to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @filt_id (uuid) ID of filter to use to filter query.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <user> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @id (uuid) ID of user.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <owner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Owner of the user.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The name of the owner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The name of the user.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The comment on the user.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <creation_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Creation time of the user.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <modification_time>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Last time the user was modified.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <writable>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Whether the user is writable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <in_use>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Whether this user is currently in use.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <role> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The role of the user.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Name of role.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Permissions the user has on the role.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <groups>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The groups the user belongs to.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <group>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Name of group.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <permissions> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Permissions the user has on the group.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <hosts>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Host access rule for the user.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @allow ("0", "1", "2" or "3") 0 forbidden, 1 allowed, 2 all allowed, 3 custom.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <ifaces>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Iface access rule for the user.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @allow ("0", "1", "2" or "3") 0 forbidden, 1 allowed, 2 all allowed, 3 custom.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <permissions>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Permissions that the current user has on the user.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <permission> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The name of the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <user_tags>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Info on tags attached to the user.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Number of attached tags.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <tag> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Short info on an individual tag (only if details were requested).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @id (uuid) UUID of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Name of the tag (usually namespace:predicate).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Value of the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Comment for the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <sources>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Sources allowed for authentication for this user.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <filters>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @id (uuid) UUID of filter if any, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <term>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Filter name, if applicable.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <keywords>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Filter broken down into keywords.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <keyword> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <column>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Column prefix.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <relation>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Relation operator.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The filter text.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <sort>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <field>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <order>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <users>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @start (integer) First user.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @max (integer) Maximum number of users.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <user_count>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <filtered>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Number of users after filtering.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <page>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Number of users on current page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    7.78.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    get_users
 = element get_users
     {
       attribute user_id { uuid }?
       & attribute filter { text }?
       & attribute filt_id { uuid }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    get_users_response
 = element get_users_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_users_response_user*
       & get_users_response_filters
       & get_users_response_sort
       & get_users_response_users
       & get_users_response_user_count
     }

get_users_response_user
 = element user
     {
       attribute id { uuid }
       & get_users_response_user_owner
       & get_users_response_user_name
       & get_users_response_user_comment
       & get_users_response_user_creation_time
       & get_users_response_user_modification_time
       & get_users_response_user_writable
       & get_users_response_user_in_use
       & get_users_response_user_role*
       & get_users_response_user_groups
       & get_users_response_user_hosts
       & get_users_response_user_ifaces
       & get_users_response_user_permissions
       & get_users_response_user_user_tags
       & get_users_response_user_sources
     }

get_users_response_user_owner
 = element owner
     {
       get_users_response_user_owner_name
     }

get_users_response_user_owner_name
 = element name
     {
       name
     }

get_users_response_user_name
 = element name
     {
       text
     }

get_users_response_user_comment
 = element comment
     {
       text
     }

get_users_response_user_creation_time
 = element creation_time
     {
       iso_time
     }

get_users_response_user_modification_time
 = element modification_time
     {
       iso_time
     }

get_users_response_user_writable
 = element writable
     {
       boolean
     }

get_users_response_user_in_use
 = element in_use
     {
       boolean
     }

get_users_response_user_role
 = element role
     {
       attribute id { uuid }
       & get_users_response_user_role_name
       & get_users_response_user_role_permissions?
     }

get_users_response_user_role_name
 = element name
     {
       name
     }

get_users_response_user_role_permissions
 = element permissions
     {
       ""
     }

get_users_response_user_groups
 = element groups
     {
       get_users_response_user_groups_group
     }

get_users_response_user_groups_group
 = element group
     {
       attribute id { uuid }
       & get_users_response_user_groups_group_name
       & get_users_response_user_groups_group_permissions?
     }

get_users_response_user_groups_group_name
 = element name
     {
       name
     }

get_users_response_user_groups_group_permissions
 = element permissions
     {
       ""
     }

get_users_response_user_hosts
 = element hosts
     {
       text
       & attribute allow { xsd:token { pattern = "0|1|2|3" } }
     }

get_users_response_user_ifaces
 = element ifaces
     {
       text
       & attribute allow { xsd:token { pattern = "0|1|2|3" } }
     }

get_users_response_user_permissions
 = element permissions
     {
       get_users_response_user_permissions_permission*
     }

get_users_response_user_permissions_permission
 = element permission
     {
       get_users_response_user_permissions_permission_name
     }

get_users_response_user_permissions_permission_name
 = element name
     {
       name
     }

get_users_response_user_user_tags
 = element user_tags
     {
       get_users_response_user_user_tags_count
       & get_users_response_user_user_tags_tag*
     }

get_users_response_user_user_tags_count
 = element count
     {
       integer
     }

get_users_response_user_user_tags_tag
 = element tag
     {
       attribute id { uuid }
       & get_users_response_user_user_tags_tag_name
       & get_users_response_user_user_tags_tag_value
       & get_users_response_user_user_tags_tag_comment
     }

get_users_response_user_user_tags_tag_name
 = element name
     {
       text
     }

get_users_response_user_user_tags_tag_value
 = element value
     {
       text
     }

get_users_response_user_user_tags_tag_comment
 = element comment
     {
       text
     }

get_users_response_user_sources
 = element sources    # type sources
     {
     }

get_users_response_filters
 = element filters
     {
       attribute id { uuid }
       & get_users_response_filters_term
       & get_users_response_filters_name?
       & get_users_response_filters_keywords
     }

get_users_response_filters_term
 = element term
     {
       text
     }

get_users_response_filters_name
 = element name
     {
       text
     }

get_users_response_filters_keywords
 = element keywords
     {
       get_users_response_filters_keywords_keyword*
     }

get_users_response_filters_keywords_keyword
 = element keyword
     {
       get_users_response_filters_keywords_keyword_column
       & get_users_response_filters_keywords_keyword_relation
       & get_users_response_filters_keywords_keyword_value
     }

get_users_response_filters_keywords_keyword_column
 = element column
     {
       text
     }

get_users_response_filters_keywords_keyword_relation
 = element relation
     {
       
        ERROR
      
     }

get_users_response_filters_keywords_keyword_value
 = element value
     {
       text
     }

get_users_response_sort
 = element sort
     {
       text
       & get_users_response_sort_field
     }

get_users_response_sort_field
 = element field
     {
       get_users_response_sort_field_order
     }

get_users_response_sort_field_order
 = element order
     {
       xsd:token { pattern = "ascending|descending" }
     }

get_users_response_users
 = element users
     {
       attribute start { integer }
       & attribute max { integer }
     }

get_users_response_user_count
 = element user_count
     {
       get_users_response_user_count_filtered
       & get_users_response_user_count_page
     }

get_users_response_user_count_filtered
 = element filtered
     {
       integer
     }

get_users_response_user_count_page
 = element page
     {
       integer
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    7.78.3 Example: Get the users

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     <get_users/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     <get_users_response status="200"
                     status_text="OK">
   <user>
     <name>foobar</name>
     <role id="8d453140-b74d-11e2-b0be-406186ea4fc5">
       <name>User</name>
     </role>
     <hosts allow="2"/>
     <user_tags>
       <count>0</count>
     </user_tags>
     <sources>
       <source>file</source>
     </sources>
   </user>
 </get_users_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    7.79 Command get_version

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    In short: Get the OpenVAS Manager Protocol version.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    7.79.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Empty single element.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <version>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.79.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      get_version
 = element get_version
     {
       ""
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      get_version_response
 = element get_version_response
     {
       attribute status { status }
       & attribute status_text { text }
       & get_version_response_version
     }

get_version_response_version
 = element version
     {
       text
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.79.3 Example: Get the version

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <get_version/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <get_version_response status="200"
                       status_text="OK">
   <version>1.0</version>
 </get_version_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.80 Command help

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Get the help text.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.80.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @format ("html", "HTML", "rnc", "RNC", "text", "TEXT", "xml" or "XML") Required help format.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @type ("brief" or "") Help type, currently only blank or "brief" for XML format.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <schema> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <protocol>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @format (text) The help format.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @extension (text) The suggested file extension for the help.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @content_type (text) The MIME content-type of the help.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The full name of the protocol.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <abbreviation> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The abbreviated name of the protocol.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <summary> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  A summary of the protocol.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <version> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The version number of the protocol.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <type> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      A data type.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The name of the data type.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <summary> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          A summary of the data type.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <description> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            A description of the data type.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <p> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              A paragraph.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <pattern>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The RNC pattern for the data type.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <command> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              A command.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.80.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        help
 = element help
     {
       attribute format { xsd:token { pattern = "html|HTML|rnc|RNC|text|TEXT|xml|XML" } }?
       & attribute type { xsd:token { pattern = "brief|" } }?
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        help_response
 = element help_response
     {
       text
       & attribute status { status }
       & attribute status_text { text }
       & help_response_schema?
     }

help_response_schema
 = element schema
     {
       help_response_schema_protocol
     }

help_response_schema_protocol
 = element protocol
     {
       attribute format { text }?
       & attribute extension { text }?
       & attribute content_type { text }?
       & help_response_schema_protocol_name
       & help_response_schema_protocol_abbreviation?
       & help_response_schema_protocol_summary?
       & help_response_schema_protocol_version?
       & help_response_schema_protocol_type*
       & help_response_schema_protocol_command*
     }

help_response_schema_protocol_name
 = element name
     {
       text
     }

help_response_schema_protocol_abbreviation
 = element abbreviation
     {
       text
     }

help_response_schema_protocol_summary
 = element summary
     {
       text
     }

help_response_schema_protocol_version
 = element version
     {
       text
     }

help_response_schema_protocol_type
 = element type
     {
       help_response_schema_protocol_type_name
       & help_response_schema_protocol_type_summary?
       & help_response_schema_protocol_type_description?
       & help_response_schema_protocol_type_pattern
     }

help_response_schema_protocol_type_name
 = element name
     {
       type_name
     }

help_response_schema_protocol_type_summary
 = element summary
     {
       text
     }

help_response_schema_protocol_type_description
 = element description
     {
       text
       & help_response_schema_protocol_type_description_p*
     }

help_response_schema_protocol_type_description_p
 = element p
     {
       text
     }

help_response_schema_protocol_type_pattern
 = element pattern
     {
       text
     }

help_response_schema_protocol_command
 = element command    # type command_definition
     {
       command_definition_name
       & command_definition_summary?
       & command_definition_description?
       & ( ( command_definition_pattern
           & command_definition_response )
           | ( command_definition_type
           & command_definition_ele* ) )
       & command_definition_example*
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.80.3 Example: Get the help text

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <help/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <help_response status="200"
                status_text="OK">
            AUTHENTICATE           Authenticate with the manager.
            COMMANDS               Run a list of commands.
            CREATE_AGENT           Create an agent.
            CREATE_ALERT           Create an alert.
            CREATE_CONFIG          Create a config.
            CREATE_FILTER          Create a filter.
            CREATE_GROUP           Create a group.
            CREATE_LSC_CREDENTIAL  Create a local security check credential.
            CREATE_NOTE            Create a note.
            CREATE_OVERRIDE        Create an override.
            CREATE_PERMISSION      Create a permission.
            CREATE_PORT_LIST       Create a port list.
            CREATE_PORT_RANGE      Create a port range in a port list.
            CREATE_REPORT          Create a report.
            CREATE_REPORT_FORMAT   Create a report format.
            CREATE_ROLE            Create a role.
            CREATE_SCANNER         Create a scanner.
            CREATE_SCHEDULE        Create a schedule.
            CREATE_SLAVE           Create a slave.
            CREATE_TAG             Create a tag.
            CREATE_TARGET          Create a target.
            CREATE_TASK            Create a task.
            CREATE_USER            Create a new user.
            DELETE_AGENT           Delete an agent.
            DELETE_ALERT           Delete an alert.
            DELETE_CONFIG          Delete a config.
            DELETE_FILTER          Delete a filter.
            DELETE_GROUP           Delete a group.
            DELETE_LSC_CREDENTIAL  Delete a local security check credential.
            DELETE_NOTE            Delete a note.
            DELETE_OVERRIDE        Delete an override.
            DELETE_PERMISSION      Delete a permission.
            DELETE_PORT_LIST       Delete a port list.
            DELETE_PORT_RANGE      Delete a port range.
            DELETE_REPORT          Delete a report.
            DELETE_REPORT_FORMAT   Delete a report format.
            DELETE_ROLE            Delete a role.
            DELETE_SCANNER         Delete a scanner.
            DELETE_SCHEDULE        Delete a schedule.
            DELETE_SLAVE           Delete a slave.
            DELETE_TAG             Delete a tag.
            DELETE_TARGET          Delete a target.
            DELETE_TASK            Delete a task.
            DELETE_USER            Delete an existing user.
            DESCRIBE_AUTH          Get details about the used authentication methods.
            DESCRIBE_CERT          Get details of the CERT feed this Manager uses.
            DESCRIBE_FEED          Get details of the NVT feed this Manager uses.
            DESCRIBE_SCAP          Get details of the SCAP feed this Manager uses.
            EMPTY_TRASHCAN         Empty the trashcan.
            GET_AGENTS             Get one or many agents.
            GET_ALERTS             Get one or many alerts.
            GET_CONFIGS            Get one or many configs.
            GET_FILTERS            Get one or many filters.
            GET_GROUPS             Get one or many groups.
            GET_INFO               Get raw information for a given item.
            GET_LSC_CREDENTIALS    Get one or many local security check credentials.
            GET_NOTES              Get one or many notes.
            GET_NVTS               Get one or all available NVTs.
            GET_NVT_FAMILIES       Get a list of all NVT families.
            GET_NVT_FEED_VERSION   Get NVT feed version.
            GET_OVERRIDES          Get one or many overrides.
            GET_PERMISSIONS        Get one or many permissions.
            GET_PORT_LISTS         Get one or many port lists.
            GET_PREFERENCES        Get preferences for all available NVTs.
            GET_REPORTS            Get one or many reports.
            GET_REPORT_FORMATS     Get one or many report formats.
            GET_RESULTS            Get results.
            GET_ROLES              Get one or many roles.
            GET_SCANNERS           Get one or many scanners.
            GET_SCHEDULES          Get one or many schedules.
            GET_SETTINGS           Get one or many settings.
            GET_SLAVES             Get one or many slaves.
            GET_SYSTEM_REPORTS     Get one or many system reports.
            GET_TAGS               Get one or many tags.
            GET_TARGETS            Get one or many targets.
            GET_TASKS              Get one or many tasks.
            GET_USERS              Get one or many users.
            GET_VERSION            Get the OpenVAS Manager Protocol version.
            HELP                   Get this help text.
            MODIFY_AGENT           Modify an existing agent.
            MODIFY_ALERT           Modify an existing alert.
            MODIFY_AUTH            Modify the authentication methods.
            MODIFY_CONFIG          Update an existing config.
            MODIFY_FILTER          Modify an existing filter.
            MODIFY_GROUP           Modify an existing group.
            MODIFY_LSC_CREDENTIAL  Modify an existing LSC credential.
            MODIFY_NOTE            Modify an existing note.
            MODIFY_OVERRIDE        Modify an existing override.
            MODIFY_PERMISSION      Modify an existing permission.
            MODIFY_PORT_LIST       Modify an existing port list.
            MODIFY_REPORT          Modify an existing report.
            MODIFY_REPORT_FORMAT   Modify an existing report format.
            MODIFY_ROLE            Modify an existing role.
            MODIFY_SCANNER         Modify an existing scanner.
            MODIFY_SCHEDULE        Modify an existing schedule.
            MODIFY_SETTING         Modify an existing setting.
            MODIFY_SLAVE           Modify an existing slave.
            MODIFY_TAG             Modify an existing tag.
            MODIFY_TARGET          Modify an existing target.
            MODIFY_TASK            Update an existing task.
            MODIFY_USER            Modify a user.
            RESTORE                Restore a resource.
            RESUME_TASK            Resume a task.
            RUN_WIZARD             Run a wizard.
            START_TASK             Manually start an existing task.
            STOP_TASK              Stop a running task.
            SYNC_CERT              Synchronize with a CERT feed.
            SYNC_FEED              Synchronize with an NVT feed.
            SYNC_SCAP              Synchronize with a SCAP feed.
            TEST_ALERT             Run an alert.
            VERIFY_AGENT           Verify an agent.
            VERIFY_REPORT_FORMAT   Verify a report format.
 </help_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.80.3 Example: Get the OMP schema

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <help format="XML"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <help_response status="200"
                status_text="OK">
   <schema format="XML"
           extension="xml"
           content_type="text/xml">
     <protocol>
       <name>OpenVAS Management Protocol</name>
       <abbreviation>OMP</abbreviation>
       <summary>
         The "management" protocol of the Open Vulnerability Assessment System
       </summary>
       <version>1.0</version>
       <type>
         <name>base64</name>
         <summary>Base64 encoded data</summary>
         <pattern>xsd:base64Binary</pattern>
       </type>
       ...
       <command>
         <name>authenticate</name>
         <summary>Authenticate with the manager</summary>
         <description>
           <p>
                    The client uses the authenticate command to authenticate with the
                    Manager.
           </p>
           <p>
                    The client normally executes this command at the beginning of each
                    connection.  The only commands permitted before authentication are
                    get_version and commands.
           </p>
         </description>
         <pattern>
           <e>credentials</e>
         </pattern>
         <ele>
           <name>credentials</name>
           <pattern>
             <e>username</e>
             <e>password</e>
           </pattern>
           <ele>
             <name>username</name>
             <summary>The login name of the user</summary>
             <pattern>text</pattern>
           </ele>
           <ele>
             <name>password</name>
             <summary>The user's password</summary>
             <pattern>text</pattern>
           </ele>
         </ele>
         <response>
           <pattern>
             <attrib>
               <name>status</name>
               <type>status</type>
               <required>1</required>
             </attrib>
             <attrib>
               <name>status_text</name>
               <type>text</type>
               <required>1</required>
             </attrib>
           </pattern>
         </response>
         <example>
           <summary>Authenticate with a good password</summary>
           <request>
             <authenticate>
               <credentials>
                 <username>sally</username>
                 <password>secret</password>
               </credentials>
             </authenticate>
           </request>
           <response>
             <authenticate_response status="200"
                                    status_text="OK">
               <role>User</role>
               <timezone>UTC</timezone>
             </authenticate_response>
           </response>
         </example>
         ...
       </command>
       ...
     </protocol>
   </schema>
 </help_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.81 Command modify_agent

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Modify an existing agent.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_agent command to change an existing agent.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.81.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @agent_id (uuid) ID of agent to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Name of agent.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Comment on agent.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.81.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            modify_agent
 = element modify_agent
     {
       attribute agent_id { uuid }
       & modify_agent_name?
       & modify_agent_comment?
     }

modify_agent_comment
 = element comment
     {
       text
     }

modify_agent_name
 = element name
     {
       name
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            modify_agent_response
 = element modify_agent_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.81.3 Example: Modify the comment on an agent

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             <modify_agent agent_id="c737f787-9473-410d-8956-9d7b57bdd11f">
   <comment>Old Agent 1</comment>
 </modify_agent>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             <modify_agent_response status="200"
                        status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.82 Command modify_alert

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            In short: Modify an existing alert.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The client uses the modify_alert command to change an existing alert.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.82.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @alert_id (uuid) ID of alert to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Name of alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Comment on alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <filter> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Filter to apply when executing alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <event> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    The event that must happen for the alert to occur.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <data> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Some data that defines the event.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The name of the event data.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <condition> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The condition that must be satisfied for the alert to occur.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <data> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Some data that defines the condition.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The name of the condition data.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <method> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The method by which the user is alerted.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <data> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Some data that defines the method.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The name of the method data.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.82.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      modify_alert
 = element modify_alert
     {
       attribute alert_id { uuid }
       & modify_alert_name?
       & modify_alert_comment?
       & modify_alert_filter?
       & modify_alert_event?
       & modify_alert_condition?
       & modify_alert_method?
     }

modify_alert_name
 = element name
     {
       name
     }

modify_alert_comment
 = element comment
     {
       text
     }

modify_alert_condition
 = element condition
     {
       text
       & modify_alert_condition_data*
     }

modify_alert_condition_data
 = element data
     {
       text
       & modify_alert_condition_data_name
     }

modify_alert_condition_data_name
 = element name
     {
       text
     }

modify_alert_event
 = element event
     {
       text
       & modify_alert_event_data*
     }

modify_alert_event_data
 = element data
     {
       text
       & modify_alert_event_data_name
     }

modify_alert_event_data_name
 = element name
     {
       text
     }

modify_alert_method
 = element method
     {
       text
       & modify_alert_method_data*
     }

modify_alert_method_data
 = element data
     {
       text
       & modify_alert_method_data_name
     }

modify_alert_method_data_name
 = element name
     {
       text
     }

modify_alert_filter
 = element filter
     {
       attribute id { uuid }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      modify_alert_response
 = element modify_alert_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.82.3 Example: Modify the name and report filter of an alert and the condition that triggers it

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <modify_alert alert_id="914b59f8-25f5-4c8f-832c-2379cd625236">
   <name>Low Level Alert 2</name>
   <condition>
     Threat level at least
     <data>
       Low
       <name>level</name>
     </data>
   </condition>
   <filter id="7a06bd00-7e4a-4669-b7d7-8fe65ec64a41"/>
 </modify_alert>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <modify_alert_response status="200"
                        status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.83 Command modify_auth

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Modify the authentication methods.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the "modify_auth" command to modify the authentication methods.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.83.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <group>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <auth_conf_setting> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            A setting to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @key (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @value (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.83.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      modify_auth
 = element modify_auth
     {
       modify_auth_group
     }

modify_auth_group
 = element group
     {
       modify_auth_group_auth_conf_setting*
     }

modify_auth_group_auth_conf_setting
 = element auth_conf_setting
     {
       attribute key { text }
       & attribute value { text }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      modify_auth_response
 = element modify_auth_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.83.3 Example: Modify a single setting for an authentication method

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <modify_auth>
   <group name="Foo">
     <auth_conf_setting key="Bar"
                        value="Baz"/>
   </group>
 </modify_auth>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <modify_auth_response status="200"
                       status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.84 Command modify_config

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Modify an existing config.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      This command can take five forms: with a preference, with a family selection, with an NVT selection, or with a name or comment.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The first form modifies a preference on the config. If the preference includes an NVT, then the preference is an NVT preference, otherwise the preference is a scanner preference. If the preference includes a value then the manager updates the value of the preference, otherwise the manager removes the preference. The value must be base64 encoded.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The second form, with a family selection, lets the client modify the NVTs selected by the config at a family level. The idea is that the client modifies the entire family selection at once, so a client will often need to include many families in a family selection.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The family_selection may include a growing element to indicate whether new families should be added to the selection. It may also include any number of family elements.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      A family element must always include a name and may include a growing element and an all element. The all element indicates whether all NVTs in the family should be selected. The growing element indicates whether new NVTs in the family should be added to the selection as they arrive. Leaving a family out of the family_selection is equivalent to including the family with all 0 and growing 0.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The effect of the all 0 and growing 0 case is subtle: if all NVTs were selected then all are removed (effectively removing the family from the config). However if some NVTs were selected then they remain selected. As a result the client must include in the family_selection all families that must have all NVTs selected.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The third option, an NVT selection, must include a family and may include any number of NVTs. The manager updates the given family in the config to include only the given NVTs.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      If there was no error with the command sent by the client, the manager will apply the changes to the config and will reply with a response code indicating success.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.84.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @config_id (uuid) ID of config to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • One of
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            New name for the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              New comment for the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <preference>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The name of the preference to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <nvt> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    NVT associated with preference to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <value> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    New value for preference.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <family_selection>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <growing> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Whether new families should be added to the config.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <family> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <all> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Whether to select all NVTs initially.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <growing> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Whether to add newly arrived nvts to the selection.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <nvt_selection>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <family>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Name of family to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <nvt> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.84.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        modify_config
 = element modify_config
     {
       attribute config_id { uuid }
       & ( modify_config_name
           | modify_config_comment
           | modify_config_preference
           | modify_config_family_selection
           | modify_config_nvt_selection )
     }

modify_config_name
 = element name
     {
       name
     }

modify_config_comment
 = element comment
     {
       text
     }

modify_config_preference
 = element preference
     {
       modify_config_preference_name
       & modify_config_preference_nvt?
       & modify_config_preference_value?
     }

modify_config_preference_name
 = element name
     {
       name
     }

modify_config_preference_nvt
 = element nvt
     {
       attribute oid { oid }
     }

modify_config_preference_value
 = element value
     {
       base64
     }

modify_config_family_selection
 = element family_selection
     {
       modify_config_family_selection_growing?
       & modify_config_family_selection_family*
     }

modify_config_family_selection_growing
 = element growing
     {
       boolean_atoi
     }

modify_config_family_selection_family
 = element family
     {
       modify_config_family_selection_family_all?
       & modify_config_family_selection_family_growing?
       & modify_config_family_selection_family_name
     }

modify_config_family_selection_family_all
 = element all
     {
       boolean_atoi
     }

modify_config_family_selection_family_growing
 = element growing
     {
       boolean_atoi
     }

modify_config_family_selection_family_name
 = element name
     {
       name
     }

modify_config_nvt_selection
 = element nvt_selection
     {
       modify_config_nvt_selection_family
       & modify_config_nvt_selection_nvt*
     }

modify_config_nvt_selection_family
 = element family
     {
       name
     }

modify_config_nvt_selection_nvt
 = element nvt
     {
       attribute oid { oid }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        modify_config_response
 = element modify_config_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.84.3 Example: Modify a config NVT preference

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <modify_config config_id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6">
   <preference>
     <nvt oid="1.3.6.1.4.1.25623.1.0.14259"/>
     <name>Nmap (NASL wrapper)[checkbox]:UDP port scan</name>
     <value>eWVz</value>
   </preference>
 </modify_config>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <modify_config_response status="200"
                         status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.84.3 Example: Modify a config Scanner preference

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <modify_config config_id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6">
   <preference>
     <name>scanner[scanner]:vhosts</name>
     <value>ZXhhbXBsZQ==</value>
   </preference>
 </modify_config>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <modify_config_response status="200"
                         status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.84.3 Example: Modify the families that a config selects

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The outer "growing" element sets the config to add any new families that arrive.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client requests the Manager to keep a single selected family (Debian Local Security Checks), to select all NVTs in this family, and to automatically add any new NVTs in this family to the config.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <modify_config config_id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6">
   <family_selection>
     <growing>1</growing>
     <family>
       <name>Debian Local Security Checks</name>
       <all>1</all>
       <growing>1</growing>
     </family>
   </family_selection>
 </modify_config>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <modify_config_response status="200"
                         status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.84.3 Example: Modify the NVTs that a config selects in a particular family

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <modify_config config_id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6">
   <nvt_selection>
     <family>Debian Local Security Checks</family>
     <nvt oid="1.3.6.1.4.1.25623.1.0.53797"/>
     <nvt oid="1.3.6.1.4.1.25623.1.0.63272"/>
     <nvt oid="1.3.6.1.4.1.25623.1.0.55615"/>
     <nvt oid="1.3.6.1.4.1.25623.1.0.53546"/>
   </nvt_selection>
 </modify_config>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <modify_config_response status="200"
                         status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.85 Command modify_filter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Modify an existing filter.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_filter command to change an existing filter.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.85.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @filter_id (uuid) ID of filter to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Comment on filter.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Name of filter.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <term> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Filter term.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <type> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Resource type filter applies to.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.85.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                modify_filter
 = element modify_filter
     {
       attribute filter_id { uuid }
       & modify_filter_comment?
       & modify_filter_name?
       & modify_filter_term?
       & modify_filter_type?
     }

modify_filter_comment
 = element comment
     {
       text
     }

modify_filter_name
 = element name
     {
       name
     }

modify_filter_term
 = element term
     {
       text
     }

modify_filter_type
 = element type
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                modify_filter_response
 = element modify_filter_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.85.3 Example: Modify the term of a filter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <modify_filter filter_id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6">
   <term>name=local</term>
 </modify_filter>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <modify_filter_response status="200"
                         status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.86 Command modify_group

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                In short: Modify an existing group.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The client uses the modify_group command to change an existing group.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.86.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @group_id (uuid) ID of group to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Name of group.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Comment on group.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <users> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Comma separated list of user names.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.86.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      modify_group
 = element modify_group
     {
       attribute group_id { uuid }
       & modify_group_name?
       & modify_group_comment?
       & modify_group_users?
     }

modify_group_name
 = element name
     {
       name
     }

modify_group_comment
 = element comment
     {
       text
     }

modify_group_users
 = element users
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      modify_group_response
 = element modify_group_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.86.3 Example: Modify the name of a group

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <modify_group group_id="d94211b6-ba40-11e3-bcb1-406186ea4fc5">
   <name>Line Managers</name>
 </modify_group>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <modify_group_response status="200"
                        status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.87 Command modify_lsc_credential

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Modify an existing LSC credential.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the modify_lsc_credential command to change an existing LSC credential.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The login and password can only be changed for password LSC credentials. Modification of login or password on package credentials is forbidden.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.87.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @lsc_credential_id (uuid) ID of LSC credential to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          A comment on the LSC credential.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            A name for the LSC credential.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <password> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The password for the credential login.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <login> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The user name of the credential.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.87.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              modify_lsc_credential
 = element modify_lsc_credential
     {
       attribute lsc_credential_id { uuid }
       & modify_lsc_credential_comment?
       & modify_lsc_credential_name?
       & modify_lsc_credential_password?
       & modify_lsc_credential_login?
     }

modify_lsc_credential_name
 = element name
     {
       name
     }

modify_lsc_credential_comment
 = element comment
     {
       text
     }

modify_lsc_credential_login
 = element login
     {
       text
     }

modify_lsc_credential_password
 = element password
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              modify_lsc_credential_response
 = element modify_lsc_credential_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.87.3 Example: Modify the comment of an LSC credential

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <modify_lsc_credential lsc_credential_id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6">
   <comment>Credential for all machines in lab 4.</comment>
 </modify_lsc_credential>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               <modify_lsc_credential_response status="200"
                                 status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.88 Command modify_note

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              In short: Modify an existing note.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The client uses the modify_note command to change an existing note.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              If an optional element is left out, the existing value will be cleared, generalising that constraint.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              7.88.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • @note_id (uuid) ID of note to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <active> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Seconds note will be active. -1 on always, 0 off.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <hosts> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    A textual list of hosts.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <port> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Port to which note applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <result> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Result to which note applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <severity> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Severity to which note applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <task> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Task to which note applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <text>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The text of the note.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <threat> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Threat level to which note applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.88.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          modify_note
 = element modify_note
     {
       attribute note_id { uuid }
       & modify_note_active?
       & modify_note_hosts?
       & modify_note_port?
       & modify_note_result?
       & modify_note_severity?
       & modify_note_task?
       & modify_note_text
       & modify_note_threat?
     }

modify_note_active
 = element active
     {
       integer
     }

modify_note_hosts
 = element hosts
     {
       text
     }

modify_note_port
 = element port
     {
       text
     }

modify_note_severity
 = element severity
     {
       severity
     }

modify_note_text
 = element text
     {
       text
     }

modify_note_threat
 = element threat
     {
       threat
     }

modify_note_task
 = element task
     {
       attribute id { uuid }
     }

modify_note_result
 = element result
     {
       attribute id { uuid }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          modify_note_response
 = element modify_note_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.88.3 Example: Modify the text and result of a note

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <modify_note note_id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6">
   <text>This issue should be resolved after the upgrade.</text>
   <result result_id="254cd3ef-bbe1-4d58-859d-21b8d0c046c"/>
 </modify_note>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <modify_note_response status="200"
                       status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.89 Command modify_override

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          In short: Modify an existing override.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The client uses the modify_override command to change an existing override.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          If an optional element is left out, the existing value will be cleared, generalising that constraint.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.89.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @override_id (uuid) ID of override to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <active> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Seconds override will be active. -1 on always, 0 off.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <hosts> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                A textual list of hosts.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <new_severity> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  New severity score for result.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <new_threat> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    New threat level for result.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <port> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Port to which override applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <result> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Result to which override applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <task> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Task to which override applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <text>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Text describing the override.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <severity> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Severity score to which override applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <threat> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Threat level to which override applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.89.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          modify_override
 = element modify_override
     {
       attribute override_id { uuid }
       & modify_override_active?
       & modify_override_hosts?
       & modify_override_new_severity?
       & modify_override_new_threat?
       & modify_override_port?
       & modify_override_result?
       & modify_override_task?
       & modify_override_text
       & modify_override_severity?
       & modify_override_threat?
     }

modify_override_active
 = element active
     {
       integer
     }

modify_override_hosts
 = element hosts
     {
       text
     }

modify_override_new_severity
 = element new_severity
     {
       severity
     }

modify_override_new_threat
 = element new_threat
     {
       threat
     }

modify_override_port
 = element port
     {
       text
     }

modify_override_text
 = element text
     {
       text
     }

modify_override_severity
 = element severity
     {
       severity
     }

modify_override_threat
 = element threat
     {
       threat
     }

modify_override_task
 = element task
     {
       attribute id { uuid }
     }

modify_override_result
 = element result
     {
       attribute id { uuid }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          modify_override_response
 = element modify_override_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.89.3 Example: Set the override threat to Low

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <modify_override override_id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6">
   <text>This issue is less important in our setup.</text>
   <new_threat>Low</new_threat>
 </modify_override>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <modify_override_response status="200"
                           status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.90 Command modify_permission

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          In short: Modify a permission.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The client uses the modify_permission command to change an existing permission.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.90.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @permission_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Permission name, currently the name of a command.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The comment on the permission.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <resource> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  A resource to which the permission applies.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @id (uuid) UUID if permission applies to resource, else 0.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    OMP type, for Super permissions: user, group or role.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <subject> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    A subject to whom the permission is granted.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      OMP type of the subject: user, group or role.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.90.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  modify_permission
 = element modify_permission
     {
       attribute permission_id { uuid }
       & modify_permission_name?
       & modify_permission_comment?
       & modify_permission_resource?
       & modify_permission_subject?
     }

modify_permission_name
 = element name
     {
       text
     }

modify_permission_comment
 = element comment
     {
       text
     }

modify_permission_resource
 = element resource
     {
       attribute id { uuid }?
       & modify_permission_resource_type
     }

modify_permission_resource_type
 = element type
     {
       text
     }

modify_permission_subject
 = element subject
     {
       attribute id { uuid }?
       & modify_permission_subject_type
     }

modify_permission_subject_type
 = element type
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  modify_permission_response
 = element modify_permission_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.90.3 Example: Change user of a permission

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   <modify_permission permission_id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6">
   <subject id="76e47468-c095-11e3-9285-406186ea4fc5">
     <type>user</type>
   </subject>
 </modify_permission>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   <modify_permission_response status="200"
                             status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.91 Command modify_port_list

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  In short: Modify an existing port list.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The client uses the modify_port_list command to change an existing port list.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.91.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @port_list_id (uuid) ID of port list to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Name of port list.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Comment on port list.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.91.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      modify_port_list
 = element modify_port_list
     {
       attribute port_list_id { uuid }
       & modify_port_list_name?
       & modify_port_list_comment?
     }

modify_port_list_name
 = element name
     {
       name
     }

modify_port_list_comment
 = element comment
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      modify_port_list_response
 = element modify_port_list_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.91.3 Example: Modify the name of a port list

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <modify_port_list port_list_id="27140836-05ae-4e8b-9abf-f725ddc2888f">
   <name>PL-WS1</name>
   <comment>Port List for Web Server 1</comment>
 </modify_port_list>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <modify_port_list_response status="200"
                            status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.92 Command modify_report

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Modify an existing report.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the modify_report command to change an existing report.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.92.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @report_id (uuid) ID of report to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The comment on the report.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.92.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        modify_report
 = element modify_report
     {
       attribute report_id { uuid }
       & modify_report_comment
     }

modify_report_comment
 = element comment
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        modify_report_response
 = element modify_report_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.92.3 Example: Modify a report comment

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <modify_report report_id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6">
   <comment>Monthly scan of the webserver.</comment>
 </modify_report>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <modify_report_response status="200"
                         status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.93 Command modify_report_format

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Update an existing report format.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_report_format command to change an existing report format.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.93.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @report_format_id (uuid) ID of report format to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • One of
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <active>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Whether the report format is active.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The name of the report format.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <summary>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  A summary of the report format.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <param>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The name of the param.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <value> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        New value for the param.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.93.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  modify_report_format
 = element modify_report_format
     {
       attribute report_format_id { uuid }
       & ( modify_report_format_active
           | modify_report_format_name
           | modify_report_format_summary
           | modify_report_format_param )
     }

modify_report_format_active
 = element active
     {
       boolean
     }

modify_report_format_name
 = element name
     {
       name
     }

modify_report_format_summary
 = element summary
     {
       text
     }

modify_report_format_param
 = element param
     {
       modify_report_format_param_name
       & modify_report_format_param_value?
     }

modify_report_format_param_name
 = element name
     {
       name
     }

modify_report_format_param_value
 = element value
     {
       base64
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  modify_report_format_response
 = element modify_report_format_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.93.3 Example: Modify a report format param

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   <modify_report_format report_format_id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6">
   <param>
     <name>Background Colour</name>
     <value>cmVk</value>
   </param>
 </modify_report_format>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   <modify_report_format_response status="200"
                                status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.93.3 Example: Modify the name of a report format

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   <modify_report_format report_format_id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6">
   <name>New name</name>
 </modify_report_format>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   <modify_report_format_response status="200"
                                status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.94 Command modify_role

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  In short: Modify an existing role.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The client uses the modify_role command to change an existing role.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.94.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @role_id (uuid) ID of role to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Name of role.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Comment on role.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <users> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Comma separated list of user names.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.94.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        modify_role
 = element modify_role
     {
       attribute role_id { uuid }
       & modify_role_name?
       & modify_role_comment?
       & modify_role_users?
     }

modify_role_name
 = element name
     {
       name
     }

modify_role_comment
 = element comment
     {
       text
     }

modify_role_users
 = element users
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        modify_role_response
 = element modify_role_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.94.3 Example: Modify the name of a role

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <modify_role role_id="914b59f8-25f5-4c8f-832c-2379cd625236">
   <name>SCAP User</name>
 </modify_role>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <modify_role_response status="200"
                       status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.95 Command modify_scanner

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Modify an existing scanner.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_scanner command to change an existing scanner.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.95.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @scanner_id (uuid) ID of scanner to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Comment on scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Name of scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <host>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Host of the scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <port>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Port of the scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Type of the scanner. '1' for OSP, '2' for OpenVAS (classic) Scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <ca_pub> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Certificate of CA to verify scanner's certificate.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <key_pub> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Certificate of credentials to authenticate with to scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <key_priv> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Private key of credentials to authenticate with to scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.95.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        modify_scanner
 = element modify_scanner
     {
       attribute scanner_id { uuid }
       & modify_scanner_comment?
       & modify_scanner_name?
       & modify_scanner_host
       & modify_scanner_port
       & modify_scanner_type
       & modify_scanner_ca_pub?
       & modify_scanner_key_pub?
       & modify_scanner_key_priv?
     }

modify_scanner_comment
 = element comment
     {
       text
     }

modify_scanner_name
 = element name
     {
       name
     }

modify_scanner_host
 = element host
     {
       text
     }

modify_scanner_port
 = element port
     {
       text
     }

modify_scanner_type
 = element type
     {
       text
     }

modify_scanner_ca_pub
 = element ca_pub
     {
       text
     }

modify_scanner_key_pub
 = element key_pub
     {
       text
     }

modify_scanner_key_priv
 = element key_priv
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        modify_scanner_response
 = element modify_scanner_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.95.3 Example: Modify the name of a scanner

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <modify_scanner scanner_id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6">
   <name>Weekly Scan</name>
 </modify_scanner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <modify_scanner_response status="200"
                          status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.96 Command modify_schedule

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Modify an existing schedule.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_schedule command to change an existing schedule.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.96.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @schedule_id (uuid) ID of schedule to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Comment on schedule.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Name of schedule.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <first_time> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                First time the task will run. Missing subelements default to current system time.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <day_of_month> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <hour> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <minute> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <month> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <year> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <duration> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          How long the task will run for.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <unit> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <period> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            How often the task will run.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <unit> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <timezone> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The timezone the schedule will follow. User's timezone is used if omitted.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.96.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            modify_schedule
 = element modify_schedule
     {
       attribute schedule_id { uuid }
       & modify_schedule_comment?
       & modify_schedule_name?
       & modify_schedule_first_time?
       & modify_schedule_duration?
       & modify_schedule_period?
       & modify_schedule_timezone?
     }

modify_schedule_comment
 = element comment
     {
       text
     }

modify_schedule_name
 = element name
     {
       name
     }

modify_schedule_first_time
 = element first_time
     {
       modify_schedule_first_time_day_of_month?
       & modify_schedule_first_time_hour?
       & modify_schedule_first_time_minute?
       & modify_schedule_first_time_month?
       & modify_schedule_first_time_year?
     }

modify_schedule_first_time_day_of_month
 = element day_of_month
     {
       text
     }

modify_schedule_first_time_hour
 = element hour
     {
       text
     }

modify_schedule_first_time_minute
 = element minute
     {
       text
     }

modify_schedule_first_time_month
 = element month
     {
       text
     }

modify_schedule_first_time_year
 = element year
     {
       text
     }

modify_schedule_timezone
 = element timezone
     {
       timezone
     }

modify_schedule_duration
 = element duration
     {
       text
       & modify_schedule_duration_unit?
     }

modify_schedule_duration_unit
 = element unit
     {
       time_unit
     }

modify_schedule_period
 = element period
     {
       text
       & modify_schedule_period_unit?
     }

modify_schedule_period_unit
 = element unit
     {
       time_unit
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            modify_schedule_response
 = element modify_schedule_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.96.3 Example: Modify the name of a schedule

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             <modify_schedule schedule_id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6">
   <name>Weekly Scan</name>
 </modify_schedule>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             <modify_schedule_response status="200"
                           status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.97 Command modify_setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            In short: Modify an existing setting.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The client uses the modify_setting command to change an existing setting. These are user settings that can be controlled via OMP. The settings "Password" and "Timezone" can be modified by name, the rest by UUID.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.97.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @setting_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The name of the setting.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The value of the setting.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.97.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                modify_setting
 = element modify_setting
     {
       attribute setting_id { uuid }?
       & modify_setting_name
       & modify_setting_value
     }

modify_setting_name
 = element name
     {
       text
     }

modify_setting_value
 = element value
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                modify_setting_response
 = element modify_setting_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.97.3 Example: Modify the timezone

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <modify_setting>
   <name>Timezone</name>
   <value>Africa/Johannesburg</value>
 </modify_setting>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 <modify_setting_response status="200"
                          status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.98 Command modify_slave

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                In short: Modify an existing slave.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The client uses the modify_slave command to change an existing slave.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                7.98.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @slave_id (uuid) ID of slave to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    A name for the slave.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      A comment on the slave.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <host>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The host that the slave Manager is running on.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <port>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The port that the slave Manager is serving on the host.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <login>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Login name on the slave Manager.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <password>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Password for login on the slave Manager.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.98.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            modify_slave
 = element modify_slave
     {
       attribute slave_id { uuid }
       & modify_slave_name
       & modify_slave_comment?
       & modify_slave_host
       & modify_slave_port
       & modify_slave_login
       & modify_slave_password
     }

modify_slave_name
 = element name
     {
       name
     }

modify_slave_comment
 = element comment
     {
       text
     }

modify_slave_host
 = element host
     {
       text
     }

modify_slave_port
 = element port
     {
       text
     }

modify_slave_login
 = element login
     {
       text
     }

modify_slave_password
 = element password
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            modify_slave_response
 = element modify_slave_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.98.3 Example: Update slave information

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             <modify_slave slave_id="f1e4dd0c-155c-4ac1-b43b-8d40a1b99dd0">
   <name>BK-1</name>
   <comment>Bangkok Manager 1</comment>
   <host>bk1.example.com</host>
   <port>9390</port>
   <login>user1</login>
   <password>pass</password>
 </modify_slave>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             <modify_slave_response status="200"
                        status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.99 Command modify_target

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            In short: Modify an existing target.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The client uses the modify_target command to change an existing target.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.99.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @target_id (uuid) ID of target to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Comment on target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Name of target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <hosts> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Target hosts.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <hosts_ordering> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The order hosts are scanned in.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <exclude_hosts> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        A list of hosts to exclude.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <ssh_lsc_credential> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          SSH credential to use on target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <smb_lsc_credential> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          SMB credential to use on target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <esxi_lsc_credential> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          ESXi credential to use on target.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <port_list> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Port List describing ports to scan.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <alive_tests> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Which alive tests to use.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <reverse_lookup_only> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Whether to scan only hosts that have names.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <reverse_lookup_unify> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Whether to scan only one IP when multiple IPs have the same name.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.99.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            modify_target
 = element modify_target
     {
       attribute target_id { uuid }
       & modify_target_comment?
       & modify_target_name?
       & modify_target_hosts?
       & modify_target_hosts_ordering?
       & modify_target_exclude_hosts?
       & modify_target_ssh_lsc_credential?
       & modify_target_smb_lsc_credential?
       & modify_target_esxi_lsc_credential?
       & modify_target_port_list?
       & modify_target_alive_tests?
       & modify_target_reverse_lookup_only?
       & modify_target_reverse_lookup_unify?
     }

modify_target_comment
 = element comment
     {
       text
     }

modify_target_name
 = element name
     {
       name
     }

modify_target_hosts
 = element hosts
     {
       text
     }

modify_target_hosts_ordering
 = element hosts_ordering
     {
       text
     }

modify_target_exclude_hosts
 = element exclude_hosts
     {
       text
     }

modify_target_ssh_lsc_credential
 = element ssh_lsc_credential
     {
       attribute id { uuid }
     }

modify_target_smb_lsc_credential
 = element smb_lsc_credential
     {
       attribute id { uuid }
     }

modify_target_esxi_lsc_credential
 = element esxi_lsc_credential
     {
       attribute id { uuid }
     }

modify_target_port_list
 = element port_list
     {
       attribute id { uuid }
     }

modify_target_alive_tests
 = element alive_tests
     {
       alive_test
     }

modify_target_reverse_lookup_only
 = element reverse_lookup_only
     {
       boolean
     }

modify_target_reverse_lookup_unify
 = element reverse_lookup_unify
     {
       boolean
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            modify_target_response
 = element modify_target_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.99.3 Example: Modify the name of a target

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             <modify_target target_id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6">
   <name>Upstairs Lab</name>
 </modify_target>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             <modify_target_response status="200"
                         status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.100 Command modify_tag

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            In short: Modify a tag.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The client uses the modify_tag command to change an existing tag.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.100.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • @tag_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                A full tag name consisting of namespace and predicate.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <resource> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Identifies a resource the tag is to be attached to.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • @id (uuid) ID of the resource the tag is to be attached to.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <type>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    OMP type of the resource the tag is to be attached to.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <value> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Value associated with the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <comment> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Comment to add to the tag.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <active> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Whether the tag is active.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.100.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      modify_tag
 = element modify_tag
     {
       attribute tag_id { uuid }
       & modify_tag_name?
       & modify_tag_resource?
       & modify_tag_value?
       & modify_tag_comment?
       & modify_tag_active?
     }

modify_tag_name
 = element name
     {
       text
     }

modify_tag_resource
 = element resource
     {
       attribute id { uuid }?
       & modify_tag_resource_type
     }

modify_tag_resource_type
 = element type
     {
       text
     }

modify_tag_value
 = element value
     {
       text
     }

modify_tag_comment
 = element comment
     {
       text
     }

modify_tag_active
 = element active
     {
       boolean
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      modify_tag_response
 = element modify_tag_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.100.3 Example: Deactivate a tag

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <modify_tag tag_id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6">
   <active>0</active>
 </modify_tag>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <modify_tag_response status="200"
                      status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.101 Command modify_task

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Modify an existing task.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the modify_task command to change an existing task.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.101.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @task_id (uuid) ID of task to modify.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • One of
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <comment>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The comment on the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <alert> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              Task alert.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The name of the task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <observers>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                Users allowed to observe this task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <preferences>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <preference> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <scanner_name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Compact name of preference, from scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <schedule>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Task schedule.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <schedule_periods>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      A limit to the number of times the task will be scheduled, or 0 for no limit.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <scanner>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Task scanner.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <slave>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Task slave.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <file>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        File to attach to task.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @name (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @action ("update" or "remove")
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.101.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  modify_task
 = element modify_task
     {
       attribute task_id { uuid }
       & ( modify_task_comment
           | modify_task_alert*
           | modify_task_name
           | modify_task_observers
           | modify_task_preferences
           | modify_task_schedule
           | modify_task_schedule_periods
           | modify_task_scanner
           | modify_task_slave
           | modify_task_file )
     }

modify_task_comment
 = element comment
     {
       text
     }

modify_task_alert
 = element alert
     {
       attribute id { uuid }
     }

modify_task_name
 = element name
     {
       name
     }

modify_task_observers
 = element observers
     {
       user_list
     }

modify_task_preferences
 = element preferences
     {
       modify_task_preferences_preference*
     }

modify_task_preferences_preference
 = element preference
     {
       modify_task_preferences_preference_scanner_name
       & modify_task_preferences_preference_value
     }

modify_task_preferences_preference_scanner_name
 = element scanner_name
     {
       text
     }

modify_task_preferences_preference_value
 = element value
     {
       text
     }

modify_task_schedule
 = element schedule
     {
       attribute id { uuid }
     }

modify_task_schedule_periods
 = element schedule_periods
     {
       integer
     }

modify_task_scanner
 = element scanner
     {
       attribute id { uuid }
     }

modify_task_slave
 = element slave
     {
       attribute id { uuid }
     }

modify_task_file
 = element file
     {
       text # RNC limitation: base64
       & attribute name { text }
       & attribute action { xsd:token { pattern = "update|remove" } }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  modify_task_response
 = element modify_task_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.101.3 Example: Modify a task comment

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   <modify_task task_id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6">
   <comment>Monthly scan of the webserver.</comment>
 </modify_task>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   <modify_task_response status="200"
                       status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.102 Command modify_user

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  In short: Modify a user.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The client uses the "modify_user" command to modify an user account on the OpenVAS server.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  7.102.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • @user_id (uuid) ID of the user to be modified. Overrides NAME element.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The name of the user to be modified.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <new_name> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The new name for the user.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <password> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The password for the user.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <role> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            A role of the user.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <hosts> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            User access rules: a textual list of hosts.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @allow (boolean) If 1, allow only listed, otherwise forbid listed.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <ifaces> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            User access rules: a textual list of ifaces.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @allow (boolean) If 1, allow only listed, otherwise forbid listed.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • <sources> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            List of authentication sources for this user (if omitted, no changes).
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.102.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          modify_user
 = element modify_user
     {
       attribute user_id { uuid }
       & modify_user_name
       & modify_user_new_name?
       & modify_user_password?
       & modify_user_role*
       & modify_user_hosts?
       & modify_user_ifaces?
       & modify_user_sources?
     }

modify_user_name
 = element name
     {
       text
     }

modify_user_new_name
 = element new_name
     {
       text
     }

modify_user_hosts
 = element hosts
     {
       text
       & attribute allow { boolean }?
     }

modify_user_ifaces
 = element ifaces
     {
       text
       & attribute allow { boolean }?
     }

modify_user_password
 = element password
     {
       text
     }

modify_user_role
 = element role
     {
       attribute id { uuid }
     }

modify_user_sources
 = element sources    # type sources
     {
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          modify_user_response
 = element modify_user_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.102.3 Example: Modify a user

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <modify_user>
   <name>Foobar</name>
   <password modify="0"/>
   <role id="8d453140-b74d-11e2-b0be-406186ea4fc5"/>
   <hosts allow="0"/>
 </modify_user>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <modify_user_response status="200"
                       status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.103 Command restore

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          In short: Restore a resource.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The client uses the restore a resource from the trashcan.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.103.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.103.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          restore
 = element restore
     {
       attribute id { uuid }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          restore_response
 = element restore_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.103.3 Example: Restore a target

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <restore id="97390ade-e075-11df-9973-002264764cea"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           <restore_response status="200"
                   status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.104 Command resume_task

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          In short: Resume a task.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The client uses the resume_task command to manually resume a stopped task.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          7.104.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • <report_id>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              The id of the report.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.104.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            resume_task
 = element resume_task
     {
       attribute task_id { uuid }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            resume_task_response
 = element resume_task_response
     {
       attribute status { status }
       & attribute status_text { text }
       & resume_task_response_report_id
     }

resume_task_response_report_id
 = element report_id
     {
       uuid
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.104.3 Example: Resume a task

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             <resume_task task_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             <resume_task_response status="200"
                       status_text="OK">
   <report_id>330ee785-c2c0-4d4c-ab96-725142c9b789</report_id>
 </resume_task_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.105 Command run_wizard

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            In short: Run a wizard.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            The client uses the run_wizard command to run a wizard.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            7.105.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              • <mode> ?
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                The mode to run the wizard in.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  The name of the wizard.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  • <params>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    Parameters for the wizard.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • <param> *
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <name>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Parameter name.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <value>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          Value of parameter.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @read_only (boolean) Whether to only run wizards marked as read only.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <response>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Contains the response of the command run in the last step.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.105.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      run_wizard
 = element run_wizard
     {
       run_wizard_mode?
       & run_wizard_name
       & run_wizard_params
       & attribute read_only { boolean }?
     }

run_wizard_mode
 = element mode
     {
       text
     }

run_wizard_name
 = element name
     {
       name
     }

run_wizard_params
 = element params
     {
       run_wizard_params_param*
     }

run_wizard_params_param
 = element param
     {
       run_wizard_params_param_name
       & run_wizard_params_param_value
     }

run_wizard_params_param_name
 = element name
     {
       text
     }

run_wizard_params_param_value
 = element value
     {
       text
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      run_wizard_response
 = element run_wizard_response
     {
       attribute status { status }
       & attribute status_text { text }
       & run_wizard_response_response
     }

run_wizard_response_response
 = element response
     {
       ""
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.105.3 Example: Run the Quick Start wizard to scan localhost

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <run_wizard>
   <name>quick_first_scan</name>
   <params>
     <param>
       <name>hosts</name>
       <value>localhost</value>
     </param>
   </params>
 </run_wizard>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       <run_wizard_response status="202"
                      status_text="OK, request submitted">
   <response>
     <start_task_response status="202"
                          status_text="OK, request submitted">
       <report_id>a06d21f7-8e2f-4d7f-bceb-1df852d8b37d</report_id>
     </start_task_response>
   </response>
 </run_wizard_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.106 Command start_task

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      In short: Manually start an existing task.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      The client uses the start_task command to manually start an existing task.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      7.106.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • @status_text (text)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • <report_id>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          The id of the report.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.106.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        start_task
 = element start_task
     {
       attribute task_id { uuid }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        start_task_response
 = element start_task_response
     {
       attribute status { status }
       & attribute status_text { text }
       & start_task_response_report_id
     }

start_task_response_report_id
 = element report_id
     {
       uuid
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.106.3 Example: Start a task

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <start_task task_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <start_task_response status="200"
                      status_text="OK">
   <report_id>330ee785-c2c0-4d4c-ab96-725142c9b789</report_id>
 </start_task_response>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.107 Command stop_task

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Stop a running task.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the stop_task command to manually stop a running task.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.107.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.107.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        stop_task
 = element stop_task
     {
       attribute task_id { uuid }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        stop_task_response
 = element stop_task_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.107.3 Example: Stop a running task

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <stop_task task_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <stop_task_response status="200"
                     status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.108 Command sync_cert

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Synchronize with a CERT feed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the "sync_cert" command to request a synchronization with the CERT feed service the Manager uses.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.108.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Empty single element.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.108.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        sync_cert
 = element sync_cert
     {
       ""
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        sync_cert_response
 = element sync_cert_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.108.3 Example: Sync the feed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <sync_cert/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <sync_cert_response status="202"
                     status_text="OK, request submitted"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.109 Command sync_feed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Synchronize with an NVT feed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the "sync_feed" command to request a synchronization with the NVT feed service the Manager uses.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.109.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Empty single element.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.109.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        sync_feed
 = element sync_feed
     {
       ""
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        sync_feed_response
 = element sync_feed_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.109.3 Example: Sync the feed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <sync_feed/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <sync_feed_response status="202"
                     status_text="OK, request submitted"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.110 Command sync_scap

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Synchronize with a SCAP feed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the "sync_scap" command to request a synchronization with the SCAP feed service the Manager uses.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.110.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            Empty single element.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.110.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        sync_scap
 = element sync_scap
     {
       ""
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        sync_scap_response
 = element sync_scap_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.110.3 Example: Sync the feed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <sync_scap/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <sync_scap_response status="202"
                     status_text="OK, request submitted"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.111 Command test_alert

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Run an alert.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the test_alert command to invoke a test run of an alert.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.111.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.111.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        test_alert
 = element test_alert
     {
       attribute alert_id { uuid }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        test_alert_response
 = element test_alert_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.111.3 Example: Test an alert

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <test_alert alert_id="97390ade-e075-11df-9973-002264764cea"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <test_alert_response status="200"
                      status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.112 Command verify_agent

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Verify an agent.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the verify_agent command to verify the trust level of an existing agent.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The Manager checks whether the signature of the agent currently matches the agent. This includes the agent installer file. The Manager searches for the signature first in the feed, then in the agent itself.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.112.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.112.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        verify_agent
 = element verify_agent
     {
       attribute agent_id { uuid }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        verify_agent_response
 = element verify_agent_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.112.3 Example: Verify an agent

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <verify_agent agent_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <verify_agent_response status="200"
                        status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.113 Command verify_report_format

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Verify a report format.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the verify_report_format command to verify the trust level of an existing report format.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The Manager checks whether the signature of the report format currently matches the report format. This includes the script and files used to generate reports of this format. The Manager searches for the signature first in the feed, then in the report format itself.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.113.1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @report_format_id (uuid)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status (status)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • @status_text (text)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.113.2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        verify_report_format
 = element verify_report_format
     {
       attribute report_format_id { uuid }
     }
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        verify_report_format_response
 = element verify_report_format_response
     {
       attribute status { status }
       & attribute status_text { text }
     }

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.113.3 Example: Verify a report format

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <verify_report_format report_format_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         <verify_report_format_response status="200"
                                status_text="OK"/>

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        8 Compatibility Changes in Version 6.0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        8.1 Change in PAUSE_TASK, RESUME_PAUSED_TASK

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Commands removed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The task pausing feature has been removed and thus, the PAUSE_TASK and RESUME_PAUSED_TASK commands don't exist anymore.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        8.2 Change in GET_NOTES, GET_OVERRIDES, GET_REPORTS, GET_RESULTS

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Element RISK_FACTOR removed from element NVT.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Risk factors have been replaced by CVSS scores in all NVTs, so the RISK_FACTOR element has been removed from the NVT elements in various commands.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        8.3 Change in RESUME_STOPPED_TASK, RESUME_TASK

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: RESUME_STOPPED_TASK renamed to RESUME_TASK.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The resuming of tasks is now done via the new command RESUME_TASK, which is the former RESUME_STOPPED_TASK. There is no other resumable status than "stopped" anymore and thus the command names are consolidated for consistency and to avoid confusion.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        8.4 Change in RESUME_OR_START_TASK

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Command removed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        As part of the consolidation of the start/resume handling of tasks, the command RESUME_OR_START_TASK was removed. Use a combination of START_TASK and RESUME_TASK to establish the same functionality.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        8.5 Change in CREATE_TARGET, MODIFY_TARGET

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Element TARGET_LOCATOR removed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The element TARGET_LOCATOR was removed from CREATE_TARGET and MODIFY_TARGET. This was an older, unused feature.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        8.6 Change in GET_RESULTS

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: "result" elements moved to response root element.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The "result" elements returned by the GET_RESULTS command are no longer nested inside a "results" element but directly inside the "get_results_response". The "results" element is used to return the "max" and "start" attributes like similar elements for other types.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        8.7 Change in GET_TARGET_LOCATORS

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Command removed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The command GET_TARGET_LOCATORS was removed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        8.8 Change in GET_TASKS

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: Attribute "rcfile" and associate RCFILE removed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The attribute "rcfile" and associate response element RCFILE were removed. It is no longer possible to get an openvasrc configuration for a task. This feature was primarily introduced to support the GTK frontend openvas-client, which is no longer maintained.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        8.9 Change in CREATE_CONFIG, CREATE_TASK, MODIFY_TASK

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: RCFILE removed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The element RCFILE was removed. It is no longer possible to create or modify a config or task from an openvasrc file. This feature was primarily introduced to support the GTK frontend openvas-client, which is no longer maintained.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        8.10 Change in CREATE_LSC_CREDENTIAL

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: KEY/PUBLIC removed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The child PUBLIC of element KEY was removed, because public keys are now extracted from the private key.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        This file was automatically generated.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        openvas-manager-6.0.9/doc/db.png000644 001751 001751 00000531532 12557600613 017537 0ustar00michaelmichael000000 000000 PNG  IHDRg#@PLTE_U pHYs+ IDATx]}rgw fL'ߝ}i%FB ;Mz>ܞ$6X,j~,7oޯocMt|B}'+G]_Ep:N'E~9':.B?]LF\tT#~Wa%).hofUg"wItPm2ۭ:`" }]9+鰩ᓖglji g(tAF3]qp5=zᏯcnRZҧXžF:/#u">!Pt^{}^qG~Q-cORЉښOx=~N:.tg0Kd/t/סxgS9s؃8趑Yƌ\oAF:lnH|jxHx^r(ᡊóvfKx Txt pl/yvjzɿXC9&BQi1o'rJDzG훪SNj~Dt"T 9S!+ڢ,5p [`:󜍓 cS0SpIA]HMI rUԲ/cmăxQ'89G'K\rX3UOǜk 3UxxlD[ pM7a A)#+I1C1c0aKKGʛC"LKj"_,ub9C4[ئ=jfr6⽸lxc6ۤsɝafKGc'yђ،OMt$YZhFEt$ 7MՄGA ^1ѩթF-]%{1V5ޮ>/x!e1v]տ6k7~\_'Jr5Ski!̵y&[*"/SWޢx)t8dħKqF+SĜ^xkHx]{Ɓ+rhgMLG֐~KEG(lz$a~TX|гlCzT6ΣNo (\ŕmQ}fmRȴ%ędb4+nCp^?DI3DM?RL &9 =,(r:1gG 1%6#&4k*xPX2*40x?/Y0go|_.xDfwfRf9Fӑ~y HZk$֙Dc%ec4eg̥C/Twz6xQt\GMxL\slWxt#8#LP ;7"]0q!4 ,pZ5᧛w FH{nO;td;;++{.T`B=#zË%y*@E:\7A3[OYjY/-JK1<^h9ȁx%0QzL'5?&AyYԠ"rLB>[?=g.tXQ/"AMG.5C4=g1ׂX#IB~δX?bQ/vpG yTq9^7|t$W~x8|cJ䕙$JxL1<Vx+xh{W*$"cY(Xxu5#C>F0C `@@$cc ! ^tHPfSڻ,5a8kxx 4_zDB#z/ 3@Dz3_^ϑL k>ik/21xp>qB|Gx`!=9V+OE#8|+ ͹ .,3^em:Lzʊ&~/1,'߲DgqjҦ 燳;g*6&YVN? ܭb1dڳۦ1fY{?lA} ҥ*=U*O7)&j[绰Zxt/#s̽ u#>%{P/ܕc23hl'”مx-t8"?Lz6'|}7tY/ Ǧl0_xBu*y}m-3P*焇cM:chZw ^u`HY/?a\<]Z/|t>o-f-:(-4~.OV&/yi~~q? '<μ40$i #^<A?LU\@TϤcv#!KcZ'_o|yPGbGfXÖmQӑ)n Qf#b~4oZÕtrC;Xxe0Ue# EiqQ,$?L!Z?.,|P< GxXkA;HG;Uc*[NLQHH1<2];<2KvD!\R\cxW`zMMǸtw.E:k8Ci;rcb:3_ R/5Щgc}ձ6m)r˳}g+#gfA9.M48bep7\ foh⁲t8o}Z#Dz.=i]kA<\s@/k5_rLm]j4%~q|ҧC⏄h___bxA%4 a[{ _B}?L짤bTѼc㥇G<6:^uz{|Zath;_S iB#:>9>μ̃ o&y_3n7J_S\~ mӅOE@G4{!P˵xbu# 2Gk0Ke:*AT߂GoyEki^/掿OQ}$96xGzf|yjz<{foq3#n ~Ҵ6"%:, xzeoS^O%.o*jG=:yOJ0-$>z*ngv>v ^*:F#h>8˱AH[{oe8%'8fB;ZYB:nmƒ7㱐\xy#&!70^P%O-xDeB<Q#׻ґ‘tÃ[V߂Ǩ*:t <?_"oztRy:~CA: /q!=˫Jv4Ul\{bWͫZZzݹZtІʔ`({luaԤv9%*T*KUybzW2X@FoY7B5=3nq#UAfUn%v 8#$3eVt؇o֊;ӵW貇|M'B2;?JGZ) Edեj ˫t[{<rkĸexTW4^iܕ8gz\7:)Fasfj;*lx=XAv[N ?zCE N-_:hv":Dj:$q<`Zq*.#]WvXG$IѠؓ񟀭r^Rp2# CIZԂ4Tx 9D<:c%Jr)<خ;!{% E$x+i>ע$ܶƃ# S&mܯ6Iӣܔiҡ<_^H{҃)xJ3D ~0T۶5#$0:di~)xG10Jo蠊Й.`ثOS!o4oi?,פ[tcKsR/x|{.mzIj9yLރCkca>Vzcҧ>]>^H 2bA:`[X' :`rlBƣRAQ0Bץ}b{ h{03_NLA˟xn@;I%Ux$gB2NOEѷ|T^+~ icܱqtx0/B&2<Z4G fEƖұUCt7:.e}e\̥wp/i)FH]KoGe ½눇'엄3Sy !_ 5БQjA_;#{.eZBgM:5KE{腶GTI$Ox}[Rߒ뜚O='}UR&uK_R09x?x<;=t^[ԛlHN"~-ASYKy#'rt?{!@&.Ot\'^)i^ߡJxz<ASჵ2KgÒ=-:BG :-j}_y8Z<-yE2'Q ٳ{SJS%u1AknyXl.>MxEG>s!kHTEnx(tc'=CR-OBxKxtiV$s))rߎ4>$_cTYo# 0O@̝i 9s{8$=\- :!**<\lt>'/ AI%$->9i~t̻#QAxdSaGF.D젿B#IE7h:;g.zxdC9C~Q+`DDg<ǥ^xC~wr뇡~_Dt<Ob.yb-rMzn2ܪ/ļ̻E̡sDHī*>EyXΓݯH| N֊?T1ұ= ev1-HGOٸx:TRn9s̽ `rd<<%8YEGĥȏdA0nE~  e$:&)O'ʻHtX<БQZM OD>u#94]j>1# y#uiqidcHT1Ҡ\#we.c.e=n /԰u.RL@|Y Z^\앂cxQ mҹtÖo-}X`y\tXS]T>lJ s(pA+ p'&oxPJrid{)Qfx"BQ^O!~;%G:tÜ<墳.*?L<Q 筬5[!q䙗GoɎANtͺ38`!+ v83Euk 4+<KecW;J!Yo 6êSA+9\״w֢c}&}E7دCv||]耱 :4t`l8cwN1BXw8O.1=I-rRm䉤2k(޷kd<6"vPŁB~U?D*~ =^ +:bZ;81:4 J.Z J{_aP;Z n.'W҇Lp^r׀Qy`ܦi#QOv\SU]Sy('v= .,^D)sQ s(< IDAT%,Ǚ΁Gx4]/rx0״{T- 揉>:߲MGct$@L+\c6*>ryljT֑܄<ǐG$ԅ\bޚZcăRr37@cr#<U0UJ=|LCyN;W13NY?m}rFoDo[q1Udzi)ĶܔEkhY]:`~9 e?OsJmF@{(KtHK]뽼F@љ>헊Ks!h@f}O}F}ݹlIfZxlXYKxln 4!=5ދ3uZ/ hYo_th<᧮8Bcj!=W=`eK<씟dk+b?${)ty/B SàS(JNYA:ⷜs~Tr|nU%}:8nITWh=P>prn c_cBIGGxpn/#<ζ8,-t|+WK$$:rؐ.|ctjΗtF[ti119Z"0<J_ʔ2i(kСJGz/oǧvb_Z7a)NCс#Gᡔ{ڷ.;7w]7e߈G#Qkqa}8DSo+|>MCO7q߁[Aܧ;𸦼Ŀ-x(_=엛HJ7[ދ69v,Do%C=ڷ_~ֳm:AGGg[ptDwK7tVphz KjUF=e1Ј.o_G?28oj6*.GW*ov-xߪZ6Z6-٬7Q\m1uFޕ'7DFS,T+̕_Uy[|_>ZdK]xG+X>FUF)175BeDeV2t" "C2o@b(,g40RQytIBKIiˏiS2 ;BJ4.JhtwɍFnt7/xð TɍN[]RU_?}B 2p]0)VvӜ6WFb_/i_SpӘ7Y)b*&9֚c |`gqrCõmCթ m][]ϛ'Uo\NhuC7fX,v7vPx'[\sJXxCj$&z 4$P&$KpbVe^~*T@%t&ŅTM嫼=œ4j'wIh5q:oׇc|IXA iF#ϛ 7|%u :!q> ;N-Me"~,*-zϼ͆$yc&PUj[$gӆpd.R!^4hN҃kѯr#"% kaR/,z͕`R`=ֈԾe=?GFh4ǃ/8G]7ihL7LӁ m[tr-&}y職f967 z(b+r2տg4 0=4ב! 3_?6RԴeBLڒs6<nKi&ZtE;hBwf5% Mr_:շ56"FX+p\EXOhG;׈ ݢmv,zϐ*h`6ѠJZy‚b3b2戝꼐"ΩN:5:Z M҉Ca#sU0HixiBY,h:]4OG}_]4o_㖝 )yc.ޘCS,Nϰo^1}oAPMG42RleU!Ih̜%|Yњ3d-zh8զU!ss&e@MZ!J`,z}a5'~KX[t|K(_jCj`wF"N)ڱxCʁl"J;x 9URZHfDzdE.|VG]$3$o8Y" x50\O^>a{/YF07L[(S; vh:[K٣@m3 Z嫀8Y$iϮd.8g C984{j7 KQÂ)xʎёN.ҕ&/nK>=xʬٽY#-O`0E,w<@G>/T%L:䖹h_cǿh4ؽSy7a4sz!p @ Y)G*W|oy1OQh 'se=rS`\:2ZMJ$ Z*)!7 WA|*ڷvW(DL@=J*Jhxt۰^lxնF<{-ш?]x. \sY㨣Lnl/~͆JhTm1"x#_)!YN\ٙs^k5\3n%NpB>P݆%T՞oxҡB + 30]4a'/-4,.!crwD .LTuH㡤}BomHM刔,I&-ʖ'+Nv^aEJyK\ۥ8&>S&c Vr=VryV}v?c'dGJE@sd+gM1|_k*HE? 4}_݉-@(` :"+L_cm0a~M+hŅ>Zd^E҇^\]tG5¦٢ۍ dސF764<$^zynTKrK]R;*ŏڦ?>{R]])04,z=Y8<.X?|No+\~Vaz4'|h9Z|~_(cxMDZ]Ҿai4E62_g~)v"̟6@ O଒Y څ6S 4?/Yp.U\s8\^z^@hz~Y;! ^nzӥZr# mn Fh0e3I5+p6x8eybC^4㰖$iphҿE" @ d sUaU P^;17KV U獩遟^'Xw_8?%j3{а)L lFGC{B#T"CNr{>nz$ ˙3r $$0 uocJrZ6ib#.FK{ \^aŅ c^#: &'V4]/*Ѩ\X=?C(;%뻋F-4oCoOL[JW({BE~IGڀaJ-ҪT8>hp岙+R ycFm:CXp r}4jAmn8֧rBY&IH.Hygy%}fxL!o|Q?R4<ɕI H47f<~_GKIn4fnh,O@n#ej}J~c~uHGجKyr\;A=3,] gnK-Xwo(4!j3篔1Gi(oWgW$u֧@ֽr^/h\9 ¡RKh|]b}8t UFh8E3sT z;4l;S^5DCu' g>34d 4RGUɕ6r4z +_ʇ"q#ltvjw.I[uCs&Vn)~ 彂L"(Hp,KT5,񪎧r#ΎhExvpSnKюF8!R0OGpЈ .p@T!t Hy5"P>qk}{B(i2pHًöv8}JcD$ʎg)3$}=FKޑb㉢\ÚH C[-C&ް4HW}4zD dC,ER] IM.f^dGWL gy  ,;ׁRcPjS$۸u)(r-oK.XFN/%O8~*=8Qb5e@>|M]SCJcAIΞrluOww}_״243'HVSpG^ibhL6Yh䨴G l`Ϝ%8"koUF] KNqB#42CrXB#r8- ѨD$/GU;q1Vl}xAؚcE IDAT=2e:J;CrXxUQ*!dݮ`Aچ'F#5Ծ^tf҈xJ^lQ{h),s>_N@r9 awy#f,|S3lK99/<2Hb%h|7F )!|SY*ǓO{ )"0wCd4R(s)"gG1I%OJs0|SiDTZjGŒibW/dg͖2$4fاt!=Q2إFp~gXoF1ꨇ#RWj3T]EU26*f4@ R.udu ۚaAהC4EZ&4P~69dz.sP(ᛷ *^А)Шpcdcq Ffh4U_Gv˥->砞QfDg|*.>4 TU [D ռ`ыbk] W麑Q$7]N"g]fo*K猌KB E=$7V!0ZŠ=rz6"BLt l])갨:7+YnԆ5㛼 U=H#xEM&ܢbm|F#2.-)}_p6Z``J):RY";|Y-aIl#2+e L ;HQoBNNV+D4b ECA#gzw=q>`ò;R#}#eٝa0Tt:o147OKr;uA.1д3R)(sZ3'΍hg:<+ݭ73{0*zG}E/DI>2%#4"GS&H-AҾC&s)25-Wl7!_ $7 rJh,7B\7RT7\#-8ziau-pWn4" LbUr# }=ټ.hx>/#D8aȞik_\m.їNO;hĎ'gp4$)= RME_41RAwrXFc܁ܘ,rԲaQG(#MNcѥ]4Bp-nE;}E4*4pɇY\ɢ'4`ڦv9u5#y40Wp4vEOrcu$ZtX;~.YT"s=Ӣb8ÚѰ ʓ\ZQ1Ck'cNE:iuo1PQ%颲+bq !n"AX8@)i'wG.oH"q1 ;eF$ CviB4FʔGJh\}X[G XE@'EGYn`*[C"wAS}EH^Tv"d+tY}+"j|kXBhH7?o|_gr2Bd{EB0b,ރ)c3G"߲SЙѧ;U>מ@Zڒ#%Ƶ=U[EoyBM4[5KGRq-tQ\ri} m3JnOh607* yvh81\9)>4|-F-}f:δֵHi E=UИ}dRAƍRȍ3o΂%uGq 7nGYp}}8Z+׈0DrѨ2QCLJD:Xg̛BJ&Yڕ+0Z1vAdH,Fh`;Nt7}8F/d 4FO:};E4;:7A97r-C]d4&vhDP̩a˱r}J4}Re< ިkc/!rnz#ԶgXo\hڡШGJaEѯ>7QehKTOD/1*4sk1%GG fpQ|+DW^?0)+w=k{ bIFcU 5yxhtEM+p)C#EG})GcumtqԪ+֧Ǯw}lܐͲ4==4BeQ&;%3Ca8lȞ5 h0r@#N[ϼaMv7DG!Zݺs%\~d8,;DF#3=ܐJWG`kk-]4zp4H =RWu8^>pMz`tiWrlB3G&11r )74H74a: !ghQ \|6k4j=hSFaY : #3H}cx%4>+4o@ ;D;3aQXՃ;]bJ'GhH/S[7N;]r5'XGRX`3ed$蚤ܐ]Zfɤ)Ѱhqt@+ǫԡ:_4kSB;%V$':zʑ)LB.^`lJRg_F `܀kZ-r֥DñYNb)@ò=$=wuȔ6p 1|q{ok4rGrC̵dž52wU-FPbh$:rF<04wKq1gxdHz֧,琙&ŝ&e㤘8MEn:1 %}‹p@$8(})֨vo,){\Iz(7NS2r,@hJ уFA?z#:9PҊ'Bٙ'5w)ug*~9cSCQ܎=Q|8* F6GJZfL b }\% ' ml?RefX WΈo4:}MnX9R@r 0 D(Ŧȯ4,WH̴57?v &\!EuHs"j5HhL &D>2g`!}댔=Ãk\y ۑPy,HFmU:qsw+䯺%Iev.=hTrc`k/hxBlR{ʎ]Ѣ82knc2G)=FcW$7d FqhXciqbCRC8oxL'̇5:74B FFo* 45xCkˍ)Ph8C^ tUyF)>=ߴD7^F4pTW|T lh gυŢcmemm)"ѰNAQx,4 QNQ4%D5kwSvHe⣃OCJȮlyf߲RܢY(R}_bcSSTm)g!]_G>5œa;/AѻxEo(M4!*|NOS\9_9RDMZ6ca%tаhxܗ%9&V֋o x&)2', _%4,){HhH⽮xT#TݻwTtQa;X@)Xæ~5_)G,@Xa=>h $)7MFΰ=7˚r#3ktAc!4lTGΛ.[9AGFmT]˔8Oi_G9)C$Ƃ18S14HCOK 0fh`}]4vq~yu2ҥ]ƹ",)g@7?vJ;F+ Q"FhZBccs N;qͩzi{6MF0aY7\-vH3N, y*y_\ I.eJ!a(F֧|mbn`J^ Gf&LϢ:Bvgz~\}@eNMTv I*F_D8!2ހnyH颱"9g)&O)+B$bqB8Z:M]4)۵{44/7CGAa5o{hm`gq6z#h8KuܘflB]hW0#D;?8 %EG7hskq~X%EϩƊ`[i)% fOntO̦ٞhDC-w=v :QVQvFhtyDxh[XLKJp7J( ~&aD}< +:K8mBR(F,VBcsl8- !3Ryܟf iQoBvˠ & ҦΰsPHue͢ZhS7e]@*Dh$,ϭnG21aɑ%ؚ2`}>cM\/-Msa;NМ=G.$X@pQ!42JGFC{"H814#r{6z%KTdH&VSѢ'  ;Ne2! =06W.V:4.%Lo~+%+(BUGhs+z *o^VdÃQ3;%_4MYL6:H-E}ʂe D_ˑ{ZqbVChtO^q,D W?6o@81D)WSe4(4d6%Vof):(rMB k IDAT^L?F ۧ] zYЖYY Huv[y㼦en`e?FZݑ2+4zhQ4jKl)QĚ#e K52oºv sE/α eLtFɎCa-p^N \ʍ)יz*O=(2 (3E6C>Q\8&~n<&L nFmTrn;NƳ9տq"4jFoL}f.\D>aZkҍLj;N\}"RXS*K%)5IΎ{hhԦOsl< QD:f #c  'q\hLe,\;qBӣODmYΣE+آF`h FB ]{>Bq WfL ^y8ˤϜ*ki=4\wG%↚Agx'BBͱ./K$ ϨڱSd4b'o2(UM$G x f4 >:NϘAt&[BkXX̝G#O !&и#'80Р]رKt>dE6jhpQ94Q o@3Rhu4J U/xI'4c 04:JD1IJ>Y 5J؝C~\nvH~>N踘7\?,F~'4t&Wunh\Y1jR\fp9]<>~ &[mHE]q0{s>šg,.u T ΢")N0}hBv1^Ӟ2ŷ=K|H3;*E泃M>>!ŕjeE/\ `gSH9PbՀU'iNg4H?9ˡ+ק 'jQz;9 [*}v/J]+v(ק4;sR^oHC)t?)Hv[EIp{lj\קL/\lpe2sC+7п]WZ|%WLdgta{2I,7eښE?WAC(аr6g:?c ~Q١q́Vl=4lB@9=Ar?]48QF3LRv0;DP4Xv!c Ksv) XF5jFPPN TDxפ6X.RC#WOE"aAvgk x!@=CWv>F7$ r7Zډx0F3ړU֧hR K7HO 1gaPN Ef_VpހǵKjEClsBu5}'4F:bR|ghVrJ kY/F =j--a7'1c)*rPHؕk9o(<|ܷlUQ#!Q!mkr4sr mih?ZD5ݩfLr]8( k]3=Gv#AR"ѐ+2fcg_ǁe!7M`Y(=̌:* ZO5+UKK`]s8ZH? Hi뢊Cc -{/>7,9 IfÖo5+^✰'RY2J[F} иDԫ,Jch zRy&G mN9^hX|)/zB&ext  i)IC ۛmhYƻ#k>ۃ*${<u[-gŻFD$m*ݢcm̟CÚ]4+V ]zZUH,*G+O$Os!ZnΑ mszhJj8?{xYޣM>C2,.#f֦H@Q}јF}4z$IIl>]޳ BF5NOCcg%WDLr]{Qd9<쮦dWX|d"HXKnhjW 8ʻg5՜;:1PGEC VoRlۢ^6KF;qF8!s$4S}[Ź`fуl6 ]&?r'2G:&h@ioY\m?R zh$}5jbvӉI4RTīME4^g8GaUfE?պhaF,mi.F(zUm#bxO2kQOWb;q:BxglEVFp~r2@coN3dHXɢo3,2t <@,+hpxlf-7@m_a P(Ѐ\'7e\ 4,(6)ӅA}n-< eH iׯ?ƕr:hi_ h,zk8Zɓ⽉4R{\R[G!>sFsyF$+cOi>$ob-0njh q Kf鏔Fr3F#Tm}#04@Suϱvh@࢐tG4JQyB=o)pFE'\#O 7,fKfACmMnУh`B5iDv`q'pɻcrs*>J/O]a )ꎠQ` EAwoKbrQ.k2| 빰Hh6Ԏ]2__(Z8=zp˄1W|=5niz%W h"ZaBBGQ&kr#J.e`b!FR^X_Aԁ舃ŋr55 JMߦ5hGX.X4HR41mG"1lr~ ,d(7 5a;wѨWrаoBct~!UBEu 9O.ɺ F.oTe)1aKȀGc2GKR'Tѐ4٩F 2R297@@jЀYpSzETpnIqY5Iu&V΋MN-4~Wi/ㅋ{՝xʾf!KYoם6>:_h~GQ%cCS8!;NhtOa< pw >rQh%BeoLkZmw[ gP hpyJpܺe]P4hAiE&р|\h (f(E[RauGyVr"qB@AlbD ɺNëS ѨVDç{: HD37@_Er-sEV`H}xoEcOvqF&dТ }Sz4St=lܴwƣ"`Rc@ߦA4؊43,G7eyƾ`=raFSDSѰ)좑w[h8mF/1RLi )yMm#ص†K Gڣ7wi?U:d+hL5sbmrYgBCQ|]Tzj%kz% m\}}4hlj БB?٦קhܠ_ȲYFjw)Gg)߈F$4MώqyM~ ` K{!m<+J&h Uٳ_tj}݆Foǡ$Աk4rmu iH!)n9y[A)ڹQe.53l hKWGJ_Lnk JEaYu0 {)i!=֥o\rfNnL Q-ގ?F^gVou+ .fSG)?8z4,eVCk7Bѿ h (ed~QKS{42Fch2o4kIJC'ر(!Eu4C*wE#znu˪l>m+nJmpO w(c6N aKvSEÎht.u,{)314L}nq'=RSh^ٳe\}4rrCy/oc#~ΟH+i}J(*ˍ/2bq!PF=P54tN)8Xz(zI_sh]RuqpnlO0-18oZ{ѐ#j4\Er-ݢ׎E8X|FJ0d.~ ^ wˎhJu4fɴѨ~o9y~q7*:"HnDAIۦSIDX5 (/DF'ͯpkOB7CWRSohAVݱ7I.8=(6L1^*/w-spͲ;\ћERo7{'YnR֥ Ķft"6k $U Cl(F#ޣz V |Fx?NI7ĪQjRMٌXxkZOol8MU q" ߔѯ oJq"1#l O aVu_*zl 7mE-i/koTzC}Ioo ITEy:6nϞ'>DoʥEe * /K~n7 idXPݒ`#BF 2Α;qCMroТ S~mYS&7Uc|L'0MWb1zC,I %6|S.gWK+ FvgZȄ&N1$?\oƉq'T)!z#"{gIV=Y8pDNLGF39~S4ʪE2?U<{Vz}Wo ^{z#Gz;}ʎF9ǏFB1{KÃБi>`<۰2Xnڅᇾ)Fc16_07e=}So+z?}b'k[ZX6woBm7. _77e7ceQޯ^\}I2%#60#zcRG;y#XgＰSoz@?M).< 'c)fEہ]s2Ǜh!Yl7:{<8녟[i!)Yw,Ȣ6oJ?Cޠğ{;4wB Dfor8B7y4ә ~16:z҃O&{!Nd| e胞O&: Jsqi@oJ2Ht_F0oψ!iߔ8[W~oo(yu6M1oP}:zDc ?K,8BGo\kݚ JGoP{#??OG@B&|_we_L=ޔ7b:JGoPzM<88BGoCGoP:zy޸>wGxS(A {c^݇Lxϣ/@7̨y_>c ޘa:3P:z17oa><9xSb:zү͍IrOd3zL?EMq@4A&h<\oўk~4;h9oƻQg7leo?{mwsM8h$ȣ$Ty{Sp5S G}kw'jnwY4zyw2иͧ;w%\\4n'V w_yI IDAT ?o= ]GP/fS0:}  Р<эnN˥iг"eиW> %\\ 4hbo=|4?kqfo5h|X~sq7@ ?N"4E_Ռ) G\ K͌?`\KR:ڃ_PPƎJ{<:d fZ8J\ ;G(Wsd!8Bpx)jA! Fhe#ZX|$5@ 0agZzW{{){usyPh .+$$h`|׈ɖuWT*~<$:41vk",5=FQw-(+ Q.F'F'BiI/qAh)~Ϫ\ެ\T!͕Ɣ`Wb}ޝ4XEwp,N$PQvh.UeaM18]X.!i\σBTN.eWAS!#dZ<@`cn#).^=q+@J"eK;K2Ǯ r,(-\bw@#TVF쮪\p\I T2 πF%kg ЬBcBW",-h6h\:9ݺf:aRy-=#4eyc ١yr%|#Fvͫ{;h6BtTj%fFO7 NV`5+6=Fۓ4V0&7JYYcv4Eg5性Z^cmRtg5 c|f&E%;$:i.10MP8mF+sx}5Ac>Ʃxh\qywHǻUKjk(5zF'FpL~LwrucAp҅~2Rbo[Y`HspFt htφCBcj_c,wUupF+dQ] zs3zH`|9z"q FE94x:WPmXjtv: fp8h'O =u%4.W2akT*6H/)4x\ Y%G2qP14:CX Ѐ3Ld:$_DЈV2{ow8wQ>a\@6я1#콠A{4h'x9tY_Pg=dy`A;$hdl5*PhCt94ʳ{*4t+ʽ1 _=4ʌc'ܾXֺiO!_j@C3Xh(b*eΌ`AlZP6 *hԤ0fbVHf?<4jh;R#Wsݾ0ԨI\`ɂHh4FA4⍗ M]Qt4DvΖu^#r݌jk(5fO A1+@]uAεMƗOGfGTrJ*PjiST`lZ9+b5*w'o^ 4ڄG.%z%*/QWn:sBU t(_Y^55lFyA5{ M>\\d[P&h`cYX2Q %D1[fIEp[aA@כ fZ0Lү`;ܐtҧizy֓xAZ+BC7b4@,(¯3VfVetjCe8Hqi7ymFN[Ѝ zYҳF"#6I^TŒʞd/ҩxIy}l oaю8 ٱ:֡ bB"0)p-JGx0L%#RIa]qA4WY KSZ`In`Rn䳆}`}]C#Ԓ)z(YDn*#AChАVjDX6\PwrJШ` g9d ۣ'֒n1j53M r,Q:B{f1Jٯ9ficϼDg p=eib-5t 1,(ڽhFQZƊLAAs6Cd0($edt5>zZU3h@)%W5SVPΠ&}97`kz4sY4 5PG9\YC )*|pw,}fցcR-Fy$,OW>EW8mXh%o0IDç,(:FD:-(+vrPݚF'q?a5~FE 5_d&DK|v[#@.$Ш%bc$Py uP7 ԹQ~ z ^jR,Ehаa"|>0nBhDv2FyK7ޅÚaq2Vwr]=ڼx`*,RP@YRk)>֡.'8ipuՂr6Uh:F72?iCqvBQfЀ0o'6NR&m |avEƉrhp9 ]zB< ɤ~5y瞴ؠ&}C#1+fg`4p5KØNC.ʹ}"h|(hyY$hЯOCDPO/ k~p- (^bDH OեǡӖ1nSL?7k^D&0?]Z1Q_ItzCO"qAYK[tUX~Qlؼ]Ԣ& 5\vw)̋HI7JFC0;"_|gʬS@CMXѠYQnZX_3|@o܆G CH:eSvh@'VeXj73V'TI-E)|>c5`b<ĂcܿdzxNFy|gW_04tx;DRѷ]14в; \l THY3{ VznAЈ;)?¼i('AITpI‹,4dW3a#h}v̮G>l˚Mt*Y/z$ޑ{@+qZBL:B fmĺh\b>j ~sАw·v`@CO*H#57XJ9 u"!7*ymn)7&%,#sd34 ;q^\z)a5n U<{%f? Ew7Ѯ(,2%-(x0Ol:A1qCog1~7h@k*Qq-#KBB+5J(? eb7-FRm.>f ;](FݞƱH)~TRG^r5Ƽ}AmD҂k¼ܼ.0`5me}hۡQylhسWVAC[ QYk>hcjJﶠl}>p<4v F2gIW NS!Ugs_fw>ߞM%h3s9n9"h^ѨМGjC ZǻWqR6%nVy]*Li`ˁNiדi$p+ oټ5V!~uq4;0*g7.(+̛q蔋LC _3HjtQcҨ36FN6P꿶w5M qAQ֠u3aQ u +Yuhr땃e#vQmdJ:hnOX )4(2Z>[ );baA1-* 56鰠d>LHeedp>?/?r34^4iA)FxЂW#L Laf"/(XkYl B>ٺY(NQ~w5Ʊ ,bF,%\2hL/C>4~5G̜vCcQ#uuJ?8gj,ǚ$Ykm,E䆴\˄%FUL=FCd,4L[psKШ,f^3W)W)uuJ0+l&mzJP{N6mt|% &|<$P=MϥY--(YwH+^[qŶ ۚ7=b 1Bhh$׋(O 1^ԛ?ٞ\.jV{~5o^P+z0|cy d'g#Nn"HdnXȅ(@ z`7 , <y[u./eZ: m_6Q5ILi5:AH\*4ġ#JbsIـɚ4;P̮ 2.JV ̽6@`*q@,YqBvȧSCZFIY[:hl55ÔV2kȼw0k5LGw閹 |b v!QS$;@hF[j[d _K)@]IBx]uoZGV\"Qh@|`ݑ(eTNp4d/=G1}}J9i[MfN1%;dyXh65PW55/lk5h{q-`k h.˚+:χO Me1Z'‹fUK^gMsͪp>?,(.}Rl7g5b ?b۠U_=8u([BMLrq%q ZVn_ᣵhܷ^f=lݗ*Id&eV jf{K+Gm %I81~ " 5 G AXz\@#=Ssƨ"X ̓R'ASdg0QS:A*ǹ1fbA]Ar14+]Gzn~bCh%ZP4{rD}A؏L>kze$x 8r:#Ju|檡+mrOFy8,3442Ey}%/a"ÍSUYZV?m.G\B4R%AC &^f\f4֙ n-ijZYaO27׎vV$/PX .AO3hhZ7B装}l ~2p'Uax; Q1hCጟSn> (^Zrɶe"fS]!?ܴN9rPADf.IYC~^ͫz 8YC"W?,[ RNJ~3\V6h0s*W^V~C`Ǡw 7wЈ)4։n wkjk([J:Bv;߰qvld=7!@͆^5O_|s+|=vC~I޽KxHKd)zhLߩ`C[gx}a 2ndn7 4n@P/TDwI9]̐a1V2< <2]b"ݸ?G^XhpBq #dLˡ5PL~X.- m:Oz Kk~P%'e:R`-MJYŹ5MĒ51PYꃒ?O3xK!N1 B]| @#_/I s@PJ@CSh`)0+ģ\Yh{}A5|%]g:PUcyZhO==zg'e%;BhmngVkV֓O{3t"=z&u IDAT\t^޻crqDmo'p4 ?%O r_eI%Cڎi`1/x4 =~4gtCjs.ψmyZ}4C xvf5C#okr\衩֭:V%==b?-;DvxbN[Ν\C XAM'ⴡ3O p $//{UhRl@&OצNMn4qTG6F؊;Wo8Yg>n@(sA#% ƤlKzXf Yh k4~Y4@aOB)UgDh2B5l[GiG5<)P~MMD m05uh*/iAtaM<±&2@`RZ)sƈp|61dimό]n~(hoY⠚ܩH k]7 =) nj4)ۼX}d8hݐ)!4`&;NeT7(@ Pm0 E S_a 1fjAqtǭwWhD;RSL (UKa`B?GXP( ݂S^-4V@c2yp&{q5@ (!bGs|DIӛQ>0o`8u>/%pynFm*-8Л5Ů+"4 s*T$e*u(yv@[XQB~+ԣ'bhk4h} &@QOd85֏4b$ U( >eѓZZ<41iג U:ieK?@#?FͫDܯ<4,K*k86'ZyM^ԲeP4xЍJH0UghП'Q^ӆ'4HO{VM (Cΰ`H#5c2]PZ2fؽ+lPV,(&}|j׼Y;\Ņ:Q;}@|x:G.(rR^ZN6O Epl^r+o^r@"x=ƍ~И 4SbC. v7Оi%`*4F?TzF) U,,#HEf[.${>B Y.(KzѯLV -n8h#1Cn| TCۡde#<,l^5аFy~HO Nďe ъIv4\owӗ,(÷}fhX*2BDdhS0vFrh(Y#^xw;4y2Gf8_2/kBc.$Fyδ$(}tq#;p\@0q>  KU)oƞYJRjw TƐm7gd-r5[IMϓnzFhh4`.6pN:Vb3cd$?kyR,eςBuƥ)>]3(k :hl e`A,ii_#8~QP W2ۉ%3d˘ "7lsav񅻹4&~ r)4h ,[lCA#Vz ~nEHXPo/(v@wqJkAXh-8.\ |(puX_̙QAOЊF g A%[+>'IM-8w 9 l1Xذ,{Q:h$&@Um{1g;8E˘Ž]|Hn} ԩ`*3Kb`äQHp6';y:\U "r[\6Y]۶?SgG6j?/ 1j "}jw~26yY4nI,7"N@P@7 m5vFN?rxJ Z8>W]%*|'= D&f"NrRh{*H f9qAI d/[2F7=_2h(ִ*`^/:\*s嚥-LY L?q5YP.MSUDԆRTyI6&4eа"3*eRb417:`g&gm XZI& J<- 2hхyr,(4fA@Z87cI%5`SdjGfTL}eϖ$^1$nŸ hy`'YhP1zd'jF 6 6E0JKAq{bYht7qy pH;!WhkswG8Vp2:}m(oo 厌 KYPlU@ ؈'o ^[h-}jPP{@( bhB4xW'ݡV@}0ӋdK/ۙ£uʤm&j7_Q6')trՐL}]p o^a]"{V=W)H8J+)ڜQLn~m`o'?4XBO]`w( OC$3:94|^@3 =6E[{ЈT1Ty zLanVQhg|x`C=$[Ϝ 'ByewAhp*nzЋb6 ׆VG߂qninLFNΆRd,7tckȌɇR~ +jaA 셍 GsHftߦ8 h!NJJu*)y.eE !&.kx]627vYcJb M4SːUVX\@tUX}RT`̆7ǪlC렱X^yhLsN/6/8vLnAɒ>hϾ:J[prvV_$_dvQ-pMp]貃F"D_X"k0OJW6=ZCww@L_.qlB'n N!H lNѦf=l!qLHTl48dޝ IՉCU^i<:7=M;@#xee.hۘE}AcTgW0NfQj꘨c7 0ԗ WKP|+<@#TM;RQi\#m&aޘt˺]$7I 3Oi4pM~tj5o fVsHQ"4ꔀ.b~Դi7{X?zj}1L%y6 4P4|!!CAHN5^W 5IKw(g8aҙcԃ:D(;$2$sH.q8;ʮPvn7{x|FN:Fb`I JI-BP>,; 4į~snBdld+(1U_q}QOODk,@YR |4eK xc鷚n`Wh<\_?|P^CΓ)bC{ҴI"hie);jPhudLCуTп6hgJH'b#39NI̕Ma~AP)DLy葃&ς2+N#P _$.kr+z0дx܉2d6Æ*~DBe6OƫjU̻\k`" pr,)7` Q zi5n;іr'zkqTC U Pxph+j ]PrRHcϮ%u7g|(9+2%ht5PW3#N l&X6<$7SNʙ/%. [1RQi ud x̝H[} 'fjE h$gH5fAph(W6w@ݽ^d܉1bTں[%Pq@#$z?1 u\X{k|p7}hLR8sw]CA! hcb(sJE )k$NUb]C}(PbD>N-c`\: b8 oQh)Aa219)oi=4JAJZBc"xhC𨤲_[Q:Zf ʰ*Օe2}W~ϓl0tM%)J>{*@o&n ~xP+`-(hԍO:ڕtĔil*S`TYJwD)4H=хa \ٹnLjv kb׿NXkC44^AQ)zAq"=F98y f= jԓ=s>@̏A6kAg'Q$W(%34B-Ht4+Q9 )4phFֆ"*Q&tBs tC>!`;Z 4Xdxhίxh.9#FIT|h;W=H$c Fy8\G1: 8 7x1߇Fq PۂhtP /ahw"5\Ӝ@z06x\_C\%fc@F!  ntj1x+mj@XY^mr и2' iބQf΃dٓ3M,J+-8{X LnW}7T1 %DUTWAjάQ\LB8 5 k~A#{r !h #|(ptUs]¿ `''ї+%`;WƪGb|Ovpݔ'ؚO3dSkNB6hty JV 3xn$ZPkۈU,峆J!f=I!"PB O(% +ȾYͽe(i:Tmfi?k]@I? FzZ*F_+j}-_t+ 4nn9pTS pV}kWAPtêLQmZ/k])pz˴Ck˂ Fh')i+XFw8=95l8 aQO%ɫ;hAcNCc݀=TrkT@U<}Ғ`҂BCY/.?)򬘯TUQآO/0k\]!t>9n ]Q~mAP[.CDR5+x)όhk74Z[<4цΣUΘxYχ^5*PH4X|JH'DJÃa*:l 44t=$h)q g67A`Kt䉡Q5,4JAMGCF )csYZw,cZqAa4|2TF\4`[JmhSPm`Y="4rѵp`8ޢ׫R!y'&o #-{C?~}^[b} "E O-~}ǧyt5Vֺp 8 @m;x]qB[P<4Xc$O\-B"֓4& k=ZZ@F8"ʎBRS>S9**< )6wsAIx-VZ v: l*.(55;1|qی̈́&'F% -0 "5žnF=>a1oŠvL\yh3``FAjjFC-Qw3^ȟ>k$enA &G+DǜH6`#]PCepܮMRkC; .8>E~F*@l*%f&` [xu'r-|JON8m yD6W WBC|FςA#kiA2qņ3¯cedO8 dhlz (sb6 ($u`(bG%ƆTCv1Mb5@+C\P4$JF(m^]Yx5ڱhe kW|ٶ|Zp+!d,v5|oT{n{<IJ75X< UܱmЀeWU #hgH9}!VIuq |( hYW6%ڶњQsX9 =.yVZl N\|(3"׼vC#mF _zC`w%+{%:"h܈ns@+ $mLt ]l_PhQH"wȝlA{kTJ[4Ȕ@#\ba_e> 7ZR\I@ JSB;Ʈl^Lנ:=̶74B`byϬpY ~Ρs"1edkQ  c9!+L>Ce nw\Q{Kϸ`@#hV?<,(mWy?8nzZ]g}/c:+nm9lw=^AC X"Fa6('wBJS)=dsS`̺mŠBCг;A#ijl!P>hmV̵hz u2FIj"Y$+k,*Q3A㳔3K-Ͻ[1060Ԍ 8WjkjUk!݄ *٨nA:}}>Ԝ`@v(֞>V;4h 4Vy_.,(P&QШ71Q.,( X"nB-yn,*PA?K "4f/7gk5ҋz%*ܞJ=J>XhAk q@q 'pR6 Paq* d\htjh\d14"> eȖ)+aj}@1K-Ho t~iY] dlc2گ6XPlQ:6豧'WQUh$KJĐ2/+<4F1_\CoPxZlFB5 yCpdϰt- l3:(ݜn>E􌯖5J%pkn1YZxZ R:k՘>/Jc-üE=QX{Mֈ'=[e-_5 KNW]bp<I0Ɨh Gm^/՜֭aJ 2PRi}b> zTF-htlt"q *;VO)"|u%vzmfw\va}<4VrMeɠV{V { ʟeym5(roCnEi3$-<>CCH Dߢ($S\T[E"{-?(ņBIk 4)c*VQJxs# C<=kK:tLf9^+/g 5ش/*(\>9ʇI71i$J'+hux‘46Uّ4ATې%&%|NM馍.)x[ƩQ3'EK4T?2ȣAcUo@>*4{Y~HVDQ1i : =64Nf17W|24n `/$O}EhVoVj0WPiD‚tm4ZCxz.|S+5ZC#\G,j@O;F4o/5V'wT[P⇛ 0@58Dz5FS>;ө>(S 6겆&ax<61J7?A:sRVoA{Wօ Xwch==.(Q>Ce}=4Z|C60ʀ5 rРB-pt~)_PrD&qiqhSۖͫYcGQ36<6Ck~Ck-EN eK҇c(ܧs4bdd~p%VFQx TT)xANmf!l:3ҁ;FC]>,B Cq_]M?J.?\.(ɉ[U6BFH4y N94v- ybrbiqK1)8FєrcQϹ^c wNO)lJbhR 7j**GjF] s+܄?]y%CɃ[RHQq Kk|y&rgP--d9< 4j;-(|$`X^c=Y?rn'FEu][#k35muIJJA+=4Үs@3A񗅡*n0V)[ݺ2rU97 8Ш{E*"'1P2yh`sʱy⏀ya}o>}T@\Cn 6φD?5L8fg+|h\^jH OdʿFc 4.rp@:D>؃v{5,({H{`y)s7X?o͔AMN].cwB,;]&78oAk R!i:)< Cs5k BIeP>mAIF3N 6>3adHyIpሾ "4&˫`CxqCz#d(郆rUD(Z_0|f6wʎξnZCK> 1S5'Gh$*ٵv :#r I/To>{p@^|(<Whi8k]bDD>*O#@r`3@j_Pxe_ɴ^^mkˣU ^QYOχQ}Iw`}$9bA*iGDQXP6S߂"y$ǂK_y )\22l2<|(_O'lW{IQ͇  6|(m=4-_/ky=QNhd'lS-Bcad ;xLA}h?̹v:URkqg,4pO2 ^z˛/G[8ҳs9f]qC.aC|=B#]Q6%1Wswl[qCAf|^C$*Fye Q~GE:Ed 8n:by}}rE4Zm8N)oF'jM3le0mRzDپ }F*(UғeÆru'F5uBN4Vу@C=q@1h2x%VjE h>jE!1b\ށ4 jÆtɖA/cA$8H |(@ ll4G#?KuQXPHC ;4 8pRcA9Hʢhգ5h>;_KihḄ{١(ϓ,* `Ck::멐Ѡí# RcA&"L.[Yx4EcA9Hx9Jv1S~K<#NeJ08AH[2E4c?32 S:3!Į xXD$.cvr@E Jz@ τh<4yQT%gh2j%t@gP/堔(@ï#v0I)4h2't@ DcA9! C#\96.g&q=J"A}=;5WE%Ư%Pg$OϠcA9H x A@ eP̄W<;<3XP_Lj܂:qб$:qrxw"=h4B" |AY h$P]0ܥ #q۪v;Fx7+wwұ$ аfq/+w~Wb2{C0t h$YPPA@p9(1'ʯ%yAq/AEq@4ms0ǫsEVL.q\ 4nwpfMpk0X~1R¬N/;/ 1Ac-"\&4jjySp5"\Rޝ\=hW+2|85q-BM} Tyl4dq{msțBc Wf8G[.qlʘ6ҳ{0 73}OQ#V s5\gQĸ>Nߖvmʬ_{ ^3,1j12k43dս6<؝&gy]@Cd\Z5j^܆Y#mz Y8mX41GYrD X b .0N/Yk,ŦФ3H ͹.B e{P:׸xzh䌗m˷@p=ɾƵ{w@c_FTJr\14U%ARFeJ'UaV1LUehor ˛G=a eZܼ.Boj*Atib_ERp Ef$242eT͵PY 1U<4(w85[ٚ^ dCMZhWnI$FεI W>VBU6[q f0ch6S0\<QP3K\#B: v5ON4fgvgizS\8*a|P 6|"B(O0,ӺQ[MzI 9q5"4|٦0c0+!n6G*Ц /Ω(+\iLV a&PfDlEh]P*n"^?R5|Ƒ.;=^bHC@ciȵ} bh |_ [q! =dM&?P. J!C@c |hL16hx{>jF5U5HI!.s]+R  %cV8}bhSᘶBt7dmضwq[Up]J<ʝ]^ [p;4f\5X3[IfΞr!w@8I/ARU RL,x6/@#kT`- d\ P3@3c̬vFai+4U'*WgoGX~E b7ڃS;<MFyh6Bx(n:MbhP]d/IOEjVZ 2(al5%Fa?04t -|%TG:0 g8ՐB CxVi#4TZ[k %3_5 -Om^ӟ%"~ 6Vr=2V\+ء ^.mJM@ck6tiƐQǖ:1?:ړ:\蠑0(xc!z^ ]KuaSԩ6p?YN븯Y#?@ 6kԍكeJ cXаHl#4 i݊\}9UK'Ac!&Ȑ}ҟ>ڡ,J',ߏ φĵ("k&߿y}hTh4^Ehtr-PBA#g z{Zha{gh$l-!I㓡! ]'4/n$*5RP .V8r5Z@3&CIs# ]TU 4 ; 6VӬA\ 3 4RhkbPxW5?ƒ`uhd)4JI֪KFCU^5tr3`:??8CI6a҈1zh$57 M2b`SS;4k.n(syY=NLah{ Í7VZucpȜWF4एU|dG̕P.^4ꪠGmX aMRcc*B]fgym(?hD#gFk$e=Wlfg|xiI&c1 >hgnJcy1#i޾p.ՕX2ߩm?k],46vgߡ!e;TQ69tV =5oJ )Oф'&A;UydЈ髠qƏ`׽q8}㤅2Q?(?[|*+apuoWA WqN '0XdҶe?hR$I]м6QF@c0.B`fX8k_FHz{-hO24/@2k4Py7:1+g?RO9/z]n{YPX$rE4x+ͮШDy|qА6IQ^Xɩlwx0JF D/' 4 rF{!O2cLS-ruQaP!oY|A6@hVys؁5 2k$e{-zs1 ^ ﵡMJP1¨}U0Y4"` L˫6m7遆쫹Qր+ΛtXAƥ@C̘)3k\.c\}V]D/H5z@C 3H;}`kfl<$T.2VeV8"yhlrʸSJQ'[Fq4Fz}N?kfJ:k\V U^!0K)`O14_Rbw밪Ft5`9jF!=#lD /Dc|9OE#sC#UE08ku b 'Zh()Ṱ3"ƃ4?cLaL?4jՃsxhAF @CcAcR״}e6,N94.8k YP0{ن xk<7#4Fk%68Tt +)"Shk\[P+Q`je8 =B>[K31%k:Wy=!4dv4y:hHPY*o9<|FIѪZh8˫-QU&ZbNY7i&k,rRھF7mklR hְ+\&hB^=g}4t_Ϝ5ph܄Pƀk, >4"ߘ* .RhD͜ bh!垽ήkiZw6[ݡ˫ŃQ>( EF{ZN8kӗ}^ %]F3tL9)ֆ[5įymӴ!|Ccg ٭2̏n^54Fi$1q'<6'02#' o%Fy%N/ qJc?0hihixA)d"bh`:B9Bc4\^n}C#픟4v(kVz4 Hs9)v  ƂQ rhkF~Zvtы]РաNN٢\eq.4H}_JhXꔏmSPwg'?yQh (SIQD#h7NkĕW' (4>֨Fh%2"drJ7ơjnS4 ah1*נ0,Ykx =)D&&JQ.Vgq)msn@*¿zj^8Y Zj7wpCpKC"|(MJ:)4{K['fFV)oeT2Nje q'Ĝ8+Sy AC$$ vs2kfF+x]j75h<|2@# =e;@C'jMf^BaZ˳~P!i?s7и8DZib`4&e B[i.o"N'R9_ X_)OnRd_L(^N }qAt "40l)Oa~C Y Ơ0MLcLpʳCfLz4g\c\X'5ND+C64lJNr*s(4x4)+ШUhH|5Ћϊ\SpSCBXy@픧7NfrHֿC1cf+fĴ h$wʻqtʯ,Ѝ֘ߎe\@k$23ւ_uN߬쀆 ajCCPx5@#9Sh`eEţXCKz 4\ aU@\nIn%ܮ> I[1q6^ ]44qn]h ^I 4lnP|Q|tJ~ fkrAў3TW0hAC[SbzШ[Vzdg^l(4F/z|!t3zeM,c~NeNdh\u2(啐m-[ ̓ulH$ ș1G;S{|5LFNA_|kYo9WU8Pm@:UЅF m"*v@cnjIֵ+L{ HMd(ApGt&sUX` ~&w}úpGs-'-a|k+[kY$+p mU*rvh7p^(pVĦWnE6g嵎T 9Ny tk яb=ʞZy4@)":.P?IGQ Aˠ1OS^mŷfBcKnQh[+hа:Z%aIRyEc˒yrbxQbS竿oڌjgp ;]ƄhOa^vkL!57"bCkZݞ]ry7wG͎UN̨׈ S=^]B;O4W%x H%ݝu-h*4ڧk1oRJ"84LKCQ$h@C0i≧PbE-"jS]@{:ض$gCRmh!>qh4<ʌжM WS;E_:垞$kԏ2bO Tv裡F2P\зV^+]kFceF7@6ꮈp4~ 4r[S^zΤt5 - iKABCи^wZ@SBFi[W4-Xh@#V}LSFiX5x5׮YS%m3GK.lKls-[>8dPo* qnkF ;pa +U k7[Ӌ3ex*do $,aMU }poԨ\1Rhoxc = ~07Uvevdh,UnRF. T擁-Z/LZ;Uhd'Ff'0>ɮFOxN|6?1{~WGF( ԅE;2\1d kh-5<  1IuiS֨mev gb#@# c'}Ab`p$Sa ř4:4\ah$4n1gu#`@-| 4Fx\C%PW;KZIB8އ"XQy-_r#hTӌlY{j T+!bgg/ hBQh (?C#W.ˠ!x4rR a)(,iD /Euu4r [(1:4H(ilBDn~S2+.\[E}p10 [PW%1԰Nز(d'kZ5 YpwJ7br6F~  A0q@slR,TF& YPF)h(-ЀyzI]yhP+=8@vV*}]?/ѾҮQz<4n-ص:R'G]WnIwlFadlECqt5 ퟆCժSqיxguwS2 4ry2ԋ?d)Ro-L45 oh<={J *ԮN? BBq$N)O6^4JcgK!2fhI߶]u`-\>4(v5 wkOX+Ј#89wZ-WmBcġЀ=g]+\V)kE4Qr$)FU:g4h4BU1ƻ+jFA]߳>tyhxrG$i'\zp64AP^O B#dF0(p6eD55{^z_0p'簄8S=sw Ԡ5?:5VQhиm\3.]Ubh+00 { AvX9q`kP{̐A5Ω| >|4fVV ::IH48ƎehCX%)Шl $F5hԻ;CB&͟'^hL)Pk`l apm fװeKGЖϷ(hh 2`swMVWS8ԃ)]m  4td8'Z˂ű"ɳ:Z~? ҕ 4ꀶИŧ1hPFFα0tOjРNm ۅkև!h(ȸ$d[АKxن rhՃC͒ĩpŕ[Ň*^R/Vw]eٽlpQFҷ)4[Iiuzqp =ƸFZc)v0Шҕe<svoE(<(xO>5tL^ B sd|܂{TAi_bI%PjaШN+޲.|vshliCc&B<@ %A/G.q Qk۴0 4d)_ODS5k<hؾ+:IP^a S>@ㄆa͙힡ag5$]w=o'4\p|Aq71t_Sbohp3cИwAch3QQMhhkIQ4QP#L&$vqzr&BcShO"%hl1R_=م3̟Vb5kߟ:{htohb;2[h8DMiMMjzd1x=h`Lb(nFF_DCBy\4HJbhxr ]|Cq<4 ̐kV6I >S2Ϻr ͮTAh3c|hXJɄ^4 wquS~knTI+@ٖCYLg xwgo'ci #F41kMlmfCM|m^B1Ps{dRNyȠ»;g.dߖL cFe 0: #JW4D m6p3c}A]9x5A9eB|)e0,|hn;osYwW 䵲,[ :)|cpWfXV73C45оS.j&HD&TƜ^u.^LoC*#-8Wi(M1/v;i-oנTOI"8f tya,)[ϋpeAh_iahԏ@F)8 lb?{P>1h_P!4^ j]`&gPP FƑ m YxWwoBöUrBGQ3*NyJ$5Y:H:JOʣҲeK\clLN!hdF;vRJb*Oh=Zڙ /aelA.2hOרܤ ~>:SBÔ&hcbYQ^w~qk|'\A[C;K`\ǕWڬCm7&bGz׈׷{&Ca4֢,)S\㦼+/4Hϔ5i(cKo4`.\ՒxxDzT MJ+)1Ac:q2 myopӸ[jBu ph톟nv GIF+v;2/u1?|6Lo/ ШTpfDhlGN<çX, I.\.^y7R5r&W" 4~GcIh4G oWTڱK[ mJ´?hUr Ϫ`An*F(ȐWFŠѦQhѨ?8m5ic_{ A9pyרƞW' [FJ54iTs6ij5~F%<F~DhdT;e24ˑ{4TOb( ;F%h֮pU0G\X@AŨjN)? 6)d? fтЀ{;3umi;F:Η=CBw/!tږkz`%2Ҫ9\Ñ+CA*%exAhnZ?6>"4Jdh$+Y{آ&4] tGɹzG hNdb_4S)[YNHPBP5' 5*|< *#ИM]o OhPlњM@<\ ρhT Y] C '<#O56YJ?-hԶ0 4ֵr^v ꕫUaCiQPMF ڬ<[OYs*4Rl3pMk,&;)/k{#ж,1hǠ!@s7RS"8s,h[ +ИH҂\c͞ Bt"4.~St8FÚr֡a{nJhxpQ/--(Ox{sMhXYʝW$)c#l!:Bj*Oj(s M e] #B JzQ)Gf4RKPT4ޖӵ{CZgEhP+$qʇ?(6 ky}b*wyd8; AQHa)4ĤGN5mke|B_qd?9,:=_OHB <4'bM3ʌ1o8CwiVxdg@|c\_`,נD~yL3$C|gjrH|ڕFP̭Tih@ЄB@ei9Ơ*F6QE淡 V:ّ-7LV$Q@ccyqMha ŅFw(mװr  Ң%AJtzr5T$Ҭc4b mUyf4_tʓ7\^ቖᡥigUF/*'sB]pD!=熠R.LĤkKʡ &_P5rW;2hYE\.qhLJ_qf>0m<` 9ʧ ɾ'4+|r#F@ɚMҤ 4 ~ XZcZ!MC+X6Kv 2E7a  d_43f$U @=YV7HPdԲt+yBO+ jӦ}R7S5y.kdX-BZ5׈̊#+<(]*v@+?)`rƟ,ȴ [Ty%;J`@RذST]lSs!WJ7»;0f.=XBYN5(W-|oyHt^ghhTJڠ2YcMJC-TCPAіPآJpAiŸlHw;`-ɲ&.9f& ] (Mv؂7ИyrS9Ј-[k8Aij(;+5;)fkaIŗT&Kz.xvwFddtaMS UU [2yՙFK] C`yQuOq)SR ߐEM2qɳv @l¶*ׇIZrHO+-e ܑk8>I+$- v*B#Ϋv UEܰ*NyFuapb߀烿)Dkt [n2d.4ݗV,(oS>s ?8]@o I꭫ PváY~DѦS~2WT8BÒh̥g)}RDVSϧܽoƠn' Vo kQhw;A.޲dž*Y`ɫ8S IDAT "ШDVm|)L>!oږdA,NhU!@Ñ/{SlU=HS\6qYv D>~ ɮY ~l4\ bEh@3diB#/)qr]b..]9l%YsフIrGyfq 2)og&pʉ e-Ki|%k5k@p%+84Db^',uʻxq4מbiH74\d!cōqcc@UHJ KFFtwWIâLCqаm]jl)9[6N*RPaB#/)gF ?,f8C :F~)r 8"sF\;LLbYğ#12[иy"At)noBJ@[ᰖwVAh401hl!1pQwkА~`''YyO]?Aؒ)|>L[E_4hE:?:nak/y5{Ve[ZKCϔwa\=Cc l<{uw` )ʖxeo+5jpSRCdչ5~pRw_HɮQF?e8`.o:LR0MWJ`S^S~Z树րN˵iW3Z_ᔧukNs iCJKϸ*4 8`",n1CI$̛ grﱡ@Sh"t)?Ny>9>C6;iݚS~АTCێjW^گbзpJr[U`S4|Ewȯ|p#ZY=v.qK{M 20 5*5SN'0`. 9xߧ$0ͧdzfՀ܀!(Fyt# oW oJ Ja%7]x zULc\7 fTB[&Cwcˢ 6Ш{fʟFrU\hAG4Ѐ&|O토]AUfGjh( >eh*FɖШ/cr&QRR֞@cFa YCgA9 02xcv J Sj/"GaaSEI< rG :5ZV>z2IWIeA빆l$X򠒣\#MB pahe./lbBvnkÓ]@C_#dv/1HFC鐃Ј ӽA`[ wZ 9{,5tn$h8f֓ QpMm4j'Ǒ <}qNyv %Syz1^ j9N_ 4.(y  ̘\HkFІ:$'6e>As(Ny(,4C?kdz5&@2Kh,ڌt6DuZ$)UXS4r@ 0 z_e$纎N/xK#rfYf : 4>3?OWq-k_,&X uXpi14gͬFnFac;q>MziP9aWf:Du8FZ$@aSnLJIҰal 1v& {d $456sEy W@#8<>V5ٵC%PZ?FX ض0dW ?B?Yo+H ^~,V#\cݞ?+6af鹼Gn ز 4Z:k"?=7 )tl0Yq/+,-+$H#\CkP'0 U'Xw'Z|~5۝rڇ>7)1ne~]lƪLVЋzEh<~3Fh@\wz%Ts)_@:Z% h']&\䧠gC6_&#@c(460yM$;ukNySSLD@)C)VE%m_Mb㐬q3rE5)v{7kLC QŨi(HQ%\c{4{0@x< !}p~;f 2g X$nW7BR1bLOfQT9!Fet#\ƫ`]Ka`{h Cx*14FtG1zB-XO3465Ǎ _:qNCCDZSyerbT$Pт34>lz7a%k&Iyk zBCj(K-ٔ&]r S:oAL{ؠ?D`Ŭ;e(":Dt%p5 6^OF>Y]).U6ٓ*i4 w(%]8n5(k- ]7 s^G.5wcܨň)N$ aE=mqSBl8PЈ fTOHr nkĖE[`Gt}S\RrR7}}]\o픏"[,*Bm i֔1m7_9;p*Qd8FAhHN)4l5ZS~I-dUи4`wB$7A$cC .1ttOVy Ckͫ$ ^ 3\'@P?a@v,*c")@"<Ш֔&{qeXn_Fo&~4TJvfIf;z' J}\d,M1DUYK{hl'F:`Hd+$k\Kq*Y/4hUgЗC#^GKa =kz4y=}g t̪^4ҍB) Oa oSx{oe:Wjy4%=ҷFnAjNz&ps'"LkKp.ˮ1 -]w/L4RK7%[VE,`G5hLvS~eaхQJl)ߌ| ׀#KDۛ"o^x~\4!5zk=#o+Pw!$ԧ;94JIK{:@#ru-)]h́kC\q P9W*k"kuk8F2{o[uWIhhC(/(5hhokbh$ن)QwsVݫ&/Nhbw8&Ш '@Cԭ%Ny5@.hJtIpfpbPFn+bh_ -nzk,uGW)LPU cЀ@h@@Q]=%.u8Kh;xWk'h~-V dJ h@3m-7t2;>V^\bDCmIUhЛG R:퐗]ʫوޏ(woFP1m4H=ZZWS\2טtwqu.~,1O H-$ѦAäH/?kxM^=>QҒQ 50X{C75;` lh]@/57۠ 9֯P ;ٰZzM %]#뎈r ch8\5.cZ?`K:_tNy5 !&=m6@K((mϓ涯S^k^F{ASGaٮyǃPByuq;k+A(51't }G ؇`1X~ װFIi(cG;X~P*YQ8ƭhD?LCcrs{~yeza脋FW2wՅYDfycd [C VNiFk$8@&SО J,)X/F5W3*fSh|E^jp 딏mb(V-Bk㋠i.yL,kć ʢ@Ë%-j5[4yY^Au֦`nW*mk4C嫠A1oTnbh[1PLb@SeN?+2Ҳ rxx.W뫡Ѩ*ACw"GO5} 2F6)s L5sA%R*zW z$mDyuNS"xYSYkh$[ WsOax7pg>L|Gkp4WC~ ulJhveЦDu' `^P\"w&/XJ'Iȇ84nx m%lå$i OBCbqq[v]H4PxwlVKk[-|1E.WSP}NyADM*u14WBcԨ:kej| HYyuk"(t*8:\cZNvhS>Ƹ/]BR\lV.4sbţ3a_q3L=Q^+R`#DhXb38 ?5<zvSvՃq=t~1,4B'Ir&M2??҂rNC>-^ Vm@}M)q҈8{@Z'e+[RNy06R(Z5 k+Cr >8K}(8xGh?нjO~3(X}*艭 MNN*Q=`+|h}ŷ |\~[|Dذ+oҎ(th\#[e  =CTh8_ Z[0yMq#Qښ{Y o43:V Rlhh-q[QE 1 W Q ЀmCfіScy0uj "=k*ٛ\"CHEh`5`zBCcv#x;C#MpA ^VGZ!kr$Y cVh(_ތ][$Vkj 5uYO 9yMaOזSPWzx䴡HL"[V֓ 4vnYbޥ\cթ\nh92:!(#+0npS>YB%uBÖpHō;WulzZ?D"71?~!4(l*Иuj4:ȝSĥ2E]c"ܡA#=gMI7d4ke6~<И]yh6Ih#5<4"d1b 碒ðRC2{n61UBw3׀DYf~ ey{,!aE<hDÐ`bA  ЀB]%ĺ5 A0$ $drcFLd0 6FA8`ҁC\#aVg|95+}Mػg$1&9O*h{34:oiS}P.(Sm߈K~j? hi$ 4ym)qŭd (%aTCY*NS = {\#Ј .Q\)﫧(OF;!*Eyoסk(аF!)GOAW5|xm&4& OY2 5׼`&^HaA{Z;]&иPOӸ)!ހAh YdjаN54\/P#\+9S^y׸Q&` e(Vxh$\#\;+VM KJWowI%<{uZ)]N*vN C 2;V*!l*}M 3ahsydN&>`5^ e~ 4F5|W`Tz-j&(Ny0K&zU jfj|0y3A٨$3R^AjhѲr KQQnd \#AWSs֌/PB9 <#"dEeIٔǡj 7ݺq'!'ss"8HmJ_pVIe=5@FcFS.bChp F5Ry  BQA<FКbAq)++y%+51u$#آYd6!VȄV a3hidtk8ӂH'PxIa|3K9qb(: 7pxyq]&ۢ0<?ea^.:DW=Oٍxخ 7\irecə]cPn5\M4V{ c :`z~mQ-׺*LO)!ޤ BhF]eush0CNy1q| h<4GQ$:hsB #|q<$/+Jn {5Q>5G+@ǪW8I@Gñi:,V9>i$ ^#rpVTWDwE#OuVIS WkǡqnQl͐9p;\~6g*r ՚n3^'%k-hB|[PAಧWyhLhde432 qdti =c͒ ^+y KUҺ_[И nʹ1)v#YS[ (ai\ÇDD(C=#uoИߎS~G*P~5El(m8 (KqYeh?5= z71RT M҅1 4l~[b-;D;p)O5A ^9 dsa)#8~qGw:L^^nШ-C5"@;Va#cW]TOa}ذS~{VZF;U@r217MaUF1mCɔdBw½f٧w> ] h [lmk{<|;#ο _ٔPhh-bSӵY@ÉWu7ۗD@c\:OBlr9SNHX\fV ?g9ԝЂ4l㶮:BШׯ5B#]qY /T J ;FŁg \K5/qkg dxjGk~hurb@ S}@#JH'5m〇&g;w_ _rʼnOh`'@)vsE}=>Qۺ6߱ѭz=R% `Sf: i&Q)BsپaS@#'W4gl{x+=7w)߿REF= 6ن% J5` < gwAd8z-S)t }1546P m~'4!XԤ{[EyuO`KY߱OP>BFh[`|=sF jA2~>{l[aWAcڴzO=QphPHs zFd l6EkYV&O\\\ޗ l[90BR\Me* zPBR5\:坉b@ĵy!^u#5§,*BcFї8rQf xosA\Cކd(3ꔇjOQL畐K3)FM#RkY+34:܂h(*8>CCEq R# \SE&&%eCN*H43АT2  ǠB_s wD1ԡS~'8V5/,0`QD3p7>lИI*6)d䀭&Ի@Cʫ`8y &lԟuܢ0Ieh*$~<]Χנ^&I[pWDØpu 8r?`?f8W|Q4[Kxz4,HQ;Ӏ]<6g%q|;UFx5N IIBKJ)eb[O42ś{BnP@.Tsc\Tf< ^m D_w "ʯ6拆h!+.|ڈ޴Ը-'ֺ 9)a1FLLJ!zʅ 'y8zo"=PW?O (O={*C [݁ R3p40M|5_A Jveo mC /y=~yV?[ ]4kQy➬ŔCw*jA*k A kJ͂>{T^Mމ.&FdPDLjz~pǴa}z>`+'@Fx`LFMI[ SS ħy_c-4[8 Ĉ4)KhШM %Iĭ   IYPxmv5LMMh0GF1RWr*ƀWo=)_y b=h(᠌>UPNfO )ѡ{;u&j*7EMz${] N|kb(wOrw}5g︆BgC~;CV9f:)O;xJ h6Wi'4fS):6 "8]-05J"^!@M(" 5:)u@ aMZ 5)5{<6p!2AC6>ThjsvWd N*S)ߥπ_X"q ppt ;xzhlpFfV?R`Ma~k嬆rFLh[ \RS_Z<4Rhv3y1Wi6nSZEbq$|h*ר.A I KE#(4`ױ}T o*Ш ecp_u󺧗;_ :`+Ir705}DCDSɻP^Cs6QrŕcS>uU5R)?N{? aT dۑmX1̅Xr٘w+;G┷bO)^htǸY^Ƭ mazSަ=7S8FvA7F)i$*zpF%Ǡ P]م3Ao+s?Nla<ޖ64da恸=p«3U%% 9( h8̢S8Յ2/@cH󼴹=CCܰ[^RxơQ?H& .sJ>4~#4FO6ſIا6'?6u見{<BώW:B}Vo.xFABp&F r)KI~@0z/ oFh4ɝ(4WPUh P)PBGhDz__>肳%qhfFwnw6{с4XC(4n pؘffuՑ"hXygTh>Sh"#1Y;S P6r1AC;EM $Z4ҏsx^{y\%^_! 3ypwVK(;=h8REC~y}xx@LNL G?Ш;^im=k=FhPAôd t  b7hy{{^yDooFmL8m*hQLIc0uR>GhdIIh֪d ʫw7F>H)5B| F;@VoBLe3e~yA^to]p,ڥVxZ~1 <|V',-zW^@#2ɢ.hz̳j9Ȫ%1@d,t77D H-Ɠ ~kǶ+*zD Gƒ jk|S,aA5 rr m^t!w^CUr I ENGC r.4tbb7I6l>:UGxB| ө\^*]?K_ xV']ı .pYPO{;|<4&2HtʏQ[yn#0;ɷ`Bp/)( e4@EHú a#P-'1bnx J-F!\ c <x4xƿTXC1sΞbuπ YtQo/E}hTW~ h!4?SNHfNyOKCN66^ۊv0<(jS~ @c1Tz!4PcS>$Nk6/ s Gf.=4Ț[?/Xe4U(NdmdSwPs-τV-JŲzu76vHuʧdq>_?IwO[o#4rM,(e:Ei#$ SjpccISr8,aaS;tw G yh{>V9ܙ Z o Q+_tO9TS8}Bs4p[8sƎ SSF8Vod'r'NMrZJWH[?_[oyh:rGծJb:JJ6T)DE`(-4C|TWCBSqh,T3)OǪ*ۀPR9Apbyt6 @!4ܟ)?0CV ,O ~ Br h:\6T>]LDCB"Fuߖk YC[@+dAp34`Xꙸ4a+ZBAI\N\1 ) OxC2Ϙ|їSNZimW#ӄ@Dž>.rp{yUV^ՓGwvdN:zEdžK9hGR䒸zC IDATobǜ 莯ϯ%puCd XF>KIjq{9o7$ĩo}ѡQhiQ xNl#nujj,1UPw |?:I-l<1Fl:=\ OځKF(_65u,7O qiYN,wM83$b 4抬; ȶ_HwyBy3drZ|]Ddw|4~{XЖ+dBN4ԦCDzjwBQO[6VۀHk,dur2-M%)g@clÏI=`8h# tj5@'b"4a/z#ۨ`N@.\khW0_ rozumG(yhYub)čиYrxorr$ֿa5@z&DKjIrCqn}  -%~!4 BJ_o11dhdk~e $:N\K;`[nܒ]q"4nsՉٛ3^}YwV|nN!'ݰ)&LRNo lK᜜ZF:hgRyu!|z0ZGxO@q6ƥ bNy hSwA@#̕BVu3qznP1Če5"LҺ^ TƩtʇ^[FSltgqL\ ֔|}+iJk9Il@E^^՝}1D? sy&nDhZZ-H>g)NyOG)(Ih(]c7~ћƈ@#J1?s>îqnLK uI? zUit;zx 7A'u")ү'afA^֓Co caT!l7m1t7uʧ]| GJF`JyT7ǵkNU^/z.C&Th|mhHȭ?&Q9'k1ٗb|_KW N ̅]T嵼ʟ>@wSqLu78<_p5h(:[L co>/N r?IXlrO?K16&Et:^نЀH7XBzcB(*Ab)O{:5EB/lb7; w4ʺ$5 qw y=% z7m4yrݰZҗl;hر*OLqj 0I~I)C⊠S~4dSgўPLouI#.$3w'6ZFWIѝņOtʟƞX=h(TS#'TꔗLYn&v ΪEкr:F7d!ąR( 4,4Qh(#Mkg 4Pʶ WRTw>uԩ%\#K$XxxyYmtFrA,)4D-WLucwuE؂#? aAg+E+*׀$dh'1BJZ3q#4ȗbA)0?ehǀl1B^LwYCtƑ QIŊRSb $W k4攷bDYZhx%SW5U O8-8CbOrʟkݘMtƕiڛꔇq S:ni(-Bș#aü)"+\yD4D|2M)Ad~UEJr쓶e,-Q nUCXX{[kʨ5qj`GWؽT ᭉ^rSg4y4QZA6^B[](h$_'&VO+XdVh޴W tolly5XDĻoSYJ]en,\u/W0TJ~vE Vj6X;%^HOPdd$Pk#摯=S>ZwR7k͟&:(;ǮNǂ:HҪZ`l`ɼ S}> ._Ny .]:lԢj4J/UCf;AXü`u~f<ϣ3?`9씧Ѐv2'.&^3w5 w볨G+?sw\vc`6&z%O/M`BCM.siS 4 3ks5qeɩūQc ̟l0 ;Ny}s2"6|YM頞щ'aM8b#U4 _Xj2>wʳw'{BK$WߐI^u?X5T㺮EDNSb򲗵3{SVWS4B@'%e*j{+Wƻɗ/R#Ny5T8.1_n>ٯ/\' ÀPk/mڪS5dY!-~%6wÜTFko7| #}.8)ږElDхjH[1:~drϊjC&AxȰe".v(Tu kp^c㘪B1 NҪqnNƖk,wGFfaQ kjS{Kj .Hh%i#S hv`g(;;^Q~PRT"OcpE}>@5y([5[#AxM3UІE:5!9~ݪ&ΩN^~j>:B5W }ZFih˨,u_/P֍sL(4if#"vUTk.&ѩp'֕ Ujq7,I`y\#U{S*{!ܿf7F\* PP3l8)E3}2lҠsN{{!mjTMۢRո:&Ѯȝ>Jj07[뺻j蒻,[L?f;F((5T7~}YCƕj$Se"d/jLh[fu- k_G  C?B`MDIQrC5 Aӯ\&4ע&8J#N^X H_V֕GYqc'MHjDPkIUK+-P"o>& laT7aOĖ8E6q(nU5kuWRt҇VZ+ R S涨6$xeN5.JL5bhL%jXnv04J7//UfF9M̐IUXCՈ;f9G[j/IB-3cתFNpȚPXahj Ub+EcC vFYvW רf(R9&3V:k3OFUCw^m^E+=QN7p/>Y +8rQu,IOCc뇽^ANYc%|S>Y`uUP,.=bՐeﺩd:i]ߋ3p;T!*j;ߕY[Ubw-e&kX)1_Dބ[ 8eR`F1ڪ!:f̩FCn[ 2t Nk' |V P_l:)IX` k\P8@5@V 56=~k\.d[kLM%U#0/#Y=zԥLU6U3 Mo_Eݽj` ٥۶5"J/!64} ^Y5T}>ΩpuL^ l9Ȁj8sU{iըqEam3|jbP5h taپ=ǖJ7j4-K2zX<{g65y5TC{ kRwb7L5.ՇIRŬU wz3@Y9GdUT\2^X5tݲ^~ש\$( -Tjeefg5xambnO+EÓ55Ao>C礅R^ #kUc1 ⦅wjUKxB Q 7V^?^c1ww0rޘ {xkl ~ju˅)a%XxŘNMWRkDwM S=0kbSKVkׇ]?OzCa J?qC !TGzs'rafG"U*\:Цj#Z Dx U.|Mq+{e+y^/VjhG2Uj+kʸFJ'njwV">j1kl?X5t>`L@+&kʸV%"iIdžx 5ƆUqO^3mxD8 5yjqiO^ew|TvB0hdո&G/R`xbl0UY5a,(/ 8l#-8q;Xs/ƹ F9PdV3HhƧ-oj 3NQzK7S5EܷqMN;)ĆR93˼_cK IDAT0UW $lXת^cx Ոƭ/BFIQ0#_H7Aj2_z j1QD'5|2%{[5唘Yqwb{oSQoX>̔@jz^(BYWIduoɔG L#hq|pJnjq f<6&*tT .ՈnX =tR]5T԰~y'Չ뺖a BV5ܩ%pdq.օ+m] }m,ta m򘙽im04C#v|Tw;)30sUݪtHM^v4R $%R uUQ &T qݪ.,- DfBJ&UU#.Д>J:_5D|"[ũy]b$n0RU#uuWU],LU=^45P[U"b t)F5Wwl)ic:wBvyYF7^ո_V_ePy)hc:wB]'s8sD LEϳMxAk>Uh] C vx7Ndxa(H9*T#C< 8CaIJ4y]딃IJ:uUSC;0ՠ`0pU2qj(e1- .P9`50 &h0=A;2:g(HWne=S~WWj5U S~Tú2+_-z;R _T~7Ԫa&ޏ]};af V}+_-~g8koƅ ary30 ,&yWU hڻ"!tMܽsUca Tf(j55]<\>b"jH43GcJ53UMj<>S~i: {3">ߢ?O =A,M&"Sr3qS5AP'hS.ܵKTaTT# 糢MMmLN}otʠb>N贈&{OxI56fjԋ~X#UxP )Us vCR 3蘪 xц-IiC2Uc@SG-H3S5T&RьXm}cF7TSjtQ mPo8`F7]5z*MxjnQl92BS5vR8(l8R2C0a1a PweNy-T!8kהY=y]ĂU˜l:[iUc kިv).o/Aߊ'P~PoxF`/_݉SR~F%ʙ`ps3=J5S5%vn>zK~oh.jxf X j 'X V3XCэCxNxj`?H5:S5ʊnj#US55}f\Q/o[-S5 YcVje3m,evpjt D]cKEB ʛ1P(jlsFmLxC5z0UA;uZxXX'rƷ>e~@MaY'rƷN,w]'r j0ӊ;S5~a//@tˁ:5-Job,t.MiTN\5L/kWQ(S~/m ,03hѦb"1`<7k:Pt! //|ljjLU DɫS!j01'PPa!Q c z 5]jڊcƯ@2UEׅ8UwIy ~ /TFN՘@g aj&XqTսb[\WT*MTB^jo]Uj@x9 }a8ژ3 S5&&TUtjEMUHTUE1ѩ3ժ_$TׄL5t.1UcbC'PL՘@0UcN՘2)XfNy1/A"՘N xjL8ɷ9C@0UcT LS~+Ct׃%_'|ƫB"HS5^s1`jL 1PgNxQ(/R T.TWZ7O*Lx]̱jL P}Oxq0N ;?YՃ锟0VӇ锟p S5&L՘@0UcTT S5&L՘@0UcT j,?;9cob x||mL<XcT S5&L՘@0UcWgbB!RŨ!SO^ kA&^A5 kb柟>V)kU1g(jL 1 ~u:^ ~PJS(t46,S5^DT S5&L՘$.LҘ$.LҘ$.L 6ې88EcY̔$߉,~W^_$Pk{XS4~'t ~[WqEߢ Lx LF}K)y(irC.!!G\0zFLn'iI &i bsmwϲӝSM3y_҈2&b|ŝmXrAFEl"rI#k塦9:&<`%(Iv-Xn_kYg~v?9zu 7~}¯Ci=kq_ᶄjٸExs,.M/0biE3pqc8q" /q{.7嬵+1MҰR.ΊĦSVon-8lZgY-M nw(UjzYC+_ߗ!{/j䛾jtsqvB^`]弸F#k? G_G#iQt_g'ڤaTT=^Y.g|@gռ硋o'kY\nFnNN5FCx' ,΋yng$@,E]# YS[H|NԦwP^ Tjn4iӈoڗBw Oj8 /k=y}9t1#B5H<#BG*dFl#8]@7A%X \0iyŞ-!Wk-h4qLI1I%q8H!C_.w" @ sn#B'ixiHƸOeM5/b2u}EL]IcIOB7l>Z1Yq!ڵCW=w 'H)#k}  HGk% kG⺕]#,~6"c=Z;p '%'.: fܚ8/ű*NV+w`e]5i\2ݫs4>%i(~w,ѭxNB={'.a$az47J*쯡='-F#ksuQ%kF9?5Hj]SG׃$ud]A\#Hc~Lt' 5Dw"!-n<gŐh,{% nC.켭ۤq$+wp:Y%"K"IIrT#B$̀?Hט Q$~e-v !Su74ݷJJTy ;=iKJ"piXGׯ0:Y3W]q(^K^k==YH2ޓ N{"'i8L4~/i'r=#&iZҐϚ+{P/Q|hapld ޜۃ1IC@U5_)^.!K7i+9=a#" 6O:+3cQ5QB/Ga^^$;H)EiQ#GPnxXH%v5߻THRT2˕;ЇSr$7E`$.}nDp$Hf:ٹ Nm;51>\uǤEܵLGPnxXx!sWYѻX5(S4P= ]_ :r=BlyX8!qHÊrQ zˆاVé~*nY Dx 2ikUWgLVħHb}A}qSAQ%kKܗ en ('*کKU eYc侼$\BߢC==#4t^$nHC.j ?Ӻ\9{~陜H+-JqU5# kf=AhX'L2r)!rB܄rWu<+'j$c 7]F@%GJ!c>W iX5IJ^bMA ^ .g,r>/^}@kRZrgaeRpz*IW: rWI;{O6DYP$"*m4̺]( 0{$ΛnJ&/e5iW Hl0rŕ]Hһ'O%i ן4tfdIFܤʜv7C4Lܷh{4la OP5Hl:B*"&wINEݓW: r?;i'& iw2ֈbS IDATIn}Qa{ZoeNLKe0fX#y2>IaƎV [ICd]а0IcG|'iD;IdUmҤA[gQgFHyp7B-LXҺ4e b̰#_sSkwzIH?2鉀 R^# i=R:a'`$7PoW2wj֎޹JVZ*1x+9iv!lv<Lx4.Chډt˦0G0gXLj*w/" >MI'G涨GIƷ!HCk{v4HztGֽѓL& ?\XEAB7B+^n.Yp0؜Nm4ķ- [4nW4k*&][x^JAd X8\G%y:R= {&$HSzI73x~qŌ4riЦ蔃ї 1ql59hֽ i|S3&f8 mi?w1&q{׭%H]$OI Oѿ-%鶉e5& i~Uu4 vGi   d$BWwlƣDIÕNΒ+x$iMlT֌40H/gM[JT'Ko$n AGFO j"u<]I# 4T@2ʚ΋7a@ <ׯ&v<>hJV> iG\Ixid4'kL1hwZ&B#=9 4&iK4)c;iGs'M)>?0Hwr<3NR">iU`q6(8'2ӑlT,uwikhmQrW' V:i.G\f Zd1eKima7kx64e& WlRFHKó ҰΖ4Lf3PC(7eBY+c{j|OSlFR {VG…^HNVX5g;j Evtɺ]zwX[dXcӀ80+g䪪nOizO-u~웋!K^||xw!cF% ߁CH ,p66Xˤ8%D=li~?75ғ#]B<~a[IcGh,agk)ԍ*4r&NG`iJt syOvWoaqn\0jҸ@|t4>F W:Px~}JX4|-8{:7Μdzo_gG4rnYi0i q$1Yo' s>?M+>1i0_emX3!4sҫ0H޸`.odI㒒ƀA3@ڬqn(Ƹ+=]3# ۙGYQ|@0J͞dS1qh_~8 qlgAWqMHc1I!^vq Z蕘(bJ==⣝eNmYieԅsZ,384Nc3_dee|U~&5¥S #Pm5Ҹ.6^dTE|"oY3ҰnHF ٵ*"u>I.4*qN4׾|%:1HyCo"S!% u'|%jfiH%iVX1; KlSMt,Bj1$ &ilȚơ&cHIUZJ©'qv8׫@$Sn>'-I1icq{uڏ4tU'gG׍it_6~R@bLE >i^N5|i ?iXS+6~.eLmf"m]g:]M^' K+kXFbkImFB篸~"O-νlMy[$H#3챂ߴxmBevqngFgjUoIvp;Z,i|u.5N#{4LYXU7ӿkz)qL u,a*5u |? 2VEG&mt[t34_6ewl:Q =5A+\]YaqjlFW%e$$+\3ΈoU23:NH.8EҕŻP+CEW0C =W"&FxJC45RwӨxO$]֜4x C7B%V/$>sfeeQ\ω'Cᣦ3?OH|_fg"xJҸ1+~/i=PҐ"|!4ڧ#״'5Z!gwqҰER\]Z/6H^ ib=WDՑq5. {bz2ܯK~ i=)i<`ͤqF}ޓe *R}UaFb6O jK{/2҈`p/I7>r(>D?3i\Ln)VXq=X"729 H~ 4ǻ MY`;cZq0 eSȵph%-E:,pK1FD:D,]#Eja:! 6B uMhF0zv7v2teMHDsz.s(jO;["3%2_5կgƬ˕J[ Z&z!X(6!=u6d+q5g׊/c`Ӳ4O`5vPDHxShN>8lӐGfcN AQ4hSFbW'%F{@Y ..=-a꒒ KA:4h}4d#l%ڶ2ä،ᜄw4jq4O}#i\͟1ҐwD!}a۠X}2d0sdA4nΫ),>J}~I]pHI'sH<=[_rH|^g`~53jGpqҨܾvBJeA_eh/YOv4LFp7* ƈd}|8lzE=! 9 jκW$G!\}B/{|>4#'IX?}O8OGd͵󂅷dy)i$WMH6''abG.5ʢM3yEcWOXr @:&w'JفN|<ۡAGo@oݦLᨥ#ˆ0ep]-IMQ'w[W{VL$(wE &bJκ4' nn{[.;}8Vl[0m`Q9f_ X\neN.L&k!;.3QGeM>R ^-cݯPi44sϹM?I|zox8M0됑#?P # M3Dwq3BpI BY Ұ4c@%(qNܪVL:P 8ԁMޓkKwx=z4w#'4-?#oq<B l(y%A84Btd/ilhGB͠`? X"'*=5ICr0%uPEH}#-m8pwiP%xV&hl@9>?F~+c& '^*h_$#79iavA5yO'{ Nr(i.q*(&q34$S'2pܟJgCzZuJMҨ[?a؂YV;:' g7~w@^AH|ȎALĎ4dG9xzFv'N:!C|2| /7pӽkA4ܒ MoYN947m!羃fĸqD.WB t!SvGJ ŒeWSwDN4x̰L263^ipI@)8۝ǚ&]^1¢zxqx['zj ,v4kO= _@kz\3HG5i(u|SzZDn;5ЪƧ> ]&ITH,Dfz20e.1Eq{#!Tn0>ՙ 8zBM=DApI x[@[>5^{XY͕[Ʀxȷ4V9(9qI8$F5=IE FJ `4(8\]jsԅ~H#I}|GF9HC_QDE_!v8OѡN$a@IءFEnT4V~TzUw% d`O䛳GGƾpn /z ?UE-5^B,XRa֋+WhX:R=iuY4qǰl ! / K-#^k\C=1ꎤ%PFKvzBD"W6I}4rS9hȱx]:LZg< %sR. kik;) 4Ͽ#H/A_: !*׋Q zrU<5 ~'5Abt.;HSD5{c_(7j#<4D%5ipOk FQ;i\.%PG՜G%FJGH#Hݦ! .;D.W6$_!8zrU45^G(i g>5fhw%kUof}QFp:JIoʙ{I#>S2H hP|7i* 4P2p\nM,*Z]ՇɲǦqZ!- u8b vj7ie8Ɓxdm$^Mw&{B'r!}-(4\ȡ'V'C&GF?4Hl"oMeofܬ! VO GMt*it$u8Hڤ!i\*qk|{x=oq}iv6i7ۗ4(ciDe`ڭB3nJl󒆝ldWc,Xea&.[E0>>Ϸh i$J(( r.j+7S'iHNqꇌ4n_7~_ٲY,p"?EnmsZv5sq>YCjI]mg\\553_^됑ˋB` QB%;ͭcJ"'C4LLťȪxG7\IWMz*uH#ǐH,G.XH ]pab]켡r i@. "D5!R ऱo9=BEq<{")C C6FD,W'rBy=5YHcKIH{C_Xv (x! QǓNyvޓ;IcE'? i\NHC_Ɨ.WΰY/UKOUI#7;;(؍ۤ!-ih!Oh;4)5w,/C *ɲip6B};+n!e{Ylb \ْ-n^R]&0/ziWɝNgZʛi$]AGz8LF8H%׊梤"P(dSE_5~4FBJ)Uz>.{Ub4ܮ.wJ' Jw.W1f/l..@6լw1޹Ep;_ݫH4;GqHLԹ@{ʑƀ0GJB؁l-Qd#0. IDAT ML%nnj4)[\-6]_ &uj^{끩ohlwOsIuc(I'뱿NYrΖxޤÝ4S^:4$x.OFW2ې0S1ǐ{K=aijYcnk\o^rTIe]d4+2 {Di<% {`|HG՛SI۵9~Ix6E }=$ ;fEjQr IcgCH/B1äQs>;횵&en6Nj|L:NTI|ޓAHc׎ICht&)xB\9!ti%ZOBZEۍ#4䌓=A"]iX͡xxF5HGvL "۲uIۍ푒qvz:~P [}ݺ8i8˧;&p q%idW>Mͣ@$ CTĭ& q:mfw{Ic#e l~ S҈~hUQ|XWoeF"gۧJܐ.3nICfajfKk[}8Of-gMCJ\x{zwMQz4A۹~rx砺FL7\O(;ICuN$0_N }l:^fd9`0}@`# a\81ip]װu`[gI8`i `nme·8 lN{=u5I ՘;H֝ih5oTimC p[k`޽z4#kĨdk S PJͲبd6B24vYވEugN-Mmƞs2"I)]g9l8{^(HPC[ݙF`G'a [bvi`/P.I_G|٦#c֒4 twB%I~OFx:7){o4c,܎Vn^r 0R psn}I43N͸L=Og}QIc 4=i(zFm|}+fﻒ@VR$ 2i4TlQFK3Ґ{@iluI4΀z+ kK!84:Hc7mqx;RKh_,~cIiO]X庱VvAtĀn(ds *[m&i\"XrkZԒRҨ|ߧb&ny(ߧ=0~Z!#1ipiM_N~b/eT6fQoOOg nĝ0zj<Rzlw \&?K-Du4(# ,2([87ڍ"m4=3D)נYy(yCN vx.W6P'vN`jrݝjQ# \E{ 9Y|diPM8ovjȨI.NV{/4ݙFmM@ $0B`:,% 4!2b;)8 aFˢIj2nJ~`4jI{QdGON κtFCH(FyWziFj|,e$i^C "i캒1AQOr'y~2=i!BKzC z rCU#1꘤E; 5j! NN阭@IcS׍ZwQK.%(v˲&I#nq;ĈDF"9Vq8iXi4HHC8si5χuxd>T2"ulV x,Cg|;I#u-6QHc#a(<5iDg&})ieidY|iZbmzWailc izRg+⍿CiDD\%sƱĶ}{מ|ВJKyo# 3mğ4tdզ2>;hH_R`&ޭwg.gJ(cC{l5C  i\" ldF ejT.ʼ1HZwiD"+ɦ)(E&ޭwg.gLxZ~hW'{"k1WJY yIss002N쥶i$HZrϔP M; 5:HcAN[{ޝ4a-6- 8zim-F6b(x1I?*5޼ilj.CH/4ځl!%uXb2zIrM=(HccSBC4c\|5zHcJnOyſ/*i\% AܝŜKI oޝ4Qq DDt!¤a.Ifw;+<2sv0SiVaihQ|J^#٨+$i/)ZuOA [$ ߧs~呁 9G+w84Dw jd4i }c9iX0׳S٢e4}dVh7ey "lF2%r("ԧz)Icwr!5xO -⢿4[Fx^2J"% NW4Ъ;pHcxVܝ˨Y#Q+p:jFk!tJF{'@[\ugfӈZ!T껅OS<'lr,\74% PT jWGbkt%Hxmq'ilw$!M5@)2n!t[ j#HCxD4\`*ś9~ #? =dc9%CIC[OyHY iHcGN3HjdO=9Rׂ4l(msl(i^4^KhĀ#z$Rx]HC5t_ӐQ_rK$ i,4,75.kn${oG!"-Qރ(5\?! wFO^,!q:6xq-,IHyuYe-]j&z`QG!i4Dl".^Bf(qDn›ݤU=g'%5҈0aD:9b} )EN=ci<9*-\ 2y̋ t =4"E91Stݭ; Ջ+YQoCKXՃS38EixI0ʈW0_l~_Nm>=aݚѽF "St?Me4 9V̬Rҽ# I_VG%6b#v^X򘍨B3Ta7ut$i4^ 3TzOb|:4ZފS2|B7$?ȄkC5CG!͚_=gI'w];"2DXJiljJɭO5x$i2ȁ?f;i֣dFJlĨq7B{@`ĢCy4 5v%N(I~124L3PܻX2G๼'i4gjC~Ň'o:d(ifgO]24E-DRpi`q8 S0i:}m$F:٫@4ι &i$[CɆ4»~  "$Ƶvik `aLXX6x&>lԓĻ*A>Fr^h{vmŭo: ;\fd#-HcI;ۜ14YIi`\-VYE{L*u Xq .{W%-F{5WwkZz~`{Bmb3`xJjF̿- lȥ@:Ԩeh<% SUwroy]u`OhzTR*/uݿw [rQE/j0F-˥7a_O^Z>K/QMZ5r/: k:P߀$7 '5~WB#Ⱦ-28ZMM@OQ؇z.HCOvuwP[%<*_v;4 h4gZa0+%շy(ci"hs(5<,m^/__[}؂៿ F 6!ja>/Ž#Ht'/Ø4ލMz4Baku/I㌗% $YPfK5s?R7%k c@Ed%&oA]ɐFKp^lP r*EɟJpݳHY⴫[Y3PD28Cn_62iTz?Yqי[P5K+x6JJI÷Iɍ8dh1i`[%s/w!B)'1i{|p'ϵgB&nChj%)m?rǞ+_KR F2KO&-Hf9 C ~4(pM{"KQ]iR3" D&D'H ] 'z䞠җt.0F$2"1`Wtbý'?"-sj.YäiaI#yvY/ 8/^='ҿ4/qwx45Sjٻ0iY$I#K@( ȎV}œ4z׏27k}. }qL:V& fҰ:2lm~aG=N1ouVMkE|8KҴ .=}mHcLƤ[]0o/' 5:㤑 iAыQ9&  ?1޻3FݸМ ڮ^&?~[v.sa1o9hj|TfY]'ZFt-Ch 2i9EydʮFCa^.u!4P ,R.HŲ xX||bVIhX/{mpB̮R;hj` 7>,>L:-$>çl9RF%5I~F:u7B;z=b6pqhv؍!^`Ri~:4u8 έMeL87F4# nH85^2P< i{ݩ36i$9共%kfҠx ZՌۚ`95vP>HcÝ44F%Jx:Xp曕2]&n^R!@0i"5Z-H' ,%a\4щߋg .Awl%OǓFU*IR ̻OOp] lD,IwC>d쒺cN䮿oxv+ ѬD FM(IS2i~^b!t@]p/.Ǭ]KLV4a jýR!' P##җf.&Lp}o>cQv%ʨ4C `[M#/' GBvt_dtHˑFn{2B0^Ơxz#{{F$|~ i͘kJXx~>İSnɾkjON%~AK}g'm[#;h^?i6/H#EZPџߒ'4\^<e ('+J4J\%W!Dzy\wH⯧(kȴ:'4@ JQ|@AFv;<\4d6x]PM%% %(Z.ɉ҆& XR\&P5p+FnRm:؊5צAiA5  tTc R ski{ tkdzBi:-4)i\¸Ҵ9gD3r!2#;n$ 'Vp=KTǿdO#GPRlAuaok55> q★x5 l7h4$@FO:| 15,呩~M<+knL.LFm(^Ni\k6 3sVK&?>͎Ei,!#eK"B?JM< "tc4,d¸[SǴ>bҰY45F?i/ 4jP eǖ&rb+0&m!ȆPixU|zZu`(.͡Lrm0b¤A44ZQPqg).x}wD/i y6Ň4⟼A㒵9(1\F&Ec/f0X5iyR&qUWiW]#&&iX{Hm.;PHBy"Ow-:fZ،AcƲ$i@B[c(s-)2# OU& w@\l!vt}npOOX K I!F%(]uad=#g IDATGMpՆEh\~t ȥߌ4c H4JwE?i\HCgjVѽ78iX+}1;Rp6{7݉J C( =iblR `TWpW"sh44w8'ۅ4TC#KQR{Ƨ2x&S_8S L`u48 %D34:*i >ҦѴyIk'i' *H 6е2. !FHk;8FS|uuY:(v"Ӂ!QҸ"Yb*p6nfH'+),/2Jr`Ww%tŨ4fOzd+IcƦ& }`haam!Fyxdո4׵&q9[5N_KHC0U+"ڨ=r3WE)i{\i3 p0ZLFnI# 5޲_1ipUi؍OupGT䴰^!f* wz`q}}Q݉/*kY1u⢥5rҠDvEɪ΢4V4W^,M1%AZQ4XV 4N'Y]}|jGӓ:O28 c`we$J4V4j%yw;II(}=.rƈ!|j"Y8]|PgdU{ x4:=aFԂQx,m*aT9)FKgIH_zOݣz (ro&%nrNtޭKhEpNH۳[WJS2Ҹ[b!:(iHk)AK! 2az"AV|.Wd!T_c%Tz꼤ʴ53s임k$ 2\ԑcIt"4D{Z4ށǣH#2F"q ~;FUw3E&x*'دξʺ_NdFM 1|.hE'Sw# I}bn8Q/>"`l 1x:5M6qK_4<&VHCwi Ȓx|iFԳHz  ≮D 2#d+H ]3.hO+.'K `yG:f j#nTIOOjo1 iȒ4 T3H]I: K{0$! ]hLBޓ]I#]HC_ ъ 7 @iHi lH}Ixi3aF1#_F{|3VT @Cde Q8Oh1QSIġ48f$WJHcM@,(~N8Aczzo'=!݇4NL lW8,EA `g!AQuӼyzM4̖ mhUɖWW+rࢾ>x^Ұd+nѮӁW.얧WV]5EB[x,[ FyƙaF=KOmv=G.(kbq;n_7בƗx긺E_CD,9gH^%~ ~Rܸc}ITQ[({{bbr|A=iH4I]}4>K/i4Ɋg"xxw`jYD& SgKWBX$o}64r;qxfDh{lyvj|ipiQp%ͪD}cߪ?4Gd_d=sϒAIL3HƝ/|}IdGE*oM| lD*KKx".{>H 7̩Iɒ4" izvgZJo9ulUv[QPD3-$!CrO߷:F8$Ch?B7F.ѕ z0ȏ65~OsҸz0 ܇z,l[:wvafַEmOqA$sTT9c-$_m?f[; A. nBejt9w{#jΓn @jaaYnv;D-OA ލ5{ jL+>X/eDhPpraCHimqS2e(XGAh45~J])iiWdwcr4b,nH0ԈI#"mrݻgMW[9hۣ r+Y0ip-!’=( 2_ UbQ䆊.l! :5Lz9JUFҰK ^j=1"w.ፒF'Ǩ<0*3źVHJiOhUGjBՂ~ckm )*˓ ՚euR^$Ƭj%#]422(mDʃWʃ^΂ :? ҐJ pDOAk B!r&>/Mz\UqN[pC/NEnvW"uSV2k EF=|Xa 5)΃x]6twHo__nTΨLy|3k1gu R Wqb*x@c/UO> |kɿ`,WaTjϸkv0O *QC o.%3bqn.>% TBp4꾱aDU1GaJ mLۢ=hկ]Sʾ$qWԽjHP>kLZcqXq)[_gGm^m._R|_ p7\D@*fy8\@=`/ܑ@#S=/иk|0qq>ǜ~S|x, 3xWtM-B'"4ꬆU`ո;(#@.R=z:Rp#lUOxָܗbvwz2TFlqRhhwݲ`aػHA?kOM Cwb 1U3+i\(> WuaF6E^!\ĀƤVbCh9$@4z]qK?ggw~yxp%' hZ׆n>ddV# 1{dz; {+ϫx6@L i?cd{hȋ jNH]Sp4.6eSMd/'71l+zpHJU]j:CjBxk|NM= ~ʓ۟~u6*. ǰz:~0@cV5F0Je_ru5/jx6 4twQ95 fa)T+08>$-VyY01'[+5K94aڃ4:hgH@C'ȣ R#U*.A?T'Y`5B4ї5>ݖ^I :А>A9aڹ5]]٩xӔ܍W&gY KϽ\7ҐJ>p.?tyً,Nh &)U!yҠExUHA;UtsdT8k\ d Gh\#`0JK q5[:% ` @Ɣ{=ZWXuzQs\ n+\SJA`̶su 5%h9CO$rJ0#RZwan+-Sz5 Z$/ >_=U@g5RN#~Lr?G̥i"'PrZu(Bh[RPX™k|iPFU=ba(_49 44rag˃exJϹ+E8Ll |7jdGcM7 z" 4T4 Z6iċ RT4|tEzmC3xqF9Nj8V r4foyWdE] h5/k> qsFa<VݝdhV*~eo2%VӪD>APܥQPWACū}h[I/<]Z{?ˍ.ܯiFCm,=.| 4"fle$C+z5D@| uwʅUrxILPe׷R \xuKiQ=c8k$A#[8ʉE!}#иi0@k'ֵ֑Rwryھh;]mZLc"^ MBAx?¿ hՂ$k8x|*ShPEt K4wc^ IDATLD\5>"FhA4q4lgT\Sww>5^T@ƏɚfV߸ABl4Apr#/?Z?=o7AG=q߮gsqRA(jоwf!/h<&Dj!OlQ: r t=Vz)Ab#hPi.R/h_.F||SZz^.gv4Ryd] øKorH+w"qYA{rРrz` Rƻ4c0-S3CT^JhŘ{^Sxwk|N{z)75f \8r,0~kwrh8f~j^2j9o^i>c u7F8c]Ďh@~s*@:573D } h.ߋr1).9>+Vzً|IF=bj Pkg9Ƅ},10@r64fȢ A#vnf רIx ap|0I4'AÒJ٭}?fPtCcT_Ъ9۴'3c`1) td;wP-&Nv&"c'Eok4 S;=yh׀|;qYD:'~Oո;Ygq0.x!_Fȍ*/7+DzQA4v;+ ]b/٭OA0|uXq U>~BX@J/4h in|Ѥ r}m\Vc<: }hAZCo?Y;@ &C}Y t\4lظ46bC*6ԞluH*WAFy"FIuxoaxh@K-hA2Gήk_/4dKe*WC\5W.T1XՈ#+< *ҬAA65 3 7կ:Uq'l}o~vtZJn[DuT@CKm`hBn 8xd=v|-@c>QxdL2 hH9)V3-jA&҂F1riD;X|Zyon4hluhN| T*i +rX(Fs*WWGxh)hZyA;}R]ij՗=UMKP4rmRLZZlqңJZ)1ao$t?4$0V: w@>mθzX0V8Ʋ p(Ye+Դu'UWr01i 8.m넏;[WĪu"XA(Q@# T嬸6< Onc/hX(8VRn1#A8X)ṙ)z*; 6=A6jЂ|C/3 x U_[|+$azVo]X) S"U^AcЀdcybwuT %j4@)hDZO_nfGMߖ7zI~NCL4 17OF|f3h?o@C[G28{Ƈ%216Oi]gA /]ֲK0ugKFosiwgY@Nyξglip ;O\S5޽|@Ѐ (`q9Ɔ>[dfQ_dA;/a( 1X,}SHKbVVɁ%$ֵEq~4N<˲5f\7ōl rj",6 赬N%,ty+ɠ4җy!G/5JVy 42A3r4P8; >g|`lI<of9a9**ha M5Zj 2.‰%$4$*ZȐ] SOúhBUE/f 4O԰s'ʕتhD)a>,eΟ/RޓHH5>HA=I,wHe rkYQLAC外y>=@.1Z ԞSoᭇ.l2@JQ^ {rР!Hiy5^( `3 ņ@hYhxFu;g%7Шvvӄ*N)tفqqP,2L5}ن\(hdgA93E}㈺O>/.D4[#;|mkOFpCAO >l;@#q=']qj=*Sڊ4ƨ/4[Ư)$28ʚӨdJ]b%aQ )ƣz%\Ee/ 4}\v7𐼇vqK=hr>[[ 2P'Ԕm륁GJHªw&cNƕQBa:zZ}ѺRx;E qAC2yl*~Mm+\42la<7.Ac%x2j^ In h1a@:h1gןQ9ד {04E5R P) ,8jdf2Tdc> O#}dAI[{~^u.68y}GPڃFN h44b >h+/$E  X\:Ӱq ӘYXLzQƟӰ0ڣKd\`a4Tjb­Vjsāոvv\wcoQ@ \yvvR ۣ*uNv.F4&۾wf^U"|4av^ll*kktSʠi=G,I5A%qY'=*rzBX\:<\p DtkNqq%: og?Θe= CB۽=~PARŖyǑӀ#F <9gIaj7t[4xu.~-r% P_߷0 ;ԘOJGx] l_h5B8N(иy(@а24qtǿo)hAyDmFE5 r7ņ@ H;^B@[, ƀkπ[izƨU^8f#>(p hhtw=q@A'^"AG)pHqH>G &sX5nt]&5v*mjFK6AG@õ_'P1wZ(hmXDzq[]D[GS 5>tQ*MWQF*vWR.3()A&A@= YbLhS:u0YaqMנq  t' S> sǰg QA*ONpEw&v@ZzP퉻;1ebDy#K ta߮h! Q-&ABnNSGKׂFz(+(|G]]o\s$gh(_w3ҩʰ*c4=ABmtxtgk={q ~7Sz ,/T a煞WY{bUvkshx'B.,暃/E4.Co$.Q*IO0 =(e<ѳ KAm$hR{dw;!p sОxǞ0c Uul"bC40f:4|' Sġ]nQF$\%?* Hez@#'~_19Fz$JYr,2и4B!@8.аrqEfU>29Z +4F[ms!.īߑπ#oۊC£%’Pڧ<>,t|^EOπM~:JQߒ%@#1,;X: !2 ]#:ECS,El> ~:,;<%)k|،^ :>L4mɻg [TUv@QC JB6 4ѐ%'^*|F%kXtDO+Sږ5uP#h a Ə<>%r0 06hU$ʼnԐcpwUи?O{>,ސV1¢`QXvwkOL %4PK?А8a9iB458HLCP/T|T֜UIqNCjh|ٴwG{i~41|I8yf:MTG4e^az)A jY(҃k3\Fr d66TFr֯X҆Hڦ>0e;M_;[lDVZ:Mh",;MwX! S5WlIҸ[Q(Pb23;+@1אx CFMJ;W{&A7=HrԷ '44k$ RR*W ?OOkQ<Y3Yp3Uš)$T.ObzuuH4IY̎m,f\]v mw tkY:A" B{p_Pɨ98 a4a6BWH>%tX1cZKwƴ=a dcy]\$ƹw0L@+#mu-yjxu؛'7H:iVoy,>KZ_htM 8~Hj疑9?fr{Uq6ɚx+zk SNٶf9k iH@{+`9N!|}܊5Խ+ b{ IDATQ[5^jw z5r} eOzhI(hXВlua+X=R#?ҫET&i/F`׍NӘL=9U\v_>5~g/)=,/X.OBvogVl!+J!Y1n 4:Dr &иNgɨ/';Ӹ%-r ; \FJ\-iaPdO chTT;pMኍw q6zD\w-a )ob Hߗ&{A#. XI*}NA}FNK"@F9O3U4* a4:\zK'3;SDs=(pnBZl}m_И/UFfx˅K;U!JnWV>9xֽV4BT`?bns2 Dh@6eP gh}M=q6G? @.M71i bN:ۋLա|ֻP 5UEU[d9bA C9XUeׄ> 43@CPxiHFPKѳ*Ac_$ hQ!]IFXEB"9hX٧y)ɪ%ua8yѨϻ`b9LGhcċWƟwpwAC+lUVc.sWi-+M~O[22Qd98а,cB;6ҳ7&(@[S.!Kne3lTqҟt)eKIG0CO#܏7#oGT|vL@IDw^rp{ htk=Kbv0vIJy˦eSЀ'I$FVVp:llXШBQW`9qH1ZȠ ^^ X{@ÿ (N@ 5(FfвjV;LǃƤbH+eS@UK{/XeNB#;'+s[|.@#ӳY{ږrvCDT MLvR)W p"9X1:hH FGw7P,Nwp#w(ng@+@} b@Y:@coA+x\4W -bfVz FyN Rpz\ eMhqiL )r.mC6c Gws7Ԏt$B:[y;vиM(0 bɐ+ӶR12 uE”5p V_OEfk r@#4 ƀkO܎}AF 3K?v1/v@Ihpc ړ *U5H'y芔a=Z B>p,ǙNh+2'@ Ν%h gd3&9Yy^#eP.jA÷c8F>  Zz{2~# h䨶jc|) -0u`?1# 8ز`uhȃ WfL`@JɄu+O"hlPj.^|Oe ݈~ TP :\[KxJEs 8j&_hZ\U')Ug73K\<`I裾QFe,7gbFrQA>vӀ,tٌi* ht4h,N>esc.U 4E i╨'c@[594s`I.|TTu!0 A1sX饔%ۂ\-&ZL6ZPŁA8B);h,$`)oh}Mh\˾ShB}~σF<~%XA7Rn3 "LEаsZrw*F&\= bN҅4V+Xx pt$/R AIۜvUù&9 _Х_ R8^G9:JX*Ɯ;A2^NѶeFn4'mW8J@}Hs :gY?ע><퉊#wuvPPV\];l9hŮ)a,Y_ \y; vL~E$L[۪q ?ڰ'1#B])hH-}<[kiӠոb\aSUЀ_)\5~#lPqpӬtwM?XYoUR"'(]\OB1l̙O vH)*P>س'^P9BE!c-*e}o&rs|h8 Xwi\{@c?*-Bq =*CcMiL]hjek a}lx t]h Y(͡fg4"` ȗ/YVz)S/i` 06aTk}T9旵 eHE#irɯ3YqAhg͠ U=dI? oEE Y[=qa5,be |(2KFtn4#3e3^Ԋ^Jqp\t(VS.*4tXcMow:@z$ވ%B'F5QApt&m]!l<k|QpwN xP<7xyCA2U\WBC]a'? 4Iڸޙm)6"Q#9iZ}Caiബ=<8q&;HgppFujO&w.6J@\aMv"2u%'F-Ndf)ha׾iD3KvA9_Uk1044_<9@d=SwH&<;֟s;ce=ְ{4 E4thUjήα )îA nHRDjM'4@2)Ίu:|Y5аV(Lvxa]~eu:n y%}h8̞i@( aаe&.,\z=9e2J=1jDA j 2oThfGc#rи^O7`ܿ^YU*) rk2Ǔ.6򓇟~@MǨc # rj"#{h7_@t _#"1<]4Gn2ϐ31)"h4ޞwA;=hiw^j2`^A},AcMbD3Z%ў$貟Oip׿2pIZn1k Q}˗6:iVJ^k5A ,<p:DO:%Wk}|':$5-&#H2uw VϷMbNn18GAu F bxam5Ы5{I94i t BCt񺬉%u|VLX8wT.Pr'`@-F@JG&m$r-ŬR蟠g 5Ӡ YÃ3E&cc(dx3SX: K}K CZ|v/e9aU<{D@-A6lZH8'>r{k,*]|r^"[{ŬjI]B4hE mu]jػ5J0xevN̆WZ/u]їhh5{а%_0Y&UAΜG.Xuh5bp{Lk{C:w5:_E&>oDy%!TA#`Ve#Niy7\4V@{yQm $  o  Ӹze }~`jD/;@+ƀƮ:Ϣ҅o~AQ4YByhHq;M._tձJ@ÒgסѠʍ|s5?z& gF+߁p|2h|gq';:RZFG9J<+|0$fqqYw[T25zZ'}d"/j4ևbCM$lrSܲIإi rwjF9{:QGbF3۶jϛ\ i#3GMΥti ڱ]4.Q'/tܺmh RP#um@Q2>[|>d6l_> ';> 44J@W0hxr-NۥIykm^3Rc.׵ ɟn3.z`yB}URz6,aN ]lĂƘЕPu"i#_MFA;Fmxh`4H@9LK@䠩dvk2OP>){c1S+\/v5g+$G;;@Ă: >St<:=}-sdQ%MjZq _|߷GyI zn &4QHUto:C*h#hXpyaq=6CQl) 5*23w^U`Ǧn"]c A#97ҠAɶk5)+Uyh  K~ =}* S 74|.ΛuAObq(:hH 8ڠo~KI #ݯ_i!k4POz;9) 8@h*AMH"i)r|~r 8/Knp-x؈79gSfkTqIRS)]~x$ݳ[I{Ŭi!hI\dy_O_,D4wGCЀz;YS; X3YF#8TKtYwP*Χ @căX4,h=r+B4:#d2(n.7~A 4:SNRə>%Y@ɋ߀mY!˃E8_;L?;ZXPH( Q]0ġJ'q d/L۽g$qTjO@#Pw: õ%|6@7% af4Ds]kۃi,HP4dffZ!i*԰JYHaR z0 L xzImMg:27 $) ZxxhpԥB_J3 h\WbţUoLF%W!S~<[|jj:N6 z}=rE1ENgG#ec oz-`q5 =ʐE'@tiWHg)ES~Q6L*nzzΞpuru0i@lX4.){AcPИ748C?I< l3b-E01\ Ƀ__C/I{5M*,0! #L;!u˴ӿbpW7 9Z|mi< 7~4bYsDhN`|&2 ƫnI zi9 ֶFڬbcQAHJOռHY"5{Vp HçM!N#s`i @ Ko<S!ARsXS꣏xQB/ tSRsr9+预%"Wvs}XЈIޗ)* &,v( =PKFZYV @&M)h9 5z)2~#2__T;} IDAT ې4 :n͕I%@ XnaQFeVH:C\yDru<-͑Ӧ*iȤ ɏ.UhyHxqf5D0sOueF4AD^.k|_m}hN#&MO(Oxq_Feӄ@qDy*=z"G)A#긭8sE4֒NDb9K\l\Pv{ie/hʯ>]FIK'Pcj%,RиnitSSu~i 3b# v |\rT1|AP0ay7 'Y:A~ia=ڑOa M& qwu,V{?Р~*Wh>A4Gh]Ϥ Mr۫NnL(]ekOb K^ !f:LgRv''^E:cxsS}b`WfO) _exإV@{U׉8B7b$8h ]^SиkUX{ /{͑?9˵?@#]FNCE[WwڡƣrxI7`ʁʁHRZ aW-!ru{ʵ`{9*Wز ʕiq;ЭHB+g'\%j%>n4<50C;i\@N"]t\y=EЈ/55C&f-Zp@`l0o *ixXvϽTj&v|"M<3ҁ4n"V dnV߮ZqӜSAhmg^`ޚEкJ t(8OY,hgNBh,{X,VOihq Ǽ/}N(X`;W HI{W2˹;Ѯ^ushw Wau)A#-|Q "Ӵ5-f5H^F +qF(ߨWUjўȮib\u+R)h5>? "J,#Iְ4>A%(UQZ)L=Z$BŜD|j56 eW[g\ h ˿ ʓRjr\74zO\ZarhF\'uZMift.x\RRUѼn Y1x?cE^[\@_:>jG*{81UvD {A(Xu12 GV\Xr.{\Qz;A!m  'Ԟ.6o2&=/L#=!FLk!A}g=&hO5Јsxr8n3f@WD ˖kW㛶o;@ pd5G*{"XeqK}tb5|aqvW@c5r4WMp gQ`a;u(-;E..Wk%T0l5~2,M?A" qۃFݮyaEA>XWƝ:'wj=oq]+'M+Zǫ}B#6\%xnSς![kO? k.pEeW>QCdO+ k孼ZKw꜐k79FTK Gڃyt< 1J eeИiJE[Z1=>1hI`Kx 4`ƒ[u4u%9CpAи{Sds025bՏV<^6mhX jp83x`@:`@z9VbWrиV?ؒsPxFKQ͜lOm4Lg'>Ue=i46Nc9F;Lb@; DAjHf!9X2 =t"J02C7$'dfc4K&SEr!6Lm4bfӸ 4h8+ɛ5 1"hzav|`ILp1{NLx eT.fp4:ķ(íHx׆BOiSmFLF{ZN) j4O-E芟JDKUH(p3 +ii[5 ;o7 jhRrwV)m<զj[!]lq/%FL4a+A]цJ`*I Ĵ ~am!%N{֍z Y8UYh? ꮭwxyOuݸpG9>4ή ~U񃑭5PԵ/t 4*p̻՚4x [n]Y}7H`Ce_i^:Ӵ{cAړ]i#hUkixAʈ4&VG^@P kG Sqiz)V$s v9@Fe8go|~?؟Drj4f×/h 5˧*UL 4ʩdٟJEEjCZU2W c(E a#c.D‚+e7y4A0Dn/}Ϥ hN6-m 2ߩ߂4a=2K.ha)~M0`PA<`Urzڠ/fH]7%s߽uJK_L${ h}7}+|9? #V$t [KTjz@ZlUTE1&mCJ`AX:]l20 hih'x{t"@U9)F>Y`aS֗\M'n$4 Qvx}h%jkPGP*9h\ 6z'$IuYU5~A F]kpwNP:F>Y39.I}8 ta͖ Ejz $49 ũaN!tw<Ə,I\t`%u&Vň˂5Iگ3{J힓vhxJh`uCӘ _wca|SUH6ݟOƊShE{4Nl̚pLS [dn22drxT|ypW&kwQ  * 5~*d Hf'@LPL?%Ӟ8owNȩ/W+P=) ?l$U ̭?vEisso!spvWZC,h/KR4@Ù$aqY"_f64t%) 3oV.*v(S6\4pE0$K^|q/Nb7 Ƙ4'lq,Ú&+g#NxĆ и~s$3l[RI6Gа_?~4.gǨ?>ƒk<34FMBe}iL4?W [G]a8BCg_踸Uzbv91Z<3\4 H^%6Ә Xhtv?|풮1Ҥv{Vاɻg:FDEZ|'x.њm`5\{ 6ܣ_AReͩh|?dv4Ͱw 5:/*aW\:iZAc"/Ԟ됂ƒP7 z') ĵL~ګez-=*L [g  i;zY+KaeC?4bYM94^|a'66 4vyj hT4ǭ JJPCfdaf H0(Rî.ŀnjE8pt-DlRFS  h"w@chy"qNj qشXun^5Nh,"6Va? @2~ihd]Zͩ8W:5LY ]\}HP}˓sko%Ճevx}$hD 4FM.jA<}+o'9hS^oD J&Lݩ5M˘E^J9unhX7n@qƎN(=yJgkҖh*֍g\yV4P{$hLqFdCJn?]Mdrhb+= n]fµ3aȽ棠j&O^x(=1s2ƤƁf'ş=U~@q9 &?ӠI￩_+tu:VpU,43J˵tRrШv_@zhsOO=JVШCcE!~ !@z&\{h4fHܼG(34 {o ~PXFAC4˯ w~HOµA$F}r!…*]:O/hNg 㜆4DՐ@C h, ̲ UFځ "G:4p =8ЌKzQ-˖i>!GW AĂ{=0cᬩ hHh#< 5N 4SB nq͝zmQUulGΏθ8'k'L^A(o$wP$[xj4E?h7(q0aOj/VE 8^n m?F/>_\?y`o +ct1%()AbzO*6q1-$ и|oq'36ACQPW*%JUZ4>43\`o?<> Ĺ$qߡO ex~}NwYr؀;ARXõ;PРqC),u4SDF֛[y7n,6- he%2/rVԞOA_W^Ts39Pc 4jK?,J h\6q_4Lvʓq}v=rGhTl=[ pguIFBk Q7;|7 Q Z|>G4иgN}ۻH|c]¥Q׫Vv_7 p \{]dq;n[E|8~a;FX,p3nv(N$n/haTT1cb{r)!kt`ʕY_h+% ^h*䕟bFY]Q4ρ3¢ s .gˉVƛ +U6U̘؞|40iޓjW7Ɨރ?x&]쌒q e+TF4˃8ͭЀ0$);w"a|؆|\l4.AMG;(ڙz_՞AIwO5ACd)FSNo IDATw~,ljshOt)'`pÝuw\=h1(vFFy!fԞxY??|Ht"אEswXuq-vLm )aKɔ~4!`N#A#Xn<Ś;zK\j"/2v4W~V]Gg5 H2塽@Wd6kOI TX`{|DA}K7{-m\{|jپwoƼ"/ n}],}+PݫSz!hH{@Cdx|ZRLIv"5Ly~]w]F q͙ 9}Q=K:g@%aިq)fX)*0y{pECAE(Q~ٵq @;і^Р|"BLm)AIRbiZҰ ߄bQNŏOr|8@v)5ۗ_1 ]mN H{/Go@T`rJUEJ&ƣ=jb0t~>]2}:z@vʽqm(3ݣbZxh}/hux8:TI'+'GxHl,K `@c*IiO9[~4fݼ41eP#iqUS1Q<>#:}a?3"Шgÿ4t !i}wmb(^SΩۃQ LJ\A_˼.tM,GDLlBl!423Dkqֆ54ń4bMR@䣟4 ,@ޠcIn>lijČ4BlxD h&PwFQd 4jSL/L}/8o1MK DK]NzF|zaF@#tG6ߡxɀz 4|Gc. -@#s``ӓd4# \#hh H@{A9_5ߝ/ =6FQ2,/7;[x;T4k*SP3qM.P 6L|6)Smz(4wDt]4 |o0SVH x22G>y4@CЬf?qZ$ Bk?(! '66=,YU\uz >|4v RVe2Fk5Acg{AÎ)(5$WT8 as] b{iC@I|"J3@~ӷU_uX ZZۼHJ dأhhu)hl*E.k Ai_牕8d32G>yIf vZLƪty/h/Ţǁ hGjWV؅¾W{J%hҎJQAhvI&n4rHEwTYfLKSkA&Z1oYpL~]7ޱW+:44j2{ZAa-xH.J5 z\}}$h 0I`k#Өj16PЀzbEw5Nf3 pdШyh;Z͎aQUOi?90߱&FvÏ/hl#'(U aP>hT%5M>˽ ru Vc0աs~hTx4Gϓ_s$3.}uF7U {4@cӰ_hɳhT-$ZEo֞REȊdec[|y\=I伛'[ vM5Gku|ٰ=h< ۅ X^|LB4ؔӏ0hrƄ'Yك[qQ(%AXgۓ)7<|0]rm,dJtO4^=1a'@C,&(аKDxk44qe}(S4JQVjz'fv+/D xsYtO\ťXK9 _2J䠿Q'3VgnF!p&`\dCx{/j.ͱeYUV6HC34dqR,nb7u\siSsblW^4JEҶ>O( Uq4rH粮κ~% (z gJN\IW? i RYyS&^8,!-mCyLf$7z At!Ќ}ut0u4ͺʊk+s1կZ+^Omes(?aiȅ1F4&xvt-?܋:}J!2WLuGl֛QJ6sjNIf]xfvihx N~5a Lk-Fb=K b5&XL/j~Z˔j5;TM迒ތ4dq2Fb Հh!K6*YC m~%u~(/T>$vKCoTrtJ1-]0U~>cElFk4k}4&WITK)zQd4V$4U4#i Z_+&mUvA2Vd$k+0W/RF O*QQlM*j&R $ {KCHcΊIug41MIΠDzfWKu32nI&y^i^=Eؓ~!zT/?-D! hůU5Pڬk%9#vi4|c Q)Ă4+Q6(yvź4z1;kM3J#6ϏF0׶"4/ucv gفE_ QK4חS^f$`.sHӠ` 7^HYo4"T۟=ZTiTNɽg\ԅ(Z%Ptt%;r_y9xCMJCu`6 (w؟=,P 0#h14Jc&OoYq8q(Ei;w.T*+Nn'("Mw9Y>XOW4 gZ>' ^D_y' QFb\ dt") ;aLxf*tWx+Y. ^܊834;~UKL4-]Rߍn%) BvK5Mxas̮LnFscD]35PΗF>svtpCxE%D f.p7EC뫸lrB ݛ1+tҰS=5V&4/Ys4Ċ;_}A-bꊦ"))uQOŮE5Р+'Mތ\2V5bﺟ/ ?V ׼~\ʜ$ ^Ta QgbTɽʧ#-JcQތk;hX"/-iM.*/>T!65Ú,цsITzs3ʘ5P4-k^RE* Ox9%n7sao]\)mɵm4dz@ HcMi|#Zq4 Ň,E |3W6J6ƨ_lKJ#5kϓI7ͺv4x&_{KMKC^w8ծAEs/`e{lTZ\x i4^_:4nndVJcZh>] ϋ}Hf q!OBCGwݚ֑զ6/ a?U4Ah<ӱ3Zu?9E!7U&C$ )i4O>+IV@1.JCwWK#O*G5U5AEu†;?a!{3ReU4VC4ZZ۩ :WxrxV7d>oOHɫ/FkFELcȋĿo"n.j:)򞒣jۘތTY /۪_w/f.1^_4iVk'reuio?9(BKE-OEfܤØ鵘Uh2^d4kW4:F6*uZx@ UOCmXq-t3;KE/@#EIl.dIQzsw!T@ H#y 0UA/bijR7Dzmw/Lo[ Inz?JIW )?DYh(Q-" '*L_"sÃr~QIJ#>IkɵI+.egι#qH2_DA9vadtw6kIý#} _S8AᚆsHK7CR@h|?ntH7Ǧ.W-\ΐN 1K88Pq>ZQtN=}RD5i8rn.{W0{E:LJs%6_ aİ4FI}ʟ_~/lyy&:ApI,Ii(e^fFZ, S'Hz ~~ 5$*ߍQh{)*0U6 Zz(@#%poKt<^w;oThg%jhՇ̝OY;vn3[G'^44z|Ҹ#SR^\אhXӺ~:\0}*<$  EI;\E5kWуCh0?S;A_h<â`jhd _3jS"3rW fZN|&BiOCp9W'نB:eqւ:I48TȟA=t(U}u$Γ`6 1ަOICL~':(WKӝs+JBM2:!-AAC$j~rFq{[ѩ\ zG槟/F8) 5QW2;c/`4TW$# }iɟQwgiȞҘN7SSԐȮNKuRMU uڷz)CCJ"p_1sR i:ޡlw΍4*!d!0:-{NQNDBa]EL;4TkL=}JO5/~>!)> e)'Se;V]&9 P"X"9iSThD!FȹpH#m wlk'HݞOmhDO]4XaxB;4VI[j4Y=(DYBzb﮼2s}F*]a*#B4VI[ZҘكR{KUkZ~c|4.vuV /H#row4ϬFB"w{RA s$![{Txڎt"D*d>NYtOCzH O:Hi\H5 ȏLh08oծ޵[%,"t":d5&΃QGNڗ$P-?bbgȜ WTQiHCqi+qhixXH2JB=l=S<$70<4(+9RWx}Ґ>Si^q˯NSUmNʐ(Xozo54< O5I@4X,Z믎cho4UɊPUtk/c3V5gizoÉ{WQݤ\i_}%O-Fi[#%6$5nk@h|F;{ڗ: +BM O|I#8^j0=hlLQwl}@ :uZO&ROW* [#i4DSm.|>Hc?KC6OגFJWx*o!H#C[aH>}M=h=y$.;/\jسabD oEG'Cn՛=T5훒ka](Ykd=*Tɼ]ǨF C㧪viInVz4x=ͯcUQ@S?3z + !z; SHR^hhFRܫ}IbӠ&rk/F]VNyQ1%i 4dsIP0sCH% 1_F!0 _/B1d+&W0\KCGpAb/2sx?;h8Œݶ&nS6"@xS+i|P<,Zu_ Xa.W |jr!s$ -uJi4E_Qz&[6KH}َx;T4 ݠW w2bZ QMY4j)iHN IDAT?45xzgxhi!Iȧ#4^ICm~SKi(4n6/D[M)Ft[ZOG/xcEEk$֟!.5:B㝩a$(e4FRr_nWFOm0F7s64~#i)|x?=UT'q8\fIwwP44=o1`zKK"'cjt d}٘gu~FL.ܴ4ԅ ia?40WB-c(|,eaRt`i(įz:xS=6iMBe@85zT@]C %IKWG7GX'țɣc UoHCfɳJH̃*eAAf4TFAdz5i d?Qh}rsi #Lȫrv'4>|rZ!(*RݢX HCR`KËN虩/O•NNNT9Ҡ 4>y YiLlf6F^o6(ւZHRS˷ ,84ViPPdvAt4󂸁x}Ҹ__-A07ɢX45|* qQ,0O̭G'T5lJEEhs$7Gj8-dY#ZAQO45$8OZHcp1>Uth~|PV-z}>NN$=p2ng5SQ\l^sJs4a H㑬z0aVMo9;ͅd 24^+03W)1!4rҧyiOCJfӺ/~Z,Ґ(:x $j64*E5bi)m¢XOؐ(#4cei>R#uM\(hr%F^AQ, dQ%būPsF g}Wi\KҸ4I?RR,E6b1>LHCX) iiݗƷjZh"H6/" wld}jki^KҸ葻-|8=4Vb%*B9̘Ef jń?4d*Em]ujGY~?oosiƴoht!brq M4R,ր4ͷ fj%c?4S?2=^$֔[vjo{i\P^p)ogNEh CޘEG6ѳփ9 15Lq;4?E'"{/οvy u-oiIrKSR7WX|_B!H} K4k֚yyk,[( ]AK.KJc.t H#s/޿`i7!.e'}myiTBu#|H? .5.W6Qw̬Nrܰt_bh)wi<7 TBmyAA蠩Cx|rB{I*u7ik1B(O_C):q݂i<% =̮^ B3.!i7sMUҘ.$ƿISݡu'7P/>/2Ass$}żs Gxe_oxӮVaiL*Ii3LjZu*J#!u1>mא)_D? 7Q?h̏-'HIhpؽM3}NMg|Kw7_;&Kõ}/-Ŝx.y/4'2n*J d})@>ƹq-K#*$ w/jV4lyXi!^x<4A4ӰG.wi 3ZeBi:!XWKV'\h$S9_gr^d^pDF7v:A->%6FcPL,>߷:ɷwdM}}OSj 'RG8A`[r񹊉xyǍGҠ!Pzo4{2! g0di˥@ηZ^7ƏLrF4 >[8x9qߠ'gvt#}ܾCNN'$LO&dF/ܞB=q^'|;a:ɿedKC“o O9 v-[D13qVss1yH8dBi?yGə0y-qLHyQ'o( ZhP:LH)=Su54qLQ I(\jB;*lr kS4YOHc yH8l$sPiO8|xyp>2#+HcFYE/"de#i4:dbi4 4xQLV-u^?::uT15L.BvoʤQkq5.P2dȉwP9Eult['!ҷd+fv^]e4f-tS8]b~[n[cN*i4 #aa~i 4w';3J,z[OiD#VKcavSf*Ųj+AGb{PEhiQX˱eƢXn[E1H@4LFß@7щ~4eCicqI:= kP"+ yNr/}'2RfyЃ{6ҸWq,-/żFX?3ERmEx[EMb;~4.9gf-5gz)I~7Ej2;viMgC@:TD!ܾd=3 _w0c-Wr 㰩4?KQVױ~3Q?e`q6waqߺ:7HchfkȖ"i E2dr챖k7 㰭4]O8o??s7CBD:zvoTOQ@ҸƓMFN[#z]S1jVOQ@4C3fy woR? @KmU*]EGidzIw[MB}+xx奱5P 6eciZW4Kz-Ѹ/)~A|ƪ@8,46nrK)q&NjPdbBM4pB{<{fxp`sZ| wwM q|'^/=QN>]$q\HCk:{aq}^*fKcm4.b&;vr_1V#w1ܖ 5jA>sZ$wK!qZ(w:->r$]9>=k'% "KvVH8<\<'ލ>mQn5ild4)FqSYm" Kjյk҅qwX3Hl\>0 a&1d6ܬ6q0Mv]7d kD" J^O>%qP7=3Z6O=4DRx~Z-y~M|ަx_8¿%.&x2ak01PG4S1|XF w13Wo<' .#y./i쇕MPU@2ӄRiAk{I<9V4b@+i|WcI4FՃnu͏x {0ɕL7S T,*w$'4Z&%VҘ7#a-iiLrEu5D1a΁ӹ˴c𦝮ϼZv:Qޟ8[Hb΄\HUФ4}ƽX3ŏzF>qغGh|y׻:BufxZT۶fQr8Cm,58 kRY}f;hNxJsIn֚I{kUy[*^~ 6qxWii\E,ug7iO".T$# *޳ #U" ݳ䖎[԰=%:IiLE?~i;p&\"]Sm(9Ґ'GCE|eDFb|LUHC7vc}` Ɨ4ÓFn45alWR!TFNK GҐqS:Bղ;gPg&W6V:QZw8F8'z\ &|a4dL5uz|d#*eA2IH"A6d>S^mr呒Lx=xC^cAh|!J}8]n&Ւ__Mz&m{FqfZ%z aDūgS(@a֓=Q[ք➒KCryȌF69^ҩqF ~iHNEwTធkKryQ] Ѕl|tiX/wwMYfoɝXN'74Q֊{v,d_xU4-ZH|xi]>@q` hP N$'W` P t湹"ԙ&~Р*CNɥ)k?i!zzB);=Fbh< nh|4GkU _&4>H׶unq,4lc|USF~5Ɂp o!^5' gTOi@7uz4:[".ߢd4 cRTSI)-a-̔[,xRkV bxȿS;SҔ9c@, mK>Ѡiyki8Ac4Z#%QDl4Bh]ZkU 2T)+ب"u]sהa6\Ǣۤ&d&' B^THhsCd3ā'>H& 1Fꍎ$(c8]/nr IYdb" B+ rH͕x-id4 h oi1%.8(#3pOɷ4(u? T9jt4v\S(KC{UDHCkG{ |8唈 K &GѐF>%EHhY(5+BbyRm(+3;#$Nw؛1aH=ˤ1 ( ]{DT:HcojwD &S>yiҘk49♘2 nk@{S!(z1iÛ\1*ٯ8ďxQ6m'I2^]HhŠP/|]yistM ff*C|#_ VS"Q:I pQO4t3ISg(H#F=45^N#qѡjzJ~t`;99 )=35O@4UU585zIӛ!*F\!j K2P^;%?릜Eu֠?xȇ' H+SGnK`wip7xX|d]Z|:NAF"4(nS/˟ %L) C[vפ'Kc'|iIj $sLw~U}΅4d]dN I|iLp:FQLUhiȜA2Pm9I>& +I27FE/5eiTth՛{2ZZOԐN$'EmMt VΑ*tjԑ@G18z9i@š4TGkIƻXk -FOfi uLM綼|zTZ\( ܶO} |d*V~͆uN i)Vk2X.c$տ>H! R*;g&х*rs)J-i7;]A?>HAiΥVq4hI5t9؈v;]F37Ʒl֠؈4dc+kHݞ4CۤC<Ƣq0 tm@`+?S? "wt5 ]`Q"!ew9krAڨ^H} mZOH>@kP,l"e?eTvJcxnXxcbiYs&M +=Icx Xc 7&\f&ğuC~tG ^Z_?iiȮ4klDJ8uS4ZX-Xc\5nHoF#B7>H|Hl!Pk@G#iW'-jbOh|vijꦵ4n;Ve f7x<w'v/n?pH4JU3lIhSeh4&IMq鷐oECk@`K;<5lQ8IQ7"f OI yZi<>7[>;ƖmؒJ1@P8wBN|x5*k )4L '5|pWN04,cZHlQ|hwͭ>$X Vxji<|UInL(0A`k|ilO 1Jt㒘$嵥i%qRc4:3~3i{`lEO.AjY'sszl4 y?ؘi٥5H29Fc?0[>94n+tbCB`c̝}Dimҳؘ4m[ _ kcJHl[kgl ^@ZÜ%6tW0Sv i%PIICEf C8V2=-6+4Ԭ }[Y㣎)_V=YHcFë݅ i}q1cxVjKbVs?4g搭'AHl qyZ@`s=4JF e Z"V 9VnE QM2z"Vm M5_x4򘝬~\o=AGN./=\#ƷireǶP `GAU.jRNXWk~O/SQp.$ͭ!sSgoRxDȬѥueV:`ҳ3F24De5hH]׋irK|h<`+8zHgZCu͒UOIc_C<5],fiX#/4xnz5 @5 oOJC|oW ހfklaS; OU\10/O54 V&lh<Z! &"t |<<#D/ 3+A֨<i P b H`hE=Yi !4hflo@;/@(Btk@k@Q8£{b4d HS)Tk@ykiŏipp]@5fr7e; Iw7q1BLF ƀ4xKaHPVIYIX䌬IXFbIoIZďb$U͹&fXc $e$H$9 5[8Ϳ(~VSfc4xk"k(iEi01%qrfhH%HWm ,2oKP@4|k@52o[[t4qI#PE! S@!t~LYt48qbohBWk@65ҨƏ@\4ȪNwerhxTq&Ww(?Gh<—F% B}4K Q4]@.Ҡ "PbidC! H4D%Ff:{B! I- Q4]@.Ҡ HCjOFӏ ~gFTŋ֊5 VUqu } \c*ڝt /:wB\! D- Q4]@. @FɚN^@5:Gh< Uf4 3k|ZHi4]@.u4oti4]D }\Τ)Hh<)4n s7'pTލ zti3NuSb#xҐ?@&OW#[X=bCHc\86Dv޸yHr94>USԂ0kYtiH|՛F՟[[& هK:bL14xgڤ:uB!ղv'{"%2gOŤQzFϐmEOZO]@. @Axt `/ TppD2M ! ފQF^*{LK>4BEwG_;-l=H|TF_'6:IENDB`openvas-manager-6.0.9/doc/user-scap-data-HOWTO000644 001751 001751 00000004163 12557600613 022071 0ustar00michaelmichael000000 000000 OPENVAS USER SCAP DATA HOWTO ============================ The SCAP data sync scripts ("openvas-scapdata-sync" and "greenbone-scapdata-sync") do download SCAP data for the respective feed service. Additionalle they support the import of user-defined SCAP data. Currently only OVAL definitions are supported. However, a few things must be kept in mind for this to work correctly: The "private" subdirectory -------------------------- User defined data has to be placed into a special subdirectory of the SCAP data directory of your OpenVAS installation, which will be called the private directory from now on. By default this subdirectory is named "private". Placing your files there also ensures that they are not deleted during the sync when they are recognized not to be part of the feed content. Updating the database --------------------- The SCAP database will be updated when a SCAP data sync script is run. If you just want to update your user-defined data without syncing with the feed, you can run the scripts with the option --refresh-private. User OVAL data -------------- To import OVAL definitions into the SCAP database, move the XML files containing the definitions into the subdirectory "oval" of the private directory or a subdirectory of this and run the SCAP sync script as described above. Before any data is added from a file, it must pass a few tests: - The filename must match the pattern "*.xml" or match "*.asc" while another file with the same name excluding the ".asc" suffix exists in the same directory. - The file must be valid XML and contain a valid OVAL generator timestamp. - The file must not include definitions for any identifiers that are also defined in a file that is part of the feed. This is done to ensure consistency of the data provided by the feed. - The file must be newer than the date of the last database update. The sync script will insert all definitions with a newer timestamp than the latest one from that file already in the database or all definitions if the file is newly added. If a file is removed, all definitions from that file are also removed from the database at the end of the sync. openvas-manager-6.0.9/doc/CMakeLists.txt000644 001751 001751 00000016044 12557600613 021200 0ustar00michaelmichael000000 000000 # OpenVAS # $Id$ # Description: CMakefile for the OpenVAS Manager documentation # # Authors: # Matthew Mundell # # Copyright: # Copyright (C) 2009 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. ## Find xml2man message (STATUS "Looking for xmltoman...") find_program (XMLTOMAN_EXECUTABLE xmltoman PATHS /bin /usr/bin /usr/local/bin/ DOC "xmltoman location") message (STATUS "Looking for xmltoman... ${XMLTOMAN_EXECUTABLE}") find_program (XMLMANTOHTML_EXECUTABLE xmlmantohtml PATHS /bin /usr/bin /usr/local/bin/ DOC "xmlmantohtml location") message (STATUS "Looking for xmlmantohtml... ${XMLMANTOHTML_EXECUTABLE}") # FIX find_program seems to follow symlink if (XMLMANTOHTML_EXECUTABLE) set (XMLMANTOHTML_EXECUTABLE xmlmantohtml) endif (XMLMANTOHTML_EXECUTABLE) message (STATUS "Looking for SQLFairy...") find_program (SQLT-DIAGRAM_EXECUTABLE sqlt-diagram PATHS /bin /usr/bin /usr/local/bin/ DOC "sqlt-diagram location") find_program (SQLT_EXECUTABLE sqlt PATHS /bin /usr/bin /usr/local/bin/ DOC "sqlt location") message (STATUS "Looking for SQLFairy... ${SQLT-DIAGRAM_EXECUTABLE}, ${SQLT_EXECUTABLE}") ## build set_directory_properties (PROPERTIES CLEAN_NO_CUSTOM true) set_directory_properties (PROPERTIES ADDITIONAL_MAKE_CLEAN_FILES ".built-html;.built-html_full") include (FindDoxygen) if (NOT DOXYGEN_EXECUTABLE) message (STATUS "WARNING: Doxygen is required to build the HTML docs.") else (NOT DOXYGEN_EXECUTABLE) add_custom_target (doc COMMENT "Building documentation..." DEPENDS ${CMAKE_CURRENT_BINARY_DIR}/openvasmd.8 ${CMAKE_CURRENT_BINARY_DIR}/Doxyfile ${CMAKE_CURRENT_BINARY_DIR}/.built-html ${CMAKE_CURRENT_BINARY_DIR}/.built-html_db ${CMAKE_CURRENT_BINARY_DIR}/db.png ${CMAKE_CURRENT_BINARY_DIR}/omp.rnc ${CMAKE_CURRENT_BINARY_DIR}/omp.html) add_custom_command (OUTPUT .built-html COMMAND sh ARGS -c \"${DOXYGEN_EXECUTABLE} ${CMAKE_CURRENT_BINARY_DIR}/Doxyfile && touch ${CMAKE_CURRENT_BINARY_DIR}/.built-html\;\" DEPENDS ${CMAKE_CURRENT_BINARY_DIR}/openvasmd.html ${CMAKE_CURRENT_BINARY_DIR}/Doxyfile) add_custom_target (doc-full COMMENT "Building documentation..." DEPENDS ${CMAKE_CURRENT_BINARY_DIR}/openvasmd.8 ${CMAKE_CURRENT_BINARY_DIR}/Doxyfile_full ${CMAKE_CURRENT_BINARY_DIR}/.built-html_full ${CMAKE_CURRENT_BINARY_DIR}/.built-html_db ${CMAKE_CURRENT_BINARY_DIR}/db.png ${CMAKE_CURRENT_BINARY_DIR}/omp.rnc ${CMAKE_CURRENT_BINARY_DIR}/omp.html) add_custom_command (OUTPUT .built-html_full COMMAND sh ARGS -c \"${DOXYGEN_EXECUTABLE} ${CMAKE_CURRENT_BINARY_DIR}/Doxyfile_full && touch ${CMAKE_CURRENT_BINARY_DIR}/.built-html_full\;\" DEPENDS ${CMAKE_CURRENT_BINARY_DIR}/openvasmd.html ${CMAKE_CURRENT_BINARY_DIR}/Doxyfile_full) add_custom_target (doc-omp COMMENT "Building OMP documentation..." DEPENDS ${CMAKE_CURRENT_BINARY_DIR}/omp.rnc ${CMAKE_CURRENT_BINARY_DIR}/omp.html) endif (NOT DOXYGEN_EXECUTABLE) if (XMLTOMAN_EXECUTABLE) add_custom_target (man COMMENT "Building manual page..." DEPENDS openvasmd.8) add_custom_command (OUTPUT openvasmd.8 COMMAND sh ARGS -c \"${XMLTOMAN_EXECUTABLE} ${CMAKE_CURRENT_SOURCE_DIR}/openvasmd.8.xml > ${CMAKE_CURRENT_BINARY_DIR}/openvasmd.8\;\" DEPENDS openvasmd.8.xml) else (XMLTOMAN_EXECUTABLE) message (STATUS "WARNING: xmltoman is required to generate manpage.") add_custom_command (OUTPUT openvasmd.8 COMMAND echo "[Error: xmltoman required to see manpage here]" > openvasmd.8) endif (XMLTOMAN_EXECUTABLE) if (XMLMANTOHTML_EXECUTABLE) add_custom_target (man-html COMMENT "Building manual page HTML..." DEPENDS openvasmd.html) add_custom_command (OUTPUT openvasmd.html COMMAND sh ARGS -c \"${XMLMANTOHTML_EXECUTABLE} ${CMAKE_CURRENT_SOURCE_DIR}/openvasmd.8.xml > ${CMAKE_CURRENT_BINARY_DIR}/openvasmd.html\;\" DEPENDS openvasmd.8.xml) else (XMLMANTOHTML_EXECUTABLE) message (STATUS "WARNING: xmlmantohtml is required for manpage in HTML docs.") add_custom_command (OUTPUT openvasmd.html COMMAND echo "[Error: xmlmantohtml required to see manpage here]" > openvasmd.html) endif (XMLMANTOHTML_EXECUTABLE) if (SQLT-DIAGRAM_EXECUTABLE) add_custom_command (OUTPUT db.png COMMAND sh ARGS -c \"${SQLT-DIAGRAM_EXECUTABLE} --color --title=\\\"Manager database \(version ${OPENVASMD_DATABASE_VERSION}\)\\\" -d PostgreSQL ${CMAKE_CURRENT_SOURCE_DIR}/db_postgres.sql -o db.png\;\" DEPENDS db_postgres.sql) else (SQLT_EXECUTABLE) add_custom_command (OUTPUT db.png COMMAND sh ARGS -c \"touch db.png;\") endif (SQLT-DIAGRAM_EXECUTABLE) if (SQLT_EXECUTABLE) add_custom_command (OUTPUT .built-html_db COMMAND sh ARGS -c \"${SQLT_EXECUTABLE} --from PostgreSQL --to HTML --pretty --title=\\\"Manager database \(version ${OPENVASMD_DATABASE_VERSION}\)\\\" ${CMAKE_CURRENT_SOURCE_DIR}/db_postgres.sql > db.html && touch .built-html_db\;\" DEPENDS db_postgres.sql) else (SQLT_EXECUTABLE) add_custom_command (OUTPUT .built-html_db COMMAND sh ARGS -c \"echo \\\"[Error: sqlt, from SQLFairy, required to see database here]\\\" > db.html && touch .built-html_db\;\") endif (SQLT_EXECUTABLE) add_custom_command (OUTPUT omp.rnc COMMAND sh ARGS -c \"cd ${CMAKE_SOURCE_DIR}/src/schema_formats/RNC && xsltproc ./RNC.xsl ${CMAKE_BINARY_DIR}/src/schema_formats/XML/OMP.xml > ${CMAKE_BINARY_DIR}/doc/omp.rnc\;\" DEPENDS ${CMAKE_BINARY_DIR}/src/schema_formats/XML/OMP.xml ${CMAKE_SOURCE_DIR}/src/schema_formats/RNC/generate ${CMAKE_SOURCE_DIR}/src/schema_formats/RNC/RNC.xsl ${CMAKE_SOURCE_DIR}/src/schema_formats/RNC/rnc.xsl) add_custom_command (OUTPUT omp.html COMMAND sh ARGS -c \"cd ${CMAKE_SOURCE_DIR}/src/schema_formats/HTML && xsltproc ./HTML.xsl ${CMAKE_BINARY_DIR}/src/schema_formats/XML/OMP.xml > ${CMAKE_BINARY_DIR}/doc/omp.html\;\" DEPENDS ${CMAKE_BINARY_DIR}/src/schema_formats/XML/OMP.xml ${CMAKE_SOURCE_DIR}/src/schema_formats/HTML/generate ${CMAKE_SOURCE_DIR}/src/schema_formats/HTML/HTML.xsl ${CMAKE_SOURCE_DIR}/src/schema_formats/HTML/rnc.xsl) ## Install install (FILES omp.html DESTINATION share/doc/openvas-manager/html/ COMPONENT doc) install (FILES openvasmd.8 DESTINATION share/man/man8/ COMPONENT doc) openvas-manager-6.0.9/doc/postgres-HOWTO000644 001751 001751 00000013033 12557600613 021122 0ustar00michaelmichael000000 000000 OPENVAS-MANAGER POSTGRESQL BACKEND HOWTO ======================================== WARNING: This is work in progress, and far from ready for any realistic use. 1 Install Postgres. (Debian: postgresql, postgresql-contrib, postgresql-server-dev-9.1). 2 Run cmake with this additional parameter: -DBACKEND=POSTGRESQL 3 Build Manager as usual. 4 Setup Postgres User and DB (/usr/share/doc/postgresql-common/README.Debian.gz) sudo -u postgres sh createuser -DRS mattm # mattm is your OS login name createdb -O mattm tasks 5 Setup DB extensions and permission. sudo -u postgres sh # if you logged out after step 4 psql tasks create role dba with superuser noinherit; grant dba to mattm; create extension "uuid-ossp"; 6 Make Postgres aware of the openvas libraries if not installed in a ld-aware directory. For example create file /etc/ld.so.conf.d/openvas.conf with apropriate path and then run ldconfig. 7 Run Manager as usual. 8 To run SQL on the database. psql tasks Migrating from SQLite to PostgreSQL ----------------------------------- 1 Run "openvas-migrate-to-postgres" into a clean newly created PostgreSQL database like described above. It is esentially important that you do not run "--rebuild" before the migration as it would create a fresh one and therefore prevent migration. If you accidently already rebuild the database or for other reasons want to start from scratch, apply the dopping of all data as described below. 2 Run "openvasmd --rebuild". 3 Run "openvas-scapdata-sync". 4 Run "openvas-certdata-sync". Handy script to drop all data ----------------------------- #!/bin/sh export PGOPTIONS='--client-min-messages=warning' PSQL="psql -q tasks --pset pager=off -t -c" $PSQL "`psql tasks --pset pager=off -t -c \"select 'drop table '||schemaname||'.'||tablename||' CASCADE;' from pg_tables where schemaname = 'public' order by schemaname, tablename;\"`" $PSQL "DROP FUNCTION IF EXISTS public.common_cve(text, text);"; $PSQL "DROP FUNCTION IF EXISTS public.dynamic_severity();"; $PSQL "DROP FUNCTION IF EXISTS public.hosts_contains(text, text);"; $PSQL "DROP FUNCTION IF EXISTS public.iso_time(integer);"; $PSQL "DROP FUNCTION IF EXISTS public.level_max_severity(text, text);"; $PSQL "DROP FUNCTION IF EXISTS public.level_min_severity(text, text);"; $PSQL "DROP FUNCTION IF EXISTS public.lower(integer);"; $PSQL "DROP FUNCTION IF EXISTS public.m_now();"; $PSQL "DROP FUNCTION IF EXISTS public.make_uuid();"; $PSQL "DROP FUNCTION IF EXISTS public.max_hosts(text, text);"; $PSQL "DROP FUNCTION IF EXISTS public.next_time(integer, integer, integer);"; $PSQL "DROP FUNCTION IF EXISTS public.now();"; $PSQL "DROP FUNCTION IF EXISTS public.order_message_type(text);"; $PSQL "DROP FUNCTION IF EXISTS public.order_port(text);"; $PSQL "DROP FUNCTION IF EXISTS public.order_role(text);"; $PSQL "DROP FUNCTION IF EXISTS public.order_threat(text);"; $PSQL "DROP FUNCTION IF EXISTS public.report_active(integer);"; $PSQL "DROP FUNCTION IF EXISTS public.report_progress(integer);"; $PSQL "DROP FUNCTION IF EXISTS public.report_progress_active(integer);"; $PSQL "DROP FUNCTION IF EXISTS public.report_severity(integer, integer);"; $PSQL "DROP FUNCTION IF EXISTS public.report_severity_count(integer, integer, text);"; $PSQL "DROP FUNCTION IF EXISTS public.resource_name(text, text, integer);"; $PSQL "DROP FUNCTION IF EXISTS public.run_status_name(integer);"; $PSQL "DROP FUNCTION IF EXISTS public.severity_class();"; $PSQL "DROP FUNCTION IF EXISTS public.severity_in_level(double precision, text);"; $PSQL "DROP FUNCTION IF EXISTS public.severity_in_level(text, text);"; $PSQL "DROP FUNCTION IF EXISTS public.severity_matches(double precision, double precision);"; $PSQL "DROP FUNCTION IF EXISTS public.severity_matches_ov(double precision, double precision);"; $PSQL "DROP FUNCTION IF EXISTS public.severity_to_level(text, integer);"; $PSQL "DROP FUNCTION IF EXISTS public.severity_to_level(double precision, integer);"; $PSQL "DROP FUNCTION IF EXISTS public.severity_to_type(double precision);"; $PSQL "DROP FUNCTION IF EXISTS public.create_index(text, text, text);"; $PSQL "DROP FUNCTION IF EXISTS public.create_index(text, text, text, text);"; $PSQL "DROP FUNCTION IF EXISTS public.t();"; $PSQL "DROP FUNCTION IF EXISTS public.tag(text, text);"; $PSQL "DROP FUNCTION IF EXISTS public.task_last_report(integer);"; $PSQL "DROP FUNCTION IF EXISTS public.task_second_last_report(integer);"; $PSQL "DROP FUNCTION IF EXISTS public.task_severity(integer, integer);"; $PSQL "DROP FUNCTION IF EXISTS public.task_threat_level(integer, integer);"; $PSQL "DROP FUNCTION IF EXISTS public.task_trend(integer, integer);"; $PSQL "DROP FUNCTION IF EXISTS public.uniquify(text, text, integer, text);"; $PSQL "DROP FUNCTION IF EXISTS public.user_can_everything(text);"; $PSQL "DROP FUNCTION IF EXISTS public.valid_db_resource_type(text);"; $PSQL "DROP AGGREGATE IF EXISTS public.group_concat (text, text);"; $PSQL "DROP AGGREGATE IF EXISTS public.group_concat_pair (text, text, text);"; $PSQL "DROP INDEX IF EXISTS public.nvt_cves_by_oid;"; $PSQL "DROP INDEX IF EXISTS public.nvt_selectors_by_family_or_nvt;"; $PSQL "DROP INDEX IF EXISTS public.nvt_selectors_by_name;"; $PSQL "DROP INDEX IF EXISTS public.nvts_by_creation_time;"; $PSQL "DROP INDEX IF EXISTS public.nvts_by_family;"; $PSQL "DROP INDEX IF EXISTS public.nvts_by_name;"; $PSQL "DROP INDEX IF EXISTS public.report_host_details_by_report_host_and_name_and_value;"; $PSQL "DROP INDEX IF EXISTS public.report_hosts_by_report_and_host;"; $PSQL "DROP INDEX IF EXISTS public.results_by_report;"; echo -n "\\d+: " $PSQL "\d+" echo "\\df: " $PSQL "\df" openvas-manager-6.0.9/doc/openvasmd.8.xml000644 001751 001751 00000016627 12557600613 021333 0ustar00michaelmichael000000 000000 openvasmd OPTIONS

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        OpenVAS Scanner, openvassd(8), acts as a service and offers a communication protocol for its clients called OTP. The core task of the OpenVAS Scanner is the actual scan process.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The OpenVAS Manager is a OTP client and adds various management functionalities to handle and organise scan results. Thus OpenVAS Manager acts as a layer between the OpenVAS Scanner and its own clients (for example omp(8), gsad(8) or gsd(8)) which connect via the OMP protocol to the OpenVAS Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        A related service is OpenVAS Administrator, openvasad(8) which among other tasks also manages user accounts for OpenVAS.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        SIGHUP causes openvasmd to rebuild the database with information from the Scanner (openvassd).

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        openvasmd --port 1241

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Serve OMP clients on port 1241 and connect to a OTP server on 7772.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The canonical places where you will find more information about the OpenVAS project are: (Official site) (Development Platform)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The OpenVAS Manager is released under the GNU GPL, version 2, or, at your option, any later version.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        openvas-manager-6.0.9/doc/about-cert-feed.txt000644 001751 001751 00000012770 12557600613 022151 0ustar00michaelmichael000000 000000 About the CERT Feed structure and formats ========================================= Date: 2013-02-13 Author(s): Timo Pollmeier Jan-Oliver Wagner Purpose of CERT Feed -------------------- The CERT Feed contains advisories as published by Computer Emergency Response Teams (CERTs). Many CERTs act regional and publish the advisories in local languages. The regional focus is a helpful complementation of the english CVE publications. In most cases, CERT advisories are referring to one or more CVEs and therfore can be linked into the vulerability management, for example into scan results. In the following, relevant aspects on format and structure are documented for the integrated CERTs. Currently, only a single CERT is integrated, the german DFN-CERT. This serves as a reference for integration of further CERT advisories. A major hurdle is usually the license of the advistories. It needs to allow use for any purpose, re-distribution etc. Of course authorship and/or Copyright needs to be documented and kept reproduced. DFN-CERT advisories ******************* Location: cert-data/dfn-cert-YYYY.xml File name format ---------------- Files must be "dfn-cert-%04d.xml" where %04d is a four-digit year number as used in the DFN-CERT IDs of the advisories. Short vs. long ID ----------------- In this document a "short" or "DFN-CERT" ID is defined as an identifier of the format "DFN-CERT-%04d-%04d" where the first %04d is a year number, and %04d is another 4 digit number, including leading zeros. A "long" or "Atom" ID is defined as an identifier that should conform to the rules for atom:id elements as defined by the Atom standard and that also should include the "short" ID of an advisory. root tag --------------- The root tag must be and define the "dfncert" and default namespaces. It must be made sure that the URLs ("http://www.dfn-cert.de/dfncert.dtd" for xmlns:dfncert and "http://www.w3.org/2005/Atom" for the default namespace) remain constant: The root element must contain the elements directly (i.e. as children and not nested within other elements). The root element may also optionally contain other elements like or <updated>, as long as they apply to all pages of the DFN feed or can be aggregated in a sensible manner (e.g. by taking the latest <updated> date). Selection of <entry> elements ----------------------------- Each file for the CERT Feed must contain <entry> elements for all the newest versions of the advisories that have a short id that also contains the same year number as the current file name, but not others. For example, the file "dfn-cert-2012.xml" will contain the latest version of all existing advisories with the short IDs "DFN-CERT-2012-0001" to "DFN-CERT-2012-9999" but not "DFN-CERT-2013-0001". Duplicate advisories with the same short ID must be either: A) avoided by ensuring that only the latest version is included. or less preferably B) sorted so that the newer elements will overwrite the older ones when the OpenVAS database is synced by the user. Contents of <entry> elements ---------------------------- Each <entry> element must contain the following sub-elements: * <dfncert:refnum> which contains the short ID of the advisory. This is implemented by the current feed supplied by DFN-CERT, but is missing in some older archive and test data. It can be generated for these files with: <xsl:value-of select="substring-before(substring-after(atom:id/text(),$feed_id),'/')"/> where $feed_id is the value of the <id> element directly nested in the <feed> root (not the one in the <entry>!) * <published> which should contain the date when the advisory was _first_ published. (is the same as <updated> date of <feed> in sample data!) * <updated> which should contain the date when the advisory was last updated. * <title> which should contain the title of the advisory * <summary> which must be either the original escaped html or unescaped or with "harmless" format tags like "<br \>" or "<i>...</i>" escaped and validated to not cause any trouble. This element should contain a short description as found in the original <summary> element. * all <dfncert:cve> elements that are also present in the original <entry>, containing only a valid CVE ID (e.g. "CVE-2009-4015") as text. * one <link> with attribute rel="alt" and attribute href="{...}" with {...} being an URL referring to the full advisory, e.g. "https://portal.cert.dfn.de/adv/DFN-CERT-2010-0001/" Other sub-elements like the original <id> containing the long ID or future additions should be no problem, so for the most part it would probably be the easiest to simply copy the sub-elements and attributes of <entry> elements and add missing ones like a generated short ID until they are implemented by DFN. Example (file "dfn-cert-2010.xml"): ------------------------------- <?xml version="1.0" encoding="utf-8"?> <feed xmlns:dfncert="http://www.dfn-cert.de/dfncert.dtd" xmlns="http://www.w3.org/2005/Atom"> <entry> <dfncert:refnum>DFN-CERT-2010-9876</dfncert:refnum> <published>2010-12-28T09:39:59+01:00</published> <updated>2011-03-02T10:11:32+01:00</updated> <title>Test Advisory This is a test advisory CVE-2009-4015 CVE-2010-0005 openvas-manager-6.0.9/doc/openvasmd.8000644 001751 001751 00000007074 12557600613 020530 0ustar00michaelmichael000000 000000 .TH openvasmd 8 User Manuals .SH NAME openvasmd \- Manager daemon of the Open Vulnerability Assessment System (OpenVAS) .SH SYNOPSIS \fBopenvasmd OPTIONS \f1 .SH DESCRIPTION OpenVAS Scanner, openvassd(8), acts as a service and offers a communication protocol for its clients called OTP. The core task of the OpenVAS Scanner is the actual scan process. The OpenVAS Manager is a OTP client and adds various management functionalities to handle and organise scan results. Thus OpenVAS Manager acts as a layer between the OpenVAS Scanner and its own clients (for example omp(8), gsad(8) or gsd(8)) which connect via the OMP protocol to the OpenVAS Manager. A related service is OpenVAS Administrator, openvasad(8) which among other tasks also manages user accounts for OpenVAS. .SH OPTIONS .TP \fB-a, --listen=\fIADDRESS\fB\f1 Listen on ADDRESS. .TP \fB--create-user=\fIUSERNAME\fB\f1 Create admin user USERNAME and exit. .TP \fB--role=\fIROLE\fB\f1 Role for --create-user option. .TP \fB--delete-user=\fIUSERNAME\fB\f1 Delete user USERNAME and exit. .TP \fB--get-users\f1 List users and exit. .TP \fB--create-scanner=\fINAME\fB\f1 Create scanner NAME and exit. .TP \fB--scanner-host=\fIHOST\fB\f1 Scanner host for --create-scanner, --rebuild and --update. Default is 127.0.0.1. .TP \fB--scanner-port=\fIPORT\fB\f1 Scanner port for --create-scanner, --rebuild and --update. Default is 9391. .TP \fB--scanner-type=\fITYPE\fB\f1 Type for --create-scanner option. Could be "OpenVAS Scanner" or "OSP Ovaldi". .TP \fB--scanner-ca-pub=\fICAPUB\fB\f1 Scanner CA public key path for --create-scanner. .TP \fB--scanner-key-pub=\fIKEYPUB\fB\f1 Scanner public key path for --create-scanner. .TP \fB--scanner-key-priv=\fIKEYPRIV\fB\f1 Scanner private key path for --create-scanner. .TP \fB--delete-scanner=\fIUUID\fB\f1 Delete scanner with UUID and exit. .TP \fB--get-scanners\f1 List scanners and exit. .TP \fB--gnutls-priorities=\fIPRIORITY\fB\f1 Set the GnuTLS priority string to PRIORITY. .TP \fB--dh-params=\fIFILE\fB\f1 Path to file containing Diffie-Hellman parameters which are needed for DHE-RSA. This file could be generated using openssl or certtool. .TP \fB--max-email-attachment-size=\fISIZE\fB\f1 Maximum number of bytes permitted in alert email attachments. 0 to use the default, negative to allow any size. .TP \fB--max-email-include-size=\fISIZE\fB\f1 Maximum number of bytes permitted in reports inlined in alert email attachments. 0 to use the default, negative to allow any size. .TP \fB--max-ips-per-target=\fISIZE\fB\f1 Maximum number of IPs per target. .TP \fB-u, --update\f1 Updates the database with information from a running scanner (openvassd) and exits. .TP \fB-p, --port=\fINUMBER\fB\f1 Listen on port number \fINUMBER\f1. .TP \fB--rebuild\f1 Rebuild the database with information from a running scanner (openvassd) and exits. .TP \fB--version\f1 Print version. .TP \fB-v, --verbose\f1 Print progress messages. .TP \fB-?, --help\f1 Show help. .SH SIGNALS SIGHUP causes openvasmd to rebuild the database with information from the Scanner (openvassd). .SH EXAMPLES openvasmd --port 1241 Serve OMP clients on port 1241 and connect to a OTP server on 7772. .SH SEE ALSO \fBopenvassd(8)\f1 \fBopenvasad(8)\f1 \fBgsad(8)\f1 \fBomp(8)\f1 \fBgsd(8)\f1 .SH MORE INFORMATION ABOUT THE OPENVAS PROJECT The canonical places where you will find more information about the OpenVAS project are: \fBhttp://www.openvas.org/\f1 (Official site) \fBhttp://wald.intevation.org/projects/openvas/\f1 (Development Platform) .SH COPYRIGHT The OpenVAS Manager is released under the GNU GPL, version 2, or, at your option, any later version. openvas-manager-6.0.9/doc/db_postgres.sql000644 001751 001751 00000052141 12557600613 021472 0ustar00michaelmichael000000 000000 CREATE TABLE meta (id SERIAL PRIMARY KEY, name text UNIQUE NOT NULL, value text); CREATE TABLE agents (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, installer text, installer_64 text, installer_filename text, installer_signature_64 text, installer_trust integer, installer_trust_time date, howto_install text, howto_use text, creation_time date, modification_time date); CREATE TABLE agents_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, installer text, installer_64 text, installer_filename text, installer_signature_64 text, installer_trust integer, installer_trust_time date, howto_install text, howto_use text, creation_time date, modification_time date); CREATE TABLE alert_condition_data (id SERIAL PRIMARY KEY, alert integer REFERENCES alerts (id) ON DELETE RESTRICT, name text, data text); CREATE TABLE alert_condition_data_trash (id SERIAL PRIMARY KEY, alert integer REFERENCES alerts_trash (id) ON DELETE RESTRICT, name text, data text); CREATE TABLE alert_event_data (id SERIAL PRIMARY KEY, alert integer REFERENCES alerts (id) ON DELETE RESTRICT, name text, data text); CREATE TABLE alert_event_data_trash (id SERIAL PRIMARY KEY, alert integer REFERENCES alerts_trash (id) ON DELETE RESTRICT, name text, data text); CREATE TABLE alert_method_data (id SERIAL PRIMARY KEY, alert integer REFERENCES alerts (id) ON DELETE RESTRICT, name text, data text); CREATE TABLE alert_method_data_trash (id SERIAL PRIMARY KEY, alert integer REFERENCES alerts_trash (id) ON DELETE RESTRICT, name text, data text); CREATE TABLE alerts (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, event integer, condition integer, method integer, filter integer, creation_time date, modification_time date); CREATE TABLE alerts_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, event integer, condition integer, method integer, filter integer, filter_location integer, creation_time date, modification_time date); CREATE TABLE filters (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, type text, term text, creation_time date, modification_time date); CREATE TABLE filters_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, type text, term text, creation_time date, modification_time date); CREATE TABLE groups (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, creation_time date, modification_time date); CREATE TABLE groups_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, creation_time date, modification_time date); CREATE TABLE group_users (id SERIAL PRIMARY KEY, group integer REFERENCES groups (id) ON DELETE RESTRICT, user integer REFERENCES users (id) ON DELETE RESTRICT); CREATE TABLE group_users_trash (id SERIAL PRIMARY KEY, group integer REFERENCES groups_trash (id) ON DELETE RESTRICT, user integer REFERENCES users (id) ON DELETE RESTRICT); CREATE TABLE roles (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, creation_time date, modification_time date); CREATE TABLE roles_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, creation_time date, modification_time date); CREATE TABLE role_users (id SERIAL PRIMARY KEY, role integer REFERENCES roles (id) ON DELETE RESTRICT, user integer REFERENCES users (id) ON DELETE RESTRICT); CREATE TABLE role_users_trash (id SERIAL PRIMARY KEY, role integer REFERENCES roles (id) ON DELETE RESTRICT, user integer REFERENCES users (id) ON DELETE RESTRICT); CREATE TABLE users (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, password text, timezone text, hosts text, hosts_allow integer, ifaces text, ifaces_allow integer, method text, creation_time date, modification_time date); CREATE TABLE nvt_selectors (id SERIAL PRIMARY KEY, name text, exclude integer, type integer, family_or_nvt text, family text); CREATE TABLE port_lists (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, creation_time date, modification_time date); CREATE TABLE port_lists_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, creation_time date, modification_time date); CREATE TABLE port_ranges (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, port_list integer REFERENCES port_lists (id) ON DELETE RESTRICT, type integer, start integer, end integer, comment text, exclude integer); CREATE TABLE port_ranges_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, port_list integer REFERENCES port_lists_trash (id) ON DELETE RESTRICT, type integer, start integer, end integer, comment text, exclude integer); CREATE TABLE port_names (id SERIAL PRIMARY KEY, number integer, protocol text, name text, UNIQUE (number, protocol)); -- ON CONFLICT REPLACE CREATE TABLE targets (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, hosts text, exclude_hosts text, reverse_lookup_only integer, reverse_lookup_unify integer, comment text, lsc_credential integer REFERENCES lsc_credentials (id) ON DELETE RESTRICT, -- SSH ssh_port text, smb_lsc_credential integer REFERENCES lsc_credentials (id) ON DELETE RESTRICT, port_range integer REFERENCES port_lists (id) ON DELETE RESTRICT, alive_test integer, creation_time date, modification_time date, esxi_lsc_credential integer REFERENCES lsc_credentials (id) ON DELETE RESTRICT); CREATE TABLE targets_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, hosts text, exclude_hosts text, reverse_lookup_only integer, reverse_lookup_unify integer, comment text, lsc_credential integer REFERENCES lsc_credentials (id) ON DELETE RESTRICT, -- SSH ssh_port text, smb_lsc_credential integer REFERENCES lsc_credentials (id) ON DELETE RESTRICT, port_range integer REFERENCES port_lists (id) ON DELETE RESTRICT, ssh_location integer, smb_location integer, port_list_location integer, creation_time date, modification_time date, esxi_lsc_credential integer REFERENCES lsc_credentials (id) ON DELETE RESTRICT), esxi_location integer; CREATE TABLE configs (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, nvt_selector text REFERENCES nvt_selectors (name) ON DELETE RESTRICT, comment text, family_count integer, nvt_count integer, families_growing integer, nvts_growing integer, type integer, creation_time date, modification_time date); CREATE TABLE configs_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, nvt_selector text REFERENCES nvt_selectors (name) ON DELETE RESTRICT, comment text, family_count integer, nvt_count integer, families_growing integer, nvts_growing integer, type integer, creation_time date, modification_time date); CREATE TABLE config_preferences (id SERIAL PRIMARY KEY, config integer REFERENCES configs (id) ON DELETE RESTRICT, type text, -- openvasrc section name or NULL for top-level prefs name text, value text); CREATE TABLE config_preferences_trash (id SERIAL PRIMARY KEY, config integer REFERENCES configs_trash (id) ON DELETE RESTRICT, type text, -- openvasrc section name or NULL for top-level prefs name text, value text); CREATE TABLE scanners (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, host text, port integer, type integer, ca_pub text, key_pub text, key_priv text, creation_time date, modification_time date); CREATE TABLE scanners_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, host text, port integer, type integer, ca_pub text, key_pub text, key_priv text, creation_time date, modification_time date); CREATE TABLE tasks (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text, hidden integer, comment text, description text, -- RC file run_status integer, start_time date, end_time date, config integer REFERENCES configs (id) ON DELETE RESTRICT, target integer REFERENCES targets (id) ON DELETE RESTRICT, schedule integer REFERENCES schedules (id) ON DELETE RESTRICT, schedule_periods integer, schedule_next_time date, slave integer REFERENCES slaves (id) ON DELETE RESTRICT, scanner integer REFERENCES scanners (id) ON DELETE RESTRICT, config_location integer, target_location integer, schedule_location integer, slave_location integer, upload_result_count integer, hosts_ordering text, alterable integer, creation_time date, modification_time date); CREATE TABLE task_files (id SERIAL PRIMARY KEY, task integer REFERENCES tasks (id) ON DELETE RESTRICT, name text, content text); CREATE TABLE task_alerts (id SERIAL PRIMARY KEY, task integer REFERENCES tasks (id) ON DELETE RESTRICT, alert integer REFERENCES alerts (id) ON DELETE RESTRICT, alert_location integer); CREATE TABLE task_preferences (id SERIAL PRIMARY KEY, task integer REFERENCES tasks (id) ON DELETE RESTRICT, name text, value text); CREATE TABLE results (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, task integer REFERENCES tasks (id) ON DELETE RESTRICT, host text, port text, nvt text, -- OID of NVT type text, description text, report integer REFERENCES reports (id) ON DELETE RESTRICT, nvt_version text, severity real, qod integer, qod_type text, owner integer REFERENCES users (id) ON DELETE RESTRICT, date date); CREATE TABLE reports (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, hidden integer, task integer REFERENCES tasks (id) ON DELETE RESTRICT, date date, start_time date, end_time date, nbefile text, comment text, scan_run_status integer, slave_progress integer, slave_task_uuid text, slave_uuid text, slave_name text, slave_host text, slave_port integer, source_iface text); CREATE TABLE report_counts (id SERIAL PRIMARY KEY, report integer REFERENCES reports (id) ON DELETE RESTRICT, user integer REFERENCES users (id) ON DELETE RESTRICT, severity decimal, count integer, override integer, end_time integer); CREATE TABLE report_format_params (id SERIAL PRIMARY KEY, report_format integer REFERENCES report_formats (id) ON DELETE RESTRICT, name text, type integer, value text, type_min integer, type_max integer, type_regex text, fallback text); CREATE TABLE report_format_params_trash (id SERIAL PRIMARY KEY, report_format integer REFERENCES report_formats (id) ON DELETE RESTRICT, name text, type integer, value text, type_min integer, type_max integer, type_regex text, fallback text); CREATE TABLE report_format_param_options (id SERIAL PRIMARY KEY, report_format_param integer REFERENCES report_format_params (id) ON DELETE RESTRICT, value text); CREATE TABLE report_format_param_options_trash (id SERIAL PRIMARY KEY, report_format_param integer REFERENCES report_format_params (id) ON DELETE RESTRICT, value text); CREATE TABLE report_formats (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, extension text, content_type text, summary text, description text, signature text, trust integer, trust_time date, flags integer, creation_time date, modification_time date); CREATE TABLE report_formats_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, extension text, content_type text, summary text, description text, signature text, trust integer, trust_time date, flags integer, original_uuid text, creation_time date, modification_time date); CREATE TABLE report_hosts (id SERIAL PRIMARY KEY, report integer REFERENCES reports (id) ON DELETE RESTRICT, host text, start_time date, end_time date, current_port text, max_port text); CREATE TABLE report_host_details (id SERIAL PRIMARY KEY, report_host integer REFERENCES report_hosts (id) ON DELETE RESTRICT, source_type text, source_name text, source_description text, name text, value text); CREATE TABLE nvt_preferences (id SERIAL PRIMARY KEY, name text UNIQUE NOT NULL, value text); CREATE TABLE nvts (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, oid text UNIQUE NOT NULL, version text, name text, comment text, summary text, copyright text, cve text, bid text, xref text, tag text, category text, family text, cvss_base text, creation_time date, modification_time date, solution_type text, qod integer, qod_type text); CREATE TABLE nvt_cves (id SERIAL PRIMARY KEY, nvt integer REFERENCES nvts (id) ON DELETE RESTRICT, oid text, cve_name text); -- -- Local Security Check Credentials. -- -- This table stores the credentials for LSCs. In addition the names -- for packages or tools to be installed on the targets are stored. -- CREATE TABLE lsc_credentials (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, -- The OpenVAS name for this credential. name text NOT NULL, -- The name of the account. login text, -- We have 3 uses for the password field: -- 1. If private_key is NULL, this is a simple password. -- 2. If private key is not NULL and its values is not ";;encrypted;;" -- this is the passphrase to protect the private key. -- 3. If private_key has the value ";;encrypted;;" this -- is an encrypted container for a password or a private key. -- The format of this container is a list of name-value pairs. -- For example: -- "password" -- "private_key" -- The len fields are encoded as 32 bit big endian unsigned -- integer values. A value of 0 for the value length is is -- allowed and indicates and empty string. A missing name -- (e.g. "password", indicates a NULL value for that name. -- This format closely resembles an unencrypted -- lsc_credential. However, recursive encryption is not -- supported. The container itself is OpenPGP encrypted -- with the binary OpenPGP format wrapped into a standard -- base64 encoding without linefeeds or checksums (i.e. it -- is not the armor format). password text, -- A comment describing this credential. comment text, -- Private key, commonly used with ssh. -- A flag value of ";;encrypted;;" in the private_key field is used to -- indicate an encrypted credential. Note: We can't use the password -- field for the flag value because the password field is allowed to -- contain arbitrary data; the private_key field however is a structured -- value (for example PEM or plain base64). private_key text, creation_time date, modification_time date); -- -- Trashcan for lsc_credentials. -- CREATE TABLE lsc_credentials_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, login text, password text, comment text, private_key text, creation_time date, modification_time date); CREATE TABLE notes (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, nvt text NOT NULL, -- OID of NVT creation_time date, modification_time date, text text, hosts text, port text, severity text, task integer REFERENCES tasks (id) ON DELETE RESTRICT, result integer REFERENCES results (id) ON DELETE RESTRICT, end_time integer); CREATE TABLE notes_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, nvt text NOT NULL, -- OID of NVT creation_time date, modification_time date, text text, hosts text, port text, severity text, task integer REFERENCES tasks (id) ON DELETE RESTRICT, result integer REFERENCES results (id) ON DELETE RESTRICT, end_time integer); CREATE TABLE overrides (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, nvt text NOT NULL, -- OID of NVT creation_time date, modification_time date, text text, hosts text, new_severity text, port text, severity text, task integer REFERENCES tasks (id) ON DELETE RESTRICT, result integer REFERENCES results (id) ON DELETE RESTRICT, end_time integer); CREATE TABLE overrides_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, nvt text NOT NULL, -- OID of NVT creation_time date, modification_time date, text text, hosts text, new_severity text, port text, severity text, task integer REFERENCES tasks (id) ON DELETE RESTRICT, result integer REFERENCES results (id) ON DELETE RESTRICT, end_time integer); CREATE TABLE permissions (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, resource_type text, resource integer, resource_uuid text, resource_location integer, subject_type text, subject integer, subject_location integer, creation_time date, modification_time date); CREATE TABLE permissions_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, resource_type text, resource integer, resource_uuid text, resource_location integer, subject_type text, subject integer, subject_location integer, creation_time date, modification_time date); CREATE TABLE schedules (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, first_time date, period integer, period_months integer, duration integer, timezone text, initial_offset integer, creation_time date, modification_time date); CREATE TABLE schedules_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, first_time date, period integer, period_months integer, duration integer, timezone text, initial_offset integer, creation_time date, modification_time date); CREATE TABLE settings (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, value text); CREATE TABLE slaves (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, host text, port text, login text, password text, creation_time date, modification_time date); CREATE TABLE slaves_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, host text, port text, login text, password text, creation_time date, modification_time date); CREATE TABLE tags (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, resource_type text, resource integer, resource_uuid text, resource_location integer, active integer, value text, creation_time date, modification_time date); CREATE TABLE tags_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, resource_type text, resource integer, resource_uuid text, resource_location integer, active integer, value text, creation_time date, modification_time date); openvas-manager-6.0.9/doc/openvasmd.html000644 001751 001751 00000012611 12557600613 021316 0ustar00michaelmichael000000 000000

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        openvasmd

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager daemon of the Open Vulnerability Assessment System (OpenVAS)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Synopsis

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        openvasmd OPTIONS

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Description

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        OpenVAS Scanner, openvassd(8), acts as a service and offers a communication protocol for its clients called OTP. The core task of the OpenVAS Scanner is the actual scan process.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The OpenVAS Manager is a OTP client and adds various management functionalities to handle and organise scan results. Thus OpenVAS Manager acts as a layer between the OpenVAS Scanner and its own clients (for example omp(8), gsad(8) or gsd(8)) which connect via the OMP protocol to the OpenVAS Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        A related service is OpenVAS Administrator, openvasad(8) which among other tasks also manages user accounts for OpenVAS.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Options

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        -a, --listen=ADDRESS

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Listen on ADDRESS.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        --create-user=USERNAME

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Create admin user USERNAME and exit.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        --role=ROLE

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Role for --create-user option.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        --delete-user=USERNAME

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Delete user USERNAME and exit.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        --get-users

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        List users and exit.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        --create-scanner=NAME

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Create scanner NAME and exit.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        --scanner-host=HOST

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Scanner host for --create-scanner, --rebuild and --update. Default is 127.0.0.1.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        --scanner-port=PORT

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Scanner port for --create-scanner, --rebuild and --update. Default is 9391.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        --scanner-type=TYPE

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Type for --create-scanner option. Could be "OpenVAS Scanner" or "OSP Ovaldi".

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        --scanner-ca-pub=CAPUB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Scanner CA public key path for --create-scanner.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        --scanner-key-pub=KEYPUB

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Scanner public key path for --create-scanner.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        --scanner-key-priv=KEYPRIV

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Scanner private key path for --create-scanner.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        --delete-scanner=UUID

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Delete scanner with UUID and exit.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        --get-scanners

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        List scanners and exit.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        --gnutls-priorities=PRIORITY

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Set the GnuTLS priority string to PRIORITY.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        --dh-params=FILE

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Path to file containing Diffie-Hellman parameters which are needed for DHE-RSA. This file could be generated using openssl or certtool.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        --max-email-attachment-size=SIZE

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Maximum number of bytes permitted in alert email attachments.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        0 to use the default, negative to allow any size.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        --max-email-include-size=SIZE

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Maximum number of bytes permitted in reports inlined in alert email attachments.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        0 to use the default, negative to allow any size.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        --max-ips-per-target=SIZE

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Maximum number of IPs per target.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        -u, --update

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Updates the database with information from a running scanner (openvassd) and exits.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        -p, --port=NUMBER

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Listen on port number NUMBER.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        --rebuild

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Rebuild the database with information from a running scanner (openvassd) and exits.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        --version

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Print version.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        -v, --verbose

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Print progress messages.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        -?, --help

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Show help.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        SIGNALS

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        SIGHUP causes openvasmd to rebuild the database with information from the Scanner (openvassd).

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        EXAMPLES

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        openvasmd --port 1241

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Serve OMP clients on port 1241 and connect to a OTP server on 7772.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        SEE ALSO

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        openvassd (8) openvasad (8) gsad (8) omp (8) gsd (8)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        MORE INFORMATION ABOUT THE OpenVAS PROJECT

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The canonical places where you will find more information about the OpenVAS project are: http://www.openvas.org/ (Official site) http://wald.intevation.org/projects/openvas/ (Development Platform)

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        COPYRIGHT

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The OpenVAS Manager is released under the GNU GPL, version 2, or, at your option, any later version.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        openvas-manager-6.0.9/doc/Doxyfile.in000644 001751 001751 00000144434 12557600613 020560 0ustar00michaelmichael000000 000000 # Doxyfile 1.5.1 # This file describes the settings to be used by the documentation system # doxygen (www.doxygen.org) for openvas-manager # # All text after a hash (#) is considered a comment and will be ignored # The format is: # TAG = value [value, ...] # For lists items can also be appended using: # TAG += value [value, ...] # Values that contain spaces should be placed between quotes (" ") #--------------------------------------------------------------------------- # Project related configuration options #--------------------------------------------------------------------------- # The PROJECT_NAME tag is a single word (or a sequence of words surrounded # by quotes) that should identify the project. PROJECT_NAME = "OpenVAS Manager" # The PROJECT_NUMBER tag can be used to enter a project or revision number. # This could be handy for archiving the generated documentation or # if some version control system is used. PROJECT_NUMBER = @CPACK_PACKAGE_VERSION@ # The OUTPUT_DIRECTORY tag is used to specify the (relative or absolute) # base path where the generated documentation will be put. # If a relative path is entered, it will be relative to the location # where doxygen was started. If left blank the current directory will be used. OUTPUT_DIRECTORY = @CMAKE_BINARY_DIR@/doc/generated # If the CREATE_SUBDIRS tag is set to YES, then doxygen will create # 4096 sub-directories (in 2 levels) under the output directory of each output # format and will distribute the generated files over these directories. # Enabling this option can be useful when feeding doxygen a huge amount of # source files, where putting all generated files in the same directory would # otherwise cause performance problems for the file system. CREATE_SUBDIRS = NO # The OUTPUT_LANGUAGE tag is used to specify the language in which all # documentation generated by doxygen is written. Doxygen will use this # information to generate all constant output in the proper language. # The default language is English, other supported languages are: # Afrikaans, Arabic, Brazilian, Catalan, Chinese, Chinese-Traditional, # Croatian, Czech, Danish, Dutch, Finnish, French, German, Greek, Hungarian, # Italian, Japanese, Japanese-en (Japanese with English messages), Korean, # Korean-en, Lithuanian, Norwegian, Polish, Portuguese, Romanian, Russian, # Serbian, Slovak, Slovene, Spanish, Swedish, and Ukrainian. OUTPUT_LANGUAGE = English # This tag can be used to specify the encoding used in the generated output. # The encoding is not always determined by the language that is chosen, # but also whether or not the output is meant for Windows or non-Windows users. # In case there is a difference, setting the USE_WINDOWS_ENCODING tag to YES # forces the Windows encoding (this is the default for the Windows binary), # whereas setting the tag to NO uses a Unix-style encoding (the default for # all platforms other than Windows). USE_WINDOWS_ENCODING = NO # If the BRIEF_MEMBER_DESC tag is set to YES (the default) Doxygen will # include brief member descriptions after the members that are listed in # the file and class documentation (similar to JavaDoc). # Set to NO to disable this. BRIEF_MEMBER_DESC = YES # If the REPEAT_BRIEF tag is set to YES (the default) Doxygen will prepend # the brief description of a member or function before the detailed description. # Note: if both HIDE_UNDOC_MEMBERS and BRIEF_MEMBER_DESC are set to NO, the # brief descriptions will be completely suppressed. REPEAT_BRIEF = YES # This tag implements a quasi-intelligent brief description abbreviator # that is used to form the text in various listings. Each string # in this list, if found as the leading text of the brief description, will be # stripped from the text and the result after processing the whole list, is # used as the annotated text. Otherwise, the brief description is used as-is. # If left blank, the following values are used ("$name" is automatically # replaced with the name of the entity): "The $name class" "The $name widget" # "The $name file" "is" "provides" "specifies" "contains" # "represents" "a" "an" "the" ABBREVIATE_BRIEF = # If the ALWAYS_DETAILED_SEC and REPEAT_BRIEF tags are both set to YES then # Doxygen will generate a detailed section even if there is only a brief # description. ALWAYS_DETAILED_SEC = NO # If the INLINE_INHERITED_MEMB tag is set to YES, doxygen will show all # inherited members of a class in the documentation of that class as if those # members were ordinary class members. Constructors, destructors and assignment # operators of the base classes will not be shown. INLINE_INHERITED_MEMB = NO # If the FULL_PATH_NAMES tag is set to YES then Doxygen will prepend the full # path before files name in the file list and in the header files. If set # to NO the shortest path that makes the file name unique will be used. FULL_PATH_NAMES = YES # If the FULL_PATH_NAMES tag is set to YES then the STRIP_FROM_PATH tag # can be used to strip a user-defined part of the path. Stripping is # only done if one of the specified strings matches the left-hand part of # the path. The tag can be used to show relative paths in the file list. # If left blank the directory from which doxygen is run is used as the # path to strip. STRIP_FROM_PATH = @CMAKE_SOURCE_DIR@ # The STRIP_FROM_INC_PATH tag can be used to strip a user-defined part of # the path mentioned in the documentation of a class, which tells # the reader which header file to include in order to use a class. # If left blank only the name of the header file containing the class # definition is used. Otherwise one should specify the include paths that # are normally passed to the compiler using the -I flag. STRIP_FROM_INC_PATH = # If the SHORT_NAMES tag is set to YES, doxygen will generate much shorter # (but less readable) file names. This can be useful is your file systems # doesn't support long names like on DOS, Mac, or CD-ROM. SHORT_NAMES = NO # If the JAVADOC_AUTOBRIEF tag is set to YES then Doxygen # will interpret the first line (until the first dot) of a JavaDoc-style # comment as the brief description. If set to NO, the JavaDoc # comments will behave just like the Qt-style comments (thus requiring an # explicit @brief command for a brief description. JAVADOC_AUTOBRIEF = NO # The MULTILINE_CPP_IS_BRIEF tag can be set to YES to make Doxygen # treat a multi-line C++ special comment block (i.e. a block of //! or /// # comments) as a brief description. This used to be the default behaviour. # The new default is to treat a multi-line C++ comment block as a detailed # description. Set this tag to YES if you prefer the old behaviour instead. MULTILINE_CPP_IS_BRIEF = NO # If the DETAILS_AT_TOP tag is set to YES then Doxygen # will output the detailed description near the top, like JavaDoc. # If set to NO, the detailed description appears after the member # documentation. DETAILS_AT_TOP = NO # If the INHERIT_DOCS tag is set to YES (the default) then an undocumented # member inherits the documentation from any documented member that it # re-implements. INHERIT_DOCS = YES # If the SEPARATE_MEMBER_PAGES tag is set to YES, then doxygen will produce # a new page for each member. If set to NO, the documentation of a member will # be part of the file/class/namespace that contains it. SEPARATE_MEMBER_PAGES = NO # The TAB_SIZE tag can be used to set the number of spaces in a tab. # Doxygen uses this value to replace tabs by spaces in code fragments. TAB_SIZE = 2 # This tag can be used to specify a number of aliases that acts # as commands in the documentation. An alias has the form "name=value". # For example adding "sideeffect=\par Side Effects:\n" will allow you to # put the command \sideeffect (or @sideeffect) in the documentation, which # will result in a user-defined paragraph with heading "Side Effects:". # You can put \n's in the value part of an alias to insert newlines. ALIASES = "TODO=\todo" # Set the OPTIMIZE_OUTPUT_FOR_C tag to YES if your project consists of C # sources only. Doxygen will then generate output that is more tailored for C. # For instance, some of the names that are used will be different. The list # of all members will be omitted, etc. OPTIMIZE_OUTPUT_FOR_C = YES # Set the OPTIMIZE_OUTPUT_JAVA tag to YES if your project consists of Java # sources only. Doxygen will then generate output that is more tailored for Java. # For instance, namespaces will be presented as packages, qualified scopes # will look different, etc. OPTIMIZE_OUTPUT_JAVA = NO # If you use STL classes (i.e. std::string, std::vector, etc.) but do not want to # include (a tag file for) the STL sources as input, then you should # set this tag to YES in order to let doxygen match functions declarations and # definitions whose arguments contain STL classes (e.g. func(std::string); v.s. # func(std::string) {}). This also make the inheritance and collaboration # diagrams that involve STL classes more complete and accurate. BUILTIN_STL_SUPPORT = NO # If member grouping is used in the documentation and the DISTRIBUTE_GROUP_DOC # tag is set to YES, then doxygen will reuse the documentation of the first # member in the group (if any) for the other members of the group. By default # all members of a group must be documented explicitly. DISTRIBUTE_GROUP_DOC = NO # Set the SUBGROUPING tag to YES (the default) to allow class member groups of # the same type (for instance a group of public functions) to be put as a # subgroup of that type (e.g. under the Public Functions section). Set it to # NO to prevent subgrouping. Alternatively, this can be done per class using # the \nosubgrouping command. SUBGROUPING = YES #--------------------------------------------------------------------------- # Build related configuration options #--------------------------------------------------------------------------- # If the EXTRACT_ALL tag is set to YES doxygen will assume all entities in # documentation are documented, even if no documentation was available. # Private class members and static file members will be hidden unless # the EXTRACT_PRIVATE and EXTRACT_STATIC tags are set to YES EXTRACT_ALL = YES # If the EXTRACT_PRIVATE tag is set to YES all private members of a class # will be included in the documentation. EXTRACT_PRIVATE = NO # If the EXTRACT_STATIC tag is set to YES all static members of a file # will be included in the documentation. EXTRACT_STATIC = NO # If the EXTRACT_LOCAL_CLASSES tag is set to YES classes (and structs) # defined locally in source files will be included in the documentation. # If set to NO only classes defined in header files are included. EXTRACT_LOCAL_CLASSES = YES # This flag is only useful for Objective-C code. When set to YES local # methods, which are defined in the implementation section but not in # the interface are included in the documentation. # If set to NO (the default) only methods in the interface are included. EXTRACT_LOCAL_METHODS = NO # If the HIDE_UNDOC_MEMBERS tag is set to YES, Doxygen will hide all # undocumented members of documented classes, files or namespaces. # If set to NO (the default) these members will be included in the # various overviews, but no documentation section is generated. # This option has no effect if EXTRACT_ALL is enabled. HIDE_UNDOC_MEMBERS = NO # If the HIDE_UNDOC_CLASSES tag is set to YES, Doxygen will hide all # undocumented classes that are normally visible in the class hierarchy. # If set to NO (the default) these classes will be included in the various # overviews. This option has no effect if EXTRACT_ALL is enabled. HIDE_UNDOC_CLASSES = NO # If the HIDE_FRIEND_COMPOUNDS tag is set to YES, Doxygen will hide all # friend (class|struct|union) declarations. # If set to NO (the default) these declarations will be included in the # documentation. HIDE_FRIEND_COMPOUNDS = NO # If the HIDE_IN_BODY_DOCS tag is set to YES, Doxygen will hide any # documentation blocks found inside the body of a function. # If set to NO (the default) these blocks will be appended to the # function's detailed documentation block. HIDE_IN_BODY_DOCS = NO # The INTERNAL_DOCS tag determines if documentation # that is typed after a \internal command is included. If the tag is set # to NO (the default) then the documentation will be excluded. # Set it to YES to include the internal documentation. INTERNAL_DOCS = NO # If the CASE_SENSE_NAMES tag is set to NO then Doxygen will only generate # file names in lower-case letters. If set to YES upper-case letters are also # allowed. This is useful if you have classes or files whose names only differ # in case and if your file system supports case sensitive file names. Windows # and Mac users are advised to set this option to NO. CASE_SENSE_NAMES = YES # If the HIDE_SCOPE_NAMES tag is set to NO (the default) then Doxygen # will show members with their full class and namespace scopes in the # documentation. If set to YES the scope will be hidden. HIDE_SCOPE_NAMES = NO # If the SHOW_INCLUDE_FILES tag is set to YES (the default) then Doxygen # will put a list of the files that are included by a file in the documentation # of that file. SHOW_INCLUDE_FILES = YES # If the INLINE_INFO tag is set to YES (the default) then a tag [inline] # is inserted in the documentation for inline members. INLINE_INFO = YES # If the SORT_MEMBER_DOCS tag is set to YES (the default) then doxygen # will sort the (detailed) documentation of file and class members # alphabetically by member name. If set to NO the members will appear in # declaration order. SORT_MEMBER_DOCS = YES # If the SORT_BRIEF_DOCS tag is set to YES then doxygen will sort the # brief documentation of file, namespace and class members alphabetically # by member name. If set to NO (the default) the members will appear in # declaration order. SORT_BRIEF_DOCS = NO # If the SORT_BY_SCOPE_NAME tag is set to YES, the class list will be # sorted by fully-qualified names, including namespaces. If set to # NO (the default), the class list will be sorted only by class name, # not including the namespace part. # Note: This option is not very useful if HIDE_SCOPE_NAMES is set to YES. # Note: This option applies only to the class list, not to the # alphabetical list. SORT_BY_SCOPE_NAME = NO # The GENERATE_TODOLIST tag can be used to enable (YES) or # disable (NO) the todo list. This list is created by putting \todo # commands in the documentation. GENERATE_TODOLIST = YES # The GENERATE_TESTLIST tag can be used to enable (YES) or # disable (NO) the test list. This list is created by putting \test # commands in the documentation. GENERATE_TESTLIST = YES # The GENERATE_BUGLIST tag can be used to enable (YES) or # disable (NO) the bug list. This list is created by putting \bug # commands in the documentation. GENERATE_BUGLIST = YES # The GENERATE_DEPRECATEDLIST tag can be used to enable (YES) or # disable (NO) the deprecated list. This list is created by putting # \deprecated commands in the documentation. GENERATE_DEPRECATEDLIST= YES # The ENABLED_SECTIONS tag can be used to enable conditional # documentation sections, marked by \if sectionname ... \endif. ENABLED_SECTIONS = # The MAX_INITIALIZER_LINES tag determines the maximum number of lines # the initial value of a variable or define consists of for it to appear in # the documentation. If the initializer consists of more lines than specified # here it will be hidden. Use a value of 0 to hide initializers completely. # The appearance of the initializer of individual variables and defines in the # documentation can be controlled using \showinitializer or \hideinitializer # command in the documentation regardless of this setting. MAX_INITIALIZER_LINES = 30 # Set the SHOW_USED_FILES tag to NO to disable the list of files generated # at the bottom of the documentation of classes and structs. If set to YES the # list will mention the files that were used to generate the documentation. SHOW_USED_FILES = YES # If the sources in your project are distributed over multiple directories # then setting the SHOW_DIRECTORIES tag to YES will show the directory hierarchy # in the documentation. The default is NO. SHOW_DIRECTORIES = NO # The FILE_VERSION_FILTER tag can be used to specify a program or script that # doxygen should invoke to get the current version for each file (typically from the # version control system). Doxygen will invoke the program by executing (via # popen()) the command , where is the value of # the FILE_VERSION_FILTER tag, and is the name of an input file # provided by doxygen. Whatever the program writes to standard output # is used as the file version. See the manual for examples. FILE_VERSION_FILTER = #--------------------------------------------------------------------------- # configuration options related to warning and progress messages #--------------------------------------------------------------------------- # The QUIET tag can be used to turn on/off the messages that are generated # by doxygen. Possible values are YES and NO. If left blank NO is used. QUIET = NO # The WARNINGS tag can be used to turn on/off the warning messages that are # generated by doxygen. Possible values are YES and NO. If left blank # NO is used. WARNINGS = YES # If WARN_IF_UNDOCUMENTED is set to YES, then doxygen will generate warnings # for undocumented members. If EXTRACT_ALL is set to YES then this flag will # automatically be disabled. WARN_IF_UNDOCUMENTED = YES # If WARN_IF_DOC_ERROR is set to YES, doxygen will generate warnings for # potential errors in the documentation, such as not documenting some # parameters in a documented function, or documenting parameters that # don't exist or using markup commands wrongly. WARN_IF_DOC_ERROR = YES # This WARN_NO_PARAMDOC option can be abled to get warnings for # functions that are documented, but have no documentation for their parameters # or return value. If set to NO (the default) doxygen will only warn about # wrong or incomplete parameter documentation, but not about the absence of # documentation. WARN_NO_PARAMDOC = YES # The WARN_FORMAT tag determines the format of the warning messages that # doxygen can produce. The string should contain the $file, $line, and $text # tags, which will be replaced by the file and line number from which the # warning originated and the warning text. Optionally the format may contain # $version, which will be replaced by the version of the file (if it could # be obtained via FILE_VERSION_FILTER) WARN_FORMAT = "$file:$line: $text" # The WARN_LOGFILE tag can be used to specify a file to which warning # and error messages should be written. If left blank the output is written # to stderr. WARN_LOGFILE = #--------------------------------------------------------------------------- # configuration options related to the input files #--------------------------------------------------------------------------- # The INPUT tag can be used to specify the files and/or directories that contain # documented source files. You may enter file names like "myfile.cpp" or # directories like "/usr/src/myproject". Separate the files or directories # with spaces. INPUT = @CMAKE_SOURCE_DIR@/src # If the value of the INPUT tag contains directories, you can use the # FILE_PATTERNS tag to specify one or more wildcard pattern (like *.cpp # and *.h) to filter out the source-files in the directories. If left # blank the following patterns are tested: # *.c *.cc *.cxx *.cpp *.c++ *.java *.ii *.ixx *.ipp *.i++ *.inl *.h *.hh *.hxx # *.hpp *.h++ *.idl *.odl *.cs *.php *.php3 *.inc *.m *.mm *.py FILE_PATTERNS = # The RECURSIVE tag can be used to turn specify whether or not subdirectories # should be searched for input files as well. Possible values are YES and NO. # If left blank NO is used. RECURSIVE = NO # The EXCLUDE tag can be used to specify files and/or directories that should # excluded from the INPUT source files. This way you can easily exclude a # subdirectory from a directory tree whose root is specified with the INPUT tag. EXCLUDE = # The EXCLUDE_SYMLINKS tag can be used select whether or not files or # directories that are symbolic links (a Unix filesystem feature) are excluded # from the input. EXCLUDE_SYMLINKS = NO # If the value of the INPUT tag contains directories, you can use the # EXCLUDE_PATTERNS tag to specify one or more wildcard patterns to exclude # certain files from those directories. Note that the wildcards are matched # against the file with absolute path, so to exclude all test directories # for example use the pattern */test/* EXCLUDE_PATTERNS = # The EXAMPLE_PATH tag can be used to specify one or more files or # directories that contain example code fragments that are included (see # the \include command). EXAMPLE_PATH = @CMAKE_SOURCE_DIR@ @CMAKE_SOURCE_DIR@/doc # If the value of the EXAMPLE_PATH tag contains directories, you can use the # EXAMPLE_PATTERNS tag to specify one or more wildcard pattern (like *.cpp # and *.h) to filter out the source-files in the directories. If left # blank all files are included. EXAMPLE_PATTERNS = # If the EXAMPLE_RECURSIVE tag is set to YES then subdirectories will be # searched for input files to be used with the \include or \dontinclude # commands irrespective of the value of the RECURSIVE tag. # Possible values are YES and NO. If left blank NO is used. EXAMPLE_RECURSIVE = NO # The IMAGE_PATH tag can be used to specify one or more files or # directories that contain image that are included in the documentation (see # the \image command). IMAGE_PATH = # The INPUT_FILTER tag can be used to specify a program that doxygen should # invoke to filter for each input file. Doxygen will invoke the filter program # by executing (via popen()) the command , where # is the value of the INPUT_FILTER tag, and is the name of an # input file. Doxygen will then use the output that the filter program writes # to standard output. If FILTER_PATTERNS is specified, this tag will be # ignored. INPUT_FILTER = # The FILTER_PATTERNS tag can be used to specify filters on a per file pattern # basis. Doxygen will compare the file name with each pattern and apply the # filter if there is a match. The filters are a list of the form: # pattern=filter (like *.cpp=my_cpp_filter). See INPUT_FILTER for further # info on how filters are used. If FILTER_PATTERNS is empty, INPUT_FILTER # is applied to all files. FILTER_PATTERNS = # If the FILTER_SOURCE_FILES tag is set to YES, the input filter (if set using # INPUT_FILTER) will be used to filter the input files when producing source # files to browse (i.e. when SOURCE_BROWSER is set to YES). FILTER_SOURCE_FILES = NO #--------------------------------------------------------------------------- # configuration options related to source browsing #--------------------------------------------------------------------------- # If the SOURCE_BROWSER tag is set to YES then a list of source files will # be generated. Documented entities will be cross-referenced with these sources. # Note: To get rid of all source code in the generated output, make sure also # VERBATIM_HEADERS is set to NO. SOURCE_BROWSER = NO # Setting the INLINE_SOURCES tag to YES will include the body # of functions and classes directly in the documentation. INLINE_SOURCES = NO # Setting the STRIP_CODE_COMMENTS tag to YES (the default) will instruct # doxygen to hide any special comment blocks from generated source code # fragments. Normal C and C++ comments will always remain visible. STRIP_CODE_COMMENTS = YES # If the REFERENCED_BY_RELATION tag is set to YES (the default) # then for each documented function all documented # functions referencing it will be listed. REFERENCED_BY_RELATION = NO # If the REFERENCES_RELATION tag is set to YES (the default) # then for each documented function all documented entities # called/used by that function will be listed. REFERENCES_RELATION = NO # If the REFERENCES_LINK_SOURCE tag is set to YES (the default) # and SOURCE_BROWSER tag is set to YES, then the hyperlinks from # functions in REFERENCES_RELATION and REFERENCED_BY_RELATION lists will # link to the source code. Otherwise they will link to the documentstion. REFERENCES_LINK_SOURCE = YES # If the USE_HTAGS tag is set to YES then the references to source code # will point to the HTML generated by the htags(1) tool instead of doxygen # built-in source browser. The htags tool is part of GNU's global source # tagging system (see http://www.gnu.org/software/global/global.html). You # will need version 4.8.6 or higher. USE_HTAGS = NO # If the VERBATIM_HEADERS tag is set to YES (the default) then Doxygen # will generate a verbatim copy of the header file for each class for # which an include is specified. Set to NO to disable this. VERBATIM_HEADERS = YES #--------------------------------------------------------------------------- # configuration options related to the alphabetical class index #--------------------------------------------------------------------------- # If the ALPHABETICAL_INDEX tag is set to YES, an alphabetical index # of all compounds will be generated. Enable this if the project # contains a lot of classes, structs, unions or interfaces. ALPHABETICAL_INDEX = YES # If the alphabetical index is enabled (see ALPHABETICAL_INDEX) then # the COLS_IN_ALPHA_INDEX tag can be used to specify the number of columns # in which this list will be split (can be a number in the range [1..20]) COLS_IN_ALPHA_INDEX = 5 # In case all classes in a project start with a common prefix, all # classes will be put under the same header in the alphabetical index. # The IGNORE_PREFIX tag can be used to specify one or more prefixes that # should be ignored while generating the index headers. IGNORE_PREFIX = #--------------------------------------------------------------------------- # configuration options related to the HTML output #--------------------------------------------------------------------------- # If the GENERATE_HTML tag is set to YES (the default) Doxygen will # generate HTML output. GENERATE_HTML = YES # The HTML_OUTPUT tag is used to specify where the HTML docs will be put. # If a relative path is entered the value of OUTPUT_DIRECTORY will be # put in front of it. If left blank `html' will be used as the default path. HTML_OUTPUT = html # The HTML_FILE_EXTENSION tag can be used to specify the file extension for # each generated HTML page (for example: .htm,.php,.asp). If it is left blank # doxygen will generate files with .html extension. HTML_FILE_EXTENSION = .html # The HTML_HEADER tag can be used to specify a personal HTML header for # each generated HTML page. If it is left blank doxygen will generate a # standard header. HTML_HEADER = # The HTML_FOOTER tag can be used to specify a personal HTML footer for # each generated HTML page. If it is left blank doxygen will generate a # standard footer. HTML_FOOTER = # The HTML_STYLESHEET tag can be used to specify a user-defined cascading # style sheet that is used by each HTML page. It can be used to # fine-tune the look of the HTML output. If the tag is left blank doxygen # will generate a default style sheet. Note that doxygen will try to copy # the style sheet file to the HTML output directory, so don't put your own # stylesheet in the HTML output directory as well, or it will be erased! HTML_STYLESHEET = # If the HTML_ALIGN_MEMBERS tag is set to YES, the members of classes, # files or namespaces will be aligned in HTML using tables. If set to # NO a bullet list will be used. HTML_ALIGN_MEMBERS = YES # If the GENERATE_HTMLHELP tag is set to YES, additional index files # will be generated that can be used as input for tools like the # Microsoft HTML help workshop to generate a compressed HTML help file (.chm) # of the generated HTML documentation. GENERATE_HTMLHELP = NO # If the GENERATE_HTMLHELP tag is set to YES, the CHM_FILE tag can # be used to specify the file name of the resulting .chm file. You # can add a path in front of the file if the result should not be # written to the html output directory. CHM_FILE = # If the GENERATE_HTMLHELP tag is set to YES, the HHC_LOCATION tag can # be used to specify the location (absolute path including file name) of # the HTML help compiler (hhc.exe). If non-empty doxygen will try to run # the HTML help compiler on the generated index.hhp. HHC_LOCATION = # If the GENERATE_HTMLHELP tag is set to YES, the GENERATE_CHI flag # controls if a separate .chi index file is generated (YES) or that # it should be included in the master .chm file (NO). GENERATE_CHI = NO # If the GENERATE_HTMLHELP tag is set to YES, the BINARY_TOC flag # controls whether a binary table of contents is generated (YES) or a # normal table of contents (NO) in the .chm file. BINARY_TOC = NO # The TOC_EXPAND flag can be set to YES to add extra items for group members # to the contents of the HTML help documentation and to the tree view. TOC_EXPAND = NO # The DISABLE_INDEX tag can be used to turn on/off the condensed index at # top of each HTML page. The value NO (the default) enables the index and # the value YES disables it. DISABLE_INDEX = NO # This tag can be used to set the number of enum values (range [1..20]) # that doxygen will group on one line in the generated HTML documentation. ENUM_VALUES_PER_LINE = 4 # If the GENERATE_TREEVIEW tag is set to YES, a side panel will be # generated containing a tree-like index structure (just like the one that # is generated for HTML Help). For this to work a browser that supports # JavaScript, DHTML, CSS and frames is required (for instance Mozilla 1.0+, # Netscape 6.0+, Internet explorer 5.0+, or Konqueror). Windows users are # probably better off using the HTML help feature. GENERATE_TREEVIEW = NO # If the treeview is enabled (see GENERATE_TREEVIEW) then this tag can be # used to set the initial width (in pixels) of the frame in which the tree # is shown. TREEVIEW_WIDTH = 250 #--------------------------------------------------------------------------- # configuration options related to the LaTeX output #--------------------------------------------------------------------------- # If the GENERATE_LATEX tag is set to YES (the default) Doxygen will # generate Latex output. GENERATE_LATEX = NO # The LATEX_OUTPUT tag is used to specify where the LaTeX docs will be put. # If a relative path is entered the value of OUTPUT_DIRECTORY will be # put in front of it. If left blank `latex' will be used as the default path. LATEX_OUTPUT = latex # The LATEX_CMD_NAME tag can be used to specify the LaTeX command name to be # invoked. If left blank `latex' will be used as the default command name. LATEX_CMD_NAME = latex # The MAKEINDEX_CMD_NAME tag can be used to specify the command name to # generate index for LaTeX. If left blank `makeindex' will be used as the # default command name. MAKEINDEX_CMD_NAME = makeindex # If the COMPACT_LATEX tag is set to YES Doxygen generates more compact # LaTeX documents. This may be useful for small projects and may help to # save some trees in general. COMPACT_LATEX = NO # The PAPER_TYPE tag can be used to set the paper type that is used # by the printer. Possible values are: a4, a4wide, letter, legal and # executive. If left blank a4wide will be used. PAPER_TYPE = a4wide # The EXTRA_PACKAGES tag can be to specify one or more names of LaTeX # packages that should be included in the LaTeX output. EXTRA_PACKAGES = # The LATEX_HEADER tag can be used to specify a personal LaTeX header for # the generated latex document. The header should contain everything until # the first chapter. If it is left blank doxygen will generate a # standard header. Notice: only use this tag if you know what you are doing! LATEX_HEADER = # If the PDF_HYPERLINKS tag is set to YES, the LaTeX that is generated # is prepared for conversion to pdf (using ps2pdf). The pdf file will # contain links (just like the HTML output) instead of page references # This makes the output suitable for online browsing using a pdf viewer. PDF_HYPERLINKS = YES # If the USE_PDFLATEX tag is set to YES, pdflatex will be used instead of # plain latex in the generated Makefile. Set this option to YES to get a # higher quality PDF documentation. USE_PDFLATEX = YES # If the LATEX_BATCHMODE tag is set to YES, doxygen will add the \\batchmode. # command to the generated LaTeX files. This will instruct LaTeX to keep # running if errors occur, instead of asking the user for help. # This option is also used when generating formulas in HTML. LATEX_BATCHMODE = NO # If LATEX_HIDE_INDICES is set to YES then doxygen will not # include the index chapters (such as File Index, Compound Index, etc.) # in the output. LATEX_HIDE_INDICES = NO #--------------------------------------------------------------------------- # configuration options related to the RTF output #--------------------------------------------------------------------------- # If the GENERATE_RTF tag is set to YES Doxygen will generate RTF output # The RTF output is optimized for Word 97 and may not look very pretty with # other RTF readers or editors. GENERATE_RTF = NO # The RTF_OUTPUT tag is used to specify where the RTF docs will be put. # If a relative path is entered the value of OUTPUT_DIRECTORY will be # put in front of it. If left blank `rtf' will be used as the default path. RTF_OUTPUT = rtf # If the COMPACT_RTF tag is set to YES Doxygen generates more compact # RTF documents. This may be useful for small projects and may help to # save some trees in general. COMPACT_RTF = NO # If the RTF_HYPERLINKS tag is set to YES, the RTF that is generated # will contain hyperlink fields. The RTF file will # contain links (just like the HTML output) instead of page references. # This makes the output suitable for online browsing using WORD or other # programs which support those fields. # Note: wordpad (write) and others do not support links. RTF_HYPERLINKS = NO # Load stylesheet definitions from file. Syntax is similar to doxygen's # config file, i.e. a series of assignments. You only have to provide # replacements, missing definitions are set to their default value. RTF_STYLESHEET_FILE = # Set optional variables used in the generation of an rtf document. # Syntax is similar to doxygen's config file. RTF_EXTENSIONS_FILE = #--------------------------------------------------------------------------- # configuration options related to the man page output #--------------------------------------------------------------------------- # If the GENERATE_MAN tag is set to YES (the default) Doxygen will # generate man pages GENERATE_MAN = NO # The MAN_OUTPUT tag is used to specify where the man pages will be put. # If a relative path is entered the value of OUTPUT_DIRECTORY will be # put in front of it. If left blank `man' will be used as the default path. MAN_OUTPUT = man # The MAN_EXTENSION tag determines the extension that is added to # the generated man pages (default is the subroutine's section .3) MAN_EXTENSION = .3 # If the MAN_LINKS tag is set to YES and Doxygen generates man output, # then it will generate one additional man file for each entity # documented in the real man page(s). These additional files # only source the real man page, but without them the man command # would be unable to find the correct page. The default is NO. MAN_LINKS = NO #--------------------------------------------------------------------------- # configuration options related to the XML output #--------------------------------------------------------------------------- # If the GENERATE_XML tag is set to YES Doxygen will # generate an XML file that captures the structure of # the code including all documentation. GENERATE_XML = NO # The XML_OUTPUT tag is used to specify where the XML pages will be put. # If a relative path is entered the value of OUTPUT_DIRECTORY will be # put in front of it. If left blank `xml' will be used as the default path. XML_OUTPUT = xml # The XML_SCHEMA tag can be used to specify an XML schema, # which can be used by a validating XML parser to check the # syntax of the XML files. XML_SCHEMA = # The XML_DTD tag can be used to specify an XML DTD, # which can be used by a validating XML parser to check the # syntax of the XML files. XML_DTD = # If the XML_PROGRAMLISTING tag is set to YES Doxygen will # dump the program listings (including syntax highlighting # and cross-referencing information) to the XML output. Note that # enabling this will significantly increase the size of the XML output. XML_PROGRAMLISTING = YES #--------------------------------------------------------------------------- # configuration options for the AutoGen Definitions output #--------------------------------------------------------------------------- # If the GENERATE_AUTOGEN_DEF tag is set to YES Doxygen will # generate an AutoGen Definitions (see autogen.sf.net) file # that captures the structure of the code including all # documentation. Note that this feature is still experimental # and incomplete at the moment. GENERATE_AUTOGEN_DEF = NO #--------------------------------------------------------------------------- # configuration options related to the Perl module output #--------------------------------------------------------------------------- # If the GENERATE_PERLMOD tag is set to YES Doxygen will # generate a Perl module file that captures the structure of # the code including all documentation. Note that this # feature is still experimental and incomplete at the # moment. GENERATE_PERLMOD = NO # If the PERLMOD_LATEX tag is set to YES Doxygen will generate # the necessary Makefile rules, Perl scripts and LaTeX code to be able # to generate PDF and DVI output from the Perl module output. PERLMOD_LATEX = NO # If the PERLMOD_PRETTY tag is set to YES the Perl module output will be # nicely formatted so it can be parsed by a human reader. This is useful # if you want to understand what is going on. On the other hand, if this # tag is set to NO the size of the Perl module output will be much smaller # and Perl will parse it just the same. PERLMOD_PRETTY = YES # The names of the make variables in the generated doxyrules.make file # are prefixed with the string contained in PERLMOD_MAKEVAR_PREFIX. # This is useful so different doxyrules.make files included by the same # Makefile don't overwrite each other's variables. PERLMOD_MAKEVAR_PREFIX = #--------------------------------------------------------------------------- # Configuration options related to the preprocessor #--------------------------------------------------------------------------- # If the ENABLE_PREPROCESSING tag is set to YES (the default) Doxygen will # evaluate all C-preprocessor directives found in the sources and include # files. ENABLE_PREPROCESSING = YES # If the MACRO_EXPANSION tag is set to YES Doxygen will expand all macro # names in the source code. If set to NO (the default) only conditional # compilation will be performed. Macro expansion can be done in a controlled # way by setting EXPAND_ONLY_PREDEF to YES. MACRO_EXPANSION = NO # If the EXPAND_ONLY_PREDEF and MACRO_EXPANSION tags are both set to YES # then the macro expansion is limited to the macros specified with the # PREDEFINED and EXPAND_AS_DEFINED tags. EXPAND_ONLY_PREDEF = NO # If the SEARCH_INCLUDES tag is set to YES (the default) the includes files # in the INCLUDE_PATH (see below) will be search if a #include is found. SEARCH_INCLUDES = YES # The INCLUDE_PATH tag can be used to specify one or more directories that # contain include files that are not input files but should be processed by # the preprocessor. INCLUDE_PATH = # You can use the INCLUDE_FILE_PATTERNS tag to specify one or more wildcard # patterns (like *.h and *.hpp) to filter out the header-files in the # directories. If left blank, the patterns specified with FILE_PATTERNS will # be used. INCLUDE_FILE_PATTERNS = # The PREDEFINED tag can be used to specify one or more macro names that # are defined before the preprocessor is started (similar to the -D option of # gcc). The argument of the tag is a list of macros of the form: name # or name=definition (no spaces). If the definition and the = are # omitted =1 is assumed. To prevent a macro definition from being # undefined via #undef or recursively expanded use the := operator # instead of the = operator. PREDEFINED = DEF_ACCESS # If the MACRO_EXPANSION and EXPAND_ONLY_PREDEF tags are set to YES then # this tag can be used to specify a list of macro names that should be expanded. # The macro definition that is found in the sources will be used. # Use the PREDEFINED tag if you want to use a different macro definition. EXPAND_AS_DEFINED = # If the SKIP_FUNCTION_MACROS tag is set to YES (the default) then # doxygen's preprocessor will remove all function-like macros that are alone # on a line, have an all uppercase name, and do not end with a semicolon. Such # function macros are typically used for boiler-plate code, and will confuse # the parser if not removed. SKIP_FUNCTION_MACROS = YES #--------------------------------------------------------------------------- # Configuration::additions related to external references #--------------------------------------------------------------------------- # The TAGFILES option can be used to specify one or more tagfiles. # Optionally an initial location of the external documentation # can be added for each tagfile. The format of a tag file without # this location is as follows: # TAGFILES = file1 file2 ... # Adding location for the tag files is done as follows: # TAGFILES = file1=loc1 "file2 = loc2" ... # where "loc1" and "loc2" can be relative or absolute paths or # URLs. If a location is present for each tag, the installdox tool # does not have to be run to correct the links. # Note that each tag file must have a unique name # (where the name does NOT include the path) # If a tag file is not located in the directory in which doxygen # is run, you must also specify the path to the tagfile here. TAGFILES = # When a file name is specified after GENERATE_TAGFILE, doxygen will create # a tag file that is based on the input files it reads. GENERATE_TAGFILE = # If the ALLEXTERNALS tag is set to YES all external classes will be listed # in the class index. If set to NO only the inherited external classes # will be listed. ALLEXTERNALS = NO # If the EXTERNAL_GROUPS tag is set to YES all external groups will be listed # in the modules index. If set to NO, only the current project's groups will # be listed. EXTERNAL_GROUPS = YES # The PERL_PATH should be the absolute path and name of the perl script # interpreter (i.e. the result of `which perl'). PERL_PATH = /usr/bin/perl #--------------------------------------------------------------------------- # Configuration options related to the dot tool #--------------------------------------------------------------------------- # If the CLASS_DIAGRAMS tag is set to YES (the default) Doxygen will # generate a inheritance diagram (in HTML, RTF and LaTeX) for classes with base # or super classes. Setting the tag to NO turns the diagrams off. Note that # this option is superseded by the HAVE_DOT option below. This is only a # fallback. It is recommended to install and use dot, since it yields more # powerful graphs. CLASS_DIAGRAMS = NO # If set to YES, the inheritance and collaboration graphs will hide # inheritance and usage relations if the target is undocumented # or is not a class. HIDE_UNDOC_RELATIONS = YES # If you set the HAVE_DOT tag to YES then doxygen will assume the dot tool is # available from the path. This tool is part of Graphviz, a graph visualization # toolkit from AT&T and Lucent Bell Labs. The other options in this section # have no effect if this option is set to NO (the default) HAVE_DOT = NO # If the CLASS_GRAPH and HAVE_DOT tags are set to YES then doxygen # will generate a graph for each documented class showing the direct and # indirect inheritance relations. Setting this tag to YES will force the # the CLASS_DIAGRAMS tag to NO. CLASS_GRAPH = NO # If the COLLABORATION_GRAPH and HAVE_DOT tags are set to YES then doxygen # will generate a graph for each documented class showing the direct and # indirect implementation dependencies (inheritance, containment, and # class references variables) of the class with other documented classes. COLLABORATION_GRAPH = NO # If the GROUP_GRAPHS and HAVE_DOT tags are set to YES then doxygen # will generate a graph for groups, showing the direct groups dependencies GROUP_GRAPHS = NO # If the UML_LOOK tag is set to YES doxygen will generate inheritance and # collaboration diagrams in a style similar to the OMG's Unified Modeling # Language. UML_LOOK = NO # If set to YES, the inheritance and collaboration graphs will show the # relations between templates and their instances. TEMPLATE_RELATIONS = NO # If the ENABLE_PREPROCESSING, SEARCH_INCLUDES, INCLUDE_GRAPH, and HAVE_DOT # tags are set to YES then doxygen will generate a graph for each documented # file showing the direct and indirect include dependencies of the file with # other documented files. INCLUDE_GRAPH = NO # If the ENABLE_PREPROCESSING, SEARCH_INCLUDES, INCLUDED_BY_GRAPH, and # HAVE_DOT tags are set to YES then doxygen will generate a graph for each # documented header file showing the documented files that directly or # indirectly include this file. INCLUDED_BY_GRAPH = NO # If the CALL_GRAPH and HAVE_DOT tags are set to YES then doxygen will # generate a call dependency graph for every global function or class method. # Note that enabling this option will significantly increase the time of a run. # So in most cases it will be better to enable call graphs for selected # functions only using the \callgraph command. CALL_GRAPH = NO # If the CALLER_GRAPH and HAVE_DOT tags are set to YES then doxygen will # generate a caller dependency graph for every global function or class method. # Note that enabling this option will significantly increase the time of a run. # So in most cases it will be better to enable caller graphs for selected # functions only using the \callergraph command. CALLER_GRAPH = NO # If the GRAPHICAL_HIERARCHY and HAVE_DOT tags are set to YES then doxygen # will graphical hierarchy of all classes instead of a textual one. GRAPHICAL_HIERARCHY = NO # If the DIRECTORY_GRAPH, SHOW_DIRECTORIES and HAVE_DOT tags are set to YES # then doxygen will show the dependencies a directory has on other directories # in a graphical way. The dependency relations are determined by the #include # relations between the files in the directories. DIRECTORY_GRAPH = NO # The DOT_IMAGE_FORMAT tag can be used to set the image format of the images # generated by dot. Possible values are png, jpg, or gif # If left blank png will be used. DOT_IMAGE_FORMAT = png # The tag DOT_PATH can be used to specify the path where the dot tool can be # found. If left blank, it is assumed the dot tool can be found in the path. DOT_PATH = # The DOTFILE_DIRS tag can be used to specify one or more directories that # contain dot files that are included in the documentation (see the # \dotfile command). DOTFILE_DIRS = # The MAX_DOT_GRAPH_WIDTH tag can be used to set the maximum allowed width # (in pixels) of the graphs generated by dot. If a graph becomes larger than # this value, doxygen will try to truncate the graph, so that it fits within # the specified constraint. Beware that most browsers cannot cope with very # large images. MAX_DOT_GRAPH_WIDTH = 1024 # The MAX_DOT_GRAPH_HEIGHT tag can be used to set the maximum allows height # (in pixels) of the graphs generated by dot. If a graph becomes larger than # this value, doxygen will try to truncate the graph, so that it fits within # the specified constraint. Beware that most browsers cannot cope with very # large images. MAX_DOT_GRAPH_HEIGHT = 1024 # The MAX_DOT_GRAPH_DEPTH tag can be used to set the maximum depth of the # graphs generated by dot. A depth value of 3 means that only nodes reachable # from the root by following a path via at most 3 edges will be shown. Nodes # that lay further from the root node will be omitted. Note that setting this # option to 1 or 2 may greatly reduce the computation time needed for large # code bases. Also note that a graph may be further truncated if the graph's # image dimensions are not sufficient to fit the graph (see MAX_DOT_GRAPH_WIDTH # and MAX_DOT_GRAPH_HEIGHT). If 0 is used for the depth value (the default), # the graph is not depth-constrained. MAX_DOT_GRAPH_DEPTH = 0 # Set the DOT_TRANSPARENT tag to YES to generate images with a transparent # background. This is disabled by default, which results in a white background. # Warning: Depending on the platform used, enabling this option may lead to # badly anti-aliased labels on the edges of a graph (i.e. they become hard to # read). DOT_TRANSPARENT = NO # Set the DOT_MULTI_TARGETS tag to YES allow dot to generate multiple output # files in one run (i.e. multiple -o and -T options on the command line). This # makes dot run faster, but since only newer versions of dot (>1.8.10) # support this, this feature is disabled by default. DOT_MULTI_TARGETS = NO # If the GENERATE_LEGEND tag is set to YES (the default) Doxygen will # generate a legend page explaining the meaning of the various boxes and # arrows in the dot generated graphs. GENERATE_LEGEND = YES # If the DOT_CLEANUP tag is set to YES (the default) Doxygen will # remove the intermediate dot files that are used to generate # the various graphs. DOT_CLEANUP = YES #--------------------------------------------------------------------------- # Configuration::additions related to the search engine #--------------------------------------------------------------------------- # The SEARCHENGINE tag specifies whether or not a search engine should be # used. If set to NO the values of all tags below this one will be ignored. SEARCHENGINE = NO openvas-manager-6.0.9/doc/report-format-HOWTO000644 001751 001751 00000007165 12557600613 022066 0ustar00michaelmichael000000 000000 OPENVAS-MANAGER REPORT FORMAT HOWTO =================================== The OpenVAS Manager comes with a flexible report framework. There are numerous predefined report formats. Report formats can also be loaded at run time via the client protocol (OMP). Global report formats are visible to all users. Adding a report format to an existing OpenVAS Manager installation ------------------------------------------------------------------ Use the CREATE_REPORT_FORMAT OMP command to install the report format. The GSA provides an upload option for this on the "Report Formats" page. Developing a new report format for upload into a running OpenVAS Manager ------------------------------------------------------------------------ To create a new report format - Copy the source directory for one of the example reports included with the Manager source. They are located in openvas-manager/report_formats. - There is a "create_report_import" script in the directory. It contains the data that describes the new format, like the name and file extension. Modify the data to suit the new format. - There is also a script called "generate". This is what the Manager will run to generate a report in this format. The Manager will pass the script a single argument, the location of a file containing the OMP report (in XML, as returned by GET_REPORTS). The output of the "generate" script will be the resulting report. Modify this script to suit the new format. Typically the script will call xsltproc to transform the XML in some way. - Add any files required by the "generate" script to the directory. Typically this is a single XSLT file that is passed to xsltproc. - Update the "create_report_import" script to include the files added to the directory in the last step. These must be in alphabetical order for the signature to be reproducible. - Test the generate script - Get an OMP report (download the report with the GSA or do a GET_REPORTS request with some other client like the omp command, and extract the innermost REPORT element). A command like omp -R REPORT_ID | xmlstarlet sel -t -m /report -c report will do the trick. - Run the command . generate report.xml in the report format directory, where report.xml is the name of a file containing the report from the previous step. The output should be the required report. - Create the report format by running . create_report_import in the report format directory. This can be added to an existing installation as in the previous section. Creating a new predefined report format --------------------------------------- To add a new predefined global report format to OpenVAS Manager (typically in SVN): - Add a new directory in src/report_formats for the format. The directory must have the same name as the report. - Add a file called "generate" in this new directory. This is the generator shell script. The Manager passes this to bin/sh to create the report. The generator is passed a single argument: the location of a file containing the report as XML. - Add any files that the generator needs to the directory. Typically this is a single XSLT file. - In init_manage in src/manage_sql.c add code to initialise the format in the database. - Update src/CMakeLists.txt to install the new files in src/report_formats. - To create a feed signature for the report format change into src/report_formats and run the command ./create_signatures PREFIX/var/lib/openvas/mgr/tasks.db openvas-manager-6.0.9/doc/omp.rnc000644 001751 001751 00001300777 12757560562 017763 0ustar00michaelmichael000000 000000 #### OpenVAS Management Protocol (OMP) #### #### Version: 6.0 #### #### The "management" protocol of the Open Vulnerability Assessment System. ### Preamble start = command | response command = authenticate | commands | create_agent | create_config | create_alert | create_filter | create_group | create_lsc_credential | create_note | create_override | create_permission | create_port_list | create_port_range | create_report | create_report_format | create_role | create_scanner | create_schedule | create_slave | create_tag | create_target | create_task | create_user | delete_agent | delete_config | delete_alert | delete_filter | delete_group | delete_lsc_credential | delete_note | delete_override | delete_report | delete_permission | delete_port_list | delete_port_range | delete_report_format | delete_role | delete_scanner | delete_schedule | delete_slave | delete_tag | delete_target | delete_task | delete_user | describe_auth | describe_cert | describe_feed | describe_scap | empty_trashcan | get_agents | get_configs | get_aggregates | get_alerts | get_filters | get_groups | get_info | get_lsc_credentials | get_notes | get_nvts | get_nvt_families | get_nvt_feed_version | get_overrides | get_permissions | get_port_lists | get_preferences | get_reports | get_report_formats | get_results | get_roles | get_scanners | get_schedules | get_settings | get_slaves | get_system_reports | get_tags | get_targets | get_tasks | get_users | get_version | help | modify_agent | modify_alert | modify_auth | modify_config | modify_filter | modify_group | modify_lsc_credential | modify_note | modify_override | modify_permission | modify_port_list | modify_report | modify_report_format | modify_role | modify_scanner | modify_schedule | modify_setting | modify_slave | modify_target | modify_tag | modify_task | modify_user | restore | resume_task | run_wizard | start_task | stop_task | sync_cert | sync_feed | sync_scap | test_alert | verify_agent | verify_report_format response = authenticate_response | commands_response | create_agent_response | create_config_response | create_alert_response | create_filter_response | create_group_response | create_lsc_credential_response | create_note_response | create_override_response | create_permission_response | create_port_list_response | create_port_range_response | create_report_response | create_report_format_response | create_role_response | create_scanner_response | create_schedule_response | create_slave_response | create_tag_response | create_target_response | create_task_response | create_user_response | delete_agent_response | delete_config_response | delete_alert_response | delete_filter_response | delete_group_response | delete_lsc_credential_response | delete_note_response | delete_override_response | delete_report_response | delete_permission_response | delete_port_list_response | delete_port_range_response | delete_report_format_response | delete_role_response | delete_scanner_response | delete_schedule_response | delete_slave_response | delete_tag_response | delete_target_response | delete_task_response | delete_user_response | describe_auth_response | describe_cert_response | describe_feed_response | describe_scap_response | empty_trashcan_response | get_agents_response | get_configs_response | get_aggregates_response | get_alerts_response | get_filters_response | get_groups_response | get_info_response | get_lsc_credentials_response | get_notes_response | get_nvts_response | get_nvt_families_response | get_nvt_feed_version_response | get_overrides_response | get_permissions_response | get_port_lists_response | get_preferences_response | get_reports_response | get_report_formats_response | get_results_response | get_roles_response | get_scanners_response | get_schedules_response | get_settings_response | get_slaves_response | get_system_reports_response | get_tags_response | get_targets_response | get_tasks_response | get_users_response | get_version_response | help_response | modify_agent_response | modify_alert_response | modify_auth_response | modify_config_response | modify_filter_response | modify_group_response | modify_lsc_credential_response | modify_note_response | modify_override_response | modify_permission_response | modify_port_list_response | modify_report_response | modify_report_format_response | modify_role_response | modify_scanner_response | modify_schedule_response | modify_setting_response | modify_slave_response | modify_target_response | modify_tag_response | modify_task_response | modify_user_response | restore_response | resume_task_response | run_wizard_response | start_task_response | stop_task_response | sync_cert_response | sync_feed_response | sync_scap_response | test_alert_response | verify_agent_response | verify_report_format_response ### Data Types # An alive test. alive_test = xsd:token { pattern = "ICMP, TCP Service & ARP Ping|TCP Service & ARP Ping|ICMP & ARP Ping|ICMP & TCP Service Ping|ARP Ping|TCP Service Ping|ICMP Ping|Scan Config Default" } # Base64 encoded data. base64 = xsd:base64Binary # A true or false value. boolean = text # A true or false value, after conversion to an integer. boolean_atoi = text # A date and time, in the C `ctime' format. ctime = text # A name of a data type. type_name = xsd:Name # An integer. integer = xsd:integer # A date and time, in ISO 8601 format. iso_time = text # A string that may include the characters h, m, l, g and d. levels = xsd:token { pattern = "h?m?l?g?d?" } # A name. name = xsd:string # A port. port = xsd:token { pattern = "[0-9]{1,5}" } # A space separated list of users. user_list = text # An Object Identifier (OID). oid = xsd:token { pattern = "[0-9\.]{1,80}" } # A severity score. severity = xsd:token { pattern = "-[1-3](\.0)?|[0-9](\.[0-9])?|10(\.0)?" } # A string describing an order for sorting. sort_order = text # The success or failure status of a command. status = xsd:token { pattern = "200|201|202|400|401|403|404|409|500|503" } # A task run status. task_status = xsd:token { pattern = "Delete Requested|Done|New|Requested|Running|Stop Requested|Stopped|Internal Error" } # The trend of results for a task. task_trend = xsd:token { pattern = "up|down|more|less|same" } # A threat level. threat = xsd:token { pattern = "High|Medium|Low|Alarm|Log|Debug" } # A unit of time. time_unit = xsd:token { pattern = "second|minute|hour|day|week|month|year|decade" } # A timezone. timezone = text # A Universally Unique Identifier (UUID). uuid = xsd:token { pattern = "[0-9abcdefABCDEF\-]{1,40}" } # A Universally Unique Identifier (UUID), or the empty string. uuid_or_empty = xsd:token { pattern = "[0-9abcdefABCDEF\-]{0,40}" } ### Element Types ## Element Type c ## ## A reference to a command. c = element c { text } ## Element Type e ## ## A reference to an element. e = element e { text } ## Element Type r ## ## A reference to a response. r = element r { text } ## Element Type o ## ## An optional pattern item. o = element o { ( c | e | r | g ) } ## Element Type g ## ## A group of pattern items. g = element g { c* & e* & r* & o* & any* } ## Element Type any ## ## Pattern item indicating "any number of". any = element any { ( c | e | r | g ) } ## Element Type pattern ## ## The pattern element of a command or command descendant. pattern = element pattern { text & pattern_attrib* & c* & e* & r* & o* & g* & any* & pattern_t? } # An attribute. pattern_attrib = element attrib { pattern_attrib_name & pattern_attrib_type & pattern_attrib_required } pattern_attrib_name = element name { type_name } pattern_attrib_type = element type { type_name } pattern_attrib_required = element required { boolean } # The type of the text of the element. pattern_t = element t { type_name } ## Element Type command_definition ## ## Definition of a command in OMP describing HELP command. command_definition = element command_definition { command_definition_name & command_definition_summary? & command_definition_description? & ( ( command_definition_pattern & command_definition_response ) | ( command_definition_type & command_definition_ele* ) ) & command_definition_example* } # The name of the command. command_definition_name = element name { type_name } # A summary of the command. command_definition_summary = element summary { text } # A description of the command. command_definition_description = element description { text & command_definition_description_p* } # A paragraph. command_definition_description_p = element p { text } command_definition_pattern = element pattern # type pattern { text & pattern_attrib* & c* & e* & r* & o* & g* & any* & pattern_t? } command_definition_response = element response # type pattern { text & pattern_attrib* & c* & e* & r* & o* & g* & any* & pattern_t? } command_definition_example = element example { command_definition_example_summary? & command_definition_example_description? & command_definition_example_request & command_definition_example_response } command_definition_example_summary = element summary { text } command_definition_example_description = element description { text } # Example request. command_definition_example_request = element request { text } # Response to example request. command_definition_example_response = element response { text } # The type of the element. command_definition_type = element type { text } # An element. command_definition_ele = element ele # type command_definition { command_definition_name & command_definition_summary? & command_definition_description? & ( ( command_definition_pattern & command_definition_response ) | ( command_definition_type & command_definition_ele* ) ) & command_definition_example* } ## Element Type note ## ## A note. note = element note { attribute id { uuid } & note_permissions & note_owner & note_nvt & note_text & note_creation_time & note_modification_time & note_writable & note_in_use & note_active & note_orphan & note_user_tags & ( note_hosts & note_port & note_severity & note_threat & note_task & note_end_time? & note_result? )? } # Permissions that the current user has on the note. note_permissions = element permissions { note_permissions_permission* } note_permissions_permission = element permission { note_permissions_permission_name } # The name of the permission. note_permissions_permission_name = element name { name } # Owner of the note. note_owner = element owner { note_owner_name } # The name of the owner. note_owner_name = element name { name } note_nvt = element nvt { attribute oid { oid } & note_nvt_name } note_nvt_name = element name { name } # Date and time the note was created. note_creation_time = element creation_time { iso_time } # Date and time the note was last modified. note_modification_time = element modification_time { iso_time } note_writable = element writable { boolean } note_in_use = element in_use { boolean } # Whether the note is active. note_active = element active { boolean } # The text of the note. note_text = element text { text & # Whether the content is an excerpt of the full text. attribute excerpt { boolean } } # Whether the note is an orphan. note_orphan = element orphan { boolean } # Info on tags attached to the note. note_user_tags = element user_tags { note_user_tags_count & note_user_tags_tag* } # Number of attached tags. note_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). note_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & note_user_tags_tag_name & note_user_tags_tag_value & note_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). note_user_tags_tag_name = element name { text } # Value of the tag. note_user_tags_tag_value = element value { text } # Comment for the tag. note_user_tags_tag_comment = element comment { text } # A textual list of hosts. note_hosts = element hosts { text } # Port to which note applies. note_port = element port { text } # Severity to which note applies. note_severity = element severity { severity } # Threat level to which note applies. note_threat = element threat { threat } # Task to which note applies. note_task = element task { attribute id { uuid } } # Whether the note is active. note_active = element active { integer } # End time of the note in case of limit, else empty. note_end_time = element end_time { text } # Result to which note applies. note_result = element result { attribute id { uuid } & note_result_host & note_result_port & note_result_nvt & note_result_severity & note_result_threat & note_result_qod & note_result_description } note_result_host = element host { text } note_result_port = element port { text } note_result_nvt = element nvt { attribute oid { oid } & note_result_nvt_name & note_result_nvt_cvss_base & note_result_nvt_cve? & note_result_nvt_bid? } note_result_nvt_name = element name { name } note_result_nvt_cvss_base = element cvss_base { text } # CVE value associated with the NVT. note_result_nvt_cve = element cve { text } # BID associated with the NVT. note_result_nvt_bid = element bid { integer } note_result_severity = element severity { severity } note_result_threat = element threat { threat } # The quality of detection (QoD) of the result. note_result_qod = element qod { note_result_qod_value & note_result_qod_type } # The numeric QoD value. note_result_qod_value = element value { integer } # The QoD type. note_result_qod_type = element type { text } note_result_description = element description { text } ## Element Type override ## ## An override. override = element override { attribute id { uuid } & override_permissions & override_owner & override_nvt & override_creation_time & override_modification_time & override_writable & override_in_use & override_active & override_text & override_threat & override_severity & override_new_threat & override_new_severity & override_orphan & override_permissions & override_user_tags & ( override_hosts & override_port & override_task & override_end_time? & override_result? )? } # Permissions that the current user has on the note. override_permissions = element permissions { override_permissions_permission* } override_permissions_permission = element permission { override_permissions_permission_name } # The name of the permission. override_permissions_permission_name = element name { name } # Owner of the override. override_owner = element owner { override_owner_name } override_owner_name = element name { name } override_nvt = element nvt { attribute oid { oid } & override_nvt_name } override_nvt_name = element name { name } # Date and time the override was created. override_creation_time = element creation_time { iso_time } # Date and time the override was last modified. override_modification_time = element modification_time { iso_time } override_writable = element writable { boolean } override_in_use = element in_use { boolean } # Whether the override is currently active. override_active = element active { boolean } # The text of the override. override_text = element text { text & # Whether the contents is an excerpt of the full text. attribute excerpt { boolean } } # Threat level to which override applies, derived from severity. override_threat = element threat { threat } # Severity score to which override applies. override_severity = element severity { severity } # New threat for result. override_new_threat = element new_threat { threat } # New severity score for result. override_new_severity = element new_severity { severity } # Whether the override is an orphan. override_orphan = element orphan { boolean } # Info on tags attached to the override. override_user_tags = element user_tags { override_user_tags_count & override_user_tags_tag* } # Number of attached tags. override_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). override_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & override_user_tags_tag_name & override_user_tags_tag_value & override_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). override_user_tags_tag_name = element name { text } # Value of the tag. override_user_tags_tag_value = element value { text } # Comment for the tag. override_user_tags_tag_comment = element comment { text } # A textual list of hosts. override_hosts = element hosts { text } # Port to which override applies. override_port = element port { text } # Task to which override applies. override_task = element task { attribute id { uuid } } # Whether the override is active. override_active = element active { integer } # Override end time in case of limit, else empty. override_end_time = element end_time { text } # Result to which override applies. override_result = element result { attribute id { uuid } & override_result_host & override_result_port & override_result_nvt & override_result_threat & override_result_severity & override_result_qod & override_result_description } override_result_host = element host { text } override_result_port = element port { text } override_result_nvt = element nvt { attribute oid { oid } & override_result_nvt_name & override_result_nvt_cvss_base & override_result_nvt_cve? & override_result_nvt_bid? } override_result_nvt_name = element name { name } override_result_nvt_cvss_base = element cvss_base { text } # CVE value associated with the NVT. override_result_nvt_cve = element cve { text } # BID associated with the NVT. override_result_nvt_bid = element bid { integer } override_result_threat = element threat { threat } override_result_severity = element severity { severity } # The quality of detection (QoD) of the result. override_result_qod = element qod { override_result_qod_value & override_result_qod_type } # The numeric QoD value. override_result_qod_value = element value { integer } # The QoD type. override_result_qod_type = element type { text } override_result_description = element description { text } ## Element Type result ## ## A result. result = element result { attribute id { uuid } & result_name & result_owner & result_comment & result_creation_time & result_modification_time & result_user_tags? & result_report? & result_task? & result_host & result_port & result_nvt & result_scan_nvt_version & result_threat & result_severity & result_qod & result_original_threat? & result_original_severity? & result_description & result_delta? & result_details & result_detection & result_notes? & result_overrides? } # The name of the result. result_name = element name { text } # Owner of the result. result_owner = element owner { result_owner_name } # The name of the owner. result_owner_name = element name { name } # The comment on the result. result_comment = element comment { text } # Date and time the result was created. result_creation_time = element creation_time { iso_time } # Date and time the result was last modified. result_modification_time = element modification_time { iso_time } # Info on tags attached to the result (not in delta results). result_user_tags = element user_tags { result_user_tags_count & result_user_tags_tag* } # Number of attached tags. result_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). result_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & result_user_tags_tag_name & result_user_tags_tag_value & result_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). result_user_tags_tag_name = element name { text } # Value of the tag. result_user_tags_tag_value = element value { text } # Comment for the tag. result_user_tags_tag_comment = element comment { text } # Report the result belongs to (only when details were requested). result_report = element report { # UUID of the report the result belongs to. attribute id { uuid } } # Task the result applies to (only when details were requested). result_task = element task { # UUID of the task the result applies to. attribute id { uuid } & result_task_name } # Name of the task the result applies to. result_task_name = element name { text } result_host = element host { text } result_port = element port { text } # NVT to which result applies. result_nvt = element nvt { attribute oid { oid } & result_nvt_name & result_nvt_family & result_nvt_cvss_base & result_nvt_cve & result_nvt_bid & result_nvt_tags & result_nvt_cert & result_nvt_xref } # The name of the NVT. result_nvt_name = element name { name } # The family the NVT is in. result_nvt_family = element family { name } # CVSS base value associated with the NVT. result_nvt_cvss_base = element cvss_base { integer } # CVE associated with the NVT. result_nvt_cve = element cve { text } # BID associated with the NVT. result_nvt_bid = element bid { text } # Tags associated with the NVT. result_nvt_tags = element tags { text } # List of CERT advisories referencing this NVT via CVEs. result_nvt_cert = element cert { result_nvt_cert_cert_ref* } # A CERT advisory reference. result_nvt_cert_cert_ref = element cert_ref { # ID of the advisory. attribute id { text }? & # Type of the advisory (e.g. "DFN-CERT", "CERT-BUND"). attribute type { text }? } # XREFs associated with the NVT. result_nvt_xref = element xref { text } # Version of the NVT used in the scan. result_scan_nvt_version = element scan_nvt_version { text } result_threat = element threat { threat } result_severity = element severity { severity } # The quality of detection (QoD) of the result. result_qod = element qod { result_qod_value & result_qod_type } # The numeric QoD value. result_qod_value = element value { integer } # The QoD type. result_qod_type = element type { text } # Original threat when overridden. result_original_threat = element original_threat { threat } # Original severity when overridden. result_original_severity = element original_severity { severity } # Description of the result. result_description = element description { text } # Delta state. result_delta = element delta { text & result_delta_result? & result_delta_diff? & result_delta_notes? & result_delta_overrides? } # Delta result. result_delta_result = element result # type result { attribute id { uuid } & result_name & result_owner & result_comment & result_creation_time & result_modification_time & result_user_tags? & result_report? & result_task? & result_host & result_port & result_nvt & result_scan_nvt_version & result_threat & result_severity & result_qod & result_original_threat? & result_original_severity? & result_description & result_delta? & result_details & result_detection & result_notes? & result_overrides? } # Comparison between descriptions. result_delta_diff = element diff # type text { } # List of notes on the result. result_delta_notes = element notes { result_delta_notes_note* } result_delta_notes_note = element note # type note { attribute id { uuid } & note_permissions & note_owner & note_nvt & note_text & note_creation_time & note_modification_time & note_writable & note_in_use & note_active & note_orphan & note_user_tags & ( note_hosts & note_port & note_severity & note_threat & note_task & note_end_time? & note_result? )? } # List of overrides on the result. result_delta_overrides = element overrides { result_delta_overrides_override* } result_delta_overrides_override = element override # type override { attribute id { uuid } & override_permissions & override_owner & override_nvt & override_creation_time & override_modification_time & override_writable & override_in_use & override_active & override_text & override_threat & override_severity & override_new_threat & override_new_severity & override_orphan & override_permissions & override_user_tags & ( override_hosts & override_port & override_task & override_end_time? & override_result? )? } # Any details associated with the result. result_details = element details { result_details_detail* } # A detail associated with the result. result_details_detail = element detail { result_details_detail_name & result_details_detail_value } # The name of the detail. result_details_detail_name = element name { text } # The value of the detail. result_details_detail_value = element value { text } # Detection details. result_detection = element detection { result_detection_result } # Detection result. result_detection_result = element result { # UUID of the detection result. attribute id { uuid } & result_detection_result_details } result_detection_result_details = element details { result_detection_result_details_detail* } # A detail associated with the detection result. result_detection_result_details_detail = element detail { result_detection_result_details_detail_name & result_detection_result_details_detail_value } # The name of the detail. result_detection_result_details_detail_name = element name { text } # The value of the detail. result_detection_result_details_detail_value = element value { text } # List of notes on the result. result_notes = element notes { result_notes_note* } result_notes_note = element note # type note { attribute id { uuid } & note_permissions & note_owner & note_nvt & note_text & note_creation_time & note_modification_time & note_writable & note_in_use & note_active & note_orphan & note_user_tags & ( note_hosts & note_port & note_severity & note_threat & note_task & note_end_time? & note_result? )? } # List of overrides on the result. result_overrides = element overrides { result_overrides_override* } result_overrides_override = element override # type override { attribute id { uuid } & override_permissions & override_owner & override_nvt & override_creation_time & override_modification_time & override_writable & override_in_use & override_active & override_text & override_threat & override_severity & override_new_threat & override_new_severity & override_orphan & override_permissions & override_user_tags & ( override_hosts & override_port & override_task & override_end_time? & override_result? )? } ## Element Type report ## ## Actually attributes and either base64 or a report. report = element report { text # RNC limitation: base64 & attribute id { uuid } & attribute format_id { uuid } & attribute extension { text } & attribute content_type { text } & attribute type { xsd:token { pattern = "scan|assets|prognostic" } }? & report_owner & report_name & report_comment & report_creation_time & report_modification_time & report_writable & report_in_use & report_task & report_report_format & report_report } # Owner of the report. report_owner = element owner { report_owner_name } # The name of the owner. report_owner_name = element name { name } # Creation time as compatibility placeholder. report_name = element name { "" } # The comment on the report. report_comment = element comment { text } # Date and time the report was created. report_creation_time = element creation_time { iso_time } # Date and time the report was last modified. report_modification_time = element modification_time { iso_time } # Whether the report is in use. report_in_use = element in_use { boolean } # Whether the report is writable. report_writable = element writable { boolean } # The task the report belongs to. report_task = element task { attribute id { uuid } & report_task_name } # The name of the task. report_task_name = element name { name } # The report format used. report_report_format = element report_format { attribute id { uuid } & report_report_format_name } # The name of the report format. report_report_format_name = element name { name } report_report = element report { attribute id { uuid } & attribute type { xsd:token { pattern = "scan|assets|prognostic" } }? & report_report_omp & report_report_report_format & report_report_sort & report_report_filters & report_report_severity_class & report_report_delta? & ( report_report_timezone & report_report_timezone_abbrev & report_report_permissions & report_report_user_tags & report_report_scan_run_status & report_report_result_count & report_report_severity & report_report_host_count? & report_report_task & report_report_scan & report_report_ports & report_report_results & report_report_hosts & report_report_closed_cves & report_report_vulns & report_report_os & report_report_apps & report_report_ssl_certs & report_report_host* & report_report_timestamp & report_report_scan_start & report_report_host_start* & report_report_host_end* & report_report_scan_end & report_report_errors )? } # Information of the OMP server. report_report_omp = element omp { report_report_omp_version } # The OMP version. report_report_omp_version = element version { text } report_report_report_format = element report_format { report_report_report_format_param } # Report format parameter. report_report_report_format_param = element param { report_report_report_format_param_name & report_report_report_format_param_value } # Parameter name. report_report_report_format_param_name = element name { text } # Parameter value. report_report_report_format_param_value = element value { text } report_report_delta = element delta { report_report_delta_report } # Second report, for delta reports. report_report_delta_report = element report { attribute id { uuid } & report_report_delta_report_scan_run_status & report_report_delta_report_timestamp & report_report_delta_report_scan_start & report_report_delta_report_scan_end } # Run status of task scan at time of report. report_report_delta_report_scan_run_status = element scan_run_status { task_status } # The time the scan was requested. report_report_delta_report_timestamp = element timestamp { iso_time } # Start time of scan. report_report_delta_report_scan_start = element scan_start { iso_time } # End time of scan. report_report_delta_report_scan_end = element scan_end { iso_time } # Result sorting information. report_report_sort = element sort { report_report_sort_field } # Sort field. report_report_sort_field = element field { text & report_report_sort_field_order } # Sort order of field. report_report_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } # Result filtering information. report_report_filters = element filters { text # RNC limitation: levels & # Filter used if any, else 0. attribute id { uuid }? & report_report_filters_term & report_report_filters_phrase & report_report_filters_notes & report_report_filters_overrides & report_report_filters_apply_overrides & report_report_filters_result_hosts_only & report_report_filters_min_cvss_base & report_report_filters_min_qod & report_report_filters_autofp & report_report_filters_filter* & report_report_filters_host? & report_report_filters_delta? } # Filter term. report_report_filters_term = element term { text } # Search phrase. report_report_filters_phrase = element phrase { text } # Whether notes are included. report_report_filters_notes = element notes { xsd:token { pattern = "0|1" } } # Whether overrides are included. report_report_filters_overrides = element overrides { xsd:token { pattern = "0|1" } } # Whether overrides are applied. report_report_filters_apply_overrides = element apply_overrides { xsd:token { pattern = "0|1" } } # Whether only those hosts that have results are included. report_report_filters_result_hosts_only = element result_hosts_only { xsd:token { pattern = "0|1" } } # Minimum CVSS base if in effect, else empty string. report_report_filters_min_cvss_base = element min_cvss_base { text } # Minimum QoD if in effect, else empty string. report_report_filters_min_qod = element min_qod { text } # Whether to trust vendor security updates. 1 full match, 2 partial. report_report_filters_autofp = element autofp { xsd:token { pattern = "0|1|2" } } # Level filter. report_report_filters_filter = element filter { xsd:token { pattern = "High|Medium|Low|Log|Debug" } } report_report_filters_host = element host { report_report_filters_host_ip } # IP of single host in report (for "delta" and "prognostic"). report_report_filters_host_ip = element ip { text } # Delta states. report_report_filters_delta = element delta { text & report_report_filters_delta_changed & report_report_filters_delta_gone & report_report_filters_delta_new & report_report_filters_delta_same } # Whether changed results are included. report_report_filters_delta_changed = element changed { boolean } # Whether results that have vanished are included. report_report_filters_delta_gone = element gone { boolean } # Whether new results are included. report_report_filters_delta_new = element new { boolean } # Whether results that are equal are included. report_report_filters_delta_same = element same { boolean } # Name of timezone used for dates. report_report_timezone = element timezone { timezone } # Abbreviation used for timezone. report_report_timezone_abbrev = element timezone_abbrev { text } # Permissions that the current user has on the report. report_report_permissions = element permissions { report_report_permissions_permission* } report_report_permissions_permission = element permission { report_report_permissions_permission_name } # The name of the permission. report_report_permissions_permission_name = element name { name } # Info on tags attached to the report. report_report_user_tags = element user_tags { report_report_user_tags_count & report_report_user_tags_tag* } # Number of attached tags. report_report_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). report_report_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & report_report_user_tags_tag_name & report_report_user_tags_tag_value & report_report_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). report_report_user_tags_tag_name = element name { text } # Value of the tag. report_report_user_tags_tag_value = element value { text } # Comment for the tag. report_report_user_tags_tag_comment = element comment { text } # Run status of task scan at time of report. report_report_scan_run_status = element scan_run_status { task_status } # Counts of results produced by scan. report_report_result_count = element result_count { text & report_report_result_count_full & report_report_result_count_filtered & report_report_result_count_debug & report_report_result_count_hole & report_report_result_count_info & report_report_result_count_log & report_report_result_count_warning } # Total number of results produced by scan. report_report_result_count_full = element full { integer } # Number of results after filtering. report_report_result_count_filtered = element filtered { integer } # Number of "debug" results (threat level Debug). report_report_result_count_debug = element debug { report_report_result_count_debug_full & report_report_result_count_debug_filtered } # Total number of results. report_report_result_count_debug_full = element full { integer } # Number of results after filtering. report_report_result_count_debug_filtered = element filtered { integer } # Number of "hole" results (threat level High). report_report_result_count_hole = element hole { report_report_result_count_hole_full & report_report_result_count_hole_filtered } # Total number of results. report_report_result_count_hole_full = element full { integer } # Number of results after filtering. report_report_result_count_hole_filtered = element filtered { integer } # Number of "info" results (threat level Low). report_report_result_count_info = element info { report_report_result_count_info_full & report_report_result_count_info_filtered } # Total number of results. report_report_result_count_info_full = element full { integer } # Number of results after filtering. report_report_result_count_info_filtered = element filtered { integer } # Number of "log" results (threat level Log). report_report_result_count_log = element log { report_report_result_count_log_full & report_report_result_count_log_filtered } # Total number of results. report_report_result_count_log_full = element full { integer } # Number of results after filtering. report_report_result_count_log_filtered = element filtered { integer } # Number of "warning" results (threat level Medium). report_report_result_count_warning = element warning { report_report_result_count_warning_full & report_report_result_count_warning_filtered } # Total number of results. report_report_result_count_warning_full = element full { integer } # Number of results after filtering. report_report_result_count_warning_filtered = element filtered { integer } report_report_severity = element severity { report_report_severity_full & report_report_severity_filtered } # Maximum severity of the full report. report_report_severity_full = element full { severity } # Maximum severity of the report after filtering. report_report_severity_filtered = element filtered { severity } report_report_severity_class = element severity_class { report_report_severity_class_name & report_report_severity_class_full_name & report_report_severity_class_severity_range* } # Short severity class name. report_report_severity_class_name = element name { ERROR } # Full severity class name. report_report_severity_class_full_name = element full_name { text } # Severity range. report_report_severity_class_severity_range = element severity_range { report_report_severity_class_severity_range_name & report_report_severity_class_severity_range_min & report_report_severity_class_severity_range_max } # Name of severity range. report_report_severity_class_severity_range_name = element name { name } # Minimum CVSS value. report_report_severity_class_severity_range_min = element min { integer } # Maximum CVSS value. report_report_severity_class_severity_range_max = element max { integer } # Counts of hosts in the results. report_report_host_count = element host_count { report_report_host_count_full & report_report_host_count_filtered } # Total number of hosts. report_report_host_count_full = element full { integer } # Number of hosts after filtering. report_report_host_count_filtered = element filtered { integer } report_report_task = element task { attribute id { uuid } & report_report_task_name & report_report_task_comment & report_report_task_target & report_report_task_progress & report_report_task_user_tags } # The name of the task. report_report_task_name = element name { name } # Comment for the task. report_report_task_comment = element comment { text } # The target of the task. report_report_task_target = element target { # The UUID of the target. attribute id { uuid }? & report_report_task_target_trash } # Whether the target is in the trashcan. report_report_task_target_trash = element trash # type boolean { } # The percentage of the task that is complete. report_report_task_progress = element progress { integer } # Info on tags attached to the task. report_report_task_user_tags = element user_tags { report_report_task_user_tags_count & report_report_task_user_tags_tag* } # Number of attached tags. report_report_task_user_tags_count = element count { integer } # Short info on an individual tag. report_report_task_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & report_report_task_user_tags_tag_name & report_report_task_user_tags_tag_value & report_report_task_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). report_report_task_user_tags_tag_name = element name { text } # Value of the tag. report_report_task_user_tags_tag_value = element value { text } # Comment for the tag. report_report_task_user_tags_tag_comment = element comment { text } # Info from scan time. report_report_scan = element scan { report_report_scan_task } report_report_scan_task = element task { report_report_scan_task_slave & report_report_scan_task_preferences } # The task slave. report_report_scan_task_slave = element slave { attribute id { uuid } & report_report_scan_task_slave_name & report_report_scan_task_slave_host & report_report_scan_task_slave_port } report_report_scan_task_slave_name = element name { name } report_report_scan_task_slave_host = element host { text } report_report_scan_task_slave_port = element port { text } # Currently only "source_iface". report_report_scan_task_preferences = element preferences { report_report_scan_task_preferences_preference* } report_report_scan_task_preferences_preference = element preference { report_report_scan_task_preferences_preference_name & report_report_scan_task_preferences_preference_scanner_name & report_report_scan_task_preferences_preference_value } # Full name of preference, suitable for end users. report_report_scan_task_preferences_preference_name = element name { text } # Compact name of preference, from scanner. report_report_scan_task_preferences_preference_scanner_name = element scanner_name { text } report_report_scan_task_preferences_preference_value = element value { text } report_report_ports = element ports { attribute start { integer } & attribute max { integer } & report_report_ports_port* } report_report_ports_port = element port { text & report_report_ports_port_host & report_report_ports_port_severity & report_report_ports_port_threat } report_report_ports_port_host = element host { text } report_report_ports_port_severity = element severity { severity } report_report_ports_port_threat = element threat { threat } report_report_results = element results { attribute start { integer } & attribute max { integer } & report_report_results_result* } # A result. report_report_results_result = element result # type result { attribute id { uuid } & result_name & result_owner & result_comment & result_creation_time & result_modification_time & result_user_tags? & result_report? & result_task? & result_host & result_port & result_nvt & result_scan_nvt_version & result_threat & result_severity & result_qod & result_original_threat? & result_original_severity? & result_description & result_delta? & result_details & result_detection & result_notes? & result_overrides? } report_report_hosts = element hosts { ( ( attribute start { integer } & attribute max { integer } ) | report_report_hosts_count ) } # Number of hosts. report_report_hosts_count = element count { } # . report_report_closed_cves = element closed_cves { report_report_closed_cves_count } # The number of closed CVEs. report_report_closed_cves_count = element count { } # . report_report_vulns = element vulns { report_report_vulns_count } # The number of Vulnerabilities. report_report_vulns_count = element count { } # . report_report_os = element os { report_report_os_count } # The number of operating systems. report_report_os_count = element count { } # . report_report_apps = element apps { report_report_apps_count } # The number of Applications. report_report_apps_count = element count { } # . report_report_ssl_certs = element ssl_certs { report_report_ssl_certs_count } # The number of SSL certificates. report_report_ssl_certs_count = element count { } report_report_host = element host { report_report_host_ip & report_report_host_start & report_report_host_end & report_report_host_detail* } # IP of the host. report_report_host_ip = element ip { text } # Scan start time for this host. report_report_host_start = element start { text } # Scan end time for this host. report_report_host_end = element end { text } # A detail associated with the host. report_report_host_detail = element detail { report_report_host_detail_name & report_report_host_detail_value & report_report_host_detail_source } # The name of the detail. report_report_host_detail_name = element name { text } # The value of the detail. report_report_host_detail_value = element value { text } # Where the detail comes from. report_report_host_detail_source = element source { report_report_host_detail_source_type & report_report_host_detail_source_name & report_report_host_detail_source_description } # The type of the detail source. report_report_host_detail_source_type = element type { text } # The name of the detail source. report_report_host_detail_source_name = element name { text } # A description of the detail source. report_report_host_detail_source_description = element description { text } # The time the scan was requested. report_report_timestamp = element timestamp { iso_time } # Start time of scan. report_report_scan_start = element scan_start { iso_time } # Start time of a particular host. report_report_host_start = element host_start { text # RNC limitation: iso_time & report_report_host_start_host } report_report_host_start_host = element host { text } # End time of a particular host. report_report_host_end = element host_end { text # RNC limitation: iso_time & report_report_host_end_host } report_report_host_end_host = element host { text } # End time of scan. report_report_scan_end = element scan_end { iso_time } report_report_errors = element errors { report_report_errors_count & report_report_errors_error* } # The number of error messages. report_report_errors_count = element count { } # An error message. report_report_errors_error = element error { report_report_errors_error_host & report_report_errors_error_port & report_report_errors_error_description & report_report_errors_error_nvt & report_report_errors_error_scan_nvt_version & report_report_errors_error_severity } # The host of the error message. report_report_errors_error_host = element host { text } # The port of the error message. report_report_errors_error_port = element port { port } # The description of the error message. report_report_errors_error_description = element description { text } # The NVT that generated the error message. report_report_errors_error_nvt = element nvt { attribute oid { } & report_report_errors_error_nvt_name & report_report_errors_error_nvt_cvss_base } # The name of the NVT. report_report_errors_error_nvt_name = element name { text } # The base CVSS score of the NVT. report_report_errors_error_nvt_cvss_base = element cvss_base { severity } # The NVT version that generated the error. report_report_errors_error_scan_nvt_version = element scan_nvt_version { text } # The severity score of the error message. report_report_errors_error_severity = element severity { severity } ### Commands ## Command authenticate ## ## Authenticate with the manager. authenticate = element authenticate { authenticate_credentials } authenticate_credentials = element credentials { authenticate_credentials_username & authenticate_credentials_password } # The login name of the user. authenticate_credentials_username = element username { text } # The user's password. authenticate_credentials_password = element password { text } ## Command commands ## ## Run a list of commands. commands = element commands { ( authenticate | commands | create_agent | create_alert | create_config | create_filter | create_group | create_lsc_credential | create_note | create_override | create_permission | create_port_list | create_port_range | create_report_format | create_role | create_scanner | create_schedule | create_slave | create_tag | create_target | create_task | create_user | delete_agent | delete_alert | delete_config | delete_filter | delete_group | delete_lsc_credential | delete_note | delete_override | delete_permission | delete_report | delete_report_format | delete_role | delete_port_list | delete_port_range | delete_scanner | delete_schedule | delete_slave | delete_tag | delete_target | delete_task | delete_user | describe_auth | describe_cert | describe_feed | describe_scap | empty_trashcan | get_agents | get_alerts | get_configs | get_filters | get_groups | get_info | get_lsc_credentials | get_notes | get_nvts | get_nvt_families | get_nvt_feed_version | get_overrides | get_permissions | get_port_lists | get_preferences | get_reports | get_report_formats | get_results | get_roles | get_scanners | get_schedules | get_settings | get_slaves | get_system_reports | get_tags | get_targets | get_tasks | get_users | get_version | help | modify_agent | modify_alert | modify_auth | modify_config | modify_filter | modify_group | modify_lsc_credential | modify_note | modify_override | modify_permission | modify_port_list | modify_report | modify_report_format | modify_role | modify_scanner | modify_schedule | modify_setting | modify_slave | modify_tag | modify_target | modify_task | modify_user | restore | resume_task | run_wizard | start_task | stop_task | sync_feed | sync_scap | sync_cert | test_alert )* } ## Command create_agent ## ## Create an agent. create_agent = element create_agent { create_agent_installer & create_agent_name & create_agent_comment? & create_agent_copy? & create_agent_howto_install? & create_agent_howto_use? } # A file that installs the agent on a target machine. create_agent_installer = element installer { text # RNC limitation: base64 & create_agent_installer_signature } # A detached OpenPGP signature of the installer. create_agent_installer_signature = element signature { base64 } # A name for the installer. create_agent_name = element name { name } # A comment on the agent. create_agent_comment = element comment { text } # The UUID of an existing agent. create_agent_copy = element copy { uuid } # A file that describes how to install the agent. create_agent_howto_install = element howto_install { base64 } # A file that describes how to use the agent. create_agent_howto_use = element howto_use { base64 } ## Command create_config ## ## Create a config. create_config = element create_config { create_config_comment? & ( create_config_copy | get_configs_response ) & create_config_name } # A comment on the config. create_config_comment = element comment { text } # The UUID of an existing config. create_config_copy = element copy { uuid } # A name for the config. create_config_name = element name { name } ## Command create_alert ## ## Create an alert. create_alert = element create_alert { create_alert_name & create_alert_comment? & create_alert_copy? & create_alert_condition & create_alert_event & create_alert_method & create_alert_filter } # A name for the alert. create_alert_name = element name { name } # A comment on the alert. create_alert_comment = element comment { text } # The UUID of an existing alert. create_alert_copy = element copy { uuid } # The condition that must be satisfied for the alert to occur. create_alert_condition = element condition { text & create_alert_condition_data* } # Some data that defines the condition. create_alert_condition_data = element data { text & create_alert_condition_data_name } # The name of the condition data. create_alert_condition_data_name = element name { text } # The event that must happen for the alert to occur. create_alert_event = element event { text & create_alert_event_data* } # Some data that defines the event. create_alert_event_data = element data { text & create_alert_event_data_name } # The name of the event data. create_alert_event_data_name = element name { text } # The method by which the user is alerted. create_alert_method = element method { text & create_alert_method_data* } # Some data that defines the method. create_alert_method_data = element data { text & create_alert_method_data_name } # The name of the method data. create_alert_method_data_name = element name { text } # Filter to apply when executing alert. create_alert_filter = element filter { attribute id { uuid } } ## Command create_filter ## ## Create a filter. create_filter = element create_filter { create_filter_name & create_filter_comment? & create_filter_copy? & create_filter_term? & create_filter_type? } # A name for the filter. create_filter_name = element name { text # RNC limitation: name & create_filter_name_make_unique } # Whether to append a unique suffix if the name already exists. create_filter_name_make_unique = element make_unique { boolean } # A comment on the filter. create_filter_comment = element comment { text } # The UUID of an existing filter. create_filter_copy = element copy { uuid } # Filter term. create_filter_term = element term { text } # Resource type. create_filter_type = element type { text } ## Command create_group ## ## Create a group. create_group = element create_group { create_group_name & create_group_comment? & create_group_copy? & create_group_users? } # A name for the group. create_group_name = element name { name } # A comment on the group. create_group_comment = element comment { text } # The UUID of an existing group. create_group_copy = element copy { uuid } # Comma separated list of user names. create_group_users = element users { text } ## Command create_lsc_credential ## ## Create an LSC credential. create_lsc_credential = element create_lsc_credential { create_lsc_credential_name & create_lsc_credential_comment? & create_lsc_credential_copy? & create_lsc_credential_key? & create_lsc_credential_login & create_lsc_credential_password? } # A name for the LSC credential. create_lsc_credential_name = element name { name } # A comment on the LSC credential. create_lsc_credential_comment = element comment { text } # The UUID of an existing LSC credential. create_lsc_credential_copy = element copy { uuid } create_lsc_credential_key = element key { create_lsc_credential_key_phrase & create_lsc_credential_key_private } # Key passphrase. create_lsc_credential_key_phrase = element phrase { text } # Private key. create_lsc_credential_key_private = element private { text } # The user name of the credential. create_lsc_credential_login = element login { text } # The password for the credential login. create_lsc_credential_password = element password { text } ## Command create_note ## ## Create a note. create_note = element create_note { create_note_text & create_note_nvt & create_note_active? & create_note_comment? & create_note_copy? & create_note_hosts? & create_note_port? & create_note_result? & create_note_severity? & create_note_task? & create_note_threat? } # The text of the note. create_note_text = element text { text } # NVT to which note applies. create_note_nvt = element nvt { attribute oid { oid } } # Seconds note will be active. -1 on always, 0 off. create_note_active = element active { integer } # A comment on the note. create_note_comment = element comment { text } # The UUID of an existing note. create_note_copy = element copy { uuid } # A textual list of hosts. create_note_hosts = element hosts { text } # Port to which note applies. create_note_port = element port { text } # Result to which note applies. create_note_result = element result { attribute id { uuid } } # Severity to which note applies. create_note_severity = element severity { severity } # Task to which note applies. create_note_task = element task { attribute id { uuid } } # Threat level to which note applies. Will be converted to severity. create_note_threat = element threat { threat } ## Command create_override ## ## Create an override. create_override = element create_override { create_override_text & create_override_nvt & create_override_active? & create_override_comment? & create_override_copy? & create_override_hosts? & create_override_new_severity? & create_override_new_threat? & create_override_port? & create_override_result? & create_override_severity? & create_override_task? & create_override_threat? } # The text of the override. create_override_text = element text { text } # Seconds override will be active. -1 on always, 0 off. create_override_active = element active { integer } # NVT to which override applies. create_override_nvt = element nvt { attribute oid { oid } } # A comment on the override. create_override_comment = element comment { text } # The UUID of an existing override. create_override_copy = element copy { uuid } # A textual list of hosts. create_override_hosts = element hosts { text } # New severity for result. create_override_new_severity = element new_severity { severity } # New threat level for result, will be converted to a new_severity. create_override_new_threat = element new_threat { threat } # Port to which override applies. create_override_port = element port { text } # Result to which override applies. create_override_result = element result { attribute id { uuid } } # Severity score to which override applies. create_override_severity = element severity { severity } # Task to which override applies. create_override_task = element task { attribute id { uuid } } # Threat level to which override applies, will be converted to severity. create_override_threat = element threat { threat } ## Command create_permission ## ## Create a permission. create_permission = element create_permission { create_permission_name & create_permission_subject & create_permission_resource? & create_permission_copy? & create_permission_comment? } # A permission name, currently the name of a command. create_permission_name = element name { text } # A subject to whom the permission is granted. create_permission_subject = element subject { attribute id { uuid }? & create_permission_subject_type } # OMP type of the subject: user, group or role. create_permission_subject_type = element type { text } # A resource to which the permission applies. create_permission_resource = element resource { attribute id { uuid }? & create_permission_resource_type } # OMP type, for Super permissions: user, group or role. create_permission_resource_type = element type { text } # UUID of an existing permission to copy. create_permission_copy = element copy { uuid } # Comment on the permission. create_permission_comment = element comment { text } ## Command create_port_list ## ## Create a port list. create_port_list = element create_port_list { create_port_list_name & create_port_list_comment? & create_port_list_copy? & create_port_list_port_range & get_port_lists_response } # The name of the port list. create_port_list_name = element name { name } # A comment on the port list. create_port_list_comment = element comment { text } # The UUID of an existing agent. create_port_list_copy = element copy { uuid } # Comma or newline separated list of ranges. create_port_list_port_range = element port_range { text } ## Command create_port_range ## ## Create a port range. create_port_range = element create_port_range { create_port_range_comment? & create_port_range_port_list & create_port_range_start & create_port_range_end & create_port_range_type } # A comment on the port range. create_port_range_comment = element comment { text } # The port list to which to add the range. create_port_range_port_list = element port_list { attribute id { uuid } } # The first port in the range. create_port_range_start = element start { port } # The last port in the range. create_port_range_end = element end { port } # The type of the ports: TCP, UDP, .... create_port_range_type = element type { text } ## Command create_report ## ## Create a report. create_report = element create_report { create_report_report & create_report_task } # A report wrapper, as in the GET_REPORTS response. create_report_report = element report # type report { text # RNC limitation: base64 & attribute id { uuid } & attribute format_id { uuid } & attribute extension { text } & attribute content_type { text } & attribute type { xsd:token { pattern = "scan|assets|prognostic" } }? & report_owner & report_name & report_comment & report_creation_time & report_modification_time & report_writable & report_in_use & report_task & report_report_format & report_report } # Task for report: id to use existing task, name to create new task. create_report_task = element task { attribute id { uuid }? & create_report_task_name? & create_report_task_comment? } # The name of the task. create_report_task_name = element name { name } # Comment for the new task. create_report_task_comment = element comment { text } ## Command create_report_format ## ## Create a report format. create_report_format = element create_report_format { ( create_report_format_copy | get_report_formats_response ) } # The UUID of an existing report format. create_report_format_copy = element copy { uuid } ## Command create_role ## ## Create a role. create_role = element create_role { create_role_name & create_role_comment? & create_role_copy? & create_role_users? } # A name for the role. create_role_name = element name { name } # A comment on the role. create_role_comment = element comment { text } # The UUID of an existing role. create_role_copy = element copy { uuid } # Comma separated list of user names. create_role_users = element users { text } ## Command create_scanner ## ## Create a scanner. create_scanner = element create_scanner { create_scanner_name & create_scanner_comment? & create_scanner_copy? & create_scanner_host & create_scanner_port & create_scanner_type & create_scanner_ca_pub & create_scanner_key_pub & create_scanner_key_priv } # A name for the scanner. create_scanner_name = element name { name } # A comment on the scanner. create_scanner_comment = element comment { text } # The UUID of an existing scanner. create_scanner_copy = element copy { uuid } # The host of the scanner. create_scanner_host = element host { text } # The port of the scanner. create_scanner_port = element port { text } # The type of the scanner. create_scanner_type = element type { text } # Certificate of CA to verify scanner certificate.. create_scanner_ca_pub = element ca_pub { text } # Certificate to authenticate with to the Scanner.. create_scanner_key_pub = element key_pub { text } # Private key to authenticate with to the Scanner. create_scanner_key_priv = element key_priv { text } ## Command create_schedule ## ## Create a schedule. create_schedule = element create_schedule { create_schedule_name & create_schedule_comment? & create_schedule_copy? & create_schedule_first_time? & create_schedule_duration? & create_schedule_period? & create_schedule_timezone? } # A name for the schedule. create_schedule_name = element name { name } # A comment on the schedule. create_schedule_comment = element comment { text } # The UUID of an existing schedule. create_schedule_copy = element copy { uuid } # The first time the schedule will run. create_schedule_first_time = element first_time { create_schedule_first_time_minute & create_schedule_first_time_hour & create_schedule_first_time_day_of_month & create_schedule_first_time_month & create_schedule_first_time_year } create_schedule_first_time_minute = element minute { integer } create_schedule_first_time_hour = element hour { integer } create_schedule_first_time_day_of_month = element day_of_month { integer } create_schedule_first_time_month = element month { integer } create_schedule_first_time_year = element year { integer } # How long the Manager will run the scheduled task for. create_schedule_duration = element duration { create_schedule_duration_unit } # Duration time unit. create_schedule_duration_unit = element unit { time_unit } # How often the Manager will repeat the scheduled task. create_schedule_period = element period { create_schedule_period_unit } # Period time unit. create_schedule_period_unit = element unit { time_unit } # The timezone the schedule will follow. create_schedule_timezone = element timezone { timezone } ## Command create_slave ## ## Create a slave. create_slave = element create_slave { create_slave_name & create_slave_comment? & create_slave_copy? & create_slave_host & create_slave_port & create_slave_login & create_slave_password? } # A name for the slave. create_slave_name = element name { name } # A comment on the slave. create_slave_comment = element comment { text } # The UUID of an existing slave. create_slave_copy = element copy { uuid } # The host that the slave Manager is running on. create_slave_host = element host { text } # The port that the slave Manager is serving on the host. create_slave_port = element port { text } # Login name on the slave Manager. create_slave_login = element login { text } # Password for login on the slave Manager. create_slave_password = element password { text } ## Command create_tag ## ## Create a tag. create_tag = element create_tag { create_tag_name & create_tag_resource & create_tag_copy? & create_tag_value? & create_tag_comment? & create_tag_active? } # A full tag name consisting of namespace and predicate. create_tag_name = element name { text } # Identifies a resource the tag is to be attached to. create_tag_resource = element resource { # ID of the resource the tag is to be attached to. attribute id { uuid }? & create_tag_resource_type } # OMP type of the resource the tag is to be attached to. create_tag_resource_type = element type { text } # UUID of an existing tag to copy. create_tag_copy = element copy { uuid } # Value associated with the tag. create_tag_value = element value { text } # Comment to add to the tag. create_tag_comment = element comment { text } # Whether the tag is active. create_tag_active = element active { boolean } ## Command create_target ## ## Create a target. create_target = element create_target { create_target_name & create_target_comment? & create_target_copy? & create_target_hosts & create_target_exclude_hosts? & create_target_ssh_lsc_credential? & create_target_smb_lsc_credential? & create_target_esxi_lsc_credential? & create_target_alive_tests? & create_target_reverse_lookup_only? & create_target_reverse_lookup_unify? & create_target_port_range? & create_target_port_list? } # A name for the target. create_target_name = element name { text # RNC limitation: name & create_target_name_make_unique } # Whether to append a unique suffix if the name already exists. create_target_name_make_unique = element make_unique { boolean } # A comment on the target. create_target_comment = element comment { text } # The UUID of an existing target. create_target_copy = element copy { uuid } # A textual list of hosts, which may be empty. create_target_hosts = element hosts { text } # A list of hosts to exclude. create_target_exclude_hosts = element exclude_hosts { text } # SSH login credentials for target. create_target_ssh_lsc_credential = element ssh_lsc_credential { attribute id { uuid } & create_target_ssh_lsc_credential_port? } # The port the LSCs will use. create_target_ssh_lsc_credential_port = element port { text } # SMB login credentials for target. create_target_smb_lsc_credential = element smb_lsc_credential { attribute id { uuid } } # ESXi credential to use on target. create_target_esxi_lsc_credential = element esxi_lsc_credential { attribute id { uuid } } # Which alive tests to use. create_target_alive_tests = element alive_tests { alive_test } # Whether to scan only hosts that have names. create_target_reverse_lookup_only = element reverse_lookup_only { boolean } # Whether to scan only one IP when multiple IPs have the same name. create_target_reverse_lookup_unify = element reverse_lookup_unify { boolean } # Port range for the target. create_target_port_range = element port_range { text } # Port list for the target. create_target_port_list = element port_list { attribute id { uuid } } ## Command create_task ## ## Create a task. create_task = element create_task { create_task_name & create_task_comment? & create_task_copy? & create_task_alterable? & create_task_config & create_task_target & create_task_hosts_ordering? & create_task_scanner & create_task_alert* & create_task_schedule? & create_task_schedule_periods? & create_task_slave? & create_task_observers? & create_task_preferences? } # A name for the task. create_task_name = element name { name } # A comment on the task. create_task_comment = element comment { text } # The UUID of an existing task. create_task_copy = element copy { uuid } # Whether the task is alterable. create_task_alterable = element alterable { boolean } # The scan configuration used by the task. create_task_config = element config { attribute id { uuid } } # The hosts scanned by the task. create_task_target = element target { attribute id { uuid } } # The order hosts are scanned in. create_task_hosts_ordering = element hosts_ordering { text } # The scanner to use for scanning the target. create_task_scanner = element scanner { attribute id { uuid } } # An alert that applies to the task. create_task_alert = element alert { attribute id { uuid } } # When the task will run. create_task_schedule = element schedule { attribute id { uuid } } # A limit to the number of times the task will be scheduled, or 0 for no limit. create_task_schedule_periods = element schedule_periods { integer } # Slave that the task will run on. create_task_slave = element slave { attribute id { uuid } } # Users allowed to observe this task. create_task_observers = element observers { user_list } create_task_preferences = element preferences { create_task_preferences_preference* } create_task_preferences_preference = element preference { create_task_preferences_preference_scanner_name & create_task_preferences_preference_value } # Compact name of preference, from scanner. create_task_preferences_preference_scanner_name = element scanner_name { text } create_task_preferences_preference_value = element value { text } ## Command create_user ## ## Create a user. create_user = element create_user { create_user_name & create_user_copy? & create_user_hosts? & create_user_ifaces? & create_user_password? & create_user_role* } # The name of the user to be created. create_user_name = element name { text } # The UUID of an existing user. create_user_copy = element copy { uuid } # User access rules: a textual list of hosts. create_user_hosts = element hosts { text & # If 1, allow only listed, otherwise forbid listed. attribute allow { boolean }? } # User access rules: a textual list of ifaces. create_user_ifaces = element ifaces { text & # If 1, allow only listed, otherwise forbid listed. attribute allow { boolean }? } # The password for the user. create_user_password = element password { text } # A role of the user. create_user_role = element role { attribute id { uuid } } ## Command delete_agent ## ## Delete an agent. delete_agent = element delete_agent { attribute agent_id { uuid } & # Whether to remove entirely, or to the trashcan. attribute ultimate { boolean } } ## Command delete_config ## ## Delete a config. delete_config = element delete_config { attribute config_id { uuid } & # Whether to remove entirely, or to the trashcan. attribute ultimate { boolean } } ## Command delete_alert ## ## Delete an alert. delete_alert = element delete_alert { attribute alert_id { uuid } & # Whether to remove entirely, or to the trashcan. attribute ultimate { boolean } } ## Command delete_filter ## ## Delete a filter. delete_filter = element delete_filter { attribute filter_id { uuid } & # Whether to remove entirely, or to the trashcan. attribute ultimate { boolean } } ## Command delete_group ## ## Delete a group. delete_group = element delete_group { attribute group_id { uuid } & # Whether to remove entirely, or to the trashcan. attribute ultimate { boolean } } ## Command delete_lsc_credential ## ## Delete an LSC credential. delete_lsc_credential = element delete_lsc_credential { attribute lsc_credential_id { uuid } & # Whether to remove entirely, or to the trashcan. attribute ultimate { boolean } } ## Command delete_note ## ## Delete a note. delete_note = element delete_note { attribute note_id { uuid } & # Whether to remove entirely, or to the trashcan. attribute ultimate { boolean } } ## Command delete_override ## ## Delete an override. delete_override = element delete_override { attribute override_id { uuid } & # Whether to remove entirely, or to the trashcan. attribute ultimate { boolean } } ## Command delete_report ## ## Delete a report. delete_report = element delete_report { attribute report_id { uuid } } ## Command delete_permission ## ## Delete a permission. delete_permission = element delete_permission { attribute permission_id { uuid } & # Whether to remove entirely, or to the trashcan. attribute ultimate { boolean } } ## Command delete_port_list ## ## Delete a port list. delete_port_list = element delete_port_list { attribute port_list_id { uuid } & # Whether to remove entirely, or to the trashcan. attribute ultimate { boolean } } ## Command delete_port_range ## ## Delete a port range. delete_port_range = element delete_port_range { attribute port_range_id { uuid } } ## Command delete_report_format ## ## Delete a report format. delete_report_format = element delete_report_format { attribute report_format_id { uuid } & # Whether to remove entirely, or to the trashcan. attribute ultimate { boolean } } ## Command delete_role ## ## Delete a role. delete_role = element delete_role { attribute role_id { uuid } & # Whether to remove entirely, or to the trashcan. attribute ultimate { boolean } } ## Command delete_scanner ## ## Delete a scanner. delete_scanner = element delete_scanner { attribute scanner_id { uuid } & # Whether to remove entirely, or to the trashcan. attribute ultimate { boolean } } ## Command delete_schedule ## ## Delete a schedule. delete_schedule = element delete_schedule { attribute schedule_id { uuid } & # Whether to remove entirely, or to the trashcan. attribute ultimate { boolean } } ## Command delete_slave ## ## Delete a slave. delete_slave = element delete_slave { attribute slave_id { uuid } & # Whether to remove entirely, or to the trashcan. attribute ultimate { boolean } } ## Command delete_tag ## ## Delete a tag. delete_tag = element delete_tag { attribute tag_id { uuid } & # Whether to remove entirely, or to the trashcan. attribute ultimate { boolean } } ## Command delete_target ## ## Delete a target. delete_target = element delete_target { attribute target_id { uuid } & # Whether to remove entirely, or to the trashcan. attribute ultimate { boolean } } ## Command delete_task ## ## Delete a task. delete_task = element delete_task { attribute task_id { uuid } & # Whether to remove entirely, or to the trashcan. attribute ultimate { boolean } } ## Command delete_user ## ## Delete a user. delete_user = element delete_user { # The ID of the user to be deleted. Overrides name. attribute user_id { uuid } & delete_user_name } # The name of the user to be deleted. delete_user_name = element name { text } ## Command describe_auth ## ## Describe authentication methods. describe_auth = element describe_auth { "" } ## Command describe_cert ## ## Describe the CERT feed. describe_cert = element describe_cert { "" } ## Command describe_feed ## ## Describe the NVT feed. describe_feed = element describe_feed { "" } ## Command describe_scap ## ## Describe the SCAP feed. describe_scap = element describe_scap { "" } ## Command empty_trashcan ## ## Empty the trashcan. empty_trashcan = element empty_trashcan { "" } ## Command get_agents ## ## Get one or many agents. get_agents = element get_agents { # ID of single agent to get. attribute agent_id { uuid }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { uuid }? & # Whether to get the trashcan agents instead. attribute trash { boolean }? & # Whether to include agents package information when no format was provided. attribute details { boolean }? & attribute format { xsd:token { pattern = "installer|howto_install|howto_use" } }? } ## Command get_configs ## ## Get one or many configs. get_configs = element get_configs { # ID of single config to get. attribute config_id { uuid }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { uuid }? & # Whether to get the trashcan configs instead. attribute trash { boolean }? & # Whether to get config families, preferences, nvt selectors and tasks. attribute details { boolean }? & # Whether to include the families if no details are requested. attribute families { boolean }? & # Whether to include the preferences if no details are requested. attribute preferences { boolean }? & # Whether to get tasks using this config. attribute tasks { boolean }? } ## Command get_aggregates ## ## Get aggregates of various resources. get_aggregates = element get_aggregates { # Filter term to use to filter query of the resources to aggregate. attribute filter { text }? & # ID of filter to use to filter query of the resources to aggregate. attribute filt_id { uuid }? & # The OMP resource type to gather data from. attribute type { text } & # The column to get the data to aggregate from. attribute data_column { text }? & # The field to group the resources by. attribute group_column { text }? } ## Command get_alerts ## ## Get one or many alerts. get_alerts = element get_alerts { # ID of single alert to get. attribute alert_id { uuid }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { uuid }? & # Whether to get the trashcan alerts instead. attribute trash { boolean }? & # Whether to get the tasks using the alerts. attribute tasks { boolean }? } ## Command get_filters ## ## Get one or many filters. get_filters = element get_filters { # ID of single filter to get. attribute filter_id { uuid }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { uuid }? & # Whether to get the trashcan filters instead. attribute trash { boolean }? & # Whether to include list of alerts that use the filter. attribute alerts { boolean }? } ## Command get_groups ## ## Get one or many groups. get_groups = element get_groups { # ID of single group to get. attribute group_id { uuid }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { uuid }? & # Whether to get the trashcan groups instead. attribute trash { boolean }? } ## Command get_info ## ## Get information for items of given type. get_info = element get_info { # Type must be either CERT_BUND_ADV, CPE, CVE, DFN_CERT_ADV, OVALDEF, NVT or ALLINFO. attribute type { text } & # Name or identifier of the requested information. attribute name { text }? & # ID of single info to get. Conflicts with name. attribute info_id { text }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { uuid }? & # Whether to include information about references to this information. attribute details { boolean }? } ## Command get_lsc_credentials ## ## Get one or many LSC credentials. get_lsc_credentials = element get_lsc_credentials { # ID of single LSC credential to get. attribute lsc_credential_id { uuid }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { uuid }? & # Whether to get the trashcan LSC credentials instead. attribute trash { boolean }? & # Whether to include a list of targets using the credentials. attribute targets { boolean }? & attribute format { xsd:token { pattern = "key|rpm|deb|exe" } }? } ## Command get_notes ## ## Get one or many notes. get_notes = element get_notes { # ID of single note to get. attribute note_id { uuid }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { uuid }? & attribute nvt_oid { oid }? & attribute task_id { uuid }? & attribute details { boolean }? & attribute result { boolean }? } ## Command get_nvts ## ## Get one or many NVTs. get_nvts = element get_nvts { # Single NVT to get. attribute nvt_oid { oid } & # Whether to include full details. attribute details { boolean }? & # Whether to include preference. attribute preferences { boolean }? & # Whether to include preference count. attribute preference_count { boolean }? & # Whether to include the special timeout preference. attribute timeout { boolean }? & # ID of config to which to limit the NVT listing. attribute config_id { uuid }? & # Family to which to limit NVT listing. attribute family { text }? & attribute sort_order { sort_order }? & attribute sort_field { text }? } ## Command get_nvt_families ## ## Get a list of all NVT families. get_nvt_families = element get_nvt_families { attribute sort_order { sort_order }? } ## Command get_nvt_feed_version ## ## Get NVT Feed version. get_nvt_feed_version = element get_nvt_feed_version { } ## Command get_overrides ## ## Get one or many overrides. get_overrides = element get_overrides { # ID of single override to get. attribute override_id { uuid }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { uuid }? & attribute nvt_oid { oid }? & attribute task_id { uuid }? & attribute details { boolean }? & attribute result { boolean }? } ## Command get_permissions ## ## Get one or many permissions. get_permissions = element get_permissions { # ID of single permission to get. attribute permission_id { uuid }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { uuid }? & # Whether to get the trashcan permissions instead. attribute trash { boolean }? } ## Command get_port_lists ## ## Get one or many port lists. get_port_lists = element get_port_lists { # ID of single port list to get. attribute port_list_id { uuid }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { uuid }? & # Whether to include full port list details. attribute details { boolean }? & # Whether to include targets using this port list. attribute targets { boolean }? & # Whether to get the trashcan port lists instead. attribute trash { boolean }? } ## Command get_preferences ## ## Get one or many preferences. get_preferences = element get_preferences { attribute nvt_oid { oid }? & # ID of config of which to show preference values. attribute config_id { uuid }? & # The name of a particular preference to get. attribute preference { text }? } ## Command get_reports ## ## Get one or many reports. get_reports = element get_reports { # ID of single report to get. attribute report_id { uuid }? & # Filter term to use to filter results, when getting a single report. attribute filter { text }? & # ID of filter to use to filter results, when getting a single report. attribute filt_id { uuid }? & # Filter term to use to filter reports. attribute report_filter { uuid }? & # ID of filter to use to filter reports. attribute report_filt_id { uuid }? & # Type of report to get. attribute type { xsd:token { pattern = "scan|assets|prognostic" } }? & # ID of required report format. attribute format_id { uuid }? & # ID of alert to pass generated report to. attribute alert_id { uuid }? & # First result to get. attribute first_result { integer }? & # Maximum number of results to get. attribute max_results { integer }? & attribute sort_order { sort_order }? & attribute sort_field { text }? & # Whether to apply overrides to the results. attribute apply_overrides { boolean }? & # Which threat levels to include in the report. attribute levels { levels }? & # A string that all results in the report must contain. attribute search_phrase { text }? & # Minimum CVSS base of results in report. attribute min_cvss_base { integer }? & # Minimum QoD of results in report. attribute min_qod { integer }? & # Whether to include notes in the report. attribute notes { boolean }? & # If notes are included, whether to include note details. attribute note_details { boolean }? & # Whether to include overrides in the report. attribute overrides { boolean }? & # If overrides are included, whether to include override details. attribute override_details { boolean }? & # Whether to include only those hosts that have results. attribute result_hosts_only { boolean }? & # For "assets" or "prognostic", single host to retrieve. attribute host { text }? & # For "assets" or "prognostic", first host to retrieve. attribute host_first_result { integer }? & # For "assets" or "prognostic", maximum hosts to retrieve. attribute host_max_results { integer }? & # For "assets" or "prognostic", which threat levels to include in hosts. attribute host_levels { levels }? & # For "assets" or "prognostic", the search phrase to limit hosts to. attribute host_search_phrase { text }? & # For type "assets", position of report used, from end. attribute pos { integer }? & # ID of second report, for producing a delta report. attribute delta_report_id { uuid }? & # Letters for results to include: c)hanged, g)one, n)ew, s)ame. attribute delta_states { }? & # Whether to trust vendor security updates. 1 full match, 2 partial. attribute autofp { xsd:token { pattern = "0|1|2" } }? & # Whether to include only hosts with results. attribute result_hosts_only { boolean }? & # Whether to ignore info used to split the report into pages like the filter terms "first" and "rows".. attribute ignore_pagination { boolean }? & # The timezone to use for dates in the report. attribute timezone { timezone }? } ## Command get_report_formats ## ## Get one or many report formats. get_report_formats = element get_report_formats { # ID of single report format to get. attribute report_format_id { uuid }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { uuid }? & # Whether to get the trashcan report formats instead. attribute trash { boolean }? & # Whether to include alerts that use the report format. attribute alerts { boolean }? & # Whether to include report format parameters. attribute params { boolean }? & # Include report format file, signature and parameters. attribute details { boolean }? } ## Command get_results ## ## Get results. get_results = element get_results { # ID of single result to get. attribute result_id { uuid }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { uuid }? & # ID of task for note and override handling. attribute task_id { uuid }? & # Whether to include notes in the result. attribute notes { boolean }? & # If notes are included, whether to include note details. attribute note_details { boolean }? & # Whether to include overrides in the result. attribute overrides { boolean }? & # If overrides are included, whether to include override details. attribute override_details { boolean }? & # Whether to override result threat levels. attribute apply_overrides { boolean }? & # Whether to trust vendor security updates. 1 full match, 2 partial. attribute autofp { xsd:token { pattern = "0|1|2" } }? & # Whether to include additional details of the results. attribute details { boolean }? } ## Command get_roles ## ## Get one or many roles. get_roles = element get_roles { # ID of single role to get. attribute role_id { uuid }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { uuid }? & # Whether to get the trashcan roles instead. attribute trash { boolean }? } ## Command get_scanners ## ## Get one or many scanners. get_scanners = element get_scanners { # ID of single scanner to get. attribute scanner_id { uuid }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { uuid }? & # Whether to get the trashcan scanners instead. attribute trash { boolean }? & # Whether to include extra details like tasks using this scanner. attribute details { boolean }? } ## Command get_schedules ## ## Get one or many schedules. get_schedules = element get_schedules { # ID of single schedule to get. attribute schedule_id { uuid }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { uuid }? & # Whether to get the trashcan schedules instead. attribute trash { boolean }? & # Whether to include tasks using the schedules. attribute tasks { boolean }? } ## Command get_settings ## ## Get one or many settings. get_settings = element get_settings { # ID of single setting to get. attribute setting_id { uuid }? & # Filter term. attribute filter { text }? & # First result. attribute first { integer }? & # Maximum number of results in response. attribute max { integer }? & attribute sort_order { sort_order }? & attribute sort_field { text }? } ## Command get_slaves ## ## Get one or many slaves. get_slaves = element get_slaves { # ID of single slave to get. attribute slave_id { uuid }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { uuid }? & # Whether to get the trashcan slaves instead. attribute trash { boolean }? & # Whether to include a list of tasks using the slave. attribute tasks { boolean }? } ## Command get_system_reports ## ## Get one or many system reports. get_system_reports = element get_system_reports { # A string describing the required report. attribute name { text }? & # The number of seconds into the past that the report should include. attribute duration { integer }? & # Whether to include the actual reports. attribute brief { boolean }? & # Slave from which to get report. attribute slave_id { uuid }? } ## Command get_tags ## ## Get one or many tags. get_tags = element get_tags { # ID of single tag to get. attribute tag_id { uuid }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { text }? & # Whether to get tags from the trashcan instead. attribute trash { boolean }? & # Whether to get only distinct tag names. attribute names_only { boolean }? } ## Command get_targets ## ## Get one or many targets. get_targets = element get_targets { # ID of single target to get. attribute target_id { uuid }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { uuid }? & # Whether to get the trashcan targets instead. attribute trash { boolean }? & # Whether to include list of tasks that use the target. attribute tasks { boolean }? } ## Command get_tasks ## ## Get one or many tasks. get_tasks = element get_tasks { # ID of single task to get. attribute task_id { uuid }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { uuid }? & # Whether to get the trashcan tasks instead. attribute trash { boolean }? & # Whether to include full task details. attribute details { boolean }? } ## Command get_users ## ## Get one or many users. get_users = element get_users { # ID of single user to get. attribute user_id { uuid }? & # Filter term to use to filter query. attribute filter { text }? & # ID of filter to use to filter query. attribute filt_id { uuid }? } ## Command get_version ## ## Get the OpenVAS Manager Protocol version. get_version = element get_version { "" } ## Command help ## ## Get the help text. help = element help { # Required help format. attribute format { xsd:token { pattern = "html|HTML|rnc|RNC|text|TEXT|xml|XML" } }? & # Help type, currently only blank or "brief" for XML format. attribute type { xsd:token { pattern = "brief|" } }? } ## Command modify_agent ## ## Modify an existing agent. modify_agent = element modify_agent { # ID of agent to modify. attribute agent_id { uuid } & modify_agent_name? & modify_agent_comment? } # Comment on agent. modify_agent_comment = element comment { text } # Name of agent. modify_agent_name = element name { name } ## Command modify_alert ## ## Modify an existing alert. modify_alert = element modify_alert { # ID of alert to modify. attribute alert_id { uuid } & modify_alert_name? & modify_alert_comment? & modify_alert_filter? & modify_alert_event? & modify_alert_condition? & modify_alert_method? } # Name of alert. modify_alert_name = element name { name } # Comment on alert. modify_alert_comment = element comment { text } # The condition that must be satisfied for the alert to occur. modify_alert_condition = element condition { text & modify_alert_condition_data* } # Some data that defines the condition. modify_alert_condition_data = element data { text & modify_alert_condition_data_name } # The name of the condition data. modify_alert_condition_data_name = element name { text } # The event that must happen for the alert to occur. modify_alert_event = element event { text & modify_alert_event_data* } # Some data that defines the event. modify_alert_event_data = element data { text & modify_alert_event_data_name } # The name of the event data. modify_alert_event_data_name = element name { text } # The method by which the user is alerted. modify_alert_method = element method { text & modify_alert_method_data* } # Some data that defines the method. modify_alert_method_data = element data { text & modify_alert_method_data_name } # The name of the method data. modify_alert_method_data_name = element name { text } # Filter to apply when executing alert. modify_alert_filter = element filter { attribute id { uuid } } ## Command modify_auth ## ## Modify the authentication methods. modify_auth = element modify_auth { modify_auth_group } modify_auth_group = element group { modify_auth_group_auth_conf_setting* } # A setting to modify. modify_auth_group_auth_conf_setting = element auth_conf_setting { attribute key { text } & attribute value { text } } ## Command modify_config ## ## Modify an existing config. modify_config = element modify_config { # ID of config to modify. attribute config_id { uuid } & ( modify_config_name | modify_config_comment | modify_config_preference | modify_config_family_selection | modify_config_nvt_selection ) } # New name for the config. modify_config_name = element name { name } # New comment for the config. modify_config_comment = element comment { text } modify_config_preference = element preference { modify_config_preference_name & modify_config_preference_nvt? & modify_config_preference_value? } # The name of the preference to modify. modify_config_preference_name = element name { name } # NVT associated with preference to modify. modify_config_preference_nvt = element nvt { attribute oid { oid } } # New value for preference. modify_config_preference_value = element value { base64 } modify_config_family_selection = element family_selection { modify_config_family_selection_growing? & modify_config_family_selection_family* } # Whether new families should be added to the config. modify_config_family_selection_growing = element growing { boolean_atoi } modify_config_family_selection_family = element family { modify_config_family_selection_family_all? & modify_config_family_selection_family_growing? & modify_config_family_selection_family_name } # Whether to select all NVTs initially. modify_config_family_selection_family_all = element all { boolean_atoi } # Whether to add newly arrived nvts to the selection. modify_config_family_selection_family_growing = element growing { boolean_atoi } modify_config_family_selection_family_name = element name { name } modify_config_nvt_selection = element nvt_selection { modify_config_nvt_selection_family & modify_config_nvt_selection_nvt* } # Name of family to modify. modify_config_nvt_selection_family = element family { name } modify_config_nvt_selection_nvt = element nvt { attribute oid { oid } } ## Command modify_filter ## ## Modify an existing filter. modify_filter = element modify_filter { # ID of filter to modify. attribute filter_id { uuid } & modify_filter_comment? & modify_filter_name? & modify_filter_term? & modify_filter_type? } # Comment on filter. modify_filter_comment = element comment { text } # Name of filter. modify_filter_name = element name { name } # Filter term. modify_filter_term = element term { text } # Resource type filter applies to. modify_filter_type = element type { text } ## Command modify_group ## ## Modify an existing group. modify_group = element modify_group { # ID of group to modify. attribute group_id { uuid } & modify_group_name? & modify_group_comment? & modify_group_users? } # Name of group. modify_group_name = element name { name } # Comment on group. modify_group_comment = element comment { text } # Comma separated list of user names. modify_group_users = element users { text } ## Command modify_lsc_credential ## ## Modify an existing LSC credential. modify_lsc_credential = element modify_lsc_credential { # ID of LSC credential to modify. attribute lsc_credential_id { uuid } & modify_lsc_credential_comment? & modify_lsc_credential_name? & modify_lsc_credential_password? & modify_lsc_credential_login? } # A name for the LSC credential. modify_lsc_credential_name = element name { name } # A comment on the LSC credential. modify_lsc_credential_comment = element comment { text } # The user name of the credential. modify_lsc_credential_login = element login { text } # The password for the credential login. modify_lsc_credential_password = element password { text } ## Command modify_note ## ## Modify an existing note. modify_note = element modify_note { # ID of note to modify. attribute note_id { uuid } & modify_note_active? & modify_note_hosts? & modify_note_port? & modify_note_result? & modify_note_severity? & modify_note_task? & modify_note_text & modify_note_threat? } # Seconds note will be active. -1 on always, 0 off. modify_note_active = element active { integer } # A textual list of hosts. modify_note_hosts = element hosts { text } # Port to which note applies. modify_note_port = element port { text } # Severity to which note applies. modify_note_severity = element severity { severity } # The text of the note. modify_note_text = element text { text } # Threat level to which note applies. modify_note_threat = element threat { threat } # Task to which note applies. modify_note_task = element task { attribute id { uuid } } # Result to which note applies. modify_note_result = element result { attribute id { uuid } } ## Command modify_override ## ## Modify an existing override. modify_override = element modify_override { # ID of override to modify. attribute override_id { uuid } & modify_override_active? & modify_override_hosts? & modify_override_new_severity? & modify_override_new_threat? & modify_override_port? & modify_override_result? & modify_override_task? & modify_override_text & modify_override_severity? & modify_override_threat? } # Seconds override will be active. -1 on always, 0 off. modify_override_active = element active { integer } # A textual list of hosts. modify_override_hosts = element hosts { text } # New severity score for result. modify_override_new_severity = element new_severity { severity } # New threat level for result. modify_override_new_threat = element new_threat { threat } # Port to which override applies. modify_override_port = element port { text } # Text describing the override. modify_override_text = element text { text } # Severity score to which override applies. modify_override_severity = element severity { severity } # Threat level to which override applies. modify_override_threat = element threat { threat } # Task to which override applies. modify_override_task = element task { attribute id { uuid } } # Result to which override applies. modify_override_result = element result { attribute id { uuid } } ## Command modify_permission ## ## Modify a permission. modify_permission = element modify_permission { attribute permission_id { uuid } & modify_permission_name? & modify_permission_comment? & modify_permission_resource? & modify_permission_subject? } # Permission name, currently the name of a command. modify_permission_name = element name { text } # The comment on the permission. modify_permission_comment = element comment { text } # A resource to which the permission applies. modify_permission_resource = element resource { # UUID if permission applies to resource, else 0. attribute id { uuid }? & modify_permission_resource_type } # OMP type, for Super permissions: user, group or role. modify_permission_resource_type = element type { text } # A subject to whom the permission is granted. modify_permission_subject = element subject { attribute id { uuid }? & modify_permission_subject_type } # OMP type of the subject: user, group or role. modify_permission_subject_type = element type { text } ## Command modify_port_list ## ## Modify an existing port list. modify_port_list = element modify_port_list { # ID of port list to modify. attribute port_list_id { uuid } & modify_port_list_name? & modify_port_list_comment? } # Name of port list. modify_port_list_name = element name { name } # Comment on port list. modify_port_list_comment = element comment { text } ## Command modify_report ## ## Modify an existing report. modify_report = element modify_report { # ID of report to modify. attribute report_id { uuid } & modify_report_comment } # The comment on the report. modify_report_comment = element comment { text } ## Command modify_report_format ## ## Update an existing report format. modify_report_format = element modify_report_format { # ID of report format to modify. attribute report_format_id { uuid } & ( modify_report_format_active | modify_report_format_name | modify_report_format_summary | modify_report_format_param ) } # Whether the report format is active. modify_report_format_active = element active { boolean } # The name of the report format. modify_report_format_name = element name { name } # A summary of the report format. modify_report_format_summary = element summary { text } modify_report_format_param = element param { modify_report_format_param_name & modify_report_format_param_value? } # The name of the param. modify_report_format_param_name = element name { name } # New value for the param. modify_report_format_param_value = element value { base64 } ## Command modify_role ## ## Modify an existing role. modify_role = element modify_role { # ID of role to modify. attribute role_id { uuid } & modify_role_name? & modify_role_comment? & modify_role_users? } # Name of role. modify_role_name = element name { name } # Comment on role. modify_role_comment = element comment { text } # Comma separated list of user names. modify_role_users = element users { text } ## Command modify_scanner ## ## Modify an existing scanner. modify_scanner = element modify_scanner { # ID of scanner to modify. attribute scanner_id { uuid } & modify_scanner_comment? & modify_scanner_name? & modify_scanner_host & modify_scanner_port & modify_scanner_type & modify_scanner_ca_pub? & modify_scanner_key_pub? & modify_scanner_key_priv? } # Comment on scanner. modify_scanner_comment = element comment { text } # Name of scanner. modify_scanner_name = element name { name } # Host of the scanner. modify_scanner_host = element host { text } # Port of the scanner. modify_scanner_port = element port { text } # Type of the scanner. '1' for OSP, '2' for OpenVAS (classic) Scanner. modify_scanner_type = element type { text } # Certificate of CA to verify scanner's certificate. modify_scanner_ca_pub = element ca_pub { text } # Certificate of credentials to authenticate with to scanner. modify_scanner_key_pub = element key_pub { text } # Private key of credentials to authenticate with to scanner. modify_scanner_key_priv = element key_priv { text } ## Command modify_schedule ## ## Modify an existing schedule. modify_schedule = element modify_schedule { # ID of schedule to modify. attribute schedule_id { uuid } & modify_schedule_comment? & modify_schedule_name? & modify_schedule_first_time? & modify_schedule_duration? & modify_schedule_period? & modify_schedule_timezone? } # Comment on schedule. modify_schedule_comment = element comment { text } # Name of schedule. modify_schedule_name = element name { name } # First time the task will run. Missing subelements default to current system time. modify_schedule_first_time = element first_time { modify_schedule_first_time_day_of_month? & modify_schedule_first_time_hour? & modify_schedule_first_time_minute? & modify_schedule_first_time_month? & modify_schedule_first_time_year? } modify_schedule_first_time_day_of_month = element day_of_month { text } modify_schedule_first_time_hour = element hour { text } modify_schedule_first_time_minute = element minute { text } modify_schedule_first_time_month = element month { text } modify_schedule_first_time_year = element year { text } # The timezone the schedule will follow. User's timezone is used if omitted. modify_schedule_timezone = element timezone { timezone } # How long the task will run for. modify_schedule_duration = element duration { text & modify_schedule_duration_unit? } modify_schedule_duration_unit = element unit { time_unit } # How often the task will run. modify_schedule_period = element period { text & modify_schedule_period_unit? } modify_schedule_period_unit = element unit { time_unit } ## Command modify_setting ## ## Modify an existing setting. modify_setting = element modify_setting { attribute setting_id { uuid }? & modify_setting_name & modify_setting_value } # The name of the setting. modify_setting_name = element name { text } # The value of the setting. modify_setting_value = element value { text } ## Command modify_slave ## ## Modify an existing slave. modify_slave = element modify_slave { # ID of slave to modify. attribute slave_id { uuid } & modify_slave_name & modify_slave_comment? & modify_slave_host & modify_slave_port & modify_slave_login & modify_slave_password } # A name for the slave. modify_slave_name = element name { name } # A comment on the slave. modify_slave_comment = element comment { text } # The host that the slave Manager is running on. modify_slave_host = element host { text } # The port that the slave Manager is serving on the host. modify_slave_port = element port { text } # Login name on the slave Manager. modify_slave_login = element login { text } # Password for login on the slave Manager. modify_slave_password = element password { text } ## Command modify_target ## ## Modify an existing target. modify_target = element modify_target { # ID of target to modify. attribute target_id { uuid } & modify_target_comment? & modify_target_name? & modify_target_hosts? & modify_target_hosts_ordering? & modify_target_exclude_hosts? & modify_target_ssh_lsc_credential? & modify_target_smb_lsc_credential? & modify_target_esxi_lsc_credential? & modify_target_port_list? & modify_target_alive_tests? & modify_target_reverse_lookup_only? & modify_target_reverse_lookup_unify? } # Comment on target. modify_target_comment = element comment { text } # Name of target. modify_target_name = element name { name } # Target hosts. modify_target_hosts = element hosts { text } # The order hosts are scanned in. modify_target_hosts_ordering = element hosts_ordering { text } # A list of hosts to exclude. modify_target_exclude_hosts = element exclude_hosts { text } # SSH credential to use on target. modify_target_ssh_lsc_credential = element ssh_lsc_credential { attribute id { uuid } } # SMB credential to use on target. modify_target_smb_lsc_credential = element smb_lsc_credential { attribute id { uuid } } # ESXi credential to use on target. modify_target_esxi_lsc_credential = element esxi_lsc_credential { attribute id { uuid } } # Port List describing ports to scan. modify_target_port_list = element port_list { attribute id { uuid } } # Which alive tests to use. modify_target_alive_tests = element alive_tests { alive_test } # Whether to scan only hosts that have names. modify_target_reverse_lookup_only = element reverse_lookup_only { boolean } # Whether to scan only one IP when multiple IPs have the same name. modify_target_reverse_lookup_unify = element reverse_lookup_unify { boolean } ## Command modify_tag ## ## Modify a tag. modify_tag = element modify_tag { attribute tag_id { uuid } & modify_tag_name? & modify_tag_resource? & modify_tag_value? & modify_tag_comment? & modify_tag_active? } # A full tag name consisting of namespace and predicate. modify_tag_name = element name { text } # Identifies a resource the tag is to be attached to. modify_tag_resource = element resource { # ID of the resource the tag is to be attached to. attribute id { uuid }? & modify_tag_resource_type } # OMP type of the resource the tag is to be attached to. modify_tag_resource_type = element type { text } # Value associated with the tag. modify_tag_value = element value { text } # Comment to add to the tag. modify_tag_comment = element comment { text } # Whether the tag is active. modify_tag_active = element active { boolean } ## Command modify_task ## ## Modify an existing task. modify_task = element modify_task { # ID of task to modify. attribute task_id { uuid } & ( modify_task_comment | modify_task_alert* | modify_task_name | modify_task_observers | modify_task_preferences | modify_task_schedule | modify_task_schedule_periods | modify_task_scanner | modify_task_slave | modify_task_file ) } # The comment on the task. modify_task_comment = element comment { text } # Task alert. modify_task_alert = element alert { attribute id { uuid } } # The name of the task. modify_task_name = element name { name } # Users allowed to observe this task. modify_task_observers = element observers { user_list } modify_task_preferences = element preferences { modify_task_preferences_preference* } modify_task_preferences_preference = element preference { modify_task_preferences_preference_scanner_name & modify_task_preferences_preference_value } # Compact name of preference, from scanner. modify_task_preferences_preference_scanner_name = element scanner_name { text } modify_task_preferences_preference_value = element value { text } # Task schedule. modify_task_schedule = element schedule { attribute id { uuid } } # A limit to the number of times the task will be scheduled, or 0 for no limit. modify_task_schedule_periods = element schedule_periods { integer } # Task scanner. modify_task_scanner = element scanner { attribute id { uuid } } # Task slave. modify_task_slave = element slave { attribute id { uuid } } # File to attach to task. modify_task_file = element file { text # RNC limitation: base64 & attribute name { text } & attribute action { xsd:token { pattern = "update|remove" } } } ## Command modify_user ## ## Modify a user. modify_user = element modify_user { # ID of the user to be modified. Overrides NAME element. attribute user_id { uuid } & modify_user_name & modify_user_new_name? & modify_user_password? & modify_user_role* & modify_user_hosts? & modify_user_ifaces? & modify_user_sources? } # The name of the user to be modified. modify_user_name = element name { text } # The new name for the user. modify_user_new_name = element new_name { text } # User access rules: a textual list of hosts. modify_user_hosts = element hosts { text & # If 1, allow only listed, otherwise forbid listed. attribute allow { boolean }? } # User access rules: a textual list of ifaces. modify_user_ifaces = element ifaces { text & # If 1, allow only listed, otherwise forbid listed. attribute allow { boolean }? } # The password for the user. modify_user_password = element password { text } # A role of the user. modify_user_role = element role { attribute id { uuid } } # List of authentication sources for this user (if omitted, no changes). modify_user_sources = element sources # type sources { } ## Command restore ## ## Restore a resource. restore = element restore { attribute id { uuid } } ## Command resume_task ## ## Resume a task. resume_task = element resume_task { attribute task_id { uuid } } ## Command run_wizard ## ## Run a wizard. run_wizard = element run_wizard { run_wizard_mode? & run_wizard_name & run_wizard_params & # Whether to only run wizards marked as read only. attribute read_only { boolean }? } # The mode to run the wizard in. run_wizard_mode = element mode { text } # The name of the wizard. run_wizard_name = element name { name } # Parameters for the wizard. run_wizard_params = element params { run_wizard_params_param* } run_wizard_params_param = element param { run_wizard_params_param_name & run_wizard_params_param_value } # Parameter name. run_wizard_params_param_name = element name { text } # Value of parameter. run_wizard_params_param_value = element value { text } ## Command start_task ## ## Manually start an existing task. start_task = element start_task { attribute task_id { uuid } } ## Command stop_task ## ## Stop a running task. stop_task = element stop_task { attribute task_id { uuid } } ## Command sync_cert ## ## Synchronize with a CERT feed. sync_cert = element sync_cert { "" } ## Command sync_feed ## ## Synchronize with an NVT feed. sync_feed = element sync_feed { "" } ## Command sync_scap ## ## Synchronize with a SCAP feed. sync_scap = element sync_scap { "" } ## Command test_alert ## ## Run an alert. test_alert = element test_alert { attribute alert_id { uuid } } ## Command verify_agent ## ## Verify an agent. verify_agent = element verify_agent { attribute agent_id { uuid } } ## Command verify_report_format ## ## Verify a report format. verify_report_format = element verify_report_format { attribute report_format_id { uuid } } ### Responses ## Response to authenticate authenticate_response = element authenticate_response { attribute status { status } & attribute status_text { text } & authenticate_response_role & authenticate_response_timezone } # The user's role. authenticate_response_role = element role # type UserAdminSuper AdminObserver { } # The user's timezone. authenticate_response_timezone = element timezone { timezone } ## Response to commands commands_response = element commands_response { attribute status { status } & attribute status_text { text } & ( authenticate_response | commands_response | create_agent_response | create_alert_response | create_config_response | create_filter_response | create_group_response | create_lsc_credential_response | create_note_response | create_override_response | create_permission_response | create_port_list_response | create_port_range_response | create_role_response | create_scanner_response | create_schedule_response | create_slave_response | create_tag_response | create_target_response | create_task_response | create_user_response | delete_agent_response | delete_alert_response | delete_config_response | delete_filter_response | delete_group_response | delete_lsc_credential_response | delete_note_response | delete_override_response | delete_permission_response | delete_port_list_response | delete_port_range_response | delete_report_response | delete_report_format_response | delete_role_response | delete_scanner_response | delete_schedule_response | delete_slave_response | delete_tag_response | delete_target_response | delete_task_response | delete_user_response | describe_auth_response | describe_cert_response | describe_feed_response | describe_scap_response | empty_trashcan_response | get_agents_response | get_alerts_response | get_configs_response | get_groups_response | get_info_response | get_lsc_credentials_response | get_filters_response | get_notes_response | get_nvts_response | get_nvt_families_response | get_nvt_feed_version_response | get_overrides_response | get_permissions_response | get_port_lists_response | get_preferences_response | get_reports_response | get_report_formats_response | get_results_response | get_roles_response | get_slaves_response | get_scanners_response | get_schedules_response | get_settings_response | get_system_reports_response | get_tags_response | get_targets_response | get_tasks_response | get_users_response | get_version_response | help_response | modify_agent_response | modify_alert_response | modify_auth_response | modify_config_response | modify_filter_response | modify_group_response | modify_lsc_credential_response | modify_note_response | modify_override_response | modify_permission_response | modify_port_list_response | modify_report_response | modify_report_format_response | modify_role_response | modify_scanner_response | modify_schedule_response | modify_setting_response | modify_slave_response | modify_tag_response | modify_target_response | modify_task_response | modify_user_response | restore_response | resume_task_response | run_wizard_response | start_task_response | stop_task_response | sync_feed_response | sync_scap_response | sync_cert_response | test_alert_response )* } ## Response to create_agent create_agent_response = element create_agent_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to create_config create_config_response = element create_config_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to create_alert create_alert_response = element create_alert_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to create_filter create_filter_response = element create_filter_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to create_group create_group_response = element create_group_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to create_lsc_credential create_lsc_credential_response = element create_lsc_credential_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to create_note create_note_response = element create_note_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to create_override create_override_response = element create_override_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to create_permission create_permission_response = element create_permission_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to create_port_list create_port_list_response = element create_port_list_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to create_port_range create_port_range_response = element create_port_range_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to create_report create_report_response = element create_report_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to create_report_format create_report_format_response = element create_report_format_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to create_role create_role_response = element create_role_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to create_scanner create_scanner_response = element create_scanner_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to create_schedule create_schedule_response = element create_schedule_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to create_slave create_slave_response = element create_slave_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to create_tag create_tag_response = element create_tag_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to create_target create_target_response = element create_target_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to create_task create_task_response = element create_task_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to create_user create_user_response = element create_user_response { attribute status { status } & attribute status_text { text } & attribute id { uuid } } ## Response to delete_agent delete_agent_response = element delete_agent_response { attribute status { status } & attribute status_text { text } } ## Response to delete_config delete_config_response = element delete_config_response { attribute status { status } & attribute status_text { text } } ## Response to delete_alert delete_alert_response = element delete_alert_response { attribute status { status } & attribute status_text { text } } ## Response to delete_filter delete_filter_response = element delete_filter_response { attribute status { status } & attribute status_text { text } } ## Response to delete_group delete_group_response = element delete_group_response { attribute status { status } & attribute status_text { text } } ## Response to delete_lsc_credential delete_lsc_credential_response = element delete_lsc_credential_response { attribute status { status } & attribute status_text { text } } ## Response to delete_note delete_note_response = element delete_note_response { attribute status { status } & attribute status_text { text } } ## Response to delete_override delete_override_response = element delete_override_response { attribute status { status } & attribute status_text { text } } ## Response to delete_report delete_report_response = element delete_report_response { attribute status { status } & attribute status_text { text } } ## Response to delete_permission delete_permission_response = element delete_permission_response { attribute status { status } & attribute status_text { text } } ## Response to delete_port_list delete_port_list_response = element delete_port_list_response { attribute status { status } & attribute status_text { text } } ## Response to delete_port_range delete_port_range_response = element delete_port_range_response { attribute status { status } & attribute status_text { text } } ## Response to delete_report_format delete_report_format_response = element delete_report_format_response { attribute status { status } & attribute status_text { text } } ## Response to delete_role delete_role_response = element delete_role_response { attribute status { status } & attribute status_text { text } } ## Response to delete_scanner delete_scanner_response = element delete_scanner_response { attribute status { status } & attribute status_text { text } } ## Response to delete_schedule delete_schedule_response = element delete_schedule_response { attribute status { status } & attribute status_text { text } } ## Response to delete_slave delete_slave_response = element delete_slave_response { attribute status { status } & attribute status_text { text } } ## Response to delete_tag delete_tag_response = element delete_tag_response { attribute status { status } & attribute status_text { text } } ## Response to delete_target delete_target_response = element delete_target_response { attribute status { status } & attribute status_text { text } } ## Response to delete_task delete_task_response = element delete_task_response { attribute status { status } & attribute status_text { text } } ## Response to delete_user delete_user_response = element delete_user_response { attribute status { status } & attribute status_text { text } } ## Response to describe_auth describe_auth_response = element describe_auth_response { attribute status { status } & attribute status_text { text } & describe_auth_response_group } # Config group. describe_auth_response_group = element group { attribute name { text } & describe_auth_response_group_auth_conf_setting } describe_auth_response_group_auth_conf_setting = element auth_conf_setting { attribute key { text } & attribute value { text } } ## Response to describe_cert describe_cert_response = element describe_cert_response { attribute status { status } & attribute status_text { text } & describe_cert_response_cert } describe_cert_response_cert = element cert { describe_cert_response_cert_name & describe_cert_response_cert_version & describe_cert_response_cert_description & describe_cert_response_cert_sync_not_available? & describe_cert_response_cert_currently_syncing? } # The name of the CERT feed. describe_cert_response_cert_name = element name { text } # The version of the CERT feed. describe_cert_response_cert_version = element version { text } # A description of the CERT feed. describe_cert_response_cert_description = element description { text } # Present if CERT syncing is not available. describe_cert_response_cert_sync_not_available = element sync_not_available { describe_cert_response_cert_sync_not_available_error } # Description of why sync is not available. describe_cert_response_cert_sync_not_available_error = element error { } # Present if a CERT sync is underway. describe_cert_response_cert_currently_syncing = element currently_syncing { describe_cert_response_cert_currently_syncing_timestamp & describe_cert_response_cert_currently_syncing_user } # Time sync started. describe_cert_response_cert_currently_syncing_timestamp = element timestamp { text } # Name of user who is performing sync. describe_cert_response_cert_currently_syncing_user = element user { text } ## Response to describe_feed describe_feed_response = element describe_feed_response { attribute status { status } & attribute status_text { text } & describe_feed_response_feed } describe_feed_response_feed = element feed { describe_feed_response_feed_name & describe_feed_response_feed_version & describe_feed_response_feed_description & describe_feed_response_feed_sync_not_available? & describe_feed_response_feed_currently_syncing? } # The name of the feed. describe_feed_response_feed_name = element name { text } # The version of the feed. describe_feed_response_feed_version = element version { text } # A description of the feed. describe_feed_response_feed_description = element description { text } # Present if CERT syncing is not available. describe_feed_response_feed_sync_not_available = element sync_not_available { describe_feed_response_feed_sync_not_available_error } # Description of why sync is not available. describe_feed_response_feed_sync_not_available_error = element error { } # Present if an NVT sync is underway. describe_feed_response_feed_currently_syncing = element currently_syncing { describe_feed_response_feed_currently_syncing_timestamp & describe_feed_response_feed_currently_syncing_user } # Time sync started. describe_feed_response_feed_currently_syncing_timestamp = element timestamp { text } # Name of user who is performing sync. describe_feed_response_feed_currently_syncing_user = element user { text } ## Response to describe_scap describe_scap_response = element describe_scap_response { attribute status { status } & attribute status_text { text } & describe_scap_response_scap } describe_scap_response_scap = element scap { describe_scap_response_scap_name & describe_scap_response_scap_version & describe_scap_response_scap_description & describe_scap_response_scap_sync_not_available? & describe_scap_response_scap_currently_syncing? } # The name of the scap feed. describe_scap_response_scap_name = element name { text } # The version of the scap feed. describe_scap_response_scap_version = element version { text } # A description of the scap feed. describe_scap_response_scap_description = element description { text } # Present if CERT syncing is not available. describe_scap_response_scap_sync_not_available = element sync_not_available { describe_scap_response_scap_sync_not_available_error } # Description of why sync is not available. describe_scap_response_scap_sync_not_available_error = element error { } # Present if a CERT sync is underway. describe_scap_response_scap_currently_syncing = element currently_syncing { describe_scap_response_scap_currently_syncing_timestamp & describe_scap_response_scap_currently_syncing_user } # Time sync started. describe_scap_response_scap_currently_syncing_timestamp = element timestamp { text } # Name of user who is performing sync. describe_scap_response_scap_currently_syncing_user = element user { text } ## Response to empty_trashcan empty_trashcan_response = element empty_trashcan_response { attribute status { status } & attribute status_text { text } } ## Response to get_agents get_agents_response = element get_agents_response { attribute status { status } & attribute status_text { text } & get_agents_response_agent* & get_agents_response_filters & get_agents_response_sort & get_agents_response_agents & get_agents_response_agent_count } get_agents_response_agent = element agent { attribute id { uuid } & get_agents_response_agent_owner & get_agents_response_agent_name & get_agents_response_agent_comment & get_agents_response_agent_creation_time & get_agents_response_agent_modification_time & get_agents_response_agent_in_use & get_agents_response_agent_writable & get_agents_response_agent_permissions & get_agents_response_agent_user_tags & ( get_agents_response_agent_installer | get_agents_response_agent_package ) } # Owner of the agent. get_agents_response_agent_owner = element owner { get_agents_response_agent_owner_name } # The name of the owner. get_agents_response_agent_owner_name = element name { name } # The name of the agent. get_agents_response_agent_name = element name { name } # The comment on the agent. get_agents_response_agent_comment = element comment { text } # Date and time the agent was created. get_agents_response_agent_creation_time = element creation_time { iso_time } # Date and time the agent was last modified. get_agents_response_agent_modification_time = element modification_time { iso_time } # Whether the agent is in use. get_agents_response_agent_in_use = element in_use { boolean } # Whether the agent is writable. get_agents_response_agent_writable = element writable { boolean } # Permissions that the current user has on the agent. get_agents_response_agent_permissions = element permissions { get_agents_response_agent_permissions_permission* } get_agents_response_agent_permissions_permission = element permission { get_agents_response_agent_permissions_permission_name } # The name of the permission. get_agents_response_agent_permissions_permission_name = element name { name } # Info on tags attached to the agent. get_agents_response_agent_user_tags = element user_tags { get_agents_response_agent_user_tags_count & get_agents_response_agent_user_tags_tag* } # Number of attached tags. get_agents_response_agent_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). get_agents_response_agent_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & get_agents_response_agent_user_tags_tag_name & get_agents_response_agent_user_tags_tag_value & get_agents_response_agent_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). get_agents_response_agent_user_tags_tag_name = element name { text } # Value of the tag. get_agents_response_agent_user_tags_tag_value = element value { text } # Comment for the tag. get_agents_response_agent_user_tags_tag_comment = element comment { text } get_agents_response_agent_installer = element installer { get_agents_response_agent_installer_trust } # Whether signature verification succeeded. get_agents_response_agent_installer_trust = element trust { text # RNC limitation: xsd:token { pattern = "yes|no|unknown" } & get_agents_response_agent_installer_trust_time } # When the signature was verified. get_agents_response_agent_installer_trust_time = element time { iso_time } # Either the installer or one of the HOWTOs. get_agents_response_agent_package = element package { text # RNC limitation: base64 & get_agents_response_agent_package_filename } # The filename of the package. get_agents_response_agent_package_filename = element filename { text } get_agents_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_agents_response_filters_term & get_agents_response_filters_name? & get_agents_response_filters_keywords } # Filter term. get_agents_response_filters_term = element term { text } # Filter name, if applicable. get_agents_response_filters_name = element name { text } # Filter broken down into keywords. get_agents_response_filters_keywords = element keywords { get_agents_response_filters_keywords_keyword* } get_agents_response_filters_keywords_keyword = element keyword { get_agents_response_filters_keywords_keyword_column & get_agents_response_filters_keywords_keyword_relation & get_agents_response_filters_keywords_keyword_value } # Column prefix. get_agents_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_agents_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_agents_response_filters_keywords_keyword_value = element value { text } get_agents_response_sort = element sort { text & get_agents_response_sort_field } get_agents_response_sort_field = element field { get_agents_response_sort_field_order } get_agents_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_agents_response_agents = element agents { # First agent. attribute start { integer } & # Maximum number of agents. attribute max { integer } } get_agents_response_agent_count = element agent_count { get_agents_response_agent_count_filtered & get_agents_response_agent_count_page } # Number of agents after filtering. get_agents_response_agent_count_filtered = element filtered { integer } # Number of agents on current page. get_agents_response_agent_count_page = element page { integer } ## Response to get_configs get_configs_response = element get_configs_response { attribute status { status } & attribute status_text { text } & get_configs_response_config* & get_configs_response_filters & get_configs_response_sort & get_configs_response_configs & get_configs_response_config_count } get_configs_response_config = element config { attribute id { uuid } & get_configs_response_config_owner & get_configs_response_config_name & get_configs_response_config_comment & get_configs_response_config_creation_time & get_configs_response_config_modification_time & get_configs_response_config_family_count & get_configs_response_config_nvt_count & get_configs_response_config_type & get_configs_response_config_max_nvt_count & get_configs_response_config_known_nvt_count & get_configs_response_config_in_use & get_configs_response_config_writable & get_configs_response_config_permissions & get_configs_response_config_user_tags & get_configs_response_config_tasks & get_configs_response_config_families? & get_configs_response_config_preferences? & get_configs_response_config_nvt_selectors? } # Owner of the config. get_configs_response_config_owner = element owner { get_configs_response_config_owner_name } # The name of the owner. get_configs_response_config_owner_name = element name { name } # The name of the config. get_configs_response_config_name = element name { name } # The comment on the config. get_configs_response_config_comment = element comment { text } # Creation time of the config. get_configs_response_config_creation_time = element creation_time { iso_time } # Last time the config was modified. get_configs_response_config_modification_time = element modification_time { iso_time } # The number of families selected by the config. get_configs_response_config_family_count = element family_count { text # RNC limitation: integer & get_configs_response_config_family_count_growing } # Whether new families are automatically added to the config. get_configs_response_config_family_count_growing = element growing { boolean } # The number of NVTs selected by the config. get_configs_response_config_nvt_count = element nvt_count { text # RNC limitation: integer & get_configs_response_config_nvt_count_growing } # Whether new NVTs are automatically added to the config. get_configs_response_config_nvt_count_growing = element growing { boolean } # The type the config.. get_configs_response_config_type = element type { text } # Total number of NVTs in the families selected by the config. get_configs_response_config_max_nvt_count = element max_nvt_count { integer } # Total number of known NVTs selected by the config. get_configs_response_config_known_nvt_count = element known_nvt_count { integer } # Whether any tasks are using the config. get_configs_response_config_in_use = element in_use { boolean } # Whether any tasks are using the config, including trashcan tasks. get_configs_response_config_writable = element writable { boolean } # Permissions that the current user has on the target. get_configs_response_config_permissions = element permissions { get_configs_response_config_permissions_permission* } get_configs_response_config_permissions_permission = element permission { get_configs_response_config_permissions_permission_name } # The name of the permission. get_configs_response_config_permissions_permission_name = element name { name } # Info on tags attached to the config. get_configs_response_config_user_tags = element user_tags { get_configs_response_config_user_tags_count & get_configs_response_config_user_tags_tag* } # Number of attached tags. get_configs_response_config_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). get_configs_response_config_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & get_configs_response_config_user_tags_tag_name & get_configs_response_config_user_tags_tag_value & get_configs_response_config_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). get_configs_response_config_user_tags_tag_name = element name { text } # Value of the tag. get_configs_response_config_user_tags_tag_value = element value { text } # Comment for the tag. get_configs_response_config_user_tags_tag_comment = element comment { text } # All tasks using the config. get_configs_response_config_tasks = element tasks { get_configs_response_config_tasks_task* } get_configs_response_config_tasks_task = element task { attribute id { uuid } & get_configs_response_config_tasks_task_name & get_configs_response_config_tasks_task_permissions? } # The name of the task. get_configs_response_config_tasks_task_name = element name { name } # Permissions the user has on the task. get_configs_response_config_tasks_task_permissions = element permissions { "" } # All families selected by the config. get_configs_response_config_families = element families { get_configs_response_config_families_family* } get_configs_response_config_families_family = element family { get_configs_response_config_families_family_name & get_configs_response_config_families_family_nvt_count & get_configs_response_config_families_family_max_nvt_count & get_configs_response_config_families_family_growing } # The name of the family. get_configs_response_config_families_family_name = element name { name } # The type of the config. 0 = OpenVAS scanner, 1 = OSP Scanner. get_configs_response_config_families_family_type = element type { integer } # The number of NVTs selected in the family. get_configs_response_config_families_family_nvt_count = element nvt_count { integer } # The total number of NVTs in the family. get_configs_response_config_families_family_max_nvt_count = element max_nvt_count { integer } # Whether new NVTs in the family are automatically added to the selection. get_configs_response_config_families_family_growing = element growing { boolean } # Preferences for all NVTs selected by the config. get_configs_response_config_preferences = element preferences { get_configs_response_config_preferences_preference* } get_configs_response_config_preferences_preference = element preference { get_configs_response_config_preferences_preference_nvt & get_configs_response_config_preferences_preference_name & get_configs_response_config_preferences_preference_type & get_configs_response_config_preferences_preference_value & get_configs_response_config_preferences_preference_default & get_configs_response_config_preferences_preference_alt* } # NVT to which preference applies. get_configs_response_config_preferences_preference_nvt = element nvt { attribute oid { oid } & get_configs_response_config_preferences_preference_nvt_name } # The name of the NVT. get_configs_response_config_preferences_preference_nvt_name = element name { name } # The name of the preference. get_configs_response_config_preferences_preference_name = element name { name } # The type of preference. get_configs_response_config_preferences_preference_type = element type { text } # The value of the preference. get_configs_response_config_preferences_preference_value = element value { text } # The default value of the preference. get_configs_response_config_preferences_preference_default = element default { text } # An alternate value for the preference. get_configs_response_config_preferences_preference_alt = element alt { text } # All NVT selectors of the config. get_configs_response_config_nvt_selectors = element nvt_selectors { get_configs_response_config_nvt_selectors_nvt_selector* } # An NVT selector. get_configs_response_config_nvt_selectors_nvt_selector = element nvt_selector { get_configs_response_config_nvt_selectors_nvt_selector_name & get_configs_response_config_nvt_selectors_nvt_selector_include & get_configs_response_config_nvt_selectors_nvt_selector_type & get_configs_response_config_nvt_selectors_nvt_selector_family_or_nvt } # Name of the selector. get_configs_response_config_nvt_selectors_nvt_selector_name = element name { text } # Whether the selector is an include selector. get_configs_response_config_nvt_selectors_nvt_selector_include = element include { boolean } # Selector type: 0 = all, 1 = family, 2 = NVT. get_configs_response_config_nvt_selectors_nvt_selector_type = element type { integer } # Name of the family or OID of the NVT. get_configs_response_config_nvt_selectors_nvt_selector_family_or_nvt = element family_or_nvt { text } get_configs_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_configs_response_filters_term & get_configs_response_filters_name? & get_configs_response_filters_keywords } # Filter term. get_configs_response_filters_term = element term { text } # Filter name, if applicable. get_configs_response_filters_name = element name { text } # Filter broken down into keywords. get_configs_response_filters_keywords = element keywords { get_configs_response_filters_keywords_keyword* } get_configs_response_filters_keywords_keyword = element keyword { get_configs_response_filters_keywords_keyword_column & get_configs_response_filters_keywords_keyword_relation & get_configs_response_filters_keywords_keyword_value } # Column prefix. get_configs_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_configs_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_configs_response_filters_keywords_keyword_value = element value { text } get_configs_response_sort = element sort { text & get_configs_response_sort_field } get_configs_response_sort_field = element field { get_configs_response_sort_field_order } get_configs_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_configs_response_configs = element configs { # First config. attribute start { integer } & # Maximum number of configs. attribute max { integer } } get_configs_response_config_count = element config_count { get_configs_response_config_count_filtered & get_configs_response_config_count_page } # Number of configs after filtering. get_configs_response_config_count_filtered = element filtered { integer } # Number of configs on current page. get_configs_response_config_count_page = element page { integer } ## Response to get_aggregates get_aggregates_response = element get_aggregates_response { attribute status { status } & attribute status_text { text } & get_aggregates_response_aggregate* & get_aggregates_response_filters } # A collection of aggregated data of the selected type. get_aggregates_response_aggregate = element aggregate { get_aggregates_response_aggregate_data_type & get_aggregates_response_aggregate_data_column? & get_aggregates_response_aggregate_group_column? & ( get_aggregates_response_aggregate_group* | get_aggregates_response_aggregate_overall ) & get_aggregates_response_aggregate_column_info } # The resource type the data is aggregated from. get_aggregates_response_aggregate_data_type = element data_type { text } # The column the data is aggregated from. get_aggregates_response_aggregate_data_column = element data_column { text } # The column the data is grouped by. get_aggregates_response_aggregate_group_column = element group_column { text } # Aggregate data for a group of resources. get_aggregates_response_aggregate_group = element group { text } # Aggregate data for all resources of the selected type. get_aggregates_response_aggregate_group = element group { get_aggregates_response_aggregate_group_value & get_aggregates_response_aggregate_group_count & get_aggregates_response_aggregate_group_c_count & ( get_aggregates_response_aggregate_group_min & get_aggregates_response_aggregate_group_max & get_aggregates_response_aggregate_group_mean & get_aggregates_response_aggregate_group_sum & get_aggregates_response_aggregate_group_c_sum )? } # Value of the group column. get_aggregates_response_aggregate_group_value = element value { text } # Number of resources in the group. get_aggregates_response_aggregate_group_count = element count { integer } # Cumulative number of resources in all groups up to and including the current one. get_aggregates_response_aggregate_group_c_count = element c_count { integer } # Minimum value of the data column. get_aggregates_response_aggregate_group_min = element min { text } # Maximum value of the data column. get_aggregates_response_aggregate_group_max = element max { text } # Arithmetic mean of the numeric values of the data. get_aggregates_response_aggregate_group_mean = element mean { text } # Sum of the numeric values of the data column. get_aggregates_response_aggregate_group_sum = element sum { text } # Cumulative sum of the numeric values of the data column for all groups up to and including the current one. get_aggregates_response_aggregate_group_c_sum = element c_sum { text } # Aggregate data for all resources of the selected type. get_aggregates_response_aggregate_overall = element overall { get_aggregates_response_aggregate_overall_count & get_aggregates_response_aggregate_overall_min & get_aggregates_response_aggregate_overall_max & get_aggregates_response_aggregate_overall_mean & get_aggregates_response_aggregate_overall_sum } # Overall number of resources. get_aggregates_response_aggregate_overall_count = element count { integer } # Overall minimum value of the data column. get_aggregates_response_aggregate_overall_min = element min { text } # Overall maximum value of the data column. get_aggregates_response_aggregate_overall_max = element max { text } # Overall arithmetic mean of the numeric values of the data. get_aggregates_response_aggregate_overall_mean = element mean { text } # Overall sum of the numeric values of the data column. get_aggregates_response_aggregate_overall_sum = element sum { text } # Info on the aggregate columns. get_aggregates_response_aggregate_column_info = element column_info { get_aggregates_response_aggregate_column_info_aggregate_column* } # Info on one column of the aggregate. get_aggregates_response_aggregate_column_info_aggregate_column = element aggregate_column { get_aggregates_response_aggregate_column_info_aggregate_column_name & get_aggregates_response_aggregate_column_info_aggregate_column_stat & get_aggregates_response_aggregate_column_info_aggregate_column_type & get_aggregates_response_aggregate_column_info_aggregate_column_column & get_aggregates_response_aggregate_column_info_aggregate_column_data_type } # Name of the column as it appears in the group or overall element. get_aggregates_response_aggregate_column_info_aggregate_column_name = element name { text } # The type of statistic in the column, e.g. min, max, mean. get_aggregates_response_aggregate_column_info_aggregate_column_stat = element stat { text } # The resource type. get_aggregates_response_aggregate_column_info_aggregate_column_type = element type { text } # Name of the column in the non-aggregated table. get_aggregates_response_aggregate_column_info_aggregate_column_column = element column { text } # The data type of the column, e.g. integer, text, cvss. get_aggregates_response_aggregate_column_info_aggregate_column_data_type = element data_type { text } get_aggregates_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_aggregates_response_filters_term & get_aggregates_response_filters_name? & get_aggregates_response_filters_keywords } # Filter term. get_aggregates_response_filters_term = element term { text } # Filter name, if applicable. get_aggregates_response_filters_name = element name { text } # Filter broken down into keywords. get_aggregates_response_filters_keywords = element keywords { get_aggregates_response_filters_keywords_keyword* } get_aggregates_response_filters_keywords_keyword = element keyword { get_aggregates_response_filters_keywords_keyword_column & get_aggregates_response_filters_keywords_keyword_relation & get_aggregates_response_filters_keywords_keyword_value } # Column prefix. get_aggregates_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_aggregates_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_aggregates_response_filters_keywords_keyword_value = element value { text } ## Response to get_alerts get_alerts_response = element get_alerts_response { attribute status { status } & attribute status_text { text } & get_alerts_response_alert* & get_alerts_response_filters & get_alerts_response_sort & get_alerts_response_alerts & get_alerts_response_alert_count } get_alerts_response_alert = element alert { attribute id { uuid } & get_alerts_response_alert_owner & get_alerts_response_alert_name & get_alerts_response_alert_comment & get_alerts_response_alert_creation_time & get_alerts_response_alert_modification_time & get_alerts_response_alert_in_use & get_alerts_response_alert_writable & get_alerts_response_alert_permissions & get_alerts_response_alert_user_tags & get_alerts_response_alert_condition & get_alerts_response_alert_event & get_alerts_response_alert_method & get_alerts_response_alert_filter & get_alerts_response_alert_tasks? } # Owner of the alert. get_alerts_response_alert_owner = element owner { get_alerts_response_alert_owner_name } # The name of the owner. get_alerts_response_alert_owner_name = element name { name } # The name of the alert. get_alerts_response_alert_name = element name { name } # The comment on the alert. get_alerts_response_alert_comment = element comment { text } # Whether any tasks are using the alert. get_alerts_response_alert_in_use = element in_use { boolean } # Whether the alert is writable or not. get_alerts_response_alert_writable = element writable { boolean } # Creation time of the alert. get_alerts_response_alert_creation_time = element creation_time { iso_time } # Last time the alert was modified. get_alerts_response_alert_modification_time = element modification_time { iso_time } # Permissions that the current user has on the alert. get_alerts_response_alert_permissions = element permissions { get_alerts_response_alert_permissions_permission* } get_alerts_response_alert_permissions_permission = element permission { get_alerts_response_alert_permissions_permission_name } # The name of the permission. get_alerts_response_alert_permissions_permission_name = element name { name } # Info on tags attached to the alert. get_alerts_response_alert_user_tags = element user_tags { get_alerts_response_alert_user_tags_count & get_alerts_response_alert_user_tags_tag* } # Number of attached tags. get_alerts_response_alert_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). get_alerts_response_alert_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & get_alerts_response_alert_user_tags_tag_name & get_alerts_response_alert_user_tags_tag_value & get_alerts_response_alert_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). get_alerts_response_alert_user_tags_tag_name = element name { text } # Value of the tag. get_alerts_response_alert_user_tags_tag_value = element value { text } # Comment for the tag. get_alerts_response_alert_user_tags_tag_comment = element comment { text } # The condition that must be satisfied for the alert to occur. get_alerts_response_alert_condition = element condition { text & get_alerts_response_alert_condition_data* } # Some data that defines the condition. get_alerts_response_alert_condition_data = element data { text & get_alerts_response_alert_condition_data_name } # The name of the condition data. get_alerts_response_alert_condition_data_name = element name { text } # The event that must happen for the alert to occur. get_alerts_response_alert_event = element event { text & get_alerts_response_alert_event_data* } # Some data that defines the event. get_alerts_response_alert_event_data = element data { text & get_alerts_response_alert_event_data_name } # The name of the event data. get_alerts_response_alert_event_data_name = element name { text } # The method by which he alert must occur. get_alerts_response_alert_method = element method { text & get_alerts_response_alert_method_data* } # Some data that defines the method. get_alerts_response_alert_method_data = element data { text & get_alerts_response_alert_method_data_name } # The name of the method data. get_alerts_response_alert_method_data_name = element name { text } get_alerts_response_alert_filter = element filter { attribute id { uuid }? & get_alerts_response_alert_filter_name & get_alerts_response_alert_filter_permissions? & get_alerts_response_alert_filter_trash } # The name of the filter. get_alerts_response_alert_filter_name = element name { name } # Permissions the user has on the filter. get_alerts_response_alert_filter_permissions = element permissions { "" } # Whether the filter is in the trashcan. get_alerts_response_alert_filter_trash = element trash { boolean } # Tasks using the alert. get_alerts_response_alert_tasks = element tasks { get_alerts_response_alert_tasks_task* } get_alerts_response_alert_tasks_task = element task { attribute id { uuid } & get_alerts_response_alert_tasks_task_name & get_alerts_response_alert_tasks_task_permissions? } # The name of the task. get_alerts_response_alert_tasks_task_name = element name { name } # Permissions the user has on the task. get_alerts_response_alert_tasks_task_permissions = element permissions { "" } get_alerts_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_alerts_response_filters_term & get_alerts_response_filters_name? & get_alerts_response_filters_keywords } # Filter term. get_alerts_response_filters_term = element term { text } # Filter name, if applicable. get_alerts_response_filters_name = element name { text } # Filter broken down into keywords. get_alerts_response_filters_keywords = element keywords { get_alerts_response_filters_keywords_keyword* } get_alerts_response_filters_keywords_keyword = element keyword { get_alerts_response_filters_keywords_keyword_column & get_alerts_response_filters_keywords_keyword_relation & get_alerts_response_filters_keywords_keyword_value } # Column prefix. get_alerts_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_alerts_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_alerts_response_filters_keywords_keyword_value = element value { text } get_alerts_response_sort = element sort { text & get_alerts_response_sort_field } get_alerts_response_sort_field = element field { get_alerts_response_sort_field_order } get_alerts_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_alerts_response_alerts = element alerts { # First alert. attribute start { integer } & # Maximum number of alerts. attribute max { integer } } get_alerts_response_alert_count = element alert_count { get_alerts_response_alert_count_filtered & get_alerts_response_alert_count_page } # Number of alerts after filtering. get_alerts_response_alert_count_filtered = element filtered { integer } # Number of alerts on current page. get_alerts_response_alert_count_page = element page { integer } ## Response to get_filters get_filters_response = element get_filters_response { attribute status { status } & attribute status_text { text } & get_filters_response_filter* & get_filters_response_filters & get_filters_response_sort & get_filters_response_filters & get_filters_response_filter_count } get_filters_response_filter = element filter { attribute id { uuid } & get_filters_response_filter_owner & get_filters_response_filter_name & get_filters_response_filter_comment & get_filters_response_filter_term & get_filters_response_filter_type & get_filters_response_filter_creation_time & get_filters_response_filter_modification_time & get_filters_response_filter_in_use & get_filters_response_filter_writable & get_filters_response_filter_permissions & get_filters_response_filter_user_tags & get_filters_response_filter_alerts? } # Owner of the filter. get_filters_response_filter_owner = element owner { get_filters_response_filter_owner_name } # The name of the owner. get_filters_response_filter_owner_name = element name { name } # The name of the filter. get_filters_response_filter_name = element name { name } # The comment on the filter. get_filters_response_filter_comment = element comment { text } # The filter term. get_filters_response_filter_term = element term { text } # Resource type filter applies to. Blank for all. get_filters_response_filter_type = element type { text } # Date and time the filter was created. get_filters_response_filter_creation_time = element creation_time { iso_time } # Date and time the filter was last modified. get_filters_response_filter_modification_time = element modification_time { iso_time } # Whether any tasks are using the filter. get_filters_response_filter_in_use = element in_use { boolean } # Whether the filter is writable. get_filters_response_filter_writable = element writable { boolean } # Permissions that the current user has on the filter. get_filters_response_filter_permissions = element permissions { get_filters_response_filter_permissions_permission* } get_filters_response_filter_permissions_permission = element permission { get_filters_response_filter_permissions_permission_name } # The name of the permission. get_filters_response_filter_permissions_permission_name = element name { name } # Info on tags attached to the filter. get_filters_response_filter_user_tags = element user_tags { get_filters_response_filter_user_tags_count & get_filters_response_filter_user_tags_tag* } # Number of attached tags. get_filters_response_filter_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). get_filters_response_filter_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & get_filters_response_filter_user_tags_tag_name & get_filters_response_filter_user_tags_tag_value & get_filters_response_filter_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). get_filters_response_filter_user_tags_tag_name = element name { text } # Value of the tag. get_filters_response_filter_user_tags_tag_value = element value { text } # Comment for the tag. get_filters_response_filter_user_tags_tag_comment = element comment { text } # All alerts using the filter. get_filters_response_filter_alerts = element alerts { get_filters_response_filter_alerts_alert* } get_filters_response_filter_alerts_alert = element alert { attribute id { uuid } & get_filters_response_filter_alerts_alert_name & get_filters_response_filter_alerts_alert_permissions? } # The name of the alert. get_filters_response_filter_alerts_alert_name = element name { name } # Permissions the user has on the alert. get_filters_response_filter_alerts_alert_permissions = element permissions { "" } get_filters_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_filters_response_filters_term & get_filters_response_filters_name? & get_filters_response_filters_keywords } # Filter term. get_filters_response_filters_term = element term { text } # Filter name, if applicable. get_filters_response_filters_name = element name { text } # Filter broken down into keywords. get_filters_response_filters_keywords = element keywords { get_filters_response_filters_keywords_keyword* } get_filters_response_filters_keywords_keyword = element keyword { get_filters_response_filters_keywords_keyword_column & get_filters_response_filters_keywords_keyword_relation & get_filters_response_filters_keywords_keyword_value } # Column prefix. get_filters_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_filters_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_filters_response_filters_keywords_keyword_value = element value { text } get_filters_response_sort = element sort { text & get_filters_response_sort_field } get_filters_response_sort_field = element field { get_filters_response_sort_field_order } get_filters_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_filters_response_filters = element filters { # First filter. attribute start { integer } & # Maximum number of filters. attribute max { integer } } get_filters_response_filter_count = element filter_count { get_filters_response_filter_count_filtered & get_filters_response_filter_count_page } # Number of filters after filtering. get_filters_response_filter_count_filtered = element filtered { integer } # Number of filters on current page. get_filters_response_filter_count_page = element page { integer } ## Response to get_groups get_groups_response = element get_groups_response { attribute status { status } & attribute status_text { text } & get_groups_response_group* & get_groups_response_filters & get_groups_response_sort & get_groups_response_groups & get_groups_response_group_count } get_groups_response_group = element group { attribute id { uuid } & get_groups_response_group_owner & get_groups_response_group_name & get_groups_response_group_comment & get_groups_response_group_creation_time & get_groups_response_group_modification_time & get_groups_response_group_writable & get_groups_response_group_in_use & get_groups_response_group_permissions & get_groups_response_group_user_tags & get_groups_response_group_users } # Owner of the group. get_groups_response_group_owner = element owner { get_groups_response_group_owner_name } # The name of the owner. get_groups_response_group_owner_name = element name { name } # The name of the group. get_groups_response_group_name = element name { name } # The comment on the group. get_groups_response_group_comment = element comment { text } # Date and time the group was created. get_groups_response_group_creation_time = element creation_time { iso_time } # Date and time the group was last modified. get_groups_response_group_modification_time = element modification_time { iso_time } # A comma-separated list of the users in the group. get_groups_response_group_users = element users { text } # Whether the group is writable. get_groups_response_group_writable = element writable { boolean } # Whether the group is in use. get_groups_response_group_in_use = element in_use { boolean } # Permissions that the current user has on the group. get_groups_response_group_permissions = element permissions { get_groups_response_group_permissions_permission* } get_groups_response_group_permissions_permission = element permission { get_groups_response_group_permissions_permission_name } # The name of the permission. get_groups_response_group_permissions_permission_name = element name { name } # Info on tags attached to the group. get_groups_response_group_user_tags = element user_tags { get_groups_response_group_user_tags_count & get_groups_response_group_user_tags_tag* } # Number of attached tags. get_groups_response_group_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). get_groups_response_group_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & get_groups_response_group_user_tags_tag_name & get_groups_response_group_user_tags_tag_value & get_groups_response_group_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). get_groups_response_group_user_tags_tag_name = element name { text } # Value of the tag. get_groups_response_group_user_tags_tag_value = element value { text } # Comment for the tag. get_groups_response_group_user_tags_tag_comment = element comment { text } get_groups_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_groups_response_filters_term & get_groups_response_filters_name? & get_groups_response_filters_keywords } # Filter term. get_groups_response_filters_term = element term { text } # Filter name, if applicable. get_groups_response_filters_name = element name { text } # Filter broken down into keywords. get_groups_response_filters_keywords = element keywords { get_groups_response_filters_keywords_keyword* } get_groups_response_filters_keywords_keyword = element keyword { get_groups_response_filters_keywords_keyword_column & get_groups_response_filters_keywords_keyword_relation & get_groups_response_filters_keywords_keyword_value } # Column prefix. get_groups_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_groups_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_groups_response_filters_keywords_keyword_value = element value { text } get_groups_response_sort = element sort { text & get_groups_response_sort_field } get_groups_response_sort_field = element field { get_groups_response_sort_field_order } get_groups_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_groups_response_groups = element groups { # First group. attribute start { integer } & # Maximum number of groups. attribute max { integer } } get_groups_response_group_count = element group_count { get_groups_response_group_count_filtered & get_groups_response_group_count_page } # Number of groups after filtering. get_groups_response_group_count_filtered = element filtered { integer } # Number of groups on current page. get_groups_response_group_count_page = element page { integer } ## Response to get_info get_info_response = element get_info_response { attribute status { status } & attribute status_text { text } & get_info_response_info* & get_info_response_filters & get_info_response_sort & get_info_response_details & get_info_response_info_count } get_info_response_info = element info { # A unique number identifying this info, if available. attribute id { integer }? & get_info_response_info_owner & get_info_response_info_name & get_info_response_info_comment & get_info_response_info_creation_time & get_info_response_info_modification_time & get_info_response_info_permissions & get_info_response_info_user_tags & get_info_response_info_update_time & ( get_info_response_info_cert_bund_adv | get_info_response_info_cpe | get_info_response_info_cve | get_info_response_info_dfn_cert_adv | get_info_response_info_ovaldef | get_info_response_info_nvt | get_info_response_info_allinfo ) } # Owner of the info. get_info_response_info_owner = element owner { get_info_response_info_owner_name } # The name of the owner. get_info_response_info_owner_name = element name { name } # The name of the info. get_info_response_info_name = element name { name } # The comment on the info. get_info_response_info_comment = element comment { text } # Date and time the info was created. get_info_response_info_creation_time = element creation_time { iso_time } # Date and time the info was last modified. get_info_response_info_modification_time = element modification_time { iso_time } # Date and time the source of the info was read. get_info_response_info_update_time = element update_time { iso_time } # Permissions that the current user has on the info. get_info_response_info_permissions = element permissions { get_info_response_info_permissions_permission* } get_info_response_info_permissions_permission = element permission { get_info_response_info_permissions_permission_name } # The name of the permission. get_info_response_info_permissions_permission_name = element name { name } # Info on tags attached to the info. get_info_response_info_user_tags = element user_tags { get_info_response_info_user_tags_count & get_info_response_info_user_tags_tag* } # Number of attached tags. get_info_response_info_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). get_info_response_info_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & get_info_response_info_user_tags_tag_name & get_info_response_info_user_tags_tag_value & get_info_response_info_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). get_info_response_info_user_tags_tag_name = element name { text } # Value of the tag. get_info_response_info_user_tags_tag_value = element value { text } # Comment for the tag. get_info_response_info_user_tags_tag_comment = element comment { text } # An CERT-Bund advisory info element. get_info_response_info_cert_bund_adv = element cert_bund_adv { get_info_response_info_cert_bund_adv_title & get_info_response_info_cert_bund_adv_summary & get_info_response_info_cert_bund_adv_max_cvss & get_info_response_info_cert_bund_adv_cve_refs & get_info_response_info_cert_bund_adv_raw_data? } # Title of the advisory. get_info_response_info_cert_bund_adv_title = element title { text } # Summary text of the advisory. get_info_response_info_cert_bund_adv_summary = element summary { text } # Highest CVSS score of CVEs referenced by the advisory. get_info_response_info_cert_bund_adv_max_cvss = element max_cvss { text } # Number of CVEs referenced by this advisory. get_info_response_info_cert_bund_adv_cve_refs = element cve_refs { integer } # Source representation of the information. Only when details were requested. get_info_response_info_cert_bund_adv_raw_data = element raw_data { text } # A CPE info element. get_info_response_info_cpe = element cpe { get_info_response_info_cpe_nvd_id & get_info_response_info_cpe_title? & get_info_response_info_cpe_max_cvss & get_info_response_info_cpe_cve_refs & get_info_response_info_cpe_status & get_info_response_info_cpe_cves? & get_info_response_info_cpe_raw_data? } # The NVD ID of the CPE. get_info_response_info_cpe_nvd_id = element nvd_id { text } # The title of the CPE. get_info_response_info_cpe_title = element title { text } # The highest CVSS recorder for this CPE. get_info_response_info_cpe_max_cvss = element max_cvss { integer } # The number CVE of references to this CPE. get_info_response_info_cpe_cve_refs = element cve_refs { integer } # The status of this CPE. get_info_response_info_cpe_status = element status { text } # CVEs referring to this CPE. Only when details were requested. get_info_response_info_cpe_cves = element cves { get_info_response_info_cpe_cves_cve* } # CVE referring to this CPE. get_info_response_info_cpe_cves_cve = element cve { text } # Source representation of the information. Only when details were requested. get_info_response_info_cpe_raw_data = element raw_data { text } # A NVT info element. get_info_response_info_nvt = element nvt { text } # A CVE info element. get_info_response_info_cve = element cve { get_info_response_info_cve_cvss & get_info_response_info_cve_vector & get_info_response_info_cve_complexity & get_info_response_info_cve_authentication & get_info_response_info_cve_confidentiality_impact & get_info_response_info_cve_integrity_impact & get_info_response_info_cve_availability_impact & get_info_response_info_cve_description & get_info_response_info_cve_products & get_info_response_info_cve_nvts? & get_info_response_info_cve_cert? & get_info_response_info_cve_raw_data? } # CVSS Base Score. get_info_response_info_cve_cvss = element cvss { text } # CVSS Access Vector metric. get_info_response_info_cve_vector = element vector { text } # CVSS Attack Complexity metric. get_info_response_info_cve_complexity = element complexity { text } # CVSS Authentication metric. get_info_response_info_cve_authentication = element authentication { text } # CVSS Confidentiality impact metric. get_info_response_info_cve_confidentiality_impact = element confidentiality_impact { text } # CVSS Integrity impact metric. get_info_response_info_cve_integrity_impact = element integrity_impact { text } # CVSS Availability impact metric. get_info_response_info_cve_availability_impact = element availability_impact { text } # The CVE's description. get_info_response_info_cve_description = element description { text } # Space separated list of CPEs affected by this. get_info_response_info_cve_products = element products { text } # NVTs addressing this CVE. Only when details were requested. get_info_response_info_cve_nvts = element nvts { get_info_response_info_cve_nvts_nvt* } # NVT referring to this CPE. get_info_response_info_cve_nvts_nvt = element nvt { attribute oid { oid }? & get_info_response_info_cve_nvts_nvt_name } # Name of the NVT. get_info_response_info_cve_nvts_nvt_name = element name { text } # List of CERT advisories referencing this CVE. get_info_response_info_cve_cert = element cert { get_info_response_info_cve_cert_cert_ref* & get_info_response_info_cve_cert_warning? } # A CERT advisory reference. get_info_response_info_cve_cert_cert_ref = element cert_ref { # Type of the advisory (e.g. "DFN-CERT", "CERT-BUND"). attribute type { text }? & get_info_response_info_cve_cert_cert_ref_name & get_info_response_info_cve_cert_cert_ref_title } # The name / ID of the advisory. get_info_response_info_cve_cert_cert_ref_name = element name { text } # The title of the advisory. get_info_response_info_cve_cert_cert_ref_title = element title { text } # A warning message, e.g. when the database is unavailable. get_info_response_info_cve_cert_warning = element warning { text } # Source representation of the information. Only when details were requested. get_info_response_info_cve_raw_data = element raw_data { text } # An DFN-CERT advisory info element. get_info_response_info_dfn_cert_adv = element dfn_cert_adv { get_info_response_info_dfn_cert_adv_title & get_info_response_info_dfn_cert_adv_summary & get_info_response_info_dfn_cert_adv_max_cvss & get_info_response_info_dfn_cert_adv_cve_refs & get_info_response_info_dfn_cert_adv_raw_data? } # Title of the advisory. get_info_response_info_dfn_cert_adv_title = element title { text } # Summary text of the advisory. get_info_response_info_dfn_cert_adv_summary = element summary { text } # Highest CVSS score of CVEs referenced by the advisory. get_info_response_info_dfn_cert_adv_max_cvss = element max_cvss { text } # Number of CVEs referenced by this advisory. get_info_response_info_dfn_cert_adv_cve_refs = element cve_refs { integer } # Source representation of the information. Only when details were requested. get_info_response_info_dfn_cert_adv_raw_data = element raw_data { text } # An OVAL definition info element. get_info_response_info_ovaldef = element ovaldef { get_info_response_info_ovaldef_version & get_info_response_info_ovaldef_deprecated & get_info_response_info_ovaldef_status & get_info_response_info_ovaldef_class & get_info_response_info_ovaldef_title & get_info_response_info_ovaldef_max_cvss & get_info_response_info_ovaldef_cve_refs & get_info_response_info_ovaldef_file & get_info_response_info_ovaldef_description? & get_info_response_info_ovaldef_raw_data? } # Version number of the OVAL definition. get_info_response_info_ovaldef_version = element version { integer } # Whether the definition is deprecated. get_info_response_info_ovaldef_deprecated = element deprecated { boolean } # Lifecycle status text of the definition. get_info_response_info_ovaldef_status = element status { text } # Definition class of the definition. get_info_response_info_ovaldef_class = element class { text } # Title of the definition. get_info_response_info_ovaldef_title = element title { text } # Highest CVSS score of CVEs referenced by the definition. get_info_response_info_ovaldef_max_cvss = element max_cvss { text } # Number of CVEs referenced by the definition. get_info_response_info_ovaldef_cve_refs = element cve_refs { integer } # Path to the source xml file, relative to the SCAP data directory. get_info_response_info_ovaldef_file = element file { text } # Longer description of the definition. Only when details were requested. get_info_response_info_ovaldef_description = element description { text } # Source representation of the information. Only when details were requested. get_info_response_info_ovaldef_raw_data = element raw_data { text } # A SecInfo entry. Could be CPE, CVE, NVT, OVALDEF or DFN-CERT Advisory. get_info_response_info_allinfo = element allinfo { get_info_response_info_allinfo_type & get_info_response_info_allinfo_extra & get_info_response_info_allinfo_severity } # Type of SecInfo entry. get_info_response_info_allinfo_type = element type { text } # Extra information from the entry like title or description. get_info_response_info_allinfo_extra = element extra { text } # Severity rating (CVSS score) of the entry. get_info_response_info_allinfo_severity = element severity { severity } get_info_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_info_response_filters_term & get_info_response_filters_name? & get_info_response_filters_keywords } # Filter term. get_info_response_filters_term = element term # type text { } # Filter name, if applicable. get_info_response_filters_name = element name { text } # Filter broken down into keywords. get_info_response_filters_keywords = element keywords { get_info_response_filters_keywords_keyword* } get_info_response_filters_keywords_keyword = element keyword { get_info_response_filters_keywords_keyword_column & get_info_response_filters_keywords_keyword_relation & get_info_response_filters_keywords_keyword_value } # Column prefix. get_info_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_info_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_info_response_filters_keywords_keyword_value = element value { text } get_info_response_sort = element sort { text & get_info_response_sort_field } get_info_response_sort_field = element field { get_info_response_sort_field_order } get_info_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_info_response_info_count = element info_count { get_info_response_info_count_filtered & get_info_response_info_count_page } # Number of info elements after filtering. get_info_response_info_count_filtered = element filtered { integer } # Number of info elements on current page. get_info_response_info_count_page = element page { integer } # Are details included in this response. get_info_response_details = element details # type boolean { } ## Response to get_lsc_credentials get_lsc_credentials_response = element get_lsc_credentials_response { attribute status { status } & attribute status_text { text } & get_lsc_credentials_response_lsc_credential* & get_lsc_credentials_response_filters & get_lsc_credentials_response_sort & get_lsc_credentials_response_lsc_credentials & get_lsc_credentials_response_lsc_credential_count } get_lsc_credentials_response_lsc_credential = element lsc_credential { attribute id { uuid } & get_lsc_credentials_response_lsc_credential_owner & get_lsc_credentials_response_lsc_credential_name & get_lsc_credentials_response_lsc_credential_login & get_lsc_credentials_response_lsc_credential_comment & get_lsc_credentials_response_lsc_credential_creation_time & get_lsc_credentials_response_lsc_credential_modification_time & get_lsc_credentials_response_lsc_credential_writable & get_lsc_credentials_response_lsc_credential_in_use & get_lsc_credentials_response_lsc_credential_permissions & get_lsc_credentials_response_lsc_credential_user_tags & get_lsc_credentials_response_lsc_credential_type & get_lsc_credentials_response_lsc_credential_targets & ( get_lsc_credentials_response_lsc_credential_public_key | get_lsc_credentials_response_lsc_credential_package ) } # Owner of the LSC credential. get_lsc_credentials_response_lsc_credential_owner = element owner { get_lsc_credentials_response_lsc_credential_owner_name } # The name of the owner. get_lsc_credentials_response_lsc_credential_owner_name = element name { name } # The name of the LSC credential. get_lsc_credentials_response_lsc_credential_name = element name { name } # The username of the LSC credential. get_lsc_credentials_response_lsc_credential_login = element login { name } # The comment on the LSC credential. get_lsc_credentials_response_lsc_credential_comment = element comment { text } # Date and time the info was created. get_lsc_credentials_response_lsc_credential_creation_time = element creation_time { iso_time } # Date and time the info was last modified. get_lsc_credentials_response_lsc_credential_modification_time = element modification_time { iso_time } # Whether this credential is writable. get_lsc_credentials_response_lsc_credential_writable = element writable { boolean } # Whether any targets are using the LSC credential. get_lsc_credentials_response_lsc_credential_in_use = element in_use { boolean } # Permissions that the current user has on the LSC credential. get_lsc_credentials_response_lsc_credential_permissions = element permissions { get_lsc_credentials_response_lsc_credential_permissions_permission* } get_lsc_credentials_response_lsc_credential_permissions_permission = element permission { get_lsc_credentials_response_lsc_credential_permissions_permission_name } # The name of the permission. get_lsc_credentials_response_lsc_credential_permissions_permission_name = element name { name } # Info on tags attached to the credential. get_lsc_credentials_response_lsc_credential_user_tags = element user_tags { get_lsc_credentials_response_lsc_credential_user_tags_count & get_lsc_credentials_response_lsc_credential_user_tags_tag* } # Number of attached tags. get_lsc_credentials_response_lsc_credential_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). get_lsc_credentials_response_lsc_credential_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & get_lsc_credentials_response_lsc_credential_user_tags_tag_name & get_lsc_credentials_response_lsc_credential_user_tags_tag_value & get_lsc_credentials_response_lsc_credential_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). get_lsc_credentials_response_lsc_credential_user_tags_tag_name = element name { text } # Value of the tag. get_lsc_credentials_response_lsc_credential_user_tags_tag_value = element value { text } # Comment for the tag. get_lsc_credentials_response_lsc_credential_user_tags_tag_comment = element comment { text } # The type of the LSC credential. get_lsc_credentials_response_lsc_credential_type = element type { xsd:token { pattern = "gen|pass" } } # All targets using this LSC credential. get_lsc_credentials_response_lsc_credential_targets = element targets { get_lsc_credentials_response_lsc_credential_targets_target* } get_lsc_credentials_response_lsc_credential_targets_target = element target { attribute id { uuid } & get_lsc_credentials_response_lsc_credential_targets_target_name & get_lsc_credentials_response_lsc_credential_targets_target_permissions? } # The name of the target. get_lsc_credentials_response_lsc_credential_targets_target_name = element name { name } # Permissions the user has on the target. get_lsc_credentials_response_lsc_credential_targets_target_permissions = element permissions { "" } get_lsc_credentials_response_lsc_credential_public_key = element public_key { text } get_lsc_credentials_response_lsc_credential_package = element package { base64 & attribute format { xsd:token { pattern = "rpm|deb|exe" } } } get_lsc_credentials_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_lsc_credentials_response_filters_term & get_lsc_credentials_response_filters_name? & get_lsc_credentials_response_filters_keywords } # Filter term. get_lsc_credentials_response_filters_term = element term { text } # Filter name, if applicable. get_lsc_credentials_response_filters_name = element name { text } # Filter broken down into keywords. get_lsc_credentials_response_filters_keywords = element keywords { get_lsc_credentials_response_filters_keywords_keyword* } get_lsc_credentials_response_filters_keywords_keyword = element keyword { get_lsc_credentials_response_filters_keywords_keyword_column & get_lsc_credentials_response_filters_keywords_keyword_relation & get_lsc_credentials_response_filters_keywords_keyword_value } # Column prefix. get_lsc_credentials_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_lsc_credentials_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_lsc_credentials_response_filters_keywords_keyword_value = element value { text } get_lsc_credentials_response_sort = element sort { text & get_lsc_credentials_response_sort_field } get_lsc_credentials_response_sort_field = element field { get_lsc_credentials_response_sort_field_order } get_lsc_credentials_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_lsc_credentials_response_lsc_credentials = element lsc_credentials { # First LSC credential. attribute start { integer } & # Maximum number of LSC credentials. attribute max { integer } } get_lsc_credentials_response_lsc_credential_count = element lsc_credential_count { get_lsc_credentials_response_lsc_credential_count_filtered & get_lsc_credentials_response_lsc_credential_count_page } # Number of LSC credentials after filtering. get_lsc_credentials_response_lsc_credential_count_filtered = element filtered { integer } # Number of LSC credentials on current page. get_lsc_credentials_response_lsc_credential_count_page = element page { integer } ## Response to get_notes get_notes_response = element get_notes_response { attribute status { status } & attribute status_text { text } & get_notes_response_note* & get_notes_response_filters & get_notes_response_sort & get_notes_response_notes & get_notes_response_note_count } get_notes_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_notes_response_filters_term & get_notes_response_filters_name? & get_notes_response_filters_keywords } # Filter term. get_notes_response_filters_term = element term { text } # Filter name, if applicable. get_notes_response_filters_name = element name { text } # Filter broken down into keywords. get_notes_response_filters_keywords = element keywords { get_notes_response_filters_keywords_keyword* } get_notes_response_filters_keywords_keyword = element keyword { get_notes_response_filters_keywords_keyword_column & get_notes_response_filters_keywords_keyword_relation & get_notes_response_filters_keywords_keyword_value } # Column prefix. get_notes_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_notes_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_notes_response_filters_keywords_keyword_value = element value { text } get_notes_response_sort = element sort { text & get_notes_response_sort_field } get_notes_response_sort_field = element field { get_notes_response_sort_field_order } get_notes_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_notes_response_notes = element notes { # First note. attribute start { integer } & # Maximum number of notes. attribute max { integer } } get_notes_response_note_count = element note_count { get_notes_response_note_count_filtered & get_notes_response_note_count_page } # Number of notes after filtering. get_notes_response_note_count_filtered = element filtered { integer } # Number of notes on current page. get_notes_response_note_count_page = element page { integer } get_notes_response_note = element note # type note { attribute id { uuid } & note_permissions & note_owner & note_nvt & note_text & note_creation_time & note_modification_time & note_writable & note_in_use & note_active & note_orphan & note_user_tags & ( note_hosts & note_port & note_severity & note_threat & note_task & note_end_time? & note_result? )? } ## Response to get_nvts get_nvts_response = element get_nvts_response { attribute status { status } & attribute status_text { text } & get_nvts_response_nvt } get_nvts_response_nvt = element nvt { attribute oid { oid } & get_nvts_response_nvt_name & get_nvts_response_nvt_user_tags & ( get_nvts_response_nvt_creation_time & get_nvts_response_nvt_modification_time & get_nvts_response_nvt_category & get_nvts_response_nvt_copyright & get_nvts_response_nvt_summary & get_nvts_response_nvt_family & get_nvts_response_nvt_version & get_nvts_response_nvt_cvss_base & get_nvts_response_nvt_qod & get_nvts_response_nvt_cve_id & get_nvts_response_nvt_cert_refs & get_nvts_response_nvt_bugtraq_id & get_nvts_response_nvt_xrefs & get_nvts_response_nvt_tags & get_nvts_response_nvt_preference_count? & get_nvts_response_nvt_timeout? & get_nvts_response_nvt_preferences? )? } # The name of the NVT. get_nvts_response_nvt_name = element name { name } # The category of the NVT. get_nvts_response_nvt_category = element category { text } # The creation time of the NVT. get_nvts_response_nvt_creation_time = element creation_time { iso_time } # The modification time of the NVT. get_nvts_response_nvt_modification_time = element modification_time { iso_time } # Info on tags attached to the NVT. get_nvts_response_nvt_user_tags = element user_tags { get_nvts_response_nvt_user_tags_count & get_nvts_response_nvt_user_tags_tag* } # Number of attached tags. get_nvts_response_nvt_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). get_nvts_response_nvt_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & get_nvts_response_nvt_user_tags_tag_name & get_nvts_response_nvt_user_tags_tag_value & get_nvts_response_nvt_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). get_nvts_response_nvt_user_tags_tag_name = element name { text } # Value of the tag. get_nvts_response_nvt_user_tags_tag_value = element value { text } # Comment for the tag. get_nvts_response_nvt_user_tags_tag_comment = element comment { text } # Copyright info of the NVT. get_nvts_response_nvt_copyright = element copyright { text } # Short description of the NVT. get_nvts_response_nvt_summary = element summary { text } # Name of the family the NVT belongs to. get_nvts_response_nvt_family = element family { text } # Version of the NVT. get_nvts_response_nvt_version = element version { text } # CVSS base score of the NVT. get_nvts_response_nvt_cvss_base = element cvss_base { text } # The quality of detection (QoD) of the NVT. get_nvts_response_nvt_qod = element qod { get_nvts_response_nvt_qod_value & get_nvts_response_nvt_qod_type } # The numeric QoD value. get_nvts_response_nvt_qod_value = element value { integer } # The QoD type. get_nvts_response_nvt_qod_type = element type { text } # IDs of the CVEs the NVT adresses. get_nvts_response_nvt_cve_id = element cve_id { text } # List of Bugtraq IDs of the NVT. get_nvts_response_nvt_bugtraq_id = element bugtraq_id { text } # List of CERT advisories referencing this NVT via CVEs. get_nvts_response_nvt_cert_refs = element cert_refs { get_nvts_response_nvt_cert_refs_cert_ref* & get_nvts_response_nvt_cert_refs_warning? } # A CERT advisory reference. get_nvts_response_nvt_cert_refs_cert_ref = element cert_ref { # ID of the advisory. attribute id { text }? & # Type of the advisory (e.g. "DFN-CERT", "CERT-BUND"). attribute type { text }? } # A warning message, e.g. when the database is not. get_nvts_response_nvt_cert_refs_warning = element warning { text } # List of other references of the NVT. get_nvts_response_nvt_xrefs = element xrefs { text } # The tags of the NVT, separated by vertical bars. get_nvts_response_nvt_tags = element tags { text } # The number of preferences for the NVT. get_nvts_response_nvt_preference_count = element preference_count { text } # The timeout of the NVT. get_nvts_response_nvt_timeout = element timeout { text } # List of preferences of the NVT. get_nvts_response_nvt_preferences = element preferences { text & get_nvts_response_nvt_preferences_timeout & get_nvts_response_nvt_preferences_preference* } # The timeout of the NVT. get_nvts_response_nvt_preferences_timeout = element timeout { text } get_nvts_response_nvt_preferences_preference = element preference { get_nvts_response_nvt_preferences_preference_nvt & get_nvts_response_nvt_preferences_preference_name & get_nvts_response_nvt_preferences_preference_type & get_nvts_response_nvt_preferences_preference_value & get_nvts_response_nvt_preferences_preference_alt* & get_nvts_response_nvt_preferences_preference_default } # NVT to which preference applies. get_nvts_response_nvt_preferences_preference_nvt = element nvt { attribute oid { oid } & get_nvts_response_nvt_preferences_preference_nvt_name } # The name of the NVT. get_nvts_response_nvt_preferences_preference_nvt_name = element name { name } # The name of the preference. get_nvts_response_nvt_preferences_preference_name = element name { text } # The type of the preference. get_nvts_response_nvt_preferences_preference_type = element type { text } # The value of the preference. get_nvts_response_nvt_preferences_preference_value = element value { text } # An alternate value of the preference. get_nvts_response_nvt_preferences_preference_alt = element alt { text } # The default value of the preference. get_nvts_response_nvt_preferences_preference_default = element default { text } ## Response to get_nvt_families get_nvt_families_response = element get_nvt_families_response { attribute status { status } & attribute status_text { text } & get_nvt_families_response_families } get_nvt_families_response_families = element families { get_nvt_families_response_families_family* } get_nvt_families_response_families_family = element family { get_nvt_families_response_families_family_name & get_nvt_families_response_families_family_max_nvt_count } # The name of the family. get_nvt_families_response_families_family_name = element name { name } # The number of NVTs in the family. get_nvt_families_response_families_family_max_nvt_count = element max_nvt_count { integer } ## Response to get_nvt_feed_version get_nvt_feed_version_response = element get_nvt_feed_version_response { attribute status { status } & attribute status_text { text } & get_nvt_feed_version_response_version } # NVT Feed version. get_nvt_feed_version_response_version = element version # type integer { } ## Response to get_overrides get_overrides_response = element get_overrides_response { attribute status { status } & attribute status_text { text } & get_overrides_response_override* & get_overrides_response_filters & get_overrides_response_sort & get_overrides_response_overrides & get_overrides_response_override_count } get_overrides_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_overrides_response_filters_term & get_overrides_response_filters_name? & get_overrides_response_filters_keywords } # Filter term. get_overrides_response_filters_term = element term { text } # Filter name, if applicable. get_overrides_response_filters_name = element name { text } # Filter broken down into keywords. get_overrides_response_filters_keywords = element keywords { get_overrides_response_filters_keywords_keyword* } get_overrides_response_filters_keywords_keyword = element keyword { get_overrides_response_filters_keywords_keyword_column & get_overrides_response_filters_keywords_keyword_relation & get_overrides_response_filters_keywords_keyword_value } # Column prefix. get_overrides_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_overrides_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_overrides_response_filters_keywords_keyword_value = element value { text } get_overrides_response_sort = element sort { text & get_overrides_response_sort_field } get_overrides_response_sort_field = element field { get_overrides_response_sort_field_order } get_overrides_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_overrides_response_overrides = element overrides { # First override. attribute start { integer } & # Maximum number of overrides. attribute max { integer } } get_overrides_response_override_count = element override_count { get_overrides_response_override_count_filtered & get_overrides_response_override_count_page } # Number of overrides after filtering. get_overrides_response_override_count_filtered = element filtered { integer } # Number of overrides on current page. get_overrides_response_override_count_page = element page { integer } get_overrides_response_override = element override # type override { attribute id { uuid } & override_permissions & override_owner & override_nvt & override_creation_time & override_modification_time & override_writable & override_in_use & override_active & override_text & override_threat & override_severity & override_new_threat & override_new_severity & override_orphan & override_permissions & override_user_tags & ( override_hosts & override_port & override_task & override_end_time? & override_result? )? } ## Response to get_permissions get_permissions_response = element get_permissions_response { attribute status { status } & attribute status_text { text } & get_permissions_response_permission* & get_permissions_response_filters & get_permissions_response_sort & get_permissions_response_permissions & get_permissions_response_permission_count } get_permissions_response_permission = element permission { attribute id { uuid } & get_permissions_response_permission_owner & get_permissions_response_permission_name & get_permissions_response_permission_comment & get_permissions_response_permission_creation_time & get_permissions_response_permission_modification_time & get_permissions_response_permission_writable & get_permissions_response_permission_in_use & get_permissions_response_permission_permissions & get_permissions_response_permission_user_tags & get_permissions_response_permission_resource & get_permissions_response_permission_subject } # Owner of the permission. get_permissions_response_permission_owner = element owner { get_permissions_response_permission_owner_name } # The name of the owner. get_permissions_response_permission_owner_name = element name { name } # The name of the permission. get_permissions_response_permission_name = element name { name } # The comment on the permission. get_permissions_response_permission_comment = element comment { text } # Date and time the permission was created. get_permissions_response_permission_creation_time = element creation_time { iso_time } # Date and time the permission was last modified. get_permissions_response_permission_modification_time = element modification_time { iso_time } # The resource the permission applies to. get_permissions_response_permission_resource = element resource { # UUID if permission applies to a resource, else 0. attribute id { uuid }? & get_permissions_response_permission_resource_name & get_permissions_response_permission_resource_type & get_permissions_response_permission_resource_trash & get_permissions_response_permission_resource_deleted } get_permissions_response_permission_resource_name = element name { text } # The OMP type of the resource. get_permissions_response_permission_resource_type = element type { text } # Whether the resource is in the trash. get_permissions_response_permission_resource_trash = element trash { boolean } # Whether the resource has been deleted. get_permissions_response_permission_resource_deleted = element deleted { boolean } # The subject the permission applies to. get_permissions_response_permission_subject = element subject { # UUID of the subject. attribute id { uuid }? & get_permissions_response_permission_subject_name & get_permissions_response_permission_subject_type & get_permissions_response_permission_subject_trash } get_permissions_response_permission_subject_name = element name { text } # The OMP type of the subject: group, role or user. get_permissions_response_permission_subject_type = element type { text } # Whether the subject is in the trash. get_permissions_response_permission_subject_trash = element trash { boolean } # Whether the subject has been deleted. get_permissions_response_permission_subject_deleted = element deleted { boolean } # Whether the permission is writable. get_permissions_response_permission_writable = element writable { boolean } # Whether the permission is in use. get_permissions_response_permission_in_use = element in_use { boolean } # Permissions that the current user has on the permission. get_permissions_response_permission_permissions = element permissions { get_permissions_response_permission_permissions_permission* } get_permissions_response_permission_permissions_permission = element permission { get_permissions_response_permission_permissions_permission_name } # The name of the permission. get_permissions_response_permission_permissions_permission_name = element name { name } # Info on tags attached to the permission. get_permissions_response_permission_user_tags = element user_tags { get_permissions_response_permission_user_tags_count & get_permissions_response_permission_user_tags_tag* } # Number of attached tags. get_permissions_response_permission_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). get_permissions_response_permission_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & get_permissions_response_permission_user_tags_tag_name & get_permissions_response_permission_user_tags_tag_value & get_permissions_response_permission_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). get_permissions_response_permission_user_tags_tag_name = element name { text } # Value of the tag. get_permissions_response_permission_user_tags_tag_value = element value { text } # Comment for the tag. get_permissions_response_permission_user_tags_tag_comment = element comment { text } get_permissions_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_permissions_response_filters_term & get_permissions_response_filters_name? & get_permissions_response_filters_keywords } # Filter term. get_permissions_response_filters_term = element term { text } # Filter name, if applicable. get_permissions_response_filters_name = element name { text } # Filter broken down into keywords. get_permissions_response_filters_keywords = element keywords { get_permissions_response_filters_keywords_keyword* } get_permissions_response_filters_keywords_keyword = element keyword { get_permissions_response_filters_keywords_keyword_column & get_permissions_response_filters_keywords_keyword_relation & get_permissions_response_filters_keywords_keyword_value } # Column prefix. get_permissions_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_permissions_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_permissions_response_filters_keywords_keyword_value = element value { text } get_permissions_response_sort = element sort { text & get_permissions_response_sort_field } get_permissions_response_sort_field = element field { get_permissions_response_sort_field_order } get_permissions_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_permissions_response_permissions = element permissions { # First permission. attribute start { integer } & # Maximum number of permissions. attribute max { integer } } get_permissions_response_permission_count = element permission_count { get_permissions_response_permission_count_filtered & get_permissions_response_permission_count_page } # Number of permissions after filtering. get_permissions_response_permission_count_filtered = element filtered { integer } # Number of permissions on current page. get_permissions_response_permission_count_page = element page { integer } ## Response to get_port_lists get_port_lists_response = element get_port_lists_response { attribute status { status } & attribute status_text { text } & get_port_lists_response_port_list* & get_port_lists_response_filters & get_port_lists_response_sort & get_port_lists_response_port_lists & get_port_lists_response_port_list_count } get_port_lists_response_port_list = element port_list { attribute id { uuid } & get_port_lists_response_port_list_owner & get_port_lists_response_port_list_name & get_port_lists_response_port_list_comment & get_port_lists_response_port_list_creation_time & get_port_lists_response_port_list_modification_time & get_port_lists_response_port_list_writable & get_port_lists_response_port_list_in_use & get_port_lists_response_port_list_permissions & get_port_lists_response_port_list_user_tags & get_port_lists_response_port_list_port_count & get_port_lists_response_port_list_port_ranges? & get_port_lists_response_port_list_targets? } # Owner of the port list. get_port_lists_response_port_list_owner = element owner { get_port_lists_response_port_list_owner_name } # The name of the owner. get_port_lists_response_port_list_owner_name = element name { name } # The name of the port list. get_port_lists_response_port_list_name = element name { name } # The comment on the port list. get_port_lists_response_port_list_comment = element comment { text } get_port_lists_response_port_list_creation_time = element creation_time { iso_time } get_port_lists_response_port_list_modification_time = element modification_time { iso_time } # Whether the port list is writable. get_port_lists_response_port_list_writable = element writable { boolean } # Whether any targets are using the port list. get_port_lists_response_port_list_in_use = element in_use { boolean } # Permissions that the current user has on the port list. get_port_lists_response_port_list_permissions = element permissions { get_port_lists_response_port_list_permissions_permission* } get_port_lists_response_port_list_permissions_permission = element permission { get_port_lists_response_port_list_permissions_permission_name } # The name of the permission. get_port_lists_response_port_list_permissions_permission_name = element name { name } # Info on tags attached to the port list. get_port_lists_response_port_list_user_tags = element user_tags { get_port_lists_response_port_list_user_tags_count & get_port_lists_response_port_list_user_tags_tag* } # Number of attached tags. get_port_lists_response_port_list_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). get_port_lists_response_port_list_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & get_port_lists_response_port_list_user_tags_tag_name & get_port_lists_response_port_list_user_tags_tag_value & get_port_lists_response_port_list_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). get_port_lists_response_port_list_user_tags_tag_name = element name { text } # Value of the tag. get_port_lists_response_port_list_user_tags_tag_value = element value { text } # Comment for the tag. get_port_lists_response_port_list_user_tags_tag_comment = element comment { text } get_port_lists_response_port_list_port_count = element port_count { get_port_lists_response_port_list_port_count_all & get_port_lists_response_port_list_port_count_tcp & get_port_lists_response_port_list_port_count_udp } # Total number of ports. get_port_lists_response_port_list_port_count_all = element all { integer } # Total number of TCP ports. get_port_lists_response_port_list_port_count_tcp = element tcp { integer } # Total number of UDP ports. get_port_lists_response_port_list_port_count_udp = element udp { integer } get_port_lists_response_port_list_port_ranges = element port_ranges { get_port_lists_response_port_list_port_ranges_port_range* } get_port_lists_response_port_list_port_ranges_port_range = element port_range { attribute id { uuid } & get_port_lists_response_port_list_port_ranges_port_range_start & get_port_lists_response_port_list_port_ranges_port_range_end & get_port_lists_response_port_list_port_ranges_port_range_type & get_port_lists_response_port_list_port_ranges_port_range_comment } # First port in range. get_port_lists_response_port_list_port_ranges_port_range_start = element start { integer } # Last port in range. get_port_lists_response_port_list_port_ranges_port_range_end = element end { integer } # The type of port: TCP, UDP, .... get_port_lists_response_port_list_port_ranges_port_range_type = element type { text } # The comment on the port range. get_port_lists_response_port_list_port_ranges_port_range_comment = element comment { text } # The targets using the port list. get_port_lists_response_port_list_targets = element targets { get_port_lists_response_port_list_targets_target* } get_port_lists_response_port_list_targets_target = element target { attribute id { uuid } & get_port_lists_response_port_list_targets_target_name & get_port_lists_response_port_list_targets_target_permissions? } # The name of the target. get_port_lists_response_port_list_targets_target_name = element name { name } # Permissions the user has on the target. get_port_lists_response_port_list_targets_target_permissions = element permissions { "" } get_port_lists_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_port_lists_response_filters_term & get_port_lists_response_filters_name? & get_port_lists_response_filters_keywords } # Filter term. get_port_lists_response_filters_term = element term { text } # Filter name, if applicable. get_port_lists_response_filters_name = element name { text } # Filter broken down into keywords. get_port_lists_response_filters_keywords = element keywords { get_port_lists_response_filters_keywords_keyword* } get_port_lists_response_filters_keywords_keyword = element keyword { get_port_lists_response_filters_keywords_keyword_column & get_port_lists_response_filters_keywords_keyword_relation & get_port_lists_response_filters_keywords_keyword_value } # Column prefix. get_port_lists_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_port_lists_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_port_lists_response_filters_keywords_keyword_value = element value { text } get_port_lists_response_sort = element sort { text & get_port_lists_response_sort_field } get_port_lists_response_sort_field = element field { get_port_lists_response_sort_field_order } get_port_lists_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_port_lists_response_port_lists = element port_lists { # First port list. attribute start { integer } & # Maximum number of port lists. attribute max { integer } } get_port_lists_response_port_list_count = element port_list_count { get_port_lists_response_port_list_count_filtered & get_port_lists_response_port_list_count_page } # Number of port lists after filtering. get_port_lists_response_port_list_count_filtered = element filtered { integer } # Number of port lists on current page. get_port_lists_response_port_list_count_page = element page { integer } ## Response to get_preferences get_preferences_response = element get_preferences_response { attribute status { status } & attribute status_text { text } & get_preferences_response_preference* } get_preferences_response_preference = element preference { get_preferences_response_preference_nvt & get_preferences_response_preference_name & get_preferences_response_preference_type & get_preferences_response_preference_value & get_preferences_response_preference_alt* & get_preferences_response_preference_default } # NVT to which preference applies. get_preferences_response_preference_nvt = element nvt { attribute oid { oid } & get_preferences_response_preference_nvt_name } # The name of the NVT. get_preferences_response_preference_nvt_name = element name { name } # The name of the preference. get_preferences_response_preference_name = element name { name } # The type of preference. get_preferences_response_preference_type = element type { text } # The value of the preference. get_preferences_response_preference_value = element value { text } # An alternate value of the preference. get_preferences_response_preference_alt = element alt { text } # The default value of the preference. get_preferences_response_preference_default = element default { text } ## Response to get_reports get_reports_response = element get_reports_response { attribute status { status } & attribute status_text { text } & get_reports_response_report* & ( get_reports_response_filters & get_reports_response_sort & get_reports_response_reports & get_reports_response_report_count )? } # Actually attributes and either base64 or a report. get_reports_response_report = element report # type report { text # RNC limitation: base64 & attribute id { uuid } & attribute format_id { uuid } & attribute extension { text } & attribute content_type { text } & attribute type { xsd:token { pattern = "scan|assets|prognostic" } }? & report_owner & report_name & report_comment & report_creation_time & report_modification_time & report_writable & report_in_use & report_task & report_report_format & report_report } get_reports_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_reports_response_filters_term & get_reports_response_filters_name? & get_reports_response_filters_keywords } # Filter term. get_reports_response_filters_term = element term { text } # Filter name, if applicable. get_reports_response_filters_name = element name { text } # Filter broken down into keywords. get_reports_response_filters_keywords = element keywords { get_reports_response_filters_keywords_keyword* } get_reports_response_filters_keywords_keyword = element keyword { get_reports_response_filters_keywords_keyword_column & get_reports_response_filters_keywords_keyword_relation & get_reports_response_filters_keywords_keyword_value } # Column prefix. get_reports_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_reports_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_reports_response_filters_keywords_keyword_value = element value { text } get_reports_response_sort = element sort { text & get_reports_response_sort_field } get_reports_response_sort_field = element field { get_reports_response_sort_field_order } get_reports_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_reports_response_reports = element reports { # First report. attribute start { integer } & # Maximum number of reports. attribute max { integer } } get_reports_response_report_count = element report_count { get_reports_response_report_count_filtered & get_reports_response_report_count_page } # Number of reports after filtering. get_reports_response_report_count_filtered = element filtered { integer } # Number of reports on current page. get_reports_response_report_count_page = element page { integer } ## Response to get_report_formats get_report_formats_response = element get_report_formats_response { attribute status { status } & attribute status_text { text } & get_report_formats_response_report_format* & get_report_formats_response_filters & get_report_formats_response_sort & get_report_formats_response_report_formats & get_report_formats_response_report_format_count } get_report_formats_response_report_format = element report_format { attribute id { uuid } & get_report_formats_response_report_format_owner & get_report_formats_response_report_format_name & get_report_formats_response_report_format_creation_time & get_report_formats_response_report_format_modification_time & get_report_formats_response_report_format_writable & get_report_formats_response_report_format_in_use & get_report_formats_response_report_format_permissions & get_report_formats_response_report_format_user_tags & get_report_formats_response_report_format_extension & get_report_formats_response_report_format_content_type & get_report_formats_response_report_format_summary & get_report_formats_response_report_format_description & get_report_formats_response_report_format_global & get_report_formats_response_report_format_predefined & get_report_formats_response_report_format_alerts? & ( get_report_formats_response_report_format_file* & get_report_formats_response_report_format_signature )? & get_report_formats_response_report_format_trust & get_report_formats_response_report_format_active & get_report_formats_response_report_format_param* } # Owner of the report format. get_report_formats_response_report_format_owner = element owner { get_report_formats_response_report_format_owner_name } # The name of the owner. get_report_formats_response_report_format_owner_name = element name { name } # The name of the report format. get_report_formats_response_report_format_name = element name { name } get_report_formats_response_report_format_creation_time = element creation_time { iso_time } get_report_formats_response_report_format_modification_time = element modification_time { iso_time } # Whether the report format is global or in use. get_report_formats_response_report_format_writable = element writable { boolean } # Whether any alerts are using the report format. get_report_formats_response_report_format_in_use = element in_use { boolean } # Permissions that the current user has on the report format. get_report_formats_response_report_format_permissions = element permissions { get_report_formats_response_report_format_permissions_permission* } get_report_formats_response_report_format_permissions_permission = element permission { get_report_formats_response_report_format_permissions_permission_name } # The name of the permission. get_report_formats_response_report_format_permissions_permission_name = element name { name } # Info on tags attached to the report format. get_report_formats_response_report_format_user_tags = element user_tags { get_report_formats_response_report_format_user_tags_count & get_report_formats_response_report_format_user_tags_tag* } # Number of attached tags. get_report_formats_response_report_format_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). get_report_formats_response_report_format_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & get_report_formats_response_report_format_user_tags_tag_name & get_report_formats_response_report_format_user_tags_tag_value & get_report_formats_response_report_format_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). get_report_formats_response_report_format_user_tags_tag_name = element name { text } # Value of the tag. get_report_formats_response_report_format_user_tags_tag_value = element value { text } # Comment for the tag. get_report_formats_response_report_format_user_tags_tag_comment = element comment { text } get_report_formats_response_report_format_summary = element summary { text } get_report_formats_response_report_format_description = element description { text } get_report_formats_response_report_format_extension = element extension { text } get_report_formats_response_report_format_global = element global { boolean } get_report_formats_response_report_format_content_type = element content_type { text } get_report_formats_response_report_format_predefined = element predefined { boolean } # Alerts using the report format. get_report_formats_response_report_format_alerts = element alerts { get_report_formats_response_report_format_alerts_alert* } get_report_formats_response_report_format_alerts_alert = element alert { # UUID of the alert. attribute id { uuid } & get_report_formats_response_report_format_alerts_alert_name & get_report_formats_response_report_format_alerts_alert_permissions? } # Name of the alert. get_report_formats_response_report_format_alerts_alert_name = element name { name } # Permissions the user has on the permission. get_report_formats_response_report_format_alerts_alert_permissions = element permissions { "" } get_report_formats_response_report_format_param = element param { get_report_formats_response_report_format_param_name & get_report_formats_response_report_format_param_type & get_report_formats_response_report_format_param_value & get_report_formats_response_report_format_param_default } # The name of the param. get_report_formats_response_report_format_param_name = element name { name } # The type of the param. get_report_formats_response_report_format_param_type = element type { text # RNC limitation: xsd:token { pattern = "boolean|integer|selection|string|text" } & get_report_formats_response_report_format_param_type_min? & get_report_formats_response_report_format_param_type_max? & get_report_formats_response_report_format_param_type_options? } # Minimum. get_report_formats_response_report_format_param_type_min = element min { text } # Maximum. get_report_formats_response_report_format_param_type_max = element max { text } # Selection options. get_report_formats_response_report_format_param_type_options = element options { get_report_formats_response_report_format_param_type_options_option* } # Option value. get_report_formats_response_report_format_param_type_options_option = element option { text } # The value of the param. get_report_formats_response_report_format_param_value = element value { text } # The fallback value of the param. get_report_formats_response_report_format_param_default = element default { text } # One of the files used to generate the report. get_report_formats_response_report_format_file = element file { text # RNC limitation: base64 & attribute name { text } } # The report format signature. get_report_formats_response_report_format_signature = element signature { text } # Whether signature verification succeeded. get_report_formats_response_report_format_trust = element trust { text # RNC limitation: xsd:token { pattern = "yes|no|unknown" } & attribute name { text } & get_report_formats_response_report_format_trust_time } # The time the trust was checked. get_report_formats_response_report_format_trust_time = element time { iso_time } # Whether the report format is active. get_report_formats_response_report_format_active = element active { boolean } get_report_formats_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_report_formats_response_filters_term & get_report_formats_response_filters_name? & get_report_formats_response_filters_keywords } # Filter term. get_report_formats_response_filters_term = element term { text } # Filter name, if applicable. get_report_formats_response_filters_name = element name { text } # Filter broken down into keywords. get_report_formats_response_filters_keywords = element keywords { get_report_formats_response_filters_keywords_keyword* } get_report_formats_response_filters_keywords_keyword = element keyword { get_report_formats_response_filters_keywords_keyword_column & get_report_formats_response_filters_keywords_keyword_relation & get_report_formats_response_filters_keywords_keyword_value } # Column prefix. get_report_formats_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_report_formats_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_report_formats_response_filters_keywords_keyword_value = element value { text } get_report_formats_response_sort = element sort { text & get_report_formats_response_sort_field } get_report_formats_response_sort_field = element field { get_report_formats_response_sort_field_order } get_report_formats_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_report_formats_response_report_formats = element report_formats { # First report format. attribute start { integer } & # Maximum number of report formats. attribute max { integer } } get_report_formats_response_report_format_count = element report_format_count { get_report_formats_response_report_format_count_filtered & get_report_formats_response_report_format_count_page } # Number of report formats after filtering. get_report_formats_response_report_format_count_filtered = element filtered { integer } # Number of report formats on current page. get_report_formats_response_report_format_count_page = element page { integer } ## Response to get_results get_results_response = element get_results_response { attribute status { status } & attribute status_text { text } & get_results_response_result* & get_results_response_filters & get_results_response_sort & get_results_response_results & get_results_response_result_count } get_results_response_result = element result # type result { attribute id { uuid } & result_name & result_owner & result_comment & result_creation_time & result_modification_time & result_user_tags? & result_report? & result_task? & result_host & result_port & result_nvt & result_scan_nvt_version & result_threat & result_severity & result_qod & result_original_threat? & result_original_severity? & result_description & result_delta? & result_details & result_detection & result_notes? & result_overrides? } get_results_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_results_response_filters_term & get_results_response_filters_name? & get_results_response_filters_keywords } # Filter term. get_results_response_filters_term = element term { text } # Filter name, if applicable. get_results_response_filters_name = element name { text } # Filter broken down into keywords. get_results_response_filters_keywords = element keywords { get_results_response_filters_keywords_keyword* } get_results_response_filters_keywords_keyword = element keyword { get_results_response_filters_keywords_keyword_column & get_results_response_filters_keywords_keyword_relation & get_results_response_filters_keywords_keyword_value } # Column prefix. get_results_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_results_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_results_response_filters_keywords_keyword_value = element value { text } get_results_response_sort = element sort { text & get_results_response_sort_field } get_results_response_sort_field = element field { get_results_response_sort_field_order } get_results_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_results_response_results = element results { # First result. attribute start { integer } & # Maximum number of results. attribute max { integer } } get_results_response_result_count = element result_count { get_results_response_result_count_filtered & get_results_response_result_count_page } # Number of results after filtering. get_results_response_result_count_filtered = element filtered { integer } # Number of results on current page. get_results_response_result_count_page = element page { integer } ## Response to get_roles get_roles_response = element get_roles_response { attribute status { status } & attribute status_text { text } & get_roles_response_role* & get_roles_response_filters & get_roles_response_sort & get_roles_response_roles & get_roles_response_role_count } get_roles_response_role = element role { attribute id { uuid } & get_roles_response_role_owner & get_roles_response_role_name & get_roles_response_role_comment & get_roles_response_role_creation_time & get_roles_response_role_modification_time & get_roles_response_role_writable & get_roles_response_role_in_use & get_roles_response_role_permissions & get_roles_response_role_user_tags & get_roles_response_role_users } # Owner of the role. get_roles_response_role_owner = element owner { get_roles_response_role_owner_name } # The name of the owner. get_roles_response_role_owner_name = element name { name } # The name of the role. get_roles_response_role_name = element name { name } # The comment on the role. get_roles_response_role_comment = element comment { text } # Date and time the role was created. get_roles_response_role_creation_time = element creation_time { iso_time } # Date and time the role was last modified. get_roles_response_role_modification_time = element modification_time { iso_time } # A comma-separated list of the users who have this role. get_roles_response_role_users = element users { text } # Whether the role is writable. get_roles_response_role_writable = element writable { boolean } # Whether the role is in use. get_roles_response_role_in_use = element in_use { boolean } # Permissions that the current user has on the role. get_roles_response_role_permissions = element permissions { get_roles_response_role_permissions_permission* } get_roles_response_role_permissions_permission = element permission { get_roles_response_role_permissions_permission_name } # The name of the permission. get_roles_response_role_permissions_permission_name = element name { name } # Info on tags attached to the role. get_roles_response_role_user_tags = element user_tags { get_roles_response_role_user_tags_count & get_roles_response_role_user_tags_tag* } # Number of attached tags. get_roles_response_role_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). get_roles_response_role_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & get_roles_response_role_user_tags_tag_name & get_roles_response_role_user_tags_tag_value & get_roles_response_role_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). get_roles_response_role_user_tags_tag_name = element name { text } # Value of the tag. get_roles_response_role_user_tags_tag_value = element value { text } # Comment for the tag. get_roles_response_role_user_tags_tag_comment = element comment { text } get_roles_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_roles_response_filters_term & get_roles_response_filters_name? & get_roles_response_filters_keywords } # Filter term. get_roles_response_filters_term = element term { text } # Filter name, if applicable. get_roles_response_filters_name = element name { text } # Filter broken down into keywords. get_roles_response_filters_keywords = element keywords { get_roles_response_filters_keywords_keyword* } get_roles_response_filters_keywords_keyword = element keyword { get_roles_response_filters_keywords_keyword_column & get_roles_response_filters_keywords_keyword_relation & get_roles_response_filters_keywords_keyword_value } # Column prefix. get_roles_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_roles_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_roles_response_filters_keywords_keyword_value = element value { text } get_roles_response_sort = element sort { text & get_roles_response_sort_field } get_roles_response_sort_field = element field { get_roles_response_sort_field_order } get_roles_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_roles_response_roles = element roles { # First role. attribute start { integer } & # Maximum number of roles. attribute max { integer } } get_roles_response_role_count = element role_count { get_roles_response_role_count_filtered & get_roles_response_role_count_page } # Number of roles after filtering. get_roles_response_role_count_filtered = element filtered { integer } # Number of roles on current page. get_roles_response_role_count_page = element page { integer } ## Response to get_scanners get_scanners_response = element get_scanners_response { attribute status { status } & attribute status_text { text } & get_scanners_response_scanner* & get_scanners_response_filters & get_scanners_response_sort & get_scanners_response_scanners & get_scanners_response_scanner_count } get_scanners_response_scanner = element scanner { attribute id { uuid } & get_scanners_response_scanner_owner & get_scanners_response_scanner_name & get_scanners_response_scanner_comment & get_scanners_response_scanner_creation_time & get_scanners_response_scanner_modification_time & get_scanners_response_scanner_writable & get_scanners_response_scanner_in_use & get_scanners_response_scanner_permissions & get_scanners_response_scanner_user_tags & get_scanners_response_scanner_host & get_scanners_response_scanner_port & get_scanners_response_scanner_type & get_scanners_response_scanner_ca_pub & get_scanners_response_scanner_key_pub & get_scanners_response_scanner_tasks? } # Owner of the scanner. get_scanners_response_scanner_owner = element owner { get_scanners_response_scanner_owner_name } # The name of the owner. get_scanners_response_scanner_owner_name = element name { name } # The name of the scanner. get_scanners_response_scanner_name = element name { name } # The comment on the scanner. get_scanners_response_scanner_comment = element comment { text } get_scanners_response_scanner_creation_time = element creation_time { iso_time } get_scanners_response_scanner_modification_time = element modification_time { iso_time } # Whether the scanner is writable. get_scanners_response_scanner_writable = element writable { boolean } # Whether any tasks are using the scanner. get_scanners_response_scanner_in_use = element in_use { boolean } # Permissions that the current user has on the scanner. get_scanners_response_scanner_permissions = element permissions { get_scanners_response_scanner_permissions_permission* } get_scanners_response_scanner_permissions_permission = element permission { get_scanners_response_scanner_permissions_permission_name } # The name of the permission. get_scanners_response_scanner_permissions_permission_name = element name { name } # Info on tags attached to the chedule. get_scanners_response_scanner_user_tags = element user_tags { get_scanners_response_scanner_user_tags_count & get_scanners_response_scanner_user_tags_tag* } # Number of attached tags. get_scanners_response_scanner_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). get_scanners_response_scanner_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & get_scanners_response_scanner_user_tags_tag_name & get_scanners_response_scanner_user_tags_tag_value & get_scanners_response_scanner_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). get_scanners_response_scanner_user_tags_tag_name = element name { text } # Value of the tag. get_scanners_response_scanner_user_tags_tag_value = element value { text } # Comment for the tag. get_scanners_response_scanner_user_tags_tag_comment = element comment { text } # Host of the scanner. get_scanners_response_scanner_host = element host { text } # Port of the scanner. get_scanners_response_scanner_port = element port { text } # Type of the scanner. get_scanners_response_scanner_type = element type { text } # CA Certificate to verify the scanner's certificate. get_scanners_response_scanner_ca_pub = element ca_pub { text } # Certificate of credentials to authenticate with. get_scanners_response_scanner_key_pub = element key_pub { text } get_scanners_response_scanner_tasks = element tasks { get_scanners_response_scanner_tasks_task* } get_scanners_response_scanner_tasks_task = element task { attribute id { uuid } & get_scanners_response_scanner_tasks_task_name & get_scanners_response_scanner_tasks_task_permissions? } # The name of the task. get_scanners_response_scanner_tasks_task_name = element name { name } # Permissions the user has on the task. get_scanners_response_scanner_tasks_task_permissions = element permissions { "" } get_scanners_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_scanners_response_filters_term & get_scanners_response_filters_name? & get_scanners_response_filters_keywords } # Filter term. get_scanners_response_filters_term = element term { text } # Filter name, if applicable. get_scanners_response_filters_name = element name { text } # Filter broken down into keywords. get_scanners_response_filters_keywords = element keywords { get_scanners_response_filters_keywords_keyword* } get_scanners_response_filters_keywords_keyword = element keyword { get_scanners_response_filters_keywords_keyword_column & get_scanners_response_filters_keywords_keyword_relation & get_scanners_response_filters_keywords_keyword_value } # Column prefix. get_scanners_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_scanners_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_scanners_response_filters_keywords_keyword_value = element value { text } get_scanners_response_sort = element sort { text & get_scanners_response_sort_field } get_scanners_response_sort_field = element field { get_scanners_response_sort_field_order } get_scanners_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_scanners_response_scanners = element scanners { # First scanner. attribute start { integer } & # Maximum number of scanners. attribute max { integer } } get_scanners_response_scanner_count = element scanner_count { get_scanners_response_scanner_count_filtered & get_scanners_response_scanner_count_page } # Number of scanners after filtering. get_scanners_response_scanner_count_filtered = element filtered { integer } # Number of scanners on current page. get_scanners_response_scanner_count_page = element page { integer } ## Response to get_schedules get_schedules_response = element get_schedules_response { attribute status { status } & attribute status_text { text } & get_schedules_response_schedule* & get_schedules_response_filters & get_schedules_response_sort & get_schedules_response_schedules & get_schedules_response_schedule_count } get_schedules_response_schedule = element schedule { attribute id { uuid } & get_schedules_response_schedule_owner & get_schedules_response_schedule_name & get_schedules_response_schedule_comment & get_schedules_response_schedule_creation_time & get_schedules_response_schedule_modification_time & get_schedules_response_schedule_writable & get_schedules_response_schedule_in_use & get_schedules_response_schedule_permissions & get_schedules_response_schedule_user_tags & get_schedules_response_schedule_first_time & get_schedules_response_schedule_next_time & get_schedules_response_schedule_timezone & get_schedules_response_schedule_timezone_abbrev & get_schedules_response_schedule_period & get_schedules_response_schedule_period_months & get_schedules_response_schedule_simple_period & get_schedules_response_schedule_duration & get_schedules_response_schedule_simple_duration & get_schedules_response_schedule_tasks? } # Owner of the schedule. get_schedules_response_schedule_owner = element owner { get_schedules_response_schedule_owner_name } # The name of the owner. get_schedules_response_schedule_owner_name = element name { name } # The name of the schedule. get_schedules_response_schedule_name = element name { name } # The comment on the schedule. get_schedules_response_schedule_comment = element comment { text } get_schedules_response_schedule_creation_time = element creation_time { iso_time } get_schedules_response_schedule_modification_time = element modification_time { iso_time } # Whether the schedule is writable. get_schedules_response_schedule_writable = element writable { boolean } # Whether any tasks are using the schedule. get_schedules_response_schedule_in_use = element in_use { boolean } # Permissions that the current user has on the schedule. get_schedules_response_schedule_permissions = element permissions { get_schedules_response_schedule_permissions_permission* } get_schedules_response_schedule_permissions_permission = element permission { get_schedules_response_schedule_permissions_permission_name } # The name of the permission. get_schedules_response_schedule_permissions_permission_name = element name { name } # Info on tags attached to the schedule. get_schedules_response_schedule_user_tags = element user_tags { get_schedules_response_schedule_user_tags_count & get_schedules_response_schedule_user_tags_tag* } # Number of attached tags. get_schedules_response_schedule_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). get_schedules_response_schedule_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & get_schedules_response_schedule_user_tags_tag_name & get_schedules_response_schedule_user_tags_tag_value & get_schedules_response_schedule_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). get_schedules_response_schedule_user_tags_tag_name = element name { text } # Value of the tag. get_schedules_response_schedule_user_tags_tag_value = element value { text } # Comment for the tag. get_schedules_response_schedule_user_tags_tag_comment = element comment { text } # First time the task ran or will run. get_schedules_response_schedule_first_time = element first_time { iso_time } # The next time the task will run. get_schedules_response_schedule_next_time = element next_time { iso_time } # The timezone that the schedule follows. get_schedules_response_schedule_timezone = element timezone { timezone } # The abbreviated name of the timezone. get_schedules_response_schedule_timezone_abbrev = element timezone_abbrev { text } # How often the task will run, in seconds. get_schedules_response_schedule_period = element period { integer } # How often the task will run, months portion. get_schedules_response_schedule_period_months = element period_months { integer } # Simple representation of period, if available. get_schedules_response_schedule_simple_period = element simple_period { text & get_schedules_response_schedule_simple_period_unit? } get_schedules_response_schedule_simple_period_unit = element unit { time_unit } # How long the task will run for (0 for entire task). get_schedules_response_schedule_duration = element duration { integer } # Simple representation of duration, if available. get_schedules_response_schedule_simple_duration = element simple_duration { text & get_schedules_response_schedule_simple_duration_unit? } get_schedules_response_schedule_simple_duration_unit = element unit { time_unit } get_schedules_response_schedule_tasks = element tasks { get_schedules_response_schedule_tasks_task* } get_schedules_response_schedule_tasks_task = element task { attribute id { uuid } & get_schedules_response_schedule_tasks_task_name & get_schedules_response_schedule_tasks_task_permissions? } # The name of the task. get_schedules_response_schedule_tasks_task_name = element name { name } # Permissions the user has on the task. get_schedules_response_schedule_tasks_task_permissions = element permissions { "" } get_schedules_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_schedules_response_filters_term & get_schedules_response_filters_name? & get_schedules_response_filters_keywords } # Filter term. get_schedules_response_filters_term = element term { text } # Filter name, if applicable. get_schedules_response_filters_name = element name { text } # Filter broken down into keywords. get_schedules_response_filters_keywords = element keywords { get_schedules_response_filters_keywords_keyword* } get_schedules_response_filters_keywords_keyword = element keyword { get_schedules_response_filters_keywords_keyword_column & get_schedules_response_filters_keywords_keyword_relation & get_schedules_response_filters_keywords_keyword_value } # Column prefix. get_schedules_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_schedules_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_schedules_response_filters_keywords_keyword_value = element value { text } get_schedules_response_sort = element sort { text & get_schedules_response_sort_field } get_schedules_response_sort_field = element field { get_schedules_response_sort_field_order } get_schedules_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_schedules_response_schedules = element schedules { # First schedule. attribute start { integer } & # Maximum number of schedules. attribute max { integer } } get_schedules_response_schedule_count = element schedule_count { get_schedules_response_schedule_count_filtered & get_schedules_response_schedule_count_page } # Number of schedules after filtering. get_schedules_response_schedule_count_filtered = element filtered { integer } # Number of schedules on current page. get_schedules_response_schedule_count_page = element page { integer } ## Response to get_settings get_settings_response = element get_settings_response { attribute status { status } & attribute status_text { text } & get_settings_response_filters & get_settings_response_settings & get_settings_response_setting* & get_settings_response_setting_count } get_settings_response_filters = element filters { get_settings_response_filters_term } # Filter term. get_settings_response_filters_term = element term { text } get_settings_response_settings = element settings { # First setting. attribute start { integer } & # Maximum number of settings. attribute max { integer } } get_settings_response_setting = element setting { get_settings_response_setting_name & get_settings_response_setting_comment & get_settings_response_setting_value } get_settings_response_setting_name = element name { text } get_settings_response_setting_comment = element comment { text } get_settings_response_setting_value = element value { text } get_settings_response_setting_count = element setting_count { get_settings_response_setting_count_filtered & get_settings_response_setting_count_page } # Number of settings after filtering. get_settings_response_setting_count_filtered = element filtered { integer } # Number of settings on current page. get_settings_response_setting_count_page = element page { integer } ## Response to get_slaves get_slaves_response = element get_slaves_response { attribute status { status } & attribute status_text { text } & get_slaves_response_slave* & get_slaves_response_filters & get_slaves_response_sort & get_slaves_response_slaves & get_slaves_response_slave_count } get_slaves_response_slave = element slave { attribute id { uuid } & get_slaves_response_slave_owner & get_slaves_response_slave_name & get_slaves_response_slave_comment & get_slaves_response_slave_creation_time & get_slaves_response_slave_modification_time & get_slaves_response_slave_writable & get_slaves_response_slave_in_use & get_slaves_response_slave_permissions & get_slaves_response_slave_user_tags & get_slaves_response_slave_host & get_slaves_response_slave_port & get_slaves_response_slave_login & get_slaves_response_slave_tasks? } # Owner of the slave. get_slaves_response_slave_owner = element owner { get_slaves_response_slave_owner_name } # The name of the owner. get_slaves_response_slave_owner_name = element name { name } # The name of the slave. get_slaves_response_slave_name = element name { name } # The comment on the slave. get_slaves_response_slave_comment = element comment { text } get_slaves_response_slave_creation_time = element creation_time { iso_time } get_slaves_response_slave_modification_time = element modification_time { iso_time } # Whether the slave is writable. get_slaves_response_slave_writable = element writable { boolean } # Whether any slaves are using the slave. get_slaves_response_slave_in_use = element in_use { boolean } # Permissions that the current user has on the slave. get_slaves_response_slave_permissions = element permissions { get_slaves_response_slave_permissions_permission* } get_slaves_response_slave_permissions_permission = element permission { get_slaves_response_slave_permissions_permission_name } # The name of the permission. get_slaves_response_slave_permissions_permission_name = element name { name } # Info on tags attached to the slave. get_slaves_response_slave_user_tags = element user_tags { get_slaves_response_slave_user_tags_count & get_slaves_response_slave_user_tags_tag* } # Number of attached tags. get_slaves_response_slave_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). get_slaves_response_slave_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & get_slaves_response_slave_user_tags_tag_name & get_slaves_response_slave_user_tags_tag_value & get_slaves_response_slave_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). get_slaves_response_slave_user_tags_tag_name = element name { text } # Value of the tag. get_slaves_response_slave_user_tags_tag_value = element value { text } # Comment for the tag. get_slaves_response_slave_user_tags_tag_comment = element comment { text } # The host that the slave Manager is running on. get_slaves_response_slave_host = element host { text } # The port that the slave Manager is serving on the host. get_slaves_response_slave_port = element port { text } # Login name on the slave Manager. get_slaves_response_slave_login = element login { text } get_slaves_response_slave_tasks = element tasks { get_slaves_response_slave_tasks_task* } get_slaves_response_slave_tasks_task = element task { attribute id { uuid } & get_slaves_response_slave_tasks_task_name & get_slaves_response_slave_tasks_task_permissions? } # The name of the task. get_slaves_response_slave_tasks_task_name = element name { name } # Permissions the user has on the task. get_slaves_response_slave_tasks_task_permissions = element permissions { "" } get_slaves_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_slaves_response_filters_term & get_slaves_response_filters_name? & get_slaves_response_filters_keywords } # Filter term. get_slaves_response_filters_term = element term { text } # Filter name, if applicable. get_slaves_response_filters_name = element name { text } # Filter broken down into keywords. get_slaves_response_filters_keywords = element keywords { get_slaves_response_filters_keywords_keyword* } get_slaves_response_filters_keywords_keyword = element keyword { get_slaves_response_filters_keywords_keyword_column & get_slaves_response_filters_keywords_keyword_relation & get_slaves_response_filters_keywords_keyword_value } # Column prefix. get_slaves_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_slaves_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_slaves_response_filters_keywords_keyword_value = element value { text } get_slaves_response_sort = element sort { text & get_slaves_response_sort_field } get_slaves_response_sort_field = element field { get_slaves_response_sort_field_order } get_slaves_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_slaves_response_slaves = element slaves { # First slave. attribute start { integer } & # Maximum number of slaves. attribute max { integer } } get_slaves_response_slave_count = element slave_count { get_slaves_response_slave_count_filtered & get_slaves_response_slave_count_page } # Number of slaves after filtering. get_slaves_response_slave_count_filtered = element filtered { integer } # Number of slaves on current page. get_slaves_response_slave_count_page = element page { integer } ## Response to get_system_reports get_system_reports_response = element get_system_reports_response { attribute status { status } & attribute status_text { text } & get_system_reports_response_system_report* } get_system_reports_response_system_report = element system_report { get_system_reports_response_system_report_name & get_system_reports_response_system_report_title & get_system_reports_response_system_report_report? } # The name of the system report. get_system_reports_response_system_report_name = element name { name } # The title of the system report. get_system_reports_response_system_report_title = element title { text } get_system_reports_response_system_report_report = element report { text # RNC limitation: base64 & attribute format { xsd:token { pattern = "png|txt" } } & attribute duration { integer } } ## Response to get_tags get_tags_response = element get_tags_response { attribute status { status } & attribute status_text { text } & get_tags_response_tag* & get_tags_response_filters & get_tags_response_sort & get_tags_response_tags & get_tags_response_tag_count } # Information on a single tag. get_tags_response_tag = element tag { # uuid of the tag (omitted when using names_only). attribute id { uuid }? & get_tags_response_tag_name & ( get_tags_response_tag_permissions & get_tags_response_tag_owner & get_tags_response_tag_comment & get_tags_response_tag_creation_time & get_tags_response_tag_modification_time & get_tags_response_tag_writable & get_tags_response_tag_in_use & get_tags_response_tag_resource & get_tags_response_tag_value & get_tags_response_tag_active & get_tags_response_tag_orphan )? } # Permissions that the current user has on the tag. get_tags_response_tag_permissions = element permissions { get_tags_response_tag_permissions_permission* } get_tags_response_tag_permissions_permission = element permission { get_tags_response_tag_permissions_permission_name } # The name of the permission. get_tags_response_tag_permissions_permission_name = element name { name } # Owner of the tag. get_tags_response_tag_owner = element owner { get_tags_response_tag_owner_name } # The name of the owner. get_tags_response_tag_owner_name = element name { name } # Name of the tag (usually namespace:predicate). get_tags_response_tag_name = element name { text } # Comment for the tag. get_tags_response_tag_comment = element comment { text } # Date and time the tag was created. get_tags_response_tag_creation_time = element creation_time { iso_time } # Date and time the tag was last modified. get_tags_response_tag_modification_time = element modification_time { iso_time } # Whether the tag is writable. get_tags_response_tag_writable = element writable { boolean } # Whether any tasks are using the tag. get_tags_response_tag_in_use = element in_use { boolean } # Identifies a resource the tag is attached to. get_tags_response_tag_resource = element resource { # ID of the resource the tag is attached to. attribute id { uuid } & get_tags_response_tag_resource_type & get_tags_response_tag_resource_name & get_tags_response_tag_resource_trash & get_tags_response_tag_resource_permissions? } # OMP type of the resource the tag is attached to. get_tags_response_tag_resource_type = element type { text } # Name of the attach resource if available, empty otherwise. get_tags_response_tag_resource_name = element name { text } # Whether the resource is in the trashcan. get_tags_response_tag_resource_trash = element trash { boolean } # Permissions the user has on the resource. get_tags_response_tag_resource_permissions = element permissions { "" } # Value associated with the tag. get_tags_response_tag_value = element value { text } # Whether the tag is active. get_tags_response_tag_active = element active { boolean } # Whether the tag is attached to a nonexistent resource. get_tags_response_tag_orphan = element orphan { boolean } get_tags_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_tags_response_filters_term & get_tags_response_filters_name? & get_tags_response_filters_keywords } # Filter term. get_tags_response_filters_term = element term { text } # Filter name, if applicable. get_tags_response_filters_name = element name { text } # Filter broken down into keywords. get_tags_response_filters_keywords = element keywords { get_tags_response_filters_keywords_keyword* } get_tags_response_filters_keywords_keyword = element keyword { get_tags_response_filters_keywords_keyword_column & get_tags_response_filters_keywords_keyword_relation & get_tags_response_filters_keywords_keyword_value } # Column prefix. get_tags_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_tags_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_tags_response_filters_keywords_keyword_value = element value { text } get_tags_response_sort = element sort { text & get_tags_response_sort_field } get_tags_response_sort_field = element field { get_tags_response_sort_field_order } get_tags_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_tags_response_tags = element tags { # First tag. attribute start { integer } & # Maximum number of tags. attribute max { integer } } get_tags_response_tag_count = element tag_count { get_tags_response_tag_count_filtered & get_tags_response_tag_count_page } # Number of tags after filtering. get_tags_response_tag_count_filtered = element filtered { integer } # Number of tags on current page. get_tags_response_tag_count_page = element page { integer } ## Response to get_targets get_targets_response = element get_targets_response { attribute status { status } & attribute status_text { text } & get_targets_response_target* & get_targets_response_filters & get_targets_response_sort & get_targets_response_targets & get_targets_response_target_count } get_targets_response_target = element target { attribute id { uuid } & get_targets_response_target_owner & get_targets_response_target_name & get_targets_response_target_comment & get_targets_response_target_creation_time & get_targets_response_target_modification_time & get_targets_response_target_writable & get_targets_response_target_in_use & get_targets_response_target_permissions & get_targets_response_target_user_tags & get_targets_response_target_hosts & get_targets_response_target_exclude_hosts & get_targets_response_target_max_hosts & get_targets_response_target_ssh_lsc_credential & get_targets_response_target_smb_lsc_credential & get_targets_response_target_esxi_lsc_credential & get_targets_response_target_permissions & get_targets_response_target_port_range & get_targets_response_target_port_list & get_targets_response_target_alive_tests & get_targets_response_target_reverse_lookup_only & get_targets_response_target_reverse_lookup_unify & get_targets_response_target_tasks? } # Owner of the target. get_targets_response_target_owner = element owner { get_targets_response_target_owner_name } # The name of the owner. get_targets_response_target_owner_name = element name { name } # The name of the target. get_targets_response_target_name = element name { name } # The comment on the target. get_targets_response_target_comment = element comment { text } # Date and time the target was created. get_targets_response_target_creation_time = element creation_time { iso_time } # Date and time the target was last modified. get_targets_response_target_modification_time = element modification_time { iso_time } # A list of hosts. get_targets_response_target_hosts = element hosts { text } # A list of hosts to exclude. get_targets_response_target_exclude_hosts = element exclude_hosts { text } # The maximum number of hosts defined by the target. get_targets_response_target_max_hosts = element max_hosts { integer } # Whether the target is writable. get_targets_response_target_writable = element writable { boolean } # Whether any tasks are using the target. get_targets_response_target_in_use = element in_use { boolean } # Permissions that the current user has on the target. get_targets_response_target_permissions = element permissions { get_targets_response_target_permissions_permission* } get_targets_response_target_permissions_permission = element permission { get_targets_response_target_permissions_permission_name } # The name of the permission. get_targets_response_target_permissions_permission_name = element name { name } # Info on tags attached to the target. get_targets_response_target_user_tags = element user_tags { get_targets_response_target_user_tags_count & get_targets_response_target_user_tags_tag* } # Number of attached tags. get_targets_response_target_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). get_targets_response_target_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & get_targets_response_target_user_tags_tag_name & get_targets_response_target_user_tags_tag_value & get_targets_response_target_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). get_targets_response_target_user_tags_tag_name = element name { text } # Value of the tag. get_targets_response_target_user_tags_tag_value = element value { text } # Comment for the tag. get_targets_response_target_user_tags_tag_comment = element comment { text } get_targets_response_target_ssh_lsc_credential = element ssh_lsc_credential { attribute id { uuid_or_empty } & get_targets_response_target_ssh_lsc_credential_name & get_targets_response_target_ssh_lsc_credential_permissions? & get_targets_response_target_ssh_lsc_credential_port & get_targets_response_target_ssh_lsc_credential_trash } # The name of the SSH LSC credential. get_targets_response_target_ssh_lsc_credential_name = element name { name } # Permissions the user has on the task. get_targets_response_target_ssh_lsc_credential_permissions = element permissions { "" } # The port the LSCs will use. get_targets_response_target_ssh_lsc_credential_port = element port { text } # Whether the LSC credential is in the trashcan. get_targets_response_target_ssh_lsc_credential_trash = element trash { boolean } get_targets_response_target_smb_lsc_credential = element smb_lsc_credential { attribute id { uuid_or_empty } & get_targets_response_target_smb_lsc_credential_name & get_targets_response_target_smb_lsc_credential_permissions? & get_targets_response_target_smb_lsc_credential_trash } # The name of the SMB LSC credential. get_targets_response_target_smb_lsc_credential_name = element name { name } # Permissions the user has on the task. get_targets_response_target_smb_lsc_credential_permissions = element permissions { "" } # Whether the LSC credential is in the trashcan. get_targets_response_target_smb_lsc_credential_trash = element trash { boolean } get_targets_response_target_esxi_lsc_credential = element esxi_lsc_credential { attribute id { uuid_or_empty } & get_targets_response_target_esxi_lsc_credential_name & get_targets_response_target_esxi_lsc_credential_permissions? & get_targets_response_target_esxi_lsc_credential_trash } # The name of the ESXi LSC credential. get_targets_response_target_esxi_lsc_credential_name = element name { name } # Permissions the user has on the task. get_targets_response_target_esxi_lsc_credential_permissions = element permissions { "" } # Whether the LSC credential is in the trashcan. get_targets_response_target_esxi_lsc_credential_trash = element trash { boolean } # Port range of the target. get_targets_response_target_port_range = element port_range { name } get_targets_response_target_port_list = element port_list { attribute id { uuid } & get_targets_response_target_port_list_name & get_targets_response_target_port_list_permissions? & get_targets_response_target_port_list_trash } # The name of the port_list. get_targets_response_target_port_list_name = element name { name } # Permissions the user has on the task. get_targets_response_target_port_list_permissions = element permissions { "" } # Whether the port_list is in the trashcan. get_targets_response_target_port_list_trash = element trash { boolean } # Which alive tests to use. get_targets_response_target_alive_tests = element alive_tests { alive_test } # Whether to scan only hosts that have names. get_targets_response_target_reverse_lookup_only = element reverse_lookup_only { boolean } # Whether to scan only one IP when multiple IPs have the same name. get_targets_response_target_reverse_lookup_unify = element reverse_lookup_unify { boolean } # All tasks using the target. get_targets_response_target_tasks = element tasks { get_targets_response_target_tasks_task* } get_targets_response_target_tasks_task = element task { attribute id { uuid } & get_targets_response_target_tasks_task_name & get_targets_response_target_tasks_task_permissions? } # The name of the task. get_targets_response_target_tasks_task_name = element name { name } # Permissions the user has on the task. get_targets_response_target_tasks_task_permissions = element permissions { "" } get_targets_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_targets_response_filters_term & get_targets_response_filters_name? & get_targets_response_filters_keywords } # Filter term. get_targets_response_filters_term = element term { text } # Filter name, if applicable. get_targets_response_filters_name = element name { text } # Filter broken down into keywords. get_targets_response_filters_keywords = element keywords { get_targets_response_filters_keywords_keyword* } get_targets_response_filters_keywords_keyword = element keyword { get_targets_response_filters_keywords_keyword_column & get_targets_response_filters_keywords_keyword_relation & get_targets_response_filters_keywords_keyword_value } # Column prefix. get_targets_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_targets_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_targets_response_filters_keywords_keyword_value = element value { text } get_targets_response_sort = element sort { text & get_targets_response_sort_field } get_targets_response_sort_field = element field { get_targets_response_sort_field_order } get_targets_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_targets_response_targets = element targets { # First target. attribute start { integer } & # Maximum number of targets. attribute max { integer } } get_targets_response_target_count = element target_count { get_targets_response_target_count_filtered & get_targets_response_target_count_page } # Number of targets after filtering. get_targets_response_target_count_filtered = element filtered { integer } # Number of targets on current page. get_targets_response_target_count_page = element page { integer } ## Response to get_tasks get_tasks_response = element get_tasks_response { attribute status { status } & attribute status_text { text } & get_tasks_response_apply_overrides & get_tasks_response_task* & get_tasks_response_filters & get_tasks_response_sort & get_tasks_response_tasks & get_tasks_response_task_count } get_tasks_response_apply_overrides = element apply_overrides { xsd:token { pattern = "0|1" } } get_tasks_response_task = element task { attribute id { uuid } & get_tasks_response_task_owner & get_tasks_response_task_name & get_tasks_response_task_comment & get_tasks_response_task_creation_time & get_tasks_response_task_modification_time & get_tasks_response_task_writable & get_tasks_response_task_in_use & get_tasks_response_task_permissions & get_tasks_response_task_user_tags & get_tasks_response_task_status & get_tasks_response_task_progress & get_tasks_response_task_alterable & get_tasks_response_task_config & get_tasks_response_task_target & get_tasks_response_task_hosts_ordering & get_tasks_response_task_scanner & get_tasks_response_task_alert & get_tasks_response_task_observers & get_tasks_response_task_schedule & get_tasks_response_task_schedule_periods & get_tasks_response_task_slave & get_tasks_response_task_report_count & get_tasks_response_task_trend & get_tasks_response_task_current_report? & get_tasks_response_task_first_report? & get_tasks_response_task_last_report? & get_tasks_response_task_second_last_report? & get_tasks_response_task_reports* & get_tasks_response_task_result_count & get_tasks_response_task_preferences } # Owner of the task. get_tasks_response_task_owner = element owner { get_tasks_response_task_owner_name } # The name of the owner. get_tasks_response_task_owner_name = element name { name } # The name of the task. get_tasks_response_task_name = element name { name } # The comment on the task. get_tasks_response_task_comment = element comment { text } # Creation time of the task. get_tasks_response_task_creation_time = element creation_time { iso_time } # Last time the task was modified. get_tasks_response_task_modification_time = element modification_time { iso_time } # Whether the task is writable. get_tasks_response_task_writable = element writable { boolean } # Whether this task is currently in use. get_tasks_response_task_in_use = element in_use { boolean } # Permissions that the current user has on the task. get_tasks_response_task_permissions = element permissions { get_tasks_response_task_permissions_permission* } get_tasks_response_task_permissions_permission = element permission { get_tasks_response_task_permissions_permission_name } # The name of the permission. get_tasks_response_task_permissions_permission_name = element name { name } # Info on tags attached to the task. get_tasks_response_task_user_tags = element user_tags { get_tasks_response_task_user_tags_count & get_tasks_response_task_user_tags_tag* } # Number of attached tags. get_tasks_response_task_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). get_tasks_response_task_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & get_tasks_response_task_user_tags_tag_name & get_tasks_response_task_user_tags_tag_value & get_tasks_response_task_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). get_tasks_response_task_user_tags_tag_name = element name { text } # Value of the tag. get_tasks_response_task_user_tags_tag_value = element value { text } # Comment for the tag. get_tasks_response_task_user_tags_tag_comment = element comment { text } # The run status of the task. get_tasks_response_task_status = element status { task_status } # The percentage of the task that is complete. get_tasks_response_task_progress = element progress { text # RNC limitation: integer & get_tasks_response_task_progress_host_progress* } # Percentage complete for a particular host. get_tasks_response_task_progress_host_progress = element host_progress { text # RNC limitation: integer & get_tasks_response_task_progress_host_progress_host } get_tasks_response_task_progress_host_progress_host = element host { text } # Whether the task is an Alterable Task. get_tasks_response_task_alterable = element alterable { boolean } # The scan configuration used by the task. get_tasks_response_task_config = element config { attribute id { uuid } & get_tasks_response_task_config_name & get_tasks_response_task_config_permissions? & get_tasks_response_task_config_trash } # The name of the config. get_tasks_response_task_config_name = element name { name } # Permissions the user has on the config. get_tasks_response_task_config_permissions = element permissions { "" } # Whether the config is in the trashcan. get_tasks_response_task_config_trash = element trash { boolean } # The hosts scanned by the task. get_tasks_response_task_target = element target { attribute id { uuid } & get_tasks_response_task_target_name & get_tasks_response_task_target_permissions? & get_tasks_response_task_target_trash } # The name of the target. get_tasks_response_task_target_name = element name { name } # Permissions the user has on the target. get_tasks_response_task_target_permissions = element permissions { "" } # Whether the target is in the trashcan. get_tasks_response_task_target_trash = element trash { boolean } # The order hosts are scanned in. get_tasks_response_task_hosts_ordering = element hosts_ordering { text } # The scanner used to scan the target. get_tasks_response_task_scanner = element scanner { attribute id { uuid } & get_tasks_response_task_scanner_name & get_tasks_response_task_scanner_permissions? & get_tasks_response_task_scanner_type } # The name of the scanner. get_tasks_response_task_scanner_name = element name { name } # Type of the scanner. get_tasks_response_task_scanner_type = element type { integer } # Permissions the user has on the task. get_tasks_response_task_scanner_permissions = element permissions { "" } # An alert that applies to the task. get_tasks_response_task_alert = element alert { attribute id { uuid_or_empty } & get_tasks_response_task_alert_name & get_tasks_response_task_alert_permissions? & get_tasks_response_task_alert_trash } # The name of the alert. get_tasks_response_task_alert_name = element name { name } # Permissions the user has on the alert. get_tasks_response_task_alert_permissions = element permissions { "" } # Whether the alert is in the trashcan. get_tasks_response_task_alert_trash = element trash { boolean } # Users allowed to observe this task. get_tasks_response_task_observers = element observers { text # RNC limitation: user_list & get_tasks_response_task_observers_group* & get_tasks_response_task_observers_role* } # Group allowed to observe this task. get_tasks_response_task_observers_group = element group { attribute id { uuid } & get_tasks_response_task_observers_group_name } # The name of the group. get_tasks_response_task_observers_group_name = element name { name } # Role allowed to observe this task. get_tasks_response_task_observers_role = element role { attribute id { uuid } & get_tasks_response_task_observers_role_name } # The name of the role. get_tasks_response_task_observers_role_name = element name { name } # When the task will run. get_tasks_response_task_schedule = element schedule { attribute id { uuid_or_empty } & get_tasks_response_task_schedule_name & get_tasks_response_task_schedule_permissions? & get_tasks_response_task_schedule_trash } # The name of the schedule. get_tasks_response_task_schedule_name = element name { name } # Permissions the user has on the schedule. get_tasks_response_task_schedule_permissions = element permissions { "" } # Whether the schedule is in the trashcan. get_tasks_response_task_schedule_trash = element trash { boolean } # A limit to the number of times the task will be scheduled, or 0 for no limit. get_tasks_response_task_schedule_periods = element schedule_periods { integer } # The slave that the task will run on. get_tasks_response_task_slave = element slave { attribute id { uuid } & get_tasks_response_task_slave_name & get_tasks_response_task_slave_permissions? & get_tasks_response_task_slave_trash } # The name of the slave. get_tasks_response_task_slave_name = element name { name } # Permissions the user has on the slave. get_tasks_response_task_slave_permissions = element permissions { "" } # Whether the slave is in the trashcan. get_tasks_response_task_slave_trash = element trash { boolean } # Number of reports. get_tasks_response_task_report_count = element report_count { text # RNC limitation: integer & get_tasks_response_task_report_count_finished } # Number of reports where the scan completed. get_tasks_response_task_report_count_finished = element finished { integer } get_tasks_response_task_trend = element trend { task_trend } get_tasks_response_task_current_report = element current_report { get_tasks_response_task_current_report_report } get_tasks_response_task_current_report_report = element report { attribute id { uuid } & get_tasks_response_task_current_report_report_timestamp } get_tasks_response_task_current_report_report_timestamp = element timestamp { iso_time } get_tasks_response_task_first_report = element first_report { get_tasks_response_task_first_report_report } get_tasks_response_task_first_report_report = element report { attribute id { uuid } & get_tasks_response_task_first_report_report_timestamp & get_tasks_response_task_first_report_report_scan_end & get_tasks_response_task_first_report_report_result_count & get_tasks_response_task_first_report_report_severity } get_tasks_response_task_first_report_report_timestamp = element timestamp { iso_time } get_tasks_response_task_first_report_report_scan_end = element scan_end { iso_time } # Result counts for this report. get_tasks_response_task_first_report_report_result_count = element result_count { get_tasks_response_task_first_report_report_result_count_debug & get_tasks_response_task_first_report_report_result_count_false_positive & get_tasks_response_task_first_report_report_result_count_log & get_tasks_response_task_first_report_report_result_count_info & get_tasks_response_task_first_report_report_result_count_warning & get_tasks_response_task_first_report_report_result_count_hole } get_tasks_response_task_first_report_report_result_count_debug = element debug { integer } get_tasks_response_task_first_report_report_result_count_false_positive = element false_positive { integer } get_tasks_response_task_first_report_report_result_count_log = element log { integer } get_tasks_response_task_first_report_report_result_count_info = element info { integer } get_tasks_response_task_first_report_report_result_count_warning = element warning { integer } get_tasks_response_task_first_report_report_result_count_hole = element hole { integer } # Maximum severity of the report. get_tasks_response_task_first_report_report_severity = element severity { severity } get_tasks_response_task_last_report = element last_report { get_tasks_response_task_last_report_report } get_tasks_response_task_last_report_report = element report { attribute id { uuid } & get_tasks_response_task_last_report_report_timestamp & get_tasks_response_task_last_report_report_scan_end & get_tasks_response_task_last_report_report_result_count & get_tasks_response_task_last_report_report_severity } get_tasks_response_task_last_report_report_timestamp = element timestamp { iso_time } get_tasks_response_task_last_report_report_scan_end = element scan_end { iso_time } # Result counts for this report. get_tasks_response_task_last_report_report_result_count = element result_count { get_tasks_response_task_last_report_report_result_count_debug & get_tasks_response_task_last_report_report_result_count_false_positive & get_tasks_response_task_last_report_report_result_count_log & get_tasks_response_task_last_report_report_result_count_info & get_tasks_response_task_last_report_report_result_count_warning & get_tasks_response_task_last_report_report_result_count_hole } get_tasks_response_task_last_report_report_result_count_debug = element debug { integer } get_tasks_response_task_last_report_report_result_count_false_positive = element false_positive { integer } get_tasks_response_task_last_report_report_result_count_log = element log { integer } get_tasks_response_task_last_report_report_result_count_info = element info { integer } get_tasks_response_task_last_report_report_result_count_warning = element warning { integer } get_tasks_response_task_last_report_report_result_count_hole = element hole { integer } # Maximum severity of the report. get_tasks_response_task_last_report_report_severity = element severity { severity } get_tasks_response_task_second_last_report = element second_last_report { get_tasks_response_task_second_last_report_report } get_tasks_response_task_second_last_report_report = element report { attribute id { uuid } & get_tasks_response_task_second_last_report_report_timestamp & get_tasks_response_task_second_last_report_report_scan_end & get_tasks_response_task_second_last_report_report_result_count & get_tasks_response_task_second_last_report_report_severity } get_tasks_response_task_second_last_report_report_timestamp = element timestamp { iso_time } get_tasks_response_task_second_last_report_report_scan_end = element scan_end { iso_time } # Result counts for this report. get_tasks_response_task_second_last_report_report_result_count = element result_count { get_tasks_response_task_second_last_report_report_result_count_debug & get_tasks_response_task_second_last_report_report_result_count_false_positive & get_tasks_response_task_second_last_report_report_result_count_log & get_tasks_response_task_second_last_report_report_result_count_info & get_tasks_response_task_second_last_report_report_result_count_warning & get_tasks_response_task_second_last_report_report_result_count_hole } get_tasks_response_task_second_last_report_report_result_count_debug = element debug { integer } get_tasks_response_task_second_last_report_report_result_count_false_positive = element false_positive { integer } get_tasks_response_task_second_last_report_report_result_count_log = element log { integer } get_tasks_response_task_second_last_report_report_result_count_info = element info { integer } get_tasks_response_task_second_last_report_report_result_count_warning = element warning { integer } get_tasks_response_task_second_last_report_report_result_count_hole = element hole { integer } # Maximum severity of the report. get_tasks_response_task_second_last_report_report_severity = element severity { severity } get_tasks_response_task_reports = element reports { get_tasks_response_task_reports_report* } get_tasks_response_task_reports_report = element report { attribute id { uuid } & get_tasks_response_task_reports_report_timestamp & get_tasks_response_task_reports_report_scan_end & get_tasks_response_task_reports_report_scan_run_status & get_tasks_response_task_reports_report_result_count & get_tasks_response_task_reports_report_severity } get_tasks_response_task_reports_report_timestamp = element timestamp { iso_time } get_tasks_response_task_reports_report_scan_end = element scan_end { iso_time } # Run status of task scan. get_tasks_response_task_reports_report_scan_run_status = element scan_run_status { task_status } # Result counts for this report. get_tasks_response_task_reports_report_result_count = element result_count { get_tasks_response_task_reports_report_result_count_debug & get_tasks_response_task_reports_report_result_count_false_positive & get_tasks_response_task_reports_report_result_count_log & get_tasks_response_task_reports_report_result_count_info & get_tasks_response_task_reports_report_result_count_warning & get_tasks_response_task_reports_report_result_count_hole } get_tasks_response_task_reports_report_result_count_debug = element debug { integer } get_tasks_response_task_reports_report_result_count_false_positive = element false_positive { integer } get_tasks_response_task_reports_report_result_count_log = element log { integer } get_tasks_response_task_reports_report_result_count_info = element info { integer } get_tasks_response_task_reports_report_result_count_warning = element warning { integer } get_tasks_response_task_reports_report_result_count_hole = element hole { integer } # Maximum severity of the report. get_tasks_response_task_reports_report_severity = element severity { severity } # Result count for the entire task. get_tasks_response_task_result_count = element result_count { text } get_tasks_response_task_preferences = element preferences { get_tasks_response_task_preferences_preference* } get_tasks_response_task_preferences_preference = element preference { get_tasks_response_task_preferences_preference_name & get_tasks_response_task_preferences_preference_scanner_name & get_tasks_response_task_preferences_preference_value } # Full name of preference, suitable for end users. get_tasks_response_task_preferences_preference_name = element name { text } # Compact name of preference, from scanner. get_tasks_response_task_preferences_preference_scanner_name = element scanner_name { text } get_tasks_response_task_preferences_preference_value = element value { text } get_tasks_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_tasks_response_filters_term & get_tasks_response_filters_name? & get_tasks_response_filters_keywords } # Filter term. get_tasks_response_filters_term = element term { text } # Filter name, if applicable. get_tasks_response_filters_name = element name { text } # Filter broken down into keywords. get_tasks_response_filters_keywords = element keywords { get_tasks_response_filters_keywords_keyword* } get_tasks_response_filters_keywords_keyword = element keyword { get_tasks_response_filters_keywords_keyword_column & get_tasks_response_filters_keywords_keyword_relation & get_tasks_response_filters_keywords_keyword_value } # Column prefix. get_tasks_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_tasks_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_tasks_response_filters_keywords_keyword_value = element value { text } get_tasks_response_sort = element sort { text & get_tasks_response_sort_field } get_tasks_response_sort_field = element field { get_tasks_response_sort_field_order } get_tasks_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_tasks_response_tasks = element tasks { # First task. attribute start { integer } & # Maximum number of tasks. attribute max { integer } } get_tasks_response_task_count = element task_count { get_tasks_response_task_count_filtered & get_tasks_response_task_count_page } # Number of tasks after filtering. get_tasks_response_task_count_filtered = element filtered { integer } # Number of tasks on current page. get_tasks_response_task_count_page = element page { integer } ## Response to get_users get_users_response = element get_users_response { attribute status { status } & attribute status_text { text } & get_users_response_user* & get_users_response_filters & get_users_response_sort & get_users_response_users & get_users_response_user_count } get_users_response_user = element user { # ID of user. attribute id { uuid } & get_users_response_user_owner & get_users_response_user_name & get_users_response_user_comment & get_users_response_user_creation_time & get_users_response_user_modification_time & get_users_response_user_writable & get_users_response_user_in_use & get_users_response_user_role* & get_users_response_user_groups & get_users_response_user_hosts & get_users_response_user_ifaces & get_users_response_user_permissions & get_users_response_user_user_tags & get_users_response_user_sources } # Owner of the user. get_users_response_user_owner = element owner { get_users_response_user_owner_name } # The name of the owner. get_users_response_user_owner_name = element name { name } # The name of the user. get_users_response_user_name = element name { text } # The comment on the user. get_users_response_user_comment = element comment { text } # Creation time of the user. get_users_response_user_creation_time = element creation_time { iso_time } # Last time the user was modified. get_users_response_user_modification_time = element modification_time { iso_time } # Whether the user is writable. get_users_response_user_writable = element writable { boolean } # Whether this user is currently in use. get_users_response_user_in_use = element in_use { boolean } # The role of the user. get_users_response_user_role = element role { attribute id { uuid } & get_users_response_user_role_name & get_users_response_user_role_permissions? } # Name of role. get_users_response_user_role_name = element name { name } # Permissions the user has on the role. get_users_response_user_role_permissions = element permissions { "" } # The groups the user belongs to. get_users_response_user_groups = element groups { get_users_response_user_groups_group } get_users_response_user_groups_group = element group { attribute id { uuid } & get_users_response_user_groups_group_name & get_users_response_user_groups_group_permissions? } # Name of group. get_users_response_user_groups_group_name = element name { name } # Permissions the user has on the group. get_users_response_user_groups_group_permissions = element permissions { "" } # Host access rule for the user. get_users_response_user_hosts = element hosts { text & # 0 forbidden, 1 allowed, 2 all allowed, 3 custom. attribute allow { xsd:token { pattern = "0|1|2|3" } } } # Iface access rule for the user. get_users_response_user_ifaces = element ifaces { text & # 0 forbidden, 1 allowed, 2 all allowed, 3 custom. attribute allow { xsd:token { pattern = "0|1|2|3" } } } # Permissions that the current user has on the user. get_users_response_user_permissions = element permissions { get_users_response_user_permissions_permission* } get_users_response_user_permissions_permission = element permission { get_users_response_user_permissions_permission_name } # The name of the permission. get_users_response_user_permissions_permission_name = element name { name } # Info on tags attached to the user. get_users_response_user_user_tags = element user_tags { get_users_response_user_user_tags_count & get_users_response_user_user_tags_tag* } # Number of attached tags. get_users_response_user_user_tags_count = element count { integer } # Short info on an individual tag (only if details were requested). get_users_response_user_user_tags_tag = element tag { # UUID of the tag. attribute id { uuid } & get_users_response_user_user_tags_tag_name & get_users_response_user_user_tags_tag_value & get_users_response_user_user_tags_tag_comment } # Name of the tag (usually namespace:predicate). get_users_response_user_user_tags_tag_name = element name { text } # Value of the tag. get_users_response_user_user_tags_tag_value = element value { text } # Comment for the tag. get_users_response_user_user_tags_tag_comment = element comment { text } # Sources allowed for authentication for this user. get_users_response_user_sources = element sources # type sources { } get_users_response_filters = element filters { # UUID of filter if any, else 0. attribute id { uuid } & get_users_response_filters_term & get_users_response_filters_name? & get_users_response_filters_keywords } # Filter term. get_users_response_filters_term = element term { text } # Filter name, if applicable. get_users_response_filters_name = element name { text } # Filter broken down into keywords. get_users_response_filters_keywords = element keywords { get_users_response_filters_keywords_keyword* } get_users_response_filters_keywords_keyword = element keyword { get_users_response_filters_keywords_keyword_column & get_users_response_filters_keywords_keyword_relation & get_users_response_filters_keywords_keyword_value } # Column prefix. get_users_response_filters_keywords_keyword_column = element column { text } # Relation operator. get_users_response_filters_keywords_keyword_relation = element relation { ERROR } # The filter text. get_users_response_filters_keywords_keyword_value = element value { text } get_users_response_sort = element sort { text & get_users_response_sort_field } get_users_response_sort_field = element field { get_users_response_sort_field_order } get_users_response_sort_field_order = element order { xsd:token { pattern = "ascending|descending" } } get_users_response_users = element users { # First user. attribute start { integer } & # Maximum number of users. attribute max { integer } } get_users_response_user_count = element user_count { get_users_response_user_count_filtered & get_users_response_user_count_page } # Number of users after filtering. get_users_response_user_count_filtered = element filtered { integer } # Number of users on current page. get_users_response_user_count_page = element page { integer } ## Response to get_version get_version_response = element get_version_response { attribute status { status } & attribute status_text { text } & get_version_response_version } get_version_response_version = element version { text } ## Response to help help_response = element help_response { text & attribute status { status } & attribute status_text { text } & help_response_schema? } help_response_schema = element schema { help_response_schema_protocol } help_response_schema_protocol = element protocol { # The help format. attribute format { text }? & # The suggested file extension for the help. attribute extension { text }? & # The MIME content-type of the help. attribute content_type { text }? & help_response_schema_protocol_name & help_response_schema_protocol_abbreviation? & help_response_schema_protocol_summary? & help_response_schema_protocol_version? & help_response_schema_protocol_type* & help_response_schema_protocol_command* } # The full name of the protocol. help_response_schema_protocol_name = element name { text } # The abbreviated name of the protocol. help_response_schema_protocol_abbreviation = element abbreviation { text } # A summary of the protocol. help_response_schema_protocol_summary = element summary { text } # The version number of the protocol. help_response_schema_protocol_version = element version { text } # A data type. help_response_schema_protocol_type = element type { help_response_schema_protocol_type_name & help_response_schema_protocol_type_summary? & help_response_schema_protocol_type_description? & help_response_schema_protocol_type_pattern } # The name of the data type. help_response_schema_protocol_type_name = element name { type_name } # A summary of the data type. help_response_schema_protocol_type_summary = element summary { text } # A description of the data type. help_response_schema_protocol_type_description = element description { text & help_response_schema_protocol_type_description_p* } # A paragraph. help_response_schema_protocol_type_description_p = element p { text } # The RNC pattern for the data type. help_response_schema_protocol_type_pattern = element pattern { text } # A command. help_response_schema_protocol_command = element command # type command_definition { command_definition_name & command_definition_summary? & command_definition_description? & ( ( command_definition_pattern & command_definition_response ) | ( command_definition_type & command_definition_ele* ) ) & command_definition_example* } ## Response to modify_agent modify_agent_response = element modify_agent_response { attribute status { status } & attribute status_text { text } } ## Response to modify_alert modify_alert_response = element modify_alert_response { attribute status { status } & attribute status_text { text } } ## Response to modify_auth modify_auth_response = element modify_auth_response { attribute status { status } & attribute status_text { text } } ## Response to modify_config modify_config_response = element modify_config_response { attribute status { status } & attribute status_text { text } } ## Response to modify_filter modify_filter_response = element modify_filter_response { attribute status { status } & attribute status_text { text } } ## Response to modify_group modify_group_response = element modify_group_response { attribute status { status } & attribute status_text { text } } ## Response to modify_lsc_credential modify_lsc_credential_response = element modify_lsc_credential_response { attribute status { status } & attribute status_text { text } } ## Response to modify_note modify_note_response = element modify_note_response { attribute status { status } & attribute status_text { text } } ## Response to modify_override modify_override_response = element modify_override_response { attribute status { status } & attribute status_text { text } } ## Response to modify_permission modify_permission_response = element modify_permission_response { attribute status { status } & attribute status_text { text } } ## Response to modify_port_list modify_port_list_response = element modify_port_list_response { attribute status { status } & attribute status_text { text } } ## Response to modify_report modify_report_response = element modify_report_response { attribute status { status } & attribute status_text { text } } ## Response to modify_report_format modify_report_format_response = element modify_report_format_response { attribute status { status } & attribute status_text { text } } ## Response to modify_role modify_role_response = element modify_role_response { attribute status { status } & attribute status_text { text } } ## Response to modify_scanner modify_scanner_response = element modify_scanner_response { attribute status { status } & attribute status_text { text } } ## Response to modify_schedule modify_schedule_response = element modify_schedule_response { attribute status { status } & attribute status_text { text } } ## Response to modify_setting modify_setting_response = element modify_setting_response { attribute status { status } & attribute status_text { text } } ## Response to modify_slave modify_slave_response = element modify_slave_response { attribute status { status } & attribute status_text { text } } ## Response to modify_target modify_target_response = element modify_target_response { attribute status { status } & attribute status_text { text } } ## Response to modify_tag modify_tag_response = element modify_tag_response { attribute status { status } & attribute status_text { text } } ## Response to modify_task modify_task_response = element modify_task_response { attribute status { status } & attribute status_text { text } } ## Response to modify_user modify_user_response = element modify_user_response { attribute status { status } & attribute status_text { text } } ## Response to restore restore_response = element restore_response { attribute status { status } & attribute status_text { text } } ## Response to resume_task resume_task_response = element resume_task_response { attribute status { status } & attribute status_text { text } & resume_task_response_report_id } # The id of the report. resume_task_response_report_id = element report_id { uuid } ## Response to run_wizard run_wizard_response = element run_wizard_response { attribute status { status } & attribute status_text { text } & run_wizard_response_response } # Contains the response of the command run in the last step. run_wizard_response_response = element response { "" } ## Response to start_task start_task_response = element start_task_response { attribute status { status } & attribute status_text { text } & start_task_response_report_id } # The id of the report. start_task_response_report_id = element report_id { uuid } ## Response to stop_task stop_task_response = element stop_task_response { attribute status { status } & attribute status_text { text } } ## Response to sync_cert sync_cert_response = element sync_cert_response { attribute status { status } & attribute status_text { text } } ## Response to sync_feed sync_feed_response = element sync_feed_response { attribute status { status } & attribute status_text { text } } ## Response to sync_scap sync_scap_response = element sync_scap_response { attribute status { status } & attribute status_text { text } } ## Response to test_alert test_alert_response = element test_alert_response { attribute status { status } & attribute status_text { text } } ## Response to verify_agent verify_agent_response = element verify_agent_response { attribute status { status } & attribute status_text { text } } ## Response to verify_report_format verify_report_format_response = element verify_report_format_response { attribute status { status } & attribute status_text { text } } openvas-manager-6.0.9/doc/Doxyfile_full.in000644 001751 001751 00000144460 12557600613 021601 0ustar00michaelmichael000000 000000 # Doxyfile 1.5.1 # This file describes the settings to be used by the documentation system # doxygen (www.doxygen.org) for openvas-manager # # All text after a hash (#) is considered a comment and will be ignored # The format is: # TAG = value [value, ...] # For lists items can also be appended using: # TAG += value [value, ...] # Values that contain spaces should be placed between quotes (" ") #--------------------------------------------------------------------------- # Project related configuration options #--------------------------------------------------------------------------- # The PROJECT_NAME tag is a single word (or a sequence of words surrounded # by quotes) that should identify the project. PROJECT_NAME = "OpenVAS Manager" # The PROJECT_NUMBER tag can be used to enter a project or revision number. # This could be handy for archiving the generated documentation or # if some version control system is used. PROJECT_NUMBER = @CPACK_PACKAGE_VERSION@ # The OUTPUT_DIRECTORY tag is used to specify the (relative or absolute) # base path where the generated documentation will be put. # If a relative path is entered, it will be relative to the location # where doxygen was started. If left blank the current directory will be used. OUTPUT_DIRECTORY = @CMAKE_BINARY_DIR@/doc/generated # If the CREATE_SUBDIRS tag is set to YES, then doxygen will create # 4096 sub-directories (in 2 levels) under the output directory of each output # format and will distribute the generated files over these directories. # Enabling this option can be useful when feeding doxygen a huge amount of # source files, where putting all generated files in the same directory would # otherwise cause performance problems for the file system. CREATE_SUBDIRS = NO # The OUTPUT_LANGUAGE tag is used to specify the language in which all # documentation generated by doxygen is written. Doxygen will use this # information to generate all constant output in the proper language. # The default language is English, other supported languages are: # Afrikaans, Arabic, Brazilian, Catalan, Chinese, Chinese-Traditional, # Croatian, Czech, Danish, Dutch, Finnish, French, German, Greek, Hungarian, # Italian, Japanese, Japanese-en (Japanese with English messages), Korean, # Korean-en, Lithuanian, Norwegian, Polish, Portuguese, Romanian, Russian, # Serbian, Slovak, Slovene, Spanish, Swedish, and Ukrainian. OUTPUT_LANGUAGE = English # This tag can be used to specify the encoding used in the generated output. # The encoding is not always determined by the language that is chosen, # but also whether or not the output is meant for Windows or non-Windows users. # In case there is a difference, setting the USE_WINDOWS_ENCODING tag to YES # forces the Windows encoding (this is the default for the Windows binary), # whereas setting the tag to NO uses a Unix-style encoding (the default for # all platforms other than Windows). USE_WINDOWS_ENCODING = NO # If the BRIEF_MEMBER_DESC tag is set to YES (the default) Doxygen will # include brief member descriptions after the members that are listed in # the file and class documentation (similar to JavaDoc). # Set to NO to disable this. BRIEF_MEMBER_DESC = YES # If the REPEAT_BRIEF tag is set to YES (the default) Doxygen will prepend # the brief description of a member or function before the detailed description. # Note: if both HIDE_UNDOC_MEMBERS and BRIEF_MEMBER_DESC are set to NO, the # brief descriptions will be completely suppressed. REPEAT_BRIEF = YES # This tag implements a quasi-intelligent brief description abbreviator # that is used to form the text in various listings. Each string # in this list, if found as the leading text of the brief description, will be # stripped from the text and the result after processing the whole list, is # used as the annotated text. Otherwise, the brief description is used as-is. # If left blank, the following values are used ("$name" is automatically # replaced with the name of the entity): "The $name class" "The $name widget" # "The $name file" "is" "provides" "specifies" "contains" # "represents" "a" "an" "the" ABBREVIATE_BRIEF = # If the ALWAYS_DETAILED_SEC and REPEAT_BRIEF tags are both set to YES then # Doxygen will generate a detailed section even if there is only a brief # description. ALWAYS_DETAILED_SEC = NO # If the INLINE_INHERITED_MEMB tag is set to YES, doxygen will show all # inherited members of a class in the documentation of that class as if those # members were ordinary class members. Constructors, destructors and assignment # operators of the base classes will not be shown. INLINE_INHERITED_MEMB = NO # If the FULL_PATH_NAMES tag is set to YES then Doxygen will prepend the full # path before files name in the file list and in the header files. If set # to NO the shortest path that makes the file name unique will be used. FULL_PATH_NAMES = YES # If the FULL_PATH_NAMES tag is set to YES then the STRIP_FROM_PATH tag # can be used to strip a user-defined part of the path. Stripping is # only done if one of the specified strings matches the left-hand part of # the path. The tag can be used to show relative paths in the file list. # If left blank the directory from which doxygen is run is used as the # path to strip. STRIP_FROM_PATH = @CMAKE_SOURCE_DIR@ # The STRIP_FROM_INC_PATH tag can be used to strip a user-defined part of # the path mentioned in the documentation of a class, which tells # the reader which header file to include in order to use a class. # If left blank only the name of the header file containing the class # definition is used. Otherwise one should specify the include paths that # are normally passed to the compiler using the -I flag. STRIP_FROM_INC_PATH = # If the SHORT_NAMES tag is set to YES, doxygen will generate much shorter # (but less readable) file names. This can be useful is your file systems # doesn't support long names like on DOS, Mac, or CD-ROM. SHORT_NAMES = NO # If the JAVADOC_AUTOBRIEF tag is set to YES then Doxygen # will interpret the first line (until the first dot) of a JavaDoc-style # comment as the brief description. If set to NO, the JavaDoc # comments will behave just like the Qt-style comments (thus requiring an # explicit @brief command for a brief description. JAVADOC_AUTOBRIEF = NO # The MULTILINE_CPP_IS_BRIEF tag can be set to YES to make Doxygen # treat a multi-line C++ special comment block (i.e. a block of //! or /// # comments) as a brief description. This used to be the default behaviour. # The new default is to treat a multi-line C++ comment block as a detailed # description. Set this tag to YES if you prefer the old behaviour instead. MULTILINE_CPP_IS_BRIEF = NO # If the DETAILS_AT_TOP tag is set to YES then Doxygen # will output the detailed description near the top, like JavaDoc. # If set to NO, the detailed description appears after the member # documentation. DETAILS_AT_TOP = NO # If the INHERIT_DOCS tag is set to YES (the default) then an undocumented # member inherits the documentation from any documented member that it # re-implements. INHERIT_DOCS = YES # If the SEPARATE_MEMBER_PAGES tag is set to YES, then doxygen will produce # a new page for each member. If set to NO, the documentation of a member will # be part of the file/class/namespace that contains it. SEPARATE_MEMBER_PAGES = NO # The TAB_SIZE tag can be used to set the number of spaces in a tab. # Doxygen uses this value to replace tabs by spaces in code fragments. TAB_SIZE = 2 # This tag can be used to specify a number of aliases that acts # as commands in the documentation. An alias has the form "name=value". # For example adding "sideeffect=\par Side Effects:\n" will allow you to # put the command \sideeffect (or @sideeffect) in the documentation, which # will result in a user-defined paragraph with heading "Side Effects:". # You can put \n's in the value part of an alias to insert newlines. ALIASES = "TODO=\todo" # Set the OPTIMIZE_OUTPUT_FOR_C tag to YES if your project consists of C # sources only. Doxygen will then generate output that is more tailored for C. # For instance, some of the names that are used will be different. The list # of all members will be omitted, etc. OPTIMIZE_OUTPUT_FOR_C = YES # Set the OPTIMIZE_OUTPUT_JAVA tag to YES if your project consists of Java # sources only. Doxygen will then generate output that is more tailored for Java. # For instance, namespaces will be presented as packages, qualified scopes # will look different, etc. OPTIMIZE_OUTPUT_JAVA = NO # If you use STL classes (i.e. std::string, std::vector, etc.) but do not want to # include (a tag file for) the STL sources as input, then you should # set this tag to YES in order to let doxygen match functions declarations and # definitions whose arguments contain STL classes (e.g. func(std::string); v.s. # func(std::string) {}). This also make the inheritance and collaboration # diagrams that involve STL classes more complete and accurate. BUILTIN_STL_SUPPORT = NO # If member grouping is used in the documentation and the DISTRIBUTE_GROUP_DOC # tag is set to YES, then doxygen will reuse the documentation of the first # member in the group (if any) for the other members of the group. By default # all members of a group must be documented explicitly. DISTRIBUTE_GROUP_DOC = NO # Set the SUBGROUPING tag to YES (the default) to allow class member groups of # the same type (for instance a group of public functions) to be put as a # subgroup of that type (e.g. under the Public Functions section). Set it to # NO to prevent subgrouping. Alternatively, this can be done per class using # the \nosubgrouping command. SUBGROUPING = YES #--------------------------------------------------------------------------- # Build related configuration options #--------------------------------------------------------------------------- # If the EXTRACT_ALL tag is set to YES doxygen will assume all entities in # documentation are documented, even if no documentation was available. # Private class members and static file members will be hidden unless # the EXTRACT_PRIVATE and EXTRACT_STATIC tags are set to YES EXTRACT_ALL = YES # If the EXTRACT_PRIVATE tag is set to YES all private members of a class # will be included in the documentation. EXTRACT_PRIVATE = NO # If the EXTRACT_STATIC tag is set to YES all static members of a file # will be included in the documentation. EXTRACT_STATIC = NO # If the EXTRACT_LOCAL_CLASSES tag is set to YES classes (and structs) # defined locally in source files will be included in the documentation. # If set to NO only classes defined in header files are included. EXTRACT_LOCAL_CLASSES = YES # This flag is only useful for Objective-C code. When set to YES local # methods, which are defined in the implementation section but not in # the interface are included in the documentation. # If set to NO (the default) only methods in the interface are included. EXTRACT_LOCAL_METHODS = NO # If the HIDE_UNDOC_MEMBERS tag is set to YES, Doxygen will hide all # undocumented members of documented classes, files or namespaces. # If set to NO (the default) these members will be included in the # various overviews, but no documentation section is generated. # This option has no effect if EXTRACT_ALL is enabled. HIDE_UNDOC_MEMBERS = NO # If the HIDE_UNDOC_CLASSES tag is set to YES, Doxygen will hide all # undocumented classes that are normally visible in the class hierarchy. # If set to NO (the default) these classes will be included in the various # overviews. This option has no effect if EXTRACT_ALL is enabled. HIDE_UNDOC_CLASSES = NO # If the HIDE_FRIEND_COMPOUNDS tag is set to YES, Doxygen will hide all # friend (class|struct|union) declarations. # If set to NO (the default) these declarations will be included in the # documentation. HIDE_FRIEND_COMPOUNDS = NO # If the HIDE_IN_BODY_DOCS tag is set to YES, Doxygen will hide any # documentation blocks found inside the body of a function. # If set to NO (the default) these blocks will be appended to the # function's detailed documentation block. HIDE_IN_BODY_DOCS = NO # The INTERNAL_DOCS tag determines if documentation # that is typed after a \internal command is included. If the tag is set # to NO (the default) then the documentation will be excluded. # Set it to YES to include the internal documentation. INTERNAL_DOCS = NO # If the CASE_SENSE_NAMES tag is set to NO then Doxygen will only generate # file names in lower-case letters. If set to YES upper-case letters are also # allowed. This is useful if you have classes or files whose names only differ # in case and if your file system supports case sensitive file names. Windows # and Mac users are advised to set this option to NO. CASE_SENSE_NAMES = YES # If the HIDE_SCOPE_NAMES tag is set to NO (the default) then Doxygen # will show members with their full class and namespace scopes in the # documentation. If set to YES the scope will be hidden. HIDE_SCOPE_NAMES = NO # If the SHOW_INCLUDE_FILES tag is set to YES (the default) then Doxygen # will put a list of the files that are included by a file in the documentation # of that file. SHOW_INCLUDE_FILES = YES # If the INLINE_INFO tag is set to YES (the default) then a tag [inline] # is inserted in the documentation for inline members. INLINE_INFO = YES # If the SORT_MEMBER_DOCS tag is set to YES (the default) then doxygen # will sort the (detailed) documentation of file and class members # alphabetically by member name. If set to NO the members will appear in # declaration order. SORT_MEMBER_DOCS = YES # If the SORT_BRIEF_DOCS tag is set to YES then doxygen will sort the # brief documentation of file, namespace and class members alphabetically # by member name. If set to NO (the default) the members will appear in # declaration order. SORT_BRIEF_DOCS = NO # If the SORT_BY_SCOPE_NAME tag is set to YES, the class list will be # sorted by fully-qualified names, including namespaces. If set to # NO (the default), the class list will be sorted only by class name, # not including the namespace part. # Note: This option is not very useful if HIDE_SCOPE_NAMES is set to YES. # Note: This option applies only to the class list, not to the # alphabetical list. SORT_BY_SCOPE_NAME = NO # The GENERATE_TODOLIST tag can be used to enable (YES) or # disable (NO) the todo list. This list is created by putting \todo # commands in the documentation. GENERATE_TODOLIST = YES # The GENERATE_TESTLIST tag can be used to enable (YES) or # disable (NO) the test list. This list is created by putting \test # commands in the documentation. GENERATE_TESTLIST = YES # The GENERATE_BUGLIST tag can be used to enable (YES) or # disable (NO) the bug list. This list is created by putting \bug # commands in the documentation. GENERATE_BUGLIST = YES # The GENERATE_DEPRECATEDLIST tag can be used to enable (YES) or # disable (NO) the deprecated list. This list is created by putting # \deprecated commands in the documentation. GENERATE_DEPRECATEDLIST= YES # The ENABLED_SECTIONS tag can be used to enable conditional # documentation sections, marked by \if sectionname ... \endif. ENABLED_SECTIONS = # The MAX_INITIALIZER_LINES tag determines the maximum number of lines # the initial value of a variable or define consists of for it to appear in # the documentation. If the initializer consists of more lines than specified # here it will be hidden. Use a value of 0 to hide initializers completely. # The appearance of the initializer of individual variables and defines in the # documentation can be controlled using \showinitializer or \hideinitializer # command in the documentation regardless of this setting. MAX_INITIALIZER_LINES = 30 # Set the SHOW_USED_FILES tag to NO to disable the list of files generated # at the bottom of the documentation of classes and structs. If set to YES the # list will mention the files that were used to generate the documentation. SHOW_USED_FILES = YES # If the sources in your project are distributed over multiple directories # then setting the SHOW_DIRECTORIES tag to YES will show the directory hierarchy # in the documentation. The default is NO. SHOW_DIRECTORIES = YES # The FILE_VERSION_FILTER tag can be used to specify a program or script that # doxygen should invoke to get the current version for each file (typically from the # version control system). Doxygen will invoke the program by executing (via # popen()) the command , where is the value of # the FILE_VERSION_FILTER tag, and is the name of an input file # provided by doxygen. Whatever the program writes to standard output # is used as the file version. See the manual for examples. FILE_VERSION_FILTER = #--------------------------------------------------------------------------- # configuration options related to warning and progress messages #--------------------------------------------------------------------------- # The QUIET tag can be used to turn on/off the messages that are generated # by doxygen. Possible values are YES and NO. If left blank NO is used. QUIET = NO # The WARNINGS tag can be used to turn on/off the warning messages that are # generated by doxygen. Possible values are YES and NO. If left blank # NO is used. WARNINGS = YES # If WARN_IF_UNDOCUMENTED is set to YES, then doxygen will generate warnings # for undocumented members. If EXTRACT_ALL is set to YES then this flag will # automatically be disabled. WARN_IF_UNDOCUMENTED = YES # If WARN_IF_DOC_ERROR is set to YES, doxygen will generate warnings for # potential errors in the documentation, such as not documenting some # parameters in a documented function, or documenting parameters that # don't exist or using markup commands wrongly. WARN_IF_DOC_ERROR = YES # This WARN_NO_PARAMDOC option can be abled to get warnings for # functions that are documented, but have no documentation for their parameters # or return value. If set to NO (the default) doxygen will only warn about # wrong or incomplete parameter documentation, but not about the absence of # documentation. WARN_NO_PARAMDOC = YES # The WARN_FORMAT tag determines the format of the warning messages that # doxygen can produce. The string should contain the $file, $line, and $text # tags, which will be replaced by the file and line number from which the # warning originated and the warning text. Optionally the format may contain # $version, which will be replaced by the version of the file (if it could # be obtained via FILE_VERSION_FILTER) WARN_FORMAT = "$file:$line: $text" # The WARN_LOGFILE tag can be used to specify a file to which warning # and error messages should be written. If left blank the output is written # to stderr. WARN_LOGFILE = #--------------------------------------------------------------------------- # configuration options related to the input files #--------------------------------------------------------------------------- # The INPUT tag can be used to specify the files and/or directories that contain # documented source files. You may enter file names like "myfile.cpp" or # directories like "/usr/src/myproject". Separate the files or directories # with spaces. INPUT = @CMAKE_SOURCE_DIR@/src # If the value of the INPUT tag contains directories, you can use the # FILE_PATTERNS tag to specify one or more wildcard pattern (like *.cpp # and *.h) to filter out the source-files in the directories. If left # blank the following patterns are tested: # *.c *.cc *.cxx *.cpp *.c++ *.java *.ii *.ixx *.ipp *.i++ *.inl *.h *.hh *.hxx # *.hpp *.h++ *.idl *.odl *.cs *.php *.php3 *.inc *.m *.mm *.py FILE_PATTERNS = # The RECURSIVE tag can be used to turn specify whether or not subdirectories # should be searched for input files as well. Possible values are YES and NO. # If left blank NO is used. RECURSIVE = NO # The EXCLUDE tag can be used to specify files and/or directories that should # excluded from the INPUT source files. This way you can easily exclude a # subdirectory from a directory tree whose root is specified with the INPUT tag. EXCLUDE = # The EXCLUDE_SYMLINKS tag can be used select whether or not files or # directories that are symbolic links (a Unix filesystem feature) are excluded # from the input. EXCLUDE_SYMLINKS = NO # If the value of the INPUT tag contains directories, you can use the # EXCLUDE_PATTERNS tag to specify one or more wildcard patterns to exclude # certain files from those directories. Note that the wildcards are matched # against the file with absolute path, so to exclude all test directories # for example use the pattern */test/* EXCLUDE_PATTERNS = # The EXAMPLE_PATH tag can be used to specify one or more files or # directories that contain example code fragments that are included (see # the \include command). EXAMPLE_PATH = @CMAKE_SOURCE_DIR@ @CMAKE_SOURCE_DIR@/doc # If the value of the EXAMPLE_PATH tag contains directories, you can use the # EXAMPLE_PATTERNS tag to specify one or more wildcard pattern (like *.cpp # and *.h) to filter out the source-files in the directories. If left # blank all files are included. EXAMPLE_PATTERNS = # If the EXAMPLE_RECURSIVE tag is set to YES then subdirectories will be # searched for input files to be used with the \include or \dontinclude # commands irrespective of the value of the RECURSIVE tag. # Possible values are YES and NO. If left blank NO is used. EXAMPLE_RECURSIVE = NO # The IMAGE_PATH tag can be used to specify one or more files or # directories that contain image that are included in the documentation (see # the \image command). IMAGE_PATH = # The INPUT_FILTER tag can be used to specify a program that doxygen should # invoke to filter for each input file. Doxygen will invoke the filter program # by executing (via popen()) the command , where # is the value of the INPUT_FILTER tag, and is the name of an # input file. Doxygen will then use the output that the filter program writes # to standard output. If FILTER_PATTERNS is specified, this tag will be # ignored. INPUT_FILTER = # The FILTER_PATTERNS tag can be used to specify filters on a per file pattern # basis. Doxygen will compare the file name with each pattern and apply the # filter if there is a match. The filters are a list of the form: # pattern=filter (like *.cpp=my_cpp_filter). See INPUT_FILTER for further # info on how filters are used. If FILTER_PATTERNS is empty, INPUT_FILTER # is applied to all files. FILTER_PATTERNS = # If the FILTER_SOURCE_FILES tag is set to YES, the input filter (if set using # INPUT_FILTER) will be used to filter the input files when producing source # files to browse (i.e. when SOURCE_BROWSER is set to YES). FILTER_SOURCE_FILES = NO #--------------------------------------------------------------------------- # configuration options related to source browsing #--------------------------------------------------------------------------- # If the SOURCE_BROWSER tag is set to YES then a list of source files will # be generated. Documented entities will be cross-referenced with these sources. # Note: To get rid of all source code in the generated output, make sure also # VERBATIM_HEADERS is set to NO. SOURCE_BROWSER = YES # Setting the INLINE_SOURCES tag to YES will include the body # of functions and classes directly in the documentation. INLINE_SOURCES = YES # Setting the STRIP_CODE_COMMENTS tag to YES (the default) will instruct # doxygen to hide any special comment blocks from generated source code # fragments. Normal C and C++ comments will always remain visible. STRIP_CODE_COMMENTS = YES # If the REFERENCED_BY_RELATION tag is set to YES (the default) # then for each documented function all documented # functions referencing it will be listed. REFERENCED_BY_RELATION = YES # If the REFERENCES_RELATION tag is set to YES (the default) # then for each documented function all documented entities # called/used by that function will be listed. REFERENCES_RELATION = YES # If the REFERENCES_LINK_SOURCE tag is set to YES (the default) # and SOURCE_BROWSER tag is set to YES, then the hyperlinks from # functions in REFERENCES_RELATION and REFERENCED_BY_RELATION lists will # link to the source code. Otherwise they will link to the documentstion. REFERENCES_LINK_SOURCE = YES # If the USE_HTAGS tag is set to YES then the references to source code # will point to the HTML generated by the htags(1) tool instead of doxygen # built-in source browser. The htags tool is part of GNU's global source # tagging system (see http://www.gnu.org/software/global/global.html). You # will need version 4.8.6 or higher. USE_HTAGS = NO # If the VERBATIM_HEADERS tag is set to YES (the default) then Doxygen # will generate a verbatim copy of the header file for each class for # which an include is specified. Set to NO to disable this. VERBATIM_HEADERS = YES #--------------------------------------------------------------------------- # configuration options related to the alphabetical class index #--------------------------------------------------------------------------- # If the ALPHABETICAL_INDEX tag is set to YES, an alphabetical index # of all compounds will be generated. Enable this if the project # contains a lot of classes, structs, unions or interfaces. ALPHABETICAL_INDEX = YES # If the alphabetical index is enabled (see ALPHABETICAL_INDEX) then # the COLS_IN_ALPHA_INDEX tag can be used to specify the number of columns # in which this list will be split (can be a number in the range [1..20]) COLS_IN_ALPHA_INDEX = 5 # In case all classes in a project start with a common prefix, all # classes will be put under the same header in the alphabetical index. # The IGNORE_PREFIX tag can be used to specify one or more prefixes that # should be ignored while generating the index headers. IGNORE_PREFIX = #--------------------------------------------------------------------------- # configuration options related to the HTML output #--------------------------------------------------------------------------- # If the GENERATE_HTML tag is set to YES (the default) Doxygen will # generate HTML output. GENERATE_HTML = YES # The HTML_OUTPUT tag is used to specify where the HTML docs will be put. # If a relative path is entered the value of OUTPUT_DIRECTORY will be # put in front of it. If left blank `html' will be used as the default path. HTML_OUTPUT = html # The HTML_FILE_EXTENSION tag can be used to specify the file extension for # each generated HTML page (for example: .htm,.php,.asp). If it is left blank # doxygen will generate files with .html extension. HTML_FILE_EXTENSION = .html # The HTML_HEADER tag can be used to specify a personal HTML header for # each generated HTML page. If it is left blank doxygen will generate a # standard header. HTML_HEADER = # The HTML_FOOTER tag can be used to specify a personal HTML footer for # each generated HTML page. If it is left blank doxygen will generate a # standard footer. HTML_FOOTER = # The HTML_STYLESHEET tag can be used to specify a user-defined cascading # style sheet that is used by each HTML page. It can be used to # fine-tune the look of the HTML output. If the tag is left blank doxygen # will generate a default style sheet. Note that doxygen will try to copy # the style sheet file to the HTML output directory, so don't put your own # stylesheet in the HTML output directory as well, or it will be erased! HTML_STYLESHEET = # If the HTML_ALIGN_MEMBERS tag is set to YES, the members of classes, # files or namespaces will be aligned in HTML using tables. If set to # NO a bullet list will be used. HTML_ALIGN_MEMBERS = YES # If the GENERATE_HTMLHELP tag is set to YES, additional index files # will be generated that can be used as input for tools like the # Microsoft HTML help workshop to generate a compressed HTML help file (.chm) # of the generated HTML documentation. GENERATE_HTMLHELP = NO # If the GENERATE_HTMLHELP tag is set to YES, the CHM_FILE tag can # be used to specify the file name of the resulting .chm file. You # can add a path in front of the file if the result should not be # written to the html output directory. CHM_FILE = # If the GENERATE_HTMLHELP tag is set to YES, the HHC_LOCATION tag can # be used to specify the location (absolute path including file name) of # the HTML help compiler (hhc.exe). If non-empty doxygen will try to run # the HTML help compiler on the generated index.hhp. HHC_LOCATION = # If the GENERATE_HTMLHELP tag is set to YES, the GENERATE_CHI flag # controls if a separate .chi index file is generated (YES) or that # it should be included in the master .chm file (NO). GENERATE_CHI = NO # If the GENERATE_HTMLHELP tag is set to YES, the BINARY_TOC flag # controls whether a binary table of contents is generated (YES) or a # normal table of contents (NO) in the .chm file. BINARY_TOC = NO # The TOC_EXPAND flag can be set to YES to add extra items for group members # to the contents of the HTML help documentation and to the tree view. TOC_EXPAND = NO # The DISABLE_INDEX tag can be used to turn on/off the condensed index at # top of each HTML page. The value NO (the default) enables the index and # the value YES disables it. DISABLE_INDEX = NO # This tag can be used to set the number of enum values (range [1..20]) # that doxygen will group on one line in the generated HTML documentation. ENUM_VALUES_PER_LINE = 4 # If the GENERATE_TREEVIEW tag is set to YES, a side panel will be # generated containing a tree-like index structure (just like the one that # is generated for HTML Help). For this to work a browser that supports # JavaScript, DHTML, CSS and frames is required (for instance Mozilla 1.0+, # Netscape 6.0+, Internet explorer 5.0+, or Konqueror). Windows users are # probably better off using the HTML help feature. GENERATE_TREEVIEW = YES # If the treeview is enabled (see GENERATE_TREEVIEW) then this tag can be # used to set the initial width (in pixels) of the frame in which the tree # is shown. TREEVIEW_WIDTH = 250 #--------------------------------------------------------------------------- # configuration options related to the LaTeX output #--------------------------------------------------------------------------- # If the GENERATE_LATEX tag is set to YES (the default) Doxygen will # generate Latex output. GENERATE_LATEX = NO # The LATEX_OUTPUT tag is used to specify where the LaTeX docs will be put. # If a relative path is entered the value of OUTPUT_DIRECTORY will be # put in front of it. If left blank `latex' will be used as the default path. LATEX_OUTPUT = latex # The LATEX_CMD_NAME tag can be used to specify the LaTeX command name to be # invoked. If left blank `latex' will be used as the default command name. LATEX_CMD_NAME = latex # The MAKEINDEX_CMD_NAME tag can be used to specify the command name to # generate index for LaTeX. If left blank `makeindex' will be used as the # default command name. MAKEINDEX_CMD_NAME = makeindex # If the COMPACT_LATEX tag is set to YES Doxygen generates more compact # LaTeX documents. This may be useful for small projects and may help to # save some trees in general. COMPACT_LATEX = NO # The PAPER_TYPE tag can be used to set the paper type that is used # by the printer. Possible values are: a4, a4wide, letter, legal and # executive. If left blank a4wide will be used. PAPER_TYPE = a4wide # The EXTRA_PACKAGES tag can be to specify one or more names of LaTeX # packages that should be included in the LaTeX output. EXTRA_PACKAGES = # The LATEX_HEADER tag can be used to specify a personal LaTeX header for # the generated latex document. The header should contain everything until # the first chapter. If it is left blank doxygen will generate a # standard header. Notice: only use this tag if you know what you are doing! LATEX_HEADER = # If the PDF_HYPERLINKS tag is set to YES, the LaTeX that is generated # is prepared for conversion to pdf (using ps2pdf). The pdf file will # contain links (just like the HTML output) instead of page references # This makes the output suitable for online browsing using a pdf viewer. PDF_HYPERLINKS = YES # If the USE_PDFLATEX tag is set to YES, pdflatex will be used instead of # plain latex in the generated Makefile. Set this option to YES to get a # higher quality PDF documentation. USE_PDFLATEX = YES # If the LATEX_BATCHMODE tag is set to YES, doxygen will add the \\batchmode. # command to the generated LaTeX files. This will instruct LaTeX to keep # running if errors occur, instead of asking the user for help. # This option is also used when generating formulas in HTML. LATEX_BATCHMODE = NO # If LATEX_HIDE_INDICES is set to YES then doxygen will not # include the index chapters (such as File Index, Compound Index, etc.) # in the output. LATEX_HIDE_INDICES = NO #--------------------------------------------------------------------------- # configuration options related to the RTF output #--------------------------------------------------------------------------- # If the GENERATE_RTF tag is set to YES Doxygen will generate RTF output # The RTF output is optimized for Word 97 and may not look very pretty with # other RTF readers or editors. GENERATE_RTF = NO # The RTF_OUTPUT tag is used to specify where the RTF docs will be put. # If a relative path is entered the value of OUTPUT_DIRECTORY will be # put in front of it. If left blank `rtf' will be used as the default path. RTF_OUTPUT = rtf # If the COMPACT_RTF tag is set to YES Doxygen generates more compact # RTF documents. This may be useful for small projects and may help to # save some trees in general. COMPACT_RTF = NO # If the RTF_HYPERLINKS tag is set to YES, the RTF that is generated # will contain hyperlink fields. The RTF file will # contain links (just like the HTML output) instead of page references. # This makes the output suitable for online browsing using WORD or other # programs which support those fields. # Note: wordpad (write) and others do not support links. RTF_HYPERLINKS = NO # Load stylesheet definitions from file. Syntax is similar to doxygen's # config file, i.e. a series of assignments. You only have to provide # replacements, missing definitions are set to their default value. RTF_STYLESHEET_FILE = # Set optional variables used in the generation of an rtf document. # Syntax is similar to doxygen's config file. RTF_EXTENSIONS_FILE = #--------------------------------------------------------------------------- # configuration options related to the man page output #--------------------------------------------------------------------------- # If the GENERATE_MAN tag is set to YES (the default) Doxygen will # generate man pages GENERATE_MAN = NO # The MAN_OUTPUT tag is used to specify where the man pages will be put. # If a relative path is entered the value of OUTPUT_DIRECTORY will be # put in front of it. If left blank `man' will be used as the default path. MAN_OUTPUT = man # The MAN_EXTENSION tag determines the extension that is added to # the generated man pages (default is the subroutine's section .3) MAN_EXTENSION = .3 # If the MAN_LINKS tag is set to YES and Doxygen generates man output, # then it will generate one additional man file for each entity # documented in the real man page(s). These additional files # only source the real man page, but without them the man command # would be unable to find the correct page. The default is NO. MAN_LINKS = NO #--------------------------------------------------------------------------- # configuration options related to the XML output #--------------------------------------------------------------------------- # If the GENERATE_XML tag is set to YES Doxygen will # generate an XML file that captures the structure of # the code including all documentation. GENERATE_XML = NO # The XML_OUTPUT tag is used to specify where the XML pages will be put. # If a relative path is entered the value of OUTPUT_DIRECTORY will be # put in front of it. If left blank `xml' will be used as the default path. XML_OUTPUT = xml # The XML_SCHEMA tag can be used to specify an XML schema, # which can be used by a validating XML parser to check the # syntax of the XML files. XML_SCHEMA = # The XML_DTD tag can be used to specify an XML DTD, # which can be used by a validating XML parser to check the # syntax of the XML files. XML_DTD = # If the XML_PROGRAMLISTING tag is set to YES Doxygen will # dump the program listings (including syntax highlighting # and cross-referencing information) to the XML output. Note that # enabling this will significantly increase the size of the XML output. XML_PROGRAMLISTING = YES #--------------------------------------------------------------------------- # configuration options for the AutoGen Definitions output #--------------------------------------------------------------------------- # If the GENERATE_AUTOGEN_DEF tag is set to YES Doxygen will # generate an AutoGen Definitions (see autogen.sf.net) file # that captures the structure of the code including all # documentation. Note that this feature is still experimental # and incomplete at the moment. GENERATE_AUTOGEN_DEF = NO #--------------------------------------------------------------------------- # configuration options related to the Perl module output #--------------------------------------------------------------------------- # If the GENERATE_PERLMOD tag is set to YES Doxygen will # generate a Perl module file that captures the structure of # the code including all documentation. Note that this # feature is still experimental and incomplete at the # moment. GENERATE_PERLMOD = NO # If the PERLMOD_LATEX tag is set to YES Doxygen will generate # the necessary Makefile rules, Perl scripts and LaTeX code to be able # to generate PDF and DVI output from the Perl module output. PERLMOD_LATEX = NO # If the PERLMOD_PRETTY tag is set to YES the Perl module output will be # nicely formatted so it can be parsed by a human reader. This is useful # if you want to understand what is going on. On the other hand, if this # tag is set to NO the size of the Perl module output will be much smaller # and Perl will parse it just the same. PERLMOD_PRETTY = YES # The names of the make variables in the generated doxyrules.make file # are prefixed with the string contained in PERLMOD_MAKEVAR_PREFIX. # This is useful so different doxyrules.make files included by the same # Makefile don't overwrite each other's variables. PERLMOD_MAKEVAR_PREFIX = #--------------------------------------------------------------------------- # Configuration options related to the preprocessor #--------------------------------------------------------------------------- # If the ENABLE_PREPROCESSING tag is set to YES (the default) Doxygen will # evaluate all C-preprocessor directives found in the sources and include # files. ENABLE_PREPROCESSING = YES # If the MACRO_EXPANSION tag is set to YES Doxygen will expand all macro # names in the source code. If set to NO (the default) only conditional # compilation will be performed. Macro expansion can be done in a controlled # way by setting EXPAND_ONLY_PREDEF to YES. MACRO_EXPANSION = NO # If the EXPAND_ONLY_PREDEF and MACRO_EXPANSION tags are both set to YES # then the macro expansion is limited to the macros specified with the # PREDEFINED and EXPAND_AS_DEFINED tags. EXPAND_ONLY_PREDEF = NO # If the SEARCH_INCLUDES tag is set to YES (the default) the includes files # in the INCLUDE_PATH (see below) will be search if a #include is found. SEARCH_INCLUDES = YES # The INCLUDE_PATH tag can be used to specify one or more directories that # contain include files that are not input files but should be processed by # the preprocessor. INCLUDE_PATH = # You can use the INCLUDE_FILE_PATTERNS tag to specify one or more wildcard # patterns (like *.h and *.hpp) to filter out the header-files in the # directories. If left blank, the patterns specified with FILE_PATTERNS will # be used. INCLUDE_FILE_PATTERNS = # The PREDEFINED tag can be used to specify one or more macro names that # are defined before the preprocessor is started (similar to the -D option of # gcc). The argument of the tag is a list of macros of the form: name # or name=definition (no spaces). If the definition and the = are # omitted =1 is assumed. To prevent a macro definition from being # undefined via #undef or recursively expanded use the := operator # instead of the = operator. PREDEFINED = DEF_ACCESS # If the MACRO_EXPANSION and EXPAND_ONLY_PREDEF tags are set to YES then # this tag can be used to specify a list of macro names that should be expanded. # The macro definition that is found in the sources will be used. # Use the PREDEFINED tag if you want to use a different macro definition. EXPAND_AS_DEFINED = # If the SKIP_FUNCTION_MACROS tag is set to YES (the default) then # doxygen's preprocessor will remove all function-like macros that are alone # on a line, have an all uppercase name, and do not end with a semicolon. Such # function macros are typically used for boiler-plate code, and will confuse # the parser if not removed. SKIP_FUNCTION_MACROS = YES #--------------------------------------------------------------------------- # Configuration::additions related to external references #--------------------------------------------------------------------------- # The TAGFILES option can be used to specify one or more tagfiles. # Optionally an initial location of the external documentation # can be added for each tagfile. The format of a tag file without # this location is as follows: # TAGFILES = file1 file2 ... # Adding location for the tag files is done as follows: # TAGFILES = file1=loc1 "file2 = loc2" ... # where "loc1" and "loc2" can be relative or absolute paths or # URLs. If a location is present for each tag, the installdox tool # does not have to be run to correct the links. # Note that each tag file must have a unique name # (where the name does NOT include the path) # If a tag file is not located in the directory in which doxygen # is run, you must also specify the path to the tagfile here. TAGFILES = # When a file name is specified after GENERATE_TAGFILE, doxygen will create # a tag file that is based on the input files it reads. GENERATE_TAGFILE = # If the ALLEXTERNALS tag is set to YES all external classes will be listed # in the class index. If set to NO only the inherited external classes # will be listed. ALLEXTERNALS = NO # If the EXTERNAL_GROUPS tag is set to YES all external groups will be listed # in the modules index. If set to NO, only the current project's groups will # be listed. EXTERNAL_GROUPS = YES # The PERL_PATH should be the absolute path and name of the perl script # interpreter (i.e. the result of `which perl'). PERL_PATH = /usr/bin/perl #--------------------------------------------------------------------------- # Configuration options related to the dot tool #--------------------------------------------------------------------------- # If the CLASS_DIAGRAMS tag is set to YES (the default) Doxygen will # generate a inheritance diagram (in HTML, RTF and LaTeX) for classes with base # or super classes. Setting the tag to NO turns the diagrams off. Note that # this option is superseded by the HAVE_DOT option below. This is only a # fallback. It is recommended to install and use dot, since it yields more # powerful graphs. CLASS_DIAGRAMS = YES # If set to YES, the inheritance and collaboration graphs will hide # inheritance and usage relations if the target is undocumented # or is not a class. HIDE_UNDOC_RELATIONS = YES # If you set the HAVE_DOT tag to YES then doxygen will assume the dot tool is # available from the path. This tool is part of Graphviz, a graph visualization # toolkit from AT&T and Lucent Bell Labs. The other options in this section # have no effect if this option is set to NO (the default) HAVE_DOT = YES # If the CLASS_GRAPH and HAVE_DOT tags are set to YES then doxygen # will generate a graph for each documented class showing the direct and # indirect inheritance relations. Setting this tag to YES will force the # the CLASS_DIAGRAMS tag to NO. CLASS_GRAPH = YES # If the COLLABORATION_GRAPH and HAVE_DOT tags are set to YES then doxygen # will generate a graph for each documented class showing the direct and # indirect implementation dependencies (inheritance, containment, and # class references variables) of the class with other documented classes. COLLABORATION_GRAPH = YES # If the GROUP_GRAPHS and HAVE_DOT tags are set to YES then doxygen # will generate a graph for groups, showing the direct groups dependencies GROUP_GRAPHS = YES # If the UML_LOOK tag is set to YES doxygen will generate inheritance and # collaboration diagrams in a style similar to the OMG's Unified Modeling # Language. UML_LOOK = YES # If set to YES, the inheritance and collaboration graphs will show the # relations between templates and their instances. TEMPLATE_RELATIONS = YES # If the ENABLE_PREPROCESSING, SEARCH_INCLUDES, INCLUDE_GRAPH, and HAVE_DOT # tags are set to YES then doxygen will generate a graph for each documented # file showing the direct and indirect include dependencies of the file with # other documented files. INCLUDE_GRAPH = YES # If the ENABLE_PREPROCESSING, SEARCH_INCLUDES, INCLUDED_BY_GRAPH, and # HAVE_DOT tags are set to YES then doxygen will generate a graph for each # documented header file showing the documented files that directly or # indirectly include this file. INCLUDED_BY_GRAPH = YES # If the CALL_GRAPH and HAVE_DOT tags are set to YES then doxygen will # generate a call dependency graph for every global function or class method. # Note that enabling this option will significantly increase the time of a run. # So in most cases it will be better to enable call graphs for selected # functions only using the \callgraph command. CALL_GRAPH = YES # If the CALLER_GRAPH and HAVE_DOT tags are set to YES then doxygen will # generate a caller dependency graph for every global function or class method. # Note that enabling this option will significantly increase the time of a run. # So in most cases it will be better to enable caller graphs for selected # functions only using the \callergraph command. CALLER_GRAPH = YES # If the GRAPHICAL_HIERARCHY and HAVE_DOT tags are set to YES then doxygen # will graphical hierarchy of all classes instead of a textual one. GRAPHICAL_HIERARCHY = YES # If the DIRECTORY_GRAPH, SHOW_DIRECTORIES and HAVE_DOT tags are set to YES # then doxygen will show the dependencies a directory has on other directories # in a graphical way. The dependency relations are determined by the #include # relations between the files in the directories. DIRECTORY_GRAPH = YES # The DOT_IMAGE_FORMAT tag can be used to set the image format of the images # generated by dot. Possible values are png, jpg, or gif # If left blank png will be used. DOT_IMAGE_FORMAT = png # The tag DOT_PATH can be used to specify the path where the dot tool can be # found. If left blank, it is assumed the dot tool can be found in the path. DOT_PATH = # The DOTFILE_DIRS tag can be used to specify one or more directories that # contain dot files that are included in the documentation (see the # \dotfile command). DOTFILE_DIRS = # The MAX_DOT_GRAPH_WIDTH tag can be used to set the maximum allowed width # (in pixels) of the graphs generated by dot. If a graph becomes larger than # this value, doxygen will try to truncate the graph, so that it fits within # the specified constraint. Beware that most browsers cannot cope with very # large images. MAX_DOT_GRAPH_WIDTH = 1024 # The MAX_DOT_GRAPH_HEIGHT tag can be used to set the maximum allows height # (in pixels) of the graphs generated by dot. If a graph becomes larger than # this value, doxygen will try to truncate the graph, so that it fits within # the specified constraint. Beware that most browsers cannot cope with very # large images. MAX_DOT_GRAPH_HEIGHT = 1024 # The MAX_DOT_GRAPH_DEPTH tag can be used to set the maximum depth of the # graphs generated by dot. A depth value of 3 means that only nodes reachable # from the root by following a path via at most 3 edges will be shown. Nodes # that lay further from the root node will be omitted. Note that setting this # option to 1 or 2 may greatly reduce the computation time needed for large # code bases. Also note that a graph may be further truncated if the graph's # image dimensions are not sufficient to fit the graph (see MAX_DOT_GRAPH_WIDTH # and MAX_DOT_GRAPH_HEIGHT). If 0 is used for the depth value (the default), # the graph is not depth-constrained. MAX_DOT_GRAPH_DEPTH = 0 # Set the DOT_TRANSPARENT tag to YES to generate images with a transparent # background. This is disabled by default, which results in a white background. # Warning: Depending on the platform used, enabling this option may lead to # badly anti-aliased labels on the edges of a graph (i.e. they become hard to # read). DOT_TRANSPARENT = YES # Set the DOT_MULTI_TARGETS tag to YES allow dot to generate multiple output # files in one run (i.e. multiple -o and -T options on the command line). This # makes dot run faster, but since only newer versions of dot (>1.8.10) # support this, this feature is disabled by default. DOT_MULTI_TARGETS = NO # If the GENERATE_LEGEND tag is set to YES (the default) Doxygen will # generate a legend page explaining the meaning of the various boxes and # arrows in the dot generated graphs. GENERATE_LEGEND = YES # If the DOT_CLEANUP tag is set to YES (the default) Doxygen will # remove the intermediate dot files that are used to generate # the various graphs. DOT_CLEANUP = YES #--------------------------------------------------------------------------- # Configuration::additions related to the search engine #--------------------------------------------------------------------------- # The SEARCHENGINE tag specifies whether or not a search engine should be # used. If set to NO the values of all tags below this one will be ignored. SEARCHENGINE = NO openvas-manager-6.0.9/src/manage_utils.c000644 001751 001751 00000024543 12557600614 021302 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Module for OpenVAS Manager: Manage library utilities. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2014 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #include "manage_utils.h" #include #include /** * @file manage_utils.c * @brief The OpenVAS Manager management library. * * Utilities used by the manage library that do not depend on anything. */ /** * @brief Code fragment for months_between. */ #define MONTHS_WITHIN_YEAR() \ (same_month \ ? 0 \ : ((broken2->tm_mon - broken1.tm_mon) \ - (same_day \ ? (same_hour \ ? (same_minute \ ? (same_second \ ? 0 \ : (broken2->tm_sec < broken1.tm_sec)) \ : (broken2->tm_min < broken1.tm_min)) \ : (broken2->tm_hour < broken1.tm_hour)) \ : (broken2->tm_mday < broken1.tm_mday)))) /** * @brief Count number of full months between two times. * * There are two full months between 0h00.00 1 February 2010 and 0h00.00 1 * April 2010. There is one full month between 0h00.00 1 February 2010 and * 23h59.59 31 March 2010. * * @param[in] time1 Earlier time. * @param[in] time2 Later time. * * @return Number of full months between time1 and time2. */ time_t months_between (time_t time1, time_t time2) { struct tm broken1, *broken2; int same_year, same_month, same_day, same_hour, same_minute, same_second; int month1_less, day1_less, hour1_less, minute1_less; int second1_less; assert (time1 < time2); localtime_r (&time1, &broken1); broken2 = localtime (&time2); same_year = (broken1.tm_year == broken2->tm_year); same_month = (broken1.tm_mon == broken2->tm_mon); same_day = (broken1.tm_mday == broken2->tm_mday); same_hour = (broken1.tm_hour == broken2->tm_hour); same_minute = (broken1.tm_min == broken2->tm_min); same_second = (broken1.tm_sec == broken2->tm_sec); month1_less = (broken1.tm_mon < broken2->tm_mon); day1_less = (broken1.tm_mday < broken2->tm_mday); hour1_less = (broken1.tm_hour < broken2->tm_hour); minute1_less = (broken1.tm_min < broken2->tm_min); second1_less = (broken1.tm_sec < broken2->tm_sec); return (same_year ? MONTHS_WITHIN_YEAR () : ((month1_less || (same_month && (day1_less || (same_day && (hour1_less || (same_hour && (minute1_less || (same_minute && second1_less)))))))) ? (/* time1 is earlier in the year than time2. */ ((broken2->tm_year - broken1.tm_year) * 12) + MONTHS_WITHIN_YEAR ()) : (/* time1 is later in the year than time2. */ ((broken2->tm_year - broken1.tm_year - 1) * 12) /* Months left in year of time1. */ + (11 - broken1.tm_mon) /* Months past in year of time2. */ + broken2->tm_mon /* Possible extra month due to position in month of each time. */ + (day1_less || (same_day && (hour1_less || (same_hour && (minute1_less || (same_minute && second1_less))))))))); } /** * @brief Add months to a time. * * @param[in] time Time. * @param[in] months Months. * * @return Time plus given number of months. */ time_t add_months (time_t time, int months) { struct tm *broken = localtime (&time); broken->tm_mon += months; return mktime (broken); } /** * @brief Calculate the next time from now given a start time and a period. * * @param[in] first The first time. * @param[in] period The period in seconds. * @param[in] period_months The period in months. * * @return the next time a schedule with the given times is due. */ time_t next_time (time_t first, int period, int period_months) { int periods_diff; time_t now = time (NULL); if (first >= now) { return first; } else if (period > 0) { return first + ((((now - first) / period) + 1) * period); } else if (period_months > 0) { periods_diff = months_between (first, now) / period_months; if (add_months (first, (periods_diff + 1) * period_months) >= now) return add_months (first, (periods_diff + 1) * period_months); else return add_months (first, periods_diff * period_months); } return 0; } /** * @brief Return number of hosts described by a hosts string. * * @param[in] given_hosts String describing hosts. * @param[in] exclude_hosts String describing hosts excluded from given set. * * @return Number of hosts, or -1 on error. */ int manage_count_hosts_FIX (const char *given_hosts, const char *exclude_hosts) { int count; openvas_hosts_t *hosts; // FIX 4095 s/b manage_max_host () but this is used on pg side hosts = openvas_hosts_new_with_max (given_hosts, 4095); if (hosts == NULL) return -1; if (exclude_hosts) /* Don't resolve hostnames in excluded hosts. */ openvas_hosts_exclude (hosts, exclude_hosts, 0); count = openvas_hosts_count (hosts); openvas_hosts_free (hosts); return count; } /** * @brief Get the minimum severity for a severity level and class. * * @param[in] level The name of the severity level. * @param[in] class The severity class, NULL to get from current user setting. * * @return The minimum severity. */ double level_min_severity (const char *level, const char *class) { if (strcmp (level, "Log") == 0) return SEVERITY_LOG; else if (strcmp (level, "False Positive") == 0) return SEVERITY_FP; else if (strcmp (level, "Debug") == 0) return SEVERITY_DEBUG; else if (strcmp (level, "Error") == 0) return SEVERITY_ERROR; else if (strcmp (class, "classic") == 0) { if (strcmp (level, "high") == 0) return 5.1; else if (strcmp (level, "medium") == 0) return 2.1; else if (strcmp (level, "low") == 0) return 0.1; else return SEVERITY_UNDEFINED; } else if (strcmp (class, "pci-dss") == 0) { if (strcmp (level, "high") == 0) return 4.0; else return SEVERITY_UNDEFINED; } else { /* NIST/BSI. */ if (strcmp (level, "high") == 0) return 7.0; else if (strcmp (level, "medium") == 0) return 4.0; else if (strcmp (level, "low") == 0) return 0.1; else return SEVERITY_UNDEFINED; } } /** * @brief Get the minimum severity for a severity level and class. * * @param[in] level The name of the severity level. * @param[in] class The severity class. * * @return The minimum severity. */ double level_max_severity (const char *level, const char *class) { if (strcmp (level, "Log") == 0) return SEVERITY_LOG; else if (strcmp (level, "False Positive") == 0) return SEVERITY_FP; else if (strcmp (level, "Debug") == 0) return SEVERITY_DEBUG; else if (strcmp (level, "Error") == 0) return SEVERITY_ERROR; else if (strcmp (class, "classic") == 0) { if (strcmp (level, "high") == 0) return 10.0; else if (strcmp (level, "medium") == 0) return 5.0; else if (strcmp (level, "low") == 0) return 2.0; else return SEVERITY_UNDEFINED; } else if (strcmp (class, "pci-dss") == 0) { if (strcmp (level, "high") == 0) return 10.0; else return SEVERITY_UNDEFINED; } else { /* NIST/BSI. */ if (strcmp (level, "high") == 0) return 10.0; else if (strcmp (level, "medium") == 0) return 6.9; else if (strcmp (level, "low") == 0) return 3.9; else return SEVERITY_UNDEFINED; } } /** * @brief Check whether a resource type table name is valid. * * @param[in] type Type of resource. * * @return 1 yes, 0 no. */ int valid_db_resource_type (const char* type) { if (type == NULL) return 0; return (strcasecmp (type, "agent") == 0) || (strcasecmp (type, "alert") == 0) || (strcasecmp (type, "config") == 0) || (strcasecmp (type, "cpe") == 0) || (strcasecmp (type, "cve") == 0) || (strcasecmp (type, "lsc_credential") == 0) || (strcasecmp (type, "cert_bund_adv") == 0) || (strcasecmp (type, "dfn_cert_adv") == 0) || (strcasecmp (type, "filter") == 0) || (strcasecmp (type, "group") == 0) || (strcasecmp (type, "note") == 0) || (strcasecmp (type, "nvt") == 0) || (strcasecmp (type, "ovaldef") == 0) || (strcasecmp (type, "override") == 0) || (strcasecmp (type, "port_list") == 0) || (strcasecmp (type, "permission") == 0) || (strcasecmp (type, "report") == 0) || (strcasecmp (type, "report_format") == 0) || (strcasecmp (type, "result") == 0) || (strcasecmp (type, "role") == 0) || (strcasecmp (type, "scanner") == 0) || (strcasecmp (type, "schedule") == 0) || (strcasecmp (type, "slave") == 0) || (strcasecmp (type, "tag") == 0) || (strcasecmp (type, "target") == 0) || (strcasecmp (type, "task") == 0) || (strcasecmp (type, "user") == 0); } openvas-manager-6.0.9/src/manage_acl.h000644 001751 001751 00000010434 12557600615 020701 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Headers for OpenVAS Manager: the Manage library. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2013 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #ifndef OPENVAS_MANAGER_MANAGE_ACL_H #define OPENVAS_MANAGER_MANAGE_ACL_H #include "manage.h" #include /** * @brief Generate SQL for user permission check. * * @param[in] resource Resource. */ #define USER_MAY(resource) \ "SELECT count(*) > 0 FROM permissions" \ " WHERE resource = " resource \ " AND subject_location = " G_STRINGIFY (LOCATION_TABLE) \ " AND ((subject_type = 'user'" \ " AND subject" \ " = (SELECT id FROM users" \ " WHERE users.uuid = '%s'))" \ " OR (subject_type = 'group'" \ " AND subject" \ " IN (SELECT DISTINCT \"group\"" \ " FROM group_users" \ " WHERE \"user\" = (SELECT id" \ " FROM users" \ " WHERE users.uuid" \ " = '%s')))" \ " OR (subject_type = 'role'" \ " AND subject" \ " IN (SELECT DISTINCT role" \ " FROM role_users" \ " WHERE \"user\" = (SELECT id" \ " FROM users" \ " WHERE users.uuid" \ " = '%s'))))" \ /* Any permission implies GET. */ \ " AND ((lower (substr ('%s', 1, 3)) = 'get'" \ " AND name LIKE '%%'" \ " || lower (substr ('%s'," \ " 5," \ " length ('%s') - 5)))" \ " OR name = lower ('%s'))" int user_may (const char *); int user_can_everything (const char *); int role_can_super_everyone (const char *); int user_can_super_everyone (const char *); int user_has_super (const char *, user_t); int user_is_admin (const char *); int user_is_super_admin (const char *); int user_is_observer (const char *); int user_owns_name (const char *, const char *); int user_owns (const char *, resource_t, int); int user_is_owner (const char *, const char *); int user_owns_uuid (const char *, const char *, int); int user_owns_trash_uuid (const char *resource, const char *uuid); int user_has_access_uuid (const char *, const char *, const char *, int); gchar * where_owned_user (const char *, const char *, const char *, const get_data_t *, int, const gchar *, resource_t, array_t *); gchar * where_owned (const char *, const get_data_t *, int, const gchar *, resource_t, array_t *); gchar * where_owned_for_get (const char *, const char *); #endif /* not OPENVAS_MANAGER_MANAGE_ACL_H */ openvas-manager-6.0.9/src/ovas-mngr-comm.c000644 001751 001751 00000016156 12557600617 021500 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Module for OpenVAS Manager: the Comm Library. * * Authors: * Matthew Mundell * Jan-Oliver Wagner * * Copyright: * Copyright (C) 2009 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ /** * @file ovas-mngr-comm.c * @brief API for communication between openvas-manager and openvas-server * * This file contains an API for communicating with an openvas-server * which uses OTP as protocol. */ /** * @brief Trace flag. * * 0 to turn off all tracing messages. */ #define TRACE 1 #include #include #include #include #include #include #include #include #include #include "tracef.h" #include "logf.h" #ifdef S_SPLINT_S #include "splint.h" #endif /** @todo Consider moving to libs (so please leave "server" in the names). */ #undef G_LOG_DOMAIN /** * @brief GLib log domain. */ #define G_LOG_DOMAIN "md comm" /** @cond STATIC */ /** * @brief The size of the \ref to_server data buffer. */ #define TO_SERVER_BUFFER_SIZE 26214400 /** @endcond */ /** @todo This is the definition for the entire module. */ /** * @brief Verbose output flag. * * Only consulted if compiled with TRACE non-zero. */ int verbose = 0; /** @todo This is the definition for the entire module. */ /** * @brief Logging parameters, as passed to setup_log_handlers. */ GSList *log_config = NULL; /** @cond STATIC */ /** * @brief Buffer of output to the server. */ static char to_server[TO_SERVER_BUFFER_SIZE]; /** * @brief The end of the data in the \ref to_server buffer. */ static int to_server_end = 0; /** * @brief The start of the data in the \ref to_server buffer. */ static int to_server_start = 0; /** @endcond */ /** * @brief Get the number of characters free in the server output buffer. * * @return Number of characters free in server output buffer. 0 when full. */ unsigned int to_server_buffer_space () { if (to_server_end < to_server_start) abort (); return (unsigned int) (to_server_end - to_server_start); } /** * @brief Send a number of bytes to the server. * * @param[in] msg The message, a sequence of bytes. * @param[in] n The number of bytes from msg to send. * * @return 0 for success, any other value for failure. */ int sendn_to_server (const void * msg, size_t n) { if (TO_SERVER_BUFFER_SIZE - to_server_end < n) { tracef (" sendn_to_server: available space (%i) < n (%zu)\n", TO_SERVER_BUFFER_SIZE - to_server_end, n); return 1; } memmove (to_server + to_server_end, msg, n); tracef ("s> server (string) %.*s\n", (int) n, to_server + to_server_end); tracef ("-> server %zu bytes\n", n); to_server_end += n; return 0; } /** * @brief Send a message to the server. * * @param[in] msg The message, a string. * * @return 0 for success, any other value for failure. */ int send_to_server (const char * msg) { return sendn_to_server (msg, strlen (msg)); } /** * @brief Format and send a message to the server. * * @param[in] format printf-style format string for message. * * @return 0 for success, any other value for failure. */ int sendf_to_server (const char* format, ...) { va_list args; gchar* msg; int ret; va_start (args, format); msg = g_strdup_vprintf (format, args); ret = send_to_server (msg); g_free (msg); va_end (args); return ret; } /** * @brief Write as much as possible from a string to the server. * * @param[in] server_session The server session. * @param[in] string The string. * * @return 0 wrote everything, -1 error, or the number of bytes written * when the server accepted fewer bytes than given in string. */ int write_string_to_server (gnutls_session_t* server_session, char* const string) { char* point = string; char* end = string + strlen (string); while (point < end) { ssize_t count; count = gnutls_record_send (*server_session, point, (size_t) (end - point)); if (count < 0) { if (count == GNUTLS_E_AGAIN) /* Wrote as much as server accepted. */ return point - string; if (count == GNUTLS_E_INTERRUPTED) /* Interrupted, try write again. */ continue; if (count == GNUTLS_E_REHANDSHAKE) /** @todo Rehandshake. */ continue; g_warning ("%s: failed to write to server: %s\n", __FUNCTION__, gnutls_strerror ((int) count)); return -1; } #if LOG if (count) logf ("=> server %.*s\n", (int) count, point); #endif tracef ("s> server (string) %.*s\n", (int) count, point); point += count; tracef ("=> server (string) %zi bytes\n", count); } tracef ("=> server (string) done\n"); /* Wrote everything. */ return 0; } /** * @brief Write as much as possible from the internal buffer to the server. * * @param[in] server_session The server session. * * @return 0 wrote everything, -1 error, -2 wrote as much as server accepted, * -3 interrupted. */ int write_to_server_buffer (gnutls_session_t* server_session) { while (to_server_start < to_server_end) { ssize_t count; count = gnutls_record_send (*server_session, to_server + to_server_start, (size_t) to_server_end - to_server_start); if (count < 0) { if (count == GNUTLS_E_AGAIN) /* Wrote as much as server accepted. */ return -2; if (count == GNUTLS_E_INTERRUPTED) /* Interrupted, try write again. */ return -3; if (count == GNUTLS_E_REHANDSHAKE) /** @todo Rehandshake. */ continue; g_warning ("%s: failed to write to server: %s\n", __FUNCTION__, gnutls_strerror ((int) count)); return -1; } #if LOG if (count) logf ("=> server %.*s\n", (int) count, to_server + to_server_start); #endif tracef ("s> server %.*s\n", (int) count, to_server + to_server_start); to_server_start += count; tracef ("=> server %zi bytes\n", count); } tracef ("=> server done\n"); to_server_start = to_server_end = 0; /* Wrote everything. */ return 0; } openvas-manager-6.0.9/src/manage.h000644 001751 001751 00000217242 12757560563 020101 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Headers for OpenVAS Manager: the Manage library. * * Authors: * Matthew Mundell * Timo Pollmeier * * Copyright: * Copyright (C) 2009-2013 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #ifndef OPENVAS_MANAGER_MANAGE_H #define OPENVAS_MANAGER_MANAGE_H #include "sql.h" #include #include #include #include #include /* for array_t */ #include #include /* for nvti_t */ #include #include /** * @brief Name value pair. */ typedef struct { gchar *name; ///< Name. gchar *value; ///< Param value. } name_value_t; int init_manage (GSList*, int, const gchar*, int, int, int, void (*) (), int); int init_manage_helper (GSList *, const gchar *, int, void (*) ()); void init_manage_process (int, const gchar*); void cleanup_manage_process (gboolean); void manage_cleanup_process_error (int); /* Commands. */ /** * @brief A command. */ typedef struct { gchar *name; ///< Command name. gchar *summary; ///< Summary of command. } command_t; /** * @brief The OMP command list. */ extern command_t omp_commands[]; /* Credentials. */ extern credentials_t current_credentials; int authenticate (credentials_t*); /* Database. */ int manage_backup_db (const gchar *); int manage_db_supported_version (); int manage_db_version (); int manage_scap_db_supported_version (); int manage_scap_db_version (); int manage_cert_db_supported_version (); int manage_cert_db_version (); char * port_name_formatted (const char *); void set_db_version (int version); char * manage_port_name (int, const char *); int manage_migrate (GSList*, const gchar*); int manage_encrypt_all_credentials (GSList *, const gchar *, gboolean); /* Task structures. */ extern short scanner_active; /** @todo Should be in otp.c/h. */ /** * @brief A port. */ typedef struct { unsigned int number; ///< Port number. port_protocol_t protocol; ///< Port protocol (TCP, UDP, ...). char* string; ///< Original string describing port. } port_t; /** @todo Should be in otp.c/h. */ /** * @brief The record of a message. */ typedef struct { char* host; ///< Host message describes. port_t port; ///< The port. char* description; ///< Description of the message. char* oid; ///< NVT identifier. } message_t; /** * @brief Task statuses, also used as scan/report statuses. * * These numbers are used in the database, so if the number associated with * any symbol changes then a migrator must be added to update existing data. */ typedef enum { TASK_STATUS_DELETE_REQUESTED = 0, TASK_STATUS_DONE = 1, TASK_STATUS_NEW = 2, TASK_STATUS_REQUESTED = 3, TASK_STATUS_RUNNING = 4, TASK_STATUS_STOP_REQUESTED = 10, TASK_STATUS_STOP_WAITING = 11, TASK_STATUS_STOPPED = 12, TASK_STATUS_INTERNAL_ERROR = 13, TASK_STATUS_DELETE_ULTIMATE_REQUESTED = 14, TASK_STATUS_STOP_REQUESTED_GIVEUP = 15, TASK_STATUS_DELETE_WAITING = 16, TASK_STATUS_DELETE_ULTIMATE_WAITING = 17 } task_status_t; /** * @brief Alive tests. * * These numbers are used in the database, so if the number associated with * any symbol changes then a migrator must be added to update existing data. */ typedef enum { ALIVE_TEST_TCP_ACK_SERVICE = 1, ALIVE_TEST_ICMP = 2, ALIVE_TEST_ARP = 4, ALIVE_TEST_CONSIDER_ALIVE = 8, ALIVE_TEST_TCP_SYN_SERVICE = 16 } alive_test_t; /** * @brief Scanner types. * * These numbers are used in the database, so if the number associated with * any symbol changes then a migrator must be added to update existing data. */ typedef enum scanner_type { SCANNER_TYPE_NONE = 0, SCANNER_TYPE_OSP, SCANNER_TYPE_OPENVAS, SCANNER_TYPE_MAX, } scanner_type_t; typedef long long int agent_t; typedef long long int config_t; typedef long long int alert_t; typedef long long int filter_t; typedef long long int group_t; typedef long long int slave_t; typedef long long int tag_t; typedef long long int target_t; typedef long long int task_t; typedef long long int result_t; typedef long long int report_t; typedef long long int report_host_t; typedef long long int report_format_t; typedef long long int report_format_param_t; typedef long long int role_t; typedef long long int note_t; typedef long long int nvt_t; typedef long long int override_t; typedef long long int permission_t; typedef long long int port_list_t; typedef long long int port_range_t; typedef long long int lsc_credential_t; typedef long long int schedule_t; typedef long long int scanner_t; typedef long long int setting_t; typedef long long int user_t; /* OMP GET. */ /** * @brief Command data for a get command. */ typedef struct { int details; ///< Boolean. Whether to include full details. char *filt_id; ///< Filter ID. Overrides "filter". char *filter; ///< Filter term. char *filter_replace; ///< Column to replace in filter. char *filter_replacement; ///< Filter term to replace the one in filt_id. int first; ///< Skip over items before this number. char *id; ///< ID of single item to get. int max; ///< Maximum number of items returned. int trash; ///< Boolean. Whether to return from trashcan. gchar *type; ///< Type of resource. gchar *subtype; ///< Subtype, or NULL. } get_data_t; resource_t get_iterator_resource (iterator_t*); const char* get_iterator_uuid (iterator_t*); const char* get_iterator_name (iterator_t*); const char* get_iterator_comment (iterator_t*); const char* get_iterator_creation_time (iterator_t*); const char* get_iterator_modification_time (iterator_t*); const char* get_iterator_owner_name (iterator_t*); user_t get_iterator_owner (iterator_t*); /* Resources. */ int resource_name (const char *, const char *, int, char **); int resource_count (const char *, const get_data_t *); int resource_id_exists (const char *, const char *); int trash_id_exists (const char *, const char *); /* Events and Alerts. */ /** * @brief Default format string for alert email, when including report. */ #define ALERT_MESSAGE_INCLUDE \ "Task '$n': $e\n" \ "\n" \ "After the event $e,\n" \ "the following condition was met: $c\n" \ "\n" \ "This email escalation is configured to apply report format '$r'.\n" \ "Full details and other report formats are available on the scan engine.\n" \ "\n" \ "$t" \ "\n" \ "$i" \ "\n" \ "\n" \ "Note:\n" \ "This email was sent to you as a configured security scan escalation.\n" \ "Please contact your local system administrator if you think you\n" \ "should not have received it.\n" /** * @brief Default format string for alert email, when attaching report. */ #define ALERT_MESSAGE_ATTACH \ "Task '$n': $e\n" \ "\n" \ "After the event $e,\n" \ "the following condition was met: $c\n" \ "\n" \ "This email escalation is configured to attach report format '$r'.\n" \ "Full details and other report formats are available on the scan engine.\n" \ "\n" \ "$t" \ "\n" \ "Note:\n" \ "This email was sent to you as a configured security scan escalation.\n" \ "Please contact your local system administrator if you think you\n" \ "should not have received it.\n" /** * @brief Types of task events. */ typedef enum { EVENT_ERROR, EVENT_TASK_RUN_STATUS_CHANGED } event_t; /** * @brief Types of alerts. */ typedef enum { ALERT_METHOD_ERROR, ALERT_METHOD_EMAIL, ALERT_METHOD_HTTP_GET, ALERT_METHOD_SOURCEFIRE, ALERT_METHOD_SYSLOG, ALERT_METHOD_VERINICE, ALERT_METHOD_SEND, ALERT_METHOD_SCP, ALERT_METHOD_SNMP } alert_method_t; /** * @brief Types of alert conditions. */ typedef enum { ALERT_CONDITION_ERROR, ALERT_CONDITION_ALWAYS, ALERT_CONDITION_SEVERITY_AT_LEAST, ALERT_CONDITION_SEVERITY_CHANGED, ALERT_CONDITION_FILTER_COUNT_AT_LEAST, ALERT_CONDITION_FILTER_COUNT_CHANGED } alert_condition_t; int create_alert (const char*, const char*, const char*, event_t, GPtrArray*, alert_condition_t, GPtrArray*, alert_method_t, GPtrArray*, alert_t*); int copy_alert (const char*, const char*, const char*, alert_t*); int modify_alert (const char*, const char*, const char*, const char*, event_t, GPtrArray*, alert_condition_t, GPtrArray*, alert_method_t, GPtrArray*); int delete_alert (const char *, int); char * alert_uuid (alert_t); gboolean find_alert_with_permission (const char *, alert_t *, const char *); int manage_alert (const char *, const char *, event_t, const void*); int alert_in_use (alert_t); int trash_alert_in_use (alert_t); int alert_writable (alert_t); int trash_alert_writable (alert_t); int alert_count (const get_data_t *); int init_alert_iterator (iterator_t*, const get_data_t*); int alert_iterator_event (iterator_t*); int alert_iterator_condition (iterator_t*); int alert_iterator_method (iterator_t*); char * alert_iterator_filter_uuid (iterator_t*); char * alert_iterator_filter_name (iterator_t*); int alert_iterator_filter_trash (iterator_t*); int alert_iterator_filter_readable (iterator_t*); const char* alert_condition_name (alert_condition_t); gchar* alert_condition_description (alert_condition_t, alert_t); const char* event_name (event_t); gchar* event_description (event_t, const void *, const char *); const char* alert_method_name (alert_method_t); alert_condition_t alert_condition_from_name (const char*); event_t event_from_name (const char*); alert_method_t alert_method_from_name (const char*); void init_alert_data_iterator (iterator_t *, alert_t, int, const char *); const char* alert_data_iterator_name (iterator_t*); const char* alert_data_iterator_data (iterator_t*); void init_alert_task_iterator (iterator_t*, alert_t, int); const char* alert_task_iterator_name (iterator_t*); const char* alert_task_iterator_uuid (iterator_t*); int alert_task_iterator_readable (iterator_t*); void init_task_alert_iterator (iterator_t*, task_t, event_t event); alert_t task_alert_iterator_alert (iterator_t*); const char* task_alert_iterator_uuid (iterator_t*); const char* task_alert_iterator_name (iterator_t*); /* Task global variables and preprocessor variables. */ /** * @brief The task currently running on the scanner. */ extern /*@null@*/ task_t current_scanner_task; extern /*@null@*/ report_t current_report; #define MANAGE_EXAMPLE_TASK_UUID "343435d6-91b0-11de-9478-ffd71f4c6f29" /* Task code specific to the representation of tasks. */ unsigned int task_count (const get_data_t *); int init_task_iterator (iterator_t*, const get_data_t *); task_status_t task_iterator_run_status (iterator_t*); const char * task_iterator_run_status_name (iterator_t*); int task_iterator_total_reports (iterator_t*); int task_iterator_finished_reports (iterator_t *); const char * task_iterator_first_report (iterator_t*); const char * task_iterator_last_report (iterator_t *); report_t task_iterator_current_report (iterator_t *); const char * task_iterator_hosts_ordering (iterator_t *); scanner_t task_iterator_scanner (iterator_t *); unsigned int task_id (task_t); int task_uuid (task_t, /*@out@*/ char **); int task_in_trash (task_t); int task_in_use (task_t); int trash_task_in_use (task_t); int task_writable (task_t); int task_alterable (task_t); int trash_task_writable (task_t); char* task_owner_name (task_t); char* task_name (task_t); char* task_comment (task_t); char* task_hosts_ordering (task_t); scanner_t task_scanner (task_t); config_t task_config (task_t); char* task_config_uuid (task_t); char* task_config_name (task_t); int task_config_in_trash (task_t); void set_task_config (task_t, config_t); target_t task_target (task_t); int task_target_in_trash (task_t); void set_task_target (task_t, target_t); void set_task_hosts_ordering (task_t, const char *); void set_task_scanner (task_t, scanner_t); slave_t task_slave (task_t); void set_task_slave (task_t, target_t); int task_slave_in_trash (task_t); char* task_description (task_t); void set_task_description (task_t, char*, gsize); task_status_t task_run_status (task_t); void set_task_run_status (task_t, task_status_t); int task_result_count (task_t, int); report_t task_running_report (task_t); int task_upload_progress (task_t); void set_task_start_time (task_t, char*); void set_task_start_time_epoch (task_t, int); void set_task_start_time_otp (task_t, char*); void set_task_end_time (task_t task, char* time); void add_task_alert (task_t, alert_t); int set_task_alerts (task_t, array_t*, gchar**); void set_task_alterable (task_t, int); int set_task_groups (task_t, array_t*, gchar**); int set_task_schedule (task_t, schedule_t, int); int set_task_schedule_periods (const gchar *, int); int set_task_schedule_periods_id (task_t, int); unsigned int task_report_count (task_t); int task_last_report (task_t, report_t*); const char * task_iterator_trend_counts (iterator_t *, int, int, int, double, int, int, int, double); const char * task_trend (task_t, int, int); int task_schedule_periods (task_t); int task_schedule_periods_uuid (const gchar *); schedule_t task_schedule (task_t); schedule_t task_schedule_uuid (const gchar *); int task_schedule_in_trash (task_t); time_t task_schedule_next_time (const gchar *); int task_schedule_next_time_tz (task_t); char * task_severity (task_t, int, int, int); double task_severity_double (task_t, int, int, int); int task_debugs_size (task_t); int task_holes_size (task_t); int task_infos_size (task_t); int task_logs_size (task_t); int task_warnings_size (task_t); int task_false_positive_size (task_t); void free_tasks (); /*@null@*/ /*@dependent@*/ /*@special@*/ task_t make_task (/*@only@*/ char*, /*@only@*/ char*) /*@defines result->open_ports@*/ /*@ensures isnull result->description@*/; void make_task_complete (const char *); int copy_task (const char*, const char*, const char *, int, task_t*); int load_tasks (); int save_tasks (); /*@dependent@*/ gboolean find_task (const char* id, task_t*); gboolean find_task_with_permission (const char*, task_t*, const char *); gboolean find_trash_task_with_permission (const char*, task_t*, const char *); void reset_task (task_t); int set_task_parameter (task_t, /*@null@*/ const char*, /*@null@*/ /*@only@*/ char*); char* task_observers (task_t); int set_task_observers (task_t, const gchar *); int request_delete_task_uuid (const char *, int); int request_delete_task (task_t*); int delete_task (task_t, int); /* For otp.c. */ int delete_task_lock (task_t, int); void append_to_task_comment (task_t, const char*, int); void append_to_task_name (task_t, const char*, int); void add_task_description_line (task_t, const char*, size_t); void set_scan_ports (report_t, const char*, unsigned int, unsigned int); void append_task_open_port (task_t task, const char *, const char*); void manage_task_update_file (task_t, const char *, const void *); int manage_task_remove_file (task_t, const char *); void init_config_file_iterator (iterator_t*, const char*, const char*); const char* config_file_iterator_content (iterator_t*); int config_file_iterator_length (iterator_t*); void init_config_task_iterator (iterator_t*, config_t, int); const char* config_task_iterator_name (iterator_t*); const char* config_task_iterator_uuid (iterator_t*); int config_task_iterator_readable (iterator_t*); /* General severity related facilities. */ int severity_in_level (double, const char *); int severity_matches_ov (double, double); const char* severity_to_level (double, int); const char* severity_to_type (double); typedef struct { int* counts; int total; double max; } severity_data_t; int severity_data_index (double); double severity_data_value (int); void init_severity_data (severity_data_t*); void cleanup_severity_data (severity_data_t*); void severity_data_add (severity_data_t*, double); void severity_data_add_count (severity_data_t*, double, int); int severity_data_range_count (const severity_data_t*, double, double); void severity_data_level_counts (const severity_data_t*, const gchar*, int*, int*, int*, int*, int*, int*, int*); /* General task facilities. */ const char* run_status_name (task_status_t); int start_task (const char *, char**); int stop_task (const char *); int resume_task (const char *, char **); /* Iteration. */ void cleanup_iterator (iterator_t*); gboolean next (iterator_t*); /* Access control. */ int user_may (const char *); extern int user_can_everything (const char *); extern int user_can_super_everyone (const char *); extern int user_has_super (const char *, user_t); /* Results. */ /** * @brief SQL list of LSC families. */ #define LSC_FAMILY_LIST \ "'AIX Local Security Checks'," \ " 'CentOS Local Security Checks'," \ " 'Debian Local Security Checks'," \ " 'Fedora Local Security Checks'," \ " 'FreeBSD Local Security Checks'," \ " 'Gentoo Local Security Checks'," \ " 'HP-UX Local Security Checks'," \ " 'Mac OS X Local Security Checks'," \ " 'Mandrake Local Security Checks'," \ " 'Red Hat Local Security Checks'," \ " 'Solaris Local Security Checks'," \ " 'SuSE Local Security Checks'," \ " 'Ubuntu Local Security Checks'," \ " 'Windows : Microsoft Bulletins'," \ " 'Privilege escalation'" gboolean find_result_with_permission (const char*, result_t*, const char *); int result_uuid (result_t, /*@out@*/ char **); int result_detection_reference (result_t, char **, char **, char **, char **, char **); /* Reports. */ /** @todo How is this documented? */ #define OVAS_MANAGE_REPORT_ID_LENGTH UUID_LEN_STR /** * @brief Default quality of detection percentage. */ #define QOD_DEFAULT 75 /** * @brief Default min quality of detection percentage for filters. */ #define MIN_QOD_DEFAULT 70 void reports_clear_count_cache (int); void reports_build_count_cache (int, int*); void report_cache_counts (report_t); double report_severity (report_t, int, int); gboolean find_report_with_permission (const char *, report_t *, const char *); report_t make_report (task_t, const char *, task_status_t); int qod_from_type (const char *); result_t make_result (task_t, const char*, const char*, const char*, const char*, const char*); result_t make_osp_result (task_t, const char*, const char*, const char*, const char*, const char *, const char *); /** * @brief A CREATE_REPORT result. */ typedef struct { char *description; ///< Description of NVT. char *host; ///< Host. char *nvt_oid; ///< OID of NVT. char *scan_nvt_version; ///< Version of NVT used at scan time. char *port; ///< Port. char *qod; ///< QoD (quality of detection). char *qod_type; ///< QoD type. char *severity; ///< Severity score. char *threat; ///< Threat. } create_report_result_t; /** * @brief A host detail for create_report. */ typedef struct { char *ip; ///< IP. char *name; ///< Detail name. char *source_desc; ///< Source description. char *source_name; ///< Source name. char *source_type; ///< Source type. char *value; ///< Detail value. } host_detail_t; void host_detail_free (host_detail_t *); void insert_report_host_detail (report_t, const char *, const char *, const char *, const char *, const char *, const char *); int create_report (array_t*, const char *, const char *, const char *, const char *, const char *, array_t*, array_t*, array_t*, char **); void report_add_result (report_t, result_t); char* report_uuid (report_t); void report_set_slave_uuid (report_t, const gchar *); void report_set_slave_name (report_t, const gchar *); void report_set_slave_host (report_t, const gchar *); void report_set_slave_port (report_t, int); void report_set_source_iface (report_t, const gchar *); int task_last_stopped_report (task_t, report_t *); gchar* task_second_last_report_id (task_t); gchar* report_path_task_uuid (gchar*); gboolean report_task (report_t, task_t*); /*@=exportlocal@*/ int report_scan_run_status (report_t, int*); int report_slave_progress (report_t); char * report_slave_task_uuid (report_t); int report_scan_result_count (report_t, const char*, const char*, int, const char*, const char*, int, int, int*); int report_counts (const char*, int*, int*, int*, int*, int*, int*, double*, int, int, int); int report_counts_id (report_t, int*, int*, int*, int*, int*, int*, double*, int, const char*, int, const char*); char* scan_start_time (report_t); int scan_start_time_epoch (report_t); char* scan_end_time_uuid (const char *); void set_scan_start_time (report_t, const char*); void set_scan_start_time_otp (report_t, const char*); void set_scan_start_time_epoch (report_t, time_t); char* scan_end_time (report_t); void set_scan_end_time (report_t, const char*); void set_scan_end_time_otp (report_t, const char*); void set_scan_end_time_epoch (report_t, time_t); void set_scan_host_start_time (report_t, const char*, const char*); void set_scan_host_start_time_otp (report_t, const char*, const char*); int scan_host_end_time (report_t, const char*); void set_scan_host_end_time (report_t, const char*, const char*); void set_scan_host_end_time_otp (report_t, const char*, const char*); int report_timestamp (const char*, gchar**); int modify_report (const char*, const char*); int delete_report (const char *, int); int report_count (const get_data_t *); int init_report_iterator (iterator_t*, const get_data_t *); void init_report_iterator_task (iterator_t*, task_t); void init_report_errors_iterator (iterator_t*, report_t); const char* report_iterator_uuid (iterator_t*); int result_count (const get_data_t *, int, int, int, int); int init_result_get_iterator (iterator_t*, const get_data_t *, int, int, int, int); void init_result_iterator (iterator_t*, task_t, result_t, int, int, int, const char *, const char *, int, const char *, int, const char *, const char *, int); gboolean next_report (iterator_t*, report_t*); result_t result_iterator_result (iterator_t*); const char* result_iterator_host (iterator_t*); const char* result_iterator_port (iterator_t*); const char* result_iterator_nvt_oid (iterator_t*); const char* result_iterator_nvt_name (iterator_t *); const char* result_iterator_nvt_family (iterator_t *); const char* result_iterator_nvt_cvss_base (iterator_t *); const char* result_iterator_nvt_cve (iterator_t *); const char* result_iterator_nvt_bid (iterator_t *); const char* result_iterator_nvt_xref (iterator_t *); const char* result_iterator_nvt_tag (iterator_t *); const char* result_iterator_type (iterator_t*); const char* result_iterator_original_type (iterator_t*); const char* result_iterator_descr (iterator_t*); task_t result_iterator_task (iterator_t*); report_t result_iterator_report (iterator_t*); const char* result_iterator_scan_nvt_version (iterator_t*); const char* result_iterator_original_severity (iterator_t*); const char* result_iterator_severity (iterator_t*); double result_iterator_severity_double (iterator_t *); const char* result_iterator_original_level (iterator_t*); const char* result_iterator_level (iterator_t*); const char* result_iterator_qod (iterator_t*); const char* result_iterator_qod_type (iterator_t*); const char* result_iterator_date (iterator_t*); void init_host_iterator (iterator_t*, report_t, const char *, report_host_t); const char* host_iterator_host (iterator_t*); const char* host_iterator_start_time (iterator_t*); const char* host_iterator_end_time (iterator_t*); int host_iterator_current_port (iterator_t*); int host_iterator_max_port (iterator_t*); int collate_message_type (void* data, int, const void*, int, const void*); void trim_partial_report (report_t); int report_progress (report_t, task_t, gchar **); gchar * manage_report (report_t, report_format_t, const char *, int, const char*, int, const char *, const char *, const char *, const char *, int, const char *, int, int, int, int, int, int, int, const char *, gsize *, gchar **, gchar **, const char *, gchar **, gchar **, gchar **); int manage_send_report (report_t, report_t, report_format_t, const get_data_t *, int, const char*, int, const char *, const char *, const char *, const char *, int, const char *, int, int, int, int, int, int, int, int, int, gboolean (*) (const char *, int (*) (const char*, void*), void*), int (*) (const char *, void*), void *, const char *, const char *, const char *, int, const char *, const char *, int, int, const gchar *, const char *); /* Targets. */ /** * @brief Default maximum number of hosts a target may specify. */ #define MANAGE_MAX_HOSTS 4095 /** * @brief Default maximum number of hosts a user host access may specify. */ #define MANAGE_USER_MAX_HOSTS 16777216 int manage_max_hosts (); void manage_filter_controls (const gchar *, int *, int *, gchar **, int *); void manage_report_filter_controls (const gchar *, int *, int *, gchar **, int *, int *, gchar **, gchar **, gchar **, gchar **, gchar **, int *, int *, int *, int *, int *, gchar **); gchar * manage_clean_filter (const gchar *); gchar * manage_clean_filter_remove (const gchar *, const gchar *); int manage_count_hosts (const char *, const char *); gboolean find_target_with_permission (const char *, target_t *, const char *); int create_target (const char*, const char*, const char*, const char*, const char *, const char*, lsc_credential_t, const char*, lsc_credential_t, lsc_credential_t, const char *, const char *, const char *, int, target_t*); int copy_target (const char*, const char*, const char *, target_t*); int modify_target (const char*, const char*, const char*, const char*, const char*, const char*, const char*, const char*, const char*, const char*, const char*, const char *, const char*); int delete_target (const char*, int); int target_count (const get_data_t *); void init_user_target_iterator (iterator_t*, target_t); void init_target_iterator_one (iterator_t*, target_t); int init_target_iterator (iterator_t*, const get_data_t *); const char* target_iterator_hosts (iterator_t*); const char* target_iterator_exclude_hosts (iterator_t*); const char* target_iterator_reverse_lookup_only (iterator_t*); const char* target_iterator_reverse_lookup_unify (iterator_t*); const char* target_iterator_comment (iterator_t*); int target_iterator_ssh_credential (iterator_t*); const char* target_iterator_ssh_port (iterator_t*); int target_iterator_smb_credential (iterator_t*); int target_iterator_esxi_credential (iterator_t*); int target_iterator_ssh_trash (iterator_t*); int target_iterator_smb_trash (iterator_t*); int target_iterator_esxi_trash (iterator_t*); const char* target_iterator_port_list_uuid (iterator_t*); const char* target_iterator_port_list_name (iterator_t*); int target_iterator_port_list_trash (iterator_t*); const char* target_iterator_alive_tests (iterator_t*); char* target_uuid (target_t); char* trash_target_uuid (target_t); char* target_name (target_t); char* trash_target_name (target_t); int trash_target_readable (target_t); char* target_hosts (target_t); char* target_exclude_hosts (target_t); char* target_reverse_lookup_only (target_t); char* target_reverse_lookup_unify (target_t); char* target_port_range (target_t); char* target_ssh_port (target_t); char* trash_target_hosts (target_t); char* trash_target_exclude_hosts (target_t); int target_in_use (target_t); int trash_target_in_use (target_t); int target_writable (target_t); int trash_target_writable (target_t); char* target_lsc_credential_name (const char *); void init_target_task_iterator (iterator_t*, target_t); const char* target_task_iterator_name (iterator_t*); const char* target_task_iterator_uuid (iterator_t*); int target_task_iterator_readable (iterator_t*); /* Configs. */ /** * @brief An NVT preference. */ typedef struct { char *name; ///< Name of preference. char *type; ///< Type of preference (radio, password, ...). char *value; ///< Value of preference. char *nvt_name; ///< Name of NVT preference affects. char *nvt_oid; ///< OID of NVT preference affects. array_t *alts; ///< Array of gchar's. Alternate values for radio type. char *default_value; ///< Default value of preference. } preference_t; /** * @brief An NVT selector. */ typedef struct { char *name; ///< Name of NVT selector. char *type; ///< Name of NVT selector. int include; ///< Whether family/NVT is included or excluded. char *family_or_nvt; ///< Family or NVT that this selector selects. } nvt_selector_t; int create_config (const char*, const char*, const array_t*, const array_t*, const char*, config_t*, char**); int create_config_from_scanner (const char*, const char *, const char *, char **); int copy_config (const char*, const char*, const char *, config_t*); int delete_config (const char*, int); gboolean find_config_with_permission (const char*, config_t*, const char *); gboolean find_config (const char*, config_t*); char * config_uuid (config_t); int config_type (config_t); char * config_nvt_timeout (config_t, const char *); void init_user_config_iterator (iterator_t*, config_t, int, int, const char*); int init_config_iterator (iterator_t*, const get_data_t*); const char* config_iterator_nvt_selector (iterator_t*); int config_iterator_nvt_count (iterator_t*); int config_iterator_family_count (iterator_t*); int config_iterator_nvts_growing (iterator_t*); int config_iterator_type (iterator_t*); int config_iterator_families_growing (iterator_t*); char* config_nvt_selector (config_t); int config_type (config_t); int config_in_use (config_t); int config_writable (config_t); int config_count (const get_data_t *); int trash_config_in_use (config_t); int trash_config_writable (config_t); int trash_config_readable_uuid (const gchar *); int config_families_growing (config_t); int config_nvts_growing (config_t); int create_task_check_config_scanner (config_t, scanner_t); int modify_task_check_config_scanner (task_t, const char *, const char *); int modify_task_check_slave_scanner (task_t, const char *, const char *); int manage_set_config_preference (config_t, const char*, const char*, const char*); void init_preference_iterator (iterator_t *, config_t); const char* preference_iterator_name (iterator_t *); const char* preference_iterator_value (iterator_t *); const char* preference_iterator_type (iterator_t *); const char* preference_iterator_default (iterator_t *); int manage_set_config_comment (config_t, const char*); int manage_set_config_name (config_t, const char*); int manage_set_config_name_comment (config_t, const char*, const char*); int manage_set_config_nvts (config_t, const char*, GPtrArray*); int manage_set_config_families (config_t, GPtrArray*, GPtrArray*, GPtrArray*, int); void init_config_timeout_iterator (iterator_t*, config_t); const char* config_timeout_iterator_oid (iterator_t *); const char* config_timeout_iterator_nvt_name (iterator_t *); const char* config_timeout_iterator_value (iterator_t *); /* NVT's. */ char * manage_nvt_name (nvt_t); char * nvt_oid (const char *); char* nvts_feed_version (); void set_nvts_feed_version (const char*); nvt_t make_nvt_from_nvti (const nvti_t*, int); gboolean find_nvt (const char*, nvt_t*); int init_nvt_info_iterator (iterator_t*, get_data_t*, const char*); int nvt_info_count (const get_data_t *); void init_nvt_iterator (iterator_t*, nvt_t, config_t, const char*, const char*, int, const char*); void init_cve_nvt_iterator (iterator_t*, const char *, int, const char*); const char* nvt_iterator_oid (iterator_t*); const char* nvt_iterator_version (iterator_t*); const char* nvt_iterator_name (iterator_t*); const char* nvt_iterator_summary (iterator_t*); const char* nvt_iterator_description (iterator_t*); const char* nvt_iterator_copyright (iterator_t*); const char* nvt_iterator_cve (iterator_t*); const char* nvt_iterator_bid (iterator_t*); const char* nvt_iterator_xref (iterator_t*); const char* nvt_iterator_tag (iterator_t*); int nvt_iterator_category (iterator_t*); const char* nvt_iterator_family (iterator_t*); const char* nvt_iterator_cvss_base (iterator_t*); const char* nvt_iterator_qod (iterator_t*); const char* nvt_iterator_qod_type ( iterator_t *iterator ); const char* nvt_iterator_solution_type (iterator_t*); int family_nvt_count (const char *); void manage_complete_nvt_cache_update (GList *, int); /* NVT selectors. */ /** * @brief NVT selector type for "all" rule. */ #define NVT_SELECTOR_TYPE_ALL 0 /** * @brief NVT selector type for "family" rule. */ #define NVT_SELECTOR_TYPE_FAMILY 1 /** * @brief NVT selector type for "NVT" rule. */ #define NVT_SELECTOR_TYPE_NVT 2 /** * @brief Special NVT selector type for selecting all types in interfaces. */ #define NVT_SELECTOR_TYPE_ANY 999 void init_family_iterator (iterator_t*, int, const char*, int); const char* family_iterator_name (iterator_t*); int nvt_selector_family_growing (const char *, const char *, int); int nvt_selector_family_count (const char*, int); int nvt_selector_nvt_count (const char *, const char *, int); void init_nvt_selector_iterator (iterator_t*, const char*, config_t, int); const char* nvt_selector_iterator_nvt (iterator_t*); const char* nvt_selector_iterator_name (iterator_t*); int nvt_selector_iterator_include (iterator_t*); int nvt_selector_iterator_type (iterator_t*); /* NVT preferences. */ void manage_nvt_preference_add (const char*, const char*, int); void manage_nvt_preferences_enable (); void init_nvt_preference_iterator (iterator_t*, const char*); const char* nvt_preference_iterator_name (iterator_t*); const char* nvt_preference_iterator_value (iterator_t*); char* nvt_preference_iterator_config_value (iterator_t*, config_t); char* nvt_preference_iterator_real_name (iterator_t*); char* nvt_preference_iterator_type (iterator_t*); char* nvt_preference_iterator_nvt (iterator_t*); int nvt_preference_count (const char *); gchar* get_nvti_xml (iterator_t*, int, int, int, const char*, config_t, int); char* task_preference_value (task_t, const char *); int set_task_preferences (task_t, array_t *); void init_task_group_iterator (iterator_t *, task_t); const char* task_group_iterator_name (iterator_t*); const char* task_group_iterator_uuid (iterator_t*); void init_task_role_iterator (iterator_t *, task_t); const char* task_role_iterator_name (iterator_t*); const char* task_role_iterator_uuid (iterator_t*); /* LSC credentials. */ gboolean find_lsc_credential (const char*, lsc_credential_t*); gboolean find_lsc_credential_with_permission (const char*, lsc_credential_t*, const char*); int create_lsc_credential (const char*, const char*, const char*, const char*, const char*, lsc_credential_t*); int copy_lsc_credential (const char*, const char*, const char*, lsc_credential_t*); int modify_lsc_credential (const char*, const char*, const char*, const char *, const char *); int delete_lsc_credential (const char *, int); int lsc_credential_count (const get_data_t *); void set_lsc_credential_name (lsc_credential_t, const char *); void set_lsc_credential_comment (lsc_credential_t, const char *); void set_lsc_credential_login (lsc_credential_t, const char *); void set_lsc_credential_password (lsc_credential_t, const char *); void init_lsc_credential_iterator_one (iterator_t*, lsc_credential_t); int init_lsc_credential_iterator (iterator_t*, const get_data_t *); const char* lsc_credential_iterator_login (iterator_t*); const char* lsc_credential_iterator_private_key (iterator_t*); char* lsc_credential_iterator_rpm (iterator_t*); char* lsc_credential_iterator_deb (iterator_t*); char* lsc_credential_iterator_exe (iterator_t*); char* lsc_credential_uuid (lsc_credential_t); char* trash_lsc_credential_uuid (lsc_credential_t); char* lsc_credential_name (lsc_credential_t); char* trash_lsc_credential_name (lsc_credential_t); void init_lsc_credential_target_iterator (iterator_t*, lsc_credential_t, int); const char* lsc_credential_target_iterator_uuid (iterator_t*); const char* lsc_credential_target_iterator_name (iterator_t*); int lsc_credential_target_iterator_readable (iterator_t*); int trash_lsc_credential_in_use (lsc_credential_t); int lsc_credential_in_use (lsc_credential_t); int trash_lsc_credential_writable (lsc_credential_t); int lsc_credential_writable (lsc_credential_t); int trash_lsc_credential_readable (lsc_credential_t); /* Agents. */ int create_agent (const char*, const char*, const char*, const char*, const char*, const char*, const char*, agent_t*); int copy_agent (const char*, const char*, const char *, agent_t *); int modify_agent (const char*, const char*, const char*); int delete_agent (const char *, int); int agent_in_use (agent_t); int trash_agent_in_use (agent_t); int trash_agent_writable (agent_t); int agent_writable (agent_t); int verify_agent (const char *); char * agent_uuid (agent_t); int agent_count (const get_data_t *); int init_agent_iterator (iterator_t*, const get_data_t *); const char* agent_iterator_installer (iterator_t*); gsize agent_iterator_installer_size (iterator_t*); const char* agent_iterator_installer_64 (iterator_t*); const char* agent_iterator_installer_filename (iterator_t*); const char* agent_iterator_installer_signature_64 (iterator_t*); const char* agent_iterator_trust (iterator_t*); time_t agent_iterator_trust_time (iterator_t*); const char* agent_iterator_howto_install (iterator_t*); const char* agent_iterator_howto_use (iterator_t*); /* Notes. */ gboolean find_note_with_permission (const char*, note_t*, const char *); int create_note (const char*, const char*, const char*, const char*, const char*, const char*, const char*, task_t, result_t, note_t*); int copy_note (const char*, note_t*); int delete_note (const char *, int); int note_uuid (note_t, char **); int modify_note (note_t, const char*, const char*, const char*, const char*, const char*, const char*, task_t, result_t); int note_count (const get_data_t *, nvt_t, result_t, task_t); int init_note_iterator (iterator_t*, const get_data_t*, nvt_t, result_t, task_t); const char* note_iterator_nvt_oid (iterator_t*); time_t note_iterator_creation_time (iterator_t*); time_t note_iterator_modification_time (iterator_t*); const char* note_iterator_text (iterator_t*); const char* note_iterator_hosts (iterator_t*); const char* note_iterator_port (iterator_t*); const char* note_iterator_threat (iterator_t*); task_t note_iterator_task (iterator_t*); result_t note_iterator_result (iterator_t*); time_t note_iterator_end_time (iterator_t*); int note_iterator_active (iterator_t*); const char* note_iterator_nvt_name (iterator_t *); const char* note_iterator_severity (iterator_t *); /* Overrides. */ gboolean find_override_with_permission (const char*, override_t*, const char *); int create_override (const char*, const char*, const char*, const char*, const char*, const char*, const char*, const char*, const char*, task_t, result_t, override_t*); int override_uuid (override_t, char **); int copy_override (const char*, override_t*); int delete_override (const char *, int); int modify_override (override_t, const char*, const char*, const char*, const char*, const char*, const char*, const char*, const char*, task_t, result_t); int override_count (const get_data_t *, nvt_t, result_t, task_t); int init_override_iterator (iterator_t*, const get_data_t*, nvt_t, result_t, task_t); const char* override_iterator_nvt_oid (iterator_t*); time_t override_iterator_creation_time (iterator_t*); time_t override_iterator_modification_time (iterator_t*); const char* override_iterator_text (iterator_t*); const char* override_iterator_hosts (iterator_t*); const char* override_iterator_port (iterator_t*); const char* override_iterator_threat (iterator_t*); const char* override_iterator_new_threat (iterator_t*); task_t override_iterator_task (iterator_t*); result_t override_iterator_result (iterator_t*); time_t override_iterator_end_time (iterator_t*); int override_iterator_active (iterator_t*); const char* override_iterator_nvt_name (iterator_t *); const char* override_iterator_severity (iterator_t *); const char* override_iterator_new_severity (iterator_t *); /* Scanner messaging. */ int acknowledge_bye (); int acknowledge_feed_version_info (); int manage_check_current_task (); /* System reports. */ /** * @brief A system report type iterator. */ typedef struct { gchar **start; ///< First type. gchar **current; ///< Current type. } report_type_iterator_t; int init_system_report_type_iterator (report_type_iterator_t*, const char*, const char*); void cleanup_report_type_iterator (report_type_iterator_t*); gboolean next_report_type (report_type_iterator_t*); const char* report_type_iterator_name (report_type_iterator_t*); const char* report_type_iterator_title (report_type_iterator_t*); int manage_system_report (const char *, const char *, const char *, char **); int manage_create_scanner (GSList *, const char *, const char *, const char *, const char *, const char *, const char *, const char *, const char *); int manage_modify_scanner (GSList *, const gchar *, const char *, const char *, const char *, const char *, const char *, const char *, const char *, const char *); int manage_delete_scanner (GSList *, const gchar *, const gchar *); int manage_verify_scanner (GSList *, const gchar *, const gchar *); int manage_get_scanners (GSList *, const gchar *); gboolean find_scanner (const char *, scanner_t *); int create_scanner (const char*, const char *, const char *, const char *, const char *, scanner_t *, const char *, const char *, const char *); int copy_scanner (const char*, const char*, const char *, scanner_t *); int modify_scanner (const char*, const char*, const char*, const char *, const char *, const char *, const char *, const char *, const char *); int delete_scanner (const char *, int); gboolean find_scanner_with_permission (const char *, scanner_t *, const char *); int scanner_in_use (scanner_t); int trash_scanner_in_use (scanner_t); int trash_scanner_writable (scanner_t); int scanner_writable (scanner_t); char * scanner_uuid (scanner_t); char * scanner_host (scanner_t); int scanner_port (scanner_t); int scanner_type (scanner_t); char * scanner_ca_pub (scanner_t); char * scanner_key_pub (scanner_t); char * scanner_key_priv (scanner_t); int scanner_count (const get_data_t *); int init_scanner_iterator (iterator_t*, const get_data_t *); const char* scanner_iterator_host (iterator_t*); int scanner_iterator_port (iterator_t*); int scanner_iterator_type (iterator_t*); const char* scanner_iterator_ca_pub (iterator_t *); const char* scanner_iterator_key_pub (iterator_t *); const char* scanner_iterator_key_priv (iterator_t *); void init_scanner_task_iterator (iterator_t*, scanner_t); const char* scanner_task_iterator_uuid (iterator_t *); const char* scanner_task_iterator_name (iterator_t *); int scanner_task_iterator_readable (iterator_t *); char * scanner_name (scanner_t); char * scanner_uuid (scanner_t); int osp_get_version_from_iterator (iterator_t *, char **, char **, char **, char **, char **, char **); int osp_get_details_from_iterator (iterator_t *, char **, GSList **); osp_connection_t * osp_scanner_connect (scanner_t); int verify_scanner (const char *, char **); /* Scheduling. */ long time_offset (const char *, time_t); long current_offset (const char *); gboolean find_schedule_with_permission (const char*, schedule_t*, const char*); int create_schedule (const char*, const char *, time_t, time_t, time_t, time_t, const char*, schedule_t *); int copy_schedule (const char*, const char*, const char *, schedule_t *); int delete_schedule (const char*, int); void manage_auth_allow_all (); gchar* get_scheduled_user_uuid (); void set_scheduled_user_uuid (gchar* uuid); int manage_schedule (int (*) (int *, gnutls_session_t *, gnutls_certificate_credentials_t *, gchar*, sigset_t*), gboolean, sigset_t *sigmask_current); char * schedule_uuid (schedule_t); char * schedule_name (schedule_t); int schedule_duration (schedule_t); int schedule_period (schedule_t); int init_schedule_iterator (iterator_t*, const get_data_t *); time_t schedule_iterator_first_time (iterator_t *); time_t schedule_iterator_next_time (iterator_t *); time_t schedule_iterator_period (iterator_t *); time_t schedule_iterator_period_months (iterator_t *); time_t schedule_iterator_duration (iterator_t *); const char* schedule_iterator_timezone (iterator_t *); time_t schedule_iterator_initial_offset (iterator_t *); int trash_schedule_in_use (schedule_t); int schedule_in_use (schedule_t); int trash_schedule_writable (schedule_t); int trash_schedule_readable (schedule_t); int schedule_writable (schedule_t); int schedule_count (const get_data_t *); void init_schedule_task_iterator (iterator_t*, schedule_t); const char* schedule_task_iterator_uuid (iterator_t *); const char* schedule_task_iterator_name (iterator_t *); int schedule_task_iterator_readable (iterator_t*); int modify_schedule (const char*, const char*, const char *, time_t, time_t, time_t, time_t, const char *); /* Report Formats. */ gboolean find_report_format_with_permission (const char*, report_format_t*, const char *); gboolean lookup_report_format (const char*, report_format_t*); /** * @brief Struct for defining a report format param. */ typedef struct { gchar *fallback; ///< Fallback value. gchar *name; ///< Name. gchar *type; ///< Type (boolean, string, integer, ...). gchar *type_max; ///< Maximum value for integer type. gchar *type_min; ///< Minimum value for integer type. gchar *value; ///< Value of param. } create_report_format_param_t; int create_report_format (const char *, const char *, const char *, const char *, const char *, const char *, int, array_t *, array_t *, array_t *, const char *, report_format_t *); int copy_report_format (const char *, const char *, report_format_t*); int modify_report_format (const char *, const char *, const char *, const char *, const char *, const char *); int delete_report_format (const char *, int); int verify_report_format (const char *); char * report_format_uuid (report_format_t); char * report_format_owner_uuid (report_format_t); void set_report_format_active (report_format_t, int); char * report_format_name (report_format_t); char * report_format_content_type (report_format_t); char * report_format_extension (report_format_t); void set_report_format_name (report_format_t, const char *); void set_report_format_summary (report_format_t, const char *); int set_report_format_param (report_format_t, const char *, const char *); int report_format_global (report_format_t); int trash_report_format_global (report_format_t); int report_format_predefined (report_format_t); int report_format_active (report_format_t); int report_format_trust (report_format_t); int report_format_in_use (report_format_t); int trash_report_format_in_use (report_format_t); int trash_report_format_writable (report_format_t); int report_format_writable (report_format_t); int report_format_count (const get_data_t *); int init_report_format_iterator (iterator_t*, const get_data_t *); const char* report_format_iterator_extension (iterator_t *); const char* report_format_iterator_content_type (iterator_t *); const char* report_format_iterator_description (iterator_t *); int report_format_iterator_active (iterator_t *); const char* report_format_iterator_signature (iterator_t *); const char* report_format_iterator_trust (iterator_t *); const char* report_format_iterator_summary (iterator_t *); time_t report_format_iterator_trust_time (iterator_t *); void init_report_format_alert_iterator (iterator_t*, report_format_t); const char* report_format_alert_iterator_name (iterator_t*); const char* report_format_alert_iterator_uuid (iterator_t*); int report_format_alert_iterator_readable (iterator_t*); /** * @brief A report format file iterator. */ typedef struct { GPtrArray *start; ///< Array of files. gpointer *current; ///< Current file. gchar *dir_name; ///< Dir holding files. } file_iterator_t; int init_report_format_file_iterator (file_iterator_t*, report_format_t); void cleanup_file_iterator (file_iterator_t*); gboolean next_file (file_iterator_t*); const char* file_iterator_name (file_iterator_t*); gchar* file_iterator_content_64 (file_iterator_t*); /** * @brief Report format param types. * * These numbers are used in the database, so if the number associated with * any symbol changes then a migrator must be added to update existing data. */ typedef enum { REPORT_FORMAT_PARAM_TYPE_BOOLEAN = 0, REPORT_FORMAT_PARAM_TYPE_INTEGER = 1, REPORT_FORMAT_PARAM_TYPE_SELECTION = 2, REPORT_FORMAT_PARAM_TYPE_STRING = 3, REPORT_FORMAT_PARAM_TYPE_TEXT = 4, REPORT_FORMAT_PARAM_TYPE_ERROR = 100 } report_format_param_type_t; const char * report_format_param_type_name (report_format_param_type_t); report_format_param_type_t report_format_param_type_from_name (const char *); void init_report_format_param_iterator (iterator_t*, report_format_t, int, int, const char*); report_format_param_t report_format_param_iterator_param (iterator_t*); const char* report_format_param_iterator_name (iterator_t *); const char* report_format_param_iterator_value (iterator_t *); const char* report_format_param_iterator_type_name (iterator_t *); report_format_param_type_t report_format_param_iterator_type (iterator_t *); long long int report_format_param_iterator_type_min (iterator_t *); long long int report_format_param_iterator_type_max (iterator_t *); const char* report_format_param_iterator_fallback (iterator_t *); const char* report_format_param_iterator_type_regex (iterator_t *); void init_param_option_iterator (iterator_t*, report_format_param_t, int, const char *); const char* param_option_iterator_value (iterator_t *); /* Slaves. */ gboolean find_slave (const char*, slave_t*); gboolean find_slave_with_permission (const char*, slave_t*, const char *); int create_slave (const char*, const char*, const char*, const char*, const char*, const char*, slave_t*); int copy_slave (const char*, const char*, const char *, slave_t *); int modify_slave (const char*, const char*, const char*, const char*, const char*, const char*, const char*); int delete_slave (const char*, int); int init_slave_iterator (iterator_t*, const get_data_t *); const char* slave_iterator_host (iterator_t*); const char* slave_iterator_port (iterator_t*); const char* slave_iterator_login (iterator_t*); char* slave_uuid (slave_t); char* trash_slave_uuid (slave_t); char* slave_name (slave_t); char* trash_slave_name (slave_t); char* slave_host (slave_t); char* slave_login (slave_t); char* slave_password (slave_t); int slave_port (slave_t); int slave_in_use (slave_t); int trash_slave_in_use (slave_t); int trash_slave_writable (slave_t); int trash_slave_readable (slave_t); int slave_writable (slave_t); int slave_count (const get_data_t *); void init_slave_task_iterator (iterator_t*, slave_t); const char* slave_task_iterator_name (iterator_t*); const char* slave_task_iterator_uuid (iterator_t*); int slave_task_iterator_readable (iterator_t*); /* Groups. */ int init_group_iterator (iterator_t *, const get_data_t *); int copy_group (const char *, const char *, const char *, group_t *); int create_group (const char *, const char *, const char *, group_t *); int delete_group (const char *, int); char* group_uuid (group_t); gchar * group_users (group_t); int trash_group_in_use (group_t); int group_in_use (group_t); int trash_group_writable (group_t); int group_writable (group_t); int group_count (const get_data_t*); int modify_group (const char *, const char *, const char *, const char *); /* Permissions. */ int create_permission (const char *, const char *, const char *, const char *, const char *, const char *, permission_t *); int copy_permission (const char*, const char *, permission_t *); char* permission_uuid (permission_t); char * permission_name (permission_t); int permission_in_use (permission_t); int trash_permission_in_use (permission_t); int permission_writable (permission_t); int trash_permission_writable (permission_t); int permission_count (const get_data_t *); int init_permission_iterator (iterator_t*, const get_data_t *); const char* permission_iterator_resource_type (iterator_t*); const char* permission_iterator_resource_uuid (iterator_t*); const char* permission_iterator_resource_name (iterator_t*); int permission_iterator_resource_in_trash (iterator_t*); int permission_iterator_resource_orphan (iterator_t*); const char* permission_iterator_subject_type (iterator_t*); const char* permission_iterator_subject_uuid (iterator_t*); const char* permission_iterator_subject_name (iterator_t*); int permission_iterator_subject_in_trash (iterator_t*); int delete_permission (const char*, int); int modify_permission (const char *, const char *, const char *, const char *, const char *, const char *, const char *); /* Port lists. */ gboolean find_port_list (const char*, port_list_t*); gboolean find_port_list_with_permission (const char *, port_list_t *, const char *); gboolean find_port_range (const char*, port_list_t*); int create_port_list (const char*, const char*, const char*, const char*, array_t *, port_list_t*); int copy_port_list (const char*, const char*, const char*, port_list_t*); int modify_port_list (const char*, const char*, const char*); int create_port_range (const char *, const char *, const char *, const char *, const char *, port_range_t *); int delete_port_list (const char*, int); int delete_port_range (const char *, int); int port_list_count (const get_data_t *); int init_port_list_iterator (iterator_t*, const get_data_t *); int port_list_iterator_count_all (iterator_t*); int port_list_iterator_count_tcp (iterator_t*); int port_list_iterator_count_udp (iterator_t*); char* port_list_uuid (port_list_t); char* port_range_uuid (port_range_t); int port_list_is_predefined (port_list_t); int port_list_in_use (port_list_t); int trash_port_list_in_use (port_list_t); int trash_port_list_writable (port_list_t); int port_list_writable (port_list_t); #if 0 int trash_port_list_in_use (port_list_t); #endif int trash_port_list_readable_uuid (const gchar *); void init_port_range_iterator (iterator_t*, port_range_t, int, int, const char*); const char* port_range_iterator_uuid (iterator_t*); const char* port_range_iterator_comment (iterator_t*); const char* port_range_iterator_start (iterator_t*); const char* port_range_iterator_end (iterator_t*); const char* port_range_iterator_type (iterator_t*); port_protocol_t port_range_iterator_type_int (iterator_t* iterator); void init_port_list_target_iterator (iterator_t*, port_list_t, int); const char* port_list_target_iterator_uuid (iterator_t*); const char* port_list_target_iterator_name (iterator_t*); int port_list_target_iterator_readable (iterator_t*); /* Roles. */ int init_role_iterator (iterator_t *, const get_data_t *); int copy_role (const char *, const char *, const char *, role_t *); int create_role (const char *, const char *, const char *, role_t *); int delete_role (const char *, int); char* role_uuid (role_t); gchar * role_users (role_t); int trash_role_in_use (role_t); int role_in_use (role_t); int trash_role_writable (role_t); int role_writable (role_t); int role_count (const get_data_t*); int modify_role (const char *, const char *, const char *, const char *); /* Filter Utilities. */ /** * @brief Keyword type. */ typedef enum { KEYWORD_TYPE_UNKNOWN, KEYWORD_TYPE_INTEGER, KEYWORD_TYPE_DOUBLE, KEYWORD_TYPE_STRING } keyword_type_t; /** * @brief Comparison returns. */ typedef enum { KEYWORD_RELATION_APPROX, KEYWORD_RELATION_COLUMN_ABOVE, KEYWORD_RELATION_COLUMN_APPROX, KEYWORD_RELATION_COLUMN_EQUAL, KEYWORD_RELATION_COLUMN_BELOW, KEYWORD_RELATION_COLUMN_REGEXP } keyword_relation_t; /** * @brief Keyword. */ struct keyword { gchar *column; ///< The column prefix, or NULL. int equal; ///< Whether the keyword is like "=example". int integer_value; ///< Integer value of the keyword. double double_value; ///< Floating point value of the keyword. int quoted; ///< Whether the keyword was quoted. gchar *string; ///< The keyword string, outer quotes removed. keyword_type_t type; ///< Type of keyword. keyword_relation_t relation; ///< The relation. }; /** * @brief Keyword type. */ typedef struct keyword keyword_t; const char * keyword_relation_symbol (keyword_relation_t); void filter_free (array_t*); array_t * split_filter (const gchar*); /* Filters. */ gboolean find_filter (const char*, filter_t*); gboolean find_filter_with_permission (const char*, filter_t*, const char*); char* filter_uuid (filter_t); char* trash_filter_uuid (filter_t); char* filter_name (filter_t); char* trash_filter_name (filter_t); gchar* filter_term (const char *); gchar* filter_term_value (const char *, const char *); int create_filter (const char*, const char*, const char*, const char*, int, filter_t*); int copy_filter (const char*, const char*, const char*, filter_t*); int delete_filter (const char *, int); int trash_filter_in_use (filter_t); int filter_in_use (filter_t); int trash_filter_writable (filter_t); int filter_writable (filter_t); int filter_count (const get_data_t*); int init_filter_iterator (iterator_t*, const get_data_t*); const char* filter_iterator_type (iterator_t*); const char* filter_iterator_term (iterator_t*); void init_filter_alert_iterator (iterator_t*, filter_t); const char* filter_alert_iterator_name (iterator_t*); const char* filter_alert_iterator_uuid (iterator_t*); int filter_alert_iterator_readable (iterator_t*); int modify_filter (const char*, const char*, const char*, const char*, const char*); /* Schema. */ int manage_schema (gchar *, gchar **, gsize *, gchar **, gchar **); /* Trashcan. */ int manage_restore (const char *); int manage_empty_trashcan (); /* Scanner tags. */ void parse_tags (const char *, gchar **, gchar **, gchar **); /* SecInfo */ int manage_read_info (gchar *, gchar *, gchar *, gchar **); int info_name_count (const gchar *, const gchar *); /* SCAP. */ int manage_scap_loaded (); const char * manage_scap_update_time (); /* CPE. */ void init_cpe_cve_iterator (iterator_t *, const char *, int, const char *); int init_cpe_info_iterator (iterator_t*, get_data_t*, const char*); int cpe_info_count (const get_data_t *get); const char* cpe_info_iterator_title (iterator_t*); const char* cpe_info_iterator_status (iterator_t*); const char* cpe_info_iterator_max_cvss (iterator_t*); const char* cpe_info_iterator_deprecated_by_id (iterator_t*); const char* cpe_info_iterator_cve_refs (iterator_t*); const char* cpe_info_iterator_nvd_id (iterator_t*); /* CVE. */ const char* cve_iterator_name (iterator_t*); const char* cve_iterator_cvss (iterator_t*); const char* cve_info_iterator_cvss (iterator_t*); const char* cve_info_iterator_vector (iterator_t*); const char* cve_info_iterator_complexity (iterator_t*); const char* cve_info_iterator_authentication (iterator_t*); const char* cve_info_iterator_confidentiality_impact (iterator_t*); const char* cve_info_iterator_integrity_impact (iterator_t*); const char* cve_info_iterator_availability_impact (iterator_t*); const char* cve_info_iterator_description (iterator_t*); const char* cve_info_iterator_products (iterator_t*); int init_cve_info_iterator (iterator_t*, get_data_t*, const char*); int cve_info_count (const get_data_t *get); gchar * cve_cvss_base (const gchar *); /* OVAL defintions */ int init_ovaldef_info_iterator (iterator_t*, get_data_t*, const char*); int ovaldef_info_count (const get_data_t *get); const char* ovaldef_info_iterator_version (iterator_t*); const char* ovaldef_info_iterator_deprecated (iterator_t*); const char* ovaldef_info_iterator_class (iterator_t*); const char* ovaldef_info_iterator_title (iterator_t*); const char* ovaldef_info_iterator_description (iterator_t*); const char* ovaldef_info_iterator_file (iterator_t*); const char* ovaldef_info_iterator_status (iterator_t*); const char* ovaldef_info_iterator_max_cvss (iterator_t*); const char* ovaldef_info_iterator_cve_refs (iterator_t*); char * ovaldef_severity (const char *); char * ovaldef_version (const char *); char * ovaldef_uuid (const char *, const char *); char * ovaldef_cves (const char *); /* CERT data */ int manage_cert_loaded (); /* CERT-Bund */ int init_cert_bund_adv_info_iterator (iterator_t*, get_data_t*, const char*); int cert_bund_adv_info_count (const get_data_t *get); const char* cert_bund_adv_info_iterator_title (iterator_t*); const char* cert_bund_adv_info_iterator_summary (iterator_t*); const char* cert_bund_adv_info_iterator_cve_refs (iterator_t*); const char* cert_bund_adv_info_iterator_max_cvss (iterator_t*); void init_cve_cert_bund_adv_iterator (iterator_t*, const char*, int, const char*); void init_nvt_cert_bund_adv_iterator (iterator_t*, const char*, int, const char*); /* DFN-CERT */ int init_dfn_cert_adv_info_iterator (iterator_t*, get_data_t*, const char*); int dfn_cert_adv_info_count (const get_data_t *get); const char* dfn_cert_adv_info_iterator_title (iterator_t*); const char* dfn_cert_adv_info_iterator_summary (iterator_t*); const char* dfn_cert_adv_info_iterator_cve_refs (iterator_t*); const char* dfn_cert_adv_info_iterator_max_cvss (iterator_t*); void init_cve_dfn_cert_adv_iterator (iterator_t*, const char*, int, const char*); void init_nvt_dfn_cert_adv_iterator (iterator_t*, const char*, int, const char*); /* All SecInfo Data */ int all_info_count (const get_data_t *); int total_info_count (const get_data_t *, int); int init_all_info_iterator (iterator_t*, get_data_t*, const char*); const char* all_info_iterator_type (iterator_t*); const char* all_info_iterator_extra (iterator_t*); const char* all_info_iterator_severity (iterator_t*); /* Settings. */ int setting_count (const char *); char * setting_filter (const char *); const char * setting_severity (); double setting_default_severity_dbl (); int setting_dynamic_severity_int (); char * setting_timezone (); void init_setting_iterator (iterator_t *, const char *, const char *, int, int, int, const char *); const char* setting_iterator_uuid (iterator_t*); const char* setting_iterator_name (iterator_t*); const char* setting_iterator_comment (iterator_t*); const char* setting_iterator_value (iterator_t*); int setting_value_int (const char *, int *); int modify_setting (const gchar *, const gchar *, const gchar *, gchar **); /* Users. */ gboolean find_user_by_name_with_permission (const char *, user_t *, const char *); int manage_create_user (GSList *, const gchar *, const gchar *, const gchar *); int manage_delete_user (GSList *, const gchar *, const gchar *); int manage_get_users (GSList *, const gchar *, const gchar *); void manage_report_host_add (report_t, const char *, time_t, time_t); int manage_set_password (GSList *, const gchar *, const gchar *, const gchar *); gchar * manage_user_hash (const gchar *); gchar * manage_user_uuid (const gchar *, auth_method_t); int manage_user_set_role (const gchar *, const gchar *, const gchar *); int manage_user_exists (const gchar *, auth_method_t); int manage_scanner_set (const char *); int manage_scanner_set_default (); int copy_user (const char*, const char*, const char*, user_t*); gchar * keyfile_to_auth_conf_settings_xml (const gchar *); int init_user_iterator (iterator_t*, const get_data_t*); const char* user_iterator_role (iterator_t*); const char* user_iterator_method (iterator_t*); const char* user_iterator_hosts (iterator_t*); int user_iterator_hosts_allow (iterator_t*); const char* user_iterator_ifaces (iterator_t*); int user_iterator_ifaces_allow (iterator_t*); void init_user_group_iterator (iterator_t *, user_t); const char* user_group_iterator_uuid (iterator_t*); const char* user_group_iterator_name (iterator_t*); int user_group_iterator_readable (iterator_t*); void init_user_role_iterator (iterator_t *, user_t); const char* user_role_iterator_uuid (iterator_t*); const char* user_role_iterator_name (iterator_t*); int user_role_iterator_readable (iterator_t*); int create_user (const gchar *, const gchar *, const gchar *, int, const gchar *, int, const array_t *, array_t *, gchar **, array_t *, gchar **, gchar **, user_t *, int); int delete_user (const char *, const char *, int, int); int modify_user (const gchar *, gchar **, const gchar *, const gchar *, const gchar *, int, const gchar *, int, const array_t *, array_t *, gchar **, array_t *, gchar **, gchar **); int user_is_admin (const char *); int user_is_super_admin (const char *); int user_is_observer (const char *); int user_is_user (const char *); int user_in_use (user_t); int trash_user_in_use (user_t); int user_writable (user_t); int trash_user_writable (user_t); int user_count (const get_data_t*); char* user_uuid (user_t); /* Tags */ char* tag_uuid (target_t); int copy_tag (const char*, const char*, const char*, tag_t*); int create_tag (const char *, const char *, const char *, const char *, const char *, const char *, tag_t *); int delete_tag (const char *, int); int modify_tag (const char *, const char *, const char *, const char *, const char *, const char *, const char *); int init_tag_iterator (iterator_t*, const get_data_t*); int tag_count (const get_data_t *get); const char* tag_iterator_resource_type (iterator_t*); const char* tag_iterator_resource_uuid (iterator_t*); int tag_iterator_resource_location (iterator_t*); int tag_iterator_active (iterator_t*); const char* tag_iterator_value (iterator_t*); const char* tag_iterator_resource_name (iterator_t*); int tag_iterator_resource_readable (iterator_t*); int tag_iterator_orphan (iterator_t*); int init_tag_name_iterator (iterator_t*, const get_data_t*); const char* tag_name_iterator_name (iterator_t*); int init_resource_tag_iterator (iterator_t*, const char*, resource_t, int, const char*, int); const char* resource_tag_iterator_uuid (iterator_t*); const char* resource_tag_iterator_name (iterator_t*); const char* resource_tag_iterator_value (iterator_t*); const char* resource_tag_iterator_comment (iterator_t*); int resource_tag_count (const char*, resource_t, int); int tag_in_use (tag_t); int trash_tag_in_use (tag_t); int tag_writable (tag_t); int trash_tag_writable (tag_t); /* Resource aggregates */ int init_aggregate_iterator (iterator_t*, const char *, const get_data_t *, int, const char *, const char *, const char *, const char *); int aggregate_iterator_count (iterator_t*); double aggregate_iterator_min (iterator_t*); double aggregate_iterator_max (iterator_t*); double aggregate_iterator_mean (iterator_t*); double aggregate_iterator_sum (iterator_t*); const char* aggregate_iterator_value (iterator_t*); /* Feeds. */ /* For feed syncing */ #define NVT_FEED 1 #define SCAP_FEED 2 #define CERT_FEED 3 int openvas_sync_feed (const gchar *, const gchar *, int); int openvas_migrate_secinfo (const gchar*, int); int openvas_current_sync (const gchar *, gchar **, gchar **); gboolean openvas_sync_script_perform_selftest (const gchar *, gchar **); gboolean openvas_get_sync_script_identification (const gchar *, gchar **, int); gboolean openvas_get_sync_script_description (const gchar *, gchar **); gboolean openvas_get_sync_script_feed_version (const gchar *, gchar **); /* Wizards. */ int manage_run_wizard (const gchar *, int (*) (void*, gchar*, gchar**), void *, array_t *, int, const char*, gchar **, gchar **); /* Helpers. */ char * iso_time (time_t *); char * iso_time_tz (time_t *, const char *, const char **); gchar * xsl_transform (gchar *, gchar *, gchar **, gchar **); int valid_db_resource_type (const char*); char* type_columns (const char *, int); const char** type_filter_columns (const char *, int); char* type_trash_columns (const char *, int); gchar* type_opts_table (const char *, int, int); gchar* type_table (const char *, int); gboolean manage_migrate_needs_timezone (GSList *, const gchar *); /* Optimize. */ int manage_optimize (GSList *, const gchar *, const gchar *); #endif /* not OPENVAS_MANAGER_MANAGE_H */ openvas-manager-6.0.9/src/manage_ranges_iana_tcp_udp_2012.c000644 001751 001751 00000161172 12557600615 024574 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Manage library: Ranges for IANA TCP and UDP 2012. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2009,2010 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #include "manage.h" #include "sql.h" /** * @brief Insert a port range. */ #define RANGE(type, start, end) \ sql ("INSERT INTO port_ranges" \ " (uuid, port_list, type, start, \"end\", comment, exclude)" \ " VALUES" \ " (make_uuid (), %llu, %i," \ " '" G_STRINGIFY (start) "'," \ " '" G_STRINGIFY (end) "'," \ " '', 0)", \ list, \ type) /** * @brief Make port ranges for IANA TCP and UDP 2012. * * Caller must lock the db. * * @param[in] list Port list. */ void make_port_ranges_iana_tcp_udp_2012 (port_list_t list) { sql_begin_immediate (); RANGE (PORT_PROTOCOL_TCP, 1, 80); RANGE (PORT_PROTOCOL_TCP, 82, 113); RANGE (PORT_PROTOCOL_TCP, 115, 224); RANGE (PORT_PROTOCOL_TCP, 242, 248); RANGE (PORT_PROTOCOL_TCP, 256, 257); RANGE (PORT_PROTOCOL_TCP, 259, 269); RANGE (PORT_PROTOCOL_TCP, 280, 284); RANGE (PORT_PROTOCOL_TCP, 286, 287); RANGE (PORT_PROTOCOL_TCP, 308, 322); RANGE (PORT_PROTOCOL_TCP, 333, 333); RANGE (PORT_PROTOCOL_TCP, 344, 584); RANGE (PORT_PROTOCOL_TCP, 586, 658); RANGE (PORT_PROTOCOL_TCP, 660, 702); RANGE (PORT_PROTOCOL_TCP, 704, 707); RANGE (PORT_PROTOCOL_TCP, 709, 715); RANGE (PORT_PROTOCOL_TCP, 729, 731); RANGE (PORT_PROTOCOL_TCP, 741, 742); RANGE (PORT_PROTOCOL_TCP, 744, 744); RANGE (PORT_PROTOCOL_TCP, 747, 754); RANGE (PORT_PROTOCOL_TCP, 758, 765); RANGE (PORT_PROTOCOL_TCP, 767, 767); RANGE (PORT_PROTOCOL_TCP, 769, 777); RANGE (PORT_PROTOCOL_TCP, 780, 780); RANGE (PORT_PROTOCOL_TCP, 800, 801); RANGE (PORT_PROTOCOL_TCP, 810, 810); RANGE (PORT_PROTOCOL_TCP, 828, 833); RANGE (PORT_PROTOCOL_TCP, 847, 848); RANGE (PORT_PROTOCOL_TCP, 860, 862); RANGE (PORT_PROTOCOL_TCP, 873, 873); RANGE (PORT_PROTOCOL_TCP, 886, 888); RANGE (PORT_PROTOCOL_TCP, 900, 903); RANGE (PORT_PROTOCOL_TCP, 910, 913); RANGE (PORT_PROTOCOL_TCP, 989, 993); RANGE (PORT_PROTOCOL_TCP, 995, 1000); RANGE (PORT_PROTOCOL_TCP, 1010, 1010); RANGE (PORT_PROTOCOL_TCP, 1021, 1022); RANGE (PORT_PROTOCOL_TCP, 1025, 1027); RANGE (PORT_PROTOCOL_TCP, 1029, 1108); RANGE (PORT_PROTOCOL_TCP, 1110, 1490); RANGE (PORT_PROTOCOL_TCP, 1492, 1527); RANGE (PORT_PROTOCOL_TCP, 1529, 1782); RANGE (PORT_PROTOCOL_TCP, 1784, 2193); RANGE (PORT_PROTOCOL_TCP, 2197, 2258); RANGE (PORT_PROTOCOL_TCP, 2260, 2368); RANGE (PORT_PROTOCOL_TCP, 2370, 2374); RANGE (PORT_PROTOCOL_TCP, 2381, 2425); RANGE (PORT_PROTOCOL_TCP, 2427, 2681); RANGE (PORT_PROTOCOL_TCP, 2683, 2793); RANGE (PORT_PROTOCOL_TCP, 2795, 2824); RANGE (PORT_PROTOCOL_TCP, 2826, 2872); RANGE (PORT_PROTOCOL_TCP, 2874, 2924); RANGE (PORT_PROTOCOL_TCP, 2926, 3000); RANGE (PORT_PROTOCOL_TCP, 3002, 3091); RANGE (PORT_PROTOCOL_TCP, 3093, 3096); RANGE (PORT_PROTOCOL_TCP, 3098, 3120); RANGE (PORT_PROTOCOL_TCP, 3122, 3125); RANGE (PORT_PROTOCOL_TCP, 3127, 3299); RANGE (PORT_PROTOCOL_TCP, 3302, 3321); RANGE (PORT_PROTOCOL_TCP, 3326, 3366); RANGE (PORT_PROTOCOL_TCP, 3372, 3402); RANGE (PORT_PROTOCOL_TCP, 3405, 3545); RANGE (PORT_PROTOCOL_TCP, 3547, 3692); RANGE (PORT_PROTOCOL_TCP, 3695, 3765); RANGE (PORT_PROTOCOL_TCP, 3767, 3993); RANGE (PORT_PROTOCOL_TCP, 3995, 4047); RANGE (PORT_PROTOCOL_TCP, 4049, 4076); RANGE (PORT_PROTOCOL_TCP, 4078, 4083); RANGE (PORT_PROTOCOL_TCP, 4085, 4085); RANGE (PORT_PROTOCOL_TCP, 4087, 4119); RANGE (PORT_PROTOCOL_TCP, 4121, 4143); RANGE (PORT_PROTOCOL_TCP, 4145, 4172); RANGE (PORT_PROTOCOL_TCP, 4174, 4190); RANGE (PORT_PROTOCOL_TCP, 4192, 4193); RANGE (PORT_PROTOCOL_TCP, 4199, 4199); RANGE (PORT_PROTOCOL_TCP, 4300, 4313); RANGE (PORT_PROTOCOL_TCP, 4320, 4329); RANGE (PORT_PROTOCOL_TCP, 4340, 4360); RANGE (PORT_PROTOCOL_TCP, 4368, 4379); RANGE (PORT_PROTOCOL_TCP, 4389, 4393); RANGE (PORT_PROTOCOL_TCP, 4395, 4396); RANGE (PORT_PROTOCOL_TCP, 4400, 4410); RANGE (PORT_PROTOCOL_TCP, 4425, 4431); RANGE (PORT_PROTOCOL_TCP, 4433, 4433); RANGE (PORT_PROTOCOL_TCP, 4442, 4458); RANGE (PORT_PROTOCOL_TCP, 4484, 4488); RANGE (PORT_PROTOCOL_TCP, 4500, 4500); RANGE (PORT_PROTOCOL_TCP, 4535, 4538); RANGE (PORT_PROTOCOL_TCP, 4545, 4556); RANGE (PORT_PROTOCOL_TCP, 4559, 4559); RANGE (PORT_PROTOCOL_TCP, 4566, 4569); RANGE (PORT_PROTOCOL_TCP, 4590, 4591); RANGE (PORT_PROTOCOL_TCP, 4593, 4603); RANGE (PORT_PROTOCOL_TCP, 4658, 4692); RANGE (PORT_PROTOCOL_TCP, 4700, 4704); RANGE (PORT_PROTOCOL_TCP, 4725, 4725); RANGE (PORT_PROTOCOL_TCP, 4727, 4728); RANGE (PORT_PROTOCOL_TCP, 4730, 4731); RANGE (PORT_PROTOCOL_TCP, 4733, 4733); RANGE (PORT_PROTOCOL_TCP, 4737, 4745); RANGE (PORT_PROTOCOL_TCP, 4749, 4752); RANGE (PORT_PROTOCOL_TCP, 4784, 4784); RANGE (PORT_PROTOCOL_TCP, 4786, 4788); RANGE (PORT_PROTOCOL_TCP, 4800, 4803); RANGE (PORT_PROTOCOL_TCP, 4827, 4827); RANGE (PORT_PROTOCOL_TCP, 4837, 4851); RANGE (PORT_PROTOCOL_TCP, 4867, 4871); RANGE (PORT_PROTOCOL_TCP, 4876, 4877); RANGE (PORT_PROTOCOL_TCP, 4879, 4880); RANGE (PORT_PROTOCOL_TCP, 4883, 4885); RANGE (PORT_PROTOCOL_TCP, 4894, 4894); RANGE (PORT_PROTOCOL_TCP, 4899, 4902); RANGE (PORT_PROTOCOL_TCP, 4912, 4915); RANGE (PORT_PROTOCOL_TCP, 4940, 4942); RANGE (PORT_PROTOCOL_TCP, 4949, 4953); RANGE (PORT_PROTOCOL_TCP, 4969, 4970); RANGE (PORT_PROTOCOL_TCP, 4984, 4991); RANGE (PORT_PROTOCOL_TCP, 4999, 5013); RANGE (PORT_PROTOCOL_TCP, 5015, 5015); RANGE (PORT_PROTOCOL_TCP, 5020, 5030); RANGE (PORT_PROTOCOL_TCP, 5032, 5032); RANGE (PORT_PROTOCOL_TCP, 5042, 5045); RANGE (PORT_PROTOCOL_TCP, 5048, 5057); RANGE (PORT_PROTOCOL_TCP, 5059, 5074); RANGE (PORT_PROTOCOL_TCP, 5080, 5086); RANGE (PORT_PROTOCOL_TCP, 5093, 5094); RANGE (PORT_PROTOCOL_TCP, 5099, 5103); RANGE (PORT_PROTOCOL_TCP, 5111, 5112); RANGE (PORT_PROTOCOL_TCP, 5114, 5115); RANGE (PORT_PROTOCOL_TCP, 5117, 5117); RANGE (PORT_PROTOCOL_TCP, 5133, 5135); RANGE (PORT_PROTOCOL_TCP, 5137, 5137); RANGE (PORT_PROTOCOL_TCP, 5145, 5146); RANGE (PORT_PROTOCOL_TCP, 5150, 5157); RANGE (PORT_PROTOCOL_TCP, 5161, 5168); RANGE (PORT_PROTOCOL_TCP, 5190, 5194); RANGE (PORT_PROTOCOL_TCP, 5200, 5203); RANGE (PORT_PROTOCOL_TCP, 5221, 5228); RANGE (PORT_PROTOCOL_TCP, 5232, 5237); RANGE (PORT_PROTOCOL_TCP, 5245, 5245); RANGE (PORT_PROTOCOL_TCP, 5248, 5253); RANGE (PORT_PROTOCOL_TCP, 5264, 5265); RANGE (PORT_PROTOCOL_TCP, 5269, 5272); RANGE (PORT_PROTOCOL_TCP, 5280, 5282); RANGE (PORT_PROTOCOL_TCP, 5298, 5310); RANGE (PORT_PROTOCOL_TCP, 5312, 5318); RANGE (PORT_PROTOCOL_TCP, 5320, 5321); RANGE (PORT_PROTOCOL_TCP, 5343, 5344); RANGE (PORT_PROTOCOL_TCP, 5349, 5363); RANGE (PORT_PROTOCOL_TCP, 5397, 5435); RANGE (PORT_PROTOCOL_TCP, 5443, 5443); RANGE (PORT_PROTOCOL_TCP, 5453, 5456); RANGE (PORT_PROTOCOL_TCP, 5461, 5465); RANGE (PORT_PROTOCOL_TCP, 5500, 5506); RANGE (PORT_PROTOCOL_TCP, 5553, 5557); RANGE (PORT_PROTOCOL_TCP, 5566, 5568); RANGE (PORT_PROTOCOL_TCP, 5573, 5575); RANGE (PORT_PROTOCOL_TCP, 5579, 5585); RANGE (PORT_PROTOCOL_TCP, 5597, 5605); RANGE (PORT_PROTOCOL_TCP, 5627, 5638); RANGE (PORT_PROTOCOL_TCP, 5646, 5646); RANGE (PORT_PROTOCOL_TCP, 5671, 5681); RANGE (PORT_PROTOCOL_TCP, 5688, 5689); RANGE (PORT_PROTOCOL_TCP, 5693, 5693); RANGE (PORT_PROTOCOL_TCP, 5696, 5696); RANGE (PORT_PROTOCOL_TCP, 5713, 5730); RANGE (PORT_PROTOCOL_TCP, 5741, 5748); RANGE (PORT_PROTOCOL_TCP, 5750, 5750); RANGE (PORT_PROTOCOL_TCP, 5755, 5755); RANGE (PORT_PROTOCOL_TCP, 5757, 5757); RANGE (PORT_PROTOCOL_TCP, 5766, 5771); RANGE (PORT_PROTOCOL_TCP, 5777, 5777); RANGE (PORT_PROTOCOL_TCP, 5780, 5783); RANGE (PORT_PROTOCOL_TCP, 5785, 5785); RANGE (PORT_PROTOCOL_TCP, 5793, 5793); RANGE (PORT_PROTOCOL_TCP, 5813, 5814); RANGE (PORT_PROTOCOL_TCP, 5842, 5842); RANGE (PORT_PROTOCOL_TCP, 5859, 5859); RANGE (PORT_PROTOCOL_TCP, 5863, 5863); RANGE (PORT_PROTOCOL_TCP, 5883, 5883); RANGE (PORT_PROTOCOL_TCP, 5900, 5900); RANGE (PORT_PROTOCOL_TCP, 5910, 5913); RANGE (PORT_PROTOCOL_TCP, 5963, 5963); RANGE (PORT_PROTOCOL_TCP, 5968, 5969); RANGE (PORT_PROTOCOL_TCP, 5984, 5992); RANGE (PORT_PROTOCOL_TCP, 5999, 6066); RANGE (PORT_PROTOCOL_TCP, 6068, 6076); RANGE (PORT_PROTOCOL_TCP, 6084, 6087); RANGE (PORT_PROTOCOL_TCP, 6099, 6117); RANGE (PORT_PROTOCOL_TCP, 6121, 6124); RANGE (PORT_PROTOCOL_TCP, 6133, 6133); RANGE (PORT_PROTOCOL_TCP, 6140, 6149); RANGE (PORT_PROTOCOL_TCP, 6159, 6163); RANGE (PORT_PROTOCOL_TCP, 6200, 6200); RANGE (PORT_PROTOCOL_TCP, 6222, 6222); RANGE (PORT_PROTOCOL_TCP, 6241, 6244); RANGE (PORT_PROTOCOL_TCP, 6251, 6253); RANGE (PORT_PROTOCOL_TCP, 6267, 6269); RANGE (PORT_PROTOCOL_TCP, 6300, 6301); RANGE (PORT_PROTOCOL_TCP, 6306, 6306); RANGE (PORT_PROTOCOL_TCP, 6315, 6316); RANGE (PORT_PROTOCOL_TCP, 6320, 6322); RANGE (PORT_PROTOCOL_TCP, 6324, 6324); RANGE (PORT_PROTOCOL_TCP, 6343, 6343); RANGE (PORT_PROTOCOL_TCP, 6346, 6347); RANGE (PORT_PROTOCOL_TCP, 6350, 6350); RANGE (PORT_PROTOCOL_TCP, 6355, 6355); RANGE (PORT_PROTOCOL_TCP, 6360, 6360); RANGE (PORT_PROTOCOL_TCP, 6370, 6370); RANGE (PORT_PROTOCOL_TCP, 6382, 6382); RANGE (PORT_PROTOCOL_TCP, 6389, 6390); RANGE (PORT_PROTOCOL_TCP, 6417, 6421); RANGE (PORT_PROTOCOL_TCP, 6432, 6432); RANGE (PORT_PROTOCOL_TCP, 6443, 6446); RANGE (PORT_PROTOCOL_TCP, 6455, 6455); RANGE (PORT_PROTOCOL_TCP, 6471, 6471); RANGE (PORT_PROTOCOL_TCP, 6480, 6489); RANGE (PORT_PROTOCOL_TCP, 6500, 6503); RANGE (PORT_PROTOCOL_TCP, 6505, 6510); RANGE (PORT_PROTOCOL_TCP, 6513, 6515); RANGE (PORT_PROTOCOL_TCP, 6543, 6544); RANGE (PORT_PROTOCOL_TCP, 6547, 6551); RANGE (PORT_PROTOCOL_TCP, 6558, 6558); RANGE (PORT_PROTOCOL_TCP, 6566, 6566); RANGE (PORT_PROTOCOL_TCP, 6568, 6568); RANGE (PORT_PROTOCOL_TCP, 6579, 6583); RANGE (PORT_PROTOCOL_TCP, 6600, 6602); RANGE (PORT_PROTOCOL_TCP, 6619, 6628); RANGE (PORT_PROTOCOL_TCP, 6632, 6632); RANGE (PORT_PROTOCOL_TCP, 6655, 6656); RANGE (PORT_PROTOCOL_TCP, 6665, 6673); RANGE (PORT_PROTOCOL_TCP, 6678, 6679); RANGE (PORT_PROTOCOL_TCP, 6687, 6689); RANGE (PORT_PROTOCOL_TCP, 6701, 6703); RANGE (PORT_PROTOCOL_TCP, 6714, 6715); RANGE (PORT_PROTOCOL_TCP, 6767, 6771); RANGE (PORT_PROTOCOL_TCP, 6785, 6791); RANGE (PORT_PROTOCOL_TCP, 6801, 6801); RANGE (PORT_PROTOCOL_TCP, 6817, 6817); RANGE (PORT_PROTOCOL_TCP, 6831, 6831); RANGE (PORT_PROTOCOL_TCP, 6841, 6842); RANGE (PORT_PROTOCOL_TCP, 6850, 6850); RANGE (PORT_PROTOCOL_TCP, 6868, 6868); RANGE (PORT_PROTOCOL_TCP, 6888, 6888); RANGE (PORT_PROTOCOL_TCP, 6901, 6901); RANGE (PORT_PROTOCOL_TCP, 6935, 6936); RANGE (PORT_PROTOCOL_TCP, 6946, 6946); RANGE (PORT_PROTOCOL_TCP, 6951, 6951); RANGE (PORT_PROTOCOL_TCP, 6961, 6966); RANGE (PORT_PROTOCOL_TCP, 6969, 6969); RANGE (PORT_PROTOCOL_TCP, 6997, 7015); RANGE (PORT_PROTOCOL_TCP, 7018, 7025); RANGE (PORT_PROTOCOL_TCP, 7030, 7030); RANGE (PORT_PROTOCOL_TCP, 7070, 7071); RANGE (PORT_PROTOCOL_TCP, 7080, 7080); RANGE (PORT_PROTOCOL_TCP, 7099, 7101); RANGE (PORT_PROTOCOL_TCP, 7121, 7121); RANGE (PORT_PROTOCOL_TCP, 7128, 7129); RANGE (PORT_PROTOCOL_TCP, 7161, 7171); RANGE (PORT_PROTOCOL_TCP, 7173, 7174); RANGE (PORT_PROTOCOL_TCP, 7200, 7201); RANGE (PORT_PROTOCOL_TCP, 7227, 7229); RANGE (PORT_PROTOCOL_TCP, 7237, 7237); RANGE (PORT_PROTOCOL_TCP, 7262, 7262); RANGE (PORT_PROTOCOL_TCP, 7272, 7283); RANGE (PORT_PROTOCOL_TCP, 7365, 7365); RANGE (PORT_PROTOCOL_TCP, 7391, 7395); RANGE (PORT_PROTOCOL_TCP, 7397, 7397); RANGE (PORT_PROTOCOL_TCP, 7400, 7402); RANGE (PORT_PROTOCOL_TCP, 7410, 7410); RANGE (PORT_PROTOCOL_TCP, 7421, 7421); RANGE (PORT_PROTOCOL_TCP, 7426, 7431); RANGE (PORT_PROTOCOL_TCP, 7437, 7437); RANGE (PORT_PROTOCOL_TCP, 7443, 7443); RANGE (PORT_PROTOCOL_TCP, 7473, 7473); RANGE (PORT_PROTOCOL_TCP, 7491, 7491); RANGE (PORT_PROTOCOL_TCP, 7500, 7501); RANGE (PORT_PROTOCOL_TCP, 7508, 7511); RANGE (PORT_PROTOCOL_TCP, 7542, 7549); RANGE (PORT_PROTOCOL_TCP, 7560, 7560); RANGE (PORT_PROTOCOL_TCP, 7563, 7563); RANGE (PORT_PROTOCOL_TCP, 7566, 7566); RANGE (PORT_PROTOCOL_TCP, 7569, 7570); RANGE (PORT_PROTOCOL_TCP, 7588, 7588); RANGE (PORT_PROTOCOL_TCP, 7624, 7624); RANGE (PORT_PROTOCOL_TCP, 7626, 7631); RANGE (PORT_PROTOCOL_TCP, 7633, 7633); RANGE (PORT_PROTOCOL_TCP, 7648, 7648); RANGE (PORT_PROTOCOL_TCP, 7672, 7677); RANGE (PORT_PROTOCOL_TCP, 7680, 7680); RANGE (PORT_PROTOCOL_TCP, 7689, 7689); RANGE (PORT_PROTOCOL_TCP, 7697, 7697); RANGE (PORT_PROTOCOL_TCP, 7700, 7700); RANGE (PORT_PROTOCOL_TCP, 7707, 7708); RANGE (PORT_PROTOCOL_TCP, 7720, 7720); RANGE (PORT_PROTOCOL_TCP, 7724, 7727); RANGE (PORT_PROTOCOL_TCP, 7734, 7734); RANGE (PORT_PROTOCOL_TCP, 7738, 7738); RANGE (PORT_PROTOCOL_TCP, 7741, 7744); RANGE (PORT_PROTOCOL_TCP, 7747, 7747); RANGE (PORT_PROTOCOL_TCP, 7777, 7779); RANGE (PORT_PROTOCOL_TCP, 7781, 7781); RANGE (PORT_PROTOCOL_TCP, 7786, 7787); RANGE (PORT_PROTOCOL_TCP, 7789, 7789); RANGE (PORT_PROTOCOL_TCP, 7794, 7794); RANGE (PORT_PROTOCOL_TCP, 7797, 7801); RANGE (PORT_PROTOCOL_TCP, 7810, 7810); RANGE (PORT_PROTOCOL_TCP, 7845, 7846); RANGE (PORT_PROTOCOL_TCP, 7869, 7871); RANGE (PORT_PROTOCOL_TCP, 7880, 7880); RANGE (PORT_PROTOCOL_TCP, 7887, 7887); RANGE (PORT_PROTOCOL_TCP, 7900, 7903); RANGE (PORT_PROTOCOL_TCP, 7913, 7913); RANGE (PORT_PROTOCOL_TCP, 7932, 7933); RANGE (PORT_PROTOCOL_TCP, 7967, 7967); RANGE (PORT_PROTOCOL_TCP, 7979, 7982); RANGE (PORT_PROTOCOL_TCP, 7997, 7997); RANGE (PORT_PROTOCOL_TCP, 7999, 8003); RANGE (PORT_PROTOCOL_TCP, 8005, 8005); RANGE (PORT_PROTOCOL_TCP, 8008, 8008); RANGE (PORT_PROTOCOL_TCP, 8019, 8022); RANGE (PORT_PROTOCOL_TCP, 8025, 8026); RANGE (PORT_PROTOCOL_TCP, 8032, 8034); RANGE (PORT_PROTOCOL_TCP, 8040, 8040); RANGE (PORT_PROTOCOL_TCP, 8042, 8044); RANGE (PORT_PROTOCOL_TCP, 8051, 8059); RANGE (PORT_PROTOCOL_TCP, 8074, 8074); RANGE (PORT_PROTOCOL_TCP, 8080, 8083); RANGE (PORT_PROTOCOL_TCP, 8086, 8088); RANGE (PORT_PROTOCOL_TCP, 8091, 8091); RANGE (PORT_PROTOCOL_TCP, 8097, 8097); RANGE (PORT_PROTOCOL_TCP, 8100, 8101); RANGE (PORT_PROTOCOL_TCP, 8115, 8116); RANGE (PORT_PROTOCOL_TCP, 8118, 8118); RANGE (PORT_PROTOCOL_TCP, 8121, 8122); RANGE (PORT_PROTOCOL_TCP, 8128, 8132); RANGE (PORT_PROTOCOL_TCP, 8148, 8148); RANGE (PORT_PROTOCOL_TCP, 8160, 8161); RANGE (PORT_PROTOCOL_TCP, 8181, 8184); RANGE (PORT_PROTOCOL_TCP, 8192, 8192); RANGE (PORT_PROTOCOL_TCP, 8194, 8195); RANGE (PORT_PROTOCOL_TCP, 8199, 8201); RANGE (PORT_PROTOCOL_TCP, 8204, 8208); RANGE (PORT_PROTOCOL_TCP, 8230, 8230); RANGE (PORT_PROTOCOL_TCP, 8243, 8243); RANGE (PORT_PROTOCOL_TCP, 8276, 8276); RANGE (PORT_PROTOCOL_TCP, 8280, 8280); RANGE (PORT_PROTOCOL_TCP, 8292, 8294); RANGE (PORT_PROTOCOL_TCP, 8300, 8301); RANGE (PORT_PROTOCOL_TCP, 8320, 8321); RANGE (PORT_PROTOCOL_TCP, 8351, 8351); RANGE (PORT_PROTOCOL_TCP, 8376, 8380); RANGE (PORT_PROTOCOL_TCP, 8383, 8383); RANGE (PORT_PROTOCOL_TCP, 8400, 8405); RANGE (PORT_PROTOCOL_TCP, 8416, 8417); RANGE (PORT_PROTOCOL_TCP, 8442, 8444); RANGE (PORT_PROTOCOL_TCP, 8450, 8450); RANGE (PORT_PROTOCOL_TCP, 8470, 8474); RANGE (PORT_PROTOCOL_TCP, 8500, 8501); RANGE (PORT_PROTOCOL_TCP, 8554, 8555); RANGE (PORT_PROTOCOL_TCP, 8567, 8567); RANGE (PORT_PROTOCOL_TCP, 8600, 8600); RANGE (PORT_PROTOCOL_TCP, 8610, 8615); RANGE (PORT_PROTOCOL_TCP, 8686, 8686); RANGE (PORT_PROTOCOL_TCP, 8699, 8699); RANGE (PORT_PROTOCOL_TCP, 8733, 8733); RANGE (PORT_PROTOCOL_TCP, 8763, 8765); RANGE (PORT_PROTOCOL_TCP, 8770, 8770); RANGE (PORT_PROTOCOL_TCP, 8786, 8787); RANGE (PORT_PROTOCOL_TCP, 8793, 8793); RANGE (PORT_PROTOCOL_TCP, 8800, 8800); RANGE (PORT_PROTOCOL_TCP, 8804, 8804); RANGE (PORT_PROTOCOL_TCP, 8873, 8873); RANGE (PORT_PROTOCOL_TCP, 8880, 8880); RANGE (PORT_PROTOCOL_TCP, 8883, 8883); RANGE (PORT_PROTOCOL_TCP, 8888, 8894); RANGE (PORT_PROTOCOL_TCP, 8899, 8901); RANGE (PORT_PROTOCOL_TCP, 8910, 8913); RANGE (PORT_PROTOCOL_TCP, 8937, 8937); RANGE (PORT_PROTOCOL_TCP, 8953, 8954); RANGE (PORT_PROTOCOL_TCP, 8989, 8991); RANGE (PORT_PROTOCOL_TCP, 8999, 9002); RANGE (PORT_PROTOCOL_TCP, 9008, 9010); RANGE (PORT_PROTOCOL_TCP, 9020, 9026); RANGE (PORT_PROTOCOL_TCP, 9050, 9051); RANGE (PORT_PROTOCOL_TCP, 9080, 9080); RANGE (PORT_PROTOCOL_TCP, 9083, 9092); RANGE (PORT_PROTOCOL_TCP, 9100, 9107); RANGE (PORT_PROTOCOL_TCP, 9119, 9119); RANGE (PORT_PROTOCOL_TCP, 9131, 9131); RANGE (PORT_PROTOCOL_TCP, 9160, 9164); RANGE (PORT_PROTOCOL_TCP, 9191, 9191); RANGE (PORT_PROTOCOL_TCP, 9200, 9217); RANGE (PORT_PROTOCOL_TCP, 9222, 9222); RANGE (PORT_PROTOCOL_TCP, 9255, 9255); RANGE (PORT_PROTOCOL_TCP, 9278, 9285); RANGE (PORT_PROTOCOL_TCP, 9287, 9287); RANGE (PORT_PROTOCOL_TCP, 9292, 9295); RANGE (PORT_PROTOCOL_TCP, 9300, 9300); RANGE (PORT_PROTOCOL_TCP, 9306, 9306); RANGE (PORT_PROTOCOL_TCP, 9312, 9312); RANGE (PORT_PROTOCOL_TCP, 9318, 9318); RANGE (PORT_PROTOCOL_TCP, 9321, 9321); RANGE (PORT_PROTOCOL_TCP, 9343, 9344); RANGE (PORT_PROTOCOL_TCP, 9346, 9346); RANGE (PORT_PROTOCOL_TCP, 9374, 9374); RANGE (PORT_PROTOCOL_TCP, 9380, 9380); RANGE (PORT_PROTOCOL_TCP, 9387, 9390); RANGE (PORT_PROTOCOL_TCP, 9396, 9397); RANGE (PORT_PROTOCOL_TCP, 9400, 9402); RANGE (PORT_PROTOCOL_TCP, 9418, 9418); RANGE (PORT_PROTOCOL_TCP, 9443, 9445); RANGE (PORT_PROTOCOL_TCP, 9450, 9450); RANGE (PORT_PROTOCOL_TCP, 9500, 9500); RANGE (PORT_PROTOCOL_TCP, 9535, 9536); RANGE (PORT_PROTOCOL_TCP, 9555, 9555); RANGE (PORT_PROTOCOL_TCP, 9592, 9600); RANGE (PORT_PROTOCOL_TCP, 9612, 9612); RANGE (PORT_PROTOCOL_TCP, 9614, 9614); RANGE (PORT_PROTOCOL_TCP, 9616, 9618); RANGE (PORT_PROTOCOL_TCP, 9628, 9631); RANGE (PORT_PROTOCOL_TCP, 9640, 9640); RANGE (PORT_PROTOCOL_TCP, 9667, 9668); RANGE (PORT_PROTOCOL_TCP, 9694, 9695); RANGE (PORT_PROTOCOL_TCP, 9700, 9700); RANGE (PORT_PROTOCOL_TCP, 9747, 9747); RANGE (PORT_PROTOCOL_TCP, 9750, 9750); RANGE (PORT_PROTOCOL_TCP, 9753, 9753); RANGE (PORT_PROTOCOL_TCP, 9762, 9762); RANGE (PORT_PROTOCOL_TCP, 9800, 9802); RANGE (PORT_PROTOCOL_TCP, 9875, 9876); RANGE (PORT_PROTOCOL_TCP, 9888, 9889); RANGE (PORT_PROTOCOL_TCP, 9898, 9900); RANGE (PORT_PROTOCOL_TCP, 9909, 9909); RANGE (PORT_PROTOCOL_TCP, 9911, 9911); RANGE (PORT_PROTOCOL_TCP, 9950, 9954); RANGE (PORT_PROTOCOL_TCP, 9966, 9966); RANGE (PORT_PROTOCOL_TCP, 9987, 9988); RANGE (PORT_PROTOCOL_TCP, 9990, 10005); RANGE (PORT_PROTOCOL_TCP, 10007, 10010); RANGE (PORT_PROTOCOL_TCP, 10050, 10051); RANGE (PORT_PROTOCOL_TCP, 10055, 10055); RANGE (PORT_PROTOCOL_TCP, 10080, 10081); RANGE (PORT_PROTOCOL_TCP, 10100, 10104); RANGE (PORT_PROTOCOL_TCP, 10107, 10107); RANGE (PORT_PROTOCOL_TCP, 10110, 10110); RANGE (PORT_PROTOCOL_TCP, 10113, 10117); RANGE (PORT_PROTOCOL_TCP, 10128, 10129); RANGE (PORT_PROTOCOL_TCP, 10160, 10162); RANGE (PORT_PROTOCOL_TCP, 10200, 10201); RANGE (PORT_PROTOCOL_TCP, 10252, 10252); RANGE (PORT_PROTOCOL_TCP, 10260, 10260); RANGE (PORT_PROTOCOL_TCP, 10288, 10288); RANGE (PORT_PROTOCOL_TCP, 10321, 10321); RANGE (PORT_PROTOCOL_TCP, 10540, 10544); RANGE (PORT_PROTOCOL_TCP, 10631, 10631); RANGE (PORT_PROTOCOL_TCP, 10800, 10800); RANGE (PORT_PROTOCOL_TCP, 10805, 10805); RANGE (PORT_PROTOCOL_TCP, 10809, 10809); RANGE (PORT_PROTOCOL_TCP, 10860, 10860); RANGE (PORT_PROTOCOL_TCP, 10990, 10990); RANGE (PORT_PROTOCOL_TCP, 11000, 11001); RANGE (PORT_PROTOCOL_TCP, 11104, 11106); RANGE (PORT_PROTOCOL_TCP, 11111, 11112); RANGE (PORT_PROTOCOL_TCP, 11161, 11165); RANGE (PORT_PROTOCOL_TCP, 11172, 11172); RANGE (PORT_PROTOCOL_TCP, 11174, 11175); RANGE (PORT_PROTOCOL_TCP, 11201, 11201); RANGE (PORT_PROTOCOL_TCP, 11208, 11208); RANGE (PORT_PROTOCOL_TCP, 11211, 11211); RANGE (PORT_PROTOCOL_TCP, 11319, 11321); RANGE (PORT_PROTOCOL_TCP, 11367, 11367); RANGE (PORT_PROTOCOL_TCP, 11371, 11371); RANGE (PORT_PROTOCOL_TCP, 11489, 11489); RANGE (PORT_PROTOCOL_TCP, 11600, 11600); RANGE (PORT_PROTOCOL_TCP, 11720, 11720); RANGE (PORT_PROTOCOL_TCP, 11751, 11751); RANGE (PORT_PROTOCOL_TCP, 11876, 11876); RANGE (PORT_PROTOCOL_TCP, 11967, 11967); RANGE (PORT_PROTOCOL_TCP, 12000, 12008); RANGE (PORT_PROTOCOL_TCP, 12010, 12010); RANGE (PORT_PROTOCOL_TCP, 12012, 12013); RANGE (PORT_PROTOCOL_TCP, 12109, 12109); RANGE (PORT_PROTOCOL_TCP, 12121, 12121); RANGE (PORT_PROTOCOL_TCP, 12168, 12168); RANGE (PORT_PROTOCOL_TCP, 12172, 12172); RANGE (PORT_PROTOCOL_TCP, 12300, 12300); RANGE (PORT_PROTOCOL_TCP, 12321, 12322); RANGE (PORT_PROTOCOL_TCP, 12345, 12345); RANGE (PORT_PROTOCOL_TCP, 12753, 12753); RANGE (PORT_PROTOCOL_TCP, 13160, 13160); RANGE (PORT_PROTOCOL_TCP, 13216, 13218); RANGE (PORT_PROTOCOL_TCP, 13223, 13224); RANGE (PORT_PROTOCOL_TCP, 13400, 13400); RANGE (PORT_PROTOCOL_TCP, 13720, 13722); RANGE (PORT_PROTOCOL_TCP, 13724, 13724); RANGE (PORT_PROTOCOL_TCP, 13782, 13783); RANGE (PORT_PROTOCOL_TCP, 13785, 13786); RANGE (PORT_PROTOCOL_TCP, 13818, 13823); RANGE (PORT_PROTOCOL_TCP, 13929, 13930); RANGE (PORT_PROTOCOL_TCP, 14000, 14001); RANGE (PORT_PROTOCOL_TCP, 14033, 14034); RANGE (PORT_PROTOCOL_TCP, 14141, 14142); RANGE (PORT_PROTOCOL_TCP, 14145, 14145); RANGE (PORT_PROTOCOL_TCP, 14149, 14150); RANGE (PORT_PROTOCOL_TCP, 14154, 14154); RANGE (PORT_PROTOCOL_TCP, 14250, 14250); RANGE (PORT_PROTOCOL_TCP, 14414, 14414); RANGE (PORT_PROTOCOL_TCP, 14936, 14937); RANGE (PORT_PROTOCOL_TCP, 15000, 15000); RANGE (PORT_PROTOCOL_TCP, 15345, 15345); RANGE (PORT_PROTOCOL_TCP, 15363, 15363); RANGE (PORT_PROTOCOL_TCP, 15555, 15555); RANGE (PORT_PROTOCOL_TCP, 15660, 15660); RANGE (PORT_PROTOCOL_TCP, 15740, 15740); RANGE (PORT_PROTOCOL_TCP, 15999, 16002); RANGE (PORT_PROTOCOL_TCP, 16020, 16021); RANGE (PORT_PROTOCOL_TCP, 16161, 16162); RANGE (PORT_PROTOCOL_TCP, 16309, 16311); RANGE (PORT_PROTOCOL_TCP, 16360, 16361); RANGE (PORT_PROTOCOL_TCP, 16367, 16368); RANGE (PORT_PROTOCOL_TCP, 16384, 16384); RANGE (PORT_PROTOCOL_TCP, 16619, 16619); RANGE (PORT_PROTOCOL_TCP, 16900, 16900); RANGE (PORT_PROTOCOL_TCP, 16950, 16950); RANGE (PORT_PROTOCOL_TCP, 16991, 16995); RANGE (PORT_PROTOCOL_TCP, 17007, 17007); RANGE (PORT_PROTOCOL_TCP, 17185, 17185); RANGE (PORT_PROTOCOL_TCP, 17219, 17219); RANGE (PORT_PROTOCOL_TCP, 17221, 17221); RANGE (PORT_PROTOCOL_TCP, 17234, 17235); RANGE (PORT_PROTOCOL_TCP, 17500, 17500); RANGE (PORT_PROTOCOL_TCP, 17729, 17729); RANGE (PORT_PROTOCOL_TCP, 17754, 17756); RANGE (PORT_PROTOCOL_TCP, 17777, 17777); RANGE (PORT_PROTOCOL_TCP, 18000, 18000); RANGE (PORT_PROTOCOL_TCP, 18104, 18104); RANGE (PORT_PROTOCOL_TCP, 18136, 18136); RANGE (PORT_PROTOCOL_TCP, 18181, 18187); RANGE (PORT_PROTOCOL_TCP, 18241, 18241); RANGE (PORT_PROTOCOL_TCP, 18262, 18262); RANGE (PORT_PROTOCOL_TCP, 18463, 18463); RANGE (PORT_PROTOCOL_TCP, 18634, 18635); RANGE (PORT_PROTOCOL_TCP, 18769, 18769); RANGE (PORT_PROTOCOL_TCP, 18881, 18881); RANGE (PORT_PROTOCOL_TCP, 18888, 18888); RANGE (PORT_PROTOCOL_TCP, 19000, 19000); RANGE (PORT_PROTOCOL_TCP, 19020, 19020); RANGE (PORT_PROTOCOL_TCP, 19191, 19191); RANGE (PORT_PROTOCOL_TCP, 19194, 19194); RANGE (PORT_PROTOCOL_TCP, 19283, 19283); RANGE (PORT_PROTOCOL_TCP, 19315, 19315); RANGE (PORT_PROTOCOL_TCP, 19398, 19398); RANGE (PORT_PROTOCOL_TCP, 19410, 19412); RANGE (PORT_PROTOCOL_TCP, 19539, 19541); RANGE (PORT_PROTOCOL_TCP, 19998, 20003); RANGE (PORT_PROTOCOL_TCP, 20005, 20005); RANGE (PORT_PROTOCOL_TCP, 20013, 20014); RANGE (PORT_PROTOCOL_TCP, 20034, 20034); RANGE (PORT_PROTOCOL_TCP, 20046, 20046); RANGE (PORT_PROTOCOL_TCP, 20048, 20049); RANGE (PORT_PROTOCOL_TCP, 20167, 20167); RANGE (PORT_PROTOCOL_TCP, 20202, 20202); RANGE (PORT_PROTOCOL_TCP, 20222, 20222); RANGE (PORT_PROTOCOL_TCP, 20480, 20480); RANGE (PORT_PROTOCOL_TCP, 20670, 20670); RANGE (PORT_PROTOCOL_TCP, 20999, 21000); RANGE (PORT_PROTOCOL_TCP, 21553, 21554); RANGE (PORT_PROTOCOL_TCP, 21590, 21590); RANGE (PORT_PROTOCOL_TCP, 21800, 21800); RANGE (PORT_PROTOCOL_TCP, 21845, 21849); RANGE (PORT_PROTOCOL_TCP, 22000, 22005); RANGE (PORT_PROTOCOL_TCP, 22125, 22125); RANGE (PORT_PROTOCOL_TCP, 22128, 22128); RANGE (PORT_PROTOCOL_TCP, 22273, 22273); RANGE (PORT_PROTOCOL_TCP, 22305, 22305); RANGE (PORT_PROTOCOL_TCP, 22343, 22343); RANGE (PORT_PROTOCOL_TCP, 22347, 22347); RANGE (PORT_PROTOCOL_TCP, 22350, 22350); RANGE (PORT_PROTOCOL_TCP, 22537, 22537); RANGE (PORT_PROTOCOL_TCP, 22555, 22555); RANGE (PORT_PROTOCOL_TCP, 22763, 22763); RANGE (PORT_PROTOCOL_TCP, 22800, 22800); RANGE (PORT_PROTOCOL_TCP, 22951, 22951); RANGE (PORT_PROTOCOL_TCP, 23000, 23005); RANGE (PORT_PROTOCOL_TCP, 23053, 23053); RANGE (PORT_PROTOCOL_TCP, 23333, 23333); RANGE (PORT_PROTOCOL_TCP, 23400, 23402); RANGE (PORT_PROTOCOL_TCP, 23456, 23457); RANGE (PORT_PROTOCOL_TCP, 24000, 24006); RANGE (PORT_PROTOCOL_TCP, 24242, 24242); RANGE (PORT_PROTOCOL_TCP, 24249, 24249); RANGE (PORT_PROTOCOL_TCP, 24321, 24321); RANGE (PORT_PROTOCOL_TCP, 24386, 24386); RANGE (PORT_PROTOCOL_TCP, 24465, 24465); RANGE (PORT_PROTOCOL_TCP, 24554, 24554); RANGE (PORT_PROTOCOL_TCP, 24676, 24678); RANGE (PORT_PROTOCOL_TCP, 24680, 24680); RANGE (PORT_PROTOCOL_TCP, 24754, 24754); RANGE (PORT_PROTOCOL_TCP, 24922, 24922); RANGE (PORT_PROTOCOL_TCP, 25000, 25009); RANGE (PORT_PROTOCOL_TCP, 25576, 25576); RANGE (PORT_PROTOCOL_TCP, 25604, 25604); RANGE (PORT_PROTOCOL_TCP, 25793, 25793); RANGE (PORT_PROTOCOL_TCP, 25900, 25903); RANGE (PORT_PROTOCOL_TCP, 26000, 26000); RANGE (PORT_PROTOCOL_TCP, 26133, 26133); RANGE (PORT_PROTOCOL_TCP, 26208, 26208); RANGE (PORT_PROTOCOL_TCP, 26260, 26263); RANGE (PORT_PROTOCOL_TCP, 26486, 26487); RANGE (PORT_PROTOCOL_TCP, 26489, 26489); RANGE (PORT_PROTOCOL_TCP, 27345, 27345); RANGE (PORT_PROTOCOL_TCP, 27442, 27442); RANGE (PORT_PROTOCOL_TCP, 27504, 27504); RANGE (PORT_PROTOCOL_TCP, 27782, 27782); RANGE (PORT_PROTOCOL_TCP, 27999, 28001); RANGE (PORT_PROTOCOL_TCP, 28240, 28240); RANGE (PORT_PROTOCOL_TCP, 29167, 29167); RANGE (PORT_PROTOCOL_TCP, 30001, 30002); RANGE (PORT_PROTOCOL_TCP, 30260, 30260); RANGE (PORT_PROTOCOL_TCP, 30999, 30999); RANGE (PORT_PROTOCOL_TCP, 31020, 31020); RANGE (PORT_PROTOCOL_TCP, 31416, 31416); RANGE (PORT_PROTOCOL_TCP, 31457, 31457); RANGE (PORT_PROTOCOL_TCP, 31620, 31620); RANGE (PORT_PROTOCOL_TCP, 31685, 31685); RANGE (PORT_PROTOCOL_TCP, 31765, 31765); RANGE (PORT_PROTOCOL_TCP, 31948, 31949); RANGE (PORT_PROTOCOL_TCP, 32034, 32034); RANGE (PORT_PROTOCOL_TCP, 32249, 32249); RANGE (PORT_PROTOCOL_TCP, 32483, 32483); RANGE (PORT_PROTOCOL_TCP, 32635, 32636); RANGE (PORT_PROTOCOL_TCP, 32767, 32777); RANGE (PORT_PROTOCOL_TCP, 32801, 32801); RANGE (PORT_PROTOCOL_TCP, 32811, 32811); RANGE (PORT_PROTOCOL_TCP, 32896, 32896); RANGE (PORT_PROTOCOL_TCP, 33123, 33123); RANGE (PORT_PROTOCOL_TCP, 33331, 33331); RANGE (PORT_PROTOCOL_TCP, 33333, 33334); RANGE (PORT_PROTOCOL_TCP, 33434, 33434); RANGE (PORT_PROTOCOL_TCP, 33656, 33656); RANGE (PORT_PROTOCOL_TCP, 34249, 34249); RANGE (PORT_PROTOCOL_TCP, 34378, 34379); RANGE (PORT_PROTOCOL_TCP, 34567, 34567); RANGE (PORT_PROTOCOL_TCP, 34962, 34964); RANGE (PORT_PROTOCOL_TCP, 34980, 34980); RANGE (PORT_PROTOCOL_TCP, 35354, 35357); RANGE (PORT_PROTOCOL_TCP, 36001, 36001); RANGE (PORT_PROTOCOL_TCP, 36524, 36524); RANGE (PORT_PROTOCOL_TCP, 36865, 36865); RANGE (PORT_PROTOCOL_TCP, 37475, 37475); RANGE (PORT_PROTOCOL_TCP, 37654, 37654); RANGE (PORT_PROTOCOL_TCP, 38201, 38203); RANGE (PORT_PROTOCOL_TCP, 39681, 39681); RANGE (PORT_PROTOCOL_TCP, 40000, 40000); RANGE (PORT_PROTOCOL_TCP, 40841, 40843); RANGE (PORT_PROTOCOL_TCP, 41111, 41111); RANGE (PORT_PROTOCOL_TCP, 41121, 41121); RANGE (PORT_PROTOCOL_TCP, 41794, 41795); RANGE (PORT_PROTOCOL_TCP, 42508, 42510); RANGE (PORT_PROTOCOL_TCP, 43188, 43191); RANGE (PORT_PROTOCOL_TCP, 43439, 43441); RANGE (PORT_PROTOCOL_TCP, 44321, 44322); RANGE (PORT_PROTOCOL_TCP, 44553, 44553); RANGE (PORT_PROTOCOL_TCP, 44818, 44818); RANGE (PORT_PROTOCOL_TCP, 45000, 45001); RANGE (PORT_PROTOCOL_TCP, 45054, 45054); RANGE (PORT_PROTOCOL_TCP, 45678, 45678); RANGE (PORT_PROTOCOL_TCP, 45825, 45825); RANGE (PORT_PROTOCOL_TCP, 45966, 45966); RANGE (PORT_PROTOCOL_TCP, 46999, 47001); RANGE (PORT_PROTOCOL_TCP, 47557, 47557); RANGE (PORT_PROTOCOL_TCP, 47624, 47624); RANGE (PORT_PROTOCOL_TCP, 47806, 47806); RANGE (PORT_PROTOCOL_TCP, 47808, 47808); RANGE (PORT_PROTOCOL_TCP, 48000, 48005); RANGE (PORT_PROTOCOL_TCP, 48049, 48049); RANGE (PORT_PROTOCOL_TCP, 48128, 48129); RANGE (PORT_PROTOCOL_TCP, 48556, 48556); RANGE (PORT_PROTOCOL_TCP, 48619, 48619); RANGE (PORT_PROTOCOL_UDP, 1, 80); RANGE (PORT_PROTOCOL_UDP, 82, 99); RANGE (PORT_PROTOCOL_UDP, 101, 113); RANGE (PORT_PROTOCOL_UDP, 115, 224); RANGE (PORT_PROTOCOL_UDP, 242, 248); RANGE (PORT_PROTOCOL_UDP, 256, 257); RANGE (PORT_PROTOCOL_UDP, 259, 270); RANGE (PORT_PROTOCOL_UDP, 280, 284); RANGE (PORT_PROTOCOL_UDP, 286, 287); RANGE (PORT_PROTOCOL_UDP, 308, 322); RANGE (PORT_PROTOCOL_UDP, 333, 333); RANGE (PORT_PROTOCOL_UDP, 344, 584); RANGE (PORT_PROTOCOL_UDP, 586, 658); RANGE (PORT_PROTOCOL_UDP, 660, 702); RANGE (PORT_PROTOCOL_UDP, 704, 707); RANGE (PORT_PROTOCOL_UDP, 709, 716); RANGE (PORT_PROTOCOL_UDP, 729, 731); RANGE (PORT_PROTOCOL_UDP, 741, 742); RANGE (PORT_PROTOCOL_UDP, 744, 744); RANGE (PORT_PROTOCOL_UDP, 747, 754); RANGE (PORT_PROTOCOL_UDP, 758, 765); RANGE (PORT_PROTOCOL_UDP, 767, 767); RANGE (PORT_PROTOCOL_UDP, 769, 777); RANGE (PORT_PROTOCOL_UDP, 780, 780); RANGE (PORT_PROTOCOL_UDP, 800, 801); RANGE (PORT_PROTOCOL_UDP, 810, 810); RANGE (PORT_PROTOCOL_UDP, 828, 833); RANGE (PORT_PROTOCOL_UDP, 847, 848); RANGE (PORT_PROTOCOL_UDP, 860, 862); RANGE (PORT_PROTOCOL_UDP, 873, 873); RANGE (PORT_PROTOCOL_UDP, 886, 888); RANGE (PORT_PROTOCOL_UDP, 900, 903); RANGE (PORT_PROTOCOL_UDP, 910, 913); RANGE (PORT_PROTOCOL_UDP, 989, 993); RANGE (PORT_PROTOCOL_UDP, 995, 1000); RANGE (PORT_PROTOCOL_UDP, 1008, 1008); RANGE (PORT_PROTOCOL_UDP, 1010, 1010); RANGE (PORT_PROTOCOL_UDP, 1021, 1022); RANGE (PORT_PROTOCOL_UDP, 1025, 1026); RANGE (PORT_PROTOCOL_UDP, 1029, 1108); RANGE (PORT_PROTOCOL_UDP, 1110, 1490); RANGE (PORT_PROTOCOL_UDP, 1492, 1527); RANGE (PORT_PROTOCOL_UDP, 1529, 1643); RANGE (PORT_PROTOCOL_UDP, 1645, 1752); RANGE (PORT_PROTOCOL_UDP, 1754, 1774); RANGE (PORT_PROTOCOL_UDP, 1776, 1782); RANGE (PORT_PROTOCOL_UDP, 1784, 2187); RANGE (PORT_PROTOCOL_UDP, 2190, 2193); RANGE (PORT_PROTOCOL_UDP, 2197, 2224); RANGE (PORT_PROTOCOL_UDP, 2226, 2258); RANGE (PORT_PROTOCOL_UDP, 2260, 2368); RANGE (PORT_PROTOCOL_UDP, 2370, 2372); RANGE (PORT_PROTOCOL_UDP, 2381, 2425); RANGE (PORT_PROTOCOL_UDP, 2427, 2563); RANGE (PORT_PROTOCOL_UDP, 2565, 2681); RANGE (PORT_PROTOCOL_UDP, 2683, 2793); RANGE (PORT_PROTOCOL_UDP, 2795, 2824); RANGE (PORT_PROTOCOL_UDP, 2826, 2872); RANGE (PORT_PROTOCOL_UDP, 2874, 2924); RANGE (PORT_PROTOCOL_UDP, 2926, 3000); RANGE (PORT_PROTOCOL_UDP, 3002, 3091); RANGE (PORT_PROTOCOL_UDP, 3093, 3096); RANGE (PORT_PROTOCOL_UDP, 3098, 3120); RANGE (PORT_PROTOCOL_UDP, 3122, 3125); RANGE (PORT_PROTOCOL_UDP, 3127, 3299); RANGE (PORT_PROTOCOL_UDP, 3302, 3321); RANGE (PORT_PROTOCOL_UDP, 3326, 3366); RANGE (PORT_PROTOCOL_UDP, 3372, 3402); RANGE (PORT_PROTOCOL_UDP, 3405, 3453); RANGE (PORT_PROTOCOL_UDP, 3455, 3545); RANGE (PORT_PROTOCOL_UDP, 3547, 3564); RANGE (PORT_PROTOCOL_UDP, 3567, 3692); RANGE (PORT_PROTOCOL_UDP, 3695, 3736); RANGE (PORT_PROTOCOL_UDP, 3738, 3765); RANGE (PORT_PROTOCOL_UDP, 3767, 3863); RANGE (PORT_PROTOCOL_UDP, 3865, 3867); RANGE (PORT_PROTOCOL_UDP, 3869, 3993); RANGE (PORT_PROTOCOL_UDP, 3995, 4047); RANGE (PORT_PROTOCOL_UDP, 4049, 4077); RANGE (PORT_PROTOCOL_UDP, 4079, 4084); RANGE (PORT_PROTOCOL_UDP, 4086, 4086); RANGE (PORT_PROTOCOL_UDP, 4089, 4119); RANGE (PORT_PROTOCOL_UDP, 4121, 4143); RANGE (PORT_PROTOCOL_UDP, 4145, 4169); RANGE (PORT_PROTOCOL_UDP, 4172, 4174); RANGE (PORT_PROTOCOL_UDP, 4177, 4185); RANGE (PORT_PROTOCOL_UDP, 4188, 4188); RANGE (PORT_PROTOCOL_UDP, 4191, 4192); RANGE (PORT_PROTOCOL_UDP, 4199, 4199); RANGE (PORT_PROTOCOL_UDP, 4300, 4310); RANGE (PORT_PROTOCOL_UDP, 4320, 4328); RANGE (PORT_PROTOCOL_UDP, 4340, 4359); RANGE (PORT_PROTOCOL_UDP, 4361, 4362); RANGE (PORT_PROTOCOL_UDP, 4368, 4373); RANGE (PORT_PROTOCOL_UDP, 4375, 4379); RANGE (PORT_PROTOCOL_UDP, 4389, 4390); RANGE (PORT_PROTOCOL_UDP, 4394, 4395); RANGE (PORT_PROTOCOL_UDP, 4400, 4406); RANGE (PORT_PROTOCOL_UDP, 4425, 4426); RANGE (PORT_PROTOCOL_UDP, 4430, 4430); RANGE (PORT_PROTOCOL_UDP, 4441, 4458); RANGE (PORT_PROTOCOL_UDP, 4484, 4484); RANGE (PORT_PROTOCOL_UDP, 4486, 4486); RANGE (PORT_PROTOCOL_UDP, 4488, 4488); RANGE (PORT_PROTOCOL_UDP, 4500, 4500); RANGE (PORT_PROTOCOL_UDP, 4535, 4538); RANGE (PORT_PROTOCOL_UDP, 4545, 4552); RANGE (PORT_PROTOCOL_UDP, 4554, 4559); RANGE (PORT_PROTOCOL_UDP, 4566, 4569); RANGE (PORT_PROTOCOL_UDP, 4591, 4601); RANGE (PORT_PROTOCOL_UDP, 4658, 4692); RANGE (PORT_PROTOCOL_UDP, 4700, 4702); RANGE (PORT_PROTOCOL_UDP, 4725, 4730); RANGE (PORT_PROTOCOL_UDP, 4732, 4732); RANGE (PORT_PROTOCOL_UDP, 4737, 4745); RANGE (PORT_PROTOCOL_UDP, 4749, 4752); RANGE (PORT_PROTOCOL_UDP, 4784, 4785); RANGE (PORT_PROTOCOL_UDP, 4800, 4804); RANGE (PORT_PROTOCOL_UDP, 4827, 4827); RANGE (PORT_PROTOCOL_UDP, 4837, 4851); RANGE (PORT_PROTOCOL_UDP, 4867, 4871); RANGE (PORT_PROTOCOL_UDP, 4876, 4878); RANGE (PORT_PROTOCOL_UDP, 4881, 4882); RANGE (PORT_PROTOCOL_UDP, 4884, 4885); RANGE (PORT_PROTOCOL_UDP, 4894, 4894); RANGE (PORT_PROTOCOL_UDP, 4899, 4900); RANGE (PORT_PROTOCOL_UDP, 4914, 4914); RANGE (PORT_PROTOCOL_UDP, 4937, 4937); RANGE (PORT_PROTOCOL_UDP, 4940, 4942); RANGE (PORT_PROTOCOL_UDP, 4949, 4952); RANGE (PORT_PROTOCOL_UDP, 4969, 4970); RANGE (PORT_PROTOCOL_UDP, 4986, 4991); RANGE (PORT_PROTOCOL_UDP, 4999, 5014); RANGE (PORT_PROTOCOL_UDP, 5020, 5027); RANGE (PORT_PROTOCOL_UDP, 5029, 5031); RANGE (PORT_PROTOCOL_UDP, 5042, 5044); RANGE (PORT_PROTOCOL_UDP, 5046, 5047); RANGE (PORT_PROTOCOL_UDP, 5049, 5052); RANGE (PORT_PROTOCOL_UDP, 5055, 5062); RANGE (PORT_PROTOCOL_UDP, 5064, 5067); RANGE (PORT_PROTOCOL_UDP, 5069, 5074); RANGE (PORT_PROTOCOL_UDP, 5079, 5085); RANGE (PORT_PROTOCOL_UDP, 5092, 5094); RANGE (PORT_PROTOCOL_UDP, 5099, 5102); RANGE (PORT_PROTOCOL_UDP, 5104, 5105); RANGE (PORT_PROTOCOL_UDP, 5111, 5112); RANGE (PORT_PROTOCOL_UDP, 5116, 5116); RANGE (PORT_PROTOCOL_UDP, 5133, 5133); RANGE (PORT_PROTOCOL_UDP, 5136, 5137); RANGE (PORT_PROTOCOL_UDP, 5145, 5145); RANGE (PORT_PROTOCOL_UDP, 5150, 5152); RANGE (PORT_PROTOCOL_UDP, 5154, 5155); RANGE (PORT_PROTOCOL_UDP, 5164, 5168); RANGE (PORT_PROTOCOL_UDP, 5190, 5193); RANGE (PORT_PROTOCOL_UDP, 5200, 5203); RANGE (PORT_PROTOCOL_UDP, 5223, 5227); RANGE (PORT_PROTOCOL_UDP, 5234, 5237); RANGE (PORT_PROTOCOL_UDP, 5245, 5252); RANGE (PORT_PROTOCOL_UDP, 5264, 5265); RANGE (PORT_PROTOCOL_UDP, 5270, 5272); RANGE (PORT_PROTOCOL_UDP, 5282, 5282); RANGE (PORT_PROTOCOL_UDP, 5298, 5310); RANGE (PORT_PROTOCOL_UDP, 5312, 5316); RANGE (PORT_PROTOCOL_UDP, 5343, 5344); RANGE (PORT_PROTOCOL_UDP, 5349, 5363); RANGE (PORT_PROTOCOL_UDP, 5397, 5437); RANGE (PORT_PROTOCOL_UDP, 5443, 5443); RANGE (PORT_PROTOCOL_UDP, 5453, 5456); RANGE (PORT_PROTOCOL_UDP, 5461, 5465); RANGE (PORT_PROTOCOL_UDP, 5500, 5506); RANGE (PORT_PROTOCOL_UDP, 5553, 5556); RANGE (PORT_PROTOCOL_UDP, 5567, 5568); RANGE (PORT_PROTOCOL_UDP, 5573, 5573); RANGE (PORT_PROTOCOL_UDP, 5580, 5585); RANGE (PORT_PROTOCOL_UDP, 5597, 5605); RANGE (PORT_PROTOCOL_UDP, 5627, 5634); RANGE (PORT_PROTOCOL_UDP, 5671, 5683); RANGE (PORT_PROTOCOL_UDP, 5688, 5689); RANGE (PORT_PROTOCOL_UDP, 5713, 5724); RANGE (PORT_PROTOCOL_UDP, 5728, 5730); RANGE (PORT_PROTOCOL_UDP, 5741, 5748); RANGE (PORT_PROTOCOL_UDP, 5750, 5750); RANGE (PORT_PROTOCOL_UDP, 5755, 5755); RANGE (PORT_PROTOCOL_UDP, 5757, 5757); RANGE (PORT_PROTOCOL_UDP, 5766, 5771); RANGE (PORT_PROTOCOL_UDP, 5777, 5777); RANGE (PORT_PROTOCOL_UDP, 5781, 5787); RANGE (PORT_PROTOCOL_UDP, 5793, 5794); RANGE (PORT_PROTOCOL_UDP, 5813, 5814); RANGE (PORT_PROTOCOL_UDP, 5859, 5859); RANGE (PORT_PROTOCOL_UDP, 5863, 5863); RANGE (PORT_PROTOCOL_UDP, 5900, 5900); RANGE (PORT_PROTOCOL_UDP, 5910, 5913); RANGE (PORT_PROTOCOL_UDP, 5963, 5963); RANGE (PORT_PROTOCOL_UDP, 5968, 5969); RANGE (PORT_PROTOCOL_UDP, 5984, 5992); RANGE (PORT_PROTOCOL_UDP, 5999, 6000); RANGE (PORT_PROTOCOL_UDP, 6061, 6066); RANGE (PORT_PROTOCOL_UDP, 6069, 6074); RANGE (PORT_PROTOCOL_UDP, 6082, 6083); RANGE (PORT_PROTOCOL_UDP, 6085, 6087); RANGE (PORT_PROTOCOL_UDP, 6100, 6112); RANGE (PORT_PROTOCOL_UDP, 6122, 6124); RANGE (PORT_PROTOCOL_UDP, 6133, 6133); RANGE (PORT_PROTOCOL_UDP, 6140, 6149); RANGE (PORT_PROTOCOL_UDP, 6160, 6163); RANGE (PORT_PROTOCOL_UDP, 6200, 6200); RANGE (PORT_PROTOCOL_UDP, 6222, 6222); RANGE (PORT_PROTOCOL_UDP, 6241, 6244); RANGE (PORT_PROTOCOL_UDP, 6251, 6253); RANGE (PORT_PROTOCOL_UDP, 6268, 6269); RANGE (PORT_PROTOCOL_UDP, 6300, 6301); RANGE (PORT_PROTOCOL_UDP, 6306, 6306); RANGE (PORT_PROTOCOL_UDP, 6315, 6316); RANGE (PORT_PROTOCOL_UDP, 6320, 6322); RANGE (PORT_PROTOCOL_UDP, 6324, 6324); RANGE (PORT_PROTOCOL_UDP, 6343, 6343); RANGE (PORT_PROTOCOL_UDP, 6346, 6347); RANGE (PORT_PROTOCOL_UDP, 6350, 6350); RANGE (PORT_PROTOCOL_UDP, 6355, 6355); RANGE (PORT_PROTOCOL_UDP, 6360, 6360); RANGE (PORT_PROTOCOL_UDP, 6370, 6370); RANGE (PORT_PROTOCOL_UDP, 6382, 6382); RANGE (PORT_PROTOCOL_UDP, 6389, 6390); RANGE (PORT_PROTOCOL_UDP, 6417, 6417); RANGE (PORT_PROTOCOL_UDP, 6420, 6421); RANGE (PORT_PROTOCOL_UDP, 6443, 6446); RANGE (PORT_PROTOCOL_UDP, 6456, 6456); RANGE (PORT_PROTOCOL_UDP, 6471, 6471); RANGE (PORT_PROTOCOL_UDP, 6480, 6489); RANGE (PORT_PROTOCOL_UDP, 6500, 6503); RANGE (PORT_PROTOCOL_UDP, 6505, 6510); RANGE (PORT_PROTOCOL_UDP, 6514, 6515); RANGE (PORT_PROTOCOL_UDP, 6543, 6544); RANGE (PORT_PROTOCOL_UDP, 6547, 6551); RANGE (PORT_PROTOCOL_UDP, 6558, 6558); RANGE (PORT_PROTOCOL_UDP, 6566, 6566); RANGE (PORT_PROTOCOL_UDP, 6568, 6568); RANGE (PORT_PROTOCOL_UDP, 6579, 6583); RANGE (PORT_PROTOCOL_UDP, 6619, 6623); RANGE (PORT_PROTOCOL_UDP, 6626, 6628); RANGE (PORT_PROTOCOL_UDP, 6657, 6657); RANGE (PORT_PROTOCOL_UDP, 6670, 6673); RANGE (PORT_PROTOCOL_UDP, 6678, 6679); RANGE (PORT_PROTOCOL_UDP, 6689, 6689); RANGE (PORT_PROTOCOL_UDP, 6696, 6696); RANGE (PORT_PROTOCOL_UDP, 6701, 6703); RANGE (PORT_PROTOCOL_UDP, 6714, 6715); RANGE (PORT_PROTOCOL_UDP, 6767, 6771); RANGE (PORT_PROTOCOL_UDP, 6785, 6791); RANGE (PORT_PROTOCOL_UDP, 6801, 6801); RANGE (PORT_PROTOCOL_UDP, 6831, 6831); RANGE (PORT_PROTOCOL_UDP, 6841, 6842); RANGE (PORT_PROTOCOL_UDP, 6850, 6850); RANGE (PORT_PROTOCOL_UDP, 6868, 6868); RANGE (PORT_PROTOCOL_UDP, 6888, 6888); RANGE (PORT_PROTOCOL_UDP, 6935, 6936); RANGE (PORT_PROTOCOL_UDP, 6946, 6946); RANGE (PORT_PROTOCOL_UDP, 6951, 6951); RANGE (PORT_PROTOCOL_UDP, 6961, 6966); RANGE (PORT_PROTOCOL_UDP, 6969, 6969); RANGE (PORT_PROTOCOL_UDP, 6997, 7015); RANGE (PORT_PROTOCOL_UDP, 7019, 7025); RANGE (PORT_PROTOCOL_UDP, 7030, 7030); RANGE (PORT_PROTOCOL_UDP, 7070, 7071); RANGE (PORT_PROTOCOL_UDP, 7080, 7080); RANGE (PORT_PROTOCOL_UDP, 7099, 7101); RANGE (PORT_PROTOCOL_UDP, 7107, 7107); RANGE (PORT_PROTOCOL_UDP, 7121, 7121); RANGE (PORT_PROTOCOL_UDP, 7128, 7129); RANGE (PORT_PROTOCOL_UDP, 7161, 7166); RANGE (PORT_PROTOCOL_UDP, 7169, 7171); RANGE (PORT_PROTOCOL_UDP, 7174, 7174); RANGE (PORT_PROTOCOL_UDP, 7200, 7201); RANGE (PORT_PROTOCOL_UDP, 7227, 7227); RANGE (PORT_PROTOCOL_UDP, 7262, 7262); RANGE (PORT_PROTOCOL_UDP, 7272, 7282); RANGE (PORT_PROTOCOL_UDP, 7365, 7365); RANGE (PORT_PROTOCOL_UDP, 7391, 7395); RANGE (PORT_PROTOCOL_UDP, 7397, 7397); RANGE (PORT_PROTOCOL_UDP, 7400, 7402); RANGE (PORT_PROTOCOL_UDP, 7410, 7410); RANGE (PORT_PROTOCOL_UDP, 7421, 7421); RANGE (PORT_PROTOCOL_UDP, 7426, 7431); RANGE (PORT_PROTOCOL_UDP, 7437, 7437); RANGE (PORT_PROTOCOL_UDP, 7443, 7443); RANGE (PORT_PROTOCOL_UDP, 7473, 7473); RANGE (PORT_PROTOCOL_UDP, 7491, 7491); RANGE (PORT_PROTOCOL_UDP, 7500, 7501); RANGE (PORT_PROTOCOL_UDP, 7510, 7511); RANGE (PORT_PROTOCOL_UDP, 7542, 7550); RANGE (PORT_PROTOCOL_UDP, 7560, 7560); RANGE (PORT_PROTOCOL_UDP, 7566, 7566); RANGE (PORT_PROTOCOL_UDP, 7570, 7570); RANGE (PORT_PROTOCOL_UDP, 7588, 7588); RANGE (PORT_PROTOCOL_UDP, 7624, 7624); RANGE (PORT_PROTOCOL_UDP, 7626, 7629); RANGE (PORT_PROTOCOL_UDP, 7633, 7633); RANGE (PORT_PROTOCOL_UDP, 7648, 7648); RANGE (PORT_PROTOCOL_UDP, 7674, 7677); RANGE (PORT_PROTOCOL_UDP, 7680, 7680); RANGE (PORT_PROTOCOL_UDP, 7689, 7689); RANGE (PORT_PROTOCOL_UDP, 7697, 7697); RANGE (PORT_PROTOCOL_UDP, 7707, 7708); RANGE (PORT_PROTOCOL_UDP, 7720, 7720); RANGE (PORT_PROTOCOL_UDP, 7724, 7727); RANGE (PORT_PROTOCOL_UDP, 7734, 7734); RANGE (PORT_PROTOCOL_UDP, 7738, 7738); RANGE (PORT_PROTOCOL_UDP, 7741, 7741); RANGE (PORT_PROTOCOL_UDP, 7743, 7744); RANGE (PORT_PROTOCOL_UDP, 7747, 7747); RANGE (PORT_PROTOCOL_UDP, 7777, 7779); RANGE (PORT_PROTOCOL_UDP, 7781, 7781); RANGE (PORT_PROTOCOL_UDP, 7786, 7787); RANGE (PORT_PROTOCOL_UDP, 7789, 7789); RANGE (PORT_PROTOCOL_UDP, 7794, 7794); RANGE (PORT_PROTOCOL_UDP, 7797, 7801); RANGE (PORT_PROTOCOL_UDP, 7810, 7810); RANGE (PORT_PROTOCOL_UDP, 7845, 7846); RANGE (PORT_PROTOCOL_UDP, 7880, 7880); RANGE (PORT_PROTOCOL_UDP, 7887, 7887); RANGE (PORT_PROTOCOL_UDP, 7900, 7903); RANGE (PORT_PROTOCOL_UDP, 7913, 7913); RANGE (PORT_PROTOCOL_UDP, 7932, 7933); RANGE (PORT_PROTOCOL_UDP, 7967, 7967); RANGE (PORT_PROTOCOL_UDP, 7979, 7980); RANGE (PORT_PROTOCOL_UDP, 7982, 7982); RANGE (PORT_PROTOCOL_UDP, 7998, 8003); RANGE (PORT_PROTOCOL_UDP, 8005, 8005); RANGE (PORT_PROTOCOL_UDP, 8008, 8008); RANGE (PORT_PROTOCOL_UDP, 8019, 8022); RANGE (PORT_PROTOCOL_UDP, 8025, 8026); RANGE (PORT_PROTOCOL_UDP, 8032, 8034); RANGE (PORT_PROTOCOL_UDP, 8040, 8040); RANGE (PORT_PROTOCOL_UDP, 8052, 8059); RANGE (PORT_PROTOCOL_UDP, 8074, 8074); RANGE (PORT_PROTOCOL_UDP, 8080, 8083); RANGE (PORT_PROTOCOL_UDP, 8086, 8088); RANGE (PORT_PROTOCOL_UDP, 8097, 8097); RANGE (PORT_PROTOCOL_UDP, 8100, 8100); RANGE (PORT_PROTOCOL_UDP, 8115, 8116); RANGE (PORT_PROTOCOL_UDP, 8118, 8118); RANGE (PORT_PROTOCOL_UDP, 8121, 8122); RANGE (PORT_PROTOCOL_UDP, 8128, 8132); RANGE (PORT_PROTOCOL_UDP, 8148, 8149); RANGE (PORT_PROTOCOL_UDP, 8160, 8161); RANGE (PORT_PROTOCOL_UDP, 8182, 8182); RANGE (PORT_PROTOCOL_UDP, 8184, 8184); RANGE (PORT_PROTOCOL_UDP, 8192, 8192); RANGE (PORT_PROTOCOL_UDP, 8194, 8195); RANGE (PORT_PROTOCOL_UDP, 8199, 8202); RANGE (PORT_PROTOCOL_UDP, 8204, 8208); RANGE (PORT_PROTOCOL_UDP, 8230, 8230); RANGE (PORT_PROTOCOL_UDP, 8243, 8243); RANGE (PORT_PROTOCOL_UDP, 8276, 8276); RANGE (PORT_PROTOCOL_UDP, 8280, 8280); RANGE (PORT_PROTOCOL_UDP, 8292, 8292); RANGE (PORT_PROTOCOL_UDP, 8294, 8294); RANGE (PORT_PROTOCOL_UDP, 8300, 8301); RANGE (PORT_PROTOCOL_UDP, 8320, 8321); RANGE (PORT_PROTOCOL_UDP, 8351, 8351); RANGE (PORT_PROTOCOL_UDP, 8376, 8380); RANGE (PORT_PROTOCOL_UDP, 8383, 8383); RANGE (PORT_PROTOCOL_UDP, 8400, 8403); RANGE (PORT_PROTOCOL_UDP, 8416, 8417); RANGE (PORT_PROTOCOL_UDP, 8442, 8444); RANGE (PORT_PROTOCOL_UDP, 8450, 8450); RANGE (PORT_PROTOCOL_UDP, 8472, 8474); RANGE (PORT_PROTOCOL_UDP, 8500, 8501); RANGE (PORT_PROTOCOL_UDP, 8554, 8555); RANGE (PORT_PROTOCOL_UDP, 8567, 8567); RANGE (PORT_PROTOCOL_UDP, 8600, 8600); RANGE (PORT_PROTOCOL_UDP, 8610, 8614); RANGE (PORT_PROTOCOL_UDP, 8686, 8686); RANGE (PORT_PROTOCOL_UDP, 8699, 8699); RANGE (PORT_PROTOCOL_UDP, 8732, 8733); RANGE (PORT_PROTOCOL_UDP, 8763, 8765); RANGE (PORT_PROTOCOL_UDP, 8770, 8770); RANGE (PORT_PROTOCOL_UDP, 8786, 8787); RANGE (PORT_PROTOCOL_UDP, 8793, 8793); RANGE (PORT_PROTOCOL_UDP, 8800, 8800); RANGE (PORT_PROTOCOL_UDP, 8804, 8804); RANGE (PORT_PROTOCOL_UDP, 8873, 8873); RANGE (PORT_PROTOCOL_UDP, 8880, 8880); RANGE (PORT_PROTOCOL_UDP, 8883, 8883); RANGE (PORT_PROTOCOL_UDP, 8888, 8894); RANGE (PORT_PROTOCOL_UDP, 8899, 8901); RANGE (PORT_PROTOCOL_UDP, 8910, 8913); RANGE (PORT_PROTOCOL_UDP, 8954, 8954); RANGE (PORT_PROTOCOL_UDP, 8989, 8991); RANGE (PORT_PROTOCOL_UDP, 8999, 9002); RANGE (PORT_PROTOCOL_UDP, 9007, 9007); RANGE (PORT_PROTOCOL_UDP, 9009, 9009); RANGE (PORT_PROTOCOL_UDP, 9020, 9026); RANGE (PORT_PROTOCOL_UDP, 9080, 9080); RANGE (PORT_PROTOCOL_UDP, 9084, 9092); RANGE (PORT_PROTOCOL_UDP, 9100, 9106); RANGE (PORT_PROTOCOL_UDP, 9119, 9119); RANGE (PORT_PROTOCOL_UDP, 9131, 9131); RANGE (PORT_PROTOCOL_UDP, 9160, 9164); RANGE (PORT_PROTOCOL_UDP, 9191, 9191); RANGE (PORT_PROTOCOL_UDP, 9200, 9217); RANGE (PORT_PROTOCOL_UDP, 9222, 9222); RANGE (PORT_PROTOCOL_UDP, 9255, 9255); RANGE (PORT_PROTOCOL_UDP, 9278, 9287); RANGE (PORT_PROTOCOL_UDP, 9292, 9295); RANGE (PORT_PROTOCOL_UDP, 9300, 9300); RANGE (PORT_PROTOCOL_UDP, 9318, 9318); RANGE (PORT_PROTOCOL_UDP, 9321, 9321); RANGE (PORT_PROTOCOL_UDP, 9343, 9344); RANGE (PORT_PROTOCOL_UDP, 9346, 9346); RANGE (PORT_PROTOCOL_UDP, 9374, 9374); RANGE (PORT_PROTOCOL_UDP, 9380, 9380); RANGE (PORT_PROTOCOL_UDP, 9396, 9397); RANGE (PORT_PROTOCOL_UDP, 9400, 9402); RANGE (PORT_PROTOCOL_UDP, 9418, 9418); RANGE (PORT_PROTOCOL_UDP, 9443, 9444); RANGE (PORT_PROTOCOL_UDP, 9450, 9450); RANGE (PORT_PROTOCOL_UDP, 9500, 9500); RANGE (PORT_PROTOCOL_UDP, 9522, 9522); RANGE (PORT_PROTOCOL_UDP, 9535, 9536); RANGE (PORT_PROTOCOL_UDP, 9555, 9555); RANGE (PORT_PROTOCOL_UDP, 9592, 9600); RANGE (PORT_PROTOCOL_UDP, 9612, 9612); RANGE (PORT_PROTOCOL_UDP, 9618, 9618); RANGE (PORT_PROTOCOL_UDP, 9628, 9629); RANGE (PORT_PROTOCOL_UDP, 9632, 9632); RANGE (PORT_PROTOCOL_UDP, 9667, 9668); RANGE (PORT_PROTOCOL_UDP, 9694, 9695); RANGE (PORT_PROTOCOL_UDP, 9700, 9700); RANGE (PORT_PROTOCOL_UDP, 9747, 9747); RANGE (PORT_PROTOCOL_UDP, 9750, 9750); RANGE (PORT_PROTOCOL_UDP, 9753, 9753); RANGE (PORT_PROTOCOL_UDP, 9762, 9762); RANGE (PORT_PROTOCOL_UDP, 9800, 9802); RANGE (PORT_PROTOCOL_UDP, 9875, 9876); RANGE (PORT_PROTOCOL_UDP, 9888, 9889); RANGE (PORT_PROTOCOL_UDP, 9898, 9901); RANGE (PORT_PROTOCOL_UDP, 9903, 9903); RANGE (PORT_PROTOCOL_UDP, 9909, 9909); RANGE (PORT_PROTOCOL_UDP, 9911, 9911); RANGE (PORT_PROTOCOL_UDP, 9950, 9953); RANGE (PORT_PROTOCOL_UDP, 9956, 9956); RANGE (PORT_PROTOCOL_UDP, 9966, 9966); RANGE (PORT_PROTOCOL_UDP, 9987, 9987); RANGE (PORT_PROTOCOL_UDP, 9990, 10003); RANGE (PORT_PROTOCOL_UDP, 10007, 10009); RANGE (PORT_PROTOCOL_UDP, 10050, 10051); RANGE (PORT_PROTOCOL_UDP, 10080, 10081); RANGE (PORT_PROTOCOL_UDP, 10100, 10104); RANGE (PORT_PROTOCOL_UDP, 10107, 10107); RANGE (PORT_PROTOCOL_UDP, 10110, 10111); RANGE (PORT_PROTOCOL_UDP, 10113, 10117); RANGE (PORT_PROTOCOL_UDP, 10128, 10128); RANGE (PORT_PROTOCOL_UDP, 10160, 10162); RANGE (PORT_PROTOCOL_UDP, 10200, 10201); RANGE (PORT_PROTOCOL_UDP, 10252, 10252); RANGE (PORT_PROTOCOL_UDP, 10260, 10260); RANGE (PORT_PROTOCOL_UDP, 10288, 10288); RANGE (PORT_PROTOCOL_UDP, 10500, 10500); RANGE (PORT_PROTOCOL_UDP, 10540, 10544); RANGE (PORT_PROTOCOL_UDP, 10800, 10800); RANGE (PORT_PROTOCOL_UDP, 10805, 10805); RANGE (PORT_PROTOCOL_UDP, 10810, 10810); RANGE (PORT_PROTOCOL_UDP, 10860, 10860); RANGE (PORT_PROTOCOL_UDP, 10990, 10990); RANGE (PORT_PROTOCOL_UDP, 11000, 11001); RANGE (PORT_PROTOCOL_UDP, 11106, 11106); RANGE (PORT_PROTOCOL_UDP, 11111, 11112); RANGE (PORT_PROTOCOL_UDP, 11161, 11165); RANGE (PORT_PROTOCOL_UDP, 11171, 11171); RANGE (PORT_PROTOCOL_UDP, 11201, 11201); RANGE (PORT_PROTOCOL_UDP, 11208, 11208); RANGE (PORT_PROTOCOL_UDP, 11211, 11211); RANGE (PORT_PROTOCOL_UDP, 11319, 11321); RANGE (PORT_PROTOCOL_UDP, 11367, 11367); RANGE (PORT_PROTOCOL_UDP, 11371, 11371); RANGE (PORT_PROTOCOL_UDP, 11600, 11600); RANGE (PORT_PROTOCOL_UDP, 11720, 11720); RANGE (PORT_PROTOCOL_UDP, 11751, 11751); RANGE (PORT_PROTOCOL_UDP, 11876, 11877); RANGE (PORT_PROTOCOL_UDP, 11967, 11967); RANGE (PORT_PROTOCOL_UDP, 12000, 12009); RANGE (PORT_PROTOCOL_UDP, 12012, 12013); RANGE (PORT_PROTOCOL_UDP, 12109, 12109); RANGE (PORT_PROTOCOL_UDP, 12121, 12121); RANGE (PORT_PROTOCOL_UDP, 12168, 12168); RANGE (PORT_PROTOCOL_UDP, 12172, 12172); RANGE (PORT_PROTOCOL_UDP, 12300, 12300); RANGE (PORT_PROTOCOL_UDP, 12321, 12322); RANGE (PORT_PROTOCOL_UDP, 12345, 12345); RANGE (PORT_PROTOCOL_UDP, 12753, 12753); RANGE (PORT_PROTOCOL_UDP, 13160, 13160); RANGE (PORT_PROTOCOL_UDP, 13216, 13218); RANGE (PORT_PROTOCOL_UDP, 13223, 13224); RANGE (PORT_PROTOCOL_UDP, 13400, 13400); RANGE (PORT_PROTOCOL_UDP, 13720, 13722); RANGE (PORT_PROTOCOL_UDP, 13724, 13724); RANGE (PORT_PROTOCOL_UDP, 13782, 13783); RANGE (PORT_PROTOCOL_UDP, 13785, 13786); RANGE (PORT_PROTOCOL_UDP, 13818, 13822); RANGE (PORT_PROTOCOL_UDP, 13929, 13929); RANGE (PORT_PROTOCOL_UDP, 14000, 14001); RANGE (PORT_PROTOCOL_UDP, 14033, 14034); RANGE (PORT_PROTOCOL_UDP, 14141, 14142); RANGE (PORT_PROTOCOL_UDP, 14145, 14145); RANGE (PORT_PROTOCOL_UDP, 14149, 14149); RANGE (PORT_PROTOCOL_UDP, 14154, 14154); RANGE (PORT_PROTOCOL_UDP, 14250, 14250); RANGE (PORT_PROTOCOL_UDP, 14414, 14414); RANGE (PORT_PROTOCOL_UDP, 14936, 14937); RANGE (PORT_PROTOCOL_UDP, 15000, 15000); RANGE (PORT_PROTOCOL_UDP, 15118, 15118); RANGE (PORT_PROTOCOL_UDP, 15345, 15345); RANGE (PORT_PROTOCOL_UDP, 15363, 15363); RANGE (PORT_PROTOCOL_UDP, 15555, 15555); RANGE (PORT_PROTOCOL_UDP, 15660, 15660); RANGE (PORT_PROTOCOL_UDP, 15740, 15740); RANGE (PORT_PROTOCOL_UDP, 15998, 15998); RANGE (PORT_PROTOCOL_UDP, 16003, 16003); RANGE (PORT_PROTOCOL_UDP, 16161, 16161); RANGE (PORT_PROTOCOL_UDP, 16309, 16311); RANGE (PORT_PROTOCOL_UDP, 16360, 16361); RANGE (PORT_PROTOCOL_UDP, 16367, 16368); RANGE (PORT_PROTOCOL_UDP, 16384, 16384); RANGE (PORT_PROTOCOL_UDP, 16666, 16666); RANGE (PORT_PROTOCOL_UDP, 16900, 16900); RANGE (PORT_PROTOCOL_UDP, 16950, 16950); RANGE (PORT_PROTOCOL_UDP, 16991, 16995); RANGE (PORT_PROTOCOL_UDP, 17007, 17007); RANGE (PORT_PROTOCOL_UDP, 17185, 17185); RANGE (PORT_PROTOCOL_UDP, 17219, 17219); RANGE (PORT_PROTOCOL_UDP, 17221, 17222); RANGE (PORT_PROTOCOL_UDP, 17234, 17235); RANGE (PORT_PROTOCOL_UDP, 17500, 17500); RANGE (PORT_PROTOCOL_UDP, 17729, 17729); RANGE (PORT_PROTOCOL_UDP, 17754, 17756); RANGE (PORT_PROTOCOL_UDP, 18000, 18000); RANGE (PORT_PROTOCOL_UDP, 18181, 18187); RANGE (PORT_PROTOCOL_UDP, 18241, 18241); RANGE (PORT_PROTOCOL_UDP, 18262, 18262); RANGE (PORT_PROTOCOL_UDP, 18463, 18463); RANGE (PORT_PROTOCOL_UDP, 18634, 18635); RANGE (PORT_PROTOCOL_UDP, 18769, 18769); RANGE (PORT_PROTOCOL_UDP, 18881, 18881); RANGE (PORT_PROTOCOL_UDP, 18888, 18888); RANGE (PORT_PROTOCOL_UDP, 19000, 19000); RANGE (PORT_PROTOCOL_UDP, 19191, 19191); RANGE (PORT_PROTOCOL_UDP, 19194, 19194); RANGE (PORT_PROTOCOL_UDP, 19283, 19283); RANGE (PORT_PROTOCOL_UDP, 19315, 19315); RANGE (PORT_PROTOCOL_UDP, 19398, 19398); RANGE (PORT_PROTOCOL_UDP, 19410, 19412); RANGE (PORT_PROTOCOL_UDP, 19539, 19541); RANGE (PORT_PROTOCOL_UDP, 19999, 20003); RANGE (PORT_PROTOCOL_UDP, 20005, 20005); RANGE (PORT_PROTOCOL_UDP, 20012, 20012); RANGE (PORT_PROTOCOL_UDP, 20014, 20014); RANGE (PORT_PROTOCOL_UDP, 20034, 20034); RANGE (PORT_PROTOCOL_UDP, 20046, 20046); RANGE (PORT_PROTOCOL_UDP, 20048, 20049); RANGE (PORT_PROTOCOL_UDP, 20167, 20167); RANGE (PORT_PROTOCOL_UDP, 20202, 20202); RANGE (PORT_PROTOCOL_UDP, 20222, 20222); RANGE (PORT_PROTOCOL_UDP, 20480, 20480); RANGE (PORT_PROTOCOL_UDP, 20670, 20670); RANGE (PORT_PROTOCOL_UDP, 20999, 21000); RANGE (PORT_PROTOCOL_UDP, 21554, 21554); RANGE (PORT_PROTOCOL_UDP, 21590, 21590); RANGE (PORT_PROTOCOL_UDP, 21800, 21800); RANGE (PORT_PROTOCOL_UDP, 21845, 21849); RANGE (PORT_PROTOCOL_UDP, 22000, 22005); RANGE (PORT_PROTOCOL_UDP, 22273, 22273); RANGE (PORT_PROTOCOL_UDP, 22305, 22305); RANGE (PORT_PROTOCOL_UDP, 22343, 22343); RANGE (PORT_PROTOCOL_UDP, 22347, 22347); RANGE (PORT_PROTOCOL_UDP, 22350, 22350); RANGE (PORT_PROTOCOL_UDP, 22555, 22555); RANGE (PORT_PROTOCOL_UDP, 22763, 22763); RANGE (PORT_PROTOCOL_UDP, 22800, 22800); RANGE (PORT_PROTOCOL_UDP, 22951, 22951); RANGE (PORT_PROTOCOL_UDP, 23000, 23005); RANGE (PORT_PROTOCOL_UDP, 23272, 23272); RANGE (PORT_PROTOCOL_UDP, 23333, 23333); RANGE (PORT_PROTOCOL_UDP, 23400, 23402); RANGE (PORT_PROTOCOL_UDP, 24000, 24006); RANGE (PORT_PROTOCOL_UDP, 24242, 24242); RANGE (PORT_PROTOCOL_UDP, 24249, 24249); RANGE (PORT_PROTOCOL_UDP, 24321, 24321); RANGE (PORT_PROTOCOL_UDP, 24386, 24386); RANGE (PORT_PROTOCOL_UDP, 24465, 24465); RANGE (PORT_PROTOCOL_UDP, 24554, 24554); RANGE (PORT_PROTOCOL_UDP, 24676, 24678); RANGE (PORT_PROTOCOL_UDP, 24680, 24680); RANGE (PORT_PROTOCOL_UDP, 24922, 24922); RANGE (PORT_PROTOCOL_UDP, 25000, 25009); RANGE (PORT_PROTOCOL_UDP, 25793, 25793); RANGE (PORT_PROTOCOL_UDP, 25900, 25903); RANGE (PORT_PROTOCOL_UDP, 26000, 26000); RANGE (PORT_PROTOCOL_UDP, 26133, 26133); RANGE (PORT_PROTOCOL_UDP, 26208, 26208); RANGE (PORT_PROTOCOL_UDP, 26260, 26263); RANGE (PORT_PROTOCOL_UDP, 26486, 26487); RANGE (PORT_PROTOCOL_UDP, 26489, 26489); RANGE (PORT_PROTOCOL_UDP, 27345, 27345); RANGE (PORT_PROTOCOL_UDP, 27442, 27442); RANGE (PORT_PROTOCOL_UDP, 27504, 27504); RANGE (PORT_PROTOCOL_UDP, 27782, 27782); RANGE (PORT_PROTOCOL_UDP, 27999, 28000); RANGE (PORT_PROTOCOL_UDP, 28240, 28240); RANGE (PORT_PROTOCOL_UDP, 29167, 29167); RANGE (PORT_PROTOCOL_UDP, 30001, 30002); RANGE (PORT_PROTOCOL_UDP, 30260, 30260); RANGE (PORT_PROTOCOL_UDP, 30999, 30999); RANGE (PORT_PROTOCOL_UDP, 31029, 31029); RANGE (PORT_PROTOCOL_UDP, 31416, 31416); RANGE (PORT_PROTOCOL_UDP, 31457, 31457); RANGE (PORT_PROTOCOL_UDP, 31620, 31620); RANGE (PORT_PROTOCOL_UDP, 31765, 31765); RANGE (PORT_PROTOCOL_UDP, 31948, 31949); RANGE (PORT_PROTOCOL_UDP, 32034, 32034); RANGE (PORT_PROTOCOL_UDP, 32249, 32249); RANGE (PORT_PROTOCOL_UDP, 32483, 32483); RANGE (PORT_PROTOCOL_UDP, 32635, 32636); RANGE (PORT_PROTOCOL_UDP, 32767, 32777); RANGE (PORT_PROTOCOL_UDP, 32801, 32801); RANGE (PORT_PROTOCOL_UDP, 32896, 32896); RANGE (PORT_PROTOCOL_UDP, 33123, 33123); RANGE (PORT_PROTOCOL_UDP, 33331, 33331); RANGE (PORT_PROTOCOL_UDP, 33334, 33334); RANGE (PORT_PROTOCOL_UDP, 33434, 33434); RANGE (PORT_PROTOCOL_UDP, 33656, 33656); RANGE (PORT_PROTOCOL_UDP, 34249, 34249); RANGE (PORT_PROTOCOL_UDP, 34378, 34379); RANGE (PORT_PROTOCOL_UDP, 34962, 34964); RANGE (PORT_PROTOCOL_UDP, 34980, 34980); RANGE (PORT_PROTOCOL_UDP, 35355, 35355); RANGE (PORT_PROTOCOL_UDP, 36001, 36001); RANGE (PORT_PROTOCOL_UDP, 36865, 36865); RANGE (PORT_PROTOCOL_UDP, 37475, 37475); RANGE (PORT_PROTOCOL_UDP, 37654, 37654); RANGE (PORT_PROTOCOL_UDP, 38201, 38203); RANGE (PORT_PROTOCOL_UDP, 39681, 39681); RANGE (PORT_PROTOCOL_UDP, 40000, 40000); RANGE (PORT_PROTOCOL_UDP, 40841, 40843); RANGE (PORT_PROTOCOL_UDP, 40853, 40853); RANGE (PORT_PROTOCOL_UDP, 41111, 41111); RANGE (PORT_PROTOCOL_UDP, 41794, 41795); RANGE (PORT_PROTOCOL_UDP, 42508, 42510); RANGE (PORT_PROTOCOL_UDP, 43188, 43190); RANGE (PORT_PROTOCOL_UDP, 43439, 43441); RANGE (PORT_PROTOCOL_UDP, 44321, 44323); RANGE (PORT_PROTOCOL_UDP, 44544, 44544); RANGE (PORT_PROTOCOL_UDP, 44553, 44553); RANGE (PORT_PROTOCOL_UDP, 44600, 44600); RANGE (PORT_PROTOCOL_UDP, 44818, 44818); RANGE (PORT_PROTOCOL_UDP, 45000, 45000); RANGE (PORT_PROTOCOL_UDP, 45054, 45054); RANGE (PORT_PROTOCOL_UDP, 45678, 45678); RANGE (PORT_PROTOCOL_UDP, 45825, 45825); RANGE (PORT_PROTOCOL_UDP, 45966, 45966); RANGE (PORT_PROTOCOL_UDP, 46999, 47000); RANGE (PORT_PROTOCOL_UDP, 47557, 47557); RANGE (PORT_PROTOCOL_UDP, 47624, 47624); RANGE (PORT_PROTOCOL_UDP, 47806, 47806); RANGE (PORT_PROTOCOL_UDP, 47808, 47808); RANGE (PORT_PROTOCOL_UDP, 48000, 48003); RANGE (PORT_PROTOCOL_UDP, 48128, 48129); RANGE (PORT_PROTOCOL_UDP, 48556, 48556); sql ("END TRANSACTION"); } openvas-manager-6.0.9/src/openvasmd.c000644 001751 001751 00000202031 12757560563 020626 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Main module for OpenVAS Manager: the system daemon. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2009, 2010, 2014-2015 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ /** * @file openvasmd.c * @brief The OpenVAS Manager daemon. * * This file defines the OpenVAS Manager daemon. The Manager serves the OpenVAS * Management Protocol (OMP) to clients such as OpenVAS-Client. The Manager * and OMP give clients full access to an OpenVAS Scanner. * * The entry point to the daemon is the \ref main function. From there * the references in the function documentation describe the flow of * control in the program. */ /** * \mainpage * * \section Introduction * \verbinclude README * * \section manpages Manual Pages * \subpage manpage * * \section Installation * \verbinclude INSTALL * * \section Implementation * * The command line entry to the manager is defined in * src/\ref openvasmd.c. The manager is an OMP server. * * The OMP server is defined in src/\ref ompd.c. It uses the OTP library * to handle the OTP server and the OMP library to handle the OMP client. * The OTP library is defined in src/\ref otp.c. The OMP library is defined * in src/\ref omp.c. Both the OMP and OTP libraries use the Manage library * to manage credentials and tasks. The manage * library is defined in src/\ref manage.c and src/\ref manage_sql.c . * * The OTP and Manage libraries both use the Comm library to communication * with the OTP server (src/\ref ovas-mngr-comm.c). * * \subsection Forking * * The main daemon manager process will fork for every incoming connection and * for every scheduled task. * * \section copying License Information * \verbinclude COPYING */ /** * \page manpage openvasmd * \htmlinclude doc/openvasmd.html */ #ifndef S_SPLINT_S #include #endif #include #include #include #include #include #include #include #ifndef S_SPLINT_S #include #include #endif #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include "logf.h" #include "manage.h" #include "scanner.h" #include "ompd.h" #include "ovas-mngr-comm.h" #include "tracef.h" #ifdef S_SPLINT_S #include "splint.h" #endif /** * @brief The name of this program. * * @todo Use `program_invocation[_short]_name'? */ #define PROGNAME "openvasmd" /** * @brief The version number of this program. */ #ifndef OPENVASMD_VERSION #define OPENVASMD_VERSION "-1" #endif /** * @brief The name of the underlying Operating System. */ #ifndef OPENVAS_OS_NAME #define OPENVAS_OS_NAME "-1" #endif /** * @brief Scanner (openvassd) address. */ #define OPENVASSD_ADDRESS "127.0.0.1" /** * @brief Location of scanner certificate. */ #ifndef SCANNERCERT #define SCANNERCERT "/var/lib/openvas/CA/servercert.pem" #endif /** * @brief Location of scanner certificate private key. */ #ifndef SCANNERKEY #define SCANNERKEY "/var/lib/openvas/private/CA/serverkey.pem" #endif /** * @brief Location of Certificate Authority certificate. */ #ifndef CACERT #define CACERT "/var/lib/openvas/CA/cacert.pem" #endif /** * @brief Location of client certificate. */ #ifndef CLIENTCERT #define CLIENTCERT "/var/lib/openvas/CA/clientcert.pem" #endif /** * @brief Location of client certificate private key. */ #ifndef CLIENTKEY #define CLIENTKEY "/var/lib/openvas/private/CA/clientkey.pem" #endif /** * @brief Scanner port. * * Used if /etc/services "otp" and --port missing. */ #define OPENVASSD_PORT 9391 /** * @brief Manager port. * * Used if /etc/services "omp" and --sport are missing. */ #define OPENVASMD_PORT 9390 /** * @brief Second argument to `listen'. */ #define MAX_CONNECTIONS 512 /** * @brief Seconds between calls to manage_schedule. */ #define SCHEDULE_PERIOD 10 /** * @brief The socket accepting OMP connections from clients. */ int manager_socket = -1; /** * @brief The optional, second socket accepting OMP connections from clients. */ int manager_socket_2 = -1; #if LOG /** * @brief The log stream. */ FILE* log_stream = NULL; #endif /** * @brief The client session. */ gnutls_session_t client_session; /** * @brief The client credentials. */ gnutls_certificate_credentials_t client_credentials; /** * @brief Location of the manage database. */ static gchar *database = NULL; /** * @brief Is this process parent or child? */ int is_parent = 1; /** * @brief Flag for signal handlers. */ volatile int termination_signal = 0; /** * @brief Flag for SIGHUP handler. */ volatile int sighup_update_nvt_cache = 0; /** * @brief The address of the Scanner. */ static gchar **disabled_commands = NULL; /** * @brief Flag indicating that encrypted credentials are disabled. * * Setting this flag does not change any existing encrypted tuples but * simply won't encrypt or decrypt anything. The variable is * controlled by the command line option --disable-encrypted-credentials. */ gboolean disable_encrypted_credentials; /** * @brief Flag indicating that task scheduling is enabled. */ gboolean scheduling_enabled; /** * @brief The OMP client's address. */ char client_address[INET6_ADDRSTRLEN]; /* Forking, serving the client. */ /** * @brief Serve the client. * * Connect to the openvassd scanner, then call \ref serve_omp to serve OMP. * * In all cases, close client_socket before returning. * * @param[in] client_socket The socket connected to the client. * @param[in] server_socket The socket connected to the Manager. * * @return EXIT_SUCCESS on success, EXIT_FAILURE on failure. */ int serve_client (int server_socket, int client_socket) { int optval; optval = 1; if (setsockopt (server_socket, SOL_SOCKET, SO_KEEPALIVE, &optval, sizeof (int))) { g_critical ("%s: failed to set SO_KEEPALIVE on scanner socket: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } if (openvas_server_attach (client_socket, &client_session)) { g_critical ("%s: failed to attach client session to socket %i\n", __FUNCTION__, client_socket); goto fail; } /* The socket must have O_NONBLOCK set, in case an "asynchronous network * error" removes the data between `select' and `read'. */ if (fcntl (client_socket, F_SETFL, O_NONBLOCK) == -1) { g_warning ("%s: failed to set real client socket flag: %s\n", __FUNCTION__, strerror (errno)); goto fail; } /* Serve OMP. */ /* It's up to serve_omp to openvas_server_free client_*. */ if (serve_omp (&client_session, &client_credentials, client_socket, database, disabled_commands, NULL)) goto server_fail; return EXIT_SUCCESS; fail: openvas_server_free (client_socket, client_session, client_credentials); server_fail: return EXIT_FAILURE; } /** * @brief Accept and fork. * * @param[in] server_socket Manager socket. * @param[in] sigmask_current Sigmask to restore in child. * * Accept the client connection and fork a child process to serve the client. * The child calls \ref serve_client to do the rest of the work. */ static void accept_and_maybe_fork (int server_socket, sigset_t *sigmask_current) { /* Accept the client connection. */ pid_t pid; int client_socket; struct sockaddr_storage addr; socklen_t addrlen = sizeof (addr); while ((client_socket = accept (server_socket, (struct sockaddr *) &addr, &addrlen)) == -1) { if (errno == EINTR) continue; if (errno == EAGAIN || errno == EWOULDBLOCK) /* The connection is gone, return to select. */ return; g_critical ("%s: failed to accept client connection: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } sockaddr_as_str (&addr, client_address); /* Fork a child to serve the client. */ pid = fork (); switch (pid) { case 0: /* Child. */ { int ret; struct sigaction action; is_parent = 0; /* Restore the sigmask that was blanked for pselect. */ pthread_sigmask (SIG_SETMASK, sigmask_current, NULL); memset (&action, '\0', sizeof (action)); sigemptyset (&action.sa_mask); action.sa_handler = SIG_DFL; if (sigaction (SIGCHLD, &action, NULL) == -1) { g_critical ("%s: failed to set client SIGCHLD handler: %s\n", __FUNCTION__, strerror (errno)); shutdown (client_socket, SHUT_RDWR); close (client_socket); exit (EXIT_FAILURE); } /* The socket must have O_NONBLOCK set, in case an "asynchronous * network error" removes the data between `select' and `read'. */ if (fcntl (client_socket, F_SETFL, O_NONBLOCK) == -1) { g_critical ("%s: failed to set client socket flag: %s\n", __FUNCTION__, strerror (errno)); shutdown (client_socket, SHUT_RDWR); close (client_socket); exit (EXIT_FAILURE); } /* Reopen the database (required after fork). */ cleanup_manage_process (FALSE); ret = serve_client (server_socket, client_socket); /** @todo This should be done through libomp. */ save_tasks (); exit (ret); } case -1: /* Parent when error, return to select. */ g_warning ("%s: failed to fork child: %s\n", __FUNCTION__, strerror (errno)); close (client_socket); break; default: /* Parent. Return to select. */ close (client_socket); break; } } /* Connection forker for schedular. */ /** * @brief Fork a child connected to the Manager. * * @param[in] client_socket Client socket. * @param[in] client_session Client session. * @param[in] client_credentials Client credentials. * @param[in] uuid UUID of schedule user. * @param[in] sigmask_current Sigmask to restore in child. * * @return PID parent on success, 0 child on success, -1 error. */ static int fork_connection_for_schedular (int *client_socket, gnutls_session_t *client_session, gnutls_certificate_credentials_t *client_credentials, gchar* uuid, sigset_t *sigmask_current) { int pid, parent_client_socket, ret; int sockets[2]; struct sigaction action; /* Fork a child to use as schedular client and server. */ pid = fork (); switch (pid) { case 0: /* Child. */ cleanup_manage_process (FALSE); break; case -1: /* Parent when error. */ g_warning ("%s: fork: %s\n", __FUNCTION__, strerror (errno)); return -1; break; default: /* Parent. Return to caller. */ g_debug ("%s: %i forked %i", __FUNCTION__, getpid (), pid); return pid; break; } /* This is now a child of the main Manager process. It forks again. The * only case that returns is the process that the caller can use for OMP * commands. The caller must exit this process. */ /* Restore the sigmask that was blanked for pselect. */ pthread_sigmask (SIG_SETMASK, sigmask_current, NULL); /* Create a connected pair of sockets. */ if (socketpair (AF_UNIX, SOCK_STREAM, 0, sockets)) { g_warning ("%s: socketpair: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } /* Split into a Manager client for the schedular, and a Manager serving * OMP to that client. */ is_parent = 0; pid = fork (); switch (pid) { case 0: /* Child. Serve the schedular OMP, then exit. */ parent_client_socket = sockets[0]; memset (&action, '\0', sizeof (action)); sigemptyset (&action.sa_mask); action.sa_handler = SIG_DFL; if (sigaction (SIGCHLD, &action, NULL) == -1) { g_critical ("%s: failed to set client SIGCHLD handler: %s\n", __FUNCTION__, strerror (errno)); shutdown (parent_client_socket, SHUT_RDWR); close (parent_client_socket); exit (EXIT_FAILURE); } /* The socket must have O_NONBLOCK set, in case an "asynchronous * network error" removes the data between `select' and `read'. */ if (fcntl (parent_client_socket, F_SETFL, O_NONBLOCK) == -1) { g_critical ("%s: failed to set client socket flag: %s\n", __FUNCTION__, strerror (errno)); shutdown (parent_client_socket, SHUT_RDWR); close (parent_client_socket); exit (EXIT_FAILURE); } init_ompd_process (database, disabled_commands); /* Make any further authentications to this process succeed. This * enables the schedular to login as the owner of the scheduled * task. */ manage_auth_allow_all (); set_scheduled_user_uuid (uuid); ret = serve_client (manager_socket, parent_client_socket); /** @todo This should be done through libomp. */ save_tasks (); exit (ret); break; case -1: /* Parent when error. */ g_warning ("%s: fork: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); break; default: /* Parent. */ g_debug ("%s: %i forked %i", __FUNCTION__, getpid (), pid); /* This process is returned as the child of * fork_connection_for_schedular so that the returned parent can wait * on this process. */ /** @todo Give the parent time to prepare. */ openvas_sleep (5); *client_socket = sockets[1]; if (openvas_server_new (GNUTLS_CLIENT, CACERT, SCANNERCERT, SCANNERKEY, client_session, client_credentials)) exit (EXIT_FAILURE); if (openvas_server_attach (*client_socket, client_session)) exit (EXIT_FAILURE); return 0; break; } exit (EXIT_FAILURE); /*@notreached@*/ return -1; } /* Maintenance functions. */ /** * @brief Free logging configuration. */ static void log_config_free () { free_log_configuration (log_config); log_config = NULL; } /** * @brief Clean up for exit. * * Close sockets and streams. */ static void cleanup () { tracef (" Cleaning up.\n"); /** @todo These should happen via omp, maybe with "cleanup_omp ();". */ cleanup_manage_process (TRUE); g_strfreev (disabled_commands); if (manager_socket > -1) close (manager_socket); if (manager_socket_2 > -1) close (manager_socket_2); #if LOG if (log_stream != NULL) { if (fclose (log_stream)) g_critical ("%s: failed to close log stream: %s\n", __FUNCTION__, strerror (errno)); } #endif /* LOG */ tracef (" Exiting.\n"); if (log_config) log_config_free (log_config); /* Tear down authentication system conf, if any. */ openvas_auth_tear_down (); /* Delete pidfile if this process is the parent. */ if (is_parent == 1) pidfile_remove ("openvasmd"); } /** * @brief Setup signal handler. * * Exit on failure. * * @param[in] signal Signal. * @param[in] handler Handler. * @param[in] block Whether to block all other signals during handler. */ void setup_signal_handler (int signal, void (*handler) (int), int block) { struct sigaction action; memset (&action, '\0', sizeof (action)); if (block) sigfillset (&action.sa_mask); else sigemptyset (&action.sa_mask); action.sa_handler = handler; if (sigaction (signal, &action, NULL) == -1) { g_critical ("%s: failed to register %s handler\n", __FUNCTION__, sys_siglist[signal]); exit (EXIT_FAILURE); } } #ifndef NDEBUG #include #define BA_SIZE 100 #endif /** * @brief Handle a SIGABRT signal. * * @param[in] given_signal The signal that caused this function to run. */ void handle_sigabrt (int given_signal) { static int in_sigabrt = 0; if (in_sigabrt) _exit (EXIT_FAILURE); in_sigabrt = 1; #ifndef NDEBUG void *frames[BA_SIZE]; int frame_count, index; char **frames_text; /* Print a backtrace. */ frame_count = backtrace (frames, BA_SIZE); frames_text = backtrace_symbols (frames, frame_count); if (frames_text == NULL) { perror ("backtrace symbols"); frame_count = 0; } for (index = 0; index < frame_count; index++) tracef ("%s\n", frames_text[index]); free (frames_text); #endif manage_cleanup_process_error (given_signal); cleanup (); /* Raise signal again, to exit with the correct return value. */ setup_signal_handler (given_signal, SIG_DFL, 0); raise (given_signal); } /** * @brief Handle a termination signal. * * @param[in] signal The signal that caused this function to run. */ void handle_termination_signal (int signal) { termination_signal = signal; } /** * @brief Handle a SIGHUP signal by updating the NVT cache. * * @param[in] signal The signal that caused this function to run. */ void handle_sighup_update (int signal) { /* Queue the update of the NVT cache. */ sighup_update_nvt_cache = 1; } /** * @brief Handle a SIGSEGV signal. * * @param[in] given_signal The signal that caused this function to run. */ void handle_sigsegv (/*@unused@*/ int given_signal) { manage_cleanup_process_error (given_signal); /* This previously called "cleanup", but it seems that the regular manager * code runs again before the default handler is invoked, at least when the * SIGKILL is sent from the command line. This was leading to errors which * were preventing the default handler from running and dumping core. */ /* Raise signal again, to exit with the correct return value. */ setup_signal_handler (given_signal, SIG_DFL, 0); raise (given_signal); } /** * @brief Nudge the progress indicator. */ void spin_progress () { static char current = '/'; switch (current) { case '\\': current = '|'; break; case '|': current = '/'; break; case '/': current = '-'; break; case '-': current = '\\'; break; } putchar ('\b'); putchar (current); fflush (stdout); tracef (" %c\n", current); } /** * @brief Handle a SIGABRT signal. * * @param[in] signal The signal that caused this function to run. */ void handle_sigabrt_simple (int signal) { exit (EXIT_FAILURE); } /** * @brief Updates or rebuilds the NVT Cache and exits or returns exit code. * * @param[in] update_nvt_cache Whether the nvt cache should be updated * (1) or rebuilt (0). * @param[in] register_cleanup Whether to register cleanup with atexit. * @param[in] progress Function to update progress, or NULL. * @param[in] skip_create_tables Whether to skip table creation. * * @return If this function did not exit itself, returns exit code. */ static int update_or_rebuild_nvt_cache (int update_nvt_cache, int register_cleanup, void (*progress) (), int skip_create_tables) { int ret; /* Initialise OMP daemon. */ if (update_nvt_cache == 0) { proctitle_set ("openvasmd: Rebuilding"); infof ("%s: Rebuilding NVT cache\n", __FUNCTION__); } else { proctitle_set ("openvasmd: Updating"); infof ("%s: Updating NVT cache\n", __FUNCTION__); } switch (init_ompd (log_config, update_nvt_cache ? -1 : -2, database, manage_max_hosts (), 0, /* Max email attachment size. */ 0, /* Max email include size. */ progress, skip_create_tables)) { case 0: break; case -2: g_critical ("%s: database is wrong version\n", __FUNCTION__); log_config_free (log_config); exit (EXIT_FAILURE); break; case -3: assert (0); case -1: default: g_critical ("%s: failed to initialise OMP daemon\n", __FUNCTION__); log_config_free (log_config); exit (EXIT_FAILURE); } /* Register the `cleanup' function. */ if (register_cleanup && atexit (&cleanup)) { g_critical ("%s: failed to register `atexit' cleanup function\n", __FUNCTION__); log_config_free (log_config); exit (EXIT_FAILURE); } /* Register the signal handlers. */ setup_signal_handler (SIGTERM, handle_termination_signal, 0); setup_signal_handler (SIGABRT, handle_sigabrt, 1); setup_signal_handler (SIGINT, handle_termination_signal, 0); setup_signal_handler (SIGHUP, handle_termination_signal, 0); setup_signal_handler (SIGQUIT, handle_termination_signal, 0); setup_signal_handler (SIGSEGV, handle_sigsegv, 1); setup_signal_handler (SIGCHLD, SIG_IGN, 0); /* Call the OMP client serving function with a special client socket * value. This invokes a scanner-only manager loop which will * request and cache the plugins, then exit. */ ret = serve_omp (NULL, NULL, update_nvt_cache ? -1 : -2, database, NULL, progress); openvas_scanner_close (); switch (ret) { case 0: return EXIT_SUCCESS; case 1: return 2; default: case -1: return EXIT_FAILURE; } } /** * @brief Rebuild NVT cache in forked child, retrying if scanner loading. * * Forks a child process to rebuild the nvt cache, retrying again if the * child process reports that the scanner is still loading. * * @param[in] update_or_rebuild Whether the nvt cache should be updated * (1) or rebuilt (0). * @param[in] register_cleanup Whether to register cleanup with atexit. * @param[in] progress Function to update progress, or NULL. * @param[in] skip_create_tables Whether to skip table creation. * * @return Exit status of child spawned to do rebuild. */ static int rebuild_nvt_cache_retry (int update_or_rebuild, int register_cleanup, void (*progress) (), int skip_create_tables) { proctitle_set ("openvasmd: Reloading"); infof ("%s: Reloading NVT cache\n", __FUNCTION__); /* Don't ignore SIGCHLD, in order to wait for child process. */ setup_signal_handler (SIGCHLD, SIG_DFL, 0); while (1) { pid_t child_pid = fork (); if (child_pid > 0) { int status, i; /* Parent: Wait for child. */ if (waitpid (child_pid, &status, 0) > 0 && WEXITSTATUS (status) != 2) return WEXITSTATUS (status); /* Child exit status == 2 means that the scanner is still loading. */ for (i = 0; i < 10; i++) { if (progress) progress (); openvas_sleep (1); } } else if (child_pid == 0) { /* Child: Try reload. */ int ret = update_or_rebuild_nvt_cache (update_or_rebuild, register_cleanup, progress, skip_create_tables); exit (ret); } } } /** * @brief Update the NVT cache in a child process. * * @return 0 success, -1 error. Always exits with EXIT_SUCCESS in child. */ static int fork_update_nvt_cache () { int pid; pid = fork (); switch (pid) { case 0: /* Child. */ /* Clean up the process. */ /** @todo This should happen via omp, maybe with "cleanup_omp ();". */ cleanup_manage_process (TRUE); if (manager_socket > -1) close (manager_socket); if (manager_socket_2 > -1) close (manager_socket_2); openvas_auth_tear_down (); /* Update the cache. */ infof (" internal NVT cache update\n"); rebuild_nvt_cache_retry (0, 0, NULL, 1); /* Exit. */ cleanup_manage_process (FALSE); exit (EXIT_SUCCESS); /*@notreached@*/ break; case -1: /* Parent when error. */ g_warning ("%s: fork: %s\n", __FUNCTION__, strerror (errno)); return -1; default: /* Parent. Continue. */ return 0; } } /** * @brief Serve incoming connections, scheduling periodically. * * Enter an infinite loop, waiting for connections and passing the work to * `accept_and_maybe_fork'. * * Periodically, call the manage schedular to start and stop scheduled tasks. */ static void serve_and_schedule () { time_t last_schedule_time = 0; sigset_t sigmask_all, sigmask_current; if (sigfillset (&sigmask_all)) { g_critical ("%s: Error filling signal set\n", __FUNCTION__); exit (EXIT_FAILURE); } if (pthread_sigmask (SIG_BLOCK, &sigmask_all, &sigmask_current)) { g_critical ("%s: Error setting signal mask\n", __FUNCTION__); exit (EXIT_FAILURE); } while (1) { int ret, nfds; fd_set readfds, exceptfds; struct timespec timeout; FD_ZERO (&readfds); FD_SET (manager_socket, &readfds); if (manager_socket_2 > -1) FD_SET (manager_socket_2, &readfds); FD_ZERO (&exceptfds); FD_SET (manager_socket, &exceptfds); if (manager_socket_2 > -1) FD_SET (manager_socket_2, &exceptfds); if (manager_socket >= manager_socket_2) nfds = manager_socket + 1; else nfds = manager_socket_2 + 1; if (termination_signal) { g_log (G_LOG_DOMAIN, G_LOG_LEVEL_DEBUG, "Received %s signal.\n", sys_siglist[termination_signal]); cleanup (); /* Raise signal again, to exit with the correct return value. */ setup_signal_handler (termination_signal, SIG_DFL, 0); pthread_sigmask (SIG_SETMASK, &sigmask_current, NULL); raise (termination_signal); } if (sighup_update_nvt_cache) { g_log (G_LOG_DOMAIN, G_LOG_LEVEL_DEBUG, "Received %s signal.\n", sys_siglist[SIGHUP]); sighup_update_nvt_cache = 0; fork_update_nvt_cache (); } if ((time (NULL) - last_schedule_time) > SCHEDULE_PERIOD) { if (manage_schedule (fork_connection_for_schedular, scheduling_enabled, &sigmask_current) < 0) exit (EXIT_FAILURE); last_schedule_time = time (NULL); } timeout.tv_sec = SCHEDULE_PERIOD; timeout.tv_nsec = 0; ret = pselect (nfds, &readfds, NULL, &exceptfds, &timeout, &sigmask_current); if (ret == -1) { /* Error occurred while selecting socket. */ if (errno == EINTR) continue; g_critical ("%s: select failed: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } if (ret > 0) { /* Have an incoming connection. */ if (FD_ISSET (manager_socket, &exceptfds)) { g_critical ("%s: exception in select\n", __FUNCTION__); exit (EXIT_FAILURE); } if ((manager_socket_2 > -1) && FD_ISSET (manager_socket_2, &exceptfds)) { g_critical ("%s: exception in select (2)\n", __FUNCTION__); exit (EXIT_FAILURE); } if (FD_ISSET (manager_socket, &readfds)) accept_and_maybe_fork (manager_socket, &sigmask_current); if ((manager_socket_2 > -1) && FD_ISSET (manager_socket_2, &readfds)) accept_and_maybe_fork (manager_socket_2, &sigmask_current); } if (manage_schedule (fork_connection_for_schedular, scheduling_enabled, &sigmask_current) < 0) exit (EXIT_FAILURE); if (termination_signal) { g_log (G_LOG_DOMAIN, G_LOG_LEVEL_DEBUG, "Received %s signal.\n", sys_siglist[termination_signal]); cleanup (); /* Raise signal again, to exit with the correct return value. */ setup_signal_handler (termination_signal, SIG_DFL, 0); pthread_sigmask (SIG_SETMASK, &sigmask_current, NULL); raise (termination_signal); } if (sighup_update_nvt_cache) { sighup_update_nvt_cache = 0; fork_update_nvt_cache (); } last_schedule_time = time (NULL); } /*@notreached@*/ } /** * @brief Sets the GnuTLS priorities for a given session. * * @param[in] session Session for which to set the priorities. * @param[in] priority Priority string. */ static void set_gnutls_priority (gnutls_session_t *session, const char *priority) { const char *errp = NULL; if (gnutls_priority_set_direct (*session, priority, &errp) == GNUTLS_E_INVALID_REQUEST) g_log (G_LOG_DOMAIN, G_LOG_LEVEL_WARNING, "Invalid GnuTLS priority: %s\n", errp); } /** * @brief Set a socket to listen for connections. * * @param[in] address_str IP or hostname to bind to. * @param[in] port_str Port to bind to. * @param[out] socket Socket listened on. */ static int manager_listen (const char *address_str, const char *port_str, int *soc) { struct sockaddr_storage address; struct sockaddr_in *addr4 = (struct sockaddr_in *) &address; struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *) &address; int port, optval; if (!address_str) return 0; if (port_str) { port = atoi (port_str); if (port <= 0 || port >= 65536) { g_warning ("Manager port must be a number between 1 and 65535"); log_config_free (); return -1; } port = htons (port); } else { struct servent *servent = getservbyname ("otp", "tcp"); if (servent) port = servent->s_port; else port = htons (OPENVASMD_PORT); } if (inet_pton (AF_INET6, address_str, &addr6->sin6_addr) > 0) { address.ss_family = AF_INET6; addr6->sin6_port = port; } else if (inet_pton (AF_INET, address_str, &addr4->sin_addr) > 0) { address.ss_family = AF_INET; addr4->sin_port = port; } else { g_warning ("Failed to create manager address %s", address_str); return -1; } if (address.ss_family == AF_INET6) *soc = socket (PF_INET6, SOCK_STREAM, 0); else *soc = socket (PF_INET, SOCK_STREAM, 0); if (manager_socket == -1) { g_warning ("Failed to create manager socket: %s", strerror (errno)); return -1; } /* The socket must have O_NONBLOCK set, in case an "asynchronous network * error" removes the connection between `select' and `accept'. */ if (fcntl (*soc, F_SETFL, O_NONBLOCK) == -1) { g_warning ("Failed to set manager socket flag: %s", strerror (errno)); return -1; } if (setsockopt (*soc, SOL_SOCKET, SO_REUSEADDR, &optval, sizeof (int))) { g_warning ("Failed to set SO_REUSEADDR on socket: %s", strerror (errno)); return -1; } if (bind (*soc, (struct sockaddr *) &address, sizeof (address)) == -1) { g_warning ("Failed to bind manager socket: %s", strerror (errno)); return -1; } if (listen (*soc, MAX_CONNECTIONS) == -1) { g_warning ("Failed to listen on manager socket: %s", strerror (errno)); return -1; } return 0; } /** * @brief Entry point to the manager. * * \if STATIC * * Setup the manager and then loop forever passing connections to * \ref accept_and_maybe_fork . * * \endif * * @param[in] argc The number of arguments in argv. * @param[in] argv The list of arguments to the program. * * @return EXIT_SUCCESS on success, EXIT_FAILURE on failure. */ int main (int argc, char** argv) { /* Process options. */ static gboolean backup_database = FALSE; static gboolean migrate_database = FALSE; static gboolean encrypt_all_credentials = FALSE; static gboolean decrypt_all_credentials = FALSE; static gboolean create_cred_enc_key = FALSE; static gboolean disable_password_policy = FALSE; static gboolean disable_scheduling = FALSE; static gboolean get_users = FALSE; static gboolean get_scanners = FALSE; static gboolean update_nvt_cache = FALSE; static gboolean rebuild_nvt_cache = FALSE; static gboolean foreground = FALSE; static gboolean print_version = FALSE; static gboolean progress = FALSE; static int max_ips_per_target = MANAGE_MAX_HOSTS; static int max_email_attachment_size = 0; static int max_email_include_size = 0; static gchar *create_user = NULL; static gchar *delete_user = NULL; static gchar *user = NULL; static gchar *create_scanner = NULL; static gchar *modify_scanner = NULL; static gchar *scanner_host = NULL; static gchar *scanner_port = NULL; static gchar *scanner_type = NULL; static gchar *scanner_ca_pub = NULL; static gchar *scanner_key_pub = NULL; static gchar *scanner_key_priv = NULL; static gchar *delete_scanner = NULL; static gchar *verify_scanner = NULL; static gchar *gnutls_priorities = "NORMAL"; static gchar *dh_params = NULL; static gchar *new_password = NULL; static gchar *optimize = NULL; static gchar *manager_address_string = NULL; static gchar *manager_address_string_2 = NULL; static gchar *manager_port_string = NULL; static gchar *manager_port_string_2 = NULL; static gchar *scanner_name = NULL; static gchar *rc_name = NULL; static gchar *role = NULL; static gchar *disable = NULL; GError *error = NULL; GOptionContext *option_context; static GOptionEntry option_entries[] = { { "backup", '\0', 0, G_OPTION_ARG_NONE, &backup_database, "Backup the database.", NULL }, { "database", 'd', 0, G_OPTION_ARG_STRING, &database, "Use as database for SQLite/Postgres.", "" }, { "disable-cmds", '\0', 0, G_OPTION_ARG_STRING, &disable, "Disable comma-separated .", "" }, { "disable-encrypted-credentials", '\0', 0, G_OPTION_ARG_NONE, &disable_encrypted_credentials, "Do not encrypt or decrypt credentials.", NULL }, {"disable-password-policy", '\0', 0, G_OPTION_ARG_NONE, &disable_password_policy, "Do not restrict passwords to the policy.", NULL}, { "disable-scheduling", '\0', 0, G_OPTION_ARG_NONE, &disable_scheduling, "Disable task scheduling.", NULL }, { "create-user", '\0', 0, G_OPTION_ARG_STRING, &create_user, "Create admin user and exit.", "" }, { "delete-user", '\0', 0, G_OPTION_ARG_STRING, &delete_user, "Delete user and exit.", "" }, { "get-users", '\0', 0, G_OPTION_ARG_NONE, &get_users, "List users and exit.", NULL }, { "create-scanner", '\0', 0, G_OPTION_ARG_STRING, &create_scanner, "Create global scanner and exit.", "" }, { "modify-scanner", '\0', 0, G_OPTION_ARG_STRING, &modify_scanner, "Modify scanner and exit.", "" }, { "scanner-name", '\0', 0, G_OPTION_ARG_STRING, &scanner_name, "Name for --modify-scanner.", "" }, { "scanner-host", '\0', 0, G_OPTION_ARG_STRING, &scanner_host, "Scanner host for --create-scanner, --rebuild and --update. Default is " OPENVASSD_ADDRESS ".", "" }, { "scanner-port", '\0', 0, G_OPTION_ARG_STRING, &scanner_port, "Scanner port for --create-scanner, --rebuild and --update. Default is " G_STRINGIFY (OPENVASSD_PORT) ".", "" }, { "scanner-type", '\0', 0, G_OPTION_ARG_STRING, &scanner_type, "Scanner type for --create-scanner. Either 'OpenVAS' or 'OSP'.", "" }, { "scanner-ca-pub", '\0', 0, G_OPTION_ARG_STRING, &scanner_ca_pub, "Scanner CA Certificate path for --[create|modify]-scanner.", "" }, { "scanner-key-pub", '\0', 0, G_OPTION_ARG_STRING, &scanner_key_pub, "Scanner Certificate path for --[create|modify]-scanner.", "" }, { "scanner-key-priv", '\0', 0, G_OPTION_ARG_STRING, &scanner_key_priv, "Scanner private key path for --[create|modify]-scanner.", "" }, { "verify-scanner", '\0', 0, G_OPTION_ARG_STRING, &verify_scanner, "Verify scanner and exit.", "" }, { "delete-scanner", '\0', 0, G_OPTION_ARG_STRING, &delete_scanner, "Delete scanner and exit.", "" }, { "get-scanners", '\0', 0, G_OPTION_ARG_NONE, &get_scanners, "List scanners and exit.", NULL }, { "foreground", 'f', 0, G_OPTION_ARG_NONE, &foreground, "Run in foreground.", NULL }, { "listen", 'a', 0, G_OPTION_ARG_STRING, &manager_address_string, "Listen on
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        .", "
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        " }, { "listen2", '\0', 0, G_OPTION_ARG_STRING, &manager_address_string_2, "Listen also on
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        .", "
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        " }, { "max-ips-per-target", '\0', 0, G_OPTION_ARG_INT, &max_ips_per_target, "Maximum number of IPs per target.", ""}, { "max-email-attachment-size", '\0', 0, G_OPTION_ARG_INT, &max_email_attachment_size, "Maximum size of alert email attachments, in bytes.", ""}, { "max-email-include-size", '\0', 0, G_OPTION_ARG_INT, &max_email_include_size, "Maximum size of inlined content in alert emails, in bytes.", ""}, { "migrate", 'm', 0, G_OPTION_ARG_NONE, &migrate_database, "Migrate the database and exit.", NULL }, { "create-credentials-encryption-key", '\0', 0, G_OPTION_ARG_NONE, &create_cred_enc_key, "Create a key to encrypt credentials.", NULL }, { "encrypt-all-credentials", '\0', 0, G_OPTION_ARG_NONE, &encrypt_all_credentials, "(Re-)Encrypt all credentials.", NULL }, { "decrypt-all-credentials", '\0', G_OPTION_FLAG_HIDDEN, G_OPTION_ARG_NONE, &decrypt_all_credentials, NULL, NULL }, { "new-password", '\0', 0, G_OPTION_ARG_STRING, &new_password, "Modify user's password and exit.", "" }, { "optimize", '\0', 0, G_OPTION_ARG_STRING, &optimize, "Run an optimization: vacuum, analyze, cleanup-config-prefs, remove-open-port-results, cleanup-port-names, cleanup-result-severities, rebuild-report-cache or update-report-cache.", "" }, { "port", 'p', 0, G_OPTION_ARG_STRING, &manager_port_string, "Use port number .", "" }, { "port2", '\0', 0, G_OPTION_ARG_STRING, &manager_port_string_2, "Use port number for address 2.", "" }, { "progress", '\0', 0, G_OPTION_ARG_NONE, &progress, "Display progress during --rebuild and --update.", NULL }, { "rebuild", '\0', 0, G_OPTION_ARG_NONE, &rebuild_nvt_cache, "Rebuild the NVT cache and exit.", NULL }, { "role", '\0', 0, G_OPTION_ARG_STRING, &role, "Role for --create-user and --get-users.", "" }, { "update", 'u', 0, G_OPTION_ARG_NONE, &update_nvt_cache, "Update the NVT cache and exit.", NULL }, { "user", '\0', 0, G_OPTION_ARG_STRING, &user, "User for --new-password.", "" }, { "gnutls-priorities", '\0', 0, G_OPTION_ARG_STRING, &gnutls_priorities, "Sets the GnuTLS priorities for the Manager socket.", "" }, { "dh-params", '\0', 0, G_OPTION_ARG_STRING, &dh_params, "Diffie-Hellman parameters file", "" }, { "verbose", 'v', 0, G_OPTION_ARG_NONE, &verbose, "Print tracing messages.", NULL }, { "version", '\0', 0, G_OPTION_ARG_NONE, &print_version, "Print version and exit.", NULL }, { NULL } }; option_context = g_option_context_new ("- Manager of the Open Vulnerability Assessment System"); g_option_context_add_main_entries (option_context, option_entries, NULL); if (!g_option_context_parse (option_context, &argc, &argv, &error)) { g_option_context_free (option_context); g_critical ("%s: %s\n\n", __FUNCTION__, error->message); exit (EXIT_FAILURE); } g_option_context_free (option_context); if (print_version) { printf ("OpenVAS Manager %s\n", OPENVASMD_VERSION); printf ("Manager DB revision %i\n", manage_db_supported_version ()); printf ("Copyright (C) 2010-2015 Greenbone Networks GmbH\n"); printf ("License GPLv2+: GNU GPL version 2 or later\n"); printf ("This is free software: you are free to change and redistribute it.\n" "There is NO WARRANTY, to the extent permitted by law.\n\n"); exit (EXIT_SUCCESS); } /* Set process title. */ proctitle_init (argc, argv); proctitle_set ("openvasmd: Initializing."); /* Setup initial signal handlers. */ setup_signal_handler (SIGABRT, handle_sigabrt_simple, 1); /* Switch to UTC for scheduling. */ if (migrate_database && manage_migrate_needs_timezone (log_config, database)) infof ("%s: leaving TZ as is, for migrator\n", __FUNCTION__); else if (setenv ("TZ", "utc 0", 1) == -1) { g_critical ("%s: failed to set timezone\n", __FUNCTION__); exit (EXIT_FAILURE); } tzset (); /* Set umask to hoard created files, including the database. */ umask (S_IRGRP | S_IWGRP | S_IXGRP | S_IROTH | S_IWOTH | S_IXOTH); /* Setup logging. */ rc_name = g_build_filename (OPENVAS_SYSCONF_DIR, "openvasmd_log.conf", NULL); if (g_file_test (rc_name, G_FILE_TEST_EXISTS)) log_config = load_log_configuration (rc_name); g_free (rc_name); setup_log_handlers (log_config); #if !GLIB_CHECK_VERSION (2, 32, 0) if (!g_thread_supported ()) g_thread_init (NULL); #endif infof (" OpenVAS Manager version %s (DB revision %i)\n", OPENVASMD_VERSION, manage_db_supported_version ()); if (backup_database) { infof (" Backing up database.\n"); /* Backup the database and then exit. */ switch (manage_backup_db (database)) { case 0: infof (" Backup succeeded.\n"); return EXIT_SUCCESS; case -1: g_critical ("%s: database backup failed\n", __FUNCTION__); return EXIT_FAILURE; default: assert (0); g_critical ("%s: strange return from manage_backup_db\n", __FUNCTION__); return EXIT_FAILURE; } } if (disable_password_policy) openvas_disable_password_policy (); else { gchar *password_policy; password_policy = g_build_filename (OPENVAS_SYSCONF_DIR, "pwpolicy.conf", NULL); if (g_file_test (password_policy, G_FILE_TEST_EXISTS) == FALSE) g_warning ("%s: password policy missing: %s\n", __FUNCTION__, password_policy); g_free (password_policy); } if (optimize) { g_message (" Optimizing: %s.\n", optimize); /* Create the user and then exit. */ switch (manage_optimize (log_config, database, optimize)) { case 0: log_config_free (log_config); return EXIT_SUCCESS; case 1: log_config_free (log_config); return EXIT_FAILURE; case -2: g_critical ("%s: database is wrong version\n", __FUNCTION__); log_config_free (log_config); return EXIT_FAILURE; case -3: g_critical ("%s: database must be initialised" " (with --update or --rebuild)\n", __FUNCTION__); log_config_free (log_config); return EXIT_FAILURE; case -1: default: g_critical ("%s: internal error\n", __FUNCTION__); log_config_free (log_config); return EXIT_FAILURE; } return EXIT_SUCCESS; } if (create_scanner) { int ret; scanner_type_t type; char *stype; if (!scanner_host) scanner_host = OPENVASSD_ADDRESS; if (!scanner_port) scanner_port = G_STRINGIFY (OPENVASSD_PORT); if (!scanner_ca_pub) scanner_ca_pub = CACERT; if (!scanner_key_pub) scanner_key_pub = CLIENTCERT; if (!scanner_key_priv) scanner_key_priv = CLIENTKEY; if (!scanner_type || !strcasecmp (scanner_type, "OpenVAS")) type = SCANNER_TYPE_OPENVAS; else if (!strcasecmp (scanner_type, "OSP")) type = SCANNER_TYPE_OSP; else { g_warning ("Invalid scanner type value.\n"); return EXIT_FAILURE; } /* Create the scanner and then exit. */ stype = g_strdup_printf ("%u", type); ret = manage_create_scanner (log_config, database, create_scanner, scanner_host, scanner_port, stype, scanner_ca_pub, scanner_key_pub, scanner_key_priv); g_free (stype); log_config_free (log_config); switch (ret) { case 0: return EXIT_SUCCESS; case -2: g_warning ("%s: database is wrong version\n", __FUNCTION__); return EXIT_FAILURE; case -3: g_warning ("%s: database must be initialised" " (with --update or --rebuild)\n", __FUNCTION__); return EXIT_FAILURE; case -1: g_warning ("%s: internal error\n", __FUNCTION__); return EXIT_FAILURE; default: return EXIT_FAILURE; } return EXIT_SUCCESS; } if (modify_scanner) { int ret; char *stype; if (scanner_type) { scanner_type_t type; if (strcasecmp (scanner_type, "OpenVAS") == 0) type = SCANNER_TYPE_OPENVAS; else if (strcasecmp (scanner_type, "OSP") == 0) type = SCANNER_TYPE_OSP; else { g_warning ("Invalid scanner type value.\n"); return EXIT_FAILURE; } stype = g_strdup_printf ("%u", type); } else stype = NULL; /* Modify the scanner and then exit. */ ret = manage_modify_scanner (log_config, database, modify_scanner, scanner_name, scanner_host, scanner_port, stype, scanner_ca_pub, scanner_key_pub, scanner_key_priv); g_free (stype); log_config_free (log_config); switch (ret) { case 0: return EXIT_SUCCESS; case -2: g_warning ("%s: database is wrong version\n", __FUNCTION__); return EXIT_FAILURE; case -3: g_warning ("%s: database must be initialised" " (with --update or --rebuild)\n", __FUNCTION__); return EXIT_FAILURE; case -1: g_warning ("%s: internal error\n", __FUNCTION__); return EXIT_FAILURE; default: return EXIT_FAILURE; } return EXIT_SUCCESS; } if (create_user) { infof (" Creating admin user.\n"); /* Create the user and then exit. */ switch (manage_create_user (log_config, database, create_user, role)) { case 0: log_config_free (log_config); return EXIT_SUCCESS; case -2: g_critical ("%s: database is wrong version\n", __FUNCTION__); log_config_free (log_config); return EXIT_FAILURE; case -3: g_critical ("%s: database must be initialised" " (with --update or --rebuild)\n", __FUNCTION__); log_config_free (log_config); return EXIT_FAILURE; case -1: default: g_critical ("%s: internal error\n", __FUNCTION__); log_config_free (log_config); return EXIT_FAILURE; } return EXIT_SUCCESS; } if (delete_user) { infof (" Deleting user.\n"); /* Delete the user and then exit. */ switch (manage_delete_user (log_config, database, delete_user)) { case 0: log_config_free (log_config); return EXIT_SUCCESS; case 2: g_critical ("%s: failed to find user '%s'\n", __FUNCTION__, delete_user); log_config_free (log_config); return EXIT_FAILURE; case 4: g_critical ("%s: user has active tasks\n", __FUNCTION__); log_config_free (log_config); return EXIT_FAILURE; case -2: g_critical ("%s: database is wrong version\n", __FUNCTION__); log_config_free (log_config); return EXIT_FAILURE; case -3: g_critical ("%s: database must be initialised" " (with --update or --rebuild)\n", __FUNCTION__); log_config_free (log_config); return EXIT_FAILURE; case -1: default: g_critical ("%s: internal error\n", __FUNCTION__); log_config_free (log_config); return EXIT_FAILURE; } } if (get_users) { /* List the users and then exit. */ switch (manage_get_users (log_config, database, role)) { case 0: log_config_free (log_config); return EXIT_SUCCESS; case -2: g_critical ("%s: database is wrong version\n", __FUNCTION__); log_config_free (log_config); return EXIT_FAILURE; case -3: g_critical ("%s: database must be initialised" " (with --update or --rebuild)\n", __FUNCTION__); log_config_free (log_config); return EXIT_FAILURE; case -1: default: g_critical ("%s: internal error\n", __FUNCTION__); log_config_free (log_config); return EXIT_FAILURE; } } if (get_scanners) { /* List the users and then exit. */ int ret = manage_get_scanners (log_config, database); log_config_free (log_config); switch (ret) { case 0: return EXIT_SUCCESS; case -2: g_warning ("%s: database is wrong version\n", __FUNCTION__); return EXIT_FAILURE; case -3: g_warning ("%s: database must be initialised" " (with --update or --rebuild)\n", __FUNCTION__); return EXIT_FAILURE; case -1: default: g_warning ("%s: internal error\n", __FUNCTION__); return EXIT_FAILURE; } } if (delete_scanner) { int ret; /* Delete the scanner and then exit. */ ret = manage_delete_scanner (log_config, database, delete_scanner); log_config_free (log_config); switch (ret) { case 0: return EXIT_SUCCESS; case 1: case 2: case 3: return EXIT_FAILURE; case -2: g_warning ("%s: database is wrong version\n", __FUNCTION__); return EXIT_FAILURE; case -3: g_warning ("%s: database must be initialised" " (with --update or --rebuild)\n", __FUNCTION__); return EXIT_FAILURE; default: g_warning ("%s: internal error\n", __FUNCTION__); return EXIT_FAILURE; } } if (verify_scanner) { int ret; /* Delete the scanner and then exit. */ ret = manage_verify_scanner (log_config, database, verify_scanner); log_config_free (log_config); switch (ret) { case 0: return EXIT_SUCCESS; case 1: case 2: case 3: return EXIT_FAILURE; case -2: g_warning ("%s: database is wrong version\n", __FUNCTION__); return EXIT_FAILURE; case -3: g_warning ("%s: database must be initialised" " (with --update or --rebuild)\n", __FUNCTION__); return EXIT_FAILURE; default: g_warning ("%s: internal error\n", __FUNCTION__); return EXIT_FAILURE; } } if (new_password) { /* Modify the password and then exit. */ if (user == NULL) { g_warning ("%s: --user required\n", __FUNCTION__); return EXIT_FAILURE; } switch (manage_set_password (log_config, database, user, new_password)) { case 0: log_config_free (log_config); return EXIT_SUCCESS; case 1: g_critical ("%s: failed to find user\n", __FUNCTION__); log_config_free (log_config); return EXIT_FAILURE; case -2: g_critical ("%s: database is wrong version\n", __FUNCTION__); log_config_free (log_config); return EXIT_FAILURE; case -3: g_critical ("%s: database must be initialised" " (with --update or --rebuild)\n", __FUNCTION__); log_config_free (log_config); return EXIT_FAILURE; case -1: default: g_critical ("%s: internal error\n", __FUNCTION__); log_config_free (log_config); return EXIT_FAILURE; } } if (migrate_database) { infof (" Migrating database.\n"); /* Migrate the database to the version supported by this manager. */ switch (manage_migrate (log_config, database)) { case 0: infof (" Migration succeeded.\n"); return EXIT_SUCCESS; case 1: g_warning ("%s: databases are already at the supported version\n", __FUNCTION__); return EXIT_SUCCESS; case 2: g_warning ("%s: database migration too hard\n", __FUNCTION__); return EXIT_FAILURE; case 11: g_warning ("%s: cannot migrate SCAP database\n", __FUNCTION__); return EXIT_FAILURE; case 12: g_warning ("%s: cannot migrate CERT database\n", __FUNCTION__); return EXIT_FAILURE; case -1: g_critical ("%s: database migration failed\n", __FUNCTION__); return EXIT_FAILURE; case -11: g_critical ("%s: SCAP database migration failed\n", __FUNCTION__); return EXIT_FAILURE; case -12: g_critical ("%s: CERT database migration failed\n", __FUNCTION__); return EXIT_FAILURE; default: assert (0); g_critical ("%s: strange return from manage_migrate\n", __FUNCTION__); return EXIT_FAILURE; } } /* Option to create an encryption key for credentials. This is * optional because such a key will be created anyway if needed. */ if (create_cred_enc_key) { infof (" Creating credentials encryption key.\n"); switch (lsc_crypt_create_key ()) { case 0: fprintf (stderr, "Key creation succeeded.\n"); return EXIT_SUCCESS; case 1: fprintf (stderr, "Key already exists.\n"); return EXIT_SUCCESS; default: break; } fprintf (stderr, "Key creation failed.\n"); return EXIT_FAILURE; } if (encrypt_all_credentials) { infof (" (Re-)encrypting all credentials.\n"); switch (manage_encrypt_all_credentials (log_config, database, FALSE)) { case 0: break; case -2: g_critical ("%s: database is wrong version\n", __FUNCTION__); fprintf (stderr, "Decryption failed.\n"); log_config_free (log_config); return EXIT_FAILURE; case -3: g_critical ("%s: database must be initialised" " (with --update or --rebuild)\n", __FUNCTION__); fprintf (stderr, "Decryption failed.\n"); log_config_free (log_config); return EXIT_FAILURE; case -1: default: g_critical ("%s: internal error\n", __FUNCTION__); fprintf (stderr, "Decryption failed.\n"); log_config_free (log_config); return EXIT_FAILURE; } fprintf (stderr, "Encryption succeeded.\n"); log_config_free (log_config); return EXIT_SUCCESS; } if (decrypt_all_credentials) { infof (" Decrypting all credentials.\n"); switch (manage_encrypt_all_credentials (log_config, database, TRUE)) { case 0: break; case -2: g_critical ("%s: database is wrong version\n", __FUNCTION__); fprintf (stderr, "Decryption failed.\n"); log_config_free (log_config); return EXIT_FAILURE; case -3: g_critical ("%s: database must be initialised" " (with --update or --rebuild)\n", __FUNCTION__); fprintf (stderr, "Decryption failed.\n"); log_config_free (log_config); return EXIT_FAILURE; case -1: default: g_critical ("%s: internal error\n", __FUNCTION__); fprintf (stderr, "Decryption failed.\n"); log_config_free (log_config); return EXIT_FAILURE; } fprintf (stderr, "Decryption succeeded.\n"); log_config_free (log_config); return EXIT_SUCCESS; } /* Complete option processing. */ if (update_nvt_cache || rebuild_nvt_cache) { /* Run the NVT caching manager: update NVT cache and then exit. */ int ret; /* If --scanner-host or --scanner-port are provided, use these, instead of * the default scanner. */ if (scanner_host || scanner_port) { if (!scanner_host) scanner_host = OPENVASSD_ADDRESS; if (!scanner_port) scanner_port = G_STRINGIFY (OPENVASSD_PORT); if (openvas_scanner_set_address (scanner_host, atoi (scanner_port))) { g_warning ("Failed to set %s:%s as scanner\n", scanner_host, scanner_port); return EXIT_FAILURE; } if (openvas_scanner_connect () || openvas_scanner_init (1)) { openvas_scanner_close (); return EXIT_FAILURE; } } if (progress) { if (update_nvt_cache) printf ("Updating NVT cache... \\"); else printf ("Rebuilding NVT cache... \\"); fflush (stdout); } ret = rebuild_nvt_cache_retry (update_nvt_cache, 1, progress ? spin_progress : NULL, 0); if (progress) { putchar ('\b'); if (ret == EXIT_SUCCESS) printf ("done.\n"); else printf ("failed.\n"); fflush (stdout); } return ret; } /* Run the standard manager. */ if (foreground == FALSE) { /* Fork into the background. */ pid_t pid = fork (); switch (pid) { case 0: /* Child. */ break; case -1: /* Parent when error. */ g_critical ("%s: failed to fork into background: %s\n", __FUNCTION__, strerror (errno)); log_config_free (log_config); exit (EXIT_FAILURE); break; default: /* Parent. */ log_config_free (log_config); exit (EXIT_SUCCESS); break; } } /* Initialise OMP daemon. */ switch (init_ompd (log_config, 0, database, max_ips_per_target, max_email_attachment_size, max_email_include_size, NULL, 0)) { case 0: break; case -2: g_critical ("%s: database is wrong version\n", __FUNCTION__); log_config_free (log_config); exit (EXIT_FAILURE); break; case -3: g_critical ("%s: database must be initialised" " (with --update or --rebuild)\n", __FUNCTION__); log_config_free (log_config); exit (EXIT_FAILURE); break; case -4: g_critical ("%s: --max-ips-per-target out of range\n", __FUNCTION__); log_config_free (log_config); exit (EXIT_FAILURE); break; case -1: default: g_critical ("%s: failed to initialise OMP daemon\n", __FUNCTION__); log_config_free (log_config); exit (EXIT_FAILURE); } /* Register the `cleanup' function. */ if (atexit (&cleanup)) { g_critical ("%s: failed to register `atexit' cleanup function\n", __FUNCTION__); log_config_free (log_config); exit (EXIT_FAILURE); } /* Set our pidfile. */ if (pidfile_create ("openvasmd")) exit (EXIT_FAILURE); /* Setup global variables. */ if (disable) disabled_commands = g_strsplit (disable, ",", 0); scheduling_enabled = (disable_scheduling == FALSE); /* Create the manager socket(s). */ #if LOG /* Open the log file. */ if (g_mkdir_with_parents (OPENVAS_LOG_DIR, 0755) /* "rwxr-xr-x" */ == -1) { g_critical ("%s: failed to create log directory: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } log_stream = fopen (LOG_FILE, "w"); if (log_stream == NULL) { g_critical ("%s: failed to open log file: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } #endif /* Register the signal handlers. */ setup_signal_handler (SIGTERM, handle_termination_signal, 0); setup_signal_handler (SIGABRT, handle_sigabrt, 1); setup_signal_handler (SIGINT, handle_termination_signal, 0); setup_signal_handler (SIGHUP, handle_sighup_update, 0); setup_signal_handler (SIGQUIT, handle_termination_signal, 0); setup_signal_handler (SIGSEGV, handle_sigsegv, 1); setup_signal_handler (SIGCHLD, SIG_IGN, 0); /* Setup security. */ if (openvas_server_new (GNUTLS_SERVER, CACERT, SCANNERCERT, SCANNERKEY, &client_session, &client_credentials)) { g_critical ("%s: client server initialisation failed\n", __FUNCTION__); exit (EXIT_FAILURE); } set_gnutls_priority (&client_session, gnutls_priorities); if (dh_params && set_gnutls_dhparams (client_credentials, dh_params)) g_warning ("Couldn't set DH parameters from %s\n", dh_params); if (disable_encrypted_credentials) g_message ("Encryption of credentials has been disabled."); if (manager_listen (manager_address_string ?: "::", manager_port_string, &manager_socket)) return EXIT_FAILURE; if (manager_listen (manager_address_string_2, manager_port_string_2, &manager_socket_2)) return EXIT_FAILURE; /* Initialize the authentication system. */ // TODO Should be part of manage init. if (openvas_auth_init_funcs (manage_user_hash, manage_user_set_role, manage_user_exists, manage_user_uuid)) exit (EXIT_FAILURE); /* Initialise the process for manage_schedule. */ init_manage_process (0, database); proctitle_set ("openvasmd"); /* Enter the main forever-loop. */ serve_and_schedule (); /*@notreached@*/ return EXIT_SUCCESS; } openvas-manager-6.0.9/src/sql.c000644 001751 001751 00000043051 12631501055 017414 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Manager Manage library: the SQL library. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2009,2010,2012 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #include "sql.h" #include "tracef.h" #include #include #include #include /* Headers of internal symbols defined in backend files. */ int sql_prepare_internal (int, int, const char*, va_list, sql_stmt_t **); int sql_exec_internal (int, sql_stmt_t *); int sql_explain_internal (const char*, va_list); int sql_explain (const char*, ...); /* Helpers. */ /** * @brief Sleep for some number of microseconds, handling interrupts. * * @param[in] microseconds Number of microseconds. * * @return 0 success, -1 error (with errno set). */ int openvas_usleep (unsigned int microseconds) { struct timespec a, b, *requested, *remaining; int ret; requested = &a; remaining = &b; requested->tv_sec = microseconds / 1000000; requested->tv_nsec = (microseconds % 1000000) * 1000; while ((ret = nanosleep (requested, remaining)) && (errno == EINTR)) { struct timespec *temp; temp = requested; requested = remaining; remaining = temp; } if (ret) return -1; return 0; } /** * @brief Sleep for some number of seconds, handling interrupts. * * @param[in] seconds Number of seconds. * * @return 0 success, -1 error (with errno set). */ int openvas_sleep (unsigned int seconds) { return openvas_usleep (seconds * 1000000); } /** * @brief Quotes a string of a known length to be passed to sql statements. * * @param[in] string String to quote. * @param[in] length Size of \p string. * * @return Freshly allocated, quoted string. Free with g_free. */ gchar* sql_nquote (const char* string, size_t length) { gchar *new, *new_start; const gchar *start, *end; int count = 0; assert (string); /* Count number of apostrophes. */ start = string; while ((start = strchr (start, '\''))) start++, count++; /* Allocate new string. */ new = new_start = g_malloc0 (length + count + 1); /* Copy string, replacing apostrophes with double apostrophes. */ start = string; end = string + length; for (; start < end; start++, new++) { char ch = *start; if (ch == '\'') { *new = '\''; new++; *new = '\''; } else *new = ch; } return new_start; } /** * @brief Quotes a string to be passed to sql statements. * * @param[in] string String to quote, has to be \\0 terminated. * * @return Freshly allocated, quoted string. Free with g_free. */ gchar* sql_quote (const char* string) { assert (string); return sql_nquote (string, strlen (string)); } /** * @brief Get the SQL insert expression for a string. * * @param[in] string The string, which may be NULL. * * @return Freshly allocated expression suitable for an INSERT statement, * including SQL quotation marks. */ gchar * sql_insert (const char *string) { if (string) { gchar *quoted_value = sql_quote (string); gchar *insert = g_strdup_printf ("'%s'", quoted_value); g_free (quoted_value); return insert; } return g_strdup ("NULL"); } /** * @brief Perform an SQL statement. * * @param[in] retry Whether to keep retrying while database is busy or locked. * @param[in] sql Format string for SQL statement. * @param[in] args Arguments for format string. * * @return 0 success, 1 gave up (even when retry given), -1 error. */ int sqlv (int retry, char* sql, va_list args) { while (1) { int ret; sql_stmt_t* stmt; va_list args_copy; /* Prepare statement. * Copy args for this because a va_list can only be used once. */ va_copy (args_copy, args); ret = sql_prepare_internal (retry, 1, sql, args_copy, &stmt); va_end (args_copy); if (ret == -1) g_warning ("%s: sql_prepare_internal failed\n", __FUNCTION__); if (ret) return ret; /* Run statement. */ while ((ret = sql_exec_internal (retry, stmt)) == 1); if (ret == -1) g_warning ("%s: sql_exec_internal failed\n", __FUNCTION__); sql_finalize (stmt); if (ret == 2) continue; if (ret == -2) return 1; assert (ret == -1 || ret == 0); return ret; } } /** * @brief Perform an SQL statement, retrying if database is busy or locked. * * @param[in] sql Format string for SQL statement. * @param[in] ... Arguments for format string. */ void sql (char* sql, ...) { while (1) { va_list args; int ret; va_start (args, sql); ret = sqlv (1, sql, args); va_end (args); if (ret == -1) abort (); if (ret == 1) /* Gave up with statement reset. */ continue; break; } } /** * @brief Perform an SQL statement, retrying if database is busy or locked. * * Return on error, instead of aborting. * * @param[in] sql Format string for SQL statement. * @param[in] ... Arguments for format string. * * @return 0 success, -1 error. */ int sql_error (char* sql, ...) { int ret; while (1) { va_list args; va_start (args, sql); ret = sqlv (1, sql, args); va_end (args); if (ret == 1) /* Gave up with statement reset. */ continue; break; } return ret; } /** * @brief Perform an SQL statement, giving up if database is busy or locked. * * @param[in] sql Format string for SQL statement. * @param[in] ... Arguments for format string. * * @return 0 success, 1 gave up, -1 error. */ int sql_giveup (char* sql, ...) { int ret; va_list args; va_start (args, sql); ret = sqlv (0, sql, args); va_end (args); return ret; } /** * @brief Perform an SQL statement, without logging. * * @param[in] sql Format string for SQL statement. * @param[in] ... Arguments for format string. */ void sql_quiet (char* sql, ...) { int ret; sql_stmt_t *stmt; va_list args; /* Prepare statement. */ while (1) { va_start (args, sql); ret = sql_prepare_internal (1, 0, sql, args, &stmt); va_end (args); if (ret) { g_warning ("%s: sql_prepare failed\n", __FUNCTION__); abort (); } /* Run statement. */ while ((ret = sql_exec_internal (1, stmt)) == 1); if (ret == -1) { g_warning ("%s: sql_exec_internal failed\n", __FUNCTION__); abort (); } if (ret == -2 || ret == 2) { /* Busy or locked, with statement reset. Or schema changed. */ sql_finalize (stmt); continue; } break; } sql_finalize (stmt); } /** * @brief Get a particular cell from a SQL query. * * @param[in] log Whether to do tracef logging. * @param[in] sql Format string for SQL query. * @param[in] args Arguments for format string. * @param[out] stmt_return Return from statement. * * @return 0 success, 1 too few rows, -1 error. */ static int sql_x_internal (int log, char* sql, va_list args, sql_stmt_t** stmt_return) { int ret; assert (stmt_return); while (1) { /* Prepare statement. * Copy args for this because a va_list can only be used once. */ va_list args_copy; va_copy (args_copy, args); ret = sql_prepare_internal (1, log, sql, args_copy, stmt_return); va_end (args_copy); if (ret) { g_warning ("%s: sql_prepare failed\n", __FUNCTION__); return -1; } /* Run statement. */ ret = sql_exec_internal (1, *stmt_return); if (ret == -1) { g_warning ("%s: sql_exec_internal failed\n", __FUNCTION__); return -1; } if (ret == 0) /* Too few rows. */ return 1; if (ret == -2 || ret == 2) { /* Busy or locked, with statement reset. Or schema changed. */ sql_finalize (*stmt_return); continue; } break; } assert (ret == 1); if (log) tracef (" sql_x end\n"); return 0; } /** * @brief Get a particular cell from a SQL query. * * Do logging as usual. * * @param[in] sql Format string for SQL query. * @param[in] args Arguments for format string. * @param[out] stmt_return Return from statement. * * @return 0 success, 1 too few rows, -1 error. */ int sql_x (char* sql, va_list args, sql_stmt_t** stmt_return) { return sql_x_internal (1, sql, args, stmt_return); } /** * @brief Get the first value from a SQL query, as a double. * * @warning Aborts on invalid queries. * * @warning Aborts when the query returns fewer rows than \p row. The * caller must ensure that the query will return sufficient rows. * * @param[in] sql Format string for SQL query. * @param[in] ... Arguments for format string. * * @return Result of the query as an integer. */ double sql_double (char* sql, ...) { sql_stmt_t* stmt; va_list args; double ret; int sql_x_ret; va_start (args, sql); sql_x_ret = sql_x (sql, args, &stmt); va_end (args); if (sql_x_ret) { sql_finalize (stmt); abort (); } ret = sql_column_double (stmt, 0); sql_finalize (stmt); return ret; } /** * @brief Get a particular cell from a SQL query, as an int. * * @warning Aborts on invalid queries. * * @warning Aborts when the query returns fewer rows than \p row. The * caller must ensure that the query will return sufficient rows. * * @param[in] sql Format string for SQL query. * @param[in] ... Arguments for format string. * * @return Result of the query as an integer. */ int sql_int (char* sql, ...) { sql_stmt_t* stmt; va_list args; int ret; int sql_x_ret; va_start (args, sql); sql_x_ret = sql_x (sql, args, &stmt); va_end (args); if (sql_x_ret) { sql_finalize (stmt); abort (); } ret = sql_column_int (stmt, 0); sql_finalize (stmt); return ret; } /** * @brief Get a particular cell from a SQL query, as an string. * * @param[in] sql Format string for SQL query. * @param[in] ... Arguments for format string. * * @return Freshly allocated string containing the result, NULL otherwise. * NULL means that either the selected value was NULL or there were * no rows in the result. */ char* sql_string (char* sql, ...) { sql_stmt_t* stmt; const char* ret2; char* ret; int sql_x_ret; va_list args; va_start (args, sql); sql_x_ret = sql_x (sql, args, &stmt); va_end (args); if (sql_x_ret) { sql_finalize (stmt); return NULL; } ret2 = sql_column_text (stmt, 0); ret = g_strdup (ret2); sql_finalize (stmt); return ret; } /** * @brief Get a particular cell from a SQL query, as an int64. * * @param[in] ret Return value. * @param[in] sql Format string for SQL query. * @param[in] ... Arguments for format string. * * @return 0 success, 1 too few rows, -1 error. */ int sql_int64 (long long int* ret, char* sql, ...) { sql_stmt_t* stmt; int sql_x_ret; va_list args; va_start (args, sql); sql_x_ret = sql_x (sql, args, &stmt); va_end (args); switch (sql_x_ret) { case 0: break; case 1: sql_finalize (stmt); return 1; break; default: assert (0); /* Fall through. */ case -1: sql_finalize (stmt); return -1; break; } *ret = sql_column_int64 (stmt, 0); sql_finalize (stmt); return 0; } /** * @brief Write debug messages with the query plan for an SQL query to the log. * * @param[in] sql Format string for the SQL query. * @param[in] ... Format string arguments. * * @return 0 success, -1 error. */ int sql_explain (const char *sql, ...) { int ret; va_list args; va_start (args, sql); ret = sql_explain_internal (sql, args); va_end (args); return ret; } /* Iterators. */ /** * @brief Initialise an iterator. * * @param[in] iterator Iterator. * @param[in] stmt Statement. */ void init_prepared_iterator (iterator_t* iterator, sql_stmt_t* stmt) { iterator->done = FALSE; iterator->stmt = stmt; iterator->prepared = 1; iterator->crypt_ctx = NULL; tracef (" sql: init prepared %p\n", stmt); } /** * @brief Initialise an iterator. * * @param[in] iterator Iterator. * @param[in] sql Format string for SQL. */ void init_iterator (iterator_t* iterator, const char* sql, ...) { int ret; sql_stmt_t* stmt; va_list args; iterator->done = FALSE; iterator->prepared = 0; iterator->crypt_ctx = NULL; va_start (args, sql); ret = sql_prepare_internal (1, 1, sql, args, &stmt); va_end (args); if (ret) { g_warning ("%s: sql_prepare failed\n", __FUNCTION__); abort (); } iterator->stmt = stmt; } /** * @brief Get a double column from an iterator. * * @param[in] iterator Iterator. * @param[in] col Column offset. * * @return Value of given column. */ double iterator_double (iterator_t* iterator, int col) { if (iterator->done) abort (); return sql_column_double (iterator->stmt, col); } /** * @brief Get a int column from an iterator. * * @param[in] iterator Iterator. * @param[in] col Column offset. * * @return Value of given column. */ int iterator_int (iterator_t* iterator, int col) { if (iterator->done) abort (); return sql_column_int (iterator->stmt, col); } /** * @brief Get an integer column from an iterator. * * @param[in] iterator Iterator. * @param[in] col Column offset. * * @return Value of given column. */ long long int iterator_int64 (iterator_t* iterator, int col) { if (iterator->done) abort (); return sql_column_int64 (iterator->stmt, col); } /** * @brief Get a string column from an iterator. * * @param[in] iterator Iterator. * @param[in] col Column offset. * * @return Value of given column. */ const char* iterator_string (iterator_t* iterator, int col) { if (iterator->done) abort (); return sql_column_text (iterator->stmt, col); } /** * @brief Cleanup an iterator. * * @param[in] iterator Iterator. */ void cleanup_iterator (iterator_t* iterator) { if (iterator == NULL) { g_warning ("%s: null iterator pointer.\n", __FUNCTION__); return; } if (iterator->prepared == 0) sql_finalize (iterator->stmt); if (iterator->crypt_ctx) { lsc_crypt_release (iterator->crypt_ctx); iterator->crypt_ctx = NULL; } } /** * @brief Increment an iterator. * * @param[in] iterator Iterator. * * @return TRUE if there was a next item, else FALSE. */ gboolean next (iterator_t* iterator) { int ret; if (iterator->done) return FALSE; lsc_crypt_flush (iterator->crypt_ctx); while (1) { ret = sql_exec_internal (1, iterator->stmt); if (ret == 0) { iterator->done = TRUE; return FALSE; } if (ret == -1) { g_warning ("%s: sql_exec_internal failed\n", __FUNCTION__); abort (); } if (ret == -2) { /* Busy or locked, with statement reset. Just try step again like * we used to do in sql_exec_internal. We're not supposed to do this * for SQLite, but it would mean quite a bit of reworking in the * callers to be able to handle this case. */ g_warning ("%s: stepping after reset\n", __FUNCTION__); continue; } if (ret == 2) { /* Schema changed, for example an internal change due to a VACUUM. * Retrying will result in the same error, so abort. We lock * exclusively around the VACUUM in --optimize, so hopefully when * using --optimize the schema error will happen earlier, in the * the init function for the iterator. * * This only applies to SQLite3. */ g_warning ("%s: schema error.\n" " This is possibly due to running VACUUM while Manager\n" " is running. Restart Manager. In future use\n" " --optimize=vacuum instead of running VACUUM" " directly.\n", __FUNCTION__); abort (); } break; } assert (ret == 1); return TRUE; } /* Prepared statements. */ /** * @brief Prepare a statement. * * @param[in] sql Format string for SQL. * * @return Statement on success, NULL on error. */ sql_stmt_t * sql_prepare (const char* sql, ...) { int ret; sql_stmt_t* stmt; va_list args; va_start (args, sql); ret = sql_prepare_internal (1, 1, sql, args, &stmt); va_end (args); if (ret) return NULL; return stmt; } /** * @brief Execute a prepared statement. * * @param[in] stmt Statement. * * @return 0 complete, 1 row available in results, 2 rerun prepare, -1 error, * -2 gave up with statement reset. */ int sql_exec (sql_stmt_t *stmt) { return sql_exec_internal (1, stmt); } openvas-manager-6.0.9/src/types.h000644 001751 001751 00000002117 12557600614 017774 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Headers for OpenVAS Manager: types. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2009 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #ifndef OPENVAS_MANAGER_TYPES_H #define OPENVAS_MANAGER_TYPES_H #define BUFFER_SIZE_T_FORMAT "u" typedef unsigned int buffer_size_t; #endif /* !OPENVAS_MANAGER_TYPES_H */ openvas-manager-6.0.9/src/manage_config_host_discovery.c000644 001751 001751 00000011503 12557600615 024524 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Manage library: NVTs for "Host Discovery" scan configuration. * * Authors: * Hani Benhabiles * * Copyright: * Copyright (C) 2013 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #include "manage.h" #include "manage_sql.h" #include "sql.h" #include /** * @brief Make Host Discovery Scan Config. * * Caller must lock the db. * * @param[in] uuid UUID for new scan config. * @param[in] selector_name Name of NVT selector to use. */ void make_config_host_discovery (char *const uuid, char *const selector_name) { config_t config; sql_begin_exclusive (); /* Create the Host Discovery config. */ sql ("INSERT into configs (uuid, name, owner, nvt_selector, comment," " family_count, nvt_count, nvts_growing, families_growing," " type, creation_time, modification_time)" " VALUES ('%s', 'Host Discovery', NULL," " '%s', 'Network Host Discovery scan configuration.'," " 0, 0, 0, 0, 0, m_now (), m_now ());", uuid, selector_name); config = sql_last_insert_id (); /* Add the Ping Host NVT to the config. */ sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.100315', 'Port scanners');", selector_name); /* Update number of families and nvts. */ sql ("UPDATE configs" " SET family_count = %i, nvt_count = %i," " modification_time = m_now ()" " WHERE id = %llu;", nvt_selector_family_count (selector_name, 0), nvt_selector_nvt_count (selector_name, NULL, 0), config); /* Add preferences for "ping host" nvt. */ sql ("INSERT INTO config_preferences (config, type, name, value)" " VALUES (%llu," " 'PLUGINS_PREFS'," " 'Ping Host[checkbox]:Mark unrechable Hosts as dead (not scanning)'," " 'yes');", config); sql ("INSERT INTO config_preferences (config, type, name, value)" " VALUES (%llu," " 'PLUGINS_PREFS'," " 'Ping Host[checkbox]:Report about reachable Hosts'," " 'yes');", config); sql ("INSERT INTO config_preferences (config, type, name, value)" " VALUES (%llu," " 'PLUGINS_PREFS'," " 'Ping Host[checkbox]:Report about unrechable Hosts'," " 'no');", config); sql ("COMMIT;"); } /** * @brief Preference name. */ #define NAME "Global variable settings[checkbox]:Strictly unauthenticated" /** * @brief Ensure the Host Discovery config is up to date. * * @param[in] uuid UUID of config. * * @return 0 success, -1 error. */ int check_config_host_discovery (char *const uuid) { int update; sql_begin_exclusive (); update = 0; /* Check new preference. */ if (sql_int ("SELECT count (*) FROM config_preferences" " WHERE config = (SELECT id FROM configs WHERE uuid = '%s')" " AND type = 'PLUGINS_PREFS'" " AND name = '" NAME "';", uuid) == 0) { sql ("INSERT INTO config_preferences (config, type, name, value)" " VALUES ((SELECT id FROM configs WHERE uuid = '%s')," " 'PLUGINS_PREFS'," " '" NAME "'," " 'yes');", uuid); update = 1; } /* Check new NVT. */ if (sql_int ("SELECT count (*) FROM nvt_selectors" " WHERE name = (SELECT nvt_selector FROM configs" " WHERE uuid = '%s')" " AND family_or_nvt = '1.3.6.1.4.1.25623.1.0.12288';", uuid) == 0) { sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ((SELECT nvt_selector FROM configs WHERE uuid = '%s'), 0," " " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.12288', 'Settings');", uuid); update = 1; } if (update) update_config_cache_init (uuid); sql ("COMMIT;"); return 0; } openvas-manager-6.0.9/src/manage_pg_server.c000644 001751 001751 00000010764 12557600617 022141 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Manager Manage library: Postgres server-side functions. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2014 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #include "manage_utils.h" #include "postgres.h" #include "fmgr.h" #ifdef PG_MODULE_MAGIC PG_MODULE_MAGIC; #endif PG_FUNCTION_INFO_V1 (sql_next_time); /** * @brief Get the next time given schedule times. * * This is a callback for a SQL function of three arguments. */ Datum sql_next_time (PG_FUNCTION_ARGS) { int32 first, period, period_months; first = PG_GETARG_INT32 (0); period = PG_GETARG_INT32 (1); period_months = PG_GETARG_INT32 (2); PG_RETURN_INT32 (next_time (first, period, period_months)); } PG_FUNCTION_INFO_V1 (sql_max_hosts); /** * @brief Create a string from a portion of text. * * @param[in] text_arg Text. * @param[in] length Length to create. */ static char * textndup (text *text_arg, int length) { char *ret; ret = palloc (length + 1); memcpy (ret, VARDATA (text_arg), length); ret[length] = 0; return ret; } /** * @brief Return number of hosts. * * This is a callback for a SQL function of two arguments. */ Datum sql_max_hosts (PG_FUNCTION_ARGS) { if (PG_ARGISNULL (0)) PG_RETURN_INT32 (0); else { text *hosts_arg; char *hosts, *exclude; int ret; hosts_arg = PG_GETARG_TEXT_P (0); hosts = textndup (hosts_arg, VARSIZE (hosts_arg) - VARHDRSZ); if (PG_ARGISNULL (1)) { exclude = palloc (1); exclude[0] = 0; } else { text *exclude_arg; exclude_arg = PG_GETARG_TEXT_P (1); exclude = textndup (exclude_arg, VARSIZE (exclude_arg) - VARHDRSZ); } ret = manage_count_hosts_FIX (hosts, exclude); pfree (hosts); pfree (exclude); PG_RETURN_INT32 (ret); } } PG_FUNCTION_INFO_V1 (sql_level_min_severity); /** * @brief Return min severity of level. * * This is a callback for a SQL function of two arguments. */ Datum sql_level_min_severity (PG_FUNCTION_ARGS) { if (PG_ARGISNULL (0)) PG_RETURN_FLOAT8 (0.0); else { text *level_arg, *class_arg; char *level, *class; float8 severity; class_arg = PG_GETARG_TEXT_P (1); class = textndup (class_arg, VARSIZE (class_arg) - VARHDRSZ); level_arg = PG_GETARG_TEXT_P (0); level = textndup (level_arg, VARSIZE (level_arg) - VARHDRSZ); severity = level_min_severity (level, class); pfree (level); pfree (class); PG_RETURN_FLOAT8 (severity); } } PG_FUNCTION_INFO_V1 (sql_level_max_severity); /** * @brief Return max severity of level. * * This is a callback for a SQL function of two arguments. */ Datum sql_level_max_severity (PG_FUNCTION_ARGS) { if (PG_ARGISNULL (0)) PG_RETURN_FLOAT8 (0.0); else { text *level_arg, *class_arg; char *level, *class; float8 severity; class_arg = PG_GETARG_TEXT_P (1); class = textndup (class_arg, VARSIZE (class_arg) - VARHDRSZ); level_arg = PG_GETARG_TEXT_P (0); level = textndup (level_arg, VARSIZE (level_arg) - VARHDRSZ); severity = level_max_severity (level, class); pfree (level); pfree (class); PG_RETURN_FLOAT8 (severity); } } PG_FUNCTION_INFO_V1 (sql_valid_db_resource_type); /** * @brief Return max severity of level. * * This is a callback for a SQL function of one argument. */ Datum sql_valid_db_resource_type (PG_FUNCTION_ARGS) { if (PG_ARGISNULL (0)) PG_RETURN_BOOL (0); else { text *type_arg; char *type; int ret; type_arg = PG_GETARG_TEXT_P (0); type = textndup (type_arg, VARSIZE (type_arg) - VARHDRSZ); ret = valid_db_resource_type (type); pfree (type); PG_RETURN_BOOL (ret); } } openvas-manager-6.0.9/src/manage_migrators.c000644 001751 001751 00001132250 12557600615 022146 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Module for OpenVAS Manager: the DB migrators. * * Authors: * Hani Benhabiles * * Copyright: * Copyright (C) 2013 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ /** * @file manage_migrators.c * @brief The OpenVAS Manager DB Migrators file. * * This file defines the functions used by the manager to migrate the DB to the * newest version. */ /** * @section procedure_writing_migrator Procedure for writing a migrator * * Every change that affects the database schema or the format of the data in * the database must have a migrator so that someone using an older version of * the database can update to the newer version. * * Simply adding a new table to the database is, however, OK. At startup, the * manager will automatically add a table if it is missing from the database. * * - Ensure that the ChangeLog notes the changes to the database and * the increase of OPENVASMD_DATABASE_VERSION, with an entry like * * * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 6, for... * * * src/manage_sql.c (create_tables): Add new table... * * - Add the migrator function in the style of the others. In particular, * the function must check the version, do the modification and then set * the new version, all inside an exclusive transaction. Use the generic * iterator (init_iterator, iterator_string, iterator_int64...) because the * specialised iterators (like init_target_iterator) can change behaviour * across Manager SVN versions. Use copies of any other "manage" interfaces, * for example update_all_config_caches, as these may also change in later * versions of the Manager. * * - Remember to ensure that tables exist in the migrator before the migrator * modifies them. If a migrator modifies a table then the table must either * have existed in database version 0 (listed below), or some earlier * migrator must have added the table, or the migrator must add the table * (using the original schema of the table). * * - Add the migrator to the database_migrators array. * * - Test that everything still works for a database that has been migrated * from the previous version. * * - Test that everything still works for a database that has been migrated * from version 0. * * - Commit with a ChangeLog heading like * * Add database migration from version 5 to 6. * * SQL that created database version 0: * * CREATE TABLE IF NOT EXISTS config_preferences * (config INTEGER, type, name, value); * * CREATE TABLE IF NOT EXISTS configs * (name UNIQUE, nvt_selector, comment, family_count INTEGER, * nvt_count INTEGER, families_growing INTEGER, nvts_growing INTEGER); * * CREATE TABLE IF NOT EXISTS meta * (name UNIQUE, value); * * CREATE TABLE IF NOT EXISTS nvt_selectors * (name, exclude INTEGER, type INTEGER, family_or_nvt); * * CREATE TABLE IF NOT EXISTS nvts * (oid, version, name, summary, description, copyright, cve, bid, xref, * tag, sign_key_ids, category, family); * * CREATE TABLE IF NOT EXISTS report_hosts * (report INTEGER, host, start_time, end_time, attack_state, * current_port, max_port); * * CREATE TABLE IF NOT EXISTS report_results * (report INTEGER, result INTEGER); * * CREATE TABLE IF NOT EXISTS reports * (uuid, hidden INTEGER, task INTEGER, date INTEGER, start_time, * end_time, nbefile, comment); * * CREATE TABLE IF NOT EXISTS results * (task INTEGER, subnet, host, port, nvt, type, description); * * CREATE TABLE IF NOT EXISTS targets * (name, hosts, comment); * * CREATE TABLE IF NOT EXISTS tasks * (uuid, name, hidden INTEGER, time, comment, description, owner, * run_status, start_time, end_time, config, target); * * CREATE TABLE IF NOT EXISTS users * (name UNIQUE, password); */ /* time.h in glibc2 needs this for strptime. */ #define _XOPEN_SOURCE #include #include #include #include #include #include #include #include #include #include "manage_sql.h" #include "sql.h" #include "tracef.h" #include #include #include /* Old config IDs. */ /** * @brief Database ROWID of 'Full and fast' config. */ #define CONFIG_ID_FULL_AND_FAST 1 /** * @brief Database ROWID of 'Full and fast ultimate' config. */ #define CONFIG_ID_FULL_AND_FAST_ULTIMATE 2 /** * @brief Database ROWID of 'Full and very deep' config. */ #define CONFIG_ID_FULL_AND_VERY_DEEP 3 /** * @brief Database ROWID of 'Full and very deep ultimate' config. */ #define CONFIG_ID_FULL_AND_VERY_DEEP_ULTIMATE 4 /* Headers from backend specific manage_xxx.c file. */ int manage_create_migrate_51_to_52_convert (); /* Types. */ /** * @brief A migrator. */ typedef struct { int version; ///< Version that the migrator produces. int (*function) (); ///< Function that does the migration. NULL if too hard. } migrator_t; /* Functions. */ /** * @brief Create all tables, using the version 4 schema. */ static void create_tables_version_4 () { sql ("CREATE TABLE IF NOT EXISTS config_preferences" " (id INTEGER PRIMARY KEY, config INTEGER, type, name, value);"); sql ("CREATE TABLE IF NOT EXISTS configs" " (id INTEGER PRIMARY KEY, name UNIQUE, nvt_selector, comment," " family_count INTEGER, nvt_count INTEGER, families_growing INTEGER," " nvts_growing INTEGER);"); sql ("CREATE TABLE IF NOT EXISTS lsc_credentials" " (id INTEGER PRIMARY KEY, name, password, comment, public_key TEXT," " private_key TEXT, rpm TEXT, deb TEXT, exe TEXT);"); sql ("CREATE TABLE IF NOT EXISTS meta" " (id INTEGER PRIMARY KEY, name UNIQUE, value);"); sql ("CREATE TABLE IF NOT EXISTS nvt_preferences" " (id INTEGER PRIMARY KEY, name, value);"); /* nvt_selectors types: 0 all, 1 family, 2 NVT (NVT_SELECTOR_TYPE_* above). */ sql ("CREATE TABLE IF NOT EXISTS nvt_selectors" " (id INTEGER PRIMARY KEY, name, exclude INTEGER, type INTEGER," " family_or_nvt, family);"); sql ("CREATE TABLE IF NOT EXISTS nvts" " (id INTEGER PRIMARY KEY, oid, version, name, summary, description," " copyright, cve, bid, xref, tag, sign_key_ids, category INTEGER," " family);"); sql ("CREATE TABLE IF NOT EXISTS report_hosts" " (id INTEGER PRIMARY KEY, report INTEGER, host, start_time, end_time," " attack_state, current_port, max_port);"); sql ("CREATE INDEX IF NOT EXISTS report_hosts_by_report_and_host" " ON report_hosts (report, host);"); sql ("CREATE TABLE IF NOT EXISTS report_results" " (id INTEGER PRIMARY KEY, report INTEGER, result INTEGER);"); sql ("CREATE TABLE IF NOT EXISTS reports" " (id INTEGER PRIMARY KEY, uuid, hidden INTEGER, task INTEGER," " date INTEGER, start_time, end_time, nbefile, comment," " scan_run_status INTEGER);"); sql ("CREATE TABLE IF NOT EXISTS results" " (id INTEGER PRIMARY KEY, task INTEGER, subnet, host, port, nvt, type," " description)"); sql ("CREATE TABLE IF NOT EXISTS targets" " (id INTEGER PRIMARY KEY, name, hosts, comment);"); sql ("CREATE TABLE IF NOT EXISTS task_files" " (id INTEGER PRIMARY KEY, task INTEGER, name, content);"); sql ("CREATE TABLE IF NOT EXISTS tasks" " (id INTEGER PRIMARY KEY, uuid, name, hidden INTEGER, time, comment," " description, owner" /** @todo INTEGER */ ", run_status INTEGER," " start_time, end_time, config, target);"); sql ("CREATE TABLE IF NOT EXISTS users" " (id INTEGER PRIMARY KEY, name UNIQUE, password);"); } /** * @brief Migrate the database from version 0 to version 1. * * @return 0 success, -1 error. */ int migrate_0_to_1 () { sql_begin_exclusive (); /* Ensure that the database is currently version 0. */ if (manage_db_version () != 0) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* In SVN the database version flag changed from 0 to 1 on 2009-09-30, * while the database changed to the version 1 schema on 2009-08-29. This * means the database could be flagged as version 0 while it has a version * 1 schema. In this case the ADD COLUMN below would fail. A work around * would be simply to update the version number to 1 in the database by * hand. */ sql ("ALTER TABLE reports ADD COLUMN scan_run_status INTEGER;"); /* SQLite 3.1.3 and earlier requires a VACUUM before it can read * from the new column. However, vacuuming might change the ROWIDs, * which would screw up the data. Debian 5.0 (Lenny) is 3.5.9-6 * already. */ sql ("UPDATE reports SET scan_run_status = '%u';", TASK_STATUS_INTERNAL_ERROR); sql ("UPDATE reports SET scan_run_status = '%u'" " WHERE start_time IS NULL OR end_time IS NULL;", TASK_STATUS_STOPPED); sql ("UPDATE reports SET scan_run_status = '%u'" " WHERE end_time IS NOT NULL;", TASK_STATUS_DONE); /* Set the database version to 1. */ set_db_version (1); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 1 to version 2. * * @return 0 success, -1 error. */ int migrate_1_to_2 () { iterator_t nvts; sql_begin_exclusive (); /* Ensure that the database is currently version 1. */ if (manage_db_version () != 1) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The category column in nvts changed type from string to int. This * may be a redundant conversion, as SQLite may have converted these * values automatically in each query anyway. */ init_iterator (&nvts, "SELECT ROWID, category FROM nvts;"); while (next (&nvts)) { int category; const char *category_string; category_string = iterator_string (&nvts, 1); category = atoi (category_string); sql ("UPDATE nvts SET category = %i WHERE ROWID = %llu;", category, iterator_int64 (&nvts, 0)); } cleanup_iterator (&nvts); /* Set the database version to 2. */ set_db_version (2); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 2 to version 3. * * @return 0 success, -1 error. */ int migrate_2_to_3 () { sql_begin_exclusive (); /* Ensure that the database is currently version 2. */ if (manage_db_version () != 2) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Add tables added since version 2 that are adjust later in the * migration. */ sql ("CREATE TABLE IF NOT EXISTS lsc_credentials (name, comment, rpm, deb, dog);"); /* The lsc_credentials table changed: package columns changed type from BLOB * to string, new columns "password", "public key" and "private key" appeared * and the dog column changed name to exe. * * Just remove all the LSC credentials, as credential generation only * started working after version 3. */ sql ("DELETE from lsc_credentials;"); /* Before revision 5769 this could have caused problems, because these * columns are added on the end of the table, so columns referenced by * position in * queries may have been wrong (for example, with the iterator * returned by init_lsc_credential_iterator). Since 5769 the queries * name all columns explicitly. */ sql ("ALTER TABLE lsc_credentials ADD COLUMN password;"); sql ("ALTER TABLE lsc_credentials ADD COLUMN public_key TEXT;"); sql ("ALTER TABLE lsc_credentials ADD COLUMN private_key TEXT;"); sql ("ALTER TABLE lsc_credentials ADD COLUMN exe TEXT;"); /* Set the database version to 3. */ set_db_version (3); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 3 to version 4. * * @return 0 success, -1 error. */ int migrate_3_to_4 () { iterator_t nvts; sql_begin_exclusive (); /* Ensure that the database is currently version 3. */ if (manage_db_version () != 3) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The nvt_selectors table got a family column. */ sql ("ALTER TABLE nvt_selectors ADD COLUMN family;"); init_nvt_selector_iterator (&nvts, NULL, (config_t) 0, 2); while (next (&nvts)) { gchar *quoted_name = sql_quote (nvt_selector_iterator_name (&nvts)); gchar *quoted_nvt = sql_quote (nvt_selector_iterator_nvt (&nvts)); sql ("UPDATE nvt_selectors SET family =" " (SELECT family FROM nvts where oid = '%s')" " WHERE name = '%s';", quoted_nvt, quoted_name); g_free (quoted_name); g_free (quoted_nvt); } cleanup_iterator (&nvts); /* Set the database version to 4. */ set_db_version (4); sql ("COMMIT;"); return 0; } /** * @brief Move all the data to the new tables for the 4 to 5 migrator. */ void migrate_4_to_5_copy_data () { iterator_t rows; /* Table config_preferences. */ init_iterator (&rows, "SELECT rowid, config, type, name, value" " FROM config_preferences_4;"); while (next (&rows)) { gchar *quoted_type = sql_insert (iterator_string (&rows, 2)); gchar *quoted_name = sql_insert (iterator_string (&rows, 3)); gchar *quoted_value = sql_insert (iterator_string (&rows, 4)); sql ("INSERT into config_preferences (id, config, type, name, value)" " VALUES (%llu, %llu, %s, %s, %s);", iterator_int64 (&rows, 0), iterator_int64 (&rows, 1), quoted_type, quoted_name, quoted_value); g_free (quoted_type); g_free (quoted_name); g_free (quoted_value); } cleanup_iterator (&rows); sql ("DROP TABLE config_preferences_4;"); /* Table configs. */ init_iterator (&rows, "SELECT rowid, name, nvt_selector, comment, family_count," " nvt_count, families_growing, nvts_growing" " FROM configs_4;"); while (next (&rows)) { gchar *quoted_name = sql_insert (iterator_string (&rows, 1)); gchar *quoted_nvt_selector = sql_insert (iterator_string (&rows, 2)); gchar *quoted_comment = sql_insert (iterator_string (&rows, 3)); sql ("INSERT into configs" " (id, name, nvt_selector, comment, family_count, nvt_count," " families_growing, nvts_growing)" " VALUES" " (%llu, %s, %s, %s, %llu, %llu, %llu, %llu);", iterator_int64 (&rows, 0), quoted_name, quoted_nvt_selector, quoted_comment, iterator_int64 (&rows, 4), iterator_int64 (&rows, 5), iterator_int64 (&rows, 6), iterator_int64 (&rows, 7)); g_free (quoted_name); g_free (quoted_nvt_selector); g_free (quoted_comment); } cleanup_iterator (&rows); sql ("DROP TABLE configs_4;"); /* Table lsc_credentials. */ init_iterator (&rows, "SELECT rowid, name, password, comment, public_key," " private_key, rpm, deb, exe" " FROM lsc_credentials_4;"); while (next (&rows)) { gchar *quoted_name = sql_insert (iterator_string (&rows, 1)); gchar *quoted_password = sql_insert (iterator_string (&rows, 2)); gchar *quoted_comment = sql_insert (iterator_string (&rows, 3)); gchar *quoted_public_key = sql_insert (iterator_string (&rows, 4)); gchar *quoted_private_key = sql_insert (iterator_string (&rows, 5)); gchar *quoted_rpm = sql_insert (iterator_string (&rows, 6)); gchar *quoted_deb = sql_insert (iterator_string (&rows, 7)); gchar *quoted_exe = sql_insert (iterator_string (&rows, 8)); sql ("INSERT into lsc_credentials" " (id, name, password, comment, public_key, private_key, rpm, deb," " exe)" " VALUES" " (%llu, %s, %s, %s, %s, %s, %s, %s, %s);", iterator_int64 (&rows, 0), quoted_name, quoted_password, quoted_comment, quoted_public_key, quoted_private_key, quoted_rpm, quoted_deb, quoted_exe); g_free (quoted_name); g_free (quoted_password); g_free (quoted_comment); g_free (quoted_public_key); g_free (quoted_private_key); g_free (quoted_rpm); g_free (quoted_deb); g_free (quoted_exe); } cleanup_iterator (&rows); sql ("DROP TABLE lsc_credentials_4;"); /* Table meta. */ init_iterator (&rows, "SELECT rowid, name, value FROM meta_4;"); while (next (&rows)) { gchar *quoted_name = sql_insert (iterator_string (&rows, 1)); gchar *quoted_value = sql_insert (iterator_string (&rows, 2)); sql ("INSERT into meta (id, name, value)" " VALUES (%llu, %s, %s);", iterator_int64 (&rows, 0), quoted_name, quoted_value); g_free (quoted_name); g_free (quoted_value); } cleanup_iterator (&rows); sql ("DROP TABLE meta_4;"); /* Table nvt_preferences. */ init_iterator (&rows, "SELECT rowid, name, value FROM nvt_preferences_4;"); while (next (&rows)) { gchar *quoted_name = sql_insert (iterator_string (&rows, 1)); gchar *quoted_value = sql_insert (iterator_string (&rows, 2)); sql ("INSERT into nvt_preferences (id, name, value)" " VALUES (%llu, %s, %s);", iterator_int64 (&rows, 0), quoted_name, quoted_value); g_free (quoted_name); g_free (quoted_value); } cleanup_iterator (&rows); sql ("DROP TABLE nvt_preferences_4;"); /* Table nvt_selectors. */ init_iterator (&rows, "SELECT rowid, name, exclude, type, family_or_nvt, family" " FROM nvt_selectors_4;"); while (next (&rows)) { gchar *quoted_name = sql_insert (iterator_string (&rows, 1)); gchar *quoted_family_or_nvt = sql_insert (iterator_string (&rows, 4)); gchar *quoted_family = sql_insert (iterator_string (&rows, 5)); sql ("INSERT into nvt_selectors" " (id, name, exclude, type, family_or_nvt, family)" " VALUES" " (%llu, %s, %llu, %llu, %s, %s);", iterator_int64 (&rows, 0), quoted_name, iterator_int64 (&rows, 2), iterator_int64 (&rows, 3), quoted_family_or_nvt, quoted_family); g_free (quoted_name); g_free (quoted_family_or_nvt); g_free (quoted_family); } cleanup_iterator (&rows); sql ("DROP TABLE nvt_selectors_4;"); /* Table nvts. */ init_iterator (&rows, "SELECT rowid, oid, version, name, summary, description," " copyright, cve, bid, xref, tag, sign_key_ids, category," " family" " FROM nvts_4;"); while (next (&rows)) { gchar *quoted_oid = sql_insert (iterator_string (&rows, 1)); gchar *quoted_version = sql_insert (iterator_string (&rows, 2)); gchar *quoted_name = sql_insert (iterator_string (&rows, 3)); gchar *quoted_summary = sql_insert (iterator_string (&rows, 4)); gchar *quoted_description = sql_insert (iterator_string (&rows, 5)); gchar *quoted_copyright = sql_insert (iterator_string (&rows, 6)); gchar *quoted_cve = sql_insert (iterator_string (&rows, 7)); gchar *quoted_bid = sql_insert (iterator_string (&rows, 8)); gchar *quoted_xref = sql_insert (iterator_string (&rows, 9)); gchar *quoted_tag = sql_insert (iterator_string (&rows, 10)); gchar *quoted_sign_key_ids = sql_insert (iterator_string (&rows, 11)); gchar *quoted_family = sql_insert (iterator_string (&rows, 13)); { /* Starting from revision 5726 on 2009-10-26 (just before 0.9.2), * the Manager converts semicolons in OTP NVT descriptions to newlines * before entering them in the database. Convert the existing * semicolons here, because it is a convenient place to do it. */ gchar* pos = quoted_description; while ((pos = strchr (pos, ';'))) pos[0] = '\n'; } sql ("INSERT into nvts" " (id, oid, version, name, summary, description, copyright, cve," " bid, xref, tag, sign_key_ids, category, family)" " VALUES" " (%llu, %s, %s, %s, %s, %s, %s, %s, %s, %s," " %s, %s, %llu, %s);", iterator_int64 (&rows, 0), quoted_oid, quoted_version, quoted_name, quoted_summary, quoted_description, quoted_copyright, quoted_cve, quoted_bid, quoted_xref, quoted_tag, quoted_sign_key_ids, iterator_int64 (&rows, 12), quoted_family); g_free (quoted_oid); g_free (quoted_version); g_free (quoted_name); g_free (quoted_summary); g_free (quoted_description); g_free (quoted_copyright); g_free (quoted_cve); g_free (quoted_bid); g_free (quoted_xref); g_free (quoted_tag); g_free (quoted_sign_key_ids); g_free (quoted_family); } cleanup_iterator (&rows); sql ("DROP TABLE nvts_4;"); /* Table report_hosts. */ init_iterator (&rows, "SELECT rowid, report, host, start_time, end_time," " attack_state, current_port, max_port" " FROM report_hosts_4;"); while (next (&rows)) { gchar *quoted_host = sql_insert (iterator_string (&rows, 2)); gchar *quoted_start_time = sql_insert (iterator_string (&rows, 3)); gchar *quoted_end_time = sql_insert (iterator_string (&rows, 4)); gchar *quoted_attack_state = sql_insert (iterator_string (&rows, 5)); gchar *quoted_current_port = sql_insert (iterator_string (&rows, 6)); gchar *quoted_max_port = sql_insert (iterator_string (&rows, 7)); sql ("INSERT into report_hosts" " (id, report, host, start_time, end_time, attack_state," " current_port, max_port)" " VALUES" " (%llu, %llu, %s, %s, %s, %s, %s, %s);", iterator_int64 (&rows, 0), iterator_int64 (&rows, 1), quoted_host, quoted_start_time, quoted_end_time, quoted_attack_state, quoted_current_port, quoted_max_port); g_free (quoted_host); g_free (quoted_start_time); g_free (quoted_end_time); g_free (quoted_attack_state); g_free (quoted_current_port); g_free (quoted_max_port); } cleanup_iterator (&rows); sql ("DROP TABLE report_hosts_4;"); /* Table report_results. */ init_iterator (&rows, "SELECT rowid, report, result FROM report_results_4;"); while (next (&rows)) { sql ("INSERT into report_results (id, report, result)" " VALUES (%llu, %llu, %llu)", iterator_int64 (&rows, 0), iterator_int64 (&rows, 1), iterator_int64 (&rows, 2)); } cleanup_iterator (&rows); sql ("DROP TABLE report_results_4;"); /* Table reports. */ init_iterator (&rows, "SELECT rowid, uuid, hidden, task, date, start_time, end_time," " nbefile, comment, scan_run_status" " FROM reports_4;"); while (next (&rows)) { gchar *quoted_uuid = sql_insert (iterator_string (&rows, 1)); gchar *quoted_start_time = sql_insert (iterator_string (&rows, 5)); gchar *quoted_end_time = sql_insert (iterator_string (&rows, 6)); gchar *quoted_nbefile = sql_insert (iterator_string (&rows, 7)); gchar *quoted_comment = sql_insert (iterator_string (&rows, 8)); sql ("INSERT into reports" " (id, uuid, hidden, task, date, start_time, end_time, nbefile," " comment, scan_run_status)" " VALUES" " (%llu, %s, %llu, %llu, %llu, %s, %s, %s, %s, %llu);", iterator_int64 (&rows, 0), quoted_uuid, iterator_int64 (&rows, 2), iterator_int64 (&rows, 3), iterator_int64 (&rows, 4), quoted_start_time, quoted_end_time, quoted_nbefile, quoted_comment, iterator_int64 (&rows, 9)); g_free (quoted_uuid); g_free (quoted_start_time); g_free (quoted_end_time); g_free (quoted_nbefile); g_free (quoted_comment); } cleanup_iterator (&rows); sql ("DROP TABLE reports_4;"); /* Table results. */ init_iterator (&rows, "SELECT rowid, task, subnet, host, port, nvt, type," " description" " FROM results_4;"); while (next (&rows)) { gchar *quoted_subnet = sql_insert (iterator_string (&rows, 2)); gchar *quoted_host = sql_insert (iterator_string (&rows, 3)); gchar *quoted_port = sql_insert (iterator_string (&rows, 4)); gchar *quoted_nvt = sql_insert (iterator_string (&rows, 5)); gchar *quoted_type = sql_insert (iterator_string (&rows, 6)); gchar *quoted_description = sql_insert (iterator_string (&rows, 7)); sql ("INSERT into results" " (id, task, subnet, host, port, nvt, type, description)" " VALUES" " (%llu, %llu, %s, %s, %s, %s, %s, %s);", iterator_int64 (&rows, 0), iterator_int64 (&rows, 1), quoted_subnet, quoted_host, quoted_port, quoted_nvt, quoted_type, quoted_description); g_free (quoted_subnet); g_free (quoted_host); g_free (quoted_port); g_free (quoted_nvt); g_free (quoted_type); g_free (quoted_description); } cleanup_iterator (&rows); sql ("DROP TABLE results_4;"); /* Table targets. */ init_iterator (&rows, "SELECT rowid, name, hosts, comment FROM targets_4;"); while (next (&rows)) { gchar *quoted_name = sql_insert (iterator_string (&rows, 1)); gchar *quoted_hosts = sql_insert (iterator_string (&rows, 2)); gchar *quoted_comment = sql_insert (iterator_string (&rows, 3)); sql ("INSERT into targets (id, name, hosts, comment)" " VALUES (%llu, %s, %s, %s);", iterator_int64 (&rows, 0), quoted_name, quoted_hosts, quoted_comment); g_free (quoted_name); g_free (quoted_hosts); g_free (quoted_comment); } cleanup_iterator (&rows); sql ("DROP TABLE targets_4;"); /* Table task_files. */ init_iterator (&rows, "SELECT rowid, task, name, content FROM task_files_4;"); while (next (&rows)) { gchar *quoted_name = sql_insert (iterator_string (&rows, 2)); gchar *quoted_content = sql_insert (iterator_string (&rows, 3)); sql ("INSERT into task_files (id, task, name, content)" " VALUES (%llu, %llu, %s, %s);", iterator_int64 (&rows, 0), iterator_int64 (&rows, 1), quoted_name, quoted_content); g_free (quoted_name); g_free (quoted_content); } cleanup_iterator (&rows); sql ("DROP TABLE task_files_4;"); /* Table tasks. */ init_iterator (&rows, "SELECT rowid, uuid, name, hidden, time, comment, description," " owner, run_status, start_time, end_time, config, target" " FROM tasks_4;"); while (next (&rows)) { gchar *quoted_uuid = sql_insert (iterator_string (&rows, 1)); gchar *quoted_name = sql_insert (iterator_string (&rows, 2)); gchar *quoted_time = sql_insert (iterator_string (&rows, 4)); gchar *quoted_comment = sql_insert (iterator_string (&rows, 5)); gchar *quoted_description = sql_insert (iterator_string (&rows, 6)); gchar *quoted_start_time = sql_insert (iterator_string (&rows, 9)); gchar *quoted_end_time = sql_insert (iterator_string (&rows, 10)); gchar *quoted_config = sql_insert (iterator_string (&rows, 11)); gchar *quoted_target = sql_insert (iterator_string (&rows, 12)); sql ("INSERT into tasks" " (id, uuid, name, hidden, time, comment, description, owner," " run_status, start_time, end_time, config, target)" " VALUES" " (%llu, %s, %s, %llu, %s, %s, %s, %llu, %llu, %s," " %s, %s, %s);", iterator_int64 (&rows, 0), quoted_uuid, quoted_name, iterator_int64 (&rows, 3), quoted_time, quoted_comment, quoted_description, iterator_int64 (&rows, 7), iterator_int64 (&rows, 8), quoted_start_time, quoted_end_time, quoted_config, quoted_target); g_free (quoted_uuid); g_free (quoted_name); g_free (quoted_time); g_free (quoted_comment); g_free (quoted_description); g_free (quoted_start_time); g_free (quoted_end_time); g_free (quoted_config); g_free (quoted_target); } cleanup_iterator (&rows); sql ("DROP TABLE tasks_4;"); /* Table users. */ init_iterator (&rows, "SELECT rowid, name, password FROM users_4;"); while (next (&rows)) { gchar *quoted_name = sql_insert (iterator_string (&rows, 1)); gchar *quoted_password = sql_insert (iterator_string (&rows, 2)); sql ("INSERT into users (id, name, password)" " VALUES (%llu, %s, %s);", iterator_int64 (&rows, 0), quoted_name, quoted_password); g_free (quoted_name); g_free (quoted_password); } cleanup_iterator (&rows); sql ("DROP TABLE users_4;"); } /** * @brief Migrate the database from version 4 to version 5. * * @return 0 success, -1 error. */ int migrate_4_to_5 () { sql_begin_exclusive (); /* Ensure that the database is currently version 4. */ if (manage_db_version () != 4) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Every table got an "id INTEGER PRIMARY KEY" column. As the column is a * primary key, every table must be recreated and the data transfered. * * Also, starting from revision 5726 on 2009-10-26 (just before 0.9.2), * the Manager converts semicolons in OTP NVT descriptions to newlines * before entering them in the database. Convert the existing * semicolons while transfering the data. This should have been an * entirely separate version and migration between the current 4 and 5. */ /* Ensure that all tables exist that will be adjusted below. */ /* Both introduced between version 1 and 2. */ sql ("CREATE TABLE IF NOT EXISTS nvt_preferences (name, value);"); sql ("CREATE TABLE IF NOT EXISTS task_files (task INTEGER, name, content);"); /* Move the tables away. */ sql ("ALTER TABLE config_preferences RENAME TO config_preferences_4;"); sql ("ALTER TABLE configs RENAME TO configs_4;"); sql ("ALTER TABLE lsc_credentials RENAME TO lsc_credentials_4;"); sql ("ALTER TABLE meta RENAME TO meta_4;"); sql ("ALTER TABLE nvt_preferences RENAME TO nvt_preferences_4;"); sql ("ALTER TABLE nvt_selectors RENAME TO nvt_selectors_4;"); sql ("ALTER TABLE nvts RENAME TO nvts_4;"); sql ("ALTER TABLE report_hosts RENAME TO report_hosts_4;"); sql ("ALTER TABLE report_results RENAME TO report_results_4;"); sql ("ALTER TABLE reports RENAME TO reports_4;"); sql ("ALTER TABLE results RENAME TO results_4;"); sql ("ALTER TABLE targets RENAME TO targets_4;"); sql ("ALTER TABLE task_files RENAME TO task_files_4;"); sql ("ALTER TABLE tasks RENAME TO tasks_4;"); sql ("ALTER TABLE users RENAME TO users_4;"); /* Create the new tables in version 4 format. */ create_tables_version_4 (); /* Copy the data into the new tables, dropping the old tables. */ migrate_4_to_5_copy_data (); /* Set the database version to 5. */ set_db_version (5); sql ("COMMIT;"); /* All the moving may have left much empty space, so vacuum. */ sql ("VACUUM;"); return 0; } /** * @brief Move a config that is using a predefined ID. * * @param[in] predefined_config_name Name of the predefined config. * @param[in] predefined_config_id Row ID of the predefined config. */ void migrate_5_to_6_move_other_config (const char *predefined_config_name, config_t predefined_config_id) { if (sql_int ("SELECT COUNT(*) = 0 FROM configs" " WHERE name = '%s';", predefined_config_name) && sql_int ("SELECT COUNT(*) = 1 FROM configs" " WHERE id = %llu;", predefined_config_id)) { config_t config; char *name; gchar *quoted_name; sql ("INSERT into configs (nvt_selector, comment, family_count," " nvt_count, nvts_growing, families_growing)" " SELECT nvt_selector, comment, family_count," " nvt_count, nvts_growing, families_growing" " FROM configs" " WHERE id = %llu;", predefined_config_id); /* This ID will be larger then predefined_config_id because * predefined_config_id exists already. At worst the ID will be one * larger. */ config = sql_last_insert_id (); sql ("UPDATE config_preferences SET config = %llu WHERE config = %llu;", config, predefined_config_id); name = sql_string ("SELECT name FROM configs WHERE id = %llu;", predefined_config_id); if (name == NULL) { sql ("ROLLBACK;"); abort (); } quoted_name = sql_quote (name); free (name); /* Table tasks references config by name, so it stays the same. */ sql ("DELETE FROM configs WHERE id = %llu;", predefined_config_id); sql ("UPDATE configs SET name = '%s' WHERE id = %llu;", quoted_name, config); g_free (quoted_name); } } /** * @brief Migrate the database from version 5 to version 6. * * @return 0 success, -1 error. */ int migrate_5_to_6 () { sql_begin_exclusive (); /* Ensure that the database is currently version 5. */ if (manage_db_version () != 5) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The predefined configs got predefined ID's and the manager now also * caches counts for growing configs. */ /* Fail with a message if the predefined configs have somehow got ID's * other than the usual ones. */ if (sql_int ("SELECT COUNT(*) = 0 OR id == 1 FROM configs" " WHERE name = 'Full and fast';") && sql_int ("SELECT COUNT(*) = 0 OR id == 2 FROM configs" " WHERE name = 'Full and fast ultimate';") && sql_int ("SELECT COUNT(*) = 0 OR id == 3 FROM configs" " WHERE name = 'Full and very deep';") && sql_int ("SELECT COUNT(*) = 0 OR id == 4 FROM configs" " WHERE name = 'Full and very deep ultimate';")) { /* Any predefined configs are OK. Move any other configs that have the * predefined ID's. */ /* The ID of the moved config may be only one larger, so these must * be done in ID order. */ migrate_5_to_6_move_other_config ("Full and fast", 1); migrate_5_to_6_move_other_config ("Full and fast ultimate", 2); migrate_5_to_6_move_other_config ("Full and very deep", 3); migrate_5_to_6_move_other_config ("Full and very deep ultimate", 4); } else { g_warning ("%s: a predefined config has moved from the standard location," " giving up\n", __FUNCTION__); sql ("ROLLBACK;"); return -1; } /* This would need a duplicate version of update_all_config_caches that * worked with the version 6 database. Just let the cache be wrong. This * is a very old version now. */ #if 0 /* Update cache counts for growing configs. */ update_all_config_caches (); #endif /* Set the database version to 6. */ set_db_version (6); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 6 to version 7. * * @return 0 success, -1 error. */ int migrate_6_to_7 () { sql_begin_exclusive (); /* Ensure that the database is currently version 6. */ if (manage_db_version () != 6) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Add lsc_credential column to targets table. */ sql ("ALTER TABLE targets ADD COLUMN lsc_credential INTEGER;"); sql ("UPDATE targets SET lsc_credential = 0;"); /* Set the database version to 7. */ set_db_version (7); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 7 to version 8. * * @return 0 success, -1 error. */ int migrate_7_to_8 () { sql_begin_exclusive (); /* Ensure that the database is currently version 7. */ if (manage_db_version () != 7) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The lsc_credentials table got a login column. */ sql ("ALTER TABLE lsc_credentials ADD COLUMN login;"); sql ("UPDATE lsc_credentials SET login = name;"); /* Set the database version to 8. */ set_db_version (8); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 8 to version 9. * * @return 0 success, -1 error. */ int migrate_8_to_9 () { sql_begin_exclusive (); /* Ensure that the database is currently version 8. */ if (manage_db_version () != 8) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /** @todo Does ROLLBACK happen when these fail? */ /* Ensure that all tables that will be modified here exist. These were * all added after version 8 anyway. */ sql ("CREATE TABLE IF NOT EXISTS escalators" " (id INTEGER PRIMARY KEY, name UNIQUE, comment, event INTEGER," " condition INTEGER, method INTEGER);"); sql ("CREATE TABLE IF NOT EXISTS agents" " (id INTEGER PRIMARY KEY, name UNIQUE, comment, installer TEXT," " howto_install TEXT, howto_use TEXT);"); /* Many tables got an owner column. */ sql ("ALTER TABLE targets ADD COLUMN owner INTEGER;"); sql ("UPDATE targets SET owner = NULL;"); sql ("ALTER TABLE configs ADD COLUMN owner INTEGER;"); sql ("UPDATE configs SET owner = NULL;"); sql ("ALTER TABLE lsc_credentials ADD COLUMN owner INTEGER;"); sql ("UPDATE lsc_credentials SET owner = NULL;"); sql ("ALTER TABLE escalators ADD COLUMN owner INTEGER;"); sql ("UPDATE escalators SET owner = NULL;"); sql ("ALTER TABLE reports ADD COLUMN owner INTEGER;"); sql ("UPDATE reports SET owner = NULL;"); sql ("ALTER TABLE agents ADD COLUMN owner INTEGER;"); sql ("UPDATE agents SET owner = NULL;"); /* The owner column in tasks changed type from string to int. This * may be a redundant conversion, as SQLite may have converted these * values automatically in each query anyway. */ sql ("UPDATE tasks SET owner = CAST (owner AS INTEGER);"), /* Set the database version to 9. */ set_db_version (9); sql ("COMMIT;"); return 0; } /** * @brief Return the UUID of a user from the OpenVAS user UUID file. * * @todo Untested * * @param[in] name User name. * * @return UUID of given user if user exists, else NULL. */ gchar * migrate_9_to_10_user_uuid (const char *name) { gchar *uuid_file; uuid_file = g_build_filename (OPENVAS_STATE_DIR, "users", name, "uuid", NULL); if (g_file_test (uuid_file, G_FILE_TEST_EXISTS)) { gsize size; gchar *uuid; /* File exists, get its content (the uuid). */ if (g_file_get_contents (uuid_file, &uuid, &size, NULL)) { if (strlen (uuid) < 36) g_free (uuid); else { g_free (uuid_file); /* Drop any trailing characters. */ uuid[36] = '\0'; return uuid; } } } g_free (uuid_file); return NULL; } /** * @brief Migrate the database from version 9 to version 10. * * @return 0 success, -1 error. */ int migrate_9_to_10 () { iterator_t rows; sql_begin_exclusive (); /* Ensure that the database is currently version 9. */ if (manage_db_version () != 9) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The user table got a unique "uuid" column and lost the * uniqueness of its "name" column. */ /** @todo ROLLBACK on failure. */ sql ("ALTER TABLE users RENAME TO users_9;"); sql ("CREATE TABLE users" " (id INTEGER PRIMARY KEY, uuid UNIQUE, name, password);"); init_iterator (&rows, "SELECT id, name, password FROM users_9;"); while (next (&rows)) { gchar *quoted_name, *quoted_password, *uuid; uuid = migrate_9_to_10_user_uuid (iterator_string (&rows, 1)); if (uuid == NULL) { uuid = openvas_uuid_make (); if (uuid == NULL) { cleanup_iterator (&rows); sql ("ROLLBACK;"); return -1; } } quoted_name = sql_insert (iterator_string (&rows, 1)); quoted_password = sql_insert (iterator_string (&rows, 2)); sql ("INSERT into users (id, uuid, name, password)" " VALUES (%llu, '%s', %s, %s);", iterator_int64 (&rows, 0), uuid, quoted_name, quoted_password); g_free (uuid); g_free (quoted_name); g_free (quoted_password); } cleanup_iterator (&rows); sql ("DROP TABLE users_9;"); /* Set the database version to 10. */ set_db_version (10); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 10 to version 11. * * @return 0 success, -1 error. */ int migrate_10_to_11 () { sql_begin_exclusive (); /* Ensure that the database is currently version 10. */ if (manage_db_version () != 10) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The config and target columns of the tasks table changed from the name * of the config/target to the id of the config/target. * * Recreate the table, in order to add INTEGER to the column definitions. */ /** @todo ROLLBACK on failure. */ sql ("ALTER TABLE tasks RENAME TO tasks_10;"); sql ("CREATE TABLE tasks" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, name, hidden INTEGER," " time, comment, description, run_status INTEGER, start_time," " end_time, config INTEGER, target INTEGER);"); sql ("INSERT into tasks" " (id, uuid, owner, name, hidden, time, comment, description," " run_status, start_time, end_time, config, target)" " SELECT" " id, uuid, owner, name, hidden, time, comment, description," " run_status, start_time, end_time," " (SELECT id FROM configs WHERE configs.name = tasks_10.config)," " (SELECT id FROM targets WHERE targets.name = tasks_10.target)" " FROM tasks_10;"); sql ("DROP TABLE tasks_10;"); /* Set the database version to 11. */ set_db_version (11); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 11 to version 12. * * @return 0 success, -1 error. */ int migrate_11_to_12 () { sql_begin_exclusive (); /* Ensure that the database is currently version 11. */ if (manage_db_version () != 11) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Tables agents, configs and escalators were relieved of the UNIQUE * constraint on the name column. * * Recreate the tables, in order to remove the contraint. */ /** @todo ROLLBACK on failure. */ sql ("ALTER TABLE agents RENAME TO agents_11;"); sql ("CREATE TABLE agents" " (id INTEGER PRIMARY KEY, owner INTEGER, name, comment," " installer TEXT, howto_install TEXT, howto_use TEXT);"); sql ("INSERT into agents" " (id, owner, name, comment, installer, howto_install, howto_use)" " SELECT" " id, owner, name, comment, installer, howto_install, howto_use" " FROM agents_11;"); sql ("DROP TABLE agents_11;"); sql ("ALTER TABLE configs RENAME TO configs_11;"); sql ("CREATE TABLE configs" " (id INTEGER PRIMARY KEY, owner INTEGER, name, nvt_selector, comment," " family_count INTEGER, nvt_count INTEGER, families_growing INTEGER," " nvts_growing INTEGER);"); sql ("INSERT into configs" " (id, owner, name, nvt_selector, comment, family_count, nvt_count," " families_growing, nvts_growing)" " SELECT" " id, owner, name, nvt_selector, comment, family_count, nvt_count," " families_growing, nvts_growing" " FROM configs_11;"); sql ("DROP TABLE configs_11;"); sql ("ALTER TABLE escalators RENAME TO escalators_11;"); sql ("CREATE TABLE escalators" " (id INTEGER PRIMARY KEY, owner INTEGER, name, comment, event INTEGER," " condition INTEGER, method INTEGER);"); sql ("INSERT into escalators" " (id, owner, name, comment, event, condition, method)" " SELECT" " id, owner, name, comment, event, condition, method" " FROM escalators_11;"); sql ("DROP TABLE escalators_11;"); /* Set the database version to 12. */ set_db_version (12); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 12 to version 13. * * @return 0 success, -1 error. */ int migrate_12_to_13 () { iterator_t rows; sql_begin_exclusive (); /* Ensure that the database is currently version 12. */ if (manage_db_version () != 12) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Table nvt_selectors column name changed to a UUID. * * Replace names with UUIDs, ensuring that the 'All' selector gets the * predefined UUID. */ /** @todo ROLLBACK on failure. */ init_iterator (&rows, "SELECT distinct name FROM nvt_selectors;"); while (next (&rows)) { gchar *quoted_name, *uuid; if (strcmp (iterator_string (&rows, 0), "All") == 0) continue; uuid = openvas_uuid_make (); if (uuid == NULL) { cleanup_iterator (&rows); sql ("ROLLBACK;"); return -1; } quoted_name = sql_insert (iterator_string (&rows, 0)); sql ("UPDATE nvt_selectors SET name = '%s' WHERE name = %s;", uuid, quoted_name); sql ("UPDATE configs SET nvt_selector = '%s' WHERE nvt_selector = %s;", uuid, quoted_name); g_free (uuid); g_free (quoted_name); } cleanup_iterator (&rows); if (sql_int ("SELECT COUNT(*) FROM nvt_selectors WHERE name = '" MANAGE_NVT_SELECTOR_UUID_ALL "';")) sql ("DELETE FROM nvt_selectors WHERE name = 'All';"); else sql ("UPDATE nvt_selectors" " SET name = '" MANAGE_NVT_SELECTOR_UUID_ALL "'" " WHERE name = 'All';"); sql ("UPDATE configs" " SET nvt_selector = '" MANAGE_NVT_SELECTOR_UUID_ALL "'" " WHERE nvt_selector = 'All';"); /* Set the database version to 13. */ set_db_version (13); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 13 to version 14. * * @return 0 success, -1 error. */ int migrate_13_to_14 () { sql_begin_exclusive (); /* Ensure that the database is currently version 13. */ if (manage_db_version () != 13) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Table results got a UUID column. */ /** @todo ROLLBACK on failure. */ sql ("ALTER TABLE results ADD COLUMN uuid;"); sql ("UPDATE results SET uuid = make_uuid();"); /* Set the database version to 14. */ set_db_version (14); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 14 to version 15. * * @return 0 success, -1 error. */ int migrate_14_to_15 () { sql_begin_exclusive (); /* Ensure that the database is currently version 14. */ if (manage_db_version () != 14) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Table tasks got columns for scheduling info. */ /** @todo ROLLBACK on failure. */ sql ("ALTER TABLE tasks ADD COLUMN schedule INTEGER;"); sql ("ALTER TABLE tasks ADD COLUMN schedule_next_time;"); sql ("UPDATE tasks SET schedule = 0, schedule_next_time = 0;"); /* Set the database version to 15. */ set_db_version (15); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 15 to version 16. * * @return 0 success, -1 error. */ int migrate_15_to_16 () { sql_begin_exclusive (); /* Ensure that the database is currently version 15. */ if (manage_db_version () != 15) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Table schedules got a period_months column. */ /** @todo ROLLBACK on failure. */ sql ("CREATE TABLE IF NOT EXISTS schedules" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, name, comment," " first_time, period, duration);"); sql ("ALTER TABLE schedules ADD COLUMN period_months;"); sql ("UPDATE schedules SET period_months = 0;"); /* GSA was hardcoded to set the comment to "comment" before revision 7157, * so clear all task comments here. */ sql ("UPDATE tasks SET comment = '';"); /* Set the database version to 16. */ set_db_version (16); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 16 to version 17. * * @return 0 success, -1 error. */ int migrate_16_to_17 () { iterator_t rows; sql_begin_exclusive (); /* Ensure that the database is currently version 16. */ if (manage_db_version () != 16) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Table nvts got columns for CVSS base and risk factor. */ /** @todo ROLLBACK on failure. */ sql ("ALTER TABLE nvts ADD COLUMN cvss_base;"); sql ("ALTER TABLE nvts ADD COLUMN risk_factor;"); /* Move the CVSS and risk values out of any existing tags. */ init_iterator (&rows, "SELECT id, tag FROM nvts;"); while (next (&rows)) { gchar *tags, *cvss_base, *risk_factor; parse_tags (iterator_string (&rows, 1), &tags, &cvss_base, &risk_factor); sql ("UPDATE nvts SET cvss_base = '%s', risk_factor = '%s', tag = '%s'" " WHERE id = %llu;", cvss_base ? cvss_base : "", risk_factor ? risk_factor : "", tags ? tags : "", iterator_int64 (&rows, 0)); g_free (tags); g_free (cvss_base); g_free (risk_factor); } cleanup_iterator (&rows); /* Set the database version to 17. */ set_db_version (17); sql ("COMMIT;"); return 0; } /** * @brief Set the pref for migrate_17_to_18. * * @param[in] config Config to set pref on. */ void migrate_17_to_18_set_pref (config_t config) { if (sql_int ("SELECT count(*) FROM config_preferences" " WHERE config = %llu" " AND name =" " 'Ping Host[checkbox]:Mark unrechable Hosts as dead" " (not scanning)'", config) == 0) sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%llu, 'PLUGINS_PREFS'," " 'Ping Host[checkbox]:Mark unrechable Hosts as dead (not scanning)'," " 'yes');", config); } /** * @brief Migrate the database from version 17 to version 18. * * @return 0 success, -1 error. */ int migrate_17_to_18 () { sql_begin_exclusive (); /* Ensure that the database is currently version 17. */ if (manage_db_version () != 17) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* NVT "Ping Host" was added to the predefined configs, with the * "Mark unrechable..." preference set to "yes". */ /** @todo ROLLBACK on failure. */ /* Add "Ping Host" to the "All" NVT selector. */ if (sql_int ("SELECT count(*) FROM nvt_selectors WHERE name =" " '" MANAGE_NVT_SELECTOR_UUID_ALL "'" " AND family_or_nvt = '1.3.6.1.4.1.25623.1.0.100315';") == 0) { sql ("INSERT into nvt_selectors" " (name, exclude, type, family_or_nvt, family)" " VALUES ('" MANAGE_NVT_SELECTOR_UUID_ALL "', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," /* OID of the "Ping Host" NVT. */ " '1.3.6.1.4.1.25623.1.0.100315', 'Port scanners');"); } /* Ensure the preference is set on the predefined configs. */ migrate_17_to_18_set_pref (CONFIG_ID_FULL_AND_FAST); migrate_17_to_18_set_pref (CONFIG_ID_FULL_AND_FAST_ULTIMATE); migrate_17_to_18_set_pref (CONFIG_ID_FULL_AND_VERY_DEEP); migrate_17_to_18_set_pref (CONFIG_ID_FULL_AND_VERY_DEEP_ULTIMATE); /* Set the database version to 18. */ set_db_version (18); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 18 to version 19. * * @return 0 success, -1 error. */ int migrate_18_to_19 () { sql_begin_exclusive (); /* Ensure that the database is currently version 18. */ if (manage_db_version () != 18) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Many tables got a unique UUID column. As a result the predefined * configs and target got fixed UUIDs. * * Recreate the tables, in order to add the unique contraint. */ /** @todo ROLLBACK on failure. */ sql ("ALTER TABLE agents RENAME TO agents_18;"); sql ("CREATE TABLE agents" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " installer TEXT, howto_install TEXT, howto_use TEXT);"); sql ("INSERT into agents" " (id, uuid, owner, name, comment, installer, howto_install, howto_use)" " SELECT" " id, make_uuid (), owner, name, comment, installer, howto_install, howto_use" " FROM agents_18;"); sql ("DROP TABLE agents_18;"); sql ("ALTER TABLE configs RENAME TO configs_18;"); sql ("CREATE TABLE configs" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name," " nvt_selector, comment, family_count INTEGER, nvt_count INTEGER," " families_growing INTEGER, nvts_growing INTEGER);"); sql ("INSERT into configs" " (id, uuid, owner, name, nvt_selector, comment, family_count," " nvt_count, families_growing, nvts_growing)" " SELECT" " id, make_uuid (), owner, name, nvt_selector, comment, family_count," " nvt_count, families_growing, nvts_growing" " FROM configs_18;"); sql ("DROP TABLE configs_18;"); sql ("ALTER TABLE escalators RENAME TO escalators_18;"); sql ("CREATE TABLE escalators" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " event INTEGER, condition INTEGER, method INTEGER);"); sql ("INSERT into escalators" " (id, uuid, owner, name, comment, event, condition, method)" " SELECT" " id, make_uuid (), owner, name, comment, event, condition, method" " FROM escalators_18;"); sql ("DROP TABLE escalators_18;"); sql ("ALTER TABLE lsc_credentials RENAME TO lsc_credentials_18;"); sql ("CREATE TABLE lsc_credentials" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, login," " password, comment, public_key TEXT, private_key TEXT, rpm TEXT," " deb TEXT, exe TEXT);"); sql ("INSERT into lsc_credentials" " (id, uuid, owner, name, login, password, comment, public_key," " private_key, rpm, deb, exe)" " SELECT" " id, make_uuid (), owner, name, login, password, comment, public_key," " private_key, rpm, deb, exe" " FROM lsc_credentials_18;"); sql ("DROP TABLE lsc_credentials_18;"); sql ("ALTER TABLE targets RENAME TO targets_18;"); sql ("CREATE TABLE targets" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, hosts," " comment, lsc_credential INTEGER);"); sql ("INSERT into targets" " (id, uuid, owner, name, hosts, comment, lsc_credential)" " SELECT" " id, make_uuid (), owner, name, hosts, comment, lsc_credential" " FROM targets_18;"); sql ("DROP TABLE targets_18;"); /* Set the new predefined UUIDs. */ sql ("UPDATE configs" " SET uuid = '" CONFIG_UUID_FULL_AND_FAST "'" " WHERE id = " G_STRINGIFY (CONFIG_ID_FULL_AND_FAST) ";"); sql ("UPDATE configs" " SET uuid = '" CONFIG_UUID_FULL_AND_FAST_ULTIMATE "'" " WHERE id = " G_STRINGIFY (CONFIG_ID_FULL_AND_FAST_ULTIMATE) ";"); sql ("UPDATE configs" " SET uuid = '" CONFIG_UUID_FULL_AND_VERY_DEEP "'" " WHERE id = " G_STRINGIFY (CONFIG_ID_FULL_AND_VERY_DEEP) ";"); sql ("UPDATE configs" " SET uuid = '" CONFIG_UUID_FULL_AND_VERY_DEEP_ULTIMATE "'" " WHERE id = " G_STRINGIFY (CONFIG_ID_FULL_AND_VERY_DEEP_ULTIMATE) ";"); sql ("UPDATE configs" " SET uuid = '" CONFIG_UUID_EMPTY "'" " WHERE name = 'empty';"); sql ("UPDATE targets" " SET uuid = '" TARGET_UUID_LOCALHOST "'" " WHERE name = 'Localhost';"); /* Set the database version to 19. */ set_db_version (19); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 19 to version 20. * * @return 0 success, -1 error. */ int migrate_19_to_20 () { iterator_t rows; sql_begin_exclusive (); /* Ensure that the database is currently version 19. */ if (manage_db_version () != 19) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The agents table got new columns. In particular the installer column * moved to installer_64 and the table got a new installer column with the * plain installer. */ /** @todo ROLLBACK on failure. */ sql ("ALTER TABLE agents ADD COLUMN installer_64 TEXT;"); sql ("ALTER TABLE agents ADD COLUMN installer_signature_64 TEXT;"); sql ("ALTER TABLE agents ADD COLUMN installer_trust INTEGER;"); init_iterator (&rows, "SELECT id, installer FROM agents;"); while (next (&rows)) { const char *installer_64 = iterator_string (&rows, 1); gchar *installer; gsize installer_size; int ret; sql_stmt_t* stmt; sql ("UPDATE agents SET" " installer_trust = %i," " installer_64 = installer," " installer_signature_64 = ''" " WHERE id = %llu", TRUST_UNKNOWN, iterator_int64 (&rows, 0)); stmt = sql_prepare ("UPDATE agents SET installer = $1" " WHERE id = %llu;", iterator_int64 (&rows, 0)); /* Prepare statement. */ if (stmt == NULL) { g_warning ("%s: sql_prepare failed\n", __FUNCTION__); cleanup_iterator (&rows); sql ("ROLLBACK;"); return -1; } if (strlen (installer_64) > 0) installer = (gchar*) g_base64_decode (installer_64, &installer_size); else { installer = g_strdup (""); installer_size = 0; } /* Bind the packages to the "$1" in the SQL statement. */ if (sql_bind_text (stmt, 1, installer, installer_size)) { g_warning ("%s: sql_bind_text failed\n", __FUNCTION__); cleanup_iterator (&rows); sql ("ROLLBACK;"); g_free (installer); return -1; } g_free (installer); /* Run the statement. */ while ((ret = sql_exec (stmt)) > 0); if (ret < 0) { g_warning ("%s: sql_exec failed\n", __FUNCTION__); cleanup_iterator (&rows); sql ("ROLLBACK;"); return -1; } sql_finalize (stmt); } cleanup_iterator (&rows); /* Set the database version to 20. */ set_db_version (20); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 20 to version 21. * * @return 0 success, -1 error. */ int migrate_20_to_21 () { sql_begin_exclusive (); /* Ensure that the database is currently version 20. */ if (manage_db_version () != 20) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The agents table got an installer_filename columns. */ /** @todo ROLLBACK on failure. */ sql ("ALTER TABLE agents ADD COLUMN installer_filename TEXT;"); /* Set the database version to 21. */ set_db_version (21); sql ("COMMIT;"); return 0; } /** * @brief Migrate the report formats from version 21 to version 22. * * @return 0 success, -1 error. */ int migrate_21_to_22 () { iterator_t rows; sql_begin_exclusive (); /* Ensure that the database is currently version 21. */ if (manage_db_version () != 21) { sql ("ROLLBACK;"); return -1; } /* Update the report formats. * * The name of the report format directories on disk changed from the report * format name to the report format UUID. */ /** @todo ROLLBACK on failure. */ /* Ensure that the report_formats table exists. */ sql ("CREATE TABLE IF NOT EXISTS report_formats" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, name, extension," " content_type, summary, description);"); /* Ensure that the predefined formats all exist in the database. */ if (sql_int ("SELECT count(*) FROM report_formats WHERE name = 'CPE';") == 0) sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type)" " VALUES (make_uuid (), NULL, 'CPE'," " 'Common Product Enumeration CSV table.'," " 'CPE stands for Common Product Enumeration. It is a structured naming scheme for\n" "information technology systems, platforms, and packages. In other words: CPE\n" "provides a unique identifier for virtually any software product that is known for\n" "a vulnerability.\n" "\n" "The CPE dictionary is maintained by MITRE and NIST. MITRE also maintains CVE\n" "(Common Vulnerability Enumeration) and other relevant security standards.\n" "\n" "The report selects all CPE tables from the results and forms a single table\n" "as a comma separated values file.\n'," " 'csv', 'text/csv');"); if (sql_int ("SELECT count(*) FROM report_formats WHERE name = 'HTML';") == 0) sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type)" " VALUES (make_uuid (), NULL, 'HTML', 'Single page HTML report.'," " 'A single HTML page listing results of a scan. Style information is embedded in\n" "the HTML, so the page is suitable for viewing in a browser as is.\n'," " 'html', 'text/html');"); if (sql_int ("SELECT count(*) FROM report_formats WHERE name = 'ITG';") == 0) sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type)" " VALUES (make_uuid (), NULL, 'ITG'," " 'German \"IT-Grundschutz-Kataloge\" report.'," " 'Tabular report on the German \"IT-Grundschutz-Kataloge\",\n" "as published and maintained by the German Federal Agency for IT-Security.\n'," " 'csv', 'text/csv');"); if (sql_int ("SELECT count(*) FROM report_formats WHERE name = 'LaTeX';") == 0) sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type)" " VALUES (make_uuid (), NULL, 'LaTeX'," " 'LaTeX source file.'," " 'Report as LaTeX source file for further processing.\n'," " 'tex', 'text/plain');"); if (sql_int ("SELECT count(*) FROM report_formats WHERE name = 'NBE';") == 0) sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type)" " VALUES (make_uuid (), NULL, 'NBE', 'Legacy OpenVAS report.'," " 'The traditional OpenVAS Scanner text based format.'," " 'nbe', 'text/plain');"); if (sql_int ("SELECT count(*) FROM report_formats WHERE name = 'PDF';") == 0) sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type)" " VALUES (make_uuid (), NULL, 'PDF'," " 'Portable Document Format report.'," " 'Scan results in Portable Document Format (PDF).'," "'pdf', 'application/pdf');"); if (sql_int ("SELECT count(*) FROM report_formats WHERE name = 'TXT';") == 0) sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type)" " VALUES (make_uuid (), NULL, 'TXT', 'Plain text report.'," " 'Plain text report, best viewed with fixed font size.'," " 'txt', 'text/plain');"); if (sql_int ("SELECT count(*) FROM report_formats WHERE name = 'XML';") == 0) sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type)" " VALUES (make_uuid (), NULL, 'XML'," " 'Raw XML report.'," " 'Complete scan report in OpenVAS Manager XML format.'," " 'xml', 'text/xml');"); /* Update the UUIDs of the predefined formats to the new predefined UUIDs. */ sql ("UPDATE report_formats SET uuid = 'a0704abb-2120-489f-959f-251c9f4ffebd'" " WHERE name = 'CPE'"); sql ("UPDATE report_formats SET uuid = 'b993b6f5-f9fb-4e6e-9c94-dd46c00e058d'" " WHERE name = 'HTML'"); sql ("UPDATE report_formats SET uuid = '929884c6-c2c4-41e7-befb-2f6aa163b458'" " WHERE name = 'ITG'"); sql ("UPDATE report_formats SET uuid = '9f1ab17b-aaaa-411a-8c57-12df446f5588'" " WHERE name = 'LaTeX'"); sql ("UPDATE report_formats SET uuid = 'f5c2a364-47d2-4700-b21d-0a7693daddab'" " WHERE name = 'NBE'"); sql ("UPDATE report_formats SET uuid = '1a60a67e-97d0-4cbf-bc77-f71b08e7043d'" " WHERE name = 'PDF'"); sql ("UPDATE report_formats SET uuid = '19f6f1b3-7128-4433-888c-ccc764fe6ed5'" " WHERE name = 'TXT'"); sql ("UPDATE report_formats SET uuid = 'd5da9f67-8551-4e51-807b-b6a873d70e34'" " WHERE name = 'XML'"); /* Rename the directories. */ init_iterator (&rows, "SELECT id, uuid, owner, name FROM report_formats;"); while (next (&rows)) { const char *name, *uuid; gchar *old_dir, *new_dir; int user_format = 0; uuid = iterator_string (&rows, 1); name = iterator_string (&rows, 3); if (sql_int ("SELECT owner is NULL FROM report_formats" " WHERE id = %llu;", iterator_int64 (&rows, 0))) { /* Global. */ old_dir = g_build_filename (OPENVAS_SYSCONF_DIR, "openvasmd", "global_report_formats", name, NULL); new_dir = g_build_filename (OPENVAS_SYSCONF_DIR, "openvasmd", "global_report_formats", uuid, NULL); } else { char *owner_uuid; owner_uuid = sql_string ("SELECT uuid FROM users" " WHERE id = %llu;", iterator_int64 (&rows, 2)); if (owner_uuid == NULL) { g_warning ("%s: owner missing from users table\n", __FUNCTION__); cleanup_iterator (&rows); sql ("ROLLBACK;"); return -1; } old_dir = g_build_filename (OPENVAS_SYSCONF_DIR, "openvasmd", "report_formats", owner_uuid, name, NULL); new_dir = g_build_filename (OPENVAS_SYSCONF_DIR, "openvasmd", "report_formats", owner_uuid, uuid, NULL); free (owner_uuid); user_format = 1; } if (g_file_test (new_dir, G_FILE_TEST_EXISTS)) { if (g_file_test (old_dir, G_FILE_TEST_EXISTS) && openvas_file_remove_recurse (old_dir)) g_warning ("%s: failed to remove %s\n", __FUNCTION__, old_dir); } /* If the old dir of a predefined format is missing that's OK, the * Manager will create the dir when it starts proper. */ else if ((g_file_test (old_dir, G_FILE_TEST_EXISTS) || user_format) && rename (old_dir, new_dir)) { g_warning ("%s: renaming %s to %s failed: %s\n", __FUNCTION__, old_dir, new_dir, strerror (errno)); g_free (old_dir); g_free (new_dir); cleanup_iterator (&rows); sql ("ROLLBACK;"); return -1; } g_free (old_dir); g_free (new_dir); } /* Set the database version to 22. */ set_db_version (22); sql ("COMMIT;"); return 0; } /** * @brief Migrate the report formats from version 22 to version 23. * * @return 0 success, -1 error. */ int migrate_22_to_23 () { sql_begin_exclusive (); /* Ensure that the database is currently version 22. */ if (manage_db_version () != 22) { sql ("ROLLBACK;"); return -1; } /* Update the report formats. * * The report_formats table got signature and trust columns. */ /** @todo ROLLBACK on failure. */ sql ("ALTER TABLE report_formats ADD COLUMN signature;"); sql ("UPDATE report_formats SET signature = '';"); sql ("ALTER TABLE report_formats ADD COLUMN trust;"); sql ("UPDATE report_formats SET trust = %i;", TRUST_UNKNOWN); /* Set the database version to 23. */ set_db_version (23); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 23 to version 24. * * @return 0 success, -1 error. */ int migrate_23_to_24 () { sql_begin_exclusive (); /* Ensure that the database is currently version 23. */ if (manage_db_version () != 23) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The 8 to 9 migrator cast owner to an integer because owner had * changed from a string to an integer. This means empty strings would * be converted to 0 instead of NULL, so convert any 0's to NULL. */ sql ("UPDATE tasks SET owner = NULL where owner = 0;"), /* Set the database version to 24. */ set_db_version (24); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 24 to version 25. * * @return 0 success, -1 error. */ int migrate_24_to_25 () { iterator_t rows; sql_begin_exclusive (); /* Ensure that the database is currently version 24. */ if (manage_db_version () != 24) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Missing parameter chunking handling in the GSA may have resulted in * empty options in NVT radio preference values. */ init_iterator (&rows, "SELECT id, name, value FROM nvt_preferences;"); while (next (&rows)) { const char *name; int type_start = -1, type_end = -1, count; name = iterator_string (&rows, 1); /* NVT[radio]:Preference */ count = sscanf (name, "%*[^[][%nradio%n]:", &type_start, &type_end); if (count == 0 && type_start > 0 && type_end > 0) { const char *value; gchar **split, **point, *quoted_value; GString *string; gboolean first; /* Flush any empty options (";a;;b;" becomes "a;b"). */ first = TRUE; value = iterator_string (&rows, 2); split = g_strsplit (value, ";", 0); string = g_string_new (""); point = split; while (*point) { if (strlen (*point)) { if (first) first = FALSE; else g_string_append_c (string, ';'); g_string_append (string, *point); } point++; } g_strfreev (split); quoted_value = sql_nquote (string->str, string->len); g_string_free (string, TRUE); sql ("UPDATE nvt_preferences SET value = '%s' WHERE id = %llu", quoted_value, iterator_int64 (&rows, 0)); g_free (quoted_value); } } cleanup_iterator (&rows); init_iterator (&rows, "SELECT id, name, value FROM config_preferences" " WHERE type = 'PLUGINS_PREFS';"); while (next (&rows)) { const char *name; int type_start = -1, type_end = -1, count; name = iterator_string (&rows, 1); /* NVT[radio]:Preference */ count = sscanf (name, "%*[^[][%nradio%n]:", &type_start, &type_end); if (count == 0 && type_start > 0 && type_end > 0) { const char *value; gchar **split, **point, *quoted_value; GString *string; gboolean first; /* Flush any empty options (";a;;b;" becomes "a;b"). */ first = TRUE; value = iterator_string (&rows, 2); split = g_strsplit (value, ";", 0); string = g_string_new (""); point = split; while (*point) { if (strlen (*point)) { if (first) first = FALSE; else g_string_append_c (string, ';'); g_string_append (string, *point); } point++; } g_strfreev (split); quoted_value = sql_nquote (string->str, string->len); g_string_free (string, TRUE); sql ("UPDATE config_preferences SET value = '%s' WHERE id = %llu", quoted_value, iterator_int64 (&rows, 0)); g_free (quoted_value); } } cleanup_iterator (&rows); /* Set the database version to 25. */ set_db_version (25); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 25 to version 26. * * @return 0 success, -1 error. */ int migrate_25_to_26 () { sql_begin_exclusive (); /* Ensure that the database is currently version 25. */ if (manage_db_version () != 25) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The report_formats table got a trust_time column. */ sql ("ALTER TABLE report_formats ADD column trust_time;"); sql ("UPDATE report_formats SET trust_time = %i;", time (NULL)); /* Set the database version to 26. */ set_db_version (26); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 26 to version 27. * * @return 0 success, -1 error. */ int migrate_26_to_27 () { sql_begin_exclusive (); /* Ensure that the database is currently version 26. */ if (manage_db_version () != 26) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The reports table got a slave_progress column and the tasks table got a * slave column. */ sql ("ALTER TABLE reports ADD column slave_progress;"); sql ("UPDATE reports SET slave_progress = 0;"); sql ("ALTER TABLE tasks ADD column slave;"); sql ("UPDATE tasks SET slave = 0;"); /* Set the database version to 27. */ set_db_version (27); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 27 to version 28. * * @return 0 success, -1 error. */ int migrate_27_to_28 () { sql_begin_exclusive (); /* Ensure that the database is currently version 27. */ if (manage_db_version () != 27) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The report_formats table got a flags column. */ sql ("ALTER TABLE report_formats ADD COLUMN flags INTEGER;"); sql ("UPDATE report_formats SET flags = 1;"); /* Set the database version to 28. */ set_db_version (28); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 27 to version 28. * * @return 0 success, -1 error. */ int migrate_28_to_29 () { sql_begin_exclusive (); /* Ensure that the database is currently version 28. */ if (manage_db_version () != 28) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The reports table got a slave_task_uuid column. */ sql ("ALTER TABLE reports ADD COLUMN slave_task_uuid;"); sql ("UPDATE reports SET slave_task_uuid = ''"); /* Set the database version to 29. */ set_db_version (29); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 29 to version 30. * * @return 0 success, -1 error. */ int migrate_29_to_30 () { sql_begin_exclusive (); /* Ensure that the database is currently version 29. */ if (manage_db_version () != 29) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The agents table got an installer_trust_time column. */ sql ("ALTER TABLE agents ADD column installer_trust_time;"); sql ("UPDATE agents SET installer_trust_time = %i;", time (NULL)); /* Set the database version to 30. */ set_db_version (30); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 30 to version 31. * * @return 0 success, -1 error. */ int migrate_30_to_31 () { sql_begin_exclusive (); /* Ensure that the database is currently version 30. */ if (manage_db_version () != 30) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Slaves switched from being targets to being resources of their own. * Just clear any task slaves. */ sql ("UPDATE tasks SET slave = 0;"); /* Set the database version to 31. */ set_db_version (31); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 31 to version 32. * * @return 0 success, -1 error. */ int migrate_31_to_32 () { sql_begin_exclusive (); /* Ensure that the database is currently version 31. */ if (manage_db_version () != 31) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Ensure that the report_format_params table exists. */ sql ("CREATE TABLE IF NOT EXISTS report_format_params" " (id INTEGER PRIMARY KEY, report_format, name, value);"); /* The report_format_params table got a type column. */ sql ("ALTER TABLE report_format_params ADD column type INTEGER;"); sql ("UPDATE report_format_params SET type = 3;"); /* Set the database version to 32. */ set_db_version (32); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 32 to version 33. * * @return 0 success, -1 error. */ int migrate_32_to_33 () { sql_begin_exclusive (); /* Ensure that the database is currently version 32. */ if (manage_db_version () != 32) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The report_format_params table got a few new columns. */ sql ("ALTER TABLE report_format_params ADD column type_min;"); sql ("UPDATE report_format_params SET type_min = %lli;", LLONG_MIN); sql ("ALTER TABLE report_format_params ADD column type_max;"); sql ("UPDATE report_format_params SET type_max = %lli;", LLONG_MAX); sql ("ALTER TABLE report_format_params ADD column type_regex;"); sql ("UPDATE report_format_params SET type_regex = '';"); sql ("ALTER TABLE report_format_params ADD column fallback;"); sql ("UPDATE report_format_params SET fallback = value;"); /* Set the database version to 33. */ set_db_version (33); sql ("COMMIT;"); return 0; } /** * @brief Set the pref for migrate_33_to_34. * * @param[in] config Config to set pref on. */ void migrate_33_to_34_set_pref (config_t config) { if (sql_int ("SELECT count(*) FROM config_preferences" " WHERE config = %llu" " AND name =" " 'Login configurations[checkbox]:NTLMSSP';", config) == 0) sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%llu, 'PLUGINS_PREFS'," " 'Login configurations[checkbox]:NTLMSSP'," " 'yes');", config); } /** * @brief Migrate the database from version 33 to version 34. * * @return 0 success, -1 error. */ int migrate_33_to_34 () { sql_begin_exclusive (); /* Ensure that the database is currently version 33. */ if (manage_db_version () != 33) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The preference "NTLMSSP" was set to yes in the predefined configs. */ /** @todo ROLLBACK on failure. */ migrate_33_to_34_set_pref (CONFIG_ID_FULL_AND_FAST); migrate_33_to_34_set_pref (CONFIG_ID_FULL_AND_FAST_ULTIMATE); migrate_33_to_34_set_pref (CONFIG_ID_FULL_AND_VERY_DEEP); migrate_33_to_34_set_pref (CONFIG_ID_FULL_AND_VERY_DEEP_ULTIMATE); /* Set the database version to 34. */ set_db_version (34); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 34 to version 35. * * @return 0 success, -1 error. */ int migrate_34_to_35 () { sql_begin_exclusive (); /* Ensure that the database is currently version 34. */ if (manage_db_version () != 34) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The LSC credential element of the target resource was split into two * elements, for SSH and SMB. */ /** @todo ROLLBACK on failure. */ sql ("ALTER TABLE targets ADD column smb_lsc_credential;"); sql ("UPDATE targets SET smb_lsc_credential = lsc_credential;"); /* Set the database version to 35. */ set_db_version (35); sql ("COMMIT;"); return 0; } /** * @brief Make a copy of a target. * * @param[in] target Target to copy. * @param[in] name Name for new target. * * @return Address of matching character, else NULL. */ target_t migrate_35_to_36_duplicate_target (target_t target, const char *name) { char *quoted_name = sql_quote (name); sql ("INSERT INTO targets" " (uuid, owner, name, hosts, comment, lsc_credential," " smb_lsc_credential)" " SELECT make_uuid (), owner, uniquify ('target', '%s', owner, '')," " hosts, comment, lsc_credential, smb_lsc_credential" " FROM targets WHERE id = %llu;", quoted_name, target); g_free (quoted_name); return sql_last_insert_id (); } /** * @brief Migrate the database from version 35 to version 36. * * @return 0 success, -1 error. */ int migrate_35_to_36 () { iterator_t tasks; char *scanner_range, *quoted_scanner_range; sql_begin_exclusive (); /* Ensure that the database is currently version 35. */ if (manage_db_version () != 35) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* For a time between 1.0.0 beta3 and 1.0.0 beta5 the Manager would create * the example task with name references to the target and config, instead * of ID references. Correct this now. */ sql ("UPDATE tasks SET" " target = (SELECT id FROM targets WHERE name = 'Localhost')," " config = (SELECT id FROM configs WHERE name = 'Full and fast')" " WHERE uuid = '" MANAGE_EXAMPLE_TASK_UUID "';"); /* Scanner preference "port_range" moved from config into target. */ /** @todo ROLLBACK on failure. */ sql ("ALTER TABLE targets ADD column port_range;"); sql ("UPDATE targets SET port_range = NULL;"); scanner_range = sql_string ("SELECT value FROM nvt_preferences" " WHERE name = 'port_range'"); if (scanner_range) { quoted_scanner_range = sql_quote (scanner_range); free (scanner_range); } else quoted_scanner_range = NULL; init_iterator (&tasks, "SELECT id, target, config FROM tasks;"); while (next (&tasks)) { char *config_range, *quoted_config_range; target_t target; target = iterator_int64 (&tasks, 1); if (sql_int ("SELECT port_range IS NULL FROM targets WHERE id = %llu;", target) == 0) { gchar *name; /* Already used this target, use a copy of it. */ name = sql_string ("SELECT name || ' Migration' FROM targets" " WHERE id = %llu;", target); assert (name); target = migrate_35_to_36_duplicate_target (target, name); free (name); sql ("UPDATE tasks SET target = %llu WHERE id = %llu", target, iterator_int64 (&tasks, 0)); } config_range = sql_string ("SELECT value FROM config_preferences" " WHERE config = %llu" " AND name = 'port_range';", iterator_int64 (&tasks, 2)); if (config_range) { quoted_config_range = sql_quote (config_range); free (config_range); } else quoted_config_range = NULL; sql ("UPDATE targets SET port_range = '%s'" " WHERE id = %llu;", quoted_config_range ? quoted_config_range : (quoted_scanner_range ? quoted_scanner_range : "default"), target); free (quoted_config_range); } cleanup_iterator (&tasks); sql ("UPDATE targets SET port_range = 'default' WHERE port_range IS NULL;"); sql ("DELETE FROM config_preferences WHERE name = 'port_range';"); sql ("DELETE FROM nvt_preferences WHERE name = 'port_range';"); free (quoted_scanner_range); /* Set the database version to 36. */ set_db_version (36); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 36 to version 37. * * @return 0 success, -1 error. */ int migrate_36_to_37 () { sql_begin_exclusive (); /* Ensure that the database is currently version 36. */ if (manage_db_version () != 36) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The target and config clauses were swapped in the example task statement in migrate_35_to_36 in SVN for some time. Run the statement again with the correct clauses. */ sql ("UPDATE tasks SET" " target = (SELECT id FROM targets WHERE name = 'Localhost')," " config = (SELECT id FROM configs WHERE name = 'Full and fast')" " WHERE uuid = '" MANAGE_EXAMPLE_TASK_UUID "';"); /* Set the database version to 37. */ set_db_version (37); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 37 to version 38. * * @return 0 success, -1 error. */ int migrate_37_to_38 () { gchar *old_dir, *new_dir; sql_begin_exclusive (); /* Ensure that the database is currently version 37. */ if (manage_db_version () != 37) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The report formats moved to FHS compliant locations. */ /* Remove the global report format dirs, as they should have been * installed in the new location already. */ old_dir = g_build_filename (OPENVAS_SYSCONF_DIR, "openvasmd", "global_report_formats", NULL); openvas_file_remove_recurse (old_dir); g_free (old_dir); /* Move user uploaded report formats. */ new_dir = g_build_filename (OPENVAS_STATE_DIR, "openvasmd", NULL); if (g_mkdir_with_parents (new_dir, 0755 /* "rwxr-xr-x" */)) { g_warning ("%s: failed to create dir %s", __FUNCTION__, new_dir); g_free (new_dir); sql ("ROLLBACK;"); return -1; } old_dir = g_build_filename (OPENVAS_SYSCONF_DIR, "openvasmd", "report_formats", NULL); /* Ensure the old dir exists. */ g_mkdir_with_parents (old_dir, 0755 /* "rwxr-xr-x" */); { gchar **cmd; gchar *standard_out = NULL; gchar *standard_err = NULL; gint exit_status; cmd = (gchar **) g_malloc (4 * sizeof (gchar *)); cmd[0] = g_strdup ("mv"); cmd[1] = old_dir; cmd[2] = new_dir; cmd[3] = NULL; g_debug ("%s: Spawning in .: %s %s %s\n", __FUNCTION__, cmd[0], cmd[1], cmd[2]); if ((g_spawn_sync (".", cmd, NULL, /* Environment. */ G_SPAWN_SEARCH_PATH, NULL, /* Setup function. */ NULL, &standard_out, &standard_err, &exit_status, NULL) == FALSE) || (WIFEXITED (exit_status) == 0) || WEXITSTATUS (exit_status)) { g_warning ("%s: failed rename: %d (WIF %i, WEX %i)", __FUNCTION__, exit_status, WIFEXITED (exit_status), WEXITSTATUS (exit_status)); g_debug ("%s: stdout: %s\n", __FUNCTION__, standard_out); g_debug ("%s: stderr: %s\n", __FUNCTION__, standard_err); g_free (old_dir); g_free (new_dir); g_free (cmd[0]); g_free (cmd); sql ("ROLLBACK;"); return -1; } g_free (cmd[0]); g_free (cmd); } g_free (old_dir); g_free (new_dir); /* Set the database version to 38. */ set_db_version (38); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 38 to version 39. * * @return 0 success, -1 error. */ int migrate_38_to_39 () { sql_begin_exclusive (); /* Ensure that the database is currently version 38. */ if (manage_db_version () != 38) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The w3af NVT (80109) was removed from the predefined configs. */ /* Just update the config comments, because init_manage will add the new * selectors. */ sql ("UPDATE configs SET comment =" " 'Most NVT''s; optimized by using previously collected information.'" " WHERE id = " G_STRINGIFY (CONFIG_ID_FULL_AND_FAST) ";"); sql ("UPDATE configs SET comment =" " 'Most NVT''s including those that can stop services/hosts;" " optimized by using previously collected information.'" " WHERE id = " G_STRINGIFY (CONFIG_ID_FULL_AND_FAST_ULTIMATE) ";"); sql ("UPDATE configs SET comment =" " 'Most NVT''s; don''t trust previously collected information; slow.'" " WHERE id = " G_STRINGIFY (CONFIG_ID_FULL_AND_VERY_DEEP) ";"); sql ("UPDATE configs SET comment =" " 'Most NVT''s including those that can stop services/hosts;" " don''t trust previously collected information; slow.'" " WHERE id = " G_STRINGIFY (CONFIG_ID_FULL_AND_VERY_DEEP_ULTIMATE) ";"); /* Set the database version to 39. */ set_db_version (39); sql ("COMMIT;"); return 0; } /** * @brief Set the pref for migrate_39_to_40. * * @param[in] config Config to set pref on. */ void migrate_39_to_40_set_pref (config_t config) { sql ("UPDATE config_preferences SET value = 'yes'" " WHERE config = %llu" " AND type = 'SERVER_PREFS'" " AND name = 'unscanned_closed';", config); } /** * @brief Migrate the database from version 39 to version 40. * * @return 0 success, -1 error. */ int migrate_39_to_40 () { sql_begin_exclusive (); /* Ensure that the database is currently version 39. */ if (manage_db_version () != 39) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The preference "unscanned_closed" was set to yes in the predefined * configs. */ /** @todo ROLLBACK on failure. */ migrate_39_to_40_set_pref (CONFIG_ID_FULL_AND_FAST); migrate_39_to_40_set_pref (CONFIG_ID_FULL_AND_FAST_ULTIMATE); migrate_39_to_40_set_pref (CONFIG_ID_FULL_AND_VERY_DEEP); migrate_39_to_40_set_pref (CONFIG_ID_FULL_AND_VERY_DEEP_ULTIMATE); /* Set the database version to 40. */ set_db_version (40); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 40 to version 41. * * @return 0 success, -1 error. */ int migrate_40_to_41 () { sql_begin_exclusive (); /* Ensure that the database is currently version 40. */ if (manage_db_version () != 40) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* For report formats, feed signatures were given priority over signatures * in imported XML. This includes only setting the db signature when it is * imported. So remove the db signatures for all predefined reports. */ /** @todo ROLLBACK on failure. */ sql ("UPDATE report_formats SET signature = NULL" " WHERE uuid = 'a0704abb-2120-489f-959f-251c9f4ffebd';"); sql ("UPDATE report_formats SET signature = NULL" " WHERE uuid = 'b993b6f5-f9fb-4e6e-9c94-dd46c00e058d';"); sql ("UPDATE report_formats SET signature = NULL" " WHERE uuid = '929884c6-c2c4-41e7-befb-2f6aa163b458';"); sql ("UPDATE report_formats SET signature = NULL" " WHERE uuid = '9f1ab17b-aaaa-411a-8c57-12df446f5588';"); sql ("UPDATE report_formats SET signature = NULL" " WHERE uuid = 'f5c2a364-47d2-4700-b21d-0a7693daddab';"); sql ("UPDATE report_formats SET signature = NULL" " WHERE uuid = '1a60a67e-97d0-4cbf-bc77-f71b08e7043d';"); sql ("UPDATE report_formats SET signature = NULL" " WHERE uuid = '19f6f1b3-7128-4433-888c-ccc764fe6ed5';"); sql ("UPDATE report_formats SET signature = NULL" " WHERE uuid = 'd5da9f67-8551-4e51-807b-b6a873d70e34';"); /* Set the database version to 41. */ set_db_version (41); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 41 to version 42. * * @return 0 success, -1 error. */ int migrate_41_to_42 () { sql_begin_exclusive (); /* Require that the database is currently version 41. */ if (manage_db_version () != 41) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Two task tables got trashcan location fields. */ /** @todo ROLLBACK on failure. */ sql ("ALTER TABLE tasks ADD column config_location INTEGER;"); sql ("ALTER TABLE tasks ADD column target_location INTEGER;"); sql ("ALTER TABLE tasks ADD column schedule_location INTEGER;"); sql ("ALTER TABLE tasks ADD column slave_location INTEGER;"); sql ("UPDATE tasks SET" " config_location = " G_STRINGIFY (LOCATION_TABLE) "," " target_location = " G_STRINGIFY (LOCATION_TABLE) "," " schedule_location = " G_STRINGIFY (LOCATION_TABLE) "," " slave_location = " G_STRINGIFY (LOCATION_TABLE) ";"); /* Ensure that the task_escalators table exists. */ sql ("CREATE TABLE IF NOT EXISTS task_escalators" " (id INTEGER PRIMARY KEY, task INTEGER, escalator INTEGER);"); sql ("ALTER TABLE task_escalators ADD column escalator_location INTEGER;"); sql ("UPDATE task_escalators" " SET escalator_location = " G_STRINGIFY (LOCATION_TABLE) ";"); /* Set the database version to 42. */ set_db_version (42); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 42 to version 43. * * @return 0 success, -1 error. */ int migrate_42_to_43 () { sql_begin_exclusive (); /* Require that the database is currently version 42. */ if (manage_db_version () != 42) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The targets table got an ssh_port field. */ /** @todo ROLLBACK on failure. */ /* Ensure that the targets_trash table exists. */ sql ("CREATE TABLE IF NOT EXISTS targets_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, hosts," " comment, lsc_credential INTEGER, smb_lsc_credential INTEGER," " port_range, ssh_location INTEGER, smb_location INTEGER);"); sql ("ALTER TABLE targets ADD column ssh_port;"); sql ("ALTER TABLE targets_trash ADD column ssh_port;"); sql ("UPDATE targets SET ssh_port = 22" " WHERE lsc_credential > 0;"); sql ("UPDATE targets_trash SET ssh_port = 22" " WHERE lsc_credential > 0;"); /* Set the database version to 43. */ set_db_version (43); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 43 to version 44. * * @return 0 success, -1 error. */ int migrate_43_to_44 () { sql_begin_exclusive (); /* Require that the database is currently version 43. */ if (manage_db_version () != 43) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The file permission got much tighter. */ if (chmod (task_db_name ? task_db_name : OPENVAS_STATE_DIR "/mgr/tasks.db", S_IRUSR | S_IWUSR)) { g_warning ("%s: failed to chmod %s: %s", __FUNCTION__, task_db_name ? task_db_name : OPENVAS_STATE_DIR "/mgr/tasks.db", strerror (errno)); sql ("ROLLBACK;"); return -1; } /* Set the database version to 44. */ set_db_version (44); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 44 to version 45. * * @return 0 success, -1 error. */ int migrate_44_to_45 () { sql_begin_exclusive (); /* Require that the database is currently version 44. */ if (manage_db_version () != 44) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The tasks table got a upload_result_count column. */ sql ("ALTER TABLE tasks ADD column upload_result_count;"); sql ("UPDATE tasks SET upload_result_count = -1;"); /* Set the database version to 45. */ set_db_version (45); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 45 to version 46. * * @return 0 success, -1 error. */ int migrate_45_to_46 () { sql_begin_exclusive (); /* Require that the database is currently version 45. */ if (manage_db_version () != 45) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* CREATE_TARGET now cleans the hosts string. */ sql ("UPDATE targets SET hosts = clean_hosts (hosts);"); sql ("UPDATE targets_trash SET hosts = clean_hosts (hosts);"); /* Set the database version to 46. */ set_db_version (46); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 46 to version 47. * * @return 0 success, -1 error. */ int migrate_46_to_47 () { sql_begin_exclusive (); /* Require that the database is currently version 46. */ if (manage_db_version () != 46) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Performance prefs move from config to task. */ /* Ensure that the table exists. */ sql ("CREATE TABLE IF NOT EXISTS task_preferences" " (id INTEGER PRIMARY KEY, task INTEGER, name, value);"); sql ("INSERT INTO task_preferences (task, name, value)" " SELECT tasks.id, config_preferences.name, config_preferences.value" " FROM tasks, config_preferences" " WHERE tasks.config = config_preferences.config" " AND (config_preferences.name = 'max_checks'" " OR config_preferences.name = 'max_hosts')"); /* Set the database version to 47. */ set_db_version (47); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 47 to version 48. * * @return 0 success, -1 error. */ int migrate_47_to_48 () { sql_begin_exclusive (); /* Require that the database is currently version 47. */ if (manage_db_version () != 47) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Scanner "app" host detail changed name to "App". */ /* Ensure that the table exists. */ sql ("CREATE TABLE IF NOT EXISTS report_host_details" " (id INTEGER PRIMARY KEY, report_host INTEGER, source_type," " source_name, source_description, name, value);"); sql ("UPDATE report_host_details SET name = 'App' WHERE name = 'app';"); /* Set the database version to 48. */ set_db_version (48); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 48 to version 49. * * @return 0 success, -1 error. */ int migrate_48_to_49 () { sql_begin_exclusive (); /* Require that the database is currently version 48. */ if (manage_db_version () != 48) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* If the example task was created before version 14 then the 13 to 14 * migrator would have given the example result an arbitrary UUID instead * of the predefined one. * * Also, the host of the example result has now changed to an IP. */ sql ("UPDATE results SET uuid = 'cb291ec0-1b0d-11df-8aa1-002264764cea'" " WHERE host = 'localhost';"); sql ("UPDATE results SET host = '127.0.0.1'" " WHERE uuid = 'cb291ec0-1b0d-11df-8aa1-002264764cea';"); sql ("UPDATE report_hosts SET host = '127.0.0.1'" " WHERE host = 'localhost';"); /* Set the database version to 49. */ set_db_version (49); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 49 to version 50. * * @return 0 success, -1 error. */ int migrate_49_to_50 () { sql_begin_exclusive (); /* Ensure that the database is currently version 49. */ if (manage_db_version () != 49) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The UNIQUE constraint in task_preferences was removed. */ /* Move the table away. */ sql ("ALTER TABLE task_preferences RENAME TO task_preferences_49;"); /* Create the table in the new format. */ sql ("CREATE TABLE IF NOT EXISTS task_preferences" " (id INTEGER PRIMARY KEY, task INTEGER, name, value);"); /* Copy the data into the new table. */ sql ("INSERT into task_preferences" " (id, task, name, value)" " SELECT" " id, task, name, value" " FROM task_preferences_49;"); /* Drop the old tables. */ sql ("DROP TABLE task_preferences_49;"); /* Set the database version to 50. */ set_db_version (50); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 50 to version 51. * * @return 0 success, -1 error. */ int migrate_50_to_51 () { sql_begin_exclusive (); /* Ensure that the database is currently version 50. */ if (manage_db_version () != 50) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The user table got a timezone column. */ sql ("ALTER TABLE users ADD column timezone;"); sql ("UPDATE users SET timezone = NULL;"); /* Set the database version to 51. */ set_db_version (51); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 51 to version 52. * * @return 0 success, -1 error. */ int migrate_51_to_52 () { sql_begin_exclusive (); /* Ensure that the database is currently version 51. */ if (manage_db_version () != 51) { sql ("ROLLBACK;"); return -1; } /* Add an SQL helper. */ if (manage_create_migrate_51_to_52_convert ()) { sql ("ROLLBACK;"); g_critical ("%s: failed to create convert", __FUNCTION__); return -1; } /* Update the database. */ /* Date storage switched from text format to seconds since the epoch. */ sql ("UPDATE report_hosts SET start_time = convert (start_time);"); sql ("UPDATE report_hosts SET end_time = convert (end_time);"); sql ("UPDATE reports SET start_time = convert (start_time);"); sql ("UPDATE reports SET end_time = convert (end_time);"); sql ("UPDATE tasks SET start_time = convert (start_time);"); sql ("UPDATE tasks SET end_time = convert (end_time);"); /* Set the database version to 52. */ set_db_version (52); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 52 to version 53. * * @return 0 success, -1 error. */ int migrate_52_to_53 () { sql_begin_exclusive (); /* Ensure that the database is currently version 52. */ if (manage_db_version () != 52) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The overrides table got a end_time column. */ /* Ensure that the table exists. */ sql ("CREATE TABLE IF NOT EXISTS overrides" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, nvt," " creation_time, modification_time, text, hosts, port, threat," " new_threat, task INTEGER, result INTEGER);"); sql ("ALTER TABLE overrides ADD column end_time;"); sql ("UPDATE overrides SET end_time = 0;"); /* Set the database version to 53. */ set_db_version (53); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 53 to version 54. * * @return 0 success, -1 error. */ int migrate_53_to_54 () { sql_begin_exclusive (); /* Ensure that the database is currently version 53. */ if (manage_db_version () != 53) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The notes table got a end_time column. */ /* Ensure that the table exists. */ sql ("CREATE TABLE IF NOT EXISTS notes" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, nvt," " creation_time, modification_time, text, hosts, port, threat," " task INTEGER, result INTEGER);"); sql ("ALTER TABLE notes ADD column end_time;"); sql ("UPDATE notes SET end_time = 0;"); /* Set the database version to 54. */ set_db_version (54); sql ("COMMIT;"); return 0; } /** * @brief Migrate a report format from version 54 to version 55. * * @param[in] old_uuid Old UUID. * @param[in] new_uuid New UUID. * * @return 0 success, -1 error. */ int migrate_54_to_55_format (const char *old_uuid, const char *new_uuid) { gchar *dir; dir = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "global_report_formats", old_uuid, NULL); if (g_file_test (dir, G_FILE_TEST_EXISTS) && openvas_file_remove_recurse (dir)) { g_warning ("%s: failed to remove dir %s", __FUNCTION__, dir); g_free (dir); return -1; } g_free (dir); sql ("UPDATE report_formats" " SET uuid = '%s'" " WHERE uuid = '%s';", new_uuid, old_uuid); return 0; } /** * @brief Migrate the database from version 54 to version 55. * * @return 0 success, -1 error. */ int migrate_54_to_55 () { sql_begin_exclusive (); /* Ensure that the database is currently version 54. */ if (manage_db_version () != 54) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* For report formats, feed signatures were given priority over signatures * in imported XML. This includes only setting the db signature when it is * imported. So remove the db signatures for all predefined reports. */ /** @todo ROLLBACK on failure. */ if (migrate_54_to_55_format ("a0704abb-2120-489f-959f-251c9f4ffebd", "5ceff8ba-1f62-11e1-ab9f-406186ea4fc5")) { sql ("ROLLBACK;"); return -1; } if (migrate_54_to_55_format ("b993b6f5-f9fb-4e6e-9c94-dd46c00e058d", "6c248850-1f62-11e1-b082-406186ea4fc5")) { sql ("ROLLBACK;"); return -1; } if (migrate_54_to_55_format ("929884c6-c2c4-41e7-befb-2f6aa163b458", "77bd6c4a-1f62-11e1-abf0-406186ea4fc5")) { sql ("ROLLBACK;"); return -1; } if (migrate_54_to_55_format ("9f1ab17b-aaaa-411a-8c57-12df446f5588", "7fcc3a1a-1f62-11e1-86bf-406186ea4fc5")) { sql ("ROLLBACK;"); return -1; } if (migrate_54_to_55_format ("f5c2a364-47d2-4700-b21d-0a7693daddab", "9ca6fe72-1f62-11e1-9e7c-406186ea4fc5")) { sql ("ROLLBACK;"); return -1; } if (migrate_54_to_55_format ("1a60a67e-97d0-4cbf-bc77-f71b08e7043d", "a0b5bfb2-1f62-11e1-85db-406186ea4fc5")) { sql ("ROLLBACK;"); return -1; } if (migrate_54_to_55_format ("19f6f1b3-7128-4433-888c-ccc764fe6ed5", "a3810a62-1f62-11e1-9219-406186ea4fc5")) { sql ("ROLLBACK;"); return -1; } if (migrate_54_to_55_format ("d5da9f67-8551-4e51-807b-b6a873d70e34", "a994b278-1f62-11e1-96ac-406186ea4fc5")) { sql ("ROLLBACK;"); return -1; } /* Set the database version to 55. */ set_db_version (55); sql ("COMMIT;"); return 0; } /** * @brief Insert a port range. */ #define MIGRATE_55_TO_56_RANGE(type, start, end) \ sql ("INSERT INTO port_ranges" \ " (uuid, port_list, type, start, \"end\", comment, exclude)" \ " VALUES" \ " (make_uuid (), %llu, %i," \ " '" G_STRINGIFY (start) "'," \ " '" G_STRINGIFY (end) "'," \ " '', 0)", \ list, \ type) /** * @brief Ensure that the predefined port lists exist. */ void migrate_55_to_56_ensure_predefined_port_lists_exist () { if (sql_int ("SELECT count(*) FROM port_lists" " WHERE uuid = '" PORT_LIST_UUID_DEFAULT "';") == 0) { resource_t list; sql ("INSERT INTO port_lists (uuid, owner, name, comment)" " VALUES ('" PORT_LIST_UUID_DEFAULT "', NULL, 'OpenVAS Default'," " '')"); list = sql_last_insert_id (); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1, 5); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7, 7); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9, 9); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 11, 11); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 13, 13); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 15, 15); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 17, 25); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 27, 27); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 29, 29); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 31, 31); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 33, 33); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 35, 35); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 37, 39); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 41, 59); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 61, 224); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 242, 248); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 256, 268); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 280, 287); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 308, 322); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 333, 333); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 344, 700); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 702, 702); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 704, 707); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 709, 711); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 721, 721); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 723, 723); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 729, 731); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 740, 742); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 744, 744); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 747, 754); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 758, 765); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 767, 767); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 769, 777); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 780, 783); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 786, 787); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 799, 801); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 808, 808); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 810, 810); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 828, 829); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 847, 848); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 860, 860); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 871, 871); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 873, 873); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 886, 888); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 898, 898); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 900, 904); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 911, 913); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 927, 927); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 950, 950); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 953, 953); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 975, 975); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 989, 1002); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1005, 1005); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1008, 1008); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1010, 1010); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1023, 1027); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1029, 1036); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1040, 1040); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1042, 1042); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1045, 1045); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1047, 1112); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1114, 1117); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1119, 1120); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1122, 1127); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1139, 1139); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1154, 1155); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1161, 1162); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1168, 1170); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1178, 1178); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1180, 1181); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1183, 1188); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1194, 1194); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1199, 1231); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1233, 1286); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1288, 1774); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 1776, 2028); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2030, 2030); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2032, 2035); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2037, 2038); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2040, 2065); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2067, 2083); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2086, 2087); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2089, 2152); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2155, 2155); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2159, 2167); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2170, 2177); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2180, 2181); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2190, 2191); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2199, 2202); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2213, 2213); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2220, 2223); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2232, 2246); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2248, 2255); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2260, 2260); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2273, 2273); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2279, 2289); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2294, 2311); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2313, 2371); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2381, 2425); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2427, 2681); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2683, 2824); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2826, 2854); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2856, 2924); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 2926, 3096); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 3098, 3299); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 3302, 3321); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 3326, 3366); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 3372, 3403); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 3405, 3545); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 3547, 3707); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 3709, 3765); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 3767, 3770); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 3772, 3800); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 3802, 3802); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 3845, 3871); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 3875, 3876); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 3885, 3885); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 3900, 3900); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 3928, 3929); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 3939, 3939); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 3959, 3959); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 3970, 3971); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 3984, 3987); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 3999, 4036); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4040, 4042); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4045, 4045); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4080, 4080); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4096, 4100); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4111, 4111); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4114, 4114); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4132, 4134); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4138, 4138); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4141, 4145); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4154, 4154); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4160, 4160); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4199, 4200); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4242, 4242); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4300, 4300); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4321, 4321); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4333, 4333); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4343, 4351); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4353, 4358); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4369, 4369); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4400, 4400); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4442, 4457); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4480, 4480); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4500, 4500); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4545, 4547); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4555, 4555); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4557, 4557); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4559, 4559); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4567, 4568); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4600, 4601); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4658, 4662); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4672, 4672); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4752, 4752); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4800, 4802); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4827, 4827); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4837, 4839); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4848, 4849); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4868, 4869); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4885, 4885); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4894, 4894); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4899, 4899); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4950, 4950); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4983, 4983); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4987, 4989); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 4998, 4998); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5000, 5011); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5020, 5025); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5031, 5031); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5042, 5042); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5050, 5057); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5060, 5061); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5064, 5066); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5069, 5069); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5071, 5071); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5081, 5081); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5093, 5093); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5099, 5102); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5137, 5137); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5145, 5145); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5150, 5152); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5154, 5154); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5165, 5165); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5190, 5193); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5200, 5203); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5222, 5222); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5225, 5226); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5232, 5232); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5236, 5236); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5250, 5251); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5264, 5265); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5269, 5269); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5272, 5272); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5282, 5282); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5300, 5311); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5314, 5315); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5351, 5355); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5400, 5432); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5435, 5435); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5454, 5456); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5461, 5463); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5465, 5465); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5500, 5504); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5510, 5510); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5520, 5521); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5530, 5530); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5540, 5540); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5550, 5550); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5553, 5556); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5566, 5566); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5569, 5569); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5595, 5605); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5631, 5632); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5666, 5666); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5673, 5680); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5688, 5688); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5690, 5690); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5713, 5717); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5720, 5720); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5729, 5730); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5741, 5742); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5745, 5746); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5755, 5755); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5757, 5757); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5766, 5768); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5771, 5771); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5800, 5803); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5813, 5813); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5858, 5859); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5882, 5882); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5888, 5889); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5900, 5903); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5968, 5969); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5977, 5979); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5987, 5991); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 5997, 6010); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6050, 6051); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6064, 6073); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6085, 6085); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6100, 6112); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6123, 6123); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6141, 6150); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6175, 6177); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6200, 6200); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6253, 6253); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6255, 6255); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6270, 6270); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6300, 6300); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6321, 6322); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6343, 6343); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6346, 6347); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6373, 6373); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6382, 6382); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6389, 6389); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6400, 6400); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6455, 6456); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6471, 6471); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6500, 6503); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6505, 6510); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6543, 6543); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6547, 6550); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6558, 6558); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6566, 6566); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6580, 6582); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6588, 6588); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6620, 6621); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6623, 6623); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6628, 6628); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6631, 6631); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6665, 6670); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6672, 6673); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6699, 6701); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6714, 6714); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6767, 6768); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6776, 6776); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6788, 6790); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6831, 6831); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6841, 6842); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6850, 6850); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6881, 6889); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6891, 6891); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6901, 6901); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6939, 6939); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6961, 6966); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6969, 6970); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 6998, 7015); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7020, 7021); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7030, 7030); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7070, 7070); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7099, 7100); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7121, 7121); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7161, 7161); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7170, 7170); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7174, 7174); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7200, 7201); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7210, 7210); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7269, 7269); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7273, 7273); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7280, 7281); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7283, 7283); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7300, 7300); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7320, 7320); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7326, 7326); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7391, 7392); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7395, 7395); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7426, 7431); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7437, 7437); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7464, 7464); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7491, 7491); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7501, 7501); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7510, 7511); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7544, 7545); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7560, 7560); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7566, 7566); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7570, 7570); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7575, 7575); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7588, 7588); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7597, 7597); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7624, 7624); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7626, 7627); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7633, 7634); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7648, 7649); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7666, 7666); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7674, 7676); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7743, 7743); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7775, 7779); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7781, 7781); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7786, 7786); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7797, 7798); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7800, 7801); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7845, 7846); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7875, 7875); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7902, 7902); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7913, 7913); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7932, 7933); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7967, 7967); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7979, 7980); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 7999, 8005); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8007, 8010); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8022, 8022); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8032, 8033); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8044, 8044); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8074, 8074); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8080, 8082); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8088, 8089); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8098, 8098); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8100, 8100); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8115, 8116); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8118, 8118); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8121, 8122); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8130, 8132); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8160, 8161); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8181, 8194); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8199, 8201); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8204, 8208); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8224, 8225); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8245, 8245); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8311, 8311); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8351, 8351); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8376, 8380); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8400, 8403); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8416, 8417); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8431, 8431); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8443, 8444); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8450, 8450); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8473, 8473); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8554, 8555); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8649, 8649); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8733, 8733); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8763, 8765); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8786, 8787); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8804, 8804); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8863, 8864); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8875, 8875); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8880, 8880); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8888, 8894); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8900, 8901); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8910, 8911); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8954, 8954); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8989, 8989); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 8999, 9002); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9006, 9006); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9009, 9009); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9020, 9026); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9080, 9080); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9090, 9091); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9100, 9103); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9110, 9111); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9131, 9131); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9152, 9152); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9160, 9164); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9200, 9207); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9210, 9211); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9217, 9217); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9281, 9285); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9287, 9287); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9292, 9292); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9321, 9321); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9343, 9344); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9346, 9346); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9374, 9374); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9390, 9390); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9396, 9397); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9400, 9400); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9418, 9418); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9495, 9495); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9500, 9500); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9535, 9537); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9593, 9595); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9600, 9600); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9612, 9612); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9704, 9704); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9747, 9747); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9753, 9753); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9797, 9797); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9800, 9802); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9872, 9872); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9875, 9876); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9888, 9889); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9898, 9901); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9909, 9909); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9911, 9911); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9950, 9952); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 9990, 10005); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 10007, 10008); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 10012, 10012); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 10080, 10083); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 10101, 10103); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 10113, 10116); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 10128, 10128); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 10252, 10252); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 10260, 10260); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 10288, 10288); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 10607, 10607); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 10666, 10666); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 10752, 10752); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 10990, 10990); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 11000, 11001); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 11111, 11111); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 11201, 11201); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 11223, 11223); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 11319, 11321); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 11367, 11367); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 11371, 11371); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 11600, 11600); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 11720, 11720); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 11751, 11751); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 11965, 11965); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 11967, 11967); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 11999, 12006); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 12076, 12076); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 12109, 12109); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 12168, 12168); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 12172, 12172); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 12223, 12223); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 12321, 12321); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 12345, 12346); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 12361, 12362); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 12468, 12468); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 12701, 12701); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 12753, 12753); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 13160, 13160); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 13223, 13224); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 13701, 13702); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 13705, 13706); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 13708, 13718); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 13720, 13722); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 13724, 13724); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 13782, 13783); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 13818, 13822); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 14001, 14001); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 14033, 14034); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 14141, 14141); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 14145, 14145); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 14149, 14149); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 14194, 14194); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 14237, 14237); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 14936, 14937); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 15000, 15000); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 15126, 15126); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 15345, 15345); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 15363, 15363); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 16360, 16361); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 16367, 16368); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 16384, 16384); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 16660, 16661); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 16959, 16959); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 16969, 16969); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 16991, 16991); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 17007, 17007); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 17185, 17185); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 17219, 17219); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 17300, 17300); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 17770, 17772); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 18000, 18000); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 18181, 18187); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 18190, 18190); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 18241, 18241); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 18463, 18463); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 18769, 18769); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 18888, 18888); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 19191, 19191); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 19194, 19194); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 19283, 19283); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 19315, 19315); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 19398, 19398); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 19410, 19412); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 19540, 19541); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 19638, 19638); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 19726, 19726); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 20000, 20001); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 20005, 20005); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 20011, 20012); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 20034, 20034); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 20200, 20200); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 20202, 20203); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 20222, 20222); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 20670, 20670); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 20999, 21000); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 21490, 21490); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 21544, 21544); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 21590, 21590); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 21800, 21800); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 21845, 21849); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 22000, 22001); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 22222, 22222); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 22273, 22273); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 22289, 22289); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 22305, 22305); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 22321, 22321); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 22370, 22370); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 22555, 22555); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 22800, 22800); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 22951, 22951); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 23456, 23456); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 24000, 24006); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 24242, 24242); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 24249, 24249); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 24345, 24347); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 24386, 24386); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 24554, 24554); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 24677, 24678); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 24922, 24922); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 25000, 25009); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 25378, 25378); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 25544, 25544); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 25793, 25793); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 25867, 25867); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 25901, 25901); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 25903, 25903); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 26000, 26000); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 26208, 26208); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 26260, 26264); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 27000, 27010); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 27345, 27345); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 27374, 27374); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 27504, 27504); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 27665, 27665); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 27999, 27999); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 28001, 28001); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 29559, 29559); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 29891, 29891); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 30001, 30002); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 30100, 30102); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 30303, 30303); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 30999, 30999); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 31337, 31337); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 31339, 31339); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 31416, 31416); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 31457, 31457); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 31554, 31554); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 31556, 31556); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 31620, 31620); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 31765, 31765); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 31785, 31787); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 32261, 32261); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 32666, 32666); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 32768, 32780); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 32786, 32787); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 32896, 32896); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 33270, 33270); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 33331, 33331); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 33434, 33434); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 33911, 33911); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 34249, 34249); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 34324, 34324); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 34952, 34952); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 36865, 36865); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 37475, 37475); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 37651, 37651); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 38037, 38037); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 38201, 38201); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 38292, 38293); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 39681, 39681); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 40412, 40412); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 40841, 40843); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 41111, 41111); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 41508, 41508); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 41794, 41795); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 42508, 42510); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 43118, 43118); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 43188, 43190); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 44321, 44322); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 44333, 44334); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 44442, 44443); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 44818, 44818); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 45000, 45000); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 45054, 45054); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 45678, 45678); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 45966, 45966); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 47000, 47000); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 47557, 47557); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 47624, 47624); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 47806, 47806); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 47808, 47808); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 47891, 47891); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 48000, 48003); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 48556, 48556); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 49400, 49400); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 50000, 50004); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 50505, 50505); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 50776, 50776); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 51210, 51210); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 53001, 53001); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 54320, 54321); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 57341, 57341); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 59595, 59595); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 60177, 60177); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 60179, 60179); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 61439, 61441); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 61446, 61446); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 65000, 65000); MIGRATE_55_TO_56_RANGE (PORT_PROTOCOL_TCP, 65301, 65301); } } /** * @brief Migrate the database from version 55 to version 56. * * @return 0 success, -1 error. */ int migrate_55_to_56 () { iterator_t rows; sql_begin_exclusive (); /* Ensure that the database is currently version 55. */ if (manage_db_version () != 55) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The port_range in the targets and targets_trash tables changed to * refer to a port list. The targets_trash table got a port_list_location * column. */ /** @todo ROLLBACK on failure. */ /* Add the new column. */ sql ("ALTER TABLE targets_trash ADD COLUMN port_list_location;"); sql ("UPDATE targets_trash" " SET port_list_location = " G_STRINGIFY (LOCATION_TRASH) ";"); /* Ensure the new tables exist for the migrator. */ sql ("CREATE TABLE IF NOT EXISTS port_lists" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment);"); sql ("CREATE TABLE IF NOT EXISTS port_lists_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment);"); sql ("CREATE TABLE IF NOT EXISTS port_ranges" " (id INTEGER PRIMARY KEY, uuid UNIQUE, port_list INTEGER, type," " start, end, comment, exclude);"); sql ("CREATE TABLE IF NOT EXISTS port_ranges_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, port_list INTEGER, type," " start, end, comment, exclude);"); migrate_55_to_56_ensure_predefined_port_lists_exist (); /* Make a port list and port range(s) for each target. */ init_iterator (&rows, "SELECT id, owner, name, port_range FROM targets;"); while (next (&rows)) { resource_t target; const gchar *range; target = iterator_int64 (&rows, 0); range = iterator_string (&rows, 3); if (range && strcmp (range, "default")) { resource_t owner, list; const gchar *name; gchar *quoted_name; owner = iterator_int64 (&rows, 1); name = iterator_string (&rows, 2); quoted_name = sql_quote (name); /* Make the port list. Store target in comment for modification * outside iteration. */ sql ("INSERT INTO port_lists (uuid, owner, name, comment)" " VALUES (make_uuid (), %llu, '%s', %llu)", owner, quoted_name, target); g_free (quoted_name); list = sql_last_insert_id (); /* Convert old range (1-100,1649,210-214) to multiple new ranges. */ { gchar **split, **point; while (*range && isblank (*range)) range++; split = g_strsplit (range, ",", 0); point = split; while (*point) { gchar *hyphen; hyphen = strchr (*point, '-'); if (hyphen) { *hyphen = '\0'; hyphen++; /* A range. */ sql ("INSERT INTO port_ranges" " (uuid, port_list, type, start, \"end\", comment," " exclude)" " VALUES" " (make_uuid (), %llu, %i, %s, %s, '', 0)", list, PORT_PROTOCOL_TCP, *point, hyphen); } else { /* A single port. */ sql ("INSERT INTO port_ranges" " (uuid, port_list, type, start, \"end\", comment," " exclude)" " VALUES" " (make_uuid (), %llu, %i, %s, NULL, ''," " 0)", list, PORT_PROTOCOL_TCP, *point); } point += 1; } g_strfreev (split); } } else sql ("UPDATE targets SET port_range" " = (SELECT id FROM port_lists" " WHERE uuid = '" PORT_LIST_UUID_DEFAULT "')" " WHERE id = %llu;", target); } cleanup_iterator (&rows); /* Set the port_ranges of the targets to the new port lists. */ sql ("UPDATE targets SET" " port_range = (SELECT id FROM port_lists" " WHERE comment = targets.id)" " WHERE port_range" " != (SELECT id FROM port_lists" " WHERE uuid = '" PORT_LIST_UUID_DEFAULT "');"); sql ("UPDATE port_lists SET" " comment = 'Migrated from target '" " || (SELECT targets.name FROM targets" " WHERE port_lists.id = targets.port_range)" " || '.'" " WHERE uuid != '" PORT_LIST_UUID_DEFAULT "';"); /* Make a port list and port range(s) for each trash target. */ init_iterator (&rows, "SELECT id, owner, name, port_range FROM targets_trash;"); while (next (&rows)) { resource_t target; gchar *range; target = iterator_int64 (&rows, 0); range = g_strdup (iterator_string (&rows, 3)); if (range && strcmp (range, "default")) { resource_t owner, list; const gchar *name; gchar *quoted_name; owner = iterator_int64 (&rows, 1); name = iterator_string (&rows, 2); quoted_name = sql_quote (name); /* Make the port list. Store target in comment for modification * outside iteration. */ sql ("INSERT INTO port_lists_trash (uuid, owner, name, comment)" " VALUES (make_uuid (), %llu, '%s', %llu)", owner, quoted_name, target); g_free (quoted_name); list = sql_last_insert_id (); /* Convert old range (1-100,1649,210-214) to multiple new ranges. */ { gchar **split, **point; while (*range && isblank (*range)) range++; split = g_strsplit (range, ",", 0); point = split; while (*point) { gchar *hyphen; hyphen = strchr (*point, '-'); if (hyphen) { *hyphen = '\0'; hyphen++; /* A range. */ sql ("INSERT INTO port_ranges_trash" " (uuid, port_list, type, start, \"end\", comment," " exclude)" " VALUES" " (make_uuid (), %llu, %i, %s, %s, '', 0)", list, PORT_PROTOCOL_TCP, *point, hyphen); } else { /* A single port. */ sql ("INSERT INTO port_ranges_trash" " (uuid, port_list, type, start, \"end\", comment," " exclude)" " VALUES" " (make_uuid (), %llu, %i, %s, NULL, ''," " 0)", list, PORT_PROTOCOL_TCP, *point); } point += 1; } g_strfreev (split); } } else sql ("UPDATE targets_trash SET port_range" " = (SELECT id FROM port_lists" " WHERE uuid = '" PORT_LIST_UUID_DEFAULT "')," " port_list_location = " G_STRINGIFY (LOCATION_TABLE) " WHERE id = %llu;", target); g_free (range); } cleanup_iterator (&rows); /* Set the port_ranges of the trash targets to the new port lists. */ sql ("UPDATE targets_trash SET" " port_range = (SELECT id FROM port_lists_trash" " WHERE comment = targets_trash.id)" " WHERE port_range" " != (SELECT id FROM port_lists" " WHERE uuid = '" PORT_LIST_UUID_DEFAULT "');"); sql ("UPDATE port_lists_trash SET" " comment = 'Migrated from trashcan target '" " || (SELECT targets_trash.name FROM targets_trash" " WHERE port_lists_trash.id = targets_trash.port_range)" " || '.'"); /* Set the database version to 56. */ set_db_version (56); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 56 to version 57. * * @return 0 success, -1 error. */ int migrate_56_to_57 () { sql_begin_exclusive (); /* Ensure that the database is currently version 56. */ if (manage_db_version () != 56) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /** @todo ROLLBACK on failure. */ /* Ensure the new tables exist for the migrator. */ sql ("CREATE TABLE IF NOT EXISTS escalator_condition_data" " (id INTEGER PRIMARY KEY, escalator INTEGER, name, data);"); sql ("CREATE TABLE IF NOT EXISTS escalator_condition_data_trash" " (id INTEGER PRIMARY KEY, escalator INTEGER, name, data);"); sql ("CREATE TABLE IF NOT EXISTS escalator_event_data" " (id INTEGER PRIMARY KEY, escalator INTEGER, name, data);"); sql ("CREATE TABLE IF NOT EXISTS escalator_event_data_trash" " (id INTEGER PRIMARY KEY, escalator INTEGER, name, data);"); sql ("CREATE TABLE IF NOT EXISTS escalator_method_data" " (id INTEGER PRIMARY KEY, escalator INTEGER, name, data);"); sql ("CREATE TABLE IF NOT EXISTS escalator_method_data_trash" " (id INTEGER PRIMARY KEY, escalator INTEGER, name, data);"); sql ("CREATE TABLE IF NOT EXISTS escalators" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " event INTEGER, condition INTEGER, method INTEGER);"); sql ("CREATE TABLE IF NOT EXISTS escalators_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " event INTEGER, condition INTEGER, method INTEGER);"); sql ("CREATE TABLE IF NOT EXISTS task_escalators" " (id INTEGER PRIMARY KEY, task INTEGER, escalator INTEGER," " escalator_location INTEGER);"); /* Escalators were renamed to alerts. */ sql ("CREATE TABLE alert_condition_data" " (id INTEGER PRIMARY KEY, alert INTEGER, name, data);"); sql_rename_column ("escalator_condition_data", "alert_condition_data", "escalator", "alert"); sql ("DROP TABLE escalator_condition_data;"); /* Note: This is missing the escalator_condition_data_trash case. It's so * long ago that anyone who was affected has probably worked through the * problem already, so I'm leaving it like this. */ sql ("CREATE TABLE alert_event_data" " (id INTEGER PRIMARY KEY, alert INTEGER, name, data);"); sql_rename_column ("escalator_event_data", "alert_event_data", "escalator", "alert"); sql ("DROP TABLE escalator_event_data;"); sql ("CREATE TABLE alert_event_data_trash" " (id INTEGER PRIMARY KEY, alert INTEGER, name, data);"); sql_rename_column ("escalator_event_data_trash", "alert_event_data_trash", "escalator", "alert"); sql ("DROP TABLE escalator_event_data_trash;"); sql ("CREATE TABLE alert_method_data" " (id INTEGER PRIMARY KEY, alert INTEGER, name, data);"); sql_rename_column ("escalator_method_data", "alert_method_data", "escalator", "alert"); sql ("DROP TABLE escalator_method_data;"); sql ("CREATE TABLE alert_method_data_trash" " (id INTEGER PRIMARY KEY, alert INTEGER, name, data);"); sql_rename_column ("escalator_method_data_trash", "alert_method_data_trash", "escalator", "alert"); sql ("DROP TABLE escalator_method_data_trash;"); sql ("CREATE TABLE alerts" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " event INTEGER, condition INTEGER, method INTEGER);"); sql_rename_column ("escalators", "alerts", "escalator", "alert"); sql ("DROP TABLE escalators;"); sql ("CREATE TABLE alerts_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " event INTEGER, condition INTEGER, method INTEGER);"); sql_rename_column ("escalators_trash", "alerts_trash", "escalator", "alert"); sql ("DROP TABLE escalators_trash;"); sql ("CREATE TABLE task_alerts_56" " (id INTEGER PRIMARY KEY, task INTEGER, alert INTEGER," " escalator_location INTEGER);"); sql_rename_column ("task_escalators", "task_alerts_56", "escalator", "alert"); sql ("DROP TABLE task_escalators;"); sql ("CREATE TABLE task_alerts" " (id INTEGER PRIMARY KEY, task INTEGER, alert INTEGER," " alert_location INTEGER);"); sql_rename_column ("task_alerts_56", "task_alerts", "escalator_location", "alert_location"); sql ("DROP TABLE task_alerts_56;"); /* Set the database version to 57. */ set_db_version (57); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 57 to version 58. * * @return 0 success, -1 error. */ int migrate_57_to_58 () { sql_begin_exclusive (); /* Ensure that the database is currently version 57. */ if (manage_db_version () != 57) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /** @todo ROLLBACK on failure. */ /* Ensure the new tables exist for the migrator. */ sql ("CREATE TABLE IF NOT EXISTS agents_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " installer TEXT, installer_64 TEXT, installer_filename," " installer_signature_64 TEXT, installer_trust INTEGER," " installer_trust_time, howto_install TEXT, howto_use TEXT);"); /* Targets and agents got creation and modification times. */ sql ("ALTER TABLE targets ADD COLUMN creation_time;"); sql ("ALTER TABLE targets ADD COLUMN modification_time;"); sql ("UPDATE targets SET creation_time = 0, modification_time = 0;"); sql ("ALTER TABLE targets_trash ADD COLUMN creation_time;"); sql ("ALTER TABLE targets_trash ADD COLUMN modification_time;"); sql ("UPDATE targets_trash SET creation_time = 0, modification_time = 0;"); sql ("ALTER TABLE agents ADD COLUMN creation_time;"); sql ("ALTER TABLE agents ADD COLUMN modification_time;"); sql ("UPDATE agents SET creation_time = 0, modification_time = 0;"); sql ("ALTER TABLE agents_trash ADD COLUMN creation_time;"); sql ("ALTER TABLE agents_trash ADD COLUMN modification_time;"); sql ("UPDATE agents_trash SET creation_time = 0, modification_time = 0;"); /* Set the database version to 58. */ set_db_version (58); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 58 to version 59. * * @return 0 success, -1 error. */ int migrate_58_to_59 () { sql_begin_exclusive (); /* Ensure that the database is currently version 58. */ if (manage_db_version () != 58) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /** @todo ROLLBACK on failure. */ /* Database version 55 introduced new UUIDs for the predefined report formats. Update the alert method data to use these new UUIDs. */ sql ("UPDATE alert_method_data" " SET data = '5ceff8ba-1f62-11e1-ab9f-406186ea4fc5'" " WHERE data = 'a0704abb-2120-489f-959f-251c9f4ffebd';"); sql ("UPDATE alert_method_data" " SET data = '6c248850-1f62-11e1-b082-406186ea4fc5'" " WHERE data = 'b993b6f5-f9fb-4e6e-9c94-dd46c00e058d';"); sql ("UPDATE alert_method_data" " SET data = '77bd6c4a-1f62-11e1-abf0-406186ea4fc5'" " WHERE data = '929884c6-c2c4-41e7-befb-2f6aa163b458';"); sql ("UPDATE alert_method_data" " SET data = '7fcc3a1a-1f62-11e1-86bf-406186ea4fc5'" " WHERE data = '9f1ab17b-aaaa-411a-8c57-12df446f5588';"); sql ("UPDATE alert_method_data" " SET data = '9ca6fe72-1f62-11e1-9e7c-406186ea4fc5'" " WHERE data = 'f5c2a364-47d2-4700-b21d-0a7693daddab';"); sql ("UPDATE alert_method_data" " SET data = 'a0b5bfb2-1f62-11e1-85db-406186ea4fc5'" " WHERE data = '1a60a67e-97d0-4cbf-bc77-f71b08e7043d';"); sql ("UPDATE alert_method_data" " SET data = 'a3810a62-1f62-11e1-9219-406186ea4fc5'" " WHERE data = '19f6f1b3-7128-4433-888c-ccc764fe6ed5';"); sql ("UPDATE alert_method_data" " SET data = 'a994b278-1f62-11e1-96ac-406186ea4fc5'" " WHERE data = 'd5da9f67-8551-4e51-807b-b6a873d70e34';"); /* Set the database version to 59. */ set_db_version (59); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 59 to version 60. * * @return 0 success, -1 error. */ int migrate_59_to_60 () { sql_begin_exclusive (); /* Ensure that the database is currently version 59. */ if (manage_db_version () != 59) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /** @todo ROLLBACK on failure. */ /* Every task must now have an in_assets task preference. */ sql ("INSERT INTO task_preferences (task, name, value)" " SELECT id, 'in_assets', 'yes' FROM tasks;"); /* Set the database version to 60. */ set_db_version (60); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 60 to version 61. * * @return 0 success, -1 error. */ int migrate_60_to_61 () { sql_begin_exclusive (); /* Ensure that the database is currently version 60. */ if (manage_db_version () != 60) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /** @todo ROLLBACK on failure. */ /* The alerts and alerts_trash tables got filter columns. */ sql ("ALTER TABLE alerts ADD COLUMN filter INTEGER;"); sql ("UPDATE alerts SET filter = 0;"); sql ("ALTER TABLE alerts_trash ADD COLUMN filter INTEGER;"); sql ("UPDATE alerts_trash SET filter = 0;"); sql ("ALTER TABLE alerts_trash ADD COLUMN filter_location INTEGER;"); sql ("UPDATE alerts_trash SET filter_location = 0;"); /* Set the database version to 61. */ set_db_version (61); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 61 to version 62. * * @return 0 success, -1 error. */ int migrate_61_to_62 () { sql_begin_exclusive (); /* Ensure that the database is currently version 61. */ if (manage_db_version () != 61) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /** @todo ROLLBACK on failure. */ /* The reports table got count cache columns. */ sql ("ALTER TABLE reports ADD COLUMN highs;"); sql ("ALTER TABLE reports ADD COLUMN mediums;"); sql ("ALTER TABLE reports ADD COLUMN lows;"); sql ("ALTER TABLE reports ADD COLUMN logs;"); sql ("ALTER TABLE reports ADD COLUMN fps;"); sql ("ALTER TABLE reports ADD COLUMN override_highs;"); sql ("ALTER TABLE reports ADD COLUMN override_mediums;"); sql ("ALTER TABLE reports ADD COLUMN override_lows;"); sql ("ALTER TABLE reports ADD COLUMN override_logs;"); sql ("ALTER TABLE reports ADD COLUMN override_fps;"); sql ("UPDATE reports SET highs = -1, override_highs = -1;"); /* Set the database version to 62. */ set_db_version (62); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 62 to version 63. * * @return 0 success, -1 error. */ int migrate_62_to_63 () { sql_begin_exclusive (); /* Ensure that the database is currently version 62. */ if (manage_db_version () != 62) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /** @todo ROLLBACK on failure. */ /* Ensure the new tables exist for the migrator. */ sql ("CREATE TABLE IF NOT EXISTS schedules_trash" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, name, comment," " first_time, period, period_months, duration);"); /* The reports table got count cache columns. */ sql ("ALTER TABLE schedules ADD COLUMN timezone;"); sql ("ALTER TABLE schedules ADD COLUMN initial_offset;"); sql ("UPDATE schedules" " SET timezone = (SELECT users.timezone FROM users" " WHERE id = schedules.owner);"); sql ("UPDATE schedules SET initial_offset = current_offset (timezone);"); sql ("ALTER TABLE schedules_trash ADD COLUMN timezone;"); sql ("ALTER TABLE schedules_trash ADD COLUMN initial_offset;"); sql ("UPDATE schedules_trash" " SET timezone = (SELECT users.timezone FROM users" " WHERE id = schedules_trash.owner);"); sql ("UPDATE schedules_trash" " SET initial_offset = current_offset (timezone);"); /* Set the database version to 63. */ set_db_version (63); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 63 to version 64. * * @return 0 success, -1 error. */ int migrate_63_to_64 () { sql_begin_exclusive (); /* Ensure that the database is currently version 63. */ if (manage_db_version () != 63) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /** @todo ROLLBACK on failure. */ /* The results table got a report column. */ sql ("ALTER TABLE results ADD COLUMN report;"); sql ("UPDATE results SET report = (SELECT report FROM report_results" " WHERE result = results.id);"); sql ("CREATE INDEX IF NOT EXISTS results_by_report_host" " ON results (report, host);"); /* Set the database version to 64. */ set_db_version (64); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 64 to version 65. * * @return 0 success, -1 error. */ int migrate_64_to_65 () { sql_begin_exclusive (); /* Ensure that the database is currently version 64. */ if (manage_db_version () != 64) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /** @todo ROLLBACK on failure. */ /* The report column on new results was left blank. */ sql ("UPDATE results SET report = (SELECT report FROM report_results" " WHERE result = results.id);"); sql ("REINDEX results_by_report_host;"); /* Set the database version to 65. */ set_db_version (65); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 65 to version 66. * * @return 0 success, -1 error. */ int migrate_65_to_66 () { sql_begin_exclusive (); /* Ensure that the database is currently version 65. */ if (manage_db_version () != 65) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /** @todo ROLLBACK on failure. */ /* Schedules got creation and modification times. */ sql ("ALTER TABLE schedules ADD COLUMN creation_time;"); sql ("ALTER TABLE schedules ADD COLUMN modification_time;"); sql ("UPDATE schedules SET creation_time = 0, modification_time = 0;"); sql ("ALTER TABLE schedules_trash ADD COLUMN creation_time;"); sql ("ALTER TABLE schedules_trash ADD COLUMN modification_time;"); sql ("UPDATE schedules_trash SET creation_time = 0, modification_time = 0;"); /* Set the database version to 66. */ set_db_version (66); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 66 to version 67. * * @return 0 success, -1 error. */ int migrate_66_to_67 () { sql_begin_exclusive (); /* Ensure that the database is currently version 66. */ if (manage_db_version () != 66) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /** @todo ROLLBACK on failure. */ /* Tasks got creation and modification times. */ sql ("ALTER TABLE tasks ADD COLUMN creation_time;"); sql ("ALTER TABLE tasks ADD COLUMN modification_time;"); sql ("UPDATE tasks SET creation_time = 0, modification_time = 0;"); /* Set the database version to 67. */ set_db_version (67); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 67 to version 68. * * @return 0 success, -1 error. */ int migrate_67_to_68 () { sql_begin_exclusive (); /* Ensure that the database is currently version 67. */ if (manage_db_version () != 67) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /** @todo ROLLBACK on failure. */ /* Ensure the new tables exist for the migrator. */ sql ("CREATE TABLE IF NOT EXISTS slaves_trash" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, name, comment, host," " port, login, password);"); /* Slaves got creation and modification times. */ sql ("ALTER TABLE slaves ADD COLUMN creation_time;"); sql ("ALTER TABLE slaves ADD COLUMN modification_time;"); sql ("UPDATE slaves SET creation_time = 0, modification_time = 0;"); sql ("ALTER TABLE slaves_trash ADD COLUMN creation_time;"); sql ("ALTER TABLE slaves_trash ADD COLUMN modification_time;"); sql ("UPDATE slaves_trash SET creation_time = 0, modification_time = 0;"); /* Set the database version to 68. */ set_db_version (68); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 68 to version 69. * * @return 0 success, -1 error. */ int migrate_68_to_69 () { sql_begin_exclusive (); /* Ensure that the database is currently version 68. */ if (manage_db_version () != 68) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /** @todo ROLLBACK on failure. */ /* Ensure the new tables exist for the migrator. */ sql ("CREATE TABLE IF NOT EXISTS report_formats_trash" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, name, extension," " content_type, summary, description, signature, trust INTEGER," " trust_time, flags INTEGER, original_uuid);"); /* Schedules got creation and modification times. */ sql ("ALTER TABLE report_formats ADD COLUMN creation_time;"); sql ("ALTER TABLE report_formats ADD COLUMN modification_time;"); sql ("UPDATE report_formats SET creation_time = 0, modification_time = 0;"); sql ("ALTER TABLE report_formats_trash ADD COLUMN creation_time;"); sql ("ALTER TABLE report_formats_trash ADD COLUMN modification_time;"); sql ("UPDATE report_formats_trash SET" " creation_time = 0, modification_time = 0;"); /* Set the database version to 69. */ set_db_version (69); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 69 to version 70. * * @return 0 success, -1 error. */ int migrate_69_to_70 () { sql_begin_exclusive (); /* Ensure that the database is currently version 69. */ if (manage_db_version () != 69) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /** @todo ROLLBACK on failure. */ /* Add creation and modification times to Port Lists. */ sql ("ALTER TABLE port_lists ADD COLUMN creation_time;"); sql ("ALTER TABLE port_lists ADD COLUMN modification_time;"); sql ("UPDATE port_lists SET creation_time = 0, modification_time = 0;"); sql ("ALTER TABLE port_lists_trash ADD COLUMN creation_time;"); sql ("ALTER TABLE port_lists_trash ADD COLUMN modification_time;"); sql ("UPDATE port_lists_trash SET" " creation_time = 0, modification_time = 0;"); /* Set the database version to 70. */ set_db_version (70); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 70 to version 71. * * @return 0 success, -1 error. */ int migrate_70_to_71 () { sql_begin_exclusive (); /* Ensure that the database is currently version 70. */ if (manage_db_version () != 70) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /** @todo ROLLBACK on failure. */ /* Add creation and modification times to alerts. */ sql ("ALTER TABLE alerts ADD COLUMN creation_time;"); sql ("ALTER TABLE alerts ADD COLUMN modification_time;"); sql ("UPDATE alerts SET creation_time = 0, modification_time = 0;"); sql ("ALTER TABLE alerts_trash ADD COLUMN creation_time;"); sql ("ALTER TABLE alerts_trash ADD COLUMN modification_time;"); sql ("UPDATE alerts_trash SET" " creation_time = 0, modification_time = 0;"); /* Set the database version to 71. */ set_db_version (71); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 71 to version 72. * * @return 0 success, -1 error. */ int migrate_71_to_72 () { sql_begin_exclusive (); /* Ensure that the database is currently version 71. */ if (manage_db_version () != 71) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /** @todo ROLLBACK on failure. */ /* Ensure the new tables exist for the migrator. */ sql ("CREATE TABLE IF NOT EXISTS lsc_credentials_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, login," " password, comment, public_key TEXT, private_key TEXT, rpm TEXT," " deb TEXT, exe TEXT);"); /* Add creation and modification times to LSC Credentials. */ sql ("ALTER TABLE lsc_credentials ADD COLUMN creation_time;"); sql ("ALTER TABLE lsc_credentials ADD COLUMN modification_time;"); sql ("UPDATE lsc_credentials SET creation_time = 0, modification_time = 0;"); sql ("ALTER TABLE lsc_credentials_trash ADD COLUMN creation_time;"); sql ("ALTER TABLE lsc_credentials_trash ADD COLUMN modification_time;"); sql ("UPDATE lsc_credentials_trash SET" " creation_time = 0, modification_time = 0;"); /* Set the database version to 72. */ set_db_version (72); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 72 to version 73. * * @return 0 success, -1 error. */ int migrate_72_to_73 () { sql_begin_exclusive (); /* Ensure that the database is currently version 72. */ if (manage_db_version () != 72) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /** @todo ROLLBACK on failure. */ /* Ensure the new tables exist for the migrator. */ sql ("CREATE TABLE IF NOT EXISTS configs_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name," " nvt_selector, comment, family_count INTEGER, nvt_count INTEGER," " families_growing INTEGER, nvts_growing INTEGER);"); /* Add creation and modification times to Scan Configs. */ sql ("ALTER TABLE configs ADD COLUMN creation_time;"); sql ("ALTER TABLE configs ADD COLUMN modification_time;"); sql ("UPDATE configs SET creation_time = 0, modification_time = 0;"); sql ("ALTER TABLE configs_trash ADD COLUMN creation_time;"); sql ("ALTER TABLE configs_trash ADD COLUMN modification_time;"); sql ("UPDATE configs_trash SET creation_time = 0, modification_time = 0;"); /* Set the database version to 73. */ set_db_version (73); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 73 to version 74. * * @return 0 success, -1 error. */ int migrate_73_to_74 () { sql_begin_exclusive (); /* Ensure that the database is currently version 73. */ if (manage_db_version () != 73) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /** @todo ROLLBACK on failure. */ /* Add creation and modification times to Scan Configs. */ sql ("ALTER TABLE nvts ADD COLUMN uuid;"); sql ("UPDATE nvts SET uuid = oid;"); sql ("ALTER TABLE nvts ADD COLUMN comment;"); sql ("UPDATE nvts SET comment = '';"); sql ("ALTER TABLE nvts ADD COLUMN creation_time;"); sql ("ALTER TABLE nvts ADD COLUMN modification_time;"); sql ("UPDATE nvts SET" " creation_time = parse_time (tag (tag, 'creation_date'))," " modification_time = parse_time (tag (tag, 'last_modification'));"); /* Set the database version to 74. */ set_db_version (74); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 74 to version 75. * * @return 0 success, -1 error. */ int migrate_74_to_75 () { sql_begin_exclusive (); /* Ensure that the database is currently version 74. */ if (manage_db_version () != 74) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Ensure the tables exist for the migrator. */ sql ("CREATE TABLE IF NOT EXISTS permissions" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner, name, comment," " resource_type, resource, resource_uuid, resource_location," " subject_type, subject, creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS task_users" " (id INTEGER PRIMARY KEY, task INTEGER, user INTEGER," " actions INTEGER);"); /** @todo ROLLBACK on failure. */ /* Task observers are now handled by permissions. */ sql ("INSERT INTO permissions" " (uuid, owner, name, comment, resource_type, resource, resource_uuid," " resource_location, subject_type, subject, creation_time," " modification_time)" " SELECT make_uuid ()," " (SELECT owner FROM tasks WHERE id = task)," " 'get', '', 'task', task," " (SELECT uuid FROM tasks WHERE id = task)," " " G_STRINGIFY (LOCATION_TABLE) ", 'user', user, m_now (), m_now ()" " FROM task_users;"); sql ("DROP TABLE task_users;"); /* Set the database version to 75. */ set_db_version (75); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 75 to version 76. * * @return 0 success, -1 error. */ int migrate_75_to_76 () { sql_begin_exclusive (); /* Ensure that the database is currently version 75. */ if (manage_db_version () != 75) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Delete any nvts_checksum leftovers. */ sql ("DELETE FROM %s.meta WHERE name = \"nvts_checksum\";", sql_schema ()); /* Rename nvts_md5sum into nvts_feed_version */ sql ("UPDATE %s.meta SET name = \"nvts_feed_version\"" " WHERE name = \"nvts_md5sum\";", sql_schema ()); /* Set the database version to 76. */ set_db_version (76); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 76 to version 77. * * @return 0 success, -1 error. */ int migrate_76_to_77 () { sql_begin_exclusive (); /* Ensure that the database is currently version 76. */ if (manage_db_version () != 76) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Users got standard columns, and columns to mirror info stored on disk. */ sql ("ALTER TABLE users ADD COLUMN owner;"); sql ("ALTER TABLE users ADD COLUMN comment;"); sql ("ALTER TABLE users ADD COLUMN creation_time;"); sql ("ALTER TABLE users ADD COLUMN modification_time;"); sql ("ALTER TABLE users ADD COLUMN role;"); sql ("ALTER TABLE users ADD COLUMN hosts;"); sql ("ALTER TABLE users ADD COLUMN hosts_allow;"); sql ("UPDATE users SET" " owner = NULL," " comment = ''," " creation_time = 0," " modification_time = 0," /* These are temporary, and only used for clone. */ " role = 'User'," " hosts = ''," " hosts_allow = 2;"); /* Set the database version to 77. */ set_db_version (77); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 77 to version 78. * * @return 0 success, -1 error. */ int migrate_77_to_78 () { sql_begin_exclusive (); /* Ensure that the database is currently version 77. */ if (manage_db_version () != 77) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Set schedule durations and periods to 0 if they were -1, which was the old default value of the create_schedule command. */ sql ("UPDATE schedules" " SET duration = 0" " WHERE duration = -1;"); sql ("UPDATE schedules" " SET period = 0" " WHERE period = -1;"); sql ("UPDATE schedules_trash" " SET duration = 0" " WHERE duration = -1;"); sql ("UPDATE schedules_trash" " SET period = 0" " WHERE period = -1;"); /* Set the database version to 78. */ set_db_version (78); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 78 to version 79. * * @return 0 success, -1 error. */ int migrate_78_to_79 () { sql_begin_exclusive (); /* Ensure that the database is currently version 78. */ if (manage_db_version () != 78) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Remove tcp timestamps nvt from Discovery Scan Config. */ sql ("DELETE FROM nvt_selectors WHERE " " name='" MANAGE_NVT_SELECTOR_UUID_DISCOVERY "'" " AND family_or_nvt='1.3.6.1.4.1.25623.1.0.80091';"); /* Add preferences for "Ping Host" nvt in Discovery Scan Config. */ sql ("INSERT INTO config_preferences (config, type, name, value)" " VALUES ((SELECT id FROM configs WHERE uuid = '" CONFIG_UUID_DISCOVERY "')," " 'PLUGINS_PREFS'," " 'Ping Host[checkbox]:Mark unrechable Hosts as dead (not scanning)'," " 'yes');"); sql ("INSERT INTO config_preferences (config, type, name, value)" " VALUES ((SELECT id FROM configs WHERE uuid = '" CONFIG_UUID_DISCOVERY "')," " 'PLUGINS_PREFS'," " 'Ping Host[checkbox]:Report about unrechable Hosts'," " 'yes');"); /* Add preferences for "Services" nvt in Discovery Scan Config. */ sql ("INSERT INTO config_preferences (config, type, name, value)" " VALUES ((SELECT id FROM configs WHERE uuid = '" CONFIG_UUID_DISCOVERY "')," " 'PLUGINS_PREFS'," " 'Services[radio]:Test SSL based services'," " 'All;Known SSL ports;None');"); /* Set the database version to 79. */ set_db_version (79); sql ("COMMIT;"); return 0; } #define MIGRATE_79_to_80_DELETE(table) \ sql ("DELETE FROM " table \ " WHERE owner IN (SELECT id FROM users WHERE %s);", \ where) /** * @brief Delete users according to a condition. * * @param[in] where Where clause. */ void migrate_79_to_80_remove_users (const char *where) { /* Remove everything that is owned by the user. */ MIGRATE_79_to_80_DELETE ("agents"); MIGRATE_79_to_80_DELETE ("agents_trash"); sql ("DELETE FROM config_preferences" " WHERE config IN (SELECT id FROM configs" " WHERE owner IN (SELECT id FROM users" " WHERE %s));", where); sql ("DELETE FROM config_preferences_trash" " WHERE config IN (SELECT id FROM configs" " WHERE owner IN (SELECT id FROM users" " WHERE %s));", where); sql ("DELETE FROM nvt_selectors" " WHERE name IN (SELECT nvt_selector FROM configs" " WHERE owner IN (SELECT id FROM users" " WHERE %s));", where); MIGRATE_79_to_80_DELETE ("configs"); MIGRATE_79_to_80_DELETE ("configs_trash"); sql ("DELETE FROM alert_condition_data" " WHERE alert IN (SELECT id FROM alerts" " WHERE owner IN (SELECT id FROM users" " WHERE %s));", where); sql ("DELETE FROM alert_condition_data_trash" " WHERE alert IN (SELECT id FROM alerts_trash" " WHERE owner IN (SELECT id FROM users" " WHERE %s));", where); sql ("DELETE FROM alert_event_data" " WHERE alert IN (SELECT id FROM alerts" " WHERE owner IN (SELECT id FROM users" " WHERE %s));", where); sql ("DELETE FROM alert_event_data_trash" " WHERE alert IN (SELECT id FROM alerts_trash" " WHERE owner IN (SELECT id FROM users" " WHERE %s));", where); sql ("DELETE FROM alert_method_data" " WHERE alert IN (SELECT id FROM alerts" " WHERE owner IN (SELECT id FROM users" " WHERE %s));", where); sql ("DELETE FROM alert_method_data_trash" " WHERE alert IN (SELECT id FROM alerts_trash" " WHERE owner IN (SELECT id FROM users" " WHERE %s));", where); MIGRATE_79_to_80_DELETE ("alerts"); MIGRATE_79_to_80_DELETE ("alerts_trash"); MIGRATE_79_to_80_DELETE ("filters"); MIGRATE_79_to_80_DELETE ("filters_trash"); sql ("DELETE FROM group_users" " WHERE `group` IN (SELECT id FROM groups" " WHERE owner IN (SELECT id FROM users" " WHERE %s));", where); MIGRATE_79_to_80_DELETE ("groups"); MIGRATE_79_to_80_DELETE ("lsc_credentials"); MIGRATE_79_to_80_DELETE ("lsc_credentials_trash"); MIGRATE_79_to_80_DELETE ("notes"); MIGRATE_79_to_80_DELETE ("notes_trash"); MIGRATE_79_to_80_DELETE ("overrides"); MIGRATE_79_to_80_DELETE ("overrides_trash"); MIGRATE_79_to_80_DELETE ("permissions"); MIGRATE_79_to_80_DELETE ("permissions_trash"); MIGRATE_79_to_80_DELETE ("port_lists"); MIGRATE_79_to_80_DELETE ("port_lists_trash"); sql ("DELETE FROM port_ranges" " WHERE port_list IN (SELECT id FROM port_lists" " WHERE owner IN (SELECT id FROM users" " WHERE %s));", where); sql ("DELETE FROM port_ranges_trash" " WHERE port_list IN (SELECT id FROM port_lists_trash" " WHERE owner IN (SELECT id FROM users" " WHERE %s));", where); sql ("DELETE FROM report_format_param_options" " WHERE report_format_param" " IN (SELECT id FROM report_format_params" " WHERE report_format" " IN (SELECT id FROM report_formats" " WHERE owner IN (SELECT id FROM users" " WHERE %s)));", where); sql ("DELETE FROM report_format_param_options_trash" " WHERE report_format_param" " IN (SELECT id FROM report_format_params_trash" " WHERE report_format" " IN (SELECT id FROM report_formats" " WHERE owner IN (SELECT id FROM users" " WHERE %s)));", where); sql ("DELETE FROM report_format_params" " WHERE report_format IN (SELECT id FROM report_formats" " WHERE owner IN (SELECT id FROM users" " WHERE %s));", where); sql ("DELETE FROM report_format_params_trash" " WHERE report_format IN (SELECT id FROM report_formats" " WHERE owner IN (SELECT id FROM users" " WHERE %s));", where); MIGRATE_79_to_80_DELETE ("report_formats"); MIGRATE_79_to_80_DELETE ("report_formats_trash"); sql ("DELETE FROM report_host_details" " WHERE report_host" " IN (SELECT id FROM report_hosts" " WHERE report IN (SELECT id FROM reports" " WHERE owner IN (SELECT id FROM users" " WHERE %s)));", where); sql ("DELETE FROM report_results" " WHERE report IN (SELECT id FROM reports" " WHERE owner IN (SELECT id FROM users" " WHERE %s));", where); sql ("DELETE FROM results" " WHERE report IN (SELECT id FROM reports" " WHERE owner IN (SELECT id FROM users" " WHERE %s));", where); MIGRATE_79_to_80_DELETE ("reports"); MIGRATE_79_to_80_DELETE ("schedules"); MIGRATE_79_to_80_DELETE ("schedules_trash"); MIGRATE_79_to_80_DELETE ("slaves"); MIGRATE_79_to_80_DELETE ("slaves_trash"); MIGRATE_79_to_80_DELETE ("settings"); MIGRATE_79_to_80_DELETE ("tags"); MIGRATE_79_to_80_DELETE ("tags_trash"); MIGRATE_79_to_80_DELETE ("targets"); MIGRATE_79_to_80_DELETE ("targets_trash"); sql ("DELETE FROM task_files" " WHERE task IN (SELECT id FROM tasks" " WHERE owner IN (SELECT id FROM users" " WHERE %s));", where); sql ("DELETE FROM task_alerts" " WHERE task IN (SELECT id FROM tasks" " WHERE owner IN (SELECT id FROM users" " WHERE %s));", where); sql ("DELETE FROM task_preferences" " WHERE task IN (SELECT id FROM tasks" " WHERE owner IN (SELECT id FROM users" " WHERE %s));", where); MIGRATE_79_to_80_DELETE ("tasks"); sql ("DELETE FROM users WHERE %s;", where); } #define RULES_HEADER "# This file is managed by the OpenVAS Administrator.\n# Any modifications must keep to the format that the Administrator expects.\n" /** * @brief Get access information for a user. * * @param[in] user_dir The directory containing the user. * @param[out] hosts The hosts the user is allowed/forbidden to scan. * @param[out] hosts_allow 0 forbidden, 1 allowed, 2 all allowed, 3 custom. * * @return 0 success, -1 error. */ int migrate_79_to_80_user_access (const gchar *user_dir, gchar ** hosts, int *hosts_allow) { gchar *rules_file, *rules; GError *error = NULL; assert (hosts != NULL); assert (hosts_allow != NULL); rules_file = g_build_filename (user_dir, "auth", "rules", NULL); if (g_file_test (rules_file, G_FILE_TEST_EXISTS) == FALSE) { *hosts = NULL; *hosts_allow = 2; return 0; } g_file_get_contents (rules_file, &rules, NULL, &error); if (error) { g_warning ("%s", error->message); g_error_free (error); g_free (rules_file); return -1; } g_free (rules_file); if (strlen (rules)) { int count, end = 0; /* "# " ("allow " | "deny ") hosts */ count = sscanf (rules, RULES_HEADER "# allow %*[^\n]%n\n", &end); if (count == 0 && end > 0) { *hosts = g_strndup (rules + strlen (RULES_HEADER "# allow "), end - strlen (RULES_HEADER "# allow ")); *hosts_allow = 1; g_free (rules); return 0; } count = sscanf (rules, RULES_HEADER "# deny %*[^\n]%n\n", &end); if (count == 0 && end > 0) { *hosts = g_strndup (rules + strlen (RULES_HEADER "# deny "), end - strlen (RULES_HEADER "# deny ")); *hosts_allow = 0; g_free (rules); return 0; } if (strcmp (RULES_HEADER, rules) == 0) { *hosts = NULL; *hosts_allow = 2; g_free (rules); return 0; } /* Failed to parse content. */ *hosts = NULL; *hosts_allow = 3; g_free (rules); return 0; } *hosts = NULL; *hosts_allow = 2; g_free (rules); return 0; } /** * @brief Migrate the database from version 79 to version 80. * * @return 0 success, -1 error. */ int migrate_79_to_80 () { struct dirent **names; int count, index; array_t *dirs; gchar *dir; struct stat state; sql_begin_exclusive (); /* Ensure that the database is currently version 79. */ if (manage_db_version () != 79) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Ensure that all tables exists. */ sql ("CREATE TABLE IF NOT EXISTS alert_condition_data_trash" " (id INTEGER PRIMARY KEY, alert INTEGER, name, data);"); sql ("CREATE TABLE IF NOT EXISTS config_preferences_trash" " (id INTEGER PRIMARY KEY, config INTEGER, type, name, value);"); sql ("CREATE TABLE IF NOT EXISTS groups" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS group_users" " (id INTEGER PRIMARY KEY, `group` INTEGER, user INTEGER);"); sql ("CREATE TABLE IF NOT EXISTS filters" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " type, term, creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS filters_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " type, term, creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS notes_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, nvt," " creation_time, modification_time, text, hosts, port, threat," " task INTEGER, result INTEGER, end_time);"); sql ("CREATE TABLE IF NOT EXISTS overrides_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, nvt," " creation_time, modification_time, text, hosts, port, threat," " new_threat, task INTEGER, result INTEGER, end_time);"); sql ("CREATE TABLE IF NOT EXISTS permissions" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner, name, comment," " resource_type, resource, resource_uuid, resource_location," " subject_type, subject, creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS permissions_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner, name, comment," " resource_type, resource, resource_uuid, resource_location," " subject_type, subject, creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS port_names" " (id INTEGER PRIMARY KEY, number INTEGER, protocol, name," " UNIQUE (number, protocol) ON CONFLICT REPLACE);"); sql ("CREATE TABLE IF NOT EXISTS report_format_params_trash" " (id INTEGER PRIMARY KEY, report_format, name, type INTEGER, value," " type_min, type_max, type_regex, fallback);"); sql ("CREATE TABLE IF NOT EXISTS report_format_param_options_trash" " (id INTEGER PRIMARY KEY, report_format_param, value);"); sql ("CREATE TABLE IF NOT EXISTS settings" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, name, comment, value);"); sql ("CREATE TABLE IF NOT EXISTS tags" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner, name, comment," " creation_time, modification_time, attach_type, attach_id," " active, value);"); sql ("CREATE TABLE IF NOT EXISTS tags_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner, name, comment," " creation_time, modification_time, attach_type, attach_id," " active, value);"); /* Users got new column "method". User data moved from disk to database. */ sql ("ALTER TABLE users ADD COLUMN method;"); sql ("UPDATE users SET method = 'file';"); count = scandir (OPENVAS_STATE_DIR "/users", &names, NULL, alphasort); if (count < 0) { g_warning ("%s: failed to open dir %s/users: %s\n", __FUNCTION__, OPENVAS_STATE_DIR, strerror (errno)); sql ("ROLLBACK;"); return -1; } dirs = make_array (); /* Set a flag on every user, to see which are left over. */ sql ("UPDATE users SET password = -1;"); /* Update db users from classic classic users, checking for ldap_connect at * the same time. Assume that all ldap_connect users have at least one * classic user of the same name. Remove all other users, both from disk * and from the db. Remove special user "om" from the database. */ for (index = 0; index < count; index++) { gchar *role, *role_file, *uuid, *uuid_file, *classic_dir, *remote_dir; gchar *hash, *hosts, *quoted_hash, *quoted_hosts, *quoted_method; gchar *quoted_name, *quoted_uuid, *where, *file, *remote_flag_file; auth_method_t method; GError *error; user_t user; int hosts_allow; if ((strcmp (names[index]->d_name, ".") == 0) || (strcmp (names[index]->d_name, "..") == 0) || (strcmp (names[index]->d_name, "om") == 0)) { free (names[index]); continue; } /* Figure out the user dir. */ remote_dir = g_build_filename (OPENVAS_STATE_DIR, "users-remote", "ldap_connect", names[index]->d_name, NULL); classic_dir = g_build_filename (OPENVAS_STATE_DIR, "users", names[index]->d_name, NULL); remote_flag_file = g_build_filename (classic_dir, "auth", "methods", "ldap_connect", NULL); tracef (" user: %s\n", names[index]->d_name); tracef (" remote dir: %s\n", remote_dir); tracef (" classic dir: %s\n", classic_dir); tracef (" flag file: %s\n", remote_flag_file); if (g_file_test (remote_dir, G_FILE_TEST_IS_DIR) && g_file_test (remote_flag_file, G_FILE_TEST_EXISTS)) method = AUTHENTICATION_METHOD_LDAP_CONNECT; else { g_free (remote_dir); method = AUTHENTICATION_METHOD_FILE; if (g_file_test (classic_dir, G_FILE_TEST_IS_DIR) == FALSE) { free (names[index]); g_free (classic_dir); g_free (remote_flag_file); continue; } remote_dir = g_strdup (classic_dir); } g_free (remote_flag_file); /* Get UUID from file. */ uuid_file = g_build_filename (remote_dir, "uuid", NULL); error = NULL; g_file_get_contents (uuid_file, &uuid, NULL, &error); if (error) { g_warning ("%s: Failed to read %s: %s\n", __FUNCTION__, uuid_file, error->message); g_free (classic_dir); g_free (remote_dir); g_free (uuid_file); g_error_free (error); sql ("ROLLBACK;"); return -1; } g_free (uuid_file); /* Check UUID. */ if (uuid == NULL || strlen (g_strchomp (uuid)) != 36) { g_warning ("%s: Error in UUID: %s\n", __FUNCTION__, uuid); g_free (classic_dir); g_free (remote_dir); g_free (uuid); sql ("ROLLBACK;"); return -1; } tracef (" uuid: %s\n", uuid); /* Get role. */ role = "User"; role_file = g_build_filename (remote_dir, "isobserver", NULL); if (g_file_test (role_file, G_FILE_TEST_EXISTS)) role = "Observer"; g_free (role_file); role_file = g_build_filename (remote_dir, "isadmin", NULL); if (g_file_test (role_file, G_FILE_TEST_EXISTS)) role = "Admin"; g_free (role_file); /* Find user in db. */ quoted_uuid = sql_quote (uuid); switch (sql_int64 (&user, "SELECT id FROM users WHERE uuid = '%s';", quoted_uuid)) { case 0: break; case 1: /* Too few rows in result of query. */ quoted_name = sql_quote (names[index]->d_name); sql ("INSERT INTO users" " (uuid, owner, name, comment, password, timezone, method," " hosts, hosts_allow)" " VALUES" " ('%s', NULL, '%s', '', NULL, NULL, 'file', '', 2);", quoted_uuid, quoted_name); g_free (quoted_name); user = sql_last_insert_id (); break; default: /* Programming error. */ assert (0); case -1: g_warning ("%s: Error finding user %s\n", __FUNCTION__, uuid); g_free (uuid); g_free (quoted_uuid); g_free (classic_dir); g_free (remote_dir); sql ("ROLLBACK;"); return -1; break; } /* Get hash. */ file = g_build_filename (classic_dir, "auth", "hash", NULL); error = NULL; if (file && g_file_test (file, G_FILE_TEST_EXISTS)) { g_file_get_contents (file, &hash, NULL, &error); if (error) { g_warning ("%s: Failed to read %s: %s\n", __FUNCTION__, file, error->message); g_free (classic_dir); g_free (remote_dir); g_free (quoted_uuid); g_free (file); g_error_free (error); sql ("ROLLBACK;"); return -1; } assert (hash); g_strchomp (hash); } else hash = NULL; g_free (file); /* Get host access rules. */ hosts = NULL; hosts_allow = 2; if (migrate_79_to_80_user_access (classic_dir, &hosts, &hosts_allow)) { g_warning ("%s: Failed to get user rules from %s\n", __FUNCTION__, classic_dir); g_free (classic_dir); g_free (remote_dir); g_free (quoted_uuid); g_error_free (error); sql ("ROLLBACK;"); return -1; } if (hosts_allow == 3) /* If they were custom rules, just make is allow all. */ hosts_allow = 2; /* Update db from disk. */ quoted_method = sql_quote (auth_method_name (method)); quoted_hash = sql_quote (hash ? hash : ""); quoted_hosts = sql_quote (hosts ? hosts : ""); sql ("UPDATE users" " SET role = '%s'," " uuid = '%s'," " method = '%s'," " password = %s%s%s," " hosts = '%s'," " hosts_allow = %i" " WHERE id = %llu;", role, quoted_uuid, quoted_method, hash ? "'" : "", hash ? quoted_hash : "NULL", hash ? "'" : "", quoted_hosts, hosts_allow, user); g_free (quoted_uuid); g_free (quoted_method); g_free (quoted_hash); g_free (quoted_hosts); /* Remove all other users with this name from the db. */ quoted_name = sql_quote (names[index]->d_name); where = g_strdup_printf ("name = '%s' AND id != %llu", quoted_name, user); g_free (quoted_name); migrate_79_to_80_remove_users (where); g_free (where); /* Store user directory for removal after last possible ROLLBACK. */ array_add (dirs, classic_dir); free (names[index]); } free (names); /* TODO To preserve ldap and ads, create db entries here. */ /* Remove remaining users. */ migrate_79_to_80_remove_users ("password = -1"); /* Remove entire user-remote dir. */ dir = g_build_filename (OPENVAS_STATE_DIR, "users-remote", NULL); if (g_lstat (dir, &state)) { if (errno != ENOENT) g_warning ("%s: g_lstat (%s) failed: %s\n", __FUNCTION__, dir, g_strerror (errno)); } else openvas_file_remove_recurse (dir); g_free (dir); /* Remove user dirs. */ for (index = 0; index < dirs->len; index++) openvas_file_remove_recurse (g_ptr_array_index (dirs, index)); array_free (dirs); /* Set the database version to 80. */ set_db_version (80); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 80 to version 81. * * @return 0 success, -1 error. */ int migrate_80_to_81 () { sql_begin_exclusive (); /* Ensure that the database is currently version 80. */ if (manage_db_version () != 80) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Ensure new tables exist. */ sql ("CREATE TABLE IF NOT EXISTS roles" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS role_users" " (id INTEGER PRIMARY KEY, role INTEGER, user INTEGER);"); /* User roles moved to their own table. */ sql ("INSERT INTO roles" " (uuid, owner, name, comment, creation_time, modification_time)" " VALUES" " ('" ROLE_UUID_ADMIN "', NULL, 'Admin', 'Administrator', m_now ()," " m_now ());"); sql ("INSERT INTO roles" " (uuid, owner, name, comment, creation_time, modification_time)" " VALUES" " ('" ROLE_UUID_USER "', NULL, 'User', 'User', m_now (), m_now ());"); sql ("INSERT INTO roles" " (uuid, owner, name, comment, creation_time, modification_time)" " VALUES" " ('" ROLE_UUID_OBSERVER "', NULL, 'Observer', 'Observer', m_now ()," " m_now ());"); sql ("INSERT INTO role_users (role, user)" " SELECT (SELECT id FROM roles WHERE roles.name = users.role)," " users.id" " FROM users;"); /* This leaves an extra column in older databases, which is not ideal, for * example when iterating over all columns. Migrating to Postgres, however, * removes the column. */ sql ("UPDATE users SET role = NULL;"); /* Set the database version to 81. */ set_db_version (81); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 81 to version 82. * * @return 0 success, -1 error. */ int migrate_81_to_82 () { sql_begin_exclusive (); /* Ensure that the database is currently version 80. */ if (manage_db_version () != 81) { sql ("ROLLBACK;"); return -1; } /* Changes are already done by init_manage */ /* Set the database version to 82. */ set_db_version (82); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 82 to version 83. * * @return 0 success, -1 error. */ int migrate_82_to_83 () { sql_begin_exclusive (); /* Ensure that the database is currently version 82. */ if (manage_db_version () != 82) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Remove risk_factor from NVTs table. */ /* Move the table away. */ sql ("ALTER TABLE nvts RENAME TO nvts_82;"); /* Create the table in the new format. */ sql ("CREATE TABLE IF NOT EXISTS nvts" " (id INTEGER PRIMARY KEY, uuid, oid, version, name, comment, summary," " description, copyright, cve, bid, xref, tag, sign_key_ids," " category INTEGER, family, cvss_base, creation_time," " modification_time);"); /* Copy the data into the new table. */ sql ("INSERT into nvts" " (id, uuid, oid, version, name, comment, summary, description," " copyright, cve, bid, xref, tag, sign_key_ids, category, family," " cvss_base, creation_time, modification_time)" " SELECT" " id, uuid, oid, version, name, comment, summary, description," " copyright, cve, bid, xref, tag, sign_key_ids, category, family," " cvss_base, creation_time, modification_time" " FROM nvts_82;"); /* Drop the old table. */ sql ("DROP TABLE nvts_82;"); /* Set the database version to 83. */ set_db_version (83); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 83 to version 84. * * @return 0 success, -1 error. */ int migrate_83_to_84 () { sql_begin_exclusive (); /* Ensure that the database is currently version 83. */ if (manage_db_version () != 83) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Add columns "nvt_revision" and "severity" to results table */ sql ("ALTER TABLE results ADD COLUMN nvt_version;"); sql ("ALTER TABLE results ADD COLUMN severity REAL;"); /* Set the database version to 84. */ set_db_version (84); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 84 to version 85. * * @return 0 success, -1 error. */ int migrate_84_to_85 () { sql_begin_exclusive (); /* Ensure that the database is currently version 84. */ if (manage_db_version () != 84) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Add columns "severity" and "override_severity" to reports table */ sql ("ALTER TABLE reports ADD COLUMN severity REAL;"); sql ("ALTER TABLE reports ADD COLUMN override_severity REAL;"); /* Clear counts cache so the severity columns are updated */ sql ("UPDATE reports SET highs = -1;"); sql ("UPDATE reports SET override_highs = -1;"); /* Set the database version to 85. */ set_db_version (85); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 85 to version 86. * * @return 0 success, -1 error. */ int migrate_85_to_86 () { sql_begin_exclusive (); /* Ensure that the database is currently version 85. */ if (manage_db_version () != 85) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Add column "new_severity" to overrides and overrides_trash */ sql ("ALTER TABLE overrides ADD COLUMN new_severity REAL;"); sql ("ALTER TABLE overrides_trash ADD COLUMN new_severity REAL;"); /* Clear counts cache so the severity columns are updated */ sql ("UPDATE reports SET override_highs = -1;"); /* Set the database version to 86. */ set_db_version (86); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 86 to version 87. * * @return 0 success, -1 error. */ int migrate_86_to_87 () { sql_begin_exclusive (); /* Ensure that the database is currently version 86. */ if (manage_db_version () != 86) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The scanner message types "Security Hole", "Security Warning" and * "Security Note" were merged into a single type, "Alarm". * * Update the severity of old high, medium and low results at the same * time, because the severity of these results can only be determined by * their message type. */ sql ("UPDATE results" " SET severity = (CASE type" " WHEN 'Security Hole' THEN 10.0" " WHEN 'Security Warning' THEN 5.0" " WHEN 'Security Note' THEN 2.0" " WHEN 'Log Message' THEN 0.0" " ELSE NULL END)" " WHERE severity IS NULL;"); sql ("UPDATE results SET type = 'Alarm'" " WHERE type = 'Security Hole'" " OR type = 'Security Warning'" " OR type = 'Security Note';"); /* Set the database version to 87. */ set_db_version (87); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 87 to version 88. * * @return 0 success, -1 error. */ int migrate_87_to_88 () { sql_begin_exclusive (); /* Ensure that the database is currently version 87. */ if (manage_db_version () != 87) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Rename reports table */ sql ("ALTER TABLE reports RENAME TO reports_87;"); /* Create a new one without severity and counts. */ sql ("CREATE TABLE IF NOT EXISTS reports" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, hidden INTEGER," " task INTEGER, date INTEGER, start_time, end_time, nbefile, comment," " scan_run_status INTEGER, slave_progress, slave_task_uuid);"); /* Create a new dedicated report_counts table. */ sql ("CREATE TABLE IF NOT EXISTS report_counts" " (id INTEGER PRIMARY KEY, report INTEGER, user INTEGER," " severity, override_severity, highs, mediums, lows, logs, fps," " override_highs, override_mediums, override_lows, override_logs," " override_fps);"); /* Copy old report data to new reports table. */ sql ("INSERT INTO reports" " (id, uuid, owner, hidden, task, date, start_time, end_time," " nbefile, comment, scan_run_status, slave_progress, slave_task_uuid)" " SELECT id, uuid, owner, hidden, task, date, start_time, end_time," " nbefile, comment, scan_run_status, slave_progress, slave_task_uuid" " FROM reports_87;"); /* Delete old results table. */ sql ("DROP TABLE reports_87;"); /* Set the database version to 88. */ set_db_version (88); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 88 to version 89. * * @return 0 success, -1 error. */ int migrate_88_to_89 () { sql_begin_exclusive (); /* Ensure that the database is currently version 87. */ if (manage_db_version () != 88) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Rename overrides tables */ sql ("ALTER TABLE overrides RENAME TO overrides_88;"); sql ("ALTER TABLE overrides_trash RENAME TO overrides_trash_88;"); /* Create a new one without threat and new_threat. */ sql ("CREATE TABLE IF NOT EXISTS overrides" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, nvt," " creation_time, modification_time, text, hosts, port, severity," " new_severity, task INTEGER, result INTEGER, end_time);"); sql ("CREATE TABLE IF NOT EXISTS overrides_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, nvt," " creation_time, modification_time, text, hosts, port, severity," " new_severity, task INTEGER, result INTEGER, end_time);"); /* Migrate old override data to new tables. */ sql ("INSERT INTO overrides" " (id, uuid, owner, nvt, creation_time, modification_time, text," " hosts, port, severity, new_severity, task, result, end_time)" " SELECT id, uuid, owner, nvt, creation_time, modification_time, text," " hosts, port," " (CASE threat" " WHEN 'Security Hole' THEN 0.1" " WHEN 'Security Warning' THEN 0.1" " WHEN 'Security Note' THEN 0.1" " WHEN 'Alarm' THEN 0.1" " WHEN 'Log Message' THEN 0.0" " WHEN 'False Positive' THEN -1.0" " WHEN 'Debug Message' THEN -2.0" " WHEN 'Error Message' THEN -3.0" " ELSE NULL" " END)," " coalesce (new_severity," " CASE new_threat" " WHEN 'Security Hole' THEN 10.0" " WHEN 'Security Warning' THEN 5.0" " WHEN 'Security Note' THEN 2.0" " WHEN 'Log Message' THEN 0.0" " WHEN 'False Positive' THEN -1.0" " WHEN 'Debug Message' THEN -2.0" " WHEN 'Error Message' THEN -3.0" " END)," " task, result, end_time" " FROM overrides_88;"); sql ("INSERT INTO overrides_trash" " (id, uuid, owner, nvt, creation_time, modification_time, text," " hosts, port, severity, new_severity, task, result, end_time)" " SELECT id, uuid, owner, nvt, creation_time, modification_time, text," " hosts, port," " (CASE threat" " WHEN 'Security Hole' THEN 0.1" " WHEN 'Security Warning' THEN 0.1" " WHEN 'Security Note' THEN 0.1" " WHEN 'Alarm' THEN 0.1" " WHEN 'Log Message' THEN 0.0" " WHEN 'False Positive' THEN -1.0" " WHEN 'Debug Message' THEN -2.0" " WHEN 'Error Message' THEN -3.0" " ELSE NULL" " END)," " coalesce (new_severity," " CASE new_threat" " WHEN 'Security Hole' THEN 10.0" " WHEN 'Security Warning' THEN 5.0" " WHEN 'Security Note' THEN 2.0" " WHEN 'Log Message' THEN 0.0" " WHEN 'False Positive' THEN -1.0" " WHEN 'Debug Message' THEN -2.0" " WHEN 'Error Message' THEN -3.0" " END)," " task, result, end_time" " FROM overrides_trash_88;"); /* Delete old overrides tables. */ sql ("DROP TABLE overrides_88;"); sql ("DROP TABLE overrides_trash_88;"); /* Clear overridden result counts cache */ sql ("UPDATE report_counts set override_highs = -1;"); /* Set the database version to 89. */ set_db_version (89); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 89 to version 90. * * @return 0 success, -1 error. */ int migrate_89_to_90 () { sql_begin_exclusive (); /* Ensure that the database is currently version 89. */ if (manage_db_version () != 89) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Groups, roles and users became owned by all admins. */ sql ("UPDATE groups SET owner = NULL;"); sql ("UPDATE roles SET owner = NULL;"); sql ("UPDATE users SET owner = NULL;"); /* Set the database version to 90. */ set_db_version (90); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 90 to version 91. * * @return 0 success, -1 error. */ int migrate_90_to_91 () { sql_begin_exclusive (); /* Ensure that the database is currently version 90. */ if (manage_db_version () != 90) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Rename notes tables */ sql ("ALTER TABLE notes RENAME TO notes_90;"); sql ("ALTER TABLE notes_trash RENAME TO notes_trash_90;"); /* Create new ones without threat and new_threat. */ sql ("CREATE TABLE IF NOT EXISTS notes" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, nvt," " creation_time, modification_time, text, hosts, port, severity," " task INTEGER, result INTEGER, end_time);"); sql ("CREATE TABLE IF NOT EXISTS notes_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, nvt," " creation_time, modification_time, text, hosts, port, severity," " task INTEGER, result INTEGER, end_time);"); /* Migrate old notes data to new tables. */ sql ("INSERT INTO notes" " (id, uuid, owner , nvt, creation_time, modification_time, text," " hosts, port, severity, task, result, end_time)" " SELECT id, uuid, owner, nvt, creation_time, modification_time, text," " hosts, port," " (CASE threat" " WHEN 'Security Hole' THEN 0.1" " WHEN 'Security Warning' THEN 0.1" " WHEN 'Security Note' THEN 0.1" " WHEN 'Alarm' THEN 0.1" " WHEN 'Log Message' THEN 0.0" " WHEN 'False Positive' THEN -1.0" " WHEN 'Debug Message' THEN -2.0" " WHEN 'Error Message' THEN -3.0" " ELSE NULL" " END)," " task, result, end_time" " FROM notes_90;"); sql ("INSERT INTO notes_trash" " (id, uuid, owner , nvt, creation_time, modification_time, text," " hosts, port, severity, task, result, end_time)" " SELECT id, uuid, owner, nvt, creation_time, modification_time, text," " hosts, port," " (CASE threat" " WHEN 'Security Hole' THEN 0.1" " WHEN 'Security Warning' THEN 0.1" " WHEN 'Security Note' THEN 0.1" " WHEN 'Alarm' THEN 0.1" " WHEN 'Log Message' THEN 0.0" " WHEN 'False Positive' THEN -1.0" " WHEN 'Debug Message' THEN -2.0" " WHEN 'Error Message' THEN -3.0" " ELSE NULL" " END)," " task, result, end_time" " FROM notes_trash_90;"); /* Delete old overrides tables. */ sql ("DROP TABLE notes_90;"); sql ("DROP TABLE notes_trash_90;"); /* Set the database version 91. */ set_db_version (91); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 91 to version 92. * * @return 0 success, -1 error. */ int migrate_91_to_92 () { sql_begin_exclusive (); /* Ensure that the database is currently version 91. */ if (manage_db_version () != 91) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The default setting Reports Filter was renamed to Results Filter. * Report result filters are now of type "result". Type "report" filters * are for report filters. */ sql ("INSERT INTO settings (uuid, owner, name, comment, value)" " SELECT '739ab810-163d-11e3-9af6-406186ea4fc5', owner," " 'Results Filter', comment, value" " FROM settings" " WHERE name = 'Reports Filter';"); sql ("DELETE FROM settings WHERE name = 'Reports Filter';"); sql ("UPDATE filters SET type = 'result' WHERE type = 'report';"); /* Set the database version 92. */ set_db_version (92); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 92 to version 93. * * @return 0 success, -1 error. */ int migrate_92_to_93 () { sql_begin_exclusive (); /* Ensure that the database is currently version 92. */ if (manage_db_version () != 92) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The scanner preference host_expansion was removed. */ sql ("DELETE FROM config_preferences WHERE name = 'host_expansion';"); sql ("DELETE FROM config_preferences_trash WHERE name = 'host_expansion';"); /* Set the database version 93. */ set_db_version (93); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 93 to version 94. * * @return 0 success, -1 error. */ int migrate_93_to_94 () { sql_begin_exclusive (); /* Ensure that the database is currently version 93. */ if (manage_db_version () != 93) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Add column "exclude_hosts" to targets and targets_trash */ sql ("ALTER TABLE targets ADD COLUMN exclude_hosts;"); sql ("ALTER TABLE targets_trash ADD COLUMN exclude_hosts;"); /* Set the database version to 94. */ set_db_version (94); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 94 to version 95. * * @return 0 success, -1 error. */ int migrate_94_to_95 () { sql_begin_exclusive (); /* Ensure that the database is currently version 94. */ if (manage_db_version () != 94) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Drop and replace the report_counts table */ sql ("DROP TABLE report_counts;"); sql ("CREATE TABLE IF NOT EXISTS report_counts" " (id INTEGER PRIMARY KEY, report INTEGER, user INTEGER," " severity, count, override);"); /* Set the database version to 95. */ set_db_version (95); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 95 to version 96. * * @return 0 success, -1 error. */ int migrate_95_to_96 () { sql_begin_exclusive (); /* Ensure that the database is currently version 95. */ if (manage_db_version () != 95) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Add column reverse lookup columns to targets and targets_trash */ sql ("ALTER TABLE targets ADD COLUMN reverse_lookup_only;"); sql ("ALTER TABLE targets ADD COLUMN reverse_lookup_unify;"); sql ("UPDATE targets SET reverse_lookup_only = 0, reverse_lookup_unify = 0;"); sql ("ALTER TABLE targets_trash ADD COLUMN reverse_lookup_only;"); sql ("ALTER TABLE targets_trash ADD COLUMN reverse_lookup_unify;"); sql ("UPDATE targets_trash SET reverse_lookup_only = 0, " " reverse_lookup_unify = 0;"); /* Set the database version to 96. */ set_db_version (96); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 96 to version 97. * * @return 0 success, -1 error. */ int migrate_96_to_97 () { sql_begin_exclusive (); /* Ensure that the database is currently version 96. */ if (manage_db_version () != 96) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Add column hosts_ordering to tasks */ sql ("ALTER TABLE tasks ADD COLUMN hosts_ordering;"); sql ("UPDATE tasks SET hosts_ordering = 'sequential';"); /* Set the database version to 97. */ set_db_version (97); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 97 to version 98. * * @return 0 success, -1 error. */ int migrate_97_to_98 () { sql_begin_exclusive (); /* Ensure that the database is currently version 97. */ if (manage_db_version () != 97) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Set default value for Dynamic Severity to 0 (disabled) */ sql ("UPDATE settings SET value = 0" " WHERE name = 'Dynamic Severity'" " AND owner IS NULL;"); /* Set the database version to 98. */ set_db_version (98); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 98 to version 99. * * @return 0 success, -1 error. */ int migrate_98_to_99 () { sql_begin_exclusive (); /* Ensure that the database is currently version 98. */ if (manage_db_version () != 98) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Remove reverse_lookup and slice_network_addresses scanner preferences. */ sql ("DELETE FROM config_preferences WHERE name = 'reverse_lookup';"); sql ("DELETE FROM config_preferences" " WHERE name = 'slice_network_addresses';"); sql ("DELETE FROM config_preferences_trash WHERE name = 'reverse_lookup';"); sql ("DELETE FROM config_preferences_trash" " WHERE name = 'slice_network_addresses';"); /* Set the database version to 99. */ set_db_version (99); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 99 to version 100. * * @return 0 success, -1 error. */ int migrate_99_to_100 () { sql_begin_exclusive (); /* Ensure that the database is currently version 99. */ if (manage_db_version () != 99) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Rename results tables */ sql ("ALTER TABLE results RENAME TO results_99;"); /* Create new one without subnet. */ sql ("CREATE TABLE IF NOT EXISTS results" " (id INTEGER PRIMARY KEY, uuid, task INTEGER, host, port, nvt," " type, description, report, nvt_version, severity REAL)"); /* Migrate old results data to new table. */ sql ("INSERT INTO results" " (id, uuid, task, host, port, nvt, type," " description, report, nvt_version, severity)" " SELECT id, uuid, task, host, port, nvt, type, description, report," " nvt_version, severity FROM results_99"); /* Delete old results table. */ sql ("DROP TABLE results_99;"); /* Set the database version to 100. */ set_db_version (100); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 100 to version 101. * * @return 0 success, -1 error. */ int migrate_100_to_101 () { sql_begin_exclusive (); /* Ensure that the database is currently version 100. */ if (manage_db_version () != 100) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Migrate level alert condition data to severity */ sql ("UPDATE alert_condition_data SET" " name = 'severity'," " data = CASE data" " WHEN 'High' THEN 5.1" " WHEN 'Medium' THEN 2.1" " WHEN 'Meduim' THEN 2.1" // Fix for typo in GSA " WHEN 'Low' THEN 0.1" " WHEN 'Log' THEN 0.0" " WHEN 'False Positive' THEN -1.0" " ELSE data END" " WHERE name = 'level';"); sql ("UPDATE alert_condition_data_trash SET" " name = 'severity'," " data = CASE data" " WHEN 'High' THEN 5.1" " WHEN 'Medium' THEN 2.1" " WHEN 'Meduim' THEN 2.1" // Fix for typo in GSA " WHEN 'Low' THEN 0.1" " WHEN 'Log' THEN 0.0" " WHEN 'False Positive' THEN -1.0" " ELSE data END" " WHERE name = 'level';"); /* Set the database version to 101. */ set_db_version (101); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 101 to version 102. * * @return 0 success, -1 error. */ int migrate_101_to_102 () { sql_begin_exclusive (); /* Ensure that the database is currently version 101. */ if (manage_db_version () != 101) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Rename nvts tables. */ sql ("ALTER TABLE nvts RENAME TO nvts_101;"); /* Create new one without description column. */ sql ("CREATE TABLE IF NOT EXISTS nvts" " (id INTEGER PRIMARY KEY, uuid, oid, version, name, comment, summary," " copyright, cve, bid, xref, tag, sign_key_ids," " category INTEGER, family, cvss_base, creation_time," " modification_time);"); /* Migrate old nvts data to new table. */ sql ("INSERT INTO nvts" " (id, uuid, oid, version, name, comment, summary," " copyright, cve, bid, xref, tag, sign_key_ids," " category, family, cvss_base, creation_time, modification_time)" " SELECT id, uuid, oid, version, name, comment, summary," " copyright, cve, bid, xref, tag, sign_key_ids," " category, family, cvss_base, creation_time, modification_time" " FROM nvts_101;"); /* Delete old nvts table. */ sql ("DROP TABLE nvts_101;"); /* Set the database version to 102. */ set_db_version (102); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 102 to version 103. * * @return 0 success, -1 error. */ int migrate_102_to_103 () { sql_begin_exclusive (); /* Ensure that the database is currently version 102. */ if (manage_db_version () != 102) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Clear cache for affected reports */ sql ("DELETE FROM report_counts WHERE report IN" " (SELECT report FROM results" " WHERE severity = 'NULL' OR severity = '' OR severity IS NULL);"); /* Add missing severity values */ sql ("UPDATE results SET" " severity = CASE type" " WHEN 'Error Message' THEN -3.0" " WHEN 'Debug Message' THEN -2.0" " WHEN 'False Positive' THEN -1.0" " WHEN 'Log Message' THEN 0.0" " ELSE NULL END" " WHERE severity = 'NULL' OR severity = '' OR severity IS NULL;"); /* Set the database version to 103. */ set_db_version (103); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 103 to version 104. * * @return 0 success, -1 error. */ int migrate_103_to_104 () { sql_begin_exclusive (); /* Ensure that the database is currently version 103. */ if (manage_db_version () != 103) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Tasks got an alterable flag. */ sql ("ALTER TABLE tasks ADD column alterable;"); sql ("UPDATE tasks SET alterable = 0;"); /* Set the database version to 104. */ set_db_version (104); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 104 to version 105. * * @return 0 success, -1 error. */ int migrate_104_to_105 () { sql_begin_exclusive (); /* Ensure that the database is currently version 104. */ if (manage_db_version () != 104) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Add expiration date column to reports cache. */ sql ("ALTER TABLE report_counts ADD COLUMN end_time INTEGER;"); /* Update cache to set expiration dates. */ sql ("UPDATE report_counts" " SET end_time = (SELECT coalesce(min(end_time), 0)" " FROM overrides, results" " WHERE overrides.nvt = results.nvt" " AND results.report = report_counts.report" " AND overrides.end_time > 1)" " WHERE report_counts.override = 1;"); sql ("UPDATE report_counts" " SET end_time = 0" " WHERE report_counts.override = 0;"); /* Clear cache for reports with already expired overrides */ sql ("DELETE FROM report_counts" " WHERE end_time != 0 AND end_time <= m_now ()"); /* Set the database version to 105. */ set_db_version (105); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 105 to version 106. * * @return 0 success, -1 error. */ int migrate_105_to_106 () { sql_begin_exclusive (); /* Ensure that the database is currently version 105. */ if (manage_db_version () != 105) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ sql ("ALTER TABLE users ADD COLUMN ifaces;"); sql ("ALTER TABLE users ADD COLUMN ifaces_allow;"); sql ("UPDATE users SET ifaces = '', ifaces_allow = 2"); /* Set the database version to 106. */ set_db_version (106); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 106 to version 107. * * @return 0 success, -1 error. */ int migrate_106_to_107 () { sql_begin_exclusive (); /* Ensure that the database is currently version 106. */ if (manage_db_version () != 106) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Results in container tasks were being given a task of 0. */ sql ("UPDATE results" " SET task = (SELECT task FROM reports WHERE reports.id = report);"); /* Set the database version to 107. */ set_db_version (107); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 107 to version 108. * * @return 0 success, -1 error. */ int migrate_107_to_108 () { sql_begin_exclusive (); /* Ensure that the database is currently version 107. */ if (manage_db_version () != 107) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Change hosts and interfaces Access "Allow All" to "Deny none". */ sql ("UPDATE users" " SET hosts = '', hosts_allow = 0 WHERE hosts_allow = 2;"); sql ("UPDATE users" " SET ifaces = '', ifaces_allow = 0 WHERE ifaces_allow = 2;"); /* Set the database version to 108. */ set_db_version (108); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 108 to version 109. * * @return 0 success, -1 error. */ int migrate_108_to_109 () { sql_begin_exclusive (); /* Ensure that the database is currently version 108. */ if (manage_db_version () != 108) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Permission names changed to full command names. */ sql ("UPDATE permissions SET name = 'create_' || resource_type" " WHERE name = 'create';"); sql ("DELETE FROM permissions WHERE name = 'create_';"); sql ("UPDATE permissions SET name = 'delete_' || resource_type" " WHERE name = 'delete';"); sql ("DELETE FROM permissions WHERE name = 'delete_';"); sql ("UPDATE permissions SET name = 'get_' || resource_type || 's'" " WHERE name = 'get';"); sql ("DELETE FROM permissions WHERE name = 'get_';"); sql ("UPDATE permissions SET name = 'modify_' || resource_type" " WHERE name = 'modify';"); sql ("DELETE FROM permissions WHERE name = 'modify_';"); /* Set the database version to 109. */ set_db_version (109); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 109 to version 110. * * @return 0 success, -1 error. */ int migrate_109_to_110 () { sql_begin_exclusive (); /* Ensure that the database is currently version 109. */ if (manage_db_version () != 109) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The permissions tables got subject_location fields. */ sql ("ALTER TABLE permissions ADD COLUMN subject_location;"); sql ("UPDATE permissions SET subject_location = 0;"); sql ("ALTER TABLE permissions_trash ADD COLUMN subject_location;"); sql ("UPDATE permissions_trash SET subject_location = 0;"); /* Set the database version to 110. */ set_db_version (110); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 110 to version 111. * * @return 0 success, -1 error. */ int migrate_110_to_111 () { sql_begin_exclusive (); /* Ensure that the database is currently version 110. */ if (manage_db_version () != 110) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The targets tables got an alive_test field. */ sql ("ALTER TABLE targets ADD COLUMN alive_test;"); sql ("UPDATE targets SET alive_test = 0;"); sql ("ALTER TABLE targets_trash ADD COLUMN alive_test;"); sql ("UPDATE targets_trash SET alive_test = 0;"); /* Set the database version to 111. */ set_db_version (111); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 111 to version 112. * * @return 0 success, -1 error. */ int migrate_111_to_112 () { sql_begin_exclusive (); /* Ensure that the database is currently version 111. */ if (manage_db_version () != 111) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Some prefs were removed from config Host Discovery so that the NVT * defaults will be used instead. */ sql ("DELETE FROM config_preferences" " WHERE config = (SELECT id FROM configs" " WHERE uuid = '" CONFIG_UUID_HOST_DISCOVERY "')" " AND (name = 'Ping Host[checkbox]:Do a TCP ping'" " OR name = 'Ping Host[checkbox]:Do an ICMP ping'" " OR name = 'Ping Host[checkbox]:Use ARP'" " OR name = 'Ping Host[checkbox]:Use nmap'" " OR name = 'Ping Host[checkbox]:nmap: try also with only -sP'" " OR name = 'Ping Host[entry]:nmap additional ports for -PA');"); /* Set the database version to 112. */ set_db_version (112); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 112 to version 113. * * @return 0 success, -1 error. */ int migrate_112_to_113 () { sql_begin_exclusive (); /* Ensure that the database is currently version 112. */ if (manage_db_version () != 112) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Certain levels may have been missing from the result counts cache due * to floating point approximation. */ sql ("DELETE FROM report_counts;"); /* Set the database version to 113. */ set_db_version (113); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 113 to version 114. * * @return 0 success, -1 error. */ int migrate_113_to_114 () { sql_begin_exclusive (); /* Ensure that the database is currently version 113. */ if (manage_db_version () != 113) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Reports got information from scan time. */ sql ("ALTER TABLE reports ADD COLUMN slave_uuid;"); sql ("ALTER TABLE reports ADD COLUMN slave_name;"); sql ("ALTER TABLE reports ADD COLUMN slave_host;"); sql ("ALTER TABLE reports ADD COLUMN slave_port;"); sql ("ALTER TABLE reports ADD COLUMN source_iface;"); /* Set the database version to 114. */ set_db_version (114); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 114 to version 115. * * @return 0 success, -1 error. */ int migrate_114_to_115 () { sql_begin_exclusive (); /* Ensure that the database is currently version 114. */ if (manage_db_version () != 114) { sql ("ROLLBACK;"); return -1; } /* Rename nvts tables. */ sql ("ALTER TABLE nvts RENAME TO nvts_114;"); /* Create new one without sign_key_ids column. */ sql ("CREATE TABLE IF NOT EXISTS nvts" " (id INTEGER PRIMARY KEY, uuid, oid, version, name, comment, summary," " copyright, cve, bid, xref, tag, category INTEGER, family, cvss_base," " creation_time, modification_time);"); /* Migrate old nvts data to new table. */ sql ("INSERT INTO nvts" " (id, uuid, oid, version, name, comment, summary," " copyright, cve, bid, xref, tag," " category, family, cvss_base, creation_time, modification_time)" " SELECT id, uuid, oid, version, name, comment, summary," " copyright, cve, bid, xref, tag," " category, family, cvss_base, creation_time, modification_time" " FROM nvts_114;"); /* Delete old nvts table. */ sql ("DROP TABLE nvts_114;"); /* Set the database version to 115. */ set_db_version (115); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 115 to version 116. * * @return 0 success, -1 error. */ int migrate_115_to_116 () { sql_begin_exclusive (); /* Ensure that the database is currently version 115. */ if (manage_db_version () != 115) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* NVT "CPE Inventory" was removed from config "Discovery". */ sql ("DELETE FROM nvt_selectors" " WHERE name = '" MANAGE_NVT_SELECTOR_UUID_DISCOVERY "'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) " AND family_or_nvt = '1.3.6.1.4.1.25623.1.0.810002'"); /* Set the database version to 116. */ set_db_version (116); sql ("COMMIT;"); return 0; } #define ID_WHEN_WITH_TRASH(type) \ " WHEN '" G_STRINGIFY (type) "' THEN" \ " COALESCE ((SELECT id FROM " G_STRINGIFY (type) "s" \ " WHERE uuid = attach_id)," \ " (SELECT id FROM " G_STRINGIFY (type) "s_trash" \ " WHERE uuid = attach_id)," \ " 0)" #define ID_WHEN_WITHOUT_TRASH(type) \ " WHEN '" G_STRINGIFY (type) "' THEN" \ " COALESCE ((SELECT id FROM " G_STRINGIFY (type) "s" \ " WHERE uuid = attach_id)," \ " 0)" #define RESOURCE_TRASH(type) \ " WHEN '" G_STRINGIFY (type) "' THEN" \ " (SELECT CASE WHEN " \ " (EXISTS (SELECT * FROM " G_STRINGIFY (type) "s_trash" \ " WHERE uuid = attach_id))" \ " THEN " G_STRINGIFY (LOCATION_TRASH) \ " ELSE " G_STRINGIFY (LOCATION_TABLE) " END)" /** * @brief Migrate the database from version 116 to version 117. * * @return 0 success, -1 error. */ int migrate_116_to_117 () { int scap_loaded = manage_scap_loaded (); int cert_loaded = manage_cert_loaded (); sql_begin_exclusive (); /* Ensure that the database is currently version 116. */ if (manage_db_version () != 116) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Rename attach_[...] columns in tags to resource_[...], reference * resources by id and add new column for resource UUID. */ sql ("ALTER TABLE tags RENAME TO tags_117;"); sql ("ALTER TABLE tags_trash RENAME TO tags_trash_117;"); sql ("CREATE TABLE IF NOT EXISTS tags" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner, name, comment," " creation_time, modification_time, resource_type, resource," " resource_uuid, resource_location, active, value);"); sql ("CREATE TABLE IF NOT EXISTS groups_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " type, term, creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS roles_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " creation_time, modification_time);"); sql ("INSERT INTO tags" " (id, uuid, owner, name, comment," " creation_time, modification_time, resource_type, resource," " resource_uuid, resource_location, active, value)" " SELECT" " id, uuid, owner, name, comment, creation_time, modification_time," " attach_type," " (SELECT CASE attach_type" ID_WHEN_WITH_TRASH (agent) ID_WHEN_WITH_TRASH (alert) "%s" // CPE and CVE ID_WHEN_WITH_TRASH (config) "%s" // DFN_CERT_ADV ID_WHEN_WITH_TRASH (filter) ID_WHEN_WITH_TRASH (group) ID_WHEN_WITH_TRASH (lsc_credential) ID_WHEN_WITH_TRASH (note) ID_WHEN_WITHOUT_TRASH (nvt) ID_WHEN_WITH_TRASH (override) "%s" // OVALDEF ID_WHEN_WITH_TRASH (permission) ID_WHEN_WITH_TRASH (port_list) ID_WHEN_WITH_TRASH (report_format) ID_WHEN_WITHOUT_TRASH (report) ID_WHEN_WITHOUT_TRASH (result) ID_WHEN_WITHOUT_TRASH (role) ID_WHEN_WITH_TRASH (schedule) ID_WHEN_WITH_TRASH (slave) ID_WHEN_WITH_TRASH (target) ID_WHEN_WITHOUT_TRASH (task) // uses attribute "hidden" for trash ID_WHEN_WITHOUT_TRASH (user) " ELSE 0 END)," " attach_id," " (SELECT CASE attach_type" RESOURCE_TRASH (alert) RESOURCE_TRASH (config) RESOURCE_TRASH (filter) RESOURCE_TRASH (group) RESOURCE_TRASH (lsc_credential) RESOURCE_TRASH (note) RESOURCE_TRASH (override) RESOURCE_TRASH (permission) RESOURCE_TRASH (port_list) RESOURCE_TRASH (report_format) RESOURCE_TRASH (schedule) RESOURCE_TRASH (slave) RESOURCE_TRASH (target) " WHEN 'task' THEN" " COALESCE ((SELECT CASE WHEN hidden = 2 THEN " G_STRINGIFY (LOCATION_TRASH) " ELSE " G_STRINGIFY (LOCATION_TABLE) " END" " FROM tasks WHERE uuid = attach_id)," G_STRINGIFY (LOCATION_TABLE) ")" " WHEN 'report' THEN" " COALESCE ((SELECT CASE WHEN tasks.hidden = 2 THEN " G_STRINGIFY (LOCATION_TRASH) " ELSE " G_STRINGIFY (LOCATION_TABLE) " END" " FROM (SELECT task FROM reports" " WHERE reports.uuid = attach_id) AS report_task" " JOIN tasks ON tasks.id = report_task.task)," G_STRINGIFY (LOCATION_TABLE) ")" " WHEN 'result' THEN" " COALESCE ((SELECT CASE WHEN tasks.hidden = 2 THEN " G_STRINGIFY (LOCATION_TRASH) " ELSE " G_STRINGIFY (LOCATION_TABLE) " END" " FROM (SELECT task FROM results" " WHERE results.uuid = attach_id) AS result_task" " JOIN tasks ON tasks.id = result_task.task)," G_STRINGIFY (LOCATION_TABLE) ")" " ELSE " G_STRINGIFY (LOCATION_TABLE) " END)," " active, value" " FROM tags_117;", scap_loaded ? ID_WHEN_WITHOUT_TRASH (cpe) ID_WHEN_WITHOUT_TRASH (cve) : "", cert_loaded ? ID_WHEN_WITHOUT_TRASH (dfn_cert_adv) : "", scap_loaded ? ID_WHEN_WITHOUT_TRASH (ovaldef) : ""); sql ("DROP TABLE tags_117;"); /* Rename attach_[...] columns in tags_trash to resource_[...], reference * resources by id and add new column for resource UUID. */ sql ("CREATE TABLE IF NOT EXISTS tags_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner, name, comment," " creation_time, modification_time, resource_type, resource," " resource_uuid, resource_location, active, value);"); sql ("INSERT INTO tags_trash" " (id, uuid, owner, name, comment," " creation_time, modification_time, resource_type, resource," " resource_uuid, resource_location, active, value)" " SELECT" " id, uuid, owner, name, comment, creation_time, modification_time," " attach_type," " (SELECT CASE attach_type" ID_WHEN_WITH_TRASH (agent) ID_WHEN_WITH_TRASH (alert) "%s" // CPE and CVE ID_WHEN_WITH_TRASH (config) "%s" // DFN_CERT_ADV ID_WHEN_WITH_TRASH (filter) ID_WHEN_WITH_TRASH (group) ID_WHEN_WITH_TRASH (lsc_credential) ID_WHEN_WITH_TRASH (note) ID_WHEN_WITHOUT_TRASH (nvt) ID_WHEN_WITH_TRASH (override) "%s" // OVALDEF ID_WHEN_WITH_TRASH (permission) ID_WHEN_WITH_TRASH (port_list) ID_WHEN_WITH_TRASH (report_format) ID_WHEN_WITHOUT_TRASH (report) ID_WHEN_WITHOUT_TRASH (result) ID_WHEN_WITHOUT_TRASH (role) ID_WHEN_WITH_TRASH (schedule) ID_WHEN_WITH_TRASH (slave) ID_WHEN_WITH_TRASH (target) ID_WHEN_WITHOUT_TRASH (task) // uses attribute "hidden" for trash ID_WHEN_WITHOUT_TRASH (user) " ELSE 0 END)," " attach_id," " (SELECT CASE attach_type" RESOURCE_TRASH (alert) RESOURCE_TRASH (config) RESOURCE_TRASH (filter) RESOURCE_TRASH (group) RESOURCE_TRASH (lsc_credential) RESOURCE_TRASH (note) RESOURCE_TRASH (override) RESOURCE_TRASH (permission) RESOURCE_TRASH (port_list) RESOURCE_TRASH (report_format) RESOURCE_TRASH (schedule) RESOURCE_TRASH (slave) RESOURCE_TRASH (target) " WHEN 'task' THEN" " COALESCE ((SELECT CASE WHEN hidden = 2 THEN " G_STRINGIFY (LOCATION_TRASH) " ELSE " G_STRINGIFY (LOCATION_TABLE) " END" " FROM tasks WHERE uuid = attach_id)," G_STRINGIFY (LOCATION_TABLE) ")" " WHEN 'report' THEN" " COALESCE ((SELECT CASE WHEN tasks.hidden = 2 THEN " G_STRINGIFY (LOCATION_TRASH) " ELSE " G_STRINGIFY (LOCATION_TABLE) " END" " FROM (SELECT task FROM reports" " WHERE reports.uuid = attach_id) AS report_task" " JOIN tasks ON tasks.id = report_task.task)," G_STRINGIFY (LOCATION_TABLE) ")" " WHEN 'result' THEN" " COALESCE ((SELECT CASE WHEN tasks.hidden = 2 THEN " G_STRINGIFY (LOCATION_TRASH) " ELSE " G_STRINGIFY (LOCATION_TABLE) " END" " FROM (SELECT task FROM results" " WHERE results.uuid = attach_id) AS result_task" " JOIN tasks ON tasks.id = result_task.task)," G_STRINGIFY (LOCATION_TABLE) ")" " ELSE " G_STRINGIFY (LOCATION_TABLE) " END)," " active, value" " FROM tags_trash_117;", scap_loaded ? ID_WHEN_WITHOUT_TRASH (cpe) ID_WHEN_WITHOUT_TRASH (cve) : "", cert_loaded ? ID_WHEN_WITHOUT_TRASH (dfn_cert_adv) : "", scap_loaded ? ID_WHEN_WITHOUT_TRASH (ovaldef) : ""); sql ("DROP TABLE tags_trash_117;"); /* Set the database version to 117. */ set_db_version (117); sql ("COMMIT;"); return 0; } #undef ID_WHEN_WITH_TRASH #undef ID_WHEN_WITHOUT_TRASH #undef RESOURCE_TRASH #define RESOURCE_TRASH(type) \ " WHEN '" G_STRINGIFY (type) "' THEN" \ " (SELECT CASE WHEN " \ " (EXISTS (SELECT * FROM " G_STRINGIFY (type) "s_trash" \ " WHERE uuid = resource_uuid))" \ " THEN " G_STRINGIFY (LOCATION_TRASH) \ " ELSE " G_STRINGIFY (LOCATION_TABLE) " END)" /** * @brief Migrate the database from version 117 to version 118. * * @return 0 success, -1 error. */ int migrate_117_to_118 () { sql_begin_exclusive (); /* Ensure that the database is currently version 117. */ if (manage_db_version () != 117) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Rebuild the resource_location column in tags and tags_trash */ sql ("UPDATE tags SET resource_location = " " (SELECT CASE resource_type" RESOURCE_TRASH (alert) RESOURCE_TRASH (config) RESOURCE_TRASH (filter) RESOURCE_TRASH (group) RESOURCE_TRASH (lsc_credential) RESOURCE_TRASH (note) RESOURCE_TRASH (override) RESOURCE_TRASH (permission) RESOURCE_TRASH (port_list) RESOURCE_TRASH (report_format) RESOURCE_TRASH (schedule) RESOURCE_TRASH (slave) RESOURCE_TRASH (target) " WHEN 'task' THEN" " COALESCE ((SELECT CASE WHEN hidden = 2 THEN " G_STRINGIFY (LOCATION_TRASH) " ELSE " G_STRINGIFY (LOCATION_TABLE) " END" " FROM tasks WHERE uuid = resource_uuid)," G_STRINGIFY (LOCATION_TABLE) ")" " WHEN 'report' THEN" " COALESCE ((SELECT CASE WHEN tasks.hidden = 2 THEN " G_STRINGIFY (LOCATION_TRASH) " ELSE " G_STRINGIFY (LOCATION_TABLE) " END" " FROM (SELECT task FROM reports" " WHERE reports.uuid = resource_uuid) AS report_task" " JOIN tasks ON tasks.id = report_task.task)," G_STRINGIFY (LOCATION_TABLE) ")" " WHEN 'result' THEN" " COALESCE ((SELECT CASE WHEN tasks.hidden = 2 THEN " G_STRINGIFY (LOCATION_TRASH) " ELSE " G_STRINGIFY (LOCATION_TABLE) " END" " FROM (SELECT task FROM results" " WHERE results.uuid = resource_uuid) AS result_task" " JOIN tasks ON tasks.id = result_task.task)," G_STRINGIFY (LOCATION_TABLE) ")" " ELSE " G_STRINGIFY (LOCATION_TABLE) " END);"); sql ("UPDATE tags_trash SET resource_location = " " (SELECT CASE resource_type" RESOURCE_TRASH (alert) RESOURCE_TRASH (config) RESOURCE_TRASH (filter) RESOURCE_TRASH (group) RESOURCE_TRASH (lsc_credential) RESOURCE_TRASH (note) RESOURCE_TRASH (override) RESOURCE_TRASH (permission) RESOURCE_TRASH (port_list) RESOURCE_TRASH (report_format) RESOURCE_TRASH (schedule) RESOURCE_TRASH (slave) RESOURCE_TRASH (target) " WHEN 'task' THEN" " COALESCE ((SELECT CASE WHEN hidden = 2 THEN " G_STRINGIFY (LOCATION_TRASH) " ELSE " G_STRINGIFY (LOCATION_TABLE) " END" " FROM tasks WHERE uuid = resource_uuid)," G_STRINGIFY (LOCATION_TABLE) ")" " WHEN 'report' THEN" " COALESCE ((SELECT CASE WHEN tasks.hidden = 2 THEN " G_STRINGIFY (LOCATION_TRASH) " ELSE " G_STRINGIFY (LOCATION_TABLE) " END" " FROM (SELECT task FROM reports" " WHERE reports.uuid = resource_uuid) AS report_task" " JOIN tasks ON tasks.id = report_task.task)," G_STRINGIFY (LOCATION_TABLE) ")" " WHEN 'result' THEN" " COALESCE ((SELECT CASE WHEN tasks.hidden = 2 THEN " G_STRINGIFY (LOCATION_TRASH) " ELSE " G_STRINGIFY (LOCATION_TABLE) " END" " FROM (SELECT task FROM results" " WHERE results.uuid = resource_uuid) AS result_task" " JOIN tasks ON tasks.id = result_task.task)," G_STRINGIFY (LOCATION_TABLE) ")" " ELSE " G_STRINGIFY (LOCATION_TABLE) " END);"); /* Set the database version to 118. */ set_db_version (118); sql ("COMMIT;"); return 0; } #undef RESOURCE_TRASH /** * @brief Migrate the database from version 118 to version 119. * * @return 0 success, -1 error. */ int migrate_118_to_119 () { sql_begin_exclusive (); /* Ensure that the database is currently version 118. */ if (manage_db_version () != 118) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Cleaning up of orphaned results was removed from startup. */ sql ("DELETE FROM results" " WHERE NOT EXISTS (SELECT * FROM report_results" " WHERE report_results.result = results.id);"); if (sql_changes () > 0) { g_debug ("%s: Removed %d orphaned result(s).", __FUNCTION__, sql_changes ()); sql ("DELETE FROM report_counts WHERE override = 0;"); sql ("DELETE FROM report_counts WHERE override = 1;"); } /* Set the database version to 119. */ set_db_version (119); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 119 to version 120. * * @return 0 success, -1 error. */ int migrate_119_to_120 () { sql_begin_exclusive (); /* Ensure that the database is currently version 119. */ if (manage_db_version () != 119) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* An omission in manage_empty_trashcan was leaving permissions referring to * removed resources. */ sql ("DELETE FROM permissions" " WHERE resource_location = " G_STRINGIFY (LOCATION_TRASH) " AND resource > 0" " AND resource_exists (resource_type, resource, resource_location) == 0;"); sql ("DELETE FROM permissions" " WHERE subject_location = " G_STRINGIFY (LOCATION_TRASH) " AND subject > 0" " AND resource_exists (subject_type, subject, subject_location) == 0;"); /* Set the database version to 120. */ set_db_version (120); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 120 to version 121. * * @return 0 success, -1 error. */ int migrate_120_to_121 () { sql_begin_exclusive (); /* Ensure that the database is currently version 120. */ if (manage_db_version () != 120) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Observer role was missing the AUTHENTICATE permission. Simply delete all * its permissions and they will be recreated (along with AUTHENTICATE * permission) on start-up. */ sql ("DELETE FROM permissions WHERE subject_type = 'role'" " AND subject = (SELECT id FROM roles" " WHERE uuid = '" ROLE_UUID_OBSERVER "');"); /* Set the database version to 121. */ set_db_version (121); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 121 to version 122. * * @return 0 success, -1 error. */ int migrate_121_to_122 () { sql_begin_exclusive (); /* Ensure that the database is currently version 121. */ if (manage_db_version () != 121) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* HELP now has a permission check, so delete User and Info roles' permissions * and they will be recreated (along with HELP permission) on start-up. */ sql ("DELETE FROM permissions" " WHERE subject_type = 'role' AND subject IN" " (SELECT id FROM roles WHERE uuid = '" ROLE_UUID_USER "'" " OR uuid = '" ROLE_UUID_INFO"');"); /* Set the database version to 122. */ set_db_version (122); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 122 to version 123. * * @return 0 success, -1 error. */ int migrate_122_to_123 () { int column_found = 0; iterator_t column_data; sql_begin_exclusive (); /* Ensure that the database is currently version 122. */ if (manage_db_version () != 122) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Check if targets_trash has alive_test column, which was added in the * migration to version 111 but previously missing in create_tables. */ init_iterator (&column_data, "PRAGMA table_info (targets_trash);"); while (next (&column_data) && column_found == 0) { const char* column_name; column_name = iterator_string (&column_data, 1); column_found = (strcmp (column_name, "alive_test") == 0); } cleanup_iterator (&column_data); if (column_found == 0) { sql ("ALTER TABLE targets_trash ADD COLUMN alive_test;"); sql ("UPDATE targets_trash SET alive_test = 0;"); } /* Set the database version to 123. */ set_db_version (123); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 123 to version 124. * * @return 0 success, -1 error. */ int migrate_123_to_124 () { sql_begin_exclusive (); /* Ensure that the database is currently version 123. */ if (manage_db_version () != 123) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Rename lsc_credentials tables. */ sql ("ALTER TABLE lsc_credentials RENAME TO lsc_credentials_123;"); sql ("ALTER TABLE lsc_credentials_trash RENAME TO lsc_credentials_trash_123;"); /* Create new ones without public_key. */ sql ("CREATE TABLE IF NOT EXISTS lsc_credentials" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name," " login, password, comment, private_key, rpm, deb, exe," " creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS lsc_credentials_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name," " login, password, comment, private_key, rpm, deb, exe," " creation_time, modification_time);"); /* Migrate old data to new tables. */ sql ("INSERT INTO lsc_credentials" " (id, uuid, owner , name, login, password, comment, private_key, rpm," " deb, exe, creation_time, modification_time)" " SELECT id, uuid, owner, name, login, password, comment, private_key," " rpm, deb, exe, creation_time, modification_time" " FROM lsc_credentials_123;"); sql ("INSERT INTO lsc_credentials_trash" " (id, uuid, owner , name, login, password, comment, private_key, rpm," " deb, exe, creation_time, modification_time)" " SELECT id, uuid, owner, name, login, password, comment, private_key," " rpm, deb, exe, creation_time, modification_time" " FROM lsc_credentials_123;"); /* Delete old tables. */ sql ("DROP TABLE lsc_credentials_123;"); sql ("DROP TABLE lsc_credentials_trash_123;"); /* Set the database version 124. */ set_db_version (124); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 124 to version 125. * * @return 0 success, -1 error. */ int migrate_124_to_125 () { sql_begin_exclusive (); /* Ensure that the database is currently version 124. */ if (manage_db_version () != 124) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Add tasks scanner and configs type. */ sql ("ALTER TABLE tasks ADD COLUMN scanner;"); sql ("ALTER TABLE configs ADD COLUMN type;"); sql ("ALTER TABLE configs_trash ADD COLUMN type;"); sql ("UPDATE tasks SET scanner = 0;"); sql ("UPDATE configs SET type = 0;"); sql ("UPDATE configs_trash SET type = 0;"); /* Set the database version 125. */ set_db_version (125); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 125 to version 126. * * @return 0 success, -1 error. */ int migrate_125_to_126 () { sql_begin_exclusive (); /* Ensure that the database is currently version 125. */ if (manage_db_version () != 125) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The description column was removed from table tasks. */ /* Move the table away. */ sql ("ALTER TABLE tasks RENAME TO tasks_125;"); /* Create the table in the new format. */ sql ("CREATE TABLE IF NOT EXISTS tasks" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, name, hidden INTEGER," " time, comment, run_status INTEGER, start_time, end_time," " config INTEGER, target INTEGER, schedule INTEGER, schedule_next_time," " slave INTEGER, config_location INTEGER, target_location INTEGER," " schedule_location INTEGER, slave_location INTEGER," " upload_result_count INTEGER, hosts_ordering, scanner, alterable," " creation_time, modification_time);"); /* Copy the data into the new table. */ sql ("INSERT into tasks" " (id, uuid, owner, name, hidden," " time, comment, run_status, start_time, end_time," " config, target, schedule, schedule_next_time," " slave, config_location, target_location," " schedule_location, slave_location," " upload_result_count, hosts_ordering, scanner, alterable," " creation_time, modification_time)" " SELECT" " id, uuid, owner, name, hidden," " time, comment, run_status, start_time, end_time," " config, target, schedule, schedule_next_time," " slave, config_location, target_location," " schedule_location, slave_location," " upload_result_count, hosts_ordering, scanner, alterable," " creation_time, modification_time" " FROM tasks_125;"); /* Drop the old table. */ sql ("DROP TABLE tasks_125;"); /* Set the database version to 126. */ set_db_version (126); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 126 to version 127. * * @return 0 success, -1 error. */ int migrate_126_to_127 () { sql_begin_exclusive (); /* Ensure that the database is currently version 126. */ if (manage_db_version () != 126) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* An error in copy_task gave some permissions wrong resource_uuid values. */ /* Copy the data into the new table. */ sql ("UPDATE permissions" " SET resource_uuid = (SELECT uuid FROM tasks WHERE tasks.id = resource)" " WHERE resource_type = 'task'" " AND resource != 0;"); /* Set the database version to 127. */ set_db_version (127); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 127 to version 128. * * @return 0 success, -1 error. */ int migrate_127_to_128 () { sql_begin_exclusive (); /* Ensure that the database is currently version 127. */ if (manage_db_version () != 127) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Results got a Quality of Detection column. */ sql ("ALTER TABLE results ADD COLUMN qod INTEGER;"); sql ("UPDATE results SET qod = -1;"); /* Set the database version to 128. */ set_db_version (128); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 128 to version 129. * * @return 0 success, -1 error. */ int migrate_128_to_129 () { sql_begin_exclusive (); /* Ensure that the database is currently version 128. */ if (manage_db_version () != 128) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Ensure new tables exists. */ sql ("CREATE TABLE IF NOT EXISTS scanners" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, name, comment," " host, port, type, creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS scanners_trash" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, name, comment," " host, port, type, creation_time, modification_time);"); /* Insert the default OpenVAS Scanner, if not present. */ if (sql_int ("SELECT count(*) FROM scanners WHERE uuid = '%s';", SCANNER_UUID_DEFAULT) == 0) sql ("INSERT INTO scanners" " (uuid, owner, name, host, port, type," " creation_time, modification_time)" " VALUES ('" SCANNER_UUID_DEFAULT "', NULL, 'OpenVAS Default'," " 'localhost', 9391, %d, m_now (), m_now ());", SCANNER_TYPE_OPENVAS); /* Tasks with no Scanner should use the default one. */ sql ("UPDATE tasks SET scanner =" " (SELECT id FROM scanners WHERE uuid = '" SCANNER_UUID_DEFAULT "')" " WHERE scanner = 0 OR scanner IS NULL;"); /* Set the database version to 129. */ set_db_version (129); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 129 to version 130. * * @return 0 success, -1 error. */ int migrate_129_to_130 () { char *ca_pub, *key_pub, *key_priv; char *quoted_ca_pub, *quoted_key_pub, *quoted_key_priv; GError *error = NULL; sql_begin_exclusive (); /* Ensure that the database is currently version 129. */ if (manage_db_version () != 129) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Add columns for per-scanner certificates. */ sql ("ALTER TABLE scanners ADD COLUMN ca_pub;"); sql ("ALTER TABLE scanners ADD COLUMN key_pub;"); sql ("ALTER TABLE scanners ADD COLUMN key_priv;"); sql ("ALTER TABLE scanners_trash ADD COLUMN ca_pub;"); sql ("ALTER TABLE scanners_trash ADD COLUMN key_pub;"); sql ("ALTER TABLE scanners_trash ADD COLUMN key_priv;"); /* Fetch default certificates content. */ if (!g_file_get_contents (CACERT, &ca_pub, NULL, &error)) { g_warning ("%s: %s\n", __FUNCTION__, error->message); g_error_free (error); return -1; } if (!g_file_get_contents (CLIENTCERT, &key_pub, NULL, &error)) { g_warning ("%s: %s\n", __FUNCTION__, error->message); g_error_free (error); g_free (ca_pub); return -1; } if (!g_file_get_contents (CLIENTKEY, &key_priv, NULL, &error)) { g_warning ("%s: %s\n", __FUNCTION__, error->message); g_error_free (error); g_free (ca_pub); g_free (key_pub); return -1; } /* Update current scanners to store default certificates in DB. */ quoted_ca_pub = sql_quote (ca_pub); quoted_key_pub = sql_quote (key_pub); quoted_key_priv = sql_quote (key_priv); g_free (ca_pub); g_free (key_pub); g_free (key_priv); sql ("UPDATE scanners SET ca_pub = '%s', key_pub = '%s', key_priv = '%s';", quoted_ca_pub, quoted_key_pub, quoted_key_priv); sql ("UPDATE scanners_trash SET ca_pub = '%s', key_pub = '%s'," " key_priv = '%s';", quoted_ca_pub, quoted_key_pub, quoted_key_priv); g_free (quoted_ca_pub); g_free (quoted_key_pub); g_free (quoted_key_priv); /* Set the database version to 130. */ set_db_version (130); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 130 to version 131. * * @return 0 success, -1 error. */ int migrate_130_to_131 () { sql_begin_exclusive (); /* Ensure that the database is currently version 130. */ if (manage_db_version () != 130) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Three commands were removed. */ sql ("DELETE FROM permissions" " WHERE name = 'get_target_locators'" " OR name = 'pause_task'" " OR name = 'resume_paused_task';"); sql ("DELETE FROM permissions_trash" " WHERE name = 'get_target_locators'" " OR name = 'pause_task'" " OR name = 'resume_paused_task';"); /* Set the database version to 131. */ set_db_version (131); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 131 to version 132. * * @return 0 success, -1 error. */ int migrate_131_to_132 () { sql_begin_exclusive (); /* Ensure that the database is currently version 131. */ if (manage_db_version () != 131) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* rpm, deb and exe columns were removed from lsc_credentials and * lsc_credentials_trash table. */ /* Move the tables away. */ sql ("ALTER TABLE lsc_credentials RENAME TO lsc_credentials_131;"); sql ("ALTER TABLE lsc_credentials_trash RENAME TO lsc_credentials_trash_131;"); /* Create the tables in the new format. */ if (sql_is_sqlite3 ()) { sql ("CREATE TABLE IF NOT EXISTS lsc_credentials" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, login," " password, comment, private_key TEXT," " creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS lsc_credentials_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, login," " password, comment, private_key TEXT," " creation_time, modification_time);"); } else { sql ("CREATE TABLE IF NOT EXISTS lsc_credentials" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " login text," " password text," " comment text," " private_key text," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS lsc_credentials_trash" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " login text," " password text," " comment text," " private_key text," " creation_time integer," " modification_time integer);"); } /* Copy the data into the new table. */ sql ("INSERT into lsc_credentials" " (id, uuid, owner, name, comment, login, password, private_key," " creation_time, modification_time)" " SELECT" " id, uuid, owner, name, comment, login, password, private_key," " creation_time, modification_time" " FROM lsc_credentials_131;"); sql ("INSERT into lsc_credentials_trash" " (id, uuid, owner, name, comment, login, password, private_key," " creation_time, modification_time)" " SELECT" " id, uuid, owner, name, comment, login, password, private_key," " creation_time, modification_time" " FROM lsc_credentials_trash_131;"); /* Drop the old tables. */ sql ("DROP TABLE lsc_credentials_131;"); sql ("DROP TABLE lsc_credentials_trash_131;"); /* Set the database version to 132. */ set_db_version (132); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 132 to version 133. * * @return 0 success, -1 error. */ int migrate_132_to_133 () { sql_begin_exclusive (); /* Ensure that the database is currently version 132. */ if (manage_db_version () != 132) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Add two new columns to results table. */ if (sql_is_sqlite3 ()) sql ("ALTER TABLE results ADD COLUMN owner INTEGER;"); else sql ("ALTER TABLE results ADD COLUMN owner integer" " REFERENCES users (id) ON DELETE RESTRICT;"); sql ("ALTER TABLE results ADD COLUMN date integer;"); /* Set values for added columns */ sql ("UPDATE results" " SET owner = (SELECT owner FROM reports" " WHERE reports.id = results.report)," " date = (SELECT date FROM reports" " WHERE reports.id = results.report);"); /* Set the database version to 133. */ set_db_version (133); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 133 to version 134. * * @return 0 success, -1 error. */ int migrate_133_to_134 () { sql_begin_exclusive (); /* Ensure that the database is currently version 133. */ if (manage_db_version () != 133) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Add a new columns for ESXi credentials to targets & targets_trash table. */ if (sql_is_sqlite3 ()) { sql ("ALTER TABLE targets ADD COLUMN esxi_lsc_credential;"); sql ("ALTER TABLE targets_trash ADD COLUMN esxi_lsc_credential;"); sql ("ALTER TABLE targets_trash ADD COLUMN esxi_location INTEGER;"); } else { sql ("ALTER TABLE targets ADD COLUMN esxi_lsc_credential integer;"); // REFERENCES lsc_credentials (id) ON DELETE RESTRICT sql ("ALTER TABLE targets_trash ADD COLUMN esxi_lsc_credential integer;"); // REFERENCES lsc_credentials (id) ON DELETE RESTRICT sql ("ALTER TABLE targets_trash ADD COLUMN esxi_location integer;"); } /* Set the database version to 134. */ set_db_version (134); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 134 to version 135. * * @return 0 success, -1 error. */ int migrate_134_to_135 () { sql_begin_exclusive (); /* Ensure that the database is currently version 134. */ if (manage_db_version () != 134) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The table report_results was removed. */ sql ("DROP TABLE report_results;"); /* Set the database version to 135. */ set_db_version (135); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 135 to version 136. * * @return 0 success, -1 error. */ int migrate_135_to_136 () { sql_begin_exclusive (); /* Ensure that the database is currently version 135. */ if (manage_db_version () != 135) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* In the past the task end time was sometimes stored as a string instead * of as an integer. Update the end times from the reports, clearing the * end time when the task has no reports. */ sql ("UPDATE tasks" " SET end_time = (SELECT reports.end_time FROM reports" " WHERE task = tasks.id ORDER BY id DESC LIMIT 1)" " WHERE EXISTS (SELECT id FROM reports WHERE task = tasks.id);"); sql ("UPDATE tasks" " SET end_time = NULL" " WHERE NOT EXISTS (SELECT id FROM reports WHERE task = tasks.id);"); /* Set the database version to 136. */ set_db_version (136); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 136 to version 137. * * @return 0 success, -1 error. */ int migrate_136_to_137 () { sql_begin_exclusive (); /* Ensure that the database is currently version 136. */ if (manage_db_version () != 136) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Commands like get_scanners have a permission check, delete the roles' * permissions and they will be recreated (along with the new permissions) on * start-up. */ sql ("DELETE FROM permissions" " WHERE subject_type = 'role' AND subject IN" " (SELECT id FROM roles WHERE uuid = '" ROLE_UUID_USER "'" " OR uuid = '" ROLE_UUID_OBSERVER "');"); /* Set the database version to 137. */ set_db_version (137); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 137 to version 138. * * @return 0 success, -1 error. */ int migrate_137_to_138 () { sql_begin_exclusive (); /* Ensure that the database is currently version 137. */ if (manage_db_version () != 137) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Add get_aggregates permissions to all predefined roles except Monitor. */ sql ("INSERT INTO permissions" " (uuid, owner, name, comment, resource_type, resource, resource_uuid," " resource_location, subject_type, subject, subject_location," " creation_time, modification_time)" " VALUES" " (make_uuid (), NULL, 'get_aggregates', '', ''," " 0, '', " G_STRINGIFY (LOCATION_TABLE) ", 'role'," " (SELECT id FROM roles WHERE uuid = '%s')," " " G_STRINGIFY (LOCATION_TABLE) ", m_now (), m_now ());", ROLE_UUID_GUEST); sql ("INSERT INTO permissions" " (uuid, owner, name, comment, resource_type, resource, resource_uuid," " resource_location, subject_type, subject, subject_location," " creation_time, modification_time)" " VALUES" " (make_uuid (), NULL, 'get_aggregates', '', ''," " 0, '', " G_STRINGIFY (LOCATION_TABLE) ", 'role'," " (SELECT id FROM roles WHERE uuid = '%s')," " " G_STRINGIFY (LOCATION_TABLE) ", m_now (), m_now ());", ROLE_UUID_INFO); sql ("INSERT INTO permissions" " (uuid, owner, name, comment, resource_type, resource, resource_uuid," " resource_location, subject_type, subject, subject_location," " creation_time, modification_time)" " VALUES" " (make_uuid (), NULL, 'get_aggregates', '', ''," " 0, '', " G_STRINGIFY (LOCATION_TABLE) ", 'role'," " (SELECT id FROM roles WHERE uuid = '%s')," " " G_STRINGIFY (LOCATION_TABLE) ", m_now (), m_now ());", ROLE_UUID_OBSERVER); sql ("INSERT INTO permissions" " (uuid, owner, name, comment, resource_type, resource, resource_uuid," " resource_location, subject_type, subject, subject_location," " creation_time, modification_time)" " VALUES" " (make_uuid (), NULL, 'get_aggregates', '', ''," " 0, '', " G_STRINGIFY (LOCATION_TABLE) ", 'role'," " (SELECT id FROM roles WHERE uuid = '%s')," " " G_STRINGIFY (LOCATION_TABLE) ", m_now (), m_now ());", ROLE_UUID_USER); /* Set the database version to 138. */ set_db_version (138); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 138 to version 139. * * @return 0 success, -1 error. */ int migrate_138_to_139 () { iterator_t nvts; sql_begin_exclusive (); /* Ensure that the database is currently version 138. */ if (manage_db_version () != 138) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Add new solution_type column */ sql ("ALTER TABLE nvts ADD COLUMN solution_type text;"); init_iterator (&nvts, "SELECT id, tag FROM nvts;"); while (next (&nvts)) { nvt_t nvt = iterator_int64 (&nvts, 0); const gchar* tags = iterator_string (&nvts, 1); gchar *solution_type = tag_value (tags, "solution_type"); gchar *quoted_solution_type = sql_quote (solution_type); sql ("UPDATE nvts SET" " solution_type = '%s'" " WHERE id = %llu;", quoted_solution_type, nvt); g_free (solution_type); g_free (quoted_solution_type); } /* Set the database version to 139. */ set_db_version (139); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 139 to version 140. * * @return 0 success, -1 error. */ int migrate_139_to_140 () { sql_begin_exclusive (); /* Ensure that the database is currently version 139. */ if (manage_db_version () != 139) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ sql ("UPDATE permissions SET" " name = 'resume_task'" " WHERE name = 'resume_stopped_task';"); sql ("UPDATE permissions_trash SET" " name = 'resume_task'" " WHERE name = 'resume_stopped_task';"); /* Set the database version to 140. */ set_db_version (140); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 140 to version 141. * * @return 0 success, -1 error. */ int migrate_140_to_141 () { sql_begin_exclusive (); /* Ensure that the database is currently version 140. */ if (manage_db_version () != 140) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ sql ("ALTER TABLE config_preferences ADD COLUMN default_value text;"); sql ("ALTER TABLE config_preferences_trash ADD COLUMN default_value text;"); /* Set the database version to 141. */ set_db_version (141); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 141 to version 142. * * @return 0 success, -1 error. */ int migrate_141_to_142 () { sql_begin_exclusive (); /* Ensure that the database is currently version 141. */ if (manage_db_version () != 141) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* OMP command RESUME_OR_START_TASK was removed. */ sql ("DELETE FROM permissions WHERE name = 'resume_or_start_task';"); sql ("DELETE FROM permissions_trash WHERE name = 'resume_or_start_task';"); /* Set the database version to 142. */ set_db_version (142); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 142 to version 143. * * @return 0 success, -1 error. */ int migrate_142_to_143 () { sql_begin_exclusive (); /* Ensure that the database is currently version 142. */ if (manage_db_version () != 142) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Set QoD of results to default value for various cases where * no QoD was specified during the creation of the result. */ sql ("UPDATE results SET qod = " G_STRINGIFY (QOD_DEFAULT) " WHERE (qod IS NULL) OR (qod <= 0);"); /* Set the database version to 143. */ set_db_version (143); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 143 to version 144. * * @return 0 success, -1 error. */ int migrate_143_to_144 () { iterator_t nvts; sql_begin_exclusive (); /* Ensure that the database is currently version 143. */ if (manage_db_version () != 143) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Add new QoD columns */ sql ("ALTER TABLE nvts ADD COLUMN qod INTEGER;"); sql ("ALTER TABLE nvts ADD COLUMN qod_type TEXT;"); sql ("ALTER TABLE results ADD COLUMN qod_type TEXT;"); /* Set default values */ sql ("UPDATE nvts SET qod=%d, qod_type='';", QOD_DEFAULT); sql ("UPDATE results SET qod_type='';"); /* Assign QoD values from NVT tags */ init_iterator (&nvts, "SELECT id, tag FROM nvts WHERE tag LIKE '%%|qod%%';"); while (next (&nvts)) { gchar *qod_str, *qod_type, *quoted_qod_type; int qod; qod_str = tag_value (iterator_string (&nvts, 1), "qod"); qod_type = tag_value (iterator_string (&nvts, 1), "qod_type"); quoted_qod_type = sql_quote (qod_type); if (qod_str == NULL || sscanf (qod_str, "%d", &qod) != 1) qod = qod_from_type (qod_type); sql ("UPDATE nvts SET qod=%d, qod_type='%s' WHERE id=%llu;", qod, quoted_qod_type, iterator_int64 (&nvts, 0)); g_free (qod_str); g_free (qod_type); g_free (quoted_qod_type); } cleanup_iterator (&nvts); /* Set the database version to 144. */ set_db_version (144); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 144 to version 145. * * @return 0 success, -1 error. */ int migrate_144_to_145 () { sql_begin_exclusive (); /* Ensure that the database is currently version 144. */ if (manage_db_version () != 144) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* Tasks got a new column schedule_periods. */ sql ("ALTER TABLE tasks ADD COLUMN schedule_periods INTEGER;"); sql ("UPDATE tasks SET schedule_periods=0;"); /* Set the database version to 145. */ set_db_version (145); sql ("COMMIT;"); return 0; } /** * @brief Migrate the database from version 145 to version 146. * * @return 0 success, -1 error. */ int migrate_145_to_146 () { sql_begin_exclusive (); /* Ensure that the database is currently version 145. */ if (manage_db_version () != 145) { sql ("ROLLBACK;"); return -1; } /* Update the database. */ /* The view result_overrides changed. */ sql ("DROP VIEW IF EXISTS result_new_severities;"); sql ("DROP VIEW IF EXISTS result_overrides;"); sql ("DELETE FROM report_counts;"); /* Set the database version to 146. */ set_db_version (146); sql ("COMMIT;"); return 0; } #ifdef SQL_IS_SQLITE #define SQLITE_OR_NULL(function) function #else #define SQLITE_OR_NULL(function) NULL #endif /** * @brief Array of database version migrators. */ static migrator_t database_migrators[] = {{0, NULL}, {1, SQLITE_OR_NULL (migrate_0_to_1)}, {2, SQLITE_OR_NULL (migrate_1_to_2)}, {3, SQLITE_OR_NULL (migrate_2_to_3)}, {4, SQLITE_OR_NULL (migrate_3_to_4)}, {5, SQLITE_OR_NULL (migrate_4_to_5)}, {6, SQLITE_OR_NULL (migrate_5_to_6)}, {7, SQLITE_OR_NULL (migrate_6_to_7)}, {8, SQLITE_OR_NULL (migrate_7_to_8)}, {9, SQLITE_OR_NULL (migrate_8_to_9)}, {10, SQLITE_OR_NULL (migrate_9_to_10)}, {11, SQLITE_OR_NULL (migrate_10_to_11)}, {12, SQLITE_OR_NULL (migrate_11_to_12)}, {13, SQLITE_OR_NULL (migrate_12_to_13)}, {14, SQLITE_OR_NULL (migrate_13_to_14)}, {15, SQLITE_OR_NULL (migrate_14_to_15)}, {16, SQLITE_OR_NULL (migrate_15_to_16)}, {17, SQLITE_OR_NULL (migrate_16_to_17)}, {18, SQLITE_OR_NULL (migrate_17_to_18)}, {19, SQLITE_OR_NULL (migrate_18_to_19)}, {20, SQLITE_OR_NULL (migrate_19_to_20)}, {21, SQLITE_OR_NULL (migrate_20_to_21)}, {22, SQLITE_OR_NULL (migrate_21_to_22)}, {23, SQLITE_OR_NULL (migrate_22_to_23)}, {24, SQLITE_OR_NULL (migrate_23_to_24)}, {25, SQLITE_OR_NULL (migrate_24_to_25)}, {26, SQLITE_OR_NULL (migrate_25_to_26)}, {27, SQLITE_OR_NULL (migrate_26_to_27)}, {28, SQLITE_OR_NULL (migrate_27_to_28)}, {29, SQLITE_OR_NULL (migrate_28_to_29)}, {30, SQLITE_OR_NULL (migrate_29_to_30)}, {31, SQLITE_OR_NULL (migrate_30_to_31)}, {32, SQLITE_OR_NULL (migrate_31_to_32)}, {33, SQLITE_OR_NULL (migrate_32_to_33)}, {34, SQLITE_OR_NULL (migrate_33_to_34)}, {35, SQLITE_OR_NULL (migrate_34_to_35)}, {36, SQLITE_OR_NULL (migrate_35_to_36)}, {37, SQLITE_OR_NULL (migrate_36_to_37)}, {38, SQLITE_OR_NULL (migrate_37_to_38)}, {39, SQLITE_OR_NULL (migrate_38_to_39)}, {40, SQLITE_OR_NULL (migrate_39_to_40)}, {41, SQLITE_OR_NULL (migrate_40_to_41)}, {42, SQLITE_OR_NULL (migrate_41_to_42)}, {43, SQLITE_OR_NULL (migrate_42_to_43)}, {44, SQLITE_OR_NULL (migrate_43_to_44)}, {45, SQLITE_OR_NULL (migrate_44_to_45)}, {46, SQLITE_OR_NULL (migrate_45_to_46)}, {47, SQLITE_OR_NULL (migrate_46_to_47)}, {48, SQLITE_OR_NULL (migrate_47_to_48)}, {49, SQLITE_OR_NULL (migrate_48_to_49)}, {50, SQLITE_OR_NULL (migrate_49_to_50)}, {51, SQLITE_OR_NULL (migrate_50_to_51)}, {52, SQLITE_OR_NULL (migrate_51_to_52)}, {53, SQLITE_OR_NULL (migrate_52_to_53)}, {54, SQLITE_OR_NULL (migrate_53_to_54)}, {55, SQLITE_OR_NULL (migrate_54_to_55)}, {56, SQLITE_OR_NULL (migrate_55_to_56)}, {57, SQLITE_OR_NULL (migrate_56_to_57)}, {58, SQLITE_OR_NULL (migrate_57_to_58)}, {59, SQLITE_OR_NULL (migrate_58_to_59)}, {60, SQLITE_OR_NULL (migrate_59_to_60)}, {61, SQLITE_OR_NULL (migrate_60_to_61)}, {62, SQLITE_OR_NULL (migrate_61_to_62)}, {63, SQLITE_OR_NULL (migrate_62_to_63)}, {64, migrate_63_to_64}, {65, migrate_64_to_65}, {66, migrate_65_to_66}, {67, migrate_66_to_67}, {68, migrate_67_to_68}, {69, migrate_68_to_69}, {70, migrate_69_to_70}, {71, migrate_70_to_71}, {72, migrate_71_to_72}, {73, migrate_72_to_73}, {74, migrate_73_to_74}, {75, migrate_74_to_75}, {76, migrate_75_to_76}, {77, migrate_76_to_77}, {78, migrate_77_to_78}, {79, migrate_78_to_79}, {80, migrate_79_to_80}, {81, migrate_80_to_81}, {82, migrate_81_to_82}, {83, migrate_82_to_83}, {84, migrate_83_to_84}, {85, migrate_84_to_85}, {86, migrate_85_to_86}, {87, migrate_86_to_87}, {88, migrate_87_to_88}, {89, migrate_88_to_89}, {90, migrate_89_to_90}, {91, migrate_90_to_91}, {92, migrate_91_to_92}, {93, migrate_92_to_93}, {94, migrate_93_to_94}, {95, migrate_94_to_95}, {96, migrate_95_to_96}, {97, migrate_96_to_97}, {98, migrate_97_to_98}, {99, migrate_98_to_99}, {100, migrate_99_to_100}, {101, migrate_100_to_101}, {102, migrate_101_to_102}, {103, migrate_102_to_103}, {104, migrate_103_to_104}, {105, migrate_104_to_105}, {106, migrate_105_to_106}, {107, migrate_106_to_107}, {108, migrate_107_to_108}, {109, migrate_108_to_109}, {110, migrate_109_to_110}, {111, migrate_110_to_111}, {112, migrate_111_to_112}, {113, migrate_112_to_113}, {114, migrate_113_to_114}, {115, migrate_114_to_115}, {116, migrate_115_to_116}, {117, migrate_116_to_117}, {118, migrate_117_to_118}, {119, migrate_118_to_119}, {120, migrate_119_to_120}, {121, migrate_120_to_121}, {122, migrate_121_to_122}, {123, migrate_122_to_123}, {124, migrate_123_to_124}, {125, migrate_124_to_125}, {126, migrate_125_to_126}, {127, migrate_126_to_127}, {128, migrate_127_to_128}, {129, migrate_128_to_129}, {130, migrate_129_to_130}, {131, migrate_130_to_131}, {132, migrate_131_to_132}, {133, migrate_132_to_133}, {134, migrate_133_to_134}, {135, migrate_134_to_135}, {136, migrate_135_to_136}, {137, migrate_136_to_137}, {138, migrate_137_to_138}, {139, migrate_138_to_139}, {140, migrate_139_to_140}, {141, migrate_140_to_141}, {142, migrate_141_to_142}, {143, migrate_142_to_143}, {144, migrate_143_to_144}, {145, migrate_144_to_145}, {146, migrate_145_to_146}, /* End marker. */ {-1, NULL}}; /** * @brief Check whether the migration needs the real timezone. * * @param[in] log_config Log configuration. * @param[in] database Location of manage database. * * @return TRUE if yes, else FALSE. */ gboolean manage_migrate_needs_timezone (GSList *log_config, const gchar *database) { int db_version; g_log_set_handler (G_LOG_DOMAIN, ALL_LOG_LEVELS, (GLogFunc) openvas_log_func, log_config); init_manage_process (0, database); db_version = manage_db_version (); cleanup_manage_process (TRUE); return db_version > 0 && db_version < 52; } /** * @brief Check whether a migration is available. * * @param[in] old_version Version to migrate from. * @param[in] new_version Version to migrate to. * * @return 1 yes, 0 no, -1 error. */ int migrate_is_available (int old_version, int new_version) { migrator_t *migrators; migrators = database_migrators + old_version + 1; while ((migrators->version >= 0) && (migrators->version <= new_version)) { if (migrators->function == NULL) return 0; if (migrators->version == new_version) return 1; migrators++; } return -1; } /** * @brief Migrate database to version supported by this manager. * * @param[in] log_config Log configuration. * @param[in] database Location of manage database. * * @return 0 success, 1 already on supported version, 2 too hard, * 11 cannot migrate SCAP DB, 12 cannot migrate CERT DB, * -1 error, -11 error running SCAP migration, -12 error running CERT migration. */ int manage_migrate (GSList *log_config, const gchar *database) { migrator_t *migrators; /* The version on the disk. */ int old_version, old_scap_version, old_cert_version; /* The version that this program requires. */ int new_version, new_scap_version, new_cert_version; int version_current = 0, scap_version_current = 0, cert_version_current = 0; g_log_set_handler (G_LOG_DOMAIN, ALL_LOG_LEVELS, (GLogFunc) openvas_log_func, log_config); init_manage_process (0, database); old_version = manage_db_version (); new_version = manage_db_supported_version (); if (old_version == -1) { cleanup_manage_process (TRUE); return -1; } if (old_version == -2) { g_warning ("%s: no task tables yet, run a --rebuild to create them.\n", __FUNCTION__); version_current = 1; } else if (old_version == new_version) { version_current = 1; } else { switch (migrate_is_available (old_version, new_version)) { case -1: cleanup_manage_process (TRUE); return -1; case 0: cleanup_manage_process (TRUE); return 2; } /* Call the migrators to take the DB from the old version to the new. */ migrators = database_migrators + old_version + 1; while ((migrators->version >= 0) && (migrators->version <= new_version)) { if (migrators->function == NULL) { cleanup_manage_process (TRUE); return -1; } infof (" Migrating to %i", migrators->version); if (migrators->function ()) { cleanup_manage_process (TRUE); return -1; } migrators++; } } /* Migrate SCAP and CERT databases */ old_scap_version = manage_scap_db_version (); new_scap_version = manage_scap_db_supported_version (); old_cert_version = manage_cert_db_version (); new_cert_version = manage_cert_db_supported_version (); if (old_scap_version == new_scap_version) { g_debug ("SCAP database already at current version"); scap_version_current = 1; } else if (old_scap_version == -1) { g_message ("No SCAP database found for migration"); scap_version_current = 1; } else if (old_scap_version > new_scap_version) { g_warning ("SCAP database version too new: %d", old_scap_version); return 11; } else { g_message ("Migrating SCAP database"); switch (openvas_migrate_secinfo (SBINDIR "/openvas-scapdata-sync", SCAP_FEED)) { case 0: g_message ("SCAP database migrated successfully"); break; case 1: g_warning ("SCAP sync already running"); cleanup_manage_process (TRUE); return 11; break; default: assert (0); case -1: cleanup_manage_process (TRUE); return -11; break; } } if (old_cert_version == new_cert_version) { g_debug ("CERT database already at current version"); cert_version_current = 1; } else if (old_cert_version == -1) { g_message ("No CERT database found for migration"); cert_version_current = 1; } else if (old_cert_version > new_cert_version) { g_warning ("CERT database version too new: %d", old_cert_version); return 12; } else { g_message ("Migrating CERT database"); switch (openvas_migrate_secinfo (SBINDIR "/openvas-certdata-sync", CERT_FEED)) { case 0: g_message ("CERT database migrated successfully"); break; case 1: g_warning ("CERT sync already running"); cleanup_manage_process (TRUE); return 12; break; default: assert (0); case -1: cleanup_manage_process (TRUE); return -12; break; } } if (version_current && scap_version_current && cert_version_current) { cleanup_manage_process (TRUE); return 1; } /* We now run ANALYZE after migrating, instead of on every startup. ANALYZE * made startup too slow, especially for large databases. Running it here * is preferred over removing it entirely, because users may have very * different use patterns of the database. * * Reopen the database before the ANALYZE, in case the schema has changed. */ cleanup_manage_process (TRUE); init_manage_process (0, database); sql ("ANALYZE;"); cleanup_manage_process (TRUE); return 0; } openvas-manager-6.0.9/src/CMakeLists.txt000644 001751 001751 00000020122 12631501054 021202 0ustar00michaelmichael000000 000000 # OpenVAS # $Id$ # Description: CMakefile for the OpenVAS Manager program # # Authors: # Matthew Mundell # Timo Pollmeier # # Copyright: # Copyright (C) 2009-2014 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. ## Libraries add_library (ovas-mngr-comm STATIC ovas-mngr-comm.c) include_directories (${LIBOPENVAS_OMP_INCLUDE_DIRS} ${LIBOPENVAS_MISC_INCLUDE_DIRS} ${LIBOPENVAS_BASE_INCLUDE_DIRS} ${GLIB_INCLUDE_DIRS}) find_package (Threads) if (BACKEND STREQUAL SQLITE3) set (BACKEND_FILES sql_sqlite3.c manage_sqlite3.c) else (BACKEND STREQUAL SQLITE3) set (BACKEND_FILES sql_pg.c manage_pg.c) add_library (manage-pg-server SHARED manage_pg_server.c manage_utils.c) include_directories (${PostgreSQL_INCLUDE_DIRS} ${PostgreSQL_SERVER_INCLUDE_DIRS}) endif (BACKEND STREQUAL SQLITE3) add_library (manage STATIC manage_utils.c manage.c sql.c manage_ranges_all_tcp_nmap_5_51_top_100.c manage_ranges_all_tcp_nmap_5_51_top_1000.c manage_ranges_iana_tcp_2012.c manage_ranges_iana_tcp_udp_2012.c manage_ranges_nmap_5_51_top_2000_top_100.c manage_acl.c manage_config_discovery.c manage_config_host_discovery.c manage_config_system_discovery.c manage_sql.c manage_migrators.c scanner.c ${BACKEND_FILES} lsc_user.c lsc_crypt.c) if (BACKEND STREQUAL SQLITE3) target_link_libraries (manage m ${SQLITE3_LDFLAGS} ${GLIB_LDFLAGS} ${GTHREAD_LDFLAGS} ${LIBOPENVAS_OMP_LDFLAGS} ${LIBOPENVAS_MISC_LDFLAGS} ${LIBOPENVAS_BASE_LDFLAGS}) else (BACKEND STREQUAL SQLITE3) target_link_libraries (manage m ${PostgreSQL_LIBRARIES} ${GLIB_LDFLAGS} ${GTHREAD_LDFLAGS} ${LIBOPENVAS_OMP_LDFLAGS} ${LIBOPENVAS_MISC_LDFLAGS} ${LIBOPENVAS_BASE_LDFLAGS}) target_link_libraries (manage-pg-server m ${PostgreSQL_LIBRARIES} ${GLIB_LDFLAGS} ${GTHREAD_LDFLAGS} ${LIBOPENVAS_OMP_LDFLAGS} ${LIBOPENVAS_MISC_LDFLAGS} ${LIBOPENVAS_BASE_LDFLAGS}) endif (BACKEND STREQUAL SQLITE3) add_library (omp STATIC omp.c) add_library (otp STATIC otp.c) ## Program add_executable (openvasmd openvasmd.c ompd.c) target_link_libraries (openvasmd ovas-mngr-comm omp otp manage ${GNUTLS_LDFLAGS} ${GPGME_LDFLAGS} ${GCRYPT_LDFLAGS} ${CMAKE_THREAD_LIBS_INIT}) set_target_properties (openvasmd PROPERTIES LINKER_LANGUAGE C) if (OPENVASMD_VERSION) add_definitions (-DOPENVASMD_VERSION=\\\"${OPENVASMD_VERSION}\\\") endif (OPENVASMD_VERSION) if (OMP_VERSION) add_definitions (-DOMP_VERSION=\\\"${OMP_VERSION}\\\") endif (OMP_VERSION) add_definitions (-DOPENVASMD_DATABASE_VERSION=${OPENVASMD_DATABASE_VERSION}) add_definitions (-DOPENVASMD_SCAP_DATABASE_VERSION=${OPENVASMD_SCAP_DATABASE_VERSION}) add_definitions (-DOPENVASMD_CERT_DATABASE_VERSION=${OPENVASMD_CERT_DATABASE_VERSION}) add_definitions (-DOPENVAS_OS_NAME=\\\"${CMAKE_SYSTEM}\\\") add_definitions (-DPREFIX=\\\"${CMAKE_INSTALL_PREFIX}\\\") add_definitions (-DSCAP_RES_DIR=\\\"${OPENVAS_SCAP_RES_DIR}\\\") add_definitions (-DSCAP_DATA_DIR=\\\"${OPENVAS_SCAP_DATA_DIR}\\\") add_definitions (-DCERT_RES_DIR=\\\"${OPENVAS_CERT_RES_DIR}\\\") add_definitions (-DCERT_DATA_DIR=\\\"${OPENVAS_CERT_DATA_DIR}\\\") if (OPENVAS_SCANNER_CERTIFICATE) add_definitions (-DSCANNERCERT=\\\"${OPENVAS_SCANNER_CERTIFICATE}\\\") endif (OPENVAS_SCANNER_CERTIFICATE) if (OPENVAS_SCANNER_KEY) add_definitions (-DSCANNERKEY=\\\"${OPENVAS_SCANNER_KEY}\\\") endif (OPENVAS_SCANNER_KEY) if (OPENVAS_CLIENT_CERTIFICATE) add_definitions (-DCLIENTCERT=\\\"${OPENVAS_CLIENT_CERTIFICATE}\\\") endif (OPENVAS_CLIENT_CERTIFICATE) if (OPENVAS_CLIENT_KEY) add_definitions (-DCLIENTKEY=\\\"${OPENVAS_CLIENT_KEY}\\\") endif (OPENVAS_CLIENT_KEY) if (OPENVAS_CA_CERTIFICATE) add_definitions (-DCACERT=\\\"${OPENVAS_CA_CERTIFICATE}\\\") endif (OPENVAS_CA_CERTIFICATE) if (OPENVAS_CA_DIR) add_definitions (-DCA_DIR=\\\"${OPENVAS_CA_DIR}\\\") endif (OPENVAS_CA_DIR) if (OPENVAS_LOG_DIR) add_definitions (-DOPENVAS_LOG_DIR=\\\"${OPENVAS_LOG_DIR}\\\") endif (OPENVAS_LOG_DIR) if (OPENVAS_STATE_DIR) add_definitions (-DOPENVAS_STATE_DIR=\\\"${OPENVAS_STATE_DIR}\\\") endif (OPENVAS_STATE_DIR) if (OPENVAS_PID_DIR) add_definitions (-DOPENVAS_PID_DIR=\\\"${OPENVAS_PID_DIR}\\\") endif (OPENVAS_PID_DIR) if (OPENVAS_SYSCONF_DIR) add_definitions (-DOPENVAS_SYSCONF_DIR=\\\"${OPENVAS_SYSCONF_DIR}\\\") endif (OPENVAS_SYSCONF_DIR) if (OPENVAS_DATA_DIR) add_definitions (-DOPENVAS_DATA_DIR=\\\"${OPENVAS_DATA_DIR}\\\") endif (OPENVAS_DATA_DIR) if (OPENVAS_LIB_INSTALL_DIR) add_definitions (-DOPENVAS_LIB_INSTALL_DIR=\\\"${OPENVAS_LIB_INSTALL_DIR}\\\") endif (OPENVAS_LIB_INSTALL_DIR) if (OPENVAS_NVT_DIR) add_definitions (-DOPENVAS_NVT_DIR=\\\"${OPENVAS_NVT_DIR}\\\") endif (OPENVAS_NVT_DIR) if (SBINDIR) add_definitions (-DSBINDIR=\\\"${SBINDIR}\\\") endif (SBINDIR) if (DEFINED OPENVAS_SQLITE_SLEEP_MAX) add_definitions (-DOPENVAS_SQLITE_SLEEP_MAX=${OPENVAS_SQLITE_SLEEP_MAX}) endif (DEFINED OPENVAS_SQLITE_SLEEP_MAX) ## Install install (TARGETS openvasmd RUNTIME DESTINATION ${SBINDIR} LIBRARY DESTINATION ${LIBDIR} ARCHIVE DESTINATION ${LIBDIR}/static) if (BACKEND STREQUAL POSTGRESQL) install (TARGETS manage-pg-server LIBRARY DESTINATION "${OPENVAS_STATE_DIR}/openvasmd/pg/") endif (BACKEND STREQUAL POSTGRESQL) ## Static analysis add_custom_target (splint COMMENT "Running splint..." COMMAND sh -c \"splint -booltype gboolean -predboolint +unixlib +export-header `pkg-config --cflags glib-2.0` `pkg-config --cflags libopenvas` ${CMAKE_CURRENT_SOURCE_DIR}/*.c\") add_custom_target (rats COMMENT "Running rats..." COMMAND sh -c \"rats --warning 2 ${CMAKE_CURRENT_SOURCE_DIR}/*.[ch]\") add_custom_target (flawfinder COMMENT "Running flawfinder..." COMMAND sh -c \"flawfinder ${CMAKE_CURRENT_SOURCE_DIR}/*.[ch]\") add_custom_target (check COMMENT "Checking code...") add_dependencies (check splint rats flawfinder) ## Tag files set (C_FILES "${CMAKE_CURRENT_SOURCE_DIR}/openvasmd.c" "${CMAKE_CURRENT_SOURCE_DIR}/ompd.c" "${CMAKE_CURRENT_SOURCE_DIR}/omp.c" "${CMAKE_CURRENT_SOURCE_DIR}/otp.c" "${CMAKE_CURRENT_SOURCE_DIR}/manage.c" "${CMAKE_CURRENT_SOURCE_DIR}/manage_utils.c" "${CMAKE_CURRENT_SOURCE_DIR}/manage_acl.c" "${CMAKE_CURRENT_SOURCE_DIR}/scanner.c" "${CMAKE_CURRENT_SOURCE_DIR}/manage_config_discovery.c" "${CMAKE_CURRENT_SOURCE_DIR}/manage_config_host_discovery.c" "${CMAKE_CURRENT_SOURCE_DIR}/manage_config_system_discovery.c" "${CMAKE_CURRENT_SOURCE_DIR}/manage_ranges_all_tcp_nmap_5_51_top_100.c" "${CMAKE_CURRENT_SOURCE_DIR}/manage_ranges_all_tcp_nmap_5_51_top_1000.c" "${CMAKE_CURRENT_SOURCE_DIR}/manage_ranges_iana_tcp_2012.c" "${CMAKE_CURRENT_SOURCE_DIR}/manage_ranges_iana_tcp_udp_2012.c" "${CMAKE_CURRENT_SOURCE_DIR}/manage_ranges_nmap_5_51_top_2000_top_100.c" "${CMAKE_CURRENT_SOURCE_DIR}/manage_sql.c" "${CMAKE_CURRENT_SOURCE_DIR}/manage_sqlite3.c" "${CMAKE_CURRENT_SOURCE_DIR}/manage_migrators.c" "${CMAKE_CURRENT_SOURCE_DIR}/ovas-mngr-comm.c" "${CMAKE_CURRENT_SOURCE_DIR}/lsc_user.c" "${CMAKE_CURRENT_SOURCE_DIR}/lsc_crypt.c" "${CMAKE_CURRENT_SOURCE_DIR}/sql.c" "${CMAKE_CURRENT_SOURCE_DIR}/sql_sqlite3.c") add_custom_target (etags COMMENT "Building TAGS..." COMMAND etags ${C_FILES}) add_custom_target (ctags COMMENT "Building tags..." COMMAND ctags ${C_FILES}) add_custom_target (tags COMMENT "Building tags files...") add_dependencies (tags etags ctags) ## End openvas-manager-6.0.9/src/lsc_crypt.h000644 001751 001751 00000003046 12557600615 020635 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: LSC credentials encryption support * * Authors: * Werner Koch * * Copyright: * Copyright (C) 2013 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #ifndef _OPENVASMD_LSC_CRYPT_H #define _OPENVASMD_LSC_CRYPT_H #include /* (Defined in openvasmd.c) */ extern int disable_encrypted_credentials; struct lsc_crypt_ctx_s; typedef struct lsc_crypt_ctx_s *lsc_crypt_ctx_t; lsc_crypt_ctx_t lsc_crypt_new (); void lsc_crypt_release (lsc_crypt_ctx_t); int lsc_crypt_create_key (); void lsc_crypt_flush (lsc_crypt_ctx_t); char *lsc_crypt_encrypt (lsc_crypt_ctx_t, const char *, ...) G_GNUC_NULL_TERMINATED; const char *lsc_crypt_get_password (lsc_crypt_ctx_t, const char *); const char *lsc_crypt_get_private_key (lsc_crypt_ctx_t, const char *); #endif /* _OPENVASMD_LSC_CRYPT_H */ openvas-manager-6.0.9/src/manage_pg.c000644 001751 001751 00000272356 12631501053 020545 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Manager Manage library: PostgreSQL specific Manage facilities. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2014 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #include "sql.h" #include "manage.h" #include "manage_acl.h" #include "manage_sql.h" /* Session. */ /** * @brief Setup session. * * @param[in] uuid User UUID. */ void manage_session_init (const char *uuid) { sql ("CREATE TEMPORARY TABLE IF NOT EXISTS current_credentials" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL);"); sql ("DELETE FROM current_credentials;"); if (uuid) sql ("INSERT INTO current_credentials (uuid) VALUES ('%s');", uuid); } /* Helpers. */ /** * @brief Check whether database is empty. * * @param[in] 1 if empty, else 0; */ int manage_db_empty () { return sql_int ("SELECT EXISTS (SELECT * FROM information_schema.tables" " WHERE table_catalog = '%s'" " AND table_schema = 'public'" " AND table_name = 'meta')" " ::integer;", sql_database ()) == 0; } /* SQL functions. */ /** * @brief Move data from a table to a new table, heeding column rename. * * @param[in] old_table Existing table. * @param[in] new_table New empty table with renamed column. * @param[in] old_name Name of column in old table. * @param[in] new_name Name of column in new table. */ void sql_rename_column (const char *old_table, const char *new_table, const char *old_name, const char *new_name) { return; } /** * @brief Create functions. * * @return 0 success, -1 error. */ int manage_create_sql_functions () { static int created = 0; if (created) return 0; if (sql_int ("SELECT count (*) FROM pg_available_extensions" " WHERE name = 'uuid-ossp' AND installed_version IS NOT NULL;") == 0) { g_warning ("%s: PostgreSQL extension uuid-ossp required", __FUNCTION__); return -1; } /* Functions in C. */ sql ("SET role dba;"); sql ("CREATE OR REPLACE FUNCTION max_hosts (text, text)" " RETURNS integer" " AS '%s/openvasmd/pg/libmanage-pg-server', 'sql_max_hosts'" " LANGUAGE C;", OPENVAS_STATE_DIR); sql ("CREATE OR REPLACE FUNCTION level_max_severity (text, text)" " RETURNS double precision" " AS '%s/openvasmd/pg/libmanage-pg-server', 'sql_level_max_severity'" " LANGUAGE C;", OPENVAS_STATE_DIR); sql ("CREATE OR REPLACE FUNCTION level_min_severity (text, text)" " RETURNS double precision" " AS '%s/openvasmd/pg/libmanage-pg-server', 'sql_level_min_severity'" " LANGUAGE C;", OPENVAS_STATE_DIR); sql ("CREATE OR REPLACE FUNCTION next_time (integer, integer, integer)" " RETURNS integer" " AS '%s/openvasmd/pg/libmanage-pg-server', 'sql_next_time'" " LANGUAGE C;", OPENVAS_STATE_DIR); sql ("CREATE OR REPLACE FUNCTION valid_db_resource_type (text)" " RETURNS boolean" " AS '%s/openvasmd/pg/libmanage-pg-server', 'sql_valid_db_resource_type'" " LANGUAGE C;", OPENVAS_STATE_DIR); sql ("RESET role;"); /* Functions in pl/pgsql. */ if (sql_int ("SELECT EXISTS (SELECT * FROM information_schema.tables" " WHERE table_catalog = '%s'" " AND table_schema = 'public'" " AND table_name = 'meta')" " ::integer;", sql_database ())) { sql ("CREATE OR REPLACE FUNCTION resource_name (text, text, integer)" " RETURNS text AS $$" /* Get the name of a resource by its type and ID. */ " DECLARE" " execute_name text;" " BEGIN" " CASE" " WHEN NOT valid_db_resource_type ($1)" " THEN RAISE EXCEPTION 'Invalid resource type argument: %', $1;" " WHEN $1 = 'note'" " AND $3 = " G_STRINGIFY (LOCATION_TABLE) " THEN RETURN (SELECT 'Note for: '" " || (SELECT name" " FROM nvts" " WHERE nvts.uuid = notes.nvt)" " FROM notes" " WHERE uuid = $2);" " WHEN $1 = 'note'" " THEN RETURN (SELECT 'Note for: '" " || (SELECT name" " FROM nvts" " WHERE nvts.uuid = notes_trash.nvt)" " FROM notes_trash" " WHERE uuid = $2);" " WHEN $1 = 'override'" " AND $3 = " G_STRINGIFY (LOCATION_TABLE) " THEN RETURN (SELECT 'Override for: '" " || (SELECT name" " FROM nvts" " WHERE nvts.uuid = overrides.nvt)" " FROM overrides" " WHERE uuid = $2);" " WHEN $1 = 'override'" " THEN RETURN (SELECT 'Override for: '" " || (SELECT name" " FROM nvts" " WHERE nvts.uuid = overrides_trash.nvt)" " FROM overrides_trash" " WHERE uuid = $2);" " WHEN $1 = 'report'" " THEN RETURN (SELECT (SELECT name FROM tasks WHERE id = task)" " || ' - '" " || (SELECT" " CASE (SELECT end_time FROM tasks" " WHERE id = task)" " WHEN 0 THEN 'N/A'" " ELSE (SELECT end_time::text" " FROM tasks WHERE id = task)" " END)" " FROM reports" " WHERE uuid = $2);" " WHEN $1 = 'result'" " THEN RETURN (SELECT (SELECT name FROM tasks WHERE id = task)" " || ' - '" " || (SELECT name FROM nvts WHERE oid = nvt)" " || ' - '" " || (SELECT" " CASE (SELECT end_time FROM tasks" " WHERE id = task)" " WHEN 0 THEN 'N/A'" " ELSE (SELECT end_time::text" " FROM tasks WHERE id = task)" " END)" " FROM results" " WHERE uuid = $2);" " WHEN $1 = 'task'" " THEN RETURN (SELECT name FROM tasks WHERE uuid = $2);" " WHEN $3 = " G_STRINGIFY (LOCATION_TABLE) " THEN EXECUTE 'SELECT name FROM ' || $1 || 's" " WHERE uuid = $1'" " INTO execute_name" " USING $2;" " RETURN execute_name;" " WHEN $1 NOT IN ('nvt', 'cpe', 'cve', 'ovaldef', 'cert_bund_adv'," " 'dfn_cert_adv', 'report', 'result', 'user')" " THEN EXECUTE 'SELECT name FROM ' || $1 || 's_trash" " WHERE uuid = $1'" " INTO execute_name" " USING $2;" " RETURN execute_name;" " ELSE RETURN NULL;" " END CASE;" " END;" "$$ LANGUAGE plpgsql;"); created = 1; } sql ("CREATE OR REPLACE FUNCTION task_trend (integer, integer, integer)" " RETURNS text AS $$" /* Calculate the trend of a task. */ " DECLARE" " last_report integer;" " second_last_report integer;" " severity_a double precision;" " severity_b double precision;" " high_a bigint;" " high_b bigint;" " medium_a bigint;" " medium_b bigint;" " low_a bigint;" " low_b bigint;" " threat_a integer;" " threat_b integer;" " BEGIN" " CASE" /* Ensure there are enough reports. */ " WHEN (SELECT count(*) <= 1 FROM reports" " WHERE task = $1" " AND scan_run_status = %u)" " THEN RETURN ''::text;" /* Get trend only for authenticated users. */ " WHEN NOT EXISTS (SELECT uuid FROM current_credentials)" " OR (SELECT uuid = '' FROM current_credentials)" " THEN RETURN ''::text;" /* Skip running and container tasks. */ " WHEN (SELECT run_status = %u OR target = 0" " FROM tasks WHERE id = $1)" " THEN RETURN ''::text;" " ELSE" " END CASE;" /* Check if the severity score changed. */ " last_report := task_last_report ($1);" " second_last_report := task_second_last_report ($1);" " severity_a := report_severity (last_report, $2, $3);" " severity_b := report_severity (second_last_report, $2, $3);" " IF severity_a > severity_b THEN" " RETURN 'up'::text;" " ELSIF severity_b > severity_a THEN" " RETURN 'down'::text;" " END IF;" /* Calculate trend. */ " high_a := report_severity_count (last_report, $2, $3," " 'high');" " high_b := report_severity_count (second_last_report, $2, $3," " 'high');" " medium_a := report_severity_count (last_report, $2, $3," " 'medium');" " medium_b := report_severity_count (second_last_report, $2, $3," " 'medium');" " low_a := report_severity_count (last_report, $2, $3," " 'low');" " low_b := report_severity_count (second_last_report, $2, $3," " 'low');" " IF high_a > 0 THEN" " threat_a := 4;" " ELSIF medium_a > 0 THEN" " threat_a := 3;" " ELSIF low_a > 0 THEN" " threat_a := 2;" " ELSE" " threat_a := 1;" " END IF;" " IF high_b > 0 THEN" " threat_b := 4;" " ELSIF medium_b > 0 THEN" " threat_b := 3;" " ELSIF low_b > 0 THEN" " threat_b := 2;" " ELSE" " threat_b := 1;" " END IF;" /* Check if the threat level changed. */ " IF threat_a > threat_b THEN" " RETURN 'up'::text;" " ELSIF threat_b > threat_a THEN" " RETURN 'down'::text;" " END IF;" /* Check if the threat count changed. */ " IF high_a > 0 THEN" " IF high_a > high_b THEN" " RETURN 'more'::text;" " ELSIF high_a < high_b THEN" " RETURN 'less'::text;" " END IF;" " RETURN 'same'::text;" " END IF;" " IF medium_a > 0 THEN" " IF medium_a > medium_b THEN" " RETURN 'more'::text;" " ELSIF medium_a < medium_b THEN" " RETURN 'less'::text;" " END IF;" " RETURN 'same'::text;" " END IF;" " IF low_a > 0 THEN" " IF low_a > low_b THEN" " RETURN 'more'::text;" " ELSIF low_a < low_b THEN" " RETURN 'less'::text;" " END IF;" " RETURN 'same'::text;" " END IF;" " RETURN 'same'::text;" " END;" "$$ LANGUAGE plpgsql;", TASK_STATUS_DONE, TASK_STATUS_RUNNING); sql ("CREATE OR REPLACE FUNCTION report_progress_active (integer)" " RETURNS integer AS $$" /* Calculate the progress of an active report. */ " DECLARE" " report_task integer;" " task_target integer;" " target_hosts text;" " target_exclude_hosts text;" " progress integer;" " total integer;" " maximum_hosts integer;" " total_progress integer;" " report_host record;" " BEGIN" " total := 0;" " report_task := (SELECT task FROM reports WHERE id = $1);" " task_target := (SELECT target FROM tasks WHERE id = report_task);" " IF task_target IS NULL THEN" " target_hosts := NULL;" " target_exclude_hosts := NULL;" " ELSIF (SELECT target_location = " G_STRINGIFY (LOCATION_TRASH) " FROM tasks WHERE id = report_task)" " THEN" " target_hosts := (SELECT hosts FROM targets_trash" " WHERE id = task_target);" " target_exclude_hosts := (SELECT exclude_hosts FROM targets_trash" " WHERE id = task_target);" " ELSE" " target_hosts := (SELECT hosts FROM targets" " WHERE id = task_target);" " target_exclude_hosts := (SELECT exclude_hosts FROM targets" " WHERE id = task_target);" " END IF;" " IF target_hosts IS NULL THEN" " RETURN 0;" " END IF;" " maximum_hosts := max_hosts (target_hosts, target_exclude_hosts);" " IF maximum_hosts = 0 THEN" " RETURN 0;" " END IF;" " FOR report_host IN SELECT current_port, max_port" " FROM report_hosts WHERE report = $1" " LOOP" " IF report_host.max_port IS NOT NULL" " AND report_host.max_port != 0" " THEN" " progress := (report_host.current_port * 100)" " / report_host.max_port;" " ELSIF report_host.current_port IS NULL" " OR report_host.current_port = 0" " THEN" " progress := 0;" " ELSE" " progress := 100;" " END IF;" " total := total + progress;" " END LOOP;" " total_progress := total / maximum_hosts;" " IF total_progress = 0 THEN" " RETURN 1;" " ELSIF total_progress = 100 THEN" " RETURN 99;" " END IF;" " RETURN total_progress;" " END;" "$$ LANGUAGE plpgsql;"); sql ("CREATE OR REPLACE FUNCTION order_message_type (text)" " RETURNS integer AS $$" " BEGIN" " IF $1 = 'Security Hole' THEN" " RETURN 1;" " ELSIF $1 = 'Security Warning' THEN" " RETURN 2;" " ELSIF $1 = 'Security Note' THEN" " RETURN 3;" " ELSIF $1 = 'Log Message' THEN" " RETURN 4;" " ELSIF $1 = 'Debug Message' THEN" " RETURN 5;" " ELSIF $1 = 'Error Message' THEN" " RETURN 6;" " ELSE" " RETURN 7;" " END IF;" " END;" "$$ LANGUAGE plpgsql;"); sql ("CREATE OR REPLACE FUNCTION order_port (text)" " RETURNS integer AS $$" " BEGIN" " IF $1 ~ '^[0-9]+' THEN" " RETURN CAST (substring ($1, '^[0-9]+') as integer);" " ELSIF $1 ~ '^[^0-9]* \\([0-9]+/' THEN" " RETURN CAST (substring ($1, '^[^0-9]* \\(([0-9]+)/') as integer);" " ELSE" " RETURN 0;" " END IF;" " END;" "$$ LANGUAGE plpgsql;"); sql ("CREATE OR REPLACE FUNCTION order_role (text)" " RETURNS text AS $$" " BEGIN" " IF $1 = 'Admin' THEN" " RETURN ' !';" " ELSE" " RETURN $1;" " END IF;" " END;" "$$ LANGUAGE plpgsql;"); sql ("CREATE OR REPLACE FUNCTION order_threat (text)" " RETURNS integer AS $$" " BEGIN" " IF $1 = 'High' THEN" " RETURN 1;" " ELSIF $1 = 'Medium' THEN" " RETURN 2;" " ELSIF $1 = 'Low' THEN" " RETURN 3;" " ELSIF $1 = 'Log' THEN" " RETURN 4;" " ELSIF $1 = 'Debug' THEN" " RETURN 5;" " ELSIF $1 = 'False Positive' THEN" " RETURN 6;" " ELSIF $1 = 'None' THEN" " RETURN 7;" " ELSE" " RETURN 8;" " END IF;" " END;" "$$ LANGUAGE plpgsql;"); sql ("CREATE OR REPLACE FUNCTION severity_to_type (double precision)" " RETURNS text AS $$" " BEGIN" " IF $1 IS NULL THEN" " RETURN NULL;" " ELSIF $1 = " G_STRINGIFY (SEVERITY_LOG) " THEN" " RETURN 'Log Message';" " ELSIF $1 = " G_STRINGIFY (SEVERITY_FP) " THEN" " RETURN 'False Positive';" " ELSIF $1 = " G_STRINGIFY (SEVERITY_DEBUG) " THEN" " RETURN 'Debug Message';" " ELSIF $1 = " G_STRINGIFY (SEVERITY_ERROR) " THEN" " RETURN 'Error Message';" " ELSIF $1 > 0.0 AND $1 <= 10.0 THEN" " RETURN 'Alarm';" " ELSE" " RAISE EXCEPTION 'Invalid severity score given: %', $1;" " END IF;" " END;" "$$ LANGUAGE plpgsql;"); sql ("CREATE OR REPLACE FUNCTION severity_matches_ov (double precision," " double precision)" " RETURNS boolean AS $$" " BEGIN" " IF $1 IS NULL THEN" " RAISE EXCEPTION 'First parameter of severity_matches_ov is NULL';" " END IF;" " RETURN CASE" " WHEN $2 IS NULL" // FIX SQLite also has "OR $2 = ''". " THEN true" " WHEN $1 <= 0.0" " THEN $1 = $2" " ELSE $1 >= $2" " END;" " END;" "$$ LANGUAGE plpgsql;"); sql ("CREATE OR REPLACE FUNCTION iso_time (seconds integer)" " RETURNS text AS $$" " DECLARE" " user_zone text;" " user_offset interval;" " BEGIN" " user_zone := (SELECT timezone FROM users" " WHERE uuid = (SELECT uuid" " FROM current_credentials));" " user_offset := age (now () AT TIME ZONE user_zone," " now () AT TIME ZONE 'UTC');" " RETURN CASE" " WHEN $1 = 0" " THEN ''" " WHEN user_zone IS NULL" " THEN to_char (to_timestamp ($1) AT TIME ZONE 'UTC'," " 'FMIYYY-MM-DD')" " || to_char (to_timestamp ($1) AT TIME ZONE 'UTC'," " 'FMTHH24:MI:SSZ')" " ELSE to_char (to_timestamp ($1) AT TIME ZONE user_zone," " 'FMIYYY-MM-DD')" " || to_char (to_timestamp ($1) AT TIME ZONE user_zone," " 'FMTHH24:MI:SS')" " || '+'" " || to_char (extract (hours FROM user_offset)::integer," " 'FM00')" " || ':'" " || to_char (extract (minutes FROM user_offset)::integer," " 'FM00')" " END;" " END;" "$$ LANGUAGE plpgsql;"); sql ("CREATE OR REPLACE FUNCTION uniquify (type text, proposed_name text," " owner integer, suffix text)" " RETURNS text AS $$" " DECLARE" " number integer := 1;" " candidate text := '';" " separator text := ' ';" " unique_candidate boolean;" " BEGIN" " IF type = 'user' THEN separator := '_'; END IF;" " candidate := proposed_name || suffix || separator || number::text;" " LOOP" " EXECUTE 'SELECT count (*) = 0 FROM ' || type || 's" " WHERE name = $1" " AND ((owner IS NULL) OR (owner = $2))'" " INTO unique_candidate" " USING candidate, owner;" " EXIT WHEN unique_candidate;" " number := number + 1;" " candidate := proposed_name || suffix || separator || number::text;" " END LOOP;" " RETURN candidate;" " END;" "$$ LANGUAGE plpgsql;"); sql ("CREATE OR REPLACE FUNCTION create_index (schema_name text," " index_name text," " table_name text," " columns text)" " RETURNS void AS $$" " BEGIN" " IF (SELECT count(*) = 0 FROM pg_indexes" " WHERE schemaname = lower (schema_name)" " AND tablename = lower (table_name)" " AND indexname = lower (index_name))" " THEN" " EXECUTE 'CREATE INDEX ' || index_name" " || ' ON ' || table_name || ' (' || columns || ');';" " END IF;" " END;" "$$ LANGUAGE plpgsql;"); sql ("CREATE OR REPLACE FUNCTION create_index (index_name text," " table_name text," " columns text)" " RETURNS void AS $$" " BEGIN" " PERFORM create_index ('public', index_name, table_name, columns);" " END;" "$$ LANGUAGE plpgsql;"); sql ("CREATE OR REPLACE FUNCTION user_has_super_on_resource (arg_type text, arg_id integer)" " RETURNS boolean AS $$" /* Test whether a user has super permissions on a resource. * * This must match user_has_super_on_resource in manage_acl.c. */ " DECLARE" " owns boolean;" " BEGIN" " EXECUTE" " 'SELECT" " EXISTS (SELECT * FROM permissions" " WHERE name = ''Super''" /* Super on everyone. */ " AND ((resource = 0)" /* Super on other_user. */ " OR ((resource_type = ''user'')" " AND (resource = (SELECT ' || $1 || 's.owner" " FROM ' || $1 || 's" " WHERE id = $2)))" /* Super on other_user's role. */ " OR ((resource_type = ''role'')" " AND (resource" " IN (SELECT DISTINCT role" " FROM role_users" " WHERE \"user\"" " = (SELECT ' || $1 || 's.owner" " FROM ' || $1 || 's" " WHERE id = $2))))" /* Super on other_user's group. */ " OR ((resource_type = ''group'')" " AND (resource" " IN (SELECT DISTINCT \"group\"" " FROM group_users" " WHERE \"user\"" " = (SELECT ' || $1 || 's.owner" " FROM ' || $1 || 's" " WHERE id = $2)))))" " AND subject_location = " G_STRINGIFY (LOCATION_TABLE) " AND ((subject_type = ''user''" " AND subject" " = (SELECT id FROM users" " WHERE users.uuid" " = (SELECT uuid" " FROM current_credentials)))" " OR (subject_type = ''group''" " AND subject" " IN (SELECT DISTINCT \"group\"" " FROM group_users" " WHERE" " \"user\"" " = (SELECT id" " FROM users" " WHERE users.uuid" " = (SELECT uuid" " FROM current_credentials))))" " OR (subject_type = ''role''" " AND subject" " IN (SELECT DISTINCT role" " FROM role_users" " WHERE" " \"user\"" " = (SELECT id" " FROM users" " WHERE users.uuid" " = (SELECT uuid" " FROM current_credentials))))))'" " USING arg_type, arg_id" " INTO owns;" " RETURN owns;" " END;" "$$ LANGUAGE plpgsql;"); sql ("CREATE OR REPLACE FUNCTION user_owns (arg_type text, arg_id integer)" " RETURNS boolean AS $$" /* Test whether a user owns a resource. * * This must match user_owns in manage_acl.c. */ " DECLARE" " owns boolean;" " BEGIN" " CASE" " WHEN arg_type = 'nvt'" " OR arg_type = 'cve'" " OR arg_type = 'cpe'" " OR arg_type = 'ovaldef'" " OR arg_type = 'cert_bund_adv'" " OR arg_type = 'dfn_cert_adv'" " THEN RETURN true;" " WHEN user_has_super_on_resource (arg_type, arg_id)" " THEN RETURN true;" " WHEN arg_type = 'result'" " THEN CASE" " WHEN EXISTS (SELECT * FROM results, reports" " WHERE results.id = arg_id" " AND results.report = reports.id" " AND ((reports.owner IS NULL)" " OR (reports.owner" " = (SELECT id FROM users" " WHERE users.uuid" " = (SELECT uuid" " FROM current_credentials)))))" " THEN RETURN true;" " ELSE RETURN false;" " END CASE;" " WHEN arg_type = 'task'" " THEN CASE" " WHEN EXISTS (SELECT * FROM tasks" " WHERE id = arg_id" " AND hidden < 2" " AND ((owner IS NULL)" " OR (owner" " = (SELECT id FROM users" " WHERE users.uuid" " = (SELECT uuid" " FROM current_credentials)))))" " THEN RETURN true;" " ELSE RETURN false;" " END CASE;" " ELSE" " EXECUTE" " 'SELECT EXISTS (SELECT * FROM ' || $1 || 's" " WHERE id = $2" " AND ((owner IS NULL)" " OR (owner = (SELECT id FROM users" " WHERE users.uuid = (SELECT uuid" " FROM current_credentials))))'" " USING arg_type, arg_id" " INTO owns;" " RETURN owns;" " END CASE;" " END;" "$$ LANGUAGE plpgsql;"); /* Functions in SQL. */ sql ("CREATE OR REPLACE FUNCTION t () RETURNS boolean AS $$" " SELECT true;" "$$ LANGUAGE SQL;"); sql ("CREATE OR REPLACE FUNCTION m_now () RETURNS integer AS $$" " SELECT extract (epoch FROM now ())::integer;" "$$ LANGUAGE SQL;"); sql ("CREATE OR REPLACE FUNCTION common_cve (text, text)" " RETURNS boolean AS $$" /* Check if two CVE lists contain a common CVE. */ " SELECT EXISTS (SELECT trim (unnest (string_to_array ($1, ',')))" " INTERSECT" " SELECT trim (unnest (string_to_array ($2, ','))));" "$$ LANGUAGE SQL;"); sql ("CREATE OR REPLACE FUNCTION hosts_contains (text, text)" " RETURNS boolean AS $$" /* Check if a host list contains a host. */ " SELECT trim ($2)" " IN (SELECT trim (unnest (string_to_array ($1, ','))));" "$$ LANGUAGE SQL;"); sql ("CREATE OR REPLACE FUNCTION make_uuid () RETURNS text AS $$" " SELECT uuid_generate_v4 ()::text AS result;" "$$ LANGUAGE SQL;"); sql ("CREATE OR REPLACE FUNCTION tag (text, text) RETURNS text AS $$" /* Extract a tag from an OTP tag list. */ " SELECT split_part (unnest, '=', 2)" " FROM unnest (string_to_array ($1, '|'))" " WHERE split_part (unnest, '=', 1) = $2;" "$$ LANGUAGE SQL;"); if (sql_int ("SELECT EXISTS (SELECT * FROM information_schema.tables" " WHERE table_catalog = '%s'" " AND table_schema = 'public'" " AND table_name = 'meta')" " ::integer;", sql_database ())) { sql ("CREATE OR REPLACE FUNCTION report_active (integer)" " RETURNS boolean AS $$" /* Check whether a report is active. */ " SELECT CASE" " WHEN (SELECT scan_run_status FROM reports" " WHERE reports.id = $1)" " IN (SELECT unnest (ARRAY [%i, %i, %i, %i, %i, %i," " %i]))" " THEN true" " ELSE false" " END;" "$$ LANGUAGE SQL;", TASK_STATUS_REQUESTED, TASK_STATUS_RUNNING, TASK_STATUS_DELETE_REQUESTED, TASK_STATUS_DELETE_ULTIMATE_REQUESTED, TASK_STATUS_STOP_REQUESTED, TASK_STATUS_STOP_REQUESTED_GIVEUP, TASK_STATUS_STOPPED); sql ("CREATE OR REPLACE FUNCTION report_progress (integer)" " RETURNS integer AS $$" /* Calculate the progress of a report. */ " SELECT CASE" " WHEN $1 = 0" " THEN -1" " WHEN (SELECT slave_task_uuid FROM reports WHERE id = $1)" " != ''" " THEN (SELECT slave_progress FROM reports WHERE id = $1)" " WHEN report_active ($1)" " THEN report_progress_active ($1)" " ELSE -1" " END;" "$$ LANGUAGE SQL;"); sql ("CREATE OR REPLACE FUNCTION dynamic_severity ()" " RETURNS boolean AS $$" /* Get Dynamic Severity user setting. */ " SELECT CAST (value AS integer) = 1 FROM settings" " WHERE name = 'Dynamic Severity'" " AND ((owner IS NULL)" " OR (owner = (SELECT id FROM users" " WHERE users.uuid" " = (SELECT uuid" " FROM current_credentials))))" " ORDER BY coalesce (owner, 0) DESC LIMIT 1;" "$$ LANGUAGE SQL;"); sql ("CREATE OR REPLACE FUNCTION current_severity (real, text)" " RETURNS double precision AS $$" " SELECT coalesce ((CASE WHEN $1 > " G_STRINGIFY (SEVERITY_LOG) " THEN (SELECT CAST (cvss_base" " AS double precision)" " FROM nvts" " WHERE nvts.oid = $2)" " ELSE $1" " END)," " $1);" "$$ LANGUAGE SQL;"); #define OVERRIDES_SQL(severity_sql) \ " coalesce" \ " ((SELECT overrides.new_severity" \ " FROM overrides" \ " WHERE overrides.nvt = results.nvt" \ " AND ((overrides.owner IS NULL)" \ " OR (overrides.owner =" \ " (SELECT id FROM users" \ " WHERE users.uuid" \ " = (SELECT uuid" \ " FROM current_credentials))))" \ " AND ((overrides.end_time = 0)" \ " OR (overrides.end_time >= m_now ()))" \ " AND (overrides.task = results.task" \ " OR overrides.task = 0)" \ " AND (overrides.result = results.id" \ " OR overrides.result = 0)" \ " AND (overrides.hosts is NULL" \ " OR overrides.hosts = ''" \ " OR hosts_contains (overrides.hosts," \ " results.host))" \ " AND (overrides.port is NULL" \ " OR overrides.port = ''" \ " OR overrides.port = results.port)" \ " AND severity_matches_ov" \ " (" severity_sql ", overrides.severity)" \ " ORDER BY overrides.result DESC," \ " overrides.task DESC," \ " overrides.port DESC," \ " overrides.severity ASC," \ " overrides.creation_time DESC" \ " LIMIT 1)," \ " " severity_sql ")" sql ("CREATE OR REPLACE FUNCTION report_severity (report integer," " overrides integer," " min_qod integer)" " RETURNS double precision AS $$" /* Calculate the severity of a report. */ " WITH max_severity AS (SELECT max(severity) AS max" " FROM report_counts" // FIX should have user like report_counts_cache_exists? c version too? " WHERE report = $1" " AND override = $2" // TODO: caching for non-default QoD " AND " G_STRINGIFY (MIN_QOD_DEFAULT) " = $3" " AND (end_time = 0 or end_time >= m_now ()))" " SELECT CASE" " WHEN EXISTS (SELECT max FROM max_severity)" " AND (SELECT max FROM max_severity) IS NOT NULL" " THEN (SELECT max::double precision FROM max_severity)" " WHEN dynamic_severity () AND $2::boolean" /* Dynamic severity, overrides on. */ " THEN (SELECT max" " (" OVERRIDES_SQL ("current_severity (results.severity," " results.nvt)") ")" " FROM results" " WHERE results.report = $1" " AND results.qod >= $3)" " WHEN dynamic_severity ()" /* Dynamic severity, overrides off. */ " THEN (SELECT max (CASE" " WHEN results.type IS NULL" " THEN 0::real" " ELSE current_severity" " (results.severity, results.nvt)" " END)" " FROM results" " WHERE results.report = $1" " AND results.qod >= $3)" " WHEN $2::boolean" /* Overrides on. */ " THEN (SELECT max (" OVERRIDES_SQL ("results.severity") ")" " FROM results" " WHERE results.report = $1" " AND results.qod >= $3)" /* Overrides off. */ " ELSE (SELECT max (CASE" " WHEN results.type IS NULL" " THEN 0::real" " ELSE results.severity" " END)" " FROM results" " WHERE results.report = $1" " AND results.qod >= $3)" " END;" "$$ LANGUAGE SQL;"); sql ("CREATE OR REPLACE FUNCTION severity_class ()" " RETURNS text AS $$" /* Get the user's severity class setting. */ " SELECT value FROM settings" " WHERE name = 'Severity Class'" " AND ((owner IS NULL)" " OR (owner = (SELECT id FROM users" " WHERE users.uuid = (SELECT uuid" " FROM current_credentials))))" " ORDER BY owner DESC LIMIT 1;" "$$ LANGUAGE SQL;"); sql ("CREATE OR REPLACE FUNCTION" " report_severity_count (report integer, overrides integer," " min_qod integer, level text)" " RETURNS bigint AS $$" /* Calculate the severity of a report. */ " WITH severity_count AS (SELECT sum (count) AS total" " FROM report_counts" " WHERE report = $1" " AND override = $2" " AND " G_STRINGIFY (MIN_QOD_DEFAULT) " = $3" " AND (end_time = 0 or end_time >= m_now ())" " AND (severity" " BETWEEN level_min_severity" " ($4, severity_class ())" " AND level_max_severity" " ($4, severity_class ())))" " SELECT CASE" " WHEN EXISTS (SELECT total FROM severity_count)" " AND (SELECT total FROM severity_count) IS NOT NULL" " THEN (SELECT total FROM severity_count)" " WHEN dynamic_severity () AND $2::boolean" /* Dynamic severity, overrides on. */ " THEN (SELECT count (*)" " FROM results" " WHERE results.report = $1" " AND results.qod >= $3" " AND (" OVERRIDES_SQL ("current_severity (results.severity," " results.nvt)") " BETWEEN level_min_severity" " ($4, severity_class ())" " AND level_max_severity" " ($4, severity_class ())))" " WHEN dynamic_severity ()" /* Dynamic severity, overrides off. */ " THEN (SELECT count (*)" " FROM results" " WHERE results.report = $1" " AND results.qod >= $3" " AND ((CASE" " WHEN results.type IS NULL" " THEN 0::real" " ELSE current_severity (results.severity," " results.nvt)" " END)" " BETWEEN level_min_severity ($4, severity_class ())" " AND level_max_severity" " ($4, severity_class ())))" " WHEN $2::boolean" /* Overrides on. */ " THEN (SELECT count (*)" " FROM results" " WHERE results.report = $1" " AND results.qod >= $3" " AND (" OVERRIDES_SQL ("results.severity") " BETWEEN level_min_severity ($4, severity_class ())" " AND level_max_severity" " ($4, severity_class ())))" /* Overrides off. */ " ELSE (SELECT count (*)" " FROM results" " WHERE results.report = $1" " AND results.qod >= $3" " AND ((CASE" " WHEN results.type IS NULL" " THEN 0::real" " ELSE results.severity" " END)" " BETWEEN level_min_severity ($4, severity_class ())" " AND level_max_severity" " ($4, severity_class ())))" " END;" "$$ LANGUAGE SQL;"); sql ("CREATE OR REPLACE FUNCTION task_last_report (integer)" " RETURNS integer AS $$" /* Get the report from the most recently completed invocation of task. */ " SELECT id FROM reports WHERE task = $1 AND scan_run_status = %u" " ORDER BY date DESC LIMIT 1;" "$$ LANGUAGE SQL;", TASK_STATUS_DONE); sql ("CREATE OR REPLACE FUNCTION task_second_last_report (integer)" " RETURNS integer AS $$" /* Get report from second most recently completed invocation of task. */ " SELECT id FROM reports WHERE task = $1 AND scan_run_status = %u" " ORDER BY date DESC LIMIT 1 OFFSET 1;" "$$ LANGUAGE SQL;", TASK_STATUS_DONE); sql ("CREATE OR REPLACE FUNCTION task_severity (integer, integer," " integer)" " RETURNS double precision AS $$" /* Calculate the severity of a task. */ " SELECT CASE" " WHEN (SELECT target IS NULL FROM tasks WHERE id = $1)" " THEN CAST (0.0 AS double precision)" " WHEN dynamic_severity () AND CAST ($2 AS boolean)" /* Dynamic severity, overrides on. */ " THEN (SELECT" " round" " (max (" OVERRIDES_SQL ("current_severity" " (results.severity," " results.nvt)") ")::numeric," " 2)" " FROM results" " WHERE results.report = (SELECT id FROM reports" " WHERE reports.task = $1" " AND reports.scan_run_status = %u" " ORDER BY reports.date DESC" " LIMIT 1 OFFSET 0)" " AND results.qod >= $3)" " WHEN dynamic_severity ()" /* Dynamic severity, overrides off. */ " THEN (SELECT round (max (current_severity" " (results.severity," " results.nvt))::numeric," " 2)" " FROM results" " WHERE results.report = (SELECT id FROM reports" " WHERE reports.task = $1" " AND reports.scan_run_status = %u" " ORDER BY reports.date DESC" " LIMIT 1 OFFSET 0)" " AND results.qod >= $3)" " WHEN CAST ($2 AS boolean)" /* Overrides on. */ " THEN (SELECT round" " (max (" OVERRIDES_SQL ("results.severity") ")" " ::numeric," " 2)" " FROM results" " WHERE results.report = (SELECT id FROM reports" " WHERE reports.task = $1" " AND reports.scan_run_status = %u" " ORDER BY reports.date DESC" " LIMIT 1 OFFSET 0)" " AND results.qod >= $3)" /* Overrides off. */ // FIX need rounding in sqlite? " ELSE (SELECT round (max (results.severity)::numeric, 2)" " FROM results" " WHERE results.report = (SELECT id FROM reports" " WHERE reports.task = $1" " AND reports.scan_run_status = %u" " ORDER BY reports.date DESC" " LIMIT 1 OFFSET 0)" " AND results.qod >= $3)" " END;" "$$ LANGUAGE SQL;", TASK_STATUS_DONE, TASK_STATUS_DONE, TASK_STATUS_DONE, TASK_STATUS_DONE); } sql ("CREATE OR REPLACE FUNCTION run_status_name (integer)" " RETURNS text AS $$" /* Get the name of a task run status. */ " SELECT CASE" " WHEN $1 = %i" " OR $1 = %i" " THEN 'Delete Requested'" " WHEN $1 = %i OR $1 = %i" " THEN 'Ultimate Delete Requested'" " WHEN $1 = %i" " THEN 'Done'" " WHEN $1 = %i" " THEN 'New'" " WHEN $1 = %i" " THEN 'Requested'" " WHEN $1 = %i" " THEN 'Running'" " WHEN $1 = %i OR $1 = %i OR $1 = %i" " THEN 'Stop Requested'" " WHEN $1 = %i" " THEN 'Stopped'" " ELSE 'Internal Error'" " END;" "$$ LANGUAGE SQL;", TASK_STATUS_DELETE_REQUESTED, TASK_STATUS_DELETE_WAITING, TASK_STATUS_DELETE_ULTIMATE_REQUESTED, TASK_STATUS_DELETE_ULTIMATE_WAITING, TASK_STATUS_DONE, TASK_STATUS_NEW, TASK_STATUS_REQUESTED, TASK_STATUS_RUNNING, TASK_STATUS_STOP_REQUESTED_GIVEUP, TASK_STATUS_STOP_REQUESTED, TASK_STATUS_STOP_WAITING, TASK_STATUS_STOPPED); if (sql_int ("SELECT EXISTS (SELECT * FROM information_schema.tables" " WHERE table_catalog = '%s'" " AND table_schema = 'public'" " AND table_name = 'permissions')" " ::integer;", sql_database ())) sql ("CREATE OR REPLACE FUNCTION user_can_everything (text)" " RETURNS boolean AS $$" /* Test whether a user may perform any operation. * * This must match user_can_everything in manage_acl.c. */ " SELECT count(*) > 0 FROM permissions" " WHERE resource = 0" " AND ((subject_type = 'user'" " AND subject" " = (SELECT id FROM users" " WHERE users.uuid = $1))" " OR (subject_type = 'group'" " AND subject" " IN (SELECT DISTINCT \"group\"" " FROM group_users" " WHERE \"user\" = (SELECT id" " FROM users" " WHERE users.uuid" " = $1)))" " OR (subject_type = 'role'" " AND subject" " IN (SELECT DISTINCT role" " FROM role_users" " WHERE \"user\" = (SELECT id" " FROM users" " WHERE users.uuid" " = $1))))" " AND name = 'Everything';" "$$ LANGUAGE SQL;"); sql ("CREATE OR REPLACE FUNCTION group_concat_pair (text, text, text)" " RETURNS text AS $$" " SELECT CASE" " WHEN $1 IS NULL OR $1 = ''" " THEN $2" " ELSE $1 || $3 || $2" " END;" "$$ LANGUAGE SQL;"); sql ("DROP AGGREGATE IF EXISTS group_concat (text, text);"); sql ("CREATE AGGREGATE group_concat (text, text)" " (sfunc = group_concat_pair," " stype = text," " initcond = '');"); if (sql_int ("SELECT EXISTS (SELECT * FROM information_schema.tables" " WHERE table_catalog = '%s'" " AND table_schema = 'public'" " AND table_name = 'meta')" " ::integer;", sql_database ())) { sql ("CREATE OR REPLACE FUNCTION severity_in_level (double precision," " text)" " RETURNS boolean AS $$" " SELECT CASE (SELECT value FROM settings" " WHERE name = 'Severity Class'" " AND ((owner IS NULL)" " OR (owner = (SELECT id FROM users" " WHERE users.uuid" " = (SELECT uuid" " FROM current_credentials))))" // FIX coalesce else null first " ORDER BY owner DESC LIMIT 1)" " WHEN 'classic'" " THEN (CASE $2" " WHEN 'high'" " THEN $1 > 5" " AND $1 <= 10" " WHEN 'medium'" " THEN $1 > 2" " AND $1 <= 5" " WHEN 'low'" " THEN $1 > 0" " AND $1 <= 2" " WHEN 'none'" " THEN $1 = 0" " WHEN 'log'" " THEN $1 = 0" " ELSE 0::boolean" " END)" " WHEN 'pci-dss'" " THEN (CASE $2" " WHEN 'high'" " THEN $1 >= 4.0" " WHEN 'none'" " THEN $1 >= 0.0 AND $1 < 4.0" " WHEN 'log'" " THEN $1 >= 0.0 AND $1 < 4.0" " ELSE 0::boolean" " END)" " ELSE " /* NIST/BSI */ " (CASE $2" " WHEN 'high'" " THEN $1 >= 7" " AND $1 <= 10" " WHEN 'medium'" " THEN $1 >= 4" " AND $1 < 7" " WHEN 'low'" " THEN $1 > 0" " AND $1 < 4" " WHEN 'none'" " THEN $1 = 0" " WHEN 'log'" " THEN $1 = 0" " ELSE 0::boolean" " END)" " END;" "$$ LANGUAGE SQL;"); sql ("CREATE OR REPLACE FUNCTION severity_to_level (text, integer)" " RETURNS text AS $$" " SELECT CASE" " WHEN $1::double precision = " G_STRINGIFY (SEVERITY_LOG) " THEN 'Log'" " WHEN $1::double precision = " G_STRINGIFY (SEVERITY_FP) " THEN 'False Positive'" " WHEN $1::double precision = " G_STRINGIFY (SEVERITY_DEBUG) " THEN 'Debug'" " WHEN $1::double precision = " G_STRINGIFY (SEVERITY_ERROR) " THEN 'Error'" " WHEN $1::double precision > 0.0" " AND $1::double precision <= 10.0" " THEN (SELECT CASE" " WHEN $2 = 1" " THEN 'Alarm'" " WHEN severity_in_level ($1::double precision," " 'high')" " THEN 'High'" " WHEN severity_in_level ($1::double precision," " 'medium')" " THEN 'Medium'" " WHEN severity_in_level ($1::double precision," " 'low')" " THEN 'Low'" " ELSE 'Log'" " END)" " ELSE 'Internal Error'" " END;" "$$ LANGUAGE SQL;"); sql ("CREATE OR REPLACE FUNCTION severity_to_level (double precision," " integer)" " RETURNS text AS $$" " SELECT CASE" " WHEN $1 = " G_STRINGIFY (SEVERITY_LOG) " THEN 'Log'" " WHEN $1 = " G_STRINGIFY (SEVERITY_FP) " THEN 'False Positive'" " WHEN $1 = " G_STRINGIFY (SEVERITY_DEBUG) " THEN 'Debug'" " WHEN $1 = " G_STRINGIFY (SEVERITY_ERROR) " THEN 'Error'" " WHEN $1 > 0.0 AND $1 <= 10.0" " THEN (SELECT CASE" " WHEN $2 = 1" " THEN 'Alarm'" " WHEN severity_in_level ($1, 'high')" " THEN 'High'" " WHEN severity_in_level ($1, 'medium')" " THEN 'Medium'" " WHEN severity_in_level ($1, 'low')" " THEN 'Low'" " ELSE 'Log'" " END)" " ELSE 'Internal Error'" " END;" "$$ LANGUAGE SQL;"); sql ("CREATE OR REPLACE FUNCTION task_threat_level (integer, integer," " integer)" " RETURNS text AS $$" /* Calculate the threat level of a task. */ " SELECT severity_to_level (task_severity ($1, $2, $3), 0);" "$$ LANGUAGE SQL;"); } sql ("CREATE OR REPLACE FUNCTION lower (integer)" " RETURNS integer AS $$" " SELECT $1;" "$$ LANGUAGE SQL;"); return 0; } /* Creation. */ /** * @brief Create all tables. */ void create_tables () { gchar *owned_clause; sql ("CREATE TABLE IF NOT EXISTS current_credentials" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL);"); sql ("CREATE TABLE IF NOT EXISTS meta" " (id SERIAL PRIMARY KEY," " name text UNIQUE NOT NULL," " value text);"); sql ("CREATE TABLE IF NOT EXISTS users" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " password text," " timezone text," " hosts text," " hosts_allow integer," " ifaces text," " ifaces_allow integer," " method text," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS agents" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " installer bytea," " installer_64 text," " installer_filename text," " installer_signature_64 text," " installer_trust integer," " installer_trust_time integer," " howto_install text," " howto_use text," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS agents_trash" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " installer bytea," " installer_64 text," " installer_filename text," " installer_signature_64 text," " installer_trust integer," " installer_trust_time integer," " howto_install text," " howto_use text," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS alerts" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " event integer," " condition integer," " method integer," " filter integer," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS alerts_trash" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " event integer," " condition integer," " method integer," " filter integer," " filter_location integer," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS alert_condition_data" " (id SERIAL PRIMARY KEY," " alert integer REFERENCES alerts (id) ON DELETE RESTRICT," " name text," " data text);"); sql ("CREATE TABLE IF NOT EXISTS alert_condition_data_trash" " (id SERIAL PRIMARY KEY," " alert integer REFERENCES alerts_trash (id) ON DELETE RESTRICT," " name text," " data text);"); sql ("CREATE TABLE IF NOT EXISTS alert_event_data" " (id SERIAL PRIMARY KEY," " alert integer REFERENCES alerts (id) ON DELETE RESTRICT," " name text," " data text);"); sql ("CREATE TABLE IF NOT EXISTS alert_event_data_trash" " (id SERIAL PRIMARY KEY," " alert integer REFERENCES alerts_trash (id) ON DELETE RESTRICT," " name text," " data text);"); sql ("CREATE TABLE IF NOT EXISTS alert_method_data" " (id SERIAL PRIMARY KEY," " alert integer REFERENCES alerts (id) ON DELETE RESTRICT," " name text," " data text);"); sql ("CREATE TABLE IF NOT EXISTS alert_method_data_trash" " (id SERIAL PRIMARY KEY," " alert integer REFERENCES alerts_trash (id) ON DELETE RESTRICT," " name text," " data text);"); sql ("CREATE TABLE IF NOT EXISTS filters" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " type text," " term text," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS filters_trash" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " type text," " term text," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS groups" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS groups_trash" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS group_users" " (id SERIAL PRIMARY KEY," " \"group\" integer REFERENCES groups (id) ON DELETE RESTRICT," " \"user\" integer REFERENCES users (id) ON DELETE RESTRICT);"); sql ("CREATE TABLE IF NOT EXISTS group_users_trash" " (id SERIAL PRIMARY KEY," " \"group\" integer REFERENCES groups_trash (id) ON DELETE RESTRICT," " \"user\" integer REFERENCES users (id) ON DELETE RESTRICT);"); sql ("CREATE TABLE IF NOT EXISTS roles" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS roles_trash" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS role_users" " (id SERIAL PRIMARY KEY," " role integer REFERENCES roles (id) ON DELETE RESTRICT," " \"user\" integer REFERENCES users (id) ON DELETE RESTRICT);"); sql ("CREATE TABLE IF NOT EXISTS role_users_trash" " (id SERIAL PRIMARY KEY," " role integer REFERENCES roles_trash (id) ON DELETE RESTRICT," " \"user\" integer REFERENCES users (id) ON DELETE RESTRICT);"); sql ("CREATE TABLE IF NOT EXISTS nvt_selectors" " (id SERIAL PRIMARY KEY," " name text," " exclude integer," " type integer," " family_or_nvt text," " family text);"); sql ("CREATE TABLE IF NOT EXISTS port_lists" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS port_lists_trash" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS port_ranges" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " port_list integer REFERENCES port_lists (id) ON DELETE RESTRICT," " type integer," " start integer," " \"end\" integer," " comment text," " exclude integer);"); sql ("CREATE TABLE IF NOT EXISTS port_ranges_trash" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " port_list integer REFERENCES port_lists_trash (id) ON DELETE RESTRICT," " type integer," " start integer," " \"end\" integer," " comment text," " exclude integer);"); sql ("CREATE TABLE IF NOT EXISTS port_names" " (id SERIAL PRIMARY KEY," " number integer," " protocol text," " name text," " UNIQUE (number, protocol));"); sql ("CREATE TABLE IF NOT EXISTS lsc_credentials" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " login text," " password text," " comment text," " private_key text," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS lsc_credentials_trash" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " login text," " password text," " comment text," " private_key text," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS targets" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " hosts text," " exclude_hosts text," " reverse_lookup_only integer," " reverse_lookup_unify integer," " comment text," " lsc_credential integer," // REFERENCES lsc_credentials (id) ON DELETE RESTRICT," " ssh_port text," " smb_lsc_credential integer," // REFERENCES lsc_credentials (id) ON DELETE RESTRICT," " port_range integer REFERENCES port_lists (id) ON DELETE RESTRICT," " alive_test integer," " creation_time integer," " modification_time integer," " esxi_lsc_credential integer);"); // REFERENCES lsc_credentials (id) // ON DELETE RESTRICT sql ("CREATE TABLE IF NOT EXISTS targets_trash" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " hosts text," " exclude_hosts text," " reverse_lookup_only integer," " reverse_lookup_unify integer," " comment text," " lsc_credential integer," // REFERENCES lsc_credentials (id) ON DELETE RESTRICT," " ssh_port text," " smb_lsc_credential integer," // REFERENCES lsc_credentials (id) ON DELETE RESTRICT," " port_range integer," // REFERENCES port_lists (id) ON DELETE RESTRICT," " ssh_location integer," " smb_location integer," " port_list_location integer," " alive_test integer," " creation_time integer," " modification_time integer," " esxi_lsc_credential integer," // REFERENCES lsc_credentials (id) // ON DELETE RESTRICT," " esxi_location integer);"); sql ("CREATE TABLE IF NOT EXISTS configs" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " nvt_selector text," /* REFERENCES nvt_selectors (name) */ " comment text," " family_count integer," " nvt_count integer," " families_growing integer," " nvts_growing integer," " type integer," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS configs_trash" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " nvt_selector text," /* REFERENCES nvt_selectors (name) */ " comment text," " family_count integer," " nvt_count integer," " families_growing integer," " nvts_growing integer," " type integer," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS config_preferences" " (id SERIAL PRIMARY KEY," " config integer REFERENCES configs (id) ON DELETE RESTRICT," " type text," " name text," " value text," " default_value text);"); sql ("CREATE TABLE IF NOT EXISTS config_preferences_trash" " (id SERIAL PRIMARY KEY," " config integer REFERENCES configs_trash (id) ON DELETE RESTRICT," " type text," " name text," " value text);"); sql ("CREATE TABLE IF NOT EXISTS schedules" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " first_time integer," " period integer," " period_months integer," " duration integer," " timezone text," " initial_offset integer," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS schedules_trash" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " first_time integer," " period integer," " period_months integer," " duration integer," " timezone text," " initial_offset integer," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS slaves" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " host text," " port text," " login text," " password text," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS slaves_trash" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " host text," " port text," " login text," " password text," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS scanners" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text," " comment text," " host text," " port integer," " type integer," " ca_pub text," " key_pub text," " key_priv text," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS scanners_trash" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text," " comment text," " host text," " port integer," " type integer," " ca_pub text," " key_pub text," " key_priv text," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS tasks" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text," " hidden integer," " comment text," " run_status integer," " start_time integer," " end_time integer," " config integer," // REFERENCES configs (id) ON DELETE RESTRICT," " target integer," // REFERENCES targets (id) ON DELETE RESTRICT," " schedule integer," // REFERENCES schedules (id) ON DELETE RESTRICT," " schedule_next_time integer," " schedule_periods integer," " slave integer," // REFERENCES slaves (id) ON DELETE RESTRICT," " scanner integer," // REFERENCES scanner (id) ON DELETE RESTRICT," " config_location integer," " target_location integer," " schedule_location integer," " slave_location integer," " upload_result_count integer," " hosts_ordering text," " alterable integer," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS task_files" " (id SERIAL PRIMARY KEY," " task integer REFERENCES tasks (id) ON DELETE RESTRICT," " name text," " content text);"); sql ("CREATE TABLE IF NOT EXISTS task_alerts" " (id SERIAL PRIMARY KEY," " task integer REFERENCES tasks (id) ON DELETE RESTRICT," " alert integer," // REFERENCES alerts (id) ON DELETE RESTRICT," " alert_location integer);"); sql ("CREATE TABLE IF NOT EXISTS task_preferences" " (id SERIAL PRIMARY KEY," " task integer REFERENCES tasks (id) ON DELETE RESTRICT," " name text," " value text);"); sql ("CREATE TABLE IF NOT EXISTS reports" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " hidden integer," " task integer REFERENCES tasks (id) ON DELETE RESTRICT," " date integer," " start_time integer," " end_time integer," " nbefile text," " comment text," " scan_run_status integer," " slave_progress integer," " slave_task_uuid text," " slave_uuid text," " slave_name text," " slave_host text," " slave_port integer," " source_iface text);"); sql ("CREATE TABLE IF NOT EXISTS report_counts" " (id SERIAL PRIMARY KEY," " report integer REFERENCES reports (id) ON DELETE RESTRICT," " \"user\" integer REFERENCES users (id) ON DELETE RESTRICT," " severity decimal," " count integer," " override integer," " end_time integer);"); sql ("CREATE TABLE IF NOT EXISTS results" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " task integer REFERENCES tasks (id) ON DELETE RESTRICT," " host text," " port text," " nvt text," " type text," " description text," " report integer REFERENCES reports (id) ON DELETE RESTRICT," " nvt_version text," " severity real," " qod integer," " qod_type text," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " date integer);"); sql ("CREATE TABLE IF NOT EXISTS report_formats" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " extension text," " content_type text," " summary text," " description text," " signature text," " trust integer," " trust_time integer," " flags integer," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS report_formats_trash" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " extension text," " content_type text," " summary text," " description text," " signature text," " trust integer," " trust_time integer," " flags integer," " original_uuid text," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS report_format_params" " (id SERIAL PRIMARY KEY," " report_format integer REFERENCES report_formats (id) ON DELETE RESTRICT," " name text," " type integer," " value text," " type_min bigint," " type_max bigint," " type_regex text," " fallback text);"); sql ("CREATE TABLE IF NOT EXISTS report_format_params_trash" " (id SERIAL PRIMARY KEY," " report_format integer REFERENCES report_formats_trash (id) ON DELETE RESTRICT," " name text," " type integer," " value text," " type_min bigint," " type_max bigint," " type_regex text," " fallback text);"); sql ("CREATE TABLE IF NOT EXISTS report_format_param_options" " (id SERIAL PRIMARY KEY," " report_format_param integer REFERENCES report_format_params (id) ON DELETE RESTRICT," " value text);"); sql ("CREATE TABLE IF NOT EXISTS report_format_param_options_trash" " (id SERIAL PRIMARY KEY," " report_format_param integer REFERENCES report_format_params_trash (id) ON DELETE RESTRICT," " value text);"); sql ("CREATE TABLE IF NOT EXISTS report_hosts" " (id SERIAL PRIMARY KEY," " report integer REFERENCES reports (id) ON DELETE RESTRICT," " host text," " start_time integer," " end_time integer," " current_port integer," " max_port integer);"); sql ("CREATE TABLE IF NOT EXISTS report_host_details" " (id SERIAL PRIMARY KEY," " report_host integer REFERENCES report_hosts (id) ON DELETE RESTRICT," " source_type text," " source_name text," " source_description text," " name text," " value text);"); sql ("CREATE TABLE IF NOT EXISTS nvt_preferences" " (id SERIAL PRIMARY KEY," " name text UNIQUE NOT NULL," " value text);"); sql ("CREATE TABLE IF NOT EXISTS nvts" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " oid text UNIQUE NOT NULL," " version text," " name text," " comment text," " summary text," " copyright text," " cve text," " bid text," " xref text," " tag text," " category text," " family text," " cvss_base text," " creation_time integer," " modification_time integer," " solution_type text," " qod integer," " qod_type text);"); sql ("CREATE TABLE IF NOT EXISTS nvt_cves" " (id SERIAL PRIMARY KEY," " nvt integer REFERENCES nvts (id) ON DELETE RESTRICT," " oid text," " cve_name text);"); sql ("CREATE TABLE IF NOT EXISTS notes" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " nvt text NOT NULL," " creation_time integer," " modification_time integer," " text text," " hosts text," " port text," " severity double precision," " task integer," // REFERENCES tasks (id) ON DELETE RESTRICT," " result integer," // REFERENCES results (id) ON DELETE RESTRICT," " end_time integer);"); sql ("CREATE TABLE IF NOT EXISTS notes_trash" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " nvt text NOT NULL," " creation_time integer," " modification_time integer," " text text," " hosts text," " port text," " severity double precision," " task integer," // REFERENCES tasks (id) ON DELETE RESTRICT," " result integer," // REFERENCES results (id) ON DELETE RESTRICT," " end_time integer);"); sql ("CREATE TABLE IF NOT EXISTS overrides" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " nvt text NOT NULL," " creation_time integer," " modification_time integer," " text text," " hosts text," " new_severity double precision," " port text," " severity double precision," " task integer," // REFERENCES tasks (id) ON DELETE RESTRICT," " result integer," // REFERENCES results (id) ON DELETE RESTRICT," " end_time integer);"); sql ("CREATE TABLE IF NOT EXISTS overrides_trash" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " nvt text NOT NULL," " creation_time integer," " modification_time integer," " text text," " hosts text," " new_severity double precision," " port text," " severity double precision," " task integer," // REFERENCES tasks (id) ON DELETE RESTRICT," " result integer," // REFERENCES results (id) ON DELETE RESTRICT," " end_time integer);"); sql ("CREATE TABLE IF NOT EXISTS permissions" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " resource_type text," " resource integer," " resource_uuid text," " resource_location integer," " subject_type text," " subject integer," " subject_location integer," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS permissions_trash" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " resource_type text," " resource integer," " resource_uuid text," " resource_location integer," " subject_type text," " subject integer," " subject_location integer," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS settings" " (id SERIAL PRIMARY KEY," " uuid text NOT NULL," /* Note: not UNIQUE. */ " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " value text);"); sql ("CREATE TABLE IF NOT EXISTS tags" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " resource_type text," " resource integer," " resource_uuid text," " resource_location integer," " active integer," " value text," " creation_time integer," " modification_time integer);"); sql ("CREATE TABLE IF NOT EXISTS tags_trash" " (id SERIAL PRIMARY KEY," " uuid text UNIQUE NOT NULL," " owner integer REFERENCES users (id) ON DELETE RESTRICT," " name text NOT NULL," " comment text," " resource_type text," " resource integer," " resource_uuid text," " resource_location integer," " active integer," " value text," " creation_time integer," " modification_time integer);"); /* Create result views. */ owned_clause = where_owned_for_get ("override", "users.id"); sql ("CREATE OR REPLACE VIEW result_overrides AS" " SELECT users.id AS user," " results.id as result," " overrides.id AS override," " overrides.severity AS ov_old_severity," " overrides.new_severity AS ov_new_severity" " FROM users, results, overrides" " WHERE overrides.nvt = results.nvt" " AND (overrides.result = 0 OR overrides.result = results.id)" " AND %s" " AND ((overrides.end_time = 0)" " OR (overrides.end_time >= m_now ()))" " AND (overrides.task =" " (SELECT reports.task FROM reports" " WHERE results.report = reports.id)" " OR overrides.task = 0)" " AND (overrides.result = results.id" " OR overrides.result = 0)" " AND (overrides.hosts is NULL" " OR overrides.hosts = ''" " OR hosts_contains (overrides.hosts, results.host))" " AND (overrides.port is NULL" " OR overrides.port = ''" " OR overrides.port = results.port)" " ORDER BY overrides.result DESC, overrides.task DESC," " overrides.port DESC, overrides.severity ASC," " overrides.creation_time DESC", owned_clause); g_free (owned_clause); sql ("CREATE OR REPLACE VIEW result_new_severities AS" " SELECT results.id as result, users.id as user, dynamic, override," " CASE WHEN dynamic != 0 THEN" " CASE WHEN override != 0 THEN" " coalesce ((SELECT ov_new_severity FROM result_overrides" " WHERE result = results.id" " AND result_overrides.user = users.id" " AND severity_matches_ov" " (current_severity (results.severity," " results.nvt)," " ov_old_severity)" " LIMIT 1)," " current_severity (results.severity, results.nvt))" " ELSE" " current_severity (results.severity, results.nvt)" " END" " ELSE" " CASE WHEN override != 0 THEN" " coalesce ((SELECT ov_new_severity FROM result_overrides" " WHERE result = results.id" " AND result_overrides.user = users.id" " AND severity_matches_ov" " (results.severity," " ov_old_severity)" " LIMIT 1)," " results.severity)" " ELSE" " results.severity" " END" " END AS new_severity" " FROM results, users," " (SELECT 0 AS override UNION SELECT 1 AS override) AS override_opts," " (SELECT 0 AS dynamic UNION SELECT 1 AS dynamic) AS dynamic_opts;"); sql ("CREATE OR REPLACE VIEW results_autofp AS" " SELECT results.id as result, autofp_selection," " (CASE autofp_selection" " WHEN 1 THEN" " (CASE WHEN" " (((SELECT family FROM nvts WHERE oid = results.nvt)" " IN (" LSC_FAMILY_LIST "))" " OR results.nvt = '0'" /* Open ports previously had 0 NVT. */ " OR EXISTS" " (SELECT id FROM nvts" " WHERE oid = results.nvt" " AND" " (cve = 'NOCVE'" " OR cve NOT IN (SELECT cve FROM nvts" " WHERE oid IN (SELECT source_name" " FROM report_host_details" " WHERE report_host" " = (SELECT id" " FROM report_hosts" " WHERE report = %llu" " AND host = results.host)" " AND name = 'EXIT_CODE'" " AND value = 'EXIT_NOTVULN')" " AND family IN (" LSC_FAMILY_LIST ")))))" " THEN NULL" " WHEN severity = " G_STRINGIFY (SEVERITY_ERROR) " THEN NULL" " ELSE 1 END)" " WHEN 2 THEN" " (CASE WHEN" " (((SELECT family FROM nvts WHERE oid = results.nvt)" " IN (" LSC_FAMILY_LIST "))" " OR results.nvt = '0'" /* Open ports previously had 0 NVT.*/ " OR EXISTS" " (SELECT id FROM nvts AS outer_nvts" " WHERE oid = results.nvt" " AND" " (cve = 'NOCVE'" " OR NOT EXISTS" " (SELECT cve FROM nvts" " WHERE oid IN (SELECT source_name" " FROM report_host_details" " WHERE report_host" " = (SELECT id" " FROM report_hosts" " WHERE report = results.report" " AND host = results.host)" " AND name = 'EXIT_CODE'" " AND value = 'EXIT_NOTVULN')" " AND family IN (" LSC_FAMILY_LIST ")" /* The CVE of the result NVT is outer_nvts.cve. The CVE of the * NVT that has registered the "closed" host detail is nvts.cve. * Either can be a list of CVEs. */ " AND common_cve (nvts.cve, outer_nvts.cve)))))" " THEN NULL" " WHEN severity = " G_STRINGIFY (SEVERITY_ERROR) " THEN NULL" " ELSE 1 END)" " ELSE 0 END) AS autofp" " FROM results," " (SELECT 0 AS autofp_selection" " UNION SELECT 1 AS autofp_selection" " UNION SELECT 2 AS autofp_selection) AS autofp_opts;"); /* Create indexes. */ sql ("SELECT create_index ('nvt_cves_by_oid', 'nvt_cves', 'oid');"); sql ("SELECT create_index ('nvt_selectors_by_family_or_nvt'," " 'nvt_selectors'," " 'type, family_or_nvt');"); sql ("SELECT create_index ('nvt_selectors_by_name'," " 'nvt_selectors'," " 'name');"); sql ("SELECT create_index ('nvts_by_creation_time'," " 'nvts'," " 'creation_time');"); sql ("SELECT create_index ('nvts_by_family', 'nvts', 'family');"); sql ("SELECT create_index ('nvts_by_name', 'nvts', 'name');"); sql ("SELECT create_index ('nvts_by_modification_time'," " 'nvts', 'modification_time');"); sql ("SELECT create_index ('nvts_by_cvss_base'," " 'nvts', 'cvss_base');"); sql ("SELECT create_index ('nvts_by_solution_type'," " 'nvts', 'solution_type');"); sql ("SELECT create_index ('report_counts_by_report_and_override'," " 'report_counts', 'report, override');"); #if 0 /* TODO The value column can be bigger than 8191, the maximum size that * Postgres can handle. For example, this can happen for "ports". * Mostly value is short, like a CPE for the "App" detail, which is * what the index is for. */ sql ("SELECT create_index" " ('report_host_details_by_report_host_and_name_and_value'," " 'report_host_details'," " 'report_host, name, value');"); #else sql ("SELECT create_index" " ('report_host_details_by_report_host_and_name'," " 'report_host_details'," " 'report_host, name');"); #endif sql ("SELECT create_index" " ('report_hosts_by_report_and_host'," " 'report_hosts'," " 'report, host');"); sql ("SELECT create_index ('results_by_report', 'results', 'report');"); } /* SecInfo. */ /** * @brief Attach external databases. */ void manage_attach_databases () { if (manage_scap_loaded ()) sql ("SELECT set_config ('search_path'," " current_setting ('search_path') || ',scap'," " false);"); if (manage_cert_loaded ()) sql ("SELECT set_config ('search_path'," " current_setting ('search_path') || ',cert'," " false);"); } /** * @brief Check whether CERT is available. * * @return 1 if CERT database is loaded, else 0. */ int manage_cert_loaded () { return !!sql_int ("SELECT EXISTS (SELECT * FROM information_schema.tables" " WHERE table_catalog = '%s'" " AND table_schema = 'cert'" " AND table_name = 'dfn_cert_advs')" " ::integer;", sql_database ()); } /** * @brief Check whether SCAP is available. * * @return 1 if SCAP database is loaded, else 0. */ int manage_scap_loaded () { return !!sql_int ("SELECT EXISTS (SELECT * FROM information_schema.tables" " WHERE table_catalog = '%s'" " AND table_schema = 'scap'" " AND table_name = 'cves')" " ::integer;", sql_database ()); } /* Backup. */ /** * @brief Backup the database to a file. * * @param[in] database Name of manage database. * * @return 0 success, -1 error. */ int manage_backup_db (const gchar *database) { g_warning ("%s: database backup not supported for Postgres", __FUNCTION__); return -1; } /* Migrator helper. */ /** * @brief Dummy for SQLite3 compatibility. * * @param[in] stmt Statement. * @param[in] position Column position. * * @return 0 success, -1 error. */ int manage_create_migrate_51_to_52_convert () { return 0; } openvas-manager-6.0.9/src/wizards/quick_auth_scan.xml000644 001751 001751 00000017576 12557600617 024047 0ustar00michaelmichael000000 000000 LSC Credential for immediate scan of LSC Credential for immediate scan of localhost 1 1Target for immediate scan of 1Target for immediate scan of localhost 22 localhost Immediate scan of Immediate scan of localhost openvas-manager-6.0.9/src/wizards/get_tasks_deep.xml000644 001751 001751 00000012530 12557600617 023650 0ustar00michaelmichael000000 000000 openvas-manager-6.0.9/src/wizards/quick_first_scan.xml000644 001751 001751 00000015736 12557600617 024231 0ustar00michaelmichael000000 000000 1 config_id ^[a-z0-9\\-]+$ 1 alert_id ^[a-z0-9\\-]+$ 1 scanner_id ^[a-z0-9\\-]+$ 1 slave_id ^[a-z0-9\\-]+$ 1 smb_credential ^[a-z0-9\\-]+$ 1 ssh_credential ^[a-z0-9\\-]+$ 1 ssh_port ^0*(6553[0-5]|655[0-2]\d|65[0-4]\d\d|6[0-4]\d\d\d|[1-5]\d\d\d\d|\d{1,4})$ 1 esxi_credential ^[a-z0-9\\-]+$ 0 hosts ^[-[:alnum:],: \\./]{1,2000}$ 1 port_list_id ^[a-z0-9\\-]+$ 1Target for immediate scan of IP 22 Immediate scan of IP init 1 openvas-manager-6.0.9/src/wizards/quick_task.xml000644 001751 001751 00000030510 12557600617 023023 0ustar00michaelmichael000000 000000 0 config_id ^[a-z0-9\\-]+$ 1 alert_email ^[^@ ]{1,150}@[^@ ]{1,150}$ 1 scanner_id ^[a-z0-9\\-]+$ 1 slave_id ^[a-z0-9\\-]+$ 1 auto_start ^[0-2]$ 1 start_year ^([\d]{4})$ 1 start_month ^0?[1-9]|1[012]$ 1 start_day ^0?[1-9]|[12][0-9]|3[01]$ 1 start_hour ^[01][0-9]|2[0-3]$ 1 start_minute ^[0-5][0-9]$ 1 start_timezone ^.{0,1000}$ 1 smb_credential ^[a-z0-9\\-]+$ 1 ssh_credential ^[a-z0-9\\-]+$ 1 ssh_port ^0*(6553[0-5]|655[0-2]\d|65[0-4]\d\d|6[0-4]\d\d\d|[1-5]\d\d\d\d|\d{1,4})$ 1 esxi_credential ^[a-z0-9\\-]+$ 0 task_name ^[-_[:alnum:], \\./]{1,80}$ 0 target_hosts ^[-[:alnum:],: \\./]{1,2000}$ 1 port_list_id ^[a-z0-9\\-]+$ Email Alert for Automatically generated by wizard Always Task run status changed Done status Email to_address from_address a3810a62-1f62-11e1-9219-406186ea4fc5 notice_report_format 0 notice Schedule for Automatically generated by wizard 1Target for Automatically generated by wizard 22 Automatically generated by wizard init 1 openvas-manager-6.0.9/src/wizards/reset_task.xml000644 001751 001751 00000005474 12557600617 023044 0ustar00michaelmichael000000 000000 openvas-manager-6.0.9/src/wizards/modify_task.xml000644 001751 001751 00000022100 12557600617 023172 0ustar00michaelmichael000000 000000 0 task_id ^[-_[:alnum:], \\./]{1,80}$ 1 alert_email ^[^@ ]{1,150}@[^@ ]{1,150}$ 1 reschedule ^[0-1]$ 1 start_year ^([\d]{4})$ 1 start_month ^0?[1-9]|1[012]$ 1 start_day ^0?[1-9]|[12][0-9]|3[01]$ 1 start_hour ^[01][0-9]|2[0-3]$ 1 start_minute ^[0-5][0-9]$ 1 start_timezone ^.{0,1000}$ Email Alert for Automatically generated by wizard Always Task run status changed Done status Email to_address from_address a3810a62-1f62-11e1-9219-406186ea4fc5 notice_report_format 0 notice Schedule for Automatically generated by wizard init 1 openvas-manager-6.0.9/src/wizards/delete_task_deep.xml000644 001751 001751 00000006250 12557600617 024152 0ustar00michaelmichael000000 000000 openvas-manager-6.0.9/src/ovas-mngr-comm.h000644 001751 001751 00000003153 12557600614 021473 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: See below. * * Authors: * Jan-Oliver Wagner * * Copyright: * Copyright (C) 2009 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #ifndef OPENVAS_MANGER_OVAS_MNGR_COMM_H #define OPENVAS_MANGER_OVAS_MNGR_COMM_H #include #include #include #include #include /** * @file ovas-mngr-comm.h * @brief Protos for communication between openvas-manager and openvas-server. * * This file contains the protos for \ref ovas-mngr-comm.c */ int send_to_server (const char *); int sendf_to_server (const char*, ...); int sendn_to_server (const void *, size_t); int connect_to_server (int, struct sockaddr_in*, gnutls_session_t*, gboolean); int write_string_to_server (gnutls_session_t*, char* const); int write_to_server_buffer (gnutls_session_t*); unsigned int to_server_buffer_space (); #endif openvas-manager-6.0.9/src/manage_config_system_discovery.c000644 001751 001751 00000021447 12557600614 025102 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Manage library: NVTs for "System Discovery" scan configuration. * * Authors: * Hani Benhabiles * * Copyright: * Copyright (C) 2013 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #include "manage.h" #include "manage_sql.h" #include "sql.h" #include /** * @brief Make System Discovery Scan Config. * * Caller must lock the db. * * @param[in] uuid UUID for new scan config. * @param[in] selector_name Name of NVT selector to use. */ void make_config_system_discovery (char *const uuid, char *const selector_name) { config_t config; sql_begin_exclusive (); /* Create the System Discovery config. */ sql ("INSERT into configs (uuid, name, owner, nvt_selector, comment," " family_count, nvt_count, nvts_growing, families_growing," " type, creation_time, modification_time)" " VALUES ('%s', 'System Discovery', NULL," " '%s', 'Network System Discovery scan configuration.'," " 0, 0, 0, 0, 0, m_now (), m_now ());", uuid, selector_name); config = sql_last_insert_id (); /* Add NVTs to the config. */ sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.100315', 'Port scanners');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.14259', 'Port scanners');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.50282', 'General');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.96207', 'Windows');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.103621', 'Windows');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.103220', 'Product detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.102002', 'Product detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.103633', 'Product detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.103804', 'Product detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.96200', 'Product detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.103675', 'Product detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.103817', 'Product detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.103628', 'Product detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.803719', 'Product detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.103799', 'Product detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.103685', 'Product detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.103809', 'Product detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.103707', 'Product detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.103418', 'Product detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.10267', 'Product detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.103417', 'Product detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.103648', 'Product detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.103779', 'Product detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.103997', 'Service detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.10884', 'Service detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.102011', 'Service detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.101013', 'Service detection');", selector_name); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," " '1.3.6.1.4.1.25623.1.0.103416', 'SNMP');", selector_name); /* Update number of families and nvts. */ sql ("UPDATE configs" " SET family_count = %i, nvt_count = %i," " modification_time = m_now ()" " WHERE id = %llu;", nvt_selector_family_count (selector_name, 0), nvt_selector_nvt_count (selector_name, NULL, 0), config); sql ("COMMIT;"); } openvas-manager-6.0.9/src/logf.h000644 001751 001751 00000005072 12557600617 017565 0ustar00michaelmichael000000 000000 /* OpenVAS Manager log printing facility. * $Id$ * Description: A printf like macro for logging communication. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2009 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ /** * @file logf.h * @brief A printf like macro for logging communication. */ #ifndef OPENVAS_MANAGER_LOG_H #define OPENVAS_MANAGER_LOG_H #include #include #include #include #include /** * @brief Logging flag. * * All data transfered to and from the client is logged to a file. If 0 then * logging is turned off. */ #define LOG 0 /** * @brief Name of log file. */ #define LOG_FILE OPENVAS_LOG_DIR "/openvasmd.comm" #if LOG extern FILE* log_stream; /** * @brief Formatted logging output. * * Print the printf style \a args to log_stream, preceded by the process ID. */ #define logf(args...) \ do { \ if (log_stream) \ { \ fprintf (log_stream, "%7i ", (int) getpid()); \ fprintf (log_stream, args); \ if (fflush (log_stream) == EOF) \ { \ fclose (log_stream); \ log_stream = 0; \ g_warning ("%s: fflush failed, so turned off comm logging: %s\n", \ __FUNCTION__, \ strerror (errno)); \ } \ } \ } while (0) #else /** * @brief Dummy macro, enabled with \ref LOG. */ #define logf(format, args...) #endif #endif openvas-manager-6.0.9/src/tracef.h000644 001751 001751 00000006656 12557600615 020111 0ustar00michaelmichael000000 000000 /* OpenVAS Manager trace printing facility. * $Id$ * Description: A printf like macro for tracing. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2009 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ /** * @file tracef.h * @brief A printf like macro for tracing. */ #ifndef OPENVAS_MANAGER_TRACE_H #define OPENVAS_MANAGER_TRACE_H #undef G_LOG_DOMAIN /** * @brief GLib log domain. * * Libraries can override this by setting it after including tracef.h. */ #define G_LOG_DOMAIN "md main" #include #include /** * @brief Flag with all Glib log levels. */ #define ALL_LOG_LEVELS (G_LOG_LEVEL_MASK \ | G_LOG_FLAG_FATAL \ | G_LOG_FLAG_RECURSION) #ifndef TRACE /** * @brief Trace flag. * * 0 to turn off all tracing messages. */ #define TRACE 1 #endif /** * @brief Trace text flag. * * 0 to turn off echoing of actual data transfered (requires TRACE). */ #define TRACE_TEXT 1 /** * @brief Verbose output flag. */ extern int verbose; /** * @brief Logging parameters, as passed to setup_log_handlers. */ extern GSList *log_config; #if TRACE #include #include #include #include /** * @brief Formatted trace output. * * Print the printf style \a args to stderr, preceded by the process ID. */ #define tracef(args...) \ do { \ if (verbose) \ { \ gchar* msg_ = g_strdup_printf (args); \ g_log (G_LOG_DOMAIN, G_LOG_LEVEL_DEBUG, "%s", msg_); \ g_free (msg_); \ } \ } while (0) /** * @brief Formatted info output. * * Print the printf style \a args to stderr, preceded by the process ID. */ #define infof(args...) \ do { \ if (verbose) \ { \ gchar* msg_ = g_strdup_printf (args); \ g_log (G_LOG_DOMAIN, G_LOG_LEVEL_INFO, "%s", msg_); \ g_free (msg_); \ } \ } while (0) #else /** * @brief Dummy macro, enabled with TRACE. */ #define tracef(format, args...) /** * @brief Dummy macro, enabled with TRACE. */ #define infof(format, args...) #endif #endif openvas-manager-6.0.9/src/manage_sqlite3.c000644 001751 001751 00000266643 12757560563 021551 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Manager Manage library: SQLite specific Manage facilities. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2014 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #define _XOPEN_SOURCE /* Glibc2 needs this for strptime. */ #include "sql.h" #include "manage.h" #include "manage_utils.h" #include "manage_acl.h" #include "tracef.h" #include #include #include /* Variables */ extern sqlite3 * task_db; /* Headers of manage_sql.c functions also used here. */ gchar* clean_hosts (const char *, int *); char * iso_time (time_t *); long current_offset (const char *); int user_can_everything (const char *); int user_owns (const char *, resource_t, int); int resource_name (const char *, const char *, int, gchar **); int resource_exists (const char *, resource_t, int); int parse_time (const gchar *, int *); gchar * tag_value (const gchar *tags, const gchar *tag); /* Session. */ /** * @brief Setup session. * * @param[in] uuid User UUID. */ void manage_session_init (const char *uuid) { sql ("CREATE TEMPORARY TABLE IF NOT EXISTS current_credentials" " (id INTEGER PRIMARY KEY," " uuid text UNIQUE NOT NULL);"); sql ("DELETE FROM current_credentials;"); if (uuid) sql ("INSERT INTO current_credentials (uuid) VALUES ('%s');", uuid); } /* Helpers. */ /** * @brief Check whether database is empty. * * @param[in] 1 if empty, else 0; */ int manage_db_empty () { return sql_int ("SELECT count (*) FROM main.sqlite_master" " WHERE type = 'table'" " AND name = 'meta';") == 0; } /* SQL functions. */ /** * @brief Return 1. * * This is a callback for a scalar SQL function of zero arguments. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_t (sqlite3_context *context, int argc, sqlite3_value** argv) { assert (argc == 0); sqlite3_result_int (context, 1); } /** * @brief Get position of a substring like the strpos function in PostgreSQL. * * This is a callback for a scalar SQL function of two arguments. * The SQLite function instr could be used as replacement, but is only * available in versions >= 3.7.15. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_strpos (sqlite3_context *context, int argc, sqlite3_value** argv) { const unsigned char *str, *substr, *substr_in_str; assert (argc == 2); str = sqlite3_value_text (argv[0]); substr = sqlite3_value_text (argv[1]); if (str == NULL) { sqlite3_result_error (context, "Failed to get string argument", -1); return; } if (substr == NULL) { sqlite3_result_error (context, "Failed to get substring argument", -1); return; } substr_in_str = (const unsigned char *)g_strrstr ((const gchar*)str, (const gchar*)substr); sqlite3_result_int (context, substr_in_str ? substr_in_str - str + 1 : 0); } /** * @brief Convert an IP address into a sortable form. * * This is a callback for a scalar SQL function of one argument. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_inet (sqlite3_context *context, int argc, sqlite3_value** argv) { const char *ip; unsigned int one, two, three, four; assert (argc == 1); ip = (const char *) sqlite3_value_text (argv[0]); if (ip == NULL) sqlite3_result_int (context, 0); else { if (sscanf (ip, "%*3[0-9].%*3[0-9].%*3[0-9].%*3[0-9]") == 4 && sscanf (ip, "%u.%u.%u.%u", &one, &two, &three, &four) == 4) sqlite3_result_int (context, one + (two << 8) + (three << 16) + (four << 24)); else sqlite3_result_text (context, ip, -1, SQLITE_TRANSIENT); } } /** * @brief Convert a message type into an integer for sorting. * * This is a callback for a scalar SQL function of one argument. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_order_message_type (sqlite3_context *context, int argc, sqlite3_value** argv) { const char *type; assert (argc == 1); type = (const char *) sqlite3_value_text (argv[0]); if (type == NULL) sqlite3_result_int (context, 8); else if (strcmp (type, "Security Hole") == 0) sqlite3_result_int (context, 1); else if (strcmp (type, "Security Warning") == 0) sqlite3_result_int (context, 2); else if (strcmp (type, "Security Note") == 0) sqlite3_result_int (context, 3); else if (strcmp (type, "Log Message") == 0) sqlite3_result_int (context, 4); else if (strcmp (type, "Debug Message") == 0) sqlite3_result_int (context, 5); else if (strcmp (type, "Error Message") == 0) sqlite3_result_int (context, 6); else sqlite3_result_int (context, 7); } /** * @brief Convert a port into an integer for sorting. * * This is a callback for a scalar SQL function of one argument. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_order_port (sqlite3_context *context, int argc, sqlite3_value** argv) { const char *port; int port_num; assert (argc == 1); port = (const char *) sqlite3_value_text (argv[0]); port_num = atoi (port); if (port_num > 0) sqlite3_result_int (context, port_num); else if (sscanf (port, "%*s (%i/%*s)", &port_num) == 1) sqlite3_result_int (context, port_num); else sqlite3_result_int (context, 0); } /** * @brief Convert a role for sorting. * * This is a callback for a scalar SQL function of one argument. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_order_role (sqlite3_context *context, int argc, sqlite3_value** argv) { const char *name; assert (argc == 1); name = (const char *) sqlite3_value_text (argv[0]); if (name == NULL) sqlite3_result_text (context, "", -1, SQLITE_TRANSIENT); else if (strcmp (name, "Admin") == 0) sqlite3_result_text (context, " !", -1, SQLITE_TRANSIENT); else sqlite3_result_text (context, name, -1, SQLITE_TRANSIENT); } /** * @brief Convert a threat into an integer for sorting. * * This is a callback for a scalar SQL function of one argument. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_order_threat (sqlite3_context *context, int argc, sqlite3_value** argv) { const char *type; assert (argc == 1); type = (const char *) sqlite3_value_text (argv[0]); if (type == NULL) sqlite3_result_int (context, 9); else if (strcmp (type, "High") == 0) sqlite3_result_int (context, 1); else if (strcmp (type, "Medium") == 0) sqlite3_result_int (context, 2); else if (strcmp (type, "Low") == 0) sqlite3_result_int (context, 3); else if (strcmp (type, "Log") == 0) sqlite3_result_int (context, 4); else if (strcmp (type, "Debug") == 0) sqlite3_result_int (context, 5); else if (strcmp (type, "False Positive") == 0) sqlite3_result_int (context, 6); else if (strcmp (type, "None") == 0) sqlite3_result_int (context, 7); else sqlite3_result_int (context, 8); } /** * @brief Make a UUID. * * This is a callback for a scalar SQL function of zero arguments. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_make_uuid (sqlite3_context *context, int argc, sqlite3_value** argv) { char *uuid; assert (argc == 0); uuid = openvas_uuid_make (); if (uuid == NULL) { sqlite3_result_error (context, "Failed to create UUID", -1); return; } sqlite3_result_text (context, uuid, -1, free); } /** * @brief Check if a host list contains a host * * This is a callback for a scalar SQL function of two arguments. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_hosts_contains (sqlite3_context *context, int argc, sqlite3_value** argv) { gchar **split, **point, *stripped_host; const unsigned char *hosts, *host; assert (argc == 2); hosts = sqlite3_value_text (argv[0]); if (hosts == NULL) { sqlite3_result_error (context, "Failed to get hosts argument", -1); return; } host = sqlite3_value_text (argv[1]); if (host == NULL) { sqlite3_result_error (context, "Failed to get host argument", -1); return; } stripped_host = g_strstrip (g_strdup ((gchar*) host)); split = g_strsplit ((gchar*) hosts, ",", 0); point = split; while (*point) { if (strcmp (g_strstrip (*point), stripped_host) == 0) { g_strfreev (split); g_free (stripped_host); sqlite3_result_int (context, 1); return; } point++; } g_strfreev (split); g_free (stripped_host); sqlite3_result_int (context, 0); } /** * @brief Clean a host list. * * This is a callback for a scalar SQL function of one argument. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_clean_hosts (sqlite3_context *context, int argc, sqlite3_value** argv) { const unsigned char *hosts; gchar *clean; assert (argc == 1); hosts = sqlite3_value_text (argv[0]); if (hosts == NULL) { sqlite3_result_error (context, "Failed to get hosts argument", -1); return; } clean = clean_hosts ((gchar*) hosts, NULL); sqlite3_result_text (context, clean, -1, SQLITE_TRANSIENT); g_free (clean); } /** * @brief Make a name unique. * * This is a callback for a scalar SQL function of four argument. * * It's up to the caller to ensure there is a read-only transaction. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_uniquify (sqlite3_context *context, int argc, sqlite3_value** argv) { const unsigned char *proposed_name, *type, *suffix; gchar *candidate_name, *quoted_candidate_name; unsigned int number; sqlite3_int64 owner; assert (argc == 4); type = sqlite3_value_text (argv[0]); if (type == NULL) { sqlite3_result_error (context, "Failed to get type argument", -1); return; } proposed_name = sqlite3_value_text (argv[1]); if (proposed_name == NULL) { sqlite3_result_error (context, "Failed to get proposed name argument", -1); return; } owner = sqlite3_value_int64 (argv[2]); suffix = sqlite3_value_text (argv[3]); if (suffix == NULL) { sqlite3_result_error (context, "Failed to get suffix argument", -1); return; } number = 0; candidate_name = g_strdup_printf ("%s%s%c%i", proposed_name, suffix, strcmp ((char*) type, "user") ? ' ' : '_', ++number); quoted_candidate_name = sql_quote (candidate_name); while (sql_int ("SELECT COUNT (*) FROM %ss WHERE name = '%s'" " AND ((owner IS NULL) OR (owner = %llu));", type, quoted_candidate_name, owner)) { g_free (candidate_name); g_free (quoted_candidate_name); candidate_name = g_strdup_printf ("%s%s%c%u", proposed_name, suffix, strcmp ((char*) type, "user") ? ' ' : '_', ++number); quoted_candidate_name = sql_quote (candidate_name); } g_free (quoted_candidate_name); sqlite3_result_text (context, candidate_name, -1, SQLITE_TRANSIENT); g_free (candidate_name); } /** * @brief Convert an epoch time into a string in ISO format. * * This is a callback for a scalar SQL function of one argument. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_iso_time (sqlite3_context *context, int argc, sqlite3_value** argv) { time_t epoch_time; assert (argc == 1); epoch_time = sqlite3_value_int (argv[0]); if (epoch_time == 0) sqlite3_result_text (context, "", -1, SQLITE_TRANSIENT); else { const char *iso; iso = iso_time (&epoch_time); if (iso) sqlite3_result_text (context, iso, -1, SQLITE_TRANSIENT); else sqlite3_result_error (context, "Failed to format time", -1); } } /** * @brief Try convert an OTP NVT tag time string into epoch time. * * This is a callback for a scalar SQL function of one argument. * * This is only used by the SQLite backend, in the SQL of some older migrators. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_parse_time (sqlite3_context *context, int argc, sqlite3_value** argv) { const gchar *string; int epoch_time; assert (argc == 1); string = (const gchar *) sqlite3_value_text (argv[0]); switch (parse_time (string, &epoch_time)) { case -1: g_warning ("%s: Failed to parse time: %s", __FUNCTION__, string); sqlite3_result_int (context, 0); break; case -2: g_warning ("%s: Failed to make time: %s", __FUNCTION__, string); sqlite3_result_int (context, 0); break; case -3: g_warning ("%s: Failed to parse timezone offset: %s", __FUNCTION__, string); sqlite3_result_int (context, 0); break; default: sqlite3_result_int (context, epoch_time); } } /** * @brief Calculate the next time from now given a start time and a period. * * This is a callback for a scalar SQL function of three arguments. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_next_time (sqlite3_context *context, int argc, sqlite3_value** argv) { time_t first; time_t period; int period_months; assert (argc == 3); first = sqlite3_value_int (argv[0]); period = sqlite3_value_int (argv[1]); period_months = sqlite3_value_int (argv[2]); sqlite3_result_int (context, next_time (first, period, period_months)); } /** * @brief Get the current time as an epoch integer. * * This is a callback for a scalar SQL function of zero arguments. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_now (sqlite3_context *context, int argc, sqlite3_value** argv) { assert (argc == 0); sqlite3_result_int (context, time (NULL)); } /** * @brief Extract a tag from an OTP tag list. * * This is a callback for a scalar SQL function of two arguments. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_tag (sqlite3_context *context, int argc, sqlite3_value** argv) { const char *tags, *tag; gchar *value; assert (argc == 2); tags = (char*) sqlite3_value_text (argv[0]); if (tags == NULL) { sqlite3_result_error (context, "Failed to get tags argument", -1); return; } tag = (char*) sqlite3_value_text (argv[1]); if (tag == NULL) { sqlite3_result_error (context, "Failed to get tag argument", -1); return; } value = tag_value (tags, tag); sqlite3_result_text (context, value, -1, SQLITE_TRANSIENT); g_free (value); return; } /** * @brief Return number of hosts. * * This is a callback for a scalar SQL function of two arguments. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_max_hosts (sqlite3_context *context, int argc, sqlite3_value** argv) { const unsigned char *hosts, *exclude_hosts; gchar *max; assert (argc == 2); hosts = sqlite3_value_text (argv[0]); if (hosts == NULL) { /* Seems this happens when the query result is empty. */ sqlite3_result_text (context, "0", -1, SQLITE_TRANSIENT); return; } exclude_hosts = sqlite3_value_text (argv[1]); max = g_strdup_printf ("%i", manage_count_hosts ((gchar*) hosts, (gchar *) exclude_hosts)); sqlite3_result_text (context, max, -1, SQLITE_TRANSIENT); g_free (max); } /** * @brief Move data from a table to a new table, heeding column rename. * * @param[in] old_table Existing table. * @param[in] new_table New empty table with renamed column. * @param[in] old_name Name of column in old table. * @param[in] new_name Name of column in new table. */ void sql_rename_column (const char *old_table, const char *new_table, const char *old_name, const char *new_name) { iterator_t rows; /* Get a row with all columns. */ init_iterator (&rows, "SELECT * FROM %s LIMIT 1;", old_table); if (next (&rows)) { GString *one, *two; int end, column, first; /* Build the INSERT query from the column names in the row. */ one = g_string_new (""); g_string_append_printf (one, "INSERT INTO %s (", new_table); two = g_string_new (") SELECT "); end = iterator_column_count (&rows); first = 1; for (column = 0; column < end; column++) { const char *name; name = iterator_column_name (&rows, column); g_string_append_printf (one, "%s%s", (first ? "" : ", "), (strcmp (name, old_name) == 0 ? new_name : name)); if (first) first = 0; else g_string_append (two, ", "); g_string_append (two, name); } cleanup_iterator (&rows); g_string_append_printf (one, "%s FROM %s;", two->str, old_table); /* Run the INSERT query. */ sql (one->str); g_string_free (one, TRUE); g_string_free (two, TRUE); } else cleanup_iterator (&rows); } /** * @brief Check if two CVE lists contain a common CVE. * * This is a callback for a scalar SQL function of two arguments. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_common_cve (sqlite3_context *context, int argc, sqlite3_value** argv) { gchar **split_1, **split_2, **point_1, **point_2; const unsigned char *cve1, *cve2; assert (argc == 2); tracef (" %s: top\n", __FUNCTION__); cve1 = sqlite3_value_text (argv[0]); if (cve1 == NULL) { sqlite3_result_error (context, "Failed to get first CVE argument", -1); return; } cve2 = sqlite3_value_text (argv[1]); if (cve2 == NULL) { sqlite3_result_error (context, "Failed to get second CVE argument", -1); return; } split_1 = g_strsplit ((gchar*) cve1, ",", 0); split_2 = g_strsplit ((gchar*) cve2, ",", 0); point_1 = split_1; point_2 = split_2; while (*point_1) { while (*point_2) { tracef (" %s: %s vs %s\n", __FUNCTION__, g_strstrip (*point_1), g_strstrip (*point_2)); if (strcmp (g_strstrip (*point_1), g_strstrip (*point_2)) == 0) { g_strfreev (split_1); g_strfreev (split_2); sqlite3_result_int (context, 1); return; } point_2++; } point_1++; } g_strfreev (split_1); g_strfreev (split_2); sqlite3_result_int (context, 0); } /** * @brief Get the offset from UTC of the current time for a timezone. * * This is a callback for a scalar SQL function of one argument. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_current_offset (sqlite3_context *context, int argc, sqlite3_value** argv) { assert (argc == 1); sqlite3_result_int (context, (int) current_offset ((const char *) sqlite3_value_text (argv[0]))); } /** * @brief Calculate the trend of a task. * * This is a callback for a scalar SQL function of two argument. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_task_trend (sqlite3_context *context, int argc, sqlite3_value** argv) { unsigned int overrides; int min_qod; task_t task; assert (argc == 3); task = sqlite3_value_int64 (argv[0]); if (task == 0) { sqlite3_result_text (context, "", -1, SQLITE_TRANSIENT); return; } overrides = sqlite3_value_int (argv[1]); if (sqlite3_value_type (argv[2]) == SQLITE_NULL) min_qod = MIN_QOD_DEFAULT; else min_qod = sqlite3_value_int (argv[2]); sqlite3_result_text (context, task_trend (task, overrides, min_qod), -1, SQLITE_TRANSIENT); } /** * @brief Severity. */ typedef struct { task_t task; ///< Task. gchar *severity; ///< Severity. task_t overrides_task; ///< Task. gchar *overrides_severity; ///< Severity. int min_qod; ///< Minimum QoD. } sql_severity_t; /** * @brief Get task severity, looking in cache. * * @param[in] cache_arg Cache. */ static void clear_cache (void *cache_arg) { sql_severity_t *cache; cache = (sql_severity_t*) cache_arg; tracef (" %s: %llu, %llu\n", __FUNCTION__, cache->task, cache->overrides_task); cache->task = 0; cache->overrides_task = 0; free (cache->severity); cache->severity = NULL; free (cache->overrides_severity); cache->overrides_severity = NULL; cache->min_qod = -1; } /** * @brief Get task severity, looking in cache. * * Cache a single severity value because task_threat and task_severity both * do the same expensive severity calculation for each row in the task * iterator. Use auxdata on the overrides arg to pass the cache between * calls with a single statement. * * @param[in] context SQL context. * @param[in] task Task. * @param[in] overrides Overrides flag. * @param[in] min_qod Minimum QoD of report results to count. * * @return Severity. */ static char * cached_task_severity (sqlite3_context *context, task_t task, int overrides, int min_qod) { static sql_severity_t static_cache = { .task = 0, .severity = NULL, .min_qod = MIN_QOD_DEFAULT, .overrides_task = 0, .overrides_severity = NULL }; sql_severity_t *cache; char *severity; cache = sqlite3_get_auxdata (context, 1); if (cache) { if (overrides) { if (cache->overrides_task == task && cache->min_qod == min_qod) return cache->overrides_severity; /* Replace the cached severity. */ cache->overrides_task = task; free (cache->overrides_severity); cache->overrides_severity = task_severity (task, 1, min_qod, 0); return cache->overrides_severity; } else { if (cache->task == task && cache->min_qod == min_qod) return cache->severity; /* Replace the cached severity. */ cache->task = task; free (cache->severity); cache->severity = task_severity (task, 0, min_qod, 0); return cache->severity; } } severity = task_severity (task, overrides, min_qod, 0); /* Setup the cached severity. */ cache = &static_cache; if (overrides) { cache->overrides_task = task; cache->overrides_severity = severity; } else { cache->task = task; cache->severity = severity; } sqlite3_set_auxdata (context, 1, cache, clear_cache); return severity; } /** * @brief Calculate the threat level of a task. * * This is a callback for a scalar SQL function of one argument. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_task_threat_level (sqlite3_context *context, int argc, sqlite3_value** argv) { task_t task; report_t last_report; const char *threat; unsigned int overrides; int min_qod; char* severity; double severity_dbl; assert (argc == 3); task = sqlite3_value_int64 (argv[0]); if (task == 0) { sqlite3_result_text (context, "", -1, SQLITE_TRANSIENT); return; } overrides = sqlite3_value_int (argv[1]); if (sqlite3_value_type (argv[2]) == SQLITE_NULL) min_qod = MIN_QOD_DEFAULT; else min_qod = sqlite3_value_int (argv[2]); severity = cached_task_severity (context, task, overrides, min_qod); if (severity == NULL || sscanf (severity, "%lf", &severity_dbl) != 1) threat = NULL; else threat = severity_to_level (severity_dbl, 0); tracef (" %s: %llu: %s\n", __FUNCTION__, task, threat); if (threat) { sqlite3_result_text (context, threat, -1, SQLITE_TRANSIENT); return; } task_last_report (task, &last_report); if (last_report == 0) { sqlite3_result_text (context, "", -1, SQLITE_TRANSIENT); return; } sqlite3_result_text (context, "None", -1, SQLITE_TRANSIENT); return; } /** * @brief Calculate the progress of a report. * * This is a callback for a scalar SQL function of one argument. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_report_progress (sqlite3_context *context, int argc, sqlite3_value** argv) { report_t report; task_t task; assert (argc == 1); report = sqlite3_value_int64 (argv[0]); if (report == 0) { sqlite3_result_int (context, -1); return; } if (report_task (report, &task)) { sqlite3_result_int (context, -1); return; } sqlite3_result_int (context, report_progress (report, task, NULL)); return; } /** * @brief Calculate the severity of a report. * * This is a callback for a scalar SQL function of three arguments. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_report_severity (sqlite3_context *context, int argc, sqlite3_value** argv) { report_t report; double severity; unsigned int overrides; int min_qod; assert (argc == 3); report = sqlite3_value_int64 (argv[0]); if (report == 0) { sqlite3_result_text (context, "", -1, SQLITE_TRANSIENT); return; } overrides = sqlite3_value_int (argv[1]); if (sqlite3_value_type (argv[2]) == SQLITE_NULL) min_qod = MIN_QOD_DEFAULT; else min_qod = sqlite3_value_int (argv[2]); severity = report_severity (report, overrides, min_qod); sqlite3_result_double (context, severity); return; } /** * @brief Get the number of results of a given severity level in a report. * * @param[in] report The report to count the results of. * @param[in] overrides Whether to apply overrides. * @param[in] min_qod Minimum QoD of results to count. * @param[in] level Severity level of which to count results. * * @return The number of results. */ static int report_severity_count (report_t report, int overrides, int min_qod, char *level) { int debugs, false_positives, logs, lows, mediums, highs; gchar *min_qod_str = g_strdup_printf ("%d", min_qod); report_counts_id (report, &debugs, &highs, &lows, &logs, &mediums, &false_positives, NULL, overrides, NULL, 0, min_qod_str); g_free (min_qod_str); if (strcasecmp (level, "Debug") == 0) return debugs; if (strcasecmp (level, "False Positive") == 0) return false_positives; else if (strcasecmp (level, "Log") == 0) return logs; else if (strcasecmp (level, "Low") == 0) return lows; else if (strcasecmp (level, "Medium") == 0) return mediums; else if (strcasecmp (level, "High") == 0) return highs; else return 0; } /** * @brief Get the number of results of a given severity level in a report. * * This is a callback for a scalar SQL function of four arguments. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_report_severity_count (sqlite3_context *context, int argc, sqlite3_value** argv) { report_t report; unsigned int overrides; int min_qod; char* level; int count; assert (argc == 4); report = sqlite3_value_int64 (argv[0]); if (report == 0) { sqlite3_result_text (context, "", -1, SQLITE_TRANSIENT); return; } overrides = sqlite3_value_int (argv[1]); if (sqlite3_value_type (argv[2]) == SQLITE_NULL) min_qod = MIN_QOD_DEFAULT; else min_qod = sqlite3_value_int (argv[2]); level = (char*) sqlite3_value_text (argv[3]); if (level == 0) { sqlite3_result_text (context, "", -1, SQLITE_TRANSIENT); return; } count = report_severity_count (report, overrides, min_qod, level); sqlite3_result_int (context, count); return; } /** * @brief Calculate the severity of a task. * * This is a callback for a scalar SQL function of two arguments. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_task_severity (sqlite3_context *context, int argc, sqlite3_value** argv) { task_t task; report_t last_report; char *severity; double severity_double; unsigned int overrides; int min_qod; assert (argc == 3); task = sqlite3_value_int64 (argv[0]); if (task == 0) { sqlite3_result_text (context, "", -1, SQLITE_TRANSIENT); return; } overrides = sqlite3_value_int (argv[1]); if (sqlite3_value_type (argv[2]) == SQLITE_NULL) min_qod = MIN_QOD_DEFAULT; else min_qod = sqlite3_value_int (argv[2]); severity = cached_task_severity (context, task, overrides, min_qod); severity_double = severity ? g_strtod (severity, 0) : 0.0; tracef (" %s: %llu: %s\n", __FUNCTION__, task, severity); if (severity) { sqlite3_result_double (context, severity_double); return; } task_last_report (task, &last_report); if (last_report == 0) { sqlite3_result_double (context, SEVERITY_MISSING); return; } sqlite3_result_double (context, SEVERITY_MISSING); return; } /** * @brief Test if a severity score matches an override's severity. * * This is a callback for a scalar SQL function of two arguments. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_severity_matches_ov (sqlite3_context *context, int argc, sqlite3_value** argv) { double severity, ov_severity; assert (argc == 2); if (sqlite3_value_type (argv[0]) == SQLITE_NULL) { sqlite3_result_error (context, "First parameter of severity_matches_ov is NULL", -1); return; } if (sqlite3_value_type (argv[1]) == SQLITE_NULL || strcmp ((const char*) (sqlite3_value_text (argv[1])), "") == 0) { sqlite3_result_int (context, 1); return; } else { severity = sqlite3_value_double (argv[0]); ov_severity = sqlite3_value_double (argv[1]); sqlite3_result_int (context, severity_matches_ov (severity, ov_severity)); return; } } /** * @brief Get the threat level matching a severity score. * * This is a callback for a scalar SQL function of two arguments. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_severity_to_level (sqlite3_context *context, int argc, sqlite3_value** argv) { double severity; int mode; assert (argc == 2); if (sqlite3_value_type (argv[0]) == SQLITE_NULL || strcmp ((const char*)(sqlite3_value_text (argv[0])), "") == 0) { sqlite3_result_null (context); return; } mode = sqlite3_value_int (argv[1]); severity = sqlite3_value_double (argv[0]); sqlite3_result_text (context, severity_to_level (severity, mode), -1, SQLITE_TRANSIENT); return; } /** * @brief Get the message type matching a severity score. * * This is a callback for a scalar SQL function of one argument. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_severity_to_type (sqlite3_context *context, int argc, sqlite3_value** argv) { double severity; assert (argc == 1); if (sqlite3_value_type (argv[0]) == SQLITE_NULL || strcmp ((const char*)(sqlite3_value_text (argv[0])), "") == 0) { sqlite3_result_null (context); return; } severity = sqlite3_value_double (argv[0]); sqlite3_result_text (context, severity_to_type (severity), -1, SQLITE_TRANSIENT); return; } /** * @brief Do a regexp match. Implements SQL REGEXP. * * This is a callback for a scalar SQL function of two arguments. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_regexp (sqlite3_context *context, int argc, sqlite3_value** argv) { const unsigned char *string, *regexp; assert (argc == 2); regexp = sqlite3_value_text (argv[0]); if (regexp == NULL) { /* Seems this happens when the query result is empty. */ sqlite3_result_int (context, 0); return; } string = sqlite3_value_text (argv[1]); if (string == NULL) { /* Seems this happens when the query result is empty. */ sqlite3_result_int (context, 0); return; } if (g_regex_match_simple ((gchar *) regexp, (gchar *) string, 0, 0)) { sqlite3_result_int (context, 1); return; } sqlite3_result_int (context, 0); } /** * @brief Get the name of a task run status. * * This is a callback for a scalar SQL function of one argument. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_run_status_name (sqlite3_context *context, int argc, sqlite3_value** argv) { const char *name; int status; assert (argc == 1); status = sqlite3_value_int (argv[0]); name = run_status_name (status); sqlite3_result_text (context, name ? name : "", -1, SQLITE_TRANSIENT); return; } /** * @brief Get if a resource exists by its type and ID. * * This is a callback for a scalar SQL function of three arguments. * * Used by migrate_119_to_120 to check if a permission refers to a resource * that has been removed. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_resource_exists (sqlite3_context *context, int argc, sqlite3_value** argv) { const char *type; resource_t resource; int location, exists; assert (argc == 3); type = (char*) sqlite3_value_text (argv[0]); if (type == NULL) { sqlite3_result_int (context, 0); return; } if (valid_db_resource_type ((char*) type) == 0) { sqlite3_result_error (context, "Invalid resource type argument", -1); return; } resource = sqlite3_value_int64 (argv[1]); if (resource == 0) { sqlite3_result_int (context, 0); return; } location = sqlite3_value_int (argv[2]); exists = resource_exists (type, resource, location); if (exists == -1) { gchar *msg; msg = g_strdup_printf ("Invalid resource type argument: %s", type); sqlite3_result_error (context, msg, -1); g_free (msg); return; } sqlite3_result_int (context, exists); return; } /** * @brief Get the name of a resource by its type and ID. * * This is a callback for a scalar SQL function of three arguments. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_resource_name (sqlite3_context *context, int argc, sqlite3_value** argv) { const char *type, *id; int location; char *name; assert (argc == 3); type = (char*) sqlite3_value_text (argv[0]); if (type == NULL) { sqlite3_result_null (context); return; } id = (char*) sqlite3_value_text (argv[1]); if (id == NULL) { sqlite3_result_null (context); return; } location = sqlite3_value_int (argv[2]); if (resource_name (type, id, location, &name)) { gchar *msg; msg = g_strdup_printf ("Invalid resource type argument: %s", type); sqlite3_result_error (context, msg, -1); g_free (msg); return; } if (name) sqlite3_result_text (context, name, -1, SQLITE_TRANSIENT); else sqlite3_result_text (context, "", -1, SQLITE_TRANSIENT); free (name); return; } /** * @brief Check whether a severity falls within a threat level. * * This is a callback for a scalar SQL function of two arguments. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_severity_in_level (sqlite3_context *context, int argc, sqlite3_value** argv) { double severity; const char *threat; assert (argc == 2); severity = sqlite3_value_double (argv[0]); threat = (char*) sqlite3_value_text (argv[1]); if (threat == NULL) { sqlite3_result_null (context); return; } sqlite3_result_int (context, severity_in_level (severity, threat)); return; } /** * @brief Check if a user can do anything. * * This is a callback for a scalar SQL function of one argument. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_user_can_everything (sqlite3_context *context, int argc, sqlite3_value** argv) { const unsigned char *uuid; assert (argc == 1); uuid = sqlite3_value_text (argv[0]); if (uuid == NULL) { sqlite3_result_error (context, "Failed to get uuid argument", -1); return; } sqlite3_result_int (context, user_can_everything ((char *) uuid)); } /** * @brief Check if a user owns or effectively owns a resource. * * This is a callback for a scalar SQL function of two arguments. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void sql_user_owns (sqlite3_context *context, int argc, sqlite3_value** argv) { const unsigned char *type; resource_t resource; assert (argc == 2); type = sqlite3_value_text (argv[0]); if (type == NULL) { sqlite3_result_error (context, "Failed to get type argument", -1); return; } resource = sqlite3_value_int64 (argv[1]); if (resource == 0) { sqlite3_result_int (context, 0); return; } sqlite3_result_int (context, user_owns ((char *) type, resource, 0)); } /** * @brief Create functions. * * @return 0 success, -1 error. */ int manage_create_sql_functions () { if (sqlite3_create_function (task_db, "t", 0, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_t, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to t", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "strpos", 2, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_strpos, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create strpos", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "inet", 1, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_inet, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create inet", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "order_message_type", 1, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_order_message_type, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create order_message_type", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "order_port", 1, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_order_port, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create order_port", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "order_role", 1, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_order_role, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create order_role", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "order_threat", 1, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_order_threat, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create order_threat", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "make_uuid", 0, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_make_uuid, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create make_uuid", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "hosts_contains", 2, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_hosts_contains, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create host_contains", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "clean_hosts", 1, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_clean_hosts, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create clean_hosts", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "iso_time", 1, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_iso_time, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create iso_time", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "parse_time", 1, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_parse_time, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create parse_time", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "tag", 2, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_tag, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create tag", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "uniquify", 4, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_uniquify, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create uniquify", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "next_time", 3, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_next_time, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create next_time", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "m_now", 0, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_now, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create m_now", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "max_hosts", 2, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_max_hosts, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create max_hosts", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "common_cve", 2, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_common_cve, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create common_cve", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "current_offset", 1, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_current_offset, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create current_offset", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "task_trend", 3, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_task_trend, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create task_trend", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "task_threat_level", 3, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_task_threat_level, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create task_threat_level", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "report_progress", 1, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_report_progress, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create report_progress", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "report_severity", 3, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_report_severity, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create report_severity", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "report_severity_count", 4, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_report_severity_count, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create report_severity_count", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "task_severity", 3, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_task_severity, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create task_severity", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "severity_matches_ov", 2, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_severity_matches_ov, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create severity_matches_ov", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "severity_to_level", 1, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_severity_to_level, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create severity_to_level", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "severity_to_level", 2, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_severity_to_level, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create severity_to_level", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "severity_to_type", 1, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_severity_to_type, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create severity_to_type", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "run_status_name", 1, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_run_status_name, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create run_status_name", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "resource_exists", 3, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_resource_exists, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create resource_exists", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "regexp", 2, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_regexp, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create regexp", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "resource_name", 3, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_resource_name, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create resource_name", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "severity_in_level", 2, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_severity_in_level, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create severity_in_level", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "user_can_everything", 1, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_user_can_everything, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create user_can_everything", __FUNCTION__); return -1; } if (sqlite3_create_function (task_db, "user_owns", 2, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ sql_user_owns, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create user_owns", __FUNCTION__); return -1; } return 0; } /* Creation. */ /** * @brief Create all tables. */ void create_tables () { gchar *owned_clause; sql ("CREATE TABLE IF NOT EXISTS agents" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " installer TEXT, installer_64 TEXT, installer_filename," " installer_signature_64 TEXT, installer_trust INTEGER," " installer_trust_time, howto_install TEXT, howto_use TEXT," " creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS agents_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " installer TEXT, installer_64 TEXT, installer_filename," " installer_signature_64 TEXT, installer_trust INTEGER," " installer_trust_time, howto_install TEXT, howto_use TEXT," " creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS config_preferences" " (id INTEGER PRIMARY KEY, config INTEGER, type, name, value," " default_value);"); sql ("CREATE TABLE IF NOT EXISTS config_preferences_trash" " (id INTEGER PRIMARY KEY, config INTEGER, type, name, value," " default_value);"); sql ("CREATE TABLE IF NOT EXISTS configs" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name," " nvt_selector, comment, family_count INTEGER, nvt_count INTEGER," " families_growing INTEGER, nvts_growing INTEGER, type, creation_time," " modification_time);"); sql ("CREATE TABLE IF NOT EXISTS configs_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name," " nvt_selector, comment, family_count INTEGER, nvt_count INTEGER," " families_growing INTEGER, nvts_growing INTEGER, type, creation_time," " modification_time);"); sql ("CREATE TABLE IF NOT EXISTS alert_condition_data" " (id INTEGER PRIMARY KEY, alert INTEGER, name, data);"); sql ("CREATE TABLE IF NOT EXISTS alert_condition_data_trash" " (id INTEGER PRIMARY KEY, alert INTEGER, name, data);"); sql ("CREATE TABLE IF NOT EXISTS alert_event_data" " (id INTEGER PRIMARY KEY, alert INTEGER, name, data);"); sql ("CREATE TABLE IF NOT EXISTS alert_event_data_trash" " (id INTEGER PRIMARY KEY, alert INTEGER, name, data);"); sql ("CREATE TABLE IF NOT EXISTS alert_method_data" " (id INTEGER PRIMARY KEY, alert INTEGER, name, data);"); sql ("CREATE TABLE IF NOT EXISTS alert_method_data_trash" " (id INTEGER PRIMARY KEY, alert INTEGER, name, data);"); sql ("CREATE TABLE IF NOT EXISTS alerts" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " event INTEGER, condition INTEGER, method INTEGER, filter INTEGER," " creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS alerts_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " event INTEGER, condition INTEGER, method INTEGER, filter INTEGER," " filter_location INTEGER, creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS filters" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " type, term, creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS filters_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " type, term, creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS groups" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS groups_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " type, term, creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS group_users" " (id INTEGER PRIMARY KEY, `group` INTEGER, user INTEGER);"); sql ("CREATE TABLE IF NOT EXISTS group_users_trash" " (id INTEGER PRIMARY KEY, `group` INTEGER, user INTEGER);"); sql ("CREATE TABLE IF NOT EXISTS lsc_credentials" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, login," " password, comment, private_key TEXT," " creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS lsc_credentials_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, login," " password, comment, private_key TEXT," " creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS meta" " (id INTEGER PRIMARY KEY, name UNIQUE, value);"); sql ("CREATE TABLE IF NOT EXISTS notes" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, nvt," " creation_time, modification_time, text, hosts, port, severity," " task INTEGER, result INTEGER, end_time);"); sql ("CREATE TABLE IF NOT EXISTS notes_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, nvt," " creation_time, modification_time, text, hosts, port, severity," " task INTEGER, result INTEGER, end_time);"); sql ("CREATE TABLE IF NOT EXISTS nvt_preferences" " (id INTEGER PRIMARY KEY, name, value);"); /* nvt_selectors types: 0 all, 1 family, 2 NVT * (NVT_SELECTOR_TYPE_* in manage.h). */ sql ("CREATE TABLE IF NOT EXISTS nvt_selectors" " (id INTEGER PRIMARY KEY, name, exclude INTEGER, type INTEGER," " family_or_nvt, family);"); sql ("CREATE INDEX IF NOT EXISTS nvt_selectors_by_name" " ON nvt_selectors (name);"); sql ("CREATE INDEX IF NOT EXISTS nvt_selectors_by_family_or_nvt" " ON nvt_selectors (type, family_or_nvt);"); sql ("CREATE TABLE IF NOT EXISTS nvts" " (id INTEGER PRIMARY KEY, uuid, oid, version, name, comment, summary," " copyright, cve, bid, xref, tag, category INTEGER, family, cvss_base," " creation_time, modification_time, solution_type TEXT, qod INTEGER," " qod_type TEXT);"); sql ("CREATE INDEX IF NOT EXISTS nvts_by_oid" " ON nvts (oid);"); sql ("CREATE INDEX IF NOT EXISTS nvts_by_name" " ON nvts (name);"); sql ("CREATE INDEX IF NOT EXISTS nvts_by_family" " ON nvts (family);"); sql ("CREATE TABLE IF NOT EXISTS nvt_cves" " (nvt, oid, cve_name)"); sql ("CREATE INDEX IF NOT EXISTS nvts_by_creation_time" " ON nvts (creation_time);"); sql ("CREATE INDEX IF NOT EXISTS nvts_by_modification_time" " ON nvts (modification_time);"); sql ("CREATE INDEX IF NOT EXISTS nvts_by_cvss_base" " ON nvts (cvss_base);"); sql ("CREATE INDEX IF NOT EXISTS nvts_by_solution_type" " ON nvts (solution_type);"); sql ("CREATE INDEX IF NOT EXISTS nvt_cves_by_oid" " ON nvt_cves (oid);"); sql ("CREATE TABLE IF NOT EXISTS overrides" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, nvt," " creation_time, modification_time, text, hosts, port, severity," " new_severity, task INTEGER, result INTEGER, end_time);"); sql ("CREATE TABLE IF NOT EXISTS overrides_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, nvt," " creation_time, modification_time, text, hosts, port, severity," " new_severity, task INTEGER, result INTEGER, end_time);"); sql ("CREATE TABLE IF NOT EXISTS permissions" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner, name, comment," " resource_type, resource, resource_uuid, resource_location," " subject_type, subject, subject_location," " creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS permissions_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner, name, comment," " resource_type, resource, resource_uuid, resource_location," " subject_type, subject, subject_location," " creation_time, modification_time);"); /* Overlapping port ranges will cause problems, at least for the port * counting. OMP CREATE_PORT_LIST and CREATE_PORT_RANGE check for this, * but whoever creates a predefined port list must check this manually. */ sql ("CREATE TABLE IF NOT EXISTS port_lists" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS port_lists_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS port_names" " (id INTEGER PRIMARY KEY, number INTEGER, protocol, name," " UNIQUE (number, protocol) ON CONFLICT REPLACE);"); sql ("CREATE TABLE IF NOT EXISTS port_ranges" " (id INTEGER PRIMARY KEY, uuid UNIQUE, port_list INTEGER, type, start," " end, comment, exclude);"); sql ("CREATE TABLE IF NOT EXISTS port_ranges_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, port_list INTEGER, type, start," " end, comment, exclude);"); sql ("CREATE TABLE IF NOT EXISTS report_host_details" " (id INTEGER PRIMARY KEY, report_host INTEGER, source_type, source_name," " source_description, name, value);"); sql ("CREATE INDEX IF NOT EXISTS" " report_host_details_by_report_host_and_name_and_value" " ON report_host_details (report_host, name, value);"); sql ("CREATE TABLE IF NOT EXISTS report_hosts" " (id INTEGER PRIMARY KEY, report INTEGER, host, start_time, end_time," " current_port, max_port);"); sql ("CREATE INDEX IF NOT EXISTS report_hosts_by_host" " ON report_hosts (host);"); sql ("CREATE INDEX IF NOT EXISTS report_hosts_by_report" " ON report_hosts (report);"); sql ("CREATE TABLE IF NOT EXISTS report_format_param_options" " (id INTEGER PRIMARY KEY, report_format_param, value);"); sql ("CREATE TABLE IF NOT EXISTS report_format_param_options_trash" " (id INTEGER PRIMARY KEY, report_format_param, value);"); sql ("CREATE TABLE IF NOT EXISTS report_format_params" " (id INTEGER PRIMARY KEY, report_format, name, type INTEGER, value," " type_min, type_max, type_regex, fallback);"); sql ("CREATE TABLE IF NOT EXISTS report_format_params_trash" " (id INTEGER PRIMARY KEY, report_format, name, type INTEGER, value," " type_min, type_max, type_regex, fallback);"); sql ("CREATE TABLE IF NOT EXISTS report_formats" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, name, extension," " content_type, summary, description, signature, trust INTEGER," " trust_time, flags INTEGER, creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS report_formats_trash" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, name, extension," " content_type, summary, description, signature, trust INTEGER," " trust_time, flags INTEGER, original_uuid, creation_time," " modification_time);"); sql ("CREATE TABLE IF NOT EXISTS reports" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, hidden INTEGER," " task INTEGER, date INTEGER, start_time, end_time, nbefile, comment," " scan_run_status INTEGER, slave_progress, slave_task_uuid," " slave_uuid, slave_name, slave_host, slave_port, source_iface);"); sql ("CREATE TABLE IF NOT EXISTS report_counts" " (id INTEGER PRIMARY KEY, report INTEGER, user INTEGER," " severity, count, override, end_time INTEGER);"); sql ("CREATE INDEX IF NOT EXISTS report_counts_by_report_and_override" " ON report_counts (report, override);"); sql ("CREATE TABLE IF NOT EXISTS results" " (id INTEGER PRIMARY KEY, uuid, task INTEGER, host, port, nvt," " type, description, report, nvt_version, severity REAL," " qod INTEGER, qod_type TEXT, owner INTEGER, date INTEGER)"); sql ("CREATE INDEX IF NOT EXISTS results_by_host" " ON results (host);"); sql ("CREATE INDEX IF NOT EXISTS results_by_report_host" " ON results (report, host);"); sql ("CREATE INDEX IF NOT EXISTS results_by_task" " ON results (task);"); sql ("CREATE INDEX IF NOT EXISTS results_by_task_qod_severity" " ON results (task, qod, severity);"); sql ("CREATE INDEX IF NOT EXISTS results_by_type" " ON results (type);"); sql ("CREATE TABLE IF NOT EXISTS roles" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS roles_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS role_users" " (id INTEGER PRIMARY KEY, role INTEGER, user INTEGER);"); sql ("CREATE TABLE IF NOT EXISTS role_users_trash" " (id INTEGER PRIMARY KEY, role INTEGER, user INTEGER);"); sql ("CREATE TABLE IF NOT EXISTS scanners" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, name, comment," " host, port, type, ca_pub, key_pub, key_priv," " creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS scanners_trash" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, name, comment," " host, port, type, ca_pub, key_pub, key_priv," " creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS schedules" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, name, comment," " first_time, period, period_months, duration, timezone," " initial_offset, creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS schedules_trash" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, name, comment," " first_time, period, period_months, duration, timezone," " initial_offset, creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS slaves" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, name, comment, host," " port, login, password, creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS slaves_trash" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, name, comment, host," " port, login, password, creation_time, modification_time);"); sql ("CREATE TABLE IF NOT EXISTS settings" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, name, comment, value);"); sql ("CREATE TABLE IF NOT EXISTS tags" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner, name, comment," " creation_time, modification_time, resource_type, resource," " resource_uuid, resource_location, active, value);"); sql ("CREATE INDEX IF NOT EXISTS tags_by_resource" " ON tags (resource_type, resource);"); sql ("CREATE INDEX IF NOT EXISTS tags_by_name" " ON tags (name);"); sql ("CREATE UNIQUE INDEX IF NOT EXISTS tags_by_uuid" " ON tags (uuid);"); sql ("CREATE TABLE IF NOT EXISTS tags_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner, name, comment," " creation_time, modification_time, resource_type, resource," " resource_uuid, resource_location, active, value);"); /* port_range in the following two is actually a port list. Migrating a * column rename is lots of work. */ sql ("CREATE TABLE IF NOT EXISTS targets" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, hosts," " exclude_hosts, reverse_lookup_only, reverse_lookup_unify, comment," " lsc_credential INTEGER, ssh_port, smb_lsc_credential INTEGER," " port_range, alive_test, creation_time, modification_time," " esxi_lsc_credential);"); sql ("CREATE TABLE IF NOT EXISTS targets_trash" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, hosts," " exclude_hosts, reverse_lookup_only, reverse_lookup_unify," " comment, lsc_credential INTEGER, ssh_port, smb_lsc_credential" " INTEGER, port_range, ssh_location INTEGER, smb_location INTEGER," " port_list_location INTEGER, alive_test, creation_time," " modification_time, esxi_lsc_credential, esxi_location INTEGER);"); sql ("CREATE TABLE IF NOT EXISTS task_files" " (id INTEGER PRIMARY KEY, task INTEGER, name, content);"); sql ("CREATE TABLE IF NOT EXISTS task_alerts" " (id INTEGER PRIMARY KEY, task INTEGER, alert INTEGER," " alert_location INTEGER);"); sql ("CREATE TABLE IF NOT EXISTS task_preferences" " (id INTEGER PRIMARY KEY, task INTEGER, name, value);"); sql ("CREATE TABLE IF NOT EXISTS tasks" " (id INTEGER PRIMARY KEY, uuid, owner INTEGER, name, hidden INTEGER," /* TODO Remove column time, no longer used. */ " time, comment, run_status INTEGER, start_time, end_time," " config INTEGER, target INTEGER, schedule INTEGER, schedule_next_time," " schedule_periods INTEGER, slave INTEGER, config_location INTEGER," " target_location INTEGER, schedule_location INTEGER," " slave_location INTEGER, upload_result_count INTEGER, hosts_ordering," " scanner, alterable, creation_time, modification_time);"); /* Field password contains the hash. */ /* Field hosts_allow: 0 deny, 1 allow. */ /* Field ifaces_allow: 0 deny, 1 allow. */ sql ("CREATE TABLE IF NOT EXISTS users" " (id INTEGER PRIMARY KEY, uuid UNIQUE, owner INTEGER, name, comment," " password, timezone, hosts, hosts_allow, ifaces, ifaces_allow," " method, creation_time, modification_time);"); /* Result views */ owned_clause = where_owned_for_get ("override", "users.id"); sql_begin_exclusive (); sql ("DROP VIEW IF EXISTS result_overrides;"); sql ("CREATE VIEW result_overrides AS" " SELECT users.id AS user," " results.id as result," " overrides.id AS override," " overrides.severity AS ov_old_severity," " overrides.new_severity AS ov_new_severity" " FROM users, results, overrides" " WHERE overrides.nvt = results.nvt" " AND (overrides.result = 0 OR overrides.result = results.id)" " AND %s" " AND ((overrides.end_time = 0)" " OR (overrides.end_time >= m_now ()))" " AND (overrides.task =" " (SELECT reports.task FROM reports" " WHERE results.report = reports.id)" " OR overrides.task = 0)" " AND (overrides.result = results.id" " OR overrides.result = 0)" " AND (overrides.hosts is NULL" " OR overrides.hosts = ''" " OR hosts_contains (overrides.hosts, results.host))" " AND (overrides.port is NULL" " OR overrides.port = ''" " OR overrides.port = results.port)" " ORDER BY overrides.result DESC, overrides.task DESC," " overrides.port DESC, overrides.severity ASC," " overrides.creation_time DESC", owned_clause); sql ("COMMIT;"); g_free (owned_clause); sql_begin_exclusive (); sql ("DROP VIEW IF EXISTS result_new_severities;"); sql ("CREATE VIEW result_new_severities AS" " SELECT results.id as result, users.id as user, dynamic, override," " CASE WHEN dynamic THEN" " CASE WHEN override THEN" " coalesce ((SELECT ov_new_severity FROM result_overrides" " WHERE result = results.id" " AND result_overrides.user = users.id" " AND severity_matches_ov" " (coalesce ((CASE WHEN results.severity" " > " G_STRINGIFY (SEVERITY_LOG) " THEN (SELECT cvss_base" " FROM nvts" " WHERE nvts.oid = results.nvt)" " ELSE results.severity" " END)," " results.severity)," " ov_old_severity))," " coalesce ((CASE WHEN results.severity" " > " G_STRINGIFY (SEVERITY_LOG) " THEN (SELECT cvss_base" " FROM nvts" " WHERE nvts.oid = results.nvt)" " ELSE results.severity" " END)," " results.severity))" " ELSE" " coalesce ((CASE WHEN results.severity" " > " G_STRINGIFY (SEVERITY_LOG) " THEN (SELECT cvss_base" " FROM nvts" " WHERE nvts.oid = results.nvt)" " ELSE results.severity" " END)," " results.severity)" " END" " ELSE" " CASE WHEN override THEN" " coalesce ((SELECT ov_new_severity FROM result_overrides" " WHERE result = results.id" " AND result_overrides.user = users.id" " AND severity_matches_ov" " (results.severity," " ov_old_severity))," " results.severity)" " ELSE" " results.severity" " END" " END AS new_severity" " FROM results, users" " JOIN (SELECT 0 AS override UNION SELECT 1 AS override_opts)" " JOIN (SELECT 0 AS dynamic UNION SELECT 1 AS dynamic_opts);"); sql ("COMMIT;"); sql_begin_exclusive (); sql ("DROP VIEW IF EXISTS results_autofp;"); sql ("CREATE VIEW results_autofp AS" " SELECT results.id as result, autofp_selection," " (CASE autofp_selection" " WHEN 1 THEN" " (CASE WHEN" " (((SELECT family FROM nvts WHERE oid = results.nvt)" " IN (" LSC_FAMILY_LIST "))" " OR results.nvt = '0'" /* Open ports previously had 0 NVT. */ " OR EXISTS" " (SELECT id FROM nvts" " WHERE oid = results.nvt" " AND" " (cve = 'NOCVE'" " OR cve NOT IN (SELECT cve FROM nvts" " WHERE oid IN (SELECT source_name" " FROM report_host_details" " WHERE report_host" " = (SELECT id" " FROM report_hosts" " WHERE report = %llu" " AND host = results.host)" " AND name = 'EXIT_CODE'" " AND value = 'EXIT_NOTVULN')" " AND family IN (" LSC_FAMILY_LIST ")))))" " THEN NULL" " WHEN severity = " G_STRINGIFY (SEVERITY_ERROR) " THEN NULL" " ELSE 1 END)" " WHEN 2 THEN" " (CASE WHEN" " (((SELECT family FROM nvts WHERE oid = results.nvt)" " IN (" LSC_FAMILY_LIST "))" " OR results.nvt = '0'" /* Open ports previously had 0 NVT.*/ " OR EXISTS" " (SELECT id FROM nvts AS outer_nvts" " WHERE oid = results.nvt" " AND" " (cve = 'NOCVE'" " OR NOT EXISTS" " (SELECT cve FROM nvts" " WHERE oid IN (SELECT source_name" " FROM report_host_details" " WHERE report_host" " = (SELECT id" " FROM report_hosts" " WHERE report = results.report" " AND host = results.host)" " AND name = 'EXIT_CODE'" " AND value = 'EXIT_NOTVULN')" " AND family IN (" LSC_FAMILY_LIST ")" /* The CVE of the result NVT is outer_nvts.cve. The CVE of the * NVT that has registered the "closed" host detail is nvts.cve. * Either can be a list of CVEs. */ " AND common_cve (nvts.cve, outer_nvts.cve)))))" " THEN NULL" " WHEN severity = " G_STRINGIFY (SEVERITY_ERROR) " THEN NULL" " ELSE 1 END)" " ELSE 0 END) AS autofp" " FROM results," " (SELECT 0 AS autofp_selection" " UNION SELECT 1 AS autofp_selection" " UNION SELECT 2 AS autofp_selection) AS autofp_opts;"); sql ("COMMIT;"); } /* SecInfo. */ /** * @brief Attach external databases. */ void manage_attach_databases () { /* Attach the SCAP database. */ if (access (OPENVAS_STATE_DIR "/scap-data/scap.db", R_OK)) switch (errno) { case ENOENT: break; default: g_warning ("%s: failed to stat SCAP database: %s\n", __FUNCTION__, strerror (errno)); break; } else sql_error ("ATTACH DATABASE '" OPENVAS_STATE_DIR "/scap-data/scap.db'" " AS scap;"); /* Attach the CERT database. */ if (access (OPENVAS_STATE_DIR "/cert-data/cert.db", R_OK)) switch (errno) { case ENOENT: break; default: g_warning ("%s: failed to stat CERT database: %s\n", __FUNCTION__, strerror (errno)); break; } else sql_error ("ATTACH DATABASE '" OPENVAS_STATE_DIR "/cert-data/cert.db'" " AS cert;"); } /** * @brief Check whether CERT is available. * * @return 1 if CERT database is loaded, else 0. */ int manage_cert_loaded () { static int loaded = 0; if (loaded) return 1; if (access (OPENVAS_STATE_DIR "/cert-data/cert.db", R_OK)) switch (errno) { case ENOENT: return 0; break; default: g_warning ("%s: failed to stat CERT database: %s\n", __FUNCTION__, strerror (errno)); return 0; } if (sql_error ("SELECT count(*) FROM cert.sqlite_master" " WHERE type = 'table' AND name = 'dfn_cert_advs';")) /* There was an error, so probably the initial ATTACH failed. */ return 0; loaded = !!sql_int ("SELECT count(*) FROM cert.sqlite_master" " WHERE type = 'table' AND name = 'dfn_cert_advs';"); return loaded; } /** * @brief Check whether SCAP is available. * * @return 1 if SCAP database is loaded, else 0. */ int manage_scap_loaded () { static int loaded = 0; if (loaded) return 1; if (access (OPENVAS_STATE_DIR "/scap-data/scap.db", R_OK)) switch (errno) { case ENOENT: return 0; break; default: g_warning ("%s: failed to stat SCAP database: %s\n", __FUNCTION__, strerror (errno)); return 0; } if (sql_error ("SELECT count(*) FROM scap.sqlite_master" " WHERE type = 'table' AND name = 'cves';")) /* There was an error, so probably the initial ATTACH failed. */ return 0; loaded = !!sql_int ("SELECT count(*) FROM scap.sqlite_master" " WHERE type = 'table' AND name = 'cves';"); return loaded; } /* Backup. */ /** * @brief Backup the database to a file. * * @param[in] database Database to backup. * @param[out] backup_file Location for freshly allocated name of backup * file, or NULL. Only set on success. * * @return 0 success, -1 error. */ static int backup_db (const gchar *database, gchar **backup_file_arg) { gchar *backup_file; sqlite3 *backup_db, *actual_task_db; sqlite3_backup *backup; backup_file = g_strdup_printf ("%s.bak", database); if (sqlite3_open (backup_file, &backup_db) != SQLITE_OK) { g_warning ("%s: sqlite3_open failed: %s\n", __FUNCTION__, sqlite3_errmsg (task_db)); goto fail; } /* Turn off WAL for the backup db. */ actual_task_db = task_db; task_db = backup_db; sql ("PRAGMA journal_mode=DELETE;"); task_db = actual_task_db; backup = sqlite3_backup_init (backup_db, "main", task_db, "main"); if (backup == NULL) { g_warning ("%s: sqlite3_backup_init failed: %s\n", __FUNCTION__, sqlite3_errmsg (backup_db)); goto fail; } while (1) { int ret; ret = sqlite3_backup_step (backup, 20 /* pages */); if (ret == SQLITE_DONE) break; if (ret == SQLITE_OK) continue; if (ret == SQLITE_BUSY || ret == SQLITE_LOCKED) { sqlite3_sleep (250); continue; } g_warning ("%s: sqlite3_backup_step failed: %s\n", __FUNCTION__, sqlite3_errstr (ret)); sqlite3_backup_finish (backup); goto fail; } sqlite3_backup_finish (backup); sqlite3_close (backup_db); if (backup_file_arg) *backup_file_arg = backup_file; else g_free (backup_file); return 0; fail: sqlite3_close (backup_db); g_free (backup_file); return -1; } /** * @brief Backup the database to a file. * * @param[in] database Location of manage database. * * @return 0 success, -1 error. */ int manage_backup_db (const gchar *database) { int ret; const gchar *db = database ? database : sql_default_database (); init_manage_process (0, db); ret = backup_db (db, NULL); cleanup_manage_process (TRUE); return ret; } /* Migrator helper. */ /** * @brief Convert a UTC text time to an integer time since the Epoch. * * This is a callback for a scalar SQL function of one argument. * * @param[in] context SQL context. * @param[in] argc Number of arguments. * @param[in] argv Argument array. */ void migrate_51_to_52_sql_convert (sqlite3_context *context, int argc, sqlite3_value** argv) { const unsigned char *text_time; int epoch_time; struct tm tm; assert (argc == 1); text_time = sqlite3_value_text (argv[0]); if (text_time) { /* Scanner uses ctime: "Wed Jun 30 21:49:08 1993". * * The dates being converted are in the timezone that the Scanner was using. * * As a special case for this migrator, openvasmd.c uses the timezone * from the environment, instead of forcing UTC. This allows the user * to set the timezone to be the same as the Scanner timezone, so * that these dates are converted from the Scanner timezone. Even if * the user just leaves the timezone as is, it is likely to be the same * timezone she/he is running the Scanner under. */ if (text_time && (strlen ((char*) text_time) > 0)) { if (strptime ((char*) text_time, "%a %b %d %H:%M:%S %Y", &tm) == NULL) { sqlite3_result_error (context, "Failed to parse time", -1); return; } epoch_time = mktime (&tm); if (epoch_time == -1) { sqlite3_result_error (context, "Failed to make time", -1); return; } } else epoch_time = 0; } else epoch_time = 0; sqlite3_result_int (context, epoch_time); } /** * @brief Setup SQL function for migrate_51_to_52. * * @param[in] stmt Statement. * @param[in] position Column position. * * @return 0 success, -1 error. */ int manage_create_migrate_51_to_52_convert () { if (sqlite3_create_function (task_db, "convert", 1, /* Number of args. */ SQLITE_UTF8, NULL, /* Callback data. */ migrate_51_to_52_sql_convert, NULL, /* xStep. */ NULL) /* xFinal. */ != SQLITE_OK) { g_warning ("%s: failed to create convert", __FUNCTION__); return -1; } return 0; } openvas-manager-6.0.9/src/manage_sql.h000644 001751 001751 00000021762 12757560563 020760 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Manager Manage library: SQL backend headers. * * Authors: * Matthew Mundell * Timo Pollmeier * * Copyright: * Copyright (C) 2010-2013 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #ifndef OPENVAS_MANAGER_MANAGE_SQL_H #define OPENVAS_MANAGER_MANAGE_SQL_H #include "manage.h" #include "manage_utils.h" #include /* Internal types and preprocessor definitions. */ /** * @brief UUID of 'Full and fast' config. */ #define CONFIG_UUID_FULL_AND_FAST "daba56c8-73ec-11df-a475-002264764cea" /** * @brief UUID of 'Full and fast ultimate' config. */ #define CONFIG_UUID_FULL_AND_FAST_ULTIMATE \ "698f691e-7489-11df-9d8c-002264764cea" /** * @brief UUID of 'Full and very deep' config. */ #define CONFIG_UUID_FULL_AND_VERY_DEEP "708f25c4-7489-11df-8094-002264764cea" /** * @brief UUID of 'Full and very deep ultimate' config. */ #define CONFIG_UUID_FULL_AND_VERY_DEEP_ULTIMATE \ "74db13d6-7489-11df-91b9-002264764cea" /** * @brief UUID of 'Empty' config. */ #define CONFIG_UUID_EMPTY "085569ce-73ed-11df-83c3-002264764cea" /** * @brief UUID of 'Discovery' config. */ #define CONFIG_UUID_DISCOVERY "8715c877-47a0-438d-98a3-27c7a6ab2196" /** * @brief UUID of 'Host Discovery' config. */ #define CONFIG_UUID_HOST_DISCOVERY "2d3f051c-55ba-11e3-bf43-406186ea4fc5" /** * @brief UUID of 'System Discovery' config. */ #define CONFIG_UUID_SYSTEM_DISCOVERY "bbca7412-a950-11e3-9109-406186ea4fc5" /** * @brief Location of a constituent of a trashcan resource. */ #define LOCATION_TABLE 0 /** * @brief Location of a constituent of a trashcan resource. */ #define LOCATION_TRASH 1 /** * @brief UUID of 'All' NVT selector. */ #define MANAGE_NVT_SELECTOR_UUID_ALL "54b45713-d4f4-4435-b20d-304c175ed8c5" /** * @brief UUID of 'Discovery' NVT selector. */ #define MANAGE_NVT_SELECTOR_UUID_DISCOVERY "0d9a2738-8fe2-4e22-8f26-bb886179e759" /** * @brief UUID of 'Host Discovery' NVT selector. */ #define MANAGE_NVT_SELECTOR_UUID_HOST_DISCOVERY \ "f5f80744-55c7-11e3-8dc6-406186ea4fc5" /** * @brief UUID of 'System Discovery' NVT selector. */ #define MANAGE_NVT_SELECTOR_UUID_SYSTEM_DISCOVERY \ "07045d1c-a951-11e3-8da7-406186ea4fc5" /** * @brief Predefined role UUID. */ #define PERMISSION_UUID_ADMIN_EVERYTHING "b3b56a8c-c2fd-11e2-a135-406186ea4fc5" /** * @brief Predefined role UUID. */ #define PERMISSION_UUID_SUPER_ADMIN_EVERYTHING "a9801074-6fe2-11e4-9d81-406186ea4fc5" /** * @brief UUID of 'OpenVAS Default' port list. */ #define PORT_LIST_UUID_DEFAULT "c7e03b6c-3bbe-11e1-a057-406186ea4fc5" /** * @brief UUID of 'All TCP' port list. */ #define PORT_LIST_UUID_ALL_TCP "fd591a34-56fd-11e1-9f27-406186ea4fc5" /** * @brief UUID of 'All TCP and Nmap 5.51 Top 100 UDP' port list. */ #define PORT_LIST_UUID_ALL_TCP_NMAP_5_51_TOP_100 "730ef368-57e2-11e1-a90f-406186ea4fc5" /** * @brief UUID of 'All TCP and Nmap 5.51 Top 1000 UDP' port list. */ #define PORT_LIST_UUID_ALL_TCP_NMAP_5_51_TOP_1000 "9ddce1ae-57e7-11e1-b13c-406186ea4fc5" /** * @brief UUID of 'All privileged TCP' port list. */ #define PORT_LIST_UUID_ALL_PRIV_TCP "492b72f4-56fe-11e1-98a7-406186ea4fc5" /** * @brief UUID of 'All privileged TCP and UDP' port list. */ #define PORT_LIST_UUID_ALL_PRIV_TCP_UDP "5f2029f6-56fe-11e1-bb94-406186ea4fc5" /** * @brief UUID of 'All privileged TCP and UDP' port list. */ #define PORT_LIST_UUID_ALL_IANA_TCP_2012 "33d0cd82-57c6-11e1-8ed1-406186ea4fc5" /** * @brief UUID of 'All privileged TCP and UDP' port list. */ #define PORT_LIST_UUID_ALL_IANA_TCP_UDP_2012 "4a4717fe-57d2-11e1-9a26-406186ea4fc5" /** * @brief UUID of 'Nmap 5.51 top 2000 TCP top 100 UDP' port list. */ #define PORT_LIST_UUID_NMAP_5_51_TOP_2000_TOP_100 "ab33f6b0-57f8-11e1-96f5-406186ea4fc5" /** * @brief Predefined role UUID. */ #define ROLE_UUID_ADMIN "7a8cb5b4-b74d-11e2-8187-406186ea4fc5" /** * @brief Predefined role UUID. */ #define ROLE_UUID_GUEST "cc9cac5e-39a3-11e4-abae-406186ea4fc5" /** * @brief Predefined role UUID. */ #define ROLE_UUID_INFO "5f8fd16c-c550-11e3-b6ab-406186ea4fc5" /** * @brief Predefined role UUID. */ #define ROLE_UUID_MONITOR "12cdb536-480b-11e4-8552-406186ea4fc5" /** * @brief Predefined role UUID. */ #define ROLE_UUID_USER "8d453140-b74d-11e2-b0be-406186ea4fc5" /** * @brief Predefined role UUID. */ #define ROLE_UUID_SUPER_ADMIN "9c5a6ec6-6fe2-11e4-8cb6-406186ea4fc5" /** * @brief Predefined role UUID. */ #define ROLE_UUID_OBSERVER "87a7ebce-b74d-11e2-a81f-406186ea4fc5" /** * @brief UUID of 'Localhost' target. */ #define TARGET_UUID_LOCALHOST "b493b7a8-7489-11df-a3ec-002264764cea" /** * @brief UUID of 'OpenVAS Default' scanner. */ #define SCANNER_UUID_DEFAULT "08b69003-5fc2-4037-a479-93b440211c73" /** * @brief Trust constant for error. */ #define TRUST_ERROR 0 /** * @brief Trust constant for yes. */ #define TRUST_YES 1 /** * @brief Trust constant for no. */ #define TRUST_NO 2 /** * @brief Trust constant for unknown. */ #define TRUST_UNKNOWN 3 /** * @brief Number of milliseconds between timevals a and b (performs a-b). */ #define TIMEVAL_SUBTRACT_MS(a,b) ((((a).tv_sec - (b).tv_sec) * 1000) + \ ((a).tv_usec - (b).tv_usec) / 1000) /* Variables */ extern gchar *task_db_name; /* Function prototypes */ typedef long long int rowid_t; int manage_db_empty (); void manage_transaction_start (); void manage_transaction_stop (gboolean); gchar *tag_value (const gchar *, const gchar *); void trim_report (report_t); int delete_report_internal (report_t); int set_report_scan_run_status (report_t, task_status_t); int set_report_slave_progress (report_t, int); int update_from_slave (task_t, entity_t, entity_t *, int *); void set_report_slave_task_uuid (report_t, const char *); int set_task_requested (task_t, task_status_t *); void init_task_file_iterator (iterator_t *, task_t, const char *); const char *task_file_iterator_name (iterator_t *); const char *task_file_iterator_content (iterator_t *); void set_task_schedule_next_time (task_t, time_t); void set_task_schedule_next_time_uuid (const gchar *, time_t); void init_otp_pref_iterator (iterator_t *, config_t, const char *); const char *otp_pref_iterator_name (iterator_t *); const char *otp_pref_iterator_value (iterator_t *); port_list_t target_port_list (target_t); char* target_port_range (target_t); lsc_credential_t target_ssh_lsc_credential (target_t); lsc_credential_t target_smb_lsc_credential (target_t); lsc_credential_t target_esxi_lsc_credential (target_t); const char *lsc_credential_iterator_password (iterator_t *); int create_current_report (task_t, char **, task_status_t); char *alert_data (alert_t, const char *, const char *); int init_task_schedule_iterator (iterator_t *); void cleanup_task_schedule_iterator (iterator_t *); task_t task_schedule_iterator_task (iterator_t *); const char *task_schedule_iterator_task_uuid (iterator_t *); schedule_t task_schedule_iterator_schedule (iterator_t *); time_t task_schedule_iterator_next_time (iterator_t *); time_t task_schedule_iterator_period (iterator_t *); time_t task_schedule_iterator_period_months (iterator_t *); time_t task_schedule_iterator_duration (iterator_t *); gboolean task_schedule_iterator_start_due (iterator_t *); gboolean task_schedule_iterator_stop_due (iterator_t *); time_t task_schedule_iterator_first_time (iterator_t *); const char *task_schedule_iterator_owner_uuid (iterator_t *); const char *task_schedule_iterator_owner_name (iterator_t *); const char *task_schedule_iterator_timezone (iterator_t *); time_t task_schedule_iterator_initial_offset (iterator_t *); int set_task_schedule_uuid (const gchar*, schedule_t, int); void clear_duration_schedules (task_t); void update_duration_schedule_periods (task_t); void reinit_manage_process (); int manage_update_nvti_cache (); int manage_report_host_details (report_t, const char *, entity_t); int manage_report_host_detail (report_t, const char *, const char *); const char *run_status_name_internal (task_status_t); gchar *get_ovaldef_short_filename (char*); void update_config_cache_init (const char *); alive_test_t target_alive_tests (target_t); void manage_session_init (const char *); int valid_omp_command (const char *); void check_generate_scripts (); void auto_delete_reports (); void set_report_scheduled (report_t); #endif /* not OPENVAS_MANAGER_MANAGE_SQL_H */ openvas-manager-6.0.9/src/manage_ranges_iana_tcp_2012.c000644 001751 001751 00000072713 12557600615 023726 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Manage library: Ranges for IANA TCP 2012. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2009,2010 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #include "manage.h" #include "sql.h" /** * @brief Insert a port range. */ #define RANGE(type, start, end) \ sql ("INSERT INTO port_ranges" \ " (uuid, port_list, type, start, \"end\", comment, exclude)" \ " VALUES" \ " (make_uuid (), %llu, %i," \ " '" G_STRINGIFY (start) "'," \ " '" G_STRINGIFY (end) "'," \ " '', 0)", \ list, \ type) /** * @brief Make port ranges for IANA TCP 2012. * * Caller must lock the db. * * @param[in] list Port list. */ void make_port_ranges_iana_tcp_2012 (port_list_t list) { sql_begin_immediate (); RANGE (PORT_PROTOCOL_TCP, 1, 80); RANGE (PORT_PROTOCOL_TCP, 82, 113); RANGE (PORT_PROTOCOL_TCP, 115, 224); RANGE (PORT_PROTOCOL_TCP, 242, 248); RANGE (PORT_PROTOCOL_TCP, 256, 257); RANGE (PORT_PROTOCOL_TCP, 259, 269); RANGE (PORT_PROTOCOL_TCP, 280, 284); RANGE (PORT_PROTOCOL_TCP, 286, 287); RANGE (PORT_PROTOCOL_TCP, 308, 322); RANGE (PORT_PROTOCOL_TCP, 333, 333); RANGE (PORT_PROTOCOL_TCP, 344, 584); RANGE (PORT_PROTOCOL_TCP, 586, 658); RANGE (PORT_PROTOCOL_TCP, 660, 702); RANGE (PORT_PROTOCOL_TCP, 704, 707); RANGE (PORT_PROTOCOL_TCP, 709, 715); RANGE (PORT_PROTOCOL_TCP, 729, 731); RANGE (PORT_PROTOCOL_TCP, 741, 742); RANGE (PORT_PROTOCOL_TCP, 744, 744); RANGE (PORT_PROTOCOL_TCP, 747, 754); RANGE (PORT_PROTOCOL_TCP, 758, 765); RANGE (PORT_PROTOCOL_TCP, 767, 767); RANGE (PORT_PROTOCOL_TCP, 769, 777); RANGE (PORT_PROTOCOL_TCP, 780, 780); RANGE (PORT_PROTOCOL_TCP, 800, 801); RANGE (PORT_PROTOCOL_TCP, 810, 810); RANGE (PORT_PROTOCOL_TCP, 828, 833); RANGE (PORT_PROTOCOL_TCP, 847, 848); RANGE (PORT_PROTOCOL_TCP, 860, 862); RANGE (PORT_PROTOCOL_TCP, 873, 873); RANGE (PORT_PROTOCOL_TCP, 886, 888); RANGE (PORT_PROTOCOL_TCP, 900, 903); RANGE (PORT_PROTOCOL_TCP, 910, 913); RANGE (PORT_PROTOCOL_TCP, 989, 993); RANGE (PORT_PROTOCOL_TCP, 995, 1000); RANGE (PORT_PROTOCOL_TCP, 1010, 1010); RANGE (PORT_PROTOCOL_TCP, 1021, 1022); RANGE (PORT_PROTOCOL_TCP, 1025, 1027); RANGE (PORT_PROTOCOL_TCP, 1029, 1108); RANGE (PORT_PROTOCOL_TCP, 1110, 1490); RANGE (PORT_PROTOCOL_TCP, 1492, 1527); RANGE (PORT_PROTOCOL_TCP, 1529, 1782); RANGE (PORT_PROTOCOL_TCP, 1784, 2193); RANGE (PORT_PROTOCOL_TCP, 2197, 2258); RANGE (PORT_PROTOCOL_TCP, 2260, 2368); RANGE (PORT_PROTOCOL_TCP, 2370, 2374); RANGE (PORT_PROTOCOL_TCP, 2381, 2425); RANGE (PORT_PROTOCOL_TCP, 2427, 2681); RANGE (PORT_PROTOCOL_TCP, 2683, 2793); RANGE (PORT_PROTOCOL_TCP, 2795, 2824); RANGE (PORT_PROTOCOL_TCP, 2826, 2872); RANGE (PORT_PROTOCOL_TCP, 2874, 2924); RANGE (PORT_PROTOCOL_TCP, 2926, 3000); RANGE (PORT_PROTOCOL_TCP, 3002, 3091); RANGE (PORT_PROTOCOL_TCP, 3093, 3096); RANGE (PORT_PROTOCOL_TCP, 3098, 3120); RANGE (PORT_PROTOCOL_TCP, 3122, 3125); RANGE (PORT_PROTOCOL_TCP, 3127, 3299); RANGE (PORT_PROTOCOL_TCP, 3302, 3321); RANGE (PORT_PROTOCOL_TCP, 3326, 3366); RANGE (PORT_PROTOCOL_TCP, 3372, 3402); RANGE (PORT_PROTOCOL_TCP, 3405, 3545); RANGE (PORT_PROTOCOL_TCP, 3547, 3692); RANGE (PORT_PROTOCOL_TCP, 3695, 3765); RANGE (PORT_PROTOCOL_TCP, 3767, 3993); RANGE (PORT_PROTOCOL_TCP, 3995, 4047); RANGE (PORT_PROTOCOL_TCP, 4049, 4076); RANGE (PORT_PROTOCOL_TCP, 4078, 4083); RANGE (PORT_PROTOCOL_TCP, 4085, 4085); RANGE (PORT_PROTOCOL_TCP, 4087, 4119); RANGE (PORT_PROTOCOL_TCP, 4121, 4143); RANGE (PORT_PROTOCOL_TCP, 4145, 4172); RANGE (PORT_PROTOCOL_TCP, 4174, 4190); RANGE (PORT_PROTOCOL_TCP, 4192, 4193); RANGE (PORT_PROTOCOL_TCP, 4199, 4199); RANGE (PORT_PROTOCOL_TCP, 4300, 4313); RANGE (PORT_PROTOCOL_TCP, 4320, 4329); RANGE (PORT_PROTOCOL_TCP, 4340, 4360); RANGE (PORT_PROTOCOL_TCP, 4368, 4379); RANGE (PORT_PROTOCOL_TCP, 4389, 4393); RANGE (PORT_PROTOCOL_TCP, 4395, 4396); RANGE (PORT_PROTOCOL_TCP, 4400, 4410); RANGE (PORT_PROTOCOL_TCP, 4425, 4431); RANGE (PORT_PROTOCOL_TCP, 4433, 4433); RANGE (PORT_PROTOCOL_TCP, 4442, 4458); RANGE (PORT_PROTOCOL_TCP, 4484, 4488); RANGE (PORT_PROTOCOL_TCP, 4500, 4500); RANGE (PORT_PROTOCOL_TCP, 4535, 4538); RANGE (PORT_PROTOCOL_TCP, 4545, 4556); RANGE (PORT_PROTOCOL_TCP, 4559, 4559); RANGE (PORT_PROTOCOL_TCP, 4566, 4569); RANGE (PORT_PROTOCOL_TCP, 4590, 4591); RANGE (PORT_PROTOCOL_TCP, 4593, 4603); RANGE (PORT_PROTOCOL_TCP, 4658, 4692); RANGE (PORT_PROTOCOL_TCP, 4700, 4704); RANGE (PORT_PROTOCOL_TCP, 4725, 4725); RANGE (PORT_PROTOCOL_TCP, 4727, 4728); RANGE (PORT_PROTOCOL_TCP, 4730, 4731); RANGE (PORT_PROTOCOL_TCP, 4733, 4733); RANGE (PORT_PROTOCOL_TCP, 4737, 4745); RANGE (PORT_PROTOCOL_TCP, 4749, 4752); RANGE (PORT_PROTOCOL_TCP, 4784, 4784); RANGE (PORT_PROTOCOL_TCP, 4786, 4788); RANGE (PORT_PROTOCOL_TCP, 4800, 4803); RANGE (PORT_PROTOCOL_TCP, 4827, 4827); RANGE (PORT_PROTOCOL_TCP, 4837, 4851); RANGE (PORT_PROTOCOL_TCP, 4867, 4871); RANGE (PORT_PROTOCOL_TCP, 4876, 4877); RANGE (PORT_PROTOCOL_TCP, 4879, 4880); RANGE (PORT_PROTOCOL_TCP, 4883, 4885); RANGE (PORT_PROTOCOL_TCP, 4894, 4894); RANGE (PORT_PROTOCOL_TCP, 4899, 4902); RANGE (PORT_PROTOCOL_TCP, 4912, 4915); RANGE (PORT_PROTOCOL_TCP, 4940, 4942); RANGE (PORT_PROTOCOL_TCP, 4949, 4953); RANGE (PORT_PROTOCOL_TCP, 4969, 4970); RANGE (PORT_PROTOCOL_TCP, 4984, 4991); RANGE (PORT_PROTOCOL_TCP, 4999, 5013); RANGE (PORT_PROTOCOL_TCP, 5015, 5015); RANGE (PORT_PROTOCOL_TCP, 5020, 5030); RANGE (PORT_PROTOCOL_TCP, 5032, 5032); RANGE (PORT_PROTOCOL_TCP, 5042, 5045); RANGE (PORT_PROTOCOL_TCP, 5048, 5057); RANGE (PORT_PROTOCOL_TCP, 5059, 5074); RANGE (PORT_PROTOCOL_TCP, 5080, 5086); RANGE (PORT_PROTOCOL_TCP, 5093, 5094); RANGE (PORT_PROTOCOL_TCP, 5099, 5103); RANGE (PORT_PROTOCOL_TCP, 5111, 5112); RANGE (PORT_PROTOCOL_TCP, 5114, 5115); RANGE (PORT_PROTOCOL_TCP, 5117, 5117); RANGE (PORT_PROTOCOL_TCP, 5133, 5135); RANGE (PORT_PROTOCOL_TCP, 5137, 5137); RANGE (PORT_PROTOCOL_TCP, 5145, 5146); RANGE (PORT_PROTOCOL_TCP, 5150, 5157); RANGE (PORT_PROTOCOL_TCP, 5161, 5168); RANGE (PORT_PROTOCOL_TCP, 5190, 5194); RANGE (PORT_PROTOCOL_TCP, 5200, 5203); RANGE (PORT_PROTOCOL_TCP, 5221, 5228); RANGE (PORT_PROTOCOL_TCP, 5232, 5237); RANGE (PORT_PROTOCOL_TCP, 5245, 5245); RANGE (PORT_PROTOCOL_TCP, 5248, 5253); RANGE (PORT_PROTOCOL_TCP, 5264, 5265); RANGE (PORT_PROTOCOL_TCP, 5269, 5272); RANGE (PORT_PROTOCOL_TCP, 5280, 5282); RANGE (PORT_PROTOCOL_TCP, 5298, 5310); RANGE (PORT_PROTOCOL_TCP, 5312, 5318); RANGE (PORT_PROTOCOL_TCP, 5320, 5321); RANGE (PORT_PROTOCOL_TCP, 5343, 5344); RANGE (PORT_PROTOCOL_TCP, 5349, 5363); RANGE (PORT_PROTOCOL_TCP, 5397, 5435); RANGE (PORT_PROTOCOL_TCP, 5443, 5443); RANGE (PORT_PROTOCOL_TCP, 5453, 5456); RANGE (PORT_PROTOCOL_TCP, 5461, 5465); RANGE (PORT_PROTOCOL_TCP, 5500, 5506); RANGE (PORT_PROTOCOL_TCP, 5553, 5557); RANGE (PORT_PROTOCOL_TCP, 5566, 5568); RANGE (PORT_PROTOCOL_TCP, 5573, 5575); RANGE (PORT_PROTOCOL_TCP, 5579, 5585); RANGE (PORT_PROTOCOL_TCP, 5597, 5605); RANGE (PORT_PROTOCOL_TCP, 5627, 5638); RANGE (PORT_PROTOCOL_TCP, 5646, 5646); RANGE (PORT_PROTOCOL_TCP, 5671, 5681); RANGE (PORT_PROTOCOL_TCP, 5688, 5689); RANGE (PORT_PROTOCOL_TCP, 5693, 5693); RANGE (PORT_PROTOCOL_TCP, 5696, 5696); RANGE (PORT_PROTOCOL_TCP, 5713, 5730); RANGE (PORT_PROTOCOL_TCP, 5741, 5748); RANGE (PORT_PROTOCOL_TCP, 5750, 5750); RANGE (PORT_PROTOCOL_TCP, 5755, 5755); RANGE (PORT_PROTOCOL_TCP, 5757, 5757); RANGE (PORT_PROTOCOL_TCP, 5766, 5771); RANGE (PORT_PROTOCOL_TCP, 5777, 5777); RANGE (PORT_PROTOCOL_TCP, 5780, 5783); RANGE (PORT_PROTOCOL_TCP, 5785, 5785); RANGE (PORT_PROTOCOL_TCP, 5793, 5793); RANGE (PORT_PROTOCOL_TCP, 5813, 5814); RANGE (PORT_PROTOCOL_TCP, 5842, 5842); RANGE (PORT_PROTOCOL_TCP, 5859, 5859); RANGE (PORT_PROTOCOL_TCP, 5863, 5863); RANGE (PORT_PROTOCOL_TCP, 5883, 5883); RANGE (PORT_PROTOCOL_TCP, 5900, 5900); RANGE (PORT_PROTOCOL_TCP, 5910, 5913); RANGE (PORT_PROTOCOL_TCP, 5963, 5963); RANGE (PORT_PROTOCOL_TCP, 5968, 5969); RANGE (PORT_PROTOCOL_TCP, 5984, 5992); RANGE (PORT_PROTOCOL_TCP, 5999, 6066); RANGE (PORT_PROTOCOL_TCP, 6068, 6076); RANGE (PORT_PROTOCOL_TCP, 6084, 6087); RANGE (PORT_PROTOCOL_TCP, 6099, 6117); RANGE (PORT_PROTOCOL_TCP, 6121, 6124); RANGE (PORT_PROTOCOL_TCP, 6133, 6133); RANGE (PORT_PROTOCOL_TCP, 6140, 6149); RANGE (PORT_PROTOCOL_TCP, 6159, 6163); RANGE (PORT_PROTOCOL_TCP, 6200, 6200); RANGE (PORT_PROTOCOL_TCP, 6222, 6222); RANGE (PORT_PROTOCOL_TCP, 6241, 6244); RANGE (PORT_PROTOCOL_TCP, 6251, 6253); RANGE (PORT_PROTOCOL_TCP, 6267, 6269); RANGE (PORT_PROTOCOL_TCP, 6300, 6301); RANGE (PORT_PROTOCOL_TCP, 6306, 6306); RANGE (PORT_PROTOCOL_TCP, 6315, 6316); RANGE (PORT_PROTOCOL_TCP, 6320, 6322); RANGE (PORT_PROTOCOL_TCP, 6324, 6324); RANGE (PORT_PROTOCOL_TCP, 6343, 6343); RANGE (PORT_PROTOCOL_TCP, 6346, 6347); RANGE (PORT_PROTOCOL_TCP, 6350, 6350); RANGE (PORT_PROTOCOL_TCP, 6355, 6355); RANGE (PORT_PROTOCOL_TCP, 6360, 6360); RANGE (PORT_PROTOCOL_TCP, 6370, 6370); RANGE (PORT_PROTOCOL_TCP, 6382, 6382); RANGE (PORT_PROTOCOL_TCP, 6389, 6390); RANGE (PORT_PROTOCOL_TCP, 6417, 6421); RANGE (PORT_PROTOCOL_TCP, 6432, 6432); RANGE (PORT_PROTOCOL_TCP, 6443, 6446); RANGE (PORT_PROTOCOL_TCP, 6455, 6455); RANGE (PORT_PROTOCOL_TCP, 6471, 6471); RANGE (PORT_PROTOCOL_TCP, 6480, 6489); RANGE (PORT_PROTOCOL_TCP, 6500, 6503); RANGE (PORT_PROTOCOL_TCP, 6505, 6510); RANGE (PORT_PROTOCOL_TCP, 6513, 6515); RANGE (PORT_PROTOCOL_TCP, 6543, 6544); RANGE (PORT_PROTOCOL_TCP, 6547, 6551); RANGE (PORT_PROTOCOL_TCP, 6558, 6558); RANGE (PORT_PROTOCOL_TCP, 6566, 6566); RANGE (PORT_PROTOCOL_TCP, 6568, 6568); RANGE (PORT_PROTOCOL_TCP, 6579, 6583); RANGE (PORT_PROTOCOL_TCP, 6600, 6602); RANGE (PORT_PROTOCOL_TCP, 6619, 6628); RANGE (PORT_PROTOCOL_TCP, 6632, 6632); RANGE (PORT_PROTOCOL_TCP, 6655, 6656); RANGE (PORT_PROTOCOL_TCP, 6665, 6673); RANGE (PORT_PROTOCOL_TCP, 6678, 6679); RANGE (PORT_PROTOCOL_TCP, 6687, 6689); RANGE (PORT_PROTOCOL_TCP, 6701, 6703); RANGE (PORT_PROTOCOL_TCP, 6714, 6715); RANGE (PORT_PROTOCOL_TCP, 6767, 6771); RANGE (PORT_PROTOCOL_TCP, 6785, 6791); RANGE (PORT_PROTOCOL_TCP, 6801, 6801); RANGE (PORT_PROTOCOL_TCP, 6817, 6817); RANGE (PORT_PROTOCOL_TCP, 6831, 6831); RANGE (PORT_PROTOCOL_TCP, 6841, 6842); RANGE (PORT_PROTOCOL_TCP, 6850, 6850); RANGE (PORT_PROTOCOL_TCP, 6868, 6868); RANGE (PORT_PROTOCOL_TCP, 6888, 6888); RANGE (PORT_PROTOCOL_TCP, 6901, 6901); RANGE (PORT_PROTOCOL_TCP, 6935, 6936); RANGE (PORT_PROTOCOL_TCP, 6946, 6946); RANGE (PORT_PROTOCOL_TCP, 6951, 6951); RANGE (PORT_PROTOCOL_TCP, 6961, 6966); RANGE (PORT_PROTOCOL_TCP, 6969, 6969); RANGE (PORT_PROTOCOL_TCP, 6997, 7015); RANGE (PORT_PROTOCOL_TCP, 7018, 7025); RANGE (PORT_PROTOCOL_TCP, 7030, 7030); RANGE (PORT_PROTOCOL_TCP, 7070, 7071); RANGE (PORT_PROTOCOL_TCP, 7080, 7080); RANGE (PORT_PROTOCOL_TCP, 7099, 7101); RANGE (PORT_PROTOCOL_TCP, 7121, 7121); RANGE (PORT_PROTOCOL_TCP, 7128, 7129); RANGE (PORT_PROTOCOL_TCP, 7161, 7171); RANGE (PORT_PROTOCOL_TCP, 7173, 7174); RANGE (PORT_PROTOCOL_TCP, 7200, 7201); RANGE (PORT_PROTOCOL_TCP, 7227, 7229); RANGE (PORT_PROTOCOL_TCP, 7237, 7237); RANGE (PORT_PROTOCOL_TCP, 7262, 7262); RANGE (PORT_PROTOCOL_TCP, 7272, 7283); RANGE (PORT_PROTOCOL_TCP, 7365, 7365); RANGE (PORT_PROTOCOL_TCP, 7391, 7395); RANGE (PORT_PROTOCOL_TCP, 7397, 7397); RANGE (PORT_PROTOCOL_TCP, 7400, 7402); RANGE (PORT_PROTOCOL_TCP, 7410, 7410); RANGE (PORT_PROTOCOL_TCP, 7421, 7421); RANGE (PORT_PROTOCOL_TCP, 7426, 7431); RANGE (PORT_PROTOCOL_TCP, 7437, 7437); RANGE (PORT_PROTOCOL_TCP, 7443, 7443); RANGE (PORT_PROTOCOL_TCP, 7473, 7473); RANGE (PORT_PROTOCOL_TCP, 7491, 7491); RANGE (PORT_PROTOCOL_TCP, 7500, 7501); RANGE (PORT_PROTOCOL_TCP, 7508, 7511); RANGE (PORT_PROTOCOL_TCP, 7542, 7549); RANGE (PORT_PROTOCOL_TCP, 7560, 7560); RANGE (PORT_PROTOCOL_TCP, 7563, 7563); RANGE (PORT_PROTOCOL_TCP, 7566, 7566); RANGE (PORT_PROTOCOL_TCP, 7569, 7570); RANGE (PORT_PROTOCOL_TCP, 7588, 7588); RANGE (PORT_PROTOCOL_TCP, 7624, 7624); RANGE (PORT_PROTOCOL_TCP, 7626, 7631); RANGE (PORT_PROTOCOL_TCP, 7633, 7633); RANGE (PORT_PROTOCOL_TCP, 7648, 7648); RANGE (PORT_PROTOCOL_TCP, 7672, 7677); RANGE (PORT_PROTOCOL_TCP, 7680, 7680); RANGE (PORT_PROTOCOL_TCP, 7689, 7689); RANGE (PORT_PROTOCOL_TCP, 7697, 7697); RANGE (PORT_PROTOCOL_TCP, 7700, 7700); RANGE (PORT_PROTOCOL_TCP, 7707, 7708); RANGE (PORT_PROTOCOL_TCP, 7720, 7720); RANGE (PORT_PROTOCOL_TCP, 7724, 7727); RANGE (PORT_PROTOCOL_TCP, 7734, 7734); RANGE (PORT_PROTOCOL_TCP, 7738, 7738); RANGE (PORT_PROTOCOL_TCP, 7741, 7744); RANGE (PORT_PROTOCOL_TCP, 7747, 7747); RANGE (PORT_PROTOCOL_TCP, 7777, 7779); RANGE (PORT_PROTOCOL_TCP, 7781, 7781); RANGE (PORT_PROTOCOL_TCP, 7786, 7787); RANGE (PORT_PROTOCOL_TCP, 7789, 7789); RANGE (PORT_PROTOCOL_TCP, 7794, 7794); RANGE (PORT_PROTOCOL_TCP, 7797, 7801); RANGE (PORT_PROTOCOL_TCP, 7810, 7810); RANGE (PORT_PROTOCOL_TCP, 7845, 7846); RANGE (PORT_PROTOCOL_TCP, 7869, 7871); RANGE (PORT_PROTOCOL_TCP, 7880, 7880); RANGE (PORT_PROTOCOL_TCP, 7887, 7887); RANGE (PORT_PROTOCOL_TCP, 7900, 7903); RANGE (PORT_PROTOCOL_TCP, 7913, 7913); RANGE (PORT_PROTOCOL_TCP, 7932, 7933); RANGE (PORT_PROTOCOL_TCP, 7967, 7967); RANGE (PORT_PROTOCOL_TCP, 7979, 7982); RANGE (PORT_PROTOCOL_TCP, 7997, 7997); RANGE (PORT_PROTOCOL_TCP, 7999, 8003); RANGE (PORT_PROTOCOL_TCP, 8005, 8005); RANGE (PORT_PROTOCOL_TCP, 8008, 8008); RANGE (PORT_PROTOCOL_TCP, 8019, 8022); RANGE (PORT_PROTOCOL_TCP, 8025, 8026); RANGE (PORT_PROTOCOL_TCP, 8032, 8034); RANGE (PORT_PROTOCOL_TCP, 8040, 8040); RANGE (PORT_PROTOCOL_TCP, 8042, 8044); RANGE (PORT_PROTOCOL_TCP, 8051, 8059); RANGE (PORT_PROTOCOL_TCP, 8074, 8074); RANGE (PORT_PROTOCOL_TCP, 8080, 8083); RANGE (PORT_PROTOCOL_TCP, 8086, 8088); RANGE (PORT_PROTOCOL_TCP, 8091, 8091); RANGE (PORT_PROTOCOL_TCP, 8097, 8097); RANGE (PORT_PROTOCOL_TCP, 8100, 8101); RANGE (PORT_PROTOCOL_TCP, 8115, 8116); RANGE (PORT_PROTOCOL_TCP, 8118, 8118); RANGE (PORT_PROTOCOL_TCP, 8121, 8122); RANGE (PORT_PROTOCOL_TCP, 8128, 8132); RANGE (PORT_PROTOCOL_TCP, 8148, 8148); RANGE (PORT_PROTOCOL_TCP, 8160, 8161); RANGE (PORT_PROTOCOL_TCP, 8181, 8184); RANGE (PORT_PROTOCOL_TCP, 8192, 8192); RANGE (PORT_PROTOCOL_TCP, 8194, 8195); RANGE (PORT_PROTOCOL_TCP, 8199, 8201); RANGE (PORT_PROTOCOL_TCP, 8204, 8208); RANGE (PORT_PROTOCOL_TCP, 8230, 8230); RANGE (PORT_PROTOCOL_TCP, 8243, 8243); RANGE (PORT_PROTOCOL_TCP, 8276, 8276); RANGE (PORT_PROTOCOL_TCP, 8280, 8280); RANGE (PORT_PROTOCOL_TCP, 8292, 8294); RANGE (PORT_PROTOCOL_TCP, 8300, 8301); RANGE (PORT_PROTOCOL_TCP, 8320, 8321); RANGE (PORT_PROTOCOL_TCP, 8351, 8351); RANGE (PORT_PROTOCOL_TCP, 8376, 8380); RANGE (PORT_PROTOCOL_TCP, 8383, 8383); RANGE (PORT_PROTOCOL_TCP, 8400, 8405); RANGE (PORT_PROTOCOL_TCP, 8416, 8417); RANGE (PORT_PROTOCOL_TCP, 8442, 8444); RANGE (PORT_PROTOCOL_TCP, 8450, 8450); RANGE (PORT_PROTOCOL_TCP, 8470, 8474); RANGE (PORT_PROTOCOL_TCP, 8500, 8501); RANGE (PORT_PROTOCOL_TCP, 8554, 8555); RANGE (PORT_PROTOCOL_TCP, 8567, 8567); RANGE (PORT_PROTOCOL_TCP, 8600, 8600); RANGE (PORT_PROTOCOL_TCP, 8610, 8615); RANGE (PORT_PROTOCOL_TCP, 8686, 8686); RANGE (PORT_PROTOCOL_TCP, 8699, 8699); RANGE (PORT_PROTOCOL_TCP, 8733, 8733); RANGE (PORT_PROTOCOL_TCP, 8763, 8765); RANGE (PORT_PROTOCOL_TCP, 8770, 8770); RANGE (PORT_PROTOCOL_TCP, 8786, 8787); RANGE (PORT_PROTOCOL_TCP, 8793, 8793); RANGE (PORT_PROTOCOL_TCP, 8800, 8800); RANGE (PORT_PROTOCOL_TCP, 8804, 8804); RANGE (PORT_PROTOCOL_TCP, 8873, 8873); RANGE (PORT_PROTOCOL_TCP, 8880, 8880); RANGE (PORT_PROTOCOL_TCP, 8883, 8883); RANGE (PORT_PROTOCOL_TCP, 8888, 8894); RANGE (PORT_PROTOCOL_TCP, 8899, 8901); RANGE (PORT_PROTOCOL_TCP, 8910, 8913); RANGE (PORT_PROTOCOL_TCP, 8937, 8937); RANGE (PORT_PROTOCOL_TCP, 8953, 8954); RANGE (PORT_PROTOCOL_TCP, 8989, 8991); RANGE (PORT_PROTOCOL_TCP, 8999, 9002); RANGE (PORT_PROTOCOL_TCP, 9008, 9010); RANGE (PORT_PROTOCOL_TCP, 9020, 9026); RANGE (PORT_PROTOCOL_TCP, 9050, 9051); RANGE (PORT_PROTOCOL_TCP, 9080, 9080); RANGE (PORT_PROTOCOL_TCP, 9083, 9092); RANGE (PORT_PROTOCOL_TCP, 9100, 9107); RANGE (PORT_PROTOCOL_TCP, 9119, 9119); RANGE (PORT_PROTOCOL_TCP, 9131, 9131); RANGE (PORT_PROTOCOL_TCP, 9160, 9164); RANGE (PORT_PROTOCOL_TCP, 9191, 9191); RANGE (PORT_PROTOCOL_TCP, 9200, 9217); RANGE (PORT_PROTOCOL_TCP, 9222, 9222); RANGE (PORT_PROTOCOL_TCP, 9255, 9255); RANGE (PORT_PROTOCOL_TCP, 9278, 9285); RANGE (PORT_PROTOCOL_TCP, 9287, 9287); RANGE (PORT_PROTOCOL_TCP, 9292, 9295); RANGE (PORT_PROTOCOL_TCP, 9300, 9300); RANGE (PORT_PROTOCOL_TCP, 9306, 9306); RANGE (PORT_PROTOCOL_TCP, 9312, 9312); RANGE (PORT_PROTOCOL_TCP, 9318, 9318); RANGE (PORT_PROTOCOL_TCP, 9321, 9321); RANGE (PORT_PROTOCOL_TCP, 9343, 9344); RANGE (PORT_PROTOCOL_TCP, 9346, 9346); RANGE (PORT_PROTOCOL_TCP, 9374, 9374); RANGE (PORT_PROTOCOL_TCP, 9380, 9380); RANGE (PORT_PROTOCOL_TCP, 9387, 9390); RANGE (PORT_PROTOCOL_TCP, 9396, 9397); RANGE (PORT_PROTOCOL_TCP, 9400, 9402); RANGE (PORT_PROTOCOL_TCP, 9418, 9418); RANGE (PORT_PROTOCOL_TCP, 9443, 9445); RANGE (PORT_PROTOCOL_TCP, 9450, 9450); RANGE (PORT_PROTOCOL_TCP, 9500, 9500); RANGE (PORT_PROTOCOL_TCP, 9535, 9536); RANGE (PORT_PROTOCOL_TCP, 9555, 9555); RANGE (PORT_PROTOCOL_TCP, 9592, 9600); RANGE (PORT_PROTOCOL_TCP, 9612, 9612); RANGE (PORT_PROTOCOL_TCP, 9614, 9614); RANGE (PORT_PROTOCOL_TCP, 9616, 9618); RANGE (PORT_PROTOCOL_TCP, 9628, 9631); RANGE (PORT_PROTOCOL_TCP, 9640, 9640); RANGE (PORT_PROTOCOL_TCP, 9667, 9668); RANGE (PORT_PROTOCOL_TCP, 9694, 9695); RANGE (PORT_PROTOCOL_TCP, 9700, 9700); RANGE (PORT_PROTOCOL_TCP, 9747, 9747); RANGE (PORT_PROTOCOL_TCP, 9750, 9750); RANGE (PORT_PROTOCOL_TCP, 9753, 9753); RANGE (PORT_PROTOCOL_TCP, 9762, 9762); RANGE (PORT_PROTOCOL_TCP, 9800, 9802); RANGE (PORT_PROTOCOL_TCP, 9875, 9876); RANGE (PORT_PROTOCOL_TCP, 9888, 9889); RANGE (PORT_PROTOCOL_TCP, 9898, 9900); RANGE (PORT_PROTOCOL_TCP, 9909, 9909); RANGE (PORT_PROTOCOL_TCP, 9911, 9911); RANGE (PORT_PROTOCOL_TCP, 9950, 9954); RANGE (PORT_PROTOCOL_TCP, 9966, 9966); RANGE (PORT_PROTOCOL_TCP, 9987, 9988); RANGE (PORT_PROTOCOL_TCP, 9990, 10005); RANGE (PORT_PROTOCOL_TCP, 10007, 10010); RANGE (PORT_PROTOCOL_TCP, 10050, 10051); RANGE (PORT_PROTOCOL_TCP, 10055, 10055); RANGE (PORT_PROTOCOL_TCP, 10080, 10081); RANGE (PORT_PROTOCOL_TCP, 10100, 10104); RANGE (PORT_PROTOCOL_TCP, 10107, 10107); RANGE (PORT_PROTOCOL_TCP, 10110, 10110); RANGE (PORT_PROTOCOL_TCP, 10113, 10117); RANGE (PORT_PROTOCOL_TCP, 10128, 10129); RANGE (PORT_PROTOCOL_TCP, 10160, 10162); RANGE (PORT_PROTOCOL_TCP, 10200, 10201); RANGE (PORT_PROTOCOL_TCP, 10252, 10252); RANGE (PORT_PROTOCOL_TCP, 10260, 10260); RANGE (PORT_PROTOCOL_TCP, 10288, 10288); RANGE (PORT_PROTOCOL_TCP, 10321, 10321); RANGE (PORT_PROTOCOL_TCP, 10540, 10544); RANGE (PORT_PROTOCOL_TCP, 10631, 10631); RANGE (PORT_PROTOCOL_TCP, 10800, 10800); RANGE (PORT_PROTOCOL_TCP, 10805, 10805); RANGE (PORT_PROTOCOL_TCP, 10809, 10809); RANGE (PORT_PROTOCOL_TCP, 10860, 10860); RANGE (PORT_PROTOCOL_TCP, 10990, 10990); RANGE (PORT_PROTOCOL_TCP, 11000, 11001); RANGE (PORT_PROTOCOL_TCP, 11104, 11106); RANGE (PORT_PROTOCOL_TCP, 11111, 11112); RANGE (PORT_PROTOCOL_TCP, 11161, 11165); RANGE (PORT_PROTOCOL_TCP, 11172, 11172); RANGE (PORT_PROTOCOL_TCP, 11174, 11175); RANGE (PORT_PROTOCOL_TCP, 11201, 11201); RANGE (PORT_PROTOCOL_TCP, 11208, 11208); RANGE (PORT_PROTOCOL_TCP, 11211, 11211); RANGE (PORT_PROTOCOL_TCP, 11319, 11321); RANGE (PORT_PROTOCOL_TCP, 11367, 11367); RANGE (PORT_PROTOCOL_TCP, 11371, 11371); RANGE (PORT_PROTOCOL_TCP, 11489, 11489); RANGE (PORT_PROTOCOL_TCP, 11600, 11600); RANGE (PORT_PROTOCOL_TCP, 11720, 11720); RANGE (PORT_PROTOCOL_TCP, 11751, 11751); RANGE (PORT_PROTOCOL_TCP, 11876, 11876); RANGE (PORT_PROTOCOL_TCP, 11967, 11967); RANGE (PORT_PROTOCOL_TCP, 12000, 12008); RANGE (PORT_PROTOCOL_TCP, 12010, 12010); RANGE (PORT_PROTOCOL_TCP, 12012, 12013); RANGE (PORT_PROTOCOL_TCP, 12109, 12109); RANGE (PORT_PROTOCOL_TCP, 12121, 12121); RANGE (PORT_PROTOCOL_TCP, 12168, 12168); RANGE (PORT_PROTOCOL_TCP, 12172, 12172); RANGE (PORT_PROTOCOL_TCP, 12300, 12300); RANGE (PORT_PROTOCOL_TCP, 12321, 12322); RANGE (PORT_PROTOCOL_TCP, 12345, 12345); RANGE (PORT_PROTOCOL_TCP, 12753, 12753); RANGE (PORT_PROTOCOL_TCP, 13160, 13160); RANGE (PORT_PROTOCOL_TCP, 13216, 13218); RANGE (PORT_PROTOCOL_TCP, 13223, 13224); RANGE (PORT_PROTOCOL_TCP, 13400, 13400); RANGE (PORT_PROTOCOL_TCP, 13720, 13722); RANGE (PORT_PROTOCOL_TCP, 13724, 13724); RANGE (PORT_PROTOCOL_TCP, 13782, 13783); RANGE (PORT_PROTOCOL_TCP, 13785, 13786); RANGE (PORT_PROTOCOL_TCP, 13818, 13823); RANGE (PORT_PROTOCOL_TCP, 13929, 13930); RANGE (PORT_PROTOCOL_TCP, 14000, 14001); RANGE (PORT_PROTOCOL_TCP, 14033, 14034); RANGE (PORT_PROTOCOL_TCP, 14141, 14142); RANGE (PORT_PROTOCOL_TCP, 14145, 14145); RANGE (PORT_PROTOCOL_TCP, 14149, 14150); RANGE (PORT_PROTOCOL_TCP, 14154, 14154); RANGE (PORT_PROTOCOL_TCP, 14250, 14250); RANGE (PORT_PROTOCOL_TCP, 14414, 14414); RANGE (PORT_PROTOCOL_TCP, 14936, 14937); RANGE (PORT_PROTOCOL_TCP, 15000, 15000); RANGE (PORT_PROTOCOL_TCP, 15345, 15345); RANGE (PORT_PROTOCOL_TCP, 15363, 15363); RANGE (PORT_PROTOCOL_TCP, 15555, 15555); RANGE (PORT_PROTOCOL_TCP, 15660, 15660); RANGE (PORT_PROTOCOL_TCP, 15740, 15740); RANGE (PORT_PROTOCOL_TCP, 15999, 16002); RANGE (PORT_PROTOCOL_TCP, 16020, 16021); RANGE (PORT_PROTOCOL_TCP, 16161, 16162); RANGE (PORT_PROTOCOL_TCP, 16309, 16311); RANGE (PORT_PROTOCOL_TCP, 16360, 16361); RANGE (PORT_PROTOCOL_TCP, 16367, 16368); RANGE (PORT_PROTOCOL_TCP, 16384, 16384); RANGE (PORT_PROTOCOL_TCP, 16619, 16619); RANGE (PORT_PROTOCOL_TCP, 16900, 16900); RANGE (PORT_PROTOCOL_TCP, 16950, 16950); RANGE (PORT_PROTOCOL_TCP, 16991, 16995); RANGE (PORT_PROTOCOL_TCP, 17007, 17007); RANGE (PORT_PROTOCOL_TCP, 17185, 17185); RANGE (PORT_PROTOCOL_TCP, 17219, 17219); RANGE (PORT_PROTOCOL_TCP, 17221, 17221); RANGE (PORT_PROTOCOL_TCP, 17234, 17235); RANGE (PORT_PROTOCOL_TCP, 17500, 17500); RANGE (PORT_PROTOCOL_TCP, 17729, 17729); RANGE (PORT_PROTOCOL_TCP, 17754, 17756); RANGE (PORT_PROTOCOL_TCP, 17777, 17777); RANGE (PORT_PROTOCOL_TCP, 18000, 18000); RANGE (PORT_PROTOCOL_TCP, 18104, 18104); RANGE (PORT_PROTOCOL_TCP, 18136, 18136); RANGE (PORT_PROTOCOL_TCP, 18181, 18187); RANGE (PORT_PROTOCOL_TCP, 18241, 18241); RANGE (PORT_PROTOCOL_TCP, 18262, 18262); RANGE (PORT_PROTOCOL_TCP, 18463, 18463); RANGE (PORT_PROTOCOL_TCP, 18634, 18635); RANGE (PORT_PROTOCOL_TCP, 18769, 18769); RANGE (PORT_PROTOCOL_TCP, 18881, 18881); RANGE (PORT_PROTOCOL_TCP, 18888, 18888); RANGE (PORT_PROTOCOL_TCP, 19000, 19000); RANGE (PORT_PROTOCOL_TCP, 19020, 19020); RANGE (PORT_PROTOCOL_TCP, 19191, 19191); RANGE (PORT_PROTOCOL_TCP, 19194, 19194); RANGE (PORT_PROTOCOL_TCP, 19283, 19283); RANGE (PORT_PROTOCOL_TCP, 19315, 19315); RANGE (PORT_PROTOCOL_TCP, 19398, 19398); RANGE (PORT_PROTOCOL_TCP, 19410, 19412); RANGE (PORT_PROTOCOL_TCP, 19539, 19541); RANGE (PORT_PROTOCOL_TCP, 19998, 20003); RANGE (PORT_PROTOCOL_TCP, 20005, 20005); RANGE (PORT_PROTOCOL_TCP, 20013, 20014); RANGE (PORT_PROTOCOL_TCP, 20034, 20034); RANGE (PORT_PROTOCOL_TCP, 20046, 20046); RANGE (PORT_PROTOCOL_TCP, 20048, 20049); RANGE (PORT_PROTOCOL_TCP, 20167, 20167); RANGE (PORT_PROTOCOL_TCP, 20202, 20202); RANGE (PORT_PROTOCOL_TCP, 20222, 20222); RANGE (PORT_PROTOCOL_TCP, 20480, 20480); RANGE (PORT_PROTOCOL_TCP, 20670, 20670); RANGE (PORT_PROTOCOL_TCP, 20999, 21000); RANGE (PORT_PROTOCOL_TCP, 21553, 21554); RANGE (PORT_PROTOCOL_TCP, 21590, 21590); RANGE (PORT_PROTOCOL_TCP, 21800, 21800); RANGE (PORT_PROTOCOL_TCP, 21845, 21849); RANGE (PORT_PROTOCOL_TCP, 22000, 22005); RANGE (PORT_PROTOCOL_TCP, 22125, 22125); RANGE (PORT_PROTOCOL_TCP, 22128, 22128); RANGE (PORT_PROTOCOL_TCP, 22273, 22273); RANGE (PORT_PROTOCOL_TCP, 22305, 22305); RANGE (PORT_PROTOCOL_TCP, 22343, 22343); RANGE (PORT_PROTOCOL_TCP, 22347, 22347); RANGE (PORT_PROTOCOL_TCP, 22350, 22350); RANGE (PORT_PROTOCOL_TCP, 22537, 22537); RANGE (PORT_PROTOCOL_TCP, 22555, 22555); RANGE (PORT_PROTOCOL_TCP, 22763, 22763); RANGE (PORT_PROTOCOL_TCP, 22800, 22800); RANGE (PORT_PROTOCOL_TCP, 22951, 22951); RANGE (PORT_PROTOCOL_TCP, 23000, 23005); RANGE (PORT_PROTOCOL_TCP, 23053, 23053); RANGE (PORT_PROTOCOL_TCP, 23333, 23333); RANGE (PORT_PROTOCOL_TCP, 23400, 23402); RANGE (PORT_PROTOCOL_TCP, 23456, 23457); RANGE (PORT_PROTOCOL_TCP, 24000, 24006); RANGE (PORT_PROTOCOL_TCP, 24242, 24242); RANGE (PORT_PROTOCOL_TCP, 24249, 24249); RANGE (PORT_PROTOCOL_TCP, 24321, 24321); RANGE (PORT_PROTOCOL_TCP, 24386, 24386); RANGE (PORT_PROTOCOL_TCP, 24465, 24465); RANGE (PORT_PROTOCOL_TCP, 24554, 24554); RANGE (PORT_PROTOCOL_TCP, 24676, 24678); RANGE (PORT_PROTOCOL_TCP, 24680, 24680); RANGE (PORT_PROTOCOL_TCP, 24754, 24754); RANGE (PORT_PROTOCOL_TCP, 24922, 24922); RANGE (PORT_PROTOCOL_TCP, 25000, 25009); RANGE (PORT_PROTOCOL_TCP, 25576, 25576); RANGE (PORT_PROTOCOL_TCP, 25604, 25604); RANGE (PORT_PROTOCOL_TCP, 25793, 25793); RANGE (PORT_PROTOCOL_TCP, 25900, 25903); RANGE (PORT_PROTOCOL_TCP, 26000, 26000); RANGE (PORT_PROTOCOL_TCP, 26133, 26133); RANGE (PORT_PROTOCOL_TCP, 26208, 26208); RANGE (PORT_PROTOCOL_TCP, 26260, 26263); RANGE (PORT_PROTOCOL_TCP, 26486, 26487); RANGE (PORT_PROTOCOL_TCP, 26489, 26489); RANGE (PORT_PROTOCOL_TCP, 27345, 27345); RANGE (PORT_PROTOCOL_TCP, 27442, 27442); RANGE (PORT_PROTOCOL_TCP, 27504, 27504); RANGE (PORT_PROTOCOL_TCP, 27782, 27782); RANGE (PORT_PROTOCOL_TCP, 27999, 28001); RANGE (PORT_PROTOCOL_TCP, 28240, 28240); RANGE (PORT_PROTOCOL_TCP, 29167, 29167); RANGE (PORT_PROTOCOL_TCP, 30001, 30002); RANGE (PORT_PROTOCOL_TCP, 30260, 30260); RANGE (PORT_PROTOCOL_TCP, 30999, 30999); RANGE (PORT_PROTOCOL_TCP, 31020, 31020); RANGE (PORT_PROTOCOL_TCP, 31416, 31416); RANGE (PORT_PROTOCOL_TCP, 31457, 31457); RANGE (PORT_PROTOCOL_TCP, 31620, 31620); RANGE (PORT_PROTOCOL_TCP, 31685, 31685); RANGE (PORT_PROTOCOL_TCP, 31765, 31765); RANGE (PORT_PROTOCOL_TCP, 31948, 31949); RANGE (PORT_PROTOCOL_TCP, 32034, 32034); RANGE (PORT_PROTOCOL_TCP, 32249, 32249); RANGE (PORT_PROTOCOL_TCP, 32483, 32483); RANGE (PORT_PROTOCOL_TCP, 32635, 32636); RANGE (PORT_PROTOCOL_TCP, 32767, 32777); RANGE (PORT_PROTOCOL_TCP, 32801, 32801); RANGE (PORT_PROTOCOL_TCP, 32811, 32811); RANGE (PORT_PROTOCOL_TCP, 32896, 32896); RANGE (PORT_PROTOCOL_TCP, 33123, 33123); RANGE (PORT_PROTOCOL_TCP, 33331, 33331); RANGE (PORT_PROTOCOL_TCP, 33333, 33334); RANGE (PORT_PROTOCOL_TCP, 33434, 33434); RANGE (PORT_PROTOCOL_TCP, 33656, 33656); RANGE (PORT_PROTOCOL_TCP, 34249, 34249); RANGE (PORT_PROTOCOL_TCP, 34378, 34379); RANGE (PORT_PROTOCOL_TCP, 34567, 34567); RANGE (PORT_PROTOCOL_TCP, 34962, 34964); RANGE (PORT_PROTOCOL_TCP, 34980, 34980); RANGE (PORT_PROTOCOL_TCP, 35354, 35357); RANGE (PORT_PROTOCOL_TCP, 36001, 36001); RANGE (PORT_PROTOCOL_TCP, 36524, 36524); RANGE (PORT_PROTOCOL_TCP, 36865, 36865); RANGE (PORT_PROTOCOL_TCP, 37475, 37475); RANGE (PORT_PROTOCOL_TCP, 37654, 37654); RANGE (PORT_PROTOCOL_TCP, 38201, 38203); RANGE (PORT_PROTOCOL_TCP, 39681, 39681); RANGE (PORT_PROTOCOL_TCP, 40000, 40000); RANGE (PORT_PROTOCOL_TCP, 40841, 40843); RANGE (PORT_PROTOCOL_TCP, 41111, 41111); RANGE (PORT_PROTOCOL_TCP, 41121, 41121); RANGE (PORT_PROTOCOL_TCP, 41794, 41795); RANGE (PORT_PROTOCOL_TCP, 42508, 42510); RANGE (PORT_PROTOCOL_TCP, 43188, 43191); RANGE (PORT_PROTOCOL_TCP, 43439, 43441); RANGE (PORT_PROTOCOL_TCP, 44321, 44322); RANGE (PORT_PROTOCOL_TCP, 44553, 44553); RANGE (PORT_PROTOCOL_TCP, 44818, 44818); RANGE (PORT_PROTOCOL_TCP, 45000, 45001); RANGE (PORT_PROTOCOL_TCP, 45054, 45054); RANGE (PORT_PROTOCOL_TCP, 45678, 45678); RANGE (PORT_PROTOCOL_TCP, 45825, 45825); RANGE (PORT_PROTOCOL_TCP, 45966, 45966); RANGE (PORT_PROTOCOL_TCP, 46999, 47001); RANGE (PORT_PROTOCOL_TCP, 47557, 47557); RANGE (PORT_PROTOCOL_TCP, 47624, 47624); RANGE (PORT_PROTOCOL_TCP, 47806, 47806); RANGE (PORT_PROTOCOL_TCP, 47808, 47808); RANGE (PORT_PROTOCOL_TCP, 48000, 48005); RANGE (PORT_PROTOCOL_TCP, 48049, 48049); RANGE (PORT_PROTOCOL_TCP, 48128, 48129); RANGE (PORT_PROTOCOL_TCP, 48556, 48556); RANGE (PORT_PROTOCOL_TCP, 48619, 48619); sql ("END TRANSACTION"); } openvas-manager-6.0.9/src/otp.c000644 001751 001751 00000157752 12757560563 017457 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Module for OpenVAS Manager: the OTP library. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2009 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ /** * @file otp.c * @brief The OpenVAS Manager OTP library. * * This file defines an OpenVAS Transfer Protocol (OTP) library, for * implementing OpenVAS managers such as the OpenVAS Manager daemon. * * The library provides a single function, \ref process_otp_scanner_input. * This function parses a given string of OTP text and adjusts local * task records according to the OTP messages in the string. */ /** * @todo * Ensure that the globals used to store information across the XML * parser callbacks (for example, current_scanner_preferences) are freed in * the failure cases. */ #include "otp.h" #include "manage.h" #include "scanner.h" #include "manage_sql.h" #include "tracef.h" #include "types.h" #include #include #include #include #include #include #include #include #include #ifdef S_SPLINT_S #include "splint.h" #endif #undef G_LOG_DOMAIN /** * @brief GLib log domain. */ #define G_LOG_DOMAIN "md otp" /** @todo As with the OMP version, this should most likely be passed to and from * the client in a data structure like an otp_parser_t. */ extern buffer_size_t from_buffer_size; /* Helper functions. */ /** * @brief Return the number associated with a category name. * * @param category The category name. * * @return The number of the category. */ static int category_number (const char *category) { static const char *categories[] = { ACT_STRING_LIST_ALL }; int index; for (index = ACT_FIRST; index <= ACT_END; index++) if (strcmp (category, categories[index]) == 0) return index; return ACT_UNKNOWN; } /** @brief Replace any control characters in string with spaces. * * @param[in,out] string String to replace in. */ static void blank_control_chars (char *string) { for (; *string; string++) if (iscntrl (*string) && *string != '\n') *string = ' '; } /* Messages. */ /** * @brief Current message during OTP SERVER message commands. */ /*@null@*/ /*@only@*/ static message_t* current_message = NULL; /** * @brief Current host during OTP SERVER message commands. */ static gchar* current_host = NULL; static char *plugins_feed_version = NULL; /** * @brief Make a message. * * @param[in] host Host name. * * @return A pointer to the new message. */ /*@only@*/ static message_t* make_message (const char* host) /*@ensures isnull result->description, result->oid@*/ { message_t* message; message = (message_t*) g_malloc (sizeof (message_t)); message->host = g_strdup (host); message->description = NULL; message->oid = NULL; message->port.number = 0; message->port.protocol = PORT_PROTOCOL_OTHER; message->port.string = NULL; return message; } /** * @brief Free a message for g_ptr_array_foreach. * * @param[in] message Pointer to the message. */ static void free_message (/*@out@*/ /*@only@*/ message_t* message) { if (message->host) free (message->host); if (message->description) free (message->description); if (message->oid) free (message->oid); if (message->port.string) free (message->port.string); free (message); } /** * @brief Set the port number of a message. * * @param[in] message Pointer to the message. Used directly, freed by * free_message. * @param[in] number Port number. */ static void set_message_port_number (message_t* message, int number) { message->port.number = number; } /** * @brief Set the port protocol of a message. * * @param[in] message Pointer to the message. Used directly, freed by * free_message. * @param[in] protocol Name of protocol on port. */ static void set_message_port_protocol (message_t* message, const char* protocol) { if (strcasecmp ("udp", protocol) == 0) message->port.protocol = PORT_PROTOCOL_UDP; else if (strcasecmp ("tcp", protocol) == 0) message->port.protocol = PORT_PROTOCOL_TCP; else message->port.protocol = PORT_PROTOCOL_OTHER; } /** * @brief Set the original string of a port of a message. * * @param[in] message Pointer to the message. * @param[in] string Port string. */ static void set_message_port_string (message_t* message, char* string) { if (message->port.string) free (message->port.string); message->port.string = string; } /** * @brief Set the description of a message. * * @param[in] message Pointer to the message. Used directly, freed by * free_message. * @param[in] description Description. */ static void set_message_description (message_t* message, /*@only@*/ char* description) { if (message->description) free (message->description); message->description = description; } /** * @brief Set the OID of a message. * * @param[in] message Pointer to the message. Used directly, freed by * free_message. * @param[in] oid OID. */ static void set_message_oid (message_t* message, /*@only@*/ char* oid) { if (message->oid) free (message->oid); message->oid = oid; } /** * @brief Write a message for g_ptr_array_foreach. * * @param[in] task The task with which to associate the message. * @param[in] message The message. * @param[in] type The message type (for example "Security Warning"). */ static void write_message (task_t task, message_t* message, char* type) { result_t result; assert (current_report); manage_transaction_start (); result = make_result (task, message->host, message->port.string, message->oid, type, message->description); if (current_report) report_add_result (current_report, result); } /** * @brief Append a error message to a report. * * @param[in] task Task. * @param[in] message Message. */ static void append_error_message (task_t task, message_t* message) { write_message (task, message, "Error Message"); } /** * @brief Append a hole message to a report. * * @param[in] task Task. * @param[in] message Message. */ static void append_alarm_message (task_t task, message_t* message) { write_message (task, message, "Alarm"); } /** * @brief Append a log message to a report. * * @param[in] task Task. * @param[in] message Message. */ static void append_log_message (task_t task, message_t* message) { assert (current_report); if (message->port.string && (strcmp (message->port.string, "general/Host_Details") == 0)) { int len; /* Strip trailing \n. */ len = strlen (message->description); if ((len > 2) && (message->description[len - 1] == 'n') && (message->description[len - 2] == '\\')) message->description[len - 2] = '\0'; /* Add detail to report. */ if (manage_report_host_detail (current_report, message->host, message->description)) g_warning ("%s: Failed to add report detail for host '%s': %s\n", __FUNCTION__, message->host, message->description); } else write_message (task, message, "Log Message"); } /* Scanner preferences. */ /** * @brief The current scanner preference, during reading of scanner preferences. */ /*@null@*/ /*@only@*/ static char* current_scanner_preference = NULL; /* Scanner plugins. */ /** * @brief The current plugin, during reading of scanner plugin list. */ /*@only@*/ static nvti_t* current_plugin = NULL; /** * @brief The full plugins list, during reading of scanner plugin list. */ GList* scanner_plugins_list = NULL; /* Scanner state. */ /** * @brief Initialise OTP library data. * * This must run once, before the first call to \ref process_otp_scanner_input. */ void init_otp_data () { plugins_feed_version = NULL; } /** * @brief Possible states of the scanner. */ typedef enum { SCANNER_BYE, SCANNER_DONE, SCANNER_ERRMSG_DESCRIPTION, SCANNER_ERRMSG_HOST, SCANNER_ERRMSG_NUMBER, SCANNER_ERRMSG_OID, SCANNER_ALARM_DESCRIPTION, SCANNER_ALARM_HOST, SCANNER_ALARM_NUMBER, SCANNER_ALARM_OID, SCANNER_LOG_DESCRIPTION, SCANNER_LOG_HOST, SCANNER_LOG_NUMBER, SCANNER_LOG_OID, SCANNER_NVT_INFO, SCANNER_PLUGIN_LIST_BUGTRAQ_ID, SCANNER_PLUGIN_LIST_CATEGORY, SCANNER_PLUGIN_LIST_COPYRIGHT, SCANNER_PLUGIN_LIST_CVE_ID, SCANNER_PLUGIN_LIST_FAMILY, SCANNER_PLUGIN_LIST_NAME, SCANNER_PLUGIN_LIST_OID, SCANNER_PLUGIN_LIST_PLUGIN_VERSION, SCANNER_PLUGIN_LIST_SUMMARY, SCANNER_PLUGIN_LIST_TAGS, SCANNER_PLUGIN_LIST_XREFS, SCANNER_PREFERENCE_NAME, SCANNER_PREFERENCE_VALUE, SCANNER_SERVER, SCANNER_STATUS, SCANNER_STATUS_HOST, SCANNER_STATUS_PROGRESS, SCANNER_TIME, SCANNER_TIME_HOST_START_HOST, SCANNER_TIME_HOST_START_TIME, SCANNER_TIME_HOST_END_HOST, SCANNER_TIME_HOST_END_TIME, SCANNER_TIME_SCAN_START, SCANNER_TIME_SCAN_END, SCANNER_TOP } scanner_state_t; /** * @brief The state of the scanner. */ static scanner_state_t scanner_state = SCANNER_TOP; /** * @brief Set the scanner state, \ref scanner_state. */ static void set_scanner_state (scanner_state_t state) { scanner_state = state; tracef (" scanner state set: %i\n", scanner_state); } /** * @brief The initialisation state of the scanner. */ scanner_init_state_t scanner_init_state = SCANNER_INIT_TOP; /** * @brief Offset into initialisation string being sent to scanner. */ int scanner_init_offset = 0; /** * @brief Scanner current number of loaded plugins, when still loading. */ int scanner_current_loading = 0; /** * @brief Scanner total number of plugins to be loaded, when still loading. */ int scanner_total_loading = 0; /** * @brief Set the scanner initialisation state, \ref scanner_init_state. */ void set_scanner_init_state (scanner_init_state_t state) { scanner_init_state = state; tracef (" scanner init state set: %i\n", scanner_init_state); } /* OTP input processor. */ /** @todo As with the OMP version, these should most likely be passed to and * from the client in a data structure like an otp_parser_t. */ extern char *from_scanner; extern buffer_size_t from_scanner_start; extern buffer_size_t from_scanner_end; /** * @brief "Synchronise" the \ref from_scanner buffer. * * Move any OTP in the \ref from_scanner buffer to the front of the buffer. * * @return 0 success, -1 \ref from_scanner is full. */ static int sync_buffer () { if (from_scanner_start > 0 && from_scanner_start == from_scanner_end) { from_scanner_start = from_scanner_end = 0; tracef (" scanner start caught end\n"); } else if (from_scanner_start == 0) { if (openvas_scanner_full () && openvas_scanner_realloc ()) { g_warning ("From scanner buffer treshold."); return -1; } } else { /* Move the remaining partial line to the front of the buffer. This * ensures that there is space after the partial line into which * serve_omp can read the rest of the line. */ char* start = from_scanner + from_scanner_start; from_scanner_end -= from_scanner_start; memmove (from_scanner, start, from_scanner_end); from_scanner_start = 0; #if TRACE from_scanner[from_scanner_end] = '\0'; //tracef (" new from_scanner: %s\n", from_scanner); tracef (" new from_scanner_start: %" BUFFER_SIZE_T_FORMAT "\n", from_scanner_start); tracef (" new from_scanner_end: %" BUFFER_SIZE_T_FORMAT "\n", from_scanner_end); #endif } return 0; } /** * @brief Parse the final SERVER field of an OTP message. * * @param messages A pointer into the OTP input buffer. * * @return 0 success, -1 fail, -2 too few characters (need more input). */ static int parse_scanner_done (char** messages) { char *end = *messages + from_scanner_end - from_scanner_start; while (*messages < end && ((*messages)[0] == ' ' || (*messages)[0] == '\n')) { (*messages)++; from_scanner_start++; } if ((int) (end - *messages) < 6) /* Too few characters to be the end marker, return to select to * wait for more input. */ return -2; if (strncasecmp ("SERVER", *messages, 6)) { tracef (" scanner fail: expected final \"SERVER\"\n"); return -1; } set_scanner_state (SCANNER_TOP); from_scanner_start += 6; (*messages) += 6; return 0; } /** * @brief Check for a bad login response from the scanner. * * @param messages A pointer into the OTP input buffer. * * @return 0 if there is a bad login response, else 1. */ static int parse_scanner_bad_login (char** messages) { /*@dependent@*/ char *end, *match; end = *messages + from_scanner_end - from_scanner_start; while (*messages < end && ((*messages)[0] == ' ')) { (*messages)++; from_scanner_start++; } if ((match = memchr (*messages, (int) '\n', from_scanner_end - from_scanner_start))) { /** @todo Are there 19 characters available? */ if (strncasecmp ("Bad login attempt !", *messages, 19) == 0) { tracef ("match bad login\n"); from_scanner_start += match + 1 - *messages; *messages = match + 1; set_scanner_init_state (SCANNER_INIT_TOP); return 0; } } return 1; } /** * @brief Parse preference value. * * @param messages A pointer into the OTP input buffer. * @param progress Callback to update progress. * * @return 0 success, -2 too few characters (need more input). */ static int parse_scanner_preference_value (char** messages, void (*progress) ()) { char *value, *end, *match; end = *messages + from_scanner_end - from_scanner_start; while (*messages < end && ((*messages)[0] == ' ')) { (*messages)++; from_scanner_start++; } if ((match = memchr (*messages, (int) '\n', from_scanner_end - from_scanner_start))) { match[0] = '\0'; value = g_strdup (*messages); blank_control_chars (value); if (current_scanner_preference) { if (progress) progress (); if (scanner_init_state == SCANNER_INIT_DONE_CACHE_MODE) manage_nvt_preference_add (current_scanner_preference, value, 0); else if (scanner_init_state == SCANNER_INIT_DONE_CACHE_MODE_UPDATE) manage_nvt_preference_add (current_scanner_preference, value, 1); } set_scanner_state (SCANNER_PREFERENCE_NAME); from_scanner_start += match + 1 - *messages; *messages = match + 1; return 0; } return -2; } /** * @brief Parse the tags of a plugin list. * * @param messages A pointer into the OTP input buffer. * * @return 0 success, -2 too few characters (need more input). */ static int parse_scanner_plugin_list_tags (char** messages) { char *value, *end, *match; assert (current_plugin != NULL); end = *messages + from_scanner_end - from_scanner_start; while (*messages < end && ((*messages)[0] == ' ')) { (*messages)++; from_scanner_start++; } if ((match = memchr (*messages, (int) '\n', from_scanner_end - from_scanner_start))) { match[0] = '\0'; value = g_strdup (*messages); blank_control_chars (value); if (value != NULL) { char* pos = value; while (*pos) { if (*pos == ';') *pos = '\n'; pos++; } } if (current_plugin) { gchar *tags, *cvss_base, *risk_factor; parse_tags (value, &tags, &cvss_base, &risk_factor); nvti_set_tag (current_plugin, tags); nvti_set_cvss_base (current_plugin, cvss_base); g_free (tags); g_free (cvss_base); g_free (risk_factor); /* Add the plugin to scanner_plugins_list which will be bulk-inserted * in DB later in manage_complete_nvt_cache_update. */ scanner_plugins_list = g_list_prepend (scanner_plugins_list, current_plugin); current_plugin = NULL; } set_scanner_state (SCANNER_PLUGIN_LIST_OID); from_scanner_start += match + 1 - *messages; *messages = match + 1; g_free (value); return 0; } return -2; } /** * @brief Parse the field following "SERVER <|>". * * @param messages A pointer into the OTP input buffer. * * @return 0 found a newline delimited field, -1 error, -2 need more input, * -3 found a <|> before next newline (that is, a <|> delimited * field follows), -4 failed to find a newline (may be a <|>) */ static int parse_scanner_server (/*@dependent@*/ char** messages) { /*@dependent@*/ char *end, *match; end = *messages + from_scanner_end - from_scanner_start; while (*messages < end && ((*messages)[0] == ' ')) { (*messages)++; from_scanner_start++; } if ((match = memchr (*messages, (int) '\n', from_scanner_end - from_scanner_start))) { /*@dependent@*/ char* newline; /*@dependent@*/ char* input; buffer_size_t from_start, from_end; match[0] = '\0'; /** @todo Is there ever whitespace before the newline? */ while (*messages < end && ((*messages)[0] == ' ')) { (*messages)++; from_scanner_start++; } /** @todo Are there 20 characters available? */ /** @todo Are there 12 characters available? */ newline = match; newline[0] = '\n'; /* Check for a <|>. */ input = *messages; from_start = from_scanner_start; from_end = from_scanner_end; while (from_start < from_end && ((match = memchr (input, (int) '<', from_end - from_start)) != NULL)) { assert (match >= input); if ((((match - input) + from_start + 1) < from_end) && (match[1] == '|') && (match[2] == '>')) { if (match > newline) /* The next <|> is after the newline, which is an error. */ return -1; /* The next <|> is before the newline, which may be correct. */ return -3; } from_start += match + 1 - input; input = match + 1; } /* Need more input for a newline or <|>. */ return -2; } return -4; } static int scanner_is_loading (char *messages) { if (!strncasecmp ("SCANNER_LOADING ", messages, strlen ("SCANNER_LOADING "))) return 1; return 0; } /** * @brief Parses SCANNER_LOADING response, updating scanner_current_loading and * scanner_total_loading values. */ static void parse_scanner_loading (char *messages) { char *str; str = strstr (messages, " <|> "); if (str == NULL) return; str += 5; scanner_current_loading = atoi (str); if (!scanner_current_loading) return; str = strstr (str, " <|> "); if (str == NULL) return; str += 5; scanner_total_loading = atoi (str); str = strchr (str, '\n'); if (str) from_scanner_start += str - messages; } /** * @brief Process any lines available in \ref from_scanner. * * Update scanner information according to the input from the scanner. * * \if STATIC * * This includes updating the scanner state with \ref set_scanner_state * and \ref set_scanner_init_state, and updating scanner records with functions * like \ref manage_nvt_preference_add. * * \endif * * This function simply records input from the scanner. Output to the scanner * or client is almost always done via \ref process_omp_client_input in * reaction to client requests, the only exception being stop requests * initiated in other processes. * * @param[in] progress Function to mark progress, or NULL. * * @return 0 success, 1 received scanner BYE, 2 bad login, 3 scanner loading, -1 * error. */ int process_otp_scanner_input (void (*progress) ()) { /*@dependent@*/ char* match = NULL; /*@dependent@*/ char* messages = from_scanner + from_scanner_start; /*@dependent@*/ char* input; const char *ver_str = "< OTP/2.0 >\n"; size_t ver_len = strlen (ver_str); buffer_size_t from_start, from_end; //tracef (" consider %.*s\n", from_scanner_end - from_scanner_start, messages); /* Before processing the input, check if another manager process has stopped * the current task. If so, send the stop request to the scanner. This is * the only place in this file that writes to the to_scanner buffer, and hence * the only place that requires that the writes to to_scanner in the OMP XML * handlers must be whole OTP commands. */ if (manage_check_current_task () == -1) { /* Out of space in to_scanner. Just treat it as an error for now. */ return -1; } /* First, handle special scanner states where the input from the scanner * ends in something other than <|> (usually a newline). */ switch (scanner_init_state) { case SCANNER_INIT_SENT_VERSION: /* Read over any whitespace left by the previous session. */ while (from_scanner_start < from_scanner_end && (messages[0] == ' ' || messages[0] == '\n')) from_scanner_start++, messages++; if (scanner_is_loading (messages)) { parse_scanner_loading (messages); if (scanner_current_loading && scanner_total_loading) g_log (G_LOG_DOMAIN, G_LOG_LEVEL_MESSAGE, "Scanner loading: %d / %d nvts.\n", scanner_current_loading, scanner_total_loading); else g_log (G_LOG_DOMAIN, G_LOG_LEVEL_MESSAGE, "Scanner loading: No information provided. %s\n", messages); return 3; } if (from_scanner_end - from_scanner_start < ver_len) { /* Need more input. */ if (sync_buffer ()) return -1; return 0; } if (strncasecmp (ver_str, messages, ver_len)) { tracef (" scanner fail: expected \"%s\"" " got \"%.12s\"\n\n", ver_str, messages); return -1; } from_scanner_start += ver_len; messages += ver_len; set_scanner_init_state (SCANNER_INIT_DONE); return 0; case SCANNER_INIT_GOT_FEED_VERSION: /* Nothing to parse. */ return 0; case SCANNER_INIT_GOT_PLUGINS: /* Nothing to parse. */ return 0; case SCANNER_INIT_CONNECTED: /* Input from scanner before version string sent. */ return -1; case SCANNER_INIT_SENT_COMPLETE_LIST: case SCANNER_INIT_SENT_COMPLETE_LIST_UPDATE: case SCANNER_INIT_DONE: case SCANNER_INIT_DONE_CACHE_MODE: case SCANNER_INIT_DONE_CACHE_MODE_UPDATE: case SCANNER_INIT_TOP: if (scanner_state == SCANNER_TOP) switch (parse_scanner_bad_login (&messages)) { case 0: return 2; /* Found bad login response. */ case 1: break; } else if (scanner_state == SCANNER_DONE) switch (parse_scanner_done (&messages)) { case -1: return -1; case -2: /* Need more input. */ if (sync_buffer ()) return -1; return 0; } else if (scanner_state == SCANNER_PLUGIN_LIST_TAGS) switch (parse_scanner_plugin_list_tags (&messages)) { case -2: /* Need more input. */ if (sync_buffer ()) return -1; return 0; } else if (scanner_state == SCANNER_PREFERENCE_VALUE) { switch (parse_scanner_preference_value (&messages, progress)) { case -2: /* Need more input. */ if (sync_buffer ()) return -1; return 0; } g_free (current_scanner_preference); current_scanner_preference = NULL; } else if (scanner_state == SCANNER_SERVER) /* Look for any newline delimited scanner commands. */ switch (parse_scanner_server (&messages)) { case 0: break; /* Found newline delimited command. */ case -1: return -1; /* Error. */ case -2: /* Need more input. */ if (sync_buffer ()) return -1; return 0; case -3: break; /* Next <|> is before next \n. */ case -4: break; /* Failed to find \n, try for <|>. */ } break; } /* switch (scanner_init_state) */ /* Parse and handle any fields ending in <|>. */ input = messages; from_start = from_scanner_start; from_end = from_scanner_end; while (from_start < from_end && ((match = memchr (input, (int) '<', from_end - from_start)) != NULL)) { assert (match >= input); /* Check whether we've had a transaction open too long, because * it may take some time until we get out of this loop and do a * process_omp_change, and we don't want to hold up other writer * processes. Note that in GSA even tabular pages like Tasks now * write (settings) to the db. */ manage_transaction_stop (FALSE); if ((((match - input) + from_start + 1) < from_end) && (match[1] == '|') && (match[2] == '>')) { char* message; char* field; /* Found a full field, process the field. */ message = messages; *match = '\0'; from_scanner_start += match + 3 - messages; from_start = from_scanner_start; messages = match + 3; input = messages; /* Strip leading and trailing whitespace. */ field = openvas_strip_space (message, match); blank_control_chars (field); tracef (" scanner old state %i\n", scanner_state); tracef (" scanner field: %s\n", field); switch (scanner_state) { case SCANNER_BYE: if (strcasecmp ("BYE", field)) goto return_error; /* It's up to the caller to set the init state, as the * caller must flush the ACK. */ set_scanner_state (SCANNER_DONE); switch (parse_scanner_done (&messages)) { case 0: if (sync_buffer ()) goto return_error; if (acknowledge_bye ()) goto return_error; goto return_bye; case -1: goto return_error; case -2: /* Need more input. */ if (sync_buffer ()) goto return_error; goto return_need_more; } break; case SCANNER_ERRMSG_DESCRIPTION: { if (current_message) { /** @todo Replace "\n" with newline in description. */ char* description = g_strdup (field); set_message_description (current_message, description); } set_scanner_state (SCANNER_ERRMSG_OID); break; } case SCANNER_ERRMSG_HOST: { assert (current_message == NULL); current_message = make_message (field); set_scanner_state (SCANNER_ERRMSG_NUMBER); break; } case SCANNER_ERRMSG_NUMBER: { /** @todo Field could be "general". */ int number; char *protocol, *formatted; assert (current_message); protocol = g_newa (char, strlen (field)); /* RATS: ignore, buffers are allocated to field length. */ if (sscanf (field, "%i/%s", &number, protocol) != 2) { number = atoi (field); protocol[0] = '\0'; } tracef (" scanner got debug port, number: %i, protocol: %s\n", number, protocol); set_message_port_number (current_message, number); set_message_port_protocol (current_message, protocol); formatted = port_name_formatted (field); if (formatted == NULL) formatted = g_strdup (field); set_message_port_string (current_message, formatted); set_scanner_state (SCANNER_ERRMSG_DESCRIPTION); break; } case SCANNER_ERRMSG_OID: { if (current_message != NULL && current_scanner_task != (task_t) 0) { char* oid = g_strdup (field); set_message_oid (current_message, oid); append_error_message (current_scanner_task, current_message); free_message (current_message); current_message = NULL; } set_scanner_state (SCANNER_DONE); switch (parse_scanner_done (&messages)) { case -1: goto return_error; case -2: /* Need more input. */ if (sync_buffer ()) goto return_error; goto return_need_more; } break; } case SCANNER_ALARM_DESCRIPTION: { if (current_message) { /** @todo Replace "\n" with newline in description. */ char* description = g_strdup (field); set_message_description (current_message, description); } set_scanner_state (SCANNER_ALARM_OID); break; } case SCANNER_ALARM_HOST: { assert (current_message == NULL); current_message = make_message (field); set_scanner_state (SCANNER_ALARM_NUMBER); break; } case SCANNER_ALARM_NUMBER: { /** @todo Field could be "general". */ int number; char *protocol, *formatted; assert (current_message); protocol = g_newa (char, strlen (field)); /* RATS: ignore, buffers are allocated to field length. */ if (sscanf (field, "%i/%s", &number, protocol) != 2) { number = atoi (field); protocol[0] = '\0'; } tracef (" scanner got alarm port, number: %i, protocol: %s\n", number, protocol); set_message_port_number (current_message, number); set_message_port_protocol (current_message, protocol); formatted = port_name_formatted (field); if (formatted == NULL) formatted = g_strdup (field); set_message_port_string (current_message, formatted); set_scanner_state (SCANNER_ALARM_DESCRIPTION); break; } case SCANNER_ALARM_OID: { if (current_message != NULL && current_scanner_task != (task_t) 0) { char* oid = g_strdup (field); set_message_oid (current_message, oid); append_alarm_message (current_scanner_task, current_message); free_message (current_message); current_message = NULL; } set_scanner_state (SCANNER_DONE); switch (parse_scanner_done (&messages)) { case -1: goto return_error; case -2: /* Need more input. */ if (sync_buffer ()) goto return_error; goto return_need_more; } break; } case SCANNER_LOG_DESCRIPTION: { if (current_message) { /** @todo Replace "\n" with newline in description. */ char* description = g_strdup (field); set_message_description (current_message, description); } set_scanner_state (SCANNER_LOG_OID); break; } case SCANNER_LOG_HOST: { assert (current_message == NULL); current_message = make_message (field); set_scanner_state (SCANNER_LOG_NUMBER); break; } case SCANNER_LOG_NUMBER: { /** @todo Field could be "general". */ int number; char *protocol, *formatted; assert (current_message); protocol = g_newa (char, strlen (field)); /* RATS: ignore, buffers are allocated to field length. */ if (sscanf (field, "%i/%s", &number, protocol) != 2) { number = atoi (field); protocol[0] = '\0'; } tracef (" scanner got log port, number: %i, protocol: %s\n", number, protocol); set_message_port_number (current_message, number); set_message_port_protocol (current_message, protocol); formatted = port_name_formatted (field); if (formatted == NULL) formatted = g_strdup (field); set_message_port_string (current_message, formatted); set_scanner_state (SCANNER_LOG_DESCRIPTION); break; } case SCANNER_LOG_OID: { if (current_message != NULL && current_scanner_task != (task_t) 0) { char* oid = g_strdup (field); set_message_oid (current_message, oid); append_log_message (current_scanner_task, current_message); free_message (current_message); current_message = NULL; } set_scanner_state (SCANNER_DONE); switch (parse_scanner_done (&messages)) { case -1: goto return_error; case -2: /* Need more input. */ if (sync_buffer ()) goto return_error; goto return_need_more; } break; } case SCANNER_PLUGIN_LIST_OID: { /* Use match[1] instead of field[1] for UTF-8 hack. */ if (strlen (field) == 0 && match[1] == '|') { set_scanner_state (SCANNER_DONE); switch (parse_scanner_done (&messages)) { case 0: if (scanner_init_state == SCANNER_INIT_SENT_COMPLETE_LIST || scanner_init_state == SCANNER_INIT_SENT_COMPLETE_LIST_UPDATE) { set_scanner_init_state (SCANNER_INIT_GOT_PLUGINS); set_nvts_feed_version (plugins_feed_version); } break; case -1: goto return_error; case -2: /* Need more input. */ if (sync_buffer ()) goto return_error; goto return_need_more; } break; } assert (current_plugin == NULL); current_plugin = nvti_new (); if (progress) progress (); if (current_plugin == NULL) abort (); nvti_set_oid (current_plugin, field); set_scanner_state (SCANNER_PLUGIN_LIST_NAME); break; } case SCANNER_PLUGIN_LIST_NAME: { nvti_set_name (current_plugin, field); set_scanner_state (SCANNER_PLUGIN_LIST_CATEGORY); break; } case SCANNER_PLUGIN_LIST_CATEGORY: { nvti_set_category (current_plugin, category_number (field)); set_scanner_state (SCANNER_PLUGIN_LIST_COPYRIGHT); break; } case SCANNER_PLUGIN_LIST_COPYRIGHT: { nvti_set_copyright (current_plugin, field); set_scanner_state (SCANNER_PLUGIN_LIST_SUMMARY); break; } case SCANNER_PLUGIN_LIST_SUMMARY: { nvti_set_summary (current_plugin, field); set_scanner_state (SCANNER_PLUGIN_LIST_FAMILY); break; } case SCANNER_PLUGIN_LIST_FAMILY: { nvti_set_family (current_plugin, field); set_scanner_state (SCANNER_PLUGIN_LIST_PLUGIN_VERSION); break; } case SCANNER_PLUGIN_LIST_PLUGIN_VERSION: { nvti_set_version (current_plugin, field); set_scanner_state (SCANNER_PLUGIN_LIST_CVE_ID); break; } case SCANNER_PLUGIN_LIST_CVE_ID: { nvti_set_cve (current_plugin, field); set_scanner_state (SCANNER_PLUGIN_LIST_BUGTRAQ_ID); break; } case SCANNER_PLUGIN_LIST_BUGTRAQ_ID: { nvti_set_bid (current_plugin, field); set_scanner_state (SCANNER_PLUGIN_LIST_XREFS); break; } case SCANNER_PLUGIN_LIST_XREFS: { nvti_set_xref (current_plugin, field); set_scanner_state (SCANNER_PLUGIN_LIST_TAGS); switch (parse_scanner_plugin_list_tags (&messages)) { case -2: /* Need more input. */ if (sync_buffer ()) goto return_error; goto return_need_more; } break; } case SCANNER_NVT_INFO: { char* feed_version = g_strdup (field); tracef (" scanner got nvti_info: %s\n", feed_version); if (plugins_feed_version) g_free (plugins_feed_version); plugins_feed_version = feed_version; set_scanner_state (SCANNER_DONE); switch (parse_scanner_done (&messages)) { case 0: if (scanner_init_state == SCANNER_INIT_DONE) set_scanner_init_state (SCANNER_INIT_GOT_FEED_VERSION); else if (acknowledge_feed_version_info ()) goto return_error; break; case -1: goto return_error; case -2: /* Need more input. */ if (sync_buffer ()) goto return_error; goto return_need_more; } break; } case SCANNER_PREFERENCE_NAME: { /* Use match[1] instead of field[1] for UTF-8 hack. */ if (strlen (field) == 0 && match[1] == '|') { set_scanner_state (SCANNER_DONE); switch (parse_scanner_done (&messages)) { case -1: goto return_error; case -2: /* Need more input. */ if (sync_buffer ()) goto return_error; goto return_need_more; } if (scanner_init_state == SCANNER_INIT_DONE_CACHE_MODE || scanner_init_state == SCANNER_INIT_DONE_CACHE_MODE_UPDATE) { manage_complete_nvt_cache_update (scanner_plugins_list, scanner_init_state == SCANNER_INIT_DONE_CACHE_MODE ? -2 : -1); set_scanner_init_state (SCANNER_INIT_DONE); manage_nvt_preferences_enable (); /* Return 1, as though the scanner sent BYE. */ /** @todo Exit more formally with Scanner? */ goto return_bye; } break; } { int value_start = -1, value_end = -1, count; char name[21]; /* LDAPsearch[entry]:Timeout value */ count = sscanf (field, "%20[^[][%*[^]]]:%n%*[ -~]%n", name, &value_start, &value_end); if (count == 1 && value_start > 0 && value_end > 0 && ((strcmp (name, "SSH Authorization") == 0) || (strcmp (name, "SMB Authorization") == 0))) current_scanner_preference = NULL; else current_scanner_preference = g_strdup (field); set_scanner_state (SCANNER_PREFERENCE_VALUE); switch (parse_scanner_preference_value (&messages, progress)) { case -2: /* Need more input. */ if (sync_buffer ()) goto return_error; goto return_need_more; } g_free (current_scanner_preference); current_scanner_preference = NULL; } break; } case SCANNER_SERVER: if (strcasecmp ("BYE", field) == 0) set_scanner_state (SCANNER_BYE); else if (strcasecmp ("ERRMSG", field) == 0) set_scanner_state (SCANNER_ERRMSG_HOST); else if (strcasecmp ("FILE_ACCEPTED", field) == 0) { set_scanner_state (SCANNER_DONE); switch (parse_scanner_done (&messages)) { case -1: goto return_error; case -2: /* Need more input. */ if (sync_buffer ()) goto return_error; goto return_need_more; } } else if (strcasecmp ("ALARM", field) == 0) set_scanner_state (SCANNER_ALARM_HOST); else if (strcasecmp ("LOG", field) == 0) set_scanner_state (SCANNER_LOG_HOST); else if (strcasecmp ("NVT_INFO", field) == 0) set_scanner_state (SCANNER_NVT_INFO); else if (strcasecmp ("PLUGIN_LIST", field) == 0) { set_scanner_state (SCANNER_PLUGIN_LIST_OID); } else if (strcasecmp ("PREFERENCES", field) == 0) { assert (current_scanner_preference == NULL); set_scanner_state (SCANNER_PREFERENCE_NAME); } else if (strcasecmp ("TIME", field) == 0) { set_scanner_state (SCANNER_TIME); } else if (strcasecmp ("STATUS", field) == 0) { set_scanner_state (SCANNER_STATUS_HOST); } else { tracef ("New scanner command to implement: %s\n", field); goto return_error; } break; case SCANNER_STATUS_HOST: { assert (current_host == NULL); current_host = g_strdup (field); set_scanner_state (SCANNER_STATUS_PROGRESS); break; } case SCANNER_STATUS_PROGRESS: { /* Store the progress in the ports slots in the db. */ assert (current_report); if (current_report && current_host) { unsigned int current, max; tracef (" scanner got ports: %s\n", field); if (sscanf (field, "%u/%u", ¤t, &max) == 2) set_scan_ports (current_report, current_host, current, max); } if (current_host) { g_free (current_host); current_host = NULL; } set_scanner_state (SCANNER_DONE); switch (parse_scanner_done (&messages)) { case -1: goto return_error; case -2: /* Need more input. */ if (sync_buffer ()) goto return_error; goto return_need_more; } break; } case SCANNER_TIME: { if (strcasecmp ("HOST_START", field) == 0) set_scanner_state (SCANNER_TIME_HOST_START_HOST); else if (strcasecmp ("HOST_END", field) == 0) set_scanner_state (SCANNER_TIME_HOST_END_HOST); else if (strcasecmp ("SCAN_START", field) == 0) set_scanner_state (SCANNER_TIME_SCAN_START); else if (strcasecmp ("SCAN_END", field) == 0) set_scanner_state (SCANNER_TIME_SCAN_END); else /** @todo Consider reading all fields up to <|> SERVER? */ abort (); break; } case SCANNER_TIME_HOST_START_HOST: { assert (current_host == NULL); current_host = g_strdup (field); set_scanner_state (SCANNER_TIME_HOST_START_TIME); break; } case SCANNER_TIME_HOST_START_TIME: { if (current_scanner_task) { assert (current_host); set_scan_host_start_time_otp (current_report, current_host, field); g_free (current_host); current_host = NULL; } set_scanner_state (SCANNER_DONE); switch (parse_scanner_done (&messages)) { case -1: goto return_error; case -2: /* Need more input. */ if (sync_buffer ()) goto return_error; goto return_need_more; } break; } case SCANNER_TIME_HOST_END_HOST: { assert (current_host == NULL); current_host = g_strdup (field); set_scanner_state (SCANNER_TIME_HOST_END_TIME); break; } case SCANNER_TIME_HOST_END_TIME: { if (current_scanner_task) { assert (current_host); set_scan_host_end_time_otp (current_report, current_host, field); g_free (current_host); current_host = NULL; } set_scanner_state (SCANNER_DONE); switch (parse_scanner_done (&messages)) { case -1: goto return_error; case -2: /* Need more input. */ if (sync_buffer ()) goto return_error; goto return_need_more; } break; } case SCANNER_TIME_SCAN_START: { if (current_scanner_task) { if (task_run_status (current_scanner_task) == TASK_STATUS_REQUESTED) { set_task_run_status (current_scanner_task, TASK_STATUS_RUNNING); /* If the scan has been started before, then leave * the start time alone. */ if (scan_start_time_epoch (current_report) == 0) { set_task_start_time_otp (current_scanner_task, g_strdup (field)); set_scan_start_time_otp (current_report, field); } } } set_scanner_state (SCANNER_DONE); switch (parse_scanner_done (&messages)) { case -1: goto return_error; case -2: /* Need more input. */ if (sync_buffer ()) goto return_error; goto return_need_more; } break; } case SCANNER_TIME_SCAN_END: { if (current_scanner_task) { /* Stop transaction now, because delete_task_lock and * set_scan_end_time_otp run transactions themselves. */ manage_transaction_stop (TRUE); if (current_report) set_scan_end_time_otp (current_report, field); switch (task_run_status (current_scanner_task)) { case TASK_STATUS_INTERNAL_ERROR: break; case TASK_STATUS_STOP_REQUESTED: case TASK_STATUS_STOP_WAITING: set_task_run_status (current_scanner_task, TASK_STATUS_STOPPED); break; case TASK_STATUS_DELETE_REQUESTED: case TASK_STATUS_DELETE_WAITING: set_task_run_status (current_scanner_task, TASK_STATUS_STOPPED); delete_task_lock (current_scanner_task, 0); current_report = (report_t) 0; break; case TASK_STATUS_DELETE_ULTIMATE_REQUESTED: case TASK_STATUS_DELETE_ULTIMATE_WAITING: set_task_run_status (current_scanner_task, TASK_STATUS_STOPPED); delete_task_lock (current_scanner_task, 1); current_report = (report_t) 0; break; default: set_task_end_time (current_scanner_task, g_strdup (field)); set_task_run_status (current_scanner_task, TASK_STATUS_DONE); } clear_duration_schedules (current_scanner_task); update_duration_schedule_periods (current_scanner_task); current_report = (report_t) 0; current_scanner_task = (task_t) 0; } set_scanner_state (SCANNER_DONE); switch (parse_scanner_done (&messages)) { case -1: goto return_error; case -2: /* Need more input. */ if (sync_buffer ()) goto return_error; goto return_need_more; } break; } case SCANNER_TOP: default: tracef (" switch t\n"); tracef (" cmp %i\n", strcasecmp ("SERVER", field)); if (strcasecmp ("SERVER", field)) goto return_error; set_scanner_state (SCANNER_SERVER); /* Look for any newline delimited scanner commands. */ switch (parse_scanner_server (&messages)) { case 0: break; /* Found newline delimited command. */ case -1: goto return_error; /* Error. */ case -2: /* Need more input. */ if (sync_buffer ()) goto return_error; goto return_need_more; case -3: break; /* Next <|> is before next \n. */ case -4: break; /* Failed to find \n, try for <|>. */ } break; } tracef (" scanner new state: %i\n", scanner_state); continue; return_error: return -1; return_need_more: return 0; return_bye: return 1; } else { from_start += match + 1 - input; input = match + 1; } } if (sync_buffer ()) return -1; return 0; } openvas-manager-6.0.9/src/scanner.c000644 001751 001751 00000041777 12757560563 020305 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Module for OpenVAS Manager: Scanner Connection. * * Authors: * Hani Benhabiles * * Copyright: * Copyright (C) 2014 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #include "scanner.h" #include "ompd.h" #include "tracef.h" #include "otp.h" #include "ovas-mngr-comm.h" #include #include #include #include #include #include #include #include /* Current OpenVAS Scanner connection. */ gnutls_session_t openvas_scanner_session = NULL; gnutls_certificate_credentials_t openvas_scanner_credentials = NULL; int openvas_scanner_socket = -1; struct sockaddr_in openvas_scanner_address; char *openvas_scanner_ca_pub = NULL; char *openvas_scanner_key_pub = NULL; char *openvas_scanner_key_priv = NULL; /** * @brief Buffer of input from the scanner. */ char *from_scanner = NULL; /** * @brief The start of the data in the \ref from_scanner buffer. */ buffer_size_t from_scanner_start = 0; /** * @brief The end of the data in the \ref from_scanner buffer. */ buffer_size_t from_scanner_end = 0; /** * @brief The current size of the \ref from_scanner buffer. */ buffer_size_t from_scanner_size = 1048576; /** * @brief The max size of the \ref from_scanner buffer. */ buffer_size_t from_scanner_max_size = 1073741824; /** * @brief Read as much from the server as the \ref from_scanner buffer will * @brief hold. * * @return 0 on reading everything available, -1 on error, -2 if * from_scanner buffer is full or -3 on reaching end of file. */ int openvas_scanner_read () { if (openvas_scanner_socket == -1) return -1; while (!openvas_scanner_full ()) { ssize_t count; count = gnutls_record_recv (openvas_scanner_session, from_scanner + from_scanner_end, from_scanner_size - from_scanner_end); if (count < 0) { if (count == GNUTLS_E_AGAIN) /* Got everything available, return to `select'. */ return 0; if (count == GNUTLS_E_INTERRUPTED) /* Interrupted, try read again. */ continue; if (count == GNUTLS_E_REHANDSHAKE) { /** @todo Rehandshake. */ tracef (" should rehandshake\n"); continue; } if (gnutls_error_is_fatal (count) == 0 && (count == GNUTLS_E_WARNING_ALERT_RECEIVED || count == GNUTLS_E_FATAL_ALERT_RECEIVED)) { int alert = gnutls_alert_get (openvas_scanner_session); /*@dependent@*/ const char* alert_name = gnutls_alert_get_name (alert); g_warning ("%s: TLS Alert %d: %s\n", __FUNCTION__, alert, alert_name); } g_warning ("%s: failed to read from server: %s\n", __FUNCTION__, gnutls_strerror (count)); return -1; } if (count == 0) /* End of file. */ return -3; assert (count > 0); from_scanner_end += count; } /* Buffer full. */ return -2; } /** * @brief Check whether the buffer for data from Scanner is full. * * @return 1 if full, 0 otherwise. */ int openvas_scanner_full () { return !(from_scanner_end < from_scanner_size); } /** * @brief Reallocates the from_scanner buffer to a higher size. * * @return 1 if max size reached, 0 otherwise. */ int openvas_scanner_realloc () { if (from_scanner_size >= from_scanner_max_size) return 1; from_scanner_size *= 2; g_warning ("Reallocing to %d", from_scanner_size); from_scanner = g_realloc (from_scanner, from_scanner_size); return 0; } /** * @brief Write as much as possible from the to_scanner buffer to the scanner. * * @return 0 wrote everything, -1 error, -2 wrote as much as scanner accepted, * -3 did an initialisation step. */ int openvas_scanner_write (int nvt_cache_mode) { if (openvas_scanner_socket == -1) return -1; switch (scanner_init_state) { case SCANNER_INIT_TOP: switch (openvas_server_connect (openvas_scanner_socket, &openvas_scanner_address, &openvas_scanner_session)) { case 0: set_scanner_init_state (SCANNER_INIT_CONNECTED); /* The socket must have O_NONBLOCK set, in case an "asynchronous network * error" removes the data between `select' and `read'. */ if (fcntl (openvas_scanner_socket, F_SETFL, O_NONBLOCK) == -1) { g_warning ("%s: failed to set scanner socket flag: %s\n", __FUNCTION__, strerror (errno)); return -1; } /* Fall through to SCANNER_INIT_CONNECTED case below, to write * version string. */ break; default: return -1; } /*@fallthrough@*/ case SCANNER_INIT_CONNECTED: { char* string = "< OTP/2.0 >\n"; scanner_init_offset = write_string_to_server (&openvas_scanner_session, string + scanner_init_offset); if (scanner_init_offset == 0) set_scanner_init_state (SCANNER_INIT_SENT_VERSION); else if (scanner_init_offset == -1) { scanner_init_offset = 0; return -1; } if (nvt_cache_mode) { string = "CLIENT <|> NVT_INFO <|> CLIENT\n"; scanner_init_offset = write_string_to_server (&openvas_scanner_session, string + scanner_init_offset); if (scanner_init_offset == -1) { scanner_init_offset = 0; return -1; } } break; } case SCANNER_INIT_SENT_VERSION: return 0; case SCANNER_INIT_SENT_COMPLETE_LIST: case SCANNER_INIT_SENT_COMPLETE_LIST_UPDATE: return 0; case SCANNER_INIT_GOT_FEED_VERSION: if (nvt_cache_mode) { static char* const ack = "CLIENT <|> COMPLETE_LIST <|> CLIENT\n"; scanner_init_offset = write_string_to_server (&openvas_scanner_session, ack + scanner_init_offset); if (scanner_init_offset == 0) set_scanner_init_state (nvt_cache_mode == -1 ? SCANNER_INIT_SENT_COMPLETE_LIST_UPDATE : SCANNER_INIT_SENT_COMPLETE_LIST); else if (scanner_init_offset == -1) { scanner_init_offset = 0; return -1; } break; } /*@fallthrough@*/ case SCANNER_INIT_GOT_PLUGINS: { static char* const ack = "\n"; scanner_init_offset = write_string_to_server (&openvas_scanner_session, ack + scanner_init_offset); if (scanner_init_offset == 0) { if (nvt_cache_mode == -1) set_scanner_init_state (SCANNER_INIT_DONE_CACHE_MODE_UPDATE); else if (nvt_cache_mode == -2) set_scanner_init_state (SCANNER_INIT_DONE_CACHE_MODE); else set_scanner_init_state (SCANNER_INIT_DONE); } else if (scanner_init_offset == -1) { scanner_init_offset = 0; return -1; } else break; } /*@fallthrough@*/ case SCANNER_INIT_DONE: case SCANNER_INIT_DONE_CACHE_MODE: case SCANNER_INIT_DONE_CACHE_MODE_UPDATE: while (1) switch (write_to_server_buffer (&openvas_scanner_session)) { case 0: return 0; case -1: return -1; case -2: return -2; case -3: continue; /* Interrupted. */ } } return -3; } /** * @brief Wait for the scanner socket to be writable. * * @return 0 on success, -1 on error. */ int openvas_scanner_wait () { if (openvas_scanner_socket == -1) return -1; while (1) { int ret; struct timeval timeout; fd_set writefds; timeout.tv_usec = 0; timeout.tv_sec = 1; FD_ZERO (&writefds); FD_SET (openvas_scanner_socket, &writefds); ret = select (1 + openvas_scanner_socket, NULL, &writefds, NULL, &timeout); if (ret < 0) { if (errno == EINTR) continue; g_warning ("%s: select failed (connect): %s\n", __FUNCTION__, strerror (errno)); return -1; } if (FD_ISSET (openvas_scanner_socket, &writefds)) break; } return 0; } /** * @brief Load certificates from the CA directory. * * @param[in] scanner_credentials Scanner credentials. * * @return 0 success, -1 error. */ static int load_cas (gnutls_certificate_credentials_t *scanner_credentials) { DIR *dir; struct dirent *ent; dir = opendir (CA_DIR); if (dir == NULL) { if (errno != ENOENT) { g_warning ("%s: failed to open " CA_DIR ": %s\n", __FUNCTION__, strerror (errno)); return -1; } } else while ((ent = readdir (dir))) { gchar *name; struct stat state; if ((strcmp (ent->d_name, ".") == 0) || (strcmp (ent->d_name, "..") == 0)) continue; name = g_build_filename (CA_DIR, ent->d_name, NULL); stat (name, &state); if (S_ISREG (state.st_mode) && (gnutls_certificate_set_x509_trust_file (*scanner_credentials, name, GNUTLS_X509_FMT_PEM) < 0)) { g_warning ("%s: gnutls_certificate_set_x509_trust_file failed: %s\n", __FUNCTION__, name); g_free (name); closedir (dir); return -1; } g_free (name); } if (dir != NULL) closedir (dir); return 0; } /** * @brief Finish the connection to the Scanner and free internal buffers. * * @return -1 if error, 0 if success. */ int openvas_scanner_close () { int rc; if (openvas_scanner_socket == -1) return -1; rc = openvas_server_free (openvas_scanner_socket, openvas_scanner_session, openvas_scanner_credentials); openvas_scanner_socket = -1; openvas_scanner_session = NULL; openvas_scanner_credentials = NULL; g_free (from_scanner); from_scanner = NULL; return rc; } /** * @brief Create a new connection to the scanner and set it as current scanner. * * @return 0 on success, -1 on error. */ int openvas_scanner_connect () { openvas_scanner_socket = socket (PF_INET, SOCK_STREAM, 0); if (openvas_scanner_socket == -1) { g_warning ("%s: failed to create scanner socket: %s\n", __FUNCTION__, strerror (errno)); return -1; } /* Make the scanner socket. */ if (openvas_server_new_mem (GNUTLS_CLIENT, openvas_scanner_ca_pub, openvas_scanner_key_pub, openvas_scanner_key_priv, &openvas_scanner_session, &openvas_scanner_credentials)) { close (openvas_scanner_socket); openvas_scanner_socket = -1; return -1; } if (load_cas (&openvas_scanner_credentials)) { openvas_scanner_close (); return -1; } init_otp_data (); return 0; } /** * @brief Free the scanner allocated data. Doesn't close socket and terminate * the session. */ void openvas_scanner_free () { openvas_scanner_socket = -1; if (openvas_scanner_session) gnutls_deinit (openvas_scanner_session); openvas_scanner_session = NULL; if (openvas_scanner_credentials) gnutls_certificate_free_credentials (openvas_scanner_credentials); openvas_scanner_credentials = NULL; memset (&openvas_scanner_address, '\0', sizeof (openvas_scanner_address)); g_free (openvas_scanner_ca_pub); g_free (openvas_scanner_key_pub); g_free (openvas_scanner_key_priv); openvas_scanner_ca_pub = NULL; openvas_scanner_key_pub = NULL; openvas_scanner_key_priv = NULL; } /** * @brief Check if connected to Scanner is set in an fd_set. * * @param[in] fd File descriptor set. * * @return 1 if scanner socket in fd_set, 0 if not connected or or not set. */ int openvas_scanner_fd_isset (fd_set *fd) { if (openvas_scanner_socket == -1) return 0; return FD_ISSET (openvas_scanner_socket, fd); } /** * @brief Add connected to Scanner's socket to an fd_set. * * @param[in] fd File Descriptor set. */ void openvas_scanner_fd_set (fd_set *fd) { if (openvas_scanner_socket == -1) return; FD_SET (openvas_scanner_socket, fd); } /** * @brief Check if there is any data to receive from connected Scanner socket. * * @return 1 if there is data in socket buffer, 0 if no data or not connected * to a scanner. */ int openvas_scanner_peek () { char chr; if (openvas_scanner_socket == -1) return 0; return recv (openvas_scanner_socket, &chr, 1, MSG_PEEK); } /** * @brief Get the nfds value to use for a select() call. * * @param[in] socket Socket to compare to. * * @return socket + 1 if socket value is higher then scanner's or not * connected to a scanner, scanner socket + 1 otherwise. */ int openvas_scanner_get_nfds (int socket) { if (socket > openvas_scanner_socket) return 1 + socket; else return 1 + openvas_scanner_socket; } /** * @brief Check if there is any data to receive from connected Scanner session. * * @return 1 if there is data in session buffer, 0 if no data or not connected * to a scanner. */ int openvas_scanner_session_peek () { if (openvas_scanner_socket == -1) return 0; return !!gnutls_record_check_pending (openvas_scanner_session); } /** * @brief Whether we have started a connection to the Scanner using * openvas_scanner_connect(). * * @return 1 if connected, 0 otherwise. */ int openvas_scanner_connected () { return openvas_scanner_socket == -1 ? 0 : 1; } /** * @brief Initializes the already setup connection with the Scanner. * * @param[in] cache_mode NVT Cache mode if true, which means sending NVT_INFO * command to scanner in initial negotiation. * * @return 0 success, -1 error. */ int openvas_scanner_init (int cache_mode) { int ret; if (openvas_scanner_socket == -1) return -1; from_scanner = g_malloc0 (from_scanner_size); ret = openvas_scanner_write (cache_mode); if (ret != -3) { openvas_scanner_free (); return -1; } if (openvas_scanner_wait ()) return -2; return 0; } /** * @brief Set the scanner's address and port. Will try to resolve addr if it is * a hostname. * * @param[in] addr Scanner address string. * @param[in] port Scanner port. * * @return 0 success, -1 error. */ int openvas_scanner_set_address (const char *addr, int port) { if (port < 1 || port > 65535) return -1; memset (&openvas_scanner_address, '\0', sizeof (openvas_scanner_address)); openvas_scanner_address.sin_family = AF_INET; openvas_scanner_address.sin_port = htons (port); if (openvas_resolve (addr, &openvas_scanner_address.sin_addr, AF_INET)) return -1; return 0; } /** * @brief Set the scanner's CA Certificate, and public/private key pair. * * @param[in] ca_pub CA Certificate. * @param[in] key_pub Scanner Certificate. * @param[in] key_priv Scanner private key. */ void openvas_scanner_set_certs (const char *ca_pub, const char *key_pub, const char *key_priv) { if (ca_pub) openvas_scanner_ca_pub = g_strdup (ca_pub); if (key_pub) openvas_scanner_key_pub = g_strdup (key_pub); if (key_priv) openvas_scanner_key_priv = g_strdup (key_priv); } /** * @brief Checks whether the connected to OpenVAS Scanner is still loading * plugins. To be called right after openvas_scanner_init(). * * @return 1 if loading, 0 if not loading or error. */ int openvas_scanner_is_loading () { /* Add little delay in case we read before scanner write, as the socket is * non-blocking. */ openvas_usleep (500000); openvas_scanner_read (); if (process_otp_scanner_input (NULL) == 3) return 1; return 0; } openvas-manager-6.0.9/src/schema_formats/XML/generate000755 001751 001751 00000001773 12557600614 023641 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: Schema generator script: OMP XML. # # This schema generator is the most trivial one as it simply passes on the # OMP XML schema as is. # # Authors: # Matthew Mundell # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. cat $1 exit 0 openvas-manager-6.0.9/src/schema_formats/XML/OMP.xml.in000644 001751 001751 00002353333 12757560562 023720 0ustar00michaelmichael000000 000000 OpenVAS Management Protocol OMP The "management" protocol of the Open Vulnerability Assessment System @OMP_VERSION@ alive_test An alive test xsd:token { pattern = "ICMP, TCP Service & ARP Ping|TCP Service & ARP Ping|ICMP & ARP Ping|ICMP & TCP Service Ping|ARP Ping|TCP Service Ping|ICMP Ping|Scan Config Default" } base64 Base64 encoded data xsd:base64Binary boolean A true or false value Zero is false, anything else is true. As a result, the empty string is considered true. text boolean_atoi A true or false value, after conversion to an integer Zero is false, anything else is true. The value is first converted to an integer, as by the C `atoi' routine. This means that an empty string is considered false. text ctime A date and time, in the C `ctime' format An example string in this format is "Wed Jun 30 21:49:08 1993\n". text type_name A name of a data type xsd:Name integer An integer xsd:integer iso_time A date and time, in ISO 8601 format An example string in this format is "2011-11-08T19:57:06+02:00". text levels A string that may include the characters h, m, l, g and d xsd:token { pattern = "h?m?l?g?d?" } name A name Typically this is the name of one of the manager resources, like a task or target. xsd:string port A port xsd:token { pattern = "[0-9]{1,5}" } user_list A space separated list of users text oid An Object Identifier (OID) xsd:token { pattern = "[0-9\.]{1,80}" } severity A severity score A severity score is a decimal number between 0.0 and 10.0 (inclusive) with one digit after the decimal point or a special negative value (-1.0, -2.0 or -3.0). If a single severity score defines a constraint, e.g. on whether an override applies, for values 0.0 and lower the severity must be equal to match while for > 0.0 the compared value must be greater or equal. xsd:token { pattern = "-[1-3](\.0)?|[0-9](\.[0-9])?|10(\.0)?" } sort_order A string describing an order for sorting The string "descending" denotes descending order, anything else means ascending. text status The success or failure status of a command xsd:token { pattern = "200|201|202|400|401|403|404|409|500|503" } task_status A task run status xsd:token { pattern = "Delete Requested|Done|New|Requested|Running|Stop Requested|Stopped|Internal Error" } task_trend The trend of results for a task xsd:token { pattern = "up|down|more|less|same" } threat A threat level Threat levels are a textual classification of severity scores only supported for importing reports from OpenVAS-6 and older. The use of these elements is deprecated as they are otherwise replaced by severity elements, which should be used instead. xsd:token { pattern = "High|Medium|Low|Alarm|Log|Debug" } time_unit A unit of time xsd:token { pattern = "second|minute|hour|day|week|month|year|decade" } timezone A timezone

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The format of a timezone is the same as that of the TZ environment variable on GNU/Linux systems. That is, the same value accepted by the tzset C function. There are three versions of the format. Note the lack of spaces in the examples.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "std offset" defines a simple timezone. For example, "FOO+2" defines a timezone FOO which is 2 hours behind UTC.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "std offset dst [offset],start[/time],end[/time]" defines a timezone, including daylight savings time. For example, "NZST-12.00:00NZDT-13:00:00,M10.1.0,M3.3.0".

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ":[filespec]" refers to a predefined timezone. For example, ":Africa/Johannesburg". Note that the colon is optional. Certain acronyms are predefined, such as GB, NZ and CET.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        text                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         uuid A Universally Unique Identifier (UUID) xsd:token { pattern = "[0-9abcdefABCDEF\-]{1,40}" } uuid_or_empty A Universally Unique Identifier (UUID), or the empty string xsd:token { pattern = "[0-9abcdefABCDEF\-]{0,40}" } c A reference to a command text e A reference to an element text r A reference to a response text o An optional pattern item c e r g g A group of pattern items c e r o any any Pattern item indicating "any number of" c e r g pattern The pattern element of a command or command descendant It's actually either a 't' element, or the word "text", or "". attrib c e r o g any t text attrib An attribute name type required name type_name type type_name required boolean t The type of the text of the element type_name command_definition Definition of a command in OMP describing HELP command name summary description pattern response type ele example name The name of the command The name must be unique type_name summary A summary of the command text description A description of the command p text p A paragraph text pattern pattern response pattern example summary description request response summary text description text request Example request This can actually contain any XML text response Response to example request This can actually contain any XML text type The type of the element text ele An element

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        This is a recursive definition.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        command_definition actually includes an extra response element, but it's convenient to use it for the elements.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        command_definition                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         note A note id uuid 1 permissions owner nvt text creation_time modification_time writable in_use active orphan user_tags hosts port severity threat task end_time result permissions Permissions that the current user has on the note permission permission name name The name of the permission name owner Owner of the note name name The name of the owner name nvt oid oid 1 name name name creation_time Date and time the note was created iso_time modification_time Date and time the note was last modified iso_time writable boolean in_use boolean active Whether the note is active boolean text The text of the note excerpt Whether the content is an excerpt of the full text boolean 1 text orphan Whether the note is an orphan boolean user_tags Info on tags attached to the note count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text hosts A textual list of hosts text port Port to which note applies text severity Severity to which note applies severity threat Threat level to which note applies threat task Task to which note applies id uuid 1 active Whether the note is active integer end_time End time of the note in case of limit, else empty text result Result to which note applies id uuid 1 host port nvt severity threat qod description host text port text nvt oid oid 1 name cvss_base cve bid name name cvss_base text cve CVE value associated with the NVT text bid BID associated with the NVT integer severity severity threat threat qod The quality of detection (QoD) of the result value type value The numeric QoD value integer type The QoD type text description text override An override id uuid 1 permissions owner nvt creation_time modification_time writable in_use active text threat severity new_threat new_severity orphan permissions user_tags hosts port task end_time result permissions Permissions that the current user has on the note permission permission name name The name of the permission name owner Owner of the override name name name nvt oid oid 1 name name name creation_time Date and time the override was created iso_time modification_time Date and time the override was last modified iso_time writable boolean in_use boolean active Whether the override is currently active boolean text The text of the override excerpt Whether the contents is an excerpt of the full text boolean 1 text threat Threat level to which override applies, derived from severity threat severity Severity score to which override applies severity new_threat New threat for result threat new_severity New severity score for result severity orphan Whether the override is an orphan boolean user_tags Info on tags attached to the override count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text hosts A textual list of hosts text port Port to which override applies text task Task to which override applies id uuid 1 active Whether the override is active integer end_time Override end time in case of limit, else empty text result Result to which override applies id uuid 1 host port nvt threat severity qod description host text port text nvt oid oid 1 name cvss_base cve bid name name cvss_base text cve CVE value associated with the NVT text bid BID associated with the NVT integer threat threat severity severity qod The quality of detection (QoD) of the result value type value The numeric QoD value integer type The QoD type text description text result A result id uuid 1 name owner comment creation_time modification_time user_tags report task host port nvt scan_nvt_version threat severity qod original_threat original_severity description delta details detection notes overrides name The name of the result text owner Owner of the result name name The name of the owner name comment The comment on the result text creation_time Date and time the result was created iso_time modification_time Date and time the result was last modified iso_time user_tags Info on tags attached to the result (not in delta results) count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text report Report the result belongs to (only when details were requested) id uuid UUID of the report the result belongs to 1 task Task the result applies to (only when details were requested) id uuid UUID of the task the result applies to 1 name name text Name of the task the result applies to host text port text nvt NVT to which result applies oid oid 1 name family cvss_base cve bid tags cert xref name The name of the NVT name family The family the NVT is in name cvss_base CVSS base value associated with the NVT integer cve CVE associated with the NVT text bid BID associated with the NVT text tags Tags associated with the NVT text cert List of CERT advisories referencing this NVT via CVEs cert_ref cert_ref A CERT advisory reference id ID of the advisory text type Type of the advisory (e.g. "DFN-CERT", "CERT-BUND") text xref XREFs associated with the NVT text scan_nvt_version Version of the NVT used in the scan text threat threat severity severity qod The quality of detection (QoD) of the result value type value The numeric QoD value integer type The QoD type text original_threat Original threat when overridden threat original_severity Original severity when overridden severity description Description of the result text delta Delta state result diff notes overrides text result Delta result result diff Comparison between descriptions text notes List of notes on the result note note note overrides overrides List of overrides on the result override override override details Any details associated with the result detail detail A detail associated with the result name value name The name of the detail text value The value of the detail text detection Detection details result result Detection result id UUID of the detection result 1 uuid details details detail detail A detail associated with the detection result name value name The name of the detail text value The value of the detail text notes List of notes on the result note note note overrides overrides List of overrides on the result override override override report Actually attributes and either base64 or a report id uuid 1 format_id uuid 1 extension text 1 content_type text 1 type scan assets prognostic base64 owner name comment creation_time modification_time writable in_use task report_format report owner Owner of the report name name The name of the owner name name Creation time as compatibility placeholder comment The comment on the report text creation_time Date and time the report was created iso_time modification_time Date and time the report was last modified iso_time in_use Whether the report is in use boolean writable Whether the report is writable boolean task The task the report belongs to id uuid 1 name name The name of the task name report_format The report format used id uuid 1 name name The name of the report format name report id uuid 1 type scan assets prognostic omp report_format sort filters severity_class delta timezone timezone_abbrev permissions user_tags scan_run_status result_count severity host_count task scan ports results hosts closed_cves vulns os apps ssl_certs host timestamp scan_start host_start host_end scan_end errors omp Information of the OMP server version version The OMP version text report_format param param Report format parameter name value name Parameter name text value Parameter value text delta report report Second report, for delta reports id uuid 1 scan_run_status timestamp scan_start scan_end scan_run_status Run status of task scan at time of report task_status timestamp The time the scan was requested iso_time scan_start Start time of scan iso_time scan_end End time of scan iso_time sort Result sorting information field field Sort field text order order Sort order of field ascending descending filters Result filtering information id Filter used if any, else 0 uuid levels term phrase notes overrides apply_overrides result_hosts_only min_cvss_base min_qod autofp filter host delta term Filter term text phrase Search phrase text notes Whether notes are included 01 overrides Whether overrides are included 01 apply_overrides Whether overrides are applied 01 result_hosts_only Whether only those hosts that have results are included 01 min_cvss_base Minimum CVSS base if in effect, else empty string text min_qod Minimum QoD if in effect, else empty string text autofp Whether to trust vendor security updates. 1 full match, 2 partial xsd:token { pattern = "0|1|2" } filter Level filter High Medium Low Log Debug host ip ip IP of single host in report (for "delta" and "prognostic") text delta Delta states text changed gone new same changed Whether changed results are included boolean gone Whether results that have vanished are included boolean new Whether new results are included boolean same Whether results that are equal are included boolean timezone Name of timezone used for dates timezone timezone_abbrev Abbreviation used for timezone text permissions Permissions that the current user has on the report permission permission name name The name of the permission name user_tags Info on tags attached to the report count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text scan_run_status Run status of task scan at time of report task_status result_count Counts of results produced by scan

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The text contains the full count -- the total number of results produced by scan.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        text full filtered debug hole info log warning full Total number of results produced by scan integer filtered Number of results after filtering integer debug Number of "debug" results (threat level Debug) full filtered full Total number of results integer filtered Number of results after filtering integer hole Number of "hole" results (threat level High) full filtered full Total number of results integer filtered Number of results after filtering integer info Number of "info" results (threat level Low) full filtered full Total number of results integer filtered Number of results after filtering integer log Number of "log" results (threat level Log) full filtered full Total number of results integer filtered Number of results after filtering integer warning Number of "warning" results (threat level Medium) full filtered full Total number of results integer filtered Number of results after filtering integer                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         severity full filtered full severity Maximum severity of the full report filtered severity Maximum severity of the report after filtering severity_class name full_name severity_range name nist classic pci-dss Short severity class name full_name text Full severity class name severity_range Severity range name min max name Name of severity range name min Minimum CVSS value integer max Maximum CVSS value integer host_count Counts of hosts in the results

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        This is only present in the "assets" report.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        full filtered full Total number of hosts integer filtered Number of hosts after filtering integer                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         task id uuid 1 name comment target progress user_tags name The name of the task name comment Comment for the task text target The target of the task id uuid The UUID of the target trash trash Whether the target is in the trashcan boolean progress The percentage of the task that is complete integer user_tags Info on tags attached to the task count tag count Number of attached tags integer tag Short info on an individual tag id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text scan Info from scan time task task slave preferences slave The task slave id uuid 1 name host port name name host text port text preferences Currently only "source_iface" preference preference name scanner_name value name Full name of preference, suitable for end users text scanner_name Compact name of preference, from scanner text value text ports start integer 1 max integer 1 port port text host severity threat host text severity severity threat threat results start integer 1 max integer 1 result result A result result hosts

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Analogous to the results element, but for hosts, in the "assets" report. However to keep backward compatibility the host elements are siblings of this element, instead of children.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Contains only the count outside the "assets" report.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        start integer 1 max integer 1 count count Number of hosts                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         closed_cves count count The number of closed CVEs vulns count count The number of Vulnerabilities os count count The number of operating systems apps count count The number of Applications ssl_certs count count The number of SSL certificates host ip start end detail ip IP of the host text start Scan start time for this host text end Scan end time for this host text detail A detail associated with the host name value source name The name of the detail text value The value of the detail text source Where the detail comes from type name description type The type of the detail source text name The name of the detail source text description A description of the detail source text timestamp The time the scan was requested iso_time scan_start Start time of scan iso_time host_start Start time of a particular host iso_time host host text host_end End time of a particular host iso_time host host text scan_end End time of scan iso_time errors count error count The number of error messages error An error message host port description nvt scan_nvt_version severity host The host of the error message text port The port of the error message port description The description of the error message text nvt The NVT that generated the error message oid 1 name cvss_base name The name of the NVT text cvss_base The base CVSS score of the NVT severity scan_nvt_version The NVT version that generated the error text severity The severity score of the error message severity                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         authenticate Authenticate with the manager

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the authenticate command to authenticate with the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client normally executes this command at the beginning of each connection. The only commands permitted before authentication are get_version and commands.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        credentials credentials username password username The login name of the user text password The user's password text status status 1 status_text text 1 role timezone role The user's role User Admin Super Admin Observer timezone The user's timezone timezone Authenticate with a good password sally secret User UTC Authenticate with a bad password sally secrte                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         commands Run a list of commands The client uses the commands command to run a list of commands. The elements are executed as OMP commands in the given sequence. The reply contains the result of each command, in the same order as the given commands. authenticate commands create_agent create_alert create_config create_filter create_group create_lsc_credential create_note create_override create_permission create_port_list create_port_range create_report_format create_role create_scanner create_schedule create_slave create_tag create_target create_task create_user delete_agent delete_alert delete_config delete_filter delete_group delete_lsc_credential delete_note delete_override delete_permission delete_report delete_report_format delete_role delete_port_list delete_port_range delete_scanner delete_schedule delete_slave delete_tag delete_target delete_task delete_user describe_auth describe_cert describe_feed describe_scap empty_trashcan get_agents get_alerts get_configs get_filters get_groups get_info get_lsc_credentials get_notes get_nvts get_nvt_families get_nvt_feed_version get_overrides get_permissions get_port_lists get_preferences get_reports get_report_formats get_results get_roles get_scanners get_schedules get_settings get_slaves get_system_reports get_tags get_targets get_tasks get_users get_version help modify_agent modify_alert modify_auth modify_config modify_filter modify_group modify_lsc_credential modify_note modify_override modify_permission modify_port_list modify_report modify_report_format modify_role modify_scanner modify_schedule modify_setting modify_slave modify_tag modify_target modify_task modify_user restore resume_task run_wizard start_task stop_task sync_feed sync_scap sync_cert test_alert status status 1 status_text text 1 authenticate commands create_agent create_alert create_config create_filter create_group create_lsc_credential create_note create_override create_permission create_port_list create_port_range create_role create_scanner create_schedule create_slave create_tag create_target create_task create_user delete_agent delete_alert delete_config delete_filter delete_group delete_lsc_credential delete_note delete_override delete_permission delete_port_list delete_port_range delete_report delete_report_format delete_role delete_scanner delete_schedule delete_slave delete_tag delete_target delete_task delete_user describe_auth describe_cert describe_feed describe_scap empty_trashcan get_agents get_alerts get_configs get_groups get_info get_lsc_credentials get_filters get_notes get_nvts get_nvt_families get_nvt_feed_version get_overrides get_permissions get_port_lists get_preferences get_reports get_report_formats get_results get_roles get_slaves get_scanners get_schedules get_settings get_system_reports get_tags get_targets get_tasks get_users get_version help modify_agent modify_alert modify_auth modify_config modify_filter modify_group modify_lsc_credential modify_note modify_override modify_permission modify_port_list modify_report modify_report_format modify_role modify_scanner modify_schedule modify_setting modify_slave modify_tag modify_target modify_task modify_user restore resume_task run_wizard start_task stop_task sync_feed sync_scap sync_cert test_alert create_agent Create an agent

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_agent command to create a new agent.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        installer name comment copy howto_install howto_use installer A file that installs the agent on a target machine base64 signature signature A detached OpenPGP signature of the installer base64 name A name for the installer name comment A comment on the agent text copy The UUID of an existing agent uuid howto_install A file that describes how to install the agent base64 howto_use A file that describes how to use the agent base64 status status 1 status_text text 1 id uuid 1 Create an agent asdf3235saf3kjBVF... iEYEABECAAYFA... SLAD                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         create_config Create a config

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_config command to create a new config.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        This command can be called in three ways:
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • With a copy element. The new config is a copy of the existing config, with the given name.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • With an embedded get_configs response element. The config is created as defined by the get_configs response element. Name is actually optional in this case. The config is given the name of the config in the get_configs response. If there is already a config with this name, then a number is attached to the name to make it unique.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • comment copy get_configs name comment A comment on the config text copy The UUID of an existing config uuid name A name for the config name status status 1 status_text text 1 id uuid 1 Copy a config daba56c8-73ec-11df-a475-002264764cea Full Create a config from a GET_CONFIGS response Full and fast ...                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         create_alert Create an alert

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_alert command to create a new alert.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        name comment copy condition event method filter name A name for the alert name comment A comment on the alert text copy The UUID of an existing alert uuid condition The condition that must be satisfied for the alert to occur text data data Some data that defines the condition text name name The name of the condition data text event The event that must happen for the alert to occur text data data Some data that defines the event text name name The name of the event data text method The method by which the user is alerted text data data Some data that defines the method text name name The name of the method data text filter Filter to apply when executing alert id uuid 1 status status 1 status_text text 1 id uuid 1 Create an alert emergency Severity at least severity 5.5 Task run status changed status Done Email to_address sally@example.org from_address bob@example.org                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         create_filter Create a filter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_filter command to create a new filter.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        name comment copy term type name A name for the filter name make_unique make_unique Whether to append a unique suffix if the name already exists boolean comment A comment on the filter text copy The UUID of an existing filter uuid term Filter term text type Resource type text status status 1 status_text text 1 id uuid 1 Create a filter Single Targets Targets with only one host ips=1 first=1 rows=-2 target                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         create_group Create a group

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_group command to create a new group.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        name comment copy users name A name for the group name comment A comment on the group text copy The UUID of an existing group uuid users Comma separated list of user names text status status 1 status_text text 1 id uuid 1 Create a group Managers sarah, bob                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         create_lsc_credential Create an LSC credential

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_lsc_credential command to create a new LSC credential.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        If the command includes a key, then the manager creates a key-based credential from the key. If the command includes a password, then the manager creates a password only credential. Otherwise the manager autogenerates a key-based credential.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        name comment copy key login password name A name for the LSC credential name comment A comment on the LSC credential text copy The UUID of an existing LSC credential uuid key phrase private phrase Key passphrase text private Private key text login The user name of the credential text password The password for the credential login text status status 1 status_text text 1 id uuid 1 Create an LSC credential cluster sally sally secret Sally's login to the cluster.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         create_note Create a note

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_note command to create a new note.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        text nvt active comment copy hosts port result severity task threat text The text of the note text nvt NVT to which note applies oid oid 1 active Seconds note will be active. -1 on always, 0 off integer comment A comment on the note text copy The UUID of an existing note uuid hosts A textual list of hosts text port Port to which note applies text result Result to which note applies id uuid 1 severity Severity to which note applies severity task Task to which note applies id uuid 1 threat Threat level to which note applies. Will be converted to severity threat status status 1 status_text text 1 id uuid 1 Create a note This issue should be resolved after the upgrade. 1.3.6.1.4.1.25623.1.0.10330 254cd3ef-bbe1-4d58-859d-21b8d0c046c6                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         create_override Create an override

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_override command to create a new override.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        text nvt active comment copy hosts new_severity new_threat port result severity task threat text The text of the override text active Seconds override will be active. -1 on always, 0 off integer nvt NVT to which override applies oid oid 1 comment A comment on the override text copy The UUID of an existing override uuid hosts A textual list of hosts text new_severity New severity for result severity new_threat New threat level for result, will be converted to a new_severity threat port Port to which override applies text result Result to which override applies id uuid 1 severity Severity score to which override applies severity task Task to which override applies id uuid 1 threat Threat level to which override applies, will be converted to severity threat status status 1 status_text text 1 id uuid 1 Create an override This is actually of little concern. 1.3.6.1.4.1.25623.1.0.10330 Low 254cd3ef-bbe1-4d58-859d-21b8d0c046c6                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         create_permission Create a permission

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_permission command to create a new permission.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        name subject resource copy comment name A permission name, currently the name of a command text subject A subject to whom the permission is granted id uuid 0 type type OMP type of the subject: user, group or role text resource A resource to which the permission applies id uuid 0 type type OMP type, for Super permissions: user, group or role text copy UUID of an existing permission to copy uuid comment Comment on the permission text status status 1 status_text text 1 id uuid 1 Grant a user permission to view a target get_target user Grant a role permission to create users create_user role                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         create_port_list Create a port list

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_port_list command to create a new port list.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The get_port_lists_response element overrides the port_range element.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        name comment copy port_range get_port_lists name The name of the port list name comment A comment on the port list text copy The UUID of an existing agent uuid port_range Comma or newline separated list of ranges text status status 1 status_text text 1 id uuid 1 Create a port list All TCP All possible TCP ports T:1-65535                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         create_port_range Create a port range

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_port_range command to create a new port range.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        comment port_list start end type comment A comment on the port range text port_list The port list to which to add the range id uuid 1 start The first port in the range port end The last port in the range port type The type of the ports: TCP, UDP, ... text status status 1 status_text text 1 id uuid 1 Add a port range to a port list 777 779 TCP                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         create_report Create a report

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_report command to import a report.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        report task report A report wrapper, as in the GET_REPORTS response report task Task for report: id to use existing task, name to create new task id uuid 0 name comment name The name of the task name comment Comment for the new task text status status 1 status_text text 1 id uuid 1 Create a report in a new task CPE csv text/csv Common Product Enumeration CSV table. CPE stands for Common Product Enumeration. It is a ... 1 1 yes 1 Imported reports                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         create_report_format Create a report format

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_report_format command to create a new report format.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        copy get_report_formats copy The UUID of an existing report format uuid status status 1 status_text text 1 id uuid 1 Create a report format CPE csv text/csv Common Product Enumeration CSV table. CPE stands for Common Product Enumeration. It is a ... 1 1 yes 1                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         create_role Create a role

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_role command to create a new role.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        name comment copy users name A name for the role name comment A comment on the role text copy The UUID of an existing role uuid users Comma separated list of user names text status status 1 status_text text 1 id uuid 1 Create a role SCAP Observer sarah, bob                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         create_scanner Create a scanner

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_scanner command to create a new scanner.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        name comment copy host port type ca_pub key_pub key_priv name A name for the scanner name comment A comment on the scanner text copy The UUID of an existing scanner uuid host The host of the scanner text port The port of the scanner text type The type of the scanner

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Type value of '1' for OSP, '2' for OpenVAS (classic) Scanner.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         text                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         ca_pub Certificate of CA to verify scanner certificate. text key_pub Certificate to authenticate with to the Scanner. text key_priv Private key to authenticate with to the Scanner text status status 1 status_text text 1 id uuid 1 Create a scanner Default Scanner localhost 9391 2 ... ... ...                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         create_schedule Create a schedule

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_schedule command to create a new schedule.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        name comment copy first_time duration period timezone name A name for the schedule name comment A comment on the schedule text copy The UUID of an existing schedule uuid first_time The first time the schedule will run minute hour day_of_month month year minute integer hour integer day_of_month integer month integer year integer duration How long the Manager will run the scheduled task for A duration of 0 means to run to completion. unit unit Duration time unit time_unit period How often the Manager will repeat the scheduled task A period of 0 means to run once. unit unit Period time unit time_unit timezone The timezone the schedule will follow timezone status status 1 status_text text 1 id uuid 1 Create a schedule Every night 1 0 0 1 2011 3 hour 1 day                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         create_slave Create a slave

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_slave command to create a new slave.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        name comment copy host port login password name A name for the slave name comment A comment on the slave text copy The UUID of an existing slave uuid host The host that the slave Manager is running on text port The port that the slave Manager is serving on the host text login Login name on the slave Manager text password Password for login on the slave Manager text status status 1 status_text text 1 id uuid 1 Create a slave Bangkok Manager in Bangkok department. 192.0.32.10 sally secret                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         create_tag Create a tag

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_tag command to create a new tag. A name and the resource type must be provided. If a resource ID is also given, it must refer to an existing resource.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        name resource copy value comment active name A full tag name consisting of namespace and predicate text resource Identifies a resource the tag is to be attached to id ID of the resource the tag is to be attached to uuid 0 type type OMP type of the resource the tag is to be attached to text copy UUID of an existing tag to copy uuid value Value associated with the tag text comment Comment to add to the tag text active Whether the tag is active boolean status status 1 status_text text 1 id uuid 1 Create a tag attached to a target geo:long target 52.2788                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         create_target Create a target

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_target command to create a new target.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        If the list of hosts is empty, the command must also include a target locator.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        name comment copy hosts exclude_hosts ssh_lsc_credential smb_lsc_credential esxi_lsc_credential alive_tests reverse_lookup_only reverse_lookup_unify port_range port_list name A name for the target name make_unique make_unique Whether to append a unique suffix if the name already exists boolean comment A comment on the target text copy The UUID of an existing target uuid hosts A textual list of hosts, which may be empty text exclude_hosts A list of hosts to exclude text ssh_lsc_credential SSH login credentials for target id uuid 1 port port The port the LSCs will use text smb_lsc_credential SMB login credentials for target id uuid 1 esxi_lsc_credential ESXi credential to use on target id uuid 1 alive_tests Which alive tests to use alive_test reverse_lookup_only Whether to scan only hosts that have names boolean reverse_lookup_unify Whether to scan only one IP when multiple IPs have the same name boolean port_range Port range for the target text port_list Port list for the target Overrides port_range. id uuid 1 status status 1 status_text text 1 id uuid 1 Create a target, giving a host list All GNU/Linux machines 192.168.1.0/24                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         create_task Create a task

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_task command to create a new task.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        name comment copy alterable config target hosts_ordering scanner alert schedule schedule_periods slave observers preferences name A name for the task name comment A comment on the task text copy The UUID of an existing task uuid alterable Whether the task is alterable boolean config The scan configuration used by the task id uuid 1 target The hosts scanned by the task id uuid 1 hosts_ordering The order hosts are scanned in text scanner The scanner to use for scanning the target id uuid 1 alert An alert that applies to the task id uuid 1 schedule When the task will run id uuid 1 schedule_periods A limit to the number of times the task will be scheduled, or 0 for no limit integer slave Slave that the task will run on id uuid 1 observers Users allowed to observe this task user_list preferences preference preference scanner_name value scanner_name Compact name of preference, from scanner text value text status status 1 status_text text 1 id uuid 1 Create a task, giving a host list Scan Webserver Hourly scan of the webserver                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         create_user Create a user

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the create_user command to create a new user.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        name copy hosts ifaces password role name The name of the user to be created text copy The UUID of an existing user uuid hosts User access rules: a textual list of hosts allow If 1, allow only listed, otherwise forbid listed boolean text ifaces User access rules: a textual list of ifaces allow If 1, allow only listed, otherwise forbid listed boolean text password The password for the user text role A role of the user id uuid 1 status status 1 status_text text 1 id uuid 1 Create a user foobar f00bar                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_agent Delete an agent

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_agent command to delete an existing agent.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        agent_id uuid 1 ultimate Whether to remove entirely, or to the trashcan boolean 1 status status 1 status_text text 1 Delete an agent                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_config Delete a config

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_config command to delete an existing config.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        config_id uuid 1 ultimate Whether to remove entirely, or to the trashcan boolean 1 status status 1 status_text text 1 Delete a config                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_alert Delete an alert

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_alert command to delete an existing alert.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        alert_id uuid 1 ultimate Whether to remove entirely, or to the trashcan boolean 1 status status 1 status_text text 1 Delete an alert                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_filter Delete a filter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_filter command to delete an existing filter.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        filter_id uuid 1 ultimate Whether to remove entirely, or to the trashcan boolean 1 status status 1 status_text text 1 Delete a filter                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_group Delete a group

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_group command to delete an existing group.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        group_id uuid 1 ultimate Whether to remove entirely, or to the trashcan boolean 1 status status 1 status_text text 1 Delete a group                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_lsc_credential Delete an LSC credential

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_lsc_credential command to delete an existing LSC credential.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        lsc_credential_id uuid 1 ultimate Whether to remove entirely, or to the trashcan boolean 1 status status 1 status_text text 1 Delete an LSC credential                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_note Delete a note

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_note command to delete an existing note.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        note_id uuid 1 ultimate Whether to remove entirely, or to the trashcan boolean 1 status status 1 status_text text 1 Delete a note                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_override Delete an override

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_override command to delete an existing override.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        override_id uuid 1 ultimate Whether to remove entirely, or to the trashcan boolean 1 status status 1 status_text text 1 Delete an override                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_report Delete a report

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_report command to delete an existing report.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        report_id uuid 1 status status 1 status_text text 1 Delete a report                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_permission Delete a permission

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_permission command to delete an existing permission.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        permission_id uuid 1 ultimate Whether to remove entirely, or to the trashcan boolean 1 status status 1 status_text text 1 Delete a permission                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_port_list Delete a port list

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_port_list command to delete an existing port list.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        port_list_id uuid 1 ultimate Whether to remove entirely, or to the trashcan boolean 1 status status 1 status_text text 1 Delete a port list                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_port_range Delete a port range

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_port_range command to delete an existing port range.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        port_range_id uuid 1 status status 1 status_text text 1 Delete a port range                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_report_format Delete a report format

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_report_format command to delete an existing report format.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        report_format_id uuid 1 ultimate Whether to remove entirely, or to the trashcan boolean 1 status status 1 status_text text 1 Delete a report format                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_role Delete a role

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_role command to delete an existing role.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        role_id uuid 1 ultimate Whether to remove entirely, or to the trashcan boolean 1 status status 1 status_text text 1 Delete a role                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_scanner Delete a scanner

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_scanner command to delete an existing scanner.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        scanner_id uuid 1 ultimate Whether to remove entirely, or to the trashcan boolean 1 status status 1 status_text text 1 Delete a scanner                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_schedule Delete a schedule

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_schedule command to delete an existing schedule.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        schedule_id uuid 1 ultimate Whether to remove entirely, or to the trashcan boolean 1 status status 1 status_text text 1 Delete a schedule                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_slave Delete a slave

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_slave command to delete an existing slave.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        slave_id uuid 1 ultimate Whether to remove entirely, or to the trashcan boolean 1 status status 1 status_text text 1 Delete a slave                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_tag Delete a tag

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_tag command to delete an existing tag.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        tag_id uuid 1 ultimate Whether to remove entirely, or to the trashcan boolean 1 status status 1 status_text text 1 Delete a tag                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_target Delete a target

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_target command to delete an existing target.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        target_id uuid 1 ultimate Whether to remove entirely, or to the trashcan boolean 1 status status 1 status_text text 1 Delete a target                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_task Delete a task

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_task command to delete an existing task, including all reports associated with the task.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        task_id uuid 1 ultimate Whether to remove entirely, or to the trashcan boolean 1 status status 1 status_text text 1 Delete a task                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         delete_user Delete a user

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the delete_user command to delete an existing user.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Administrator.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        user_id The ID of the user to be deleted. Overrides name uuid 1 name name The name of the user to be deleted text status status 1 status_text text 1 Delete a user                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         describe_auth Describe authentication methods

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the "describe_auth" command to get details about the used authentication methods.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The Manager will reply with a list of all used authentication methods if such a list is available.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        status status 1 status_text text 1 group group Config group name text 1 auth_conf_setting auth_conf_setting key text 1 value text 1 Describe the authentication methods                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         describe_cert Describe the CERT feed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the "describe_cert" command to get details about the CERT feed used by the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The Manager will reply with a cert element containing information about the CERT feed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        status status 1 status_text text 1 cert cert name version description sync_not_available currently_syncing name The name of the CERT feed text version The version of the CERT feed text description A description of the CERT feed text sync_not_available Present if CERT syncing is not available error error Description of why sync is not available currently_syncing Present if a CERT sync is underway timestamp user timestamp Time sync started text user Name of user who is performing sync text Describe the CERT feed OpenVAS CERT Feed 201301040805 The 'OpenVAS CERT Feed' is provided by 'The OpenVAS Project'. ...                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         describe_feed Describe the NVT feed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the "describe_feed" command to get details about the NVT feed used by the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The Manager will reply with a feed element containing information about the NVT feed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        status status 1 status_text text 1 feed feed name version description sync_not_available currently_syncing name The name of the feed text version The version of the feed text description A description of the feed text sync_not_available Present if CERT syncing is not available error error Description of why sync is not available currently_syncing Present if an NVT sync is underway timestamp user timestamp Time sync started text user Name of user who is performing sync text Describe the feed OpenVAS NVT Feed 201011221324 The 'OpenVAS NVT Feed' is provided by 'The OpenVAS Project'. ...                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         describe_scap Describe the SCAP feed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the "describe_scap" command to get details about the SCAP feed used by the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The Manager will reply with a scap element containing information about the SCAP feed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        status status 1 status_text text 1 scap scap name version description sync_not_available currently_syncing name The name of the scap feed text version The version of the scap feed text description A description of the scap feed text sync_not_available Present if CERT syncing is not available error error Description of why sync is not available currently_syncing Present if a CERT sync is underway timestamp user timestamp Time sync started text user Name of user who is performing sync text Describe the scap feed OpenVAS NVT SCAP 201011221324 The 'OpenVAS SCAP Feed' is provided by 'The OpenVAS Project'. ...                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         empty_trashcan Empty the trashcan

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the empty_trashcan command to empty the trashcan.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        status status 1 status_text text 1 Empty the trashcan                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         get_agents Get one or many agents

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_agents command to get agent information. If the command sent by the client was valid, the manager will reply with a list of agents to the client.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        If the request includes a format then the agents in the response include installer elements, otherwise they include trust state and time. If the details attribute is set, the response will include the installer.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        agent_id ID of single agent to get uuid filter Filter term to use to filter query text filt_id ID of filter to use to filter query uuid trash Whether to get the trashcan agents instead boolean details Whether to include agents package information when no format was provided boolean format installer howto_install howto_use status status 1 status_text text 1 agent filters sort agents agent_count agent id uuid 1 owner name comment creation_time modification_time in_use writable permissions user_tags installer package owner Owner of the agent name name The name of the owner name name The name of the agent name comment The comment on the agent text creation_time Date and time the agent was created iso_time modification_time Date and time the agent was last modified iso_time in_use Whether the agent is in use boolean writable Whether the agent is writable boolean permissions Permissions that the current user has on the agent permission permission name name The name of the permission name user_tags Info on tags attached to the agent count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text installer trust trust Whether signature verification succeeded yes no unknown time time When the signature was verified iso_time package Either the installer or one of the HOWTOs filename base64 filename The filename of the package text filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending agents start First agent integer 1 max Maximum number of agents integer 1 agent_count filtered page filtered Number of agents after filtering integer page Number of agents on current page integer Get one or many agents Custom Scan Agent Custom agent for use on the Web servers. 2012-01-23T10:44:00+01:00 2013-01-23T10:44:00+01:00 1 0 0 yes ... Get one agent Custom Scan Agent Custom agent for use on the Web servers. 2012-01-23T10:44:00+01:00 2013-01-23T10:44:00+01:00 1 0 0 yes Get one agent, including the installer package Custom Scan Agent Custom agent for use on the Web servers. 2012-01-23T10:44:00+01:00 2013-01-23T10:44:00+01:00 1 0 agent.deb CgoKCgoKCgoKCgoKCSAgI...                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         get_configs Get one or many configs The client uses the get_configs command to get config information. If the command sent by the client was valid, the manager will reply with a list of configs to the client. config_id ID of single config to get uuid filter Filter term to use to filter query text filt_id ID of filter to use to filter query uuid trash Whether to get the trashcan configs instead boolean details Whether to get config families, preferences, nvt selectors and tasks boolean families Whether to include the families if no details are requested boolean preferences Whether to include the preferences if no details are requested boolean tasks Whether to get tasks using this config boolean status status 1 status_text text 1 config filters sort configs config_count config id uuid 1 owner name comment creation_time modification_time family_count nvt_count type max_nvt_count known_nvt_count in_use writable permissions user_tags tasks families preferences nvt_selectors owner Owner of the config name name The name of the owner name name The name of the config name comment The comment on the config text creation_time Creation time of the config iso_time modification_time Last time the config was modified iso_time family_count The number of families selected by the config integer growing growing Whether new families are automatically added to the config boolean nvt_count The number of NVTs selected by the config integer growing growing Whether new NVTs are automatically added to the config boolean type The type the config. text max_nvt_count Total number of NVTs in the families selected by the config integer known_nvt_count Total number of known NVTs selected by the config integer in_use Whether any tasks are using the config boolean writable Whether any tasks are using the config, including trashcan tasks boolean permissions Permissions that the current user has on the target permission permission name name The name of the permission name user_tags Info on tags attached to the config count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text tasks All tasks using the config task task id uuid 1 name permissions name The name of the task name permissions Permissions the user has on the task families All families selected by the config family family name nvt_count max_nvt_count growing name The name of the family name type The type of the config. 0 = OpenVAS scanner, 1 = OSP Scanner integer nvt_count The number of NVTs selected in the family integer max_nvt_count The total number of NVTs in the family integer growing Whether new NVTs in the family are automatically added to the selection boolean preferences Preferences for all NVTs selected by the config preference preference nvt name type value default alt nvt NVT to which preference applies oid oid 1 name name The name of the NVT name name The name of the preference name type The type of preference text value The value of the preference text default The default value of the preference text alt An alternate value for the preference text nvt_selectors All NVT selectors of the config nvt_selector nvt_selector An NVT selector name include type family_or_nvt name Name of the selector text include Whether the selector is an include selector boolean type Selector type: 0 = all, 1 = family, 2 = NVT integer family_or_nvt Name of the family or OID of the NVT text filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending configs start First config integer 1 max Maximum number of configs integer 1 config_count filtered page filtered Number of configs after filtering integer page Number of configs on current page integer Get one or many configs Full and fast All NVT's; optimized by using previously collected information. 2012-11-23T10:44:00+01:00 2013-01-23T10:44:00+01:00 4 1 12 1 1 0 0 ... Get a single config, including preference, family lists and tasks using this config Full and fast All NVT's; optimized by using previously collected information. 4 1 12 1 1 0 Web Servers ... Credentials 8 8 1 ... Services Network connection timeout : entry 5 ... ... get_aggregates Get aggregates of various resources

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_aggregate command to get aggregated data like counts or averages of various resources.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Unlike other get_... commands, get_aggregates ignores the filter keywords "first" and "rows". It also does not support selecting single items by id or getting items from the trashcan.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        filter Filter term to use to filter query of the resources to aggregate text filt_id ID of filter to use to filter query of the resources to aggregate uuid type The OMP resource type to gather data from text 1 data_column The column to get the data to aggregate from text group_column The field to group the resources by text status status 1 status_text text 1 aggregate filters aggregate A collection of aggregated data of the selected type data_type data_column group_column group overall column_info data_type The resource type the data is aggregated from text data_column The column the data is aggregated from text group_column The column the data is grouped by text group Aggregate data for a group of resources text group Aggregate data for all resources of the selected type value count c_count min max mean sum c_sum value Value of the group column text count Number of resources in the group integer c_count Cumulative number of resources in all groups up to and including the current one integer min Minimum value of the data column text max Maximum value of the data column text mean Arithmetic mean of the numeric values of the data text sum Sum of the numeric values of the data column text c_sum Cumulative sum of the numeric values of the data column for all groups up to and including the current one text overall Aggregate data for all resources of the selected type count min max mean sum count Overall number of resources integer min Overall minimum value of the data column text max Overall maximum value of the data column text mean Overall arithmetic mean of the numeric values of the data text sum Overall sum of the numeric values of the data column text column_info Info on the aggregate columns aggregate_column aggregate_column Info on one column of the aggregate name stat type column data_type name Name of the column as it appears in the group or overall element text stat The type of statistic in the column, e.g. min, max, mean text type The resource type text column Name of the column in the non-aggregated table text data_type The data type of the column, e.g. integer, text, cvss text filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text Get severity statistics of NVTs by family nvt severity family AIX Local Security Checks 1 1 3.3 3.3 3.3 3.3 3.3 Brute force attacks 8 9 0 7.8 6.275 50.2 53.5 Buffer overflow 519 528 10 9.7 8.63083 4479.4 4532.9 ... value value nvt family text count count nvt integer c_count c_count nvt integer min min nvt severity cvss ... first=1 rows=-1 sort=name first = 1 rows = -1 sort = name                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         get_alerts Get one or many alerts The client uses the get_alerts command to get alert information. If the command sent by the client was valid, the manager will reply with a list of alerts to the client. alert_id ID of single alert to get uuid filter Filter term to use to filter query text filt_id ID of filter to use to filter query uuid trash Whether to get the trashcan alerts instead boolean tasks Whether to get the tasks using the alerts boolean status status 1 status_text text 1 alert filters sort alerts alert_count alert id uuid 1 owner name comment creation_time modification_time in_use writable permissions user_tags condition event method filter tasks owner Owner of the alert name name The name of the owner name name The name of the alert name comment The comment on the alert text in_use Whether any tasks are using the alert boolean writable Whether the alert is writable or not boolean creation_time Creation time of the alert iso_time modification_time Last time the alert was modified iso_time permissions Permissions that the current user has on the alert permission permission name name The name of the permission name user_tags Info on tags attached to the alert count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text condition The condition that must be satisfied for the alert to occur text data data Some data that defines the condition text name name The name of the condition data text event The event that must happen for the alert to occur text data data Some data that defines the event text name name The name of the event data text method The method by which he alert must occur text data data Some data that defines the method text name name The name of the method data text filter id uuid name permissions trash name The name of the filter name permissions Permissions the user has on the filter trash Whether the filter is in the trashcan boolean tasks Tasks using the alert task task id uuid 1 name permissions name The name of the task name permissions Permissions the user has on the task filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending alerts start First alert integer 1 max Maximum number of alerts integer 1 alert_count filtered page filtered Number of alerts after filtering integer page Number of alerts on current page integer Get the alerts Team alert 2012-04-27T12:44:00+01:00 2012-08-28T12:14:00+01:00 1 1 0 Threat level at least level High Task run status changed status Done Email to_address team@example.org from_address admin@example.org notice 0 ... get_filters Get one or many filters The client uses the get_filters command to get filter information. filter_id ID of single filter to get uuid filter Filter term to use to filter query text filt_id ID of filter to use to filter query uuid trash Whether to get the trashcan filters instead boolean alerts Whether to include list of alerts that use the filter boolean status status 1 status_text text 1 filter filters sort filters filter_count filter id uuid 1 owner name comment term type creation_time modification_time in_use writable permissions user_tags alerts owner Owner of the filter name name The name of the owner name name The name of the filter name comment The comment on the filter text term The filter term text type Resource type filter applies to. Blank for all text creation_time Date and time the filter was created iso_time modification_time Date and time the filter was last modified iso_time in_use Whether any tasks are using the filter boolean writable Whether the filter is writable boolean permissions Permissions that the current user has on the filter permission permission name name The name of the permission name user_tags Info on tags attached to the filter count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text alerts All alerts using the filter alert alert id uuid 1 name permissions name The name of the alert name permissions Permissions the user has on the alert filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending filters start First filter integer 1 max Maximum number of filters integer 1 filter_count filtered page filtered Number of filters after filtering integer page Number of filters on current page integer Get one or many filters Single Targets Targets with only one host ips=1 first=1 rows=-2 target 1 1 0 Sun Jun 27 08:49:46 2010 Sun Jun 27 08:49:46 2010 ... Get single filter, including alerts that use the filter Local Any item with name containing 'local'. name~local first=1 rows=-2 1 1 0 Sun Jun 27 08:49:43 2010 Sun Jun 27 08:49:43 2010 Local Mailer ... get_groups Get one or many groups The client uses the get_groups command to get group information. group_id ID of single group to get uuid filter Filter term to use to filter query text filt_id ID of filter to use to filter query uuid trash Whether to get the trashcan groups instead boolean status status 1 status_text text 1 group filters sort groups group_count group id uuid 1 owner name comment creation_time modification_time writable in_use permissions user_tags users owner Owner of the group name name The name of the owner name name The name of the group name comment The comment on the group text creation_time Date and time the group was created iso_time modification_time Date and time the group was last modified iso_time users A comma-separated list of the users in the group text writable Whether the group is writable boolean in_use Whether the group is in use boolean permissions Permissions that the current user has on the group permission permission name name The name of the permission name user_tags Info on tags attached to the group count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending groups start First group integer 1 max Maximum number of groups integer 1 group_count filtered page filtered Number of groups after filtering integer page Number of groups on current page integer Get one or many groups Management Managers Sun Jun 27 08:49:43 2010 Sun Jun 27 08:49:43 2010 1 0 0 sarah, frank ... first=1 rows=-1 sort=name first = 1 ... name ascending 1 1 1 get_info Get information for items of given type The client uses the get_info command to get information about static data from an external source, like CVE or CPE. If the command sent by the client was valid, the manager will reply with a list of info elements of a given type to the client. type Type must be either CERT_BUND_ADV, CPE, CVE, DFN_CERT_ADV, OVALDEF, NVT or ALLINFO text 1 name Name or identifier of the requested information text info_id ID of single info to get. Conflicts with name text filter Filter term to use to filter query text filt_id ID of filter to use to filter query uuid details Whether to include information about references to this information boolean status status 1 status_text text 1 info filters sort details info_count info id integer A unique number identifying this info, if available owner name comment creation_time modification_time permissions user_tags update_time cert_bund_adv cpe cve dfn_cert_adv ovaldef nvt allinfo owner Owner of the info name name The name of the owner name name The name of the info name comment The comment on the info text creation_time Date and time the info was created iso_time modification_time Date and time the info was last modified iso_time update_time Date and time the source of the info was read iso_time permissions Permissions that the current user has on the info permission permission name name The name of the permission name user_tags Info on tags attached to the info count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text cert_bund_adv title summary max_cvss cve_refs raw_data An CERT-Bund advisory info element title Title of the advisory text summary Summary text of the advisory text max_cvss Highest CVSS score of CVEs referenced by the advisory text cve_refs Number of CVEs referenced by this advisory integer raw_data Source representation of the information. Only when details were requested text cpe nvd_id title max_cvss cve_refs status cves raw_data A CPE info element nvd_id The NVD ID of the CPE text title The title of the CPE text max_cvss The highest CVSS recorder for this CPE integer cve_refs The number CVE of references to this CPE integer status The status of this CPE text cves CVEs referring to this CPE. Only when details were requested cve cve CVE referring to this CPE text raw_data Source representation of the information. Only when details were requested text nvt text A NVT info element cve cvss vector complexity authentication confidentiality_impact integrity_impact availability_impact description products nvts cert raw_data A CVE info element cvss CVSS Base Score text vector CVSS Access Vector metric text complexity CVSS Attack Complexity metric text authentication CVSS Authentication metric text confidentiality_impact CVSS Confidentiality impact metric text integrity_impact CVSS Integrity impact metric text availability_impact CVSS Availability impact metric text description The CVE's description text products Space separated list of CPEs affected by this text nvts NVTs addressing this CVE. Only when details were requested nvt nvt NVT referring to this CPE oid oid name name Name of the NVT text cert List of CERT advisories referencing this CVE cert_ref warning cert_ref A CERT advisory reference type Type of the advisory (e.g. "DFN-CERT", "CERT-BUND") text name title name The name / ID of the advisory text title The title of the advisory text warning A warning message, e.g. when the database is unavailable text raw_data Source representation of the information. Only when details were requested text dfn_cert_adv title summary max_cvss cve_refs raw_data An DFN-CERT advisory info element title Title of the advisory text summary Summary text of the advisory text max_cvss Highest CVSS score of CVEs referenced by the advisory text cve_refs Number of CVEs referenced by this advisory integer raw_data Source representation of the information. Only when details were requested text ovaldef version deprecated status class title max_cvss cve_refs file description raw_data An OVAL definition info element version Version number of the OVAL definition integer deprecated Whether the definition is deprecated boolean status Lifecycle status text of the definition text class Definition class of the definition text title Title of the definition text max_cvss Highest CVSS score of CVEs referenced by the definition text cve_refs Number of CVEs referenced by the definition integer file Path to the source xml file, relative to the SCAP data directory text description Longer description of the definition. Only when details were requested text raw_data Source representation of the information. Only when details were requested text allinfo type extra severity A SecInfo entry. Could be CPE, CVE, NVT, OVALDEF or DFN-CERT Advisory type Type of SecInfo entry text extra Extra information from the entry like title or description text severity Severity rating (CVSS score) of the entry severity filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending info_count filtered page filtered Number of info elements after filtering integer page Number of info elements on current page integer details Are details included in this response boolean Get a info about cpe:/a:gnu:gzip:1.3.3 with all details cpe:/a:gnu:gzip:1.3.3 2007-09-14T17:36:49Z 2007-09-14T17:36:49Z 0 0 0 2012-10-26T13:18:00.000+0000 GNU Gzip 1.3.3 10.0 5 DRAFT 10.0 6.8 6.8 5.0 3.7 GNU Gzip 1.3.3
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        nameascending 1 1                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         Get a info CVE-1999-0010 without details CVE-2011-0018 2011-01-28T16:00:02Z 2011-02-05T07:01:22Z 0 0 2012-10-26T13:18:00.000+0000 0 9.0 NETWORK LOW SINGLE_INSTANCE COMPLETE COMPLETE COMPLETE The email function in manage_sql.c in ...(truncated for example) cpe:/a:openvas:openvas_manager:1.0.1 ...(truncated for example) nameascending 1 1                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         get_lsc_credentials Get one or many LSC credentials The client uses the get_lsc_credentials command to get LSC credentials information. If the command sent by the client was valid, the manager will reply with a list of LSC credentials to the client. lsc_credential_id ID of single LSC credential to get uuid filter Filter term to use to filter query text filt_id ID of filter to use to filter query uuid trash Whether to get the trashcan LSC credentials instead boolean targets Whether to include a list of targets using the credentials boolean format key rpm deb exe status status 1 status_text text 1 lsc_credential filters sort lsc_credentials lsc_credential_count lsc_credential id uuid 1 owner name login comment creation_time modification_time writable in_use permissions user_tags type targets public_key package owner Owner of the LSC credential name name The name of the owner name name The name of the LSC credential name login The username of the LSC credential name comment The comment on the LSC credential text creation_time Date and time the info was created iso_time modification_time Date and time the info was last modified iso_time writable Whether this credential is writable boolean in_use Whether any targets are using the LSC credential boolean permissions Permissions that the current user has on the LSC credential permission permission name name The name of the permission name user_tags Info on tags attached to the credential count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text type The type of the LSC credential gen pass targets All targets using this LSC credential target target id uuid 1 name permissions name The name of the target name permissions Permissions the user has on the target public_key text package format rpm deb exe 1 base64 filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending lsc_credentials start First LSC credential integer 1 max Maximum number of LSC credentials integer 1 lsc_credential_count filtered page filtered Number of LSC credentials after filtering integer page Number of LSC credentials on current page integer Get one or many the LSC credentials sally sally 2012-12-14T17:11:25+01:00 2012-05-28T11:19:20+01:00 1 0 0 gen bob Bob on the web server. 2013-01-03T15:49:35+01:00 2013-01-18T12:07:00+01:00 1 1 bob pass ... Get a single LSC credential, its public key and targets using it bob Bob on the web server. 2012-11-03T15:41:35+01:00 2012-11-18T13:17:00+01:00 1 1 0 bob pass Web server ssh-rsa AAAAB3...Z64IcQ== Key generated by OpenVAS Manager Get the Debian package of a single LSC credential bob bob Bob on the web server. 2012-11-03T15:41:35+01:00 2012-11-18T13:17:00+01:00 1 1 0 pass Web server ITxhcmNoPgpk...DmvF0AKAAACg== get_notes Get one or many notes The client uses the get_notes command to get note information. If the command sent by the client was valid, the manager will reply with a list of notes to the client. note_id ID of single note to get uuid filter Filter term to use to filter query text filt_id ID of filter to use to filter query uuid nvt_oid oid task_id uuid details boolean result boolean status status 1 status_text text 1 note filters sort notes note_count filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending notes start First note integer 1 max Maximum number of notes integer 1 note_count filtered page filtered Number of notes after filtering integer page Number of notes on current page integer note note Get one or many notes Test NVT: long lines 2013-01-09T09:47:41+01:00 2013-01-09T09:47:41+01:00 1 0 1 1 0 This is the full text of the note. ... Get details of a single note and result to which it applies Test NVT: control chars in report result Sun Jun 27 08:49:46 2010 Sun Jun 27 08:49:46 2010 1 0 1 note fixed to result 127.0.0.1 general/tcp Medium test 0 0 127.0.0.1 general/tcp Test NVT: control chars in report result Medium Warning with control char between fullstops: . . ... get_nvts Get one or many NVTs

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_nvts command to get NVT information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        This command may always include a details flag, a config, a sort order and a sort field. If the command includes a details flag, the manager also consults the timeout, preference_count and preferences flags.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The NVT OID, family name and config attributes limit the listing to a single NVT or all NVTs in a particular family and/or config.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        If the details flag is present the manager will send full details of the NVT, otherwise it will send just the NVT name.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        With the preferences flag the manager includes in the listing, the values of each listed NVT's preferences for the given config. The timeout flag does the same for the special timeout preference. If the config contains no values for a preference, the default value of the preference is returned. The same applies if no config is given.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        If the manager possesses an NVT collection, it will reply with the NVT information. If the manager cannot access a list of available NVTs at that time, it will reply with the 503 response.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        nvt_oid Single NVT to get oid 1 details Whether to include full details boolean preferences Whether to include preference boolean preference_count Whether to include preference count boolean timeout Whether to include the special timeout preference boolean config_id ID of config to which to limit the NVT listing uuid family Family to which to limit NVT listing text sort_order sort_order sort_field text status status 1 status_text text 1 nvt nvt oid oid 1 name user_tags creation_time modification_time category copyright summary family version cvss_base qod cve_id cert_refs bugtraq_id xrefs tags preference_count timeout preferences name The name of the NVT name category The category of the NVT text creation_time The creation time of the NVT iso_time modification_time The modification time of the NVT iso_time user_tags Info on tags attached to the NVT count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text copyright Copyright info of the NVT text summary Short description of the NVT text family Name of the family the NVT belongs to text version Version of the NVT text cvss_base CVSS base score of the NVT text qod The quality of detection (QoD) of the NVT value type value The numeric QoD value integer type The QoD type text cve_id IDs of the CVEs the NVT adresses text bugtraq_id List of Bugtraq IDs of the NVT text cert_refs List of CERT advisories referencing this NVT via CVEs cert_ref warning cert_ref A CERT advisory reference id ID of the advisory text type Type of the advisory (e.g. "DFN-CERT", "CERT-BUND") text warning A warning message, e.g. when the database is not text xrefs List of other references of the NVT text tags The tags of the NVT, separated by vertical bars text preference_count The number of preferences for the NVT text timeout The timeout of the NVT text preferences List of preferences of the NVT timeout preference text timeout The timeout of the NVT text preference nvt name type value alt default nvt NVT to which preference applies oid oid 1 name name The name of the NVT name name The name of the preference text type The type of the preference text value The value of the preference text alt An alternate value of the preference text default The default value of the preference text Get full NVT listing with details Services 2011-01-14T10:12:23+01:00 2012-09-19T20:56:15+02:00 0 Services GNU GPL v2 Find what is listening on which port Service detection $Revision: 1852 $ NOCVE NOBID NOXREF NOTAG -1 Services Network connection timeout : entry 5 5 ... FooBar 21 2011-01-14T10:12:23+01:00 2012-09-19T20:56:15+02:00 Services GNU GPL v2 This script detects whether the FooBar 2.1 XSS vulnerability is present. ... ... Get minimal information about one NVT Services 0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         get_nvt_families Get a list of all NVT families

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_nvt_families command to get NVT family information. If the command sent by the client was valid, the manager will reply with a list of NVT families to the client.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        sort_order sort_order status status 1 status_text text 1 families families family family name max_nvt_count name The name of the family name max_nvt_count The number of NVTs in the family integer Get the NVT families Credentials 8 Port scanners 12 ...                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         get_nvt_feed_version Get NVT Feed version

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_nvt_feed_version command to request a feed version for the complete NVT collection available through this manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        If the manager possesses such a collection, it will reply with a response code indicating success, and the feed version files. If the manager cannot access a list of available NVTs at present, it will reply with the 503 response.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        status status 1 status_text text 1 version version NVT Feed version integer Get the NVT feed version 201303060811                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         get_overrides Get one or many overrides The client uses the get_overrides command to get override information. If the command sent by the client was valid, the manager will reply with a list of overrides to the client. override_id ID of single override to get uuid filter Filter term to use to filter query text filt_id ID of filter to use to filter query uuid nvt_oid oid task_id uuid details boolean result boolean status status 1 status_text text 1 override filters sort overrides override_count filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending overrides start First override integer 1 max Maximum number of overrides integer 1 override_count filtered page filtered Number of overrides after filtering integer page Number of overrides on current page integer override override Get one or many overrides Test NVT: long lines 2013-01-09T09:50:10+01:00 2013-01-09T09:50:10+01:00 1 0 1 This is the full text of the override. Log 0.0 1 0 ... Get details of a single override Test NVT: control chars in report result Sun Jun 27 08:49:46 2010 Sun Jun 27 08:49:46 2010 1 0 1 override fixed to result 127.0.0.1 general/tcp Medium Low 2.0 test 0 0 ... get_permissions Get one or many permissions The client uses the get_permissions command to get permission information. permission_id ID of single permission to get uuid filter Filter term to use to filter query text filt_id ID of filter to use to filter query uuid trash Whether to get the trashcan permissions instead boolean status status 1 status_text text 1 permission filters sort permissions permission_count permission id uuid 1 owner name comment creation_time modification_time writable in_use permissions user_tags resource subject owner Owner of the permission name name The name of the owner name name The name of the permission name comment The comment on the permission text creation_time Date and time the permission was created iso_time modification_time Date and time the permission was last modified iso_time resource The resource the permission applies to id uuid UUID if permission applies to a resource, else 0 name type trash deleted name text type The OMP type of the resource text trash Whether the resource is in the trash boolean deleted Whether the resource has been deleted boolean subject The subject the permission applies to id uuid UUID of the subject name type trash name text type The OMP type of the subject: group, role or user text trash Whether the subject is in the trash boolean deleted Whether the subject has been deleted boolean writable Whether the permission is writable boolean in_use Whether the permission is in use boolean permissions Permissions that the current user has on the permission permission permission name name The name of the permission name user_tags Info on tags attached to the permission count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending permissions start First permission integer 1 max Maximum number of permissions integer 1 permission_count filtered page filtered Number of permissions after filtering integer page Number of permissions on current page integer Get one or many permissions Management Managers Sun Jun 27 08:49:43 2010 Sun Jun 27 08:49:43 2010 1 0 0 sarah, frank ... first=1 rows=-1 sort=name first = 1 ... name ascending 1 1 1 get_port_lists Get one or many port lists

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_port_lists command to get port list information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        port_list_id ID of single port list to get uuid filter Filter term to use to filter query text filt_id ID of filter to use to filter query uuid details Whether to include full port list details boolean targets Whether to include targets using this port list boolean trash Whether to get the trashcan port lists instead boolean status status 1 status_text text 1 port_list filters sort port_lists port_list_count port_list id uuid 1 owner name comment creation_time modification_time writable in_use permissions user_tags port_count port_ranges targets owner Owner of the port list name name The name of the owner name name The name of the port list name comment The comment on the port list text creation_time iso_time modification_time iso_time writable Whether the port list is writable boolean in_use Whether any targets are using the port list boolean permissions Permissions that the current user has on the port list permission permission name name The name of the permission name user_tags Info on tags attached to the port list count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text port_count all tcp udp all Total number of ports integer tcp Total number of TCP ports integer udp Total number of UDP ports integer port_ranges port_range port_range id uuid 1 start end type comment start First port in range integer end Last port in range integer type The type of port: TCP, UDP, ... text comment The comment on the port range text targets The targets using the port list target target id uuid 1 name permissions name The name of the target name permissions Permissions the user has on the target filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending port_lists start First port list integer 1 max Maximum number of port lists integer 1 port_list_count filtered page filtered Number of port lists after filtering integer page Number of port lists on current page integer Export a port list All TCP Every single TCP port. 2012-12-31T16:38:45+01:00 2012-12-31T16:38:45+01:00 0 1 0 65535 65535 0 TCP 1 65535 Web server                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         get_preferences Get one or many preferences

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_preferences command to get preference information. If the command sent by the client was valid, the manager will reply with a list of preferences to the client. If the manager cannot access a list of available NVTs at present, it will reply with the 503 response.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        When the command includes a config_id attribute, the preference element includes the preference name, type and value, and the NVT to which the preference applies. Otherwise, the preference element includes just the name and value, with the NVT and type built into the name.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        nvt_oid oid config_id ID of config of which to show preference values uuid preference The name of a particular preference to get text status status 1 status_text text 1 preference preference nvt name type value alt default nvt NVT to which preference applies oid oid 1 name name The name of the NVT name name The name of the preference name type The type of preference text value The value of the preference text alt An alternate value of the preference text default The default value of the preference text Get default preferences for all NVTs Services[entry]:Network connection timeout : 5 ... Get default preferences for a single NVT Services[entry]:Network connection timeout : 5 5 ... Get preferences from a config for all NVTs Services Network connection timeout : entry 5 ... Get preferences from a config for a single NVT Services Network connection timeout : entry 5 5                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         get_reports Get one or many reports

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_reports command to get report information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The XML report format is sent as XML. All other formats are sent in Base64 encoding.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        report_id ID of single report to get uuid filter Filter term to use to filter results, when getting a single report text filt_id ID of filter to use to filter results, when getting a single report uuid report_filter Filter term to use to filter reports uuid report_filt_id ID of filter to use to filter reports uuid type Type of report to get scan assets prognostic format_id ID of required report format uuid alert_id ID of alert to pass generated report to

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In this case the response is empty, and simply indicates success via the status code.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        uuid                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         first_result First result to get integer max_results Maximum number of results to get integer sort_order sort_order sort_field text apply_overrides Whether to apply overrides to the results boolean levels Which threat levels to include in the report levels search_phrase A string that all results in the report must contain text min_cvss_base Minimum CVSS base of results in report integer min_qod Minimum QoD of results in report integer notes Whether to include notes in the report boolean note_details If notes are included, whether to include note details boolean overrides Whether to include overrides in the report boolean override_details If overrides are included, whether to include override details boolean result_hosts_only Whether to include only those hosts that have results boolean host For "assets" or "prognostic", single host to retrieve text host_first_result For "assets" or "prognostic", first host to retrieve integer host_max_results For "assets" or "prognostic", maximum hosts to retrieve integer host_levels For "assets" or "prognostic", which threat levels to include in hosts levels host_search_phrase For "assets" or "prognostic", the search phrase to limit hosts to text pos For type "assets", position of report used, from end integer delta_report_id ID of second report, for producing a delta report uuid delta_states Letters for results to include: c)hanged, g)one, n)ew, s)ame xsd:token { pattern = "c?g?n?s?" } autofp Whether to trust vendor security updates. 1 full match, 2 partial 0 1 2 result_hosts_only Whether to include only hosts with results boolean ignore_pagination Whether to ignore info used to split the report into pages like the filter terms "first" and "rows". boolean timezone The timezone to use for dates in the report timezone                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         status status 1 status_text text 1 report filters sort reports report_count report Actually attributes and either base64 or a report report filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending reports start First report integer 1 max Maximum number of reports integer 1 report_count filtered page filtered Number of reports after filtering integer page Number of reports on current page integer Get a report in PDF hsisn3qaVFhkjFRG4... Get a report in XML @OMP_VERSION@ type descending hmlgd 0 0 0 1 0 1 High Medium Low Log Debug 0 Done 1 0 3 1 2 0 10 10 0 0 0 0 7 7 0 0 3 3 dik mm 2010-02-02T19:11:21+00:00 2010-02-02T19:11:21+00:00 UTC UTC general/tcp 127.0.1.1 5.0 Medium ... 127.0.1.1 general/tcp Test NVT: fields with ISO-8859-1 chars () 5.0 CVE-2013-1406 51702 NOTAGS NOXREF Medium Test with umlaut Warning Port 0. ... 2010-02-02T19:11:21+00:00127.0.1.1 2010-02-02T19:11:52+00:00127.0.1.1 2010-02-02T19:11:52+00:00 0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         get_report_formats Get one or many report formats

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_report_formats command to get report format information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        report_format_id ID of single report format to get uuid filter Filter term to use to filter query text filt_id ID of filter to use to filter query uuid trash Whether to get the trashcan report formats instead boolean alerts Whether to include alerts that use the report format boolean params Whether to include report format parameters boolean details Include report format file, signature and parameters boolean status status 1 status_text text 1 report_format filters sort report_formats report_format_count report_format id uuid 1 owner name creation_time modification_time writable in_use permissions user_tags extension content_type summary description global predefined alerts file signature trust active param owner Owner of the report format name name The name of the owner name name The name of the report format name creation_time iso_time modification_time iso_time writable Whether the report format is global or in use boolean in_use Whether any alerts are using the report format boolean permissions Permissions that the current user has on the report format permission permission name name The name of the permission name user_tags Info on tags attached to the report format count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text summary text description text extension text global boolean content_type text predefined boolean alerts Alerts using the report format alert alert id uuid UUID of the alert 1 name permissions name Name of the alert name permissions Permissions the user has on the permission param name type value default name The name of the param name type The type of the param min max options boolean integer selection string text min Minimum text max Maximum text options Selection options option option Option value text value The value of the param text default The fallback value of the param text file One of the files used to generate the report name text 1 base64 signature The report format signature text trust Whether signature verification succeeded name text 1 time yes no unknown time The time the trust was checked iso_time active Whether the report format is active boolean filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending report_formats start First report format integer 1 max Maximum number of report formats integer 1 report_format_count filtered page filtered Number of report formats after filtering integer page Number of report formats on current page integer Get information about a report format HTML 2013-01-31T16:46:32+01:00 2013-01-31T16:46:32+01:00 1 0 0 html text/html Single page HTML report. A single HTML page listing results of a scan. Style information ... 1 1 no 1 ... Export a report format HTML 2013-01-18T18:23:53+01:00 2013-01-18T18:24:10+01:00 1 0 0 html text/html Single page HTML report. A single HTML page listing results of a scan. Style information ... 1 1 PD9ldD4K ... IyEvAk ... ...                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         get_results Get results

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_results command to get result information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        If the request includes a notes flag, an overrides flag or an apply_overrides flag and any of these is true, then the request must also include a task ID.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        result_id ID of single result to get uuid filter Filter term to use to filter query text filt_id ID of filter to use to filter query uuid task_id ID of task for note and override handling uuid notes Whether to include notes in the result boolean note_details If notes are included, whether to include note details boolean overrides Whether to include overrides in the result boolean override_details If overrides are included, whether to include override details boolean apply_overrides Whether to override result threat levels boolean autofp Whether to trust vendor security updates. 1 full match, 2 partial 0 1 2 details Whether to include additional details of the results boolean status status 1 status_text text 1 result filters sort results result_count result result filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending results start First result integer 1 max Maximum number of results integer 1 result_count filtered page filtered Number of results after filtering integer page Number of results on current page integer Get one or many results admin 2014-05-23T09:22:12Z 2014-05-23T09:22:12Z 0 127.0.1.1 general/tcp Test NVT: fields with ISO-8859-1 chars 5.0 CVE-2009-3095 36254 NOTAGS NOXREF Medium Test with umlaut. ... first=1 rows=-1 sort=name first = 1 ... name ascending 124 124 124 Get a result, including notes and overrides admin 2014-05-23T09:22:12Z 2014-05-23T09:22:12Z 0 127.0.0.1 general/tcp Test NVT: long lines 9 CVE-2009-3095 36254 NOTAGS NOXREF High Test with very long warning. Medium Test NVT: long lines Test override High 0 first=1 rows=-1 sort=name first = 1 ... name ascending 1 1 1                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         get_roles Get one or many roles The client uses the get_roles command to get role information. role_id ID of single role to get uuid filter Filter term to use to filter query text filt_id ID of filter to use to filter query uuid trash Whether to get the trashcan roles instead boolean status status 1 status_text text 1 role filters sort roles role_count role id uuid 1 owner name comment creation_time modification_time writable in_use permissions user_tags users owner Owner of the role name name The name of the owner name name The name of the role name comment The comment on the role text creation_time Date and time the role was created iso_time modification_time Date and time the role was last modified iso_time users A comma-separated list of the users who have this role text writable Whether the role is writable boolean in_use Whether the role is in use boolean permissions Permissions that the current user has on the role permission permission name name The name of the permission name user_tags Info on tags attached to the role count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending roles start First role integer 1 max Maximum number of roles integer 1 role_count filtered page filtered Number of roles after filtering integer page Number of roles on current page integer Get one or many roles Management Managers Sun Jun 27 08:49:43 2010 Sun Jun 27 08:49:43 2010 1 0 0 sarah, frank ... first=1 rows=-1 sort=name first = 1 ... name ascending 1 1 1 get_scanners Get one or many scanners

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_scanners command to get scanner information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        scanner_id ID of single scanner to get uuid filter Filter term to use to filter query text filt_id ID of filter to use to filter query uuid trash Whether to get the trashcan scanners instead boolean details Whether to include extra details like tasks using this scanner boolean status status 1 status_text text 1 scanner filters sort scanners scanner_count scanner id uuid 1 owner name comment creation_time modification_time writable in_use permissions user_tags host port type ca_pub key_pub tasks owner Owner of the scanner name name The name of the owner name name The name of the scanner name comment The comment on the scanner text creation_time iso_time modification_time iso_time writable Whether the scanner is writable boolean in_use Whether any tasks are using the scanner boolean permissions Permissions that the current user has on the scanner permission permission name name The name of the permission name user_tags Info on tags attached to the chedule count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text host Host of the scanner text port Port of the scanner text type Type of the scanner text ca_pub CA Certificate to verify the scanner's certificate text key_pub Certificate of credentials to authenticate with text tasks task task id uuid 1 name permissions name The name of the task name permissions Permissions the user has on the task filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending scanners start First scanner integer 1 max Maximum number of scanners integer 1 scanner_count filtered page filtered Number of scanners after filtering integer page Number of scanners on current page integer Get full details of a single scanner Default Scanner 2014-01-01T13:57:25+01:00 2014-01-18T12:07:36+01:00 0 1 0 localhost 9391 2 ... ... Debian desktops ... ...                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         get_schedules Get one or many schedules

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_schedules command to get schedule information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        schedule_id ID of single schedule to get uuid filter Filter term to use to filter query text filt_id ID of filter to use to filter query uuid trash Whether to get the trashcan schedules instead boolean tasks Whether to include tasks using the schedules boolean status status 1 status_text text 1 schedule filters sort schedules schedule_count schedule id uuid 1 owner name comment creation_time modification_time writable in_use permissions user_tags first_time next_time timezone timezone_abbrev period period_months simple_period duration simple_duration tasks owner Owner of the schedule name name The name of the owner name name The name of the schedule name comment The comment on the schedule text creation_time iso_time modification_time iso_time writable Whether the schedule is writable boolean in_use Whether any tasks are using the schedule boolean permissions Permissions that the current user has on the schedule permission permission name name The name of the permission name user_tags Info on tags attached to the schedule count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text first_time First time the task ran or will run iso_time next_time The next time the task will run iso_time timezone The timezone that the schedule follows timezone timezone_abbrev The abbreviated name of the timezone text period How often the task will run, in seconds integer period_months How often the task will run, months portion integer simple_period Simple representation of period, if available text unit unit time_unit duration How long the task will run for (0 for entire task) integer simple_duration Simple representation of duration, if available text unit unit time_unit tasks task task id uuid 1 name permissions name The name of the task name permissions Permissions the user has on the task filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending schedules start First schedule integer 1 max Maximum number of schedules integer 1 schedule_count filtered page filtered Number of schedules after filtering integer page Number of schedules on current page integer Get full details of a single schedule Overnight 3 hours, starting at 12h00. 2013-01-01T13:57:25+01:00 2013-01-18T12:07:36+01:00 0 1 0 Tue Jun 29 00:00:00 2010 Tue Jun 29 00:00:00 2010 86400 0 1day 10800 3hour Europe/Berlin CEST Task 1 ...                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         get_settings Get one or many settings

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_settings command to get the settings.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        setting_id ID of single setting to get uuid filter Filter term text first First result integer max Maximum number of results in response integer sort_order sort_order sort_field text status status 1 status_text text 1 filters settings setting setting_count filters term term Filter term text settings start First setting integer 1 max Maximum number of settings integer 1 setting name comment value name text comment text value text setting_count filtered page filtered Number of settings after filtering integer page Number of settings on current page integer Get one or many settings Rows Per Page 15                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         get_slaves Get one or many slaves

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_slaves command to get slave information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        slave_id ID of single slave to get uuid filter Filter term to use to filter query text filt_id ID of filter to use to filter query uuid trash Whether to get the trashcan slaves instead boolean tasks Whether to include a list of tasks using the slave boolean status status 1 status_text text 1 slave filters sort slaves slave_count slave id uuid 1 owner name comment creation_time modification_time writable in_use permissions user_tags host port login tasks owner Owner of the slave name name The name of the owner name name The name of the slave name comment The comment on the slave text creation_time iso_time modification_time iso_time writable Whether the slave is writable boolean in_use Whether any slaves are using the slave boolean permissions Permissions that the current user has on the slave permission permission name name The name of the permission name user_tags Info on tags attached to the slave count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text host The host that the slave Manager is running on text port The port that the slave Manager is serving on the host text login Login name on the slave Manager text tasks task task id uuid 1 name permissions name The name of the task name permissions Permissions the user has on the task filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending slaves start First slave integer 1 max Maximum number of slaves integer 1 slave_count filtered page filtered Number of slaves after filtering integer page Number of slaves on current page integer Get one or many slaves, including task lists Bangkok Manager in Bangkok department. 2012-11-09T13:57:25+01:00 2012-12-28T12:07:36+01:00 1 0 0 192.0.32.10 sally Debian desktops ... ...                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         get_system_reports Get one or many system reports

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_system_reports command to get system reports.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        name A string describing the required report text duration The number of seconds into the past that the report should include integer brief Whether to include the actual reports boolean slave_id Slave from which to get report uuid status status 1 status_text text 1 system_report system_report name title report name The name of the system report name title The title of the system report text report format png txt 1 duration integer 1 base64 Get listing of available system reports proc Processes load System Load cpu_0 CPU Usage: CPU 0 ... Get a system report proc Processes iVBORw0KGgoAAAANSUhEUgAAArkAAAE...2bEdAAAAAElFTkSuQmCC                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         get_tags Get one or many tags

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_tags command to get tag information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        tag_id ID of single tag to get uuid filter Filter term to use to filter query text filt_id ID of filter to use to filter query text trash Whether to get tags from the trashcan instead boolean names_only Whether to get only distinct tag names boolean status status 1 status_text text 1 tag filters sort tags tag_count tag Information on a single tag id uuid of the tag (omitted when using names_only) uuid name permissions owner comment creation_time modification_time writable in_use resource value active orphan permissions Permissions that the current user has on the tag permission permission name name The name of the permission name owner Owner of the tag name name The name of the owner name name Name of the tag (usually namespace:predicate) text comment Comment for the tag text creation_time Date and time the tag was created iso_time modification_time Date and time the tag was last modified iso_time writable Whether the tag is writable boolean in_use Whether any tasks are using the tag boolean resource Identifies a resource the tag is attached to id ID of the resource the tag is attached to uuid 1 type name trash permissions type OMP type of the resource the tag is attached to text name Name of the attach resource if available, empty otherwise text trash Whether the resource is in the trashcan boolean permissions Permissions the user has on the resource value Value associated with the tag text active Whether the tag is active boolean orphan Whether the tag is attached to a nonexistent resource boolean filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending tags start First tag integer 1 max Maximum number of tags integer 1 tag_count filtered page filtered Number of tags after filtering integer page Number of tags on current page integer Get one or many tags geo:long Fri Apr 12 08:49:43 2013 Fri Apr 12 08:49:43 2013 1 0 target Server 1 0 52.2788 1 0 ...                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         get_targets Get one or many targets The client uses the get_targets command to get target information. target_id ID of single target to get uuid filter Filter term to use to filter query text filt_id ID of filter to use to filter query uuid trash Whether to get the trashcan targets instead boolean tasks Whether to include list of tasks that use the target boolean status status 1 status_text text 1 target filters sort targets target_count target id uuid 1 owner name comment creation_time modification_time writable in_use permissions user_tags hosts exclude_hosts max_hosts ssh_lsc_credential smb_lsc_credential esxi_lsc_credential permissions port_range port_list alive_tests reverse_lookup_only reverse_lookup_unify tasks owner Owner of the target name name The name of the owner name name The name of the target name comment The comment on the target text creation_time Date and time the target was created iso_time modification_time Date and time the target was last modified iso_time hosts A list of hosts text exclude_hosts A list of hosts to exclude text max_hosts The maximum number of hosts defined by the target integer writable Whether the target is writable boolean in_use Whether any tasks are using the target boolean permissions Permissions that the current user has on the target permission permission name name The name of the permission name user_tags Info on tags attached to the target count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text ssh_lsc_credential id A UUID if there is a credential, otherwise the empty string uuid_or_empty 1 name permissions port trash name The name of the SSH LSC credential name permissions Permissions the user has on the task port The port the LSCs will use text trash Whether the LSC credential is in the trashcan boolean smb_lsc_credential id A UUID if there is a credential, otherwise the empty string uuid_or_empty 1 name permissions trash name The name of the SMB LSC credential name permissions Permissions the user has on the task trash Whether the LSC credential is in the trashcan boolean esxi_lsc_credential id A UUID if there is a credential, otherwise the empty string uuid_or_empty 1 name permissions trash name The name of the ESXi LSC credential name permissions Permissions the user has on the task trash Whether the LSC credential is in the trashcan boolean port_range Port range of the target name port_list id uuid 1 name permissions trash name The name of the port_list name permissions Permissions the user has on the task trash Whether the port_list is in the trashcan boolean alive_tests Which alive tests to use alive_test reverse_lookup_only Whether to scan only hosts that have names boolean reverse_lookup_unify Whether to scan only one IP when multiple IPs have the same name boolean tasks All tasks using the target task task id uuid 1 name permissions name The name of the task name permissions Permissions the user has on the task filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending targets start First target integer 1 max Maximum number of targets integer 1 target_count filtered page filtered Number of targets after filtering integer page Number of targets on current page integer Get one or many targets Localhost Sun Jun 27 08:49:43 2010 Sun Jun 27 08:49:43 2010 0 7 0 localhost 1 ... Get a single target, including tasks using the target dik dik mm Sun Jun 27 08:49:43 2010 Sun Jun 27 08:49:43 2010 0 4 0 dik.example.org 1 mm dik mm ... get_tasks Get one or many tasks

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the get_tasks command to get task information.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        As a convenience for clients the response includes a task count and the values of the sort order, sort field and apply overrides flag that the manager applied when selecting the tasks.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        task_id ID of single task to get uuid filter Filter term to use to filter query text filt_id ID of filter to use to filter query uuid trash Whether to get the trashcan tasks instead boolean details Whether to include full task details boolean status status 1 status_text text 1 apply_overrides task filters sort tasks task_count apply_overrides 01 task id uuid 1 owner name comment creation_time modification_time writable in_use permissions user_tags status progress alterable config target hosts_ordering scanner alert observers schedule schedule_periods slave report_count trend current_report first_report last_report second_last_report reports result_count preferences owner Owner of the task name name The name of the owner name name The name of the task name comment The comment on the task text creation_time Creation time of the task iso_time modification_time Last time the task was modified iso_time writable Whether the task is writable boolean in_use Whether this task is currently in use boolean permissions Permissions that the current user has on the task permission permission name name The name of the permission name user_tags Info on tags attached to the task count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text status The run status of the task task_status progress The percentage of the task that is complete integer host_progress host_progress Percentage complete for a particular host integer host host text alterable Whether the task is an Alterable Task boolean config The scan configuration used by the task id uuid 1 name permissions trash name The name of the config name permissions Permissions the user has on the config trash Whether the config is in the trashcan boolean target The hosts scanned by the task id uuid 1 name permissions trash name The name of the target name permissions Permissions the user has on the target trash Whether the target is in the trashcan boolean hosts_ordering The order hosts are scanned in text scanner The scanner used to scan the target id uuid 1 name permissions type name The name of the scanner name type Type of the scanner integer permissions Permissions the user has on the task alert An alert that applies to the task id uuid_or_empty 1 name permissions trash name The name of the alert name permissions Permissions the user has on the alert trash Whether the alert is in the trashcan boolean observers Users allowed to observe this task user_list group role group Group allowed to observe this task id uuid 1 name name The name of the group name role Role allowed to observe this task id uuid 1 name name The name of the role name schedule When the task will run id uuid_or_empty 1 name permissions trash name The name of the schedule name permissions Permissions the user has on the schedule trash Whether the schedule is in the trashcan boolean schedule_periods A limit to the number of times the task will be scheduled, or 0 for no limit integer slave The slave that the task will run on id uuid 1 name permissions trash name The name of the slave name permissions Permissions the user has on the slave trash Whether the slave is in the trashcan boolean report_count Number of reports integer finished finished Number of reports where the scan completed integer trend task_trend current_report report report id uuid 1 timestamp timestamp iso_time first_report report report id uuid 1 timestamp scan_end result_count severity timestamp iso_time scan_end iso_time result_count Result counts for this report debug false_positive log info warning hole debug integer false_positive integer log integer info integer warning integer hole integer severity severity Maximum severity of the report last_report report report id uuid 1 timestamp scan_end result_count severity timestamp iso_time scan_end iso_time result_count Result counts for this report debug false_positive log info warning hole debug integer false_positive integer log integer info integer warning integer hole integer severity severity Maximum severity of the report second_last_report report report id uuid 1 timestamp scan_end result_count severity timestamp iso_time scan_end iso_time result_count Result counts for this report debug false_positive log info warning hole debug integer false_positive integer log integer info integer warning integer hole integer severity severity Maximum severity of the report reports report report id uuid 1 timestamp scan_end scan_run_status result_count severity timestamp iso_time scan_end iso_time scan_run_status Run status of task scan task_status result_count Result counts for this report debug false_positive log info warning hole debug integer false_positive integer log integer info integer warning integer hole integer severity severity Maximum severity of the report result_count Result count for the entire task text preferences preference preference name scanner_name value name Full name of preference, suitable for end users text scanner_name Compact name of preference, from scanner text value text filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending tasks start First task integer 1 max Maximum number of tasks integer 1 task_count filtered page filtered Number of tasks after filtering integer page Number of tasks on current page integer Get one or many tasks 0 Scan Webserver Scan of the web server. 2013-01-03T13:50:03+01:00 2013-01-11T16:03:24+01:00 1 0 0 admin 0 Full and fast dik foo scanner 2 Done -1 22 over Mon Feb 1 19:11:20 2010 0 0 7 0 3 5.0 Mon Feb 1 19:11:20 2010 0 0 7 0 3 5.0 Mon Feb 1 19:11:20 2010 0 0 7 0 3 5.0 Maximum concurrently executed NVTs per host max_checks 4 Maximum concurrently scanned hosts max_hosts 20 Add results to Asset Management in_assets yes Scan Mailserver ... Get a single task, including all reports 0 Scan Mailserver Scan of the web server. 2013-01-03T13:50:03+01:00 2013-01-11T16:03:24+01:00 1 0 0 admin 1 Full and fast dik Done -1 22 over Mon Feb 1 19:11:20 2010 0 0 7 0 3 5.0 Mon Feb 1 19:11:20 2010 0 0 7 0 3 5.0 Mon Feb 1 19:11:20 2010 0 0 7 0 3 5.0 Mon Feb 1 18:51:38 2010 Done 0 0 7 0 3 Mon Feb 1 19:11:20 2010 Done 0 0 7 0 3 5.0 Maximum concurrently executed NVTs per host max_checks 4 Maximum concurrently scanned hosts max_hosts 20 Add results to Asset Management in_assets yes nameascending 311                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         get_users Get one or many users

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the "get_users" command to retrieve the list of user accounts on the Scanner.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        user_id ID of single user to get uuid filter Filter term to use to filter query text filt_id ID of filter to use to filter query uuid status status 1 status_text text 1 user filters sort users user_count user id ID of user uuid 1 owner name comment creation_time modification_time writable in_use role groups hosts ifaces permissions user_tags sources owner Owner of the user name name The name of the owner name name The name of the user text comment The comment on the user text creation_time Creation time of the user iso_time modification_time Last time the user was modified iso_time writable Whether the user is writable boolean in_use Whether this user is currently in use boolean role The role of the user id uuid 1 name permissions name Name of role name permissions Permissions the user has on the role groups The groups the user belongs to group group id uuid 1 name permissions name Name of group name permissions Permissions the user has on the group hosts Host access rule for the user allow 0 forbidden, 1 allowed, 2 all allowed, 3 custom 0 1 2 3 1 text ifaces Iface access rule for the user allow 0 forbidden, 1 allowed, 2 all allowed, 3 custom 0 1 2 3 1 text permissions Permissions that the current user has on the user permission permission name name The name of the permission name user_tags Info on tags attached to the user count tag count Number of attached tags integer tag Short info on an individual tag (only if details were requested) id uuid UUID of the tag 1 name value comment name Name of the tag (usually namespace:predicate) text value Value of the tag text comment Comment for the tag text sources Sources allowed for authentication for this user sources filters id UUID of filter if any, else 0 uuid 1 term name keywords term Filter term text name Filter name, if applicable text keywords Filter broken down into keywords keyword keyword column relation value column Column prefix text relation Relation operator = : ~ > < value The filter text text sort text field field order order ascending descending users start First user integer 1 max Maximum number of users integer 1 user_count filtered page filtered Number of users after filtering integer page Number of users on current page integer Get the users foobar User 0 file                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         get_version Get the OpenVAS Manager Protocol version status status 1 status_text text 1 version version text Get the version 1.0 help Get the help text format Required help format html HTML rnc RNC text TEXT xml XML type Help type, currently only blank or "brief" for XML format brief status status 1 status_text text 1 schema text schema protocol protocol format The help format text extension The suggested file extension for the help text content_type The MIME content-type of the help text name abbreviation summary version type command name The full name of the protocol text abbreviation The abbreviated name of the protocol text summary A summary of the protocol text version The version number of the protocol text type A data type name summary description pattern name The name of the data type type_name summary A summary of the data type text description A description of the data type p text p A paragraph text pattern The RNC pattern for the data type text command A command command_definition Get the help text AUTHENTICATE Authenticate with the manager. COMMANDS Run a list of commands. CREATE_AGENT Create an agent. CREATE_ALERT Create an alert. CREATE_CONFIG Create a config. CREATE_FILTER Create a filter. CREATE_GROUP Create a group. CREATE_LSC_CREDENTIAL Create a local security check credential. CREATE_NOTE Create a note. CREATE_OVERRIDE Create an override. CREATE_PERMISSION Create a permission. CREATE_PORT_LIST Create a port list. CREATE_PORT_RANGE Create a port range in a port list. CREATE_REPORT Create a report. CREATE_REPORT_FORMAT Create a report format. CREATE_ROLE Create a role. CREATE_SCANNER Create a scanner. CREATE_SCHEDULE Create a schedule. CREATE_SLAVE Create a slave. CREATE_TAG Create a tag. CREATE_TARGET Create a target. CREATE_TASK Create a task. CREATE_USER Create a new user. DELETE_AGENT Delete an agent. DELETE_ALERT Delete an alert. DELETE_CONFIG Delete a config. DELETE_FILTER Delete a filter. DELETE_GROUP Delete a group. DELETE_LSC_CREDENTIAL Delete a local security check credential. DELETE_NOTE Delete a note. DELETE_OVERRIDE Delete an override. DELETE_PERMISSION Delete a permission. DELETE_PORT_LIST Delete a port list. DELETE_PORT_RANGE Delete a port range. DELETE_REPORT Delete a report. DELETE_REPORT_FORMAT Delete a report format. DELETE_ROLE Delete a role. DELETE_SCANNER Delete a scanner. DELETE_SCHEDULE Delete a schedule. DELETE_SLAVE Delete a slave. DELETE_TAG Delete a tag. DELETE_TARGET Delete a target. DELETE_TASK Delete a task. DELETE_USER Delete an existing user. DESCRIBE_AUTH Get details about the used authentication methods. DESCRIBE_CERT Get details of the CERT feed this Manager uses. DESCRIBE_FEED Get details of the NVT feed this Manager uses. DESCRIBE_SCAP Get details of the SCAP feed this Manager uses. EMPTY_TRASHCAN Empty the trashcan. GET_AGENTS Get one or many agents. GET_ALERTS Get one or many alerts. GET_CONFIGS Get one or many configs. GET_FILTERS Get one or many filters. GET_GROUPS Get one or many groups. GET_INFO Get raw information for a given item. GET_LSC_CREDENTIALS Get one or many local security check credentials. GET_NOTES Get one or many notes. GET_NVTS Get one or all available NVTs. GET_NVT_FAMILIES Get a list of all NVT families. GET_NVT_FEED_VERSION Get NVT feed version. GET_OVERRIDES Get one or many overrides. GET_PERMISSIONS Get one or many permissions. GET_PORT_LISTS Get one or many port lists. GET_PREFERENCES Get preferences for all available NVTs. GET_REPORTS Get one or many reports. GET_REPORT_FORMATS Get one or many report formats. GET_RESULTS Get results. GET_ROLES Get one or many roles. GET_SCANNERS Get one or many scanners. GET_SCHEDULES Get one or many schedules. GET_SETTINGS Get one or many settings. GET_SLAVES Get one or many slaves. GET_SYSTEM_REPORTS Get one or many system reports. GET_TAGS Get one or many tags. GET_TARGETS Get one or many targets. GET_TASKS Get one or many tasks. GET_USERS Get one or many users. GET_VERSION Get the OpenVAS Manager Protocol version. HELP Get this help text. MODIFY_AGENT Modify an existing agent. MODIFY_ALERT Modify an existing alert. MODIFY_AUTH Modify the authentication methods. MODIFY_CONFIG Update an existing config. MODIFY_FILTER Modify an existing filter. MODIFY_GROUP Modify an existing group. MODIFY_LSC_CREDENTIAL Modify an existing LSC credential. MODIFY_NOTE Modify an existing note. MODIFY_OVERRIDE Modify an existing override. MODIFY_PERMISSION Modify an existing permission. MODIFY_PORT_LIST Modify an existing port list. MODIFY_REPORT Modify an existing report. MODIFY_REPORT_FORMAT Modify an existing report format. MODIFY_ROLE Modify an existing role. MODIFY_SCANNER Modify an existing scanner. MODIFY_SCHEDULE Modify an existing schedule. MODIFY_SETTING Modify an existing setting. MODIFY_SLAVE Modify an existing slave. MODIFY_TAG Modify an existing tag. MODIFY_TARGET Modify an existing target. MODIFY_TASK Update an existing task. MODIFY_USER Modify a user. RESTORE Restore a resource. RESUME_TASK Resume a task. RUN_WIZARD Run a wizard. START_TASK Manually start an existing task. STOP_TASK Stop a running task. SYNC_CERT Synchronize with a CERT feed. SYNC_FEED Synchronize with an NVT feed. SYNC_SCAP Synchronize with a SCAP feed. TEST_ALERT Run an alert. VERIFY_AGENT Verify an agent. VERIFY_REPORT_FORMAT Verify a report format. Get the OMP schema OpenVAS Management Protocol OMP The "management" protocol of the Open Vulnerability Assessment System 1.0 base64 Base64 encoded data xsd:base64Binary ... authenticate Authenticate with the manager

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the authenticate command to authenticate with the Manager.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client normally executes this command at the beginning of each connection. The only commands permitted before authentication are get_version and commands.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        credentials credentials username password username The login name of the user text password The user's password text status status 1 status_text text 1 Authenticate with a good password sally secret User UTC ...                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         ...                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_agent Modify an existing agent

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_agent command to change an existing agent.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        agent_id ID of agent to modify uuid 1 name comment comment Comment on agent text name Name of agent name status status 1 status_text text 1 Modify the comment on an agent Old Agent 1                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_alert Modify an existing alert

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_alert command to change an existing alert.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        alert_id ID of alert to modify uuid 1 name comment filter event condition method name Name of alert name comment Comment on alert text condition The condition that must be satisfied for the alert to occur text data data Some data that defines the condition text name name The name of the condition data text event The event that must happen for the alert to occur text data data Some data that defines the event text name name The name of the event data text method The method by which the user is alerted text data data Some data that defines the method text name name The name of the method data text filter Filter to apply when executing alert id uuid 1 status status 1 status_text text 1 Modify the name and report filter of an alert and the condition that triggers it Low Level Alert 2 Threat level at least Low level                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_auth Modify the authentication methods

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the "modify_auth" command to modify the authentication methods.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        group group auth_conf_setting auth_conf_setting A setting to modify key text 1 value text 1 status status 1 status_text text 1 Modify a single setting for an authentication method                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_config Modify an existing config

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        This command can take five forms: with a preference, with a family selection, with an NVT selection, or with a name or comment.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The first form modifies a preference on the config. If the preference includes an NVT, then the preference is an NVT preference, otherwise the preference is a scanner preference. If the preference includes a value then the manager updates the value of the preference, otherwise the manager removes the preference. The value must be base64 encoded.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The second form, with a family selection, lets the client modify the NVTs selected by the config at a family level. The idea is that the client modifies the entire family selection at once, so a client will often need to include many families in a family selection.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The family_selection may include a growing element to indicate whether new families should be added to the selection. It may also include any number of family elements.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        A family element must always include a name and may include a growing element and an all element. The all element indicates whether all NVTs in the family should be selected. The growing element indicates whether new NVTs in the family should be added to the selection as they arrive. Leaving a family out of the family_selection is equivalent to including the family with all 0 and growing 0.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The effect of the all 0 and growing 0 case is subtle: if all NVTs were selected then all are removed (effectively removing the family from the config). However if some NVTs were selected then they remain selected. As a result the client must include in the family_selection all families that must have all NVTs selected.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The third option, an NVT selection, must include a family and may include any number of NVTs. The manager updates the given family in the config to include only the given NVTs.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        If there was no error with the command sent by the client, the manager will apply the changes to the config and will reply with a response code indicating success.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        config_id ID of config to modify uuid 1 name comment preference family_selection nvt_selection name New name for the config name comment New comment for the config text preference name nvt value name The name of the preference to modify name nvt NVT associated with preference to modify If this element is present then the preference is an NVT preference, otherwise it is a Scanner preference. oid oid 1 value New value for preference base64 family_selection growing family growing Whether new families should be added to the config boolean_atoi family all growing name all Whether to select all NVTs initially boolean_atoi growing Whether to add newly arrived nvts to the selection boolean_atoi name name nvt_selection family nvt family Name of family to modify name nvt oid oid 1 status status 1 status_text text 1 Modify a config NVT preference Nmap (NASL wrapper)[checkbox]:UDP port scan eWVz Modify a config Scanner preference scanner[scanner]:vhosts ZXhhbXBsZQ== Modify the families that a config selects

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The outer "growing" element sets the config to add any new families that arrive.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client requests the Manager to keep a single selected family (Debian Local Security Checks), to select all NVTs in this family, and to automatically add any new NVTs in this family to the config.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1 Debian Local Security Checks 1 1                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         Modify the NVTs that a config selects in a particular family Debian Local Security Checks                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_filter Modify an existing filter

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_filter command to change an existing filter.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        filter_id ID of filter to modify uuid 1 comment name term type comment Comment on filter text name Name of filter name term Filter term text type Resource type filter applies to text status status 1 status_text text 1 Modify the term of a filter name=local                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_group Modify an existing group

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_group command to change an existing group.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        group_id ID of group to modify uuid 1 name comment users name Name of group name comment Comment on group text users Comma separated list of user names text status status 1 status_text text 1 Modify the name of a group Line Managers                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_lsc_credential Modify an existing LSC credential

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_lsc_credential command to change an existing LSC credential.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The login and password can only be changed for password LSC credentials. Modification of login or password on package credentials is forbidden.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        lsc_credential_id ID of LSC credential to modify uuid 1 comment name password login name A name for the LSC credential name comment A comment on the LSC credential text login The user name of the credential text password The password for the credential login text status status 1 status_text text 1 Modify the comment of an LSC credential Credential for all machines in lab 4.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_note Modify an existing note

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_note command to change an existing note.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        If an optional element is left out, the existing value will be cleared, generalising that constraint.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        note_id ID of note to modify uuid 1 active hosts port result severity task text threat active Seconds note will be active. -1 on always, 0 off integer hosts A textual list of hosts text port Port to which note applies text severity Severity to which note applies severity text The text of the note text threat Threat level to which note applies threat task Task to which note applies id uuid 1 result Result to which note applies id uuid 1 status status 1 status_text text 1 Modify the text and result of a note This issue should be resolved after the upgrade.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_override Modify an existing override

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_override command to change an existing override.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        If an optional element is left out, the existing value will be cleared, generalising that constraint.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        override_id ID of override to modify uuid 1 active hosts new_severity new_threat port result task text severity threat active Seconds override will be active. -1 on always, 0 off integer hosts A textual list of hosts text new_severity New severity score for result severity new_threat New threat level for result threat port Port to which override applies text text Text describing the override text severity Severity score to which override applies severity threat Threat level to which override applies threat task Task to which override applies id uuid 1 result Result to which override applies id uuid 1 status status 1 status_text text 1 Set the override threat to Low This issue is less important in our setup. Low                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_permission Modify a permission

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_permission command to change an existing permission.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        permission_id uuid 1 name comment resource subject name Permission name, currently the name of a command text comment The comment on the permission text resource A resource to which the permission applies id UUID if permission applies to resource, else 0 uuid 0 type type OMP type, for Super permissions: user, group or role text subject A subject to whom the permission is granted id uuid 0 type type OMP type of the subject: user, group or role text status status 1 status_text text 1 Change user of a permission user                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_port_list Modify an existing port list

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_port_list command to change an existing port list.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        port_list_id ID of port list to modify uuid 1 name comment name Name of port list name comment Comment on port list text status status 1 status_text text 1 Modify the name of a port list PL-WS1 Port List for Web Server 1                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_report Modify an existing report

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_report command to change an existing report.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        report_id ID of report to modify uuid 1 comment comment The comment on the report text status status 1 status_text text 1 Modify a report comment Monthly scan of the webserver.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_report_format Update an existing report format

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_report_format command to change an existing report format.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        report_format_id ID of report format to modify uuid 1 active name summary param active Whether the report format is active boolean name The name of the report format name summary A summary of the report format text param If the value element is missing, then the value becomes the empty string. name value name The name of the param name value New value for the param base64 status status 1 status_text text 1 Modify a report format param Background Colour cmVk Modify the name of a report format New name                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_role Modify an existing role

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_role command to change an existing role.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        role_id ID of role to modify uuid 1 name comment users status status 1 status_text text 1 name Name of role name comment Comment on role text users Comma separated list of user names text Modify the name of a role SCAP User                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_scanner Modify an existing scanner

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_scanner command to change an existing scanner.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        scanner_id ID of scanner to modify uuid 1 comment name host port type ca_pub key_pub key_priv comment Comment on scanner text name Name of scanner name host Host of the scanner text port Port of the scanner text type Type of the scanner. '1' for OSP, '2' for OpenVAS (classic) Scanner text ca_pub Certificate of CA to verify scanner's certificate text key_pub Certificate of credentials to authenticate with to scanner text key_priv Private key of credentials to authenticate with to scanner text status status 1 status_text text 1 Modify the name of a scanner Weekly Scan                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_schedule Modify an existing schedule

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_schedule command to change an existing schedule.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        schedule_id ID of schedule to modify uuid 1 comment name first_time duration period timezone comment Comment on schedule text name Name of schedule name first_time First time the task will run. Missing subelements default to current system time day_of_month hour minute month year day_of_month text hour text minute text month text year text timezone The timezone the schedule will follow. User's timezone is used if omitted timezone duration How long the task will run for text unit unit time_unit period How often the task will run text unit unit time_unit status status 1 status_text text 1 Modify the name of a schedule Weekly Scan                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_setting Modify an existing setting

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_setting command to change an existing setting. These are user settings that can be controlled via OMP. The settings "Password" and "Timezone" can be modified by name, the rest by UUID.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        setting_id uuid name value name The name of the setting text value The value of the setting text status status 1 status_text text 1 Modify the timezone Timezone Africa/Johannesburg                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_slave Modify an existing slave

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_slave command to change an existing slave.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        slave_id ID of slave to modify uuid 1 name comment host port login password name A name for the slave name comment A comment on the slave text host The host that the slave Manager is running on text port The port that the slave Manager is serving on the host text login Login name on the slave Manager text password Password for login on the slave Manager text status status 1 status_text text 1 Update slave information BK-1 Bangkok Manager 1 bk1.example.com 9390 user1 pass                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_target Modify an existing target

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_target command to change an existing target.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        target_id ID of target to modify uuid 1 comment name hosts hosts_ordering exclude_hosts ssh_lsc_credential smb_lsc_credential esxi_lsc_credential port_list alive_tests reverse_lookup_only reverse_lookup_unify comment Comment on target text name Name of target name hosts Target hosts text hosts_ordering The order hosts are scanned in text exclude_hosts A list of hosts to exclude text ssh_lsc_credential SSH credential to use on target id uuid 1 smb_lsc_credential SMB credential to use on target id uuid 1 esxi_lsc_credential ESXi credential to use on target id uuid 1 port_list Port List describing ports to scan id uuid 1 alive_tests Which alive tests to use alive_test reverse_lookup_only Whether to scan only hosts that have names boolean reverse_lookup_unify Whether to scan only one IP when multiple IPs have the same name boolean status status 1 status_text text 1 Modify the name of a target Upstairs Lab                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_tag Modify a tag

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_tag command to change an existing tag.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        tag_id uuid 1 name resource value comment active name A full tag name consisting of namespace and predicate text resource Identifies a resource the tag is to be attached to id ID of the resource the tag is to be attached to uuid 0 type type OMP type of the resource the tag is to be attached to text value Value associated with the tag text comment Comment to add to the tag text active Whether the tag is active boolean status status 1 status_text text 1 Deactivate a tag 0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_task Modify an existing task

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the modify_task command to change an existing task.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        task_id ID of task to modify uuid 1 comment alert name observers preferences schedule schedule_periods scanner slave file comment The comment on the task text alert Task alert id uuid 1 name The name of the task name observers Users allowed to observe this task user_list preferences preference preference scanner_name value scanner_name Compact name of preference, from scanner text value text schedule Task schedule id uuid 1 schedule_periods A limit to the number of times the task will be scheduled, or 0 for no limit integer scanner Task scanner id uuid 1 slave Task slave id uuid 1 file File to attach to task name text 1 base64 action update remove 1 status status 1 status_text text 1 Modify a task comment Monthly scan of the webserver.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         modify_user Modify a user

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the "modify_user" command to modify an user account on the OpenVAS server.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        user_id ID of the user to be modified. Overrides NAME element uuid 1 name new_name password role hosts ifaces sources name The name of the user to be modified text new_name The new name for the user text hosts User access rules: a textual list of hosts User is allowed to access any host if this element is missing. allow If 1, allow only listed, otherwise forbid listed boolean text ifaces User access rules: a textual list of ifaces allow If 1, allow only listed, otherwise forbid listed boolean text password The password for the user text role A role of the user id uuid 1 sources List of authentication sources for this user (if omitted, no changes) sources status status 1 status_text text 1 Modify a user Foobar                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         restore Restore a resource

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the restore a resource from the trashcan.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        id uuid 1 status status 1 status_text text 1 Restore a target                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         resume_task Resume a task

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the resume_task command to manually resume a stopped task.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        task_id uuid 1 status status 1 status_text text 1 report_id report_id The id of the report uuid Resume a task 330ee785-c2c0-4d4c-ab96-725142c9b789                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         run_wizard Run a wizard

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the run_wizard command to run a wizard.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        mode name params read_only boolean Whether to only run wizards marked as read only 0 mode The mode to run the wizard in text name The name of the wizard name params Parameters for the wizard param param name value name Parameter name text value Value of parameter text status status 1 status_text text 1 response response Contains the response of the command run in the last step Run the Quick Start wizard to scan localhost quick_first_scan hosts localhost a06d21f7-8e2f-4d7f-bceb-1df852d8b37d                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         start_task Manually start an existing task

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the start_task command to manually start an existing task.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        task_id uuid 1 status status 1 status_text text 1 report_id report_id The id of the report uuid Start a task 330ee785-c2c0-4d4c-ab96-725142c9b789                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         stop_task Stop a running task

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the stop_task command to manually stop a running task.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        task_id uuid 1 status status 1 status_text text 1 Stop a running task                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         sync_cert Synchronize with a CERT feed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the "sync_cert" command to request a synchronization with the CERT feed service the Manager uses.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        status status 1 status_text text 1 Sync the feed                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         sync_feed Synchronize with an NVT feed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the "sync_feed" command to request a synchronization with the NVT feed service the Manager uses.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        status status 1 status_text text 1 Sync the feed                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         sync_scap Synchronize with a SCAP feed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the "sync_scap" command to request a synchronization with the SCAP feed service the Manager uses.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        status status 1 status_text text 1 Sync the feed                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         test_alert Run an alert

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the test_alert command to invoke a test run of an alert.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        alert_id uuid 1 status status 1 status_text text 1 Test an alert                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         verify_agent Verify an agent

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the verify_agent command to verify the trust level of an existing agent.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The Manager checks whether the signature of the agent currently matches the agent. This includes the agent installer file. The Manager searches for the signature first in the feed, then in the agent itself.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        agent_id uuid 1 status status 1 status_text text 1 Verify an agent                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         verify_report_format Verify a report format

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The client uses the verify_report_format command to verify the trust level of an existing report format.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The Manager checks whether the signature of the report format currently matches the report format. This includes the script and files used to generate reports of this format. The Manager searches for the signature first in the feed, then in the report format itself.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        report_format_id uuid 1 status status 1 status_text text 1 Verify a report format                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         PAUSE_TASK, RESUME_PAUSED_TASK Commands removed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The task pausing feature has been removed and thus, the PAUSE_TASK and RESUME_PAUSED_TASK commands don't exist anymore.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        6.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         GET_NOTES, GET_OVERRIDES, GET_REPORTS, GET_RESULTS Element RISK_FACTOR removed from element NVT

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Risk factors have been replaced by CVSS scores in all NVTs, so the RISK_FACTOR element has been removed from the NVT elements in various commands.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        6.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         RESUME_STOPPED_TASK, RESUME_TASK RESUME_STOPPED_TASK renamed to RESUME_TASK

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The resuming of tasks is now done via the new command RESUME_TASK, which is the former RESUME_STOPPED_TASK. There is no other resumable status than "stopped" anymore and thus the command names are consolidated for consistency and to avoid confusion.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        6.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         RESUME_OR_START_TASK Command removed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        As part of the consolidation of the start/resume handling of tasks, the command RESUME_OR_START_TASK was removed. Use a combination of START_TASK and RESUME_TASK to establish the same functionality.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        6.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         CREATE_TARGET, MODIFY_TARGET Element TARGET_LOCATOR removed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The element TARGET_LOCATOR was removed from CREATE_TARGET and MODIFY_TARGET. This was an older, unused feature.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        6.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         GET_RESULTS "result" elements moved to response root element

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The "result" elements returned by the GET_RESULTS command are no longer nested inside a "results" element but directly inside the "get_results_response". The "results" element is used to return the "max" and "start" attributes like similar elements for other types.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        6.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         GET_TARGET_LOCATORS Command removed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The command GET_TARGET_LOCATORS was removed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        6.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         GET_TASKS Attribute "rcfile" and associate RCFILE removed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The attribute "rcfile" and associate response element RCFILE were removed. It is no longer possible to get an openvasrc configuration for a task. This feature was primarily introduced to support the GTK frontend openvas-client, which is no longer maintained.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        6.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         CREATE_CONFIG, CREATE_TASK, MODIFY_TASK RCFILE removed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The element RCFILE was removed. It is no longer possible to create or modify a config or task from an openvasrc file. This feature was primarily introduced to support the GTK frontend openvas-client, which is no longer maintained.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        6.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         CREATE_LSC_CREDENTIAL KEY/PUBLIC removed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The child PUBLIC of element KEY was removed, because public keys are now extracted from the private key.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        6.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         GET_FILTERS, CREATE_FILTER, MODIFY_FILTER Filter type "report" is now "result"

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The filter type "report" has been renamed to "result". Filters of this type apply to the results in a report, as used for example on the GSA "Report: Results" page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The name "report" is now used for a new filter type. This filter type applies to lists of reports, as used for example on the GSA "Reports" page.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         CREATE_USER, MODIFY_USER ROLE is identified by "id" attribute

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In OMP 4.0 these commands were served by OpenVAS Administrator.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The attribute "id" is now used to specify a user's role, in the ROLE element. Previously this was done using the NAME element inside ROLE.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         GET_USERS Attributes name and sort_order removed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In OMP 4.0 this command was served by OpenVAS Administrator.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The attributes name and sort_order have been remove from the GET_USERS in OpenVAS Manager. Equivalent functionality is available using filters (with the filter and filt_id attributes).

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         GET_USERS ROLE is optional, and role name has moved into NAME

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In OMP 4.0 this command was served by OpenVAS Administrator.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        With the new role management, zero or more ROLEs may be present in USER. The name of the role is now in ROLE/NAME instead of directly in the text of ROLE.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         GET_NVTS Fingerprint element removed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The fingerprint element has been removed as signature keys aren't sent by the scanner anymore and thus, aren't stored in Manager DB anymore.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         GET_DEPENDENCIES Command removed

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The command GET_DEPENDENCIES has been removed.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         MODIFY_TARGET Missing elements now leave the associate target property alone

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        MODIFY_TARGET now allows the user to modify one or more of the Target elements in a single command, instead of requiring all elements to be modified at once.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        As a side effect of this, leaving out an element will no longer set the associated target value to a default, but will leave the associated target value untouched. For example, if SSH_LSC_CREDENTIAL is omitted from the MODIFY_TARGET command, the command will no longer reset the SSH credential of the target, but will leave the target's current SSH credential intact.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         All standard GET commands Attribute "actions" replaced with owner filtering

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The attribute "actions" in GET commands has been removed. The only implemented function of this attribute was to include observed resources in the listings. For example, specifying actions="g" in a GET_TASKS command would include tasks that other users had made visible to the caller. The new way to do this is to include "owner=any" in the filter.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         All standard GET commands Attributes "sort_field" and "sort_order" replaced by filtering

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The attributes "sort_field" and "sort_order" have been removed from the standard GET commands. The new way to do this is to include keywords like "sort=name" and "sort-reverse=name" in the filter.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         CREATE_ALERT, GET_ALERTS, MODIFY_ALERT "Threat level" replaced with "Severity" in alert conditions

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The alert conditions "Threat level changed" and "Threat level at least" have been replaced with "Severity changed" and "Severity at least" respectively.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        The latter now expects a data entity named "severity" instead of "level". Both conditions now use a numeric severity value instead of the old threat levels like "High", "Medium" etc.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4.0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         GET_REPORTS THREAT removed from PORT in response 4.0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In the response to GET_REPORTS the element THREAT in REPORTS/PORTS/PORT has been replaced with the element CVSS.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        GET_TARGETS PORT_RANGE not always returned within TARGET 4.0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In the response to GET_TARGETS the element PORT_RANGE in TARGETS is only included when details attribute is set in REQUEST.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        openvas-manager-6.0.9/src/schema_formats/XML-brief/generate000755 001751 001751 00000002016 12557600614 024715 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: Schema generator script: Brief XML. # # This schema generator creates a brief XML description of the protocol. # Basically just the command list. # # Authors: # Matthew Mundell # # Copyright: # Copyright (C) 2012 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. xsltproc ./OMP.xsl $1 openvas-manager-6.0.9/src/schema_formats/XML-brief/OMP.xsl000644 001751 001751 00000003462 12557600614 024366 0ustar00michaelmichael000000 000000 openvas-manager-6.0.9/src/schema_formats/HTML/generate000755 001751 001751 00000002032 12557600615 023733 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: Schema generator script: HTML. # # This schema generator creates a single HTML file from the XML schema using # an XSL transformation via the tool xsltproc. # # Authors: # Matthew Mundell # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. xsltproc ./HTML.xsl $1 openvas-manager-6.0.9/src/schema_formats/HTML/rnc.xsl000644 001751 001751 00000040011 12557600615 023524 0ustar00michaelmichael000000 000000 ↵ ↵ ### Preamble start = command | response command = | response = _response | | | " } xsd:token { pattern = " # . attribute { } ? _response | | " } xsd:token { pattern = " * ( & ) ? ( | ) ERROR "" text # RNC limitation: & & # . = element # type { } = element { } = element { } openvas-manager-6.0.9/src/schema_formats/HTML/HTML.xsl000644 001751 001751 00000063510 12557600615 023517 0ustar00michaelmichael000000 000000 0

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1 0 =" " =" " 0 ... < /> < > </ > < > </ >

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        4 RNC Preamble
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        .

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1 Summary of Data Types

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         5.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Data Type

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: .

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        .1 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  
           =

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        5 Data Type Details
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        .

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        2 Summary of Elements

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        6 Element Details

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         6.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Element

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: .

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        .1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        .2 RNC
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        , or " " text , or " " text
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • @ () .
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        command.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <_response>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response to command.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • <>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ()
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        .
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        .
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • The group
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      • One of
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          • Empty single element.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: .

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        .1 Structure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        • Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        .2 RNC

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Command
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Response

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        .3 Example:

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Client
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Manager
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        .

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        3 Summary of Commands

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        7 Command Details

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         8.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Change in

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        In short: .

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        8 Compatibility Changes in Version

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <xsl:choose> <xsl:when test="abbreviation"> <xsl:value-of select="abbreviation"/> </xsl:when> <xsl:when test="name"> <xsl:value-of select="name"/> </xsl:when> <xsl:otherwise> Protocol definition </xsl:otherwise> </xsl:choose> openvas-manager-6.0.9/src/schema_formats/RNC/generate000755 001751 001751 00000002031 12557600615 023610 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: Schema generator script: HTML. # # This schema generator creates a single HTML file from the XML schema using # an XSL transformation via the tool xsltproc. # # Authors: # Matthew Mundell # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. xsltproc ./RNC.xsl $1 openvas-manager-6.0.9/src/schema_formats/RNC/RNC.xsl000644 001751 001751 00000013313 12557600615 023247 0ustar00michaelmichael000000 000000 1 ### Data Types # . = ### Element Types ## Element Type ## ## . ### Commands ## Command ## ## . ### Responses ## Response to # # . #### ( ) #### #### Version: #### #### . openvas-manager-6.0.9/src/schema_formats/RNC/rnc.xsl000644 001751 001751 00000040011 12557600615 023402 0ustar00michaelmichael000000 000000 ↵ ↵ ### Preamble start = command | response command = | response = _response | | | " } xsd:token { pattern = " # . attribute { } ? _response | | " } xsd:token { pattern = " * ( & ) ? ( | ) ERROR "" text # RNC limitation: & & # . = element # type { } = element { } = element { } openvas-manager-6.0.9/src/alert_methods/Sourcefire/alert000755 001751 001751 00000001726 12557600615 024462 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: Escalator method script: Sourcefire connector. # # Authors: # Matthew Mundell # # Copyright: # Copyright (C) 2011 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. greenbone_sourcefire_connector -server=$1 -port=$2 -pkcs12=$3 $4 openvas-manager-6.0.9/src/alert_methods/Send/alert000755 001751 001751 00000001645 12631501054 023233 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: Escalator method script: Send. # # Authors: # Matthew Mundell # # Copyright: # Copyright (C) 2015 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. cat $3 | socat -t 0 - TCP:$1:$2 openvas-manager-6.0.9/src/alert_methods/SCP/alert000644 001751 001751 00000002636 12757560563 023010 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: Escalator method script: SCP. # # Authors: # Matthew Mundell # # Copyright: # Copyright (C) 2016 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. PASSWORD=$1 USERNAME=$2 HOST=$3 DEST=$4 KNOWN_HOSTS=$5 REPORT_FILE=$6 KNOWN_HOSTS_FILE=`mktemp` || exit 1 echo $KNOWN_HOSTS > $KNOWN_HOSTS_FILE PASSWORD_FILE=`mktemp` || exit 1 echo $PASSWORD > $PASSWORD_FILE # Escape destination twice because it is also expanded on the remote end. sshpass -f ${PASSWORD_FILE} scp -o HashKnownHosts=no -o UserKnownHostsFile="${KNOWN_HOSTS_FILE} ~/.ssh/known_hosts ~/.ssh/known_hosts2" "${REPORT_FILE}" "${USERNAME}@${HOST}:'${DEST}'" #echo $? > /tmp/EXIT_CODE rm $KNOWN_HOSTS_FILE rm $PASSWORD_FILE openvas-manager-6.0.9/src/alert_methods/SNMP/alert000755 001751 001751 00000002015 12757560563 023132 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: Escalator method script: SCP. # # Authors: # Matthew Mundell # # Copyright: # Copyright (C) 2016 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. COMMUNITY=$1 AGENT=$2 # Host. MESSAGE=$3 snmptrap -v 2c -c $COMMUNITY $AGENT '' .1.3.6.1.6.3 0 s "$MESSAGE" #echo $? > /tmp/EXIT_CODE openvas-manager-6.0.9/src/alert_methods/verinice/alert000755 001751 001751 00000001674 12557600615 024162 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: Escalator method script: verinice connector. # # Authors: # Michael Wiegand # # Copyright: # Copyright (C) 2012 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. greenbone_verinice_connector $1 $2 $3 $4 openvas-manager-6.0.9/src/sql_sqlite3.c000644 001751 001751 00000042103 12631501054 021054 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Manager Manage library: the SQL library. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2014 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #include "sql.h" #include "tracef.h" #include #include #include /** * @brief Chunk size for SQLite memory allocation. */ #define DB_CHUNK_SIZE 1 * 1024 * 1024 /* Headers of sql.c symbols used only here. */ int sqlv (int, char*, va_list); /* Types. */ struct sql_stmt { sqlite3_stmt *stmt; }; /* Variables. */ /** * @brief Handle on the database. */ sqlite3* task_db = NULL; /* Helpers. */ /** * @brief Get whether backend is SQLite3. * * @return 1. */ int sql_is_sqlite3 () { return 1; } /** * @brief Get main schema name. * * @return Schema name. */ const char * sql_schema () { return "main"; } /** * @brief Setup a LIMIT argument. * * @param[in] max Max. * * @return Argument for LIMIT as a static string. */ const char * sql_select_limit (int max) { static char string[20]; if (max < 0) return "-1"; if (snprintf (string, 19, "%i", max) < 0) { g_warning ("%s: snprintf failed\n", __FUNCTION__); abort (); } string[19] = '\0'; return string; } /** * @brief Get regular expression operator. * * @return Regexp operator. */ const char * sql_regexp_op () { return "REGEXP"; } /** * @brief Check whether the database is open. * * @return 1 if open, else 0. */ int sql_is_open () { return task_db ? 1 : 0; } /** * @brief Return file name of current database. * * @return File name of database. */ const char * sql_database () { /* This is currently only used by Postgres. */ return "TODO"; } /** * @brief Return name of default database file. * * @return File name. */ const char * sql_default_database () { return OPENVAS_STATE_DIR "/mgr/tasks.db"; } /** * @brief Open the database. * * @param[in] database Database, or NULL for default. * * @return 0 success, -1 error. */ int sql_open (const char *database) { int chunk_size = DB_CHUNK_SIZE; // Workaround for SQLite temp file name conflicts that can occur if // concurrent forked processes have the same PRNG state. #if SQLITE_VERSION_NUMBER < 3008003 sqlite3_test_control (SQLITE_TESTCTRL_PRNG_RESET); #endif if (sqlite3_open (database ? database : sql_default_database (), &task_db)) { g_warning ("%s: sqlite3_open failed: %s\n", __FUNCTION__, sqlite3_errmsg (task_db)); return -1; } g_debug (" %s: db open, max retry sleep time is %i\n", __FUNCTION__, OPENVAS_SQLITE_SLEEP_MAX); sqlite3_file_control (task_db, NULL, SQLITE_FCNTL_CHUNK_SIZE, &chunk_size); return 0; } /** * @brief Close the database. */ void sql_close () { if (sqlite3_close (task_db) == SQLITE_BUSY) /* Richard Hipp on how to find the open statements: * * There is no published way to do this. If you run in a debugger, * you can look at the linked list of "struct Vdbe" objects that * sqlite3.pVdbe points to. This is the list of open statements * in the current implementation (and subject to change without * notice). */ g_warning ("%s: attempt to close db with open statement(s)\n", __FUNCTION__); task_db = NULL; } /** * @brief Close the database in a forked process. */ void sql_close_fork () { task_db = NULL; } /** * @brief Get the number of rows changed or inserted in last statement. */ int sql_changes () { return sqlite3_changes (task_db); } /** * @brief Get the ID of the last inserted row. */ resource_t sql_last_insert_id () { return sqlite3_last_insert_rowid (task_db); } /** * @brief Perform an SQL statement, retrying if database is busy or locked. * * @param[out] resource Last inserted resource. * @param[in] sql Format string for SQL statement. * @param[in] ... Arguments for format string. */ void sqli (resource_t *resource, char* sql, ...) { va_list args; va_start (args, sql); if (sqlv (1, sql, args) == -1) abort (); va_end (args); if (resource) *resource = sql_last_insert_id (); } /** * @brief Prepare a statement. * * @param[in] retry Whether to keep retrying while database is busy or locked. * @param[in] log Whether to keep retrying while database is busy or locked. * @param[in] sql Format string for SQL statement. * @param[in] args Arguments for format string. * @param[out] stmt Statement return. * * @return 0 success, 1 gave up, -1 error. */ int sql_prepare_internal (int retry, int log, const char* sql, va_list args, sql_stmt_t **stmt) { const char* tail; int ret; unsigned int retries; gchar* formatted; sqlite3_stmt *sqlite_stmt; assert (stmt); formatted = g_strdup_vprintf (sql, args); if (log) tracef (" sql: %s\n", formatted); retries = 0; *stmt = (sql_stmt_t*) g_malloc0 (sizeof (sql_stmt_t)); sqlite_stmt = NULL; while (1) { ret = sqlite3_prepare_v2 (task_db, (char*) formatted, -1, &sqlite_stmt, &tail); if (ret == SQLITE_BUSY || ret == SQLITE_LOCKED) { if (retry) { if ((retries > 10) && (OPENVAS_SQLITE_SLEEP_MAX > 0)) openvas_usleep (MIN ((retries - 10) * 10000, OPENVAS_SQLITE_SLEEP_MAX)); retries++; continue; } if (retries++ < 10) continue; g_free (formatted); return 1; } g_free (formatted); (*stmt)->stmt = sqlite_stmt; if (ret == SQLITE_OK) { if (sqlite_stmt == NULL) { g_warning ("%s: sqlite3_prepare failed with NULL stmt: %s\n", __FUNCTION__, sqlite3_errmsg (task_db)); return -1; } break; } g_warning ("%s: sqlite3_prepare failed: %s\n", __FUNCTION__, sqlite3_errmsg (task_db)); return -1; } return 0; } /** * @brief Execute a prepared statement. * * @param[in] retry Whether to keep retrying while database is busy or locked. * @param[in] stmt Statement. * * @return 0 complete, 1 row available in results, 2 condition where caller must rerun * prepare (for example schema changed internally after VACUUM), -1 error, * -2 gave up. */ int sql_exec_internal (int retry, sql_stmt_t *stmt) { unsigned int retries; retries = 0; while (1) { int ret; ret = sqlite3_step (stmt->stmt); if (ret == SQLITE_BUSY) { if (retry) { if ((retries > 10) && (OPENVAS_SQLITE_SLEEP_MAX > 0)) openvas_usleep (MIN ((retries - 10) * 10000, OPENVAS_SQLITE_SLEEP_MAX)); retries++; continue; } if (retries++ < 10) continue; return -2; } if (ret == SQLITE_DONE) return 0; if (ret == SQLITE_ROW) return 1; g_warning ("%s: sqlite3_step failed: %s\n", __FUNCTION__, sqlite3_errmsg (task_db)); return -1; } } /** * @brief Write debug messages with the query plan for an SQL query to the log. * * @param[in] sql Format string for the SQL query. * @param[in] args Format string arguments in a va_list. * * @return 0 success, -1 error. */ int sql_explain_internal (const char* sql, va_list args) { char *explain_sql; sql_stmt_t *explain_stmt; int explain_ret; explain_sql = g_strconcat ("EXPLAIN QUERY PLAN ", sql, NULL); if (sql_prepare_internal (1, 1, explain_sql, args, &explain_stmt)) { g_warning ("%s : Failed to prepare EXPLAIN statement", __FUNCTION__); g_free (explain_sql); return -1; } while (1) { explain_ret = sql_exec_internal (1, explain_stmt); if (explain_ret == 1) g_debug ("%s : %s|%s|%s|%s", __FUNCTION__, sqlite3_column_text (explain_stmt->stmt, 0), sqlite3_column_text (explain_stmt->stmt, 1), sqlite3_column_text (explain_stmt->stmt, 2), sqlite3_column_text (explain_stmt->stmt, 3)); else if (explain_ret == 0) break; else { g_warning ("%s : Failed to get EXPLAIN row", __FUNCTION__); sql_finalize (explain_stmt); g_free (explain_sql); return -1; } } sql_finalize (explain_stmt); g_free (explain_sql); return 0; } /* Transactions. */ /** * @brief Begin an exclusive transaction. */ void sql_begin_exclusive () { sql ("BEGIN EXCLUSIVE;"); } /** * @brief Begin an exclusive transaction, giving up on failure. * * @return 0 got lock, 1 gave up, -1 error. */ int sql_begin_exclusive_giveup () { return sql_giveup ("BEGIN EXCLUSIVE;"); } /** * @brief Begin an exclusive transaction. */ void sql_begin_immediate () { sql ("BEGIN IMMEDIATE;"); } /** * @brief Begin an exclusive transaction. * * @return 0 got lock, 1 gave up, -1 error. */ int sql_begin_immediate_giveup () { return sql_giveup ("BEGIN IMMEDIATE;"); } /* Iterators. */ /** * @brief Get whether a column is NULL. * * @param[in] iterator Iterator. * @param[in] col Column offset. * * @return 1 if NULL, else 0. */ int iterator_null (iterator_t* iterator, int col) { if (iterator->done) abort (); return sqlite3_column_type (iterator->stmt->stmt, col) == SQLITE_NULL; } /** * @brief Get a column name from an iterator. * * @param[in] iterator Iterator. * @param[in] col Column offset. * * @return Name of given column. */ const char* iterator_column_name (iterator_t* iterator, int col) { if (iterator->done) abort (); return (const char*) sqlite3_column_name (iterator->stmt->stmt, col); } /** * @brief Get number of columns from an iterator. * * @param[in] iterator Iterator. * * @return Number of columns. */ int iterator_column_count (iterator_t* iterator) { if (iterator->done) abort (); return sqlite3_column_count (iterator->stmt->stmt); } /* Prepared statements. */ /** * @brief Bind a blob to a statement. * * @param[in] stmt Statement. * @param[in] position Position in statement. * @param[in] value Blob. * @param[in] value_size Blob size. * * @return 0 success, -1 error. */ int sql_bind_blob (sql_stmt_t *stmt, int position, const void *value, int value_size) { unsigned int retries; retries = 0; while (1) { int ret; ret = sqlite3_bind_blob (stmt->stmt, position, value, value_size, SQLITE_TRANSIENT); if (ret == SQLITE_BUSY) { if ((retries > 10) && (OPENVAS_SQLITE_SLEEP_MAX > 0)) openvas_usleep (MIN ((retries - 10) * 10000, OPENVAS_SQLITE_SLEEP_MAX)); retries++; continue; } if (ret == SQLITE_OK) break; g_warning ("%s: sqlite3_bind_blob failed: %s\n", __FUNCTION__, sqlite3_errmsg (task_db)); return -1; } return 0; } /** * @brief Bind an int64 value to a statement. * * @param[in] stmt Statement. * @param[in] position Position in statement. * @param[in] value Value. * * @return 0 success, -1 error. */ int sql_bind_int64 (sql_stmt_t *stmt, int position, long long int *value) { unsigned int retries; retries = 0; while (1) { int ret; ret = sqlite3_bind_int64 (stmt->stmt, position, *value); if (ret == SQLITE_BUSY) { if ((retries > 10) && (OPENVAS_SQLITE_SLEEP_MAX > 0)) openvas_usleep (MIN ((retries - 10) * 10000, OPENVAS_SQLITE_SLEEP_MAX)); retries++; continue; } if (ret == SQLITE_OK) break; g_warning ("%s: sqlite3_bind_int64 failed: %s\n", __FUNCTION__, sqlite3_errmsg (task_db)); return -1; } return 0; } /** * @brief Bind a double value to a statement. * * @param[in] stmt Statement. * @param[in] position Position in statement. * @param[in] value Value. * * @return 0 success, -1 error. */ int sql_bind_double (sql_stmt_t *stmt, int position, double *value) { unsigned int retries; retries = 0; while (1) { int ret; ret = sqlite3_bind_double (stmt->stmt, position, *value); if (ret == SQLITE_BUSY) { if ((retries > 10) && (OPENVAS_SQLITE_SLEEP_MAX > 0)) openvas_usleep (MIN ((retries - 10) * 10000, OPENVAS_SQLITE_SLEEP_MAX)); retries++; continue; } if (ret == SQLITE_OK) break; g_warning ("%s: sqlite3_bind_double failed: %s\n", __FUNCTION__, sqlite3_errmsg (task_db)); return -1; } return 0; } /** * @brief Bind a text value to a statement. * * @param[in] stmt Statement. * @param[in] position Position in statement. * @param[in] value Value. * @param[in] value_size Value size, or -1 to use strlen of value. * * @return 0 success, -1 error. */ int sql_bind_text (sql_stmt_t *stmt, int position, const gchar *value, gsize value_size) { unsigned int retries; retries = 0; while (1) { int ret; ret = sqlite3_bind_text (stmt->stmt, position, value, value_size, SQLITE_TRANSIENT); if (ret == SQLITE_BUSY) { if ((retries > 10) && (OPENVAS_SQLITE_SLEEP_MAX > 0)) openvas_usleep (MIN ((retries - 10) * 10000, OPENVAS_SQLITE_SLEEP_MAX)); retries++; continue; } if (ret == SQLITE_OK) break; g_warning ("%s: sqlite3_bind_text failed: %s\n", __FUNCTION__, sqlite3_errmsg (task_db)); return -1; } return 0; } /** * @brief Free a prepared statement. * * @param[in] stmt Statement. */ void sql_finalize (sql_stmt_t *stmt) { if (stmt->stmt) sqlite3_finalize (stmt->stmt); g_free (stmt); } /** * @brief Reset a prepared statement. * * @param[in] stmt Statement. * * @return 0 success, -1 error. */ int sql_reset (sql_stmt_t *stmt) { unsigned int retries; sqlite3_clear_bindings (stmt->stmt); retries = 0; while (1) { int ret; ret = sqlite3_reset (stmt->stmt); if (ret == SQLITE_BUSY) { if ((retries > 10) && (OPENVAS_SQLITE_SLEEP_MAX > 0)) openvas_usleep (MIN ((retries - 10) * 10000, OPENVAS_SQLITE_SLEEP_MAX)); retries++; continue; } if (ret == SQLITE_DONE || ret == SQLITE_OK) break; if (ret == SQLITE_ERROR || ret == SQLITE_MISUSE) { g_warning ("%s: sqlite3_reset failed: %s\n", __FUNCTION__, sqlite3_errmsg (task_db)); return -1; } } return 0; } /** * @brief Return a column as a double from a prepared statement. * * @param[in] stmt Statement. * @param[in] position Column position. * * @return 0 success, -1 error. */ double sql_column_double (sql_stmt_t *stmt, int position) { return sqlite3_column_double (stmt->stmt, position); } /** * @brief Return a column as text from a prepared statement. * * @param[in] stmt Statement. * @param[in] position Column position. * * @return 0 success, -1 error. */ const char * sql_column_text (sql_stmt_t *stmt, int position) { return (const char*) sqlite3_column_text (stmt->stmt, position); } /** * @brief Return a column as an integer from a prepared statement. * * @param[in] stmt Statement. * @param[in] position Column position. * * @return 0 success, -1 error. */ int sql_column_int (sql_stmt_t *stmt, int position) { return sqlite3_column_int (stmt->stmt, position); } /** * @brief Return a column as an int64 from a prepared statement. * * @param[in] stmt Statement. * @param[in] position Column position. * * @return 0 success, -1 error. */ long long int sql_column_int64 (sql_stmt_t *stmt, int position) { return sqlite3_column_int64 (stmt->stmt, position); } openvas-manager-6.0.9/src/manage_utils.h000644 001751 001751 00000003670 12557600615 021306 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Module for OpenVAS Manager: Manage library utilities. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2014 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #ifndef OPENVAS_MANAGER_MANAGE_UTILS_H #define OPENVAS_MANAGER_MANAGE_UTILS_H #include // Log message severity constant #define SEVERITY_LOG 0.0 // False positive severity constant #define SEVERITY_FP -1.0 // Debug message severity constant #define SEVERITY_DEBUG -2.0 // Error message severity constant #define SEVERITY_ERROR -3.0 // Constant for missing or invalid severity #define SEVERITY_MISSING -99.0 // Constant for undefined severity (for ranges) #define SEVERITY_UNDEFINED -98.0 // Maximum possible severity #define SEVERITY_MAX 10.0 // Number of subdivisions for 1 severity point (10 => step size 0.1) #define SEVERITY_SUBDIVISIONS 10 time_t add_months (time_t, int); time_t months_between (time_t, time_t); time_t next_time (time_t, int, int); int manage_count_hosts_FIX (const char *, const char *); double level_min_severity (const char*, const char*); double level_max_severity (const char*, const char*); int valid_db_resource_type (const char*); #endif /* not OPENVAS_MANAGER_MANAGE_UTILS_H */ openvas-manager-6.0.9/src/manage.c000644 001751 001751 00000673575 12757560563 020113 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Module for OpenVAS Manager: the Manage library. * * Authors: * Matthew Mundell * Timo Pollmeier * * Copyright: * Copyright (C) 2009-2013 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ /** * @file manage.c * @brief The OpenVAS Manager management library. * * This file defines a management library, for implementing OpenVAS * Managers such as the OpenVAS Manager daemon. * * This library provides facilities for storing and manipulating credential * and task information, and manipulating reports. Task manipulation * includes sending task commands to the OTP server (the "scanner") that is * running the tasks. */ /* time.h in glibc2 needs this for strptime. */ #define _XOPEN_SOURCE /* pthread_sigmask () needs this with glibc < 2.19 */ #define _GNU_SOURCE #include "manage.h" #include "scanner.h" #include "sql.h" #include "manage_sql.h" #include "ovas-mngr-comm.h" #include "tracef.h" #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #ifdef S_SPLINT_S #include "splint.h" #endif #undef G_LOG_DOMAIN /** * @brief GLib log domain. */ #define G_LOG_DOMAIN "md manage" /** * @brief CPE selection stylesheet location. */ #define CPE_GETBYNAME_XSL SCAP_RES_DIR "/cpe_getbyname.xsl" /** * @brief CVE selection stylesheet location. */ #define CVE_GETBYNAME_XSL SCAP_RES_DIR "/cve_getbyname.xsl" /** * @brief OVALDEF selection stylesheet location. */ #define OVALDEF_GETBYNAME_XSL SCAP_RES_DIR "/ovaldef_getbyname.xsl" /** * @brief CERT_BUND_ADV selection stylesheet location. */ #define CERT_BUND_ADV_GETBYNAME_XSL CERT_RES_DIR "/cert_bund_getbyname.xsl" /** * @brief DFN_CERT_ADV selection stylesheet location. */ #define DFN_CERT_ADV_GETBYNAME_XSL CERT_RES_DIR "/dfn_cert_getbyname.xsl" /** * @brief CPE dictionary location. */ #define CPE_DICT_FILENAME SCAP_DATA_DIR "/official-cpe-dictionary_v2.2.xml" /** * @brief CVE data files location format string. * * %d should be the year expressed as YYYY. */ #define CVE_FILENAME_FMT SCAP_DATA_DIR "/nvdcve-2.0-%d.xml" /** * @brief CERT-Bund data files location format string. * * %d should be the year without the century (expressed as YY), */ #define CERT_BUND_ADV_FILENAME_FMT CERT_DATA_DIR "/CB-K%02d.xml" /** * @brief DFN-CERT data files location format string. * * First %d should be the year expressed as YYYY, * second %d should be should be Month expressed as MM. */ #define DFN_CERT_ADV_FILENAME_FMT CERT_DATA_DIR "/dfn-cert-%04d.xml" /** * @brief SCAP timestamp location. */ #define SCAP_TIMESTAMP_FILENAME SCAP_DATA_DIR "/timestamp" /** * @brief CERT timestamp location. */ #define CERT_TIMESTAMP_FILENAME CERT_DATA_DIR "/timestamp" /** * @brief Default for Scanner max_checks preference. */ #define MAX_CHECKS_DEFAULT "4" /** * @brief Default for Scanner max_hosts preference. */ #define MAX_HOSTS_DEFAULT "20" /* Severity related functions. */ /** * @brief Get the message type of a threat. * * @param threat Threat. * * @return Static message type name if threat names a threat, else NULL. */ const char * threat_message_type (const char *threat) { if (strcasecmp (threat, "High") == 0) return "Alarm"; if (strcasecmp (threat, "Medium") == 0) return "Alarm"; if (strcasecmp (threat, "Low") == 0) return "Alarm"; if (strcasecmp (threat, "Log") == 0) return "Log Message"; if (strcasecmp (threat, "Debug") == 0) return "Debug Message"; if (strcasecmp (threat, "Error") == 0) return "Error Message"; if (strcasecmp (threat, "False Positive") == 0) return "False Positive"; return NULL; } /** * @brief Get the threat of a message type. * * @param type Message type. * * @return Static threat name if type names a message type, else NULL. */ const char * message_type_threat (const char *type) { if (strcasecmp (type, "Alarm") == 0) return "Alarm"; if (strcasecmp (type, "Security Hole") == 0) return "High"; if (strcasecmp (type, "Security Warning") == 0) return "Medium"; if (strcasecmp (type, "Security Note") == 0) return "Low"; if (strcasecmp (type, "Log Message") == 0) return "Log"; if (strcasecmp (type, "Debug Message") == 0) return "Debug"; if (strcasecmp (type, "Error Message") == 0) return "Error"; if (strcasecmp (type, "False Positive") == 0) return "False Positive"; return NULL; } /** * @brief Check whether a severity falls within a threat level. * * @param[in] severity Severity. * @param[in] level Threat level. * * @return 1 if in level, else 0. */ int severity_in_level (double severity, const char *level) { const char *class; class = setting_severity (); if (strcmp (class, "classic") == 0) { if (strcmp (level, "high") == 0) return severity > 5 && severity <= 10; else if (strcmp (level, "medium") == 0) return severity > 2 && severity <= 5; else if (strcmp (level, "low") == 0) return severity > 0 && severity <= 2; else if (strcmp (level, "none") == 0 || strcmp (level, "log") == 0) return severity == 0; else return 0; } else if (strcmp (class, "pci-dss") == 0) { if (strcmp (level, "high") == 0) return severity >= 4.0; else if (strcmp (level, "none") == 0 || strcmp (level, "log") == 0) return severity >= 0.0 && severity < 4.0; else return 0; } else { /* NIST/BSI. */ if (strcmp (level, "high") == 0) return severity >= 7 && severity <= 10; else if (strcmp (level, "medium") == 0) return severity >= 4 && severity < 7; else if (strcmp (level, "low") == 0) return severity > 0 && severity < 4; else if (strcmp (level, "none") == 0 || strcmp (level, "log") == 0) return severity == 0; else return 0; } } /** * @brief Check whether a severity matches an override's severity. * * @param[in] severity severity score * @param[in] ov_severity override severity score to match * * @return 1 if matches, else 0. */ int severity_matches_ov (double severity, double ov_severity) { if (ov_severity <= 0.0) return severity == ov_severity; else return severity >= ov_severity; } /** * @brief Get the threat level matching a severity score. * * @param[in] severity severity score * @param[in] mode 0 for normal levels, 1 to use "Alarm" for severity > 0.0 * * @return the level as a static string */ const char* severity_to_level (double severity, int mode) { if (severity == SEVERITY_LOG) return "Log"; else if (severity == SEVERITY_FP) return "False Positive"; else if (severity == SEVERITY_DEBUG) return "Debug"; else if (severity == SEVERITY_ERROR) return "Error"; else if (severity > 0.0 && severity <= 10.0) { if (mode == 1) return ("Alarm"); else if (severity_in_level (severity, "high")) return ("High"); else if (severity_in_level (severity, "medium")) return ("Medium"); else if (severity_in_level (severity, "low")) return ("Low"); else return ("Log"); } else { g_warning ("%s: Invalid severity score given: %f", __FUNCTION__, severity); return (NULL); } } /** * @brief Get the message type matching a severity score. * * @param[in] severity severity score * * @return the message type as a static string */ const char* severity_to_type (double severity) { if (severity == SEVERITY_LOG) return "Log Message"; else if (severity == SEVERITY_FP) return "False Positive"; else if (severity == SEVERITY_DEBUG) return "Debug Message"; else if (severity == SEVERITY_ERROR) return "Error Message"; else if (severity > 0.0 && severity <= 10.0) return "Alarm"; else { g_warning ("%s: Invalid severity score given: %f", __FUNCTION__, severity); return (NULL); } } /* Credentials. */ /** * @brief Current credentials during any OMP command. */ credentials_t current_credentials; /* Reports. */ /** * @brief Delete all the reports for a task. * * It's up to the caller to ensure that this runs in a contention safe * context (for example within an SQL transaction). * * @param[in] task A task descriptor. * * @return 0 on success, -1 on error. */ int delete_reports (task_t task) { report_t report; iterator_t iterator; init_report_iterator_task (&iterator, task); while (next_report (&iterator, &report)) if (delete_report_internal (report)) { cleanup_iterator (&iterator); return -1; } cleanup_iterator (&iterator); return 0; } /* Array index of severity 0.0 in the severity_data_t.counts array */ #define ZERO_SEVERITY_INDEX 4 /** * @brief Convert a severity value into an index in the counts array. * * @param[in] severity Severity value. * * @return The index, 0 for invalid severity scores. */ int severity_data_index (double severity) { int ret; if (severity >= 0.0) ret = (int)(round (severity * SEVERITY_SUBDIVISIONS)) + ZERO_SEVERITY_INDEX; else if (severity == SEVERITY_FP || severity == SEVERITY_DEBUG || severity == SEVERITY_ERROR) ret = (int)(round (severity)) + ZERO_SEVERITY_INDEX; else ret = 0; return ret; } /** * @brief Convert an index in the counts array to a severity value. * * @param[in] index Index in the counts array. * * @return The corresponding severity value. */ double severity_data_value (int index) { double ret; if (index <= ZERO_SEVERITY_INDEX && index > 0) ret = ((double) index) - ZERO_SEVERITY_INDEX; else if (index <= (ZERO_SEVERITY_INDEX + (SEVERITY_SUBDIVISIONS * SEVERITY_MAX))) ret = (((double) (index - ZERO_SEVERITY_INDEX)) / SEVERITY_SUBDIVISIONS); else ret = SEVERITY_MISSING; return ret; } /** * @brief Initialize a severity data structure. * * @param[in] data The data structure to initialize. */ void init_severity_data (severity_data_t* data) { int max_i; max_i = ZERO_SEVERITY_INDEX + (SEVERITY_SUBDIVISIONS * SEVERITY_MAX); data->counts = g_malloc0 (sizeof (int) * (max_i + 1)); data->total = 0; data->max = SEVERITY_MISSING; } /** * @brief Clean up a severity data structure. * * @param[in] data The data structure to initialize. */ void cleanup_severity_data (severity_data_t* data) { g_free (data->counts); } /** * @brief Add a severity occurence to the counts of a severity_data_t. * * @param[in] severity_data The severity count struct to add to. * @param[in] severity The severity to add. */ void severity_data_add (severity_data_t* severity_data, double severity) { (severity_data->counts)[severity_data_index (severity)]++; if (severity_data->total == 0 || severity_data->max <= severity) severity_data->max = severity; (severity_data->total)++; } /** * @brief Add a multiple severity occurences to the counts of a severity_data_t. * * @param[in] severity_data The severity count struct to add to. * @param[in] severity The severity to add. * @param[in] count The number of occurences to add. */ void severity_data_add_count (severity_data_t* severity_data, double severity, int count) { (severity_data->counts)[severity_data_index (severity)] += count; if (severity_data->total == 0 || severity_data->max <= severity) severity_data->max = severity; (severity_data->total) += count; } /** * @brief Calculate the total of severity counts in a range. * * @param[in] severity_data The severity data struct to get counts from. * @param[in] min_severity The minimum severity included in the range. * @param[in] max_severity The maximum severity included in the range. * * @return The total of severity counts in the specified range. */ int severity_data_range_count (const severity_data_t* severity_data, double min_severity, double max_severity) { int i, i_max, count; i_max = severity_data_index (max_severity); count = 0; for (i = severity_data_index (min_severity); i <= i_max; i++) { count += (severity_data->counts)[i]; } return count; } /** * @brief Count the occurrences of severities in the levels. * * @param[in] severity_data The severity counts data to evaluate. * @param[in] severity_class The severity class setting to use. * @param[out] errors The number of error messages. * @param[out] debugs The number of debug messages. * @param[out] false_positives The number of False Positives. * @param[out] logs The number of Log messages. * @param[out] lows The number of Low severity results. * @param[out] mediums The number of Medium severity results. * @param[out] highs The number of High severity results. */ void severity_data_level_counts (const severity_data_t *severity_data, const gchar *severity_class, int *errors, int *debugs, int *false_positives, int *logs, int *lows, int *mediums, int *highs) { if (errors) *errors = severity_data_range_count (severity_data, level_min_severity ("Error", severity_class), level_max_severity ("Error", severity_class)); if (debugs) *debugs = severity_data_range_count (severity_data, level_min_severity ("Debug", severity_class), level_max_severity ("Debug", severity_class)); if (false_positives) *false_positives = severity_data_range_count (severity_data, level_min_severity ("False Positive", severity_class), level_max_severity ("False Positive", severity_class)); if (logs) *logs = severity_data_range_count (severity_data, level_min_severity ("Log", severity_class), level_max_severity ("Log", severity_class)); if (lows) *lows = severity_data_range_count (severity_data, level_min_severity ("low", severity_class), level_max_severity ("low", severity_class)); if (mediums) *mediums = severity_data_range_count (severity_data, level_min_severity ("medium", severity_class), level_max_severity ("medium", severity_class)); if (highs) *highs = severity_data_range_count (severity_data, level_min_severity ("high", severity_class), level_max_severity ("high", severity_class)); } /* Task globals. */ /** * @brief The task currently running on the scanner. */ /*@null@*/ task_t current_scanner_task = (task_t) 0; /** * @brief The report of the current task. */ report_t current_report = (report_t) 0; /* Alerts. */ /** * @brief Get the name of an alert condition. * * @param[in] condition Condition. * * @return The name of the condition (for example, "Always"). */ const char* alert_condition_name (alert_condition_t condition) { switch (condition) { case ALERT_CONDITION_ALWAYS: return "Always"; case ALERT_CONDITION_FILTER_COUNT_AT_LEAST: return "Filter count at least"; case ALERT_CONDITION_FILTER_COUNT_CHANGED: return "Filter count changed"; case ALERT_CONDITION_SEVERITY_AT_LEAST: return "Severity at least"; case ALERT_CONDITION_SEVERITY_CHANGED: return "Severity changed"; default: return "Internal Error"; } } /** * @brief Get the name of an alert event. * * @param[in] event Event. * * @return The name of the event (for example, "Run status changed"). */ const char* event_name (event_t event) { switch (event) { case EVENT_TASK_RUN_STATUS_CHANGED: return "Task run status changed"; default: return "Internal Error"; } } /** * @brief Get a description of an alert condition. * * @param[in] condition Condition. * @param[in] alert Alert. * * @return Freshly allocated description of condition. */ gchar* alert_condition_description (alert_condition_t condition, alert_t alert) { switch (condition) { case ALERT_CONDITION_ALWAYS: return g_strdup ("Always"); case ALERT_CONDITION_FILTER_COUNT_AT_LEAST: { char *level; gchar *ret; level = alert_data (alert, "condition", "severity"); ret = g_strdup_printf ("Filter count at least %s", level ? level : "0"); free (level); return ret; } case ALERT_CONDITION_FILTER_COUNT_CHANGED: return g_strdup ("Filter count changed"); case ALERT_CONDITION_SEVERITY_AT_LEAST: { char *level = alert_data (alert, "condition", "severity"); gchar *ret = g_strdup_printf ("Task severity is at least '%s'", level); free (level); return ret; } case ALERT_CONDITION_SEVERITY_CHANGED: { char *direction; direction = alert_data (alert, "condition", "direction"); gchar *ret = g_strdup_printf ("Task severity %s", direction); free (direction); return ret; } default: return g_strdup ("Internal Error"); } } /** * @brief Get a description of an alert event. * * @param[in] event Event. * @param[in] event_data Event data. * @param[in] task_name Name of task if required in description, else NULL. * * @return Freshly allocated description of event. */ gchar* event_description (event_t event, const void *event_data, const char *task_name) { switch (event) { case EVENT_TASK_RUN_STATUS_CHANGED: if (task_name) return g_strdup_printf ("The security scan task '%s' changed status to '%s'", task_name, run_status_name ((task_status_t) event_data)); return g_strdup_printf ("Task status changed to '%s'", run_status_name ((task_status_t) event_data)); break; default: return g_strdup ("Internal Error"); } } /** * @brief Get the name of an alert method. * * @param[in] method Method. * * @return The name of the method (for example, "Email" or "SNMP"). */ const char* alert_method_name (alert_method_t method) { switch (method) { case ALERT_METHOD_EMAIL: return "Email"; case ALERT_METHOD_HTTP_GET: return "HTTP Get"; case ALERT_METHOD_SCP: return "SCP"; case ALERT_METHOD_SEND: return "Send"; case ALERT_METHOD_SNMP: return "SNMP"; case ALERT_METHOD_SOURCEFIRE: return "Sourcefire Connector"; case ALERT_METHOD_SYSLOG: return "Syslog"; case ALERT_METHOD_VERINICE: return "verinice Connector"; default: return "Internal Error"; } } /** * @brief Get an alert condition from a name. * * @param[in] name Condition name. * * @return The condition. */ alert_condition_t alert_condition_from_name (const char* name) { if (strcasecmp (name, "Always") == 0) return ALERT_CONDITION_ALWAYS; if (strcasecmp (name, "Filter count at least") == 0) return ALERT_CONDITION_FILTER_COUNT_AT_LEAST; if (strcasecmp (name, "Filter count changed") == 0) return ALERT_CONDITION_FILTER_COUNT_CHANGED; if (strcasecmp (name, "Severity at least") == 0) return ALERT_CONDITION_SEVERITY_AT_LEAST; if (strcasecmp (name, "Severity changed") == 0) return ALERT_CONDITION_SEVERITY_CHANGED; return ALERT_CONDITION_ERROR; } /** * @brief Get an event from a name. * * @param[in] name Event name. * * @return The event. */ event_t event_from_name (const char* name) { if (strcasecmp (name, "Task run status changed") == 0) return EVENT_TASK_RUN_STATUS_CHANGED; return EVENT_ERROR; } /** * @brief Get an alert method from a name. * * @param[in] name Method name. * * @return The method. */ alert_method_t alert_method_from_name (const char* name) { if (strcasecmp (name, "Email") == 0) return ALERT_METHOD_EMAIL; if (strcasecmp (name, "HTTP Get") == 0) return ALERT_METHOD_HTTP_GET; if (strcasecmp (name, "SCP") == 0) return ALERT_METHOD_SCP; if (strcasecmp (name, "Send") == 0) return ALERT_METHOD_SEND; if (strcasecmp (name, "SNMP") == 0) return ALERT_METHOD_SNMP; if (strcasecmp (name, "Sourcefire Connector") == 0) return ALERT_METHOD_SOURCEFIRE; if (strcasecmp (name, "Syslog") == 0) return ALERT_METHOD_SYSLOG; if (strcasecmp (name, "verinice Connector") == 0) return ALERT_METHOD_VERINICE; return ALERT_METHOD_ERROR; } /* General task facilities. */ /** * @brief Get the name of a run status. * * @param[in] status Run status. * * @return The name of the status (for example, "Done" or "Running"). */ const char* run_status_name (task_status_t status) { switch (status) { case TASK_STATUS_DELETE_REQUESTED: case TASK_STATUS_DELETE_WAITING: return "Delete Requested"; case TASK_STATUS_DELETE_ULTIMATE_REQUESTED: case TASK_STATUS_DELETE_ULTIMATE_WAITING: return "Ultimate Delete Requested"; case TASK_STATUS_DONE: return "Done"; case TASK_STATUS_NEW: return "New"; case TASK_STATUS_REQUESTED: return "Requested"; case TASK_STATUS_RUNNING: return "Running"; case TASK_STATUS_STOP_REQUESTED_GIVEUP: case TASK_STATUS_STOP_REQUESTED: case TASK_STATUS_STOP_WAITING: return "Stop Requested"; case TASK_STATUS_STOPPED: return "Stopped"; default: return "Internal Error"; } } /** * @brief Get the unique name of a run status. * * @param[in] status Run status. * * @return The name of the status (for example, "Done" or "Running"). */ const char* run_status_name_internal (task_status_t status) { switch (status) { case TASK_STATUS_DELETE_REQUESTED: return "Delete Requested"; case TASK_STATUS_DELETE_ULTIMATE_REQUESTED: return "Ultimate Delete Requested"; case TASK_STATUS_DELETE_ULTIMATE_WAITING: return "Ultimate Delete Waiting"; case TASK_STATUS_DELETE_WAITING: return "Delete Waiting"; case TASK_STATUS_DONE: return "Done"; case TASK_STATUS_NEW: return "New"; case TASK_STATUS_REQUESTED: return "Requested"; case TASK_STATUS_RUNNING: return "Running"; case TASK_STATUS_STOP_REQUESTED_GIVEUP: case TASK_STATUS_STOP_REQUESTED: return "Stop Requested"; case TASK_STATUS_STOP_WAITING: return "Stop Waiting"; case TASK_STATUS_STOPPED: return "Stopped"; default: return "Internal Error"; } } /** * @brief Get files to send. * * @param task Task of interest. * * @return List of files to send, (NULL if none), data has to be freed with * g_free. */ static GSList* get_files_to_send (task_t task) { iterator_t files; GSList* filelist = NULL; init_task_file_iterator (&files, task, NULL); while (next (&files)) { const gchar* file_path = task_file_iterator_name (&files); filelist = g_slist_append (filelist, g_strdup (file_path)); } cleanup_iterator (&files); return filelist; } /** * @brief Return the plugins of a config, as a semicolon separated string. * * @param[in] config Config. * * @return A string of semi-colon separated plugin IDS. */ static gchar* nvt_selector_plugins (config_t config) { GString* plugins = g_string_new (""); iterator_t families, nvts; gboolean first = TRUE; init_family_iterator (&families, 0, NULL, 1); while (next (&families)) { const char *family = family_iterator_name (&families); if (family) { init_nvt_iterator (&nvts, 0, config, family, NULL, 1, NULL); while (next (&nvts)) { if (first) first = FALSE; else g_string_append_c (plugins, ';'); g_string_append (plugins, nvt_iterator_oid (&nvts)); } cleanup_iterator (&nvts); } } cleanup_iterator (&families); /* Always add all settings NVTs onto list. */ init_nvt_iterator (&nvts, 0, 0, 0, "2", 1, NULL); while (next (&nvts)) { if (first) first = FALSE; else g_string_append_c (plugins, ';'); g_string_append (plugins, nvt_iterator_oid (&nvts)); } cleanup_iterator (&nvts); return g_string_free (plugins, FALSE); } /** * @brief Return the real value of a preference. * * Take care of radio button options. * * @param[in] name Name of preference. * @param[in] full_value Entire value of preference. * * @return Real value of the preference. */ static gchar* preference_value (const char* name, const char* full_value) { char *bracket = strchr (name, '['); if (bracket) { if (strncmp (bracket, "[radio]:", strlen ("[radio]:")) == 0) { char *semicolon = strchr (full_value, ';'); if (semicolon) return g_strndup (full_value, semicolon - full_value); } } return g_strdup (full_value); } /** * @brief Send the preferences from a config to the scanner. * * @param[in] config Config. * @param[in] section_name Name of preference section to send. * @param[in] task_files Files associated with the task. * @param[out] pref_files Files associated with config (UUID, contents, ...). * * @return 0 on success, -1 on failure. */ static int send_config_preferences (config_t config, const char* section_name, GSList *task_files, GPtrArray *pref_files) { iterator_t prefs; init_otp_pref_iterator (&prefs, config, section_name); while (next (&prefs)) { const char *pref_name = otp_pref_iterator_name (&prefs); char *value; if (strcmp (pref_name, "port_range") == 0) continue; if (send_to_server (pref_name)) { cleanup_iterator (&prefs); return -1; } if (sendn_to_server (" <|> ", 5)) { cleanup_iterator (&prefs); return -1; } value = preference_value (pref_name, otp_pref_iterator_value (&prefs)); if (pref_files) { int type_start = -1, type_end = -1, count; /* LDAPsearch[entry]:Timeout value */ count = sscanf (pref_name, "%*[^[][%n%*[^]]%n]:", &type_start, &type_end); if (count == 0 && type_start > 0 && type_end > 0 && (strncmp (pref_name + type_start, "file", type_end - type_start) == 0)) { GSList *head; char *uuid; /* A "file" preference. * * If the value of the preference is empty, then send an empty * value. * * If the value of the preference is the name of a task file, * then just send the preference value, otherwise send a UUID and * add the value to the list of preference files (pref_files). */ if (strcmp (value, "") == 0) { g_free (value); if (sendn_to_server ("\n", 1)) { cleanup_iterator (&prefs); return -1; } continue; } head = task_files; while (head) { if (strcmp (head->data, value) == 0) break; head = g_slist_next (head); } if (head == NULL) { uuid = openvas_uuid_make (); if (uuid == NULL) { g_free (value); cleanup_iterator (&prefs); return -1; } g_ptr_array_add (pref_files, (gpointer) uuid); g_ptr_array_add (pref_files, (gpointer) value); if (send_to_server (uuid)) { free (uuid); g_free (value); cleanup_iterator (&prefs); return -1; } if (sendn_to_server ("\n", 1)) { free (uuid); g_free (value); cleanup_iterator (&prefs); return -1; } continue; } } } if (send_to_server (value)) { g_free (value); cleanup_iterator (&prefs); return -1; } g_free (value); if (sendn_to_server ("\n", 1)) { cleanup_iterator (&prefs); return -1; } } cleanup_iterator (&prefs); return 0; } /** * @brief Send task preferences to the scanner. * * @param[in] task Task. * * @return 0 on success, -1 on failure. */ static int send_task_preferences (task_t task) { gchar *value; value = task_preference_value (task, "max_checks"); if (sendf_to_server ("max_checks <|> %s\n", value ? value : MAX_CHECKS_DEFAULT)) { g_free (value); return -1; } g_free (value); value = task_preference_value (task, "max_hosts"); if (sendf_to_server ("max_hosts <|> %s\n", value ? value : MAX_HOSTS_DEFAULT)) { g_free (value); return -1; } g_free (value); value = task_preference_value (task, "source_iface"); if (value && sendf_to_server ("source_iface <|> %s\n", value)) { g_free (value); return -1; } g_free (value); return 0; } /** * @brief Send ifaces_allow and ifaces_deny preferences to scanner. * * @return 0 on success, -1 on failure. */ static int send_ifaces_access_preferences (void) { char *ifaces; int ifaces_allow; ifaces = sql_string ("SELECT ifaces FROM users WHERE uuid = '%s';", current_credentials.uuid); ifaces_allow = sql_int ("SELECT ifaces_allow FROM users WHERE uuid = '%s';", current_credentials.uuid); if (ifaces && strlen (ifaces)) { char *pref; if (ifaces_allow == 1) pref = "ifaces_allow"; else if (ifaces_allow == 0) pref = "ifaces_deny"; else { g_free (ifaces); return 0; } if (sendf_to_server ("%s <|> %s\n", pref, ifaces)) { g_free (ifaces); return -1; } } g_free (ifaces); return 0; } /** * @brief Send ifaces_allow and ifaces_deny preferences to scanner. * * @return 0 on success, -1 on failure. */ static int send_hosts_access_preferences (void) { char *hosts; int hosts_allow; hosts = sql_string ("SELECT hosts FROM users WHERE uuid = '%s';", current_credentials.uuid); hosts_allow = sql_int ("SELECT hosts_allow FROM users WHERE uuid = '%s';", current_credentials.uuid); if (hosts && strlen (hosts)) { char *pref; if (hosts_allow == 1) pref = "hosts_allow"; else if (hosts_allow == 0) pref = "hosts_deny"; else { g_free (hosts); return 0; } if (sendf_to_server ("%s <|> %s\n", pref, hosts)) { g_free (hosts); return -1; } } g_free (hosts); return 0; } /** * @brief Gives a comma-separated list of a report's finished hosts. * * @return String of finished hosts if found, NULL otherwise. */ static char * finished_hosts_str (report_t stopped_report) { iterator_t hosts; char *str = NULL; if (stopped_report == 0) return NULL; init_host_iterator (&hosts, stopped_report, NULL, 0); while (next (&hosts)) { const char *end_time = host_iterator_end_time (&hosts); if (end_time && strlen (end_time)) { char *new_str = str ? g_strdup_printf ("%s, %s", str, host_iterator_host (&hosts)) : g_strdup_printf ("%s", host_iterator_host (&hosts)); g_free (str); str = new_str; } } return str; } /** * @brief Send some scanner preferences to the scanner. * * @param[in] task Task. * @param[in] target Scan target. * @param[in] stopped_report Previously stoppped report, if any, else 0. * * @return 0 on success, -1 on failure. */ static int send_scanner_preferences (task_t task, target_t target, report_t stopped_report) { char *hosts_ordering, *exclude_hosts, *reverse_lookup_only; char *reverse_lookup_unify; /* Send ifaces_allow / ifaces_deny preferences. */ if (send_ifaces_access_preferences ()) return -1; /* Send hosts_allow / hosts_deny preferences. */ if (send_hosts_access_preferences ()) return -1; /* Send hosts_ordering preference. */ hosts_ordering = task_hosts_ordering (task); if (hosts_ordering) { if (sendf_to_server ("hosts_ordering <|> %s\n", hosts_ordering)) { free (hosts_ordering); return -1; } free (hosts_ordering); } /* Send exclude_hosts preference. */ exclude_hosts = target_exclude_hosts (target); if (exclude_hosts) { char *finished, *str; finished = finished_hosts_str (stopped_report); if (finished) { str = g_strdup_printf ("%s, %s", exclude_hosts, finished); g_free (exclude_hosts); g_free (finished); exclude_hosts = str; } } else exclude_hosts = finished_hosts_str (stopped_report); if (exclude_hosts) { if (sendf_to_server ("exclude_hosts <|> %s\n", exclude_hosts)) { free (exclude_hosts); return -1; } free (exclude_hosts); } /* Send reverse_lookup_only preference. */ reverse_lookup_only = target_reverse_lookup_only (target); if (reverse_lookup_only == NULL || strcmp (reverse_lookup_only, "0") == 0) reverse_lookup_only = "no"; else reverse_lookup_only = "yes"; if (sendf_to_server ("reverse_lookup_only <|> %s\n", reverse_lookup_only)) return -1; /* Send reverse_lookup_unify preference. */ reverse_lookup_unify = target_reverse_lookup_unify (target); if (reverse_lookup_unify == NULL || strcmp (reverse_lookup_unify, "0") == 0) reverse_lookup_unify = "no"; else reverse_lookup_unify = "yes"; if (sendf_to_server ("reverse_lookup_unify <|> %s\n", reverse_lookup_unify)) return -1; return 0; } /** * @brief Send a file to the scanner. * * @param[in] name File name. * @param[in] content File contents. * * @return 0 on success, -1 on failure. */ static int send_file (const char* name, const char* content) { size_t content_len = strlen (content); if (sendf_to_server ("CLIENT <|> ATTACHED_FILE\n" "name: %s\n" "content: octet/stream\n" "bytes: %i\n", name, content_len)) return -1; if (sendn_to_server (content, content_len)) return -1; return 0; } /** * @brief Send a file from a task to the scanner. * * @param[in] task The task. * @param[in] file File name. * * @return 0 on success, -1 on failure. */ static int send_task_file (task_t task, const char* file) { iterator_t files; init_task_file_iterator (&files, task, file); while (next (&files)) { gsize content_len; guchar *content; const char *content_64 = task_file_iterator_content (&files); content = g_base64_decode (content_64, &content_len); if (sendf_to_server ("CLIENT <|> ATTACHED_FILE\n" "name: %s\n" "content: octet/stream\n" "bytes: %i\n", file, content_len)) { g_free (content); cleanup_iterator (&files); return -1; } if (sendn_to_server (content, content_len)) { g_free (content); cleanup_iterator (&files); return -1; } g_free (content); } cleanup_iterator (&files); return 0; } /** * @brief Send target "Alive Test" preferences to the scanner. * * @param[in] target Scan target. * * @return 0 on success, -1 on failure. */ static int send_alive_test_preferences (target_t target) { alive_test_t alive_test; alive_test = target_alive_tests (target); if (alive_test == 0) return 0; if (sendf_to_server ("Ping Host[checkbox]:Do a TCP ping <|> %s\n", alive_test & ALIVE_TEST_TCP_ACK_SERVICE || alive_test & ALIVE_TEST_TCP_SYN_SERVICE ? "yes" : "no")) return -1; if (sendf_to_server ("Ping Host[checkbox]:TCP ping tries also TCP-SYN ping" " <|> %s\n", alive_test & ALIVE_TEST_TCP_SYN_SERVICE ? "yes" : "no")) return -1; if (sendf_to_server ("Ping Host[checkbox]:Do an ICMP ping <|> %s\n", alive_test & ALIVE_TEST_ICMP ? "yes" : "no")) return -1; if (sendf_to_server ("Ping Host[checkbox]:Use ARP <|> %s\n", alive_test & ALIVE_TEST_ARP ? "yes" : "no")) return -1; if (sendf_to_server ("Ping Host[checkbox]:" "Mark unrechable Hosts as dead (not scanning) <|> %s\n", alive_test & ALIVE_TEST_CONSIDER_ALIVE ? "no" : "yes")) return -1; if (alive_test == ALIVE_TEST_CONSIDER_ALIVE) { /* Also select a method, otherwise Ping Host logs a warning. */ if (sendf_to_server ("Ping Host[checkbox]:Do a TCP ping <|> yes\n")) return -1; } return 0; } /** @todo g_convert back to ISO-8559-1 for scanner? */ /** * @brief Free an slist of pointers, including the pointers. * * @param[in] list The list. */ /** @todo Duplicate in openvas_string module (openvas_string_list_free) . * Find proper module to place this function. */ void slist_free (GSList* list) { GSList *head = list; while (list) { g_free (list->data); list = g_slist_next (list); } g_slist_free (head); } /** * @brief Update the locally cached task progress from the slave. * * @param[in] get_tasks Slave GET_TASKS response. * * @return 0 success, -1 error. */ int update_slave_progress (entity_t get_tasks) { entity_t entity; entity = entity_child (get_tasks, "task"); if (entity == NULL) return -1; entity = entity_child (entity, "progress"); if (entity == NULL) return -1; if (current_report == 0) return -1; set_report_slave_progress (current_report, atoi (entity_text (entity))); return 0; } /** * @brief Authenticate with a slave. * * @param[in] session GNUTLS session. * @param[in] slave Slave. * * @return 0 success, -1 error. */ int slave_authenticate (gnutls_session_t *session, slave_t slave) { int ret; gchar *login, *password; login = slave_login (slave); if (login == NULL) return -1; password = slave_password (slave); if (password == NULL) { g_free (login); return -1; } ret = omp_authenticate (session, login, password); g_free (login); g_free (password); if (ret) return -1; return 0; } /* Defined in omp.c. */ void buffer_config_preference_xml (GString *, iterator_t *, config_t, int); /** * @brief Number of seconds to sleep between polls to slave. */ #define RUN_SLAVE_TASK_SLEEP_SECONDS 25 /** * @brief Connect to a slave. * * @param[in] slave Slave. * @param[in] host Host. * @param[out] port Port. * @param[out] socket Socket. * @param[out] session Session. * * @return 0 success, -1 error, 1 auth failure. */ static int slave_connect (slave_t slave, const char *host, int port, int *socket, gnutls_session_t *session) { *socket = openvas_server_open (session, host, port); if (*socket == -1) { g_warning ("%s: failed to open connection to server", __FUNCTION__); return -1; } { int optval; optval = 1; if (setsockopt (*socket, SOL_SOCKET, SO_KEEPALIVE, &optval, sizeof (int))) { g_warning ("%s: failed to set SO_KEEPALIVE on slave socket: %s\n", __FUNCTION__, strerror (errno)); openvas_server_close (*socket, *session); return -1; } } tracef (" %s: connected\n", __FUNCTION__); /* Authenticate using the slave login. */ if (slave_authenticate (session, slave)) { openvas_server_close (*socket, *session); return 1; } tracef (" %s: authenticated\n", __FUNCTION__); return 0; } /** * @brief Sleep then connect to slave. Retry until success or giveup requested. * * @param[in] slave Slave. * @param[in] host Host. * @param[in] port Port. * @param[in] task Local task. * @param[out] socket Socket. * @param[out] session Session. * * @return 0 success, 3 giveup. */ static int slave_sleep_connect (slave_t slave, const char *host, int port, task_t task, int *socket, gnutls_session_t *session) { do { if ((task_run_status (task) == TASK_STATUS_STOP_REQUESTED_GIVEUP) || (task_run_status (task) == TASK_STATUS_STOP_REQUESTED)) { tracef (" %s: task stopped for giveup\n", __FUNCTION__); set_task_run_status (current_scanner_task, TASK_STATUS_STOPPED); return 3; } openvas_sleep (RUN_SLAVE_TASK_SLEEP_SECONDS); } while (slave_connect (slave, host, port, socket, session)); return 0; } /** * @brief Update end times, and optionally add host details. * * @param[in] report Report. * * @return 0 success, -1 error. */ int update_end_times (entity_t report) { entity_t end; entities_t entities; /* Set the scan end time. */ entities = report->entities; while ((end = first_entity (entities))) { if (strcmp (entity_name (end), "scan_end") == 0) { char *text; text = entity_text (end); while (*text && isspace (*text)) text++; if (*text == '\0') break; set_task_end_time (current_scanner_task, g_strdup (entity_text (end))); set_scan_end_time (current_report, entity_text (end)); break; } entities = next_entities (entities); } /* Add host details and set the host end times. */ entities = report->entities; while ((end = first_entity (entities))) { if (strcmp (entity_name (end), "host_end") == 0) { entity_t host; char *text; /* Set the end time this way first, in case the slave is * very old. */ host = entity_child (end, "host"); if (host == NULL) return -1; text = entity_text (end); while (*text && isspace (*text)) text++; if (*text != '\0') set_scan_host_end_time (current_report, entity_text (host), entity_text (end)); } if (strcmp (entity_name (end), "host") == 0) { entity_t ip, time; char *text; ip = entity_child (end, "ip"); if (ip == NULL) return -1; time = entity_child (end, "end"); if (time == NULL) return -1; text = entity_text (time); while (*text && isspace (*text)) text++; if ((*text != '\0') && (scan_host_end_time (current_report, entity_text (ip)) == 0)) { set_scan_host_end_time (current_report, entity_text (ip), entity_text (time)); if (manage_report_host_details (current_report, entity_text (ip), end)) return -1; } } entities = next_entities (entities); } return 0; } /** * @brief Slave credential UUID. */ gchar *slave_ssh_credential_uuid = NULL; /** * @brief Slave credential UUID. */ gchar *slave_smb_credential_uuid = NULL; /** * @brief Slave credential UUID. */ gchar *slave_esxi_credential_uuid = NULL; /** * @brief Slave target UUID. */ gchar *slave_target_uuid = NULL; /** * @brief Slave target UUID. */ gchar *slave_port_list_uuid = NULL; /** * @brief Slave config UUID. */ gchar *slave_config_uuid = NULL; /** * @brief Slave task UUID. */ gchar *slave_task_uuid = NULL; /** * @brief Slave report UUID. */ gchar *slave_report_uuid = NULL; /** * @brief Slave session. */ gnutls_session_t *slave_session = NULL; /** * @brief Slave socket. */ int *slave_socket = NULL; /** * @brief Cleanup slave. Callback for atexit. */ static void cleanup_slave () { if (slave_session && slave_socket) { if (slave_task_uuid) omp_stop_task (slave_session, slave_task_uuid); openvas_server_close (*slave_socket, *slave_session); } } /** * @brief Get last report fro GET_TASKS response. * * @param[in] get_tasks GET_TASKS response. * * @return Freshly allocated UUID of last report, or NULL. */ static gchar * get_tasks_last_report (entity_t get_tasks) { entity_t task; task = entity_child (get_tasks, "task"); if (task) { entity_t current_report; current_report = entity_child (task, "current_report"); if (current_report) { entity_t report; report = entity_child (current_report, "report"); if (report && entity_attribute (report, "id")) return g_strdup (entity_attribute (report, "id")); } else { entity_t last_report; last_report = entity_child (task, "last_report"); if (last_report) { entity_t report; report = entity_child (last_report, "report"); if (report && entity_attribute (report, "id")) return g_strdup (entity_attribute (report, "id")); } } } return NULL; } /** * @brief Setup a task on a slave. * * @param[in] slave Slave. * @param[in] session Session. * @param[in] socket Socket. * @param[in] name Name of task on slave. * @param[in] host Slave host. * @param[in] port Slave host port. * @param[in] task The task. * @param[out] target Task target. * @param[out] target_ssh_credential Target SSH credential. * @param[out] target_smb_credential Target SMB credential. * @param[out] last_stopped_report Last stopped report if any, else 0. * * @return 0 success, 1 retry, 3 giveup. */ static int slave_setup (slave_t slave, gnutls_session_t *session, int *socket, const char *name, const char *host, int port, task_t task, target_t target, lsc_credential_t target_ssh_credential, lsc_credential_t target_smb_credential, lsc_credential_t target_esxi_credential, report_t last_stopped_report) { const int ret_giveup = 3; int ret, ret_fail, next_result; iterator_t credentials, targets; omp_delete_opts_t del_opts; ret_fail = 1; del_opts = omp_delete_opts_ultimate_defaults; slave_session = session; slave_socket = socket; /* Register a cleanup callback to stop the slave task if the process is * killed, for example by a reboot. On restart Manager will set the task * status to Stopped, which will match the slave. */ if (atexit (&cleanup_slave)) { g_critical ("%s: failed to register `atexit' slave_cleanup function\n", __FUNCTION__); goto fail; } if (last_stopped_report) { /* Resume the task on the slave. */ slave_task_uuid = report_slave_task_uuid (last_stopped_report); if (slave_task_uuid == NULL) { /* This may happen if someone sets a slave on a local task. Clear * all the report results and start the task from the beginning. */ trim_report (last_stopped_report); last_stopped_report = 0; } else { int ret; entity_t get_tasks; const char *status; /* Check if the task is running or complete on the slave. */ while ((ret = omp_get_tasks (session, slave_task_uuid, 0, 0, &get_tasks))) { if (ret == 404) { /* Task missing. Perhaps someone removed the task on the slave. * Clear all the report results and start the task from the * beginning. */ trim_report (last_stopped_report); last_stopped_report = 0; break; } else if (ret) { openvas_server_close (*socket, *session); ret = slave_sleep_connect (slave, host, port, task, socket, session); if (ret == 3) goto giveup; } } if (ret == 0) { status = omp_task_status (get_tasks); if (status == NULL) { /* An error somewhere. Clear all the report results and * start the task from the beginning. */ trim_report (last_stopped_report); last_stopped_report = 0; } else if ((strcmp (status, "Running") == 0) || (strcmp (status, "Done") == 0)) { /* Task on slave is Running or Done, continue using it as * is. */ slave_report_uuid = get_tasks_last_report (get_tasks); if (slave_report_uuid == NULL) { g_warning ("%s: slave report %s missing UUID\n", __FUNCTION__, slave_task_uuid); goto fail; } } else { /* Task is there, try resume it. */ switch (omp_resume_task_report (session, slave_task_uuid, &slave_report_uuid)) { case 0: if (slave_report_uuid == NULL) goto fail; set_task_run_status (task, TASK_STATUS_REQUESTED); break; case 1: /* The resume may have failed because the task slave changed or * because someone removed the task on the slave. Clear all the * report results and start the task from the beginning. * * This and the if above both "leak" the resources on the slave, * because on the report these resources are replaced with the new * resources. */ trim_report (last_stopped_report); last_stopped_report = 0; break; default: free (slave_task_uuid); goto fail; } } } } } if (last_stopped_report == 0) { /* Create the target credentials on the slave. */ if (target_ssh_credential) { init_lsc_credential_iterator_one (&credentials, target_ssh_credential); if (next (&credentials)) { const char *user, *password, *private_key; gchar *user_copy, *password_copy, *private_key_copy; omp_create_lsc_credential_opts_t opts; user = lsc_credential_iterator_login (&credentials); password = lsc_credential_iterator_password (&credentials); private_key = lsc_credential_iterator_private_key (&credentials); if (user == NULL || (private_key == NULL && password == NULL)) { cleanup_iterator (&credentials); goto fail; } user_copy = g_strdup (user); password_copy = g_strdup (password); private_key_copy = g_strdup (private_key); cleanup_iterator (&credentials); opts = omp_create_lsc_credential_opts_defaults; opts.name = name; opts.login = user_copy; opts.passphrase = password_copy; if (private_key_copy) opts.private_key = private_key_copy; opts.comment = "Slave SSH credential created by Master"; ret = omp_create_lsc_credential_ext (session, opts, &slave_ssh_credential_uuid); g_free (user_copy); g_free (password_copy); g_free (private_key_copy); if (ret) goto fail; } } if (target_smb_credential) { init_lsc_credential_iterator_one (&credentials, target_smb_credential); if (next (&credentials)) { const char *user, *password; gchar *user_copy, *password_copy, *smb_name; omp_create_lsc_credential_opts_t opts; user = lsc_credential_iterator_login (&credentials); password = lsc_credential_iterator_password (&credentials); if (user == NULL || password == NULL) { cleanup_iterator (&credentials); goto fail_ssh_credential; } user_copy = g_strdup (user); password_copy = g_strdup (password); cleanup_iterator (&credentials); opts = omp_create_lsc_credential_opts_defaults; smb_name = g_strdup_printf ("%ssmb", name); opts.name = smb_name; opts.login = user_copy; opts.passphrase = password_copy; opts.comment = "Slave SMB credential created by Master"; ret = omp_create_lsc_credential_ext (session, opts, &slave_smb_credential_uuid); g_free (smb_name); g_free (user_copy); g_free (password_copy); if (ret) goto fail_ssh_credential; } } if (target_esxi_credential) { init_lsc_credential_iterator_one (&credentials, target_esxi_credential); if (next (&credentials)) { const char *user, *password; gchar *user_copy, *password_copy, *esxi_name; omp_create_lsc_credential_opts_t opts; user = lsc_credential_iterator_login (&credentials); password = lsc_credential_iterator_password (&credentials); if (user == NULL || password == NULL) { cleanup_iterator (&credentials); goto fail_ssh_credential; } user_copy = g_strdup (user); password_copy = g_strdup (password); cleanup_iterator (&credentials); opts = omp_create_lsc_credential_opts_defaults; esxi_name = g_strdup_printf ("%sesxi", name); opts.name = esxi_name; opts.login = user_copy; opts.passphrase = password_copy; opts.comment = "Slave ESXi credential created by Master"; ret = omp_create_lsc_credential_ext (session, opts, &slave_esxi_credential_uuid); g_free (esxi_name); g_free (user_copy); g_free (password_copy); if (ret) goto fail_smb_credential; } } tracef (" %s: slave SSH credential uuid: %s\n", __FUNCTION__, slave_ssh_credential_uuid); tracef (" %s: slave SMB credential uuid: %s\n", __FUNCTION__, slave_smb_credential_uuid); tracef (" %s: slave ESXi credential uuid: %s\n", __FUNCTION__, slave_esxi_credential_uuid); /* Create the target on the slave. */ init_target_iterator_one (&targets, target); if (next (&targets)) { const char *hosts, *port, *exclude_hosts, *alive_tests; const char *reverse_lookup_only, *reverse_lookup_unify; const char *port_list_uuid; gchar *hosts_copy, *exclude_hosts_copy; gchar *alive_tests_copy, *port_range; omp_create_target_opts_t opts; int ssh_port; entity_t get_targets, child; hosts = target_iterator_hosts (&targets); exclude_hosts = target_iterator_exclude_hosts (&targets); alive_tests = target_iterator_alive_tests (&targets); reverse_lookup_only = target_iterator_reverse_lookup_only (&targets); reverse_lookup_unify = target_iterator_reverse_lookup_unify (&targets); if (hosts == NULL) { cleanup_iterator (&targets); goto fail_esxi_credential; } port = target_iterator_ssh_port (&targets); if (port == NULL) ssh_port = 0; else ssh_port = atoi (port); hosts_copy = g_strdup (hosts); exclude_hosts_copy = g_strdup (exclude_hosts); alive_tests_copy = g_strdup (alive_tests); port_range = target_port_range (get_iterator_resource (&targets)); cleanup_iterator (&targets); opts = omp_create_target_opts_defaults; opts.hosts = hosts_copy; opts.exclude_hosts = exclude_hosts_copy; opts.alive_tests = alive_tests_copy; opts.ssh_credential_id = slave_ssh_credential_uuid; opts.ssh_credential_port = ssh_port; opts.smb_credential_id = slave_smb_credential_uuid; opts.esxi_credential_id = slave_esxi_credential_uuid; opts.port_range = port_range; opts.name = name; opts.comment = "Slave target created by Master"; opts.reverse_lookup_only = reverse_lookup_only ? atoi (reverse_lookup_only) : 0; opts.reverse_lookup_unify = reverse_lookup_unify ? atoi (reverse_lookup_unify) : 0; ret = omp_create_target_ext (session, opts, &slave_target_uuid); g_free (hosts_copy); g_free (exclude_hosts_copy); g_free (alive_tests_copy); g_free (port_range); if (ret == -2) goto fail_esxi_credential; if (ret) { set_task_run_status (task, TASK_STATUS_INTERNAL_ERROR); ret_fail = ret_giveup; goto fail_esxi_credential; } if (omp_get_targets (session, slave_target_uuid, 0, 0, &get_targets)) goto fail_target; child = entity_child (get_targets, "target"); if (child == NULL) { free_entity (get_targets); goto fail_target; } child = entity_child (child, "port_list"); if (child == NULL) { free_entity (get_targets); goto fail_target; } port_list_uuid = entity_attribute (child, "id"); if (port_list_uuid == NULL) { free_entity (get_targets); goto fail_target; } slave_port_list_uuid = g_strdup (port_list_uuid); free_entity (get_targets); } else { cleanup_iterator (&targets); goto fail_esxi_credential; } tracef (" %s: slave target uuid: %s\n", __FUNCTION__, slave_target_uuid); /* Create the config on the slave. */ { config_t config; iterator_t prefs, selectors; /* This must follow the GET_CONFIGS_RESPONSE export case. */ config = task_config (task); if (config == 0) goto fail_target; if (openvas_server_sendf (session, "" "" "" "0" "%s" "" "Slave config created by Master" "" "", name)) goto fail_target; /* Send NVT timeout preferences where a timeout has been * specified. */ init_config_timeout_iterator (&prefs, config); while (next (&prefs)) { const char *timeout; timeout = config_timeout_iterator_value (&prefs); if (timeout && strlen (timeout) && openvas_server_sendf (session, "" "" "%s" "" "Timeout" "entry" "%s" "", config_timeout_iterator_oid (&prefs), config_timeout_iterator_nvt_name (&prefs), timeout)) { cleanup_iterator (&prefs); goto fail_target; } } cleanup_iterator (&prefs); init_nvt_preference_iterator (&prefs, NULL); while (next (&prefs)) { GString *buffer = g_string_new (""); buffer_config_preference_xml (buffer, &prefs, config, 0); if (openvas_server_sendf (session, "%s", buffer->str)) { cleanup_iterator (&prefs); goto fail_target; } g_string_free (buffer, TRUE); } cleanup_iterator (&prefs); if (openvas_server_sendf (session, "" "")) { cleanup_iterator (&prefs); goto fail_target; } init_nvt_selector_iterator (&selectors, NULL, config, NVT_SELECTOR_TYPE_ANY); while (next (&selectors)) { int type = nvt_selector_iterator_type (&selectors); if (openvas_server_sendf (session, "" "%s" "%i" "%i" "%s" "", nvt_selector_iterator_name (&selectors), nvt_selector_iterator_include (&selectors), type, (type == NVT_SELECTOR_TYPE_ALL ? "" : nvt_selector_iterator_nvt (&selectors)))) goto fail_target; } cleanup_iterator (&selectors); if (openvas_server_sendf (session, "" "" "" "") || (omp_read_create_response (session, &slave_config_uuid) != 201)) goto fail_target; } tracef (" %s: slave config uuid: %s\n", __FUNCTION__, slave_config_uuid); /* Create the task on the slave. */ { gchar *in_assets, *max_checks, *max_hosts, *source_iface; gchar *hosts_ordering; omp_create_task_opts_t opts; opts = omp_create_task_opts_defaults; opts.config_id = slave_config_uuid; opts.target_id = slave_target_uuid; opts.name = name; opts.comment = "Slave task created by Master"; in_assets = task_preference_value (task, "in_assets"); max_checks = task_preference_value (task, "max_checks"); max_hosts = task_preference_value (task, "max_hosts"); source_iface = task_preference_value (task, "source_iface"); hosts_ordering = task_hosts_ordering (task); opts.alterable = 0; opts.in_assets = in_assets; opts.max_checks = max_checks ? max_checks : MAX_CHECKS_DEFAULT; opts.max_hosts = max_hosts ? max_hosts : MAX_HOSTS_DEFAULT; opts.source_iface = source_iface; opts.hosts_ordering = hosts_ordering; opts.alert_ids = NULL; opts.observers = NULL; opts.observer_groups = NULL; opts.scanner_id = NULL; opts.schedule_id = NULL; opts.slave_id = NULL; ret = omp_create_task_ext (session, opts, &slave_task_uuid); g_free (in_assets); g_free (max_checks); g_free (max_hosts); g_free (source_iface); g_free (hosts_ordering); if (ret) goto fail_config; } /* Start the task on the slave. */ if (omp_start_task_report (session, slave_task_uuid, &slave_report_uuid)) goto fail_task; if (slave_report_uuid == NULL) goto fail_stop_task; set_report_slave_task_uuid (current_report, slave_task_uuid); } /* Setup the current task for functions like set_task_run_status. */ current_scanner_task = task; /* Poll the slave until the task is finished. */ next_result = 1; while (1) { entity_t get_tasks, report, get_report; const char *status; task_status_t run_status; int status_done; /* Check if some other process changed the task status. */ run_status = task_run_status (task); switch (run_status) { case TASK_STATUS_DELETE_REQUESTED: case TASK_STATUS_DELETE_ULTIMATE_REQUESTED: case TASK_STATUS_STOP_REQUESTED: switch (omp_stop_task (session, slave_task_uuid)) { case 0: break; case 404: if (ret == 404) { /* Resource Missing. */ g_warning ("%s: Task missing on slave", __FUNCTION__); set_task_run_status (task, TASK_STATUS_INTERNAL_ERROR); goto giveup; } break; default: goto fail_stop_task; } if (run_status == TASK_STATUS_DELETE_REQUESTED) set_task_run_status (current_scanner_task, TASK_STATUS_DELETE_WAITING); else if (run_status == TASK_STATUS_DELETE_ULTIMATE_REQUESTED) set_task_run_status (current_scanner_task, TASK_STATUS_DELETE_ULTIMATE_WAITING); else set_task_run_status (current_scanner_task, TASK_STATUS_STOP_WAITING); break; case TASK_STATUS_STOP_REQUESTED_GIVEUP: tracef (" %s: task stopped for giveup\n", __FUNCTION__); set_task_run_status (current_scanner_task, TASK_STATUS_STOPPED); goto giveup; break; case TASK_STATUS_STOPPED: assert (0); goto fail_stop_task; break; case TASK_STATUS_DELETE_WAITING: case TASK_STATUS_DELETE_ULTIMATE_WAITING: case TASK_STATUS_DONE: case TASK_STATUS_NEW: case TASK_STATUS_REQUESTED: case TASK_STATUS_RUNNING: case TASK_STATUS_STOP_WAITING: case TASK_STATUS_INTERNAL_ERROR: break; } ret = omp_get_tasks (session, slave_task_uuid, 0, 0, &get_tasks); if (ret == 404) { /* Resource Missing. */ g_warning ("%s: Task missing on slave", __FUNCTION__); set_task_run_status (task, TASK_STATUS_INTERNAL_ERROR); goto giveup; } else if (ret) { openvas_server_close (*socket, *session); ret = slave_sleep_connect (slave, host, port, task, socket, session); if (ret == 3) goto giveup; continue; } status = omp_task_status (get_tasks); if (status == NULL) { g_warning ("%s: Slave task status was NULL", __FUNCTION__); set_task_run_status (task, TASK_STATUS_INTERNAL_ERROR); goto giveup; } status_done = (strcmp (status, "Done") == 0); if ((strcmp (status, "Running") == 0) || status_done) { int ret2 = 0; omp_get_report_opts_t opts; if (run_status == TASK_STATUS_REQUESTED) set_task_run_status (task, TASK_STATUS_RUNNING); if ((strcmp (status, "Running") == 0) && update_slave_progress (get_tasks)) { free_entity (get_tasks); goto fail_stop_task; } opts = omp_get_report_opts_defaults; opts.report_id = slave_report_uuid; opts.first_result = next_result; opts.format_id = "a994b278-1f62-11e1-96ac-406186ea4fc5"; opts.apply_overrides = 0; opts.levels = "hmlgd"; if (status_done) /* Request all the hosts to get their end times. */ opts.result_hosts_only = 0; else opts.result_hosts_only = 1; ret = omp_get_report_ext (session, opts, &get_report); if (ret) { opts.format_id = "d5da9f67-8551-4e51-807b-b6a873d70e34"; ret2 = omp_get_report_ext (session, opts, &get_report); } if ((ret == 404) && (ret2 == 404)) { /* Resource Missing. */ g_warning ("%s: Task report missing on slave", __FUNCTION__); set_task_run_status (task, TASK_STATUS_INTERNAL_ERROR); goto giveup; } if (ret && ret2) { free_entity (get_tasks); openvas_server_close (*socket, *session); ret = slave_sleep_connect (slave, host, port, task, socket, session); if (ret == 3) goto giveup; continue; } if (update_from_slave (task, get_report, &report, &next_result)) { free_entity (get_tasks); free_entity (get_report); goto fail_stop_task; } if (strcmp (status, "Running") == 0) { if (update_end_times (report)) goto fail_stop_task; free_entity (get_report); } } else if (strcmp (status, "Stopped") == 0) { set_task_run_status (task, TASK_STATUS_STOPPED); goto succeed_stopped; } else if (strcmp (status, "Stop Requested") == 0) set_task_run_status (task, TASK_STATUS_STOP_WAITING); else if ((strcmp (status, "Internal Error") == 0) || (strcmp (status, "Delete Requested") == 0)) { free_entity (get_tasks); goto fail_stop_task; } if (status_done) { if (update_end_times (report)) { free_entity (get_tasks); free_entity (get_report); goto fail_stop_task; } free_entity (get_report); if (update_slave_progress (get_tasks)) { free_entity (get_report); free_entity (get_tasks); goto fail_stop_task; } free_entity (get_tasks); set_task_run_status (task, TASK_STATUS_DONE); break; } free_entity (get_tasks); openvas_sleep (RUN_SLAVE_TASK_SLEEP_SECONDS); } /* Cleanup. */ current_scanner_task = (task_t) 0; omp_delete_task_ext (session, slave_task_uuid, del_opts); set_report_slave_task_uuid (current_report, ""); omp_delete_config_ext (session, slave_config_uuid, del_opts); omp_delete_target_ext (session, slave_target_uuid, del_opts); omp_delete_port_list_ext (session, slave_port_list_uuid, del_opts); if (slave_ssh_credential_uuid) omp_delete_lsc_credential_ext (session, slave_ssh_credential_uuid, del_opts); if (slave_smb_credential_uuid) omp_delete_lsc_credential_ext (session, slave_smb_credential_uuid, del_opts); if (slave_esxi_credential_uuid) omp_delete_lsc_credential_ext (session, slave_esxi_credential_uuid, del_opts); succeed_stopped: free (slave_task_uuid); slave_task_uuid = NULL; free (slave_report_uuid); slave_report_uuid = NULL; free (slave_config_uuid); slave_config_uuid = NULL; free (slave_target_uuid); slave_target_uuid = NULL; free (slave_port_list_uuid); slave_port_list_uuid = NULL; free (slave_esxi_credential_uuid); slave_esxi_credential_uuid = NULL; free (slave_smb_credential_uuid); slave_smb_credential_uuid = NULL; free (slave_ssh_credential_uuid); slave_ssh_credential_uuid = NULL; openvas_server_close (*socket, *session); slave_session = NULL; slave_socket = NULL; return 0; fail_stop_task: omp_stop_task (session, slave_task_uuid); free (slave_report_uuid); fail_task: omp_delete_task_ext (session, slave_task_uuid, del_opts); set_report_slave_task_uuid (current_report, ""); free (slave_task_uuid); fail_config: omp_delete_config_ext (session, slave_config_uuid, del_opts); free (slave_config_uuid); fail_target: omp_delete_target_ext (session, slave_target_uuid, del_opts); free (slave_target_uuid); omp_delete_port_list_ext (session, slave_port_list_uuid, del_opts); free (slave_port_list_uuid); fail_esxi_credential: omp_delete_lsc_credential_ext (session, slave_esxi_credential_uuid, del_opts); free (slave_esxi_credential_uuid); fail_smb_credential: omp_delete_lsc_credential_ext (session, slave_smb_credential_uuid, del_opts); free (slave_smb_credential_uuid); fail_ssh_credential: omp_delete_lsc_credential_ext (session, slave_ssh_credential_uuid, del_opts); free (slave_ssh_credential_uuid); fail: g_debug (" %s: fail (%i)\n", __FUNCTION__, ret_fail); openvas_server_close (*socket, *session); slave_session = NULL; slave_socket = NULL; return ret_fail; giveup: g_debug (" %s: giveup (%i)\n", __FUNCTION__, ret_giveup); openvas_server_close (*socket, *session); slave_session = NULL; slave_socket = NULL; return ret_giveup; } /** * @brief Start a task on a slave. * * @param[in] task The task. * @param[out] target Task target. * @param[out] target_ssh_credential Target SSH credential. * @param[out] target_smb_credential Target SMB credential. * @param[out] last_stopped_report Last stopped report if any, else 0. * * @return 0 success, 1 login failed, -1 error. */ static int run_slave_task (task_t task, target_t target, lsc_credential_t target_ssh_credential, lsc_credential_t target_smb_credential, lsc_credential_t target_esxi_credential, report_t last_stopped_report) { slave_t slave; char *host, *name, *uuid; int port, socket, ret; gnutls_session_t session; /* Some of the cases in here must write to the session outside an open * statement. For example, the omp_create_lsc_credential must come after * cleaning up the credential iterator. This is because the slave may be * the master, and the open statement would prevent the slave from getting * a lock on the database and fulfilling the request. */ tracef (" Running slave task %llu\n", task); // FIX permission checks may the user still access the slave, target, port list etc? slave = task_slave (task); tracef (" %s: slave: %llu\n", __FUNCTION__, slave); assert (slave); if (slave == 0) { g_warning ("%s: Task has no slave", __FUNCTION__); return -1; } host = slave_host (slave); if (host == NULL) { g_warning ("%s: Slave has no host", __FUNCTION__); return -1; } tracef (" %s: host: %s\n", __FUNCTION__, host); port = slave_port (slave); if (port == -1) { free (host); g_warning ("%s: Slave has no port", __FUNCTION__); return -1; } uuid = slave_uuid (slave); name = slave_name (slave); report_set_slave_uuid (current_report, uuid); report_set_slave_name (current_report, name); report_set_slave_port (current_report, port); report_set_slave_host (current_report, host); free (uuid); free (name); name = openvas_uuid_make (); if (name == NULL) { free (host); g_warning ("%s: Failed to make UUID", __FUNCTION__); return -1; } while ((ret = slave_connect (slave, host, port, &socket, &session))) if (ret == 1) { result_t result; gchar *port_string; /* Login failed. */ port_string = g_strdup_printf ("%i", port); result = make_result (task, host, port_string, /* NVT: Global variable settings. */ "1.3.6.1.4.1.25623.1.0.12288", "Error Message", "Slave authentication failed."); g_free (port_string); if (current_report) report_add_result (current_report, result); free (host); return 1; } else { if ((task_run_status (task) == TASK_STATUS_STOP_REQUESTED_GIVEUP) || (task_run_status (task) == TASK_STATUS_STOP_REQUESTED)) { set_task_run_status (task, TASK_STATUS_STOPPED); free (host); free (name); return 0; } openvas_sleep (RUN_SLAVE_TASK_SLEEP_SECONDS); } while (1) { ret = slave_setup (slave, &session, &socket, name, host, port, task, target, target_ssh_credential, target_smb_credential, target_esxi_credential, last_stopped_report); if (ret == 1) { ret = slave_sleep_connect (slave, host, port, task, &socket, &session); if (ret == 3) /* User requested "giveup". */ break; } else break; } current_scanner_task = (task_t) 0; free (host); free (name); return 0; } /** * @brief Give a task's OSP scan options in a hash table. * * @param[in] task The task. * * @return Hash table with options names and their values. */ static GHashTable * task_scanner_options (task_t task) { GHashTable *table; config_t config; iterator_t prefs; config = task_config (task); init_preference_iterator (&prefs, config); table = g_hash_table_new_full (g_str_hash, g_str_equal, g_free, g_free); while (next (&prefs)) { char *name, *value; name = g_strdup (preference_iterator_name (&prefs)); if (!strcmp (name, "definitions_file")) { char *fname; if (!preference_iterator_value (&prefs)) continue; fname = g_strdup_printf ("%s/%s", OPENVAS_STATE_DIR "/scap-data/", preference_iterator_value (&prefs)); value = openvas_file_as_base64 (fname); if (!value) continue; } else value = g_strdup (preference_iterator_value (&prefs)); g_hash_table_insert (table, name, value); } cleanup_iterator (&prefs); return table; } static char * get_definitions_file (task_t task) { assert (task); return sql_string ("SELECT value FROM config_preferences" " WHERE name = 'definitions_file' AND config = %llu;", task_config (task)); } static void parse_osp_report (task_t task, report_t report, const char *report_xml) { entity_t entity, child; entities_t results; const char *str; char *defs_file; time_t start_time, end_time; assert (task); assert (report); assert (report_xml); if (parse_entity (report_xml, &entity)) { g_warning ("Couldn't parse %s OSP scan report\n", report_xml); return; } sql_begin_immediate (); /* Set the report's start and end times. */ str = entity_attribute (entity, "start_time"); assert (str); start_time = atoi (str); set_scan_start_time_epoch (report, start_time); str = entity_attribute (entity, "end_time"); assert (str); end_time = atoi (str); set_scan_end_time_epoch (report, end_time); /* Insert results. */ child = entity_child (entity, "results"); assert (child); results = child->entities; defs_file = get_definitions_file (task); while (results) { result_t result; const char *type, *name, *severity, *host, *test_id, *port; char *desc = NULL, *nvt_id = NULL, *severity_str = NULL; entity_t r_entity = results->data; type = entity_attribute (r_entity, "type"); name = entity_attribute (r_entity, "name"); severity = entity_attribute (r_entity, "severity"); test_id = entity_attribute (r_entity, "test_id"); host = entity_attribute (r_entity, "host"); port = entity_attribute (r_entity, "port"); assert (name); assert (type); assert (severity); assert (test_id); assert (host); /* Add report host if it doesn't exist. */ manage_report_host_add (report, host, start_time, end_time); if (!strcmp (type, "Host Detail")) { insert_report_host_detail (report, host, "osp", "", "OSP Host Detail", name, entity_text (r_entity)); results = next_entities (results); continue; } if (g_str_has_prefix (test_id, "oval:")) { nvt_id = ovaldef_uuid (test_id, defs_file); severity_str = ovaldef_severity (nvt_id); } else { nvt_id = g_strdup (name); desc = g_strdup (entity_text (r_entity)); } result = make_osp_result (task, host, nvt_id, type, desc, port ?: "", severity_str ?: severity); report_add_result (report, result); g_free (nvt_id); g_free (desc); g_free (severity_str); results = next_entities (results); } sql ("COMMIT;"); g_free (defs_file); free_entity (entity); } static void delete_osp_scan (const char *report_id, const char *host, int port, const char *ca_pub, const char *key_pub, const char *key_priv) { osp_connection_t *connection; connection = osp_connection_new (host, port, ca_pub, key_pub, key_priv); if (!connection) { g_warning ("Couldn't connect to OSP scanner on %s:%d\n", host, port); return; } osp_delete_scan (connection, report_id); osp_connection_close (connection); } /** * @brief Get an OSP scan's report. * * @param[in] scan_id Scan ID. * @param[in] host Scanner host. * @param[in] port Scanner port. * @param[in] ca_pub CA Certificate. * @param[in] key_pub Certificate. * @param[in] key_priv Private key. * @param[in] details 1 for detailed report, 0 otherwise. * @param[out] report_xml Scan report. * * @return -1 on error, progress value between 0 and 100 on success. */ static int get_osp_scan_report (const char *scan_id, const char *host, int port, const char *ca_pub, const char *key_pub, const char *key_priv, int details, char **report_xml) { osp_connection_t *connection; int progress; connection = osp_connection_new (host, port, ca_pub, key_pub, key_priv); if (!connection) { g_warning ("Couldn't connect to OSP scanner on %s:%d\n", host, port); return -1; } progress = osp_get_scan (connection, scan_id, report_xml, details); if (progress > 100 || progress < 0) { g_warning ("Erroneous progress value %d in OSP report", progress); g_free (*report_xml); progress = -1; } osp_connection_close (connection); return progress; } /** * @brief Handle an ongoing OSP scan, until success or failure. * * @param[in] task The task. * @param[in] report The scan report. * @param[in] report_id The scan report uuid. * * @return 0 if success, -1 if failure. */ static int handle_osp_scan (task_t task, report_t report, const char *report_id) { char *host, *ca_pub, *key_pub, *key_priv; int rc, port; scanner_t scanner; scanner = task_scanner (task); host = scanner_host (scanner); port = scanner_port (scanner); ca_pub = scanner_ca_pub (scanner); key_pub = scanner_key_pub (scanner); key_priv = scanner_key_priv (scanner); while (1) { char *report_xml = NULL; int progress = get_osp_scan_report (report_id, host, port, ca_pub, key_pub, key_priv, 0, &report_xml); if (progress == -1) { result_t result = make_osp_result (task, "", "", threat_message_type ("Error"), "Erroneous scan progress value", "", ""); report_add_result (report, result); rc = -1; break; } else if (progress < 100) { set_report_slave_progress (report, progress); g_free (report_xml); openvas_sleep (10); } else if (progress == 100) { /* Get the full OSP report. */ g_free (report_xml); progress = get_osp_scan_report (report_id, host, port, ca_pub, key_pub, key_priv, 1, &report_xml); assert (progress == 100); parse_osp_report (task, report, report_xml); g_free (report_xml); delete_osp_scan (report_id, host, port, ca_pub, key_pub, key_priv); rc = 0; break; } } g_free (host); g_free (ca_pub); g_free (key_pub); g_free (key_priv); return rc; } /** * @brief Get an OSP Task's scan options. * * @param[in] task The task. * @param[in] target The target. * * @return OSP Task options, NULL if failure. */ static GHashTable * get_osp_task_options (task_t task, target_t target) { char *ssh_port; const char *user, *pass; iterator_t iter; lsc_credential_t cred; GHashTable *options = task_scanner_options (task); if (!options) return NULL; cred = target_ssh_lsc_credential (target); if (cred) { ssh_port = target_ssh_port (target); g_hash_table_insert (options, g_strdup ("port"), ssh_port); init_lsc_credential_iterator_one (&iter, cred); if (!next (&iter)) { g_warning ("%s: LSC Credential not found.", __FUNCTION__); g_hash_table_destroy (options); cleanup_iterator (&iter); return NULL; } if (lsc_credential_iterator_private_key (&iter)) { g_warning ("%s: LSC Credential not a user/pass pair.", __FUNCTION__); g_hash_table_destroy (options); cleanup_iterator (&iter); return NULL; } user = lsc_credential_iterator_login (&iter); pass = lsc_credential_iterator_password (&iter); g_hash_table_insert (options, g_strdup ("username"), g_strdup (user)); g_hash_table_insert (options, g_strdup ("password"), g_strdup (pass)); cleanup_iterator (&iter); } return options; } /** * @brief Launch an OSP task. * * @param[in] task The task. * @param[in] target The target. * @param[out] scan_id The new scan uuid. * * @return 0 success, -1 if scanner is down. */ static int launch_osp_task (task_t task, target_t target, char **scan_id) { osp_connection_t *connection; char *target_str; GHashTable *options; options = get_osp_task_options (task, target); if (!options) return -1; connection = osp_scanner_connect (task_scanner (task)); if (!connection) { g_hash_table_destroy (options); return -1; } target_str = target_hosts (target); *scan_id = osp_start_scan (connection, target_str, options); g_hash_table_destroy (options); osp_connection_close (connection); g_free (target_str); return 0; } /** * @brief Fork a child to handle an OSP scan's fetching and inserting. * * @param[in] task The task. * @param[in] target The target. * * @return Parent returns with 0 if success, -1 if failure. Child process * doesn't return and simply exits. */ static int fork_osp_scan_handler (task_t task, target_t target) { char *report_id, title[128]; int rc; report_t report; assert (task); assert (target); switch (fork ()) { case 0: break; case -1: g_warning ("%s: Failed to fork: %s\n", __FUNCTION__, strerror (errno)); set_task_run_status (task, TASK_STATUS_STOPPED); return -1; default: return 0; } /* Child: Re-open DB after fork and periodically check scan progress. * If progress == 100%: Parse the report results and other info then exit(0). * Else, exit(1) in error cases like connection to scanner failure. */ reinit_manage_process (); manage_session_init (current_credentials.uuid); if (launch_osp_task (task, target, &report_id) || !report_id) { set_task_run_status (task, TASK_STATUS_STOPPED); exit (-1); } report = make_report (task, report_id, TASK_STATUS_RUNNING); set_task_run_status (task, TASK_STATUS_RUNNING); report_id = report_uuid (report); snprintf (title, sizeof (title), "openvasmd: OSP: Handling scan %s", report_id); proctitle_set (title); rc = handle_osp_scan (task, report, report_id); if (rc == 0) { set_task_run_status (task, TASK_STATUS_DONE); set_report_scan_run_status (report, TASK_STATUS_DONE); } else if (rc == -1) { set_task_run_status (task, TASK_STATUS_STOPPED); set_report_scan_run_status (report, TASK_STATUS_STOPPED); } else abort (); g_free (report_id); exit (rc); } /** * @brief Start a task on an OSP scanner. * * @param[in] task_id The task ID. * * @return 0 success, 99 permission denied, -1 error. */ int run_osp_task (task_t task) { target_t target; target = task_target (task); if (target) { char *uuid; target_t found; uuid = target_uuid (target); if (find_target_with_permission (uuid, &found, "get_targets")) { g_free (uuid); return -1; } g_free (uuid); if (found == 0) return 99; } /* Fork OSP scan handler. */ set_task_run_status (task, TASK_STATUS_REQUESTED); if (fork_osp_scan_handler (task, target)) { g_warning ("Couldn't fork OSP scan handler.\n"); return -1; } return 0; } static int scanner_connect (scanner_t scanner) { int ret, port; char *host, *ca_pub, *key_pub, *key_priv; assert (scanner); host = scanner_host (scanner); port = scanner_port (scanner); ret = openvas_scanner_set_address (host, port); g_free (host); if (ret) return ret; ca_pub = scanner_ca_pub (scanner); key_pub = scanner_key_pub (scanner); key_priv = scanner_key_priv (scanner); openvas_scanner_set_certs (ca_pub, key_pub, key_priv); g_free (ca_pub); g_free (key_pub); g_free (key_priv); return 0; } /** * @brief Start a task. * * Use \ref send_to_server to queue the task start sequence in the scanner * output buffer. * * Only one task can run at a time in a process. * * @param[in] task_id The task ID. * @param[out] report_id The report ID. * @param[in] from 0 start from beginning, 1 continue from stopped, 2 * continue if stopped else start from beginning. * @param[in] permission Permission required on task. * * @return Before forking: 1 task is active already, 3 failed to find task, * 4 resuming task not supported, 99 permission denied, -1 error, * -2 task is missing a target, * -3 creating the report failed, -4 target missing hosts, -5 scanner is * down or still loading, -6 already a task running in this process, -9 * fork failed. After forking: 0 success (parent), 2 success (child), * -10 error (child). */ static int run_task (const char *task_id, char **report_id, int from, const char *permission) { task_t task; target_t target; scanner_t scanner; slave_t slave; char title[128], *hosts, *port_range, *port, *uuid; gchar *plugins; int fail, pid; GSList *files = NULL; GPtrArray *preference_files; task_status_t run_status; config_t config; lsc_credential_t ssh_credential, smb_credential, esxi_credential; report_t last_stopped_report; port_list_t port_list; task = 0; if (find_task_with_permission (task_id, &task, permission)) return -1; if (task == 0) return 3; config = task_config (task); if (config) { char *uuid; config_t found; if (from > 0 && config_type (config) > 0) return 4; uuid = config_uuid (config); if (find_config_with_permission (uuid, &found, "get_configs")) { g_free (uuid); return -1; } g_free (uuid); if (found == 0) return 99; } else return -1; scanner = task_scanner (task); if (scanner) { char *uuid; scanner_t found; uuid = scanner_uuid (scanner); if (find_scanner_with_permission (uuid, &found, "get_scanners")) { g_free (uuid); return -1; } g_free (uuid); if (found == 0) return 99; } else assert (0); if (scanner_type (scanner) != SCANNER_TYPE_OPENVAS) return run_osp_task (task); slave = task_slave (task); if (slave) { char *uuid; slave_t found; uuid = slave_uuid (slave); if (find_slave_with_permission (uuid, &found, "get_slaves")) { g_free (uuid); return -1; } g_free (uuid); if (found == 0) return 99; } /* Classic OpenVAS Scanner. If task has no scanner, use default one. */ if (scanner_connect (scanner)) return -5; if (!openvas_scanner_connected () && (openvas_scanner_connect () || openvas_scanner_init (0))) return -5; if (openvas_scanner_is_loading ()) { openvas_scanner_close (); return -5; } if (set_task_requested (task, &run_status)) return 1; /* Every fail exit from here must reset the run status. */ if (current_scanner_task) { set_task_run_status (task, run_status); return -6; } target = task_target (task); if (target) { char *uuid; target_t found; uuid = target_uuid (target); if (find_target_with_permission (uuid, &found, "get_targets")) { g_free (uuid); set_task_run_status (task, run_status); return -1; } g_free (uuid); if (found == 0) { set_task_run_status (task, run_status); return 99; } } else { tracef (" task target is 0.\n"); set_task_run_status (task, run_status); return -2; } port_list = target_port_list (target); if (port_list) { char *uuid; port_list_t found; uuid = port_list_uuid (port_list); if (find_port_list_with_permission (uuid, &found, "get_port_lists")) { set_task_run_status (task, run_status); g_free (uuid); return -1; } g_free (uuid); if (found == 0) { set_task_run_status (task, run_status); return 99; } } else return -1; ssh_credential = target_ssh_lsc_credential (target); if (ssh_credential) { char *uuid; lsc_credential_t found; uuid = lsc_credential_uuid (ssh_credential); if (find_lsc_credential_with_permission (uuid, &found, "get_lsc_credentials")) { g_free (uuid); set_task_run_status (task, run_status); return -1; } g_free (uuid); if (found == 0) { set_task_run_status (task, run_status); return 99; } } smb_credential = target_smb_lsc_credential (target); if (smb_credential) { char *uuid; lsc_credential_t found; uuid = lsc_credential_uuid (smb_credential); if (find_lsc_credential_with_permission (uuid, &found, "get_lsc_credentials")) { g_free (uuid); set_task_run_status (task, run_status); return -1; } g_free (uuid); if (found == 0) { set_task_run_status (task, run_status); return 99; } } esxi_credential = target_esxi_lsc_credential (target); if (esxi_credential) { char *uuid; lsc_credential_t found; uuid = lsc_credential_uuid (esxi_credential); if (find_lsc_credential_with_permission (uuid, &found, "get_lsc_credentials")) { g_free (uuid); set_task_run_status (task, run_status); return -1; } g_free (uuid); if (found == 0) { set_task_run_status (task, run_status); return 99; } } hosts = target_hosts (target); if (hosts == NULL) { tracef (" target hosts is NULL.\n"); set_task_run_status (task, run_status); return -4; } if ((from == 1) || ((from == 2) && (run_status == TASK_STATUS_STOPPED))) { if (task_last_stopped_report (task, &last_stopped_report)) { tracef (" error getting last stopped report.\n"); set_task_run_status (task, run_status); free (hosts); return -1; } current_report = last_stopped_report; if (report_id) *report_id = report_uuid (last_stopped_report); /* Remove partial host information from the report. */ trim_partial_report (last_stopped_report); /* Ensure the report is marked as requested. */ set_report_scan_run_status (current_report, TASK_STATUS_REQUESTED); /* Clear the end times of the task and partial report. */ set_task_start_time_epoch (task, scan_start_time_epoch (current_report)); set_task_end_time (task, NULL); set_scan_end_time (last_stopped_report, NULL); } else if ((from == 0) || (from == 2)) { last_stopped_report = 0; /* Create the report. */ if (create_current_report (task, report_id, TASK_STATUS_REQUESTED)) { set_task_run_status (task, run_status); free (hosts); return -3; } reset_task (task); } else { /* "from" must be 0, 1 or 2. */ assert (0); free (hosts); return -1; } /* Fork a child to start and handle the task while the parent responds to * the client. */ pid = fork (); switch (pid) { case 0: /* Child. Carry on starting the task, reopen the database (required * after fork). */ reinit_manage_process (); manage_session_init (current_credentials.uuid); break; case -1: /* Parent when error. */ g_warning ("%s: Failed to fork task child: %s\n", __FUNCTION__, strerror (errno)); set_task_run_status (task, run_status); current_report = (report_t) 0; free (hosts); return -9; break; default: /* Parent. Return, in order to respond to client. */ current_report = (report_t) 0; free (hosts); return 0; break; } set_report_scheduled (current_report); /* Every fail exit from here must reset to this run status, and must * clear current_report. */ /** @todo On fail exits only, may need to honour request states that one of * the other processes has set on the task (stop_task, * request_delete_task). */ /** @todo Also reset status on report, as current_scanner_task is 0 here. */ run_status = TASK_STATUS_INTERNAL_ERROR; /* Reset any running information. */ { char *iface; iface = task_preference_value (task, "source_iface"); if (iface) report_set_source_iface (current_report, iface); else report_set_source_iface (current_report, ""); free (iface); } uuid = report_uuid (current_report); if (slave) { free (hosts); snprintf (title, sizeof (title), "openvasmd: OTP: Handling slave scan %s", uuid); free (uuid); proctitle_set (title); switch (run_slave_task (task, target, ssh_credential, smb_credential, esxi_credential, last_stopped_report)) { case 0: break; case 1: /* Auth failure. */ case -1: /* Error. */ g_warning ("%s: run_slave_task failed", __FUNCTION__); set_task_run_status (task, run_status); set_report_scan_run_status (current_report, run_status); exit (EXIT_FAILURE); } exit (EXIT_SUCCESS); } snprintf (title, sizeof (title), "openvasmd: OTP: Handling scan %s", uuid); free (uuid); proctitle_set (title); report_set_slave_uuid (current_report, ""); report_set_slave_name (current_report, ""); report_set_slave_port (current_report, 0); report_set_slave_host (current_report, ""); /* Send the preferences header. */ if (send_to_server ("CLIENT <|> PREFERENCES <|>\n")) { free (hosts); g_warning ("%s: Failed to send OTP PREFERENCES", __FUNCTION__); set_task_run_status (task, run_status); set_report_scan_run_status (current_report, run_status); current_report = (report_t) 0; return -10; } /* Send the plugin list. */ plugins = nvt_selector_plugins (config); if (plugins) { if (ssh_credential == 0 && smb_credential == 0 && esxi_credential == 0) fail = sendf_to_server ("plugin_set <|> %s\n", plugins); else { GString *auth_plugins = g_string_new (""); if (ssh_credential) g_string_append (auth_plugins, "1.3.6.1.4.1.25623.1.0.90022;"); if (smb_credential) g_string_append (auth_plugins, "1.3.6.1.4.1.25623.1.0.90023;"); if (esxi_credential) g_string_append (auth_plugins, "1.3.6.1.4.1.25623.1.0.105058;"); fail = sendf_to_server ("plugin_set <|> %s%s\n", auth_plugins->str, plugins); g_string_free (auth_plugins, TRUE); } } else fail = send_to_server ("plugin_set <|> 0\n"); free (plugins); if (fail) { free (hosts); g_warning ("%s: Failed to send OTP plugin_set", __FUNCTION__); set_task_run_status (task, run_status); set_report_scan_run_status (current_report, run_status); current_report = (report_t) 0; return -10; } /* Send the scanner and task preferences. */ if (send_config_preferences (config, "SERVER_PREFS", NULL, NULL)) { free (hosts); g_warning ("%s: Failed to send OTP SERVER_PREFS", __FUNCTION__); set_task_run_status (task, run_status); set_report_scan_run_status (current_report, run_status); current_report = (report_t) 0; return -10; } if (send_task_preferences (task)) { free (hosts); g_warning ("%s: Failed to send OTP task preferences", __FUNCTION__); set_task_run_status (task, run_status); set_report_scan_run_status (current_report, run_status); current_report = (report_t) 0; return -10; } /* Send the port range. */ port_range = target_port_range (target); if (sendf_to_server ("port_range <|> %s\n", port_range ? port_range : "default")) { free (port_range); free (hosts); g_warning ("%s: Failed to send OTP port_range", __FUNCTION__); set_task_run_status (task, run_status); set_report_scan_run_status (current_report, run_status); current_report = (report_t) 0; return -10; } free (port_range); /* Send the SSH LSC port. */ port = target_ssh_port (target); if (port && sendf_to_server ("auth_port_ssh <|> %s\n", port)) { free (port); g_warning ("%s: Failed to send OTP auth_port_ssh", __FUNCTION__); set_task_run_status (task, run_status); set_report_scan_run_status (current_report, run_status); current_report = (report_t) 0; return -10; } free (port); /* Collect task files to send. */ files = get_files_to_send (task); /* Send the plugins preferences. */ preference_files = g_ptr_array_new (); if (send_config_preferences (config, "PLUGINS_PREFS", files, preference_files)) { g_ptr_array_free (preference_files, TRUE); slist_free (files); free (hosts); g_warning ("%s: Failed to send OTP PLUGINS_PREFS", __FUNCTION__); set_task_run_status (task, run_status); set_report_scan_run_status (current_report, run_status); current_report = (report_t) 0; return -10; } /* Send network_targets preference. */ if (sendf_to_server ("network_targets <|> %s\n", hosts)) { free (hosts); g_ptr_array_add (preference_files, NULL); array_free (preference_files); slist_free (files); g_warning ("%s: Failed to send OTP network_targets", __FUNCTION__); set_task_run_status (task, run_status); set_report_scan_run_status (current_report, run_status); current_report = (report_t) 0; return -10; } /* Send other scanner preferences. */ if (send_scanner_preferences (task, target, last_stopped_report)) { free (hosts); g_ptr_array_add (preference_files, NULL); array_free (preference_files); slist_free (files); g_warning ("%s: Failed to send OTP scanner preferences", __FUNCTION__); set_task_run_status (task, run_status); set_report_scan_run_status (current_report, run_status); current_report = (report_t) 0; return -10; } /* Send credential preferences if there are credentials linked to target. */ if (ssh_credential) { iterator_t credentials; init_lsc_credential_iterator_one (&credentials, ssh_credential); if (next (&credentials)) { const char *user = lsc_credential_iterator_login (&credentials); const char *password = lsc_credential_iterator_password (&credentials); if (sendf_to_server ("SSH Authorization[entry]:SSH login name:" " <|> %s\n", user ? user : "") || (lsc_credential_iterator_private_key (&credentials) ? sendf_to_server ("SSH Authorization[password]:" "SSH key passphrase:" " <|> %s\n", password ? password : "") : sendf_to_server ("SSH Authorization[password]:" "SSH password (unsafe!):" " <|> %s\n", password ? password : ""))) { fail: free (hosts); cleanup_iterator (&credentials); g_ptr_array_add (preference_files, NULL); array_free (preference_files); slist_free (files); g_warning ("%s: Failed to send OTP SSH preferences", __FUNCTION__); set_task_run_status (task, run_status); set_report_scan_run_status (current_report, run_status); current_report = (report_t) 0; return -10; } if (lsc_credential_iterator_private_key (&credentials)) { char *uuid = openvas_uuid_make (); if (uuid == NULL) goto fail; g_ptr_array_add (preference_files, (gpointer) uuid); g_ptr_array_add (preference_files, (gpointer) g_strdup (lsc_credential_iterator_private_key (&credentials))); if (sendf_to_server ("SSH Authorization[file]:" "SSH private key:" " <|> %s\n", uuid)) goto fail; } } cleanup_iterator (&credentials); } if (smb_credential) { iterator_t credentials; init_lsc_credential_iterator_one (&credentials, smb_credential); if (next (&credentials)) { const char *user = lsc_credential_iterator_login (&credentials); const char *password = lsc_credential_iterator_password (&credentials); if (sendf_to_server ("SMB Authorization[entry]:SMB login: <|> %s\n", user ? user : "") || sendf_to_server ("SMB Authorization[password]:SMB password:" " <|> %s\n", password ? password : "")) { free (hosts); cleanup_iterator (&credentials); g_ptr_array_add (preference_files, NULL); array_free (preference_files); slist_free (files); g_warning ("%s: Failed to send OTP SMB preferences", __FUNCTION__); set_task_run_status (task, run_status); set_report_scan_run_status (current_report, run_status); current_report = (report_t) 0; return -10; } } cleanup_iterator (&credentials); } if (esxi_credential) { iterator_t credentials; init_lsc_credential_iterator_one (&credentials, esxi_credential); if (next (&credentials)) { const char *user = lsc_credential_iterator_login (&credentials); const char *password = lsc_credential_iterator_password (&credentials); if (sendf_to_server ("ESXi Authorization[entry]:ESXi login name:" " <|> %s\n", user ? user : "") || sendf_to_server ("ESXi Authorization[password]:ESXi login password:" " <|> %s\n", password ? password : "")) { free (hosts); cleanup_iterator (&credentials); g_ptr_array_add (preference_files, NULL); array_free (preference_files); slist_free (files); g_warning ("%s: Failed to send OTP ESXi preferences", __FUNCTION__); set_task_run_status (task, run_status); set_report_scan_run_status (current_report, run_status); current_report = (report_t) 0; return -10; } } cleanup_iterator (&credentials); } g_ptr_array_add (preference_files, NULL); /* Send preferences for target "Alive Test", overriding config values. */ if (send_alive_test_preferences (target)) { free (hosts); array_free (preference_files); slist_free (files); g_warning ("%s: Failed to send OTP alive test preferences", __FUNCTION__); set_task_run_status (task, run_status); set_report_scan_run_status (current_report, run_status); current_report = (report_t) 0; return -10; } if (send_to_server ("<|> CLIENT\n")) { free (hosts); array_free (preference_files); slist_free (files); g_warning ("%s: Failed to send OTP CLIENT", __FUNCTION__); set_task_run_status (task, run_status); set_report_scan_run_status (current_report, run_status); current_report = (report_t) 0; return -10; } /* Send any files stored in the config preferences. */ { gchar *file; int index = 0; while ((file = g_ptr_array_index (preference_files, index))) { GSList *head; gchar *value; index++; /* Skip the file if the value of the preference is the name of a * file associated with the task. */ value = g_ptr_array_index (preference_files, index); head = files; while (head) { if (strcmp (head->data, value) == 0) break; head = g_slist_next (head); } if (head == NULL && send_file (file, value)) { free (hosts); array_free (preference_files); slist_free (files); g_warning ("%s: Failed to send an OTP file", __FUNCTION__); set_task_run_status (task, run_status); set_report_scan_run_status (current_report, run_status); current_report = (report_t) 0; return -10; } index++; } array_free (preference_files); } /* Send any files. */ while (files) { GSList *last = files; if (send_task_file (task, files->data)) { free (hosts); slist_free (files); g_warning ("%s: Failed to send an OTP task file", __FUNCTION__); set_task_run_status (task, run_status); set_report_scan_run_status (current_report, run_status); current_report = (report_t) 0; return -10; } files = g_slist_next (files); g_free (last->data); g_slist_free_1 (last); } /* Send the attack command. */ /* Send all the hosts to the Scanner. When resuming a stopped task, * the hosts that have been completely scanned are excluded by being * included in exclude_hosts preference. */ fail = sendf_to_server ("CLIENT <|> LONG_ATTACK <|>\n%d\n%s\n", strlen (hosts), hosts); free (hosts); if (fail) { g_warning ("%s: Failed to send OTP LONG_ATTACK", __FUNCTION__); set_task_run_status (task, run_status); set_report_scan_run_status (current_report, run_status); current_report = (report_t) 0; return -10; } current_scanner_task = task; #if 0 /** @todo This is what the file based tasks did. */ if (task->open_ports) g_array_free (task->open_ports, TRUE); task->open_ports = g_array_new (FALSE, FALSE, (guint) sizeof (port_t)); task->open_ports_size = 0; #endif return 2; } /** * @brief Start a task. * * Use \ref send_to_server to queue the task start sequence in the scanner * output buffer. * * Only one task can run at a time in a process. * * @param[in] task_id The task ID. * @param[out] report_id The report ID. * * @return Before forking: 1 task is active already, 3 failed to find task, * 99 permission denied, -1 internal error, * -2 task is missing a target, -3 creating the report failed, * -4 target missing hosts, -6 already a task running in this process, * -9 fork failed. * After forking: 0 success (parent), 2 success (child), * -10 error (child). */ int start_task (const char *task_id, char **report_id) { if (user_may ("start_task") == 0) return 99; return run_task (task_id, report_id, 0, "start_task"); } /** * @brief Initiate stopping a task. * * Use \ref send_to_server to queue the task stop sequence in the * scanner output buffer. * * @param[in] task Task. * * @return 0 on success, 1 if stop requested, -1 if out of space in scanner * output buffer, -5 scanner down. */ int stop_task_internal (task_t task) { task_status_t run_status; run_status = task_run_status (task); if (run_status == TASK_STATUS_REQUESTED || run_status == TASK_STATUS_RUNNING) { if (current_scanner_task == task) { scanner_t scanner = task_scanner (task); assert (scanner); if (scanner_connect (scanner)) return -5; if (!openvas_scanner_connected () && (openvas_scanner_connect () || openvas_scanner_init (0))) return -5; if (send_to_server ("CLIENT <|> STOP_WHOLE_TEST <|> CLIENT\n")) return -1; } set_task_run_status (task, TASK_STATUS_STOP_REQUESTED); return 1; } else if ((run_status == TASK_STATUS_DELETE_REQUESTED || run_status == TASK_STATUS_DELETE_WAITING || run_status == TASK_STATUS_DELETE_ULTIMATE_REQUESTED || run_status == TASK_STATUS_DELETE_ULTIMATE_WAITING || run_status == TASK_STATUS_STOP_REQUESTED || run_status == TASK_STATUS_STOP_WAITING) && task_slave (task)) { /* A special request from the user to get the task out of a requested * state when contact with the slave is lost. */ set_task_run_status (task, TASK_STATUS_STOP_REQUESTED_GIVEUP); return 1; } return 0; } /** * @brief Initiate stopping a task. * * Use \ref send_to_server to queue the task stop sequence in the * scanner output buffer. * * @param[in] task_id Task UUID. * * @return 0 on success, 1 if stop requested, 3 failed to find task, * 99 permission denied, -1 if out of space in scanner output buffer, * -5 scanner down, 2 if stopping the task is not supported. */ int stop_task (const char *task_id) { task_t task; if (user_may ("stop_task") == 0) return 99; task = 0; if (find_task_with_permission (task_id, &task, "stop_task")) return -1; if (task == 0) return 3; if (config_type (task_config (task)) != 0) return 2; return stop_task_internal (task); } /** * @brief Resume a task. * * @param[in] task_id Task UUID. * @param[out] report_id If successful, ID of the resultant report. * * @return 22 caller error (task must be in "stopped" state), or any * start_task error. */ int resume_task (const char *task_id, char **report_id) { task_t task; task_status_t run_status; if (user_may ("resume_task") == 0) return 99; task = 0; if (find_task_with_permission (task_id, &task, "resume_task")) return -1; if (task == 0) return 3; run_status = task_run_status (task); if (run_status == TASK_STATUS_STOPPED) return run_task (task_id, report_id, 1, "resume_task"); return 22; } /* Scanner messaging. */ /** * @brief Acknowledge a scanner BYE. * * @return 0 on success, -1 if out of space in scanner output buffer. */ int acknowledge_bye () { if (send_to_server ("CLIENT <|> BYE <|> ACK\n")) return -1; return 0; } /** * @brief Acknowledge scanner PLUGINS_FEED_VERSION message, * @brief requesting all plugin info. * * @return 0 on success, -1 if out of space in scanner output buffer. */ int acknowledge_feed_version_info () { if (send_to_server ("CLIENT <|> COMPLETE_LIST <|> CLIENT\n")) return -1; return 0; } /** * @brief Handle state changes to current task made by other processes. * * @return 0 on success, -1 if out of space in scanner output buffer, 1 if * queued to scanner. */ int manage_check_current_task () { if (current_scanner_task) { task_status_t run_status; /* Commit pending transaction if needed. */ manage_transaction_stop (FALSE); /* Check if some other process changed the status. */ run_status = task_run_status (current_scanner_task); switch (run_status) { case TASK_STATUS_STOP_REQUESTED_GIVEUP: /* This should only happen for slave tasks. */ assert (0); case TASK_STATUS_STOP_REQUESTED: if (send_to_server ("CLIENT <|> STOP_WHOLE_TEST <|> CLIENT\n")) return -1; set_task_run_status (current_scanner_task, TASK_STATUS_STOP_WAITING); return 1; break; case TASK_STATUS_DELETE_REQUESTED: if (send_to_server ("CLIENT <|> STOP_WHOLE_TEST <|> CLIENT\n")) return -1; set_task_run_status (current_scanner_task, TASK_STATUS_DELETE_WAITING); return 1; break; case TASK_STATUS_DELETE_ULTIMATE_REQUESTED: if (send_to_server ("CLIENT <|> STOP_WHOLE_TEST <|> CLIENT\n")) return -1; set_task_run_status (current_scanner_task, TASK_STATUS_DELETE_ULTIMATE_WAITING); return 1; break; case TASK_STATUS_DELETE_WAITING: case TASK_STATUS_DELETE_ULTIMATE_WAITING: case TASK_STATUS_DONE: case TASK_STATUS_NEW: case TASK_STATUS_REQUESTED: case TASK_STATUS_RUNNING: case TASK_STATUS_STOP_WAITING: case TASK_STATUS_STOPPED: case TASK_STATUS_INTERNAL_ERROR: break; } } return 0; } /* System reports. */ /** * @brief Get system report types from a slave. * * @param[in] required_type Single type to limit types to. * @param[out] types Types on success. * @param[out] start Actual start of types, which caller must free. * @param[out] slave_id ID of slave. * * @return 0 if successful, 2 failed to find slave, -1 otherwise. */ static int get_slave_system_report_types (const char *required_type, gchar ***start, gchar ***types, const char *slave_id) { slave_t slave = 0; char *host, **end; int port, socket; gnutls_session_t session; entity_t get, report; entities_t reports; if (find_slave (slave_id, &slave)) return -1; if (slave == 0) return 2; host = slave_host (slave); if (host == NULL) return -1; tracef (" %s: host: %s\n", __FUNCTION__, host); port = slave_port (slave); if (port == -1) { free (host); return -1; } socket = openvas_server_open (&session, host, port); free (host); if (socket == -1) return -1; tracef (" %s: connected\n", __FUNCTION__); /* Authenticate using the slave login. */ if (slave_authenticate (&session, slave)) goto fail; tracef (" %s: authenticated\n", __FUNCTION__); if (omp_get_system_reports (&session, required_type, 1, &get)) goto fail; openvas_server_close (socket, session); reports = get->entities; end = *types = *start = g_malloc ((xml_count_entities (reports) + 1) * sizeof (gchar*)); while ((report = first_entity (reports))) { if (strcmp (entity_name (report), "system_report") == 0) { entity_t name, title; gchar *pair; char *name_text, *title_text; name = entity_child (report, "name"); title = entity_child (report, "title"); if (name == NULL || title == NULL) { *end = NULL; g_strfreev (*start); free_entity (get); return -1; } name_text = entity_text (name); title_text = entity_text (title); *end = pair = g_malloc (strlen (name_text) + strlen (title_text) + 2); strcpy (pair, name_text); pair += strlen (name_text) + 1; strcpy (pair, title_text); end++; } reports = next_entities (reports); } *end = NULL; free_entity (get); return 0; fail: openvas_server_close (socket, session); return -1; } /** * @brief Command called by get_system_report_types. */ #define COMMAND "openvasmr 0 titles" /** * @brief Get system report types. * * @param[in] required_type Single type to limit types to. * @param[out] types Types on success. * @param[out] start Actual start of types, which caller must free. * @param[out] slave_id ID of slave. * * @return 0 if successful, 1 failed to find report type, 2 failed to find * slave, 3 serving the fallback, -1 otherwise. */ static int get_system_report_types (const char *required_type, gchar ***start, gchar ***types, const char *slave_id) { gchar *astdout = NULL; gchar *astderr = NULL; GError *err = NULL; gint exit_status; if (slave_id && strcmp (slave_id, "0")) return get_slave_system_report_types (required_type, start, types, slave_id); tracef (" command: " COMMAND); if ((g_spawn_command_line_sync (COMMAND, &astdout, &astderr, &exit_status, &err) == FALSE) || (WIFEXITED (exit_status) == 0) || WEXITSTATUS (exit_status)) { tracef ("%s: openvasmr failed with %d", __FUNCTION__, exit_status); tracef ("%s: stdout: %s", __FUNCTION__, astdout); tracef ("%s: stderr: %s", __FUNCTION__, astderr); g_free (astdout); g_free (astderr); *start = *types = g_malloc0 (sizeof (gchar*) * 2); (*start)[0] = g_strdup ("fallback Fallback Report"); (*start)[0][strlen ("fallback")] = '\0'; return 3; } if (astdout) { char **type; *start = *types = type = g_strsplit (g_strchomp (astdout), "\n", 0); while (*type) { char *space; space = strchr (*type, ' '); if (space == NULL) { g_strfreev (*types); *types = NULL; g_free (astdout); g_free (astderr); return -1; } *space = '\0'; if (required_type && (strcmp (*type, required_type) == 0)) { char **next; /* Found the single given type. */ next = type + 1; while (*next) { free (*next); next++; } next = type + 1; *next = NULL; *types = type; g_free (astdout); g_free (astderr); return 0; } type++; } if (required_type) { /* Failed to find the single given type. */ g_free (astdout); g_free (astderr); g_strfreev (*types); return 1; } } else *start = *types = g_malloc0 (sizeof (gchar*)); g_free (astdout); g_free (astderr); return 0; } #undef COMMAND /** * @brief Initialise a system report type iterator. * * @param[in] iterator Iterator. * @param[in] type Single report type to iterate over, NULL for all. * @param[in] slave_id ID of slave to get reports from. 0 for local. * * @return 0 on success, 1 failed to find report type, 2 failed to find slave, * 3 used the fallback report, 99 permission denied, -1 on error. */ int init_system_report_type_iterator (report_type_iterator_t* iterator, const char* type, const char* slave_id) { int ret; if (user_may ("get_system_reports") == 0) return 99; ret = get_system_report_types (type, &iterator->start, &iterator->current, slave_id); if (ret == 0 || ret == 3) { iterator->current--; return ret; } return ret; } /** * @brief Cleanup a report type iterator. * * @param[in] iterator Iterator. */ void cleanup_report_type_iterator (report_type_iterator_t* iterator) { g_strfreev (iterator->start); } /** * @brief Increment a report type iterator. * * The caller must stop using this after it returns FALSE. * * @param[in] iterator Task iterator. * * @return TRUE if there was a next item, else FALSE. */ gboolean next_report_type (report_type_iterator_t* iterator) { iterator->current++; if (*iterator->current == NULL) return FALSE; return TRUE; } /** * @brief Return the name from a report type iterator. * * @param[in] iterator Iterator. * * @return Name. */ const char* report_type_iterator_name (report_type_iterator_t* iterator) { return (const char*) *iterator->current; } /** * @brief Return the title from a report type iterator. * * @param[in] iterator Iterator. * * @return Title. */ const char* report_type_iterator_title (report_type_iterator_t* iterator) { const char *name = *iterator->current; return name + strlen (name) + 1; } /** * @brief Get a system report from a slave. * * @param[in] name Name of report. * @param[in] duration Time range of report, in seconds. * @param[in] slave_id ID of slave to get report from. 0 for local. * @param[out] report On success, report in base64 if such a report exists * else NULL. Arbitrary on error. * * @return 0 if successful, 2 failed to find slave, -1 otherwise. */ static int slave_system_report (const char *name, const char *duration, const char *slave_id, char **report) { slave_t slave = 0; char *host; int port, socket; gnutls_session_t session; entity_t get, entity; entities_t reports; omp_get_system_reports_opts_t opts; if (find_slave (slave_id, &slave)) return -1; if (slave == 0) return 2; host = slave_host (slave); if (host == NULL) return -1; tracef (" %s: host: %s\n", __FUNCTION__, host); port = slave_port (slave); if (port == -1) { free (host); return -1; } socket = openvas_server_open (&session, host, port); free (host); if (socket == -1) return -1; tracef (" %s: connected\n", __FUNCTION__); /* Authenticate using the slave login. */ if (slave_authenticate (&session, slave)) goto fail; tracef (" %s: authenticated\n", __FUNCTION__); opts = omp_get_system_reports_opts_defaults; opts.name = name; opts.duration = duration; opts.brief = 0; if (omp_get_system_reports_ext (&session, opts, &get)) goto fail; openvas_server_close (socket, session); reports = get->entities; if ((entity = first_entity (reports)) && (strcmp (entity_name (entity), "system_report") == 0)) { entity = entity_child (entity, "report"); if (entity) { *report = g_strdup (entity_text (entity)); return 0; } } free_entity (get); return -1; fail: openvas_server_close (socket, session); return -1; } /** * @brief Header for fallback system report. */ #define FALLBACK_SYSTEM_REPORT_HEADER \ "This is the most basic, fallback report. The system can be configured to\n" \ "produce more powerful reports. Please contact your system administrator\n" \ "for more information.\n\n" /** * @brief Get a system report. * * @param[in] name Name of report. * @param[in] duration Time range of report, in seconds. * @param[in] slave_id ID of slave to get report from. 0 for local. * @param[out] report On success, report in base64 if such a report exists * else NULL. Arbitrary on error. * * @return 0 if successful (including failure to find report), -1 on error, * 3 if used the fallback report. */ int manage_system_report (const char *name, const char *duration, const char *slave_id, char **report) { gchar *astdout = NULL; gchar *astderr = NULL; GError *err = NULL; gint exit_status; gchar *command; assert (name); if (duration == NULL) duration = "86400"; if (slave_id && strcmp (slave_id, "0")) return slave_system_report (name, duration, slave_id, report); /* For simplicity, it's up to the command to do the base64 encoding. */ command = g_strdup_printf ("openvasmr %s %s", duration, name); tracef (" command: %s", command); if ((g_spawn_command_line_sync (command, &astdout, &astderr, &exit_status, &err) == FALSE) || (WIFEXITED (exit_status) == 0) || WEXITSTATUS (exit_status)) { int ret; double load[3]; GError *get_error; gchar *output; gsize output_len; GString *buffer; tracef ("%s: openvasmr failed with %d", __FUNCTION__, exit_status); tracef ("%s: stdout: %s", __FUNCTION__, astdout); tracef ("%s: stderr: %s", __FUNCTION__, astderr); g_free (astdout); g_free (astderr); g_free (command); buffer = g_string_new (FALLBACK_SYSTEM_REPORT_HEADER); ret = getloadavg (load, 3); if (ret == 3) { g_string_append_printf (buffer, "Load average for past minute: %.1f\n", load[0]); g_string_append_printf (buffer, "Load average for past 5 minutes: %.1f\n", load[1]); g_string_append_printf (buffer, "Load average for past 15 minutes: %.1f\n", load[2]); } else g_string_append (buffer, "Error getting load averages.\n"); get_error = NULL; g_file_get_contents ("/proc/meminfo", &output, &output_len, &get_error); if (get_error) g_error_free (get_error); else { gchar *safe; g_string_append (buffer, "\n/proc/meminfo:\n\n"); safe = g_markup_escape_text (output, strlen (output)); g_free (output); g_string_append (buffer, safe); g_free (safe); } *report = g_string_free (buffer, FALSE); return 3; } g_free (astderr); g_free (command); if (astdout == NULL || strlen (astdout) == 0) { g_free (astdout); if (strcmp (name, "blank") == 0) return -1; return manage_system_report ("blank", duration, NULL, report); } else *report = astdout; return 0; } /* Scheduling. */ /** * @brief Flag for manage_auth_allow_all. */ int authenticate_allow_all = 0; /** * @brief UUID of user whose scheduled task is to be started (in connection * with authenticate_allow_all). */ gchar* schedule_user_uuid = 0; /** * @brief Ensure that any subsequent authentications succeed. */ void manage_auth_allow_all () { authenticate_allow_all = 1; } /** * @brief Access UUID of user that scheduled the current task. * * @return UUID of user that scheduled the current task. */ gchar* get_scheduled_user_uuid () { return schedule_user_uuid; } /** * @brief Set UUID of user that scheduled the current task. * * @param user_uuid UUID of user that scheduled the current task. */ void set_scheduled_user_uuid (gchar* user_uuid) { schedule_user_uuid = user_uuid; } /** * @brief Set a task's schedule so that it runs again next scheduling round. * * @param task_id UUID of task. */ void reschedule_task (const gchar *task_id) { task_t task; task = 0; switch (sql_int64 (&task, "SELECT id FROM tasks WHERE uuid = '%s'" " AND hidden != 2;", task_id)) { case 0: g_warning ("%s: rescheduling task '%s'\n", __FUNCTION__, task_id); set_task_schedule_next_time (task, time (NULL) - 1); break; case 1: /* Too few rows in result of query. */ break; default: /* Programming error. */ assert (0); case -1: break; } } /** * @brief Schedule any actions that are due. * * In openvasmd, periodically called from the main daemon loop. * * @param[in] fork_connection Function that forks a child which is connected * to the Manager. Must return PID in parent, 0 * in child, or -1 on error. * @param[in] run_tasks Whether to run scheduled tasks. * @param[in] sigmask_current Sigmask to restore in child. * * @return 0 success, 1 failed to get lock, -1 error. */ int manage_schedule (int (*fork_connection) (int *, gnutls_session_t *, gnutls_certificate_credentials_t *, gchar*, sigset_t*), gboolean run_tasks, sigset_t *sigmask_current) { iterator_t schedules; GSList *starts = NULL, *stops = NULL; int ret; task_t previous_start_task = 0; task_t previous_stop_task = 0; ret = manage_update_nvti_cache (); if (ret) { if (ret == -1) g_warning ("%s: manage_update_nvti_cache error\n", __FUNCTION__); return ret; } if (run_tasks == 0) return 0; /* Assemble "starts" and "stops" list containing task uuid and owner name * for each (scheduled) task to start or stop. */ ret = init_task_schedule_iterator (&schedules); if (ret) { if (ret == -1) g_warning ("%s: iterator init error\n", __FUNCTION__); return ret; } /* This iterator runs in an exclusive transaction, so this loop is atomic. */ while (next (&schedules)) if (task_schedule_iterator_start_due (&schedules)) { time_t period, period_months; /* Update the task schedule info to prevent multiple schedules. */ period = task_schedule_iterator_period (&schedules); period_months = task_schedule_iterator_period_months (&schedules); if (period) { time_t now = time (NULL); time_t first = task_schedule_iterator_first_time (&schedules); time_t duration = task_schedule_iterator_duration (&schedules); assert (first <= now); /* In the database keep the times in UTC... */ set_task_schedule_next_time (task_schedule_iterator_task (&schedules), first + ((((now - first) / period) + 1) * period)); /* ...but for the calculations offset for daylight saving. */ first += task_schedule_iterator_initial_offset (&schedules) - current_offset (task_schedule_iterator_timezone (&schedules)); /* Ensure that the task starts within the duration if it has one. */ if (duration && (((now - first) % period) > duration)) continue; } else if (period_months) { time_t now = time (NULL); time_t first = task_schedule_iterator_first_time (&schedules); time_t duration = task_schedule_iterator_duration (&schedules); assert (first <= now); /* In the database keep the times in UTC... */ set_task_schedule_next_time (task_schedule_iterator_task (&schedules), add_months (first, months_between (first, now) + 1)); /* ...but for the calculations offset for daylight saving. */ first += task_schedule_iterator_initial_offset (&schedules) - current_offset (task_schedule_iterator_timezone (&schedules)); /* Ensure that the task starts within the duration if it has one. */ if (duration && ((now - add_months (first, months_between (first, now))) > duration)) continue; } else set_task_schedule_next_time (task_schedule_iterator_task (&schedules), 0); /* Skip this task if it was already added to the starts list * to avoid conflicts between multiple users with permissions. */ if (previous_start_task == task_schedule_iterator_task (&schedules)) continue; previous_start_task = task_schedule_iterator_task (&schedules); /* Add task UUID and owner name and UUID to the list. */ starts = g_slist_prepend (starts, g_strdup (task_schedule_iterator_task_uuid (&schedules))); starts = g_slist_prepend (starts, g_strdup (task_schedule_iterator_owner_uuid (&schedules))); starts = g_slist_prepend (starts, g_strdup (task_schedule_iterator_owner_name (&schedules))); } else if (task_schedule_iterator_stop_due (&schedules)) { /* Skip this task if it was already added to the stops list * to avoid conflicts between multiple users with permissions. */ if (previous_stop_task == task_schedule_iterator_task (&schedules)) continue; previous_stop_task = task_schedule_iterator_task (&schedules); /* Add task UUID and owner name and UUID to the list. */ stops = g_slist_prepend (stops, g_strdup (task_schedule_iterator_task_uuid (&schedules))); stops = g_slist_prepend (stops, g_strdup (task_schedule_iterator_owner_uuid (&schedules))); stops = g_slist_prepend (stops, g_strdup (task_schedule_iterator_owner_name (&schedules))); } cleanup_task_schedule_iterator (&schedules); /* Start tasks in forked processes, now that the SQL statement is closed. */ while (starts) { int socket, pid; gnutls_session_t session; gnutls_certificate_credentials_t credentials; gchar *task_uuid, *owner, *owner_uuid; GSList *head; owner = starts->data; assert (starts->next); owner_uuid = starts->next->data; assert (starts->next->next); task_uuid = starts->next->next->data; head = starts; starts = starts->next->next->next; g_slist_free_1 (head->next->next); g_slist_free_1 (head->next); g_slist_free_1 (head); /* Fork a child to start the task and wait for the response, so that the * parent can return to the main loop. */ pid = fork (); switch (pid) { case 0: /* Child. Carry on to start the task, reopen the database (required * after fork). */ /* Restore the sigmask that was blanked for pselect. */ pthread_sigmask (SIG_SETMASK, sigmask_current, NULL); reinit_manage_process (); manage_session_init (current_credentials.uuid); while (starts) { g_free (starts->data); starts = g_slist_delete_link (starts, starts); } break; case -1: /* Parent on error. Reschedule and continue to next task. */ g_warning ("%s: fork failed\n", __FUNCTION__); reschedule_task (task_uuid); g_free (task_uuid); g_free (owner); g_free (owner_uuid); continue; default: /* Parent. Continue to next task. */ g_debug ("%s: %i forked %i", __FUNCTION__, getpid (), pid); g_free (task_uuid); g_free (owner); g_free (owner_uuid); continue; } /* Run the callback to fork a child connected to the Manager. */ pid = fork_connection (&socket, &session, &credentials, owner_uuid, sigmask_current); switch (pid) { case 0: /* Child. Break, start task, exit. */ g_free (owner_uuid); break; case -1: /* Parent on error. */ g_warning ("%s: fork_connection failed\n", __FUNCTION__); reschedule_task (task_uuid); g_free (task_uuid); g_free (owner); g_free (owner_uuid); exit (EXIT_FAILURE); default: { int status; /* Parent. Wait for child, to check return. */ g_debug ("%s: %i fork_connectioned %i", __FUNCTION__, getpid (), pid); g_free (owner); g_free (owner_uuid); if (signal (SIGCHLD, SIG_DFL) == SIG_ERR) g_warning ("%s: failed to set SIGCHLD", __FUNCTION__); while (waitpid (pid, &status, 0) < 0) { if (errno == ECHILD) { g_warning ("%s: Failed to get child exit," " so task '%s' may not have been scheduled", __FUNCTION__, task_uuid); g_free (task_uuid); exit (EXIT_FAILURE); } if (errno == EINTR) continue; g_warning ("%s: waitpid: %s", __FUNCTION__, strerror (errno)); g_warning ("%s: As a result, task '%s' may not have been" " scheduled", __FUNCTION__, task_uuid); g_free (task_uuid); exit (EXIT_FAILURE); } if (WIFEXITED (status)) switch (WEXITSTATUS (status)) { case EXIT_SUCCESS: { schedule_t schedule; int periods; /* Child succeeded. */ schedule = task_schedule_uuid (task_uuid); if (schedule && schedule_period (schedule) == 0 && schedule_duration (schedule) == 0 /* Check next time too, in case the user changed * the schedule after this task was added to the * "starts" list. */ && task_schedule_next_time (task_uuid) == 0) /* A once-off schedule without a duration, remove * it from the task. If it has a duration it * will be removed below, after the duration. */ set_task_schedule_uuid (task_uuid, 0, 0); else if ((periods = task_schedule_periods_uuid (task_uuid))) { /* A task restricted to a certain number of * scheduled runs. */ if (periods > 1) { set_task_schedule_periods (task_uuid, periods - 1); } else if (periods == 1 && schedule_duration (schedule) == 0) { /* Last run of a task restricted to a certain * number of scheduled runs. */ set_task_schedule_uuid (task_uuid, 0, 1); } else if (periods == 1) /* Flag that the task has started, for * update_duration_schedule_periods. */ set_task_schedule_next_time_uuid (task_uuid, 0); } } g_free (task_uuid); exit (EXIT_SUCCESS); case EXIT_FAILURE: default: break; } /* Child failed, reset task schedule time and exit. */ g_warning ("%s: child failed\n", __FUNCTION__); reschedule_task (task_uuid); g_free (task_uuid); exit (EXIT_FAILURE); } } /* Start the task. */ if (omp_authenticate (&session, owner, "")) { g_warning ("%s: omp_authenticate failed", __FUNCTION__); g_free (task_uuid); g_free (owner); openvas_server_free (socket, session, credentials); exit (EXIT_FAILURE); } g_free (owner); if (omp_resume_task_report (&session, task_uuid, NULL)) { if (omp_start_task_report (&session, task_uuid, NULL)) { g_warning ("%s: omp_start_task and omp_resume_task failed", __FUNCTION__); g_free (task_uuid); openvas_server_free (socket, session, credentials); exit (EXIT_FAILURE); } } g_free (task_uuid); openvas_server_free (socket, session, credentials); exit (EXIT_SUCCESS); } /* Stop tasks in forked processes, now that the SQL statement is closed. */ while (stops) { int socket; gnutls_session_t session; gnutls_certificate_credentials_t credentials; gchar *task_uuid, *owner, *owner_uuid; GSList *head; owner = stops->data; assert (stops->next); owner_uuid = stops->next->data; assert (stops->next->next); task_uuid = stops->next->next->data; head = stops; stops = stops->next->next->next; g_slist_free_1 (head->next->next); g_slist_free_1 (head->next); g_slist_free_1 (head); /* TODO As with starts above, this should retry if the stop failed. */ /* Run the callback to fork a child connected to the Manager. */ switch (fork_connection (&socket, &session, &credentials, owner_uuid, sigmask_current)) { case 0: /* Child. Break, stop task, exit. */ while (stops) { g_free (stops->data); stops = g_slist_delete_link (stops, stops); } break; case -1: /* Parent on error. */ g_free (task_uuid); g_free (owner); g_free (owner_uuid); while (stops) { g_free (stops->data); stops = g_slist_delete_link (stops, stops); } g_warning ("%s: stop fork failed\n", __FUNCTION__); return -1; break; default: /* Parent. Continue to next task. */ g_free (task_uuid); g_free (owner); g_free (owner_uuid); continue; break; } /* Stop the task. */ if (omp_authenticate (&session, owner, "")) { g_free (task_uuid); g_free (owner); g_free (owner_uuid); openvas_server_free (socket, session, credentials); exit (EXIT_FAILURE); } if (omp_stop_task (&session, task_uuid)) { g_free (task_uuid); g_free (owner); g_free (owner_uuid); openvas_server_free (socket, session, credentials); exit (EXIT_FAILURE); } g_free (task_uuid); g_free (owner); g_free (owner_uuid); openvas_server_free (socket, session, credentials); exit (EXIT_SUCCESS); } clear_duration_schedules (0); update_duration_schedule_periods (0); auto_delete_reports (); return 0; } /* Report formats. */ /** * @brief Get the name of a report format param type. * * @param[in] type Param type. * * @return The name of the param type. */ const char * report_format_param_type_name (report_format_param_type_t type) { switch (type) { case REPORT_FORMAT_PARAM_TYPE_BOOLEAN: return "boolean"; case REPORT_FORMAT_PARAM_TYPE_INTEGER: return "integer"; case REPORT_FORMAT_PARAM_TYPE_SELECTION: return "selection"; case REPORT_FORMAT_PARAM_TYPE_STRING: return "string"; case REPORT_FORMAT_PARAM_TYPE_TEXT: return "text"; default: assert (0); case REPORT_FORMAT_PARAM_TYPE_ERROR: return "ERROR"; } } /** * @brief Get a report format param type from a name. * * @param[in] name Param type name. * * @return The param type. */ report_format_param_type_t report_format_param_type_from_name (const char *name) { if (strcmp (name, "boolean") == 0) return REPORT_FORMAT_PARAM_TYPE_BOOLEAN; if (strcmp (name, "integer") == 0) return REPORT_FORMAT_PARAM_TYPE_INTEGER; if (strcmp (name, "selection") == 0) return REPORT_FORMAT_PARAM_TYPE_SELECTION; if (strcmp (name, "string") == 0) return REPORT_FORMAT_PARAM_TYPE_STRING; if (strcmp (name, "text") == 0) return REPORT_FORMAT_PARAM_TYPE_TEXT; return REPORT_FORMAT_PARAM_TYPE_ERROR; } /** * @brief Return whether a name is a backup file name. * * @return 0 if normal file name, 1 if backup file name. */ static int backup_file_name (const char *name) { int length = strlen (name); if (length && (name[length - 1] == '~')) return 1; if ((length > 3) && (name[length - 4] == '.')) return ((name[length - 3] == 'b') && (name[length - 2] == 'a') && (name[length - 1] == 'k')) || ((name[length - 3] == 'B') && (name[length - 2] == 'A') && (name[length - 1] == 'K')) || ((name[length - 3] == 'C') && (name[length - 2] == 'K') && (name[length - 1] == 'P')); return 0; } /** * @brief Get files associated with a report format. * * @param[in] dir_name Location of files. * @param[out] start Files on success. * * @return 0 if successful, -1 otherwise. */ static int get_report_format_files (const char *dir_name, GPtrArray **start) { GPtrArray *files; struct dirent **names; int n, index; char *locale; files = g_ptr_array_new (); locale = setlocale (LC_ALL, "C"); n = scandir (dir_name, &names, NULL, alphasort); setlocale (LC_ALL, locale); if (n < 0) { g_warning ("%s: failed to open dir %s: %s\n", __FUNCTION__, dir_name, strerror (errno)); return -1; } for (index = 0; index < n; index++) { if (strcmp (names[index]->d_name, ".") && strcmp (names[index]->d_name, "..") && (backup_file_name (names[index]->d_name) == 0)) g_ptr_array_add (files, g_strdup (names[index]->d_name)); free (names[index]); } free (names); g_ptr_array_add (files, NULL); *start = files; return 0; } /** * @brief Initialise a report format file iterator. * * @param[in] iterator Iterator. * @param[in] report_format Single report format to iterate over, NULL for * all. * * @return 0 on success, -1 on error. */ int init_report_format_file_iterator (file_iterator_t* iterator, report_format_t report_format) { gchar *dir_name, *uuid; uuid = report_format_uuid (report_format); if (uuid == NULL) return -1; if (report_format_global (report_format)) dir_name = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "global_report_formats", uuid, NULL); else { gchar *owner_uuid; owner_uuid = report_format_owner_uuid (report_format); if (owner_uuid == NULL) return -1; dir_name = g_build_filename (OPENVAS_STATE_DIR, "openvasmd", "report_formats", owner_uuid, uuid, NULL); g_free (owner_uuid); } g_free (uuid); if (get_report_format_files (dir_name, &iterator->start)) { g_free (dir_name); return -1; } iterator->current = iterator->start->pdata; iterator->current--; iterator->dir_name = dir_name; return 0; } /** * @brief Cleanup a report type iterator. * * @param[in] iterator Iterator. */ void cleanup_file_iterator (file_iterator_t* iterator) { array_free (iterator->start); g_free (iterator->dir_name); } /** * @brief Increment a report type iterator. * * The caller must stop using this after it returns FALSE. * * @param[in] iterator Task iterator. * * @return TRUE if there was a next item, else FALSE. */ gboolean next_file (file_iterator_t* iterator) { iterator->current++; if (*iterator->current == NULL) return FALSE; return TRUE; } /** * @brief Return the name from a file iterator. * * @param[in] iterator Iterator. * * @return File name. */ const char* file_iterator_name (file_iterator_t* iterator) { return (const char*) *iterator->current; } /** * @brief Return the file contents from a file iterator. * * @param[in] iterator Iterator. * * @return Freshly allocated file contents, in base64. */ gchar* file_iterator_content_64 (file_iterator_t* iterator) { gchar *path_name, *content; GError *error; gsize content_size; path_name = g_build_filename (iterator->dir_name, (gchar*) *iterator->current, NULL); /* Read in the contents. */ error = NULL; if (g_file_get_contents (path_name, &content, &content_size, &error) == FALSE) { if (error) { g_debug ("%s: failed to read %s: %s", __FUNCTION__, path_name, error->message); g_error_free (error); } g_free (path_name); return NULL; } g_free (path_name); /* Base64 encode the contents. */ if (content && (content_size > 0)) { gchar *base64 = g_base64_encode ((guchar*) content, content_size); g_free (content); return base64; } return content; } /* Scanner Tags. */ /** * @brief Split up the tags received from the scanner. * * @param[in] scanner_tags The tags sent by the scanner. * @param[out] tags Tags. * @param[out] cvss_base CVSS base. * @param[out] risk_factor Risk factor. */ void parse_tags (const char *scanner_tags, gchar **tags, gchar **cvss_base, gchar **risk_factor) { gchar **split, **point; GString *tags_buffer; gboolean first; tags_buffer = g_string_new (""); split = g_strsplit (scanner_tags, "|", 0); point = split; *cvss_base = NULL; *risk_factor = NULL; first = TRUE; while (*point) { if (strncmp (*point, "cvss_base=", strlen ("cvss_base=")) == 0) { /* Skip this tag. */ } else if (strncmp (*point, "cvss_base_vector=", strlen ("cvss_base_vector=")) == 0) { if (*cvss_base == NULL) *cvss_base = g_strdup_printf ("%.1f", get_cvss_score_from_base_metrics (*point + strlen ("cvss_base_vector="))); if (first) first = FALSE; else g_string_append_c (tags_buffer, '|'); g_string_append (tags_buffer, *point); } else if (strncmp (*point, "risk_factor=", strlen ("risk_factor=")) == 0) { if (*risk_factor == NULL) *risk_factor = g_strdup (*point + strlen ("risk_factor=")); } else { if (first) first = FALSE; else g_string_append_c (tags_buffer, '|'); g_string_append (tags_buffer, *point); } point++; } if (tags_buffer->len == 0) { g_string_free (tags_buffer, TRUE); *tags = g_strdup ("NOTAG"); } else *tags = g_string_free (tags_buffer, FALSE); g_strfreev (split); } /* Slaves. */ /** * @brief Delete a task on a slave. * * @param[in] slave The slave. * @param[in] slave_task_uuid UUID of task on slave. * * @return 0 success, -1 error. */ int delete_slave_task (slave_t slave, const char *slave_task_uuid) { int socket; gnutls_session_t session; char *host; int port; entity_t get_tasks, get_targets, entity, task, credential, port_list; const char *slave_config_uuid, *slave_target_uuid, *slave_port_list_uuid; const char *slave_ssh_credential_uuid, *slave_smb_credential_uuid; omp_delete_opts_t del_opts = omp_delete_opts_ultimate_defaults; assert (slave); /* Connect to the slave. */ host = slave_host (slave); if (host == NULL) return -1; tracef (" %s: host: %s\n", __FUNCTION__, host); port = slave_port (slave); if (port == -1) { free (host); return -1; } socket = openvas_server_open (&session, host, port); free (host); if (socket == -1) return -1; tracef (" %s: connected\n", __FUNCTION__); /* Authenticate using the slave login. */ if (slave_authenticate (&session, slave)) goto fail; tracef (" %s: authenticated\n", __FUNCTION__); /* Get the UUIDs of the slave resources. */ if (omp_get_tasks (&session, slave_task_uuid, 0, 0, &get_tasks)) goto fail; task = entity_child (get_tasks, "task"); if (task == NULL) goto fail_free_task; entity = entity_child (task, "config"); if (entity == NULL) goto fail_free_task; slave_config_uuid = entity_attribute (entity, "id"); entity = entity_child (task, "target"); if (entity == NULL) goto fail_free_task; slave_target_uuid = entity_attribute (entity, "id"); if (omp_get_targets (&session, slave_target_uuid, 0, 0, &get_targets)) goto fail_free_task; entity = entity_child (get_targets, "target"); if (entity == NULL) goto fail_free; port_list = entity_child (entity, "port_list"); if (port_list == NULL) goto fail_free; slave_port_list_uuid = entity_attribute (port_list, "id"); credential = entity_child (entity, "ssh_lsc_credential"); if (credential == NULL) goto fail_free; slave_ssh_credential_uuid = entity_attribute (credential, "id"); credential = entity_child (entity, "smb_lsc_credential"); if (credential == NULL) goto fail_free; slave_smb_credential_uuid = entity_attribute (credential, "id"); /* Remove the slave resources. */ omp_stop_task (&session, slave_task_uuid); if (omp_delete_task_ext (&session, slave_task_uuid, del_opts)) goto fail_config; if (omp_delete_config_ext (&session, slave_config_uuid, del_opts)) goto fail_target; if (omp_delete_target_ext (&session, slave_target_uuid, del_opts)) goto fail_credential; if (omp_delete_port_list_ext (&session, slave_port_list_uuid, del_opts)) goto fail_credential; if (omp_delete_lsc_credential_ext (&session, slave_smb_credential_uuid, del_opts)) goto fail; if (omp_delete_lsc_credential_ext (&session, slave_ssh_credential_uuid, del_opts)) goto fail; /* Cleanup. */ free_entity (get_targets); free_entity (get_tasks); openvas_server_close (socket, session); return 0; fail_config: omp_delete_config_ext (&session, slave_config_uuid, del_opts); fail_target: omp_delete_target_ext (&session, slave_target_uuid, del_opts); omp_delete_port_list_ext (&session, slave_port_list_uuid, del_opts); fail_credential: omp_delete_lsc_credential_ext (&session, slave_smb_credential_uuid, del_opts); omp_delete_lsc_credential_ext (&session, slave_ssh_credential_uuid, del_opts); fail_free: free_entity (get_targets); fail_free_task: free_entity (get_tasks); fail: openvas_server_close (socket, session); return -1; } /** * @brief Return the path to the CPE dictionary. * * @return A dynamically allocated string (to be g_free'd) containing the * path to the desired file. */ static char * get_cpe_filename () { return g_strdup (CPE_DICT_FILENAME); } /** * @brief Compute the filename where a given CVE can be found. * * @param[in] item_id Full CVE identifier ("CVE-YYYY-ZZZZ"). * * @return A dynamically allocated string (to be g_free'd) containing the * path to the desired file or NULL on error. */ static char * get_cve_filename (char *item_id) { int year; if (sscanf (item_id, "%*3s-%d-%*d", &year) == 1) { /* CVEs before 2002 are stored in the 2002 file. */ if (year <= 2002) year = 2002; return g_strdup_printf (CVE_FILENAME_FMT, year); } return NULL; } /** * @brief Get the filename where a given OVAL definition can be found. * * @param[in] item_id Full OVAL identifier with file suffix. * * @return A dynamically allocated string (to be g_free'd) containing the * path to the desired file or NULL on error. */ static char * get_ovaldef_filename (char *item_id) { char *result, *short_filename; result = NULL; short_filename = get_ovaldef_short_filename (item_id); if (*short_filename) { result = g_strdup_printf ("%s/%s", SCAP_DATA_DIR, short_filename); } free (short_filename); return result; } /** * @brief Compute the filename where a given CERT-Bund Advisory can be found. * * @param[in] item_id CERT-Bund identifier without version ("CB-K??/????"). * * @return A dynamically allocated string (to be g_free'd) containing the * path to the desired file or NULL on error. */ static char * get_cert_bund_adv_filename (char *item_id) { int year; if (sscanf (item_id, "CB-K%d-%*s", &year) == 1) { return g_strdup_printf (CERT_BUND_ADV_FILENAME_FMT, year); } return NULL; } /** * @brief Compute the filename where a given DFN-CERT Advisory can be found. * * @param[in] item_id Full DFN-CERT identifier ("DFN-CERT-YYYY-ZZZZ"). * * @return A dynamically allocated string (to be g_free'd) containing the * path to the desired file or NULL on error. */ static char * get_dfn_cert_adv_filename (char *item_id) { int year; if (sscanf (item_id, "DFN-CERT-%d-%*s", &year) == 1) { return g_strdup_printf (DFN_CERT_ADV_FILENAME_FMT, year); } return NULL; } /** * @brief Run xsltproc in an external process. * * @param[in] stylesheet XSL stylesheet to use. * @param[in] xmlfile XML file to process. * @param[in] param_names NULL terminated array of stringparam names (can * be NULL). * @param[in] param_values NULL terminated array of stringparam values (can * be NULL). * * @return A dynamically allocated (to be g_free'd) string containing the * result of the operation of NULL on failure. */ gchar * xsl_transform (gchar *stylesheet, gchar *xmlfile, gchar **param_names, gchar **param_values) { int i, param_idx; gchar **cmd, *cmd_full; gint exit_status; gboolean success; gchar *standard_out = NULL, *standard_err = NULL; param_idx = 0; if (param_names && param_values) while (param_names[param_idx] && param_values[param_idx]) param_idx++; cmd = (gchar **)g_malloc ((4 + param_idx * 3) * sizeof (gchar *)); i = 0; cmd[i++] = "xsltproc"; if (param_idx) { int j; for (j = 0; j < param_idx; j++) { cmd[i++] = "--stringparam"; cmd[i++] = param_names[j]; cmd[i++] = param_values[j]; } } cmd[i++] = stylesheet; cmd[i++] = xmlfile; cmd[i] = NULL; /* DEBUG: display the final command line. */ cmd_full = g_strjoinv (" ", cmd); g_debug ("%s: Spawning in parent dir: %s\n", __FUNCTION__, cmd_full); g_free (cmd_full); /* --- */ if ((g_spawn_sync (NULL, cmd, NULL, /* Environment. */ G_SPAWN_SEARCH_PATH, NULL, /* Setup function. */ NULL, &standard_out, &standard_err, &exit_status, NULL) == FALSE) || (WIFEXITED (exit_status) == 0) || WEXITSTATUS (exit_status)) { g_debug ("%s: failed to transform the xml: %d (WIF %i, WEX %i)", __FUNCTION__, exit_status, WIFEXITED (exit_status), WEXITSTATUS (exit_status)); g_debug ("%s: stderr: %s\n", __FUNCTION__, standard_err); g_debug ("%s: stdout: %s\n", __FUNCTION__, standard_out); success = FALSE; } else if (strlen (standard_out) == 0) success = FALSE; /* execution succeeded but nothing was found */ else success = TRUE; /* execution succeeded and we have a result */ /* Cleanup. */ g_free (cmd); g_free (standard_err); if (success) return standard_out; g_free (standard_out); return NULL; } /** * @brief Return the name of a category. * * @param category The number of the category. * * @return The name of the category. */ static const char* category_name (int category) { static const char *categories[] = { ACT_STRING_LIST_ALL }; if (category >= ACT_FIRST && category <= ACT_END) { return categories[category]; } return categories[ACT_UNKNOWN]; } /** * @brief Define a code snippet for get_nvti_xml. * * @param x Prefix for names in snippet. */ #define DEF(x) \ const char* x = nvt_iterator_ ## x (nvts); \ gchar* x ## _text = x \ ? g_markup_escape_text (x, -1) \ : g_strdup (""); /** * @brief Create and return XML description for an NVT. * * @param[in] nvts The NVT. * @param[in] details If true, detailed XML, else simple XML. * @param[in] pref_count Preference count. Used if details is true. * @param[in] preferences If true, included preferences. * @param[in] timeout Timeout. Used if details is true. * @param[in] config Config, used if preferences is true. * @param[in] close_tag Whether to close the NVT tag or not. * * @return A dynamically allocated string containing the XML description. */ gchar * get_nvti_xml (iterator_t *nvts, int details, int pref_count, int preferences, const char *timeout, config_t config, int close_tag) { const char* oid = nvt_iterator_oid (nvts); const char* name = nvt_iterator_name (nvts); gchar* msg; gchar* name_text = g_markup_escape_text (name, strlen (name)); if (details) { GString *cert_refs_str, *tags_str, *buffer; iterator_t cert_refs_iterator, tags; gchar *tag_name_esc, *tag_value_esc, *tag_comment_esc; #ifndef S_SPLINT_S DEF (copyright); DEF (summary); DEF (family); DEF (version); DEF (xref); DEF (tag); #endif /* not S_SPLINT_S */ #undef DEF cert_refs_str = g_string_new (""); if (manage_cert_loaded()) { init_nvt_cert_bund_adv_iterator (&cert_refs_iterator, oid, 0, 0); while (next (&cert_refs_iterator)) { g_string_append_printf (cert_refs_str, "", get_iterator_name (&cert_refs_iterator)); } cleanup_iterator (&cert_refs_iterator); init_nvt_dfn_cert_adv_iterator (&cert_refs_iterator, oid, 0, 0); while (next (&cert_refs_iterator)) { g_string_append_printf (cert_refs_str, "", get_iterator_name (&cert_refs_iterator)); } cleanup_iterator (&cert_refs_iterator); } else { g_string_append (cert_refs_str, "database not available"); } tags_str = g_string_new (""); g_string_append_printf (tags_str, "%i", resource_tag_count ("nvt", get_iterator_resource (nvts), 1)); init_resource_tag_iterator (&tags, "nvt", get_iterator_resource (nvts), 1, NULL, 1); while (next (&tags)) { tag_name_esc = g_markup_escape_text (resource_tag_iterator_name (&tags), -1); tag_value_esc = g_markup_escape_text (resource_tag_iterator_value (&tags), -1); tag_comment_esc = g_markup_escape_text (resource_tag_iterator_comment (&tags), -1); g_string_append_printf (tags_str, "" "%s" "%s" "%s" "", resource_tag_iterator_uuid (&tags), tag_name_esc, tag_value_esc, tag_comment_esc); g_free (tag_name_esc); g_free (tag_value_esc); g_free (tag_comment_esc); } cleanup_iterator (&tags); buffer = g_string_new (""); g_string_append_printf (buffer, "" "%s" "%s" "%s" "%s" "%s" "%s" "%s" "%s" "%s" "%s" "" "%s" "%s" "" "%s" "%s" "%s" "%s" "%s" "%i" "%s", oid, name_text, get_iterator_creation_time (nvts) ? get_iterator_creation_time (nvts) : "", get_iterator_modification_time (nvts) ? get_iterator_modification_time (nvts) : "", tags_str->str, category_name (nvt_iterator_category (nvts)), copyright_text, summary_text, family_text, version_text, nvt_iterator_cvss_base (nvts) ? nvt_iterator_cvss_base (nvts) : "", nvt_iterator_qod (nvts), nvt_iterator_qod_type (nvts), nvt_iterator_cve (nvts), nvt_iterator_bid (nvts), cert_refs_str->str, xref_text, tag_text, pref_count, timeout ? timeout : ""); g_free (copyright_text); g_free (summary_text); g_free (family_text); g_free (version_text); g_free (xref_text); g_free (tag_text); g_string_free(cert_refs_str, 1); g_string_free(tags_str, 1); if (preferences) { iterator_t prefs; const char *nvt_name = nvt_iterator_name (nvts); /* Send the preferences for the NVT. */ xml_string_append (buffer, "" "%s", timeout ? timeout : ""); init_nvt_preference_iterator (&prefs, nvt_name); while (next (&prefs)) buffer_config_preference_xml (buffer, &prefs, config, 1); cleanup_iterator (&prefs); xml_string_append (buffer, ""); } xml_string_append (buffer, close_tag ? "" : ""); msg = g_string_free (buffer, FALSE); } else msg = g_strdup_printf ("%s" "%i%s", oid, name_text, resource_tag_count ("nvt", get_iterator_resource (nvts), 1), close_tag ? "" : ""); g_free (name_text); return msg; } /** * @brief GET SCAP update time, as a string. * * @return Last update time as a static string, or "" on error. */ const char * manage_scap_update_time () { gchar *content; GError *error; gsize content_size; struct tm update_time; /* Read in the contents. */ error = NULL; if (g_file_get_contents (SCAP_TIMESTAMP_FILENAME, &content, &content_size, &error) == FALSE) { if (error) { g_debug ("%s: failed to read %s: %s", __FUNCTION__, SCAP_TIMESTAMP_FILENAME, error->message); g_error_free (error); } return ""; } memset (&update_time, 0, sizeof (struct tm)); if (strptime (content, "%Y%m%d%H%M", &update_time)) { static char time_string[100]; strftime (time_string, 99, "%FT%T.000%z", &update_time); return time_string; } return ""; } /** * @brief Read raw information. * * @param[in] type Type of the requested information. * @param[in] uid Unique identifier of the requested information * @param[in] name Name or identifier of the requested information. * @param[out] result Pointer to the read information location. Will point * to NULL on error. * * @return 1 success, -1 error. */ int manage_read_info (gchar *type, gchar *uid, gchar *name, gchar **result) { gchar *fname; gchar *pnames[2] = { "refname", NULL }; gchar *pvalues[2] = { name, NULL }; assert (result != NULL); *result = NULL; if (g_ascii_strcasecmp ("CPE", type) == 0) { fname = get_cpe_filename (); if (fname) { gchar *cpe; cpe = xsl_transform (CPE_GETBYNAME_XSL, fname, pnames, pvalues); g_free (fname); if (cpe) *result = cpe; } } else if (g_ascii_strcasecmp ("CVE", type) == 0) { fname = get_cve_filename (uid); if (fname) { gchar *cve; cve = xsl_transform (CVE_GETBYNAME_XSL, fname, pnames, pvalues); g_free (fname); if (cve) *result = cve; } } else if (g_ascii_strcasecmp ("NVT", type) == 0) { iterator_t nvts; nvt_t nvt; if (!find_nvt (name ? name : uid, &nvt) && nvt) { init_nvt_iterator (&nvts, nvt, 0, NULL, NULL, 0, NULL); if (next (&nvts)) *result = get_nvti_xml (&nvts, 1, /* Include details. */ 0, /* Preference count. */ 1, /* Include preferences. */ NULL, /* Timeout. */ 0, /* Config. */ 1); /* Close tag. */ cleanup_iterator (&nvts); } } else if (g_ascii_strcasecmp ("OVALDEF", type) == 0) { fname = get_ovaldef_filename (uid); if (fname) { gchar *ovaldef; ovaldef = xsl_transform (OVALDEF_GETBYNAME_XSL, fname, pnames, pvalues); g_free (fname); if (ovaldef) *result = ovaldef; } } else if (g_ascii_strcasecmp ("CERT_BUND_ADV", type) == 0) { fname = get_cert_bund_adv_filename (uid); if (fname) { gchar *adv; adv = xsl_transform (CERT_BUND_ADV_GETBYNAME_XSL, fname, pnames, pvalues); g_free (fname); if (adv) *result = adv; } } else if (g_ascii_strcasecmp ("DFN_CERT_ADV", type) == 0) { fname = get_dfn_cert_adv_filename (uid); if (fname) { gchar *adv; adv = xsl_transform (DFN_CERT_ADV_GETBYNAME_XSL, fname, pnames, pvalues); g_free (fname); if (adv) *result = adv; } } if (*result == NULL) return -1; return 1; } /* Users. */ /** * @brief Produce a stripped-down xml representation of a keyfile. * * For * @code * [first group] * # this comment will be lost * weather=good * example=bad * [empty group] * @endcode * the output will look like * @code * * * * * * * @endcode * * @param[in] filename Keyfile to read. * * @return NULL in case of any error, otherwise xml representation of keyfile * (free with g_free). */ gchar * keyfile_to_auth_conf_settings_xml (const gchar * filename) { GKeyFile *key_file = g_key_file_new (); GString *response = NULL; gchar **groups = NULL; gchar **group = NULL; if (g_key_file_load_from_file (key_file, filename, G_KEY_FILE_NONE, NULL) == FALSE) { g_key_file_free (key_file); return NULL; } response = g_string_new (""); groups = g_key_file_get_groups (key_file, NULL); group = groups; while (*group != NULL) { gchar **keys = g_key_file_get_keys (key_file, *group, NULL, NULL); gchar **key = keys; g_string_append_printf (response, "\n", *group); while (*key != NULL) { gchar *value = g_key_file_get_value (key_file, *group, *key, NULL); if (value) g_string_append_printf (response, "", *key, value); g_free (value); key++; } g_strfreev (keys); g_string_append (response, ""); group++; } g_strfreev (groups); g_key_file_free (key_file); return g_string_free (response, FALSE); } /** * * @brief Validates a username. * * @param[in] name The name. * * @return 0 if the username is valid, 1 if not. */ int validate_username (const gchar * name) { if (g_regex_match_simple ("^[[:alnum:]-_.]+$", name, 0, 0)) return 0; else return 1; } /* Feeds. */ /** * @brief Request a feed synchronization script selftest. * * Ask a feed synchronization script to perform a selftest and report * the results. * * @param[in] sync_script The file name of the synchronization script. * @param[out] result Return location for selftest errors, or NULL. * * @return TRUE if the selftest was successful, or FALSE if an error occured. */ gboolean openvas_sync_script_perform_selftest (const gchar * sync_script, gchar ** result) { g_assert (sync_script); g_assert_cmpstr (*result, ==, NULL); gchar *script_working_dir = g_path_get_dirname (sync_script); gchar **argv = (gchar **) g_malloc (3 * sizeof (gchar *)); argv[0] = g_strdup (sync_script); argv[1] = g_strdup ("--selftest"); argv[2] = NULL; gchar *script_out; gchar *script_err; gint script_exit; GError *error = NULL; if (!g_spawn_sync (script_working_dir, argv, NULL, 0, NULL, NULL, &script_out, &script_err, &script_exit, &error)) { if (*result != NULL) { *result = g_strdup_printf ("Failed to execute synchronization " "script: %s", error->message); } g_free (script_working_dir); g_strfreev (argv); g_free (script_out); g_free (script_err); g_error_free (error); return FALSE; } if (script_exit != 0) { if (script_err != NULL) { *result = g_strdup_printf ("%s", script_err); } g_free (script_working_dir); g_strfreev (argv); g_free (script_out); g_free (script_err); return FALSE; } g_free (script_working_dir); g_strfreev (argv); g_free (script_out); g_free (script_err); return TRUE; } /** * @brief Retrieves the ID string of a feed sync script, with basic validation. * * @param[in] sync_script The file name of the synchronization script. * @param[out] identification Return location of the identification string. * @param[in] feed_type Could be NVT_FEED, SCAP_FEED or CERT_FEED. * * @return TRUE if the identification string was retrieved, or FALSE if an * error occured. */ gboolean openvas_get_sync_script_identification (const gchar * sync_script, gchar ** identification, int feed_type) { g_assert (sync_script); if (identification) g_assert_cmpstr (*identification, ==, NULL); gchar *script_working_dir = g_path_get_dirname (sync_script); gchar **argv = (gchar **) g_malloc (3 * sizeof (gchar *)); argv[0] = g_strdup (sync_script); argv[1] = g_strdup ("--identify"); argv[2] = NULL; gchar *script_out; gchar *script_err; gint script_exit; GError *error = NULL; gchar **script_identification; if (!g_spawn_sync (script_working_dir, argv, NULL, 0, NULL, NULL, &script_out, &script_err, &script_exit, &error)) { g_warning ("Failed to execute %s: %s", sync_script, error->message); g_free (script_working_dir); g_strfreev (argv); g_free (script_out); g_free (script_err); g_error_free (error); return FALSE; } if (script_exit != 0) { g_warning ("%s returned a non-zero exit code.", sync_script); g_free (script_working_dir); g_strfreev (argv); g_free (script_out); g_free (script_err); return FALSE; } script_identification = g_strsplit (script_out, "|", 6); if ((script_identification[0] == NULL) || (feed_type == NVT_FEED && g_ascii_strncasecmp (script_identification[0],"NVTSYNC",7)) || (feed_type == SCAP_FEED && g_ascii_strncasecmp (script_identification[0],"SCAPSYNC",7)) || (feed_type == CERT_FEED && g_ascii_strncasecmp (script_identification[0],"CERTSYNC",7)) || g_ascii_strncasecmp (script_identification[0], script_identification[5], 7)) { g_warning ("%s is not a NVT synchronization script.", sync_script); g_free (script_working_dir); g_strfreev (argv); g_free (script_out); g_free (script_err); g_strfreev (script_identification); return FALSE; } if (identification) *identification = g_strdup (script_out); g_free (script_working_dir); g_strfreev (argv); g_free (script_out); g_free (script_err); g_strfreev (script_identification); return TRUE; } /** * @brief Retrieves description of a feed sync script, with basic validation. * * @param[in] sync_script The file name of the synchronization script. * @param[out] description Return location of the description string. * * @return TRUE if the description was retrieved, or FALSE if an error * occured. */ gboolean openvas_get_sync_script_description (const gchar * sync_script, gchar ** description) { g_assert (sync_script); g_assert_cmpstr (*description, ==, NULL); gchar *script_working_dir = g_path_get_dirname (sync_script); gchar **argv = (gchar **) g_malloc (3 * sizeof (gchar *)); argv[0] = g_strdup (sync_script); argv[1] = g_strdup ("--describe"); argv[2] = NULL; gchar *script_out; gchar *script_err; gint script_exit; GError *error = NULL; if (!g_spawn_sync (script_working_dir, argv, NULL, 0, NULL, NULL, &script_out, &script_err, &script_exit, &error)) { g_warning ("Failed to execute %s: %s", sync_script, error->message); g_free (script_working_dir); g_strfreev (argv); g_free (script_out); g_free (script_err); g_error_free (error); return FALSE; } if (script_exit != 0) { g_warning ("%s returned a non-zero exit code.", sync_script); g_free (script_working_dir); g_strfreev (argv); g_free (script_out); g_free (script_err); return FALSE; } *description = g_strdup (script_out); g_free (script_working_dir); g_strfreev (argv); g_free (script_out); g_free (script_err); return TRUE; } /** * @brief Retrieves the version of a feed handled by the sync, with basic * validation. * * @param[in] sync_script The file name of the synchronization script. * @param[out] feed_version Return location of the feed version string. * * @return TRUE if the feed version was retrieved, or FALSE if an error * occured. */ gboolean openvas_get_sync_script_feed_version (const gchar * sync_script, gchar ** feed_version) { g_assert (sync_script); g_assert_cmpstr (*feed_version, ==, NULL); gchar *script_working_dir = g_path_get_dirname (sync_script); gchar **argv = (gchar **) g_malloc (3 * sizeof (gchar *)); argv[0] = g_strdup (sync_script); argv[1] = g_strdup ("--feedversion"); argv[2] = NULL; gchar *script_out; gchar *script_err; gint script_exit; GError *error = NULL; if (!g_spawn_sync (script_working_dir, argv, NULL, 0, NULL, NULL, &script_out, &script_err, &script_exit, &error)) { g_warning ("Failed to execute %s: %s", sync_script, error->message); g_free (script_working_dir); g_strfreev (argv); g_free (script_out); g_free (script_err); g_error_free (error); return FALSE; } if (script_exit != 0) { g_warning ("%s returned a non-zero exit code.", sync_script); g_free (script_working_dir); g_strfreev (argv); g_free (script_out); g_free (script_err); return FALSE; } *feed_version = g_strdup (script_out); g_free (script_working_dir); g_strfreev (argv); g_free (script_out); g_free (script_err); return TRUE; } /** * @brief Forks a child to synchronize the local feed collection. * * The forked process calls a sync script to sync the feed. * * @param[in] sync_script The file name of the synchronization script. * @param[in] current_user The user currently authenticated. * @param[in] feed_type Could be NVT_FEED, SCAP_FEED or CERT_FEED. * * @return 0 sync requested (parent), 1 sync already in progress (parent), * -1 error (parent), 2 sync complete (child), 11 sync in progress * (child), -10 error (child), 99 permission denied. */ int openvas_sync_feed (const gchar * sync_script, const gchar * current_user, int feed_type) { int fd, ret = 2; gchar *lockfile_name, *lockfile_dirname; gchar *script_identification_string = NULL; pid_t pid; mode_t old_mask; g_assert (sync_script); g_assert (current_user); if (user_may (feed_type == NVT_FEED ? "sync_feed" : (feed_type == SCAP_FEED) ? "sync_scap" : "sync_cert") == 0) return 99; if (!openvas_get_sync_script_identification (sync_script, &script_identification_string, feed_type)) { g_warning ("No valid synchronization script supplied!"); return -1; } /* Open the lock file. */ lockfile_name = g_build_filename (g_get_tmp_dir (), "openvas-feed-sync", sync_script, NULL); lockfile_dirname = g_path_get_dirname (lockfile_name); old_mask = umask (0); if (g_mkdir_with_parents (lockfile_dirname, /* "-rwxrwxrwx" */ S_IRWXU | S_IRWXG | S_IRWXO)) { umask (old_mask); g_warning ("Failed to create lock dir '%s': %s", lockfile_dirname, strerror (errno)); g_free (lockfile_name); g_free (lockfile_dirname); return -1; } umask (old_mask); g_free (lockfile_dirname); fd = open (lockfile_name, O_RDWR | O_CREAT | O_EXCL, S_IWUSR | S_IRUSR | S_IROTH | S_IRGRP /* "-rw-r--r--" */ ); if (fd == -1) { if (errno == EEXIST) return 1; g_warning ("Failed to open lock file '%s': %s", lockfile_name, strerror (errno)); g_free (lockfile_name); return -1; } /* Close and remove the lock file around the fork. Another process may get * the lock here, in which case the child will simply fail to get the * lock. */ if (close (fd)) { g_free (lockfile_name); g_warning ("Failed to close lock file: %s", strerror (errno)); return -1; } if (unlink (lockfile_name)) { g_free (lockfile_name); g_warning ("Failed to remove lock file: %s", strerror (errno)); return -1; } /* Setup SIGCHLD for waiting. */ /* RATS: ignore, this is SIG_DFL damnit. */ if (signal (SIGCHLD, SIG_DFL) == SIG_ERR) { g_warning ("Failed to set SIG_DFL"); return -1; } /* Fork a child to run the sync while the parent responds to * the client. */ pid = fork (); switch (pid) { case 0: /* Child. Carry on to sync. */ break; case -1: /* Parent when error. */ g_warning ("%s: failed to fork sync child: %s\n", __FUNCTION__, strerror (errno)); return -1; break; default: /* Parent. Return in order to respond to client. */ return 0; break; } /* Open the lock file. */ fd = open (lockfile_name, O_RDWR | O_CREAT | O_EXCL, S_IWUSR | S_IRUSR | S_IROTH | S_IRGRP /* "-rw-r--r--" */ ); if (fd == -1) { if (errno == EEXIST) return 11; g_warning ("Failed to open lock file '%s' (child): %s", lockfile_name, strerror (errno)); g_free (lockfile_name); return -10; } /* Write the current time and user to the lock file. */ { const char *output; int count, left; time_t now; time (&now); output = ctime (&now); left = strlen (output); while (1) { count = write (fd, output, left); if (count < 0) { if (errno == EINTR || errno == EAGAIN) continue; g_warning ("%s: write: %s", __FUNCTION__, strerror (errno)); goto exit; } if (count == left) break; left -= count; output += count; } output = current_user; left = strlen (output); while (1) { count = write (fd, output, left); if (count < 0) { if (errno == EINTR || errno == EAGAIN) continue; g_warning ("%s: write: %s", __FUNCTION__, strerror (errno)); goto exit; } if (count == left) break; left -= count; output += count; } while (1) { count = write (fd, "\n", 1); if (count < 0) { if (errno == EINTR || errno == EAGAIN) continue; g_warning ("%s: write: %s", __FUNCTION__, strerror (errno)); goto exit; } if (count == 1) break; } } /* Fork a child to be the sync process. */ pid = fork (); switch (pid) { case 0: { /* Child. Become the sync process. */ if (freopen ("/tmp/openvasad_sync_out", "w", stdout) == NULL) { g_warning ("Failed to reopen stdout: %s", strerror (errno)); exit (EXIT_FAILURE); } if (freopen ("/tmp/openvasad_sync_err", "w", stderr) == NULL) { g_warning ("Failed to reopen stderr: %s", strerror (errno)); exit (EXIT_FAILURE); } if (execl (sync_script, sync_script, (char *) NULL)) { g_warning ("Failed to execl %s: %s", sync_script, strerror (errno)); exit (EXIT_FAILURE); } /*@notreached@ */ exit (EXIT_FAILURE); } case -1: /* Parent when error. */ g_warning ("%s: failed to fork syncer: %s\n", __FUNCTION__, strerror (errno)); ret = -1; goto exit; break; default: { int status; /* Parent on success. Wait for child, and handle result. */ while (wait (&status) < 0) { if (errno == ECHILD) { g_warning ("Failed to get child exit status"); ret = -10; goto exit; } if (errno == EINTR) continue; g_warning ("wait: %s", strerror (errno)); ret = -10; goto exit; } if (WIFEXITED (status)) switch (WEXITSTATUS (status)) { case EXIT_SUCCESS: break; case EXIT_FAILURE: default: g_warning ("Error during synchronization."); ret = -10; break; } else { g_message ("Error during synchronization."); ret = -10; } break; } } exit: /* Close the lock file. */ if (close (fd)) { g_free (lockfile_name); g_warning ("Failed to close lock file (child): %s", strerror (errno)); return -10; } /* Remove the lock file. */ if (unlink (lockfile_name)) { g_free (lockfile_name); g_warning ("Failed to remove lock file (child): %s", strerror (errno)); return -10; } g_free (lockfile_name); return ret; } /** * @brief Migrates SCAP or CERT database, waiting until migration terminates. * * Calls a sync script to migrate the SCAP or CERT database. * * @param[in] sync_script The file name of the synchronization script. * @param[in] feed_type Could be SCAP_FEED or CERT_FEED. * * @return 0 sync complete, 1 sync already in progress, -1 error */ int openvas_migrate_secinfo (const gchar * sync_script, int feed_type) { int fd, ret = 0; gchar *lockfile_name, *lockfile_dirname; pid_t pid; mode_t old_mask; g_assert (sync_script); if (feed_type != SCAP_FEED && feed_type != CERT_FEED) { g_warning ("Unsupported feed_type!"); return -1; } if (!openvas_get_sync_script_identification (sync_script, NULL, feed_type)) { g_warning ("No valid synchronization script supplied!"); return -1; } /* Open the lock file. */ lockfile_name = g_build_filename (g_get_tmp_dir (), "openvas-feed-sync", sync_script, NULL); lockfile_dirname = g_path_get_dirname (lockfile_name); old_mask = umask (0); if (g_mkdir_with_parents (lockfile_dirname, /* "-rwxrwxrwx" */ S_IRWXU | S_IRWXG | S_IRWXO)) { umask (old_mask); g_warning ("Failed to create lock dir '%s': %s", lockfile_dirname, strerror (errno)); g_free (lockfile_name); g_free (lockfile_dirname); return -1; } umask (old_mask); g_free (lockfile_dirname); fd = open (lockfile_name, O_RDWR | O_CREAT | O_EXCL, S_IWUSR | S_IRUSR | S_IROTH | S_IRGRP /* "-rw-r--r--" */ ); if (fd == -1) { if (errno == EEXIST) return 1; g_warning ("Failed to open lock file '%s': %s", lockfile_name, strerror (errno)); g_free (lockfile_name); return -1; } /* Write the current time and user to the lock file. */ { const char *output; int count, left; time_t now; time (&now); output = ctime (&now); left = strlen (output); while (1) { count = write (fd, output, left); if (count < 0) { if (errno == EINTR || errno == EAGAIN) continue; g_warning ("%s: write: %s", __FUNCTION__, strerror (errno)); goto exit; } if (count == left) break; left -= count; output += count; } output = ""; // user name left = strlen (output); while (1) { count = write (fd, output, left); if (count < 0) { if (errno == EINTR || errno == EAGAIN) continue; g_warning ("%s: write: %s", __FUNCTION__, strerror (errno)); goto exit; } if (count == left) break; left -= count; output += count; } while (1) { count = write (fd, "\n", 1); if (count < 0) { if (errno == EINTR || errno == EAGAIN) continue; g_warning ("%s: write: %s", __FUNCTION__, strerror (errno)); goto exit; } if (count == 1) break; } } /* Fork a child to be the sync process. */ pid = fork (); switch (pid) { case 0: { /* Child. Become the sync process. */ if (freopen ("/tmp/openvasad_sync_out", "w", stdout) == NULL) { g_warning ("Failed to reopen stdout: %s", strerror (errno)); exit (EXIT_FAILURE); } if (freopen ("/tmp/openvasad_sync_err", "w", stderr) == NULL) { g_warning ("Failed to reopen stderr: %s", strerror (errno)); exit (EXIT_FAILURE); } if (execl (sync_script, sync_script, "--migrate", (char *) NULL)) { g_warning ("Failed to execl %s: %s", sync_script, strerror (errno)); exit (EXIT_FAILURE); } /*@notreached@ */ exit (EXIT_FAILURE); } case -1: /* Parent when error. */ g_warning ("%s: failed to fork syncer: %s\n", __FUNCTION__, strerror (errno)); ret = -1; goto exit; break; default: { int status; /* Parent on success. Wait for child, and handle result. */ while (wait (&status) < 0) { if (errno == ECHILD) { g_warning ("Failed to get child exit status"); ret = -1; goto exit; } if (errno == EINTR) continue; g_warning ("wait: %s", strerror (errno)); ret = -1; goto exit; } if (WIFEXITED (status)) switch (WEXITSTATUS (status)) { case EXIT_SUCCESS: break; case EXIT_FAILURE: default: g_warning ("Error during SecInfo migration."); ret = -1; break; } else { g_message ("Error during SecInfo migration."); ret = -1; } break; } } exit: /* Close the lock file. */ if (close (fd)) { g_free (lockfile_name); g_warning ("Failed to close lock file: %s", strerror (errno)); return -1; } /* Remove the lock file. */ if (unlink (lockfile_name)) { g_free (lockfile_name); g_warning ("Failed to remove lock file: %s", strerror (errno)); return -1; } g_free (lockfile_name); return ret; } /** * @brief Determine if the administrator is synchronizing with a feed. * * @param[in] sync_script The file name of the synchronization script. * @param[out] timestamp Newly allocated time that sync started, if syncing. * @param[out] user Newly allocated user who started sync, if syncing. * * @return 0 success, 1 success when sync in progress, -1 error. */ int openvas_current_sync (const gchar * sync_script, gchar ** timestamp, gchar ** user) { gchar *lockfile_name, *content, **lines; GError *error = NULL; g_assert (sync_script); lockfile_name = g_build_filename (g_get_tmp_dir (), "openvas-feed-sync", sync_script, NULL); if (!g_file_get_contents (lockfile_name, &content, NULL, &error)) { if (g_error_matches (error, G_FILE_ERROR, G_FILE_ERROR_NOENT) || g_error_matches (error, G_FILE_ERROR, G_FILE_ERROR_ACCES)) { g_error_free (error); g_free (lockfile_name); return 0; } g_warning ("%s: %s", __FUNCTION__, error->message); g_error_free (error); g_free (lockfile_name); return -1; } lines = g_strsplit (content, "\n", 2); g_free (content); if (lines[0] && lines[1]) { *timestamp = g_strdup (lines[0]); *user = g_strdup (lines[1]); g_free (lockfile_name); g_strfreev (lines); return 1; } g_free (lockfile_name); g_strfreev (lines); return -1; } /* Wizards. */ /** * @brief Run a wizard. * * @param[in] name Wizard name. * @param[in] run_command Function to run OMP command. * @param[in] run_command_data Argument for run_command. * @param[in] params Wizard params. Array of name_value_t. * @param[in] read_only Whether to only allow wizards marked as * read only. * @param[in] mode Name of the mode to run the wizard in. * @param[out] command_error Address for error message from failed command * when return is 4, or NULL. * @param[out] ret_response Address for response string of last command. * * @return 0 success, 1 name error, 2 process forked to run task, -10 process * forked to run task where task start failed, -2 to_scanner buffer * full, 4 command in wizard failed, 5 wizard not read only, * 6 Parameter validation failed, -1 internal error, * 99 permission denied. */ int manage_run_wizard (const gchar *name, int (*run_command) (void*, gchar*, gchar**), void *run_command_data, array_t *params, int read_only, const char *mode, gchar **command_error, gchar **ret_response) { gchar *file, *file_name, *response, *wizard; gsize wizard_len; GError *get_error; entity_t entity, mode_entity, params_entity, read_only_entity; entity_t param_def, step; entities_t modes, steps, param_defs; int ret, forked; const gchar *point; forked = 0; if (user_may ("run_wizard") == 0) return 99; if (command_error) *command_error = NULL; point = name; while (*point && (isalnum (*point) || *point == '_')) point++; if (*point) return 1; /* Read wizard from file. */ file_name = g_strdup_printf ("%s.xml", name); file = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "wizards", file_name, NULL); g_free (file_name); get_error = NULL; g_file_get_contents (file, &wizard, &wizard_len, &get_error); g_free (file); if (get_error) { g_warning ("%s: Failed to read wizard: %s\n", __FUNCTION__, get_error->message); g_error_free (get_error); return -1; } /* Parse wizard. */ entity = NULL; if (parse_entity (wizard, &entity)) { g_warning ("%s: Failed to parse wizard\n", __FUNCTION__); g_free (wizard); return -1; } g_free (wizard); /* Select mode */ if (mode && strcmp (mode, "")) { modes = entity->entities; int mode_found = 0; while (mode_found == 0 && (mode_entity = first_entity (modes))) { if (strcasecmp (entity_name (mode_entity), "mode") == 0) { entity_t name_entity; name_entity = entity_child (mode_entity, "name"); if (strcmp (entity_text (name_entity), mode) == 0) mode_found = 1; } modes = next_entities (modes); } if (mode_found == 0) { free_entity (entity); *ret_response = g_strdup (""); if (forked) return 3; else return 0; } } else { mode_entity = entity; } /* If needed, check if wizard is marked as read only. * This does not check the actual commands. */ if (read_only) { read_only_entity = entity_child (mode_entity, "read_only"); if (read_only_entity == NULL) { free_entity (entity); return 5; } } /* Check params */ params_entity = entity_child (mode_entity, "params"); if (params_entity) param_defs = params_entity->entities; while (params_entity && (param_def = first_entity (param_defs))) { if (strcasecmp (entity_name (param_def), "param") == 0) { entity_t name_entity, regex_entity, optional_entity; const char *name, *regex; int optional; int param_found = 0; name_entity = entity_child (param_def, "name"); if ((name_entity == NULL) || (strcmp (entity_text (name_entity), "") == 0)) { g_warning ("%s: Wizard PARAM missing NAME\n", __FUNCTION__); free_entity (entity); return -1; } else name = entity_text (name_entity); regex_entity = entity_child (param_def, "regex"); if ((regex_entity == NULL) || (strcmp (entity_text (regex_entity), "") == 0)) { g_warning ("%s: Wizard PARAM missing REGEX\n", __FUNCTION__); free_entity (entity); return -1; } else regex = entity_text (regex_entity); optional_entity = entity_child (param_def, "optional"); optional = (optional_entity && strcmp (entity_text (optional_entity), "") && strcmp (entity_text (optional_entity), "0")); if (params) { guint index = params->len; while (index--) { name_value_t *pair; pair = (name_value_t*) g_ptr_array_index (params, index); if (pair == NULL) continue; if ((pair->name) && (pair->value) && (strcmp (pair->name, name) == 0)) { index = 0; // end loop; param_found = 1; if (g_regex_match_simple (regex, pair->value, 0, 0) == 0) { *command_error = g_strdup_printf ("Value '%s' is not valid for" " parameter '%s'.", pair->value, name); free_entity (entity); return 6; } } } } if (optional == 0 && param_found == 0) { *command_error = g_strdup_printf ("Mandatory wizard param '%s'" " missing", name); free_entity (entity); return 6; } } param_defs = next_entities (param_defs); } /* Run each step of the wizard. */ response = NULL; steps = mode_entity->entities; while ((step = first_entity (steps))) { if (strcasecmp (entity_name (step), "step") == 0) { entity_t command; gchar *omp; int xsl_fd, xml_fd; char xsl_file_name[] = "/tmp/openvasmd-xsl-XXXXXX"; FILE *xsl_file, *xml_file; char xml_file_name[] = "/tmp/openvasmd-xml-XXXXXX"; /* Get the command element. */ command = entity_child (step, "command"); if (command == NULL) { g_warning ("%s: Wizard STEP missing COMMAND\n", __FUNCTION__); free_entity (entity); g_free (response); return -1; } /* Save the command XSL from the element to a file. */ xsl_fd = mkstemp (xsl_file_name); if (xsl_fd == -1) { g_warning ("%s: Wizard XSL file create failed\n", __FUNCTION__); free_entity (entity); g_free (response); return -1; } xsl_file = fdopen (xsl_fd, "w"); if (xsl_file == NULL) { g_warning ("%s: Wizard XSL file open failed\n", __FUNCTION__); close (xsl_fd); free_entity (entity); g_free (response); return -1; } if (first_entity (command->entities)) print_entity (xsl_file, first_entity (command->entities)); /* Write the params as XML to a file. */ xml_fd = mkstemp (xml_file_name); if (xml_fd == -1) { g_warning ("%s: Wizard XML file create failed\n", __FUNCTION__); fclose (xsl_file); unlink (xsl_file_name); free_entity (entity); g_free (response); return -1; } xml_file = fdopen (xml_fd, "w"); if (xml_file == NULL) { g_warning ("%s: Wizard XML file open failed\n", __FUNCTION__); fclose (xsl_file); unlink (xsl_file_name); close (xml_fd); free_entity (entity); g_free (response); return -1; } if (fprintf (xml_file, "") < 0) { fclose (xsl_file); unlink (xsl_file_name); fclose (xml_file); free_entity (entity); g_warning ("%s: Wizard failed to write XML\n", __FUNCTION__); g_free (response); return -1; } if (params) { guint index = params->len; while (index--) { name_value_t *pair; gchar *pair_name, *pair_value; pair = (name_value_t*) g_ptr_array_index (params, index); if (pair == NULL) continue; pair_name = pair->name ? g_markup_escape_text (pair->name, strlen (pair->name)) : g_strdup (""); pair_value = pair->value ? g_markup_escape_text (pair->value, strlen (pair->value)) : g_strdup (""); if (fprintf (xml_file, "" "%s" "%s" "", pair_name, pair_value) < 0) { g_free (pair_name); g_free (pair_value); fclose (xsl_file); unlink (xsl_file_name); fclose (xml_file); unlink (xml_file_name); free_entity (entity); g_warning ("%s: Wizard failed to write XML\n", __FUNCTION__); g_free (response); return -1; } g_free (pair_name); g_free (pair_value); } } if (fprintf (xml_file, "" "" "%s" "" "\n", response ? response : "") < 0) { fclose (xsl_file); unlink (xsl_file_name); fclose (xml_file); unlink (xml_file_name); free_entity (entity); g_warning ("%s: Wizard failed to write XML\n", __FUNCTION__); g_free (response); return -1; } fflush (xml_file); /* Combine XSL and XML to get the OMP command. */ omp = xsl_transform (xsl_file_name, xml_file_name, NULL, NULL); fclose (xsl_file); unlink (xsl_file_name); fclose (xml_file); unlink (xml_file_name); if (omp == NULL) { g_warning ("%s: Wizard XSL transform failed\n", __FUNCTION__); free_entity (entity); g_free (response); return -1; } /* Run the OMP command. */ g_free (response); response = NULL; ret = run_command (run_command_data, omp, &response); if (ret == 3) { /* Parent after a start_task fork. */ forked = 1; } else if (ret == 0) { /* Command succeeded. */ } else if (ret == 2) { /* Process forked to run a task. */ free_entity (entity); g_free (response); return 2; } else if (ret == -10) { /* Process forked to run a task. Task start failed. */ free_entity (entity); g_free (response); return -10; } else if (ret == -2) { /* to_scanner buffer full. */ free_entity (entity); g_free (response); return -2; } else { free_entity (entity); g_free (response); return -1; } /* Exit if the command failed. */ if (response) { const char *status; entity_t response_entity; response_entity = NULL; if (parse_entity (response, &response_entity)) { g_warning ("%s: Wizard failed to parse response\n", __FUNCTION__); free_entity (entity); g_free (response); return -1; } status = entity_attribute (response_entity, "status"); if ((status == NULL) || (strlen (status) == 0) || (status[0] != '2')) { tracef ("response was %s\n", response); if (command_error) { const char *text; text = entity_attribute (response_entity, "status_text"); if (text) *command_error = g_strdup (text); } free_entity (response_entity); free_entity (entity); g_free (response); return 4; } free_entity (response_entity); } } steps = next_entities (steps); } *ret_response = g_strdup (response); free_entity (entity); g_free (response); /* All the steps succeeded. */ if (forked) return 3; return 0; } openvas-manager-6.0.9/src/omp.c000644 001751 001751 00004117337 12757560563 017447 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Module for OpenVAS Manager: the OMP library. * * Authors: * Matthew Mundell * Timo Pollmeier * * Copyright: * Copyright (C) 2009-2013 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ /** * @file omp.c * @brief The OpenVAS Manager OMP library. * * This file defines an OpenVAS Management Protocol (OMP) library, for * implementing OpenVAS managers such as the OpenVAS Manager daemon. * * The library provides \ref process_omp_client_input. * This function parses a given string of OMP XML and tracks and manipulates * tasks in reaction to the OMP commands in the string. */ /** * @internal * The OMP-"Processor" is always in a state (\ref client_state_t * \ref client_state ) and currently looking at the opening of an OMP element * (\ref omp_xml_handle_start_element ), at the text of an OMP element * (\ref omp_xml_handle_text ) or at the closing of an OMP element * (\ref omp_xml_handle_end_element ). * * The state usually represents the current location of the parser within the * XML (OMP) tree. There has to be one state for every OMP element. * * State transitions occur in the start and end element handler callbacks. * * Generally, the strategy is to wait until the closing of an element before * doing any action or sending a response. Also, error cases are to be detected * in the end element handler. * * If data has to be stored, it goes to \ref command_data (_t) , which is a * union. * More specific incarnations of this union are e.g. \ref create_user_data (_t) * , where the data to create a new user is stored (until the end element of * that command is reached). * * For implementing new commands that have to store data (e.g. not * "\"), \ref command_data has to be freed and NULL'ed in case * of errors and the \ref current_state has to be reset. * It can then be assumed that it is NULL'ed at the start of every new * command element. To implement a new start element handler, be sure to just * copy an existing case and keep its structure. * * Attributes are easier to implement than elements. * E.g. * @code * * @endcode * is obviously easier to handle than * @code * v * @endcode * . * For this reason the GET commands like GET_TASKS all use attributes only. * * However, for the other commands it is preferred to avoid attributes and use * the text of elements * instead, like in * @code * kv * @endcode * . * * If new elements are built of multiple words, separate the words with an * underscore. */ #include "omp.h" #include "manage.h" #include "manage_sql.h" /** @todo For access to scanner_t scanner. */ #include "otp.h" #include "tracef.h" #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #ifdef S_SPLINT_S #include "splint.h" #endif #undef G_LOG_DOMAIN /** * @brief GLib log domain. */ #define G_LOG_DOMAIN "md omp" /** * @brief GLib log domain. */ #define APPLY_OVERRIDES_DEFAULT 0 /* Static headers. */ /** @todo Exported for manage_sql.c. */ void buffer_results_xml (GString *, iterator_t *, task_t, int, int, int, int, int, int, int, const char *, iterator_t *, int); static void buffer_xml_append_printf (GString*, const char*, ...); /* Helper functions. */ /** * @brief Check whether a string is a UUID. * * @param[in] uuid Potential UUID. * * @return 1 yes, 0 no. */ static int is_uuid (const char *uuid) { while (*uuid) if (isxdigit (*uuid) || (*uuid == '-')) uuid++; else return 0; return 1; } /** * @brief Return time defined by broken down time strings. * * If any argument is NULL, use the value from the current time. * * @param[in] hour Hour (0 to 23). * @param[in] minute Minute (0 to 59). * @param[in] day_of_month Day of month (1 to 31). * @param[in] month Month (1 to 12). * @param[in] year Year. * @param[in] timezone Timezone. * * @return Time described by arguments on success, -2 if failed to switch to * timezone, -1 on error. */ static time_t time_from_strings (const char *hour, const char *minute, const char *day_of_month, const char *month, const char *year, const char *timezone) { struct tm given_broken, *now_broken; time_t now, ret; gchar *tz; tz = NULL; if (timezone) { /* Store current TZ. */ tz = getenv ("TZ") ? g_strdup (getenv ("TZ")) : NULL; if (setenv ("TZ", timezone, 1) == -1) { g_free (tz); return -2; } tzset (); } time (&now); now_broken = localtime (&now); given_broken.tm_sec = 0; given_broken.tm_min = (minute ? atoi (minute) : now_broken->tm_min); given_broken.tm_hour = (hour ? atoi (hour) : now_broken->tm_hour); given_broken.tm_mday = (day_of_month ? atoi (day_of_month) : now_broken->tm_mday); given_broken.tm_mon = (month ? (atoi (month) - 1) : now_broken->tm_mon); given_broken.tm_year = (year ? (atoi (year) - 1900) : now_broken->tm_year); given_broken.tm_isdst = now_broken->tm_isdst; ret = mktime (&given_broken); if (timezone) { /* Revert to stored TZ. */ if (tz) setenv ("TZ", tz, 1); else unsetenv ("TZ"); g_free (tz); tzset (); } return ret; } /** * @brief Return interval defined by time and unit strings. * * @param[in] value Value. * @param[in] unit Calendar unit: second, minute, hour, day, week, * month, year or decade. "second" if NULL. * @param[out] months Months return. * * @return Interval described by arguments on success, -2 if value was NULL, * -1 if value was NULL. */ static time_t interval_from_strings (const char *value, const char *unit, time_t *months) { if (value == NULL) return -1; if ((unit == NULL) || (strcasecmp (unit, "second") == 0)) { long int val; val = strtol (value, NULL, 10); if ((val >= INT_MAX) || (val < 0)) return -3; return val; } if (strcasecmp (unit, "minute") == 0) { long int val; val = strtol (value, NULL, 10); if ((val >= (INT_MAX / 60)) || (val < 0)) return -3; return val * 60; } if (strcasecmp (unit, "hour") == 0) { long int val; val = strtol (value, NULL, 10); if ((val >= (INT_MAX / (60 * 60))) || (val < 0)) return -3; return val * 60 * 60; } if (strcasecmp (unit, "day") == 0) { long int val; val = strtol (value, NULL, 10); if ((val >= (INT_MAX / (60 * 60 * 24))) || (val < 0)) return -3; return val * 60 * 60 * 24; } if (strcasecmp (unit, "week") == 0) { long int val; val = strtol (value, NULL, 10); if ((val >= (INT_MAX / (60 * 60 * 24 * 7))) || (val < 0)) return -3; return val * 60 * 60 * 24 * 7; } if (months) { if (strcasecmp (unit, "month") == 0) { *months = atoi (value); if ((*months >= INT_MAX) || (*months < 0)) return -3; return 0; } if (strcasecmp (unit, "year") == 0) { *months = atoi (value); if ((*months >= (INT_MAX / 12)) || (*months < 0)) return -3; *months = *months * 12; return 0; } if (strcasecmp (unit, "decade") == 0) { *months = atoi (value); if ((*months >= (INT_MAX / (12 * 10))) || (*months < 0)) return -3; *months = *months * 12 * 10; return 0; } } return -2; } /** * @brief Find an attribute in a parser callback list of attributes. * * @param[in] attribute_names List of names. * @param[in] attribute_values List of values. * @param[in] attribute_name Name of sought attribute. * @param[out] attribute_value Attribute value return. * * @return 1 if found, else 0. */ int find_attribute (const gchar **attribute_names, const gchar **attribute_values, const char *attribute_name, const gchar **attribute_value) { while (*attribute_names && *attribute_values) if (strcmp (*attribute_names, attribute_name)) attribute_names++, attribute_values++; else { *attribute_value = *attribute_values; return 1; } return 0; } /** * @brief Find an attribute in a parser callback list of attributes and append * @brief it to a string using openvas_append_string. * * @param[in] attribute_names List of names. * @param[in] attribute_values List of values. * @param[in] attribute_name Name of sought attribute. * @param[out] string String to append attribute value to, if * found. * * @return 1 if found and appended, else 0. */ int append_attribute (const gchar **attribute_names, const gchar **attribute_values, const char *attribute_name, gchar **string) { const gchar* attribute; if (find_attribute (attribute_names, attribute_values, attribute_name, &attribute)) { openvas_append_string (string, attribute); return 1; } return 0; } /** * @brief A simple key/value-pair. */ typedef struct { gchar *key; ///< The key. gchar *value; ///< The value. } auth_conf_setting_t; /** * @brief Forms a authentication configuration key/value-pair from xml element. * * Parameters fit glibs xml_start_element callback data. * * Expected input is generated from an element like: * @code @endcode * * @param[in] element_name Name of current element. * @param[in] attribute_names Attribute names. * @param[in] attribute_values Attribute names. * * @return 0 if input is not generated from a auth_conf_setting xml element as * expected, pointer to freshly allocated auth_conf_setting_t that * owns it key and value string otherwise. */ static auth_conf_setting_t * auth_conf_setting_from_xml (const gchar * element_name, const gchar ** attribute_names, const gchar ** attribute_values) { auth_conf_setting_t *kvp = NULL; if (strcasecmp (element_name, "auth_conf_setting") == 0) { const gchar *key_attr; const gchar *val_attr; if (find_attribute (attribute_names, attribute_values, "key", &key_attr) && find_attribute (attribute_names, attribute_values, "value", &val_attr)) { kvp = g_malloc0 (sizeof (auth_conf_setting_t)); kvp->key = g_strdup (key_attr); kvp->value = g_strdup (val_attr); } } return kvp; } /** * @brief Init for a GET handler. * * @param[in] command OMP command name. * @param[in] get GET data. * @param[in] setting_name Type name for setting. * @param[out] first First result, from filter. * * @return 0 success, -1 error. */ int init_get (gchar *command, get_data_t * get, const gchar *setting_name, int *first) { gchar *filter, *replacement; if (user_may (command) == 0) return 99; /* Get any replacement out of get->filter, before it changes. Used to add * task_id to the filter for GET_REPORTS. */ if (get->filter_replace && strlen (get->filter_replace) && get->filter) replacement = filter_term_value (get->filter, get->filter_replace); else replacement = NULL; /* Switch to the default filter from the setting, if required. */ if (get->filt_id && strcmp (get->filt_id, "-2") == 0) { char *user_filter = setting_filter (setting_name); if (user_filter && strlen (user_filter)) { get->filt_id = user_filter; get->filter = filter_term (user_filter); } else { free (user_filter); get->filt_id = g_strdup ("0"); } } /* Get the actual filter string. */ if (get->filt_id && strcmp (get->filt_id, "0")) { filter = filter_term (get->filt_id); if (filter == NULL) { char *user_filter; /* Probably the user deleted the filter, switch to default. */ g_free (get->filt_id); user_filter = setting_filter (setting_name); if (user_filter && strlen (user_filter)) { get->filt_id = user_filter; get->filter = filter_term (user_filter); filter = filter_term (get->filt_id); } else get->filt_id = g_strdup ("0"); } } else filter = NULL; if (replacement) { const gchar *term; /* Replace the term in filter. Used to add task_id to the filter * for GET_REPORTS. */ term = filter ? filter : get->filter; if (term) { gchar *new_filter, *clean; clean = manage_clean_filter_remove (term, get->filter_replace); new_filter = g_strdup_printf ("%s=%s %s", get->filter_replace, replacement, clean); g_free (clean); if (get->filter) { g_free (get->filter); get->filter = new_filter; } else { g_free (filter); filter = new_filter; } get->filter_replacement = g_strdup (new_filter); } g_free (replacement); } /* Get the value of "first" from the filter string. * * This is used by get_next when the result set is empty, to determine if * the query should be rerun with first 1. */ manage_filter_controls (filter ? filter : get->filter, first, NULL, NULL, NULL); g_free (filter); return 0; } /* Status codes. */ /* HTTP status codes used: * * 200 OK * 201 Created * 202 Accepted * 400 Bad request * 401 Must auth * 404 Missing */ /** * @brief Response code for a syntax error. */ #define STATUS_ERROR_SYNTAX "400" /** * @brief Response code when authorisation is required. */ #define STATUS_ERROR_MUST_AUTH "401" /** * @brief Response code when authorisation is required. */ #define STATUS_ERROR_MUST_AUTH_TEXT "Authenticate first" /** * @brief Response code for forbidden access. */ #define STATUS_ERROR_ACCESS "403" /** * @brief Response code text for forbidden access. */ #define STATUS_ERROR_ACCESS_TEXT "Access to resource forbidden" /** * @brief Response code for a missing resource. */ #define STATUS_ERROR_MISSING "404" /** * @brief Response code text for a missing resource. */ #define STATUS_ERROR_MISSING_TEXT "Resource missing" /** * @brief Response code for a busy resource. */ #define STATUS_ERROR_BUSY "409" /** * @brief Response code text for a busy resource. */ #define STATUS_ERROR_BUSY_TEXT "Resource busy" /** * @brief Response code when authorisation failed. */ #define STATUS_ERROR_AUTH_FAILED "400" /** * @brief Response code text when authorisation failed. */ #define STATUS_ERROR_AUTH_FAILED_TEXT "Authentication failed" /** * @brief Response code on success. */ #define STATUS_OK "200" /** * @brief Response code text on success. */ #define STATUS_OK_TEXT "OK" /** * @brief Response code on success, when a resource is created. */ #define STATUS_OK_CREATED "201" /** * @brief Response code on success, when a resource is created. */ #define STATUS_OK_CREATED_TEXT "OK, resource created" /** * @brief Response code on success, when the operation will finish later. */ #define STATUS_OK_REQUESTED "202" /** * @brief Response code text on success, when the operation will finish later. */ #define STATUS_OK_REQUESTED_TEXT "OK, request submitted" /** * @brief Response code for an internal error. */ #define STATUS_INTERNAL_ERROR "500" /** * @brief Response code text for an internal error. */ #define STATUS_INTERNAL_ERROR_TEXT "Internal error" /** * @brief Response code when a service is unavailable. */ #define STATUS_SERVICE_UNAVAILABLE "503" /** * @brief Response code text when a service is unavailable. */ #define STATUS_SERVICE_UNAVAILABLE_TEXT "Service unavailable" /** * @brief Response code when a service is down. */ #define STATUS_SERVICE_DOWN "503" /** * @brief Response code text when a service is down. */ #define STATUS_SERVICE_DOWN_TEXT "Service temporarily down" /* OMP parser. */ /** * @brief A handle on an OMP parser. */ typedef struct { int (*client_writer) (const char*, void*); ///< Writes to the client. void* client_writer_data; ///< Argument to client_writer. int importing; ///< Whether the current op is importing. int read_over; ///< Read over any child elements. int parent_state; ///< Parent state when reading over. gchar **disabled_commands; ///< Disabled commands. } omp_parser_t; static int process_omp (omp_parser_t *, const gchar *, gchar **); /** * @brief Create an OMP parser. * * @param[in] write_to_client Function to write to client. * @param[in] write_to_client_data Argument to \p write_to_client. * @param[in] disable Commands to disable. Copied, and freed by * omp_parser_free. * * @return An OMP parser. */ omp_parser_t * omp_parser_new (int (*write_to_client) (const char*, void*), void* write_to_client_data, gchar **disable) { omp_parser_t *omp_parser = (omp_parser_t*) g_malloc0 (sizeof (omp_parser_t)); omp_parser->client_writer = write_to_client; omp_parser->client_writer_data = write_to_client_data; omp_parser->read_over = 0; omp_parser->disabled_commands = g_strdupv (disable); return omp_parser; } /** * @brief Free an OMP parser. * * @param[in] omp_parser OMP parser. * * @return An OMP parser. */ void omp_parser_free (omp_parser_t *omp_parser) { g_strfreev (omp_parser->disabled_commands); g_free (omp_parser); } /** * @brief Check if command has been disabled. * * @param[in] omp_parser Parser. * @param[in] name Command name. * * @return 1 disabled, 0 enabled. */ static int command_disabled (omp_parser_t *omp_parser, const gchar *name) { gchar **disabled; disabled = omp_parser->disabled_commands; if (disabled) while (*disabled) { if (strcasecmp (*disabled, name) == 0) return 1; disabled++; } return 0; } /* Command data passed between parser callbacks. */ /** * @brief Create a new preference. * * @param[in] name Name of preference. * @param[in] type Type of preference. * @param[in] value Value of preference. * @param[in] nvt_name Name of NVT of preference. * @param[in] nvt_oid OID of NVT of preference. * @param[in] alts Array of gchar's. Alternative values for type radio. * @param[in] default_value Default value of preference. * * @return Newly allocated preference. */ static gpointer preference_new (char *name, char *type, char *value, char *nvt_name, char *nvt_oid, array_t *alts, char* default_value) { preference_t *preference; preference = (preference_t*) g_malloc0 (sizeof (preference_t)); preference->name = name; preference->type = type; preference->value = value; preference->nvt_name = nvt_name; preference->nvt_oid = nvt_oid; preference->alts = alts; preference->default_value = default_value; return preference; } /** * @brief Create a new NVT selector. * * @param[in] name Name of NVT selector. * @param[in] type Type of NVT selector. * @param[in] include Include/exclude flag. * @param[in] family_or_nvt Family or NVT. * * @return Newly allocated NVT selector. */ static gpointer nvt_selector_new (char *name, char *type, int include, char *family_or_nvt) { nvt_selector_t *selector; selector = (nvt_selector_t*) g_malloc0 (sizeof (nvt_selector_t)); selector->name = name; selector->type = type; selector->include = include; selector->family_or_nvt = family_or_nvt; return selector; } /** * @brief Command data for the create_agent command. */ typedef struct { char *comment; ///< Comment. char *copy; ///< UUID of resource to copy. char *howto_install; ///< Install HOWTO. char *howto_use; ///< Usage HOWTO. char *installer; ///< Installer content. char *installer_filename; ///< Installer filename. char *installer_signature; ///< Installer signature. char *name; ///< Agent name. } create_agent_data_t; /** * @brief Free members of a create_agent_data_t and set them to NULL. */ static void create_agent_data_reset (create_agent_data_t *data) { free (data->comment); free (data->copy); free (data->howto_install); free (data->howto_use); free (data->installer); free (data->installer_filename); free (data->installer_signature); free (data->name); memset (data, 0, sizeof (create_agent_data_t)); } /** * @brief Command data for the import part of the create_config command. */ typedef struct { int import; ///< The import element was present. char *comment; ///< Comment. char *name; ///< Config name. array_t *nvt_selectors; ///< Array of nvt_selector_t's. char *nvt_selector_name; ///< In NVT_SELECTORS name of selector. char *nvt_selector_type; ///< In NVT_SELECTORS type of selector. char *nvt_selector_include; ///< In NVT_SELECTORS include/exclude flag. char *nvt_selector_family_or_nvt; ///< In NVT_SELECTORS family/NVT flag. array_t *preferences; ///< Array of preference_t's. array_t *preference_alts; ///< Array of gchar's in PREFERENCES. char *preference_alt; ///< Single radio alternative in PREFERENCE. char *preference_default; ///< Default value in PREFERENCE. char *preference_name; ///< Name in PREFERENCE. char *preference_nvt_name; ///< NVT name in PREFERENCE. char *preference_nvt_oid; ///< NVT OID in PREFERENCE. char *preference_type; ///< Type in PREFERENCE. char *preference_value; ///< Value in PREFERENCE. char *type; ///< Config type. } import_config_data_t; /** * @brief Command data for the create_config command. */ typedef struct { char *comment; ///< Comment. char *scanner; ///< Scanner to create config from. char *copy; ///< Config to copy. import_config_data_t import; ///< Config to import. char *name; ///< Name. } create_config_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void create_config_data_reset (create_config_data_t *data) { import_config_data_t *import = (import_config_data_t*) &data->import; g_free (data->comment); g_free (data->copy); g_free (data->scanner); g_free (import->comment); g_free (import->name); array_free (import->nvt_selectors); g_free (import->nvt_selector_name); g_free (import->nvt_selector_type); g_free (import->nvt_selector_family_or_nvt); if (import->preferences) { guint index = import->preferences->len; while (index--) { const preference_t *preference; preference = (preference_t*) g_ptr_array_index (import->preferences, index); if (preference) array_free (preference->alts); } array_free (import->preferences); } g_free (import->preference_alt); g_free (import->preference_name); g_free (import->preference_name); g_free (import->preference_nvt_name); g_free (import->preference_nvt_oid); g_free (import->preference_type); g_free (import->preference_value); g_free (import->type); g_free (data->name); memset (data, 0, sizeof (create_config_data_t)); } /** * @brief Command data for the create_alert command. * * The pointers in the *_data arrays point to memory that contains two * strings concatentated, with a single \\0 between them. The first string * is the name of the extra data (for example "To Address"), the second is * the value the the data (for example "alice@example.org"). */ typedef struct { char *comment; ///< Comment. char *copy; ///< UUID of alert to copy. char *condition; ///< Condition for alert, e.g. "Always". array_t *condition_data; ///< Array of pointers. Extra data for condition. char *event; ///< Event that will cause alert. array_t *event_data; ///< Array of pointers. Extra data for event. char *filter_id; ///< UUID of filter. char *method; ///< Method of alert, e.g. "Email". array_t *method_data; ///< Array of pointer. Extra data for method. char *name; ///< Name of alert. char *part_data; ///< Second part of data during *_data: value. char *part_name; ///< First part of data during *_data: name. } create_alert_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void create_alert_data_reset (create_alert_data_t *data) { free (data->comment); free (data->copy); free (data->condition); array_free (data->condition_data); free (data->event); array_free (data->event_data); free (data->filter_id); free (data->method); array_free (data->method_data); free (data->name); free (data->part_data); free (data->part_name); memset (data, 0, sizeof (create_alert_data_t)); } /** * @brief Command data for the create_filter command. */ typedef struct { char *comment; ///< Comment. char *copy; ///< UUID of resource to copy. char *make_name_unique; ///< Boolean. Whether to make name unique. char *name; ///< Name of new filter. char *term; ///< Filter term. char *type; ///< Type of new filter. } create_filter_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void create_filter_data_reset (create_filter_data_t *data) { free (data->comment); free (data->copy); free (data->make_name_unique); free (data->name); free (data->term); free (data->type); memset (data, 0, sizeof (create_filter_data_t)); } /** * @brief Command data for the create_group command. */ typedef struct { char *comment; ///< Comment. char *copy; ///< UUID of resource to copy. char *name; ///< Name of new group. char *users; ///< Users belonging to new group. } create_group_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void create_group_data_reset (create_group_data_t *data) { free (data->comment); free (data->copy); free (data->name); free (data->users); memset (data, 0, sizeof (create_group_data_t)); } /** * @brief Command data for the create_lsc_credential command. */ typedef struct { char *comment; ///< Comment. char *copy; ///< UUID of resource to copy. int key; ///< Whether the command included a key element. char *key_phrase; ///< Passphrase for key. char *key_private; ///< Private key from key. char *login; ///< Login name. char *name; ///< LSC credential name. char *password; ///< Password associated with login name. } create_lsc_credential_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void create_lsc_credential_data_reset (create_lsc_credential_data_t *data) { free (data->comment); free (data->copy); free (data->key_phrase); free (data->key_private); free (data->login); free (data->name); free (data->password); memset (data, 0, sizeof (create_lsc_credential_data_t)); } /** * @brief Command data for the create_note command. */ typedef struct { char *active; ///< Whether the note is active. char *copy; ///< UUID of resource to copy. char *hosts; ///< Hosts to which to limit override. char *nvt_oid; ///< NVT to which to limit override. char *port; ///< Port to which to limit override. char *result_id; ///< ID of result to which to limit override. char *severity; ///< Severity score to which to limit note. char *task_id; ///< ID of task to which to limit override. char *text; ///< Text of override. char *threat; ///< Threat to which to limit override. } create_note_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void create_note_data_reset (create_note_data_t *data) { free (data->active); free (data->copy); free (data->hosts); free (data->nvt_oid); free (data->port); free (data->result_id); free (data->severity); free (data->task_id); free (data->text); free (data->threat); memset (data, 0, sizeof (create_note_data_t)); } /** * @brief Command data for the create_override command. */ typedef struct { char *active; ///< Whether the override is active. char *copy; ///< UUID of resource to copy. char *hosts; ///< Hosts to which to limit override. char *new_threat; ///< New threat value of overridden results. char *new_severity; ///< New severity score of overridden results. char *nvt_oid; ///< NVT to which to limit override. char *port; ///< Port to which to limit override. char *result_id; ///< ID of result to which to limit override. char *severity; ///< Severity score of results to override. char *task_id; ///< ID of task to which to limit override. char *text; ///< Text of override. char *threat; ///< Threat to which to limit override. } create_override_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void create_override_data_reset (create_override_data_t *data) { free (data->active); free (data->copy); free (data->hosts); free (data->new_threat); free (data->new_severity); free (data->nvt_oid); free (data->port); free (data->result_id); free (data->task_id); free (data->text); free (data->threat); free (data->severity); memset (data, 0, sizeof (create_override_data_t)); } /** * @brief Command data for the create_permission command. */ typedef struct { char *comment; ///< Comment. char *copy; ///< UUID of resource to copy. char *name; ///< Permission name. char *resource_type; ///< Resource type, for special permissions. char *resource_id; ///< Resource permission applies to. char *subject_type; ///< Subject type permission applies to. char *subject_id; ///< Subject permission applies to. } create_permission_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void create_permission_data_reset (create_permission_data_t *data) { free (data->comment); free (data->copy); free (data->name); free (data->resource_type); free (data->resource_id); free (data->subject_type); free (data->subject_id); memset (data, 0, sizeof (create_permission_data_t)); } /** * @brief A port range. */ struct create_port_list_range { char *comment; ///< Comment. char *end; ///< End. char *id; ///< UUID. char *start; ///< Start. char *type; ///< Type. }; /** * @brief Port range type. */ typedef struct create_port_list_range create_port_list_range_t; /** * @brief Command data for the create_port_list command. */ typedef struct { char *comment; ///< Comment. char *id; ///< UUID. char *copy; ///< UUID of Port List to copy. int import; ///< Import flag. char *name; ///< Name of new port list. char *port_range; ///< Port range for new port list. create_port_list_range_t *range; ///< Current port range for import. array_t *ranges; ///< Port ranges for import. } create_port_list_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void create_port_list_data_reset (create_port_list_data_t *data) { free (data->comment); free (data->copy); free (data->name); free (data->port_range); if (data->ranges) { guint index; index = data->ranges->len; while (index--) { create_port_list_range_t *range; range = (create_port_list_range_t*) g_ptr_array_index (data->ranges, index); if (range) { free (range->comment); free (range->end); free (range->id); free (range->start); free (range->type); } } array_free (data->ranges); } memset (data, 0, sizeof (create_port_list_data_t)); } /** * @brief Command data for the create_port_range command. */ typedef struct { char *comment; ///< Comment. char *end; ///< Last port. char *port_list_id; ///< Port list for new port range. char *start; ///< First port. char *type; ///< Type of new port range. } create_port_range_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void create_port_range_data_reset (create_port_range_data_t *data) { free (data->comment); free (data->end); free (data->port_list_id); free (data->start); free (data->type); memset (data, 0, sizeof (create_port_range_data_t)); } /** * @brief Command data for the create_report command. */ typedef struct { char *detail_name; ///< Name of current host detail. char *detail_value; ///< Value of current host detail. char *detail_source_name; ///< Name of source of current host detail. char *detail_source_type; ///< Type of source of current host detail. char *detail_source_desc; ///< Description of source of current detail. array_t *details; ///< Host details. char *host_end; ///< End time for a host. char *host_end_host; ///< Host name for end time. array_t *host_ends; ///< All host ends. char *host_start; ///< Start time for a host. char *host_start_host; ///< Host name for start time. array_t *host_starts; ///< All host starts. char *ip; ///< Current host for host details. char *result_description; ///< Description of NVT for current result. char *result_host; ///< Host for current result. char *result_nvt_oid; ///< OID of NVT for current result. char *result_port; ///< Port for current result. char *result_qod; ///< QoD value of current result. char *result_qod_type; ///< QoD type of current result. char *result_scan_nvt_version; ///< Version of NVT used in scan. char *result_severity; ///< Severity score for current result. char *result_threat; ///< Message type for current result. array_t *results; ///< All results. char *scan_end; ///< End time for a scan. char *scan_start; ///< Start time for a scan. char *task_comment; ///< Comment for container task. char *task_id; ///< ID of container task. char *task_name; ///< Name for container task. char *type; ///< Type of report. int wrapper; ///< Whether there was a wrapper REPORT. } create_report_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void create_report_data_reset (create_report_data_t *data) { if (data->details) { guint index = data->details->len; while (index--) { host_detail_t *detail; detail = (host_detail_t*) g_ptr_array_index (data->details, index); if (detail) host_detail_free (detail); } array_free (data->details); } free (data->host_end); free (data->host_start); free (data->ip); free (data->result_description); free (data->result_host); free (data->result_nvt_oid); free (data->result_port); free (data->result_threat); if (data->results) { guint index = data->results->len; while (index--) { create_report_result_t *result; result = (create_report_result_t*) g_ptr_array_index (data->results, index); if (result) { free (result->host); free (result->description); free (result->nvt_oid); free (result->port); free (result->qod); free (result->qod_type); free (result->scan_nvt_version); free (result->severity); } } array_free (data->results); } free (data->scan_end); free (data->scan_start); free (data->task_comment); free (data->task_id); free (data->task_name); free (data->type); memset (data, 0, sizeof (create_report_data_t)); } /** * @brief Command data for the create_report_format command. */ typedef struct { char *content_type; ///< Content type. char *description; ///< Description. char *extension; ///< File extension. char *file; ///< Current file during ...GRFR_REPORT_FORMAT_FILE. char *file_name; ///< Name of current file. array_t *files; ///< All files. char *global; ///< Global flag. char *id; ///< ID. int import; ///< Boolean. Whether to import a format. char *name; ///< Name. char *param_value; ///< Param value during ...GRFR_REPORT_FORMAT_PARAM. char *param_default; ///< Default value for above param. char *param_name; ///< Name of above param. char *param_option; ///< Current option of above param. array_t *param_options; ///< Options for above param. array_t *params_options; ///< Options for all params. char *param_type; ///< Type of above param. char *param_type_min; ///< Min qualifier of above type. char *param_type_max; ///< Max qualifier of above type. array_t *params; ///< All params. char *signature; ///< Signature. char *summary; ///< Summary. char *copy; ///< UUID of Report Format to copy. } create_report_format_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void create_report_format_data_reset (create_report_format_data_t *data) { free (data->content_type); free (data->description); free (data->extension); free (data->file); free (data->file_name); array_free (data->files); free (data->global); free (data->id); free (data->name); free (data->copy); free (data->param_default); free (data->param_name); if (data->params_options) { guint index = data->params_options->len; while (index--) { array_t *options; options = (array_t*) g_ptr_array_index (data->params_options, index); if (options) array_free (options); } g_ptr_array_free (data->params_options, TRUE); } free (data->param_type); free (data->param_type_min); free (data->param_type_max); free (data->param_value); array_free (data->params); free (data->summary); memset (data, 0, sizeof (create_report_format_data_t)); } /** * @brief Command data for the create_role command. */ typedef struct { char *comment; ///< Comment. char *copy; ///< UUID of resource to copy. char *name; ///< Name of new role. char *users; ///< Users belonging to new role. } create_role_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void create_role_data_reset (create_role_data_t *data) { free (data->comment); free (data->copy); free (data->name); free (data->users); memset (data, 0, sizeof (create_role_data_t)); } /** * @brief Command data for the create_scanner command. */ typedef struct { char *name; ///< Name for new scanner. char *copy; ///< UUID of scanner to copy. char *comment; ///< Comment. char *host; ///< Host of new scanner. char *port; ///< Port of new scanner. char *type; ///< Type of new scanner. char *ca_pub; ///< CA Certificate of new scanner. char *key_pub; ///< Certificate of new scanner. char *key_priv; ///< Private key of new scanner. } create_scanner_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void create_scanner_data_reset (create_scanner_data_t *data) { free (data->name); free (data->copy); free (data->comment); free (data->host); free (data->port); free (data->type); free (data->ca_pub); free (data->key_pub); free (data->key_priv); memset (data, 0, sizeof (create_scanner_data_t)); } /** * @brief Command data for the create_schedule command. */ typedef struct { char *name; ///< Name for new schedule. char *comment; ///< Comment. char *copy; ///< UUID of resource to copy. char *first_time_day_of_month; ///< Day of month schedule must first run. char *first_time_hour; ///< Hour schedule must first run. char *first_time_minute; ///< Minute schedule must first run. char *first_time_month; ///< Month schedule must first run. char *first_time_year; ///< Year schedule must first run. char *period; ///< Period of schedule (how often it runs). char *period_unit; ///< Unit of period: "hour", "day", "week", .... char *duration; ///< Duration of schedule (how long it runs for). char *duration_unit; ///< Unit of duration: "hour", "day", "week", .... char *timezone; ///< Time zone of the schedule } create_schedule_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void create_schedule_data_reset (create_schedule_data_t *data) { free (data->name); free (data->copy); free (data->comment); free (data->first_time_day_of_month); free (data->first_time_hour); free (data->first_time_minute); free (data->first_time_month); free (data->first_time_year); free (data->period); free (data->period_unit); free (data->duration); free (data->duration_unit); free (data->timezone); memset (data, 0, sizeof (create_schedule_data_t)); } /** * @brief Command data for the create_slave command. */ typedef struct { char *comment; ///< Comment. char *host; ///< Host for new slave. char *copy; ///< UUID of slave to copy. char *login; ///< Login on slave. char *name; ///< Name of new slave. char *password; ///< Password for login. char *port; ///< Port on host. } create_slave_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void create_slave_data_reset (create_slave_data_t *data) { free (data->comment); free (data->copy); free (data->host); free (data->login); free (data->name); free (data->password); free (data->port); memset (data, 0, sizeof (create_slave_data_t)); } /** * @brief Command data for the create_target command. */ typedef struct { char *alive_tests; ///< Alive tests. char *comment; ///< Comment. char *exclude_hosts; ///< Hosts to exclude from set. char *reverse_lookup_only; ///< Boolean. Whether to consider only hosts that reverse lookup. char *reverse_lookup_unify; ///< Boolean. Whether to unify based on reverse lookup. char *copy; ///< UUID of resource to copy. char *hosts; ///< Hosts for new target. char *port_list_id; ///< Port list for new target. char *port_range; ///< Port range for new target. char *ssh_lsc_credential_id; ///< SSH LSC credential for new target. char *ssh_port; ///< Port for SSH LSC. char *smb_lsc_credential_id; ///< SMB LSC credential for new target. char *esxi_lsc_credential_id; ///< ESXi LSC credential for new target. char *make_name_unique; ///< Boolean. Whether to make name unique. char *name; ///< Name of new target. } create_target_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void create_target_data_reset (create_target_data_t *data) { free (data->alive_tests); free (data->comment); free (data->exclude_hosts); free (data->reverse_lookup_only); free (data->reverse_lookup_unify); free (data->copy); free (data->hosts); free (data->port_list_id); free (data->port_range); free (data->ssh_lsc_credential_id); free (data->ssh_port); free (data->smb_lsc_credential_id); free (data->esxi_lsc_credential_id); free (data->make_name_unique); free (data->name); memset (data, 0, sizeof (create_target_data_t)); } /** * @brief Command data for the create_tag command. */ typedef struct { char *active; ///< Whether the tag is active. char *resource_id; ///< ID of the resource to which to attach the tag. char *resource_type; ///< Type of the resource to which to attach the tag. char *comment; ///< Comment to add to the tag. char *name; ///< Name of the tag. char *value; ///< Value of the tag. char *copy; ///< UUID of resource to copy. } create_tag_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void create_tag_data_reset (create_tag_data_t *data) { free (data->active); free (data->resource_type); free (data->resource_id); free (data->comment); free (data->name); free (data->value); free (data->copy); memset (data, 0, sizeof (create_tag_data_t)); } /** * @brief Command data for the create_task command. */ typedef struct { char *alterable; ///< Boolean. Whether task is alterable. char *config_id; ///< ID of task config. char *hosts_ordering; ///< Order for scanning target hosts. char *scanner_id; ///< ID of task scanner. array_t *alerts; ///< IDs of alerts. char *copy; ///< UUID of resource to copy. array_t *groups; ///< IDs of groups. char *observers; ///< Space separated names of observer users. name_value_t *preference; ///< Current preference. array_t *preferences; ///< Preferences. char *schedule_id; ///< ID of task schedule. char *schedule_periods; ///< Number of periods the schedule must run for. char *slave_id; ///< ID of task slave. char *target_id; ///< ID of task target. task_t task; ///< ID of new task. } create_task_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void create_task_data_reset (create_task_data_t *data) { free (data->alterable); free (data->config_id); free (data->hosts_ordering); free (data->scanner_id); free (data->copy); array_free (data->alerts); array_free (data->groups); free (data->observers); if (data->preferences) { guint index = data->preferences->len; while (index--) { name_value_t *pair; pair = (name_value_t*) g_ptr_array_index (data->preferences, index); if (pair) { g_free (pair->name); g_free (pair->value); } } } array_free (data->preferences); free (data->schedule_id); free (data->schedule_periods); free (data->slave_id); free (data->target_id); memset (data, 0, sizeof (create_task_data_t)); } /* Command data passed between parser callbacks. */ typedef struct { char *copy; ///< UUID of resource to copy. int sort_order; array_t *groups; ///< IDs of groups. char *hosts; int hosts_allow; char *ifaces; int ifaces_allow; char *name; char *password; array_t *roles; gchar *current_source; array_t *sources; } create_user_data_t; /** * @brief Reset CREATE_USER data. * * @param[in] data Command data. */ static void create_user_data_reset (create_user_data_t * data) { g_free (data->copy); array_free (data->groups); g_free (data->name); g_free (data->password); g_free (data->hosts); g_free (data->ifaces); array_free (data->roles); if (data->sources) { array_free (data->sources); } g_free (data->current_source); memset (data, 0, sizeof (create_user_data_t)); } /** * @brief Command data for the delete_agent command. */ typedef struct { char *agent_id; ///< ID of agent to delete. int ultimate; ///< Boolean. Whether to remove entirely or to trashcan. } delete_agent_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_agent_data_reset (delete_agent_data_t *data) { free (data->agent_id); memset (data, 0, sizeof (delete_agent_data_t)); } /** * @brief Command data for the delete_config command. */ typedef struct { char *config_id; ///< ID of config to delete. int ultimate; ///< Boolean. Whether to remove entirely or to trashcan. } delete_config_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_config_data_reset (delete_config_data_t *data) { free (data->config_id); memset (data, 0, sizeof (delete_config_data_t)); } /** * @brief Command data for the delete_alert command. */ typedef struct { char *alert_id; ///< ID of alert to delete. int ultimate; ///< Boolean. Whether to remove entirely or to trashcan. } delete_alert_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_alert_data_reset (delete_alert_data_t *data) { free (data->alert_id); memset (data, 0, sizeof (delete_alert_data_t)); } /** * @brief Command data for the delete_filter command. */ typedef struct { char *filter_id; ///< ID of filter to delete. int ultimate; ///< Boolean. Whether to remove entirely or to trashcan. } delete_filter_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_filter_data_reset (delete_filter_data_t *data) { free (data->filter_id); memset (data, 0, sizeof (delete_filter_data_t)); } /** * @brief Command data for the delete_group command. */ typedef struct { char *group_id; ///< ID of group to delete. int ultimate; ///< Boolean. Whether to remove entirely or to trashcan. } delete_group_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_group_data_reset (delete_group_data_t *data) { free (data->group_id); memset (data, 0, sizeof (delete_group_data_t)); } /** * @brief Command data for the delete_lsc_credential command. */ typedef struct { char *lsc_credential_id; ///< ID of LSC credential to delete. int ultimate; ///< Boolean. Whether to remove entirely or to trashcan. } delete_lsc_credential_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_lsc_credential_data_reset (delete_lsc_credential_data_t *data) { free (data->lsc_credential_id); memset (data, 0, sizeof (delete_lsc_credential_data_t)); } /** * @brief Command data for the delete_note command. */ typedef struct { char *note_id; ///< ID of note to delete. int ultimate; ///< Boolean. Whether to remove entirely or to trashcan. } delete_note_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_note_data_reset (delete_note_data_t *data) { free (data->note_id); memset (data, 0, sizeof (delete_note_data_t)); } /** * @brief Command data for the delete_override command. */ typedef struct { char *override_id; ///< ID of override to delete. int ultimate; ///< Boolean. Whether to remove entirely or to trashcan. } delete_override_data_t; /** * @brief Command data for the delete_permission command. */ typedef struct { char *permission_id; ///< ID of permission to delete. int ultimate; ///< Boolean. Whether to remove entirely or to trashcan. } delete_permission_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_permission_data_reset (delete_permission_data_t *data) { free (data->permission_id); memset (data, 0, sizeof (delete_permission_data_t)); } /** * @brief Command data for the delete_port_list command. */ typedef struct { char *port_list_id; ///< ID of port list to delete. int ultimate; ///< Boolean. Whether to remove entirely or to trashcan. } delete_port_list_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_port_list_data_reset (delete_port_list_data_t *data) { free (data->port_list_id); memset (data, 0, sizeof (delete_port_list_data_t)); } /** * @brief Command data for the delete_port_range command. */ typedef struct { char *port_range_id; ///< ID of port range to delete. int ultimate; ///< Dummy field for generic macros. } delete_port_range_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_port_range_data_reset (delete_port_range_data_t *data) { free (data->port_range_id); memset (data, 0, sizeof (delete_port_range_data_t)); } /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_override_data_reset (delete_override_data_t *data) { free (data->override_id); memset (data, 0, sizeof (delete_override_data_t)); } /** * @brief Command data for the delete_report command. */ typedef struct { char *report_id; ///< ID of report to delete. int ultimate; ///< Dummy field for generic macros. } delete_report_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_report_data_reset (delete_report_data_t *data) { free (data->report_id); memset (data, 0, sizeof (delete_report_data_t)); } /** * @brief Command data for the delete_report_format command. */ typedef struct { char *report_format_id; ///< ID of report format to delete. int ultimate; ///< Boolean. Whether to remove entirely or to trashcan. } delete_report_format_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_report_format_data_reset (delete_report_format_data_t *data) { free (data->report_format_id); memset (data, 0, sizeof (delete_report_format_data_t)); } /** * @brief Command data for the delete_role command. */ typedef struct { char *role_id; ///< ID of role to delete. int ultimate; ///< Dummy field for generic macros. } delete_role_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_role_data_reset (delete_role_data_t *data) { free (data->role_id); memset (data, 0, sizeof (delete_role_data_t)); } /** * @brief Command data for the delete_schedule command. */ typedef struct { char *schedule_id; ///< ID of schedule to delete. int ultimate; ///< Boolean. Whether to remove entirely or to trashcan. } delete_schedule_data_t; /** * @brief Command data for the delete_scanner command. */ typedef struct { char *scanner_id; ///< ID of scanner to delete. int ultimate; ///< Boolean. Whether to remove entirely or to trashcan. } delete_scanner_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_scanner_data_reset (delete_scanner_data_t *data) { g_free (data->scanner_id); memset (data, 0, sizeof (delete_scanner_data_t)); } /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_schedule_data_reset (delete_schedule_data_t *data) { free (data->schedule_id); memset (data, 0, sizeof (delete_schedule_data_t)); } /** * @brief Command data for the delete_slave command. */ typedef struct { char *slave_id; ///< ID of slave to delete. int ultimate; ///< Boolean. Whether to remove entirely or to trashcan. } delete_slave_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_slave_data_reset (delete_slave_data_t *data) { free (data->slave_id); memset (data, 0, sizeof (delete_slave_data_t)); } /** * @brief Command data for the delete_tag command. */ typedef struct { char *tag_id; ///< ID of tag to delete. int ultimate; ///< Boolean. Whether to remove entirely or to trashcan. } delete_tag_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_tag_data_reset (delete_tag_data_t *data) { free (data->tag_id); memset (data, 0, sizeof (delete_tag_data_t)); } /** * @brief Command data for the delete_target command. */ typedef struct { char *target_id; ///< ID of target to delete. int ultimate; ///< Boolean. Whether to remove entirely or to trashcan. } delete_target_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_target_data_reset (delete_target_data_t *data) { free (data->target_id); memset (data, 0, sizeof (delete_target_data_t)); } /** * @brief Command data for the delete_task command. */ typedef struct { char *task_id; ///< ID of task to delete. int ultimate; ///< Boolean. Whether to remove entirely or to trashcan. } delete_task_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_task_data_reset (delete_task_data_t *data) { free (data->task_id); memset (data, 0, sizeof (delete_task_data_t)); } /** * @brief Command data for the delete_user command. */ typedef struct { char *name; ///< Name of user to delete. char *user_id; ///< ID of user to delete. int ultimate; ///< Boolean. Whether to remove entirely or to trashcan. } delete_user_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void delete_user_data_reset (delete_user_data_t *data) { free (data->name); free (data->user_id); memset (data, 0, sizeof (delete_user_data_t)); } /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_data_reset (get_data_t *data) { free (data->id); free (data->filt_id); free (data->filter); free (data->filter_replace); free (data->filter_replacement); free (data->subtype); free (data->type); memset (data, 0, sizeof (get_data_t)); } /** * @brief Reset command data. * * @param[in] data GET operation data. * @param[in] type Resource type. * @param[in] attribute_names XML attribute names. * @param[in] attribute_values XML attribute values. * * @param[in] data Command data. */ static void get_data_parse_attributes (get_data_t *data, const gchar *type, const gchar **attribute_names, const gchar **attribute_values) { gchar *name; const gchar *attribute; data->type = g_strdup (type); append_attribute (attribute_names, attribute_values, "filter", &data->filter); name = g_strdup_printf ("%s_id", type); append_attribute (attribute_names, attribute_values, name, &data->id); g_free (name); append_attribute (attribute_names, attribute_values, "filt_id", &data->filt_id); if (find_attribute (attribute_names, attribute_values, "trash", &attribute)) data->trash = strcmp (attribute, "0"); else data->trash = 0; if (find_attribute (attribute_names, attribute_values, "details", &attribute)) data->details = strcmp (attribute, "0"); else data->details = 0; append_attribute (attribute_names, attribute_values, "filter_replace", &data->filter_replace); } /** * @brief Command data for the get_agents command. */ typedef struct { get_data_t get; ///< Get args. char *format; ///< Format requested: "installer", "howto_use", .... } get_agents_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_agents_data_reset (get_agents_data_t *data) { get_data_reset (&data->get); free (data->format); memset (data, 0, sizeof (get_agents_data_t)); } /** * @brief Command data for the get_aggregates command. */ typedef struct { get_data_t get; ///< Get args. char *type; ///< Resource type. char *subtype; ///< Resource subtype. char *data_column; ///< Column to calculate aggregate for. char *group_column; ///< Column to group data by. } get_aggregates_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_aggregates_data_reset (get_aggregates_data_t *data) { get_data_reset (&data->get); free (data->type); free (data->data_column); free (data->group_column); memset (data, 0, sizeof (get_aggregates_data_t)); } /** * @brief Command data for the get_configs command. */ typedef struct { int families; ///< Boolean. Whether to include config families. int preferences; ///< Boolean. Whether to include config preferences. get_data_t get; ///< Get args. int tasks; ///< Boolean. Whether to include tasks that use scan config. } get_configs_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_configs_data_reset (get_configs_data_t *data) { get_data_reset (&data->get); memset (data, 0, sizeof (get_configs_data_t)); } /** * @brief Command data for the get_alerts command. */ typedef struct { get_data_t get; ///< Get args. int tasks; ///< Boolean. Whether to include tasks that use alert. } get_alerts_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_alerts_data_reset (get_alerts_data_t *data) { get_data_reset (&data->get); memset (data, 0, sizeof (get_alerts_data_t)); } /** * @brief Command data for the get_filters command. */ typedef struct { get_data_t get; ///< Get args. int alerts; ///< Boolean. Whether to include alerts that use filter. } get_filters_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_filters_data_reset (get_filters_data_t *data) { get_data_reset (&data->get); memset (data, 0, sizeof (get_filters_data_t)); } /** * @brief Command data for the get_groups command. */ typedef struct { get_data_t get; ///< Get args. } get_groups_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_groups_data_reset (get_groups_data_t *data) { get_data_reset (&data->get); memset (data, 0, sizeof (get_groups_data_t)); } /** * @brief Command data for the get_info command. */ typedef struct { char *type; ///< Requested information type. char *name; ///< Name of the info get_data_t get; ///< Get Args. int details; ///< Boolean. Weather to include full details. } get_info_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_info_data_reset (get_info_data_t *data) { free (data->type); free (data->name); get_data_reset (&data->get); memset (data, 0, sizeof (get_info_data_t)); } /** * @brief Command data for the get_lsc_credentials command. */ typedef struct { char *format; ///< Format requested: "key", "deb", .... get_data_t get; ///< Get Args. int targets; ///< Boolean. Whether to return targets using credential. } get_lsc_credentials_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_lsc_credentials_data_reset (get_lsc_credentials_data_t *data) { get_data_reset (&data->get); memset (data, 0, sizeof (get_lsc_credentials_data_t)); } /** * @brief Command data for the get_notes command. */ typedef struct { get_data_t get; ///< Get args. char *note_id; ///< ID of single note to get. char *nvt_oid; ///< OID of NVT to which to limit listing. char *task_id; ///< ID of task to which to limit listing. int result; ///< Boolean. Whether to include associated results. } get_notes_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_notes_data_reset (get_notes_data_t *data) { free (data->note_id); free (data->nvt_oid); free (data->task_id); memset (data, 0, sizeof (get_notes_data_t)); } /** * @brief Command data for the get_nvts command. */ typedef struct { char *config_id; ///< ID of config to which to limit NVT selection. int details; ///< Boolean. Whether to include full NVT details. char *family; ///< Name of family to which to limit NVT selection. char *nvt_oid; ///< Name of single NVT to get. int preference_count; ///< Boolean. Whether to include NVT preference count. int preferences; ///< Boolean. Whether to include NVT preferences. char *sort_field; ///< Field to sort results on. int sort_order; ///< Result sort order: 0 descending, else ascending. int timeout; ///< Boolean. Whether to include timeout preference. } get_nvts_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_nvts_data_reset (get_nvts_data_t *data) { free (data->config_id); free (data->family); free (data->nvt_oid); free (data->sort_field); memset (data, 0, sizeof (get_nvts_data_t)); } /** * @brief Command data for the get_nvt_families command. */ typedef struct { int sort_order; ///< Result sort order: 0 descending, else ascending. } get_nvt_families_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_nvt_families_data_reset (get_nvt_families_data_t *data) { memset (data, 0, sizeof (get_nvt_families_data_t)); } /** * @brief Command data for the get_overrides command. */ typedef struct { get_data_t get; ///< Get args. char *override_id; ///< ID of override to get. char *nvt_oid; ///< OID of NVT to which to limit listing. char *task_id; ///< ID of task to which to limit listing. int result; ///< Boolean. Whether to include associated results. } get_overrides_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_overrides_data_reset (get_overrides_data_t *data) { free (data->override_id); free (data->nvt_oid); free (data->task_id); memset (data, 0, sizeof (get_overrides_data_t)); } /** * @brief Command data for the get_permissions command. */ typedef struct { get_data_t get; ///< Get args. char *resource_id; ///< Resource whose permissions to get. } get_permissions_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_permissions_data_reset (get_permissions_data_t *data) { free (data->resource_id); get_data_reset (&data->get); memset (data, 0, sizeof (get_permissions_data_t)); } /** * @brief Command data for the get_port_lists command. */ typedef struct { int targets; ///< Boolean. Include targets that use Port List or not. get_data_t get; ///< Get args. } get_port_lists_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_port_lists_data_reset (get_port_lists_data_t *data) { get_data_reset (&data->get); memset (data, 0, sizeof (get_port_lists_data_t)); } /** * @brief Command data for the get_preferences command. */ typedef struct { char *config_id; ///< Config whose preference values to get. char *nvt_oid; ///< Single NVT whose preferences to get. char *preference; ///< Single preference to get. } get_preferences_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_preferences_data_reset (get_preferences_data_t *data) { free (data->config_id); free (data->nvt_oid); free (data->preference); memset (data, 0, sizeof (get_preferences_data_t)); } /** * @brief Command data for the get_reports command. */ typedef struct { get_data_t get; ///< Get args with result filtering. get_data_t report_get; ///< Get args with report filtering. int apply_overrides; ///< Boolean. Whether to apply overrides to results. char *delta_report_id; ///< ID of report to compare single report to. char *delta_states; ///< Delta states (Changed Gone New Same) to include. char *format_id; ///< ID of report format. char *alert_id; ///< ID of alert. char *report_id; ///< ID of single report to get. int first_result; ///< Skip over results before this result number. int max_results; ///< Maximum number of results return. int host_first_result; ///< Skip over results before this result number. int host_max_results; ///< Maximum number of results return. char *sort_field; ///< Field to sort results on. int sort_order; ///< Result sort order: 0 descending, else ascending. char *levels; ///< Letter encoded threat level filter. char *host_levels; ///< Letter encoded threat level filter, for hosts. char *search_phrase; ///< Search phrase result filter. char *host_search_phrase; ///< Search phrase result filter. char *min_cvss_base; ///< Minimum CVSS base filter. char *min_qod; ///< Minimum QoD filter. int autofp; ///< Boolean. Whether to apply auto FP filter. int notes; ///< Boolean. Whether to include associated notes. int notes_details; ///< Boolean. Whether to include details of above. int overrides; ///< Boolean. Whether to include associated overrides. int overrides_details; ///< Boolean. Whether to include details of above. int result_hosts_only; ///< Boolean. Whether to include only resulted hosts. char *type; ///< Type of report. char *host; ///< Host for asset report. char *pos; ///< Position of report from end. int ignore_pagination; ///< Boolean. Whether to ignore pagination filters. char *timezone; ///< Timezone. } get_reports_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_reports_data_reset (get_reports_data_t *data) { get_data_reset (&data->get); get_data_reset (&data->report_get); free (data->delta_report_id); free (data->delta_states); free (data->format_id); free (data->alert_id); free (data->report_id); free (data->sort_field); free (data->levels); free (data->host_levels); free (data->search_phrase); free (data->host_search_phrase); free (data->min_cvss_base); free (data->min_qod); free (data->type); free (data->host); free (data->pos); memset (data, 0, sizeof (get_reports_data_t)); } /** * @brief Command data for the get_report_formats command. */ typedef struct { get_data_t get; ///< Get args. int alerts; ///< Boolean. Whether to include alerts that use Report Format int params; ///< Boolean. Whether to include params. } get_report_formats_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_report_formats_data_reset (get_report_formats_data_t *data) { get_data_reset (&data->get); memset (data, 0, sizeof (get_report_formats_data_t)); } /** * @brief Command data for the get_results command. */ typedef struct { get_data_t get; ///< Get args. int apply_overrides; ///< Boolean. Whether to apply overrides to results. int apply_overrides_set; /// < Boolean. Whether apply_overrides was set. int autofp; ///< Boolean. Whether to apply auto FP filter. char *task_id; ///< Task associated with results. int notes; ///< Boolean. Whether to include associated notes. int notes_details; ///< Boolean. Whether to include details of above. int overrides; ///< Boolean. Whether to include associated overrides. int overrides_details; ///< Boolean. Whether to include details of above. } get_results_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_results_data_reset (get_results_data_t *data) { get_data_reset (&data->get); free (data->task_id); memset (data, 0, sizeof (get_results_data_t)); } /** * @brief Command data for the get_roles command. */ typedef struct { get_data_t get; ///< Get args. } get_roles_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_roles_data_reset (get_roles_data_t *data) { get_data_reset (&data->get); memset (data, 0, sizeof (get_roles_data_t)); } /** * @brief Command data for the get_schedules command. */ typedef struct { get_data_t get; ///< Get args. int tasks; ///< Boolean. Whether to include tasks that use this schedule. } get_schedules_data_t; /** * @brief Command data for the get_scanners command. */ typedef struct { get_data_t get; ///< Get args. } get_scanners_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_scanners_data_reset (get_scanners_data_t *data) { get_data_reset (&data->get); memset (data, 0, sizeof (get_scanners_data_t)); } /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_schedules_data_reset (get_schedules_data_t *data) { get_data_reset (&data->get); memset (data, 0, sizeof (get_schedules_data_t)); } /** * @brief Command data. */ typedef struct { char *filter; ///< Filter term. int first; ///< Skip over rows before this number. int max; ///< Maximum number of rows returned. char *sort_field; ///< Field to sort results on. int sort_order; ///< Result sort order: 0 descending, else ascending. char *setting_id; ///< UUID of single setting to get. } get_settings_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_settings_data_reset (get_settings_data_t *data) { free (data->filter); free (data->setting_id); free (data->sort_field); memset (data, 0, sizeof (get_settings_data_t)); } /** * @brief Command data for the get_slaves command. */ typedef struct { get_data_t get; ///< Get args. int tasks; ///< Boolean. Whether to include tasks that use this slave. } get_slaves_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_slaves_data_reset (get_slaves_data_t *data) { get_data_reset (&data->get); memset (data, 0, sizeof (get_slaves_data_t)); } /** * @brief Command data for the get_system_reports command. */ typedef struct { int brief; ///< Boolean. Whether respond in brief. char *name; ///< Name of single report to get. char *duration; ///< Duration into the past to report on. char *slave_id; ///< Slave that reports apply to, 0 for local Manager. } get_system_reports_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_system_reports_data_reset (get_system_reports_data_t *data) { free (data->name); free (data->duration); free (data->slave_id); memset (data, 0, sizeof (get_system_reports_data_t)); } /** * @brief Command data for the get_tags command. */ typedef struct { get_data_t get; ///< Get args. int names_only; ///< Boolean. Whether to get only distinct names. } get_tags_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_tags_data_reset (get_tags_data_t *data) { get_data_reset (&data->get); memset (data, 0, sizeof (get_tags_data_t)); } /** * @brief Command data for the get_targets command. */ typedef struct { get_data_t get; ///< Get args. int tasks; ///< Boolean. Whether to include tasks that use target. } get_targets_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_targets_data_reset (get_targets_data_t *data) { get_data_reset (&data->get); memset (data, 0, sizeof (get_targets_data_t)); } /** * @brief Command data for the get_users command. */ typedef struct { get_data_t get; ///< Get args. } get_users_data_t; /** * @brief Reset GET_USERS data. */ static void get_users_data_reset (get_users_data_t * data) { get_data_reset (&data->get); memset (data, 0, sizeof (get_users_data_t)); } /** * @brief Command data for the modify_config command. */ typedef struct { char *comment; ///< New comment for config. char *config_id; ///< ID of config to modify. array_t *families_growing_empty; ///< New family selection: growing, empty. array_t *families_growing_all; ///< New family selection: growing, all NVTs. array_t *families_static_all; ///< New family selection: static, all NVTs. int family_selection_family_all; ///< All flag in FAMILY_SELECTION/FAMILY. char *family_selection_family_all_text; ///< Text version of above. int family_selection_family_growing; ///< FAMILY_SELECTION/FAMILY growing flag. char *family_selection_family_growing_text; ///< Text version of above. char *family_selection_family_name; ///< FAMILY_SELECTION/FAMILY family name. int family_selection_growing; ///< Whether families in selection grow. char *family_selection_growing_text; ///< Text version of above. char *name; ///< New name for config. array_t *nvt_selection; ///< OID array. New NVT set for config. char *nvt_selection_family; ///< Family of NVT selection. char *nvt_selection_nvt_oid; ///< OID during NVT_selection/NVT. char *preference_name; ///< Config preference to modify. char *preference_nvt_oid; ///< OID of NVT of preference. char *preference_value; ///< New value for preference. } modify_config_data_t; /** * @brief Command data for the get_tasks command. */ typedef struct { get_data_t get; ///< Get args. } get_tasks_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void get_tasks_data_reset (get_tasks_data_t *data) { get_data_reset (&data->get); memset (data, 0, sizeof (get_tasks_data_t)); } /** * @brief Command data for the help command. */ typedef struct { char *format; ///< Format. char *type; ///< Type of help. } help_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void help_data_reset (help_data_t *data) { free (data->format); free (data->type); memset (data, 0, sizeof (help_data_t)); } /** * @brief Command data for the modify_agent command. */ typedef struct { char *comment; ///< Comment. char *name; ///< Name of agent. char *agent_id; ///< agent UUID. } modify_agent_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void modify_agent_data_reset (modify_agent_data_t *data) { free (data->comment); free (data->name); free (data->agent_id); memset (data, 0, sizeof (modify_agent_data_t)); } /** * @brief Command data for the modify_alert command. */ typedef struct { char *alert_id; ///< alert UUID. char *name; ///< Name of alert. char *comment; ///< Comment. char *event; ///< Event that will cause alert. array_t *event_data; ///< Array of pointers. Extra data for event. char *filter_id; ///< UUID of filter. char *condition; ///< Condition for alert, e.g. "Always". array_t *condition_data; ///< Array of pointers. Extra data for condition. char *method; ///< Method of alert, e.g. "Email". array_t *method_data; ///< Array of pointer. Extra data for method. char *part_data; ///< Second part of data during *_data: value. char *part_name; ///< First part of data during *_data: name. } modify_alert_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void modify_alert_data_reset (modify_alert_data_t *data) { free (data->alert_id); free (data->name); free (data->comment); free (data->filter_id); free (data->event); array_free (data->event_data); free (data->condition); array_free (data->condition_data); free (data->method); array_free (data->method_data); memset (data, 0, sizeof (modify_alert_data_t)); } /** * @brief Authentication method settings. */ typedef struct { gchar *group_name; ///< Name of the current group GSList *settings; ///< List of auth_conf_setting_t. } auth_group_t; /** * @brief Command data for the modify_auth command. */ typedef struct { GSList *groups; ///< List of auth_group_t GSList *curr_group_settings; ///< Settings of currently parsed group. } modify_auth_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ void modify_auth_data_reset (modify_auth_data_t * data) { GSList *item = data->groups; GSList *subitem = NULL; while (item) { auth_group_t *group = (auth_group_t *) item->data; g_free (group->group_name); /* Free settings. */ subitem = group->settings; while (subitem) { auth_conf_setting_t *kvp = (auth_conf_setting_t *) subitem->data; g_free (kvp->key); g_free (kvp->value); g_free (kvp); subitem = g_slist_next (subitem); } item = g_slist_next (item); } g_slist_free (data->groups); if (data->curr_group_settings) { item = data->curr_group_settings; while (item) { /* Free settings. */ auth_conf_setting_t *kvp = (auth_conf_setting_t *) item->data; g_free (kvp->key); g_free (kvp->value); g_free (kvp); item = g_slist_next (item); } g_slist_free (data->curr_group_settings); } memset (data, 0, sizeof (modify_auth_data_t)); } /** * @brief Reset command data. * * @param[in] data Command data. */ static void modify_config_data_reset (modify_config_data_t *data) { free (data->comment); free (data->config_id); array_free (data->families_growing_empty); array_free (data->families_growing_all); array_free (data->families_static_all); free (data->family_selection_family_all_text); free (data->family_selection_family_growing_text); free (data->family_selection_family_name); free (data->family_selection_growing_text); free (data->name); array_free (data->nvt_selection); free (data->nvt_selection_family); free (data->nvt_selection_nvt_oid); free (data->preference_name); free (data->preference_nvt_oid); free (data->preference_value); memset (data, 0, sizeof (modify_config_data_t)); } /** * @brief Command data for the modify_filter command. */ typedef struct { char *comment; ///< Comment. char *name; ///< Name of filter. char *filter_id; ///< Filter UUID. char *term; ///< Term for filter. char *type; ///< Type of filter. } modify_filter_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void modify_filter_data_reset (modify_filter_data_t *data) { free (data->comment); free (data->name); free (data->filter_id); free (data->term); free (data->type); memset (data, 0, sizeof (modify_filter_data_t)); } /** * @brief Command data for the modify_group command. */ typedef struct { char *comment; ///< Comment. char *name; ///< Name of group. char *group_id; ///< Group UUID. char *users; ///< Users for group. } modify_group_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void modify_group_data_reset (modify_group_data_t *data) { free (data->comment); free (data->name); free (data->group_id); free (data->users); memset (data, 0, sizeof (modify_group_data_t)); } /** * @brief Command data for the modify_lsc_credential command. */ typedef struct { char *lsc_credential_id; ///< ID of credential to modify. char *name; ///< Name. char *comment; ///< Comment. char *login; ///< Login. char *password; ///< Password. } modify_lsc_credential_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void modify_lsc_credential_data_reset (modify_lsc_credential_data_t *data) { free (data->lsc_credential_id); free (data->name); free (data->comment); free (data->login); free (data->password); memset (data, 0, sizeof (modify_lsc_credential_data_t)); } /** * @brief Command data for the modify_permission command. */ typedef struct { char *comment; ///< Comment. char *name; ///< Name of permission. char *permission_id; ///< Permission UUID. char *resource_id; ///< Resource. char *resource_type; ///< Resource type, for Super permissions. char *subject_type; ///< Subject type. char *subject_id; ///< Subject UUID. } modify_permission_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void modify_permission_data_reset (modify_permission_data_t *data) { free (data->comment); free (data->name); free (data->resource_id); free (data->resource_type); free (data->permission_id); free (data->subject_type); free (data->subject_id); memset (data, 0, sizeof (modify_permission_data_t)); } /** * @brief Command data for the modify_port_list command. */ typedef struct { char *comment; ///< Comment. char *name; ///< Name of Port List. char *port_list_id; ///< UUID of Port List. } modify_port_list_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void modify_port_list_data_reset (modify_port_list_data_t *data) { free (data->comment); free (data->name); free (data->port_list_id); memset (data, 0, sizeof (modify_port_list_data_t)); } /** * @brief Command data for the modify_report command. */ typedef struct { char *comment; ///< Comment. char *report_id; ///< ID of report to modify. } modify_report_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void modify_report_data_reset (modify_report_data_t *data) { free (data->comment); free (data->report_id); memset (data, 0, sizeof (modify_report_data_t)); } /** * @brief Command data for the modify_report_format command. */ typedef struct { char *active; ///< Boolean. Whether report format is active. char *name; ///< Name. char *param_name; ///< Param name. char *param_value; ///< Param value. char *report_format_id; ///< ID of report format to modify. char *summary; ///< Summary. } modify_report_format_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void modify_report_format_data_reset (modify_report_format_data_t *data) { free (data->active); free (data->name); free (data->param_name); free (data->param_value); free (data->report_format_id); free (data->summary); memset (data, 0, sizeof (modify_report_format_data_t)); } /** * @brief Command data for the modify_role command. */ typedef struct { char *comment; ///< Comment. char *name; ///< Name of role. char *role_id; ///< Role UUID. char *users; ///< Users for role. } modify_role_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void modify_role_data_reset (modify_role_data_t *data) { free (data->comment); free (data->name); free (data->role_id); free (data->users); memset (data, 0, sizeof (modify_role_data_t)); } /** * @brief Command data for the modify_scanner command. */ typedef struct { char *comment; ///< Comment. char *name; ///< Name of scanner. char *host; ///< Host of scanner. char *port; ///< Port of scanner. char *type; ///< Type of scanner. char *scanner_id; ///< scanner UUID. char *ca_pub; ///< CA Certificate of scanner. char *key_pub; ///< Certificate of scanner. char *key_priv; ///< Private key of scanner. } modify_scanner_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void modify_scanner_data_reset (modify_scanner_data_t *data) { g_free (data->comment); g_free (data->name); g_free (data->host); g_free (data->port); g_free (data->type); g_free (data->scanner_id); free (data->ca_pub); free (data->key_pub); free (data->key_priv); memset (data, 0, sizeof (modify_scanner_data_t)); } /** * @brief Command data for the modify_schedule command. */ typedef struct { char *comment; ///< Comment. char *name; ///< Name of schedule. char *schedule_id; ///< Schedule UUID. char *first_time_day_of_month; ///< Day of month schedule must first run. char *first_time_hour; ///< Hour schedule must first run. char *first_time_minute; ///< Minute schedule must first run. char *first_time_month; ///< Month schedule must first run. char *first_time_year; ///< Year schedule must first run. char *period; ///< Period of schedule (how often it runs). char *period_unit; ///< Unit of period: "hour", "day", "week", .... char *duration; ///< Duration of schedule (how long it runs for). char *duration_unit; ///< Unit of duration: "hour", "day", "week", .... char *timezone; ///< Timezone. } modify_schedule_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void modify_schedule_data_reset (modify_schedule_data_t *data) { free (data->comment); free (data->name); free (data->schedule_id); free (data->first_time_day_of_month); free (data->first_time_hour); free (data->first_time_minute); free (data->first_time_month); free (data->first_time_year); free (data->period); free (data->period_unit); free (data->duration); free (data->duration_unit); free (data->timezone); memset (data, 0, sizeof (modify_schedule_data_t)); } /** * @brief Command data for the modify_slave command. */ typedef struct { char *comment; ///< Comment. char *name; ///< Name of slave. char *slave_id; ///< Slave UUID. char *host; ///< Slave hostname. char *port; ///< Slave port. char *login; ///< Slave login. char *password; ///< Slave password. } modify_slave_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void modify_slave_data_reset (modify_slave_data_t *data) { free (data->comment); free (data->name); free (data->slave_id); free (data->host); free (data->port); free (data->login); free (data->password); memset (data, 0, sizeof (modify_slave_data_t)); } /** * @brief Command data for the modify_tag command. */ typedef struct { char *tag_id; ///< UUID of the tag. char *active; ///< Whether the tag is active. char *resource_id; ///< ID of the resource to which to attach the tag. char *resource_type; ///< Type of the resource to which to attach the tag. char *comment; ///< Comment to add to the tag. char *name; ///< Name of the tag. char *value; ///< Value of the tag. int resource_count; ///< Number of attach tags. } modify_tag_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void modify_tag_data_reset (modify_tag_data_t *data) { free (data->tag_id); free (data->active); free (data->resource_type); free (data->resource_id); free (data->comment); free (data->name); free (data->value); memset (data, 0, sizeof (modify_tag_data_t)); } /** * @brief Command data for the modify_setting command. */ typedef struct { char *name; ///< Name. char *setting_id; ///< Setting. char *value; ///< Value. } modify_setting_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void modify_setting_data_reset (modify_setting_data_t *data) { free (data->name); free (data->setting_id); free (data->value); memset (data, 0, sizeof (modify_setting_data_t)); } /** * @brief Command data for the modify_target command. */ typedef struct { char *alive_tests; ///< Alive tests. char *comment; ///< Comment. char *exclude_hosts; ///< Hosts to exclude from set. char *reverse_lookup_only; ///< Boolean. Whether to consider only hosts that reverse lookup. char *reverse_lookup_unify; ///< Boolean. Whether to unify based on reverse lookup. char *hosts; ///< Hosts for target. char *name; ///< Name of target. char *port_list_id; ///< Port list for target. char *ssh_lsc_credential_id; ///< SSH LSC credential for target. char *ssh_port; ///< Port for SSH LSC. char *smb_lsc_credential_id; ///< SMB LSC credential for target. char *esxi_lsc_credential_id; ///< ESXi LSC credential for target. char *target_id; ///< Target UUID. } modify_target_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void modify_target_data_reset (modify_target_data_t *data) { free (data->alive_tests); free (data->exclude_hosts); free (data->reverse_lookup_only); free (data->reverse_lookup_unify); free (data->comment); free (data->hosts); free (data->name); free (data->port_list_id); free (data->ssh_lsc_credential_id); free (data->ssh_port); free (data->smb_lsc_credential_id); free (data->target_id); memset (data, 0, sizeof (modify_target_data_t)); } /** * @brief Command data for the modify_task command. */ typedef struct { char *action; ///< What to do to file: "update" or "remove". char *alterable; ///< Boolean. Whether the task is alterable. char *comment; ///< Comment. char *hosts_ordering; ///< Order for scanning of target hosts. char *scanner_id; ///< ID of new scanner for task. char *config_id; ///< ID of new config for task. array_t *alerts; ///< IDs of new alerts for task. char *file; ///< File to attach to task. char *file_name; ///< Name of file to attach to task. array_t *groups; ///< IDs of new groups for task. char *name; ///< New name for task. char *observers; ///< Space separated list of observer user names. name_value_t *preference; ///< Current preference. array_t *preferences; ///< Preferences. char *schedule_id; ///< ID of new schedule for task. char *schedule_periods; ///< Number of periods the schedule must run for. char *slave_id; ///< ID of new slave for task. char *target_id; ///< ID of new target for task. char *task_id; ///< ID of task to modify. } modify_task_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void modify_task_data_reset (modify_task_data_t *data) { free (data->action); free (data->alterable); array_free (data->alerts); array_free (data->groups); free (data->comment); free (data->hosts_ordering); free (data->scanner_id); free (data->config_id); free (data->file); free (data->file_name); free (data->name); free (data->observers); if (data->preferences) { guint index = data->preferences->len; while (index--) { name_value_t *pair; pair = (name_value_t*) g_ptr_array_index (data->preferences, index); if (pair) { g_free (pair->name); g_free (pair->value); } } } array_free (data->preferences); free (data->schedule_id); free (data->schedule_periods); free (data->slave_id); free (data->target_id); free (data->task_id); memset (data, 0, sizeof (modify_task_data_t)); } /** * @brief Command data for the modify_note command. */ typedef struct { char *active; ///< Whether the note is active. char *hosts; ///< Hosts to which to limit override. char *note_id; ///< ID of note to modify. char *nvt_oid; ///< NVT to which to limit override. char *port; ///< Port to which to limit override. char *result_id; ///< ID of result to which to limit override. char *severity; ///< Severity score to which to limit note. char *task_id; ///< ID of task to which to limit override. char *text; ///< Text of override. char *threat; ///< Threat to which to limit override. } modify_note_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void modify_note_data_reset (modify_note_data_t *data) { free (data->active); free (data->hosts); free (data->note_id); free (data->nvt_oid); free (data->port); free (data->result_id); free (data->severity); free (data->task_id); free (data->text); free (data->threat); memset (data, 0, sizeof (modify_note_data_t)); } /** * @brief Command data for the modify_override command. */ typedef struct { char *active; ///< Whether the override is active. char *hosts; ///< Hosts to which to limit override. char *new_severity; ///< New severity score of overridden results. char *new_threat; ///< New threat value of overridden results. char *nvt_oid; ///< NVT to which to limit override. char *override_id; ///< ID of override to modify. char *port; ///< Port to which to limit override. char *result_id; ///< ID of result to which to limit override. char *severity; ///< Severity score of results to override. char *task_id; ///< ID of task to which to limit override. char *text; ///< Text of override. char *threat; ///< Threat to which to limit override. } modify_override_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void modify_override_data_reset (modify_override_data_t *data) { free (data->active); free (data->hosts); free (data->new_severity); free (data->new_threat); free (data->nvt_oid); free (data->override_id); free (data->port); free (data->result_id); free (data->severity); free (data->task_id); free (data->text); free (data->threat); memset (data, 0, sizeof (modify_override_data_t)); } /** * @brief Command data for the modify_user command. */ typedef struct { array_t *groups; ///< IDs of groups. int sort_order; gchar *hosts; int hosts_allow; char *ifaces; int ifaces_allow; gboolean modify_password; gchar *name; gchar *new_name; gchar *password; array_t *roles; ///< IDs of roles. array_t *sources; gchar *current_source; gchar *user_id; } modify_user_data_t; /** * @brief Reset MODIFY_USER data. */ static void modify_user_data_reset (modify_user_data_t * data) { array_free (data->groups); g_free (data->name); g_free (data->new_name); g_free (data->user_id); g_free (data->password); g_free (data->hosts); g_free (data->ifaces); array_free (data->roles); if (data->sources) { array_free (data->sources); } g_free (data->current_source); memset (data, 0, sizeof (modify_user_data_t)); } /** * @brief Command data for the restore command. */ typedef struct { char *id; ///< ID of resource to restore. } restore_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void restore_data_reset (restore_data_t *data) { free (data->id); memset (data, 0, sizeof (restore_data_t)); } /** * @brief Command data for the resume_task command. */ typedef struct { char *task_id; ///< ID of task to resume. } resume_task_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void resume_task_data_reset (resume_task_data_t *data) { free (data->task_id); memset (data, 0, sizeof (resume_task_data_t)); } /** * @brief Command data for the start_task command. */ typedef struct { char *task_id; ///< ID of task to start. } start_task_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void start_task_data_reset (start_task_data_t *data) { free (data->task_id); memset (data, 0, sizeof (start_task_data_t)); } /** * @brief Command data for the stop_task command. */ typedef struct { char *task_id; ///< ID of task to stop. } stop_task_data_t; /** * @brief Free members of a stop_task_data_t and set them to NULL. */ /** * @brief Reset command data. * * @param[in] data Command data. */ static void stop_task_data_reset (stop_task_data_t *data) { free (data->task_id); memset (data, 0, sizeof (stop_task_data_t)); } /** * @brief Command data for the test_alert command. */ typedef struct { char *alert_id; ///< ID of alert to test. } test_alert_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void test_alert_data_reset (test_alert_data_t *data) { free (data->alert_id); memset (data, 0, sizeof (test_alert_data_t)); } /** * @brief Command data for the verify_agent command. */ typedef struct { char *agent_id; ///< ID of agent to verify. } verify_agent_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void verify_agent_data_reset (verify_agent_data_t *data) { free (data->agent_id); memset (data, 0, sizeof (verify_agent_data_t)); } /** * @brief Command data for the verify_report_format command. */ typedef struct { char *report_format_id; ///< ID of report format to verify. } verify_report_format_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void verify_report_format_data_reset (verify_report_format_data_t *data) { free (data->report_format_id); memset (data, 0, sizeof (verify_report_format_data_t)); } /** * @brief Command data for the verify_scanner command. */ typedef struct { char *scanner_id; ///< ID of scanner to verify. } verify_scanner_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void verify_scanner_data_reset (verify_scanner_data_t *data) { g_free (data->scanner_id); memset (data, 0, sizeof (verify_scanner_data_t)); } /** * @brief Command data for the wizard command. */ typedef struct { char *mode; ///< Mode to run the wizard in. char *name; ///< Name of the wizard. name_value_t *param; ///< Current param. array_t *params; ///< Parameters. char *read_only; ///< Read only flag. } run_wizard_data_t; /** * @brief Reset command data. * * @param[in] data Command data. */ static void run_wizard_data_reset (run_wizard_data_t *data) { free (data->mode); free (data->name); free (data->read_only); if (data->params) { guint index = data->params->len; while (index--) { name_value_t *pair; pair = (name_value_t*) g_ptr_array_index (data->params, index); if (pair) { g_free (pair->name); g_free (pair->value); } } } array_free (data->params); memset (data, 0, sizeof (run_wizard_data_t)); } /** * @brief Command data, as passed between OMP parser callbacks. */ typedef union { create_agent_data_t create_agent; ///< create_agent create_config_data_t create_config; ///< create_config create_alert_data_t create_alert; ///< create_alert create_filter_data_t create_filter; ///< create_filter create_group_data_t create_group; ///< create_group create_lsc_credential_data_t create_lsc_credential; ///< create_lsc_credential create_note_data_t create_note; ///< create_note create_override_data_t create_override; ///< create_override create_permission_data_t create_permission; ///< create_permission create_port_list_data_t create_port_list; ///< create_port_list create_port_range_data_t create_port_range; ///< create_port_range create_report_data_t create_report; ///< create_report create_report_format_data_t create_report_format; ///< create_report_format create_role_data_t create_role; ///< create_role create_scanner_data_t create_scanner; ///< create_scanner create_schedule_data_t create_schedule; ///< create_schedule create_slave_data_t create_slave; ///< create_slave create_tag_data_t create_tag; ///< create_tag create_target_data_t create_target; ///< create_target create_task_data_t create_task; ///< create_task create_user_data_t create_user; ///< create_user delete_agent_data_t delete_agent; ///< delete_agent delete_config_data_t delete_config; ///< delete_config delete_alert_data_t delete_alert; ///< delete_alert delete_filter_data_t delete_filter; ///< delete_filter delete_group_data_t delete_group; ///< delete_group delete_lsc_credential_data_t delete_lsc_credential; ///< delete_lsc_credential delete_note_data_t delete_note; ///< delete_note delete_override_data_t delete_override; ///< delete_override delete_permission_data_t delete_permission; ///< delete_permission delete_port_list_data_t delete_port_list; ///< delete_port_list delete_port_range_data_t delete_port_range; ///< delete_port_range delete_report_data_t delete_report; ///< delete_report delete_report_format_data_t delete_report_format; ///< delete_report_format delete_role_data_t delete_role; ///< delete_role delete_scanner_data_t delete_scanner; ///< delete_scanner delete_schedule_data_t delete_schedule; ///< delete_schedule delete_slave_data_t delete_slave; ///< delete_slave delete_tag_data_t delete_tag; ///< delete_tag delete_target_data_t delete_target; ///< delete_target delete_task_data_t delete_task; ///< delete_task delete_user_data_t delete_user; ///< delete_user get_agents_data_t get_agents; ///< get_agents get_aggregates_data_t get_aggregates; ///< get_aggregates get_configs_data_t get_configs; ///< get_configs get_alerts_data_t get_alerts; ///< get_alerts get_filters_data_t get_filters; ///< get_filters get_groups_data_t get_groups; ///< get_groups get_info_data_t get_info; ///< get_info get_lsc_credentials_data_t get_lsc_credentials; ///< get_lsc_credentials get_notes_data_t get_notes; ///< get_notes get_nvts_data_t get_nvts; ///< get_nvts get_nvt_families_data_t get_nvt_families; ///< get_nvt_families get_overrides_data_t get_overrides; ///< get_overrides get_permissions_data_t get_permissions; ///< get_permissions get_port_lists_data_t get_port_lists; ///< get_port_lists get_preferences_data_t get_preferences; ///< get_preferences get_reports_data_t get_reports; ///< get_reports get_report_formats_data_t get_report_formats; ///< get_report_formats get_results_data_t get_results; ///< get_results get_roles_data_t get_roles; ///< get_roles get_schedules_data_t get_schedules; ///< get_schedules get_scanners_data_t get_scanners; ///< get_scanners get_settings_data_t get_settings; ///< get_settings get_slaves_data_t get_slaves; ///< get_slaves get_system_reports_data_t get_system_reports; ///< get_system_reports get_tags_data_t get_tags; ///< get_tags get_targets_data_t get_targets; ///< get_targets get_tasks_data_t get_tasks; ///< get_tasks get_users_data_t get_users; ///< get_users help_data_t help; ///< help modify_agent_data_t modify_agent; ///< modify_agent modify_alert_data_t modify_alert; ///< modify_alert modify_auth_data_t modify_auth; ///< modify_auth modify_config_data_t modify_config; ///< modify_config modify_filter_data_t modify_filter; ///< modify_filter modify_group_data_t modify_group; ///< modify_group modify_lsc_credential_data_t modify_lsc_credential; ///< modify_lsc_credential modify_permission_data_t modify_permission; ///< modify_permission modify_port_list_data_t modify_port_list; ///< modify_port_list modify_report_data_t modify_report; ///< modify_report modify_report_format_data_t modify_report_format; ///< modify_report_format modify_role_data_t modify_role; ///< modify_role modify_scanner_data_t modify_scanner; ///< modify_scanner modify_schedule_data_t modify_schedule; ///< modify_schedule modify_setting_data_t modify_setting; ///< modify_setting modify_slave_data_t modify_slave; ///< modify_slave modify_tag_data_t modify_tag; ///< modify_tag modify_target_data_t modify_target; ///< modify_target modify_task_data_t modify_task; ///< modify_task modify_user_data_t modify_user; ///< modify_user restore_data_t restore; ///< restore resume_task_data_t resume_task; ///< resume_task start_task_data_t start_task; ///< start_task stop_task_data_t stop_task; ///< stop_task test_alert_data_t test_alert; ///< test_alert verify_agent_data_t verify_agent; ///< verify_agent verify_report_format_data_t verify_report_format; ///< verify_report_format verify_scanner_data_t verify_scanner; ///< verify_scanner run_wizard_data_t wizard; ///< run_wizard } command_data_t; /** * @brief Initialise command data. */ static void command_data_init (command_data_t *data) { memset (data, 0, sizeof (command_data_t)); } /* Global variables. */ /** * @brief Parser callback data. */ command_data_t command_data; /** * @brief Parser callback data for CREATE_AGENT. */ create_agent_data_t *create_agent_data = (create_agent_data_t*) &(command_data.create_agent); /** * @brief Parser callback data for CREATE_CONFIG. */ create_config_data_t *create_config_data = (create_config_data_t*) &(command_data.create_config); /** * @brief Parser callback data for CREATE_ALERT. */ create_alert_data_t *create_alert_data = (create_alert_data_t*) &(command_data.create_alert); /** * @brief Parser callback data for CREATE_FILTER. */ create_filter_data_t *create_filter_data = (create_filter_data_t*) &(command_data.create_filter); /** * @brief Parser callback data for CREATE_GROUP. */ create_group_data_t *create_group_data = (create_group_data_t*) &(command_data.create_group); /** * @brief Parser callback data for CREATE_LSC_CREDENTIAL. */ create_lsc_credential_data_t *create_lsc_credential_data = (create_lsc_credential_data_t*) &(command_data.create_lsc_credential); /** * @brief Parser callback data for CREATE_NOTE. */ create_note_data_t *create_note_data = (create_note_data_t*) &(command_data.create_note); /** * @brief Parser callback data for CREATE_OVERRIDE. */ create_override_data_t *create_override_data = (create_override_data_t*) &(command_data.create_override); /** * @brief Parser callback data for CREATE_PERMISSION. */ create_permission_data_t *create_permission_data = (create_permission_data_t*) &(command_data.create_permission); /** * @brief Parser callback data for CREATE_PORT_LIST. */ create_port_list_data_t *create_port_list_data = (create_port_list_data_t*) &(command_data.create_port_list); /** * @brief Parser callback data for CREATE_PORT_RANGE. */ create_port_range_data_t *create_port_range_data = (create_port_range_data_t*) &(command_data.create_port_range); /** * @brief Parser callback data for CREATE_ROLE. */ create_role_data_t *create_role_data = (create_role_data_t*) &(command_data.create_role); /** * @brief Parser callback data for CREATE_REPORT. */ create_report_data_t *create_report_data = (create_report_data_t*) &(command_data.create_report); /** * @brief Parser callback data for CREATE_REPORT_FORMAT. */ create_report_format_data_t *create_report_format_data = (create_report_format_data_t*) &(command_data.create_report_format); /** * @brief Parser callback data for CREATE_SCANNER. */ create_scanner_data_t *create_scanner_data = (create_scanner_data_t*) &(command_data.create_scanner); /** * @brief Parser callback data for CREATE_SCHEDULE. */ create_schedule_data_t *create_schedule_data = (create_schedule_data_t*) &(command_data.create_schedule); /** * @brief Parser callback data for CREATE_SLAVE. */ create_slave_data_t *create_slave_data = (create_slave_data_t*) &(command_data.create_slave); /** * @brief Parser callback data for CREATE_TAG. */ create_tag_data_t *create_tag_data = (create_tag_data_t*) &(command_data.create_tag); /** * @brief Parser callback data for CREATE_TARGET. */ create_target_data_t *create_target_data = (create_target_data_t*) &(command_data.create_target); /** * @brief Parser callback data for CREATE_TASK. */ create_task_data_t *create_task_data = (create_task_data_t*) &(command_data.create_task); /** * @brief Parser callback data for CREATE_USER. */ create_user_data_t *create_user_data = &(command_data.create_user); /** * @brief Parser callback data for DELETE_AGENT. */ delete_agent_data_t *delete_agent_data = (delete_agent_data_t*) &(command_data.delete_agent); /** * @brief Parser callback data for DELETE_CONFIG. */ delete_config_data_t *delete_config_data = (delete_config_data_t*) &(command_data.delete_config); /** * @brief Parser callback data for DELETE_ALERT. */ delete_alert_data_t *delete_alert_data = (delete_alert_data_t*) &(command_data.delete_alert); /** * @brief Parser callback data for DELETE_FILTER. */ delete_filter_data_t *delete_filter_data = (delete_filter_data_t*) &(command_data.delete_filter); /** * @brief Parser callback data for DELETE_GROUP. */ delete_group_data_t *delete_group_data = (delete_group_data_t*) &(command_data.delete_group); /** * @brief Parser callback data for DELETE_LSC_CREDENTIAL. */ delete_lsc_credential_data_t *delete_lsc_credential_data = (delete_lsc_credential_data_t*) &(command_data.delete_lsc_credential); /** * @brief Parser callback data for DELETE_NOTE. */ delete_note_data_t *delete_note_data = (delete_note_data_t*) &(command_data.delete_note); /** * @brief Parser callback data for DELETE_OVERRIDE. */ delete_override_data_t *delete_override_data = (delete_override_data_t*) &(command_data.delete_override); /** * @brief Parser callback data for DELETE_PERMISSION. */ delete_permission_data_t *delete_permission_data = (delete_permission_data_t*) &(command_data.delete_permission); /** * @brief Parser callback data for DELETE_PORT_LIST. */ delete_port_list_data_t *delete_port_list_data = (delete_port_list_data_t*) &(command_data.delete_port_list); /** * @brief Parser callback data for DELETE_PORT_RANGE. */ delete_port_range_data_t *delete_port_range_data = (delete_port_range_data_t*) &(command_data.delete_port_range); /** * @brief Parser callback data for DELETE_REPORT. */ delete_report_data_t *delete_report_data = (delete_report_data_t*) &(command_data.delete_report); /** * @brief Parser callback data for DELETE_REPORT_FORMAT. */ delete_report_format_data_t *delete_report_format_data = (delete_report_format_data_t*) &(command_data.delete_report_format); /** * @brief Parser callback data for DELETE_ROLE. */ delete_role_data_t *delete_role_data = (delete_role_data_t*) &(command_data.delete_role); /** * @brief Parser callback data for DELETE_SCANNER. */ delete_scanner_data_t *delete_scanner_data = (delete_scanner_data_t*) &(command_data.delete_scanner); /** * @brief Parser callback data for DELETE_SCHEDULE. */ delete_schedule_data_t *delete_schedule_data = (delete_schedule_data_t*) &(command_data.delete_schedule); /** * @brief Parser callback data for DELETE_SLAVE. */ delete_slave_data_t *delete_slave_data = (delete_slave_data_t*) &(command_data.delete_slave); /** * @brief Parser callback data for DELETE_TAG. */ delete_tag_data_t *delete_tag_data = (delete_tag_data_t*) &(command_data.delete_tag); /** * @brief Parser callback data for DELETE_TARGET. */ delete_target_data_t *delete_target_data = (delete_target_data_t*) &(command_data.delete_target); /** * @brief Parser callback data for DELETE_TASK. */ delete_task_data_t *delete_task_data = (delete_task_data_t*) &(command_data.delete_task); /** * @brief Parser callback data for DELETE_USER. */ delete_user_data_t *delete_user_data = (delete_user_data_t*) &(command_data.delete_user); /** * @brief Parser callback data for GET_AGENTS. */ get_agents_data_t *get_agents_data = &(command_data.get_agents); /** * @brief Parser callback data for GET_AGGREGATES. */ get_aggregates_data_t *get_aggregates_data = &(command_data.get_aggregates); /** * @brief Parser callback data for GET_CONFIGS. */ get_configs_data_t *get_configs_data = &(command_data.get_configs); /** * @brief Parser callback data for GET_ALERTS. */ get_alerts_data_t *get_alerts_data = &(command_data.get_alerts); /** * @brief Parser callback data for GET_FILTERS. */ get_filters_data_t *get_filters_data = &(command_data.get_filters); /** * @brief Parser callback data for GET_GROUPS. */ get_groups_data_t *get_groups_data = &(command_data.get_groups); /** * @brief Parser callback data for GET_INFO. */ get_info_data_t *get_info_data = &(command_data.get_info); /** * @brief Parser callback data for GET_LSC_CREDENTIALS. */ get_lsc_credentials_data_t *get_lsc_credentials_data = &(command_data.get_lsc_credentials); /** * @brief Parser callback data for GET_NOTES. */ get_notes_data_t *get_notes_data = &(command_data.get_notes); /** * @brief Parser callback data for GET_NVTS. */ get_nvts_data_t *get_nvts_data = &(command_data.get_nvts); /** * @brief Parser callback data for GET_NVT_FAMILIES. */ get_nvt_families_data_t *get_nvt_families_data = &(command_data.get_nvt_families); /** * @brief Parser callback data for GET_OVERRIDES. */ get_overrides_data_t *get_overrides_data = &(command_data.get_overrides); /** * @brief Parser callback data for GET_PERMISSIONS. */ get_permissions_data_t *get_permissions_data = &(command_data.get_permissions); /** * @brief Parser callback data for GET_PORT_LISTS. */ get_port_lists_data_t *get_port_lists_data = &(command_data.get_port_lists); /** * @brief Parser callback data for GET_PREFERENCES. */ get_preferences_data_t *get_preferences_data = &(command_data.get_preferences); /** * @brief Parser callback data for GET_REPORTS. */ get_reports_data_t *get_reports_data = &(command_data.get_reports); /** * @brief Parser callback data for GET_REPORT_FORMATS. */ get_report_formats_data_t *get_report_formats_data = &(command_data.get_report_formats); /** * @brief Parser callback data for GET_RESULTS. */ get_results_data_t *get_results_data = &(command_data.get_results); /** * @brief Parser callback data for GET_ROLES. */ get_roles_data_t *get_roles_data = &(command_data.get_roles); /** * @brief Parser callback data for GET_scannerS. */ get_scanners_data_t *get_scanners_data = &(command_data.get_scanners); /** * @brief Parser callback data for GET_SCHEDULES. */ get_schedules_data_t *get_schedules_data = &(command_data.get_schedules); /** * @brief Parser callback data for GET_SETTINGS. */ get_settings_data_t *get_settings_data = &(command_data.get_settings); /** * @brief Parser callback data for GET_SLAVES. */ get_slaves_data_t *get_slaves_data = &(command_data.get_slaves); /** * @brief Parser callback data for GET_SYSTEM_REPORTS. */ get_system_reports_data_t *get_system_reports_data = &(command_data.get_system_reports); /** * @brief Parser callback data for GET_TAGS. */ get_tags_data_t *get_tags_data = &(command_data.get_tags); /** * @brief Parser callback data for GET_TARGETS. */ get_targets_data_t *get_targets_data = &(command_data.get_targets); /** * @brief Parser callback data for GET_TASKS. */ get_tasks_data_t *get_tasks_data = &(command_data.get_tasks); /** * @brief Parser callback data for GET_USERS. */ get_users_data_t *get_users_data = &(command_data.get_users); /** * @brief Parser callback data for HELP. */ help_data_t *help_data = &(command_data.help); /** * @brief Parser callback data for CREATE_CONFIG (import). */ import_config_data_t *import_config_data = (import_config_data_t*) &(command_data.create_config.import); /** * @brief Parser callback data for MODIFY_CONFIG. */ modify_config_data_t *modify_config_data = &(command_data.modify_config); /** * @brief Parser callback data for MODIFY_AGENT. */ modify_agent_data_t *modify_agent_data = &(command_data.modify_agent); /** * @brief Parser callback data for MODIFY_ALERT. */ modify_alert_data_t *modify_alert_data = &(command_data.modify_alert); /** * @brief Parser callback data for MODIFY_AUTH. */ modify_auth_data_t *modify_auth_data = &(command_data.modify_auth); /** * @brief Parser callback data for MODIFY_FILTER. */ modify_filter_data_t *modify_filter_data = &(command_data.modify_filter); /** * @brief Parser callback data for MODIFY_GROUP. */ modify_group_data_t *modify_group_data = &(command_data.modify_group); /** * @brief Parser callback data for MODIFY_LSC_CREDENTIAL. */ modify_lsc_credential_data_t *modify_lsc_credential_data = &(command_data.modify_lsc_credential); /** * @brief Parser callback data for MODIFY_NOTE. */ modify_note_data_t *modify_note_data = (modify_note_data_t*) &(command_data.create_note); /** * @brief Parser callback data for MODIFY_OVERRIDE. */ modify_override_data_t *modify_override_data = (modify_override_data_t*) &(command_data.create_override); /** * @brief Parser callback data for MODIFY_PERMISSION. */ modify_permission_data_t *modify_permission_data = &(command_data.modify_permission); /** * @brief Parser callback data for MODIFY_PORT_LIST. */ modify_port_list_data_t *modify_port_list_data = &(command_data.modify_port_list); /** * @brief Parser callback data for MODIFY_REPORT. */ modify_report_data_t *modify_report_data = &(command_data.modify_report); /** * @brief Parser callback data for MODIFY_REPORT_FORMAT. */ modify_report_format_data_t *modify_report_format_data = &(command_data.modify_report_format); /** * @brief Parser callback data for MODIFY_ROLE. */ modify_role_data_t *modify_role_data = &(command_data.modify_role); /** * @brief Parser callback data for MODIFY_SCANNER. */ modify_scanner_data_t *modify_scanner_data = &(command_data.modify_scanner); /** * @brief Parser callback data for MODIFY_SCHEDULE. */ modify_schedule_data_t *modify_schedule_data = &(command_data.modify_schedule); /** * @brief Parser callback data for MODIFY_SETTING. */ modify_setting_data_t *modify_setting_data = &(command_data.modify_setting); /** * @brief Parser callback data for MODIFY_SLAVE. */ modify_slave_data_t *modify_slave_data = &(command_data.modify_slave); /** * @brief Parser callback data for MODIFY_TAG. */ modify_tag_data_t *modify_tag_data = (modify_tag_data_t*) &(command_data.modify_tag); /** * @brief Parser callback data for MODIFY_TARGET. */ modify_target_data_t *modify_target_data = &(command_data.modify_target); /** * @brief Parser callback data for MODIFY_TASK. */ modify_task_data_t *modify_task_data = &(command_data.modify_task); /** * @brief Parser callback data for MODIFY_USER. */ modify_user_data_t *modify_user_data = &(command_data.modify_user); /** * @brief Parser callback data for RESTORE. */ restore_data_t *restore_data = (restore_data_t*) &(command_data.restore); /** * @brief Parser callback data for RESUME_TASK. */ resume_task_data_t *resume_task_data = (resume_task_data_t*) &(command_data.resume_task); /** * @brief Parser callback data for START_TASK. */ start_task_data_t *start_task_data = (start_task_data_t*) &(command_data.start_task); /** * @brief Parser callback data for STOP_TASK. */ stop_task_data_t *stop_task_data = (stop_task_data_t*) &(command_data.stop_task); /** * @brief Parser callback data for TEST_ALERT. */ test_alert_data_t *test_alert_data = (test_alert_data_t*) &(command_data.test_alert); /** * @brief Parser callback data for VERIFY_AGENT. */ verify_agent_data_t *verify_agent_data = (verify_agent_data_t*) &(command_data.verify_agent); /** * @brief Parser callback data for VERIFY_REPORT_FORMAT. */ verify_report_format_data_t *verify_report_format_data = (verify_report_format_data_t*) &(command_data.verify_report_format); /** * @brief Parser callback data for VERIFY_SCANNER. */ verify_scanner_data_t *verify_scanner_data = (verify_scanner_data_t*) &(command_data.verify_scanner); /** * @brief Parser callback data for WIZARD. */ run_wizard_data_t *run_wizard_data = (run_wizard_data_t*) &(command_data.wizard); /** * @brief Hack for returning forked process status from the callbacks. */ int current_error; /** * @brief Hack for returning fork status to caller. */ int forked; /** * @brief Buffer of output to the client. */ char to_client[TO_CLIENT_BUFFER_SIZE]; /** * @brief The start of the data in the \ref to_client buffer. */ buffer_size_t to_client_start = 0; /** * @brief The end of the data in the \ref to_client buffer. */ buffer_size_t to_client_end = 0; /** * @brief Client input parsing context. */ static /*@null@*/ /*@only@*/ GMarkupParseContext* xml_context = NULL; /** * @brief Client input parser. */ static GMarkupParser xml_parser; /** * @brief The nvt synchronization script for this daemon. */ static const gchar *sync_script = SBINDIR "/openvas-nvt-sync"; /** * @brief The scap synchronization script for this daemon. */ static const gchar *scap_script = SBINDIR "/openvas-scapdata-sync"; /** * @brief The CERT synchronization script for this daemon. */ static const gchar *cert_script = SBINDIR "/openvas-certdata-sync"; /* Client state. */ /** * @brief Possible states of the client. */ typedef enum { CLIENT_TOP, CLIENT_AUTHENTIC, CLIENT_AUTHENTICATE, CLIENT_AUTHENTICATE_CREDENTIALS, CLIENT_AUTHENTICATE_CREDENTIALS_PASSWORD, CLIENT_AUTHENTICATE_CREDENTIALS_USERNAME, CLIENT_AUTHENTIC_COMMANDS, CLIENT_COMMANDS, CLIENT_CREATE_AGENT, CLIENT_CREATE_AGENT_COMMENT, CLIENT_CREATE_AGENT_COPY, CLIENT_CREATE_AGENT_HOWTO_INSTALL, CLIENT_CREATE_AGENT_HOWTO_USE, CLIENT_CREATE_AGENT_INSTALLER, CLIENT_CREATE_AGENT_INSTALLER_FILENAME, CLIENT_CREATE_AGENT_INSTALLER_SIGNATURE, CLIENT_CREATE_AGENT_NAME, CLIENT_CREATE_ALERT, CLIENT_CREATE_ALERT_COMMENT, CLIENT_CREATE_ALERT_CONDITION, CLIENT_CREATE_ALERT_CONDITION_DATA, CLIENT_CREATE_ALERT_CONDITION_DATA_NAME, CLIENT_CREATE_ALERT_COPY, CLIENT_CREATE_ALERT_EVENT, CLIENT_CREATE_ALERT_EVENT_DATA, CLIENT_CREATE_ALERT_EVENT_DATA_NAME, CLIENT_CREATE_ALERT_FILTER, CLIENT_CREATE_ALERT_METHOD, CLIENT_CREATE_ALERT_METHOD_DATA, CLIENT_CREATE_ALERT_METHOD_DATA_NAME, CLIENT_CREATE_ALERT_NAME, CLIENT_CREATE_CONFIG, CLIENT_CREATE_CONFIG_COMMENT, CLIENT_CREATE_CONFIG_COPY, CLIENT_CREATE_CONFIG_SCANNER, CLIENT_CREATE_CONFIG_NAME, /* get_configs_response (GCR) is used for config export. CLIENT_C_C is * for CLIENT_CREATE_CONFIG. */ CLIENT_C_C_GCR, CLIENT_C_C_GCR_CONFIG, CLIENT_C_C_GCR_CONFIG_COMMENT, CLIENT_C_C_GCR_CONFIG_NAME, CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS, CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS_NVT_SELECTOR, CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS_NVT_SELECTOR_FAMILY_OR_NVT, CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS_NVT_SELECTOR_INCLUDE, CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS_NVT_SELECTOR_NAME, CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS_NVT_SELECTOR_TYPE, CLIENT_C_C_GCR_CONFIG_PREFERENCES, CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE, CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_ALT, CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_DEFAULT, CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_NAME, CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_NVT, CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_NVT_NAME, CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_TYPE, CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_VALUE, CLIENT_C_C_GCR_CONFIG_TYPE, CLIENT_CREATE_FILTER, CLIENT_CREATE_FILTER_COMMENT, CLIENT_CREATE_FILTER_COPY, CLIENT_CREATE_FILTER_NAME, CLIENT_CREATE_FILTER_NAME_MAKE_UNIQUE, CLIENT_CREATE_FILTER_TERM, CLIENT_CREATE_FILTER_TYPE, CLIENT_CREATE_GROUP, CLIENT_CREATE_GROUP_COMMENT, CLIENT_CREATE_GROUP_COPY, CLIENT_CREATE_GROUP_NAME, CLIENT_CREATE_GROUP_USERS, CLIENT_CREATE_LSC_CREDENTIAL, CLIENT_CREATE_LSC_CREDENTIAL_COMMENT, CLIENT_CREATE_LSC_CREDENTIAL_COPY, CLIENT_CREATE_LSC_CREDENTIAL_KEY, CLIENT_CREATE_LSC_CREDENTIAL_KEY_PHRASE, CLIENT_CREATE_LSC_CREDENTIAL_KEY_PRIVATE, CLIENT_CREATE_LSC_CREDENTIAL_LOGIN, CLIENT_CREATE_LSC_CREDENTIAL_NAME, CLIENT_CREATE_LSC_CREDENTIAL_PASSWORD, CLIENT_CREATE_NOTE, CLIENT_CREATE_NOTE_ACTIVE, CLIENT_CREATE_NOTE_COPY, CLIENT_CREATE_NOTE_HOSTS, CLIENT_CREATE_NOTE_NVT, CLIENT_CREATE_NOTE_PORT, CLIENT_CREATE_NOTE_RESULT, CLIENT_CREATE_NOTE_SEVERITY, CLIENT_CREATE_NOTE_TASK, CLIENT_CREATE_NOTE_TEXT, CLIENT_CREATE_NOTE_THREAT, CLIENT_CREATE_OVERRIDE, CLIENT_CREATE_OVERRIDE_ACTIVE, CLIENT_CREATE_OVERRIDE_COPY, CLIENT_CREATE_OVERRIDE_HOSTS, CLIENT_CREATE_OVERRIDE_NEW_SEVERITY, CLIENT_CREATE_OVERRIDE_NEW_THREAT, CLIENT_CREATE_OVERRIDE_NVT, CLIENT_CREATE_OVERRIDE_PORT, CLIENT_CREATE_OVERRIDE_RESULT, CLIENT_CREATE_OVERRIDE_SEVERITY, CLIENT_CREATE_OVERRIDE_TASK, CLIENT_CREATE_OVERRIDE_TEXT, CLIENT_CREATE_OVERRIDE_THREAT, CLIENT_CREATE_PERMISSION, CLIENT_CREATE_PERMISSION_COMMENT, CLIENT_CREATE_PERMISSION_COPY, CLIENT_CREATE_PERMISSION_NAME, CLIENT_CREATE_PERMISSION_RESOURCE, CLIENT_CREATE_PERMISSION_RESOURCE_TYPE, CLIENT_CREATE_PERMISSION_SUBJECT, CLIENT_CREATE_PERMISSION_SUBJECT_TYPE, CLIENT_CREATE_PORT_LIST, CLIENT_CREATE_PORT_LIST_COMMENT, CLIENT_CREATE_PORT_LIST_COPY, CLIENT_CREATE_PORT_LIST_NAME, CLIENT_CREATE_PORT_LIST_PORT_RANGE, /* get_port_lists (GPL) is used for port lists export. CLIENT_CPL is * for CLIENT_CREATE_PORT_LIST. */ CLIENT_CPL_GPLR, CLIENT_CPL_GPLR_PORT_LIST, CLIENT_CPL_GPLR_PORT_LIST_COMMENT, CLIENT_CPL_GPLR_PORT_LIST_IN_USE, CLIENT_CPL_GPLR_PORT_LIST_NAME, CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGE, CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES, CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES_PORT_RANGE, CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES_PORT_RANGE_COMMENT, CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES_PORT_RANGE_END, CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES_PORT_RANGE_START, CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES_PORT_RANGE_TYPE, CLIENT_CPL_GPLR_PORT_LIST_TARGETS, CLIENT_CREATE_PORT_RANGE, CLIENT_CREATE_PORT_RANGE_COMMENT, CLIENT_CREATE_PORT_RANGE_END, CLIENT_CREATE_PORT_RANGE_PORT_LIST, CLIENT_CREATE_PORT_RANGE_START, CLIENT_CREATE_PORT_RANGE_TYPE, /* CREATE_REPORT_FORMAT. */ CLIENT_CREATE_REPORT_FORMAT, CLIENT_CREATE_REPORT_FORMAT_COPY, CLIENT_CRF_GRFR, CLIENT_CRF_GRFR_REPORT_FORMAT, CLIENT_CRF_GRFR_REPORT_FORMAT_CONTENT_TYPE, CLIENT_CRF_GRFR_REPORT_FORMAT_DESCRIPTION, CLIENT_CRF_GRFR_REPORT_FORMAT_EXTENSION, CLIENT_CRF_GRFR_REPORT_FORMAT_FILE, CLIENT_CRF_GRFR_REPORT_FORMAT_GLOBAL, CLIENT_CRF_GRFR_REPORT_FORMAT_NAME, CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM, CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_DEFAULT, CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_NAME, CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_OPTIONS, CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_OPTIONS_OPTION, CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_TYPE, CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_TYPE_MAX, CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_TYPE_MIN, CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_VALUE, CLIENT_CRF_GRFR_REPORT_FORMAT_PREDEFINED, CLIENT_CRF_GRFR_REPORT_FORMAT_SIGNATURE, CLIENT_CRF_GRFR_REPORT_FORMAT_SUMMARY, CLIENT_CRF_GRFR_REPORT_FORMAT_TRUST, /* CREATE_REPORT. */ CLIENT_CREATE_REPORT, CLIENT_CREATE_REPORT_REPORT, CLIENT_CREATE_REPORT_RR, CLIENT_CREATE_REPORT_RR_FILTERS, /* RR_H is for RR_HOST because it clashes with entities like HOST_START. */ CLIENT_CREATE_REPORT_RR_H, CLIENT_CREATE_REPORT_RR_HOSTS, CLIENT_CREATE_REPORT_RR_HOST_COUNT, CLIENT_CREATE_REPORT_RR_HOST_END, CLIENT_CREATE_REPORT_RR_HOST_END_HOST, CLIENT_CREATE_REPORT_RR_HOST_START, CLIENT_CREATE_REPORT_RR_HOST_START_HOST, CLIENT_CREATE_REPORT_RR_H_DETAIL, CLIENT_CREATE_REPORT_RR_H_DETAIL_NAME, CLIENT_CREATE_REPORT_RR_H_DETAIL_SOURCE, CLIENT_CREATE_REPORT_RR_H_DETAIL_SOURCE_DESC, CLIENT_CREATE_REPORT_RR_H_DETAIL_SOURCE_NAME, CLIENT_CREATE_REPORT_RR_H_DETAIL_SOURCE_TYPE, CLIENT_CREATE_REPORT_RR_H_DETAIL_VALUE, CLIENT_CREATE_REPORT_RR_H_END, CLIENT_CREATE_REPORT_RR_H_IP, CLIENT_CREATE_REPORT_RR_H_START, CLIENT_CREATE_REPORT_RR_PORTS, CLIENT_CREATE_REPORT_RR_REPORT_FORMAT, CLIENT_CREATE_REPORT_RR_RESULTS, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_COMMENT, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_CREATION_TIME, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_DESCRIPTION, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_DETECTION, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_HOST, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_MODIFICATION_TIME, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NAME, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NOTES, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT_BID, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT_CERT, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT_CERT_CERT_REF, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT_CVE, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT_CVSS_BASE, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT_FAMILY, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT_NAME, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT_XREF, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_OWNER, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_ORIGINAL_SEVERITY, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_ORIGINAL_THREAT, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_OVERRIDES, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_PORT, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD_TYPE, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD_VALUE, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_SCAN_NVT_VERSION, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_SEVERITY, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_THREAT, CLIENT_CREATE_REPORT_RR_RESULT_COUNT, CLIENT_CREATE_REPORT_RR_SCAN_END, CLIENT_CREATE_REPORT_RR_SCAN_RUN_STATUS, CLIENT_CREATE_REPORT_RR_SCAN_START, CLIENT_CREATE_REPORT_RR_SORT, CLIENT_CREATE_REPORT_RR_TASK, CLIENT_CREATE_REPORT_TASK, CLIENT_CREATE_REPORT_TASK_COMMENT, CLIENT_CREATE_REPORT_TASK_NAME, CLIENT_CREATE_ROLE, CLIENT_CREATE_ROLE_COMMENT, CLIENT_CREATE_ROLE_COPY, CLIENT_CREATE_ROLE_NAME, CLIENT_CREATE_ROLE_USERS, CLIENT_CREATE_SCANNER, CLIENT_CREATE_SCANNER_COMMENT, CLIENT_CREATE_SCANNER_COPY, CLIENT_CREATE_SCANNER_NAME, CLIENT_CREATE_SCANNER_HOST, CLIENT_CREATE_SCANNER_PORT, CLIENT_CREATE_SCANNER_TYPE, CLIENT_CREATE_SCANNER_CA_PUB, CLIENT_CREATE_SCANNER_KEY_PUB, CLIENT_CREATE_SCANNER_KEY_PRIV, CLIENT_CREATE_SCHEDULE, CLIENT_CREATE_SCHEDULE_COMMENT, CLIENT_CREATE_SCHEDULE_COPY, CLIENT_CREATE_SCHEDULE_DURATION, CLIENT_CREATE_SCHEDULE_DURATION_UNIT, CLIENT_CREATE_SCHEDULE_FIRST_TIME, CLIENT_CREATE_SCHEDULE_FIRST_TIME_DAY_OF_MONTH, CLIENT_CREATE_SCHEDULE_FIRST_TIME_HOUR, CLIENT_CREATE_SCHEDULE_FIRST_TIME_MINUTE, CLIENT_CREATE_SCHEDULE_FIRST_TIME_MONTH, CLIENT_CREATE_SCHEDULE_FIRST_TIME_YEAR, CLIENT_CREATE_SCHEDULE_NAME, CLIENT_CREATE_SCHEDULE_PERIOD, CLIENT_CREATE_SCHEDULE_PERIOD_UNIT, CLIENT_CREATE_SCHEDULE_TIMEZONE, CLIENT_CREATE_SLAVE, CLIENT_CREATE_SLAVE_COMMENT, CLIENT_CREATE_SLAVE_COPY, CLIENT_CREATE_SLAVE_HOST, CLIENT_CREATE_SLAVE_LOGIN, CLIENT_CREATE_SLAVE_NAME, CLIENT_CREATE_SLAVE_PASSWORD, CLIENT_CREATE_SLAVE_PORT, CLIENT_CREATE_TAG, CLIENT_CREATE_TAG_ACTIVE, CLIENT_CREATE_TAG_COMMENT, CLIENT_CREATE_TAG_COPY, CLIENT_CREATE_TAG_NAME, CLIENT_CREATE_TAG_RESOURCE, CLIENT_CREATE_TAG_RESOURCE_TYPE, CLIENT_CREATE_TAG_VALUE, CLIENT_CREATE_TARGET, CLIENT_CREATE_TARGET_ALIVE_TESTS, CLIENT_CREATE_TARGET_EXCLUDE_HOSTS, CLIENT_CREATE_TARGET_REVERSE_LOOKUP_ONLY, CLIENT_CREATE_TARGET_REVERSE_LOOKUP_UNIFY, CLIENT_CREATE_TARGET_COMMENT, CLIENT_CREATE_TARGET_COPY, CLIENT_CREATE_TARGET_ESXI_LSC_CREDENTIAL, CLIENT_CREATE_TARGET_HOSTS, CLIENT_CREATE_TARGET_NAME, CLIENT_CREATE_TARGET_NAME_MAKE_UNIQUE, CLIENT_CREATE_TARGET_PORT_LIST, CLIENT_CREATE_TARGET_PORT_RANGE, CLIENT_CREATE_TARGET_SMB_LSC_CREDENTIAL, CLIENT_CREATE_TARGET_SSH_LSC_CREDENTIAL, CLIENT_CREATE_TARGET_SSH_LSC_CREDENTIAL_PORT, CLIENT_CREATE_TASK, CLIENT_CREATE_TASK_ALERT, CLIENT_CREATE_TASK_ALTERABLE, CLIENT_CREATE_TASK_COMMENT, CLIENT_CREATE_TASK_HOSTS_ORDERING, CLIENT_CREATE_TASK_SCANNER, CLIENT_CREATE_TASK_CONFIG, CLIENT_CREATE_TASK_COPY, CLIENT_CREATE_TASK_NAME, CLIENT_CREATE_TASK_OBSERVERS, CLIENT_CREATE_TASK_OBSERVERS_GROUP, CLIENT_CREATE_TASK_PREFERENCES, CLIENT_CREATE_TASK_PREFERENCES_PREFERENCE, CLIENT_CREATE_TASK_PREFERENCES_PREFERENCE_NAME, CLIENT_CREATE_TASK_PREFERENCES_PREFERENCE_VALUE, CLIENT_CREATE_TASK_SCHEDULE, CLIENT_CREATE_TASK_SCHEDULE_PERIODS, CLIENT_CREATE_TASK_SLAVE, CLIENT_CREATE_TASK_TARGET, CLIENT_CREATE_USER, CLIENT_CREATE_USER_COPY, CLIENT_CREATE_USER_GROUPS, CLIENT_CREATE_USER_GROUPS_GROUP, CLIENT_CREATE_USER_HOSTS, CLIENT_CREATE_USER_IFACES, CLIENT_CREATE_USER_NAME, CLIENT_CREATE_USER_PASSWORD, CLIENT_CREATE_USER_ROLE, CLIENT_CREATE_USER_SOURCES, CLIENT_CREATE_USER_SOURCES_SOURCE, CLIENT_DELETE_AGENT, CLIENT_DELETE_ALERT, CLIENT_DELETE_CONFIG, CLIENT_DELETE_FILTER, CLIENT_DELETE_GROUP, CLIENT_DELETE_LSC_CREDENTIAL, CLIENT_DELETE_NOTE, CLIENT_DELETE_OVERRIDE, CLIENT_DELETE_PERMISSION, CLIENT_DELETE_PORT_LIST, CLIENT_DELETE_PORT_RANGE, CLIENT_DELETE_REPORT, CLIENT_DELETE_REPORT_FORMAT, CLIENT_DELETE_ROLE, CLIENT_DELETE_SCANNER, CLIENT_DELETE_SCHEDULE, CLIENT_DELETE_SLAVE, CLIENT_DELETE_TAG, CLIENT_DELETE_TARGET, CLIENT_DELETE_TASK, CLIENT_DELETE_USER, CLIENT_DESCRIBE_AUTH, CLIENT_DESCRIBE_CERT, CLIENT_DESCRIBE_FEED, CLIENT_DESCRIBE_SCAP, CLIENT_EMPTY_TRASHCAN, CLIENT_GET_AGENTS, CLIENT_GET_AGGREGATES, CLIENT_GET_ALERTS, CLIENT_GET_CONFIGS, CLIENT_GET_FILTERS, CLIENT_GET_GROUPS, CLIENT_GET_INFO, CLIENT_GET_LSC_CREDENTIALS, CLIENT_GET_NOTES, CLIENT_GET_NVTS, CLIENT_GET_NVT_FAMILIES, CLIENT_GET_NVT_FEED_VERSION, CLIENT_GET_OVERRIDES, CLIENT_GET_PERMISSIONS, CLIENT_GET_PORT_LISTS, CLIENT_GET_PREFERENCES, CLIENT_GET_REPORTS, CLIENT_GET_REPORT_FORMATS, CLIENT_GET_RESULTS, CLIENT_GET_ROLES, CLIENT_GET_SCANNERS, CLIENT_GET_SCHEDULES, CLIENT_GET_SETTINGS, CLIENT_GET_SLAVES, CLIENT_GET_SYSTEM_REPORTS, CLIENT_GET_TAGS, CLIENT_GET_TARGETS, CLIENT_GET_TASKS, CLIENT_GET_USERS, CLIENT_GET_VERSION, CLIENT_GET_VERSION_AUTHENTIC, CLIENT_HELP, CLIENT_MODIFY_AGENT, CLIENT_MODIFY_AGENT_COMMENT, CLIENT_MODIFY_AGENT_NAME, CLIENT_MODIFY_ALERT, CLIENT_MODIFY_ALERT_COMMENT, CLIENT_MODIFY_ALERT_CONDITION, CLIENT_MODIFY_ALERT_CONDITION_DATA, CLIENT_MODIFY_ALERT_CONDITION_DATA_NAME, CLIENT_MODIFY_ALERT_EVENT, CLIENT_MODIFY_ALERT_EVENT_DATA, CLIENT_MODIFY_ALERT_EVENT_DATA_NAME, CLIENT_MODIFY_ALERT_FILTER, CLIENT_MODIFY_ALERT_METHOD, CLIENT_MODIFY_ALERT_METHOD_DATA, CLIENT_MODIFY_ALERT_METHOD_DATA_NAME, CLIENT_MODIFY_ALERT_NAME, CLIENT_MODIFY_AUTH, CLIENT_MODIFY_AUTH_GROUP, CLIENT_MODIFY_AUTH_GROUP_AUTHCONFSETTING, CLIENT_MODIFY_CONFIG, CLIENT_MODIFY_CONFIG_COMMENT, CLIENT_MODIFY_CONFIG_FAMILY_SELECTION, CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_FAMILY, CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_FAMILY_ALL, CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_FAMILY_GROWING, CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_FAMILY_NAME, CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_GROWING, CLIENT_MODIFY_CONFIG_NAME, CLIENT_MODIFY_CONFIG_NVT_SELECTION, CLIENT_MODIFY_CONFIG_NVT_SELECTION_FAMILY, CLIENT_MODIFY_CONFIG_NVT_SELECTION_NVT, CLIENT_MODIFY_CONFIG_PREFERENCE, CLIENT_MODIFY_CONFIG_PREFERENCE_NAME, CLIENT_MODIFY_CONFIG_PREFERENCE_NVT, CLIENT_MODIFY_CONFIG_PREFERENCE_VALUE, CLIENT_MODIFY_FILTER, CLIENT_MODIFY_FILTER_COMMENT, CLIENT_MODIFY_FILTER_NAME, CLIENT_MODIFY_FILTER_TERM, CLIENT_MODIFY_FILTER_TYPE, CLIENT_MODIFY_GROUP, CLIENT_MODIFY_GROUP_COMMENT, CLIENT_MODIFY_GROUP_NAME, CLIENT_MODIFY_GROUP_USERS, CLIENT_MODIFY_LSC_CREDENTIAL, CLIENT_MODIFY_LSC_CREDENTIAL_COMMENT, CLIENT_MODIFY_LSC_CREDENTIAL_LOGIN, CLIENT_MODIFY_LSC_CREDENTIAL_NAME, CLIENT_MODIFY_LSC_CREDENTIAL_PASSWORD, CLIENT_MODIFY_NOTE, CLIENT_MODIFY_NOTE_ACTIVE, CLIENT_MODIFY_NOTE_HOSTS, CLIENT_MODIFY_NOTE_PORT, CLIENT_MODIFY_NOTE_RESULT, CLIENT_MODIFY_NOTE_SEVERITY, CLIENT_MODIFY_NOTE_TASK, CLIENT_MODIFY_NOTE_TEXT, CLIENT_MODIFY_NOTE_THREAT, CLIENT_MODIFY_OVERRIDE, CLIENT_MODIFY_OVERRIDE_ACTIVE, CLIENT_MODIFY_OVERRIDE_HOSTS, CLIENT_MODIFY_OVERRIDE_NEW_SEVERITY, CLIENT_MODIFY_OVERRIDE_NEW_THREAT, CLIENT_MODIFY_OVERRIDE_PORT, CLIENT_MODIFY_OVERRIDE_RESULT, CLIENT_MODIFY_OVERRIDE_SEVERITY, CLIENT_MODIFY_OVERRIDE_TASK, CLIENT_MODIFY_OVERRIDE_TEXT, CLIENT_MODIFY_OVERRIDE_THREAT, CLIENT_MODIFY_PERMISSION, CLIENT_MODIFY_PERMISSION_COMMENT, CLIENT_MODIFY_PERMISSION_NAME, CLIENT_MODIFY_PERMISSION_RESOURCE, CLIENT_MODIFY_PERMISSION_RESOURCE_TYPE, CLIENT_MODIFY_PERMISSION_SUBJECT, CLIENT_MODIFY_PERMISSION_SUBJECT_TYPE, CLIENT_MODIFY_PORT_LIST, CLIENT_MODIFY_PORT_LIST_COMMENT, CLIENT_MODIFY_PORT_LIST_NAME, CLIENT_MODIFY_REPORT, CLIENT_MODIFY_REPORT_COMMENT, CLIENT_MODIFY_REPORT_FORMAT, CLIENT_MODIFY_REPORT_FORMAT_ACTIVE, CLIENT_MODIFY_REPORT_FORMAT_NAME, CLIENT_MODIFY_REPORT_FORMAT_PARAM, CLIENT_MODIFY_REPORT_FORMAT_PARAM_NAME, CLIENT_MODIFY_REPORT_FORMAT_PARAM_VALUE, CLIENT_MODIFY_REPORT_FORMAT_SUMMARY, CLIENT_MODIFY_ROLE, CLIENT_MODIFY_ROLE_COMMENT, CLIENT_MODIFY_ROLE_NAME, CLIENT_MODIFY_ROLE_USERS, CLIENT_MODIFY_SCANNER, CLIENT_MODIFY_SCANNER_COMMENT, CLIENT_MODIFY_SCANNER_NAME, CLIENT_MODIFY_SCANNER_HOST, CLIENT_MODIFY_SCANNER_PORT, CLIENT_MODIFY_SCANNER_TYPE, CLIENT_MODIFY_SCANNER_CA_PUB, CLIENT_MODIFY_SCANNER_KEY_PUB, CLIENT_MODIFY_SCANNER_KEY_PRIV, CLIENT_MODIFY_SCHEDULE, CLIENT_MODIFY_SCHEDULE_COMMENT, CLIENT_MODIFY_SCHEDULE_DURATION, CLIENT_MODIFY_SCHEDULE_DURATION_UNIT, CLIENT_MODIFY_SCHEDULE_FIRST_TIME, CLIENT_MODIFY_SCHEDULE_FIRST_TIME_DAY_OF_MONTH, CLIENT_MODIFY_SCHEDULE_FIRST_TIME_HOUR, CLIENT_MODIFY_SCHEDULE_FIRST_TIME_MINUTE, CLIENT_MODIFY_SCHEDULE_FIRST_TIME_MONTH, CLIENT_MODIFY_SCHEDULE_FIRST_TIME_YEAR, CLIENT_MODIFY_SCHEDULE_NAME, CLIENT_MODIFY_SCHEDULE_PERIOD, CLIENT_MODIFY_SCHEDULE_PERIOD_UNIT, CLIENT_MODIFY_SCHEDULE_TIMEZONE, CLIENT_MODIFY_SETTING, CLIENT_MODIFY_SETTING_NAME, CLIENT_MODIFY_SETTING_VALUE, CLIENT_MODIFY_SLAVE, CLIENT_MODIFY_SLAVE_COMMENT, CLIENT_MODIFY_SLAVE_HOST, CLIENT_MODIFY_SLAVE_LOGIN, CLIENT_MODIFY_SLAVE_NAME, CLIENT_MODIFY_SLAVE_PASSWORD, CLIENT_MODIFY_SLAVE_PORT, CLIENT_MODIFY_TAG, CLIENT_MODIFY_TAG_ACTIVE, CLIENT_MODIFY_TAG_COMMENT, CLIENT_MODIFY_TAG_NAME, CLIENT_MODIFY_TAG_RESOURCE, CLIENT_MODIFY_TAG_RESOURCE_TYPE, CLIENT_MODIFY_TAG_VALUE, CLIENT_MODIFY_TARGET, CLIENT_MODIFY_TARGET_ALIVE_TESTS, CLIENT_MODIFY_TARGET_COMMENT, CLIENT_MODIFY_TARGET_ESXI_LSC_CREDENTIAL, CLIENT_MODIFY_TARGET_HOSTS, CLIENT_MODIFY_TARGET_EXCLUDE_HOSTS, CLIENT_MODIFY_TARGET_REVERSE_LOOKUP_ONLY, CLIENT_MODIFY_TARGET_REVERSE_LOOKUP_UNIFY, CLIENT_MODIFY_TARGET_NAME, CLIENT_MODIFY_TARGET_PORT_LIST, CLIENT_MODIFY_TARGET_SMB_LSC_CREDENTIAL, CLIENT_MODIFY_TARGET_SSH_LSC_CREDENTIAL, CLIENT_MODIFY_TARGET_SSH_LSC_CREDENTIAL_PORT, CLIENT_MODIFY_TASK, CLIENT_MODIFY_TASK_ALERT, CLIENT_MODIFY_TASK_ALTERABLE, CLIENT_MODIFY_TASK_COMMENT, CLIENT_MODIFY_TASK_CONFIG, CLIENT_MODIFY_TASK_FILE, CLIENT_MODIFY_TASK_NAME, CLIENT_MODIFY_TASK_OBSERVERS, CLIENT_MODIFY_TASK_OBSERVERS_GROUP, CLIENT_MODIFY_TASK_PREFERENCES, CLIENT_MODIFY_TASK_PREFERENCES_PREFERENCE, CLIENT_MODIFY_TASK_PREFERENCES_PREFERENCE_NAME, CLIENT_MODIFY_TASK_PREFERENCES_PREFERENCE_VALUE, CLIENT_MODIFY_TASK_SCHEDULE, CLIENT_MODIFY_TASK_SCHEDULE_PERIODS, CLIENT_MODIFY_TASK_SLAVE, CLIENT_MODIFY_TASK_TARGET, CLIENT_MODIFY_TASK_HOSTS_ORDERING, CLIENT_MODIFY_TASK_SCANNER, CLIENT_MODIFY_USER, CLIENT_MODIFY_USER_GROUPS, CLIENT_MODIFY_USER_GROUPS_GROUP, CLIENT_MODIFY_USER_HOSTS, CLIENT_MODIFY_USER_IFACES, CLIENT_MODIFY_USER_NAME, CLIENT_MODIFY_USER_NEW_NAME, CLIENT_MODIFY_USER_PASSWORD, CLIENT_MODIFY_USER_ROLE, CLIENT_MODIFY_USER_SOURCES, CLIENT_MODIFY_USER_SOURCES_SOURCE, CLIENT_RESTORE, CLIENT_RESUME_TASK, CLIENT_RUN_WIZARD, CLIENT_RUN_WIZARD_MODE, CLIENT_RUN_WIZARD_NAME, CLIENT_RUN_WIZARD_PARAMS, CLIENT_RUN_WIZARD_PARAMS_PARAM, CLIENT_RUN_WIZARD_PARAMS_PARAM_NAME, CLIENT_RUN_WIZARD_PARAMS_PARAM_VALUE, CLIENT_START_TASK, CLIENT_STOP_TASK, CLIENT_SYNC_CERT, CLIENT_SYNC_FEED, CLIENT_SYNC_SCAP, CLIENT_TEST_ALERT, CLIENT_VERIFY_AGENT, CLIENT_VERIFY_REPORT_FORMAT, CLIENT_VERIFY_SCANNER, } client_state_t; /** * @brief The state of the client. */ static client_state_t client_state = CLIENT_TOP; /** * @brief Set the client state. */ static void set_client_state (client_state_t state) { client_state = state; tracef (" client state set: %i\n", client_state); } /* Communication. */ /** * @brief Send a response message to the client. * * @param[in] msg The message, a string. * @param[in] user_send_to_client Function to send to client. * @param[in] user_send_to_client_data Argument to \p user_send_to_client. * * @return TRUE if send to client failed, else FALSE. */ static gboolean send_to_client (const char* msg, int (*user_send_to_client) (const char*, void*), void* user_send_to_client_data) { if (user_send_to_client && msg) return user_send_to_client (msg, user_send_to_client_data); return FALSE; } /** * @brief Send an XML element error response message to the client. * * @param[in] command Command name. * @param[in] element Element name. * @param[in] write_to_client Function to write to client. * @param[in] write_to_client_data Argument to \p write_to_client. * * @return TRUE if out of space in to_client, else FALSE. */ static gboolean send_element_error_to_client (const char* command, const char* element, int (*write_to_client) (const char*, void*), void* write_to_client_data) { gchar *msg; gboolean ret; /** @todo Set gerror so parsing terminates. */ msg = g_strdup_printf ("<%s_response status=\"" STATUS_ERROR_SYNTAX "\" status_text=\"Bogus element: %s\"/>", command, element); ret = send_to_client (msg, write_to_client, write_to_client_data); g_free (msg); return ret; } /** * @brief Send an XML find error response message to the client. * * @param[in] command Command name. * @param[in] type Resource type. * @param[in] id Resource ID. * @param[in] omp_parser OMP Parser. * * @return TRUE if out of space in to_client, else FALSE. */ static gboolean send_find_error_to_client (const char* command, const char* type, const char* id, omp_parser_t *omp_parser) { gchar *msg; gboolean ret; msg = g_strdup_printf ("<%s_response status=\"" STATUS_ERROR_MISSING "\" status_text=\"Failed to find %s '%s'\"/>", command, type, id); ret = send_to_client (msg, omp_parser->client_writer, omp_parser->client_writer_data); g_free (msg); return ret; } /** * @brief Set an out of space parse error on a GError. * * @param [out] error The error. */ static void error_send_to_client (GError** error) { tracef (" send_to_client out of space in to_client\n"); g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_PARSE, "Manager out of space for reply to client."); } /** * @brief Set an internal error on a GError. * * @param [out] error The error. */ static void internal_error_send_to_client (GError** error) { g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_PARSE, "Internal Error."); } /* XML parser handlers. */ /** * @brief Expand to XML for a STATUS_ERROR_SYNTAX response. * * @param tag Name of the command generating the response. * @param text Text for the status_text attribute of the response. */ #define XML_ERROR_SYNTAX(tag, text) \ "<" tag "_response" \ " status=\"" STATUS_ERROR_SYNTAX "\"" \ " status_text=\"" text "\"/>" /** * @brief Expand to XML for a STATUS_ERROR_SYNTAX response. * * This is a variant of the \ref XML_ERROR_SYNTAX macro to allow for a * runtime defined syntax_text attribute value. * * @param tag Name of the command generating the response. * @param text Value for the status_text attribute of the response. * The function takes care of proper quoting. * * @return A malloced XML string. The caller must use g_free to * release it. */ static char * make_xml_error_syntax (const char *tag, const char *text) { char *textbuf; char *ret; textbuf = g_markup_escape_text (text, -1); ret = g_strdup_printf ("<%s_response status=\"" STATUS_ERROR_SYNTAX "\"" " status_text=\"%s\"/>", tag, textbuf); g_free (textbuf); return ret; } /** * @brief Expand to XML for a STATUS_ERROR_ACCESS response. * * @param tag Name of the command generating the response. */ #define XML_ERROR_ACCESS(tag) \ "<" tag "_response" \ " status=\"" STATUS_ERROR_ACCESS "\"" \ " status_text=\"" STATUS_ERROR_ACCESS_TEXT "\"/>" /** * @brief Expand to XML for a STATUS_SERVICE_UNAVAILABLE response. * * @param tag Name of the command generating the response. */ #define XML_ERROR_UNAVAILABLE(tag) \ "<" tag "_response" \ " status=\"" STATUS_SERVICE_UNAVAILABLE "\"" \ " status_text=\"" STATUS_SERVICE_UNAVAILABLE_TEXT "\"/>" /** * @brief Expand to XML for a STATUS_ERROR_MISSING response. * * @param tag Name of the command generating the response. */ #define XML_ERROR_MISSING(tag) \ "<" tag "_response" \ " status=\"" STATUS_ERROR_MISSING "\"" \ " status_text=\"" STATUS_ERROR_MISSING_TEXT "\"/>" /** * @brief Expand to XML for a STATUS_ERROR_AUTH_FAILED response. * * @param tag Name of the command generating the response. */ #define XML_ERROR_AUTH_FAILED(tag) \ "<" tag "_response" \ " status=\"" STATUS_ERROR_AUTH_FAILED "\"" \ " status_text=\"" STATUS_ERROR_AUTH_FAILED_TEXT "\"/>" /** * @brief Expand to XML for a STATUS_ERROR_BUSY response. * * @param tag Name of the command generating the response. */ #define XML_ERROR_BUSY(tag) \ "<" tag "_response" \ " status=\"" STATUS_ERROR_BUSY "\"" \ " status_text=\"" STATUS_ERROR_BUSY_TEXT "\"/>" /** * @brief Expand to XML for a STATUS_OK response. * * @param tag Name of the command generating the response. */ #define XML_OK(tag) \ "<" tag "_response" \ " status=\"" STATUS_OK "\"" \ " status_text=\"" STATUS_OK_TEXT "\"/>" /** * @brief Expand to XML for a STATUS_OK_CREATED response. * * @param tag Name of the command generating the response. */ #define XML_OK_CREATED(tag) \ "<" tag "_response" \ " status=\"" STATUS_OK_CREATED "\"" \ " status_text=\"" STATUS_OK_CREATED_TEXT "\"/>" /** * @brief Expand to XML for a STATUS_OK_CREATED response with %s for ID. * * @param tag Name of the command generating the response. */ #define XML_OK_CREATED_ID(tag) \ "<" tag "_response" \ " status=\"" STATUS_OK_CREATED "\"" \ " status_text=\"" STATUS_OK_CREATED_TEXT "\"" \ " id=\"%s\"/>" /** * @brief Expand to XML for a STATUS_OK_REQUESTED response. * * @param tag Name of the command generating the response. */ #define XML_OK_REQUESTED(tag) \ "<" tag "_response" \ " status=\"" STATUS_OK_REQUESTED "\"" \ " status_text=\"" STATUS_OK_REQUESTED_TEXT "\"/>" /** * @brief Expand to XML for a STATUS_INTERNAL_ERROR response. * * @param tag Name of the command generating the response. */ #define XML_INTERNAL_ERROR(tag) \ "<" tag "_response" \ " status=\"" STATUS_INTERNAL_ERROR "\"" \ " status_text=\"" STATUS_INTERNAL_ERROR_TEXT "\"/>" /** * @brief Sends XML for a STATUS_SERVICE_DOWN response. * * @param tag Name of the command generating the response. */ #define SEND_XML_SERVICE_DOWN(tag) \ do { \ char *str; \ if (scanner_current_loading && scanner_total_loading) \ str = g_strdup_printf ("<%s_response status='%s' " \ "status_text='Scanner loading nvts (%d/%d)'/>", \ tag, STATUS_SERVICE_DOWN, \ scanner_current_loading, scanner_total_loading); \ else \ str = g_strdup_printf ("<%s_response status='%s' status_text='%s'/>", \ tag, STATUS_SERVICE_DOWN, \ STATUS_SERVICE_DOWN_TEXT); \ SEND_TO_CLIENT_OR_FAIL(str); \ g_free (str); \ } while (0); /** @cond STATIC */ /** * @brief Send start of GET response. * * @param[in] type Type. * @param[in] write_to_client Function that sends to clients. * @param[in] write_to_client_data Data for write_to_client. */ int send_get_start (const char *type, int (*write_to_client) (const char*, void*), void* write_to_client_data) { gchar *msg; if (strcmp (type, "info")) msg = g_markup_printf_escaped ("", type); else msg = g_markup_printf_escaped ("", type); if (send_to_client (msg, write_to_client, write_to_client_data)) { g_free (msg); return 1; } g_free (msg); return 0; } /** * @brief Send common part of GET response for a single resource. * * @param[in] type Type. * @param[in] get GET data. * @param[in] iterator Iterator. * @param[in] write_to_client Function that sends to clients. * @param[in] write_to_client_data Data for write_to_client. * @param[in] writable Whether the resource is writable. * @param[in] in_use Whether the resource is in use. * * @return 0 success, 1 send error. */ int send_get_common (const char *type, get_data_t *get, iterator_t *iterator, int (*write_to_client) (const char *, void*), void* write_to_client_data, int writable, int in_use) { GString *buffer; const char *tag_type; iterator_t tags; buffer = g_string_new (""); buffer_xml_append_printf (buffer, "<%s id=\"%s\">" "%s" "%s" "%s" "%s" "%s" "%i" "%i" "", type, get_iterator_uuid (iterator) ? get_iterator_uuid (iterator) : "", get_iterator_owner_name (iterator) ? get_iterator_owner_name (iterator) : "", get_iterator_name (iterator) ? get_iterator_name (iterator) : "", get_iterator_comment (iterator) ? get_iterator_comment (iterator) : "", get_iterator_creation_time (iterator) ? get_iterator_creation_time (iterator) : "", get_iterator_modification_time (iterator) ? get_iterator_modification_time (iterator) : "", writable, in_use); if (/* The user is the owner. */ (current_credentials.username && get_iterator_owner_name (iterator) && (strcmp (get_iterator_owner_name (iterator), current_credentials.username) == 0)) /* Or the user is effectively the owner. */ || user_has_super (current_credentials.uuid, get_iterator_owner (iterator)) /* Or the user has Admin rights and the resource is a permission... */ || (current_credentials.uuid && ((strcmp (type, "permission") == 0) && get_iterator_uuid (iterator) /* ... but not the special Admin permission. */ && strcmp (get_iterator_uuid (iterator), PERMISSION_UUID_ADMIN_EVERYTHING)) && user_can_everything (current_credentials.uuid))) { buffer_xml_append_printf (buffer, "" "Everything" "" ""); } else if (current_credentials.uuid && ((strcmp (type, "user") == 0) || (strcmp (type, "role") == 0) || (strcmp (type, "group") == 0)) && (get_iterator_owner (iterator) == 0) && user_can_everything (current_credentials.uuid)) { if ((strcmp (type, "user") == 0) && user_can_super_everyone (get_iterator_uuid (iterator)) && strcmp (get_iterator_uuid (iterator), current_credentials.uuid)) { /* Resource is the Super Admin. */ buffer_xml_append_printf (buffer, "get_users" ""); } else /* The user has admin rights and it's a global user/role/group. * * These are left over from before users/roles/groups had owners. */ buffer_xml_append_printf (buffer, "" "Everything" "" ""); } else { iterator_t perms; get_data_t perms_get; memset (&perms_get, '\0', sizeof (perms_get)); perms_get.filter = g_strdup_printf ("resource_uuid=%s" " owner=any" " permission=any", get_iterator_uuid (iterator)); init_permission_iterator (&perms, &perms_get); g_free (perms_get.filter); while (next (&perms)) buffer_xml_append_printf (buffer, "%s", get_iterator_name (&perms)); cleanup_iterator (&perms); buffer_xml_append_printf (buffer, ""); } tag_type = get->subtype ? get->subtype : get->type; if (get->details || get->id) { buffer_xml_append_printf (buffer, "" "%i", resource_tag_count (tag_type, get_iterator_resource (iterator), 1)); init_resource_tag_iterator (&tags, tag_type, get_iterator_resource (iterator), 1, NULL, 1); while (next (&tags)) { buffer_xml_append_printf (buffer, "" "%s" "%s" "%s" "", resource_tag_iterator_uuid (&tags), resource_tag_iterator_name (&tags), resource_tag_iterator_value (&tags), resource_tag_iterator_comment (&tags)); } cleanup_iterator (&tags); buffer_xml_append_printf (buffer, ""); } else { buffer_xml_append_printf (buffer, "" "%i" "", resource_tag_count (tag_type, get_iterator_resource (iterator), 1)); } if (send_to_client (buffer->str, write_to_client, write_to_client_data)) { g_string_free (buffer, TRUE); return 1; } g_string_free (buffer, TRUE); return 0; } /** * @brief Write data of a GET command filter to a string buffer as XML. * * @param[in] msg The string buffer to write to. * @param[in] type The filtered type. * @param[in] get GET data. * @param[in] filter_term Filter term. */ int buffer_get_filter_xml (GString *msg, const char* type, get_data_t *get, const char* filter_term) { keyword_t **point; array_t *split; filter_t filter; buffer_xml_append_printf (msg, "" "%s", get->filt_id ? get->filt_id : "", filter_term); if (get->filt_id && strcmp (get->filt_id, "") && (find_filter (get->filt_id, &filter) == 0) && filter != 0) buffer_xml_append_printf (msg, "%s", filter_name (filter)); buffer_xml_append_printf (msg, ""); split = split_filter (filter_term); point = (keyword_t**) split->pdata; while (*point) { keyword_t *keyword; keyword = *point; buffer_xml_append_printf (msg, "" "%s" "%s" "%s%s%s" "", keyword->column ? keyword->column : "", keyword_relation_symbol (keyword->relation), keyword->quoted ? "\"" : "", keyword->string ? keyword->string : "", keyword->quoted ? "\"" : ""); point++; } filter_free (split); buffer_xml_append_printf (msg, "" ""); return 0; } /** * @brief Send end of GET response. * * @param[in] type Type. * @param[in] get GET data. * @param[in] count Page count. * @param[in] filtered Filtered count. * @param[in] full Full count. * @param[in] write_to_client Function that sends to clients. * @param[in] write_to_client_data Data for write_to_client. */ int send_get_end (const char *type, get_data_t *get, int count, int filtered, int full, int (*write_to_client) (const char *, void*), void* write_to_client_data) { gchar *sort_field, *filter; int first, max, sort_order; GString *type_many, *msg; if (get->filt_id && strcmp (get->filt_id, "0")) { if (get->filter_replacement) filter = g_strdup (get->filter_replacement); else filter = filter_term (get->filt_id); if (filter == NULL) return 2; } else filter = NULL; manage_filter_controls (filter ? filter : get->filter, &first, &max, &sort_field, &sort_order); if (filter || get->filter) { gchar *new_filter; new_filter = manage_clean_filter (filter ? filter : get->filter); g_free (filter); if ((strcmp (type, "task") == 0) || (strcmp (type, "report") == 0)) { gchar *value; value = filter_term_value (new_filter, "apply_overrides"); if (value == NULL) { filter = new_filter; new_filter = g_strdup_printf ("apply_overrides=%i %s", APPLY_OVERRIDES_DEFAULT, filter); g_free (filter); } g_free (value); } filter = new_filter; } else filter = manage_clean_filter (""); type_many = g_string_new (type); if (strcmp (type, "info") != 0) g_string_append (type_many, "s"); msg = g_string_new (""); buffer_get_filter_xml (msg, type, get, filter); buffer_xml_append_printf (msg, "" "%s%s" "" "<%s start=\"%i\" max=\"%i\"/>" "<%s_count>" "%i" "%i" "%i" "" "", sort_field, sort_order ? "ascending" : "descending", type_many->str, first, max, type, full, filtered, count, type, type_many->str); g_string_free (type_many, TRUE); g_free (sort_field); g_free (filter); if (send_to_client (msg->str, write_to_client, write_to_client_data)) { g_string_free (msg, TRUE); return 1; } g_string_free (msg, TRUE); return 0; } /** * @brief Send start of GET response to client, returning on fail. * * @param[in] type Type of resource. * @param[in] get GET data. */ #define SEND_GET_START(type) \ do \ { \ if (send_get_start (type, omp_parser->client_writer, \ omp_parser->client_writer_data)) \ { \ error_send_to_client (error); \ return; \ } \ } \ while (0) /** * @brief Send common part of GET response to client, returning on fail. * * @param[in] type Type of resource. * @param[in] get GET data. * @param[in] iterator Iterator. */ #define SEND_GET_COMMON(type, get, iterator) \ do \ { \ if (send_get_common (G_STRINGIFY (type), get, iterator, \ omp_parser->client_writer, \ omp_parser->client_writer_data, \ (get)->trash \ ? trash_ ## type ## _writable \ (get_iterator_resource \ (iterator)) \ : type ## _writable \ (get_iterator_resource \ (iterator)), \ (get)->trash \ ? trash_ ## type ## _in_use \ (get_iterator_resource \ (iterator)) \ : type ## _in_use \ (get_iterator_resource \ (iterator)))) \ { \ error_send_to_client (error); \ return; \ } \ } \ while (0) /** * @brief Send end of GET response to client, returning on fail. * * @param[in] type Type of resource. * @param[in] get GET data. */ #define SEND_GET_END(type, get, count, filtered) \ do \ { \ if (send_get_end (type, get, count, filtered, \ resource_count (type, get), \ omp_parser->client_writer, \ omp_parser->client_writer_data)) \ { \ error_send_to_client (error); \ return; \ } \ } \ while (0) /** * @brief Send response message to client, returning on fail. * * Queue a message in \ref to_client with \ref send_to_client. On failure * call \ref error_send_to_client on a GError* called "error" and do a return. * * @param[in] msg The message, a string. */ #define SEND_TO_CLIENT_OR_FAIL(msg) \ do \ { \ if (send_to_client (msg, omp_parser->client_writer, \ omp_parser->client_writer_data)) \ { \ error_send_to_client (error); \ return; \ } \ } \ while (0) /** * @brief Send response message to client, returning on fail. * * Queue a message in \ref to_client with \ref send_to_client. On failure * call \ref error_send_to_client on a GError* called "error" and do a return. * * @param[in] format Format string for message. * @param[in] args Arguments for format string. */ #define SENDF_TO_CLIENT_OR_FAIL(format, args...) \ do \ { \ gchar* msg = g_markup_printf_escaped (format , ## args); \ if (send_to_client (msg, omp_parser->client_writer, \ omp_parser->client_writer_data)) \ { \ g_free (msg); \ error_send_to_client (error); \ return; \ } \ g_free (msg); \ } \ while (0) /** @endcond */ /** * @brief Insert else clause for omp_xml_handle_start_element. * * @param[in] op Operation. */ #define ELSE_ERROR(op) \ else if (omp_parser->importing) \ { \ if (omp_parser->read_over == 0) \ { \ omp_parser->read_over = 1; \ omp_parser->parent_state = client_state; \ } \ } \ else \ { \ if (send_element_error_to_client (op, element_name, \ write_to_client, \ write_to_client_data)) \ { \ error_send_to_client (error); \ return; \ } \ set_client_state (CLIENT_AUTHENTIC); \ g_set_error (error, \ G_MARKUP_ERROR, \ G_MARKUP_ERROR_UNKNOWN_ELEMENT, \ "Error"); \ } \ break /** * @brief Insert else clause for omp_xml_handle_start_element in create_task. * */ #define ELSE_ERROR_CREATE_TASK() \ else if (omp_parser->importing) \ { \ if (omp_parser->read_over == 0) \ { \ omp_parser->read_over = 1; \ omp_parser->parent_state = client_state; \ } \ } \ else \ { \ request_delete_task (&create_task_data->task); \ if (send_element_error_to_client ("create_task", element_name, \ write_to_client, \ write_to_client_data)) \ { \ error_send_to_client (error); \ return; \ } \ set_client_state (CLIENT_AUTHENTIC); \ g_set_error (error, \ G_MARKUP_ERROR, \ G_MARKUP_ERROR_UNKNOWN_ELEMENT, \ "Error"); \ } \ break /** * @brief Creates a log event entry for a resource action. * * @param[in] type Resource type. * @param[in] type_name Resource type name. * @param[in] id Resource id. * @param[in] get_name Whether to include name in the log message. * @param[in] action Action done. * @param[in] fail Whether it is a fail event. */ static void log_event_internal (const char *type, const char *type_name, const char *id, const char *action, int fail) { gchar *domain; domain = g_strdup_printf ("event %s", type); if (id) { char *name; if (resource_name (type, id, LOCATION_TABLE, &name)) name = NULL; else if ((name == NULL) && resource_name (type, id, LOCATION_TRASH, &name)) name = NULL; if (name) g_log (domain, G_LOG_LEVEL_MESSAGE, "%s %s (%s) %s %s by %s", type_name, name, id, fail ? "could not be" : "has been", action, current_credentials.username); else g_log (domain, G_LOG_LEVEL_MESSAGE, "%s %s %s %s by %s", type_name, id, fail ? "could not be" : "has been", action, current_credentials.username); free (name); } else g_log (domain, G_LOG_LEVEL_MESSAGE, "%s %s %s by %s", type_name, fail ? "could not be" : "has been", action, current_credentials.username); g_free (domain); } /** * @brief Creates a log event entry for a resource action. * * @param[in] type Resource type. * @param[in] type_name Resource type name. * @param[in] id Resource id. * @param[in] get_name Whether to include name in the log message. * @param[in] action Action done. */ static void log_event (const char *type, const char *type_name, const char *id, const char *action) { log_event_internal (type, type_name, id, action, 0); } /** * @brief Creates a log event failure entry for a resource action. * * @param[in] type Resource type. * @param[in] type_name Resource type name. * @param[in] id Resource id. * @param[in] get_name Whether to include name in the log message. * @param[in] action Action done. */ static void log_event_fail (const char *type, const char *type_name, const char *id, const char *action) { log_event_internal (type, type_name, id, action, 1); } /** @todo Free globals when tags open, in case of duplicate tags. */ /** * @brief Handle the start of an OMP XML element. * * React to the start of an XML element according to the current value * of \ref client_state, usually adjusting \ref client_state to indicate * the change (with \ref set_client_state). Call \ref send_to_client to * queue any responses for the client. * * Set error parameter on encountering an error. * * @param[in] context Parser context. * @param[in] element_name XML element name. * @param[in] attribute_names XML attribute names. * @param[in] attribute_values XML attribute values. * @param[in] user_data OMP parser. * @param[in] error Error parameter. */ static void omp_xml_handle_start_element (/*@unused@*/ GMarkupParseContext* context, const gchar *element_name, const gchar **attribute_names, const gchar **attribute_values, gpointer user_data, GError **error) { omp_parser_t *omp_parser = (omp_parser_t*) user_data; int (*write_to_client) (const char *, void*) = (int (*) (const char *, void*)) omp_parser->client_writer; void* write_to_client_data = (void*) omp_parser->client_writer_data; tracef (" XML start: %s (%i)\n", element_name, client_state); if (omp_parser->read_over) omp_parser->read_over++; else switch (client_state) { case CLIENT_TOP: if (strcasecmp ("GET_VERSION", element_name) == 0) { set_client_state (CLIENT_GET_VERSION); break; } /*@fallthrough@*/ case CLIENT_COMMANDS: if (strcasecmp ("AUTHENTICATE", element_name) == 0) { set_client_state (CLIENT_AUTHENTICATE); } else if (strcasecmp ("COMMANDS", element_name) == 0) { SENDF_TO_CLIENT_OR_FAIL (""); set_client_state (CLIENT_COMMANDS); } else { /** @todo If a real OMP command, return STATUS_ERROR_MUST_AUTH. */ if (send_to_client (XML_ERROR_SYNTAX ("omp", "First command must be AUTHENTICATE," " COMMANDS or GET_VERSION"), write_to_client, write_to_client_data)) { error_send_to_client (error); return; } if (client_state == CLIENT_COMMANDS) send_to_client ("", write_to_client, write_to_client_data); g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_UNKNOWN_ELEMENT, "Must authenticate first."); } break; case CLIENT_AUTHENTIC: case CLIENT_AUTHENTIC_COMMANDS: if (command_disabled (omp_parser, element_name)) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_UNAVAILABLE ("omp")); g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_UNKNOWN_ELEMENT, "Command Unavailable"); } else if (strcasecmp ("AUTHENTICATE", element_name) == 0) { if (save_tasks ()) abort (); free_tasks (); free_credentials (¤t_credentials); set_client_state (CLIENT_AUTHENTICATE); } else if (strcasecmp ("COMMANDS", element_name) == 0) { SEND_TO_CLIENT_OR_FAIL (""); set_client_state (CLIENT_AUTHENTIC_COMMANDS); } else if (strcasecmp ("CREATE_AGENT", element_name) == 0) { openvas_append_string (&create_agent_data->comment, ""); openvas_append_string (&create_agent_data->installer, ""); openvas_append_string (&create_agent_data->installer_filename, ""); openvas_append_string (&create_agent_data->installer_signature, ""); openvas_append_string (&create_agent_data->howto_install, ""); openvas_append_string (&create_agent_data->howto_use, ""); set_client_state (CLIENT_CREATE_AGENT); } else if (strcasecmp ("CREATE_CONFIG", element_name) == 0) { openvas_append_string (&create_config_data->comment, ""); openvas_append_string (&create_config_data->name, ""); set_client_state (CLIENT_CREATE_CONFIG); } else if (strcasecmp ("CREATE_ALERT", element_name) == 0) { create_alert_data->condition_data = make_array (); create_alert_data->event_data = make_array (); create_alert_data->method_data = make_array (); openvas_append_string (&create_alert_data->part_data, ""); openvas_append_string (&create_alert_data->part_name, ""); openvas_append_string (&create_alert_data->comment, ""); openvas_append_string (&create_alert_data->name, ""); openvas_append_string (&create_alert_data->condition, ""); openvas_append_string (&create_alert_data->method, ""); openvas_append_string (&create_alert_data->event, ""); set_client_state (CLIENT_CREATE_ALERT); } else if (strcasecmp ("CREATE_FILTER", element_name) == 0) { openvas_append_string (&create_filter_data->comment, ""); openvas_append_string (&create_filter_data->term, ""); set_client_state (CLIENT_CREATE_FILTER); } else if (strcasecmp ("CREATE_GROUP", element_name) == 0) { openvas_append_string (&create_group_data->users, ""); set_client_state (CLIENT_CREATE_GROUP); } else if (strcasecmp ("CREATE_ROLE", element_name) == 0) { openvas_append_string (&create_role_data->users, ""); set_client_state (CLIENT_CREATE_ROLE); } else if (strcasecmp ("CREATE_LSC_CREDENTIAL", element_name) == 0) { openvas_append_string (&create_lsc_credential_data->comment, ""); openvas_append_string (&create_lsc_credential_data->login, ""); openvas_append_string (&create_lsc_credential_data->name, ""); set_client_state (CLIENT_CREATE_LSC_CREDENTIAL); } else if (strcasecmp ("CREATE_NOTE", element_name) == 0) set_client_state (CLIENT_CREATE_NOTE); else if (strcasecmp ("CREATE_OVERRIDE", element_name) == 0) set_client_state (CLIENT_CREATE_OVERRIDE); else if (strcasecmp ("CREATE_PORT_LIST", element_name) == 0) set_client_state (CLIENT_CREATE_PORT_LIST); else if (strcasecmp ("CREATE_PORT_RANGE", element_name) == 0) set_client_state (CLIENT_CREATE_PORT_RANGE); else if (strcasecmp ("CREATE_PERMISSION", element_name) == 0) { openvas_append_string (&create_permission_data->comment, ""); set_client_state (CLIENT_CREATE_PERMISSION); } else if (strcasecmp ("CREATE_REPORT", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT); else if (strcasecmp ("CREATE_REPORT_FORMAT", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_FORMAT); else if (strcasecmp ("CREATE_SCANNER", element_name) == 0) set_client_state (CLIENT_CREATE_SCANNER); else if (strcasecmp ("CREATE_SLAVE", element_name) == 0) { openvas_append_string (&create_slave_data->comment, ""); openvas_append_string (&create_slave_data->password, ""); set_client_state (CLIENT_CREATE_SLAVE); } else if (strcasecmp ("CREATE_SCHEDULE", element_name) == 0) set_client_state (CLIENT_CREATE_SCHEDULE); else if (strcasecmp ("CREATE_TAG", element_name) == 0) { set_client_state (CLIENT_CREATE_TAG); } else if (strcasecmp ("CREATE_TARGET", element_name) == 0) { openvas_append_string (&create_target_data->comment, ""); set_client_state (CLIENT_CREATE_TARGET); } else if (strcasecmp ("CREATE_TASK", element_name) == 0) { create_task_data->task = make_task (NULL, NULL); create_task_data->alerts = make_array (); create_task_data->groups = make_array (); set_client_state (CLIENT_CREATE_TASK); } else if (strcasecmp ("CREATE_USER", element_name) == 0) { set_client_state (CLIENT_CREATE_USER); create_user_data->groups = make_array (); create_user_data->roles = make_array (); create_user_data->hosts_allow = 0; create_user_data->ifaces_allow = 0; } else if (strcasecmp ("DELETE_AGENT", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "agent_id", &delete_agent_data->agent_id); if (find_attribute (attribute_names, attribute_values, "ultimate", &attribute)) delete_agent_data->ultimate = strcmp (attribute, "0"); else delete_agent_data->ultimate = 0; set_client_state (CLIENT_DELETE_AGENT); } else if (strcasecmp ("DELETE_CONFIG", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "config_id", &delete_config_data->config_id); if (find_attribute (attribute_names, attribute_values, "ultimate", &attribute)) delete_config_data->ultimate = strcmp (attribute, "0"); else delete_config_data->ultimate = 0; set_client_state (CLIENT_DELETE_CONFIG); } else if (strcasecmp ("DELETE_ALERT", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "alert_id", &delete_alert_data->alert_id); if (find_attribute (attribute_names, attribute_values, "ultimate", &attribute)) delete_alert_data->ultimate = strcmp (attribute, "0"); else delete_alert_data->ultimate = 0; set_client_state (CLIENT_DELETE_ALERT); } else if (strcasecmp ("DELETE_FILTER", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "filter_id", &delete_filter_data->filter_id); if (find_attribute (attribute_names, attribute_values, "ultimate", &attribute)) delete_filter_data->ultimate = strcmp (attribute, "0"); else delete_filter_data->ultimate = 0; set_client_state (CLIENT_DELETE_FILTER); } else if (strcasecmp ("DELETE_GROUP", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "group_id", &delete_group_data->group_id); if (find_attribute (attribute_names, attribute_values, "ultimate", &attribute)) delete_group_data->ultimate = strcmp (attribute, "0"); else delete_group_data->ultimate = 0; set_client_state (CLIENT_DELETE_GROUP); } else if (strcasecmp ("DELETE_LSC_CREDENTIAL", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "lsc_credential_id", &delete_lsc_credential_data->lsc_credential_id); if (find_attribute (attribute_names, attribute_values, "ultimate", &attribute)) delete_lsc_credential_data->ultimate = strcmp (attribute, "0"); else delete_lsc_credential_data->ultimate = 0; set_client_state (CLIENT_DELETE_LSC_CREDENTIAL); } else if (strcasecmp ("DELETE_NOTE", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "note_id", &delete_note_data->note_id); if (find_attribute (attribute_names, attribute_values, "ultimate", &attribute)) delete_note_data->ultimate = strcmp (attribute, "0"); else delete_note_data->ultimate = 0; set_client_state (CLIENT_DELETE_NOTE); } else if (strcasecmp ("DELETE_OVERRIDE", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "override_id", &delete_override_data->override_id); if (find_attribute (attribute_names, attribute_values, "ultimate", &attribute)) delete_override_data->ultimate = strcmp (attribute, "0"); else delete_override_data->ultimate = 0; set_client_state (CLIENT_DELETE_OVERRIDE); } else if (strcasecmp ("DELETE_PERMISSION", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "permission_id", &delete_permission_data->permission_id); if (find_attribute (attribute_names, attribute_values, "ultimate", &attribute)) delete_permission_data->ultimate = strcmp (attribute, "0"); else delete_permission_data->ultimate = 0; set_client_state (CLIENT_DELETE_PERMISSION); } else if (strcasecmp ("DELETE_PORT_LIST", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "port_list_id", &delete_port_list_data->port_list_id); if (find_attribute (attribute_names, attribute_values, "ultimate", &attribute)) delete_port_list_data->ultimate = strcmp (attribute, "0"); else delete_port_list_data->ultimate = 0; set_client_state (CLIENT_DELETE_PORT_LIST); } else if (strcasecmp ("DELETE_PORT_RANGE", element_name) == 0) { append_attribute (attribute_names, attribute_values, "port_range_id", &delete_port_range_data->port_range_id); set_client_state (CLIENT_DELETE_PORT_RANGE); } else if (strcasecmp ("DELETE_REPORT", element_name) == 0) { append_attribute (attribute_names, attribute_values, "report_id", &delete_report_data->report_id); set_client_state (CLIENT_DELETE_REPORT); } else if (strcasecmp ("DELETE_REPORT_FORMAT", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "report_format_id", &delete_report_format_data->report_format_id); if (find_attribute (attribute_names, attribute_values, "ultimate", &attribute)) delete_report_format_data->ultimate = strcmp (attribute, "0"); else delete_report_format_data->ultimate = 0; set_client_state (CLIENT_DELETE_REPORT_FORMAT); } else if (strcasecmp ("DELETE_ROLE", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "role_id", &delete_role_data->role_id); if (find_attribute (attribute_names, attribute_values, "ultimate", &attribute)) delete_role_data->ultimate = strcmp (attribute, "0"); else delete_role_data->ultimate = 0; set_client_state (CLIENT_DELETE_ROLE); } else if (strcasecmp ("DELETE_SCANNER", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "scanner_id", &delete_scanner_data->scanner_id); if (find_attribute (attribute_names, attribute_values, "ultimate", &attribute)) delete_scanner_data->ultimate = strcmp (attribute, "0"); else delete_scanner_data->ultimate = 0; set_client_state (CLIENT_DELETE_SCANNER); } else if (strcasecmp ("DELETE_SCHEDULE", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "schedule_id", &delete_schedule_data->schedule_id); if (find_attribute (attribute_names, attribute_values, "ultimate", &attribute)) delete_schedule_data->ultimate = strcmp (attribute, "0"); else delete_schedule_data->ultimate = 0; set_client_state (CLIENT_DELETE_SCHEDULE); } else if (strcasecmp ("DELETE_SLAVE", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "slave_id", &delete_slave_data->slave_id); if (find_attribute (attribute_names, attribute_values, "ultimate", &attribute)) delete_slave_data->ultimate = strcmp (attribute, "0"); else delete_slave_data->ultimate = 0; set_client_state (CLIENT_DELETE_SLAVE); } else if (strcasecmp ("DELETE_TAG", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "tag_id", &delete_tag_data->tag_id); if (find_attribute (attribute_names, attribute_values, "ultimate", &attribute)) delete_tag_data->ultimate = strcmp (attribute, "0"); else delete_tag_data->ultimate = 0; set_client_state (CLIENT_DELETE_TAG); } else if (strcasecmp ("DELETE_TARGET", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "target_id", &delete_target_data->target_id); if (find_attribute (attribute_names, attribute_values, "ultimate", &attribute)) delete_target_data->ultimate = strcmp (attribute, "0"); else delete_target_data->ultimate = 0; set_client_state (CLIENT_DELETE_TARGET); } else if (strcasecmp ("DELETE_TASK", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "task_id", &delete_task_data->task_id); if (find_attribute (attribute_names, attribute_values, "ultimate", &attribute)) delete_task_data->ultimate = strcmp (attribute, "0"); else delete_task_data->ultimate = 0; set_client_state (CLIENT_DELETE_TASK); } else if (strcasecmp ("DELETE_USER", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "name", &delete_user_data->name); append_attribute (attribute_names, attribute_values, "user_id", &delete_user_data->user_id); if (find_attribute (attribute_names, attribute_values, "ultimate", &attribute)) delete_user_data->ultimate = strcmp (attribute, "0"); else delete_user_data->ultimate = 0; set_client_state (CLIENT_DELETE_USER); } else if (strcasecmp ("DESCRIBE_AUTH", element_name) == 0) set_client_state (CLIENT_DESCRIBE_AUTH); else if (strcasecmp ("DESCRIBE_CERT", element_name) == 0) set_client_state (CLIENT_DESCRIBE_CERT); else if (strcasecmp ("DESCRIBE_FEED", element_name) == 0) set_client_state (CLIENT_DESCRIBE_FEED); else if (strcasecmp ("DESCRIBE_SCAP", element_name) == 0) set_client_state (CLIENT_DESCRIBE_SCAP); else if (strcasecmp ("EMPTY_TRASHCAN", element_name) == 0) set_client_state (CLIENT_EMPTY_TRASHCAN); else if (strcasecmp ("GET_AGENTS", element_name) == 0) { get_data_parse_attributes (&get_agents_data->get, "agent", attribute_names, attribute_values); append_attribute (attribute_names, attribute_values, "format", &get_agents_data->format); set_client_state (CLIENT_GET_AGENTS); } else if (strcasecmp ("GET_AGGREGATES", element_name) == 0) { append_attribute (attribute_names, attribute_values, "type", &get_aggregates_data->type); if (get_aggregates_data->type && strcasecmp (get_aggregates_data->type, "info") == 0) { append_attribute (attribute_names, attribute_values, "info_type", &get_aggregates_data->subtype); } append_attribute (attribute_names, attribute_values, "data_column", &get_aggregates_data->data_column); append_attribute (attribute_names, attribute_values, "group_column", &get_aggregates_data->group_column); get_data_parse_attributes (&get_aggregates_data->get, get_aggregates_data->type ? get_aggregates_data->type : "", attribute_names, attribute_values); set_client_state (CLIENT_GET_AGGREGATES); } else if (strcasecmp ("GET_CONFIGS", element_name) == 0) { const gchar* attribute; get_data_parse_attributes (&get_configs_data->get, "config", attribute_names, attribute_values); if (find_attribute (attribute_names, attribute_values, "tasks", &attribute)) get_configs_data->tasks = strcmp (attribute, "0"); else get_configs_data->tasks = 0; if (find_attribute (attribute_names, attribute_values, "families", &attribute)) get_configs_data->families = strcmp (attribute, "0"); else get_configs_data->families = 0; if (find_attribute (attribute_names, attribute_values, "preferences", &attribute)) get_configs_data->preferences = strcmp (attribute, "0"); else get_configs_data->preferences = 0; set_client_state (CLIENT_GET_CONFIGS); } else if (strcasecmp ("GET_ALERTS", element_name) == 0) { const gchar* attribute; get_data_parse_attributes (&get_alerts_data->get, "alert", attribute_names, attribute_values); if (find_attribute (attribute_names, attribute_values, "tasks", &attribute)) get_alerts_data->tasks = strcmp (attribute, "0"); else get_alerts_data->tasks = 0; set_client_state (CLIENT_GET_ALERTS); } else if (strcasecmp ("GET_FILTERS", element_name) == 0) { const gchar* attribute; get_data_parse_attributes (&get_filters_data->get, "filter", attribute_names, attribute_values); if (find_attribute (attribute_names, attribute_values, "alerts", &attribute)) get_filters_data->alerts = strcmp (attribute, "0"); else get_filters_data->alerts = 0; set_client_state (CLIENT_GET_FILTERS); } else if (strcasecmp ("GET_GROUPS", element_name) == 0) { get_data_parse_attributes (&get_groups_data->get, "group", attribute_names, attribute_values); set_client_state (CLIENT_GET_GROUPS); } else if (strcasecmp ("GET_LSC_CREDENTIALS", element_name) == 0) { const gchar* attribute; get_data_parse_attributes (&get_lsc_credentials_data->get, "lsc_credential", attribute_names, attribute_values); if (find_attribute (attribute_names, attribute_values, "targets", &attribute)) get_lsc_credentials_data->targets = strcmp (attribute, "0"); else get_lsc_credentials_data->targets = 0; append_attribute (attribute_names, attribute_values, "format", &get_lsc_credentials_data->format); set_client_state (CLIENT_GET_LSC_CREDENTIALS); } else if (strcasecmp ("GET_NOTES", element_name) == 0) { const gchar* attribute; get_data_parse_attributes (&get_notes_data->get, "note", attribute_names, attribute_values); append_attribute (attribute_names, attribute_values, "note_id", &get_notes_data->note_id); append_attribute (attribute_names, attribute_values, "nvt_oid", &get_notes_data->nvt_oid); append_attribute (attribute_names, attribute_values, "task_id", &get_notes_data->task_id); if (find_attribute (attribute_names, attribute_values, "result", &attribute)) get_notes_data->result = strcmp (attribute, "0"); else get_notes_data->result = 0; set_client_state (CLIENT_GET_NOTES); } else if (strcasecmp ("GET_NVT_FEED_VERSION", element_name) == 0) set_client_state (CLIENT_GET_NVT_FEED_VERSION); else if (strcasecmp ("GET_NVTS", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "nvt_oid", &get_nvts_data->nvt_oid); append_attribute (attribute_names, attribute_values, "config_id", &get_nvts_data->config_id); if (find_attribute (attribute_names, attribute_values, "details", &attribute)) get_nvts_data->details = strcmp (attribute, "0"); else get_nvts_data->details = 0; append_attribute (attribute_names, attribute_values, "family", &get_nvts_data->family); if (find_attribute (attribute_names, attribute_values, "preferences", &attribute)) get_nvts_data->preferences = strcmp (attribute, "0"); else get_nvts_data->preferences = 0; if (find_attribute (attribute_names, attribute_values, "preference_count", &attribute)) get_nvts_data->preference_count = strcmp (attribute, "0"); else get_nvts_data->preference_count = 0; if (find_attribute (attribute_names, attribute_values, "timeout", &attribute)) get_nvts_data->timeout = strcmp (attribute, "0"); else get_nvts_data->timeout = 0; append_attribute (attribute_names, attribute_values, "sort_field", &get_nvts_data->sort_field); if (find_attribute (attribute_names, attribute_values, "sort_order", &attribute)) get_nvts_data->sort_order = strcmp (attribute, "descending"); else get_nvts_data->sort_order = 1; set_client_state (CLIENT_GET_NVTS); } else if (strcasecmp ("GET_NVT_FAMILIES", element_name) == 0) { const gchar* attribute; if (find_attribute (attribute_names, attribute_values, "sort_order", &attribute)) get_nvt_families_data->sort_order = strcmp (attribute, "descending"); else get_nvt_families_data->sort_order = 1; set_client_state (CLIENT_GET_NVT_FAMILIES); } else if (strcasecmp ("GET_OVERRIDES", element_name) == 0) { const gchar* attribute; get_data_parse_attributes (&get_overrides_data->get, "override", attribute_names, attribute_values); append_attribute (attribute_names, attribute_values, "override_id", &get_overrides_data->override_id); append_attribute (attribute_names, attribute_values, "nvt_oid", &get_overrides_data->nvt_oid); append_attribute (attribute_names, attribute_values, "task_id", &get_overrides_data->task_id); if (find_attribute (attribute_names, attribute_values, "result", &attribute)) get_overrides_data->result = strcmp (attribute, "0"); else get_overrides_data->result = 0; set_client_state (CLIENT_GET_OVERRIDES); } else if (strcasecmp ("GET_PORT_LISTS", element_name) == 0) { const gchar* attribute; get_data_parse_attributes (&get_port_lists_data->get, "port_list", attribute_names, attribute_values); if (find_attribute (attribute_names, attribute_values, "targets", &attribute)) get_port_lists_data->targets = strcmp (attribute, "0"); else get_port_lists_data->targets = 0; set_client_state (CLIENT_GET_PORT_LISTS); } else if (strcasecmp ("GET_PERMISSIONS", element_name) == 0) { get_data_parse_attributes (&get_permissions_data->get, "permission", attribute_names, attribute_values); append_attribute (attribute_names, attribute_values, "resource_id", &get_permissions_data->resource_id); set_client_state (CLIENT_GET_PERMISSIONS); } else if (strcasecmp ("GET_PREFERENCES", element_name) == 0) { append_attribute (attribute_names, attribute_values, "nvt_oid", &get_preferences_data->nvt_oid); append_attribute (attribute_names, attribute_values, "config_id", &get_preferences_data->config_id); append_attribute (attribute_names, attribute_values, "preference", &get_preferences_data->preference); set_client_state (CLIENT_GET_PREFERENCES); } else if (strcasecmp ("GET_REPORTS", element_name) == 0) { const gchar* attribute; get_data_parse_attributes (&get_reports_data->get, "report", attribute_names, attribute_values); get_data_parse_attributes (&get_reports_data->report_get, "report", attribute_names, attribute_values); /* Special case details with default 1, for backward * compatibility. */ if (find_attribute (attribute_names, attribute_values, "details", &attribute)) get_reports_data->report_get.details = strcmp (attribute, "0"); else get_reports_data->report_get.details = 1; get_reports_data->get.details = get_reports_data->report_get.details; g_free (get_reports_data->report_get.filt_id); get_reports_data->report_get.filt_id = NULL; append_attribute (attribute_names, attribute_values, "report_filt_id", &get_reports_data->report_get.filt_id); g_free (get_reports_data->report_get.filter); get_reports_data->report_get.filter = NULL; append_attribute (attribute_names, attribute_values, "report_filter", &get_reports_data->report_get.filter); append_attribute (attribute_names, attribute_values, "report_id", &get_reports_data->report_id); append_attribute (attribute_names, attribute_values, "delta_report_id", &get_reports_data->delta_report_id); append_attribute (attribute_names, attribute_values, "alert_id", &get_reports_data->alert_id); append_attribute (attribute_names, attribute_values, "format_id", &get_reports_data->format_id); if (find_attribute (attribute_names, attribute_values, "first_result", &attribute)) /* Subtract 1 to switch from 1 to 0 indexing. */ get_reports_data->first_result = atoi (attribute) - 1; else get_reports_data->first_result = 0; if (find_attribute (attribute_names, attribute_values, "host_first_result", &attribute)) /* Subtract 1 to switch from 1 to 0 indexing. */ get_reports_data->host_first_result = atoi (attribute) - 1; else get_reports_data->host_first_result = 0; if (find_attribute (attribute_names, attribute_values, "max_results", &attribute)) get_reports_data->max_results = atoi (attribute); else get_reports_data->max_results = -1; if (find_attribute (attribute_names, attribute_values, "host_max_results", &attribute)) get_reports_data->host_max_results = atoi (attribute); else get_reports_data->host_max_results = -1; append_attribute (attribute_names, attribute_values, "sort_field", &get_reports_data->sort_field); if (find_attribute (attribute_names, attribute_values, "sort_order", &attribute)) get_reports_data->sort_order = strcmp (attribute, "descending"); else { if (get_reports_data->sort_field == NULL || (strcmp (get_reports_data->sort_field, "type") == 0)) /* Normally it makes more sense to order type descending. */ get_reports_data->sort_order = 0; else get_reports_data->sort_order = 1; } append_attribute (attribute_names, attribute_values, "levels", &get_reports_data->levels); append_attribute (attribute_names, attribute_values, "host_levels", &get_reports_data->host_levels); append_attribute (attribute_names, attribute_values, "host_search_phrase", &get_reports_data->host_search_phrase); append_attribute (attribute_names, attribute_values, "delta_states", &get_reports_data->delta_states); append_attribute (attribute_names, attribute_values, "search_phrase", &get_reports_data->search_phrase); if (find_attribute (attribute_names, attribute_values, "autofp", &attribute)) get_reports_data->autofp = strcmp (attribute, "0"); else get_reports_data->autofp = 0; if (find_attribute (attribute_names, attribute_values, "notes", &attribute)) get_reports_data->notes = strcmp (attribute, "0"); else get_reports_data->notes = 0; if (find_attribute (attribute_names, attribute_values, "notes_details", &attribute)) get_reports_data->notes_details = strcmp (attribute, "0"); else get_reports_data->notes_details = 0; if (find_attribute (attribute_names, attribute_values, "overrides", &attribute)) get_reports_data->overrides = strcmp (attribute, "0"); else get_reports_data->overrides = 0; if (find_attribute (attribute_names, attribute_values, "overrides_details", &attribute)) get_reports_data->overrides_details = strcmp (attribute, "0"); else get_reports_data->overrides_details = 0; if (find_attribute (attribute_names, attribute_values, "apply_overrides", &attribute)) get_reports_data->apply_overrides = strcmp (attribute, "0"); else get_reports_data->apply_overrides = 0; append_attribute (attribute_names, attribute_values, "min_cvss_base", &get_reports_data->min_cvss_base); append_attribute (attribute_names, attribute_values, "min_qod", &get_reports_data->min_qod); if (find_attribute (attribute_names, attribute_values, "result_hosts_only", &attribute)) get_reports_data->result_hosts_only = strcmp (attribute, "0"); else get_reports_data->result_hosts_only = 1; if (find_attribute (attribute_names, attribute_values, "type", &attribute)) openvas_append_string (&get_reports_data->type, attribute); else get_reports_data->type = g_strdup ("scan"); append_attribute (attribute_names, attribute_values, "host", &get_reports_data->host); append_attribute (attribute_names, attribute_values, "pos", &get_reports_data->pos); if (find_attribute (attribute_names, attribute_values, "ignore_pagination", &attribute)) get_reports_data->ignore_pagination = atoi (attribute); else get_reports_data->ignore_pagination = 0; append_attribute (attribute_names, attribute_values, "timezone", &get_reports_data->timezone); set_client_state (CLIENT_GET_REPORTS); } else if (strcasecmp ("GET_REPORT_FORMATS", element_name) == 0) { const gchar* attribute; get_data_parse_attributes (&get_report_formats_data->get, "report_format", attribute_names, attribute_values); if (find_attribute (attribute_names, attribute_values, "alerts", &attribute)) get_report_formats_data->alerts = strcmp (attribute, "0"); else get_report_formats_data->alerts = 0; if (find_attribute (attribute_names, attribute_values, "params", &attribute)) get_report_formats_data->params = strcmp (attribute, "0"); else get_report_formats_data->params = 0; set_client_state (CLIENT_GET_REPORT_FORMATS); } else if (strcasecmp ("GET_RESULTS", element_name) == 0) { const gchar* attribute; get_data_parse_attributes (&get_results_data->get, "result", attribute_names, attribute_values); append_attribute (attribute_names, attribute_values, "task_id", &get_results_data->task_id); if (find_attribute (attribute_names, attribute_values, "notes", &attribute)) get_results_data->notes = strcmp (attribute, "0"); else get_results_data->notes = 0; if (find_attribute (attribute_names, attribute_values, "notes_details", &attribute)) get_results_data->notes_details = strcmp (attribute, "0"); else get_results_data->notes_details = 0; if (find_attribute (attribute_names, attribute_values, "overrides", &attribute)) get_results_data->overrides = strcmp (attribute, "0"); else get_results_data->overrides = 0; if (find_attribute (attribute_names, attribute_values, "overrides_details", &attribute)) get_results_data->overrides_details = strcmp (attribute, "0"); else get_results_data->overrides_details = 0; if (find_attribute (attribute_names, attribute_values, "apply_overrides", &attribute)) { get_results_data->apply_overrides = strcmp (attribute, "0"); get_results_data->apply_overrides_set = 1; } else { get_results_data->apply_overrides = 0; get_results_data->apply_overrides_set = 0; } if (find_attribute (attribute_names, attribute_values, "autofp", &attribute)) get_results_data->autofp = strcmp (attribute, "0"); else get_results_data->autofp = 0; set_client_state (CLIENT_GET_RESULTS); } else if (strcasecmp ("GET_ROLES", element_name) == 0) { get_data_parse_attributes (&get_roles_data->get, "role", attribute_names, attribute_values); set_client_state (CLIENT_GET_ROLES); } else if (strcasecmp ("GET_SCANNERS", element_name) == 0) { get_data_parse_attributes (&get_scanners_data->get, "scanner", attribute_names, attribute_values); set_client_state (CLIENT_GET_SCANNERS); } else if (strcasecmp ("GET_SCHEDULES", element_name) == 0) { const gchar *attribute; get_data_parse_attributes (&get_schedules_data->get, "schedule", attribute_names, attribute_values); if (find_attribute (attribute_names, attribute_values, "tasks", &attribute)) get_schedules_data->tasks = strcmp (attribute, "0"); else get_schedules_data->tasks = 0; set_client_state (CLIENT_GET_SCHEDULES); } else if (strcasecmp ("GET_SETTINGS", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "setting_id", &get_settings_data->setting_id); append_attribute (attribute_names, attribute_values, "filter", &get_settings_data->filter); if (find_attribute (attribute_names, attribute_values, "first", &attribute)) /* Subtract 1 to switch from 1 to 0 indexing. */ get_settings_data->first = atoi (attribute) - 1; else get_settings_data->first = 0; if (get_settings_data->first < 0) get_settings_data->first = 0; if (find_attribute (attribute_names, attribute_values, "max", &attribute)) get_settings_data->max = atoi (attribute); else get_settings_data->max = -1; if (get_settings_data->max < 1) get_settings_data->max = -1; append_attribute (attribute_names, attribute_values, "sort_field", &get_settings_data->sort_field); if (find_attribute (attribute_names, attribute_values, "sort_order", &attribute)) get_settings_data->sort_order = strcmp (attribute, "descending"); else get_settings_data->sort_order = 1; set_client_state (CLIENT_GET_SETTINGS); } else if (strcasecmp ("GET_SLAVES", element_name) == 0) { const gchar* attribute; get_data_parse_attributes (&get_slaves_data->get, "slave", attribute_names, attribute_values); if (find_attribute (attribute_names, attribute_values, "tasks", &attribute)) get_slaves_data->tasks = strcmp (attribute, "0"); else get_slaves_data->tasks = 0; set_client_state (CLIENT_GET_SLAVES); } else if (strcasecmp ("GET_TAGS", element_name) == 0) { const gchar* attribute; get_data_parse_attributes (&get_tags_data->get, "tag", attribute_names, attribute_values); if (find_attribute (attribute_names, attribute_values, "names_only", &attribute)) get_tags_data->names_only = strcmp (attribute, "0"); else get_tags_data->names_only = 0; set_client_state (CLIENT_GET_TAGS); } else if (strcasecmp ("GET_SYSTEM_REPORTS", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "name", &get_system_reports_data->name); append_attribute (attribute_names, attribute_values, "duration", &get_system_reports_data->duration); append_attribute (attribute_names, attribute_values, "slave_id", &get_system_reports_data->slave_id); if (find_attribute (attribute_names, attribute_values, "brief", &attribute)) get_system_reports_data->brief = strcmp (attribute, "0"); else get_system_reports_data->brief = 0; set_client_state (CLIENT_GET_SYSTEM_REPORTS); } else if (strcasecmp ("GET_TARGETS", element_name) == 0) { const gchar *attribute; get_data_parse_attributes (&get_targets_data->get, "target", attribute_names, attribute_values); if (find_attribute (attribute_names, attribute_values, "tasks", &attribute)) get_targets_data->tasks = strcmp (attribute, "0"); else get_targets_data->tasks = 0; set_client_state (CLIENT_GET_TARGETS); } else if (strcasecmp ("GET_TASKS", element_name) == 0) { get_data_parse_attributes (&get_tasks_data->get, "task", attribute_names, attribute_values); set_client_state (CLIENT_GET_TASKS); } else if (strcasecmp ("GET_USERS", element_name) == 0) { get_data_parse_attributes (&get_users_data->get, "user", attribute_names, attribute_values); set_client_state (CLIENT_GET_USERS); } else if (strcasecmp ("GET_INFO", element_name) == 0) { const gchar* attribute; const gchar* typebuf; get_data_parse_attributes (&get_info_data->get, "info", attribute_names, attribute_values); append_attribute (attribute_names, attribute_values, "name", &get_info_data->name); if (find_attribute (attribute_names, attribute_values, "details", &attribute)) get_info_data->details = strcmp (attribute, "0"); else get_info_data->details = 0; if (find_attribute (attribute_names, attribute_values, "type", &typebuf)) get_info_data->type = g_ascii_strdown (typebuf, -1); set_client_state (CLIENT_GET_INFO); } else if (strcasecmp ("GET_VERSION", element_name) == 0) set_client_state (CLIENT_GET_VERSION_AUTHENTIC); else if (strcasecmp ("HELP", element_name) == 0) { append_attribute (attribute_names, attribute_values, "format", &help_data->format); append_attribute (attribute_names, attribute_values, "type", &help_data->type); set_client_state (CLIENT_HELP); } else if (strcasecmp ("MODIFY_AGENT", element_name) == 0) { append_attribute (attribute_names, attribute_values, "agent_id", &modify_agent_data->agent_id); set_client_state (CLIENT_MODIFY_AGENT); } else if (strcasecmp ("MODIFY_ALERT", element_name) == 0) { modify_alert_data->event_data = make_array (); openvas_append_string (&modify_alert_data->event, ""); modify_alert_data->condition_data = make_array (); openvas_append_string (&modify_alert_data->condition, ""); modify_alert_data->method_data = make_array (); openvas_append_string (&modify_alert_data->method, ""); append_attribute (attribute_names, attribute_values, "alert_id", &modify_alert_data->alert_id); set_client_state (CLIENT_MODIFY_ALERT); } else if (strcasecmp ("MODIFY_AUTH", element_name) == 0) set_client_state (CLIENT_MODIFY_AUTH); else if (strcasecmp ("MODIFY_CONFIG", element_name) == 0) { append_attribute (attribute_names, attribute_values, "config_id", &modify_config_data->config_id); set_client_state (CLIENT_MODIFY_CONFIG); } else if (strcasecmp ("MODIFY_FILTER", element_name) == 0) { append_attribute (attribute_names, attribute_values, "filter_id", &modify_filter_data->filter_id); set_client_state (CLIENT_MODIFY_FILTER); } else if (strcasecmp ("MODIFY_GROUP", element_name) == 0) { append_attribute (attribute_names, attribute_values, "group_id", &modify_group_data->group_id); set_client_state (CLIENT_MODIFY_GROUP); } else if (strcasecmp ("MODIFY_PORT_LIST", element_name) == 0) { append_attribute (attribute_names, attribute_values, "port_list_id", &modify_port_list_data->port_list_id); set_client_state (CLIENT_MODIFY_PORT_LIST); } else if (strcasecmp ("MODIFY_LSC_CREDENTIAL", element_name) == 0) { append_attribute (attribute_names, attribute_values, "lsc_credential_id", &modify_lsc_credential_data->lsc_credential_id); set_client_state (CLIENT_MODIFY_LSC_CREDENTIAL); } else if (strcasecmp ("MODIFY_NOTE", element_name) == 0) { append_attribute (attribute_names, attribute_values, "note_id", &modify_note_data->note_id); set_client_state (CLIENT_MODIFY_NOTE); } else if (strcasecmp ("MODIFY_OVERRIDE", element_name) == 0) { append_attribute (attribute_names, attribute_values, "override_id", &modify_override_data->override_id); set_client_state (CLIENT_MODIFY_OVERRIDE); } else if (strcasecmp ("MODIFY_PERMISSION", element_name) == 0) { append_attribute (attribute_names, attribute_values, "permission_id", &modify_permission_data->permission_id); set_client_state (CLIENT_MODIFY_PERMISSION); } else if (strcasecmp ("MODIFY_REPORT", element_name) == 0) { append_attribute (attribute_names, attribute_values, "report_id", &modify_report_data->report_id); set_client_state (CLIENT_MODIFY_REPORT); } else if (strcasecmp ("MODIFY_REPORT_FORMAT", element_name) == 0) { append_attribute (attribute_names, attribute_values, "report_format_id", &modify_report_format_data->report_format_id); set_client_state (CLIENT_MODIFY_REPORT_FORMAT); } else if (strcasecmp ("MODIFY_ROLE", element_name) == 0) { append_attribute (attribute_names, attribute_values, "role_id", &modify_role_data->role_id); set_client_state (CLIENT_MODIFY_ROLE); } else if (strcasecmp ("MODIFY_SCANNER", element_name) == 0) { append_attribute (attribute_names, attribute_values, "scanner_id", &modify_scanner_data->scanner_id); set_client_state (CLIENT_MODIFY_SCANNER); } else if (strcasecmp ("MODIFY_SCHEDULE", element_name) == 0) { append_attribute (attribute_names, attribute_values, "schedule_id", &modify_schedule_data->schedule_id); set_client_state (CLIENT_MODIFY_SCHEDULE); } else if (strcasecmp ("MODIFY_SETTING", element_name) == 0) { append_attribute (attribute_names, attribute_values, "setting_id", &modify_setting_data->setting_id); set_client_state (CLIENT_MODIFY_SETTING); } else if (strcasecmp ("MODIFY_SLAVE", element_name) == 0) { append_attribute (attribute_names, attribute_values, "slave_id", &modify_slave_data->slave_id); set_client_state (CLIENT_MODIFY_SLAVE); } else if (strcasecmp ("MODIFY_TAG", element_name) == 0) { append_attribute (attribute_names, attribute_values, "tag_id", &modify_tag_data->tag_id); set_client_state (CLIENT_MODIFY_TAG); } else if (strcasecmp ("MODIFY_TARGET", element_name) == 0) { append_attribute (attribute_names, attribute_values, "target_id", &modify_target_data->target_id); set_client_state (CLIENT_MODIFY_TARGET); } else if (strcasecmp ("MODIFY_TASK", element_name) == 0) { append_attribute (attribute_names, attribute_values, "task_id", &modify_task_data->task_id); modify_task_data->alerts = make_array (); modify_task_data->groups = make_array (); set_client_state (CLIENT_MODIFY_TASK); } else if (strcasecmp ("MODIFY_USER", element_name) == 0) { append_attribute (attribute_names, attribute_values, "user_id", &modify_user_data->user_id); set_client_state (CLIENT_MODIFY_USER); } else if (strcasecmp ("RESTORE", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &restore_data->id); set_client_state (CLIENT_RESTORE); } else if (strcasecmp ("RESUME_TASK", element_name) == 0) { append_attribute (attribute_names, attribute_values, "task_id", &resume_task_data->task_id); set_client_state (CLIENT_RESUME_TASK); } else if (strcasecmp ("RUN_WIZARD", element_name) == 0) { append_attribute (attribute_names, attribute_values, "name", &run_wizard_data->name); append_attribute (attribute_names, attribute_values, "read_only", &run_wizard_data->read_only); set_client_state (CLIENT_RUN_WIZARD); } else if (strcasecmp ("START_TASK", element_name) == 0) { append_attribute (attribute_names, attribute_values, "task_id", &start_task_data->task_id); set_client_state (CLIENT_START_TASK); } else if (strcasecmp ("STOP_TASK", element_name) == 0) { append_attribute (attribute_names, attribute_values, "task_id", &stop_task_data->task_id); set_client_state (CLIENT_STOP_TASK); } else if (strcasecmp ("SYNC_CERT", element_name) == 0) set_client_state (CLIENT_SYNC_CERT); else if (strcasecmp ("SYNC_FEED", element_name) == 0) set_client_state (CLIENT_SYNC_FEED); else if (strcasecmp ("SYNC_SCAP", element_name) == 0) set_client_state (CLIENT_SYNC_SCAP); else if (strcasecmp ("TEST_ALERT", element_name) == 0) { append_attribute (attribute_names, attribute_values, "alert_id", &test_alert_data->alert_id); set_client_state (CLIENT_TEST_ALERT); } else if (strcasecmp ("VERIFY_AGENT", element_name) == 0) { append_attribute (attribute_names, attribute_values, "agent_id", &verify_agent_data->agent_id); set_client_state (CLIENT_VERIFY_AGENT); } else if (strcasecmp ("VERIFY_REPORT_FORMAT", element_name) == 0) { append_attribute (attribute_names, attribute_values, "report_format_id", &verify_report_format_data->report_format_id); set_client_state (CLIENT_VERIFY_REPORT_FORMAT); } else if (strcasecmp ("VERIFY_SCANNER", element_name) == 0) { append_attribute (attribute_names, attribute_values, "scanner_id", &verify_scanner_data->scanner_id); set_client_state (CLIENT_VERIFY_SCANNER); } else { if (send_to_client (XML_ERROR_SYNTAX ("omp", "Bogus command name"), write_to_client, write_to_client_data)) { error_send_to_client (error); return; } g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_UNKNOWN_ELEMENT, "Error"); } break; case CLIENT_AUTHENTICATE: if (strcasecmp ("CREDENTIALS", element_name) == 0) { /* Init, so it's the empty string when the entity is empty. */ append_to_credentials_password (¤t_credentials, "", 0); set_client_state (CLIENT_AUTHENTICATE_CREDENTIALS); } ELSE_ERROR ("authenticate"); case CLIENT_AUTHENTICATE_CREDENTIALS: if (strcasecmp ("USERNAME", element_name) == 0) set_client_state (CLIENT_AUTHENTICATE_CREDENTIALS_USERNAME); else if (strcasecmp ("PASSWORD", element_name) == 0) set_client_state (CLIENT_AUTHENTICATE_CREDENTIALS_PASSWORD); ELSE_ERROR ("authenticate"); case CLIENT_CREATE_SCANNER: if (strcasecmp ("COMMENT", element_name) == 0) set_client_state (CLIENT_CREATE_SCANNER_COMMENT); else if (strcasecmp ("COPY", element_name) == 0) set_client_state (CLIENT_CREATE_SCANNER_COPY); else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_CREATE_SCANNER_NAME); else if (strcasecmp ("HOST", element_name) == 0) set_client_state (CLIENT_CREATE_SCANNER_HOST); else if (strcasecmp ("PORT", element_name) == 0) set_client_state (CLIENT_CREATE_SCANNER_PORT); else if (strcasecmp ("TYPE", element_name) == 0) set_client_state (CLIENT_CREATE_SCANNER_TYPE); else if (strcasecmp ("CA_PUB", element_name) == 0) set_client_state (CLIENT_CREATE_SCANNER_CA_PUB); else if (strcasecmp ("KEY_PUB", element_name) == 0) set_client_state (CLIENT_CREATE_SCANNER_KEY_PUB); else if (strcasecmp ("KEY_PRIV", element_name) == 0) set_client_state (CLIENT_CREATE_SCANNER_KEY_PRIV); ELSE_ERROR ("create_scanner"); case CLIENT_CREATE_SCHEDULE: if (strcasecmp ("COMMENT", element_name) == 0) set_client_state (CLIENT_CREATE_SCHEDULE_COMMENT); else if (strcasecmp ("COPY", element_name) == 0) set_client_state (CLIENT_CREATE_SCHEDULE_COPY); else if (strcasecmp ("DURATION", element_name) == 0) set_client_state (CLIENT_CREATE_SCHEDULE_DURATION); else if (strcasecmp ("FIRST_TIME", element_name) == 0) set_client_state (CLIENT_CREATE_SCHEDULE_FIRST_TIME); else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_CREATE_SCHEDULE_NAME); else if (strcasecmp ("PERIOD", element_name) == 0) set_client_state (CLIENT_CREATE_SCHEDULE_PERIOD); else if (strcasecmp ("TIMEZONE", element_name) == 0) set_client_state (CLIENT_CREATE_SCHEDULE_TIMEZONE); ELSE_ERROR ("create_schedule"); case CLIENT_CREATE_SCHEDULE_FIRST_TIME: if (strcasecmp ("DAY_OF_MONTH", element_name) == 0) set_client_state (CLIENT_CREATE_SCHEDULE_FIRST_TIME_DAY_OF_MONTH); else if (strcasecmp ("HOUR", element_name) == 0) set_client_state (CLIENT_CREATE_SCHEDULE_FIRST_TIME_HOUR); else if (strcasecmp ("MINUTE", element_name) == 0) set_client_state (CLIENT_CREATE_SCHEDULE_FIRST_TIME_MINUTE); else if (strcasecmp ("MONTH", element_name) == 0) set_client_state (CLIENT_CREATE_SCHEDULE_FIRST_TIME_MONTH); else if (strcasecmp ("YEAR", element_name) == 0) set_client_state (CLIENT_CREATE_SCHEDULE_FIRST_TIME_YEAR); ELSE_ERROR ("create_schedule"); case CLIENT_CREATE_SCHEDULE_DURATION: if (strcasecmp ("UNIT", element_name) == 0) set_client_state (CLIENT_CREATE_SCHEDULE_DURATION_UNIT); ELSE_ERROR ("create_schedule"); case CLIENT_CREATE_SCHEDULE_PERIOD: if (strcasecmp ("UNIT", element_name) == 0) set_client_state (CLIENT_CREATE_SCHEDULE_PERIOD_UNIT); ELSE_ERROR ("create_schedule"); case CLIENT_MODIFY_AGENT: if (strcasecmp ("COMMENT", element_name) == 0) { openvas_append_string (&modify_agent_data->comment, ""); set_client_state (CLIENT_MODIFY_AGENT_COMMENT); } else if (strcasecmp ("NAME", element_name) == 0) { openvas_append_string (&modify_agent_data->name, ""); set_client_state (CLIENT_MODIFY_AGENT_NAME); } ELSE_ERROR ("modify_agent"); case CLIENT_MODIFY_ALERT: if (strcasecmp ("NAME", element_name) == 0) { openvas_append_string (&modify_alert_data->name, ""); set_client_state (CLIENT_MODIFY_ALERT_NAME); } else if (strcasecmp ("COMMENT", element_name) == 0) { openvas_append_string (&modify_alert_data->comment, ""); set_client_state (CLIENT_MODIFY_ALERT_COMMENT); } else if (strcasecmp ("EVENT", element_name) == 0) set_client_state (CLIENT_MODIFY_ALERT_EVENT); else if (strcasecmp ("FILTER", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &modify_alert_data->filter_id); set_client_state (CLIENT_MODIFY_ALERT_FILTER); } else if (strcasecmp ("CONDITION", element_name) == 0) set_client_state (CLIENT_MODIFY_ALERT_CONDITION); else if (strcasecmp ("METHOD", element_name) == 0) set_client_state (CLIENT_MODIFY_ALERT_METHOD); ELSE_ERROR ("modify_alert"); case CLIENT_MODIFY_ALERT_EVENT: if (strcasecmp ("DATA", element_name) == 0) set_client_state (CLIENT_MODIFY_ALERT_EVENT_DATA); ELSE_ERROR ("modify_alert"); case CLIENT_MODIFY_ALERT_EVENT_DATA: if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_MODIFY_ALERT_EVENT_DATA_NAME); ELSE_ERROR ("modify_alert"); case CLIENT_MODIFY_ALERT_CONDITION: if (strcasecmp ("DATA", element_name) == 0) set_client_state (CLIENT_MODIFY_ALERT_CONDITION_DATA); ELSE_ERROR ("modify_alert"); case CLIENT_MODIFY_ALERT_CONDITION_DATA: if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_MODIFY_ALERT_CONDITION_DATA_NAME); ELSE_ERROR ("modify_alert"); case CLIENT_MODIFY_ALERT_METHOD: if (strcasecmp ("DATA", element_name) == 0) set_client_state (CLIENT_MODIFY_ALERT_METHOD_DATA); ELSE_ERROR ("modify_alert"); case CLIENT_MODIFY_ALERT_METHOD_DATA: if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_MODIFY_ALERT_METHOD_DATA_NAME); ELSE_ERROR ("modify_alert"); case CLIENT_MODIFY_AUTH: if (strcasecmp ("GROUP", element_name) == 0) { const gchar* attribute; auth_group_t *new_group; new_group = g_malloc0 (sizeof (auth_group_t)); if (find_attribute (attribute_names, attribute_values, "name", &attribute)) new_group->group_name = g_strdup (attribute); modify_auth_data->groups = g_slist_prepend (modify_auth_data->groups, new_group); set_client_state (CLIENT_MODIFY_AUTH_GROUP); } ELSE_ERROR ("modify_auth"); case CLIENT_MODIFY_AUTH_GROUP: if (strcasecmp ("AUTH_CONF_SETTING", element_name) == 0) { set_client_state (CLIENT_MODIFY_AUTH_GROUP_AUTHCONFSETTING); auth_conf_setting_t *setting = auth_conf_setting_from_xml (element_name, attribute_names, attribute_values); modify_auth_data->curr_group_settings = g_slist_prepend (modify_auth_data->curr_group_settings, setting); } ELSE_ERROR ("modify_auth"); case CLIENT_MODIFY_AUTH_GROUP_AUTHCONFSETTING: { /* AUTH_CONF_SETTING should not have any children. */ if (send_element_error_to_client ("auth_conf_setting", element_name, write_to_client, write_to_client_data)) { error_send_to_client (error); return; } modify_auth_data_reset (modify_auth_data); set_client_state (CLIENT_AUTHENTIC); g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_UNKNOWN_ELEMENT, "Error"); break; } case CLIENT_MODIFY_CONFIG: if (strcasecmp ("COMMENT", element_name) == 0) { openvas_free_string_var (&modify_config_data->comment); openvas_append_string (&modify_config_data->comment, ""); set_client_state (CLIENT_MODIFY_CONFIG_COMMENT); } else if (strcasecmp ("FAMILY_SELECTION", element_name) == 0) { modify_config_data->families_growing_all = make_array (); modify_config_data->families_static_all = make_array (); modify_config_data->families_growing_empty = make_array (); /* For GROWING entity, in case missing. */ modify_config_data->family_selection_growing = 0; set_client_state (CLIENT_MODIFY_CONFIG_FAMILY_SELECTION); } else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_MODIFY_CONFIG_NAME); else if (strcasecmp ("NVT_SELECTION", element_name) == 0) { modify_config_data->nvt_selection = make_array (); set_client_state (CLIENT_MODIFY_CONFIG_NVT_SELECTION); } else if (strcasecmp ("PREFERENCE", element_name) == 0) { openvas_free_string_var (&modify_config_data->preference_name); openvas_free_string_var (&modify_config_data->preference_nvt_oid); openvas_free_string_var (&modify_config_data->preference_value); set_client_state (CLIENT_MODIFY_CONFIG_PREFERENCE); } ELSE_ERROR ("modify_config"); case CLIENT_MODIFY_CONFIG_NVT_SELECTION: if (strcasecmp ("FAMILY", element_name) == 0) set_client_state (CLIENT_MODIFY_CONFIG_NVT_SELECTION_FAMILY); else if (strcasecmp ("NVT", element_name) == 0) { append_attribute (attribute_names, attribute_values, "oid", &modify_config_data->nvt_selection_nvt_oid); set_client_state (CLIENT_MODIFY_CONFIG_NVT_SELECTION_NVT); } ELSE_ERROR ("modify_config"); case CLIENT_MODIFY_CONFIG_FAMILY_SELECTION: if (strcasecmp ("FAMILY", element_name) == 0) { /* For ALL entity, in case missing. */ modify_config_data->family_selection_family_all = 0; /* For GROWING entity, in case missing. */ modify_config_data->family_selection_family_growing = 0; set_client_state (CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_FAMILY); } else if (strcasecmp ("GROWING", element_name) == 0) set_client_state (CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_GROWING); ELSE_ERROR ("modify_config"); case CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_FAMILY: if (strcasecmp ("ALL", element_name) == 0) set_client_state (CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_FAMILY_ALL); else if (strcasecmp ("GROWING", element_name) == 0) set_client_state (CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_FAMILY_GROWING); else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_FAMILY_NAME); ELSE_ERROR ("modify_config"); case CLIENT_MODIFY_CONFIG_PREFERENCE: if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_MODIFY_CONFIG_PREFERENCE_NAME); else if (strcasecmp ("NVT", element_name) == 0) { append_attribute (attribute_names, attribute_values, "oid", &modify_config_data->preference_nvt_oid); set_client_state (CLIENT_MODIFY_CONFIG_PREFERENCE_NVT); } else if (strcasecmp ("VALUE", element_name) == 0) set_client_state (CLIENT_MODIFY_CONFIG_PREFERENCE_VALUE); ELSE_ERROR ("modify_config"); case CLIENT_MODIFY_FILTER: if (strcasecmp ("COMMENT", element_name) == 0) { openvas_append_string (&modify_filter_data->comment, ""); set_client_state (CLIENT_MODIFY_FILTER_COMMENT); } else if (strcasecmp ("NAME", element_name) == 0) { openvas_append_string (&modify_filter_data->name, ""); set_client_state (CLIENT_MODIFY_FILTER_NAME); } else if (strcasecmp ("TERM", element_name) == 0) { openvas_append_string (&modify_filter_data->term, ""); set_client_state (CLIENT_MODIFY_FILTER_TERM); } else if (strcasecmp ("TYPE", element_name) == 0) { openvas_append_string (&modify_filter_data->type, ""); set_client_state (CLIENT_MODIFY_FILTER_TYPE); } ELSE_ERROR ("modify_filter"); case CLIENT_MODIFY_GROUP: if (strcasecmp ("COMMENT", element_name) == 0) { openvas_append_string (&modify_group_data->comment, ""); set_client_state (CLIENT_MODIFY_GROUP_COMMENT); } else if (strcasecmp ("NAME", element_name) == 0) { openvas_append_string (&modify_group_data->name, ""); set_client_state (CLIENT_MODIFY_GROUP_NAME); } else if (strcasecmp ("USERS", element_name) == 0) { openvas_append_string (&modify_group_data->users, ""); set_client_state (CLIENT_MODIFY_GROUP_USERS); } ELSE_ERROR ("modify_group"); case CLIENT_MODIFY_PERMISSION: if (strcasecmp ("COMMENT", element_name) == 0) set_client_state (CLIENT_MODIFY_PERMISSION_COMMENT); else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_MODIFY_PERMISSION_NAME); else if (strcasecmp ("RESOURCE", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &modify_permission_data->resource_id); set_client_state (CLIENT_MODIFY_PERMISSION_RESOURCE); } else if (strcasecmp ("SUBJECT", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &modify_permission_data->subject_id); set_client_state (CLIENT_MODIFY_PERMISSION_SUBJECT); } ELSE_ERROR ("modify_permission"); case CLIENT_MODIFY_PERMISSION_RESOURCE: if (strcasecmp ("TYPE", element_name) == 0) set_client_state (CLIENT_MODIFY_PERMISSION_RESOURCE_TYPE); ELSE_ERROR ("modify_permission"); case CLIENT_MODIFY_PERMISSION_SUBJECT: if (strcasecmp ("TYPE", element_name) == 0) set_client_state (CLIENT_MODIFY_PERMISSION_SUBJECT_TYPE); ELSE_ERROR ("modify_permission"); case CLIENT_MODIFY_PORT_LIST: if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_MODIFY_PORT_LIST_NAME); else if (strcasecmp ("COMMENT", element_name) == 0) { openvas_free_string_var (&modify_port_list_data->comment); openvas_append_string (&modify_port_list_data->comment, ""); set_client_state (CLIENT_MODIFY_PORT_LIST_COMMENT); } ELSE_ERROR ("modify_port_list"); case CLIENT_MODIFY_LSC_CREDENTIAL: if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_MODIFY_LSC_CREDENTIAL_NAME); else if (strcasecmp ("COMMENT", element_name) == 0) { openvas_free_string_var (&modify_lsc_credential_data->comment); openvas_append_string (&modify_lsc_credential_data->comment, ""); set_client_state (CLIENT_MODIFY_LSC_CREDENTIAL_COMMENT); } else if (strcasecmp ("LOGIN", element_name) == 0) set_client_state (CLIENT_MODIFY_LSC_CREDENTIAL_LOGIN); else if (strcasecmp ("PASSWORD", element_name) == 0) { openvas_free_string_var (&modify_lsc_credential_data->password); openvas_append_string (&modify_lsc_credential_data->password, ""); set_client_state (CLIENT_MODIFY_LSC_CREDENTIAL_PASSWORD); } ELSE_ERROR ("modify_lsc_credential"); case CLIENT_MODIFY_REPORT: if (strcasecmp ("COMMENT", element_name) == 0) set_client_state (CLIENT_MODIFY_REPORT_COMMENT); ELSE_ERROR ("modify_report"); case CLIENT_MODIFY_REPORT_FORMAT: if (strcasecmp ("ACTIVE", element_name) == 0) set_client_state (CLIENT_MODIFY_REPORT_FORMAT_ACTIVE); else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_MODIFY_REPORT_FORMAT_NAME); else if (strcasecmp ("SUMMARY", element_name) == 0) set_client_state (CLIENT_MODIFY_REPORT_FORMAT_SUMMARY); else if (strcasecmp ("PARAM", element_name) == 0) set_client_state (CLIENT_MODIFY_REPORT_FORMAT_PARAM); ELSE_ERROR ("modify_report_format"); case CLIENT_MODIFY_REPORT_FORMAT_PARAM: if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_MODIFY_REPORT_FORMAT_PARAM_NAME); else if (strcasecmp ("VALUE", element_name) == 0) set_client_state (CLIENT_MODIFY_REPORT_FORMAT_PARAM_VALUE); ELSE_ERROR ("modify_report_format"); case CLIENT_MODIFY_ROLE: if (strcasecmp ("COMMENT", element_name) == 0) { openvas_append_string (&modify_role_data->comment, ""); set_client_state (CLIENT_MODIFY_ROLE_COMMENT); } else if (strcasecmp ("NAME", element_name) == 0) { openvas_append_string (&modify_role_data->name, ""); set_client_state (CLIENT_MODIFY_ROLE_NAME); } else if (strcasecmp ("USERS", element_name) == 0) { openvas_append_string (&modify_role_data->users, ""); set_client_state (CLIENT_MODIFY_ROLE_USERS); } ELSE_ERROR ("modify_role"); case CLIENT_MODIFY_SCANNER: if (strcasecmp ("COMMENT", element_name) == 0) { openvas_append_string (&modify_scanner_data->comment, ""); set_client_state (CLIENT_MODIFY_SCANNER_COMMENT); } else if (strcasecmp ("NAME", element_name) == 0) { openvas_append_string (&modify_scanner_data->name, ""); set_client_state (CLIENT_MODIFY_SCANNER_NAME); } else if (strcasecmp ("HOST", element_name) == 0) { openvas_append_string (&modify_scanner_data->host, ""); set_client_state (CLIENT_MODIFY_SCANNER_HOST); } else if (strcasecmp ("PORT", element_name) == 0) { openvas_append_string (&modify_scanner_data->port, ""); set_client_state (CLIENT_MODIFY_SCANNER_PORT); } else if (strcasecmp ("TYPE", element_name) == 0) { openvas_append_string (&modify_scanner_data->type, ""); set_client_state (CLIENT_MODIFY_SCANNER_TYPE); } else if (strcasecmp ("CA_PUB", element_name) == 0) { openvas_append_string (&modify_scanner_data->ca_pub, ""); set_client_state (CLIENT_MODIFY_SCANNER_CA_PUB); } else if (strcasecmp ("KEY_PUB", element_name) == 0) { openvas_append_string (&modify_scanner_data->key_pub, ""); set_client_state (CLIENT_MODIFY_SCANNER_KEY_PUB); } else if (strcasecmp ("KEY_PRIV", element_name) == 0) { openvas_append_string (&modify_scanner_data->key_priv, ""); set_client_state (CLIENT_MODIFY_SCANNER_KEY_PRIV); } ELSE_ERROR ("modify_scanner"); case CLIENT_MODIFY_SCHEDULE: if (strcasecmp ("COMMENT", element_name) == 0) { openvas_append_string (&modify_schedule_data->comment, ""); set_client_state (CLIENT_MODIFY_SCHEDULE_COMMENT); } else if (strcasecmp ("NAME", element_name) == 0) { openvas_append_string (&modify_schedule_data->name, ""); set_client_state (CLIENT_MODIFY_SCHEDULE_NAME); } else if (strcasecmp ("DURATION", element_name) == 0) set_client_state (CLIENT_MODIFY_SCHEDULE_DURATION); else if (strcasecmp ("FIRST_TIME", element_name) == 0) set_client_state (CLIENT_MODIFY_SCHEDULE_FIRST_TIME); else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_MODIFY_SCHEDULE_NAME); else if (strcasecmp ("PERIOD", element_name) == 0) set_client_state (CLIENT_MODIFY_SCHEDULE_PERIOD); else if (strcasecmp ("TIMEZONE", element_name) == 0) set_client_state (CLIENT_MODIFY_SCHEDULE_TIMEZONE); ELSE_ERROR ("modify_schedule"); case CLIENT_MODIFY_SCHEDULE_FIRST_TIME: if (strcasecmp ("DAY_OF_MONTH", element_name) == 0) set_client_state (CLIENT_MODIFY_SCHEDULE_FIRST_TIME_DAY_OF_MONTH); else if (strcasecmp ("HOUR", element_name) == 0) set_client_state (CLIENT_MODIFY_SCHEDULE_FIRST_TIME_HOUR); else if (strcasecmp ("MINUTE", element_name) == 0) set_client_state (CLIENT_MODIFY_SCHEDULE_FIRST_TIME_MINUTE); else if (strcasecmp ("MONTH", element_name) == 0) set_client_state (CLIENT_MODIFY_SCHEDULE_FIRST_TIME_MONTH); else if (strcasecmp ("YEAR", element_name) == 0) set_client_state (CLIENT_MODIFY_SCHEDULE_FIRST_TIME_YEAR); ELSE_ERROR ("modify_schedule"); case CLIENT_MODIFY_SCHEDULE_DURATION: if (strcasecmp ("UNIT", element_name) == 0) set_client_state (CLIENT_MODIFY_SCHEDULE_DURATION_UNIT); ELSE_ERROR ("modify_schedule"); case CLIENT_MODIFY_SCHEDULE_PERIOD: if (strcasecmp ("UNIT", element_name) == 0) set_client_state (CLIENT_MODIFY_SCHEDULE_PERIOD_UNIT); ELSE_ERROR ("modify_schedule"); case CLIENT_MODIFY_SETTING: if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_MODIFY_SETTING_NAME); else if (strcasecmp ("VALUE", element_name) == 0) { openvas_append_string (&modify_setting_data->value, ""); set_client_state (CLIENT_MODIFY_SETTING_VALUE); } ELSE_ERROR ("modify_setting"); case CLIENT_MODIFY_SLAVE: if (strcasecmp ("COMMENT", element_name) == 0) { openvas_append_string (&modify_slave_data->comment, ""); set_client_state (CLIENT_MODIFY_SLAVE_COMMENT); } else if (strcasecmp ("NAME", element_name) == 0) { openvas_append_string (&modify_slave_data->name, ""); set_client_state (CLIENT_MODIFY_SLAVE_NAME); } else if (strcasecmp ("HOST", element_name) == 0) { openvas_append_string (&modify_slave_data->host, ""); set_client_state (CLIENT_MODIFY_SLAVE_HOST); } else if (strcasecmp ("PORT", element_name) == 0) { openvas_append_string (&modify_slave_data->port, ""); set_client_state (CLIENT_MODIFY_SLAVE_PORT); } else if (strcasecmp ("LOGIN", element_name) == 0) { openvas_append_string (&modify_slave_data->login, ""); set_client_state (CLIENT_MODIFY_SLAVE_LOGIN); } else if (strcasecmp ("PASSWORD", element_name) == 0) { openvas_append_string (&modify_slave_data->password, ""); set_client_state (CLIENT_MODIFY_SLAVE_PASSWORD); } ELSE_ERROR ("modify_slave"); case CLIENT_MODIFY_TAG: if (strcasecmp ("ACTIVE", element_name) == 0) { openvas_append_string (&modify_tag_data->active, ""); set_client_state (CLIENT_MODIFY_TAG_ACTIVE); } else if (strcasecmp ("RESOURCE", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &modify_tag_data->resource_id); set_client_state (CLIENT_MODIFY_TAG_RESOURCE); } else if (strcasecmp ("COMMENT", element_name) == 0) { openvas_append_string (&modify_tag_data->comment, ""); set_client_state (CLIENT_MODIFY_TAG_COMMENT); } else if (strcasecmp ("NAME", element_name) == 0) { openvas_append_string (&modify_tag_data->name, ""); set_client_state (CLIENT_MODIFY_TAG_NAME); } else if (strcasecmp ("VALUE", element_name) == 0) { openvas_append_string (&modify_tag_data->value, ""); set_client_state (CLIENT_MODIFY_TAG_VALUE); } ELSE_ERROR ("modify_tag"); case CLIENT_MODIFY_TAG_RESOURCE: if (strcasecmp ("TYPE", element_name) == 0) { openvas_append_string (&modify_tag_data->resource_type, ""); set_client_state (CLIENT_MODIFY_TAG_RESOURCE_TYPE); } ELSE_ERROR ("modify_tag"); case CLIENT_MODIFY_TARGET: if (strcasecmp ("EXCLUDE_HOSTS", element_name) == 0) { openvas_append_string (&modify_target_data->exclude_hosts, ""); set_client_state (CLIENT_MODIFY_TARGET_EXCLUDE_HOSTS); } else if (strcasecmp ("REVERSE_LOOKUP_ONLY", element_name) == 0) set_client_state (CLIENT_MODIFY_TARGET_REVERSE_LOOKUP_ONLY); else if (strcasecmp ("REVERSE_LOOKUP_UNIFY", element_name) == 0) set_client_state (CLIENT_MODIFY_TARGET_REVERSE_LOOKUP_UNIFY); else if (strcasecmp ("ALIVE_TESTS", element_name) == 0) set_client_state (CLIENT_MODIFY_TARGET_ALIVE_TESTS); else if (strcasecmp ("COMMENT", element_name) == 0) { openvas_append_string (&modify_target_data->comment, ""); set_client_state (CLIENT_MODIFY_TARGET_COMMENT); } else if (strcasecmp ("ESXI_LSC_CREDENTIAL", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &modify_target_data->esxi_lsc_credential_id); set_client_state (CLIENT_MODIFY_TARGET_ESXI_LSC_CREDENTIAL); } else if (strcasecmp ("HOSTS", element_name) == 0) { openvas_append_string (&modify_target_data->hosts, ""); set_client_state (CLIENT_MODIFY_TARGET_HOSTS); } else if (strcasecmp ("PORT_LIST", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &modify_target_data->port_list_id); set_client_state (CLIENT_MODIFY_TARGET_PORT_LIST); } else if (strcasecmp ("SSH_LSC_CREDENTIAL", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &modify_target_data->ssh_lsc_credential_id); set_client_state (CLIENT_MODIFY_TARGET_SSH_LSC_CREDENTIAL); } else if (strcasecmp ("SMB_LSC_CREDENTIAL", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &modify_target_data->smb_lsc_credential_id); set_client_state (CLIENT_MODIFY_TARGET_SMB_LSC_CREDENTIAL); } else if (strcasecmp ("NAME", element_name) == 0) { openvas_append_string (&modify_target_data->name, ""); set_client_state (CLIENT_MODIFY_TARGET_NAME); } ELSE_ERROR ("modify_target"); case CLIENT_MODIFY_TARGET_SSH_LSC_CREDENTIAL: if (strcasecmp ("PORT", element_name) == 0) set_client_state (CLIENT_MODIFY_TARGET_SSH_LSC_CREDENTIAL_PORT); ELSE_ERROR ("modify_target"); case CLIENT_MODIFY_TASK: if (strcasecmp ("ALTERABLE", element_name) == 0) set_client_state (CLIENT_MODIFY_TASK_ALTERABLE); else if (strcasecmp ("COMMENT", element_name) == 0) { openvas_append_string (&modify_task_data->comment, ""); set_client_state (CLIENT_MODIFY_TASK_COMMENT); } else if (strcasecmp ("HOSTS_ORDERING", element_name) == 0) set_client_state (CLIENT_MODIFY_TASK_HOSTS_ORDERING); else if (strcasecmp ("SCANNER", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &modify_task_data->scanner_id); set_client_state (CLIENT_MODIFY_TASK_SCANNER); } else if (strcasecmp ("ALERT", element_name) == 0) { const gchar* attribute; if (find_attribute (attribute_names, attribute_values, "id", &attribute)) array_add (modify_task_data->alerts, g_strdup (attribute)); set_client_state (CLIENT_MODIFY_TASK_ALERT); } else if (strcasecmp ("CONFIG", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &modify_task_data->config_id); set_client_state (CLIENT_MODIFY_TASK_CONFIG); } else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_MODIFY_TASK_NAME); else if (strcasecmp ("OBSERVERS", element_name) == 0) { openvas_append_string (&modify_task_data->observers, ""); set_client_state (CLIENT_MODIFY_TASK_OBSERVERS); } else if (strcasecmp ("PREFERENCES", element_name) == 0) { modify_task_data->preferences = make_array (); set_client_state (CLIENT_MODIFY_TASK_PREFERENCES); } else if (strcasecmp ("SCHEDULE", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &modify_task_data->schedule_id); set_client_state (CLIENT_MODIFY_TASK_SCHEDULE); } else if (strcasecmp ("SCHEDULE_PERIODS", element_name) == 0) set_client_state (CLIENT_MODIFY_TASK_SCHEDULE_PERIODS); else if (strcasecmp ("SLAVE", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &modify_task_data->slave_id); set_client_state (CLIENT_MODIFY_TASK_SLAVE); } else if (strcasecmp ("TARGET", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &modify_task_data->target_id); set_client_state (CLIENT_MODIFY_TASK_TARGET); } else if (strcasecmp ("FILE", element_name) == 0) { const gchar* attribute; append_attribute (attribute_names, attribute_values, "name", &modify_task_data->file_name); if (find_attribute (attribute_names, attribute_values, "action", &attribute)) openvas_append_string (&modify_task_data->action, attribute); else openvas_append_string (&modify_task_data->action, "update"); set_client_state (CLIENT_MODIFY_TASK_FILE); } ELSE_ERROR ("modify_task"); case CLIENT_MODIFY_TASK_OBSERVERS: if (strcasecmp ("GROUP", element_name) == 0) { const gchar* attribute; if (find_attribute (attribute_names, attribute_values, "id", &attribute)) array_add (modify_task_data->groups, g_strdup (attribute)); set_client_state (CLIENT_MODIFY_TASK_OBSERVERS_GROUP); } ELSE_ERROR ("modify_task"); case CLIENT_MODIFY_TASK_PREFERENCES: if (strcasecmp ("PREFERENCE", element_name) == 0) { assert (modify_task_data->preference == NULL); modify_task_data->preference = g_malloc (sizeof (name_value_t)); modify_task_data->preference->name = NULL; modify_task_data->preference->value = NULL; set_client_state (CLIENT_MODIFY_TASK_PREFERENCES_PREFERENCE); } ELSE_ERROR ("modify_task"); case CLIENT_MODIFY_TASK_PREFERENCES_PREFERENCE: if (strcasecmp ("SCANNER_NAME", element_name) == 0) set_client_state (CLIENT_MODIFY_TASK_PREFERENCES_PREFERENCE_NAME); else if (strcasecmp ("VALUE", element_name) == 0) set_client_state (CLIENT_MODIFY_TASK_PREFERENCES_PREFERENCE_VALUE); ELSE_ERROR ("modify_task"); case CLIENT_MODIFY_USER: if (strcasecmp ("GROUPS", element_name) == 0) { if (modify_user_data->groups) array_free (modify_user_data->groups); modify_user_data->groups = make_array (); set_client_state (CLIENT_MODIFY_USER_GROUPS); } else if (strcasecmp ("HOSTS", element_name) == 0) { const gchar *attribute; if (find_attribute (attribute_names, attribute_values, "allow", &attribute)) modify_user_data->hosts_allow = strcmp (attribute, "0"); else modify_user_data->hosts_allow = 1; /* Init, so that modify_user clears hosts if HOSTS is empty. */ openvas_append_string (&modify_user_data->hosts, ""); set_client_state (CLIENT_MODIFY_USER_HOSTS); } else if (strcasecmp ("IFACES", element_name) == 0) { const gchar *attribute; if (find_attribute (attribute_names, attribute_values, "allow", &attribute)) modify_user_data->ifaces_allow = strcmp (attribute, "0"); else modify_user_data->ifaces_allow = 1; openvas_append_string (&modify_user_data->ifaces, ""); set_client_state (CLIENT_MODIFY_USER_IFACES); } else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_MODIFY_USER_NAME); else if (strcasecmp ("NEW_NAME", element_name) == 0) set_client_state (CLIENT_MODIFY_USER_NEW_NAME); else if (strcasecmp ("PASSWORD", element_name) == 0) { const gchar *attribute; if (find_attribute (attribute_names, attribute_values, "modify", &attribute)) modify_user_data->modify_password = strcmp (attribute, "0"); else modify_user_data->modify_password = 1; set_client_state (CLIENT_MODIFY_USER_PASSWORD); } else if (strcasecmp ("ROLE", element_name) == 0) { const gchar* attribute; /* Init array here, so it's NULL if there are no ROLEs. */ if (modify_user_data->roles == NULL) { array_free (modify_user_data->roles); modify_user_data->roles = make_array (); } if (find_attribute (attribute_names, attribute_values, "id", &attribute)) array_add (modify_user_data->roles, g_strdup (attribute)); set_client_state (CLIENT_MODIFY_USER_ROLE); } else if (strcasecmp ("SOURCES", element_name) == 0) { modify_user_data->sources = make_array (); set_client_state (CLIENT_MODIFY_USER_SOURCES); } else { if (send_element_error_to_client ("modify_user", element_name, write_to_client, write_to_client_data)) { error_send_to_client (error); return; } set_client_state (CLIENT_AUTHENTIC); g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_UNKNOWN_ELEMENT, "Error"); } break; case CLIENT_MODIFY_USER_GROUPS: if (strcasecmp ("GROUP", element_name) == 0) { const gchar* attribute; if (find_attribute (attribute_names, attribute_values, "id", &attribute)) array_add (modify_user_data->groups, g_strdup (attribute)); set_client_state (CLIENT_MODIFY_USER_GROUPS_GROUP); } ELSE_ERROR ("modify_user"); case CLIENT_MODIFY_USER_SOURCES: if (strcasecmp ("SOURCE", element_name) == 0) { set_client_state (CLIENT_MODIFY_USER_SOURCES_SOURCE); } else { if (send_element_error_to_client ("modify_user_sources", element_name, write_to_client, write_to_client_data)) { error_send_to_client (error); return; } set_client_state (CLIENT_AUTHENTIC); g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_UNKNOWN_ELEMENT, "Error"); } break; case CLIENT_CREATE_AGENT: if (strcasecmp ("COMMENT", element_name) == 0) set_client_state (CLIENT_CREATE_AGENT_COMMENT); else if (strcasecmp ("COPY", element_name) == 0) set_client_state (CLIENT_CREATE_AGENT_COPY); else if (strcasecmp ("HOWTO_INSTALL", element_name) == 0) set_client_state (CLIENT_CREATE_AGENT_HOWTO_INSTALL); else if (strcasecmp ("HOWTO_USE", element_name) == 0) set_client_state (CLIENT_CREATE_AGENT_HOWTO_USE); else if (strcasecmp ("INSTALLER", element_name) == 0) set_client_state (CLIENT_CREATE_AGENT_INSTALLER); else if (strcasecmp ("NAME", element_name) == 0) { openvas_append_string (&create_agent_data->name, ""); set_client_state (CLIENT_CREATE_AGENT_NAME); } ELSE_ERROR ("create_agent"); case CLIENT_CREATE_AGENT_INSTALLER: if (strcasecmp ("FILENAME", element_name) == 0) set_client_state (CLIENT_CREATE_AGENT_INSTALLER_FILENAME); else if (strcasecmp ("SIGNATURE", element_name) == 0) set_client_state (CLIENT_CREATE_AGENT_INSTALLER_SIGNATURE); ELSE_ERROR ("create_agent"); case CLIENT_CREATE_CONFIG: if (strcasecmp ("COMMENT", element_name) == 0) set_client_state (CLIENT_CREATE_CONFIG_COMMENT); else if (strcasecmp ("SCANNER", element_name) == 0) set_client_state (CLIENT_CREATE_CONFIG_SCANNER); else if (strcasecmp ("COPY", element_name) == 0) set_client_state (CLIENT_CREATE_CONFIG_COPY); else if (strcasecmp ("GET_CONFIGS_RESPONSE", element_name) == 0) { omp_parser->importing = 1; import_config_data->import = 1; set_client_state (CLIENT_C_C_GCR); } else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_CREATE_CONFIG_NAME); ELSE_ERROR ("create_config"); case CLIENT_C_C_GCR: if (strcasecmp ("CONFIG", element_name) == 0) { /* Reset here in case there was a previous config element. */ create_config_data_reset (create_config_data); import_config_data->import = 1; set_client_state (CLIENT_C_C_GCR_CONFIG); } ELSE_ERROR ("create_config"); case CLIENT_C_C_GCR_CONFIG: if (strcasecmp ("COMMENT", element_name) == 0) set_client_state (CLIENT_C_C_GCR_CONFIG_COMMENT); else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_C_C_GCR_CONFIG_NAME); else if (strcasecmp ("NVT_SELECTORS", element_name) == 0) { /* Reset array, in case there was a previous nvt_selectors element. */ array_reset (&import_config_data->nvt_selectors); set_client_state (CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS); } else if (strcasecmp ("PREFERENCES", element_name) == 0) { /* Reset array, in case there was a previous preferences element. */ array_reset (&import_config_data->preferences); set_client_state (CLIENT_C_C_GCR_CONFIG_PREFERENCES); } else if (strcasecmp ("TYPE", element_name) == 0) { set_client_state (CLIENT_C_C_GCR_CONFIG_TYPE); } ELSE_ERROR ("create_config"); case CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS: if (strcasecmp ("NVT_SELECTOR", element_name) == 0) set_client_state (CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS_NVT_SELECTOR); ELSE_ERROR ("create_config"); case CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS_NVT_SELECTOR: if (strcasecmp ("INCLUDE", element_name) == 0) set_client_state (CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS_NVT_SELECTOR_INCLUDE); else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS_NVT_SELECTOR_NAME); else if (strcasecmp ("TYPE", element_name) == 0) set_client_state (CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS_NVT_SELECTOR_TYPE); else if (strcasecmp ("FAMILY_OR_NVT", element_name) == 0) set_client_state (CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS_NVT_SELECTOR_FAMILY_OR_NVT); ELSE_ERROR ("create_config"); case CLIENT_C_C_GCR_CONFIG_PREFERENCES: if (strcasecmp ("PREFERENCE", element_name) == 0) { array_reset (&import_config_data->preference_alts); set_client_state (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE); } ELSE_ERROR ("create_config"); case CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE: if (strcasecmp ("ALT", element_name) == 0) set_client_state (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_ALT); else if (strcasecmp ("DEFAULT", element_name) == 0) set_client_state (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_DEFAULT); else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_NAME); else if (strcasecmp ("NVT", element_name) == 0) { append_attribute (attribute_names, attribute_values, "oid", &import_config_data->preference_nvt_oid); set_client_state (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_NVT); } else if (strcasecmp ("TYPE", element_name) == 0) set_client_state (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_TYPE); else if (strcasecmp ("VALUE", element_name) == 0) set_client_state (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_VALUE); ELSE_ERROR ("create_config"); case CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_NVT: if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_NVT_NAME); ELSE_ERROR ("create_config"); case CLIENT_CREATE_ALERT: if (strcasecmp ("COMMENT", element_name) == 0) set_client_state (CLIENT_CREATE_ALERT_COMMENT); else if (strcasecmp ("COPY", element_name) == 0) set_client_state (CLIENT_CREATE_ALERT_COPY); else if (strcasecmp ("CONDITION", element_name) == 0) set_client_state (CLIENT_CREATE_ALERT_CONDITION); else if (strcasecmp ("EVENT", element_name) == 0) set_client_state (CLIENT_CREATE_ALERT_EVENT); else if (strcasecmp ("FILTER", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &create_alert_data->filter_id); set_client_state (CLIENT_CREATE_ALERT_FILTER); } else if (strcasecmp ("METHOD", element_name) == 0) set_client_state (CLIENT_CREATE_ALERT_METHOD); else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_CREATE_ALERT_NAME); ELSE_ERROR ("create_alert"); case CLIENT_CREATE_ALERT_CONDITION: if (strcasecmp ("DATA", element_name) == 0) set_client_state (CLIENT_CREATE_ALERT_CONDITION_DATA); ELSE_ERROR ("create_alert"); case CLIENT_CREATE_ALERT_CONDITION_DATA: if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_CREATE_ALERT_CONDITION_DATA_NAME); ELSE_ERROR ("create_alert"); case CLIENT_CREATE_ALERT_EVENT: if (strcasecmp ("DATA", element_name) == 0) set_client_state (CLIENT_CREATE_ALERT_EVENT_DATA); ELSE_ERROR ("create_alert"); case CLIENT_CREATE_ALERT_EVENT_DATA: if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_CREATE_ALERT_EVENT_DATA_NAME); ELSE_ERROR ("create_alert"); case CLIENT_CREATE_ALERT_METHOD: if (strcasecmp ("DATA", element_name) == 0) set_client_state (CLIENT_CREATE_ALERT_METHOD_DATA); ELSE_ERROR ("create_alert"); case CLIENT_CREATE_ALERT_METHOD_DATA: if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_CREATE_ALERT_METHOD_DATA_NAME); ELSE_ERROR ("create_alert"); case CLIENT_CREATE_FILTER: if (strcasecmp ("COMMENT", element_name) == 0) set_client_state (CLIENT_CREATE_FILTER_COMMENT); else if (strcasecmp ("COPY", element_name) == 0) set_client_state (CLIENT_CREATE_FILTER_COPY); else if (strcasecmp ("NAME", element_name) == 0) { openvas_append_string (&create_filter_data->name, ""); set_client_state (CLIENT_CREATE_FILTER_NAME); } else if (strcasecmp ("TERM", element_name) == 0) set_client_state (CLIENT_CREATE_FILTER_TERM); else if (strcasecmp ("TYPE", element_name) == 0) set_client_state (CLIENT_CREATE_FILTER_TYPE); ELSE_ERROR ("create_filter"); case CLIENT_CREATE_FILTER_NAME: if (strcasecmp ("MAKE_UNIQUE", element_name) == 0) set_client_state (CLIENT_CREATE_FILTER_NAME_MAKE_UNIQUE); ELSE_ERROR ("create_filter"); case CLIENT_CREATE_GROUP: if (strcasecmp ("COMMENT", element_name) == 0) set_client_state (CLIENT_CREATE_GROUP_COMMENT); else if (strcasecmp ("COPY", element_name) == 0) set_client_state (CLIENT_CREATE_GROUP_COPY); else if (strcasecmp ("NAME", element_name) == 0) { openvas_append_string (&create_group_data->name, ""); set_client_state (CLIENT_CREATE_GROUP_NAME); } else if (strcasecmp ("USERS", element_name) == 0) set_client_state (CLIENT_CREATE_GROUP_USERS); ELSE_ERROR ("create_group"); case CLIENT_CREATE_LSC_CREDENTIAL: if (strcasecmp ("COMMENT", element_name) == 0) set_client_state (CLIENT_CREATE_LSC_CREDENTIAL_COMMENT); else if (strcasecmp ("KEY", element_name) == 0) { create_lsc_credential_data->key = 1; set_client_state (CLIENT_CREATE_LSC_CREDENTIAL_KEY); } else if (strcasecmp ("LOGIN", element_name) == 0) set_client_state (CLIENT_CREATE_LSC_CREDENTIAL_LOGIN); else if (strcasecmp ("COPY", element_name) == 0) set_client_state (CLIENT_CREATE_LSC_CREDENTIAL_COPY); else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_CREATE_LSC_CREDENTIAL_NAME); else if (strcasecmp ("PASSWORD", element_name) == 0) { openvas_append_string (&create_lsc_credential_data->password, ""); set_client_state (CLIENT_CREATE_LSC_CREDENTIAL_PASSWORD); } ELSE_ERROR ("create_lsc_credential"); case CLIENT_CREATE_LSC_CREDENTIAL_KEY: if (strcasecmp ("PHRASE", element_name) == 0) { openvas_append_string (&create_lsc_credential_data->key_phrase, ""); set_client_state (CLIENT_CREATE_LSC_CREDENTIAL_KEY_PHRASE); } else if (strcasecmp ("PRIVATE", element_name) == 0) set_client_state (CLIENT_CREATE_LSC_CREDENTIAL_KEY_PRIVATE); ELSE_ERROR ("create_lsc_credential"); case CLIENT_CREATE_NOTE: if (strcasecmp ("ACTIVE", element_name) == 0) set_client_state (CLIENT_CREATE_NOTE_ACTIVE); else if (strcasecmp ("COPY", element_name) == 0) set_client_state (CLIENT_CREATE_NOTE_COPY); else if (strcasecmp ("HOSTS", element_name) == 0) set_client_state (CLIENT_CREATE_NOTE_HOSTS); else if (strcasecmp ("NVT", element_name) == 0) { append_attribute (attribute_names, attribute_values, "oid", &create_note_data->nvt_oid); set_client_state (CLIENT_CREATE_NOTE_NVT); } else if (strcasecmp ("PORT", element_name) == 0) set_client_state (CLIENT_CREATE_NOTE_PORT); else if (strcasecmp ("RESULT", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &create_note_data->result_id); if (create_note_data->result_id && create_note_data->result_id[0] == '\0') { g_free (create_note_data->result_id); create_note_data->result_id = NULL; } set_client_state (CLIENT_CREATE_NOTE_RESULT); } else if (strcasecmp ("SEVERITY", element_name) == 0) set_client_state (CLIENT_CREATE_NOTE_SEVERITY); else if (strcasecmp ("TASK", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &create_note_data->task_id); if (create_note_data->task_id && create_note_data->task_id[0] == '\0') { g_free (create_note_data->task_id); create_note_data->task_id = NULL; } set_client_state (CLIENT_CREATE_NOTE_TASK); } else if (strcasecmp ("TEXT", element_name) == 0) set_client_state (CLIENT_CREATE_NOTE_TEXT); else if (strcasecmp ("THREAT", element_name) == 0) set_client_state (CLIENT_CREATE_NOTE_THREAT); ELSE_ERROR ("create_note"); case CLIENT_CREATE_PERMISSION: if (strcasecmp ("COMMENT", element_name) == 0) set_client_state (CLIENT_CREATE_PERMISSION_COMMENT); else if (strcasecmp ("COPY", element_name) == 0) set_client_state (CLIENT_CREATE_PERMISSION_COPY); else if (strcasecmp ("NAME", element_name) == 0) { openvas_append_string (&create_permission_data->name, ""); set_client_state (CLIENT_CREATE_PERMISSION_NAME); } else if (strcasecmp ("RESOURCE", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &create_permission_data->resource_id); set_client_state (CLIENT_CREATE_PERMISSION_RESOURCE); } else if (strcasecmp ("SUBJECT", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &create_permission_data->subject_id); set_client_state (CLIENT_CREATE_PERMISSION_SUBJECT); } ELSE_ERROR ("create_permission"); case CLIENT_CREATE_PERMISSION_RESOURCE: if (strcasecmp ("TYPE", element_name) == 0) set_client_state (CLIENT_CREATE_PERMISSION_RESOURCE_TYPE); ELSE_ERROR ("create_permission"); case CLIENT_CREATE_PERMISSION_SUBJECT: if (strcasecmp ("TYPE", element_name) == 0) set_client_state (CLIENT_CREATE_PERMISSION_SUBJECT_TYPE); ELSE_ERROR ("create_permission"); case CLIENT_CREATE_PORT_LIST: if (strcasecmp ("COMMENT", element_name) == 0) set_client_state (CLIENT_CREATE_PORT_LIST_COMMENT); else if (strcasecmp ("COPY", element_name) == 0) set_client_state (CLIENT_CREATE_PORT_LIST_COPY); else if (strcasecmp ("GET_PORT_LISTS_RESPONSE", element_name) == 0) { omp_parser->importing = 1; create_port_list_data->import = 1; set_client_state (CLIENT_CPL_GPLR); } else if (strcasecmp ("PORT_RANGE", element_name) == 0) { openvas_append_string (&create_port_list_data->port_range, ""); set_client_state (CLIENT_CREATE_PORT_LIST_PORT_RANGE); } else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_CREATE_PORT_LIST_NAME); ELSE_ERROR ("create_port_list"); case CLIENT_CPL_GPLR: if (strcasecmp ("PORT_LIST", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &create_port_list_data->id); set_client_state (CLIENT_CPL_GPLR_PORT_LIST); } ELSE_ERROR ("create_port_list"); case CLIENT_CPL_GPLR_PORT_LIST: if (strcasecmp ("COMMENT", element_name) == 0) set_client_state (CLIENT_CPL_GPLR_PORT_LIST_COMMENT); else if (strcasecmp ("IN_USE", element_name) == 0) set_client_state (CLIENT_CPL_GPLR_PORT_LIST_IN_USE); else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_CPL_GPLR_PORT_LIST_NAME); else if (strcasecmp ("PORT_RANGE", element_name) == 0) set_client_state (CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGE); else if (strcasecmp ("PORT_RANGES", element_name) == 0) { create_port_list_data->ranges = make_array (); set_client_state (CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES); } else if (strcasecmp ("TARGETS", element_name) == 0) { omp_parser->read_over = 1; set_client_state (CLIENT_CPL_GPLR_PORT_LIST_TARGETS); } ELSE_ERROR ("create_port_list"); case CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES: if (strcasecmp ("PORT_RANGE", element_name) == 0) { assert (create_port_list_data->range == NULL); create_port_list_data->range = g_malloc0 (sizeof (create_port_list_range_t)); append_attribute (attribute_names, attribute_values, "id", &(create_port_list_data->range->id)); set_client_state (CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES_PORT_RANGE); } ELSE_ERROR ("create_port_list"); case CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES_PORT_RANGE: if (strcasecmp ("COMMENT", element_name) == 0) { openvas_append_string (&create_port_list_data->range->comment, ""); set_client_state (CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES_PORT_RANGE_COMMENT); } else if (strcasecmp ("END", element_name) == 0) { openvas_append_string (&create_port_list_data->range->end, ""); set_client_state (CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES_PORT_RANGE_END); } else if (strcasecmp ("START", element_name) == 0) { openvas_append_string (&create_port_list_data->range->start, ""); set_client_state (CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES_PORT_RANGE_START); } else if (strcasecmp ("TYPE", element_name) == 0) { openvas_append_string (&create_port_list_data->range->type, ""); set_client_state (CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES_PORT_RANGE_TYPE); } ELSE_ERROR ("create_port_list"); case CLIENT_CREATE_PORT_RANGE: if (strcasecmp ("COMMENT", element_name) == 0) set_client_state (CLIENT_CREATE_PORT_RANGE_COMMENT); else if (strcasecmp ("END", element_name) == 0) set_client_state (CLIENT_CREATE_PORT_RANGE_END); else if (strcasecmp ("PORT_LIST", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &create_port_range_data->port_list_id); set_client_state (CLIENT_CREATE_PORT_RANGE_PORT_LIST); } else if (strcasecmp ("START", element_name) == 0) set_client_state (CLIENT_CREATE_PORT_RANGE_START); else if (strcasecmp ("TYPE", element_name) == 0) set_client_state (CLIENT_CREATE_PORT_RANGE_TYPE); ELSE_ERROR ("create_port_range"); case CLIENT_CREATE_ROLE: if (strcasecmp ("COMMENT", element_name) == 0) set_client_state (CLIENT_CREATE_ROLE_COMMENT); else if (strcasecmp ("COPY", element_name) == 0) set_client_state (CLIENT_CREATE_ROLE_COPY); else if (strcasecmp ("NAME", element_name) == 0) { openvas_append_string (&create_role_data->name, ""); set_client_state (CLIENT_CREATE_ROLE_NAME); } else if (strcasecmp ("USERS", element_name) == 0) set_client_state (CLIENT_CREATE_ROLE_USERS); ELSE_ERROR ("create_role"); case CLIENT_CREATE_REPORT: if (strcasecmp ("REPORT", element_name) == 0) { const gchar* attribute; omp_parser->importing = 1; append_attribute (attribute_names, attribute_values, "type", &create_report_data->type); if (find_attribute (attribute_names, attribute_values, "format_id", &attribute)) { /* Assume this is the wrapper REPORT. */ create_report_data->wrapper = 1; set_client_state (CLIENT_CREATE_REPORT_REPORT); } else { /* Assume the report is immediately inside the CREATE_REPORT. */ create_report_data->wrapper = 0; create_report_data->details = make_array (); create_report_data->host_ends = make_array (); create_report_data->host_starts = make_array (); create_report_data->results = make_array (); set_client_state (CLIENT_CREATE_REPORT_RR); } } else if (strcasecmp ("TASK", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &create_report_data->task_id); set_client_state (CLIENT_CREATE_REPORT_TASK); } ELSE_ERROR ("create_report"); case CLIENT_CREATE_REPORT_REPORT: if (strcasecmp ("REPORT", element_name) == 0) { create_report_data->details = make_array (); create_report_data->host_ends = make_array (); create_report_data->host_starts = make_array (); create_report_data->results = make_array (); set_client_state (CLIENT_CREATE_REPORT_RR); } ELSE_ERROR ("create_report"); case CLIENT_CREATE_REPORT_RR: if (strcasecmp ("FILTERS", element_name) == 0) { omp_parser->read_over = 1; set_client_state (CLIENT_CREATE_REPORT_RR_FILTERS); } else if (strcasecmp ("HOST", element_name) == 0) { set_client_state (CLIENT_CREATE_REPORT_RR_H); } else if (strcasecmp ("HOST_COUNT", element_name) == 0) { omp_parser->read_over = 1; set_client_state (CLIENT_CREATE_REPORT_RR_HOST_COUNT); } else if (strcasecmp ("HOST_END", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_HOST_END); else if (strcasecmp ("HOST_START", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_HOST_START); else if (strcasecmp ("HOSTS", element_name) == 0) { omp_parser->read_over = 1; set_client_state (CLIENT_CREATE_REPORT_RR_HOSTS); } else if (strcasecmp ("PORTS", element_name) == 0) { omp_parser->read_over = 1; set_client_state (CLIENT_CREATE_REPORT_RR_PORTS); } else if (strcasecmp ("REPORT_FORMAT", element_name) == 0) { omp_parser->read_over = 1; set_client_state (CLIENT_CREATE_REPORT_RR_REPORT_FORMAT); } else if (strcasecmp ("RESULTS", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS); else if (strcasecmp ("RESULT_COUNT", element_name) == 0) { omp_parser->read_over = 1; set_client_state (CLIENT_CREATE_REPORT_RR_RESULT_COUNT); } else if (strcasecmp ("SCAN_RUN_STATUS", element_name) == 0) { omp_parser->read_over = 1; set_client_state (CLIENT_CREATE_REPORT_RR_SCAN_RUN_STATUS); } else if (strcasecmp ("SCAN_END", element_name) == 0) { set_client_state (CLIENT_CREATE_REPORT_RR_SCAN_END); } else if (strcasecmp ("SCAN_START", element_name) == 0) { set_client_state (CLIENT_CREATE_REPORT_RR_SCAN_START); } else if (strcasecmp ("SORT", element_name) == 0) { omp_parser->read_over = 1; set_client_state (CLIENT_CREATE_REPORT_RR_SORT); } else if (strcasecmp ("TASK", element_name) == 0) { omp_parser->read_over = 1; set_client_state (CLIENT_CREATE_REPORT_RR_TASK); } ELSE_ERROR ("create_report"); case CLIENT_CREATE_REPORT_RR_HOST_END: if (strcasecmp ("HOST", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_HOST_END_HOST); ELSE_ERROR ("create_report"); case CLIENT_CREATE_REPORT_RR_HOST_START: if (strcasecmp ("HOST", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_HOST_START_HOST); ELSE_ERROR ("create_report"); case CLIENT_CREATE_REPORT_RR_H: if (strcasecmp ("IP", element_name) == 0) { set_client_state (CLIENT_CREATE_REPORT_RR_H_IP); } else if (strcasecmp ("DETAIL", element_name) == 0) { set_client_state (CLIENT_CREATE_REPORT_RR_H_DETAIL); } else if (strcasecmp ("END", element_name) == 0) { set_client_state (CLIENT_CREATE_REPORT_RR_H_END); } else if (strcasecmp ("START", element_name) == 0) { set_client_state (CLIENT_CREATE_REPORT_RR_H_START); } ELSE_ERROR ("create_report"); case CLIENT_CREATE_REPORT_RR_H_DETAIL: if (strcasecmp ("NAME", element_name) == 0) { set_client_state (CLIENT_CREATE_REPORT_RR_H_DETAIL_NAME); } else if (strcasecmp ("VALUE", element_name) == 0) { set_client_state (CLIENT_CREATE_REPORT_RR_H_DETAIL_VALUE); } else if (strcasecmp ("SOURCE", element_name) == 0) { set_client_state (CLIENT_CREATE_REPORT_RR_H_DETAIL_SOURCE); } ELSE_ERROR ("create_report"); case CLIENT_CREATE_REPORT_RR_H_DETAIL_SOURCE: if (strcasecmp ("DESCRIPTION", element_name) == 0) { set_client_state (CLIENT_CREATE_REPORT_RR_H_DETAIL_SOURCE_DESC); } else if (strcasecmp ("NAME", element_name) == 0) { set_client_state (CLIENT_CREATE_REPORT_RR_H_DETAIL_SOURCE_NAME); } else if (strcasecmp ("TYPE", element_name) == 0) { set_client_state (CLIENT_CREATE_REPORT_RR_H_DETAIL_SOURCE_TYPE); } ELSE_ERROR ("create_report"); case CLIENT_CREATE_REPORT_RR_RESULTS: if (strcasecmp ("RESULT", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT); ELSE_ERROR ("create_report"); case CLIENT_CREATE_REPORT_RR_RESULTS_RESULT: if (strcasecmp ("COMMENT", element_name) == 0) { set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_COMMENT); omp_parser->read_over = 1; } else if (strcasecmp ("CREATION_TIME", element_name) == 0) { set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_CREATION_TIME); omp_parser->read_over = 1; } else if (strcasecmp ("DESCRIPTION", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_DESCRIPTION); else if (strcasecmp ("DETECTION", element_name) == 0) { omp_parser->read_over = 1; set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_DETECTION); } else if (strcasecmp ("HOST", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_HOST); else if (strcasecmp ("MODIFICATION_TIME", element_name) == 0) { set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_MODIFICATION_TIME); omp_parser->read_over = 1; } else if (strcasecmp ("NAME", element_name) == 0) { set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NAME); omp_parser->read_over = 1; } else if (strcasecmp ("NOTES", element_name) == 0) { omp_parser->read_over = 1; set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NOTES); } else if (strcasecmp ("NVT", element_name) == 0) { append_attribute (attribute_names, attribute_values, "oid", &create_report_data->result_nvt_oid); set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT); } else if (strcasecmp ("ORIGINAL_SEVERITY", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_ORIGINAL_SEVERITY); else if (strcasecmp ("ORIGINAL_THREAT", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_ORIGINAL_THREAT); else if (strcasecmp ("OVERRIDES", element_name) == 0) { omp_parser->read_over = 1; set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_OVERRIDES); } else if (strcasecmp ("OWNER", element_name) == 0) { set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_OWNER); omp_parser->read_over = 1; } else if (strcasecmp ("PORT", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_PORT); else if (strcasecmp ("QOD", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD); else if (strcasecmp ("SCAN_NVT_VERSION", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_SCAN_NVT_VERSION); else if (strcasecmp ("SEVERITY", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_SEVERITY); else if (strcasecmp ("THREAT", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_THREAT); ELSE_ERROR ("create_report"); case CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT: if (strcasecmp ("BID", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT_BID); else if (strcasecmp ("CVE", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT_CVE); else if (strcasecmp ("CVSS_BASE", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT_CVSS_BASE); else if (strcasecmp ("FAMILY", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT_FAMILY); else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT_NAME); else if (strcasecmp ("XREF", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT_XREF); else if (strcasecmp ("CERT", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT_CERT); ELSE_ERROR ("create_report"); case (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT_CERT): if (strcasecmp ("CERT_REF", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT_CERT_CERT_REF); ELSE_ERROR ("create_report"); case CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD: if (strcasecmp ("TYPE", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD_TYPE); else if (strcasecmp ("VALUE", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD_VALUE); ELSE_ERROR ("create_report"); case CLIENT_CREATE_REPORT_TASK: if (strcasecmp ("COMMENT", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_TASK_COMMENT); else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_TASK_NAME); ELSE_ERROR ("create_report"); case CLIENT_CREATE_REPORT_FORMAT: if (strcasecmp ("GET_REPORT_FORMATS_RESPONSE", element_name) == 0) { omp_parser->importing = 1; create_report_format_data->import = 1; set_client_state (CLIENT_CRF_GRFR); } else if (strcasecmp ("COPY", element_name) == 0) set_client_state (CLIENT_CREATE_REPORT_FORMAT_COPY); ELSE_ERROR ("create_report_format"); case CLIENT_CRF_GRFR: if (strcasecmp ("REPORT_FORMAT", element_name) == 0) { create_report_format_data->files = make_array (); create_report_format_data->params = make_array (); create_report_format_data->params_options = make_array (); append_attribute (attribute_names, attribute_values, "id", &create_report_format_data->id); set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT); } ELSE_ERROR ("create_report_format"); case CLIENT_CRF_GRFR_REPORT_FORMAT: if (strcasecmp ("CONTENT_TYPE", element_name) == 0) set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT_CONTENT_TYPE); else if (strcasecmp ("DESCRIPTION", element_name) == 0) set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT_DESCRIPTION); else if (strcasecmp ("EXTENSION", element_name) == 0) set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT_EXTENSION); else if (strcasecmp ("GLOBAL", element_name) == 0) set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT_GLOBAL); else if (strcasecmp ("FILE", element_name) == 0) { assert (create_report_format_data->file == NULL); assert (create_report_format_data->file_name == NULL); openvas_append_string (&create_report_format_data->file, ""); append_attribute (attribute_names, attribute_values, "name", &create_report_format_data->file_name); set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT_FILE); } else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT_NAME); else if (strcasecmp ("PARAM", element_name) == 0) { assert (create_report_format_data->param_name == NULL); assert (create_report_format_data->param_type == NULL); assert (create_report_format_data->param_value == NULL); openvas_append_string (&create_report_format_data->param_name, ""); openvas_append_string (&create_report_format_data->param_value, ""); create_report_format_data->param_options = make_array (); set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM); } else if (strcasecmp ("PREDEFINED", element_name) == 0) set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT_PREDEFINED); else if (strcasecmp ("SIGNATURE", element_name) == 0) set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT_SIGNATURE); else if (strcasecmp ("SUMMARY", element_name) == 0) set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT_SUMMARY); else if (strcasecmp ("TRUST", element_name) == 0) { omp_parser->read_over = 1; set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT_TRUST); } ELSE_ERROR ("create_report_format"); case CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM: if (strcasecmp ("DEFAULT", element_name) == 0) { openvas_append_string (&create_report_format_data->param_default, ""); set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_DEFAULT); } else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_NAME); else if (strcasecmp ("OPTIONS", element_name) == 0) set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_OPTIONS); else if (strcasecmp ("TYPE", element_name) == 0) { openvas_append_string (&create_report_format_data->param_type, ""); set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_TYPE); } else if (strcasecmp ("VALUE", element_name) == 0) set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_VALUE); ELSE_ERROR ("create_report_format"); case CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_OPTIONS: if (strcasecmp ("OPTION", element_name) == 0) { openvas_append_string (&create_report_format_data->param_option, ""); set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_OPTIONS_OPTION); } ELSE_ERROR ("create_report_format"); case CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_TYPE: if (strcasecmp ("MAX", element_name) == 0) { set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_TYPE_MAX); } else if (strcasecmp ("MIN", element_name) == 0) { set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_TYPE_MIN); } ELSE_ERROR ("create_report_format"); case CLIENT_CREATE_OVERRIDE: if (strcasecmp ("ACTIVE", element_name) == 0) set_client_state (CLIENT_CREATE_OVERRIDE_ACTIVE); else if (strcasecmp ("COPY", element_name) == 0) set_client_state (CLIENT_CREATE_OVERRIDE_COPY); else if (strcasecmp ("HOSTS", element_name) == 0) set_client_state (CLIENT_CREATE_OVERRIDE_HOSTS); else if (strcasecmp ("NEW_SEVERITY", element_name) == 0) set_client_state (CLIENT_CREATE_OVERRIDE_NEW_SEVERITY); else if (strcasecmp ("NEW_THREAT", element_name) == 0) set_client_state (CLIENT_CREATE_OVERRIDE_NEW_THREAT); else if (strcasecmp ("NVT", element_name) == 0) { append_attribute (attribute_names, attribute_values, "oid", &create_override_data->nvt_oid); set_client_state (CLIENT_CREATE_OVERRIDE_NVT); } else if (strcasecmp ("PORT", element_name) == 0) set_client_state (CLIENT_CREATE_OVERRIDE_PORT); else if (strcasecmp ("RESULT", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &create_override_data->result_id); if (create_override_data->result_id && create_override_data->result_id[0] == '\0') { g_free (create_override_data->result_id); create_override_data->result_id = NULL; } set_client_state (CLIENT_CREATE_OVERRIDE_RESULT); } else if (strcasecmp ("SEVERITY", element_name) == 0) set_client_state (CLIENT_CREATE_OVERRIDE_SEVERITY); else if (strcasecmp ("TASK", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &create_override_data->task_id); if (create_override_data->task_id && create_override_data->task_id[0] == '\0') { g_free (create_override_data->task_id); create_override_data->task_id = NULL; } set_client_state (CLIENT_CREATE_OVERRIDE_TASK); } else if (strcasecmp ("TEXT", element_name) == 0) set_client_state (CLIENT_CREATE_OVERRIDE_TEXT); else if (strcasecmp ("THREAT", element_name) == 0) set_client_state (CLIENT_CREATE_OVERRIDE_THREAT); ELSE_ERROR ("create_override"); case CLIENT_CREATE_SLAVE: if (strcasecmp ("COMMENT", element_name) == 0) set_client_state (CLIENT_CREATE_SLAVE_COMMENT); else if (strcasecmp ("COPY", element_name) == 0) set_client_state (CLIENT_CREATE_SLAVE_COPY); else if (strcasecmp ("HOST", element_name) == 0) set_client_state (CLIENT_CREATE_SLAVE_HOST); else if (strcasecmp ("LOGIN", element_name) == 0) set_client_state (CLIENT_CREATE_SLAVE_LOGIN); else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_CREATE_SLAVE_NAME); else if (strcasecmp ("PASSWORD", element_name) == 0) set_client_state (CLIENT_CREATE_SLAVE_PASSWORD); else if (strcasecmp ("PORT", element_name) == 0) set_client_state (CLIENT_CREATE_SLAVE_PORT); ELSE_ERROR ("create_slave"); case CLIENT_CREATE_TAG: if (strcasecmp ("ACTIVE", element_name) == 0) { openvas_append_string (&create_tag_data->active, ""); set_client_state (CLIENT_CREATE_TAG_ACTIVE); } else if (strcasecmp ("RESOURCE", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &create_tag_data->resource_id); set_client_state (CLIENT_CREATE_TAG_RESOURCE); } else if (strcasecmp ("COMMENT", element_name) == 0) { openvas_append_string (&create_tag_data->comment, ""); set_client_state (CLIENT_CREATE_TAG_COMMENT); } else if (strcasecmp ("COPY", element_name) == 0) { openvas_append_string (&create_tag_data->copy, ""); set_client_state (CLIENT_CREATE_TAG_COPY); } else if (strcasecmp ("NAME", element_name) == 0) { openvas_append_string (&create_tag_data->name, ""); set_client_state (CLIENT_CREATE_TAG_NAME); } else if (strcasecmp ("VALUE", element_name) == 0) { openvas_append_string (&create_tag_data->value, ""); set_client_state (CLIENT_CREATE_TAG_VALUE); } ELSE_ERROR ("create_tag"); case CLIENT_CREATE_TAG_RESOURCE: if (strcasecmp ("TYPE", element_name) == 0) { openvas_append_string (&create_tag_data->resource_type, ""); set_client_state (CLIENT_CREATE_TAG_RESOURCE_TYPE); } ELSE_ERROR ("create_tag"); case CLIENT_CREATE_TARGET: if (strcasecmp ("EXCLUDE_HOSTS", element_name) == 0) set_client_state (CLIENT_CREATE_TARGET_EXCLUDE_HOSTS); else if (strcasecmp ("REVERSE_LOOKUP_ONLY", element_name) == 0) set_client_state (CLIENT_CREATE_TARGET_REVERSE_LOOKUP_ONLY); else if (strcasecmp ("REVERSE_LOOKUP_UNIFY", element_name) == 0) set_client_state (CLIENT_CREATE_TARGET_REVERSE_LOOKUP_UNIFY); else if (strcasecmp ("ALIVE_TESTS", element_name) == 0) set_client_state (CLIENT_CREATE_TARGET_ALIVE_TESTS); else if (strcasecmp ("COMMENT", element_name) == 0) set_client_state (CLIENT_CREATE_TARGET_COMMENT); else if (strcasecmp ("COPY", element_name) == 0) set_client_state (CLIENT_CREATE_TARGET_COPY); else if (strcasecmp ("ESXI_LSC_CREDENTIAL", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &create_target_data->esxi_lsc_credential_id); set_client_state (CLIENT_CREATE_TARGET_ESXI_LSC_CREDENTIAL); } else if (strcasecmp ("HOSTS", element_name) == 0) set_client_state (CLIENT_CREATE_TARGET_HOSTS); else if (strcasecmp ("PORT_LIST", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &create_target_data->port_list_id); set_client_state (CLIENT_CREATE_TARGET_PORT_LIST); } else if (strcasecmp ("PORT_RANGE", element_name) == 0) { openvas_append_string (&create_target_data->port_range, ""); set_client_state (CLIENT_CREATE_TARGET_PORT_RANGE); } else if (strcasecmp ("SSH_LSC_CREDENTIAL", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &create_target_data->ssh_lsc_credential_id); set_client_state (CLIENT_CREATE_TARGET_SSH_LSC_CREDENTIAL); } else if (strcasecmp ("SMB_LSC_CREDENTIAL", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &create_target_data->smb_lsc_credential_id); set_client_state (CLIENT_CREATE_TARGET_SMB_LSC_CREDENTIAL); } else if (strcasecmp ("NAME", element_name) == 0) { openvas_append_string (&create_target_data->name, ""); set_client_state (CLIENT_CREATE_TARGET_NAME); } ELSE_ERROR ("create_target"); case CLIENT_CREATE_TARGET_NAME: if (strcasecmp ("MAKE_UNIQUE", element_name) == 0) set_client_state (CLIENT_CREATE_TARGET_NAME_MAKE_UNIQUE); ELSE_ERROR ("create_target"); case CLIENT_CREATE_TARGET_SSH_LSC_CREDENTIAL: if (strcasecmp ("PORT", element_name) == 0) set_client_state (CLIENT_CREATE_TARGET_SSH_LSC_CREDENTIAL_PORT); ELSE_ERROR ("create_target"); case CLIENT_CREATE_TASK: if (strcasecmp ("ALTERABLE", element_name) == 0) set_client_state (CLIENT_CREATE_TASK_ALTERABLE); else if (strcasecmp ("COPY", element_name) == 0) set_client_state (CLIENT_CREATE_TASK_COPY); else if (strcasecmp ("PREFERENCES", element_name) == 0) { create_task_data->preferences = make_array (); set_client_state (CLIENT_CREATE_TASK_PREFERENCES); } else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_CREATE_TASK_NAME); else if (strcasecmp ("COMMENT", element_name) == 0) set_client_state (CLIENT_CREATE_TASK_COMMENT); else if (strcasecmp ("HOSTS_ORDERING", element_name) == 0) set_client_state (CLIENT_CREATE_TASK_HOSTS_ORDERING); else if (strcasecmp ("SCANNER", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &create_task_data->scanner_id); set_client_state (CLIENT_CREATE_TASK_SCANNER); } else if (strcasecmp ("CONFIG", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &create_task_data->config_id); set_client_state (CLIENT_CREATE_TASK_CONFIG); } else if (strcasecmp ("ALERT", element_name) == 0) { const gchar* attribute; if (find_attribute (attribute_names, attribute_values, "id", &attribute)) array_add (create_task_data->alerts, g_strdup (attribute)); set_client_state (CLIENT_CREATE_TASK_ALERT); } else if (strcasecmp ("OBSERVERS", element_name) == 0) set_client_state (CLIENT_CREATE_TASK_OBSERVERS); else if (strcasecmp ("SCHEDULE", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &create_task_data->schedule_id); set_client_state (CLIENT_CREATE_TASK_SCHEDULE); } else if (strcasecmp ("SCHEDULE_PERIODS", element_name) == 0) set_client_state (CLIENT_CREATE_TASK_SCHEDULE_PERIODS); else if (strcasecmp ("SLAVE", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &create_task_data->slave_id); set_client_state (CLIENT_CREATE_TASK_SLAVE); } else if (strcasecmp ("TARGET", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &create_task_data->target_id); set_client_state (CLIENT_CREATE_TASK_TARGET); } ELSE_ERROR_CREATE_TASK (); case CLIENT_CREATE_TASK_OBSERVERS: if (strcasecmp ("GROUP", element_name) == 0) { const gchar* attribute; if (find_attribute (attribute_names, attribute_values, "id", &attribute)) array_add (create_task_data->groups, g_strdup (attribute)); set_client_state (CLIENT_CREATE_TASK_OBSERVERS_GROUP); } ELSE_ERROR_CREATE_TASK (); case CLIENT_CREATE_TASK_PREFERENCES: if (strcasecmp ("PREFERENCE", element_name) == 0) { assert (create_task_data->preference == NULL); create_task_data->preference = g_malloc (sizeof (name_value_t)); create_task_data->preference->name = NULL; create_task_data->preference->value = NULL; set_client_state (CLIENT_CREATE_TASK_PREFERENCES_PREFERENCE); } ELSE_ERROR_CREATE_TASK (); case CLIENT_CREATE_TASK_PREFERENCES_PREFERENCE: if (strcasecmp ("SCANNER_NAME", element_name) == 0) set_client_state (CLIENT_CREATE_TASK_PREFERENCES_PREFERENCE_NAME); else if (strcasecmp ("VALUE", element_name) == 0) set_client_state (CLIENT_CREATE_TASK_PREFERENCES_PREFERENCE_VALUE); ELSE_ERROR_CREATE_TASK (); case CLIENT_CREATE_USER: if (strcasecmp ("COPY", element_name) == 0) set_client_state (CLIENT_CREATE_USER_COPY); else if (strcasecmp ("GROUPS", element_name) == 0) set_client_state (CLIENT_CREATE_USER_GROUPS); else if (strcasecmp ("HOSTS", element_name) == 0) { const gchar *attribute; if (find_attribute (attribute_names, attribute_values, "allow", &attribute)) create_user_data->hosts_allow = strcmp (attribute, "0"); else create_user_data->hosts_allow = 1; set_client_state (CLIENT_CREATE_USER_HOSTS); } else if (strcasecmp ("IFACES", element_name) == 0) { const gchar *attribute; if (find_attribute (attribute_names, attribute_values, "allow", &attribute)) create_user_data->ifaces_allow = strcmp (attribute, "0"); else create_user_data->ifaces_allow = 1; set_client_state (CLIENT_CREATE_USER_IFACES); } else if (strcasecmp ("NAME", element_name) == 0) set_client_state (CLIENT_CREATE_USER_NAME); else if (strcasecmp ("PASSWORD", element_name) == 0) set_client_state (CLIENT_CREATE_USER_PASSWORD); else if (strcasecmp ("ROLE", element_name) == 0) { const gchar* attribute; if (find_attribute (attribute_names, attribute_values, "id", &attribute)) array_add (create_user_data->roles, g_strdup (attribute)); set_client_state (CLIENT_CREATE_USER_ROLE); } else if (strcasecmp ("SOURCES", element_name) == 0) { create_user_data->sources = make_array (); set_client_state (CLIENT_CREATE_USER_SOURCES); } else { if (send_element_error_to_client ("create_user", element_name, write_to_client, write_to_client_data)) { error_send_to_client (error); return; } set_client_state (CLIENT_AUTHENTIC); g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_UNKNOWN_ELEMENT, "Error"); } break; case CLIENT_CREATE_USER_GROUPS: if (strcasecmp ("GROUP", element_name) == 0) { const gchar* attribute; if (find_attribute (attribute_names, attribute_values, "id", &attribute)) array_add (create_user_data->groups, g_strdup (attribute)); set_client_state (CLIENT_CREATE_USER_GROUPS_GROUP); } ELSE_ERROR ("create_user"); case CLIENT_CREATE_USER_SOURCES: if (strcasecmp ("SOURCE", element_name) == 0) set_client_state (CLIENT_CREATE_USER_SOURCES_SOURCE); else { if (send_element_error_to_client ("create_user", element_name, write_to_client, write_to_client_data)) { error_send_to_client (error); return; } set_client_state (CLIENT_AUTHENTIC); g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_UNKNOWN_ELEMENT, "Error"); } break; case CLIENT_MODIFY_NOTE: if (strcasecmp ("ACTIVE", element_name) == 0) set_client_state (CLIENT_MODIFY_NOTE_ACTIVE); else if (strcasecmp ("HOSTS", element_name) == 0) set_client_state (CLIENT_MODIFY_NOTE_HOSTS); else if (strcasecmp ("PORT", element_name) == 0) set_client_state (CLIENT_MODIFY_NOTE_PORT); else if (strcasecmp ("RESULT", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &modify_note_data->result_id); if (modify_note_data->result_id && modify_note_data->result_id[0] == '\0') { g_free (modify_note_data->result_id); modify_note_data->result_id = NULL; } set_client_state (CLIENT_MODIFY_NOTE_RESULT); } else if (strcasecmp ("SEVERITY", element_name) == 0) set_client_state (CLIENT_MODIFY_NOTE_SEVERITY); else if (strcasecmp ("TASK", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &modify_note_data->task_id); if (modify_note_data->task_id && modify_note_data->task_id[0] == '\0') { g_free (modify_note_data->task_id); modify_note_data->task_id = NULL; } set_client_state (CLIENT_MODIFY_NOTE_TASK); } else if (strcasecmp ("TEXT", element_name) == 0) set_client_state (CLIENT_MODIFY_NOTE_TEXT); else if (strcasecmp ("THREAT", element_name) == 0) set_client_state (CLIENT_MODIFY_NOTE_THREAT); ELSE_ERROR ("modify_note"); case CLIENT_MODIFY_OVERRIDE: if (strcasecmp ("ACTIVE", element_name) == 0) set_client_state (CLIENT_MODIFY_OVERRIDE_ACTIVE); else if (strcasecmp ("HOSTS", element_name) == 0) set_client_state (CLIENT_MODIFY_OVERRIDE_HOSTS); else if (strcasecmp ("NEW_SEVERITY", element_name) == 0) set_client_state (CLIENT_MODIFY_OVERRIDE_NEW_SEVERITY); else if (strcasecmp ("NEW_THREAT", element_name) == 0) set_client_state (CLIENT_MODIFY_OVERRIDE_NEW_THREAT); else if (strcasecmp ("PORT", element_name) == 0) set_client_state (CLIENT_MODIFY_OVERRIDE_PORT); else if (strcasecmp ("RESULT", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &modify_override_data->result_id); if (modify_override_data->result_id && modify_override_data->result_id[0] == '\0') { g_free (modify_override_data->result_id); modify_override_data->result_id = NULL; } set_client_state (CLIENT_MODIFY_OVERRIDE_RESULT); } else if (strcasecmp ("SEVERITY", element_name) == 0) set_client_state (CLIENT_MODIFY_OVERRIDE_SEVERITY); else if (strcasecmp ("TASK", element_name) == 0) { append_attribute (attribute_names, attribute_values, "id", &modify_override_data->task_id); if (modify_override_data->task_id && modify_override_data->task_id[0] == '\0') { g_free (modify_override_data->task_id); modify_override_data->task_id = NULL; } set_client_state (CLIENT_MODIFY_OVERRIDE_TASK); } else if (strcasecmp ("TEXT", element_name) == 0) set_client_state (CLIENT_MODIFY_OVERRIDE_TEXT); else if (strcasecmp ("THREAT", element_name) == 0) set_client_state (CLIENT_MODIFY_OVERRIDE_THREAT); ELSE_ERROR ("modify_override"); case CLIENT_RUN_WIZARD: if (strcasecmp ("MODE", element_name) == 0) { set_client_state (CLIENT_RUN_WIZARD_MODE); } else if (strcasecmp ("NAME", element_name) == 0) { set_client_state (CLIENT_RUN_WIZARD_NAME); } else if (strcasecmp ("PARAMS", element_name) == 0) { run_wizard_data->params = make_array (); set_client_state (CLIENT_RUN_WIZARD_PARAMS); } ELSE_ERROR ("run_wizard"); case CLIENT_RUN_WIZARD_PARAMS: if (strcasecmp ("PARAM", element_name) == 0) { assert (run_wizard_data->param == NULL); run_wizard_data->param = g_malloc (sizeof (name_value_t)); run_wizard_data->param->name = NULL; run_wizard_data->param->value = NULL; set_client_state (CLIENT_RUN_WIZARD_PARAMS_PARAM); } ELSE_ERROR ("run_wizard"); case CLIENT_RUN_WIZARD_PARAMS_PARAM: if (strcasecmp ("NAME", element_name) == 0) { set_client_state (CLIENT_RUN_WIZARD_PARAMS_PARAM_NAME); } else if (strcasecmp ("VALUE", element_name) == 0) { set_client_state (CLIENT_RUN_WIZARD_PARAMS_PARAM_VALUE); } ELSE_ERROR ("run_wizard"); default: /* Send a generic response. */ if (send_element_error_to_client ("omp", element_name, write_to_client, write_to_client_data)) { error_send_to_client (error); return; } set_client_state (CLIENT_AUTHENTIC); g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_UNKNOWN_ELEMENT, "Error"); break; } return; } /** * @brief Send XML for an NVT. * * The caller must send the closing NVT tag. * * @param[in] nvts The NVT. * @param[in] details If true, detailed XML, else simple XML. * @param[in] preferences If true, included preferences. * @param[in] pref_count Preference count. Used if details is true. * @param[in] timeout Timeout. Used if details is true. * @param[in] config Config, used if preferences is true. * @param[in] write_to_client Function to write to client. * @param[in] write_to_client_data Argument to \p write_to_client. * * @return TRUE if out of space in to_client buffer, else FALSE. */ static gboolean send_nvt (iterator_t *nvts, int details, int preferences, int pref_count, const char *timeout, config_t config, int (*write_to_client) (const char *, void*), void* write_to_client_data) { gchar *msg; msg = get_nvti_xml (nvts, details, pref_count, preferences, timeout, config, 0); if (send_to_client (msg, write_to_client, write_to_client_data)) { g_free (msg); return TRUE; } g_free (msg); return FALSE; } /** * @brief Send XML for the reports of a task. * * @param[in] task The task. * @param[in] apply_overrides Whether to apply overrides. * @param[in] write_to_client Function to write to client. * @param[in] write_to_client_data Argument to \p write_to_client. * * @return 0 success, -4 out of space in to_client, * -5 failed to get report counts, -6 failed to get timestamp. */ static int send_reports (task_t task, int apply_overrides, int min_qod, int (*write_to_client) (const char*, void*), void* write_to_client_data) { iterator_t iterator; report_t index; if (send_to_client ("", write_to_client, write_to_client_data)) return -4; init_report_iterator_task (&iterator, task); while (next_report (&iterator, &index)) { gchar *uuid, *timestamp, *msg; int debugs, false_positives, holes, infos, logs, warnings, run_status; double severity; char *scan_end; uuid = report_uuid (index); if (report_counts (uuid, &debugs, &holes, &infos, &logs, &warnings, &false_positives, &severity, apply_overrides, 0, min_qod)) { free (uuid); return -5; } if (report_timestamp (uuid, ×tamp)) { free (uuid); return -6; } tracef (" %s\n", uuid); report_scan_run_status (index, &run_status); scan_end = scan_end_time (index); msg = g_strdup_printf ("" "%s" "%s" "%s" "" "%i" "%i" "%i" "%i" "%i" "%i" "" "%1.1f" "", uuid, timestamp, scan_end, run_status_name (run_status ? run_status : TASK_STATUS_INTERNAL_ERROR), debugs, holes, infos, logs, warnings, false_positives, severity); free (scan_end); g_free (timestamp); if (send_to_client (msg, write_to_client, write_to_client_data)) { g_free (msg); free (uuid); return -4; } g_free (msg); free (uuid); } cleanup_iterator (&iterator); if (send_to_client ("", write_to_client, write_to_client_data)) return -4; return 0; } /** * @brief Convert \n's to real newline's. * * @param[in] text The text in which to insert newlines. * * @return A newly allocated version of text. */ static gchar* convert_to_newlines (const char *text) { char *nptr, *new; new = g_malloc (strlen (text) + 1); nptr = new; while (*text) if (*text == '\\') { /* Convert "\\n" to '\n' */ if (*(text+1) == 'n') { text += 2; *nptr++ = '\n'; } /* Skip "\\r" */ else if (*(text+1) == 'r') text += 2; else *nptr++ = *text++; } else *nptr++ = *text++; *nptr = '\0'; return new; } /** * @brief Format XML into a buffer. * * @param[in] buffer Buffer. * @param[in] format Format string for XML. * @param[in] ... Arguments for format string. */ static void buffer_xml_append_printf (GString *buffer, const char *format, ...) { va_list args; gchar *msg; va_start (args, format); msg = g_markup_vprintf_escaped (format, args); va_end (args); g_string_append (buffer, msg); g_free (msg); } /** * @brief Get substring of UTF8 string. * * @param[in] str String * @param[in] start_pos Start. * @param[in] end_pos End. * * @return Substring. */ static gchar * utf8_substring (const gchar *str, glong start_pos, glong end_pos) { gchar *start, *end, *out; /* TODO This is a copy of g_utf8_substring from glib 2.38.2. Once our glib * minimum goes past 2.30 we can just use g_utf8_substring. */ start = g_utf8_offset_to_pointer (str, start_pos); end = g_utf8_offset_to_pointer (start, end_pos - start_pos); out = g_malloc (end - start + 1); memcpy (out, start, end - start); out[end - start] = 0; return out; } /** * @brief Buffer XML for some notes. * * @param[in] buffer Buffer into which to buffer notes. * @param[in] notes Notes iterator. * @param[in] include_notes_details Whether to include details of notes. * @param[in] include_result Whether to include associated result. * @param[out] count Number of notes. */ static void buffer_notes_xml (GString *buffer, iterator_t *notes, int include_notes_details, int include_result, int *count) { while (next (notes)) { char *uuid_task, *uuid_result; if (count) (*count)++; if (note_iterator_task (notes)) task_uuid (note_iterator_task (notes), &uuid_task); else uuid_task = NULL; if (note_iterator_result (notes)) result_uuid (note_iterator_result (notes), &uuid_result); else uuid_result = NULL; buffer_xml_append_printf (buffer, "" "", get_iterator_uuid (notes)); if (current_credentials.username && get_iterator_owner_name (notes) && (strcmp (get_iterator_owner_name (notes), current_credentials.username) == 0)) buffer_xml_append_printf (buffer, "Everything" ""); else { iterator_t perms; get_data_t perms_get; memset (&perms_get, '\0', sizeof (perms_get)); perms_get.filter = g_strdup_printf ("resource_uuid=%s" " owner=any" " permission=any", get_iterator_uuid (notes)); init_permission_iterator (&perms, &perms_get); g_free (perms_get.filter); while (next (&perms)) buffer_xml_append_printf (buffer, "%s", get_iterator_name (&perms)); cleanup_iterator (&perms); buffer_xml_append_printf (buffer, ""); } if (include_notes_details == 0) { const char *text = note_iterator_text (notes); gchar *excerpt = utf8_substring (text, 0, 60); /* This must match send_get_common. */ buffer_xml_append_printf (buffer, "%s" "" "%s" "" "%s" "%s" "1" "0" "%i" "%s" "%i" "" "%i" "" "", get_iterator_owner_name (notes) ? get_iterator_owner_name (notes) : "", note_iterator_nvt_oid (notes), note_iterator_nvt_name (notes), get_iterator_creation_time (notes), get_iterator_modification_time (notes), note_iterator_active (notes), strlen (excerpt) < strlen (text), excerpt, ((note_iterator_task (notes) && (uuid_task == NULL)) || (note_iterator_result (notes) && (uuid_result == NULL))), resource_tag_count ("note", get_iterator_resource (notes), 1)); g_free (excerpt); } else { char *name_task; int trash_task; time_t end_time; iterator_t tags; if (uuid_task) { name_task = task_name (note_iterator_task (notes)); trash_task = task_in_trash (note_iterator_task (notes)); } else { name_task = NULL; trash_task = 0; } end_time = note_iterator_end_time (notes); /* This must match send_get_common. */ buffer_xml_append_printf (buffer, "%s" "%s" "%s" "%s" "1" "0" "%i" "%s" "%s" "%s" "%s" "%s" "%s" "%s%i" "%i", get_iterator_owner_name (notes) ? get_iterator_owner_name (notes) : "", note_iterator_nvt_oid (notes), note_iterator_nvt_name (notes), get_iterator_creation_time (notes), get_iterator_modification_time (notes), note_iterator_active (notes), end_time > 1 ? iso_time (&end_time) : "", note_iterator_text (notes), note_iterator_hosts (notes) ? note_iterator_hosts (notes) : "", note_iterator_port (notes) ? note_iterator_port (notes) : "", note_iterator_severity (notes) ? note_iterator_severity (notes) : "", note_iterator_threat (notes) ? note_iterator_threat (notes) : "", uuid_task ? uuid_task : "", name_task ? name_task : "", trash_task, ((note_iterator_task (notes) && (uuid_task == NULL)) || (note_iterator_result (notes) && (uuid_result == NULL)))); free (name_task); if (include_result && note_iterator_result (notes)) { iterator_t results; init_result_iterator (&results, 0, note_iterator_result (notes), 0, 1, 1, NULL, NULL, 1, NULL, 0, NULL, NULL, 0); while (next (&results)) buffer_results_xml (buffer, &results, 0, 0, /* Notes. */ 0, /* Note details. */ 0, /* Overrides. */ 0, /* Override details. */ 0, /* Tags. */ 0, /* Tag details. */ 0, /* Result details. */ NULL, NULL, 0); cleanup_iterator (&results); } else buffer_xml_append_printf (buffer, "", uuid_result ? uuid_result : ""); buffer_xml_append_printf (buffer, "" "%i", resource_tag_count ("note", get_iterator_resource (notes), 1)); init_resource_tag_iterator (&tags, "note", get_iterator_resource (notes), 1, NULL, 1); while (next (&tags)) { buffer_xml_append_printf (buffer, "" "%s" "%s" "%s" "", resource_tag_iterator_uuid (&tags), resource_tag_iterator_name (&tags), resource_tag_iterator_value (&tags), resource_tag_iterator_comment (&tags)); } cleanup_iterator (&tags); buffer_xml_append_printf (buffer, "" ""); } free (uuid_task); free (uuid_result); } } /** * @brief Buffer XML for some overrides. * * @param[in] buffer Buffer into which to buffer overrides. * @param[in] overrides Overrides iterator. * @param[in] include_overrides_details Whether to include details of overrides. * @param[in] include_result Whether to include associated result. * @param[out] count Number of overrides. */ static void buffer_overrides_xml (GString *buffer, iterator_t *overrides, int include_overrides_details, int include_result, int *count) { while (next (overrides)) { char *uuid_task, *uuid_result; if (count) (*count)++; if (override_iterator_task (overrides)) task_uuid (override_iterator_task (overrides), &uuid_task); else uuid_task = NULL; if (override_iterator_result (overrides)) result_uuid (override_iterator_result (overrides), &uuid_result); else uuid_result = NULL; buffer_xml_append_printf (buffer, "" "", get_iterator_uuid (overrides)); if (current_credentials.username && get_iterator_owner_name (overrides) && (strcmp (get_iterator_owner_name (overrides), current_credentials.username) == 0)) buffer_xml_append_printf (buffer, "Everything" ""); else { iterator_t perms; get_data_t perms_get; memset (&perms_get, '\0', sizeof (perms_get)); perms_get.filter = g_strdup_printf ("resource_uuid=%s" " owner=any" " permission=any", get_iterator_uuid (overrides)); init_permission_iterator (&perms, &perms_get); g_free (perms_get.filter); while (next (&perms)) buffer_xml_append_printf (buffer, "%s", get_iterator_name (&perms)); cleanup_iterator (&perms); buffer_xml_append_printf (buffer, ""); } if (include_overrides_details == 0) { const char *text = override_iterator_text (overrides); gchar *excerpt = utf8_substring (text, 0, 60); /* This must match send_get_common. */ buffer_xml_append_printf (buffer, "%s" "" "%s" "" "%s" "%s" "1" "0" "%i" "%s" "%s" "%s" "%s" "%s" "%i" "" "%i" "" "", get_iterator_owner_name (overrides) ? get_iterator_owner_name (overrides) : "", override_iterator_nvt_oid (overrides), override_iterator_nvt_name (overrides), get_iterator_creation_time (overrides), get_iterator_modification_time (overrides), override_iterator_active (overrides), strlen (excerpt) < strlen (text), excerpt, override_iterator_threat (overrides) ? override_iterator_threat (overrides) : "", override_iterator_severity (overrides) ? override_iterator_severity (overrides) : "", override_iterator_new_threat (overrides), override_iterator_new_severity (overrides), ((override_iterator_task (overrides) && (uuid_task == NULL)) || (override_iterator_result (overrides) && (uuid_result == NULL))), resource_tag_count ("override", get_iterator_resource (overrides), 1)); g_free (excerpt); } else { char *name_task; int trash_task; time_t end_time; iterator_t tags; if (uuid_task) { name_task = task_name (override_iterator_task (overrides)); trash_task = task_in_trash (override_iterator_task (overrides)); } else { name_task = NULL; trash_task = 0; } end_time = override_iterator_end_time (overrides); /* This must match send_get_common. */ buffer_xml_append_printf (buffer, "%s" "%s" "%s" "%s" "1" "0" "%i" "%s" "%s" "%s" "%s" "%s" "%s" "%s" "%s" "%s%i" "%i", get_iterator_owner_name (overrides) ? get_iterator_owner_name (overrides) : "", override_iterator_nvt_oid (overrides), override_iterator_nvt_name (overrides), get_iterator_creation_time (overrides), get_iterator_modification_time (overrides), override_iterator_active (overrides), end_time > 1 ? iso_time (&end_time) : "", override_iterator_text (overrides), override_iterator_hosts (overrides) ? override_iterator_hosts (overrides) : "", override_iterator_port (overrides) ? override_iterator_port (overrides) : "", override_iterator_threat (overrides) ? override_iterator_threat (overrides) : "", override_iterator_severity (overrides) ? override_iterator_severity (overrides) : "", override_iterator_new_threat (overrides), override_iterator_new_severity (overrides), uuid_task ? uuid_task : "", name_task ? name_task : "", trash_task, ((override_iterator_task (overrides) && (uuid_task == NULL)) || (override_iterator_result (overrides) && (uuid_result == NULL)))); free (name_task); if (include_result && override_iterator_result (overrides)) { iterator_t results; init_result_iterator (&results, 0, override_iterator_result (overrides), 0, 1, 1, NULL, NULL, 1, NULL, 0, NULL, NULL, 0); while (next (&results)) buffer_results_xml (buffer, &results, 0, 0, /* Overrides. */ 0, /* Override details. */ 0, /* Overrides. */ 0, /* Override details. */ 0, /* Tags. */ 0, /* Tag details. */ 0, /* Result details. */ NULL, NULL, 0); cleanup_iterator (&results); } else buffer_xml_append_printf (buffer, "", uuid_result ? uuid_result : ""); buffer_xml_append_printf (buffer, "" "%i", resource_tag_count ("override", get_iterator_resource (overrides), 1)); init_resource_tag_iterator (&tags, "override", get_iterator_resource (overrides), 1, NULL, 1); while (next (&tags)) { buffer_xml_append_printf (buffer, "" "%s" "%s" "%s" "", resource_tag_iterator_uuid (&tags), resource_tag_iterator_name (&tags), resource_tag_iterator_value (&tags), resource_tag_iterator_comment (&tags)); } cleanup_iterator (&tags); buffer_xml_append_printf (buffer, "" ""); } free (uuid_task); free (uuid_result); } } /* External for manage.c. */ /** * @brief Buffer XML for the NVT preference of a config. * * @param[in] buffer Buffer. * @param[in] prefs NVT preference iterator. * @param[in] config Config. * @param[in] hide_passwords Whether to hide passwords. */ void buffer_config_preference_xml (GString *buffer, iterator_t *prefs, config_t config, int hide_passwords) { char *real_name, *type, *value, *nvt; const char *default_value; char *oid = NULL; real_name = nvt_preference_iterator_real_name (prefs); type = nvt_preference_iterator_type (prefs); value = nvt_preference_iterator_config_value (prefs, config); nvt = nvt_preference_iterator_nvt (prefs); default_value = nvt_preference_iterator_value (prefs); if (nvt) oid = nvt_oid (nvt); buffer_xml_append_printf (buffer, "" "%s" "%s" "%s", oid ? oid : "", nvt ? nvt : "", real_name ? real_name : "", type ? type : ""); if (value && type && (strcmp (type, "radio") == 0)) { /* Handle the other possible values. */ char *pos = strchr (value, ';'); if (pos) *pos = '\0'; buffer_xml_append_printf (buffer, "%s", value); while (pos) { char *pos2 = strchr (++pos, ';'); if (pos2) *pos2 = '\0'; buffer_xml_append_printf (buffer, "%s", pos); pos = pos2; } } else if (value && type && hide_passwords && (strcmp (type, "password") == 0)) buffer_xml_append_printf (buffer, ""); else buffer_xml_append_printf (buffer, "%s", value ? value : ""); if (default_value && type && (strcmp (type, "radio") == 0)) { /* Handle the other possible values. */ char *pos = strchr (default_value, ';'); if (pos) *pos = '\0'; buffer_xml_append_printf (buffer, "%s", default_value); } else if (default_value && type && (strcmp (type, "password") == 0)) buffer_xml_append_printf (buffer, ""); else buffer_xml_append_printf (buffer, "%s", default_value ? default_value : ""); buffer_xml_append_printf (buffer, ""); free (real_name); free (type); free (value); free (nvt); free (oid); } /** * @brief Compare two string with the "diff" command. * * @param[in] one First string. * @param[in] two Second string. * * @return Output of "diff", or NULL on error. */ gchar * strdiff (const gchar *one, const gchar *two) { gchar **cmd, *ret, *one_file, *two_file, *old_lc_all, *old_language; gint exit_status; gchar *standard_out = NULL; gchar *standard_err = NULL; char dir[] = "/tmp/openvasmd-strdiff-XXXXXX"; GError *error = NULL; if (mkdtemp (dir) == NULL) return NULL; one_file = g_build_filename (dir, "Report 1", NULL); g_file_set_contents (one_file, one, strlen (one), &error); if (error) { g_warning ("%s", error->message); g_error_free (error); openvas_file_remove_recurse (dir); g_free (one_file); return NULL; } two_file = g_build_filename (dir, "Report 2", NULL); g_file_set_contents (two_file, two, strlen (two), &error); if (error) { g_warning ("%s", error->message); g_error_free (error); openvas_file_remove_recurse (dir); g_free (one_file); g_free (two_file); return NULL; } old_lc_all = getenv ("LC_ALL") ? g_strdup (getenv ("LC_ALL")) : NULL; if (setenv ("LC_ALL", "C", 1) == -1) { g_warning ("%s: failed to set LC_ALL\n", __FUNCTION__); return NULL; } old_language = getenv ("LANGUAGE") ? g_strdup (getenv ("LANGUAGE")) : NULL; if (setenv ("LANGUAGE", "C", 1) == -1) { g_warning ("%s: failed to set LANGUAGE\n", __FUNCTION__); return NULL; } cmd = (gchar **) g_malloc (5 * sizeof (gchar *)); cmd[0] = g_strdup ("diff"); cmd[1] = g_strdup ("-u"); cmd[2] = g_strdup ("Report 1"); cmd[3] = g_strdup ("Report 2"); cmd[4] = NULL; g_debug ("%s: Spawning in %s: %s \"%s\" \"%s\"\n", __FUNCTION__, dir, cmd[0], cmd[1], cmd[2]); if ((g_spawn_sync (dir, cmd, NULL, /* Environment. */ G_SPAWN_SEARCH_PATH, NULL, /* Setup func. */ NULL, &standard_out, &standard_err, &exit_status, NULL) == FALSE) || (WIFEXITED (exit_status) == 0) || WEXITSTATUS (exit_status)) { if (WEXITSTATUS (exit_status) == 1) ret = standard_out; else { g_debug ("%s: failed to run diff: %d (WIF %i, WEX %i)", __FUNCTION__, exit_status, WIFEXITED (exit_status), WEXITSTATUS (exit_status)); g_debug ("%s: stdout: %s\n", __FUNCTION__, standard_out); g_debug ("%s: stderr: %s\n", __FUNCTION__, standard_err); ret = NULL; g_free (standard_out); } } else ret = standard_out; if (old_lc_all && (setenv ("LC_ALL", old_lc_all, 1) == -1)) { g_warning ("%s: failed to reset LC_ALL\n", __FUNCTION__); ret = NULL; } else if (old_language && (setenv ("LANGUAGE", old_language, 1) == -1)) { g_warning ("%s: failed to reset LANGUAGE\n", __FUNCTION__); ret = NULL; } g_free (old_lc_all); g_free (old_language); g_free (cmd[0]); g_free (cmd[1]); g_free (cmd[2]); g_free (cmd[3]); g_free (cmd); g_free (standard_err); g_free (one_file); g_free (two_file); openvas_file_remove_recurse (dir); return ret; } /** * @brief Buffer XML for notes of a result. * * @param[in] buffer Buffer into which to buffer results. * @param[in] result Result. * @param[in] task Task associated with result. * @param[in] include_notes_details Whether to include details of notes. */ static void buffer_result_notes_xml (GString *buffer, result_t result, task_t task, int include_notes_details) { g_string_append (buffer, ""); if (task) { get_data_t get; iterator_t notes; memset (&get, '\0', sizeof (get)); /* Most recent first. */ get.filter = "sort-reverse=created owner=any permission=any"; init_note_iterator (¬es, &get, 0, result, task); buffer_notes_xml (buffer, ¬es, include_notes_details, 0, NULL); cleanup_iterator (¬es); } g_string_append (buffer, ""); } /** * @brief Buffer XML for overrides of a result. * * @param[in] buffer Buffer into which to buffer results. * @param[in] result Result. * @param[in] task Task associated with result. * @param[in] include_overrides_details Whether to include details of overrides. */ static void buffer_result_overrides_xml (GString *buffer, result_t result, task_t task, int include_overrides_details) { g_string_append (buffer, ""); if (task) { get_data_t get; iterator_t overrides; memset (&get, '\0', sizeof (get)); /* Most recent first. */ get.filter = "sort-reverse=created owner=any permission=any"; init_override_iterator (&overrides, &get, 0, result, task); buffer_overrides_xml (buffer, &overrides, include_overrides_details, 0, NULL); cleanup_iterator (&overrides); } g_string_append (buffer, ""); } /** * @brief Add a detail block to a XML buffer. */ #define ADD_DETAIL(buff, dname, dvalue) do { \ buffer_xml_append_printf (buff, \ "" \ "%s" \ "%s" \ "", \ dname, \ dvalue); \ } while (0) static void results_xml_append_cert (GString *buffer, const char *oid) { iterator_t cert_refs_iterator; buffer_xml_append_printf (buffer, ""); if (manage_cert_loaded ()) { init_nvt_cert_bund_adv_iterator (&cert_refs_iterator, oid, 0, 0); while (next (&cert_refs_iterator)) { g_string_append_printf (buffer, "", get_iterator_name (&cert_refs_iterator)); } cleanup_iterator (&cert_refs_iterator); init_nvt_dfn_cert_adv_iterator (&cert_refs_iterator, oid, 0, 0); while (next (&cert_refs_iterator)) { g_string_append_printf (buffer, "", get_iterator_name (&cert_refs_iterator)); } cleanup_iterator (&cert_refs_iterator); } else g_string_append_printf (buffer, "database not available"); buffer_xml_append_printf (buffer, ""); } static void results_xml_append_nvt (iterator_t *results, GString *buffer) { const char *oid = result_iterator_nvt_oid (results); assert (results); assert (buffer); if (g_str_has_prefix (oid, "CVE-")) { gchar *cvss_base; cvss_base = cve_cvss_base (oid); buffer_xml_append_printf (buffer, "" "cve" "%s" "%s" "" "%s" "", oid, oid, cvss_base, result_iterator_port (results), oid); g_free (cvss_base); return; } if (g_str_has_prefix (oid, "oval:")) { int ret; char *cves; get_data_t get; iterator_t iterator; memset (&get, '\0', sizeof (get)); get.id = g_strdup (oid); ret = init_ovaldef_info_iterator (&iterator, &get, NULL); if (ret) assert (0); if (!next (&iterator)) abort (); cves = ovaldef_cves (oid); buffer_xml_append_printf (buffer, "%s%s" "%ssummary=%s", oid, ovaldef_info_iterator_title (&iterator), ovaldef_info_iterator_max_cvss (&iterator), cves ?: "", ovaldef_info_iterator_description (&iterator)); g_free (cves); g_free (get.id); cleanup_iterator (&iterator); } else { const char *cvss_base = result_iterator_nvt_cvss_base (results); if (!cvss_base && !strcmp (oid, "0")) cvss_base = "0.0"; buffer_xml_append_printf (buffer, "%s%s" "%s%s%s" "%s%s", oid, result_iterator_nvt_name (results) ?: oid, result_iterator_nvt_family (results) ?: "", cvss_base ?: "", result_iterator_nvt_cve (results) ?: "", result_iterator_nvt_bid (results) ?: "", result_iterator_nvt_xref (results) ?: "", result_iterator_nvt_tag (results) ?: ""); } results_xml_append_cert (buffer, oid); buffer_xml_append_printf (buffer, ""); } /** @todo Exported for manage_sql.c. */ /** * @brief Buffer XML for some results. * * @param[in] buffer Buffer into which to buffer results. * @param[in] results Result iterator. * @param[in] task Task associated with results. Only * needed with include_notes or * include_overrides. * @param[in] include_notes Whether to include notes. * @param[in] include_notes_details Whether to include details of notes. * @param[in] include_overrides Whether to include overrides. * @param[in] include_overrides_details Whether to include details of overrides. * @param[in] include_tags Whether to include user tag count. * @param[in] include_tags_details Whether to include details of tags. * @param[in] include_details Whether to include details of the result. * @param[in] delta_state Delta state of result, or NULL. * @param[in] delta_results Iterator for delta result to include, or * NULL. * @param[in] changed Whether the result is a "changed" delta. */ void buffer_results_xml (GString *buffer, iterator_t *results, task_t task, int include_notes, int include_notes_details, int include_overrides, int include_overrides_details, int include_tags, int include_tags_details, int include_details, const char *delta_state, iterator_t *delta_results, int changed) { const char *descr = result_iterator_descr (results); const char *name, *owner_name, *comment, *creation_time, *modification_time; gchar *nl_descr = descr ? convert_to_newlines (descr) : NULL; const char *qod = result_iterator_qod (results); const char *qod_type = result_iterator_qod_type (results); result_t result = result_iterator_result (results); char *uuid; char *detect_ref, *detect_cpe, *detect_loc, *detect_oid, *detect_name; task_t selected_task; result_uuid (result, &uuid); buffer_xml_append_printf (buffer, "", uuid); selected_task = task; name = get_iterator_name (results); if (name) buffer_xml_append_printf (buffer, "%s", name); owner_name = get_iterator_owner_name (results); if (owner_name) buffer_xml_append_printf (buffer, "%s", owner_name); comment = get_iterator_comment (results); if (comment) buffer_xml_append_printf (buffer, "%s", comment); creation_time = get_iterator_creation_time (results); if (creation_time) buffer_xml_append_printf (buffer, "%s", creation_time); modification_time = get_iterator_modification_time (results); if (modification_time) buffer_xml_append_printf (buffer, "%s", modification_time); if (include_details) { char *result_report_id, *result_task_id, *result_task_name; if (task == 0) selected_task = result_iterator_task (results); task_uuid (selected_task, &result_task_id); result_task_name = task_name (result_iterator_task (results)); result_report_id = report_uuid (result_iterator_report (results)); g_string_append_printf (buffer, "" "%s", result_report_id, result_task_id, result_task_name); free (result_report_id); free (result_task_id); free (result_task_name); } if (include_tags) { buffer_xml_append_printf (buffer, "" "%i", resource_tag_count ("result", result, 1)); if (include_tags_details) { iterator_t tags; init_resource_tag_iterator (&tags, "result", result, 1, NULL, 1); while (next (&tags)) { buffer_xml_append_printf (buffer, "" "%s" "%s" "%s" "", resource_tag_iterator_uuid (&tags), resource_tag_iterator_name (&tags), resource_tag_iterator_value (&tags), resource_tag_iterator_comment (&tags)); } cleanup_iterator (&tags); } buffer_xml_append_printf (buffer, ""); } detect_ref = detect_cpe = detect_loc = detect_oid = detect_name = NULL; if (result_detection_reference (result, &detect_ref, &detect_cpe, &detect_loc, &detect_oid, &detect_name) == 0) { buffer_xml_append_printf (buffer, "" "" "
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ", detect_ref); ADD_DETAIL(buffer, "product", detect_cpe); ADD_DETAIL(buffer, "location", detect_loc); ADD_DETAIL(buffer, "source_oid", detect_oid); ADD_DETAIL(buffer, "source_name", detect_name); buffer_xml_append_printf (buffer, "
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        " "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        " "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "); } g_free (detect_ref); g_free (detect_cpe); g_free (detect_loc); g_free (detect_oid); g_free (detect_name); buffer_xml_append_printf (buffer, "%s%s", result_iterator_host (results), result_iterator_port (results)); results_xml_append_nvt (results, buffer); buffer_xml_append_printf (buffer, "%s" "%s" "%.1f" "%s%s" "%s", result_iterator_scan_nvt_version (results), result_iterator_level (results), result_iterator_severity_double (results), qod ? qod : "", qod_type ? qod_type : "", descr ? nl_descr : ""); if (include_overrides) buffer_xml_append_printf (buffer, "%s" "%s", result_iterator_original_level (results), result_iterator_original_severity (results)); free (uuid); if (include_notes) buffer_result_notes_xml (buffer, result, selected_task, include_notes_details); if (include_overrides) buffer_result_overrides_xml (buffer, result, selected_task, include_overrides_details); if (delta_state || delta_results) { g_string_append (buffer, ""); if (delta_state) g_string_append_printf (buffer, "%s", delta_state); if (changed && delta_results) { gchar *diff, *delta_nl_descr; const char *delta_descr; buffer_results_xml (buffer, delta_results, selected_task, include_notes, include_notes_details, include_overrides, include_overrides_details, include_tags, include_tags_details, include_details, delta_state, NULL, 0); delta_descr = result_iterator_descr (delta_results); delta_nl_descr = delta_descr ? convert_to_newlines (delta_descr) : NULL; diff = strdiff (descr ? nl_descr : "", delta_descr ? delta_nl_descr : ""); g_free (delta_nl_descr); if (diff) { gchar **split, *diff_xml; /* Remove the leading filename lines. */ split = g_strsplit ((gchar*) diff, "\n", 3); if (split[0] && split[1] && split[2]) diff_xml = g_markup_escape_text (split[2], strlen (split[2])); else diff_xml = g_markup_escape_text (diff, strlen (diff)); g_strfreev (split); g_string_append_printf (buffer, "%s", diff_xml); g_free (diff_xml); g_free (diff); } else g_string_append (buffer, "Error creating diff."); } if (delta_results) { if (include_notes) buffer_result_notes_xml (buffer, result_iterator_result (delta_results), selected_task, include_notes_details); if (include_overrides) buffer_result_overrides_xml (buffer, result_iterator_result (delta_results), selected_task, include_overrides_details); } g_string_append (buffer, ""); } if (descr) g_free (nl_descr); g_string_append (buffer, "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "); } #undef ADD_DETAIL /** * @brief Convert ranges to manage ranges. * * @param[in] ranges Ranges buffered in CREATE_PORT_LIST. * * @return Array of manage ranges on success, else NULL. */ static array_t * convert_to_manage_ranges (array_t *ranges) { if (ranges) { guint index; array_t *manage_ranges; manage_ranges = make_array (); index = ranges->len; while (index--) { create_port_list_range_t *range; range = (create_port_list_range_t*) g_ptr_array_index (ranges, index); if (range) { range_t *manage_range; manage_range = g_malloc0 (sizeof (range_t)); manage_range->comment = range->comment; manage_range->end = atoi (range->end); manage_range->id = range->id; manage_range->start = atoi (range->start); if (strcasecmp (range->type, "TCP") == 0) manage_range->type = PORT_PROTOCOL_TCP; else if (strcasecmp (range->type, "UDP") == 0) manage_range->type = PORT_PROTOCOL_UDP; else manage_range->type = PORT_PROTOCOL_OTHER; manage_range->exclude = 0; array_add (manage_ranges, manage_range); } } return manage_ranges; } return NULL; } /** * @brief Insert else clause for omp_xml_handle_start_element. * * @param[in] parent Parent element. * @param[in] element Element. */ #define CLOSE(parent, element) \ case parent ## _ ## element: \ assert (strcasecmp (G_STRINGIFY (element), element_name) == 0); \ set_client_state (parent); \ break /** * @brief Insert else clause for omp_xml_handle_start_element. * * Stop the parser from reading over elements at the same time. * * @param[in] parent Parent element. * @param[in] element Element. */ #define CLOSE_READ_OVER(parent, element) \ case parent ## _ ## element: \ assert (strcasecmp (G_STRINGIFY (element), element_name) == 0); \ omp_parser->read_over = 0; \ set_client_state (parent); \ break /** * @brief Iterate a GET iterator. * * If the user requested to start at an offset from the first result, but * the result set was empty, then reset the iterator to start from the * first result. * * @param[in] resources Resource iterator. * @param[in] get GET command data. * @param[out] first First. Number of first item to get. * @param[out] count Count. * @param[in] init Init function, to reset the iterator. * * @return What to do next: 0 continue, 1 end, -1 fail. */ static int get_next (iterator_t *resources, get_data_t *get, int *first, int *count, int (*init) (iterator_t*, const get_data_t *)) { if (next (resources) == FALSE) { gchar *new_filter; if (get->filt_id && strcmp (get->filt_id, "0")) /* If filtering by a named filter, then just end, because changing * the filter term would probably surprise the user. */ return 1; if (*first == 0) return 1; if (*first == 1 || *count > 0) /* Some results were found or first was 1, so stop iterating. */ return 1; /* Reset the iterator with first 1, and start again. */ cleanup_iterator (resources); new_filter = g_strdup_printf ("first=1 %s", get->filter); g_free (get->filter); get->filter = new_filter; if (init (resources, get)) return -1; *count = 0; *first = 1; if (next (resources) == FALSE) return 1; } return 0; } /** * @brief Insert DELETE case for omp_xml_handle_end_element. * * @param[in] upper Resource type in uppercase. * @param[in] type Resource type. * @param[in] capital Resource type capitalised. */ #define CASE_DELETE(upper, type, capital) \ case CLIENT_DELETE_ ## upper : \ assert (strcasecmp ("DELETE_" G_STRINGIFY (upper), element_name) == 0); \ if (delete_ ## type ## _data-> type ## _id) \ switch (delete_ ## type (delete_ ## type ## _data-> type ## _id, \ delete_ ## type ## _data->ultimate)) \ { \ case 0: \ SEND_TO_CLIENT_OR_FAIL (XML_OK ("delete_" G_STRINGIFY (type))); \ log_event (G_STRINGIFY(type), capital, \ delete_ ## type ## _data-> type ## _id, "deleted"); \ break; \ case 1: \ SEND_TO_CLIENT_OR_FAIL \ (XML_ERROR_SYNTAX ("delete_" G_STRINGIFY (type), \ capital " is in use")); \ log_event_fail (G_STRINGIFY(type), capital, \ delete_ ## type ## _data-> type ## _id, \ "deleted"); \ break; \ case 2: \ if (send_find_error_to_client \ ("delete_" G_STRINGIFY (type), \ G_STRINGIFY (type), \ delete_ ## type ## _data-> type ## _id, \ omp_parser)) \ { \ error_send_to_client (error); \ return; \ } \ log_event_fail (G_STRINGIFY(type), capital, \ delete_ ## type ## _data-> type ## _id, \ "deleted"); \ break; \ case 3: \ SEND_TO_CLIENT_OR_FAIL \ (XML_ERROR_SYNTAX ("delete_" G_STRINGIFY (type), \ "Attempt to delete a predefined" \ " " G_STRINGIFY (type))); \ break; \ case 99: \ SEND_TO_CLIENT_OR_FAIL \ (XML_ERROR_SYNTAX ("delete_" G_STRINGIFY (type), \ "Permission denied")); \ log_event_fail (G_STRINGIFY(type), capital, \ delete_ ## type ## _data-> type ## _id, \ "deleted"); \ break; \ default: \ SEND_TO_CLIENT_OR_FAIL \ (XML_INTERNAL_ERROR ("delete_" G_STRINGIFY (type))); \ log_event_fail (G_STRINGIFY(type), capital, \ delete_ ## type ## _data-> type ## _id, \ "deleted"); \ } \ else \ SEND_TO_CLIENT_OR_FAIL \ (XML_ERROR_SYNTAX ("delete_" G_STRINGIFY (type), \ "DELETE_" G_STRINGIFY (upper) " requires a " \ G_STRINGIFY (type) "_id attribute")); \ delete_ ## type ## _data_reset (delete_ ## type ## _data); \ set_client_state (CLIENT_AUTHENTIC); \ break /** * @brief Call init_get for a GET end handler. * * @param[in] type Resource type. * @param[in] capital Resource type, capitalised. */ #define INIT_GET(type, capital) \ count = 0; \ ret = init_get ("get_" G_STRINGIFY (type) "s", \ &get_ ## type ## s_data->get, \ G_STRINGIFY (capital) "s", \ &first); \ if (ret) \ { \ switch (ret) \ { \ case 99: \ SEND_TO_CLIENT_OR_FAIL \ (XML_ERROR_SYNTAX ("get_" G_STRINGIFY (type) "s", \ "Permission denied")); \ break; \ default: \ internal_error_send_to_client (error); \ return; \ } \ get_ ## type ## s_data_reset (get_ ## type ## s_data); \ set_client_state (CLIENT_AUTHENTIC); \ return; \ } /** * @brief Get list of ovaldi definitions files using the values in ovaldefs * table in scap.db * * @return String of |-concatenated file names. Free with g_free(). */ char * get_ovaldi_files () { iterator_t iterator; char *result = NULL; init_iterator (&iterator, sql_is_sqlite3 () ? "SELECT DISTINCT xml_file FROM ovaldefs;" // FIX Until we have SCAP in Postgres. : "SELECT * FROM meta WHERE 1 = 0;"); while (next (&iterator)) { char *tmp; const char *fname = iterator_string (&iterator, 0); if (!fname) continue; tmp = g_strconcat (fname, result ? "|" : "", result, NULL); g_free (result); result = tmp; } cleanup_iterator (&iterator); return result; } /** * @brief Handle end of GET_SCANNERS element. * * @param[in] omp_parser OMP parser. * @param[in] error Error parameter. */ static void handle_get_scanners (omp_parser_t *omp_parser, GError **error) { iterator_t scanners; int ret, count, filtered, first; INIT_GET (scanner, Scanner); ret = init_scanner_iterator (&scanners, &get_scanners_data->get); switch (ret) { case 0: break; case 1: if (send_find_error_to_client ("get_scanners", "scanners", get_scanners_data->get.id, omp_parser)) { error_send_to_client (error); break; } break; case 2: if (send_find_error_to_client ("get_scanners", "filter", get_scanners_data->get.filt_id, omp_parser)) { error_send_to_client (error); break; } break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_scanners")); break; } if (ret) { get_scanners_data_reset (get_scanners_data); set_client_state (CLIENT_AUTHENTIC); return; } SEND_GET_START ("scanner"); while (1) { ret = get_next (&scanners, &get_scanners_data->get, &first, &count, init_scanner_iterator); if (ret == 1) break; if (ret == -1) { internal_error_send_to_client (error); break; } SEND_GET_COMMON (scanner, &get_scanners_data->get, &scanners); SENDF_TO_CLIENT_OR_FAIL ("%s%d%d" "%s%s", scanner_iterator_host (&scanners), scanner_iterator_port (&scanners), scanner_iterator_type (&scanners), scanner_iterator_ca_pub (&scanners), scanner_iterator_key_pub (&scanners)); count++; if (get_scanners_data->get.details) { iterator_t tasks; SEND_TO_CLIENT_OR_FAIL (""); init_scanner_task_iterator (&tasks, get_iterator_resource (&scanners)); while (next (&tasks)) { if (scanner_task_iterator_readable (&tasks) == 0) /* Only show tasks the user may see. */ continue; SENDF_TO_CLIENT_OR_FAIL ("" "%s", scanner_task_iterator_uuid (&tasks), scanner_task_iterator_name (&tasks)); if (scanner_task_iterator_readable (&tasks)) SEND_TO_CLIENT_OR_FAIL (""); else SEND_TO_CLIENT_OR_FAIL ("" ""); } cleanup_iterator (&tasks); SEND_TO_CLIENT_OR_FAIL (""); } if (scanner_iterator_type (&scanners) == SCANNER_TYPE_OSP && get_scanners_data->get.details) { char *s_name = NULL, *s_ver = NULL; char *d_name = NULL, *d_ver = NULL; char *p_name = NULL, *p_ver = NULL, *desc = NULL; GSList *params = NULL, *nodes; if (!osp_get_version_from_iterator (&scanners, &s_name, &s_ver, &d_name, &d_ver, &p_name, &p_ver) && !osp_get_details_from_iterator (&scanners, &desc, ¶ms)) { SENDF_TO_CLIENT_OR_FAIL ("%s%s" "%s%s" "%s%s" "%s", s_name, s_ver, d_name, d_ver, p_name, p_ver, desc); SENDF_TO_CLIENT_OR_FAIL (""); nodes = params; while (nodes) { osp_param_t *param = nodes->data; SENDF_TO_CLIENT_OR_FAIL ("%s%s" "%s%s" "osp_%s", osp_param_id (param), osp_param_name (param), osp_param_default (param), osp_param_desc (param), osp_param_type_str (param)); osp_param_free (nodes->data); nodes = nodes->next; } SENDF_TO_CLIENT_OR_FAIL (""); } else SENDF_TO_CLIENT_OR_FAIL ("" "" "" ""); g_free (s_name); g_free (s_ver); g_free (d_name); g_free (d_ver); g_free (p_name); g_free (p_ver); g_free (desc); g_slist_free (params); } else if (get_scanners_data->get.details) { SENDF_TO_CLIENT_OR_FAIL ("OpenVAS" "" "" ""); } SEND_TO_CLIENT_OR_FAIL (""); } cleanup_iterator (&scanners); filtered = get_scanners_data->get.id ? 1 : scanner_count (&get_scanners_data->get); SEND_GET_END ("scanner", &get_scanners_data->get, count, filtered); get_scanners_data_reset (get_scanners_data); set_client_state (CLIENT_AUTHENTIC); } /** * @brief Check that a string represents a valid Certificate. * * @param[in] cert_str Certificate string. * * @return 0 if valid, 1 otherwise. */ static int check_scanner_cert (const char *cert_str) { gnutls_x509_crt_t crt; gnutls_datum_t data; int ret = 0; assert (cert_str); if (gnutls_x509_crt_init (&crt)) return 1; data.size = strlen (cert_str); data.data = (void *) g_strdup (cert_str); if (gnutls_x509_crt_import (crt, &data, GNUTLS_X509_FMT_PEM)) { gnutls_x509_crt_deinit (crt); g_free (data.data); return 1; } if (time (NULL) > gnutls_x509_crt_get_expiration_time (crt)) { g_warning ("Certificate expiration time passed"); ret = 1; } if (time (NULL) < gnutls_x509_crt_get_activation_time (crt)) { g_warning ("Certificate activation time in the future"); ret = 1; } g_free (data.data); gnutls_x509_crt_deinit (crt); return ret; } /** * @brief Check that a string represents a valid Private Key. * * @param[in] cert_str Private Key string. * * @return 0 if valid, 1 otherwise. */ static int check_scanner_private (const char *key_str) { gnutls_x509_privkey_t key; gnutls_datum_t data; assert (key_str); if (gnutls_x509_privkey_init (&key)) return 1; data.size = strlen (key_str); data.data = (void *) g_strdup (key_str); if (gnutls_x509_privkey_import (key, &data, GNUTLS_X509_FMT_PEM)) { gnutls_x509_privkey_deinit (key); g_free (data.data); return 1; } g_free (data.data); gnutls_x509_privkey_deinit (key); return 0; } /** * @brief Handle end of CREATE_SCANNER element. * * @param[in] omp_parser OMP parser. * @param[in] error Error parameter. */ static void handle_create_scanner (omp_parser_t *omp_parser, GError **error) { scanner_t new_scanner; if (create_scanner_data->copy) switch (copy_scanner (create_scanner_data->name, create_scanner_data->comment, create_scanner_data->copy, &new_scanner)) { case 0: { char *uuid; uuid = scanner_uuid (new_scanner); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_scanner"), uuid); log_event ("scanner", "scanner", uuid, "created"); g_free (uuid); goto create_scanner_leave; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_scanner", "Scanner name exists already")); log_event_fail ("scanner", "Scanner", NULL, "created"); goto create_scanner_leave; case 2: if (send_find_error_to_client ("create_scanner", "scanner", create_scanner_data->copy, omp_parser)) { error_send_to_client (error); goto create_scanner_leave; } log_event_fail ("scanner", "Scanner", NULL, "created"); goto create_scanner_leave; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_scanner", "Permission denied")); log_event_fail ("scanner", "Scanner", NULL, "created"); goto create_scanner_leave; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_scanner")); log_event_fail ("scanner", "Scanner", NULL, "created"); goto create_scanner_leave; } if (!create_scanner_data->name || !create_scanner_data->host || !create_scanner_data->port || !create_scanner_data->type || !create_scanner_data->ca_pub || !create_scanner_data->key_pub || !create_scanner_data->key_priv) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_scanner", "Missing entity")); goto create_scanner_leave; } if (check_scanner_cert (create_scanner_data->ca_pub)) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_scanner", "Erroneous CA Certificate.")); goto create_scanner_leave; } if (check_scanner_cert (create_scanner_data->key_pub)) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_scanner", "Erroneous Certificate.")); goto create_scanner_leave; } if (check_scanner_private (create_scanner_data->key_priv)) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_scanner", "Erroneous Private Key.")); goto create_scanner_leave; } switch (create_scanner (create_scanner_data->name, create_scanner_data->comment, create_scanner_data->host, create_scanner_data->port, create_scanner_data->type, &new_scanner, create_scanner_data->ca_pub, create_scanner_data->key_pub, create_scanner_data->key_priv)) { case 0: { char *uuid = scanner_uuid (new_scanner); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_scanner"), uuid); log_event ("scanner", "Scanner", uuid, "created"); g_free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_scanner", "Scanner exists already")); log_event_fail ("scanner", "Scanner", NULL, "created"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_scanner", "Invalid entity value")); log_event_fail ("scanner", "Scanner", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_scanner", "Permission denied")); log_event_fail ("scanner", "Scanner", NULL, "created"); break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_scanner")); log_event_fail ("scanner", "Scanner", NULL, "created"); break; default: assert (0); SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_scanner")); log_event_fail ("scanner", "Scanner", NULL, "created"); break; } create_scanner_leave: create_scanner_data_reset (create_scanner_data); set_client_state (CLIENT_AUTHENTIC); } /** * @brief Handle end of MODIFY_SCANNER element. * * @param[in] omp_parser OMP parser. * @param[in] error Error parameter. */ static void handle_modify_scanner (omp_parser_t *omp_parser, GError **error) { if (modify_scanner_data->ca_pub && *modify_scanner_data->ca_pub && check_scanner_cert (modify_scanner_data->ca_pub)) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_scanner", "Erroneous CA Certificate.")); goto modify_scanner_leave; } if (modify_scanner_data->key_pub && *modify_scanner_data->key_pub && check_scanner_cert (modify_scanner_data->key_pub)) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_scanner", "Erroneous Certificate.")); goto modify_scanner_leave; } if (modify_scanner_data->key_priv && *modify_scanner_data->key_priv && check_scanner_private (modify_scanner_data->key_priv)) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_scanner", "Erroneous Private Key.")); goto modify_scanner_leave; } switch (modify_scanner (modify_scanner_data->scanner_id, modify_scanner_data->name, modify_scanner_data->comment, modify_scanner_data->host, modify_scanner_data->port, modify_scanner_data->type, modify_scanner_data->ca_pub, modify_scanner_data->key_pub, modify_scanner_data->key_priv)) { case 0: SENDF_TO_CLIENT_OR_FAIL (XML_OK ("modify_scanner")); log_event ("scanner", "Scanner", modify_scanner_data->scanner_id, "modified"); break; case 1: if (send_find_error_to_client ("modify_scanner", "scanner", modify_scanner_data->scanner_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("scanner", "Scanner", modify_scanner_data->scanner_id, "modified"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_scanner", "scanner with new name exists already")); log_event_fail ("scanner", "Scanner", modify_scanner_data->scanner_id, "modified"); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_scanner", "Missing scanner_id")); log_event_fail ("scanner", "Scanner", modify_scanner_data->scanner_id, "modified"); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_scanner", "Invalid value")); log_event_fail ("scanner", "Scanner", modify_scanner_data->scanner_id, "modified"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_scanner", "Permission denied")); log_event_fail ("scanner", "Scanner", modify_scanner_data->scanner_id, "modified"); break; default: case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_scanner")); log_event_fail ("scanner", "Scanner", modify_scanner_data->scanner_id, "modified"); break; } modify_scanner_leave: modify_scanner_data_reset (modify_scanner_data); set_client_state (CLIENT_AUTHENTIC); } extern char client_address[]; /** * @brief Handle the end of an OMP XML element. * * React to the end of an XML element according to the current value * of \ref client_state, usually adjusting \ref client_state to indicate * the change (with \ref set_client_state). Call \ref send_to_client to queue * any responses for the client. Call the task utilities to adjust the * tasks (for example \ref start_task, \ref stop_task, \ref set_task_parameter, * \ref delete_task and \ref find_task ). * * Set error parameter on encountering an error. * * @param[in] context Parser context. * @param[in] element_name XML element name. * @param[in] user_data OMP parser. * @param[in] error Error parameter. */ static void omp_xml_handle_end_element (/*@unused@*/ GMarkupParseContext* context, const gchar *element_name, gpointer user_data, GError **error) { omp_parser_t *omp_parser = (omp_parser_t*) user_data; int (*write_to_client) (const char *, void*) = (int (*) (const char *, void*)) omp_parser->client_writer; void* write_to_client_data = (void*) omp_parser->client_writer_data; tracef (" XML end: %s\n", element_name); if (omp_parser->read_over > 1) { omp_parser->read_over--; } else if ((omp_parser->read_over == 1) && omp_parser->parent_state) { client_state = omp_parser->parent_state; omp_parser->parent_state = 0; omp_parser->read_over = 0; } else switch (client_state) { case CLIENT_TOP: assert (0); break; case CLIENT_AUTHENTICATE: switch (authenticate (¤t_credentials)) { case 0: /* Authentication succeeded. */ if (load_tasks ()) { g_warning ("%s: failed to load tasks\n", __FUNCTION__); g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_PARSE, "Manager failed to load tasks."); free_credentials (¤t_credentials); SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("authenticate")); set_client_state (CLIENT_TOP); } else { const char *timezone, *severity; char *pw_warning; timezone = (current_credentials.timezone && strlen (current_credentials.timezone)) ? current_credentials.timezone : "UTC"; if (setenv ("TZ", timezone, 1) == -1) { free_credentials (¤t_credentials); g_warning ("Timezone setting failure for %s", current_credentials.username); SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("authenticate")); set_client_state (CLIENT_TOP); break; } tzset (); severity = setting_severity (); pw_warning = openvas_validate_password (current_credentials.password, current_credentials.username); if (pw_warning) SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%s" "%s" "%s" "", current_credentials.role ? current_credentials.role : "", timezone, severity, pw_warning ? pw_warning : ""); else SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%s" "%s" "", current_credentials.role ? current_credentials.role : "", timezone, severity); free (pw_warning); set_client_state (CLIENT_AUTHENTIC); } break; case 1: /* Authentication failed. */ g_warning ("Authentication failure for '%s' from %s", current_credentials.username ?: "", client_address); free_credentials (¤t_credentials); SEND_TO_CLIENT_OR_FAIL (XML_ERROR_AUTH_FAILED ("authenticate")); set_client_state (CLIENT_TOP); break; case 99: /* Authentication failed. */ g_warning ("Authentication failure for '%s' from %s", current_credentials.username ?: "", client_address); free_credentials (¤t_credentials); SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("authenticate", "Permission denied")); set_client_state (CLIENT_TOP); break; case -1: /* Error while authenticating. */ default: g_warning ("Authentication failure for '%s' from %s", current_credentials.username ?: "", client_address); free_credentials (¤t_credentials); SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("authenticate")); set_client_state (CLIENT_TOP); break; } break; case CLIENT_AUTHENTICATE_CREDENTIALS: assert (strcasecmp ("CREDENTIALS", element_name) == 0); set_client_state (CLIENT_AUTHENTICATE); break; case CLIENT_AUTHENTICATE_CREDENTIALS_USERNAME: assert (strcasecmp ("USERNAME", element_name) == 0); set_client_state (CLIENT_AUTHENTICATE_CREDENTIALS); break; case CLIENT_AUTHENTICATE_CREDENTIALS_PASSWORD: assert (strcasecmp ("PASSWORD", element_name) == 0); set_client_state (CLIENT_AUTHENTICATE_CREDENTIALS); break; case CLIENT_AUTHENTIC: case CLIENT_COMMANDS: case CLIENT_AUTHENTIC_COMMANDS: assert (strcasecmp ("COMMANDS", element_name) == 0); SENDF_TO_CLIENT_OR_FAIL (""); break; CASE_DELETE (AGENT, agent, "Agent"); CASE_DELETE (ALERT, alert, "Alert"); CASE_DELETE (CONFIG, config, "Config"); CASE_DELETE (FILTER, filter, "Filter"); CASE_DELETE (GROUP, group, "Group"); CASE_DELETE (LSC_CREDENTIAL, lsc_credential, "LSC Credential"); CASE_DELETE (NOTE, note, "Note"); CASE_DELETE (OVERRIDE, override, "Override"); CASE_DELETE (PERMISSION, permission, "Permission"); CASE_DELETE (PORT_LIST, port_list, "Port list"); CASE_DELETE (PORT_RANGE, port_range, "Port range"); CASE_DELETE (REPORT, report, "Report"); CASE_DELETE (REPORT_FORMAT, report_format, "Report format"); CASE_DELETE (ROLE, role, "Role"); CASE_DELETE (SCANNER, scanner, "Scanner"); CASE_DELETE (SCHEDULE, schedule, "Schedule"); CASE_DELETE (SLAVE, slave, "Slave"); CASE_DELETE (TAG, tag, "Tag"); CASE_DELETE (TARGET, target, "Target"); case CLIENT_DELETE_TASK: if (delete_task_data->task_id) { switch (request_delete_task_uuid (delete_task_data->task_id, delete_task_data->ultimate)) { case 0: /* Deleted. */ SEND_TO_CLIENT_OR_FAIL (XML_OK ("delete_task")); log_event ("task", "Task", delete_task_data->task_id, "deleted"); break; case 1: /* Delete requested. */ SEND_TO_CLIENT_OR_FAIL (XML_OK_REQUESTED ("delete_task")); log_event ("task", "Task", delete_task_data->task_id, "requested for delete"); break; case 2: /* Hidden task. */ SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("delete_task", "Attempt to delete a hidden task")); log_event_fail ("task", "Task", delete_task_data->task_id, "deleted"); break; case 3: /* Failed to find task. */ if (send_find_error_to_client ("delete_task", "task", delete_task_data->task_id, omp_parser)) { error_send_to_client (error); return; } break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("delete_task", "Permission denied")); log_event_fail ("task", "Task", delete_task_data->task_id, "deleted"); break; default: /* Programming error. */ assert (0); case -1: /* to_scanner is full. */ /** @todo Or some other error occurred. */ /** @todo Consider reverting parsing for retry. */ /** @todo process_omp_client_input must return -2. */ tracef ("delete_task failed\n"); abort (); break; case -5: SEND_XML_SERVICE_DOWN ("delete_task"); log_event_fail ("task", "Task", delete_task_data->task_id, "deleted"); break; } } else SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("delete_task", "DELETE_TASK requires a task_id attribute")); delete_task_data_reset (delete_task_data); set_client_state (CLIENT_AUTHENTIC); break; case CLIENT_DELETE_USER: assert (strcasecmp ("DELETE_USER", element_name) == 0); if (delete_user_data->user_id || delete_user_data->name) switch (delete_user (delete_user_data->user_id, delete_user_data->name, delete_user_data->ultimate, 1)) { case 0: SEND_TO_CLIENT_OR_FAIL (XML_OK ("delete_user")); log_event ("user", "User", delete_user_data->user_id, "deleted"); break; case 2: if (send_find_error_to_client ("delete_user", "user", delete_user_data->user_id ? delete_user_data->user_id : delete_user_data->name, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("user", "User", delete_user_data->user_id, "deleted"); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("delete_user", "Attempt to delete a predefined" " user")); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("delete_user", "User has an active task")); break; case 5: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("delete_user", "Attempt to delete current user")); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("delete_user", "Permission denied")); log_event_fail ("user", "User", delete_user_data->user_id, "deleted"); break; default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("delete_user")); log_event_fail ("user", "User", delete_user_data->user_id, "deleted"); } else SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("delete_user", "DELETE_USER requires a user_id attribute")); delete_user_data_reset (delete_user_data); set_client_state (CLIENT_AUTHENTIC); break; case CLIENT_DESCRIBE_AUTH: { gchar *config_file, *content, *resp; assert (current_credentials.username); if (user_may ("describe_auth") == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("describe_auth", "Permission denied")); set_client_state (CLIENT_AUTHENTIC); break; } /* Get base 64 encoded content of the auth configuration file. */ config_file = g_build_filename (OPENVAS_STATE_DIR, "openvasmd", "auth.conf", NULL); content = keyfile_to_auth_conf_settings_xml (config_file); g_free (config_file); if (content == NULL) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_MISSING ("describe_auth")); set_client_state (CLIENT_AUTHENTIC); break; } resp = g_strdup_printf ("" "%s" "", content); g_free (content); SEND_TO_CLIENT_OR_FAIL (resp); g_free (resp); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_DESCRIBE_FEED: { gchar *feed_description = NULL; gchar *feed_identification = NULL; gchar *feed_version = NULL; assert (current_credentials.username); if (user_may ("describe_feed") == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("describe_feed", "Permission denied")); set_client_state (CLIENT_AUTHENTIC); break; } if (openvas_get_sync_script_description (sync_script, &feed_description) && openvas_get_sync_script_identification (sync_script, &feed_identification, NVT_FEED) && openvas_get_sync_script_feed_version (sync_script, &feed_version)) { gchar *user, *timestamp; int syncing; gchar **ident = g_strsplit (feed_identification, "|", 6); gchar *selftest_result = NULL; syncing = openvas_current_sync (sync_script, ×tamp, &user); if (syncing < 0 || ident[0] == NULL || ident[1] == NULL || ident[2] == NULL || ident[3] == NULL) { g_strfreev (ident); SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("describe_feed")); } else { SENDF_TO_CLIENT_OR_FAIL ("" "" "%s" "%s" "%s", ident[3], feed_version, feed_description); g_strfreev (ident); if (openvas_sync_script_perform_selftest (sync_script, &selftest_result) == FALSE) { SENDF_TO_CLIENT_OR_FAIL ("" "%s" "", selftest_result ? selftest_result : ""); g_free (selftest_result); } if (syncing > 0) { SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%s" "", timestamp ? timestamp : "", user ? user : ""); g_free (timestamp); g_free (user); } SEND_TO_CLIENT_OR_FAIL ("" ""); } g_free (feed_identification); g_free (feed_version); } else { SEND_TO_CLIENT_OR_FAIL (""); SEND_TO_CLIENT_OR_FAIL (""); SEND_TO_CLIENT_OR_FAIL (""); SEND_TO_CLIENT_OR_FAIL (""); SEND_TO_CLIENT_OR_FAIL (""); SEND_TO_CLIENT_OR_FAIL (""); } g_free (feed_description); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_DESCRIBE_SCAP: { gchar *scap_description = NULL; gchar *scap_identification = NULL; gchar *scap_version = NULL; assert (current_credentials.username); if (user_may ("describe_scap") == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("describe_scap", "Permission denied")); set_client_state (CLIENT_AUTHENTIC); break; } if (openvas_get_sync_script_description (scap_script, &scap_description) && openvas_get_sync_script_identification (scap_script, &scap_identification, SCAP_FEED) && openvas_get_sync_script_feed_version (scap_script, &scap_version)) { gchar *user, *timestamp; int syncing; gchar **ident = g_strsplit (scap_identification, "|", 6); gchar *selftest_result = NULL; syncing = openvas_current_sync (scap_script, ×tamp, &user); if (syncing < 0 || ident[0] == NULL || ident[1] == NULL || ident[2] == NULL || ident[3] == NULL) { g_strfreev (ident); SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("describe_scap")); } else { SENDF_TO_CLIENT_OR_FAIL ("" "" "%s" "%s" "%s", ident[3], scap_version, scap_description); g_strfreev (ident); if (openvas_sync_script_perform_selftest (scap_script, &selftest_result) == FALSE) { SENDF_TO_CLIENT_OR_FAIL ("" "%s" "", selftest_result ? selftest_result : ""); g_free (selftest_result); } if (syncing > 0) { SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%s" "", timestamp ? timestamp : "", user ? user : ""); g_free (timestamp); g_free (user); } SEND_TO_CLIENT_OR_FAIL ("" ""); } g_free (scap_identification); g_free (scap_version); } else { SEND_TO_CLIENT_OR_FAIL (""); SEND_TO_CLIENT_OR_FAIL (""); SEND_TO_CLIENT_OR_FAIL (""); SEND_TO_CLIENT_OR_FAIL (""); SEND_TO_CLIENT_OR_FAIL (""); SEND_TO_CLIENT_OR_FAIL (""); } g_free (scap_description); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_DESCRIBE_CERT: { gchar *cert_description = NULL; gchar *cert_identification = NULL; gchar *cert_version = NULL; assert (current_credentials.username); if (user_may ("describe_cert") == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("describe_cert", "Permission denied")); set_client_state (CLIENT_AUTHENTIC); break; } if (openvas_get_sync_script_description (cert_script, &cert_description) && openvas_get_sync_script_identification (cert_script, &cert_identification, CERT_FEED) && openvas_get_sync_script_feed_version (cert_script, &cert_version)) { gchar *user, *timestamp; int syncing; gchar **ident = g_strsplit (cert_identification, "|", 6); gchar *selftest_result = NULL; syncing = openvas_current_sync (cert_script, ×tamp, &user); if (syncing < 0 || ident[0] == NULL || ident[1] == NULL || ident[2] == NULL || ident[3] == NULL) { g_strfreev (ident); SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("describe_cert")); } else { SENDF_TO_CLIENT_OR_FAIL ("" "" "%s" "%s" "%s", ident[3], cert_version, cert_description); g_strfreev (ident); if (openvas_sync_script_perform_selftest (cert_script, &selftest_result) == FALSE) { SENDF_TO_CLIENT_OR_FAIL ("" "%s" "", selftest_result ? selftest_result : ""); g_free (selftest_result); } if (syncing > 0) { SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%s" "", timestamp ? timestamp : "", user ? user : ""); g_free (timestamp); g_free (user); } SEND_TO_CLIENT_OR_FAIL ("" ""); } g_free (cert_identification); g_free (cert_version); } else { SEND_TO_CLIENT_OR_FAIL (""); SEND_TO_CLIENT_OR_FAIL (""); SEND_TO_CLIENT_OR_FAIL (""); SEND_TO_CLIENT_OR_FAIL (""); SEND_TO_CLIENT_OR_FAIL (""); SEND_TO_CLIENT_OR_FAIL (""); } g_free (cert_description); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_AGENTS: { int format; assert (strcasecmp ("GET_AGENTS", element_name) == 0); if (get_agents_data->format) { if (strlen (get_agents_data->format)) { if (strcasecmp (get_agents_data->format, "installer") == 0) format = 1; else if (strcasecmp (get_agents_data->format, "howto_install") == 0) format = 2; else if (strcasecmp (get_agents_data->format, "howto_use") == 0) format = 3; else format = -1; } else format = 0; } else if (get_agents_data->get.details == 1) /* For exporting */ format = 1; else format = 0; if (format == -1) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_agents", "GET_AGENTS format attribute should" " be 'installer', 'howto_install' or 'howto_use'.")); else { iterator_t agents; int ret, count, filtered, first; INIT_GET (agent, Agent); ret = init_agent_iterator (&agents, &get_agents_data->get); if (ret) { switch (ret) { case 1: if (send_find_error_to_client ("get_agents", "agents", get_agents_data->get.id, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_agents", "filter", get_agents_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_agents")); break; } get_agents_data_reset (get_agents_data); set_client_state (CLIENT_AUTHENTIC); break; } SEND_GET_START ("agent"); while (1) { ret = get_next (&agents, &get_agents_data->get, &first, &count, init_agent_iterator); if (ret == 1) break; if (ret == -1) { internal_error_send_to_client (error); return; } SEND_GET_COMMON (agent, &get_agents_data->get, &agents); switch (format) { case 1: /* installer */ { time_t trust_time; trust_time = agent_iterator_trust_time (&agents); SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%s" "" "" "%s" "" "", agent_iterator_installer_filename (&agents), agent_iterator_installer_64 (&agents), agent_iterator_trust (&agents), iso_time (&trust_time)); } break; case 2: /* howto_install */ SENDF_TO_CLIENT_OR_FAIL ("%s" "", agent_iterator_howto_install (&agents)); break; case 3: /* howto_use */ SENDF_TO_CLIENT_OR_FAIL ("%s" "", agent_iterator_howto_use (&agents)); break; default: { time_t trust_time; trust_time = agent_iterator_trust_time (&agents); SENDF_TO_CLIENT_OR_FAIL ("" "%s" "" "", agent_iterator_trust (&agents), iso_time (&trust_time)); } break; } count++; } cleanup_iterator (&agents); filtered = get_agents_data->get.id ? 1 : agent_count (&get_agents_data->get); SEND_GET_END ("agent", &get_agents_data->get, count, filtered); } get_agents_data_reset (get_agents_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_ALERTS: { iterator_t alerts; int count, filtered, ret, first; assert (strcasecmp ("GET_ALERTS", element_name) == 0); INIT_GET (alert, Alert); ret = init_alert_iterator (&alerts, &get_alerts_data->get); if (ret) { switch (ret) { case 1: if (send_find_error_to_client ("get_alerts", "alert", get_alerts_data->get.id, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_alerts", "alert", get_alerts_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_alerts")); break; } get_alerts_data_reset (get_alerts_data); set_client_state (CLIENT_AUTHENTIC); break; } SEND_GET_START ("alert"); while (1) { iterator_t data; char *filter_uuid; int notice, message; const char *method; ret = get_next (&alerts, &get_alerts_data->get, &first, &count, init_alert_iterator); if (ret == 1) break; if (ret == -1) { internal_error_send_to_client (error); return; } SEND_GET_COMMON (alert, &get_alerts_data->get, &alerts); /* Filter. */ filter_uuid = alert_iterator_filter_uuid (&alerts); if (filter_uuid) { SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%i", filter_uuid, alert_iterator_filter_name (&alerts), alert_iterator_filter_trash (&alerts)); if (alert_iterator_filter_readable (&alerts)) SEND_TO_CLIENT_OR_FAIL (""); else SEND_TO_CLIENT_OR_FAIL ("" ""); } /* Condition. */ SENDF_TO_CLIENT_OR_FAIL ("%s", alert_condition_name (alert_iterator_condition (&alerts))); init_alert_data_iterator (&data, get_iterator_resource (&alerts), get_alerts_data->get.trash, "condition"); while (next (&data)) SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%s" "", alert_data_iterator_name (&data), alert_data_iterator_data (&data)); cleanup_iterator (&data); SEND_TO_CLIENT_OR_FAIL (""); /* Event. */ SENDF_TO_CLIENT_OR_FAIL ("%s", event_name (alert_iterator_event (&alerts))); init_alert_data_iterator (&data, get_iterator_resource (&alerts), get_alerts_data->get.trash, "event"); while (next (&data)) SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%s" "", alert_data_iterator_name (&data), alert_data_iterator_data (&data)); cleanup_iterator (&data); SEND_TO_CLIENT_OR_FAIL (""); /* Method. */ method = alert_method_name (alert_iterator_method (&alerts)); SENDF_TO_CLIENT_OR_FAIL ("%s", method); init_alert_data_iterator (&data, get_iterator_resource (&alerts), get_alerts_data->get.trash, "method"); notice = -1; message = 0; while (next (&data)) { const char *name; name = alert_data_iterator_name (&data); if (strcmp (alert_data_iterator_name (&data), "scp_password") == 0) continue; if (strcmp (name, "notice") == 0) notice = atoi (alert_data_iterator_data (&data)); else if (strcmp (method, "Email") == 0 && strcmp (name, "message") == 0) { if (strlen (alert_data_iterator_data (&data)) == 0) continue; message = 1; } SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%s" "", name, alert_data_iterator_data (&data)); } /* If there is no email message data, send the default. */ if (strcmp (method, "Email") == 0 && message == 0 && (notice == 0 || notice == 2)) SENDF_TO_CLIENT_OR_FAIL ("" "message" "%s" "", notice == 0 ? ALERT_MESSAGE_INCLUDE : ALERT_MESSAGE_ATTACH); cleanup_iterator (&data); SEND_TO_CLIENT_OR_FAIL (""); if (get_alerts_data->tasks) { iterator_t tasks; SEND_TO_CLIENT_OR_FAIL (""); init_alert_task_iterator (&tasks, get_iterator_resource (&alerts), 0); while (next (&tasks)) { SENDF_TO_CLIENT_OR_FAIL ("" "%s", alert_task_iterator_uuid (&tasks), alert_task_iterator_name (&tasks)); if (alert_task_iterator_readable (&tasks)) SEND_TO_CLIENT_OR_FAIL (""); else SEND_TO_CLIENT_OR_FAIL ("" ""); } cleanup_iterator (&tasks); SEND_TO_CLIENT_OR_FAIL (""); } SEND_TO_CLIENT_OR_FAIL (""); count++; } cleanup_iterator (&alerts); filtered = get_alerts_data->get.id ? 1 : alert_count (&get_alerts_data->get); SEND_GET_END ("alert", &get_alerts_data->get, count, filtered); get_alerts_data_reset (get_alerts_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_CONFIGS: { iterator_t configs; int ret, filtered, first, count; assert (strcasecmp ("GET_CONFIGS", element_name) == 0); INIT_GET (config, Config); ret = init_config_iterator (&configs, &get_configs_data->get); if (ret) { switch (ret) { case 1: if (send_find_error_to_client ("get_configs", "config", get_configs_data->get.id, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_configs", "config", get_configs_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_configs")); break; } get_configs_data_reset (get_configs_data); set_client_state (CLIENT_AUTHENTIC); break; } SEND_GET_START ("config"); while (1) { int config_nvts_growing, config_families_growing, config_type; const char *selector; config_t config; ret = get_next (&configs, &get_configs_data->get, &first, &count, init_config_iterator); if (ret == 1) break; if (ret == -1) { internal_error_send_to_client (error); return; } SEND_GET_COMMON (config, &get_configs_data->get, &configs); /** @todo This should really be an nvt_selector_t. */ selector = config_iterator_nvt_selector (&configs); config = get_iterator_resource (&configs); config_nvts_growing = config_iterator_nvts_growing (&configs); config_type = config_iterator_type (&configs); config_families_growing = config_iterator_families_growing (&configs); SENDF_TO_CLIENT_OR_FAIL ("" "%i%i" "" /* The number of NVT's selected * by the selector. */ "" "%i%i" "" "%i", config_iterator_family_count (&configs), config_families_growing, config_iterator_nvt_count (&configs), config_nvts_growing, config_type); if (config_type == 0 && (get_configs_data->families || get_configs_data->get.details)) { iterator_t families; int max_nvt_count = 0, known_nvt_count = 0; SENDF_TO_CLIENT_OR_FAIL (""); init_family_iterator (&families, config_families_growing, selector, 1); while (next (&families)) { int family_growing, family_max; int family_selected_count; const char *family; family = family_iterator_name (&families); if (family) { family_growing = nvt_selector_family_growing (selector, family, config_families_growing); family_max = family_nvt_count (family); family_selected_count = nvt_selector_nvt_count (selector, family, family_growing); known_nvt_count += family_selected_count; } else { /* The family can be NULL if an RC adds an * NVT to a config and the NVT is missing * from the NVT cache. */ family_growing = 0; family_max = -1; family_selected_count = nvt_selector_nvt_count (selector, NULL, 0); } SENDF_TO_CLIENT_OR_FAIL ("" "%s" /* The number of selected NVT's. */ "%i" /* The total number of NVT's in the family. */ "%i" "%i" "", family ? family : "", family_selected_count, family_max, family_growing); if (family_max > 0) max_nvt_count += family_max; } cleanup_iterator (&families); SENDF_TO_CLIENT_OR_FAIL ("" /* The total number of NVT's in all the * families for selector selects at least one * NVT. */ "%i" /* Total number of selected known NVT's. */ "" "%i" "", max_nvt_count, known_nvt_count); } if (config_type > 0) { iterator_t prefs; config_t config = get_iterator_resource (&configs); assert (config); SEND_TO_CLIENT_OR_FAIL (""); init_preference_iterator (&prefs, config); while (next (&prefs)) { const char *name, *value, *type, *def; char *ovaldi_files = NULL; name = preference_iterator_name (&prefs); value = preference_iterator_value (&prefs); def = preference_iterator_default (&prefs); if (!strcmp (name, "definitions_file")) ovaldi_files = get_ovaldi_files (); type = preference_iterator_type (&prefs); SENDF_TO_CLIENT_OR_FAIL ("" "%sosp_%s" "%s%s", name, type, value ?: "", ovaldi_files ?: def); g_free (ovaldi_files); } cleanup_iterator (&prefs); SEND_TO_CLIENT_OR_FAIL (""); } else if (get_configs_data->preferences || get_configs_data->get.details) { iterator_t prefs; config_t config = get_iterator_resource (&configs); assert (config); SEND_TO_CLIENT_OR_FAIL (""); /* Send NVT timeout preferences where a timeout has been * specified. */ init_config_timeout_iterator (&prefs, config); while (next (&prefs)) { const char *timeout; timeout = config_timeout_iterator_value (&prefs); if (timeout && strlen (timeout)) SENDF_TO_CLIENT_OR_FAIL ("" "" "%s" "" "Timeout" "entry" "%s" "", config_timeout_iterator_oid (&prefs), config_timeout_iterator_nvt_name (&prefs), timeout); } cleanup_iterator (&prefs); init_nvt_preference_iterator (&prefs, NULL); while (next (&prefs)) { GString *buffer = g_string_new (""); buffer_config_preference_xml (buffer, &prefs, config, 1); SEND_TO_CLIENT_OR_FAIL (buffer->str); g_string_free (buffer, TRUE); } cleanup_iterator (&prefs); SEND_TO_CLIENT_OR_FAIL (""); } if (config_type == 0 && get_configs_data->get.details) { iterator_t selectors; SEND_TO_CLIENT_OR_FAIL (""); init_nvt_selector_iterator (&selectors, NULL, config, NVT_SELECTOR_TYPE_ANY); while (next (&selectors)) { int type = nvt_selector_iterator_type (&selectors); SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%i" "%i" "%s" "", nvt_selector_iterator_name (&selectors), nvt_selector_iterator_include (&selectors), type, (type == NVT_SELECTOR_TYPE_ALL ? "" : nvt_selector_iterator_nvt (&selectors))); } cleanup_iterator (&selectors); SEND_TO_CLIENT_OR_FAIL (""); } if (get_configs_data->tasks) { iterator_t tasks; SEND_TO_CLIENT_OR_FAIL (""); init_config_task_iterator (&tasks, get_iterator_resource (&configs), 0); while (next (&tasks)) { if (config_task_iterator_readable (&tasks) == 0) /* Only show tasks the user may see. */ continue; SENDF_TO_CLIENT_OR_FAIL ("" "%s", config_task_iterator_uuid (&tasks), config_task_iterator_name (&tasks)); if (config_task_iterator_readable (&tasks)) SEND_TO_CLIENT_OR_FAIL (""); else SEND_TO_CLIENT_OR_FAIL ("" ""); } cleanup_iterator (&tasks); SEND_TO_CLIENT_OR_FAIL (""); } SEND_TO_CLIENT_OR_FAIL (""); count++; } cleanup_iterator (&configs); filtered = get_configs_data->get.id ? 1 : config_count (&get_configs_data->get); SEND_GET_END ("config", &get_configs_data->get, count, filtered); get_configs_data_reset (get_configs_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_FILTERS: { iterator_t filters; int count, filtered, ret, first; assert (strcasecmp ("GET_FILTERS", element_name) == 0); INIT_GET (filter, Filter); ret = init_filter_iterator (&filters, &get_filters_data->get); if (ret) { switch (ret) { case 1: if (send_find_error_to_client ("get_filters", "filter", get_filters_data->get.id, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_filters", "filter", get_filters_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_filters")); break; } get_filters_data_reset (get_filters_data); set_client_state (CLIENT_AUTHENTIC); break; } SEND_GET_START ("filter"); while (1) { ret = get_next (&filters, &get_filters_data->get, &first, &count, init_filter_iterator); if (ret == 1) break; if (ret == -1) { internal_error_send_to_client (error); return; } SEND_GET_COMMON (filter, &get_filters_data->get, &filters); SENDF_TO_CLIENT_OR_FAIL ("%s" "%s", filter_iterator_type (&filters), filter_iterator_term (&filters)); if (get_filters_data->alerts) { iterator_t alerts; SEND_TO_CLIENT_OR_FAIL (""); init_filter_alert_iterator (&alerts, get_iterator_resource (&filters)); while (next (&alerts)) { SENDF_TO_CLIENT_OR_FAIL ("" "%s", filter_alert_iterator_uuid (&alerts), filter_alert_iterator_name (&alerts)); if (filter_alert_iterator_readable (&alerts)) SEND_TO_CLIENT_OR_FAIL (""); else SEND_TO_CLIENT_OR_FAIL ("" ""); } cleanup_iterator (&alerts); SEND_TO_CLIENT_OR_FAIL (""); } SEND_TO_CLIENT_OR_FAIL (""); count++; } cleanup_iterator (&filters); filtered = get_filters_data->get.id ? 1 : filter_count (&get_filters_data->get); SEND_GET_END ("filter", &get_filters_data->get, count, filtered); get_filters_data_reset (get_filters_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_GROUPS: { iterator_t groups; int count, filtered, ret, first; assert (strcasecmp ("GET_GROUPS", element_name) == 0); INIT_GET (group, Group); ret = init_group_iterator (&groups, &get_groups_data->get); if (ret) { switch (ret) { case 1: if (send_find_error_to_client ("get_groups", "group", get_groups_data->get.id, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_groups", "group", get_groups_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_groups")); break; } get_groups_data_reset (get_groups_data); set_client_state (CLIENT_AUTHENTIC); break; } SEND_GET_START ("group"); while (1) { gchar *users; ret = get_next (&groups, &get_groups_data->get, &first, &count, init_group_iterator); if (ret == 1) break; if (ret == -1) { internal_error_send_to_client (error); return; } SEND_GET_COMMON (group, &get_groups_data->get, &groups); users = group_users (get_iterator_resource (&groups)); SENDF_TO_CLIENT_OR_FAIL ("%s", users ? users : ""); g_free (users); SEND_TO_CLIENT_OR_FAIL (""); count++; } cleanup_iterator (&groups); filtered = get_groups_data->get.id ? 1 : group_count (&get_groups_data->get); SEND_GET_END ("group", &get_groups_data->get, count, filtered); get_groups_data_reset (get_groups_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_INFO: { iterator_t info; int count, first, filtered, ret; int (*init_info_iterator) (iterator_t*, get_data_t *, const char *); int (*info_count) (const get_data_t *get); const char *update_time; get_data_t *get; if (user_may ("get_info") == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_info", "Permission denied")); get_info_data_reset (get_info_data); set_client_state (CLIENT_AUTHENTIC); break; } if (manage_scap_loaded () == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_info", "GET_INFO requires the SCAP database.")); get_info_data_reset (get_info_data); set_client_state (CLIENT_AUTHENTIC); break; } if (manage_cert_loaded () == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_info", "GET_INFO requires the CERT database.")); get_info_data_reset (get_info_data); set_client_state (CLIENT_AUTHENTIC); break; } if (get_info_data->name && get_info_data->get.id) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_info", "Only one of name and the id attribute" " may be given.")); get_info_data_reset (get_info_data); set_client_state (CLIENT_AUTHENTIC); break; } if (get_info_data->type == NULL) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_info", "No type specified.")); get_info_data_reset (get_info_data); set_client_state (CLIENT_AUTHENTIC); break; } get = &get_info_data->get; if (get->filt_id && strcmp (get->filt_id, "-2") == 0) { char *user_filter; gchar *name; if (strcmp (get_info_data->type, "cpe") == 0) name = g_strdup ("CPE"); else if (strcmp (get_info_data->type, "cve") == 0) name = g_strdup ("CVE"); else if (strcmp (get_info_data->type, "ovaldef") == 0) name = g_strdup ("OVAL"); else if (strcmp (get_info_data->type, "cert_bund_adv") == 0) name = g_strdup ("CERT-Bund"); else if (strcmp (get_info_data->type, "dfn_cert_adv") == 0) name = g_strdup ("DFN-CERT"); else if (strcmp (get_info_data->type, "nvt") == 0) name = g_strdup ("NVT"); else if (strcmp (get_info_data->type, "allinfo") == 0) name = g_strdup ("All SecInfo"); else { if (send_find_error_to_client ("get_info", "type", get_info_data->type, omp_parser)) { error_send_to_client (error); return; } get_info_data_reset (get_info_data); set_client_state (CLIENT_AUTHENTIC); break; } user_filter = setting_filter (name); g_free (name); if (user_filter && strlen (user_filter)) { get->filt_id = user_filter; get->filter = filter_term (user_filter); } else get->filt_id = g_strdup("0"); } /* Set type specific functions */ if (g_strcmp0 ("cpe", get_info_data->type) == 0) { init_info_iterator = init_cpe_info_iterator; info_count = cpe_info_count; get_info_data->get.subtype = g_strdup ("cpe"); } else if (g_strcmp0 ("cve", get_info_data->type) == 0) { init_info_iterator = init_cve_info_iterator; info_count = cve_info_count; get_info_data->get.subtype = g_strdup ("cve"); } else if ((g_strcmp0 ("nvt", get_info_data->type) == 0) && (get_info_data->name == NULL) && (get_info_data->get.id == NULL)) { init_info_iterator = init_nvt_info_iterator; info_count = nvt_info_count; get_info_data->get.subtype = g_strdup ("nvt"); } else if (g_strcmp0 ("nvt", get_info_data->type) == 0) { gchar *result; get_info_data->get.subtype = g_strdup ("nvt"); manage_read_info (get_info_data->type, get_info_data->get.id, get_info_data->name, &result); if (result) { SEND_GET_START ("info"); SEND_TO_CLIENT_OR_FAIL (""); SEND_TO_CLIENT_OR_FAIL (result); SEND_TO_CLIENT_OR_FAIL (""); SEND_TO_CLIENT_OR_FAIL ("
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "); SEND_GET_END ("info", &get_info_data->get, 1, 1); g_free (result); get_info_data_reset (get_info_data); set_client_state (CLIENT_AUTHENTIC); break; } else { if (send_find_error_to_client ("get_info", get_info_data->name ? "name" : "ID", get_info_data->name ? get_info_data->name : get_info_data->get.id, omp_parser)) { error_send_to_client (error); return; } get_info_data_reset (get_info_data); set_client_state (CLIENT_AUTHENTIC); break; } } else if (g_strcmp0 ("ovaldef", get_info_data->type) == 0) { init_info_iterator = init_ovaldef_info_iterator; info_count = ovaldef_info_count; get_info_data->get.subtype = g_strdup ("ovaldef"); } else if (g_strcmp0 ("cert_bund_adv", get_info_data->type) == 0) { init_info_iterator = init_cert_bund_adv_info_iterator; info_count = cert_bund_adv_info_count; get_info_data->get.subtype = g_strdup ("cert_bund_adv"); } else if (g_strcmp0 ("dfn_cert_adv", get_info_data->type) == 0) { init_info_iterator = init_dfn_cert_adv_info_iterator; info_count = dfn_cert_adv_info_count; get_info_data->get.subtype = g_strdup ("dfn_cert_adv"); } else if (g_strcmp0 ("allinfo", get_info_data->type) == 0) { init_info_iterator = init_all_info_iterator; info_count = all_info_count; get_info_data->get.subtype = g_strdup ("allinfo"); } else { if (send_find_error_to_client ("get_info", "type", get_info_data->type, omp_parser)) { error_send_to_client (error); } return; } ret = init_info_iterator (&info, &get_info_data->get, get_info_data->name); if (ret) { switch (ret) { case 1: if (send_find_error_to_client ("get_info", "type", get_info_data->type, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_info", "filter", get_info_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_info")); break; } get_info_data_reset (get_info_data); set_client_state (CLIENT_AUTHENTIC); return; } count = 0; manage_filter_controls (get_info_data->get.filter, &first, NULL, NULL, NULL); SEND_GET_START ("info"); update_time = manage_scap_update_time (); while (next (&info)) { GString *result; /* Info's are currently always read only */ if (send_get_common ("info", &get_info_data->get, &info, write_to_client, write_to_client_data, 0, 0)) { error_send_to_client (error); return; } SENDF_TO_CLIENT_OR_FAIL ("%s", update_time); result = g_string_new (""); /* Information depending on type */ if (g_strcmp0 ("cpe", get_info_data->type) == 0) { const char *title; xml_string_append (result, ""); title = cpe_info_iterator_title (&info); if (title) xml_string_append (result, "%s", cpe_info_iterator_title (&info)); xml_string_append (result, "%s" "%s" "%s" "%s", cpe_info_iterator_nvd_id (&info), cpe_info_iterator_max_cvss (&info), cpe_info_iterator_cve_refs (&info), cpe_info_iterator_status (&info) ? cpe_info_iterator_status (&info) : ""); if (get_info_data->details == 1) { iterator_t cves; g_string_append (result, ""); init_cpe_cve_iterator (&cves, get_iterator_name (&info), 0, NULL); while (next (&cves)) xml_string_append (result, "" "" "" "" "%s" "" "" "" "", cve_iterator_name (&cves), cve_iterator_cvss (&cves)); cleanup_iterator (&cves); g_string_append (result, ""); } } else if (g_strcmp0 ("cve", get_info_data->type) == 0) { xml_string_append (result, "" "%s" "%s" "%s" "%s" "%s" "%s" "%s" "%s" "%s", cve_info_iterator_cvss (&info), cve_info_iterator_vector (&info), cve_info_iterator_complexity (&info), cve_info_iterator_authentication (&info), cve_info_iterator_confidentiality_impact (&info), cve_info_iterator_integrity_impact (&info), cve_info_iterator_availability_impact (&info), cve_info_iterator_description (&info), cve_info_iterator_products (&info)); if (get_info_data->details == 1) { iterator_t nvts; iterator_t cert_advs; init_cve_nvt_iterator (&nvts, get_iterator_name (&info), 1, NULL); g_string_append (result, ""); while (next (&nvts)) xml_string_append (result, "" "%s" "", nvt_iterator_oid (&nvts), nvt_iterator_name (&nvts)); g_string_append (result, ""); cleanup_iterator (&nvts); g_string_append (result, ""); if (manage_cert_loaded()) { init_cve_cert_bund_adv_iterator (&cert_advs, get_iterator_name (&info), 1, NULL); while (next (&cert_advs)) { xml_string_append (result, "" "%s" "%s" "", get_iterator_name (&cert_advs), cert_bund_adv_info_iterator_title (&cert_advs)); }; cleanup_iterator (&cert_advs); init_cve_dfn_cert_adv_iterator (&cert_advs, get_iterator_name (&info), 1, NULL); while (next (&cert_advs)) { xml_string_append (result, "" "%s" "%s" "", get_iterator_name (&cert_advs), dfn_cert_adv_info_iterator_title (&cert_advs)); }; cleanup_iterator (&cert_advs); } else { g_string_append(result, "" "database not available" ""); } g_string_append (result, ""); } } else if (g_strcmp0 ("ovaldef", get_info_data->type) == 0) { const char *description; xml_string_append (result, "" "%s" "%s" "%s" "%s" "%s" "%s" "%s" "%s", ovaldef_info_iterator_version (&info), ovaldef_info_iterator_deprecated (&info), ovaldef_info_iterator_status (&info), ovaldef_info_iterator_class (&info), ovaldef_info_iterator_title (&info), ovaldef_info_iterator_max_cvss (&info), ovaldef_info_iterator_cve_refs (&info), ovaldef_info_iterator_file (&info)); description = ovaldef_info_iterator_description (&info); if (get_info_data->details == 1) xml_string_append (result, "%s", description); } else if (g_strcmp0 ("cert_bund_adv", get_info_data->type) == 0) xml_string_append (result, "" "%s" "%s" "%s" "%s", cert_bund_adv_info_iterator_title (&info), cert_bund_adv_info_iterator_summary (&info), cert_bund_adv_info_iterator_max_cvss(&info), cert_bund_adv_info_iterator_cve_refs (&info)); else if (g_strcmp0 ("dfn_cert_adv", get_info_data->type) == 0) xml_string_append (result, "" "%s" "%s" "%s" "%s", dfn_cert_adv_info_iterator_title (&info), dfn_cert_adv_info_iterator_summary (&info), dfn_cert_adv_info_iterator_max_cvss(&info), dfn_cert_adv_info_iterator_cve_refs (&info)); else if (g_strcmp0 ("nvt", get_info_data->type) == 0) { if (send_nvt (&info, 1, 1, -1, NULL, 0, write_to_client, write_to_client_data)) { cleanup_iterator (&info); error_send_to_client (error); return; } } else if (g_strcmp0 ("allinfo", get_info_data->type) == 0) { const char *extra = all_info_iterator_extra (&info); xml_string_append (result, "" "%s" "%s" "%s", all_info_iterator_type (&info), extra ? extra : "", all_info_iterator_severity (&info)); } /* Append raw data if full details are requested */ if (get_info_data->details == 1) { gchar *raw_data = NULL; gchar *nonconst_id = g_strdup(get_iterator_uuid (&info)); gchar *nonconst_name = g_strdup(get_iterator_name (&info)); manage_read_info (get_info_data->type, nonconst_id, nonconst_name, &raw_data); g_string_append_printf (result, "%s", raw_data); g_free(nonconst_id); g_free(nonconst_name); g_free(raw_data); } g_string_append_printf (result, "", get_info_data->type); SEND_TO_CLIENT_OR_FAIL (result->str); count++; g_string_free (result, TRUE); } cleanup_iterator (&info); if (get_info_data->details == 1) SEND_TO_CLIENT_OR_FAIL ("
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "); filtered = get_info_data->get.id ? 1 : (get_info_data->name ? info_name_count (get_info_data->type, get_info_data->name) : info_count (&get_info_data->get)); if (strcmp (get_info_data->type, "allinfo")) SEND_GET_END ("info", &get_info_data->get, count, filtered); else send_get_end ("info", &get_info_data->get, count, filtered, total_info_count(&get_info_data->get, 0), write_to_client, write_to_client_data); get_info_data_reset (get_info_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_LSC_CREDENTIALS: { iterator_t credentials; int count, filtered, ret, first; int format; char *data_format; assert (strcasecmp ("GET_LSC_CREDENTIALS", element_name) == 0); data_format = get_lsc_credentials_data->format; if (data_format) { if (strlen (data_format)) { if (strcasecmp (data_format, "key") == 0) format = 1; else if (strcasecmp (data_format, "rpm") == 0) format = 2; else if (strcasecmp (data_format, "deb") == 0) format = 3; else if (strcasecmp (data_format, "exe") == 0) format = 4; else format = -1; } else format = 0; } else format = 0; if (format == -1) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_lsc_credentials", "GET_LSC_CREDENTIALS format attribute should" " be 'key', 'rpm', 'deb' or 'exe'.")); INIT_GET (lsc_credential, Credential); ret = init_lsc_credential_iterator (&credentials, &get_lsc_credentials_data->get); if (ret) { switch (ret) { case 1: if (send_find_error_to_client ("get_lsc_credentials", "lsc_credential", get_lsc_credentials_data->get.id, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_lsc_credentials", "lsc_credential", get_lsc_credentials_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_lsc_credentials")); break; } get_lsc_credentials_data_reset (get_lsc_credentials_data); set_client_state (CLIENT_AUTHENTIC); break; } SEND_GET_START("lsc_credential"); while (1) { const char* private_key; ret = get_next (&credentials, &get_lsc_credentials_data->get, &first, &count, init_lsc_credential_iterator); if (ret == 1) break; if (ret == -1) { internal_error_send_to_client (error); return; } SEND_GET_COMMON (lsc_credential, &get_lsc_credentials_data->get, &credentials); private_key = lsc_credential_iterator_private_key (&credentials); SENDF_TO_CLIENT_OR_FAIL ("%s" "%s", lsc_credential_iterator_login (&credentials), private_key ? "gen" : "pass"); switch (format) { char *package; case 1: /* key */ { char *pub; const char *pass; pass = lsc_credential_iterator_password (&credentials); pub = openvas_ssh_public_from_private (private_key, pass); SENDF_TO_CLIENT_OR_FAIL ("%s", pub ?: ""); g_free (pub); break; } case 2: /* rpm */ package = lsc_credential_iterator_rpm (&credentials); SENDF_TO_CLIENT_OR_FAIL ("%s", package ?: ""); g_free (package); break; case 3: /* deb */ package = lsc_credential_iterator_deb (&credentials); SENDF_TO_CLIENT_OR_FAIL ("%s", package ?: ""); g_free (package); break; case 4: /* exe */ package = lsc_credential_iterator_exe (&credentials); SENDF_TO_CLIENT_OR_FAIL ("%s", package ?: ""); g_free (package); break; } if (get_lsc_credentials_data->targets) { iterator_t targets; SENDF_TO_CLIENT_OR_FAIL (""); init_lsc_credential_target_iterator (&targets, get_iterator_resource (&credentials), 0); while (next (&targets)) { SENDF_TO_CLIENT_OR_FAIL ("" "%s", lsc_credential_target_iterator_uuid (&targets), lsc_credential_target_iterator_name (&targets)); if (lsc_credential_target_iterator_readable (&targets)) SEND_TO_CLIENT_OR_FAIL (""); else SEND_TO_CLIENT_OR_FAIL ("" ""); } cleanup_iterator (&targets); SEND_TO_CLIENT_OR_FAIL (""); } SEND_TO_CLIENT_OR_FAIL (""); count++; } cleanup_iterator (&credentials); filtered = get_lsc_credentials_data->get.id ? 1 : lsc_credential_count (&get_lsc_credentials_data->get); SEND_GET_END ("lsc_credential", &get_lsc_credentials_data->get, count, filtered); get_lsc_credentials_data_reset (get_lsc_credentials_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_NOTES: { nvt_t nvt = 0; task_t task = 0; assert (strcasecmp ("GET_NOTES", element_name) == 0); if (get_notes_data->note_id && get_notes_data->nvt_oid) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_notes", "Only one of NVT and the note_id attribute" " may be given")); else if (get_notes_data->note_id && get_notes_data->task_id) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_notes", "Only one of the note_id and task_id" " attributes may be given")); else if (get_notes_data->task_id && find_task (get_notes_data->task_id, &task)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_notes")); else if (get_notes_data->task_id && task == 0) { if (send_find_error_to_client ("get_notes", "task", get_notes_data->task_id, omp_parser)) { error_send_to_client (error); return; } } else if (get_notes_data->nvt_oid && find_nvt (get_notes_data->nvt_oid, &nvt)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_notes")); else if (get_notes_data->nvt_oid && nvt == 0) { if (send_find_error_to_client ("get_notes", "NVT", get_notes_data->nvt_oid, omp_parser)) { error_send_to_client (error); return; } } else { iterator_t notes; GString *buffer; int count, filtered, ret, first; INIT_GET (note, Note); ret = init_note_iterator (¬es, &get_notes_data->get, nvt, 0, task); if (ret) { switch (ret) { case 1: if (send_find_error_to_client ("get_notes", "note", get_notes_data->get.id, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_notes", "filter", get_notes_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_notes")); break; } get_notes_data_reset (get_notes_data); set_client_state (CLIENT_AUTHENTIC); break; } SEND_GET_START ("note"); buffer = g_string_new (""); // TODO: Do the iteration with get_next so it checks "first". buffer_notes_xml (buffer, ¬es, get_notes_data->get.details, get_notes_data->result, &count); SEND_TO_CLIENT_OR_FAIL (buffer->str); g_string_free (buffer, TRUE); cleanup_iterator (¬es); filtered = get_notes_data->get.id ? 1 : note_count (&get_notes_data->get, nvt, 0, task); SEND_GET_END ("note", &get_notes_data->get, count, filtered); } get_notes_data_reset (get_notes_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_NVT_FEED_VERSION: { char *feed_version; if (user_may ("get_nvt_feed_version") == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_nvt_feed_version", "Permission denied")); else if ((feed_version = nvts_feed_version ())) { SEND_TO_CLIENT_OR_FAIL ("" ""); SEND_TO_CLIENT_OR_FAIL (feed_version); free (feed_version); SEND_TO_CLIENT_OR_FAIL ("" ""); } else SEND_XML_SERVICE_DOWN ("get_nvt_feed_version"); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_NVTS: { char *feed_version; if (user_may ("get_nvts") == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_nvts", "Permission denied")); get_nvts_data_reset (get_nvts_data); set_client_state (CLIENT_AUTHENTIC); break; } feed_version = nvts_feed_version (); if (feed_version) { config_t config = (config_t) 0; nvt_t nvt = 0; free (feed_version); if (get_nvts_data->nvt_oid && get_nvts_data->family) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_nvts", "Too many parameters at once")); else if ((get_nvts_data->details == 0) && get_nvts_data->preference_count) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_nvts", "GET_NVTS preference_count attribute" " requires the details attribute")); else if ((get_nvts_data->details == 0) && get_nvts_data->preferences) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_nvts", "GET_NVTS preferences attribute" " requires the details attribute")); else if (((get_nvts_data->details == 0) || (get_nvts_data->config_id == NULL)) && get_nvts_data->timeout) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_nvts", "GET_NVTS timeout attribute" " requires the details and config_id" " attributes")); else if (get_nvts_data->nvt_oid && find_nvt (get_nvts_data->nvt_oid, &nvt)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_nvts")); else if (get_nvts_data->nvt_oid && nvt == 0) { if (send_find_error_to_client ("get_nvts", "NVT", get_nvts_data->nvt_oid, omp_parser)) { error_send_to_client (error); return; } } else if (get_nvts_data->config_id && find_config_with_permission (get_nvts_data->config_id, &config, NULL)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_nvts")); else if (get_nvts_data->config_id && (config == 0)) { if (send_find_error_to_client ("get_nvts", "config", get_nvts_data->config_id, omp_parser)) { error_send_to_client (error); return; } } else { iterator_t nvts; SENDF_TO_CLIENT_OR_FAIL (""); init_nvt_iterator (&nvts, nvt, get_nvts_data->nvt_oid /* Presume the NVT is in the config (if * a config was given). */ ? 0 : config, get_nvts_data->family, NULL, get_nvts_data->sort_order, get_nvts_data->sort_field); if (get_nvts_data->details) while (next (&nvts)) { int pref_count = -1; char *timeout = NULL; if (get_nvts_data->timeout) timeout = config_nvt_timeout (config, nvt_iterator_oid (&nvts)); if (get_nvts_data->preferences && (timeout == NULL)) timeout = config_nvt_timeout (config, nvt_iterator_oid (&nvts)); if (get_nvts_data->preference_count) { const char *nvt_name = nvt_iterator_name (&nvts); pref_count = nvt_preference_count (nvt_name); } if (send_nvt (&nvts, 1, get_nvts_data->preferences, pref_count, timeout, config, write_to_client, write_to_client_data)) { free (timeout); cleanup_iterator (&nvts); error_send_to_client (error); return; } free (timeout); SEND_TO_CLIENT_OR_FAIL ("                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        "); } else while (next (&nvts)) { if (send_nvt (&nvts, 0, 0, -1, NULL, 0, write_to_client, write_to_client_data)) { cleanup_iterator (&nvts); error_send_to_client (error); return; } SEND_TO_CLIENT_OR_FAIL (""); } cleanup_iterator (&nvts); SEND_TO_CLIENT_OR_FAIL (""); } } else SEND_XML_SERVICE_DOWN ("get_nvts"); } get_nvts_data_reset (get_nvts_data); set_client_state (CLIENT_AUTHENTIC); break; case CLIENT_GET_NVT_FAMILIES: { iterator_t families; if (user_may ("get_nvt_families") == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_nvt_families", "Permission denied")); get_nvt_families_data_reset (get_nvt_families_data); set_client_state (CLIENT_AUTHENTIC); break; } SEND_TO_CLIENT_OR_FAIL ("" ""); init_family_iterator (&families, 1, NULL, get_nvt_families_data->sort_order); while (next (&families)) { int family_max; const char *family; family = family_iterator_name (&families); if (family) family_max = family_nvt_count (family); else family_max = -1; SENDF_TO_CLIENT_OR_FAIL ("" "%s" /* The total number of NVT's in the family. */ "%i" "", family ? family : "", family_max); } cleanup_iterator (&families); SEND_TO_CLIENT_OR_FAIL ("" ""); } get_nvt_families_data_reset (get_nvt_families_data); set_client_state (CLIENT_AUTHENTIC); break; case CLIENT_GET_OVERRIDES: { nvt_t nvt = 0; task_t task = 0; assert (strcasecmp ("GET_OVERRIDES", element_name) == 0); if (get_overrides_data->override_id && get_overrides_data->nvt_oid) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_overrides", "Only one of NVT and the override_id attribute" " may be given")); else if (get_overrides_data->override_id && get_overrides_data->task_id) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_overrides", "Only one of the override_id and task_id" " attributes may be given")); else if (get_overrides_data->task_id && find_task (get_overrides_data->task_id, &task)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_overrides")); else if (get_overrides_data->task_id && task == 0) { if (send_find_error_to_client ("get_overrides", "task", get_overrides_data->task_id, omp_parser)) { error_send_to_client (error); return; } } else if (get_overrides_data->nvt_oid && find_nvt (get_overrides_data->nvt_oid, &nvt)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_overrides")); else if (get_overrides_data->nvt_oid && nvt == 0) { if (send_find_error_to_client ("get_overrides", "NVT", get_overrides_data->nvt_oid, omp_parser)) { error_send_to_client (error); return; } } else { iterator_t overrides; GString *buffer; int count, filtered, ret, first; INIT_GET (override, Override); ret = init_override_iterator (&overrides, &get_overrides_data->get, nvt, 0, task); if (ret) { switch (ret) { case 1: if (send_find_error_to_client ("get_overrides", "override", get_overrides_data->get.id, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_overrides", "filter", get_overrides_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_overrides")); break; } get_overrides_data_reset (get_overrides_data); set_client_state (CLIENT_AUTHENTIC); break; } SEND_GET_START ("override"); buffer = g_string_new (""); // TODO: Do the iteration with get_next so it checks "first". buffer_overrides_xml (buffer, &overrides, get_overrides_data->get.details, get_overrides_data->result, &count); SEND_TO_CLIENT_OR_FAIL (buffer->str); g_string_free (buffer, TRUE); cleanup_iterator (&overrides); filtered = get_overrides_data->get.id ? 1 : override_count (&get_overrides_data->get, nvt, 0, task); SEND_GET_END ("override", &get_overrides_data->get, count, filtered); } get_overrides_data_reset (get_overrides_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_PERMISSIONS: { iterator_t permissions; int count, filtered, ret, first; assert (strcasecmp ("GET_PERMISSIONS", element_name) == 0); INIT_GET (permission, Permission); ret = init_permission_iterator (&permissions, &get_permissions_data->get); if (ret) { switch (ret) { case 1: if (send_find_error_to_client ("get_permissions", "permission", get_permissions_data->get.id, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_permissions", "filter", get_permissions_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_permissions")); break; } get_permissions_data_reset (get_permissions_data); set_client_state (CLIENT_AUTHENTIC); break; } SEND_GET_START ("permission"); while (1) { const char *resource_type; ret = get_next (&permissions, &get_permissions_data->get, &first, &count, init_permission_iterator); if (ret == 1) break; if (ret == -1) { internal_error_send_to_client (error); return; } SEND_GET_COMMON (permission, &get_permissions_data->get, &permissions); resource_type = permission_iterator_resource_type (&permissions); SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%s" "%i" "%i" "" "" "%s" "%s" "%i" "", permission_iterator_resource_uuid (&permissions), resource_type && strcmp (resource_type, "") ? permission_iterator_resource_name (&permissions) : "", permission_iterator_resource_type (&permissions), permission_iterator_resource_in_trash (&permissions), permission_iterator_resource_orphan (&permissions), permission_iterator_subject_uuid (&permissions), permission_iterator_subject_name (&permissions), permission_iterator_subject_type (&permissions), permission_iterator_subject_in_trash (&permissions)); SEND_TO_CLIENT_OR_FAIL (""); count++; } cleanup_iterator (&permissions); filtered = get_permissions_data->get.id ? 1 : permission_count (&get_permissions_data->get); SEND_GET_END ("permission", &get_permissions_data->get, count, filtered); get_permissions_data_reset (get_permissions_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_PORT_LISTS: { iterator_t port_lists; int count, filtered, ret, first; assert (strcasecmp ("GET_PORT_LISTS", element_name) == 0); INIT_GET (port_list, Port List); ret = init_port_list_iterator (&port_lists, &get_port_lists_data->get); if (ret) { switch (ret) { case 1: if (send_find_error_to_client ("get_port_lists", "port_list", get_port_lists_data->get.id, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_port_lists", "port_list", get_port_lists_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_port_lists")); break; } get_port_lists_data_reset (get_port_lists_data); set_client_state (CLIENT_AUTHENTIC); break; } SEND_GET_START ("port_list"); while (1) { ret = get_next (&port_lists, &get_port_lists_data->get, &first, &count, init_port_list_iterator); if (ret == 1) break; if (ret == -1) { internal_error_send_to_client (error); return; } SEND_GET_COMMON (port_list, &get_port_lists_data->get, &port_lists); SENDF_TO_CLIENT_OR_FAIL ("" "%i" "%i" "%i" "", port_list_iterator_count_all (&port_lists), port_list_iterator_count_tcp (&port_lists), port_list_iterator_count_udp (&port_lists)); if (get_port_lists_data->get.details) { iterator_t ranges; SEND_TO_CLIENT_OR_FAIL (""); init_port_range_iterator (&ranges, get_iterator_resource (&port_lists), 0, 1, NULL); while (next (&ranges)) SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%s" "%s" "%s" "", port_range_iterator_uuid (&ranges), port_range_iterator_start (&ranges), port_range_iterator_end (&ranges) ? port_range_iterator_end (&ranges) : port_range_iterator_start (&ranges), port_range_iterator_type (&ranges), port_range_iterator_comment (&ranges)); cleanup_iterator (&ranges); SENDF_TO_CLIENT_OR_FAIL (""); } if (get_port_lists_data->targets) { iterator_t targets; SEND_TO_CLIENT_OR_FAIL (""); init_port_list_target_iterator (&targets, get_iterator_resource (&port_lists), 0); while (next (&targets)) { if (port_list_target_iterator_readable (&targets) == 0) /* Only show targets the user may see. */ continue; SENDF_TO_CLIENT_OR_FAIL ("" "%s", port_list_target_iterator_uuid (&targets), port_list_target_iterator_name (&targets)); if (port_list_target_iterator_readable (&targets)) SEND_TO_CLIENT_OR_FAIL (""); else SEND_TO_CLIENT_OR_FAIL ("" ""); } cleanup_iterator (&targets); SEND_TO_CLIENT_OR_FAIL (""); } SEND_TO_CLIENT_OR_FAIL (""); count++; } cleanup_iterator (&port_lists); filtered = get_port_lists_data->get.id ? 1 : port_list_count (&get_port_lists_data->get); SEND_GET_END ("port_list", &get_port_lists_data->get, count, filtered); get_port_lists_data_reset (get_port_lists_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_PREFERENCES: { iterator_t prefs; nvt_t nvt = 0; config_t config = 0; if (user_may ("get_preferences") == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_preferences", "Permission denied")); get_preferences_data_reset (get_preferences_data); set_client_state (CLIENT_AUTHENTIC); break; } if (get_preferences_data->nvt_oid && find_nvt (get_preferences_data->nvt_oid, &nvt)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_preferences")); else if (get_preferences_data->nvt_oid && nvt == 0) { if (send_find_error_to_client ("get_preferences", "NVT", get_preferences_data->nvt_oid, omp_parser)) { error_send_to_client (error); return; } } else if (get_preferences_data->config_id && find_config (get_preferences_data->config_id, &config)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_preferences")); else if (get_preferences_data->config_id && config == 0) { if (send_find_error_to_client ("get_preferences", "config", get_preferences_data->config_id, omp_parser)) { error_send_to_client (error); return; } } else { char *nvt_name = manage_nvt_name (nvt); SEND_TO_CLIENT_OR_FAIL (""); init_nvt_preference_iterator (&prefs, nvt_name); free (nvt_name); if (get_preferences_data->preference) while (next (&prefs)) { char *name = strstr (nvt_preference_iterator_name (&prefs), "]:"); if (name && (strcmp (name + 2, get_preferences_data->preference) == 0)) { GString *buffer = g_string_new (""); buffer_config_preference_xml (buffer, &prefs, config, 1); SEND_TO_CLIENT_OR_FAIL (buffer->str); g_string_free (buffer, TRUE); break; } } else while (next (&prefs)) { GString *buffer = g_string_new (""); buffer_config_preference_xml (buffer, &prefs, config, 1); SEND_TO_CLIENT_OR_FAIL (buffer->str); g_string_free (buffer, TRUE); } cleanup_iterator (&prefs); SEND_TO_CLIENT_OR_FAIL (""); } get_preferences_data_reset (get_preferences_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_REPORTS: assert (strcasecmp ("GET_REPORTS", element_name) == 0); if (current_credentials.username == NULL) { get_reports_data_reset (get_reports_data); SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_reports")); set_client_state (CLIENT_AUTHENTIC); break; } report_t request_report = 0, delta_report = 0, report; report_format_t report_format; float min_cvss_base; iterator_t reports; int count, filtered, ret, first; if (user_may ("get_reports") == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_reports", "Permission denied")); get_reports_data_reset (get_reports_data); set_client_state (CLIENT_AUTHENTIC); break; } /** @todo Some checks only required when type is "scan". */ if (strcmp (get_reports_data->type, "scan") && strcmp (get_reports_data->type, "assets") && strcmp (get_reports_data->type, "prognostic")) { get_reports_data_reset (get_reports_data); SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_reports", "GET_REPORTS type must be scan, assets or" " prognostic")); set_client_state (CLIENT_AUTHENTIC); break; } if (strcmp (get_reports_data->type, "prognostic") == 0 && manage_scap_loaded () == 0) { get_reports_data_reset (get_reports_data); SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_reports", "GET_REPORTS with type prognostic requires the" " SCAP database")); set_client_state (CLIENT_AUTHENTIC); break; } if ((strcmp (get_reports_data->type, "scan") == 0) && get_reports_data->report_id && find_report_with_permission (get_reports_data->report_id, &request_report, NULL)) { get_reports_data_reset (get_reports_data); SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_reports")); set_client_state (CLIENT_AUTHENTIC); break; } if (get_reports_data->delta_report_id && strcmp (get_reports_data->delta_report_id, "0") && find_report_with_permission (get_reports_data->delta_report_id, &delta_report, NULL)) { get_reports_data_reset (get_reports_data); SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_reports")); set_client_state (CLIENT_AUTHENTIC); break; } if (get_reports_data->format_id == NULL) get_reports_data->format_id = g_strdup ("a994b278-1f62-11e1-96ac-406186ea4fc5"); if (find_report_format_with_permission (get_reports_data->format_id, &report_format, "get_report_formats")) { get_reports_data_reset (get_reports_data); SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_reports")); set_client_state (CLIENT_AUTHENTIC); break; } if (report_format == 0) { if (send_find_error_to_client ("get_reports", "report format", get_reports_data->format_id, omp_parser)) { error_send_to_client (error); return; } get_reports_data_reset (get_reports_data); set_client_state (CLIENT_AUTHENTIC); break; } if ((strcmp (get_reports_data->type, "scan") == 0) && get_reports_data->report_id && request_report == 0) { if (send_find_error_to_client ("get_reports", "report", get_reports_data->report_id, omp_parser)) { error_send_to_client (error); return; } get_reports_data_reset (get_reports_data); set_client_state (CLIENT_AUTHENTIC); break; } if ((strcmp (get_reports_data->type, "scan") == 0) && get_reports_data->delta_report_id && strcmp (get_reports_data->delta_report_id, "0") && delta_report == 0) { if (send_find_error_to_client ("get_reports", "report", get_reports_data->delta_report_id, omp_parser)) { error_send_to_client (error); return; } get_reports_data_reset (get_reports_data); set_client_state (CLIENT_AUTHENTIC); break; } if (((strcmp (get_reports_data->type, "scan") == 0) || (strcmp (get_reports_data->type, "prognostic") == 0)) && get_reports_data->min_cvss_base && strlen (get_reports_data->min_cvss_base) && (sscanf (get_reports_data->min_cvss_base, "%f", &min_cvss_base) != 1)) { get_reports_data_reset (get_reports_data); SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_reports", "GET_REPORTS min_cvss_base must be a float" " or the empty string")); set_client_state (CLIENT_AUTHENTIC); break; } if (report_format_active (report_format) == 0) { get_reports_data_reset (get_reports_data); SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_reports", "GET_REPORTS report format must be active")); set_client_state (CLIENT_AUTHENTIC); break; } if ((report_format_predefined (report_format) == 0) && (report_format_trust (report_format) > 1)) { get_reports_data_reset (get_reports_data); SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_reports", "GET_REPORTS report format must be predefined" " or trusted")); set_client_state (CLIENT_AUTHENTIC); break; } if (strcmp (get_reports_data->type, "assets") == 0) { gchar *extension, *content_type; int ret, pos; get_data_t * get; /* An asset report. */ get = &get_reports_data->get; if (get->filt_id && strcmp (get->filt_id, "-2") == 0) { g_free (get->filt_id); get->filt_id = g_strdup ("0"); } if (get_reports_data->alert_id == NULL) SEND_TO_CLIENT_OR_FAIL (""); content_type = report_format_content_type (report_format); extension = report_format_extension (report_format); SENDF_TO_CLIENT_OR_FAIL ("", get_reports_data->format_id, extension, content_type); g_free (extension); g_free (content_type); pos = get_reports_data->pos ? atoi (get_reports_data->pos) : 1; ret = manage_send_report (0, 0, report_format, &get_reports_data->get, get_reports_data->sort_order, get_reports_data->sort_field, get_reports_data->result_hosts_only, NULL, NULL, get_reports_data->levels, get_reports_data->delta_states, get_reports_data->apply_overrides, get_reports_data->search_phrase, get_reports_data->autofp, get_reports_data->notes, get_reports_data->notes_details, get_reports_data->overrides, get_reports_data->overrides_details, get_reports_data->first_result, get_reports_data->max_results, get_reports_data->ignore_pagination, /* Special case the XML reports, bah. */ strcmp (get_reports_data->format_id, "a994b278-1f62-11e1-96ac-406186ea4fc5") && strcmp (get_reports_data->format_id, "5057e5cc-b825-11e4" "-9d0e-28d24461215b"), send_to_client, write_to_client, write_to_client_data, get_reports_data->alert_id, "assets", get_reports_data->host, pos, NULL, NULL, 0, 0, NULL, get_reports_data->timezone); if (ret) { internal_error_send_to_client (error); get_reports_data_reset (get_reports_data); set_client_state (CLIENT_AUTHENTIC); return; } SEND_TO_CLIENT_OR_FAIL ("" ""); get_reports_data_reset (get_reports_data); set_client_state (CLIENT_AUTHENTIC); break; } if (strcmp (get_reports_data->type, "prognostic") == 0) { gchar *extension, *content_type; int ret, pos; get_data_t * get; /* A prognostic report. */ get = &get_reports_data->get; if (get->filt_id && strcmp (get->filt_id, "-2") == 0) { g_free (get->filt_id); get->filt_id = g_strdup ("0"); } if (get_reports_data->alert_id == NULL) SEND_TO_CLIENT_OR_FAIL (""); content_type = report_format_content_type (report_format); extension = report_format_extension (report_format); SENDF_TO_CLIENT_OR_FAIL ("", get_reports_data->format_id, extension, content_type); g_free (extension); g_free (content_type); pos = get_reports_data->pos ? atoi (get_reports_data->pos) : 1; ret = manage_send_report (0, 0, report_format, &get_reports_data->get, get_reports_data->sort_order, get_reports_data->sort_field, get_reports_data->result_hosts_only, get_reports_data->min_cvss_base, get_reports_data->min_qod, get_reports_data->levels, get_reports_data->delta_states, get_reports_data->apply_overrides, get_reports_data->search_phrase, get_reports_data->autofp, get_reports_data->notes, get_reports_data->notes_details, get_reports_data->overrides, get_reports_data->overrides_details, get_reports_data->first_result, get_reports_data->max_results, get_reports_data->ignore_pagination, /* Special case the XML report, bah. */ strcmp (get_reports_data->format_id, "a994b278-1f62-11e1-96ac-406186ea4fc5") && strcmp (get_reports_data->format_id, "5057e5cc-b825-11e4" "-9d0e-28d24461215b"), send_to_client, write_to_client, write_to_client_data, get_reports_data->alert_id, "prognostic", get_reports_data->host, pos, get_reports_data->host_search_phrase, get_reports_data->host_levels, get_reports_data->host_first_result, get_reports_data->host_max_results, NULL, get_reports_data->timezone); if (ret) { internal_error_send_to_client (error); get_reports_data_reset (get_reports_data); set_client_state (CLIENT_AUTHENTIC); return; } SEND_TO_CLIENT_OR_FAIL ("" ""); get_reports_data_reset (get_reports_data); set_client_state (CLIENT_AUTHENTIC); break; } /* The usual scan report. */ if (get_reports_data->get.id) { /* Showing requested report, use Results Filter setting. */ INIT_GET (report, Result); } else { /* Showing multiple reports. Use Report Filter setting. Expand * INIT_GET here to pass the get_reports_data->report_get to * init_get. */ ret = init_get ("get_reports", &get_reports_data->report_get, "Reports", &first); if (ret) { switch (ret) { case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_reports", "Permission denied")); break; default: internal_error_send_to_client (error); return; } get_reports_data_reset (get_reports_data); set_client_state (CLIENT_AUTHENTIC); break; } } if ((get_reports_data->report_get.id == NULL) || (strlen (get_reports_data->report_get.id) == 0)) { gchar *overrides, *min_qod, *filter; get_data_t * get; /* For simplicity, use a fixed result filter when filtering * reports. A given result filter is only applied when getting * a single specified report. */ get = &get_reports_data->report_get; /* Get overrides value from report filter. */ if (get->filt_id && strcmp (get->filt_id, "0")) { filter = filter_term (get->filt_id); if (filter == NULL) assert (0); } else filter = NULL; g_free (get_reports_data->get.filter); overrides = filter_term_value (filter ? filter : get->filter, "apply_overrides"); min_qod = filter_term_value (filter ? filter : get->filter, "min_qod"); g_free (filter); /* Setup result filter from overrides. */ get_reports_data->get.filter = g_strdup_printf ("apply_overrides=%i min_qod=%s", overrides && strcmp (overrides, "0"), min_qod ? min_qod : G_STRINGIFY (MIN_QOD_DEFAULT)); g_free (overrides); g_free (min_qod); } ret = init_report_iterator (&reports, &get_reports_data->report_get); if (ret) { switch (ret) { case 1: if (send_find_error_to_client ("get_reports", "report", get_reports_data->get.id, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_reports", "filter", get_reports_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_reports")); break; } get_reports_data_reset (get_reports_data); set_client_state (CLIENT_AUTHENTIC); break; } if (get_reports_data->alert_id == NULL) SEND_GET_START ("report"); while (next_report (&reports, &report)) { gchar *extension, *content_type; int ret; GString *prefix; prefix = g_string_new (""); content_type = report_format_content_type (report_format); extension = report_format_extension (report_format); if (get_reports_data->alert_id == NULL) g_string_append_printf (prefix, "", report_iterator_uuid (&reports), get_reports_data->format_id, extension, content_type); g_free (extension); g_free (content_type); if (get_reports_data->alert_id == NULL) { task_t task; /* Send the standard elements. Should match send_get_common. */ buffer_xml_append_printf (prefix, "%s" "%s" "%s" "%s" "" "%s" "" "0" "0", get_iterator_owner_name (&reports) ? get_iterator_owner_name (&reports) : "", get_iterator_name (&reports) ? get_iterator_name (&reports) : "", get_iterator_comment (&reports) ? get_iterator_comment (&reports) : "", get_iterator_creation_time (&reports) ? get_iterator_creation_time (&reports) : "", get_iterator_modification_time (&reports) ? get_iterator_modification_time (&reports) : ""); /* Send short task and report format info */ report_task (report, &task); if (task) { gchar *report_task_uuid; task_uuid (task, &report_task_uuid); buffer_xml_append_printf (prefix, "", report_task_uuid); /* Skip task name for Anonymous XML report format. */ if (strcmp (get_reports_data->format_id, "5057e5cc-b825-11e4-9d0e-28d24461215b")) { gchar *report_task_name; report_task_name = task_name (task); buffer_xml_append_printf (prefix, "%s", report_task_name); g_free (report_task_name); } buffer_xml_append_printf (prefix, ""); g_free (report_task_uuid); } if (get_reports_data->format_id) { gchar *format_name = NULL; format_name = report_format_name (report_format); buffer_xml_append_printf (prefix, "" "%s" "", get_reports_data->format_id, format_name ? format_name : ""); // g_free (report_format_name); } } /* If there's just one report then cleanup the iterator early. This * closes the iterator transaction, allowing manage_schedule to lock * the db during generation of large reports. */ if (request_report) cleanup_iterator (&reports); ret = manage_send_report (report, delta_report, report_format, &get_reports_data->get, get_reports_data->sort_order, get_reports_data->sort_field, get_reports_data->result_hosts_only, get_reports_data->min_cvss_base, get_reports_data->min_qod, get_reports_data->levels, get_reports_data->delta_states, get_reports_data->apply_overrides, get_reports_data->search_phrase, get_reports_data->autofp, get_reports_data->notes, get_reports_data->notes_details, get_reports_data->overrides, get_reports_data->overrides_details, get_reports_data->first_result, get_reports_data->max_results, get_reports_data->ignore_pagination, /* Special case the XML report, bah. */ strcmp (get_reports_data->format_id, "a994b278-1f62-11e1-96ac-406186ea4fc5") && strcmp (get_reports_data->format_id, "5057e5cc-b825-11e4" "-9d0e-28d24461215b"), send_to_client, write_to_client, write_to_client_data, get_reports_data->alert_id, get_reports_data->type, NULL, 0, NULL, NULL, 0, 0, prefix->str, get_reports_data->timezone); g_string_free (prefix, TRUE); if (ret) { if (get_reports_data->alert_id) switch (ret) { case 0: break; case 1: if (send_find_error_to_client ("get_reports", "alert", get_reports_data->alert_id, omp_parser)) { error_send_to_client (error); return; } /* Close the connection with the client, as part of the * response may have been sent before the error * occurred. */ internal_error_send_to_client (error); if (request_report == 0) cleanup_iterator (&reports); get_reports_data_reset (get_reports_data); set_client_state (CLIENT_AUTHENTIC); return; break; case 2: if (send_find_error_to_client ("get_reports", "filter", get_reports_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } /* This error always occurs before anything is sent * to the client, so the connection can stay up. */ if (request_report == 0) cleanup_iterator (&reports); get_reports_data_reset (get_reports_data); set_client_state (CLIENT_AUTHENTIC); return; break; case -2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_reports", "Failed to find report format for" " alert")); if (request_report == 0) cleanup_iterator (&reports); get_reports_data_reset (get_reports_data); set_client_state (CLIENT_AUTHENTIC); return; break; case -3: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_reports")); if (request_report == 0) cleanup_iterator (&reports); get_reports_data_reset (get_reports_data); set_client_state (CLIENT_AUTHENTIC); return; break; case -4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_reports", "Failed to find filter for" " alert")); if (request_report == 0) cleanup_iterator (&reports); get_reports_data_reset (get_reports_data); set_client_state (CLIENT_AUTHENTIC); return; break; default: case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_reports")); /* Close the connection with the client, as part of the * response may have been sent before the error * occurred. */ internal_error_send_to_client (error); if (request_report == 0) cleanup_iterator (&reports); get_reports_data_reset (get_reports_data); set_client_state (CLIENT_AUTHENTIC); return; break; } else if (ret == 2) { if (send_find_error_to_client ("get_reports", "filter", get_reports_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } /* This error always occurs before anything is sent * to the client, so the connection can stay up. */ if (request_report == 0) cleanup_iterator (&reports); get_reports_data_reset (get_reports_data); set_client_state (CLIENT_AUTHENTIC); return; } else { /* Close the connection with the client, as part of the * response may have been sent before the error * occurred. */ internal_error_send_to_client (error); if (request_report == 0) cleanup_iterator (&reports); get_reports_data_reset (get_reports_data); set_client_state (CLIENT_AUTHENTIC); return; } } if (get_reports_data->alert_id == NULL) SEND_TO_CLIENT_OR_FAIL (""); count++; if (request_report) /* Just to be safe, because iterator has been freed. */ break; } if (request_report == 0) cleanup_iterator (&reports); if (get_reports_data->alert_id) SEND_TO_CLIENT_OR_FAIL (XML_OK ("get_reports")); else { filtered = get_reports_data->get.id ? 1 : report_count (&get_reports_data->report_get); SEND_GET_END ("report", &get_reports_data->report_get, count, filtered); } get_reports_data_reset (get_reports_data); set_client_state (CLIENT_AUTHENTIC); break; case CLIENT_GET_REPORT_FORMATS: { assert (strcasecmp ("GET_REPORT_FORMATS", element_name) == 0); if (get_report_formats_data->params && get_report_formats_data->get.trash) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_report_formats", "GET_REPORT_FORMATS params given with trash")); else { iterator_t report_formats; int count, filtered, ret, first; INIT_GET (report_format, Report Format); ret = init_report_format_iterator (&report_formats, &get_report_formats_data->get); if (ret) { switch (ret) { case 1: if (send_find_error_to_client ("get_report_formats", "report_format", get_report_formats_data->get.id, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_report_formats", "filter", get_report_formats_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_report_formats")); break; } get_report_formats_data_reset (get_report_formats_data); set_client_state (CLIENT_AUTHENTIC); break; } SEND_GET_START ("report_format"); while (1) { time_t trust_time; ret = get_next (&report_formats, &get_report_formats_data->get, &first, &count, init_report_format_iterator); if (ret == 1) break; if (ret == -1) { internal_error_send_to_client (error); return; } SEND_GET_COMMON (report_format, &get_report_formats_data->get, &report_formats); trust_time = report_format_iterator_trust_time (&report_formats); SENDF_TO_CLIENT_OR_FAIL ("%s" "%s" "%s" "%s" "%i" "%i", report_format_iterator_extension (&report_formats), report_format_iterator_content_type (&report_formats), report_format_iterator_summary (&report_formats), report_format_iterator_description (&report_formats), get_report_formats_data->get.trash ? trash_report_format_global (get_iterator_resource (&report_formats)) : report_format_global (get_iterator_resource (&report_formats)), get_report_formats_data->get.trash ? 0 : report_format_predefined (get_iterator_resource (&report_formats))); if (get_report_formats_data->alerts) { iterator_t alerts; SEND_TO_CLIENT_OR_FAIL (""); init_report_format_alert_iterator (&alerts, get_iterator_resource (&report_formats)); while (next (&alerts)) { if (report_format_alert_iterator_readable (&alerts) == 0) /* Only show alerts the user may see. */ continue; SENDF_TO_CLIENT_OR_FAIL ("" "%s", report_format_alert_iterator_uuid (&alerts), report_format_alert_iterator_name (&alerts)); if (report_format_alert_iterator_readable (&alerts)) SEND_TO_CLIENT_OR_FAIL (""); else SEND_TO_CLIENT_OR_FAIL ("" ""); } cleanup_iterator (&alerts); SEND_TO_CLIENT_OR_FAIL (""); } if (get_report_formats_data->params || get_report_formats_data->get.details) { iterator_t params; init_report_format_param_iterator (¶ms, get_iterator_resource (&report_formats), get_report_formats_data->get.trash, 1, NULL); while (next (¶ms)) { long long int min, max; iterator_t options; SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%s", report_format_param_iterator_name (¶ms), report_format_param_iterator_type_name (¶ms)); min = report_format_param_iterator_type_min (¶ms); if (min > LLONG_MIN) SENDF_TO_CLIENT_OR_FAIL ("%lli", min); max = report_format_param_iterator_type_max (¶ms); if (max < LLONG_MAX) SENDF_TO_CLIENT_OR_FAIL ("%lli", max); SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%s", report_format_param_iterator_value (¶ms), report_format_param_iterator_fallback (¶ms)); if (report_format_param_iterator_type (¶ms) == REPORT_FORMAT_PARAM_TYPE_SELECTION) { SEND_TO_CLIENT_OR_FAIL (""); init_param_option_iterator (&options, report_format_param_iterator_param (¶ms), 1, NULL); while (next (&options)) SENDF_TO_CLIENT_OR_FAIL ("", param_option_iterator_value (&options)); cleanup_iterator (&options); SEND_TO_CLIENT_OR_FAIL (""); } SEND_TO_CLIENT_OR_FAIL (""); } cleanup_iterator (¶ms); } if (get_report_formats_data->get.details) { file_iterator_t files; if (init_report_format_file_iterator (&files, get_iterator_resource (&report_formats))) { cleanup_iterator (&report_formats); error_send_to_client (error); return; } while (next_file (&files)) { gchar *content = file_iterator_content_64 (&files); SENDF_TO_CLIENT_OR_FAIL ("%s", file_iterator_name (&files), content); g_free (content); } cleanup_file_iterator (&files); SENDF_TO_CLIENT_OR_FAIL ("%s", report_format_iterator_signature (&report_formats)); } SENDF_TO_CLIENT_OR_FAIL ("%s" "%i", report_format_predefined (get_iterator_resource (&report_formats)) ? "yes" : report_format_iterator_trust (&report_formats), iso_time (&trust_time), report_format_iterator_active (&report_formats)); SEND_TO_CLIENT_OR_FAIL (""); count++; } cleanup_iterator (&report_formats); filtered = get_report_formats_data->get.id ? 1 : report_format_count (&get_report_formats_data->get); SEND_GET_END ("report_format", &get_report_formats_data->get, count, filtered); } get_report_formats_data_reset (get_report_formats_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_RESULTS: { result_t result = 0; task_t task = 0; assert (strcasecmp ("GET_RESULTS", element_name) == 0); if (user_may ("get_results") == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_results", "Permission denied")); get_results_data_reset (get_results_data); set_client_state (CLIENT_AUTHENTIC); break; } if (current_credentials.username == NULL) { get_results_data_reset (get_results_data); SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_results")); set_client_state (CLIENT_AUTHENTIC); break; } if (get_results_data->notes && (get_results_data->task_id == NULL) && (get_results_data->get.details == 0)) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_results", "GET_RESULTS must have a task_id attribute or" " details set to true if the" " notes attribute is true")); else if ((get_results_data->overrides || get_results_data->apply_overrides) && (get_results_data->task_id == NULL) && (get_results_data->get.details == 0)) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_results", "GET_RESULTS must have a task_id attribute or" " details set to true if the apply_overides or " " overrides attributes are true")); else if (get_results_data->get.id && find_result_with_permission (get_results_data->get.id, &result, NULL)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_results")); else if (get_results_data->get.id && result == 0) { if (send_find_error_to_client ("get_results", "result", get_results_data->get.id, omp_parser)) { error_send_to_client (error); return; } } else if (get_results_data->task_id && find_task_with_permission (get_results_data->task_id, &task, NULL)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_results")); else if (get_results_data->task_id && task == 0) { if (send_find_error_to_client ("get_results", "task", get_results_data->task_id, omp_parser)) { error_send_to_client (error); return; } } else { iterator_t results; gchar *min_qod_str; int max; int autofp, apply_overrides, min_qod, dynamic_severity; if (get_results_data->autofp) autofp = get_results_data->autofp; else if (filter_term_value (get_results_data->get.filter, "autofp")) autofp = atoi (filter_term_value (get_results_data->get.filter, "autofp")); else autofp = 0; if (autofp < 0 || autofp > 2) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_results", "autofp in GET_RESULTS must be either" " 0, 1 or 2")); if (get_results_data->apply_overrides_set) apply_overrides = get_results_data->apply_overrides; else if (filter_term_value (get_results_data->get.filter, "apply_overrides")) apply_overrides = atoi (filter_term_value (get_results_data->get.filter, "apply_overrides")) ? 1 : 0; else apply_overrides = 1; min_qod_str = filter_term_value (get_results_data->get.filter, "min_qod"); if (min_qod_str == NULL || sscanf (min_qod_str, "%d", &min_qod) != 1) min_qod = MIN_QOD_DEFAULT; g_free (min_qod_str); dynamic_severity = setting_dynamic_severity_int (); SEND_TO_CLIENT_OR_FAIL (""); INIT_GET (result, Result); init_result_get_iterator (&results, &get_results_data->get, autofp, apply_overrides, min_qod, dynamic_severity); if (next (&results)) { if (get_results_data->get.id && (task == 0)) { char *task_id; task_uuid (result_iterator_task (&results), &task_id); if (find_task_with_permission (task_id, &task, NULL)) { free (task_id); internal_error_send_to_client (error); cleanup_iterator (&results); return; } free (task_id); } count = 0; do { GString *buffer = g_string_new (""); buffer_results_xml (buffer, &results, task, get_results_data->notes, get_results_data->notes_details, get_results_data->overrides, get_results_data->overrides_details, 1, /* show tag details if selected by ID */ get_results_data->get.id != NULL, get_results_data->get.details, NULL, NULL, 0); SEND_TO_CLIENT_OR_FAIL (buffer->str); g_string_free (buffer, TRUE); count ++; } while (next (&results)); } cleanup_iterator (&results); manage_filter_controls (get_results_data->get.filter, &first, &max, NULL, NULL); filtered = get_results_data->get.id ? 1 : result_count (&get_results_data->get, autofp, apply_overrides, min_qod, dynamic_severity); SEND_GET_END("result", &get_results_data->get, count, filtered); } get_results_data_reset (get_results_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_ROLES: { iterator_t roles; int count, filtered, ret, first; assert (strcasecmp ("GET_ROLES", element_name) == 0); INIT_GET (role, Role); ret = init_role_iterator (&roles, &get_roles_data->get); if (ret) { switch (ret) { case 1: if (send_find_error_to_client ("get_roles", "role", get_roles_data->get.id, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_roles", "role", get_roles_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_roles")); break; } get_roles_data_reset (get_roles_data); set_client_state (CLIENT_AUTHENTIC); break; } SEND_GET_START ("role"); while (1) { gchar *users; ret = get_next (&roles, &get_roles_data->get, &first, &count, init_role_iterator); if (ret == 1) break; if (ret == -1) { internal_error_send_to_client (error); return; } SEND_GET_COMMON (role, &get_roles_data->get, &roles); users = role_users (get_iterator_resource (&roles)); SENDF_TO_CLIENT_OR_FAIL ("%s", users ? users : ""); g_free (users); SEND_TO_CLIENT_OR_FAIL (""); count++; } cleanup_iterator (&roles); filtered = get_roles_data->get.id ? 1 : role_count (&get_roles_data->get); SEND_GET_END ("role", &get_roles_data->get, count, filtered); get_roles_data_reset (get_roles_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_SCANNERS: assert (strcasecmp ("GET_SCANNERS", element_name) == 0); return handle_get_scanners (omp_parser, error); case CLIENT_GET_SCHEDULES: { assert (strcasecmp ("GET_SCHEDULES", element_name) == 0); if (get_schedules_data->tasks && get_schedules_data->get.trash) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_schedules", "GET_SCHEDULES tasks given with trash")); else { iterator_t schedules; int count, filtered, ret, first; INIT_GET (schedule, Schedule); ret = init_schedule_iterator (&schedules, &get_schedules_data->get); if (ret) { switch (ret) { case 1: if (send_find_error_to_client ("get_schedules", "schedule", get_schedules_data->get.id, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_schedules", "filter", get_schedules_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_schedules")); break; } get_schedules_data_reset (get_schedules_data); set_client_state (CLIENT_AUTHENTIC); break; } SEND_GET_START ("schedule"); while (1) { time_t first_time, next_time; gchar *iso; const char *timezone, *abbrev; char *simple_period_unit, *simple_duration_unit; int period, period_minutes, period_hours, period_days; int period_weeks, period_months, duration, duration_minutes; int duration_hours, duration_days, duration_weeks; int simple_period, simple_duration; ret = get_next (&schedules, &get_schedules_data->get, &first, &count, init_schedule_iterator); if (ret == 1) break; if (ret == -1) { internal_error_send_to_client (error); return; } SEND_GET_COMMON (schedule, &get_schedules_data->get, &schedules); timezone = schedule_iterator_timezone (&schedules); first_time = schedule_iterator_first_time (&schedules); next_time = schedule_iterator_next_time (&schedules); first_time += schedule_iterator_initial_offset (&schedules) - time_offset (timezone, first_time); if (next_time) next_time += schedule_iterator_initial_offset (&schedules) - time_offset (timezone, next_time); /* Duplicate static string because there's an iso_time_tz below. */ abbrev = NULL; iso = g_strdup (iso_time_tz (&first_time, timezone, &abbrev)); period = schedule_iterator_period (&schedules); if (period) { period_minutes = period / 60; period_hours = period_minutes / 60; period_days = period_hours / 24; period_weeks = period_days / 7; } simple_period_unit = ""; if (period == 0) simple_period = 0; else if (period_weeks && (period % (60 * 60 * 24 * 7) == 0)) { simple_period = period_weeks; simple_period_unit = "week"; } else if (period_days && (period % (60 * 60 * 24) == 0)) { simple_period = period_days; simple_period_unit = "day"; } else if (period_hours && (period % (60 * 60) == 0)) { simple_period = period_hours; simple_period_unit = "hour"; } /* The granularity of the "simple" GSA interface stops at hours. */ else simple_period = 0; period_months = schedule_iterator_period_months (&schedules); if (period_months && (period_months < 25)) { simple_period = period_months; simple_period_unit = "month"; } duration = schedule_iterator_duration (&schedules); if (duration) { duration_minutes = duration / 60; duration_hours = duration_minutes / 60; duration_days = duration_hours / 24; duration_weeks = duration_days / 7; } simple_duration_unit = ""; if (duration == 0) simple_duration = 0; else if (duration_weeks && (duration % (60 * 60 * 24 * 7) == 0)) { simple_duration = duration_weeks; simple_duration_unit = "week"; } else if (duration_days && (duration % (60 * 60 * 24) == 0)) { simple_duration = duration_days; simple_duration_unit = "day"; } else if (duration_hours && (duration % (60 * 60) == 0)) { simple_duration = duration_hours; simple_duration_unit = "hour"; } /* The granularity of the "simple" GSA interface stops at hours. */ else simple_duration = 0; SENDF_TO_CLIENT_OR_FAIL ("%s" "%s" "%ld" "%ld" "%i%s" "%ld" "%i%s" "%s" "%s", iso, (next_time == 0 ? "over" : iso_time_tz (&next_time, timezone, NULL)), schedule_iterator_period (&schedules), schedule_iterator_period_months (&schedules), simple_period, simple_period_unit, schedule_iterator_duration (&schedules), simple_duration, simple_duration_unit, schedule_iterator_timezone (&schedules) ? schedule_iterator_timezone (&schedules) : "UTC", abbrev ? abbrev : "UTC"); g_free (iso); if (get_schedules_data->tasks) { iterator_t tasks; SEND_TO_CLIENT_OR_FAIL (""); init_schedule_task_iterator (&tasks, get_iterator_resource (&schedules)); while (next (&tasks)) { SENDF_TO_CLIENT_OR_FAIL ("" "%s", schedule_task_iterator_uuid (&tasks), schedule_task_iterator_name (&tasks)); if (schedule_task_iterator_readable (&tasks)) SEND_TO_CLIENT_OR_FAIL (""); else SEND_TO_CLIENT_OR_FAIL ("" ""); } cleanup_iterator (&tasks); SEND_TO_CLIENT_OR_FAIL (""); } SEND_TO_CLIENT_OR_FAIL (""); count++; } cleanup_iterator (&schedules); filtered = get_schedules_data->get.id ? 1 : schedule_count (&get_schedules_data->get); SEND_GET_END ("schedule", &get_schedules_data->get, count, filtered); } get_schedules_data_reset (get_schedules_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_SETTINGS: { setting_t setting = 0; iterator_t settings; int count, filtered; assert (strcasecmp ("GET_SETTINGS", element_name) == 0); if (user_may ("get_settings") == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_settings", "Permission denied")); get_settings_data_reset (get_settings_data); set_client_state (CLIENT_AUTHENTIC); break; } init_setting_iterator (&settings, get_settings_data->setting_id, get_settings_data->filter, get_settings_data->first, get_settings_data->max, get_settings_data->sort_order, get_settings_data->sort_field); SEND_TO_CLIENT_OR_FAIL (""); SENDF_TO_CLIENT_OR_FAIL ("" "%s" "" "", get_settings_data->filter ? get_settings_data->filter : "", /* Add 1 for 1 indexing. */ get_settings_data->first + 1, get_settings_data->max); count = 0; while (next (&settings)) { SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%s" "%s" "", setting_iterator_uuid (&settings), setting_iterator_name (&settings), setting_iterator_comment (&settings), setting_iterator_value (&settings)); count++; } filtered = setting ? 1 : setting_count (get_settings_data->filter); SENDF_TO_CLIENT_OR_FAIL ("" "%i" "%i" "", filtered, count); cleanup_iterator (&settings); SEND_TO_CLIENT_OR_FAIL (""); get_settings_data_reset (get_settings_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_SLAVES: { assert (strcasecmp ("GET_SLAVES", element_name) == 0); if (get_slaves_data->tasks && get_slaves_data->get.trash) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_slaves", "GET_SLAVES tasks given with trash")); else { iterator_t slaves; int count, filtered, ret, first; INIT_GET (slave, Slave); ret = init_slave_iterator (&slaves, &get_slaves_data->get); if (ret) { switch (ret) { case 1: if (send_find_error_to_client ("get_slaves", "slave", get_slaves_data->get.id, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_slaves", "filter", get_slaves_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_slaves")); break; } get_slaves_data_reset (get_slaves_data); set_client_state (CLIENT_AUTHENTIC); break; } SEND_GET_START ("slave"); while (1) { ret = get_next (&slaves, &get_slaves_data->get, &first, &count, init_slave_iterator); if (ret == 1) break; if (ret == -1) { internal_error_send_to_client (error); return; } SEND_GET_COMMON (slave, &get_slaves_data->get, &slaves); SENDF_TO_CLIENT_OR_FAIL ("%s" "%s" "%s", slave_iterator_host (&slaves), slave_iterator_port (&slaves), slave_iterator_login (&slaves)); if (get_slaves_data->tasks) { iterator_t tasks; SEND_TO_CLIENT_OR_FAIL (""); init_slave_task_iterator (&tasks, get_iterator_resource (&slaves)); while (next (&tasks)) { SENDF_TO_CLIENT_OR_FAIL ("" "%s", slave_task_iterator_uuid (&tasks), slave_task_iterator_name (&tasks)); if (slave_task_iterator_readable (&tasks)) SEND_TO_CLIENT_OR_FAIL (""); else SEND_TO_CLIENT_OR_FAIL ("" ""); } cleanup_iterator (&tasks); SEND_TO_CLIENT_OR_FAIL (""); } SEND_TO_CLIENT_OR_FAIL (""); count++; } cleanup_iterator (&slaves); filtered = get_slaves_data->get.id ? 1 : slave_count (&get_slaves_data->get); SEND_GET_END ("slave", &get_slaves_data->get, count, filtered); } get_slaves_data_reset (get_slaves_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_AGGREGATES: { assert (strcasecmp ("GET_AGGREGATES", element_name) == 0); iterator_t aggregate; const char *type; get_data_t *get; const char *data_column, *group_column; const char *data_column_type, *group_column_type; int ret; GString *xml; double c_sum; long c_count; gchar *sort_field, *filter; int first, max, sort_order; GString *type_many; type = get_aggregates_data->type; if (type == NULL) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_aggregates", "GET_AGGREGATES requires a" " 'type' attribute")); return; } get = &get_aggregates_data->get; INIT_GET (aggregate, Aggregate); data_column = get_aggregates_data->data_column; group_column = get_aggregates_data->group_column; if (group_column == NULL) group_column_type = ""; else if (strcmp (group_column, "severity") == 0) group_column_type = "cvss"; else if (strcmp (group_column, "created") == 0 || strcmp (group_column, "modified") == 0) group_column_type = "unix_time"; else group_column_type = "text"; if (data_column == NULL) data_column_type = ""; else if (strcmp (data_column, "severity") == 0) data_column_type = "cvss"; else if (strcmp (data_column, "created") == 0 || strcmp (data_column, "modified") == 0) data_column_type = "unix_time"; else data_column_type = "decimal"; if (data_column == NULL && group_column == NULL) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_aggregates", "GET_AGGREGATES requires at least one of" " the attributes 'data_column'" " and 'group_column'")); return; } ret = init_aggregate_iterator (&aggregate, type, get, 0 /* distinct */, data_column, group_column, NULL /* extra_tables */, NULL /* extra_where */); switch (ret) { case 0: break; case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_aggregates", "Failed to find resource")); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_aggregates", "Failed to find filter")); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_aggregates", "Invalid data_column")); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_aggregates", "Invalid group_column")); break; case 5: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_aggregates", "Invalid resource type")); break; case 6: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_aggregates", "Trashcan not used by resource type")); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_aggregates", "Permission denied")); break; default: assert (0); /*@fallthrough@*/ case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_aggregates")); break; } if (ret) return; xml = g_string_new (""); g_string_append (xml, ""); if (type) g_string_append_printf (xml, "%s", type); if (data_column) g_string_append_printf (xml, "%s", data_column); if (group_column) g_string_append_printf (xml, "%s", group_column); c_sum = 0.0; c_count = 0L; while (next (&aggregate)) { gchar *value_escaped; if (data_column || group_column == NULL) c_sum += aggregate_iterator_sum (&aggregate); c_count += aggregate_iterator_count (&aggregate); if (group_column) value_escaped = g_markup_escape_text (aggregate_iterator_value (&aggregate), -1); else value_escaped = NULL; if (group_column && data_column) g_string_append_printf (xml, "" "%s" "%d" "%ld" "%g" "%g" "%g" "%g" "%g" "", value_escaped, aggregate_iterator_count (&aggregate), c_count, aggregate_iterator_min (&aggregate), aggregate_iterator_max (&aggregate), aggregate_iterator_mean (&aggregate), aggregate_iterator_sum (&aggregate), c_sum); else if (group_column) g_string_append_printf (xml, "" "%s" "%d" "%ld" "", value_escaped, aggregate_iterator_count (&aggregate), c_count); else g_string_append_printf (xml, "" "%d" "%ld" "%g" "%g" "%g" "%g" "%g" "", aggregate_iterator_count (&aggregate), c_count, aggregate_iterator_min (&aggregate), aggregate_iterator_max (&aggregate), aggregate_iterator_mean (&aggregate), aggregate_iterator_sum (&aggregate), c_sum ); g_free (value_escaped); } g_string_append (xml, ""); if (group_column) { g_string_append_printf (xml, "" "value" "value" "%s" "%s" "%s" "", type, group_column, group_column_type); } g_string_append_printf (xml, "" "count" "count" "%s" "" "integer" "", type); g_string_append_printf (xml, "" "c_count" "c_count" "%s" "" "integer" "", type); if (data_column) { g_string_append_printf (xml, "" "min" "min" "%s" "%s" "%s" "", type, data_column, data_column_type); g_string_append_printf (xml, "" "max" "max" "%s" "%s" "%s" "", type, data_column, data_column_type); g_string_append_printf (xml, "" "mean" "mean" "%s" "%s" "%s" "", type, data_column, data_column_type); g_string_append_printf (xml, "" "sum" "sum" "%s" "%s" "%s" "", type, data_column, data_column_type); g_string_append_printf (xml, "" "c_sum" "c_sum" "%s" "%s" "%s" "", type, data_column, data_column_type); } g_string_append (xml, ""); if (get->filt_id && strcmp (get->filt_id, "0")) { if (get->filter_replacement) filter = g_strdup (get->filter_replacement); else filter = filter_term (get->filt_id); if (filter == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_aggregates", "Failed to find filter")); } else filter = NULL; manage_filter_controls (filter ? filter : get->filter, &first, &max, &sort_field, &sort_order); if (filter || get->filter) { gchar *new_filter; new_filter = manage_clean_filter (filter ? filter : get->filter); g_free (filter); if ((strcmp (type, "task") == 0) && (filter_term_value (new_filter, "apply_overrides") == NULL)) { filter = new_filter; new_filter = g_strdup_printf ("apply_overrides=%i %s", APPLY_OVERRIDES_DEFAULT, filter); g_free (filter); } filter = new_filter; } else filter = manage_clean_filter (""); type_many = g_string_new (type); if (strcmp (type, "info") != 0) g_string_append (type_many, "s"); g_string_append (xml, ""); buffer_get_filter_xml (xml, type, get, filter); g_string_append (xml, ""); SEND_TO_CLIENT_OR_FAIL (xml->str); cleanup_iterator (&aggregate); g_string_free (xml, TRUE); get_aggregates_data_reset (get_aggregates_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_SYSTEM_REPORTS: { int ret; report_type_iterator_t types; assert (strcasecmp ("GET_SYSTEM_REPORTS", element_name) == 0); ret = init_system_report_type_iterator (&types, get_system_reports_data->name, get_system_reports_data->slave_id); switch (ret) { case 1: if (send_find_error_to_client ("get_system_reports", "system report", get_system_reports_data->name, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_system_reports", "slave", get_system_reports_data->slave_id, omp_parser)) { error_send_to_client (error); return; } break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_system_reports", "Permission denied")); break; default: assert (0); /*@fallthrough@*/ case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_system_reports")); break; case 0: case 3: { int report_ret; char *report; SEND_TO_CLIENT_OR_FAIL (""); while (next_report_type (&types)) if (get_system_reports_data->brief && (ret != 3)) SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%s" "", report_type_iterator_name (&types), report_type_iterator_title (&types)); else if ((report_ret = manage_system_report (report_type_iterator_name (&types), get_system_reports_data->duration, get_system_reports_data->slave_id, &report)) && (report_ret != 3)) { cleanup_report_type_iterator (&types); internal_error_send_to_client (error); return; } else if (report) { SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%s" "" "%s" "" "", report_type_iterator_name (&types), report_type_iterator_title (&types), (ret == 3 ? "txt" : "png"), get_system_reports_data->duration ? get_system_reports_data->duration : "86400", report); free (report); } cleanup_report_type_iterator (&types); SEND_TO_CLIENT_OR_FAIL (""); } } get_system_reports_data_reset (get_system_reports_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_TAGS: { iterator_t tags; int ret, count, first, filtered; assert (strcasecmp ("GET_TAGS", element_name) == 0); INIT_GET (tag, Tag); if (get_tags_data->names_only) ret = init_tag_name_iterator (&tags, &get_tags_data->get); else ret = init_tag_iterator (&tags, &get_tags_data->get); if (ret) { switch (ret) { case 1: if (send_find_error_to_client ("get_tags", "tag", get_tags_data->get.id, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_tags", "filter", get_tags_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } break; default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_tags")); } get_tags_data_reset (get_tags_data); set_client_state (CLIENT_AUTHENTIC); break; } SEND_GET_START ("tag"); while (1) { ret = get_next (&tags, &get_tags_data->get, &first, &count, get_tags_data->names_only ? init_tag_name_iterator : init_tag_iterator); if (ret == 1) break; if (ret == -1) { internal_error_send_to_client (error); return; } if (get_tags_data->names_only) SENDF_TO_CLIENT_OR_FAIL ("" "%s" "", tag_name_iterator_name (&tags)); else { gchar* value; value = g_markup_escape_text (tag_iterator_value (&tags), -1); SEND_GET_COMMON (tag, &get_tags_data->get, &tags); SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%s" "%d", tag_iterator_resource_uuid (&tags), tag_iterator_resource_type (&tags), tag_iterator_resource_name (&tags), tag_iterator_resource_location (&tags)); if (tag_iterator_resource_readable (&tags) == 0) SENDF_TO_CLIENT_OR_FAIL (""); SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%d" "%d" "", value, tag_iterator_active (&tags), tag_iterator_orphan (&tags)); g_free (value); } count++; } cleanup_iterator (&tags); filtered = get_tags_data->get.id ? 1 : tag_count (&get_tags_data->get); SEND_GET_END ("tag", &get_tags_data->get, count, filtered); get_tags_data_reset (get_tags_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_TARGETS: { assert (strcasecmp ("GET_TARGETS", element_name) == 0); if (get_targets_data->tasks && get_targets_data->get.trash) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_target", "GET_TARGETS tasks given with trash")); else { iterator_t targets; int count, filtered, ret, first; INIT_GET (target, Target); ret = init_target_iterator (&targets, &get_targets_data->get); if (ret) { switch (ret) { case 1: if (send_find_error_to_client ("get_targets", "target", get_targets_data->get.id, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_targets", "filter", get_targets_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_targets")); break; } get_targets_data_reset (get_targets_data); set_client_state (CLIENT_AUTHENTIC); break; } SEND_GET_START ("target"); while (1) { char *ssh_lsc_name, *ssh_lsc_uuid, *smb_lsc_name, *smb_lsc_uuid; char *esxi_lsc_name, *esxi_lsc_uuid; const char *port_list_uuid, *port_list_name, *ssh_port; const char *hosts, *exclude_hosts, *reverse_lookup_only; const char *reverse_lookup_unify; lsc_credential_t ssh_credential, smb_credential; lsc_credential_t esxi_credential; int port_list_trash, max_hosts, port_list_available; int ssh_lsc_credential_available; int smb_lsc_credential_available; int esxi_lsc_credential_available; ret = get_next (&targets, &get_targets_data->get, &first, &count, init_target_iterator); if (ret == 1) break; if (ret == -1) { internal_error_send_to_client (error); return; } ssh_credential = target_iterator_ssh_credential (&targets); smb_credential = target_iterator_smb_credential (&targets); esxi_credential = target_iterator_esxi_credential (&targets); ssh_lsc_credential_available = 1; if (get_targets_data->get.trash && target_iterator_ssh_trash (&targets)) { ssh_lsc_name = trash_lsc_credential_name (ssh_credential); ssh_lsc_uuid = trash_lsc_credential_uuid (ssh_credential); ssh_lsc_credential_available = trash_lsc_credential_readable (ssh_credential); } else if (ssh_credential) { lsc_credential_t found; ssh_lsc_name = lsc_credential_name (ssh_credential); ssh_lsc_uuid = lsc_credential_uuid (ssh_credential); if (find_lsc_credential_with_permission (ssh_lsc_uuid, &found, "get_lsc_credentials")) abort (); ssh_lsc_credential_available = (found > 0); } else { ssh_lsc_name = NULL; ssh_lsc_uuid = NULL; } smb_lsc_credential_available = 1; if (get_targets_data->get.trash && target_iterator_smb_trash (&targets)) { smb_lsc_name = trash_lsc_credential_name (smb_credential); smb_lsc_uuid = trash_lsc_credential_uuid (smb_credential); smb_lsc_credential_available = trash_lsc_credential_readable (smb_credential); } else if (smb_credential) { lsc_credential_t found; smb_lsc_name = lsc_credential_name (smb_credential); smb_lsc_uuid = lsc_credential_uuid (smb_credential); if (find_lsc_credential_with_permission (smb_lsc_uuid, &found, "get_lsc_credentials")) abort (); smb_lsc_credential_available = (found > 0); } else { smb_lsc_name = NULL; smb_lsc_uuid = NULL; } esxi_lsc_credential_available = 1; if (get_targets_data->get.trash && target_iterator_esxi_trash (&targets)) { esxi_lsc_name = trash_lsc_credential_name (esxi_credential); esxi_lsc_uuid = trash_lsc_credential_uuid (esxi_credential); esxi_lsc_credential_available = trash_lsc_credential_readable (esxi_credential); } else if (esxi_credential) { lsc_credential_t found; esxi_lsc_name = lsc_credential_name (esxi_credential); esxi_lsc_uuid = lsc_credential_uuid (esxi_credential); if (find_lsc_credential_with_permission (esxi_lsc_uuid, &found, "get_lsc_credentials")) abort (); esxi_lsc_credential_available = (found > 0); } else { esxi_lsc_name = NULL; esxi_lsc_uuid = NULL; } port_list_uuid = target_iterator_port_list_uuid (&targets); port_list_name = target_iterator_port_list_name (&targets); port_list_trash = target_iterator_port_list_trash (&targets); ssh_port = target_iterator_ssh_port (&targets); port_list_available = 1; if (port_list_trash) port_list_available = trash_port_list_readable_uuid (port_list_uuid); else if (port_list_uuid) { port_list_t found; if (find_port_list_with_permission (port_list_uuid, &found, "get_port_lists")) abort (); port_list_available = (found > 0); } SEND_GET_COMMON (target, &get_targets_data->get, &targets); hosts = target_iterator_hosts (&targets); exclude_hosts = target_iterator_exclude_hosts (&targets); max_hosts = manage_count_hosts (hosts, exclude_hosts); reverse_lookup_only = target_iterator_reverse_lookup_only (&targets); reverse_lookup_unify = target_iterator_reverse_lookup_unify (&targets); SENDF_TO_CLIENT_OR_FAIL ("%s" "%s" "%i" "" "%s" "%i", hosts, exclude_hosts ? exclude_hosts : "", max_hosts, port_list_uuid ? port_list_uuid : "", port_list_name ? port_list_name : "", port_list_trash); if (port_list_available == 0) SEND_TO_CLIENT_OR_FAIL (""); SENDF_TO_CLIENT_OR_FAIL ("" "" "%s" "%s" "%i", ssh_lsc_uuid ? ssh_lsc_uuid : "", ssh_lsc_name ? ssh_lsc_name : "", ssh_port ? ssh_port : "", (get_targets_data->get.trash && target_iterator_ssh_trash (&targets))); if (ssh_lsc_credential_available == 0) SEND_TO_CLIENT_OR_FAIL (""); SENDF_TO_CLIENT_OR_FAIL ("" "" "%s" "%i", smb_lsc_uuid ? smb_lsc_uuid : "", smb_lsc_name ? smb_lsc_name : "", (get_targets_data->get.trash && target_iterator_smb_trash (&targets))); if (smb_lsc_credential_available == 0) SEND_TO_CLIENT_OR_FAIL (""); SENDF_TO_CLIENT_OR_FAIL ("" "" "%s" "%i", esxi_lsc_uuid ? esxi_lsc_uuid : "", esxi_lsc_name ? esxi_lsc_name : "", (get_targets_data->get.trash && target_iterator_esxi_trash (&targets))); if (esxi_lsc_credential_available == 0) SEND_TO_CLIENT_OR_FAIL (""); SENDF_TO_CLIENT_OR_FAIL ("" "" "%s" "" "" "%s" "" "%s", reverse_lookup_only, reverse_lookup_unify, target_iterator_alive_tests (&targets)); if (get_targets_data->get.details) SENDF_TO_CLIENT_OR_FAIL ("%s", target_port_range (get_iterator_resource (&targets))); if (get_targets_data->tasks) { iterator_t tasks; SEND_TO_CLIENT_OR_FAIL (""); init_target_task_iterator (&tasks, get_iterator_resource (&targets)); while (next (&tasks)) { if (target_task_iterator_readable (&tasks) == 0) /* Only show tasks the user may see. */ continue; SENDF_TO_CLIENT_OR_FAIL ("" "%s", target_task_iterator_uuid (&tasks), target_task_iterator_name (&tasks)); if (target_task_iterator_readable (&tasks)) SEND_TO_CLIENT_OR_FAIL (""); else SEND_TO_CLIENT_OR_FAIL ("" ""); } cleanup_iterator (&tasks); SEND_TO_CLIENT_OR_FAIL (""); } SEND_TO_CLIENT_OR_FAIL (""); count++; free (ssh_lsc_name); free (ssh_lsc_uuid); free (smb_lsc_name); free (smb_lsc_uuid); } cleanup_iterator (&targets); filtered = get_targets_data->get.id ? 1 : target_count (&get_targets_data->get); SEND_GET_END ("target", &get_targets_data->get, count, filtered); } get_targets_data_reset (get_targets_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_TASKS: { iterator_t tasks; int count, filtered, ret, first, apply_overrides, min_qod; get_data_t * get; gchar *overrides, *min_qod_str, *filter, *clean_filter; assert (strcasecmp ("GET_TASKS", element_name) == 0); if (get_tasks_data->get.details && get_tasks_data->get.trash) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("get_task", "GET_TASKS details given with trash")); get_tasks_data_reset (get_tasks_data); set_client_state (CLIENT_AUTHENTIC); break; } INIT_GET (task, Task); ret = init_task_iterator (&tasks, &get_tasks_data->get); if (ret) { switch (ret) { case 1: if (send_find_error_to_client ("get_tasks", "task", get_tasks_data->get.id, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_tasks", "task", get_tasks_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_tasks")); break; } get_tasks_data_reset (get_tasks_data); set_client_state (CLIENT_AUTHENTIC); break; } SEND_GET_START ("task"); get = &get_tasks_data->get; if (get->filt_id && strcmp (get->filt_id, "0")) { filter = filter_term (get->filt_id); if (filter == NULL) { error_send_to_client (error); return; } } else filter = NULL; clean_filter = manage_clean_filter (filter ? filter : get->filter); overrides = filter_term_value (clean_filter, "apply_overrides"); min_qod_str = filter_term_value (clean_filter, "min_qod"); min_qod = min_qod_str ? atoi (min_qod_str) : QOD_DEFAULT; g_free (clean_filter); apply_overrides = overrides ? strcmp (overrides, "0") : APPLY_OVERRIDES_DEFAULT; g_free (overrides); g_free (min_qod_str); SENDF_TO_CLIENT_OR_FAIL ("%i", apply_overrides); min_qod_str = g_strdup_printf ("%d", min_qod); while (1) { task_t index; gchar *progress_xml; target_t target; slave_t slave; scanner_t scanner; const char *first_report_id, *last_report_id; char *config_name, *config_uuid; char *task_target_uuid, *task_target_name; char *task_slave_uuid, *task_slave_name; char *task_schedule_uuid, *task_schedule_name; char *task_scanner_uuid, *task_scanner_name; gchar *first_report, *last_report; gchar *second_last_report_id, *second_last_report; gchar *current_report; report_t running_report; schedule_t schedule; time_t next_time; char *owner, *observers; int target_in_trash, schedule_in_trash; int debugs, holes = 0, infos = 0, logs, warnings = 0; int holes_2, infos_2, warnings_2; int false_positives, task_scanner_type, slave_available; int schedule_available, target_available, config_available; int scanner_available; double severity = 0, severity_2; gchar *response; iterator_t alerts, groups, roles; gchar *in_assets, *max_checks, *max_hosts, *source_iface; gchar *auto_delete, *auto_delete_data; ret = get_next (&tasks, &get_tasks_data->get, &first, &count, init_task_iterator); if (ret == 1) break; if (ret == -1) { internal_error_send_to_client (error); return; } index = get_iterator_resource (&tasks); target = task_target (index); slave = task_slave (index); SEND_GET_COMMON (task, &get_tasks_data->get, &tasks); target_in_trash = task_target_in_trash (index); if ((target == 0) && (task_iterator_run_status (&tasks) == TASK_STATUS_RUNNING)) { progress_xml = g_strdup_printf ("%i", task_upload_progress (index)); running_report = 0; } else { int progress; gchar *host_xml; running_report = task_iterator_current_report (&tasks); progress = report_progress (running_report, index, &host_xml); progress_xml = g_strdup_printf ("%i%s", progress, host_xml); g_free (host_xml); } if (running_report) { gchar *timestamp; char *scan_end, *current_report_id; current_report_id = report_uuid (running_report); if (report_timestamp (current_report_id, ×tamp)) g_error ("%s: GET_TASKS: error getting timestamp of report," " aborting", __FUNCTION__); scan_end = scan_end_time_uuid (current_report_id), current_report = g_strdup_printf ("" "" "" "%s" "" "%s" "" "", current_report_id, timestamp, scan_end); free (current_report_id); free (scan_end); g_free (timestamp); } else current_report = g_strdup (""); first_report_id = task_iterator_first_report (&tasks); if (first_report_id) { gchar *timestamp; char *scan_end; // TODO Could skip this count for tasks page. if (report_counts (first_report_id, &debugs, &holes_2, &infos_2, &logs, &warnings_2, &false_positives, &severity_2, apply_overrides, 0, min_qod)) g_error ("%s: GET_TASKS: error getting counts for first" " report, aborting", __FUNCTION__); if (report_timestamp (first_report_id, ×tamp)) g_error ("%s: GET_TASKS: failed to get timestamp of first" " report, aborting", __FUNCTION__); scan_end = scan_end_time_uuid (first_report_id), first_report = g_strdup_printf ("" "" "" "%s" "" "%s" "" "%i" "%i" "%i" "%i" "%i" "" "%i" "" "" "%1.1f" "" "", first_report_id, timestamp, scan_end, debugs, holes_2, infos_2, logs, warnings_2, false_positives, severity_2); free (scan_end); g_free (timestamp); } else first_report = g_strdup (""); second_last_report_id = task_second_last_report_id (index); if (second_last_report_id) { gchar *timestamp; char *scan_end; /* If the first report is the second last report then skip * doing the count again. */ if (((first_report_id == NULL) || (strcmp (second_last_report_id, first_report_id))) && report_counts (second_last_report_id, &debugs, &holes_2, &infos_2, &logs, &warnings_2, &false_positives, &severity_2, apply_overrides, 0, min_qod)) g_error ("%s: GET_TASKS: error getting counts for second" " report, aborting", __FUNCTION__); if (report_timestamp (second_last_report_id, ×tamp)) g_error ("%s: GET_TASKS: error getting timestamp of second" " report, aborting", __FUNCTION__); scan_end = scan_end_time_uuid (second_last_report_id), second_last_report = g_strdup_printf ("" "" "%s" "%s" "" "%i" "%i" "%i" "%i" "%i" "" "%i" "" "" "%1.1f" "" "", second_last_report_id, timestamp, scan_end, debugs, holes_2, infos_2, logs, warnings_2, false_positives, severity_2); free (scan_end); g_free (timestamp); } else second_last_report = g_strdup (""); last_report_id = task_iterator_last_report (&tasks); if (last_report_id) { gchar *timestamp; char *scan_end; /* If the last report is the first report or the second * last report, then reuse the counts from before. */ if ((first_report_id == NULL) || (second_last_report_id == NULL) || (strcmp (last_report_id, first_report_id) && strcmp (last_report_id, second_last_report_id))) { if (report_counts (last_report_id, &debugs, &holes, &infos, &logs, &warnings, &false_positives, &severity, apply_overrides, 0, min_qod)) g_error ("%s: GET_TASKS: error getting counts for last" " report, aborting", __FUNCTION__); } else { holes = holes_2; infos = infos_2; warnings = warnings_2; severity = severity_2; } if (report_timestamp (last_report_id, ×tamp)) g_error ("%s: GET_TASKS: error getting timestamp for last" " report, aborting", __FUNCTION__); scan_end = scan_end_time_uuid (last_report_id); last_report = g_strdup_printf ("" "" "%s" "%s" "" "%i" "%i" "%i" "%i" "%i" "" "%i" "" "" "%1.1f" "" "", last_report_id, timestamp, scan_end, debugs, holes, infos, logs, warnings, false_positives, severity); free (scan_end); g_free (timestamp); } else last_report = g_strdup (""); g_free (second_last_report_id); owner = task_owner_name (index); observers = task_observers (index); config_name = task_config_name (index); config_uuid = task_config_uuid (index); target_available = 1; if (target_in_trash) { task_target_uuid = trash_target_uuid (target); task_target_name = trash_target_name (target); target_available = trash_target_readable (target); } else if (target) { target_t found; task_target_uuid = target_uuid (target); task_target_name = target_name (target); if (find_target_with_permission (task_target_uuid, &found, "get_targets")) g_error ("%s: GET_TASKS: error finding task target," " aborting", __FUNCTION__); target_available = (found > 0); } else { task_target_uuid = NULL; task_target_name = NULL; } config_available = 1; if (task_config_in_trash (index)) config_available = trash_config_readable_uuid (config_uuid); else if (config_uuid) { config_t found; if (find_config_with_permission (config_uuid, &found, "get_configs")) g_error ("%s: GET_TASKS: error finding task config," " aborting", __FUNCTION__); config_available = (found > 0); } slave_available = 1; if (task_slave_in_trash (index)) { task_slave_uuid = trash_slave_uuid (slave); task_slave_name = trash_slave_name (slave); slave_available = trash_slave_readable (slave); } else if (slave) { slave_t found; task_slave_uuid = slave_uuid (slave); task_slave_name = slave_name (slave); if (find_slave_with_permission (task_slave_uuid, &found, "get_slaves")) g_error ("%s: GET_TASKS: error finding task slave," " aborting", __FUNCTION__); slave_available = (found > 0); } else { task_slave_uuid = g_strdup (""); task_slave_name = g_strdup (""); } schedule_available = 1; schedule = task_schedule (index); if (schedule) { schedule_in_trash = task_schedule_in_trash (index); if (schedule_in_trash) { task_schedule_uuid = schedule_uuid (schedule); task_schedule_name = schedule_name (schedule); schedule_available = trash_schedule_readable (slave); } else { schedule_t found; task_schedule_uuid = schedule_uuid (schedule); task_schedule_name = schedule_name (schedule); if (find_schedule_with_permission (task_schedule_uuid, &found, "get_schedules")) g_error ("%s: GET_TASKS: error finding task schedule," " aborting", __FUNCTION__); schedule_available = (found > 0); } } else { task_schedule_uuid = (char*) g_strdup (""); task_schedule_name = (char*) g_strdup (""); schedule_in_trash = 0; } scanner_available = 1; scanner = task_scanner (index); // FIX trash case? if (scanner) { schedule_t found; task_scanner_uuid = scanner_uuid (scanner); task_scanner_name = scanner_name (scanner); task_scanner_type = scanner_type (scanner); if (find_scanner_with_permission (task_scanner_uuid, &found, "get_scanners")) g_error ("%s: GET_TASKS: error finding task scanner," " aborting", __FUNCTION__); scanner_available = (found > 0); } else { /* Container tasks have no associated scanner. */ task_scanner_uuid = g_strdup (""); task_scanner_name = g_strdup (""); task_scanner_type = 0; } next_time = task_schedule_next_time_tz (index); scanner = task_iterator_scanner (&tasks); response = g_strdup_printf ("%i" "" "%s" "%i" "%i" "%s" "" "" "%s" "%i" "%s" "" "%s" "" "%s" "%d" "%s" "" "" "%s" "%i" "%s" "" "%s" "%s" "" "%u%u" "" "%s" "" "%s" "%s" "%i" "%s" "" "%i" "%s%s%s%s", get_tasks_data->get.trash ? 0 : task_alterable (index), config_uuid ?: "", config_name ?: "", config_type (task_config (index)), task_config_in_trash (index), config_available ? "" : "", task_target_uuid ?: "", task_target_name ?: "", target_in_trash, target_available ? "" : "", task_iterator_hosts_ordering (&tasks), task_scanner_uuid, task_scanner_name, task_scanner_type, scanner_available ? "" : "", task_slave_uuid ?: "", task_slave_name ?: "", task_slave_in_trash (index), slave_available ? "" : "", task_iterator_run_status_name (&tasks), progress_xml, task_iterator_total_reports (&tasks), task_iterator_finished_reports (&tasks), task_iterator_trend_counts (&tasks, holes, warnings, infos, severity, holes_2, warnings_2, infos_2, severity_2), task_schedule_uuid, task_schedule_name, (next_time == 0 ? "over" : iso_time (&next_time)), schedule_in_trash, schedule_available ? "" : "", task_schedule_periods (index), current_report, first_report, last_report, second_last_report); g_free (config_name); g_free (config_uuid); free (task_target_name); free (task_target_uuid); g_free (progress_xml); g_free (current_report); g_free (first_report); g_free (last_report); g_free (second_last_report); g_free (task_schedule_uuid); g_free (task_schedule_name); g_free (task_scanner_uuid); g_free (task_scanner_name); free (task_slave_uuid); free (task_slave_name); if (send_to_client (response, write_to_client, write_to_client_data)) { g_free (response); cleanup_iterator (&tasks); error_send_to_client (error); cleanup_iterator (&tasks); return; } g_free (response); SENDF_TO_CLIENT_OR_FAIL ("%s", ((owner == NULL) || (strcmp (owner, current_credentials.username))) ? "" : observers); free (owner); free (observers); init_task_group_iterator (&groups, index); while (next (&groups)) SENDF_TO_CLIENT_OR_FAIL ("" "%s" "", task_group_iterator_uuid (&groups), task_group_iterator_name (&groups)); cleanup_iterator (&groups); init_task_role_iterator (&roles, index); while (next (&roles)) SENDF_TO_CLIENT_OR_FAIL ("" "%s" "", task_role_iterator_uuid (&roles), task_role_iterator_name (&roles)); cleanup_iterator (&roles); SENDF_TO_CLIENT_OR_FAIL (""); init_task_alert_iterator (&alerts, index, 0); while (next (&alerts)) { alert_t found; if (find_alert_with_permission (task_alert_iterator_uuid (&alerts), &found, "get_alerts")) abort (); SENDF_TO_CLIENT_OR_FAIL ("" "%s", task_alert_iterator_uuid (&alerts), task_alert_iterator_name (&alerts)); if (found) SENDF_TO_CLIENT_OR_FAIL (""); else SENDF_TO_CLIENT_OR_FAIL ("" ""); } cleanup_iterator (&alerts); if (get_tasks_data->get.details) { /* The detailed version. */ /** @todo Handle error cases. * * The errors are either SQL errors or out of space in * buffer errors. Both should probably just lead to aborts * at the SQL or buffer output level. */ send_reports (index, apply_overrides, min_qod, write_to_client, write_to_client_data); } SENDF_TO_CLIENT_OR_FAIL ("%i", task_result_count (index, min_qod)); in_assets = task_preference_value (index, "in_assets"); max_checks = task_preference_value (index, "max_checks"); max_hosts = task_preference_value (index, "max_hosts"); source_iface = task_preference_value (index, "source_iface"); auto_delete = task_preference_value (index, "auto_delete"); auto_delete_data = task_preference_value (index, "auto_delete_data"); SENDF_TO_CLIENT_OR_FAIL ("" "" "" "Maximum concurrently executed NVTs per host" "" "max_checks" "%s" "" "" "" "Maximum concurrently scanned hosts" "" "max_hosts" "%s" "" "" "" "Network Source Interface" "" "source_iface" "%s" "" "" "" "Add results to Asset Management" "" "in_assets" "%s" "" "" "" "Auto Delete Reports" "" "auto_delete" "%s" "" "" "" "Auto Delete Reports Data" "" "auto_delete_data" "%s" "" "" "", max_checks ? max_checks : "4", max_hosts ? max_hosts : "20", source_iface ? source_iface : "", in_assets ? in_assets : "yes", auto_delete ? auto_delete : "0", auto_delete_data ? auto_delete_data : "0"); g_free (in_assets); g_free (max_checks); g_free (max_hosts); g_free (source_iface); count++; } cleanup_iterator (&tasks); filtered = get_tasks_data->get.id ? 1 : task_count (&get_tasks_data->get); SEND_GET_END ("task", &get_tasks_data->get, count, filtered); } get_tasks_data_reset (get_tasks_data); set_client_state (CLIENT_AUTHENTIC); break; case CLIENT_GET_USERS: { iterator_t users; int count, filtered, ret, first; assert (strcasecmp ("GET_USERS", element_name) == 0); INIT_GET (user, User); ret = init_user_iterator (&users, &get_users_data->get); if (ret) { switch (ret) { case 1: if (send_find_error_to_client ("get_users", "user", get_users_data->get.id, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("get_users", "user", get_users_data->get.filt_id, omp_parser)) { error_send_to_client (error); return; } break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("get_users")); break; } get_users_data_reset (get_users_data); set_client_state (CLIENT_AUTHENTIC); break; } SEND_GET_START ("user"); while (1) { iterator_t groups, roles; const char *hosts, *ifaces; int hosts_allow, ifaces_allow; ret = get_next (&users, &get_users_data->get, &first, &count, init_user_iterator); if (ret == 1) break; if (ret == -1) { internal_error_send_to_client (error); return; } SEND_GET_COMMON (user, &get_users_data->get, &users); hosts = user_iterator_hosts (&users); hosts_allow = user_iterator_hosts_allow (&users); SENDF_TO_CLIENT_OR_FAIL ("%s" "%s", hosts_allow, hosts ? hosts : "", user_iterator_method (&users) ? user_iterator_method (&users) : "file"); /* Interfaces Access */ ifaces = user_iterator_ifaces (&users); ifaces_allow = user_iterator_ifaces_allow (&users); SENDF_TO_CLIENT_OR_FAIL ("%s", ifaces_allow, ifaces ? ifaces : ""); /* User Roles */ init_user_role_iterator (&roles, get_iterator_resource (&users)); while (next (&roles)) { SENDF_TO_CLIENT_OR_FAIL ("" "%s", user_role_iterator_uuid (&roles), user_role_iterator_name (&roles)); if (user_role_iterator_readable (&roles)) SEND_TO_CLIENT_OR_FAIL (""); else SEND_TO_CLIENT_OR_FAIL ("" ""); } cleanup_iterator (&roles); SEND_TO_CLIENT_OR_FAIL (""); init_user_group_iterator (&groups, get_iterator_resource (&users)); while (next (&groups)) { SENDF_TO_CLIENT_OR_FAIL ("" "%s", user_group_iterator_uuid (&groups), user_group_iterator_name (&groups)); if (user_group_iterator_readable (&groups)) SEND_TO_CLIENT_OR_FAIL (""); else SEND_TO_CLIENT_OR_FAIL ("" ""); } cleanup_iterator (&groups); SEND_TO_CLIENT_OR_FAIL ("" ""); count++; } cleanup_iterator (&users); filtered = get_users_data->get.id ? 1 : user_count (&get_users_data->get); SEND_GET_END ("user", &get_users_data->get, count, filtered); get_users_data_reset (get_users_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_GET_VERSION: case CLIENT_GET_VERSION_AUTHENTIC: SEND_TO_CLIENT_OR_FAIL ("" "" OMP_VERSION "" ""); if (client_state == CLIENT_GET_VERSION_AUTHENTIC) set_client_state (CLIENT_AUTHENTIC); else set_client_state (CLIENT_TOP); break; case CLIENT_HELP: if (user_may ("help") == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("help", "Permission denied")); help_data_reset (help_data); set_client_state (CLIENT_AUTHENTIC); break; } if (help_data->format == NULL || (strcmp (help_data->format, "text") == 0)) { command_t *commands; SEND_TO_CLIENT_OR_FAIL ("\n"); commands = omp_commands; while ((*commands).name) { if (command_disabled (omp_parser, (*commands).name) == 0) { int count; SENDF_TO_CLIENT_OR_FAIL (" %s", (*commands).name); for (count = 23 - strlen ((*commands).name); count > 0; count--) SEND_TO_CLIENT_OR_FAIL (" "); SENDF_TO_CLIENT_OR_FAIL ("%s\n", (*commands).summary); } commands++; } SEND_TO_CLIENT_OR_FAIL (""); } else if (help_data->type && (strcmp (help_data->type, "brief") == 0)) { command_t *commands; SEND_TO_CLIENT_OR_FAIL ("\n" ""); commands = omp_commands; while ((*commands).name) { if ((command_disabled (omp_parser, (*commands).name) == 0) && ((current_credentials.uuid == NULL) || user_may ((*commands).name))) SENDF_TO_CLIENT_OR_FAIL ("" "%s" "%s" "", (*commands).name, (*commands).summary); commands++; } SEND_TO_CLIENT_OR_FAIL ("" ""); } else { gchar *extension, *content_type, *output; gsize output_len; switch (manage_schema (help_data->format, &output, &output_len, &extension, &content_type)) { case 0: break; case 1: assert (help_data->format); if (send_find_error_to_client ("help", "schema_format", help_data->format, omp_parser)) { error_send_to_client (error); return; } help_data_reset (help_data); set_client_state (CLIENT_AUTHENTIC); return; break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("help", "Brief help is only available in XML.")); help_data_reset (help_data); set_client_state (CLIENT_AUTHENTIC); return; break; default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("help")); help_data_reset (help_data); set_client_state (CLIENT_AUTHENTIC); return; break; } SENDF_TO_CLIENT_OR_FAIL ("" "", help_data->format ? help_data->format : "XML", extension, content_type); g_free (extension); g_free (content_type); if (output && strlen (output)) { /* Encode and send the output. */ if (help_data->format && strcasecmp (help_data->format, "XML")) { gchar *base64; base64 = g_base64_encode ((guchar*) output, output_len); if (send_to_client (base64, write_to_client, write_to_client_data)) { g_free (output); g_free (base64); error_send_to_client (error); return; } g_free (base64); } else { /* Special case the XML schema, bah. */ if (send_to_client (output, write_to_client, write_to_client_data)) { g_free (output); error_send_to_client (error); return; } } } g_free (output); SEND_TO_CLIENT_OR_FAIL ("" ""); } help_data_reset (help_data); set_client_state (CLIENT_AUTHENTIC); break; case CLIENT_CREATE_AGENT: { agent_t agent; assert (strcasecmp ("CREATE_AGENT", element_name) == 0); if (create_agent_data->copy) switch (copy_agent (create_agent_data->name, create_agent_data->comment, create_agent_data->copy, &agent)) { case 0: { char *uuid; uuid = agent_uuid (agent); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_agent"), uuid); log_event ("agent", "Agent", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_agent", "Agent exists already")); log_event_fail ("agent", "Agent", NULL, "created"); break; case 2: if (send_find_error_to_client ("create_agent", "agent", create_agent_data->copy, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("agent", "Agent", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_agent", "Permission denied")); log_event_fail ("agent", "Agent", NULL, "created"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_agent")); log_event_fail ("agent", "Agent", NULL, "created"); break; } else if (create_agent_data->name == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_agent", "CREATE_AGENT requires a NAME")); else if (strlen (create_agent_data->name) == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_agent", "CREATE_AGENT name must be at" " least one character long")); } else if (strlen (create_agent_data->installer) == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_agent", "CREATE_AGENT installer must be at" " least one byte long")); } else switch (create_agent (create_agent_data->name, create_agent_data->comment, create_agent_data->installer, create_agent_data->installer_filename, create_agent_data->installer_signature, create_agent_data->howto_install, create_agent_data->howto_use, &agent)) { case 0: { char *uuid; uuid = agent_uuid (agent); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_agent"), uuid); log_event ("agent", "Agent", uuid, "created"); g_free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_agent", "Agent exists already")); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_agent", "Name may only contain alphanumeric" " characters")); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_agent", "Permission denied")); break; default: assert (0); case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_agent")); break; } create_agent_data_reset (create_agent_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_CREATE_AGENT, COMMENT); CLOSE (CLIENT_CREATE_AGENT, COPY); CLOSE (CLIENT_CREATE_AGENT, HOWTO_INSTALL); CLOSE (CLIENT_CREATE_AGENT, HOWTO_USE); CLOSE (CLIENT_CREATE_AGENT, INSTALLER); CLOSE (CLIENT_CREATE_AGENT_INSTALLER, FILENAME); CLOSE (CLIENT_CREATE_AGENT_INSTALLER, SIGNATURE); CLOSE (CLIENT_CREATE_AGENT, NAME); case CLIENT_CREATE_CONFIG: { config_t new_config; assert (strcasecmp ("CREATE_CONFIG", element_name) == 0); assert (import_config_data->import || (create_config_data->name != NULL)); /* For now the import element, GET_CONFIGS_RESPONSE, overrides * any other elements. */ if (import_config_data->import) { char *name; array_terminate (import_config_data->nvt_selectors); array_terminate (import_config_data->preferences); switch (create_config (import_config_data->name, import_config_data->comment, import_config_data->nvt_selectors, import_config_data->preferences, import_config_data->type, &new_config, &name)) { case 0: { gchar *uuid = config_uuid (new_config); SENDF_TO_CLIENT_OR_FAIL ("" /* This is a hack for the GSA, which should really * do a GET_CONFIG with the ID to get the name. */ "%s" "", uuid, uuid, name); log_event ("config", "Scan config", uuid, "created"); g_free (uuid); free (name); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_config", "Config exists already")); log_event_fail ("config", "Scan config", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_config", "Permission denied")); log_event_fail ("config", "Scan config", NULL, "created"); break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_config")); log_event_fail ("config", "Scan config", NULL, "created"); break; case -2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_config", "CREATE_CONFIG import name must be at" " least one character long")); log_event_fail ("config", "Scan config", NULL, "created"); break; case -3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_config", "Error in NVT_SELECTORS element.")); log_event_fail ("config", "Scan config", NULL, "created"); break; case -4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_config", "Error in PREFERENCES element.")); log_event_fail ("config", "Scan config", NULL, "created"); break; } } else if (create_config_data->scanner) { char *uuid = NULL; switch (create_config_from_scanner (create_config_data->scanner, create_config_data->name, create_config_data->comment, &uuid)) { case 0: SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_config"), uuid); log_event ("config", "Scan config", uuid, "created"); break; case 1: SENDF_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_config", "Failed to find scanner")); break; case 2: SENDF_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_config", "Scanner not of type OSP")); break; case 3: SENDF_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_config", "Config name exists already")); break; case 4: SENDF_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_config", "Failed to get params from scanner" " - the scanner may be offline or not" " configured correctly")); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_config", "Permission denied")); log_event_fail ("config", "Scan config", NULL, "created"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_config")); log_event_fail ("config", "Scan config", NULL, "created"); break; } g_free (uuid); } else if (strlen (create_config_data->name) == 0 && (create_config_data->copy == NULL || strlen (create_config_data->copy) == 0)) { log_event_fail ("config", "Scan config", NULL, "created"); SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_config", "CREATE_CONFIG name and base config to copy" " must be at least one character long")); } else if (create_config_data->copy == NULL) { log_event_fail ("config", "Scan config", NULL, "created"); SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_config", "CREATE_CONFIG requires a COPY element")); } else switch (copy_config (create_config_data->name, create_config_data->comment, create_config_data->copy, &new_config)) { case 0: { char *uuid = config_uuid (new_config); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_config"), uuid); log_event ("config", "Scan config", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_config", "Config exists already")); log_event_fail ("config", "Scan config", NULL, "created"); break; case 2: if (send_find_error_to_client ("create_config", "config", create_config_data->copy, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("config", "Config", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_config", "Permission denied")); log_event_fail ("config", "Scan config", NULL, "created"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_config")); log_event_fail ("config", "Scan config", NULL, "created"); break; } create_config_data_reset (create_config_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_CREATE_CONFIG, COMMENT); CLOSE (CLIENT_CREATE_CONFIG, COPY); CLOSE (CLIENT_CREATE_CONFIG, SCANNER); CLOSE (CLIENT_CREATE_CONFIG, NAME); case CLIENT_C_C_GCR: assert (strcasecmp ("GET_CONFIGS_RESPONSE", element_name) == 0); set_client_state (CLIENT_CREATE_CONFIG); break; CLOSE (CLIENT_C_C_GCR, CONFIG); CLOSE (CLIENT_C_C_GCR_CONFIG, COMMENT); CLOSE (CLIENT_C_C_GCR_CONFIG, NAME); CLOSE (CLIENT_C_C_GCR_CONFIG, NVT_SELECTORS); case CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS_NVT_SELECTOR: { int include; assert (strcasecmp ("NVT_SELECTOR", element_name) == 0); if (import_config_data->nvt_selector_include && strcmp (import_config_data->nvt_selector_include, "0") == 0) include = 0; else include = 1; array_add (import_config_data->nvt_selectors, nvt_selector_new (import_config_data->nvt_selector_name, import_config_data->nvt_selector_type, include, import_config_data->nvt_selector_family_or_nvt)); import_config_data->nvt_selector_name = NULL; import_config_data->nvt_selector_type = NULL; free (import_config_data->nvt_selector_include); import_config_data->nvt_selector_include = NULL; import_config_data->nvt_selector_family_or_nvt = NULL; set_client_state (CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS); break; } CLOSE (CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS_NVT_SELECTOR, INCLUDE); CLOSE (CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS_NVT_SELECTOR, NAME); CLOSE (CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS_NVT_SELECTOR, TYPE); CLOSE (CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS_NVT_SELECTOR, FAMILY_OR_NVT); CLOSE (CLIENT_C_C_GCR_CONFIG, PREFERENCES); case CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE: assert (strcasecmp ("PREFERENCE", element_name) == 0); array_terminate (import_config_data->preference_alts); array_add (import_config_data->preferences, preference_new (import_config_data->preference_name, import_config_data->preference_type, import_config_data->preference_value, import_config_data->preference_nvt_name, import_config_data->preference_nvt_oid, import_config_data->preference_alts, import_config_data->preference_default)); import_config_data->preference_name = NULL; import_config_data->preference_type = NULL; import_config_data->preference_value = NULL; import_config_data->preference_nvt_name = NULL; import_config_data->preference_nvt_oid = NULL; import_config_data->preference_alts = NULL; import_config_data->preference_default = NULL; set_client_state (CLIENT_C_C_GCR_CONFIG_PREFERENCES); break; case CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_ALT: assert (strcasecmp ("ALT", element_name) == 0); array_add (import_config_data->preference_alts, import_config_data->preference_alt); import_config_data->preference_alt = NULL; set_client_state (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE); break; CLOSE (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE, DEFAULT); CLOSE (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE, NAME); CLOSE (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE, NVT); CLOSE (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_NVT, NAME); CLOSE (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE, TYPE); CLOSE (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE, VALUE); CLOSE (CLIENT_C_C_GCR_CONFIG, TYPE); case CLIENT_CREATE_ALERT: { event_t event; alert_condition_t condition; alert_method_t method; alert_t new_alert; assert (strcasecmp ("CREATE_ALERT", element_name) == 0); assert (create_alert_data->name != NULL); assert (create_alert_data->condition != NULL); assert (create_alert_data->method != NULL); assert (create_alert_data->event != NULL); array_terminate (create_alert_data->condition_data); array_terminate (create_alert_data->event_data); array_terminate (create_alert_data->method_data); if (create_alert_data->copy) switch (copy_alert (create_alert_data->name, create_alert_data->comment, create_alert_data->copy, &new_alert)) { case 0: { char *uuid; uuid = alert_uuid (new_alert); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_alert"), uuid); log_event ("alert", "Alert", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Alert exists already")); log_event_fail ("alert", "Alert", NULL, "created"); break; case 2: if (send_find_error_to_client ("create_alert", "alert", create_alert_data->copy, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("alert", "Alert", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Permission denied")); log_event_fail ("alert", "Alert", NULL, "created"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_alert")); log_event_fail ("alert", "Alert", NULL, "created"); break; } else if (strlen (create_alert_data->name) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "CREATE_ALERT requires NAME element which" " is at least one character long")); else if (strlen (create_alert_data->condition) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "CREATE_ALERT requires a value in a" " CONDITION element")); else if (strlen (create_alert_data->event) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "CREATE_ALERT requires a value in an" " EVENT element")); else if (strlen (create_alert_data->method) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "CREATE_ALERT requires a value in a" " METHOD element")); else if ((condition = alert_condition_from_name (create_alert_data->condition)) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Failed to recognise condition name")); else if ((event = event_from_name (create_alert_data->event)) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Failed to recognise event name")); else if ((method = alert_method_from_name (create_alert_data->method)) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Failed to recognise method name")); else { switch (create_alert (create_alert_data->name, create_alert_data->comment, create_alert_data->filter_id, event, create_alert_data->event_data, condition, create_alert_data->condition_data, method, create_alert_data->method_data, &new_alert)) { case 0: { char *uuid; uuid = alert_uuid (new_alert); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_alert"), uuid); log_event ("alert", "Alert", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Alert exists already")); log_event_fail ("alert", "Alert", NULL, "created"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Validation of email address failed")); log_event_fail ("alert", "Alert", NULL, "created"); break; case 3: if (send_find_error_to_client ("create_alert", "filter", create_alert_data->filter_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("alert", "Alert", NULL, "created"); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Filter type must be result if" " specified")); log_event_fail ("alert", "Alert", NULL, "created"); break; case 5: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Invalid or unexpected condition data" " name")); log_event_fail ("alert", "Alert", NULL, "created"); break; case 6: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Syntax error in condition data")); log_event_fail ("alert", "Alert", NULL, "created"); break; case 7: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Email subject too long")); log_event_fail ("alert", "Alert", NULL, "created"); break; case 8: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Email message too long")); log_event_fail ("alert", "Alert", NULL, "created"); break; case 12: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Error in Send host")); log_event_fail ("alert", "Alert", NULL, "created"); break; case 13: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Error in Send port")); log_event_fail ("alert", "Alert", NULL, "created"); break; case 14: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Failed to find report format for Send" " method")); log_event_fail ("alert", "Alert", NULL, "created"); break; case 9: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Failed to find filter for condition")); log_event_fail ("alert", "Alert", NULL, "created"); break; case 15: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Error in SCP host")); log_event_fail ("alert", "Alert", NULL, "created"); break; case 17: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Failed to find report format for SCP" " method")); log_event_fail ("alert", "Alert", NULL, "created"); break; case 18: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Error in SCP username")); log_event_fail ("alert", "Alert", NULL, "created"); break; case 19: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Error in SCP path")); log_event_fail ("alert", "Alert", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_alert", "Permission denied")); log_event_fail ("alert", "Alert", NULL, "created"); break; default: assert (0); case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_alert")); log_event_fail ("alert", "Alert", NULL, "created"); break; } } create_alert_data_reset (create_alert_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_CREATE_ALERT, COMMENT); CLOSE (CLIENT_CREATE_ALERT, COPY); CLOSE (CLIENT_CREATE_ALERT, CONDITION); CLOSE (CLIENT_CREATE_ALERT, EVENT); CLOSE (CLIENT_CREATE_ALERT, FILTER); CLOSE (CLIENT_CREATE_ALERT, METHOD); CLOSE (CLIENT_CREATE_ALERT, NAME); case CLIENT_CREATE_ALERT_CONDITION_DATA: { gchar *string; assert (strcasecmp ("DATA", element_name) == 0); assert (create_alert_data->condition_data); assert (create_alert_data->part_data); assert (create_alert_data->part_name); string = g_strconcat (create_alert_data->part_name, "0", create_alert_data->part_data, NULL); string[strlen (create_alert_data->part_name)] = '\0'; array_add (create_alert_data->condition_data, string); openvas_free_string_var (&create_alert_data->part_data); openvas_free_string_var (&create_alert_data->part_name); openvas_append_string (&create_alert_data->part_data, ""); openvas_append_string (&create_alert_data->part_name, ""); set_client_state (CLIENT_CREATE_ALERT_CONDITION); break; } case CLIENT_CREATE_ALERT_CONDITION_DATA_NAME: assert (strcasecmp ("NAME", element_name) == 0); set_client_state (CLIENT_CREATE_ALERT_CONDITION_DATA); break; case CLIENT_CREATE_ALERT_EVENT_DATA: { gchar *string; assert (strcasecmp ("DATA", element_name) == 0); assert (create_alert_data->event_data); assert (create_alert_data->part_data); assert (create_alert_data->part_name); string = g_strconcat (create_alert_data->part_name, "0", create_alert_data->part_data, NULL); string[strlen (create_alert_data->part_name)] = '\0'; array_add (create_alert_data->event_data, string); openvas_free_string_var (&create_alert_data->part_data); openvas_free_string_var (&create_alert_data->part_name); openvas_append_string (&create_alert_data->part_data, ""); openvas_append_string (&create_alert_data->part_name, ""); set_client_state (CLIENT_CREATE_ALERT_EVENT); break; } CLOSE (CLIENT_CREATE_ALERT_EVENT_DATA, NAME); case CLIENT_CREATE_ALERT_METHOD_DATA: { gchar *string; assert (strcasecmp ("DATA", element_name) == 0); assert (create_alert_data->method_data); assert (create_alert_data->part_data); assert (create_alert_data->part_name); string = g_strconcat (create_alert_data->part_name, "0", create_alert_data->part_data, NULL); string[strlen (create_alert_data->part_name)] = '\0'; array_add (create_alert_data->method_data, string); openvas_free_string_var (&create_alert_data->part_data); openvas_free_string_var (&create_alert_data->part_name); openvas_append_string (&create_alert_data->part_data, ""); openvas_append_string (&create_alert_data->part_name, ""); set_client_state (CLIENT_CREATE_ALERT_METHOD); break; } CLOSE (CLIENT_CREATE_ALERT_METHOD_DATA, NAME); case CLIENT_CREATE_FILTER: { filter_t new_filter; assert (strcasecmp ("CREATE_FILTER", element_name) == 0); assert (create_filter_data->term != NULL); if (create_filter_data->copy) /* TODO make_unique (same for targets). */ switch (copy_filter (create_filter_data->name, create_filter_data->comment, create_filter_data->copy, &new_filter)) { case 0: { char *uuid; uuid = filter_uuid (new_filter); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_filter"), uuid); log_event ("filter", "Filter", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_filter", "Filter exists already")); log_event_fail ("filter", "Filter", NULL, "created"); break; case 2: if (send_find_error_to_client ("create_filter", "filter", create_filter_data->copy, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("filter", "Filter", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_filter", "Permission denied")); log_event_fail ("filter", "Filter", NULL, "created"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_filter")); log_event_fail ("filter", "Filter", NULL, "created"); break; } else if (create_filter_data->name == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_filter", "CREATE_FILTER requires a NAME")); else if (strlen (create_filter_data->name) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_filter", "CREATE_FILTER name must be at" " least one character long")); else switch (create_filter (create_filter_data->name, create_filter_data->comment, create_filter_data->type, create_filter_data->term, create_filter_data->make_name_unique && strcmp (create_filter_data->make_name_unique, "0"), &new_filter)) { case 0: { char *uuid = filter_uuid (new_filter); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_filter"), uuid); log_event ("filter", "Filter", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_filter", "Filter exists already")); log_event_fail ("filter", "Filter", NULL, "created"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_filter", "Type must be a valid OMP type")); log_event_fail ("filter", "Filter", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_filter", "Permission denied")); log_event_fail ("filter", "Filter", NULL, "created"); break; default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_filter")); log_event_fail ("filter", "Filter", NULL, "created"); break; } create_filter_data_reset (create_filter_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_CREATE_FILTER, COMMENT); CLOSE (CLIENT_CREATE_FILTER, COPY); CLOSE (CLIENT_CREATE_FILTER, NAME); CLOSE (CLIENT_CREATE_FILTER, TERM); CLOSE (CLIENT_CREATE_FILTER, TYPE); CLOSE (CLIENT_CREATE_FILTER_NAME, MAKE_UNIQUE); case CLIENT_CREATE_GROUP: { group_t new_group; assert (strcasecmp ("CREATE_GROUP", element_name) == 0); assert (create_group_data->users != NULL); if (create_group_data->copy) switch (copy_group (create_group_data->name, create_group_data->comment, create_group_data->copy, &new_group)) { case 0: { char *uuid; uuid = group_uuid (new_group); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_group"), uuid); log_event ("group", "Group", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_group", "Group exists already")); log_event_fail ("group", "Group", NULL, "created"); break; case 2: if (send_find_error_to_client ("create_group", "group", create_group_data->copy, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("group", "Group", NULL, "created"); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_group", "Syntax error in group name")); log_event_fail ("group", "Group", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_group", "Permission denied")); log_event_fail ("group", "Group", NULL, "created"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_group")); log_event_fail ("group", "Group", NULL, "created"); break; } else if (create_group_data->name == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_group", "CREATE_GROUP requires a NAME")); else if (strlen (create_group_data->name) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_group", "CREATE_GROUP name must be at" " least one character long")); else switch (create_group (create_group_data->name, create_group_data->comment, create_group_data->users, &new_group)) { case 0: { char *uuid = group_uuid (new_group); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_group"), uuid); log_event ("group", "Group", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_group", "Group exists already")); log_event_fail ("group", "Group", NULL, "created"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_group", "Failed to find user")); log_event_fail ("group", "Group", NULL, "created"); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_group", "Error in user name")); log_event_fail ("group", "Group", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_group", "Permission denied")); log_event_fail ("group", "Group", NULL, "created"); break; default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_group")); log_event_fail ("group", "Group", NULL, "created"); break; } create_group_data_reset (create_group_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_CREATE_GROUP, COMMENT); CLOSE (CLIENT_CREATE_GROUP, COPY); CLOSE (CLIENT_CREATE_GROUP, NAME); CLOSE (CLIENT_CREATE_GROUP, USERS); case CLIENT_CREATE_LSC_CREDENTIAL: { lsc_credential_t new_lsc_credential; assert (strcasecmp ("CREATE_LSC_CREDENTIAL", element_name) == 0); assert (create_lsc_credential_data->name != NULL); assert (create_lsc_credential_data->login != NULL); if (create_lsc_credential_data->copy) switch (copy_lsc_credential (create_lsc_credential_data->name, create_lsc_credential_data->comment, create_lsc_credential_data->copy, &new_lsc_credential)) { case 0: { char *uuid; uuid = lsc_credential_uuid (new_lsc_credential); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_lsc_credential"), uuid); log_event ("lsc_credential", "LSC Credential", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_lsc_credential", "Credential exists already")); log_event_fail ("lsc_credential", "LSC Credential", NULL, "created"); break; case 2: if (send_find_error_to_client ("create_lsc_credential", "lsc_credential", create_lsc_credential_data->copy, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("lsc_credential", "LSC Credential", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_lsc_credential", "Permission denied")); log_event_fail ("lsc_credential", "LSC Credential", NULL, "created"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_lsc_credential")); log_event_fail ("lsc_credential", "LSC Credential", NULL, "created"); break; } else if (strlen (create_lsc_credential_data->name) == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_lsc_credential", "CREATE_LSC_CREDENTIAL name must be at" " least one character long")); } else if (strlen (create_lsc_credential_data->login) == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_lsc_credential", "CREATE_LSC_CREDENTIAL login must be at" " least one character long")); } else if (create_lsc_credential_data->key && create_lsc_credential_data->key_private == NULL) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_lsc_credential", "CREATE_LSC_CREDENTIAL KEY requires a PRIVATE" " key")); } else switch (create_lsc_credential (create_lsc_credential_data->name, create_lsc_credential_data->comment, create_lsc_credential_data->login, create_lsc_credential_data->key_private ? create_lsc_credential_data->key_phrase : create_lsc_credential_data->password, create_lsc_credential_data->key_private, &new_lsc_credential)) { case 0: { char *uuid = lsc_credential_uuid (new_lsc_credential); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_lsc_credential"), uuid); log_event ("lsc_credential", "LSC Credential", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_lsc_credential", "LSC Credential exists already")); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_lsc_credential", "Login may only contain alphanumeric" " characters if autogenerating" " credential")); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_lsc_credential", "Erroneous private key or associated" " passphrase")); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_lsc_credential", "Permission denied")); break; default: assert (0); case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_lsc_credential")); break; } create_lsc_credential_data_reset (create_lsc_credential_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_CREATE_LSC_CREDENTIAL, COMMENT); CLOSE (CLIENT_CREATE_LSC_CREDENTIAL, COPY); CLOSE (CLIENT_CREATE_LSC_CREDENTIAL, KEY); CLOSE (CLIENT_CREATE_LSC_CREDENTIAL_KEY, PHRASE); CLOSE (CLIENT_CREATE_LSC_CREDENTIAL_KEY, PRIVATE); CLOSE (CLIENT_CREATE_LSC_CREDENTIAL, LOGIN); CLOSE (CLIENT_CREATE_LSC_CREDENTIAL, NAME); CLOSE (CLIENT_CREATE_LSC_CREDENTIAL, PASSWORD); case CLIENT_CREATE_NOTE: { task_t task = 0; result_t result = 0; note_t new_note; int max; assert (strcasecmp ("CREATE_NOTE", element_name) == 0); if (create_note_data->copy) switch (copy_note (create_note_data->copy, &new_note)) { case 0: { char *uuid; note_uuid (new_note, &uuid); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_note"), uuid); log_event ("note", "Note", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_note", "Note exists already")); log_event_fail ("note", "Note", NULL, "created"); break; case 2: if (send_find_error_to_client ("create_note", "note", create_note_data->copy, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("note", "Note", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_note", "Permission denied")); log_event_fail ("note", "Note", NULL, "created"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_note")); log_event_fail ("note", "Note", NULL, "created"); break; } else if (create_note_data->nvt_oid == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_note", "CREATE_NOTE requires an NVT entity")); else if (create_note_data->text == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_note", "CREATE_NOTE requires a TEXT entity")); else if (create_note_data->hosts && ((max = manage_count_hosts (create_note_data->hosts, NULL)) == -1)) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_note", "Error in host specification")); else if (create_note_data->hosts && (max > manage_max_hosts ())) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_note", "Host specification exceeds maximum number of" " hosts")); else if (create_note_data->task_id && find_task_with_permission (create_note_data->task_id, &task, NULL)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_note")); else if (create_note_data->task_id && task == 0) { if (send_find_error_to_client ("create_note", "task", create_note_data->task_id, omp_parser)) { error_send_to_client (error); return; } } else if (create_note_data->result_id && find_result_with_permission (create_note_data->result_id, &result, NULL)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_note")); else if (create_note_data->result_id && result == 0) { if (send_find_error_to_client ("create_note", "result", create_note_data->result_id, omp_parser)) { error_send_to_client (error); return; } } else switch (create_note (create_note_data->active, create_note_data->nvt_oid, create_note_data->text, create_note_data->hosts, create_note_data->port, create_note_data->severity, create_note_data->threat, task, result, &new_note)) { case 0: { char *uuid; note_uuid (new_note, &uuid); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_note"), uuid); log_event ("note", "Note", uuid, "created"); free (uuid); break; } case 1: if (send_find_error_to_client ("create_note", "nvt", create_note_data->nvt_oid, omp_parser)) { error_send_to_client (error); return; } break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_note", "Error in port specification")); log_event_fail ("note", "Note", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_note", "Permission denied")); break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_note")); break; default: assert (0); SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_note")); break; } create_note_data_reset (create_note_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_CREATE_NOTE, ACTIVE); CLOSE (CLIENT_CREATE_NOTE, COPY); CLOSE (CLIENT_CREATE_NOTE, HOSTS); CLOSE (CLIENT_CREATE_NOTE, NVT); CLOSE (CLIENT_CREATE_NOTE, PORT); CLOSE (CLIENT_CREATE_NOTE, SEVERITY); CLOSE (CLIENT_CREATE_NOTE, RESULT); CLOSE (CLIENT_CREATE_NOTE, TASK); CLOSE (CLIENT_CREATE_NOTE, TEXT); CLOSE (CLIENT_CREATE_NOTE, THREAT); case CLIENT_CREATE_OVERRIDE: { task_t task = 0; result_t result = 0; override_t new_override; int max; assert (strcasecmp ("CREATE_OVERRIDE", element_name) == 0); if (create_override_data->copy) switch (copy_override (create_override_data->copy, &new_override)) { case 0: { char *uuid; override_uuid (new_override, &uuid); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_override"), uuid); log_event ("override", "Override", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_override", "Override exists already")); log_event_fail ("override", "Override", NULL, "created"); break; case 2: if (send_find_error_to_client ("create_override", "override", create_override_data->copy, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("override", "Override", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_override", "Permission denied")); log_event_fail ("override", "Override", NULL, "created"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_override")); log_event_fail ("override", "Override", NULL, "created"); break; } else if (create_override_data->nvt_oid == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_override", "CREATE_OVERRIDE requires an NVT entity")); else if (create_override_data->text == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_override", "CREATE_OVERRIDE requires a TEXT entity")); else if (create_override_data->hosts && ((max = manage_count_hosts (create_override_data->hosts, NULL)) == -1)) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_override", "Error in host specification")); else if (create_override_data->hosts && (max > manage_max_hosts ())) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_override", "Host specification exceeds maximum number" " of hosts")); else if (create_override_data->new_threat == NULL && create_override_data->new_severity == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_override", "CREATE_OVERRIDE requires a NEW_THREAT" " or NEW_SEVERITY entity")); else if (create_override_data->task_id && find_task_with_permission (create_override_data->task_id, &task, NULL)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_override")); else if (create_override_data->task_id && task == 0) { if (send_find_error_to_client ("create_override", "task", create_override_data->task_id, omp_parser)) { error_send_to_client (error); return; } } else if (create_override_data->result_id && find_result_with_permission (create_override_data->result_id, &result, NULL)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_override")); else if (create_override_data->result_id && result == 0) { if (send_find_error_to_client ("create_override", "result", create_override_data->result_id, omp_parser)) { error_send_to_client (error); return; } } else switch (create_override (create_override_data->active, create_override_data->nvt_oid, create_override_data->text, create_override_data->hosts, create_override_data->port, create_override_data->threat, create_override_data->new_threat, create_override_data->severity, create_override_data->new_severity, task, result, &new_override)) { case 0: { char *uuid; override_uuid (new_override, &uuid); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_override"), uuid); log_event ("override", "Override", uuid, "created"); free (uuid); break; } case 1: if (send_find_error_to_client ("create_override", "nvt", create_override_data->nvt_oid, omp_parser)) { error_send_to_client (error); return; } break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_override", "Error in port specification")); log_event_fail ("override", "Override", NULL, "created"); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_override", "Error in new_severity specification")); log_event_fail ("override", "Override", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_override", "Permission denied")); break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_override")); break; default: assert (0); SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_override")); break; } create_override_data_reset (create_override_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_CREATE_OVERRIDE, ACTIVE); CLOSE (CLIENT_CREATE_OVERRIDE, COPY); CLOSE (CLIENT_CREATE_OVERRIDE, HOSTS); CLOSE (CLIENT_CREATE_OVERRIDE, NEW_SEVERITY); CLOSE (CLIENT_CREATE_OVERRIDE, NEW_THREAT); CLOSE (CLIENT_CREATE_OVERRIDE, NVT); CLOSE (CLIENT_CREATE_OVERRIDE, PORT); CLOSE (CLIENT_CREATE_OVERRIDE, SEVERITY); CLOSE (CLIENT_CREATE_OVERRIDE, RESULT); CLOSE (CLIENT_CREATE_OVERRIDE, TASK); CLOSE (CLIENT_CREATE_OVERRIDE, TEXT); CLOSE (CLIENT_CREATE_OVERRIDE, THREAT); case CLIENT_CREATE_PERMISSION: { permission_t new_permission; assert (strcasecmp ("CREATE_PERMISSION", element_name) == 0); if (create_permission_data->copy) switch (copy_permission (create_permission_data->comment, create_permission_data->copy, &new_permission)) { case 0: { char *uuid; uuid = permission_uuid (new_permission); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_permission"), uuid); log_event ("permission", "Permission", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_permission", "Permission exists already")); log_event_fail ("permission", "Permission", NULL, "created"); break; case 2: if (send_find_error_to_client ("create_permission", "permission", create_permission_data->copy, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("permission", "Permission", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_permission", "Permission denied")); log_event_fail ("permission", "Permission", NULL, "created"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_permission")); log_event_fail ("permission", "Permission", NULL, "created"); break; } else if (create_permission_data->name == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_permission", "CREATE_PERMISSION requires a NAME")); else if (strlen (create_permission_data->name) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_permission", "CREATE_PERMISSION name must be at" " least one character long")); else switch (create_permission (create_permission_data->name, create_permission_data->comment, create_permission_data->resource_type, create_permission_data->resource_id, create_permission_data->subject_type, create_permission_data->subject_id, &new_permission)) { case 0: { char *uuid = permission_uuid (new_permission); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_permission"), uuid); log_event ("permission", "Permission", uuid, "created"); free (uuid); break; } case 2: if (send_find_error_to_client ("create_permission", "subject", create_permission_data->subject_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("permission", "Permission", NULL, "created"); break; case 3: if (send_find_error_to_client ("create_permission", "resource", create_permission_data->resource_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("permission", "Permission", NULL, "created"); break; case 5: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_permission", "Error in RESOURCE")); log_event_fail ("permission", "Permission", NULL, "created"); break; case 6: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_permission", "Error in SUBJECT")); log_event_fail ("permission", "Permission", NULL, "created"); break; case 7: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_permission", "Error in NAME")); log_event_fail ("permission", "Permission", NULL, "created"); break; case 8: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_permission", "Attempt to create permission on" " permission")); log_event_fail ("permission", "Permission", NULL, "created"); break; case 9: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_permission", "Permission does not accept a resource")); log_event_fail ("permission", "Permission", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_permission", "Permission denied")); log_event_fail ("permission", "Permission", NULL, "created"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_permission")); log_event_fail ("permission", "Permission", NULL, "created"); break; } create_permission_data_reset (create_permission_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_CREATE_PERMISSION, COMMENT); CLOSE (CLIENT_CREATE_PERMISSION, COPY); CLOSE (CLIENT_CREATE_PERMISSION, NAME); CLOSE (CLIENT_CREATE_PERMISSION, RESOURCE); CLOSE (CLIENT_CREATE_PERMISSION_RESOURCE, TYPE); CLOSE (CLIENT_CREATE_PERMISSION, SUBJECT); CLOSE (CLIENT_CREATE_PERMISSION_SUBJECT, TYPE); case CLIENT_CREATE_PORT_LIST: { port_list_t new_port_list; array_t *manage_ranges; assert (strcasecmp ("CREATE_PORT_LIST", element_name) == 0); manage_ranges = NULL; /* The import element, GET_PORT_LISTS_RESPONSE, overrides any other * elements. */ if (create_port_list_data->import) { array_terminate (create_port_list_data->ranges); if (create_port_list_data->name == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_list", "CREATE_PORT_LIST" " GET_PORT_LISTS_RESPONSE requires a" " NAME element")); else if (strlen (create_port_list_data->name) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_list", "CREATE_PORT_LIST" " GET_PORT_LISTS_RESPONSE NAME must be" " at least one character long")); else if (create_port_list_data->id == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_list", "CREATE_PORT_LIST" " GET_PORT_LISTS_RESPONSE requires an" " ID attribute")); else if (strlen (create_port_list_data->id) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_list", "CREATE_PORT_LIST" " GET_PORT_LISTS_RESPONSE ID must be" " at least one character long")); else if (!is_uuid (create_port_list_data->id)) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_list", "CREATE_PORT_LIST" " GET_PORT_LISTS_RESPONSE ID must be" " a UUID")); else if ((manage_ranges = convert_to_manage_ranges (create_port_list_data->ranges)) == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_list", "Error in GET_PORT_LISTS_RESPONSE ranges")); else switch (create_port_list (create_port_list_data->id, create_port_list_data->name, create_port_list_data->comment, NULL, manage_ranges, &new_port_list)) { case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_list", "Port list exists already")); log_event_fail ("port_list", "Port List", NULL, "created"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_list", "Port list exists already, in" " trashcan")); log_event_fail ("port_list", "Port List", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_list", "Permission denied")); log_event_fail ("port_list", "Port List", NULL, "created"); break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_port_list")); log_event_fail ("port_list", "Port List", NULL, "created"); break; default: { char *uuid = port_list_uuid (new_port_list); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_port_list"), uuid); log_event ("port_list", "Port List", uuid, "created"); free (uuid); break; } } /* Range fields are freed by the reset function below. */ array_free (manage_ranges); } else if (create_port_list_data->copy) switch (copy_port_list (create_port_list_data->name, create_port_list_data->comment, create_port_list_data->copy, &new_port_list)) { case 0: { char *uuid; uuid = port_list_uuid (new_port_list); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_port_list"), uuid); log_event ("port_list", "Port List", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_list", "Port List exists already")); log_event_fail ("port_list", "Port List", NULL, "created"); break; case 2: if (send_find_error_to_client ("create_port_list", "port_list", create_port_list_data->copy, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("port_list", "Port List", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_list", "Permission denied")); log_event_fail ("port_list", "Port List", NULL, "created"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_port_list")); log_event_fail ("port_list", "Port List", NULL, "created"); break; } else if (create_port_list_data->name == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_list", "CREATE_PORT_LIST requires a NAME")); else if (strlen (create_port_list_data->name) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_list", "CREATE_PORT_LIST name must be at" " least one character long")); else switch (create_port_list (NULL, create_port_list_data->name, create_port_list_data->comment, create_port_list_data->port_range, NULL, &new_port_list)) { case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_list", "Port list exists already")); log_event_fail ("port_list", "Port List", NULL, "created"); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_list", "Error in port range")); log_event_fail ("port_list", "Port List", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_list", "Permission denied")); log_event_fail ("port_list", "Port List", NULL, "created"); break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_port_list")); log_event_fail ("port_list", "Port List", NULL, "created"); break; default: { char *uuid = port_list_uuid (new_port_list); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_port_list"), uuid); log_event ("port_list", "Port List", uuid, "created"); free (uuid); break; } } create_port_list_data_reset (create_port_list_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_CREATE_PORT_LIST, COMMENT); CLOSE (CLIENT_CREATE_PORT_LIST, COPY); case CLIENT_CPL_GPLR: assert (strcasecmp ("GET_PORT_LISTS_RESPONSE", element_name) == 0); set_client_state (CLIENT_CREATE_PORT_LIST); break; CLOSE (CLIENT_CREATE_PORT_LIST, NAME); CLOSE (CLIENT_CREATE_PORT_LIST, PORT_RANGE); CLOSE (CLIENT_CPL_GPLR, PORT_LIST); CLOSE (CLIENT_CPL_GPLR_PORT_LIST, COMMENT); CLOSE (CLIENT_CPL_GPLR_PORT_LIST, IN_USE); CLOSE (CLIENT_CPL_GPLR_PORT_LIST, NAME); CLOSE_READ_OVER (CLIENT_CPL_GPLR_PORT_LIST, TARGETS); CLOSE (CLIENT_CPL_GPLR_PORT_LIST, PORT_RANGE); CLOSE (CLIENT_CPL_GPLR_PORT_LIST, PORT_RANGES); case CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES_PORT_RANGE: { assert (strcasecmp ("PORT_RANGE", element_name) == 0); assert (create_port_list_data->ranges); array_add (create_port_list_data->ranges, create_port_list_data->range); create_port_list_data->range = NULL; set_client_state (CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES); break; } CLOSE (CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES_PORT_RANGE, COMMENT); CLOSE (CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES_PORT_RANGE, END); CLOSE (CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES_PORT_RANGE, START); CLOSE (CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES_PORT_RANGE, TYPE); case CLIENT_CREATE_PORT_RANGE: { port_range_t new_port_range; assert (strcasecmp ("CREATE_PORT_RANGE", element_name) == 0); if (create_port_range_data->start == NULL || create_port_range_data->end == NULL || create_port_range_data->port_list_id == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_range", "CREATE_PORT_RANGE requires a START, END and" " PORT_LIST ID")); else switch (create_port_range (create_port_range_data->port_list_id, create_port_range_data->type, create_port_range_data->start, create_port_range_data->end, create_port_range_data->comment, &new_port_range)) { case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_range", "Port range START must be a number" " 1-65535")); log_event_fail ("port_range", "Port Range", NULL, "created"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_range", "Port range END must be a number" " 1-65535")); log_event_fail ("port_range", "Port Range", NULL, "created"); break; case 3: if (send_find_error_to_client ("create_port_range", "port_range", create_port_range_data->port_list_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("port_range", "Port Range", NULL, "created"); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_range", "Port range TYPE must be TCP or UDP")); log_event_fail ("port_range", "Port Range", NULL, "created"); break; case 5: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_range", "Port list is in use")); break; case 6: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_range", "New range overlaps an existing" " range")); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_port_range", "Permission denied")); break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_port_range")); log_event_fail ("port_range", "Port Range", NULL, "created"); break; default: { char *uuid; uuid = port_range_uuid (new_port_range); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_port_range"), uuid); log_event ("port_range", "Port range", uuid, "created"); free (uuid); break; } } create_port_range_data_reset (create_port_range_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_CREATE_PORT_RANGE, COMMENT); CLOSE (CLIENT_CREATE_PORT_RANGE, END); CLOSE (CLIENT_CREATE_PORT_RANGE, START); CLOSE (CLIENT_CREATE_PORT_RANGE, TYPE); CLOSE (CLIENT_CREATE_PORT_RANGE, PORT_LIST); case CLIENT_CREATE_REPORT: { char *uuid; assert (strcasecmp ("CREATE_REPORT", element_name) == 0); array_terminate (create_report_data->results); array_terminate (create_report_data->host_ends); array_terminate (create_report_data->host_starts); array_terminate (create_report_data->details); if (create_report_data->results == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report", "CREATE_REPORT requires a REPORT element")); else if (create_report_data->type && strcmp (create_report_data->type, "scan")) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report", "CREATE_REPORT type must be 'scan'")); else switch (create_report (create_report_data->results, create_report_data->task_id, create_report_data->task_name, create_report_data->task_comment, create_report_data->scan_start, create_report_data->scan_end, create_report_data->host_starts, create_report_data->host_ends, create_report_data->details, &uuid)) { case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report", "Permission denied")); log_event_fail ("report", "Report", NULL, "created"); break; case -1: case -2: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_report")); log_event_fail ("report", "Report", NULL, "created"); break; case -3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report", "CREATE_REPORT TASK_NAME is required")); log_event_fail ("report", "Report", NULL, "created"); break; case -4: log_event_fail ("report", "Report", NULL, "created"); if (send_find_error_to_client ("create_report", "task", create_report_data->task_id, omp_parser)) { error_send_to_client (error); return; } break; case -5: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report", "CREATE_REPORT TASK must be a container")); log_event_fail ("report", "Report", NULL, "created"); break; default: { SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_report"), uuid); log_event ("report", "Report", uuid, "created"); free (uuid); break; } } omp_parser->importing = 0; create_report_data_reset (create_report_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_CREATE_REPORT, REPORT); case CLIENT_CREATE_REPORT_RR: assert (strcasecmp ("REPORT", element_name) == 0); if (create_report_data->wrapper) set_client_state (CLIENT_CREATE_REPORT_REPORT); else set_client_state (CLIENT_CREATE_REPORT); break; CLOSE_READ_OVER (CLIENT_CREATE_REPORT_RR, FILTERS); CLOSE_READ_OVER (CLIENT_CREATE_REPORT_RR, HOST_COUNT); case CLIENT_CREATE_REPORT_RR_HOST_END: assert (strcasecmp ("HOST_END", element_name) == 0); if (create_report_data->host_end_host) { create_report_result_t *result; assert (create_report_data->host_ends); assert (create_report_data->host_end_host); result = g_malloc (sizeof (create_report_result_t)); result->description = create_report_data->host_end; result->host = create_report_data->host_end_host; array_add (create_report_data->host_ends, result); create_report_data->host_end = NULL; create_report_data->host_end_host = NULL; } else openvas_free_string_var (&create_report_data->host_end); set_client_state (CLIENT_CREATE_REPORT_RR); break; case CLIENT_CREATE_REPORT_RR_HOST_START: assert (strcasecmp ("HOST_START", element_name) == 0); if (create_report_data->host_start_host) { create_report_result_t *result; assert (create_report_data->host_starts); assert (create_report_data->host_start); assert (create_report_data->host_start_host); result = g_malloc (sizeof (create_report_result_t)); result->description = create_report_data->host_start; result->host = create_report_data->host_start_host; array_add (create_report_data->host_starts, result); create_report_data->host_start = NULL; create_report_data->host_start_host = NULL; } else openvas_free_string_var (&create_report_data->host_start); set_client_state (CLIENT_CREATE_REPORT_RR); break; CLOSE_READ_OVER (CLIENT_CREATE_REPORT_RR, HOSTS); CLOSE_READ_OVER (CLIENT_CREATE_REPORT_RR, PORTS); CLOSE_READ_OVER (CLIENT_CREATE_REPORT_RR, REPORT_FORMAT); CLOSE (CLIENT_CREATE_REPORT_RR, RESULTS); CLOSE_READ_OVER (CLIENT_CREATE_REPORT_RR, SCAN_RUN_STATUS); CLOSE (CLIENT_CREATE_REPORT_RR, SCAN_END); CLOSE (CLIENT_CREATE_REPORT_RR, SCAN_START); CLOSE_READ_OVER (CLIENT_CREATE_REPORT_RR, SORT); CLOSE_READ_OVER (CLIENT_CREATE_REPORT_RR, TASK); CLOSE_READ_OVER (CLIENT_CREATE_REPORT_RR, RESULT_COUNT); CLOSE (CLIENT_CREATE_REPORT_RR_HOST_END, HOST); CLOSE (CLIENT_CREATE_REPORT_RR_HOST_START, HOST); case CLIENT_CREATE_REPORT_RR_H: { openvas_free_string_var (&create_report_data->ip); set_client_state (CLIENT_CREATE_REPORT_RR); break; } CLOSE (CLIENT_CREATE_REPORT_RR_H, IP); CLOSE (CLIENT_CREATE_REPORT_RR_H, START); CLOSE (CLIENT_CREATE_REPORT_RR_H, END); case CLIENT_CREATE_REPORT_RR_H_DETAIL: { assert (strcasecmp ("DETAIL", element_name) == 0); assert (create_report_data->details); if (create_report_data->ip) { host_detail_t *detail; detail = g_malloc (sizeof (host_detail_t)); detail->ip = g_strdup (create_report_data->ip); detail->name = create_report_data->detail_name; detail->source_desc = create_report_data->detail_source_desc; detail->source_name = create_report_data->detail_source_name; detail->source_type = create_report_data->detail_source_type; detail->value = create_report_data->detail_value; array_add (create_report_data->details, detail); create_report_data->detail_name = NULL; create_report_data->detail_source_desc = NULL; create_report_data->detail_source_name = NULL; create_report_data->detail_source_type = NULL; create_report_data->detail_value = NULL; } set_client_state (CLIENT_CREATE_REPORT_RR_H); break; } CLOSE (CLIENT_CREATE_REPORT_RR_H_DETAIL, NAME); CLOSE (CLIENT_CREATE_REPORT_RR_H_DETAIL, VALUE); CLOSE (CLIENT_CREATE_REPORT_RR_H_DETAIL, SOURCE); CLOSE (CLIENT_CREATE_REPORT_RR_H_DETAIL_SOURCE, TYPE); CLOSE (CLIENT_CREATE_REPORT_RR_H_DETAIL_SOURCE, NAME); case CLIENT_CREATE_REPORT_RR_H_DETAIL_SOURCE_DESC: assert (strcasecmp ("DESCRIPTION", element_name) == 0); set_client_state (CLIENT_CREATE_REPORT_RR_H_DETAIL_SOURCE); break; case CLIENT_CREATE_REPORT_RR_RESULTS_RESULT: { create_report_result_t *result; assert (strcasecmp ("RESULT", element_name) == 0); assert (create_report_data->results); if (create_report_data->result_scan_nvt_version == NULL) create_report_data->result_scan_nvt_version = strdup (""); if (create_report_data->result_severity == NULL) { if (create_report_data->result_threat == NULL) create_report_data->result_severity = strdup (""); else if (strcasecmp (create_report_data->result_threat, "High") == 0) create_report_data->result_severity = strdup ("10.0"); else if (strcasecmp (create_report_data->result_threat, "Medium") == 0) create_report_data->result_severity = strdup ("5.0"); else if (strcasecmp (create_report_data->result_threat, "Low") == 0) create_report_data->result_severity = strdup ("2.0"); else if (strcasecmp (create_report_data->result_threat, "Log") == 0) create_report_data->result_severity = strdup ("0.0"); else if (strcasecmp (create_report_data->result_threat, "False Positive") == 0) create_report_data->result_severity = strdup ("-1.0"); else create_report_data->result_severity = strdup (""); } result = g_malloc (sizeof (create_report_result_t)); result->description = create_report_data->result_description; result->host = create_report_data->result_host; result->nvt_oid = create_report_data->result_nvt_oid; result->scan_nvt_version = create_report_data->result_scan_nvt_version; result->port = create_report_data->result_port; result->qod = create_report_data->result_qod; result->qod_type = create_report_data->result_qod_type; result->severity = create_report_data->result_severity; result->threat = create_report_data->result_threat; array_add (create_report_data->results, result); create_report_data->result_description = NULL; create_report_data->result_host = NULL; create_report_data->result_nvt_oid = NULL; create_report_data->result_port = NULL; create_report_data->result_qod = NULL; create_report_data->result_qod_type = NULL; create_report_data->result_scan_nvt_version = NULL; create_report_data->result_severity = NULL; create_report_data->result_threat = NULL; set_client_state (CLIENT_CREATE_REPORT_RR_RESULTS); break; } CLOSE_READ_OVER (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT, COMMENT); CLOSE_READ_OVER (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT, CREATION_TIME); CLOSE (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT, DESCRIPTION); CLOSE_READ_OVER (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT, DETECTION); CLOSE (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT, HOST); CLOSE_READ_OVER (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT, MODIFICATION_TIME); CLOSE_READ_OVER (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT, NAME); CLOSE_READ_OVER (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT, NOTES); CLOSE (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT, NVT); CLOSE (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT, ORIGINAL_SEVERITY); CLOSE (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT, ORIGINAL_THREAT); CLOSE_READ_OVER (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT, OVERRIDES); CLOSE_READ_OVER (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT, OWNER); CLOSE (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT, PORT); CLOSE (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT, QOD); CLOSE (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD, TYPE); CLOSE (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD, VALUE); CLOSE (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT, SCAN_NVT_VERSION); CLOSE (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT, SEVERITY); CLOSE (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT, THREAT); CLOSE (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT, BID); CLOSE (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT, CVE); CLOSE (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT, CVSS_BASE); CLOSE (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT, FAMILY); CLOSE (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT, NAME); CLOSE (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT, XREF); CLOSE (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT, CERT); CLOSE (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NVT_CERT, CERT_REF); CLOSE (CLIENT_CREATE_REPORT, TASK); CLOSE (CLIENT_CREATE_REPORT_TASK, COMMENT); CLOSE (CLIENT_CREATE_REPORT_TASK, NAME); case CLIENT_CREATE_REPORT_FORMAT: { report_format_t new_report_format; assert (strcasecmp ("CREATE_REPORT_FORMAT", element_name) == 0); /* For now the import element, GET_REPORT_FORMATS_RESPONSE, overrides * any other elements. */ if (create_report_format_data->copy) { switch (copy_report_format (create_report_format_data->name, create_report_format_data->copy, &new_report_format)) { case 0: { char *uuid; uuid = report_format_uuid (new_report_format); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_report_format"), uuid); log_event ("report_format", "Report Format", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report_format", "Report Format exists already")); log_event_fail ("report_format", "Report Format", NULL, "created"); break; case 2: if (send_find_error_to_client ("create_report_format", "report_format", create_report_format_data->copy, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("report_format", "Report Format", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report_format", "Permission denied")); log_event_fail ("report_format", "Report Format", NULL, "created"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_report_format")); log_event_fail ("report_format", "Report Format", NULL, "created"); break; } } else if (create_report_format_data->import) { array_terminate (create_report_format_data->files); array_terminate (create_report_format_data->params); array_terminate (create_report_format_data->params_options); if (create_report_format_data->name == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report_format", "CREATE_REPORT_FORMAT" " GET_REPORT_FORMATS_RESPONSE requires a" " NAME element")); else if (strlen (create_report_format_data->name) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report_format", "CREATE_REPORT_FORMAT" " GET_REPORT_FORMATS_RESPONSE NAME must be" " at least one character long")); else if (create_report_format_data->id == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report_format", "CREATE_REPORT_FORMAT" " GET_REPORT_FORMATS_RESPONSE requires an" " ID attribute")); else if (strlen (create_report_format_data->id) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report_format", "CREATE_REPORT_FORMAT" " GET_REPORT_FORMATS_RESPONSE ID must be" " at least one character long")); else if (!is_uuid (create_report_format_data->id)) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report_format", "CREATE_REPORT_FORMAT" " GET_REPORT_FORMATS_RESPONSE ID must be" " a UUID")); else switch (create_report_format (create_report_format_data->id, create_report_format_data->name, create_report_format_data->content_type, create_report_format_data->extension, create_report_format_data->summary, create_report_format_data->description, create_report_format_data->global && strcmp (create_report_format_data->global, "0"), create_report_format_data->files, create_report_format_data->params, create_report_format_data->params_options, create_report_format_data->signature, &new_report_format)) { case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_report_format")); log_event_fail ("report_format", "Report Format", NULL, "created"); break; case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report_format", "Report format exists already")); log_event_fail ("report_format", "Report Format", NULL, "created"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report_format", "Every FILE must have a name" " attribute")); log_event_fail ("report_format", "Report Format", NULL, "created"); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report_format", "Parameter value validation failed")); log_event_fail ("report_format", "Report Format", NULL, "created"); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report_format", "Parameter default validation failed")); log_event_fail ("report_format", "Report Format", NULL, "created"); break; case 5: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report_format", "CREATE_REPORT_FORMAT PARAM requires a" " DEFAULT element")); log_event_fail ("report_format", "Report Format", NULL, "created"); break; case 6: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report_format", "CREATE_REPORT_FORMAT PARAM MIN or MAX" " out of range")); log_event_fail ("report_format", "Report Format", NULL, "created"); break; case 7: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report_format", "CREATE_REPORT_FORMAT PARAM requires a" " TYPE element")); log_event_fail ("report_format", "Report Format", NULL, "created"); break; case 8: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report_format", "Duplicate PARAM name")); log_event_fail ("report_format", "Report Format", NULL, "created"); break; case 9: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report_format", "Bogus PARAM type")); log_event_fail ("report_format", "Report Format", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report_format", "Permission denied")); log_event_fail ("report_format", "Report Format", NULL, "created"); break; default: { char *uuid = report_format_uuid (new_report_format); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_report_format"), uuid); log_event ("report_format", "Report Format", uuid, "created"); free (uuid); break; } } } else SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_report_format", "CREATE_REPORT_FORMAT requires a" " GET_REPORT_FORMATS element")); create_report_format_data_reset (create_report_format_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_CREATE_REPORT_FORMAT, COPY); case CLIENT_CRF_GRFR: assert (strcasecmp ("GET_REPORT_FORMATS_RESPONSE", element_name) == 0); set_client_state (CLIENT_CREATE_REPORT_FORMAT); break; CLOSE (CLIENT_CRF_GRFR, REPORT_FORMAT); CLOSE (CLIENT_CRF_GRFR_REPORT_FORMAT, CONTENT_TYPE); CLOSE (CLIENT_CRF_GRFR_REPORT_FORMAT, DESCRIPTION); CLOSE (CLIENT_CRF_GRFR_REPORT_FORMAT, EXTENSION); case CLIENT_CRF_GRFR_REPORT_FORMAT_FILE: { gchar *string; assert (strcasecmp ("FILE", element_name) == 0); assert (create_report_format_data->files); assert (create_report_format_data->file); assert (create_report_format_data->file_name); string = g_strconcat (create_report_format_data->file_name, "0", create_report_format_data->file, NULL); string[strlen (create_report_format_data->file_name)] = '\0'; array_add (create_report_format_data->files, string); openvas_free_string_var (&create_report_format_data->file); openvas_free_string_var (&create_report_format_data->file_name); set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT); break; } CLOSE (CLIENT_CRF_GRFR_REPORT_FORMAT, GLOBAL); CLOSE (CLIENT_CRF_GRFR_REPORT_FORMAT, NAME); case CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM: { create_report_format_param_t *param; assert (strcasecmp ("PARAM", element_name) == 0); assert (create_report_format_data->params); assert (create_report_format_data->param_name); assert (create_report_format_data->param_value); param = g_malloc (sizeof (*param)); param->fallback = create_report_format_data->param_default ? g_strdup (create_report_format_data->param_default) : NULL; param->name = g_strdup (create_report_format_data->param_name); param->type = create_report_format_data->param_type ? g_strdup (create_report_format_data->param_type) : NULL; param->type_max = create_report_format_data->param_type_max ? g_strdup (create_report_format_data->param_type_max) : NULL; param->type_min = create_report_format_data->param_type_min ? g_strdup (create_report_format_data->param_type_min) : NULL; param->value = g_strdup (create_report_format_data->param_value); array_add (create_report_format_data->params, param); openvas_free_string_var (&create_report_format_data->param_default); openvas_free_string_var (&create_report_format_data->param_name); openvas_free_string_var (&create_report_format_data->param_type); openvas_free_string_var (&create_report_format_data->param_type_max); openvas_free_string_var (&create_report_format_data->param_type_min); openvas_free_string_var (&create_report_format_data->param_value); array_terminate (create_report_format_data->param_options); array_add (create_report_format_data->params_options, create_report_format_data->param_options); set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT); break; } CLOSE (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM, DEFAULT); CLOSE (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM, NAME); CLOSE (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM, TYPE); CLOSE (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM, OPTIONS); CLOSE (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM, VALUE); CLOSE (CLIENT_CRF_GRFR_REPORT_FORMAT, PREDEFINED); CLOSE (CLIENT_CRF_GRFR_REPORT_FORMAT, SIGNATURE); CLOSE (CLIENT_CRF_GRFR_REPORT_FORMAT, SUMMARY); CLOSE_READ_OVER (CLIENT_CRF_GRFR_REPORT_FORMAT, TRUST); case CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_OPTIONS_OPTION: assert (strcasecmp ("OPTION", element_name) == 0); array_add (create_report_format_data->param_options, create_report_format_data->param_option); create_report_format_data->param_option = NULL; set_client_state (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_OPTIONS); break; CLOSE (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_TYPE, MAX); CLOSE (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_TYPE, MIN); case CLIENT_CREATE_ROLE: { role_t new_role; assert (strcasecmp ("CREATE_ROLE", element_name) == 0); assert (create_role_data->users != NULL); if (create_role_data->copy) switch (copy_role (create_role_data->name, create_role_data->comment, create_role_data->copy, &new_role)) { case 0: { char *uuid; uuid = role_uuid (new_role); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_role"), uuid); log_event ("role", "Role", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_role", "Role exists already")); log_event_fail ("role", "Role", NULL, "created"); break; case 2: if (send_find_error_to_client ("create_role", "role", create_role_data->copy, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("role", "Role", NULL, "created"); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_role", "Syntax error in role name")); log_event_fail ("role", "Role", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_role", "Permission denied")); log_event_fail ("role", "Role", NULL, "created"); break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_role")); log_event_fail ("role", "Role", NULL, "created"); break; } else if (create_role_data->name == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_role", "CREATE_ROLE requires a NAME")); else if (strlen (create_role_data->name) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_role", "CREATE_ROLE name must be at" " least one character long")); else switch (create_role (create_role_data->name, create_role_data->comment, create_role_data->users, &new_role)) { case 0: { char *uuid = role_uuid (new_role); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_role"), uuid); log_event ("role", "Role", NULL, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_role", "Role exists already")); log_event_fail ("role", "Role", NULL, "created"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_role", "Failed to find user")); log_event_fail ("role", "Role", NULL, "created"); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_role", "Error in user name")); log_event_fail ("group", "Group", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_role", "Permission denied")); log_event_fail ("role", "Role", NULL, "created"); break; default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_role")); log_event_fail ("role", "Role", NULL, "created"); break; } create_role_data_reset (create_role_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_CREATE_ROLE, COMMENT); CLOSE (CLIENT_CREATE_ROLE, COPY); CLOSE (CLIENT_CREATE_ROLE, NAME); CLOSE (CLIENT_CREATE_ROLE, USERS); case CLIENT_CREATE_SCANNER: assert (strcasecmp ("CREATE_SCANNER", element_name) == 0); return handle_create_scanner (omp_parser, error); CLOSE (CLIENT_CREATE_SCANNER, COMMENT); CLOSE (CLIENT_CREATE_SCANNER, COPY); CLOSE (CLIENT_CREATE_SCANNER, NAME); CLOSE (CLIENT_CREATE_SCANNER, HOST); CLOSE (CLIENT_CREATE_SCANNER, PORT); CLOSE (CLIENT_CREATE_SCANNER, TYPE); CLOSE (CLIENT_CREATE_SCANNER, CA_PUB); CLOSE (CLIENT_CREATE_SCANNER, KEY_PUB); CLOSE (CLIENT_CREATE_SCANNER, KEY_PRIV); case CLIENT_CREATE_SCHEDULE: { time_t first_time, period, period_months, duration; schedule_t new_schedule; period_months = 0; assert (strcasecmp ("CREATE_SCHEDULE", element_name) == 0); if (create_schedule_data->copy) switch (copy_schedule (create_schedule_data->name, create_schedule_data->comment, create_schedule_data->copy, &new_schedule)) { case 0: { char *uuid; uuid = schedule_uuid (new_schedule); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_schedule"), uuid); log_event ("schedule", "Schedule", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_schedule", "Schedule exists already")); log_event_fail ("schedule", "Schedule", NULL, "created"); break; case 2: if (send_find_error_to_client ("create_schedule", "schedule", create_schedule_data->copy, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("schedule", "Schedule", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_schedule", "Permission denied")); log_event_fail ("schedule", "Schedule", NULL, "created"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_schedule")); log_event_fail ("schedule", "Schedule", NULL, "created"); break; } else if (create_schedule_data->name == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_schedule", "CREATE_SCHEDULE requires a NAME entity")); else if ((first_time = time_from_strings (create_schedule_data->first_time_hour, create_schedule_data->first_time_minute, create_schedule_data->first_time_day_of_month, create_schedule_data->first_time_month, create_schedule_data->first_time_year, create_schedule_data->timezone)) == -1) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_schedule", "Failed to create time from FIRST_TIME" " elements")); else if ((period = interval_from_strings (create_schedule_data->period, create_schedule_data->period_unit, &period_months)) == -3) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_schedule", "PERIOD out of range")); else if (period < -1) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_schedule", "Failed to create interval from PERIOD")); else if ((duration = interval_from_strings (create_schedule_data->duration, create_schedule_data->duration_unit, NULL)) == -3) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_schedule", "DURATION out of range")); else if (duration < -1) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_schedule", "Failed to create interval from DURATION")); #if 0 /* The actual time of a period in months can vary, so it's extremely * hard to do this check. The schedule will still work fine if the * duration is longer than the period. */ else if (period_months && (duration > (period_months * 60 * 60 * 24 * 28))) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_schedule", "Duration too long for number of months")); #endif else if (period && (duration > period)) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_schedule", "Duration is longer than period")); else switch (create_schedule (create_schedule_data->name, create_schedule_data->comment, first_time, period == -1 ? 0 : period, period_months, duration == -1 ? 0 : duration, create_schedule_data->timezone, &new_schedule)) { case 0: { char *uuid = schedule_uuid (new_schedule); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_schedule"), uuid); log_event ("schedule", "Schedule", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_schedule", "Schedule exists already")); log_event_fail ("schedule", "Schedule", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_schedule", "Permission denied")); log_event_fail ("schedule", "Schedule", NULL, "created"); break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_schedule")); log_event_fail ("schedule", "Schedule", NULL, "created"); break; default: assert (0); SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_schedule")); log_event_fail ("schedule", "Schedule", NULL, "created"); break; } create_schedule_data_reset (create_schedule_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_CREATE_SCHEDULE, COMMENT); CLOSE (CLIENT_CREATE_SCHEDULE, COPY); CLOSE (CLIENT_CREATE_SCHEDULE, DURATION); CLOSE (CLIENT_CREATE_SCHEDULE, FIRST_TIME); CLOSE (CLIENT_CREATE_SCHEDULE, NAME); CLOSE (CLIENT_CREATE_SCHEDULE, PERIOD); CLOSE (CLIENT_CREATE_SCHEDULE, TIMEZONE); CLOSE (CLIENT_CREATE_SCHEDULE_FIRST_TIME, DAY_OF_MONTH); CLOSE (CLIENT_CREATE_SCHEDULE_FIRST_TIME, HOUR); CLOSE (CLIENT_CREATE_SCHEDULE_FIRST_TIME, MINUTE); CLOSE (CLIENT_CREATE_SCHEDULE_FIRST_TIME, MONTH); CLOSE (CLIENT_CREATE_SCHEDULE_FIRST_TIME, YEAR); CLOSE (CLIENT_CREATE_SCHEDULE_DURATION, UNIT); CLOSE (CLIENT_CREATE_SCHEDULE_PERIOD, UNIT); case CLIENT_CREATE_SLAVE: { slave_t new_slave; assert (strcasecmp ("CREATE_SLAVE", element_name) == 0); if (create_slave_data->copy) switch (copy_slave (create_slave_data->name, create_slave_data->comment, create_slave_data->copy, &new_slave)) { case 0: { char *uuid; uuid = slave_uuid (new_slave); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_slave"), uuid); log_event ("slave", "Slave", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_slave", "Slave exists already")); log_event_fail ("slave", "Slave", NULL, "created"); break; case 2: if (send_find_error_to_client ("create_slave", "slave", create_slave_data->copy, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("slave", "Slave", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_slave", "Permission denied")); log_event_fail ("slave", "Slave", NULL, "created"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_slave")); log_event_fail ("slave", "Slave", NULL, "created"); break; } else if (create_slave_data->host == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_slave", "CREATE_SLAVE requires a HOST")); else if (strlen (create_slave_data->host) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_slave", "CREATE_SLAVE HOST must be at" " least one character long")); else if (create_slave_data->login == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_slave", "CREATE_SLAVE requires a LOGIN")); else if (strlen (create_slave_data->login) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_slave", "CREATE_SLAVE LOGIN must be at" " least one character long")); else if (create_slave_data->name == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_slave", "CREATE_SLAVE requires a NAME")); else if (strlen (create_slave_data->name) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_slave", "CREATE_SLAVE NAME must be at" " least one character long")); else if (create_slave_data->port == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_slave", "CREATE_SLAVE requires a PORT")); else if (strlen (create_slave_data->port) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_slave", "CREATE_SLAVE PORT must be at" " least one character long")); /* Create slave from host string. */ else switch (create_slave (create_slave_data->name, create_slave_data->comment, create_slave_data->host, create_slave_data->port, create_slave_data->login, create_slave_data->password, &new_slave)) { case 0: { char *uuid = slave_uuid (new_slave); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_slave"), uuid); log_event ("slave", "Slave", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_slave", "Slave exists already")); log_event_fail ("slave", "Slave", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_slave", "Permission denied")); log_event_fail ("slave", "Slave", NULL, "created"); break; default: assert (0); case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_slave")); log_event_fail ("slave", "Slave", NULL, "created"); break; } create_slave_data_reset (create_slave_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_CREATE_SLAVE, COMMENT); CLOSE (CLIENT_CREATE_SLAVE, COPY); CLOSE (CLIENT_CREATE_SLAVE, HOST); CLOSE (CLIENT_CREATE_SLAVE, LOGIN); CLOSE (CLIENT_CREATE_SLAVE, NAME); CLOSE (CLIENT_CREATE_SLAVE, PASSWORD); CLOSE (CLIENT_CREATE_SLAVE, PORT); case CLIENT_CREATE_TAG: { tag_t new_tag; assert (strcasecmp ("CREATE_TAG", element_name) == 0); if (create_tag_data->copy) switch (copy_tag (create_tag_data->name, create_tag_data->comment, create_tag_data->copy, &new_tag)) { case 0: { char *uuid; uuid = tag_uuid (new_tag); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_tag"), uuid); log_event ("tag", "Tag", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_tag", "Tag exists already")); log_event_fail ("tag", "Tag", NULL, "created"); break; case 2: if (send_find_error_to_client ("create_tag", "tag", create_tag_data->copy, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("tag", "Tag", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_tag", "Permission denied")); log_event_fail ("tag", "Tag", NULL, "created"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_tag")); log_event_fail ("tag", "Tag", NULL, "created"); break; } else if (create_tag_data->name == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_tag", "CREATE_TAG requires" " a NAME element")); else if (strlen (create_tag_data->name) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_tag", "CREATE_TAG name must be" " at least one character long")); else if (create_tag_data->resource_id == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_tag", "CREATE_TAG requires" " a RESOURCE element with id attribute")); else if (create_tag_data->resource_type == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_tag", "RESOURCE in CREATE_TAG requires" " a TYPE element")); else if (valid_db_resource_type (create_tag_data->resource_type) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_tag", "TYPE in CREATE_TAG/RESOURCE must be" " a valid resource type.")); else if (strcasecmp (create_tag_data->resource_type, "tag") == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_tag", "TYPE type in CREATE_TAG/RESOURCE must not" " be 'tag'.")); else if (create_tag_data->resource_id && strlen (create_tag_data->resource_id) > 0 && resource_id_exists (create_tag_data->resource_type, create_tag_data->resource_id) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_tag", "RESOURCE id must refer to an existing" " resource or be empty.")); else { switch (create_tag (create_tag_data->name, create_tag_data->comment, create_tag_data->value, create_tag_data->resource_type, create_tag_data->resource_id, create_tag_data->active, &new_tag)) { case 0: { char *uuid; uuid = tag_uuid (new_tag); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_tag"), uuid); log_event ("tag", "Tag", uuid, "created"); free (uuid); break; } case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_tag", "Permission denied")); log_event_fail ("tag", "Tag", NULL, "created"); break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_tag")); log_event_fail ("tag", "Tag", NULL, "created"); break; } } g_debug ("trying reset"); create_tag_data_reset (create_tag_data); g_debug ("trying set client state"); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_CREATE_TAG, ACTIVE); CLOSE (CLIENT_CREATE_TAG, RESOURCE); CLOSE (CLIENT_CREATE_TAG, COPY); CLOSE (CLIENT_CREATE_TAG, COMMENT); CLOSE (CLIENT_CREATE_TAG, NAME); CLOSE (CLIENT_CREATE_TAG, VALUE); CLOSE (CLIENT_CREATE_TAG_RESOURCE, TYPE); case CLIENT_CREATE_TARGET: { lsc_credential_t ssh_lsc_credential = 0, smb_lsc_credential = 0; lsc_credential_t esxi_lsc_credential = 0; target_t new_target; assert (strcasecmp ("CREATE_TARGET", element_name) == 0); if (create_target_data->copy) switch (copy_target (create_target_data->name, create_target_data->comment, create_target_data->copy, &new_target)) { case 0: { char *uuid; uuid = target_uuid (new_target); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_target"), uuid); log_event ("target", "Target", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_target", "Target exists already")); log_event_fail ("target", "Target", NULL, "created"); break; case 2: if (send_find_error_to_client ("create_target", "target", create_target_data->copy, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("target", "Target", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_target", "Permission denied")); log_event_fail ("target", "Target", NULL, "created"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_target")); log_event_fail ("target", "Target", NULL, "created"); break; } else if (create_target_data->name == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_target", "CREATE_TARGET requires a NAME")); else if (strlen (create_target_data->name) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_target", "CREATE_TARGET name must be at" " least one character long")); else if (create_target_data->hosts == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_target", " CREATE_TARGET requires a host")); else if (strlen (create_target_data->hosts) == 0) /** @todo Legitimate to pass an empty hosts element? */ SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_target", "CREATE_TARGET hosts must be at least one" " character long")); else if (create_target_data->ssh_lsc_credential_id && find_lsc_credential_with_permission (create_target_data->ssh_lsc_credential_id, &ssh_lsc_credential, "get_lsc_credentials")) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_target")); else if (create_target_data->ssh_lsc_credential_id && ssh_lsc_credential == 0) { if (send_find_error_to_client ("create_target", "LSC credential", create_target_data->ssh_lsc_credential_id, omp_parser)) { error_send_to_client (error); return; } } else if (create_target_data->smb_lsc_credential_id && find_lsc_credential_with_permission (create_target_data->smb_lsc_credential_id, &smb_lsc_credential, "get_lsc_credentials")) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_target")); else if (create_target_data->smb_lsc_credential_id && smb_lsc_credential == 0) { if (send_find_error_to_client ("create_target", "LSC credential", create_target_data->smb_lsc_credential_id, omp_parser)) { error_send_to_client (error); return; } } else if (create_target_data->esxi_lsc_credential_id && find_lsc_credential_with_permission (create_target_data->esxi_lsc_credential_id, &esxi_lsc_credential, "get_lsc_credentials")) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_target")); else if (create_target_data->esxi_lsc_credential_id && esxi_lsc_credential == 0) { if (send_find_error_to_client ("create_target", "LSC credential", create_target_data->esxi_lsc_credential_id, omp_parser)) { error_send_to_client (error); return; } } /* Create target from host string. */ else switch (create_target (create_target_data->name, create_target_data->hosts, create_target_data->exclude_hosts, create_target_data->comment, create_target_data->port_list_id, create_target_data->port_range, ssh_lsc_credential, create_target_data->ssh_port, smb_lsc_credential, esxi_lsc_credential, create_target_data->reverse_lookup_only, create_target_data->reverse_lookup_unify, create_target_data->alive_tests, (create_target_data->make_name_unique && strcmp (create_target_data->make_name_unique, "0")) ? 1 : 0, &new_target)) { case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_target", "Target exists already")); log_event_fail ("target", "Target", NULL, "created"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_target", "Error in host specification")); log_event_fail ("target", "Target", NULL, "created"); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_target", "Host specification exceeds maximum number" " of hosts")); log_event_fail ("target", "Target", NULL, "created"); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_target", "Error in port range")); log_event_fail ("target", "Target", NULL, "created"); break; case 5: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_target", "Error in SSH port")); log_event_fail ("target", "Target", NULL, "created"); break; case 6: log_event_fail ("target", "Target", NULL, "created"); if (send_find_error_to_client ("create_target", "port_list", create_target_data->port_list_id, omp_parser)) { error_send_to_client (error); return; } break; case 7: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_target", "Error in alive test")); log_event_fail ("target", "Target", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_target", "Permission denied")); log_event_fail ("target", "Target", NULL, "created"); break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_target")); log_event_fail ("target", "Target", NULL, "created"); break; default: { char *uuid = target_uuid (new_target); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_target"), uuid); log_event ("target", "Target", uuid, "created"); free (uuid); break; } } create_target_data_reset (create_target_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_CREATE_TARGET, COMMENT); CLOSE (CLIENT_CREATE_TARGET, ESXI_LSC_CREDENTIAL); CLOSE (CLIENT_CREATE_TARGET, EXCLUDE_HOSTS); CLOSE (CLIENT_CREATE_TARGET, REVERSE_LOOKUP_ONLY); CLOSE (CLIENT_CREATE_TARGET, REVERSE_LOOKUP_UNIFY); CLOSE (CLIENT_CREATE_TARGET, ALIVE_TESTS); CLOSE (CLIENT_CREATE_TARGET, COPY); CLOSE (CLIENT_CREATE_TARGET, HOSTS); CLOSE (CLIENT_CREATE_TARGET, NAME); CLOSE (CLIENT_CREATE_TARGET, PORT_LIST); CLOSE (CLIENT_CREATE_TARGET, PORT_RANGE); CLOSE (CLIENT_CREATE_TARGET, SSH_LSC_CREDENTIAL); CLOSE (CLIENT_CREATE_TARGET, SMB_LSC_CREDENTIAL); CLOSE (CLIENT_CREATE_TARGET_NAME, MAKE_UNIQUE); CLOSE (CLIENT_CREATE_TARGET_SSH_LSC_CREDENTIAL, PORT); case CLIENT_CREATE_TASK: { config_t config = 0; target_t target = 0; scanner_t scanner = 0; slave_t slave = 0; char *tsk_uuid = NULL, *name; guint index; /* @todo Buffer the entire task creation and pass everything to a * libmanage function, so that libmanage can do the locking * properly instead of exposing the task_t. Probably easier * after removing the option to create a task from an RC * file. */ assert (strcasecmp ("CREATE_TASK", element_name) == 0); assert (create_task_data->task != (task_t) 0); /* The task already exists in the database at this point, so on * failure be sure to call request_delete_task to remove the * task. */ /** @todo Any fail cases of the CLIENT_CREATE_TASK_* states must do * so too. */ if (create_task_data->copy) { int ret; gchar *name, *comment; task_t new_task; name = task_name (create_task_data->task); comment = task_comment (create_task_data->task); ret = copy_task (name, comment, create_task_data->copy, (create_task_data->alterable && strcmp (create_task_data->alterable, "0")) ? 1 : 0, &new_task); g_free (name); g_free (comment); /* Remove the task that was created while parsing elements. */ request_delete_task (&create_task_data->task); switch (ret) { case 0: { char *uuid; task_uuid (new_task, &uuid); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_task"), uuid); log_event ("task", "Task", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_task", "Task exists already")); log_event_fail ("task", "Task", NULL, "created"); break; case 2: if (send_find_error_to_client ("create_task", "task", create_task_data->copy, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("task", "Task", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_task", "Permission denied")); log_event_fail ("task", "Task", NULL, "created"); break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_task")); log_event_fail ("task", "Task", NULL, "created"); break; } create_task_data_reset (create_task_data); set_client_state (CLIENT_AUTHENTIC); break; } if (create_task_data->scanner_id == NULL) create_task_data->scanner_id = g_strdup (SCANNER_UUID_DEFAULT); if (strcmp (create_task_data->scanner_id, SCANNER_UUID_DEFAULT) && create_task_data->slave_id) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_task", "Slave used with non-default Scanner.")); goto create_task_fail; } /* Check permissions. */ if (user_may ("create_task") == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_task", "Permission denied")); goto create_task_fail; } /* Get the task ID. */ if (task_uuid (create_task_data->task, &tsk_uuid)) { SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_task")); goto create_task_fail; } /* Check for the right combination of target and config. */ if (create_task_data->config_id == NULL || create_task_data->target_id == NULL) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_task", "CREATE_TASK requires a config" " a scanner, and a target")); goto create_task_fail; } /* Set any alert. */ assert (create_task_data->alerts); index = create_task_data->alerts->len; while (index--) { alert_t alert; gchar *alert_id; alert_id = (gchar*) g_ptr_array_index (create_task_data->alerts, index); if (strcmp (alert_id, "0") == 0) continue; if (find_alert_with_permission (alert_id, &alert, "get_alerts")) { SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_task")); goto create_task_fail; } if (alert == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_task", "CREATE_TASK alert must exist")); goto create_task_fail; } add_task_alert (create_task_data->task, alert); } /* Set alterable state. */ if (create_task_data->alterable && strcmp (create_task_data->alterable, "0")) set_task_alterable (create_task_data->task, 1); /* Set any schedule. */ if (create_task_data->schedule_id) { schedule_t schedule; int periods; periods = create_task_data->schedule_periods ? atoi (create_task_data->schedule_periods) : 0; if (find_schedule_with_permission (create_task_data->schedule_id, &schedule, "get_schedules")) { SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_task")); goto create_task_fail; } if (schedule == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_task", "CREATE_TASK schedule must exist")); goto create_task_fail; } /** @todo * * This is a contention hole. Some other process could remove * the schedule at this point. The variable "schedule" would * still refer to the removed schedule. * * This happens all over the place. Anywhere that a libmanage * client gets a reference to a resource, in fact. * * Possibly libmanage should lock the db whenever it hands out a * reference, and the client should call something to release * the lock when it's done. * * In many cases, like this one, the client could pass the UUID * directly to libmanage, instead of getting the reference. In * this case the client would then need something like * set_task_schedule_uuid. */ set_task_schedule (create_task_data->task, schedule, periods); } else if (create_task_data->schedule_periods && strlen (create_task_data->schedule_periods)) set_task_schedule_periods_id (create_task_data->task, atoi (create_task_data->schedule_periods)); /* Set any observers. */ if (create_task_data->observers) { int fail; fail = set_task_observers (create_task_data->task, create_task_data->observers); switch (fail) { case 0: break; case 1: case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_task", "User name error in observers")); goto create_task_fail; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_task")); goto create_task_fail; } } /* Set any observer groups. */ if (create_task_data->groups->len) { int fail; gchar *fail_group_id; switch ((fail = set_task_groups (create_task_data->task, create_task_data->groups, &fail_group_id))) { case 0: break; case 1: if (send_find_error_to_client ("create_task", "group", fail_group_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("task", "Task", NULL, "created"); goto create_task_fail; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_task")); log_event_fail ("task", "Task", NULL, "created"); goto create_task_fail; } } /* Check for name. */ name = task_name (create_task_data->task); if (name == NULL) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_task", "CREATE_TASK requires a name attribute")); goto create_task_fail; } if (find_config_with_permission (create_task_data->config_id, &config, "get_configs")) { SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_task")); goto create_task_fail; } if (config == 0) { if (send_find_error_to_client ("create_task", "config", create_task_data->config_id, omp_parser)) error_send_to_client (error); goto create_task_fail; } if (find_target_with_permission (create_task_data->target_id, &target, "get_targets")) { SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_task")); goto create_task_fail; } if (target == 0) { if (send_find_error_to_client ("create_task", "target", create_task_data->target_id, omp_parser)) error_send_to_client (error); goto create_task_fail; } if (find_scanner_with_permission (create_task_data->scanner_id, &scanner, "get_scanners")) { SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_task")); goto create_task_fail; } if (create_task_data->scanner_id && scanner == 0) { if (send_find_error_to_client ("create_task", "scanner", create_task_data->scanner_id, omp_parser)) error_send_to_client (error); goto create_task_fail; } if (!create_task_check_config_scanner (config, scanner)) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_task", "Scanner and config mismatched types.")); goto create_task_fail; } if (create_task_data->slave_id && find_slave_with_permission (create_task_data->slave_id, &slave, "get_slaves")) { SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_task")); goto create_task_fail; } if (create_task_data->slave_id && slave == 0) { if (send_find_error_to_client ("create_task", "slave", create_task_data->slave_id, omp_parser)) error_send_to_client (error); goto create_task_fail; } set_task_config (create_task_data->task, config); set_task_slave (create_task_data->task, slave); set_task_target (create_task_data->task, target); set_task_scanner (create_task_data->task, scanner); set_task_hosts_ordering (create_task_data->task, create_task_data->hosts_ordering); if (create_task_data->preferences) switch (set_task_preferences (create_task_data->task, create_task_data->preferences)) { case 0: break; case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_task", "Invalid auto_delete value")); goto create_task_fail; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_task", "Auto Delete count out of range" " (must be from 5 to 1200)")); goto create_task_fail; default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_task")); goto create_task_fail; } /* Send success response. */ SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_task"), tsk_uuid); make_task_complete (tsk_uuid); log_event ("task", "Task", tsk_uuid, "created"); g_free (tsk_uuid); create_task_data_reset (create_task_data); set_client_state (CLIENT_AUTHENTIC); break; create_task_fail: request_delete_task (&create_task_data->task); g_free (tsk_uuid); create_task_data_reset (create_task_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_CREATE_TASK, ALTERABLE); CLOSE (CLIENT_CREATE_TASK, COMMENT); CLOSE (CLIENT_CREATE_TASK, HOSTS_ORDERING); CLOSE (CLIENT_CREATE_TASK, SCANNER); CLOSE (CLIENT_CREATE_TASK, CONFIG); CLOSE (CLIENT_CREATE_TASK, COPY); CLOSE (CLIENT_CREATE_TASK, ALERT); CLOSE (CLIENT_CREATE_TASK, NAME); CLOSE (CLIENT_CREATE_TASK, OBSERVERS); CLOSE (CLIENT_CREATE_TASK, PREFERENCES); CLOSE (CLIENT_CREATE_TASK, TARGET); CLOSE (CLIENT_CREATE_TASK, SCHEDULE); CLOSE (CLIENT_CREATE_TASK, SCHEDULE_PERIODS); CLOSE (CLIENT_CREATE_TASK, SLAVE); CLOSE (CLIENT_CREATE_TASK_OBSERVERS, GROUP); case CLIENT_CREATE_TASK_PREFERENCES_PREFERENCE: assert (strcasecmp ("PREFERENCE", element_name) == 0); array_add (create_task_data->preferences, create_task_data->preference); create_task_data->preference = NULL; set_client_state (CLIENT_CREATE_TASK_PREFERENCES); break; case CLIENT_CREATE_TASK_PREFERENCES_PREFERENCE_NAME: assert (strcasecmp ("SCANNER_NAME", element_name) == 0); set_client_state (CLIENT_CREATE_TASK_PREFERENCES_PREFERENCE); break; CLOSE (CLIENT_CREATE_TASK_PREFERENCES_PREFERENCE, VALUE); case CLIENT_CREATE_USER: { gchar *errdesc; gchar *fail_group_id, *fail_role_id; user_t new_user; assert (strcasecmp ("CREATE_USER", element_name) == 0); errdesc = NULL; if (create_user_data->copy) switch (copy_user (create_user_data->name, NULL, create_user_data->copy, &new_user)) { case 0: { char *uuid; uuid = user_uuid (new_user); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_user"), uuid); log_event ("user", "User", uuid, "created"); free (uuid); break; } case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_user", "User exists already")); log_event_fail ("user", "User", NULL, "created"); break; case 2: if (send_find_error_to_client ("create_user", "user", create_user_data->copy, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("user", "User", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_user", "Permission denied")); log_event_fail ("user", "User", NULL, "created"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_user")); log_event_fail ("user", "User", NULL, "created"); break; } else if (create_user_data->name == NULL || strlen (create_user_data->name) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_user", "CREATE_USER requires a name")); else switch (create_user (create_user_data->name, create_user_data->password ? create_user_data->password : "", create_user_data->hosts, create_user_data->hosts_allow, create_user_data->ifaces, create_user_data->ifaces_allow, create_user_data->sources, create_user_data->groups, &fail_group_id, create_user_data->roles, &fail_role_id, &errdesc, &new_user, 1)) { case 0: { char *uuid; uuid = user_uuid (new_user); SENDF_TO_CLIENT_OR_FAIL (XML_OK_CREATED_ID ("create_user"), uuid); log_event ("user", "User", create_user_data->name, "created"); free (uuid); break; } case 1: if (send_find_error_to_client ("create_user", "group", fail_group_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("user", "User", NULL, "created"); break; case 2: if (send_find_error_to_client ("create_user", "role", fail_role_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("user", "User", NULL, "created"); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_user", "Error in host specification")); log_event_fail ("user", "User", NULL, "created"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_user", "Permission denied")); log_event_fail ("user", "User", NULL, "created"); break; case -2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_user", "User already exists")); log_event_fail ("user", "User", NULL, "created"); break; case -3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("create_user", "Error in SOURCE")); log_event_fail ("user", "User", NULL, "created"); break; case -1: if (errdesc) { char *buf = make_xml_error_syntax ("create_user", errdesc); SEND_TO_CLIENT_OR_FAIL (buf); g_free (buf); break; } /* Fall through. */ default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("create_user")); log_event_fail ("user", "User", NULL, "created"); break; } create_user_data_reset (create_user_data); set_client_state (CLIENT_AUTHENTIC); g_free (errdesc); break; } CLOSE (CLIENT_CREATE_USER, COPY); CLOSE (CLIENT_CREATE_USER, GROUPS); CLOSE (CLIENT_CREATE_USER_GROUPS, GROUP); CLOSE (CLIENT_CREATE_USER, HOSTS); CLOSE (CLIENT_CREATE_USER, IFACES); CLOSE (CLIENT_CREATE_USER, NAME); CLOSE (CLIENT_CREATE_USER, PASSWORD); CLOSE (CLIENT_CREATE_USER, ROLE); case CLIENT_CREATE_USER_SOURCES: assert (strcasecmp ("SOURCES", element_name) == 0); array_terminate (create_user_data->sources); set_client_state (CLIENT_CREATE_USER); break; case CLIENT_CREATE_USER_SOURCES_SOURCE: assert (strcasecmp ("SOURCE", element_name) == 0); if (create_user_data->current_source) array_add (create_user_data->sources, g_strdup (create_user_data->current_source)); g_free (create_user_data->current_source); create_user_data->current_source = NULL; set_client_state (CLIENT_CREATE_USER_SOURCES); break; case CLIENT_EMPTY_TRASHCAN: switch (manage_empty_trashcan ()) { case 0: SEND_TO_CLIENT_OR_FAIL (XML_OK ("empty_trashcan")); log_event ("trashcan", "Trashcan", NULL, "emptied"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("empty_trashcan", "Permission denied")); break; default: /* Programming error. */ assert (0); case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("empty_trashcan")); break; } set_client_state (CLIENT_AUTHENTIC); break; case CLIENT_MODIFY_AGENT: { assert (strcasecmp ("MODIFY_AGENT", element_name) == 0); switch (modify_agent (modify_agent_data->agent_id, modify_agent_data->name, modify_agent_data->comment)) { case 0: SENDF_TO_CLIENT_OR_FAIL (XML_OK ("modify_agent")); log_event ("agent", "Agent", modify_agent_data->agent_id, "modified"); break; case 1: if (send_find_error_to_client ("modify_agent", "agent", modify_agent_data->agent_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("agent", "Agent", modify_agent_data->agent_id, "modified"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_agent", "agent with new name exists already")); log_event_fail ("agent", "Agent", modify_agent_data->agent_id, "modified"); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_agent", "MODIFY_agent requires a agent_id")); log_event_fail ("agent", "Agent", modify_agent_data->agent_id, "modified"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_agent", "Permission denied")); log_event_fail ("agent", "Agent", modify_agent_data->agent_id, "modified"); break; default: case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_agent")); log_event_fail ("agent", "Agent", modify_agent_data->agent_id, "modified"); break; } modify_agent_data_reset (modify_agent_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_MODIFY_AGENT, COMMENT); CLOSE (CLIENT_MODIFY_AGENT, NAME); case CLIENT_MODIFY_ALERT: { event_t event; alert_condition_t condition; alert_method_t method; assert (strcasecmp ("MODIFY_ALERT", element_name) == 0); event = EVENT_ERROR; condition = ALERT_CONDITION_ERROR; method = ALERT_METHOD_ERROR; array_terminate (modify_alert_data->event_data); array_terminate (modify_alert_data->condition_data); array_terminate (modify_alert_data->method_data); if (strlen (modify_alert_data->event) && (event = event_from_name (modify_alert_data->event)) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_alert", "Failed to recognise event name")); else if (strlen (modify_alert_data->condition) && (condition = alert_condition_from_name (modify_alert_data->condition)) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_alert", "Failed to recognise condition name")); else if (strlen (modify_alert_data->method) && (method = alert_method_from_name (modify_alert_data->method)) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_alert", "Failed to recognise method name")); else switch (modify_alert (modify_alert_data->alert_id, modify_alert_data->name, modify_alert_data->comment, modify_alert_data->filter_id, event, modify_alert_data->event_data, condition, modify_alert_data->condition_data, method, modify_alert_data->method_data)) { case 0: SENDF_TO_CLIENT_OR_FAIL (XML_OK ("modify_alert")); log_event ("alert", "Alert", modify_alert_data->alert_id, "modified"); break; case 1: if (send_find_error_to_client ("modify_alert", "alert", modify_alert_data->alert_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("alert", "Alert", modify_alert_data->alert_id, "modified"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_alert", "alert with new name exists already")); log_event_fail ("alert", "Alert", modify_alert_data->alert_id, "modified"); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_alert", "MODIFY_alert requires an alert_id")); log_event_fail ("alert", "Alert", modify_alert_data->alert_id, "modified"); break; case 4: if (send_find_error_to_client ("modify_alert", "filter", modify_alert_data->filter_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("alert", "Alert", modify_alert_data->alert_id, "modified"); break; case 5: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_alert", "Filter type must be result if" " specified")); log_event_fail ("alert", "Alert", modify_alert_data->alert_id, "modified"); break; case 6: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_alert", "Validation of email address failed")); log_event_fail ("alert", "Alert", modify_alert_data->alert_id, "modified"); break; case 7: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_alert", "Invalid or unexpected condition data" " name")); log_event_fail ("alert", "Alert", NULL, "modified"); break; case 8: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_alert", "Syntax error in condition data")); log_event_fail ("alert", "Alert", NULL, "modified"); break; case 9: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_alert", "Email subject too long")); log_event_fail ("alert", "Alert", NULL, "modified"); break; case 10: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_alert", "Email message too long")); log_event_fail ("alert", "Alert", NULL, "modified"); break; case 11: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_alert", "Failed to find filter for condition")); log_event_fail ("alert", "Alert", NULL, "modified"); break; case 12: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_alert", "Error in Send host")); log_event_fail ("alert", "Alert", NULL, "modify"); break; case 13: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_alert", "Error in Send port")); log_event_fail ("alert", "Alert", NULL, "modify"); break; case 14: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_alert", "Failed to find report format for Send" " method")); log_event_fail ("alert", "Alert", NULL, "modify"); break; case 15: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_alert", "Error in SCP host")); log_event_fail ("alert", "Alert", NULL, "modify"); break; case 17: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_alert", "Failed to find report format for SCP" " method")); log_event_fail ("alert", "Alert", NULL, "modify"); break; case 18: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_alert", "Error in SCP username")); log_event_fail ("alert", "Alert", NULL, "modify"); break; case 19: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_alert", "Error in SCP username")); log_event_fail ("alert", "Alert", NULL, "modify"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_alert", "Permission denied")); log_event_fail ("alert", "Alert", modify_alert_data->alert_id, "modified"); break; default: case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_alert")); log_event_fail ("alert", "Alert", modify_alert_data->alert_id, "modified"); break; } modify_alert_data_reset (modify_alert_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_MODIFY_ALERT, COMMENT); CLOSE (CLIENT_MODIFY_ALERT, NAME); CLOSE (CLIENT_MODIFY_ALERT, FILTER); CLOSE (CLIENT_MODIFY_ALERT, EVENT); CLOSE (CLIENT_MODIFY_ALERT, CONDITION); CLOSE (CLIENT_MODIFY_ALERT, METHOD); case CLIENT_MODIFY_ALERT_EVENT_DATA: { gchar *string; assert (strcasecmp ("DATA", element_name) == 0); assert (modify_alert_data->event_data); assert (modify_alert_data->part_data); assert (modify_alert_data->part_name); string = g_strconcat (modify_alert_data->part_name, "0", modify_alert_data->part_data, NULL); string[strlen (modify_alert_data->part_name)] = '\0'; array_add (modify_alert_data->event_data, string); openvas_free_string_var (&modify_alert_data->part_data); openvas_free_string_var (&modify_alert_data->part_name); openvas_append_string (&modify_alert_data->part_data, ""); openvas_append_string (&modify_alert_data->part_name, ""); set_client_state (CLIENT_MODIFY_ALERT_EVENT); break; } CLOSE (CLIENT_MODIFY_ALERT_EVENT_DATA, NAME); case CLIENT_MODIFY_ALERT_CONDITION_DATA: { gchar *string; assert (strcasecmp ("DATA", element_name) == 0); assert (modify_alert_data->condition_data); assert (modify_alert_data->part_data); assert (modify_alert_data->part_name); string = g_strconcat (modify_alert_data->part_name, "0", modify_alert_data->part_data, NULL); string[strlen (modify_alert_data->part_name)] = '\0'; array_add (modify_alert_data->condition_data, string); openvas_free_string_var (&modify_alert_data->part_data); openvas_free_string_var (&modify_alert_data->part_name); openvas_append_string (&modify_alert_data->part_data, ""); openvas_append_string (&modify_alert_data->part_name, ""); set_client_state (CLIENT_MODIFY_ALERT_CONDITION); break; } CLOSE (CLIENT_MODIFY_ALERT_CONDITION_DATA, NAME); case CLIENT_MODIFY_ALERT_METHOD_DATA: { gchar *string; assert (strcasecmp ("DATA", element_name) == 0); assert (modify_alert_data->method_data); assert (modify_alert_data->part_data); assert (modify_alert_data->part_name); string = g_strconcat (modify_alert_data->part_name, "0", modify_alert_data->part_data, NULL); string[strlen (modify_alert_data->part_name)] = '\0'; array_add (modify_alert_data->method_data, string); openvas_free_string_var (&modify_alert_data->part_data); openvas_free_string_var (&modify_alert_data->part_name); openvas_append_string (&modify_alert_data->part_data, ""); openvas_append_string (&modify_alert_data->part_name, ""); set_client_state (CLIENT_MODIFY_ALERT_METHOD); break; } CLOSE (CLIENT_MODIFY_ALERT_METHOD_DATA, NAME); case CLIENT_MODIFY_AUTH: { GKeyFile *key_file; assert (strcasecmp ("MODIFY_AUTH", element_name) == 0); if (user_may ("modify_auth") == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_auth", "Permission denied")); modify_auth_data_reset (modify_auth_data); set_client_state (CLIENT_AUTHENTIC); break; } key_file = g_key_file_new (); /* Lets output the data for now. */ GSList *item = modify_auth_data->groups; while (item) { auth_group_t *auth_group; gchar *group; GSList *setting; auth_group = (auth_group_t *) item->data; group = auth_group->group_name; if (group == NULL) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_auth", "GROUP requires a name attribute")); g_key_file_free (key_file); set_client_state (CLIENT_AUTHENTIC); modify_auth_data_reset (modify_auth_data); break; } setting = auth_group->settings; while (setting) { auth_conf_setting_t *kvp = (auth_conf_setting_t *) setting->data; g_key_file_set_value (key_file, group, kvp->key, kvp->value); setting = g_slist_next (setting); } item = g_slist_next (item); } /** @todo Implement sighup in and send to openvas-manager in order * for the changed config to take effect. */ // FIX switch (openvas_auth_write_config (key_file)) { case 0: SEND_TO_CLIENT_OR_FAIL (XML_OK ("modify_auth")); break; case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_auth", "Valid authdn required")); break; default: case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_auth")); break; } g_key_file_free (key_file); modify_auth_data_reset (modify_auth_data); set_client_state (CLIENT_AUTHENTIC); break; } case CLIENT_MODIFY_AUTH_GROUP: { assert (strcasecmp ("GROUP", element_name) == 0); /* Add settings to group. */ if (modify_auth_data->curr_group_settings) { auth_group_t *new_group; assert (modify_auth_data->groups); new_group = modify_auth_data->groups->data; assert (new_group); new_group->settings = modify_auth_data->curr_group_settings; } modify_auth_data->curr_group_settings = NULL; set_client_state (CLIENT_MODIFY_AUTH); break; } case CLIENT_MODIFY_AUTH_GROUP_AUTHCONFSETTING: { set_client_state (CLIENT_MODIFY_AUTH_GROUP); break; } case CLIENT_MODIFY_CONFIG: { config_t config; if (user_may ("modify_config") == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_config", "Permission denied")); modify_config_data_reset (modify_config_data); set_client_state (CLIENT_AUTHENTIC); break; } if (modify_config_data->config_id == NULL || strlen (modify_config_data->config_id) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_config", "MODIFY_CONFIG requires a config_id" " attribute")); else if ((modify_config_data->nvt_selection_family /* This array implies FAMILY_SELECTION. */ && modify_config_data->families_static_all) || ((modify_config_data->nvt_selection_family || modify_config_data->families_static_all) && (modify_config_data->preference_name || modify_config_data->preference_value || modify_config_data->preference_nvt_oid))) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_config", "MODIFY_CONFIG requires either a PREFERENCE or" " an NVT_SELECTION or a FAMILY_SELECTION")); else if (find_config (modify_config_data->config_id, &config)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_config")); else if (config == 0) { if (send_find_error_to_client ("modify_config", "config", modify_config_data->config_id, omp_parser)) { error_send_to_client (error); return; } } else if (modify_config_data->nvt_selection_family) { switch (manage_set_config_nvts (config, modify_config_data->nvt_selection_family, modify_config_data->nvt_selection)) { case 0: SEND_TO_CLIENT_OR_FAIL (XML_OK ("modify_config")); log_event ("config", "Scan config", modify_config_data->config_id, "modified"); break; case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_config", "Config is in use")); log_event_fail ("config", "Scan Config", modify_config_data->config_id, "modified"); break; #if 0 case -1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_config", "MODIFY_CONFIG PREFERENCE requires at" " least one of the VALUE and NVT" " elements")); break; #endif default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_config")); log_event_fail ("config", "Scan Config", modify_config_data->config_id, "modified"); break; } } else if (modify_config_data->families_static_all) { /* There was a FAMILY_SELECTION. */ switch (manage_set_config_families (config, modify_config_data->families_growing_all, modify_config_data->families_static_all, modify_config_data->families_growing_empty, modify_config_data->family_selection_growing)) { case 0: SEND_TO_CLIENT_OR_FAIL (XML_OK ("modify_config")); log_event ("config", "Scan config", modify_config_data->config_id, "modified"); break; case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_config", "Config is in use")); log_event_fail ("config", "Scan Config", modify_config_data->config_id, "modified"); break; #if 0 case -1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_config", "MODIFY_CONFIG PREFERENCE requires at" " least one of the VALUE and NVT" " elements")); break; #endif default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_config")); log_event_fail ("config", "Scan Config", modify_config_data->config_id, "modified"); break; } } else if (modify_config_data->name && modify_config_data->comment) switch (manage_set_config_name_comment (config, modify_config_data->name, modify_config_data->comment)) { case 0: SEND_TO_CLIENT_OR_FAIL (XML_OK ("modify_config")); break; case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_config", "MODIFY_CONFIG name must be unique")); break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_config")); break; default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_config")); break; } else if (modify_config_data->name) switch (manage_set_config_name (config, modify_config_data->name)) { case 0: SEND_TO_CLIENT_OR_FAIL (XML_OK ("modify_config")); break; case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_config", "MODIFY_CONFIG name must be unique")); break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_config")); break; default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_config")); break; } else if (modify_config_data->comment) switch (manage_set_config_comment (config, modify_config_data->comment)) { case 0: SEND_TO_CLIENT_OR_FAIL (XML_OK ("modify_config")); break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_config")); break; default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_config")); break; } else if (modify_config_data->preference_name == NULL || strlen (modify_config_data->preference_name) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_config", "MODIFY_CONFIG PREFERENCE requires a NAME" " element")); else switch (manage_set_config_preference (config, modify_config_data->preference_nvt_oid, modify_config_data->preference_name, modify_config_data->preference_value)) { case 0: SEND_TO_CLIENT_OR_FAIL (XML_OK ("modify_config")); break; case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_config", "Config is in use")); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_config", "Empty radio value")); break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_config")); break; default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_config")); break; } } modify_config_data_reset (modify_config_data); set_client_state (CLIENT_AUTHENTIC); break; CLOSE (CLIENT_MODIFY_CONFIG, COMMENT); case CLIENT_MODIFY_CONFIG_FAMILY_SELECTION: assert (strcasecmp ("FAMILY_SELECTION", element_name) == 0); assert (modify_config_data->families_growing_all); assert (modify_config_data->families_static_all); assert (modify_config_data->families_growing_empty); array_terminate (modify_config_data->families_growing_all); array_terminate (modify_config_data->families_static_all); array_terminate (modify_config_data->families_growing_empty); set_client_state (CLIENT_MODIFY_CONFIG); break; CLOSE (CLIENT_MODIFY_CONFIG, NAME); case CLIENT_MODIFY_CONFIG_NVT_SELECTION: assert (strcasecmp ("NVT_SELECTION", element_name) == 0); assert (modify_config_data->nvt_selection); array_terminate (modify_config_data->nvt_selection); set_client_state (CLIENT_MODIFY_CONFIG); break; CLOSE (CLIENT_MODIFY_CONFIG, PREFERENCE); case CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_FAMILY: assert (strcasecmp ("FAMILY", element_name) == 0); if (modify_config_data->family_selection_family_name) { if (modify_config_data->family_selection_family_growing) { if (modify_config_data->family_selection_family_all) /* Growing 1 and select all 1. */ array_add (modify_config_data->families_growing_all, modify_config_data->family_selection_family_name); else /* Growing 1 and select all 0. */ array_add (modify_config_data->families_growing_empty, modify_config_data->family_selection_family_name); } else { if (modify_config_data->family_selection_family_all) /* Growing 0 and select all 1. */ array_add (modify_config_data->families_static_all, modify_config_data->family_selection_family_name); /* Else growing 0 and select all 0. */ } } modify_config_data->family_selection_family_name = NULL; set_client_state (CLIENT_MODIFY_CONFIG_FAMILY_SELECTION); break; case CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_GROWING: assert (strcasecmp ("GROWING", element_name) == 0); if (modify_config_data->family_selection_growing_text) { modify_config_data->family_selection_growing = atoi (modify_config_data->family_selection_growing_text); openvas_free_string_var (&modify_config_data->family_selection_growing_text); } else modify_config_data->family_selection_growing = 0; set_client_state (CLIENT_MODIFY_CONFIG_FAMILY_SELECTION); break; case CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_FAMILY_ALL: assert (strcasecmp ("ALL", element_name) == 0); if (modify_config_data->family_selection_family_all_text) { modify_config_data->family_selection_family_all = atoi (modify_config_data->family_selection_family_all_text); openvas_free_string_var (&modify_config_data->family_selection_family_all_text); } else modify_config_data->family_selection_family_all = 0; set_client_state (CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_FAMILY); break; CLOSE (CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_FAMILY, NAME); case CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_FAMILY_GROWING: assert (strcasecmp ("GROWING", element_name) == 0); if (modify_config_data->family_selection_family_growing_text) { modify_config_data->family_selection_family_growing = atoi (modify_config_data->family_selection_family_growing_text); openvas_free_string_var (&modify_config_data->family_selection_family_growing_text); } else modify_config_data->family_selection_family_growing = 0; set_client_state (CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_FAMILY); break; CLOSE (CLIENT_MODIFY_CONFIG_NVT_SELECTION, FAMILY); case CLIENT_MODIFY_CONFIG_NVT_SELECTION_NVT: assert (strcasecmp ("NVT", element_name) == 0); if (modify_config_data->nvt_selection_nvt_oid) array_add (modify_config_data->nvt_selection, modify_config_data->nvt_selection_nvt_oid); modify_config_data->nvt_selection_nvt_oid = NULL; set_client_state (CLIENT_MODIFY_CONFIG_NVT_SELECTION); break; CLOSE (CLIENT_MODIFY_CONFIG_PREFERENCE, NAME); CLOSE (CLIENT_MODIFY_CONFIG_PREFERENCE, NVT); case CLIENT_MODIFY_CONFIG_PREFERENCE_VALUE: assert (strcasecmp ("VALUE", element_name) == 0); /* Init, so it's the empty string when the value is empty. */ openvas_append_string (&modify_config_data->preference_value, ""); set_client_state (CLIENT_MODIFY_CONFIG_PREFERENCE); break; case CLIENT_MODIFY_FILTER: { assert (strcasecmp ("MODIFY_FILTER", element_name) == 0); switch (modify_filter (modify_filter_data->filter_id, modify_filter_data->name, modify_filter_data->comment, modify_filter_data->term, modify_filter_data->type)) { case 0: SENDF_TO_CLIENT_OR_FAIL (XML_OK ("modify_filter")); log_event ("filter", "Filter", modify_filter_data->filter_id, "modified"); break; case 1: if (send_find_error_to_client ("modify_filter", "filter", modify_filter_data->filter_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("filter", "Filter", modify_filter_data->filter_id, "modified"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_filter", "Filter with new name exists already")); log_event_fail ("filter", "Filter", modify_filter_data->filter_id, "modified"); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_filter", "Error in type name")); log_event_fail ("filter", "Filter", modify_filter_data->filter_id, "modified"); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_filter", "MODIFY_FILTER requires a filter_id")); log_event_fail ("filter", "Filter", modify_filter_data->filter_id, "modified"); break; case 5: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_filter", "Filter is used by an alert so type must be" " 'result' if specified")); log_event_fail ("filter", "Filter", modify_filter_data->filter_id, "modified"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_filter", "Permission denied")); log_event_fail ("filter", "Filter", modify_filter_data->filter_id, "modified"); break; default: case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_filter")); log_event_fail ("filter", "Filter", modify_filter_data->filter_id, "modified"); break; } modify_filter_data_reset (modify_filter_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_MODIFY_FILTER, COMMENT); CLOSE (CLIENT_MODIFY_FILTER, NAME); CLOSE (CLIENT_MODIFY_FILTER, TYPE); CLOSE (CLIENT_MODIFY_FILTER, TERM); case CLIENT_MODIFY_GROUP: { assert (strcasecmp ("MODIFY_GROUP", element_name) == 0); switch (modify_group (modify_group_data->group_id, modify_group_data->name, modify_group_data->comment, modify_group_data->users)) { case 0: SENDF_TO_CLIENT_OR_FAIL (XML_OK ("modify_group")); log_event ("group", "Group", modify_group_data->group_id, "modified"); break; case 1: if (send_find_error_to_client ("modify_group", "group", modify_group_data->group_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("group", "Group", modify_group_data->group_id, "modified"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_group", "Failed to find user")); log_event_fail ("group", "Group", modify_group_data->group_id, "modified"); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_group", "MODIFY_GROUP requires a group_id" " attribute")); log_event_fail ("group", "Group", modify_group_data->group_id, "modified"); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_group", "Error in user name")); log_event_fail ("group", "Group", modify_group_data->group_id, "modified"); break; case 5: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_group", "Group with new name exists already")); log_event_fail ("group", "Group", modify_group_data->group_id, "modified"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_group", "Permission denied")); log_event_fail ("group", "Group", modify_group_data->group_id, "modified"); break; default: case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_group")); log_event_fail ("group", "Group", modify_group_data->group_id, "modified"); break; } modify_group_data_reset (modify_group_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_MODIFY_GROUP, COMMENT); CLOSE (CLIENT_MODIFY_GROUP, NAME); CLOSE (CLIENT_MODIFY_GROUP, USERS); case CLIENT_MODIFY_LSC_CREDENTIAL: { assert (strcasecmp ("MODIFY_LSC_CREDENTIAL", element_name) == 0); switch (modify_lsc_credential (modify_lsc_credential_data->lsc_credential_id, modify_lsc_credential_data->name, modify_lsc_credential_data->comment, modify_lsc_credential_data->login, modify_lsc_credential_data->password)) { case 0: SENDF_TO_CLIENT_OR_FAIL (XML_OK ("modify_lsc_credential")); log_event ("lsc_credential", "LSC Credential", modify_lsc_credential_data->lsc_credential_id, "modified"); break; case 1: if (send_find_error_to_client ("modify_lsc_credential", "lsc_credential", modify_lsc_credential_data->lsc_credential_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("lsc_credential", "LSC Credential", modify_lsc_credential_data->lsc_credential_id, "modified"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_lsc_credential", "lsc_credential with new name" " exists already")); log_event_fail ("lsc_credential", "LSC Credential", modify_lsc_credential_data->lsc_credential_id, "modified"); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_lsc_credential", "MODIFY_lsc_credential requires a" " lsc_credential_id")); log_event_fail ("lsc_credential", "LSC Credential", modify_lsc_credential_data->lsc_credential_id, "modified"); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_lsc_credential", "Attempt to change login or password of" " packaged LSC credential")); log_event_fail ("lsc_credential", "LSC Credential", modify_lsc_credential_data->lsc_credential_id, "modified"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_lsc_credential", "Permission denied")); log_event_fail ("lsc_credential", "LSC Credential", modify_lsc_credential_data->lsc_credential_id, "modified"); break; default: case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_lsc_credential")); log_event_fail ("lsc_credential", "LSC Credential", modify_lsc_credential_data->lsc_credential_id, "modified"); break; } modify_lsc_credential_data_reset (modify_lsc_credential_data); set_client_state (CLIENT_AUTHENTIC); break; } modify_lsc_credential_data_reset (modify_lsc_credential_data); set_client_state (CLIENT_AUTHENTIC); break; CLOSE (CLIENT_MODIFY_LSC_CREDENTIAL, NAME); CLOSE (CLIENT_MODIFY_LSC_CREDENTIAL, COMMENT); CLOSE (CLIENT_MODIFY_LSC_CREDENTIAL, LOGIN); CLOSE (CLIENT_MODIFY_LSC_CREDENTIAL, PASSWORD); case CLIENT_MODIFY_NOTE: { task_t task = 0; result_t result = 0; note_t note = 0; assert (strcasecmp ("MODIFY_NOTE", element_name) == 0); if (user_may ("modify_note") == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_note", "Permission denied")); modify_note_data_reset (modify_note_data); set_client_state (CLIENT_AUTHENTIC); break; } if (modify_note_data->note_id == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_note", "MODIFY_NOTE requires a note_id attribute")); else if (modify_note_data->text == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_note", "MODIFY_NOTE requires a TEXT entity")); // FIX move find_* down into manage_sql.c modify_note else if (find_note_with_permission (modify_note_data->note_id, ¬e, "modify_note")) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_note")); else if (note == 0) { if (send_find_error_to_client ("modify_note", "note", modify_note_data->note_id, omp_parser)) { error_send_to_client (error); return; } } else if (modify_note_data->task_id && find_task_with_permission (modify_note_data->task_id, &task, NULL)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_note")); else if (modify_note_data->task_id && task == 0 && find_trash_task_with_permission (modify_note_data ->task_id, &task, NULL)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_note")); else if (modify_note_data->task_id && task == 0) { if (send_find_error_to_client ("modify_note", "task", modify_note_data->task_id, omp_parser)) { error_send_to_client (error); return; } } else if (modify_note_data->result_id && find_result_with_permission (modify_note_data->result_id, &result, NULL)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_note")); else if (modify_note_data->result_id && result == 0) { if (send_find_error_to_client ("modify_note", "result", modify_note_data->result_id, omp_parser)) { error_send_to_client (error); return; } } else switch (modify_note (note, modify_note_data->active, modify_note_data->text, modify_note_data->hosts, modify_note_data->port, modify_note_data->severity, modify_note_data->threat, task, result)) { case 0: SENDF_TO_CLIENT_OR_FAIL (XML_OK ("modify_note")); break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_note")); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_note", "Error in port specification")); log_event_fail ("note", "Note", modify_note_data->note_id, "modified"); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_note", "Error in severity specification")); log_event_fail ("note", "Note", modify_note_data->note_id, "modified"); break; default: assert (0); SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_note")); break; } modify_note_data_reset (modify_note_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_MODIFY_NOTE, ACTIVE); CLOSE (CLIENT_MODIFY_NOTE, HOSTS); CLOSE (CLIENT_MODIFY_NOTE, PORT); CLOSE (CLIENT_MODIFY_NOTE, RESULT); CLOSE (CLIENT_MODIFY_NOTE, SEVERITY); CLOSE (CLIENT_MODIFY_NOTE, TASK); CLOSE (CLIENT_MODIFY_NOTE, TEXT); CLOSE (CLIENT_MODIFY_NOTE, THREAT); case CLIENT_MODIFY_OVERRIDE: { task_t task = 0; result_t result = 0; override_t override = 0; assert (strcasecmp ("MODIFY_OVERRIDE", element_name) == 0); if (user_may ("modify_override") == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_override", "Permission denied")); modify_override_data_reset (modify_override_data); set_client_state (CLIENT_AUTHENTIC); break; } if (modify_override_data->override_id == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_override", "MODIFY_OVERRIDE requires a override_id attribute")); else if (modify_override_data->text == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_override", "MODIFY_OVERRIDE requires a TEXT entity")); else if (find_override_with_permission (modify_override_data->override_id, &override, "modify_override")) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_override")); else if (override == 0) { if (send_find_error_to_client ("modify_override", "override", modify_override_data->override_id, omp_parser)) { error_send_to_client (error); return; } } else if (modify_override_data->task_id && find_task_with_permission (modify_override_data->task_id, &task, NULL)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_override")); else if (modify_override_data->task_id && task == 0 && find_trash_task_with_permission (modify_override_data ->task_id, &task, NULL)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_override")); else if (modify_override_data->task_id && task == 0) { if (send_find_error_to_client ("modify_override", "task", modify_override_data->task_id, omp_parser)) { error_send_to_client (error); return; } } else if (modify_override_data->result_id && find_result_with_permission (modify_override_data->result_id, &result, NULL)) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_override")); else if (modify_override_data->result_id && result == 0) { if (send_find_error_to_client ("modify_override", "result", modify_override_data->result_id, omp_parser)) { error_send_to_client (error); return; } } else switch (modify_override (override, modify_override_data->active, modify_override_data->text, modify_override_data->hosts, modify_override_data->port, modify_override_data->threat, modify_override_data->new_threat, modify_override_data->severity, modify_override_data->new_severity, task, result)) { case 0: SENDF_TO_CLIENT_OR_FAIL (XML_OK ("modify_override")); break; case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_override", "ACTIVE must be an integer >= -2")); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_override", "Error in port specification")); log_event_fail ("override", "Override", modify_override_data->override_id, "modified"); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_override", "Error in severity specification")); log_event_fail ("override", "Override", modify_override_data->override_id, "modified"); break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_override")); break; default: assert (0); SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_override")); break; } modify_override_data_reset (modify_override_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_MODIFY_OVERRIDE, ACTIVE); CLOSE (CLIENT_MODIFY_OVERRIDE, HOSTS); CLOSE (CLIENT_MODIFY_OVERRIDE, NEW_SEVERITY); CLOSE (CLIENT_MODIFY_OVERRIDE, NEW_THREAT); CLOSE (CLIENT_MODIFY_OVERRIDE, PORT); CLOSE (CLIENT_MODIFY_OVERRIDE, RESULT); CLOSE (CLIENT_MODIFY_OVERRIDE, SEVERITY); CLOSE (CLIENT_MODIFY_OVERRIDE, TASK); CLOSE (CLIENT_MODIFY_OVERRIDE, TEXT); CLOSE (CLIENT_MODIFY_OVERRIDE, THREAT); case CLIENT_MODIFY_PERMISSION: { assert (strcasecmp ("MODIFY_PERMISSION", element_name) == 0); if (modify_permission_data->permission_id == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_permission", "MODIFY_PERMISSION requires a permission_id attribute")); else switch (modify_permission (modify_permission_data->permission_id, modify_permission_data->name, modify_permission_data->comment, modify_permission_data->resource_id, modify_permission_data->resource_type, modify_permission_data->subject_type, modify_permission_data->subject_id)) { case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_permission", "Permission exists already")); log_event_fail ("permission", "Permission", modify_permission_data->permission_id, "modified"); break; case 2: if (send_find_error_to_client ("modify_permission", "subject", modify_permission_data->subject_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("permission", "Permission", modify_permission_data->permission_id, "modified"); break; case 3: if (send_find_error_to_client ("modify_permission", "resource", modify_permission_data->resource_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("permission", "Permission", modify_permission_data->permission_id, "modified"); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_permission", "MODIFY_PERMISSION requires a PERMISSION" " ID")); log_event_fail ("permission", "Permission", modify_permission_data->permission_id, "modified"); break; case 5: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_permission", "Error in RESOURCE")); log_event_fail ("permission", "Permission", modify_permission_data->permission_id, "modified"); break; case 6: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_permission", "Error in SUBJECT")); log_event_fail ("permission", "Permission", modify_permission_data->permission_id, "modified"); break; case 7: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_permission", "Error in NAME")); log_event_fail ("permission", "Permission", modify_permission_data->permission_id, "modified"); break; case 8: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_permission", "NAME required to find resource")); log_event_fail ("permission", "Permission", modify_permission_data->permission_id, "modified"); break; case 9: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_permission", "Permission does not accept a resource")); log_event_fail ("permission", "Permission", NULL, "modified"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_permission", "Permission denied")); log_event_fail ("permission", "Permission", modify_permission_data->permission_id, "modified"); break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_permission")); log_event_fail ("permission", "Permission", modify_permission_data->permission_id, "modified"); break; default: { SENDF_TO_CLIENT_OR_FAIL (XML_OK ("modify_permission")); log_event ("permission", "Permission", modify_permission_data->permission_id, "modified"); break; } } modify_permission_data_reset (modify_permission_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_MODIFY_PERMISSION, COMMENT); CLOSE (CLIENT_MODIFY_PERMISSION, SUBJECT); CLOSE (CLIENT_MODIFY_PERMISSION_SUBJECT, TYPE); CLOSE (CLIENT_MODIFY_PERMISSION, NAME); CLOSE (CLIENT_MODIFY_PERMISSION, RESOURCE); CLOSE (CLIENT_MODIFY_PERMISSION_RESOURCE, TYPE); case CLIENT_MODIFY_PORT_LIST: { assert (strcasecmp ("MODIFY_PORT_LIST", element_name) == 0); switch (modify_port_list (modify_port_list_data->port_list_id, modify_port_list_data->name, modify_port_list_data->comment)) { case 0: SENDF_TO_CLIENT_OR_FAIL (XML_OK ("modify_port_list")); log_event ("port_list", "Port List", modify_port_list_data->port_list_id, "modified"); break; case 1: if (send_find_error_to_client ("modify_port_list", "port_list", modify_port_list_data->port_list_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("port_list", "Port List", modify_port_list_data->port_list_id, "modified"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_port_list", "Port List with new name exists already")); log_event_fail ("port_list", "Port List", modify_port_list_data->port_list_id, "modified"); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_port_list", "modify_port_list requires a port_list_id")); log_event_fail ("port_list", "Port List", modify_port_list_data->port_list_id, "modified"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_port_list", "Permission denied")); log_event_fail ("port_list", "Port List", modify_port_list_data->port_list_id, "modified"); break; default: case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_port_list")); log_event_fail ("port_list", "Port List", modify_port_list_data->port_list_id, "modified"); break; } modify_port_list_data_reset (modify_port_list_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_MODIFY_PORT_LIST, COMMENT); CLOSE (CLIENT_MODIFY_PORT_LIST, NAME); case CLIENT_MODIFY_REPORT: { assert (strcasecmp ("MODIFY_REPORT", element_name) == 0); switch (modify_report (modify_report_data->report_id, modify_report_data->comment)) { case 0: SENDF_TO_CLIENT_OR_FAIL (XML_OK ("modify_report")); log_event ("report", "Report", modify_report_data->report_id, "modified"); break; case 1: if (send_find_error_to_client ("modify_report", "report", modify_report_data->report_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("report", "Report", modify_report_data->report_id, "modified"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_report", "MODIFY_report requires a report_id")); log_event_fail ("report", "Report", modify_report_data->report_id, "modified"); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_report", "MODIFY_REPORT requires a COMMENT element")); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_report", "Permission denied")); log_event_fail ("report", "Report", modify_report_data->report_id, "modified"); break; default: case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_report")); log_event_fail ("report", "Report", modify_report_data->report_id, "modified"); break; } modify_report_data_reset (modify_report_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_MODIFY_REPORT, COMMENT); case CLIENT_MODIFY_REPORT_FORMAT: { assert (strcasecmp ("MODIFY_REPORT_FORMAT", element_name) == 0); switch (modify_report_format (modify_report_format_data->report_format_id, modify_report_format_data->name, modify_report_format_data->summary, modify_report_format_data->active, modify_report_format_data->param_name, modify_report_format_data->param_value)) { case 0: SENDF_TO_CLIENT_OR_FAIL (XML_OK ("modify_report_format")); log_event ("report_format", "Report Format", modify_report_format_data->report_format_id, "modified"); break; case 1: if (send_find_error_to_client ("modify_report_format", "report_format", modify_report_format_data->report_format_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("report_format", "Report Format", modify_report_format_data->report_format_id, "modified"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_report_format", "MODIFY_report_format requires a report_format_id")); log_event_fail ("report_format", "Report Format", modify_report_format_data->report_format_id, "modified"); break; case 3: if (send_find_error_to_client ("modify_report_format", "report format param", modify_report_format_data->param_name, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("report_format", "Report Format", modify_report_format_data->report_format_id, "modified"); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_report_format", "Parameter validation failed")); log_event_fail ("report_format", "Report Format", modify_report_format_data->report_format_id, "modified"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_report_format", "Permission denied")); log_event_fail ("report_format", "Report Format", modify_report_format_data->report_format_id, "modified"); break; default: case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_report_format")); log_event_fail ("report_format", "Report Format", modify_report_format_data->report_format_id, "modified"); break; } modify_report_format_data_reset (modify_report_format_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_MODIFY_REPORT_FORMAT, ACTIVE); CLOSE (CLIENT_MODIFY_REPORT_FORMAT, NAME); CLOSE (CLIENT_MODIFY_REPORT_FORMAT, SUMMARY); CLOSE (CLIENT_MODIFY_REPORT_FORMAT, PARAM); CLOSE (CLIENT_MODIFY_REPORT_FORMAT_PARAM, NAME); CLOSE (CLIENT_MODIFY_REPORT_FORMAT_PARAM, VALUE); case CLIENT_MODIFY_ROLE: { assert (strcasecmp ("MODIFY_ROLE", element_name) == 0); switch (modify_role (modify_role_data->role_id, modify_role_data->name, modify_role_data->comment, modify_role_data->users)) { case 0: SENDF_TO_CLIENT_OR_FAIL (XML_OK ("modify_role")); log_event ("role", "Role", modify_role_data->role_id, "modified"); break; case 1: if (send_find_error_to_client ("modify_role", "role", modify_role_data->role_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("role", "Role", modify_role_data->role_id, "modified"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_role", "Failed to find user")); log_event_fail ("role", "Role", modify_role_data->role_id, "modified"); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_role", "MODIFY_ROLE requires a role_id" " attribute")); log_event_fail ("role", "Role", modify_role_data->role_id, "modified"); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_role", "Error in user name")); log_event_fail ("role", "Role", modify_role_data->role_id, "modified"); break; case 5: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_role", "Role with new name exists already")); log_event_fail ("role", "Role", modify_role_data->role_id, "modified"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_role", "Permission denied")); log_event_fail ("role", "Role", modify_role_data->role_id, "modified"); break; default: case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_role")); log_event_fail ("role", "Role", modify_role_data->role_id, "modified"); break; } modify_role_data_reset (modify_role_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_MODIFY_ROLE, COMMENT); CLOSE (CLIENT_MODIFY_ROLE, NAME); CLOSE (CLIENT_MODIFY_ROLE, USERS); case CLIENT_MODIFY_SCANNER: assert (strcasecmp ("MODIFY_SCANNER", element_name) == 0); return handle_modify_scanner (omp_parser, error); CLOSE (CLIENT_MODIFY_SCANNER, TYPE); CLOSE (CLIENT_MODIFY_SCANNER, PORT); CLOSE (CLIENT_MODIFY_SCANNER, HOST); CLOSE (CLIENT_MODIFY_SCANNER, COMMENT); CLOSE (CLIENT_MODIFY_SCANNER, NAME); CLOSE (CLIENT_MODIFY_SCANNER, CA_PUB); CLOSE (CLIENT_MODIFY_SCANNER, KEY_PUB); CLOSE (CLIENT_MODIFY_SCANNER, KEY_PRIV); case CLIENT_MODIFY_SCHEDULE: { time_t first_time, period, period_months, duration; assert (strcasecmp ("MODIFY_SCHEDULE", element_name) == 0); period_months = 0; /* Only change schedule "first time" if given. */ first_time = modify_schedule_data->first_time_hour || modify_schedule_data->first_time_minute || modify_schedule_data->first_time_day_of_month || modify_schedule_data->first_time_month || modify_schedule_data->first_time_year; if (first_time && ((first_time = time_from_strings (modify_schedule_data->first_time_hour, modify_schedule_data->first_time_minute, modify_schedule_data->first_time_day_of_month, modify_schedule_data->first_time_month, modify_schedule_data->first_time_year, modify_schedule_data->timezone)) == -1)) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_schedule", "Failed to create time from FIRST_TIME" " elements")); else if ((period = interval_from_strings (modify_schedule_data->period, modify_schedule_data->period_unit, &period_months)) == -3) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_schedule", "PERIOD out of range")); else if (period < -1) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_schedule", "Failed to create interval from PERIOD")); else if ((duration = interval_from_strings (modify_schedule_data->duration, modify_schedule_data->duration_unit, NULL)) == -3) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_schedule", "DURATION out of range")); else if (duration < -1) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_schedule", "Failed to create interval from DURATION")); #if 0 /* The actual time of a period in months can vary, so it's extremely * hard to do this check. The schedule will still work fine if the * duration is longer than the period. */ else if (period_months && (duration > (period_months * 60 * 60 * 24 * 28))) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_schedule", "Duration too long for number of months")); #endif else if (period && (duration > period)) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_schedule", "Duration is longer than period")); else switch (modify_schedule (modify_schedule_data->schedule_id, modify_schedule_data->name, modify_schedule_data->comment, first_time, period == -1 ? 0 : period, period_months, duration == -1 ? 0 : duration, modify_schedule_data->timezone)) { case 0: SENDF_TO_CLIENT_OR_FAIL (XML_OK ("modify_schedule")); log_event ("schedule", "Schedule", modify_schedule_data->schedule_id, "modified"); break; case 1: if (send_find_error_to_client ("modify_schedule", "schedule", modify_schedule_data->schedule_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("schedule", "Schedule", modify_schedule_data->schedule_id, "modified"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_schedule", "Schedule with new name exists already")); log_event_fail ("schedule", "Schedule", modify_schedule_data->schedule_id, "modified"); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_schedule", "Error in type name")); log_event_fail ("schedule", "Schedule", modify_schedule_data->schedule_id, "modified"); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_schedule", "MODIFY_SCHEDULE requires a schedule_id")); log_event_fail ("schedule", "Schedule", modify_schedule_data->schedule_id, "modified"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_schedule", "Permission denied")); log_event_fail ("schedule", "Schedule", modify_schedule_data->schedule_id, "modified"); break; default: case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_schedule")); log_event_fail ("schedule", "Schedule", modify_schedule_data->schedule_id, "modified"); break; } modify_schedule_data_reset (modify_schedule_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_MODIFY_SCHEDULE, COMMENT); CLOSE (CLIENT_MODIFY_SCHEDULE, DURATION); CLOSE (CLIENT_MODIFY_SCHEDULE, FIRST_TIME); CLOSE (CLIENT_MODIFY_SCHEDULE, NAME); CLOSE (CLIENT_MODIFY_SCHEDULE, PERIOD); CLOSE (CLIENT_MODIFY_SCHEDULE, TIMEZONE); CLOSE (CLIENT_MODIFY_SCHEDULE_FIRST_TIME, DAY_OF_MONTH); CLOSE (CLIENT_MODIFY_SCHEDULE_FIRST_TIME, HOUR); CLOSE (CLIENT_MODIFY_SCHEDULE_FIRST_TIME, MINUTE); CLOSE (CLIENT_MODIFY_SCHEDULE_FIRST_TIME, MONTH); CLOSE (CLIENT_MODIFY_SCHEDULE_FIRST_TIME, YEAR); CLOSE (CLIENT_MODIFY_SCHEDULE_DURATION, UNIT); CLOSE (CLIENT_MODIFY_SCHEDULE_PERIOD, UNIT); case CLIENT_MODIFY_SETTING: { gchar *errdesc = NULL; if (((modify_setting_data->name == NULL) && (modify_setting_data->setting_id == NULL)) || (modify_setting_data->value == NULL)) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_setting", "MODIFY_SETTING requires a NAME or setting_id" " and a VALUE")); else switch (modify_setting (modify_setting_data->setting_id, modify_setting_data->name, modify_setting_data->value, &errdesc)) { case 0: SEND_TO_CLIENT_OR_FAIL (XML_OK ("modify_setting")); break; case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_setting", "Failed to find setting")); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_setting", "Value validation failed")); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_setting", "Permission denied")); break; case -1: if (errdesc) { char *buf = make_xml_error_syntax ("modify_setting", errdesc); SEND_TO_CLIENT_OR_FAIL (buf); g_free (buf); break; } /* Fall through. */ default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_setting")); break; } g_free (errdesc); } modify_setting_data_reset (modify_setting_data); set_client_state (CLIENT_AUTHENTIC); break; CLOSE (CLIENT_MODIFY_SETTING, NAME); CLOSE (CLIENT_MODIFY_SETTING, VALUE); case CLIENT_MODIFY_SLAVE: { assert (strcasecmp ("MODIFY_SLAVE", element_name) == 0); switch (modify_slave (modify_slave_data->slave_id, modify_slave_data->name, modify_slave_data->comment, modify_slave_data->host, modify_slave_data->port, modify_slave_data->login, modify_slave_data->password)) { case 0: SENDF_TO_CLIENT_OR_FAIL (XML_OK ("modify_slave")); log_event ("slave", "Slave", modify_slave_data->slave_id, "modified"); break; case 1: if (send_find_error_to_client ("modify_slave", "slave", modify_slave_data->slave_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("slave", "Slave", modify_slave_data->slave_id, "modified"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_slave", "Slave with new name exists already")); log_event_fail ("slave", "Slave", modify_slave_data->slave_id, "modified"); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_slave", "MODIFY_SLAVE requires a slave_id")); log_event_fail ("slave", "Slave", modify_slave_data->slave_id, "modified"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_slave", "Permission denied")); log_event_fail ("slave", "Slave", modify_slave_data->slave_id, "modified"); break; default: case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_slave")); log_event_fail ("slave", "Slave", modify_slave_data->slave_id, "modified"); break; } modify_slave_data_reset (modify_slave_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_MODIFY_SLAVE, COMMENT); CLOSE (CLIENT_MODIFY_SLAVE, NAME); CLOSE (CLIENT_MODIFY_SLAVE, HOST); CLOSE (CLIENT_MODIFY_SLAVE, PORT); CLOSE (CLIENT_MODIFY_SLAVE, LOGIN); CLOSE (CLIENT_MODIFY_SLAVE, PASSWORD); case CLIENT_MODIFY_TAG: { assert (strcasecmp ("MODIFY_TAG", element_name) == 0); if (modify_tag_data->tag_id == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_tag", "MODIFY_TAG requires a tag_id attribute")); else if (modify_tag_data->name && strcmp(modify_tag_data->name, "") == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_tag", "name in MODIFY_TAG must be at least one" " character long or omitted completely")); else if (modify_tag_data->resource_type && valid_db_resource_type (modify_tag_data->resource_type) == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_tag", "TYPE in MODIFY_TAG/RESOURCE must be" " a valid resource type.")); else if (modify_tag_data->resource_type && strcasecmp (modify_tag_data->resource_type, "tag") == 0) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_tag", "TYPE type in MODIFY_TAG/RESOURCE must not" " be 'tag'.")); else if (modify_tag_data->resource_id && strlen (modify_tag_data->resource_id) > 0 && (resource_id_exists (modify_tag_data->resource_type, modify_tag_data->resource_id) == 0) && (trash_id_exists (modify_tag_data->resource_type, modify_tag_data->resource_id) == 0)) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_tag", "RESOURCE id must refer to an" " existing resource or be empty.")); else switch (modify_tag (modify_tag_data->tag_id, modify_tag_data->name, modify_tag_data->comment, modify_tag_data->value, modify_tag_data->resource_type, modify_tag_data->resource_id, modify_tag_data->active)) { case 0: SENDF_TO_CLIENT_OR_FAIL (XML_OK ("modify_tag")); log_event ("tag", "Tag", modify_tag_data->tag_id, "modified"); break; case 1: if (send_find_error_to_client ("modify_tag", "tag", modify_tag_data->tag_id, omp_parser)) { error_send_to_client (error); return; } log_event_fail ("tag", "Tag", modify_tag_data->tag_id, "modified"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_tag", "MODIFY_TAG requires a tag_id")); log_event_fail ("tag", "Tag", modify_tag_data->tag_id, "modified"); case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_tag", "Permission denied")); log_event_fail ("tag", "Tag", modify_tag_data->tag_id, "modified"); break; default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_tag")); log_event_fail ("tag", "Tag", modify_tag_data->tag_id, "modified"); break; } modify_tag_data_reset (modify_tag_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_MODIFY_TAG, ACTIVE); CLOSE (CLIENT_MODIFY_TAG, RESOURCE); CLOSE (CLIENT_MODIFY_TAG, COMMENT); CLOSE (CLIENT_MODIFY_TAG, NAME); CLOSE (CLIENT_MODIFY_TAG, VALUE); CLOSE (CLIENT_MODIFY_TAG_RESOURCE, TYPE); case CLIENT_MODIFY_TARGET: { assert (strcasecmp ("MODIFY_TARGET", element_name) == 0); if (modify_target_data->target_id == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_target", "MODIFY_TARGET requires a target_id" " attribute")); else switch (modify_target (modify_target_data->target_id, modify_target_data->name, modify_target_data->hosts, modify_target_data->exclude_hosts, modify_target_data->comment, modify_target_data->port_list_id, modify_target_data->ssh_lsc_credential_id, modify_target_data->ssh_port, modify_target_data->smb_lsc_credential_id, modify_target_data->esxi_lsc_credential_id, modify_target_data->reverse_lookup_only, modify_target_data->reverse_lookup_unify, modify_target_data->alive_tests)) { case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_target", "Target exists already")); log_event_fail ("target", "Target", modify_target_data->target_id, "modified"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_target", "Error in host specification")); log_event_fail ("target", "Target", modify_target_data->target_id, "modified"); break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_target", "Host specification exceeds maximum number" " of hosts")); log_event_fail ("target", "Target", modify_target_data->target_id, "modified"); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_target", "Error in port range")); log_event_fail ("target", "Target", modify_target_data->target_id, "modified"); break; case 5: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_target", "Error in SSH port")); log_event_fail ("target", "Target", modify_target_data->target_id, "modified"); break; case 6: log_event_fail ("target", "Target", modify_target_data->target_id, "modified"); if (send_find_error_to_client ("modify_target", "port_list", modify_target_data->port_list_id, omp_parser)) { error_send_to_client (error); return; } break; case 7: log_event_fail ("target", "Target", modify_target_data->target_id, "modified"); if (send_find_error_to_client ("modify_target", "LSC credential", modify_target_data->ssh_lsc_credential_id, omp_parser)) { error_send_to_client (error); return; } break; case 8: log_event_fail ("target", "Target", modify_target_data->target_id, "modified"); if (send_find_error_to_client ("modify_target", "LSC credential", modify_target_data->smb_lsc_credential_id, omp_parser)) { error_send_to_client (error); return; } break; case 9: log_event_fail ("target", "Target", modify_target_data->target_id, "modified"); if (send_find_error_to_client ("modify_target", "target", modify_target_data->target_id, omp_parser)) { error_send_to_client (error); return; } break; case 10: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_target", "Error in alive test")); log_event_fail ("target", "Target", modify_target_data->target_id, "modified"); break; case 11: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_target", "MODIFY_TARGET name must be at" " least one character long")); log_event_fail ("target", "Target", modify_target_data->target_id, "modified"); break; case 12: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_target", "MODIFY_TARGET EXCLUDE_HOSTS requires" " a HOSTS")); log_event_fail ("target", "Target", modify_target_data->target_id, "modified"); break; case 13: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_target", "MODIFY_TARGET with a HOSTS requires an" " EXCLUDE_HOSTS")); log_event_fail ("target", "Target", modify_target_data->target_id, "modified"); break; case 14: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_target", "MODIFY_TARGET HOSTS must be at least one" "character long")); log_event_fail ("target", "Target", modify_target_data->target_id, "modified"); break; case 15: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_target", "Target is in use")); log_event_fail ("target", "Target", modify_target_data->target_id, "modified"); break; case 16: log_event_fail ("target", "Target", modify_target_data->target_id, "modified"); if (send_find_error_to_client ("modify_target", "LSC credential", modify_target_data->esxi_lsc_credential_id, omp_parser)) { error_send_to_client (error); return; } break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_target", "Permission denied")); log_event_fail ("target", "Target", modify_target_data->target_id, "modified"); break; case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_target")); log_event_fail ("target", "Target", modify_target_data->target_id, "modified"); break; default: { SENDF_TO_CLIENT_OR_FAIL (XML_OK ("modify_target")); log_event ("target", "Target", modify_target_data->target_id, "modified"); break; } } modify_target_data_reset (modify_target_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_MODIFY_TARGET, ESXI_LSC_CREDENTIAL); CLOSE (CLIENT_MODIFY_TARGET, EXCLUDE_HOSTS); CLOSE (CLIENT_MODIFY_TARGET, REVERSE_LOOKUP_ONLY); CLOSE (CLIENT_MODIFY_TARGET, REVERSE_LOOKUP_UNIFY); CLOSE (CLIENT_MODIFY_TARGET, ALIVE_TESTS); CLOSE (CLIENT_MODIFY_TARGET, COMMENT); CLOSE (CLIENT_MODIFY_TARGET, HOSTS); CLOSE (CLIENT_MODIFY_TARGET, NAME); CLOSE (CLIENT_MODIFY_TARGET, PORT_LIST); CLOSE (CLIENT_MODIFY_TARGET, SSH_LSC_CREDENTIAL); CLOSE (CLIENT_MODIFY_TARGET, SMB_LSC_CREDENTIAL); CLOSE (CLIENT_MODIFY_TARGET_SSH_LSC_CREDENTIAL, PORT); case CLIENT_MODIFY_TASK: assert (strcasecmp ("MODIFY_TASK", element_name) == 0); if (user_may ("modify_task") == 0) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_task", "Permission denied")); modify_task_data_reset (modify_task_data); set_client_state (CLIENT_AUTHENTIC); break; } /** @todo Update to match "create_task (config, target)". */ if (modify_task_data->task_id) { task_t task = 0; if (find_task_with_permission (modify_task_data->task_id, &task, "modify_task")) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_task")); else if (task == 0) { if (send_find_error_to_client ("modify_task", "task", modify_task_data->task_id, omp_parser)) { error_send_to_client (error); return; } } else if (modify_task_data->action && (modify_task_data->comment || modify_task_data->alerts->len || modify_task_data->groups->len || modify_task_data->name)) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_task", "Too many parameters at once")); else if ((task_target (task) == 0) && (modify_task_data->alerts->len || modify_task_data->schedule_id || modify_task_data->slave_id)) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_task", "For container tasks only name, comment and" " observers can be modified")); else if (!modify_task_check_slave_scanner (task, modify_task_data->slave_id, modify_task_data->scanner_id)) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_task", "Slave used with non-default Scanner.")); else if (!modify_task_check_config_scanner (task, modify_task_data->config_id, modify_task_data->scanner_id)) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_task", "Config and Scanner types mismatch.")); else if (modify_task_data->action) { if (modify_task_data->file_name == NULL) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_task", "MODIFY_TASK FILE requires a name" " attribute")); else if (strcmp (modify_task_data->action, "update") == 0) { manage_task_update_file (task, modify_task_data->file_name, modify_task_data->file ? modify_task_data->file : ""); log_event ("task", "Task", modify_task_data->task_id, "modified"); SEND_TO_CLIENT_OR_FAIL (XML_OK ("modify_task")); } else if (strcmp (modify_task_data->action, "remove") == 0) { manage_task_remove_file (task, modify_task_data->file_name); log_event ("task", "Task", modify_task_data->task_id, "modified"); SEND_TO_CLIENT_OR_FAIL (XML_OK ("modify_task")); } else { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_task", "MODIFY_TASK action must be" " \"update\" or \"remove\"")); log_event_fail ("task", "Task", modify_task_data->task_id, "modified"); } } else { int fail = 0; /** @todo It'd probably be better to allow only one * modification at a time, that is, one parameter or one of * file, name and comment. Otherwise a syntax error in a * later part of the command would result in an error being * returned while some part of the command actually * succeeded. */ if (modify_task_data->name) { fail = set_task_parameter (task, "NAME", modify_task_data->name); modify_task_data->name = NULL; if (fail) { SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_task")); log_event_fail ("task", "Task", modify_task_data->task_id, "modified"); } } if (fail == 0 && modify_task_data->comment) { fail = set_task_parameter (task, "COMMENT", modify_task_data->comment); modify_task_data->comment = NULL; if (fail) { SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_task")); log_event_fail ("task", "Task", modify_task_data->task_id, "modified"); } } if (fail == 0 && modify_task_data->config_id) { config_t config = 0; if (strcmp (modify_task_data->config_id, "0") == 0) { /* Leave it as it is. */ } else if ((fail = ((task_run_status (task) != TASK_STATUS_NEW) && (task_alterable (task) == 0)))) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_task", "Status must be New to edit Config")); else if ((fail = find_config_with_permission (modify_task_data->config_id, &config, "get_configs"))) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_task")); else if (config == 0) { if (send_find_error_to_client ("modify_task", "config", modify_task_data->config_id, omp_parser)) { error_send_to_client (error); return; } fail = 1; } else set_task_config (task, config); } if (fail == 0 && modify_task_data->observers) { fail = set_task_observers (task, modify_task_data->observers); switch (fail) { case 0: break; case 1: case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_task", "User name error")); log_event_fail ("task", "Task", modify_task_data->task_id, "modified"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_task")); log_event_fail ("task", "Task", modify_task_data->task_id, "modified"); } } if (fail == 0 && modify_task_data->alerts->len) { gchar *fail_alert_id; switch ((fail = set_task_alerts (task, modify_task_data->alerts, &fail_alert_id))) { case 0: break; case 1: if (send_find_error_to_client ("modify_task", "alert", fail_alert_id, omp_parser)) { error_send_to_client (error); return; } fail = 1; log_event_fail ("task", "Task", modify_task_data->task_id, "modified"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_task")); log_event_fail ("task", "Task", modify_task_data->task_id, "modified"); } } if (fail == 0 && modify_task_data->alterable) { if (task_run_status (task) != TASK_STATUS_NEW) { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_task", "Task must be New to modify" " Alterable state")); fail = 1; } else set_task_alterable (task, strcmp (modify_task_data->alterable, "0")); } if (fail == 0 && modify_task_data->groups->len) { gchar *fail_group_id; switch ((fail = set_task_groups (task, modify_task_data->groups, &fail_group_id))) { case 0: break; case 1: if (send_find_error_to_client ("modify_task", "group", fail_group_id, omp_parser)) { error_send_to_client (error); return; } fail = 1; log_event_fail ("task", "Task", modify_task_data->task_id, "modified"); break; case -1: default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_task")); log_event_fail ("task", "Task", modify_task_data->task_id, "modified"); } } if (fail == 0 && modify_task_data->schedule_id) { schedule_t schedule = 0; int periods; periods = modify_task_data->schedule_periods ? atoi (modify_task_data->schedule_periods) : 0; if (strcmp (modify_task_data->schedule_id, "0") == 0) { set_task_schedule (task, 0, periods); } else if ((fail = find_schedule_with_permission (modify_task_data->schedule_id, &schedule, "get_schedules"))) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_task")); else if (schedule == 0) { if (send_find_error_to_client ("modify_task", "schedule", modify_task_data->schedule_id, omp_parser)) { error_send_to_client (error); return; } fail = 1; } else if (set_task_schedule (task, schedule, periods)) { SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_task")); fail = 1; } } else if (fail == 0 && modify_task_data->schedule_periods && strlen (modify_task_data->schedule_periods)) set_task_schedule_periods (modify_task_data->task_id, atoi (modify_task_data->schedule_periods)); if (fail == 0 && modify_task_data->slave_id) { slave_t slave = 0; if (strcmp (modify_task_data->slave_id, "0") == 0) { set_task_slave (task, 0); } else if ((fail = find_slave_with_permission (modify_task_data->slave_id, &slave, "get_slaves"))) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_task")); else if (slave == 0) { if (send_find_error_to_client ("modify_task", "slave", modify_task_data->slave_id, omp_parser)) { error_send_to_client (error); return; } fail = 1; } else { set_task_slave (task, slave); } } if (fail == 0 && modify_task_data->target_id) { target_t target = 0; if (strcmp (modify_task_data->target_id, "0") == 0) { /* Leave it as it is. */ } else if ((fail = (task_run_status (task) != TASK_STATUS_NEW && (task_alterable (task) == 0)))) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_task", "Status must be New to edit Target")); else if ((fail = find_target_with_permission (modify_task_data->target_id, &target, "get_targets"))) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_task")); else if (target == 0) { if (send_find_error_to_client ("modify_task", "target", modify_task_data->target_id, omp_parser)) { error_send_to_client (error); return; } fail = 1; } else set_task_target (task, target); } if (fail == 0 && modify_task_data->scanner_id) { scanner_t scanner = 0; if (strcmp (modify_task_data->scanner_id, "0") == 0) { /* Leave it as is. */ } else if ((fail = (task_run_status (task) != TASK_STATUS_NEW && (task_alterable (task) == 0)))) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_task", "Status must be New to edit Scanner")); else if ((fail = find_scanner_with_permission (modify_task_data->scanner_id, &scanner, "get_scanners"))) SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_task")); else if (scanner == 0) { if (send_find_error_to_client ("modify_task", "scanner", modify_task_data->scanner_id, omp_parser)) { error_send_to_client (error); return; } fail = 1; } else set_task_scanner (task, scanner); } if (fail == 0 && modify_task_data->preferences) switch (set_task_preferences (task, modify_task_data->preferences)) { case 0: break; case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_task", "Invalid auto_delete value")); fail = 1; break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_task", "Auto Delete count out of range" " (must be from 5 to 1200)")); fail = 1; break; default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_task")); fail = 1; } if (fail == 0 && modify_task_data->hosts_ordering) set_task_hosts_ordering (task, modify_task_data->hosts_ordering); if (fail == 0) { log_event ("task", "Task", modify_task_data->task_id, "modified"); SEND_TO_CLIENT_OR_FAIL (XML_OK ("modify_task")); } } } else SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_task", "MODIFY_TASK requires a task_id attribute")); modify_task_data_reset (modify_task_data); set_client_state (CLIENT_AUTHENTIC); break; CLOSE (CLIENT_MODIFY_TASK, ALTERABLE); CLOSE (CLIENT_MODIFY_TASK, COMMENT); CLOSE (CLIENT_MODIFY_TASK, HOSTS_ORDERING); CLOSE (CLIENT_MODIFY_TASK, SCANNER); CLOSE (CLIENT_MODIFY_TASK, CONFIG); CLOSE (CLIENT_MODIFY_TASK, ALERT); CLOSE (CLIENT_MODIFY_TASK, NAME); CLOSE (CLIENT_MODIFY_TASK, OBSERVERS); CLOSE (CLIENT_MODIFY_TASK, PREFERENCES); CLOSE (CLIENT_MODIFY_TASK, SCHEDULE); CLOSE (CLIENT_MODIFY_TASK, SCHEDULE_PERIODS); CLOSE (CLIENT_MODIFY_TASK, SLAVE); CLOSE (CLIENT_MODIFY_TASK, TARGET); CLOSE (CLIENT_MODIFY_TASK, FILE); CLOSE (CLIENT_MODIFY_TASK_OBSERVERS, GROUP); case CLIENT_MODIFY_TASK_PREFERENCES_PREFERENCE: assert (strcasecmp ("PREFERENCE", element_name) == 0); array_add (modify_task_data->preferences, modify_task_data->preference); modify_task_data->preference = NULL; set_client_state (CLIENT_MODIFY_TASK_PREFERENCES); break; case CLIENT_MODIFY_TASK_PREFERENCES_PREFERENCE_NAME: assert (strcasecmp ("SCANNER_NAME", element_name) == 0); set_client_state (CLIENT_MODIFY_TASK_PREFERENCES_PREFERENCE); break; CLOSE (CLIENT_MODIFY_TASK_PREFERENCES_PREFERENCE, VALUE); case CLIENT_MODIFY_USER: { assert (strcasecmp ("MODIFY_USER", element_name) == 0); if ((modify_user_data->name == NULL && modify_user_data->user_id == NULL) || (modify_user_data->name && (strlen (modify_user_data->name) == 0)) || (modify_user_data->user_id && (strlen (modify_user_data->user_id) == 0))) SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_user", "MODIFY_USER requires NAME or user_id")); else { gchar *fail_group_id, *fail_role_id, *errdesc; errdesc = NULL; switch (modify_user (modify_user_data->user_id, &modify_user_data->name, modify_user_data->new_name, ((modify_user_data->modify_password && modify_user_data->password) ? modify_user_data->password /* Leave the password as it is. */ : NULL), modify_user_data->hosts, modify_user_data->hosts_allow, modify_user_data->ifaces, modify_user_data->ifaces_allow, modify_user_data->sources, modify_user_data->groups, &fail_group_id, modify_user_data->roles, &fail_role_id, &errdesc)) { case 0: SEND_TO_CLIENT_OR_FAIL (XML_OK ("modify_user")); break; case 1: if (send_find_error_to_client ("modify_user", "group", fail_group_id, omp_parser)) { error_send_to_client (error); return; } break; case 2: if (send_find_error_to_client ("modify_user", "user", modify_user_data->user_id ?: modify_user_data->name, omp_parser)) { error_send_to_client (error); return; } break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_OK ("modify_user")); log_event ("user", "User", modify_user_data->name, "raised to Admin role"); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_OK ("modify_user")); log_event ("user", "User", modify_user_data->name, "downgraded from Admin role"); break; case 5: if (send_find_error_to_client ("modify_user", "role", fail_role_id, omp_parser)) { error_send_to_client (error); return; } break; case 6: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_user", "Error in host specification")); log_event_fail ("user", "User", NULL, "modified"); break; case 7: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_user", "Error in user name")); log_event_fail ("user", "User", NULL, "modified"); break; case 8: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_user", "User with name exists already")); log_event_fail ("user", "User", NULL, "modified"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_user", "Permission denied")); break; case -2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_user", "Unknown role")); break; case -3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("modify_user", "Error in SOURCES")); break; case -1: if (errdesc) { char *buf = make_xml_error_syntax ("modify_user", errdesc); SEND_TO_CLIENT_OR_FAIL (buf); g_free (buf); break; } /* Fall through. */ default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("modify_user")); break; } g_free (errdesc); } modify_user_data_reset (modify_user_data); set_client_state (CLIENT_AUTHENTIC); break; } CLOSE (CLIENT_MODIFY_USER, GROUPS); CLOSE (CLIENT_MODIFY_USER_GROUPS, GROUP); CLOSE (CLIENT_MODIFY_USER, HOSTS); CLOSE (CLIENT_MODIFY_USER, IFACES); CLOSE (CLIENT_MODIFY_USER, NAME); CLOSE (CLIENT_MODIFY_USER, NEW_NAME); CLOSE (CLIENT_MODIFY_USER, PASSWORD); CLOSE (CLIENT_MODIFY_USER, ROLE); case CLIENT_MODIFY_USER_SOURCES: assert (strcasecmp ("SOURCES", element_name) == 0); array_terminate (modify_user_data->sources); set_client_state (CLIENT_MODIFY_USER); break; case CLIENT_MODIFY_USER_SOURCES_SOURCE: assert (strcasecmp ("SOURCE", element_name) == 0); array_add (modify_user_data->sources, g_strdup (modify_user_data->current_source)); g_free (modify_user_data->current_source); modify_user_data->current_source = NULL; set_client_state (CLIENT_MODIFY_USER_SOURCES); break; case CLIENT_TEST_ALERT: if (test_alert_data->alert_id) { switch (manage_alert (test_alert_data->alert_id, MANAGE_EXAMPLE_TASK_UUID, EVENT_TASK_RUN_STATUS_CHANGED, (void*) TASK_STATUS_DONE)) { case 0: SEND_TO_CLIENT_OR_FAIL (XML_OK ("test_alert")); break; case 1: if (send_find_error_to_client ("test_alert", "alert", test_alert_data->alert_id, omp_parser)) { error_send_to_client (error); return; } break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("test_alert", "Permission denied")); break; case 2: case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("test_alert")); break; case -2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("test_alert", "Failed to find report format for" " alert")); break; case -3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("test_alert", "Failed to find filter for alert")); break; default: /* Programming error. */ assert (0); SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("test_alert")); break; } } else SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("test_alert", "TEST_ALERT requires an alert_id" " attribute")); test_alert_data_reset (test_alert_data); set_client_state (CLIENT_AUTHENTIC); break; case CLIENT_RESTORE: if (restore_data->id) { switch (manage_restore (restore_data->id)) { case 0: SEND_TO_CLIENT_OR_FAIL (XML_OK ("restore")); log_event ("resource", "Resource", restore_data->id, "restored"); break; case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("restore", "Resource refers into trashcan")); break; case 2: if (send_find_error_to_client ("restore", "resource", restore_data->id, omp_parser)) { error_send_to_client (error); return; } break; case 3: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("restore", "A resource with this name exists" " already")); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("restore", "A resource with this UUID exists" " already")); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("restore", "Permission denied")); break; default: /* Programming error. */ assert (0); case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("restore")); break; } } else SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("restore", "RESTORE requires an id attribute")); restore_data_reset (restore_data); set_client_state (CLIENT_AUTHENTIC); break; case CLIENT_RESUME_TASK: if (resume_task_data->task_id) { if (forked == 2) /* Prevent the forked child from forking again, as then both * forked children would be using the same server session. */ abort (); /** @todo Respond with error or something. */ else { char *report_id; switch (resume_task (resume_task_data->task_id, &report_id)) { case 0: { gchar *msg; msg = g_strdup_printf ("" "%s" "", report_id); free (report_id); if (send_to_client (msg, write_to_client, write_to_client_data)) { g_free (msg); error_send_to_client (error); return; } g_free (msg); } forked = 1; log_event ("task", "Task", resume_task_data->task_id, "resumed"); break; case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("resume_task", "Task is active already")); log_event_fail ("task", "Task", resume_task_data->task_id, "resumed"); break; case 22: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("resume_task", "Task must be in Stopped state")); log_event_fail ("task", "Task", resume_task_data->task_id, "resumed"); break; case 2: /* Forked task process: success. */ current_error = 2; g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_INVALID_CONTENT, "Dummy error for current_error"); break; case 4: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("resume_task", "Resuming not supported")); log_event_fail ("task", "Task", resume_task_data->task_id, "resumed"); break; case 3: /* Find failed. */ if (send_find_error_to_client ("resume_task", "task", resume_task_data->task_id, omp_parser)) { error_send_to_client (error); return; } break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("resume_task", "Permission denied")); log_event_fail ("task", "Task", resume_task_data->task_id, "resumed"); break; case -10: /* Forked task process: error. */ current_error = -10; g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_INVALID_CONTENT, "Dummy error for current_error"); break; case -6: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("resume_task", "There is already a task running in" " this process")); log_event_fail ("task", "Task", resume_task_data->task_id, "resumed"); break; case -2: /* Task target lacks hosts. This is checked when the * target is created. */ assert (0); /*@fallthrough@*/ case -4: /* Task lacks target. This is checked when the task is * created anyway. */ assert (0); /*@fallthrough@*/ case -1: case -3: /* Failed to create report. */ SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("resume_task")); log_event_fail ("task", "Task", resume_task_data->task_id, "resumed"); break; case -5: SEND_XML_SERVICE_DOWN ("resume_task"); log_event_fail ("task", "Task", resume_task_data->task_id, "resumed"); break; default: /* Programming error. */ assert (0); SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("resume_task")); log_event_fail ("task", "Task", resume_task_data->task_id, "resumed"); break; } } } else SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("resume_task", "RESUME_TASK requires a task_id" " attribute")); resume_task_data_reset (resume_task_data); set_client_state (CLIENT_AUTHENTIC); break; case CLIENT_RUN_WIZARD: if (run_wizard_data->name) { gchar *command_error; gchar *response = NULL; int read_only; read_only = (run_wizard_data->read_only && strcmp (run_wizard_data->read_only, "") && strcmp (run_wizard_data->read_only, "0")); switch (manage_run_wizard (run_wizard_data->name, (int (*) (void *, gchar *, gchar **)) process_omp, omp_parser, run_wizard_data->params, read_only, run_wizard_data->mode, &command_error, &response)) { case 3: /* Parent after a start_task fork. */ forked = 1; case 0: { gchar *msg; msg = g_strdup_printf ("" "%s%s%s" "", response ? "" : "", response ? response : "", response ? "" : ""); if (send_to_client (msg, write_to_client, write_to_client_data)) { g_free (msg); g_free (response); error_send_to_client (error); return; } g_free (msg); g_free (response); if (run_wizard_data->read_only == 0) log_event ("wizard", "Wizard", run_wizard_data->name, "run"); break; } case 1: { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("run_wizard", "NAME characters must be alphanumeric" " or underscore")); run_wizard_data_reset (run_wizard_data); set_client_state (CLIENT_AUTHENTIC); break; } case 2: { /* Process forked to run a task. */ current_error = 2; g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_INVALID_CONTENT, "Dummy error for current_error"); break; } case 4: case 6: { gchar *msg; msg = g_strdup_printf ("", command_error ? command_error : "Internal Error"); if (command_error) g_free (command_error); if (send_to_client (msg, write_to_client, write_to_client_data)) { g_free (msg); error_send_to_client (error); return; } g_free (msg); log_event_fail ("wizard", "Wizard", run_wizard_data->name, "run"); break; } case 5: { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("run_wizard", "Wizard is not marked as read only")); break; } case 99: { SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("run_wizard", "Permission denied")); break; } case -1: { /* Internal error. */ SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("run_wizard")); log_event_fail ("wizard", "Wizard", run_wizard_data->name, "run"); break; } case -2: { gchar *msg; /* to_scanner buffer full. */ msg = g_strdup_printf ("" ""); if (send_to_client (msg, write_to_client, write_to_client_data)) { g_free (msg); error_send_to_client (error); return; } g_free (msg); log_event_fail ("wizard", "Wizard", run_wizard_data->name, "run: to_scanner buffer full"); break; } case -10: { /* Process forked to run a task. Task start failed. */ current_error = -10; g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_INVALID_CONTENT, "Dummy error for current_error"); break; } } } else SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("run_wizard", "RUN_WIZARD requires a NAME" " element")); run_wizard_data_reset (run_wizard_data); set_client_state (CLIENT_AUTHENTIC); break; CLOSE (CLIENT_RUN_WIZARD, MODE); CLOSE (CLIENT_RUN_WIZARD, NAME); CLOSE (CLIENT_RUN_WIZARD, PARAMS); CLOSE (CLIENT_RUN_WIZARD_PARAMS_PARAM, NAME); CLOSE (CLIENT_RUN_WIZARD_PARAMS_PARAM, VALUE); case CLIENT_RUN_WIZARD_PARAMS_PARAM: assert (strcasecmp ("PARAM", element_name) == 0); array_add (run_wizard_data->params, run_wizard_data->param); run_wizard_data->param = NULL; set_client_state (CLIENT_RUN_WIZARD_PARAMS); break; case CLIENT_START_TASK: if (start_task_data->task_id) { if (forked == 2) /* Prevent the forked child from forking again, as then both * forked children would be using the same server session. */ abort (); /** @todo Respond with error or something. */ else { char *report_id = NULL; switch (start_task (start_task_data->task_id, &report_id)) { case 0: { gchar *msg; msg = g_strdup_printf ("" "%s" "", report_id ?: "0"); g_free (report_id); if (send_to_client (msg, write_to_client, write_to_client_data)) { g_free (msg); error_send_to_client (error); return; } g_free (msg); log_event ("task", "Task", start_task_data->task_id, "requested to start"); } forked = 1; break; case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("start_task", "Task is active already")); log_event_fail ("task", "Task", start_task_data->task_id, "started"); break; case 2: /* Forked task process: success. */ current_error = 2; g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_INVALID_CONTENT, "Dummy error for current_error"); break; case 3: /* Find failed. */ if (send_find_error_to_client ("start_task", "task", start_task_data->task_id, omp_parser)) { error_send_to_client (error); return; } break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("start_task", "Permission denied")); log_event_fail ("task", "Task", start_task_data->task_id, "started"); break; case -10: /* Forked task process: error. */ current_error = -10; g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_INVALID_CONTENT, "Dummy error for current_error"); break; case -6: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("start_task", "There is already a task running in" " this process")); log_event_fail ("task", "Task", start_task_data->task_id, "started"); break; case -1: /* Internal error. */ SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("start_task", "Internal error.")); log_event_fail ("task", "Task", start_task_data->task_id, "started"); break; case -2: /* Task lacks target. This is true for container * tasks. */ SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("start_task", "Task must have a target")); log_event_fail ("task", "Task", start_task_data->task_id, "started"); break; case -4: /* Task target lacks hosts. This is checked when the * target is created. */ assert (0); /*@fallthrough@*/ case -3: /* Failed to create report. */ SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("start_task")); log_event_fail ("task", "Task", start_task_data->task_id, "started"); break; case -5: SEND_XML_SERVICE_DOWN ("start_task"); log_event_fail ("task", "Task", start_task_data->task_id, "started"); break; default: /* Programming error. */ assert (0); SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("start_task")); log_event_fail ("task", "Task", start_task_data->task_id, "started"); break; } } } else SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("start_task", "START_TASK requires a task_id attribute")); start_task_data_reset (start_task_data); set_client_state (CLIENT_AUTHENTIC); break; case CLIENT_STOP_TASK: if (stop_task_data->task_id) { switch (stop_task (stop_task_data->task_id)) { case 0: /* Stopped. */ SEND_TO_CLIENT_OR_FAIL (XML_OK ("stop_task")); log_event ("task", "Task", stop_task_data->task_id, "stopped"); break; case 1: /* Stop requested. */ SEND_TO_CLIENT_OR_FAIL (XML_OK_REQUESTED ("stop_task")); log_event ("task", "Task", stop_task_data->task_id, "requested to stop"); break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("stop_task", "Stopping not supported")); log_event_fail ("task", "Task", stop_task_data->task_id, "stopped"); break; case 3: /* Find failed. */ if (send_find_error_to_client ("stop_task", "task", stop_task_data->task_id, omp_parser)) { error_send_to_client (error); return; } break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("stop_task", "Permission denied")); log_event_fail ("task", "Task", stop_task_data->task_id, "stopped"); break; case -5: SEND_XML_SERVICE_DOWN ("stop_task"); log_event_fail ("task", "Task", stop_task_data->task_id, "stopped"); break; default: /* Programming error. */ assert (0); case -1: /* to_scanner is full. */ /** @todo Consider reverting parsing for retry. */ /** @todo process_omp_client_input must return -2. */ abort (); } } else SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("stop_task", "STOP_TASK requires a task_id attribute")); stop_task_data_reset (stop_task_data); set_client_state (CLIENT_AUTHENTIC); break; case CLIENT_SYNC_CERT: assert (current_credentials.username); if (forked == 2) /* Prevent the forked child from forking again, as then both * forked children would be using the same server session. */ abort (); // FIX respond with error or something else switch (openvas_sync_feed (cert_script, current_credentials.username, CERT_FEED)) { case 0: SEND_TO_CLIENT_OR_FAIL (XML_OK_REQUESTED ("sync_cert")); forked = 1; break; case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_BUSY ("sync_cert")); break; case 2: /* Forked sync process: success. */ current_error = 4; g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_INVALID_CONTENT, "Dummy error for current_error"); break; case 11: /* Forked sync process: success busy. */ current_error = 4; g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_INVALID_CONTENT, "Dummy error for current_error"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("sync_cert", "Permission denied")); break; case -10: /* Forked sync process: error. */ current_error = -10; g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_INVALID_CONTENT, "Dummy error for current_error"); break; default: assert (0); case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("sync_cert")); break; } set_client_state (CLIENT_AUTHENTIC); break; case CLIENT_SYNC_FEED: assert (current_credentials.username); if (forked == 2) /* Prevent the forked child from forking again, as then both * forked children would be using the same server session. */ abort (); // FIX respond with error or something else switch (openvas_sync_feed (sync_script, current_credentials.username, NVT_FEED)) { case 0: SEND_TO_CLIENT_OR_FAIL (XML_OK_REQUESTED ("sync_feed")); forked = 1; break; case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_BUSY ("sync_feed")); break; case 2: /* Forked sync process: success. */ current_error = 4; g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_INVALID_CONTENT, "Dummy error for current_error"); break; case 11: /* Forked sync process: success busy. */ current_error = 4; g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_INVALID_CONTENT, "Dummy error for current_error"); break; case -10: /* Forked sync process: error. */ current_error = -10; g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_INVALID_CONTENT, "Dummy error for current_error"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("sync_feed", "Permission denied")); break; default: assert (0); case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("sync_feed")); break; } set_client_state (CLIENT_AUTHENTIC); break; case CLIENT_SYNC_SCAP: assert (current_credentials.username); if (forked == 2) /* Prevent the forked child from forking again, as then both * forked children would be using the same server session. */ abort (); // FIX respond with error or something else switch (openvas_sync_feed (scap_script, current_credentials.username, SCAP_FEED)) { case 0: SEND_TO_CLIENT_OR_FAIL (XML_OK_REQUESTED ("sync_scap")); forked = 1; break; case 1: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_BUSY ("sync_scap")); break; case 2: /* Forked sync process: success. */ current_error = 4; g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_INVALID_CONTENT, "Dummy error for current_error"); break; case 11: /* Forked sync process: success busy. */ current_error = 4; g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_INVALID_CONTENT, "Dummy error for current_error"); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("sync_scap", "Permission denied")); break; case -10: /* Forked sync process: error. */ current_error = -10; g_set_error (error, G_MARKUP_ERROR, G_MARKUP_ERROR_INVALID_CONTENT, "Dummy error for current_error"); break; default: assert (0); case -1: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("sync_scap")); break; } set_client_state (CLIENT_AUTHENTIC); break; case CLIENT_VERIFY_AGENT: assert (strcasecmp ("VERIFY_AGENT", element_name) == 0); if (verify_agent_data->agent_id) { switch (verify_agent (verify_agent_data->agent_id)) { case 0: SEND_TO_CLIENT_OR_FAIL (XML_OK ("verify_agent")); break; case 1: if (send_find_error_to_client ("verify_agent", "agent", verify_agent_data->agent_id, omp_parser)) { error_send_to_client (error); return; } break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("verify_agent", "Permission denied")); break; default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("verify_agent")); break; } } else SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("verify_agent", "VERIFY_AGENT requires a agent_id" " attribute")); verify_agent_data_reset (verify_agent_data); set_client_state (CLIENT_AUTHENTIC); break; case CLIENT_VERIFY_REPORT_FORMAT: assert (strcasecmp ("VERIFY_REPORT_FORMAT", element_name) == 0); if (verify_report_format_data->report_format_id) { switch (verify_report_format (verify_report_format_data->report_format_id)) { case 0: SEND_TO_CLIENT_OR_FAIL (XML_OK ("verify_report_format")); break; case 1: if (send_find_error_to_client ("verify_report_format", "report format", verify_report_format_data->report_format_id, omp_parser)) { error_send_to_client (error); return; } break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("verify_report_format", "Permission denied")); break; default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("verify_report_format")); break; } } else SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("verify_report_format", "VERIFY_REPORT_FORMAT requires a report_format_id" " attribute")); verify_report_format_data_reset (verify_report_format_data); set_client_state (CLIENT_AUTHENTIC); break; case CLIENT_VERIFY_SCANNER: assert (strcasecmp ("VERIFY_SCANNER", element_name) == 0); if (verify_scanner_data->scanner_id) { char *version = NULL; switch (verify_scanner (verify_scanner_data->scanner_id, &version)) { case 0: SENDF_TO_CLIENT_OR_FAIL ("" "%s" "", version); break; case 1: if (send_find_error_to_client ("verify_scanner", "scanner", verify_scanner_data->scanner_id, omp_parser)) { error_send_to_client (error); return; } break; case 2: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_UNAVAILABLE ("verify_scanner")); break; case 99: SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("verify_scanner", "Permission denied")); break; default: SEND_TO_CLIENT_OR_FAIL (XML_INTERNAL_ERROR ("verify_scanner")); break; } } else SEND_TO_CLIENT_OR_FAIL (XML_ERROR_SYNTAX ("verify_scanner", "VERIFY_SCANNER requires a" " scanner_id attribute")); verify_scanner_data_reset (verify_scanner_data); set_client_state (CLIENT_AUTHENTIC); break; default: assert (0); break; } } /** * @brief Append text to a var for a case in omp_xml_hand_text. * * @param[in] state Parser state. * @param[in] dest Append destination. */ #define APPEND(state, dest) \ case state: \ openvas_append_text (dest, text, text_len); \ break; /** * @brief Handle the addition of text to an OMP XML element. * * React to the addition of text to the value of an XML element. * React according to the current value of \ref client_state, * usually appending the text to some part of the current task * with functions like openvas_append_text and \ref append_to_task_comment. * * @param[in] context Parser context. * @param[in] text The text. * @param[in] text_len Length of the text. * @param[in] user_data Dummy parameter. * @param[in] error Error parameter. */ static void omp_xml_handle_text (/*@unused@*/ GMarkupParseContext* context, const gchar *text, gsize text_len, /*@unused@*/ gpointer user_data, /*@unused@*/ GError **error) { if (text_len == 0) return; tracef (" XML text: %s\n", text); switch (client_state) { case CLIENT_AUTHENTICATE_CREDENTIALS_USERNAME: append_to_credentials_username (¤t_credentials, text, text_len); break; case CLIENT_AUTHENTICATE_CREDENTIALS_PASSWORD: append_to_credentials_password (¤t_credentials, text, text_len); break; APPEND (CLIENT_MODIFY_CONFIG_NVT_SELECTION_FAMILY, &modify_config_data->nvt_selection_family); APPEND (CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_FAMILY_ALL, &modify_config_data->family_selection_family_all_text); APPEND (CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_FAMILY_GROWING, &modify_config_data->family_selection_family_growing_text); APPEND (CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_FAMILY_NAME, &modify_config_data->family_selection_family_name); APPEND (CLIENT_MODIFY_CONFIG_FAMILY_SELECTION_GROWING, &modify_config_data->family_selection_growing_text); APPEND (CLIENT_MODIFY_LSC_CREDENTIAL_NAME, &modify_lsc_credential_data->name); APPEND (CLIENT_MODIFY_LSC_CREDENTIAL_COMMENT, &modify_lsc_credential_data->comment); APPEND (CLIENT_MODIFY_LSC_CREDENTIAL_LOGIN, &modify_lsc_credential_data->login); APPEND (CLIENT_MODIFY_LSC_CREDENTIAL_PASSWORD, &modify_lsc_credential_data->password); APPEND (CLIENT_MODIFY_CONFIG_COMMENT, &modify_config_data->comment); APPEND (CLIENT_MODIFY_CONFIG_NAME, &modify_config_data->name); APPEND (CLIENT_MODIFY_CONFIG_PREFERENCE_NAME, &modify_config_data->preference_name); APPEND (CLIENT_MODIFY_CONFIG_PREFERENCE_VALUE, &modify_config_data->preference_value); APPEND (CLIENT_MODIFY_REPORT_COMMENT, &modify_report_data->comment); APPEND (CLIENT_MODIFY_REPORT_FORMAT_ACTIVE, &modify_report_format_data->active); APPEND (CLIENT_MODIFY_REPORT_FORMAT_NAME, &modify_report_format_data->name); APPEND (CLIENT_MODIFY_REPORT_FORMAT_SUMMARY, &modify_report_format_data->summary); APPEND (CLIENT_MODIFY_REPORT_FORMAT_PARAM_NAME, &modify_report_format_data->param_name); APPEND (CLIENT_MODIFY_REPORT_FORMAT_PARAM_VALUE, &modify_report_format_data->param_value); APPEND (CLIENT_MODIFY_SETTING_NAME, &modify_setting_data->name); APPEND (CLIENT_MODIFY_SETTING_VALUE, &modify_setting_data->value); APPEND (CLIENT_MODIFY_TASK_ALTERABLE, &modify_task_data->alterable); APPEND (CLIENT_MODIFY_TASK_COMMENT, &modify_task_data->comment); APPEND (CLIENT_MODIFY_TASK_HOSTS_ORDERING, &modify_task_data->hosts_ordering); APPEND (CLIENT_MODIFY_TASK_NAME, &modify_task_data->name); APPEND (CLIENT_MODIFY_TASK_OBSERVERS, &modify_task_data->observers); APPEND (CLIENT_MODIFY_TASK_FILE, &modify_task_data->file); APPEND (CLIENT_MODIFY_TASK_SCHEDULE_PERIODS, &modify_task_data->schedule_periods); APPEND (CLIENT_MODIFY_TASK_PREFERENCES_PREFERENCE_NAME, &modify_task_data->preference->name); APPEND (CLIENT_MODIFY_TASK_PREFERENCES_PREFERENCE_VALUE, &modify_task_data->preference->value); APPEND (CLIENT_MODIFY_USER_HOSTS, &modify_user_data->hosts); APPEND (CLIENT_MODIFY_USER_IFACES, &modify_user_data->ifaces); APPEND (CLIENT_MODIFY_USER_NAME, &modify_user_data->name); APPEND (CLIENT_MODIFY_USER_NEW_NAME, &modify_user_data->new_name); APPEND (CLIENT_MODIFY_USER_PASSWORD, &modify_user_data->password); APPEND (CLIENT_MODIFY_USER_SOURCES_SOURCE, &modify_user_data->current_source); APPEND (CLIENT_CREATE_AGENT_COMMENT, &create_agent_data->comment); APPEND (CLIENT_CREATE_AGENT_COPY, &create_agent_data->copy); APPEND (CLIENT_CREATE_AGENT_HOWTO_INSTALL, &create_agent_data->howto_install); APPEND (CLIENT_CREATE_AGENT_HOWTO_USE, &create_agent_data->howto_use); APPEND (CLIENT_CREATE_AGENT_INSTALLER, &create_agent_data->installer); APPEND (CLIENT_CREATE_AGENT_INSTALLER_FILENAME, &create_agent_data->installer_filename); APPEND (CLIENT_CREATE_AGENT_INSTALLER_SIGNATURE, &create_agent_data->installer_signature); APPEND (CLIENT_CREATE_AGENT_NAME, &create_agent_data->name); APPEND (CLIENT_CREATE_CONFIG_COMMENT, &create_config_data->comment); APPEND (CLIENT_CREATE_CONFIG_SCANNER, &create_config_data->scanner); APPEND (CLIENT_CREATE_CONFIG_COPY, &create_config_data->copy); APPEND (CLIENT_CREATE_CONFIG_NAME, &create_config_data->name); APPEND (CLIENT_C_C_GCR_CONFIG_COMMENT, &import_config_data->comment); APPEND (CLIENT_C_C_GCR_CONFIG_NAME, &import_config_data->name); APPEND (CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS_NVT_SELECTOR_INCLUDE, &import_config_data->nvt_selector_include); APPEND (CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS_NVT_SELECTOR_NAME, &import_config_data->nvt_selector_name); APPEND (CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS_NVT_SELECTOR_TYPE, &import_config_data->nvt_selector_type); APPEND (CLIENT_C_C_GCR_CONFIG_NVT_SELECTORS_NVT_SELECTOR_FAMILY_OR_NVT, &import_config_data->nvt_selector_family_or_nvt); APPEND (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_ALT, &import_config_data->preference_alt); APPEND (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_DEFAULT, &import_config_data->preference_default); APPEND (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_NAME, &import_config_data->preference_name); APPEND (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_NVT_NAME, &import_config_data->preference_nvt_name); APPEND (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_TYPE, &import_config_data->preference_type); APPEND (CLIENT_C_C_GCR_CONFIG_PREFERENCES_PREFERENCE_VALUE, &import_config_data->preference_value); APPEND (CLIENT_C_C_GCR_CONFIG_TYPE, &import_config_data->type); APPEND (CLIENT_CREATE_LSC_CREDENTIAL_COMMENT, &create_lsc_credential_data->comment); APPEND (CLIENT_CREATE_LSC_CREDENTIAL_COPY, &create_lsc_credential_data->copy); APPEND (CLIENT_CREATE_LSC_CREDENTIAL_KEY_PHRASE, &create_lsc_credential_data->key_phrase); APPEND (CLIENT_CREATE_LSC_CREDENTIAL_KEY_PRIVATE, &create_lsc_credential_data->key_private); APPEND (CLIENT_CREATE_LSC_CREDENTIAL_LOGIN, &create_lsc_credential_data->login); APPEND (CLIENT_CREATE_LSC_CREDENTIAL_NAME, &create_lsc_credential_data->name); APPEND (CLIENT_CREATE_LSC_CREDENTIAL_PASSWORD, &create_lsc_credential_data->password); APPEND (CLIENT_CREATE_ALERT_COMMENT, &create_alert_data->comment); APPEND (CLIENT_CREATE_ALERT_COPY, &create_alert_data->copy); APPEND (CLIENT_CREATE_ALERT_CONDITION, &create_alert_data->condition); APPEND (CLIENT_CREATE_ALERT_EVENT, &create_alert_data->event); APPEND (CLIENT_CREATE_ALERT_METHOD, &create_alert_data->method); APPEND (CLIENT_CREATE_ALERT_NAME, &create_alert_data->name); APPEND (CLIENT_CREATE_ALERT_CONDITION_DATA, &create_alert_data->part_data); APPEND (CLIENT_CREATE_ALERT_EVENT_DATA, &create_alert_data->part_data); APPEND (CLIENT_CREATE_ALERT_METHOD_DATA, &create_alert_data->part_data); APPEND (CLIENT_CREATE_ALERT_CONDITION_DATA_NAME, &create_alert_data->part_name); APPEND (CLIENT_CREATE_ALERT_EVENT_DATA_NAME, &create_alert_data->part_name); APPEND (CLIENT_CREATE_ALERT_METHOD_DATA_NAME, &create_alert_data->part_name); APPEND (CLIENT_CREATE_FILTER_COMMENT, &create_filter_data->comment); APPEND (CLIENT_CREATE_FILTER_COPY, &create_filter_data->copy); APPEND (CLIENT_CREATE_FILTER_NAME, &create_filter_data->name); APPEND (CLIENT_CREATE_FILTER_NAME_MAKE_UNIQUE, &create_filter_data->make_name_unique); APPEND (CLIENT_CREATE_FILTER_TERM, &create_filter_data->term); APPEND (CLIENT_CREATE_FILTER_TYPE, &create_filter_data->type); APPEND (CLIENT_CREATE_GROUP_COMMENT, &create_group_data->comment); APPEND (CLIENT_CREATE_GROUP_COPY, &create_group_data->copy); APPEND (CLIENT_CREATE_GROUP_NAME, &create_group_data->name); APPEND (CLIENT_CREATE_GROUP_USERS, &create_group_data->users); APPEND (CLIENT_CREATE_NOTE_ACTIVE, &create_note_data->active); APPEND (CLIENT_CREATE_NOTE_COPY, &create_note_data->copy); APPEND (CLIENT_CREATE_NOTE_HOSTS, &create_note_data->hosts); APPEND (CLIENT_CREATE_NOTE_PORT, &create_note_data->port); APPEND (CLIENT_CREATE_NOTE_SEVERITY, &create_note_data->severity); APPEND (CLIENT_CREATE_NOTE_TEXT, &create_note_data->text); APPEND (CLIENT_CREATE_NOTE_THREAT, &create_note_data->threat); APPEND (CLIENT_CREATE_OVERRIDE_ACTIVE, &create_override_data->active); APPEND (CLIENT_CREATE_OVERRIDE_COPY, &create_override_data->copy); APPEND (CLIENT_CREATE_OVERRIDE_HOSTS, &create_override_data->hosts); APPEND (CLIENT_CREATE_OVERRIDE_NEW_SEVERITY, &create_override_data->new_severity); APPEND (CLIENT_CREATE_OVERRIDE_NEW_THREAT, &create_override_data->new_threat); APPEND (CLIENT_CREATE_OVERRIDE_PORT, &create_override_data->port); APPEND (CLIENT_CREATE_OVERRIDE_SEVERITY, &create_override_data->severity); APPEND (CLIENT_CREATE_OVERRIDE_TEXT, &create_override_data->text); APPEND (CLIENT_CREATE_OVERRIDE_THREAT, &create_override_data->threat); APPEND (CLIENT_CREATE_PERMISSION_COMMENT, &create_permission_data->comment); APPEND (CLIENT_CREATE_PERMISSION_COPY, &create_permission_data->copy); APPEND (CLIENT_CREATE_PERMISSION_NAME, &create_permission_data->name); APPEND (CLIENT_CREATE_PERMISSION_RESOURCE_TYPE, &create_permission_data->resource_type); APPEND (CLIENT_CREATE_PERMISSION_SUBJECT_TYPE, &create_permission_data->subject_type); APPEND (CLIENT_CREATE_PORT_LIST_COMMENT, &create_port_list_data->comment); APPEND (CLIENT_CREATE_PORT_LIST_COPY, &create_port_list_data->copy); APPEND (CLIENT_CREATE_PORT_LIST_NAME, &create_port_list_data->name); APPEND (CLIENT_CREATE_PORT_LIST_PORT_RANGE, &create_port_list_data->port_range); APPEND (CLIENT_CPL_GPLR_PORT_LIST_COMMENT, &create_port_list_data->comment); APPEND (CLIENT_CPL_GPLR_PORT_LIST_NAME, &create_port_list_data->name); APPEND (CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES_PORT_RANGE_COMMENT, &create_port_list_data->range->comment); APPEND (CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES_PORT_RANGE_END, &create_port_list_data->range->end); APPEND (CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES_PORT_RANGE_START, &create_port_list_data->range->start); APPEND (CLIENT_CPL_GPLR_PORT_LIST_PORT_RANGES_PORT_RANGE_TYPE, &create_port_list_data->range->type); APPEND (CLIENT_CREATE_PORT_RANGE_COMMENT, &create_port_range_data->comment); APPEND (CLIENT_CREATE_PORT_RANGE_END, &create_port_range_data->end); APPEND (CLIENT_CREATE_PORT_RANGE_START, &create_port_range_data->start); APPEND (CLIENT_CREATE_PORT_RANGE_TYPE, &create_port_range_data->type); APPEND (CLIENT_CREATE_REPORT_RR_HOST_END, &create_report_data->host_end); APPEND (CLIENT_CREATE_REPORT_RR_HOST_END_HOST, &create_report_data->host_end_host); APPEND (CLIENT_CREATE_REPORT_RR_HOST_START, &create_report_data->host_start); APPEND (CLIENT_CREATE_REPORT_RR_HOST_START_HOST, &create_report_data->host_start_host); APPEND (CLIENT_CREATE_REPORT_RR_SCAN_END, &create_report_data->scan_end); APPEND (CLIENT_CREATE_REPORT_RR_SCAN_START, &create_report_data->scan_start); APPEND (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_DESCRIPTION, &create_report_data->result_description); APPEND (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_HOST, &create_report_data->result_host); APPEND (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_SCAN_NVT_VERSION, &create_report_data->result_scan_nvt_version); APPEND (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_PORT, &create_report_data->result_port); APPEND (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD_TYPE, &create_report_data->result_qod_type); APPEND (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD_VALUE, &create_report_data->result_qod); APPEND (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_SEVERITY, &create_report_data->result_severity); APPEND (CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_THREAT, &create_report_data->result_threat); APPEND (CLIENT_CREATE_REPORT_RR_H_DETAIL_NAME, &create_report_data->detail_name); APPEND (CLIENT_CREATE_REPORT_RR_H_DETAIL_VALUE, &create_report_data->detail_value); APPEND (CLIENT_CREATE_REPORT_RR_H_DETAIL_SOURCE_DESC, &create_report_data->detail_source_desc); APPEND (CLIENT_CREATE_REPORT_RR_H_DETAIL_SOURCE_NAME, &create_report_data->detail_source_name); APPEND (CLIENT_CREATE_REPORT_RR_H_DETAIL_SOURCE_TYPE, &create_report_data->detail_source_type); APPEND (CLIENT_CREATE_REPORT_RR_H_IP, &create_report_data->ip); APPEND (CLIENT_CREATE_REPORT_TASK_NAME, &create_report_data->task_name); APPEND (CLIENT_CREATE_REPORT_TASK_COMMENT, &create_report_data->task_comment); APPEND (CLIENT_CRF_GRFR_REPORT_FORMAT_CONTENT_TYPE, &create_report_format_data->content_type); APPEND (CLIENT_CRF_GRFR_REPORT_FORMAT_DESCRIPTION, &create_report_format_data->description); APPEND (CLIENT_CREATE_REPORT_FORMAT_COPY, &create_report_format_data->copy); APPEND (CLIENT_CRF_GRFR_REPORT_FORMAT_EXTENSION, &create_report_format_data->extension); APPEND (CLIENT_CRF_GRFR_REPORT_FORMAT_FILE, &create_report_format_data->file); APPEND (CLIENT_CRF_GRFR_REPORT_FORMAT_GLOBAL, &create_report_format_data->global); APPEND (CLIENT_CRF_GRFR_REPORT_FORMAT_NAME, &create_report_format_data->name); APPEND (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_DEFAULT, &create_report_format_data->param_default); APPEND (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_NAME, &create_report_format_data->param_name); APPEND (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_OPTIONS_OPTION, &create_report_format_data->param_option); APPEND (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_TYPE, &create_report_format_data->param_type); APPEND (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_TYPE_MAX, &create_report_format_data->param_type_max); APPEND (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_TYPE_MIN, &create_report_format_data->param_type_min); APPEND (CLIENT_CRF_GRFR_REPORT_FORMAT_PARAM_VALUE, &create_report_format_data->param_value); APPEND (CLIENT_CRF_GRFR_REPORT_FORMAT_SIGNATURE, &create_report_format_data->signature); APPEND (CLIENT_CRF_GRFR_REPORT_FORMAT_SUMMARY, &create_report_format_data->summary); case CLIENT_CRF_GRFR_REPORT_FORMAT_TRUST: break; APPEND (CLIENT_CREATE_ROLE_COMMENT, &create_role_data->comment); APPEND (CLIENT_CREATE_ROLE_COPY, &create_role_data->copy); APPEND (CLIENT_CREATE_ROLE_NAME, &create_role_data->name); APPEND (CLIENT_CREATE_ROLE_USERS, &create_role_data->users); APPEND (CLIENT_CREATE_SCANNER_NAME, &create_scanner_data->name); APPEND (CLIENT_CREATE_SCANNER_COMMENT, &create_scanner_data->comment); APPEND (CLIENT_CREATE_SCANNER_COPY, &create_scanner_data->copy); APPEND (CLIENT_CREATE_SCANNER_HOST, &create_scanner_data->host); APPEND (CLIENT_CREATE_SCANNER_PORT, &create_scanner_data->port); APPEND (CLIENT_CREATE_SCANNER_TYPE, &create_scanner_data->type); APPEND (CLIENT_CREATE_SCANNER_CA_PUB, &create_scanner_data->ca_pub); APPEND (CLIENT_CREATE_SCANNER_KEY_PUB, &create_scanner_data->key_pub); APPEND (CLIENT_CREATE_SCANNER_KEY_PRIV, &create_scanner_data->key_priv); APPEND (CLIENT_CREATE_SCHEDULE_COMMENT, &create_schedule_data->comment); APPEND (CLIENT_CREATE_SCHEDULE_COPY, &create_schedule_data->copy); APPEND (CLIENT_CREATE_SCHEDULE_DURATION, &create_schedule_data->duration); APPEND (CLIENT_CREATE_SCHEDULE_DURATION_UNIT, &create_schedule_data->duration_unit); APPEND (CLIENT_CREATE_SCHEDULE_FIRST_TIME_DAY_OF_MONTH, &create_schedule_data->first_time_day_of_month); APPEND (CLIENT_CREATE_SCHEDULE_FIRST_TIME_HOUR, &create_schedule_data->first_time_hour); APPEND (CLIENT_CREATE_SCHEDULE_FIRST_TIME_MINUTE, &create_schedule_data->first_time_minute); APPEND (CLIENT_CREATE_SCHEDULE_FIRST_TIME_MONTH, &create_schedule_data->first_time_month); APPEND (CLIENT_CREATE_SCHEDULE_FIRST_TIME_YEAR, &create_schedule_data->first_time_year); APPEND (CLIENT_CREATE_SCHEDULE_NAME, &create_schedule_data->name); APPEND (CLIENT_CREATE_SCHEDULE_PERIOD, &create_schedule_data->period); APPEND (CLIENT_CREATE_SCHEDULE_PERIOD_UNIT, &create_schedule_data->period_unit); APPEND (CLIENT_CREATE_SCHEDULE_TIMEZONE, &create_schedule_data->timezone); APPEND (CLIENT_CREATE_SLAVE_COMMENT, &create_slave_data->comment); APPEND (CLIENT_CREATE_SLAVE_HOST, &create_slave_data->host); APPEND (CLIENT_CREATE_SLAVE_COPY, &create_slave_data->copy); APPEND (CLIENT_CREATE_SLAVE_LOGIN, &create_slave_data->login); APPEND (CLIENT_CREATE_SLAVE_NAME, &create_slave_data->name); APPEND (CLIENT_CREATE_SLAVE_PASSWORD, &create_slave_data->password); APPEND (CLIENT_CREATE_SLAVE_PORT, &create_slave_data->port); APPEND (CLIENT_CREATE_TAG_ACTIVE, &create_tag_data->active); APPEND (CLIENT_CREATE_TAG_RESOURCE_TYPE, &create_tag_data->resource_type); APPEND (CLIENT_CREATE_TAG_COPY, &create_tag_data->copy); APPEND (CLIENT_CREATE_TAG_COMMENT, &create_tag_data->comment); APPEND (CLIENT_CREATE_TAG_NAME, &create_tag_data->name); APPEND (CLIENT_CREATE_TAG_VALUE, &create_tag_data->value); APPEND (CLIENT_CREATE_TARGET_EXCLUDE_HOSTS, &create_target_data->exclude_hosts); APPEND (CLIENT_CREATE_TARGET_REVERSE_LOOKUP_ONLY, &create_target_data->reverse_lookup_only); APPEND (CLIENT_CREATE_TARGET_REVERSE_LOOKUP_UNIFY, &create_target_data->reverse_lookup_unify); APPEND (CLIENT_CREATE_TARGET_ALIVE_TESTS, &create_target_data->alive_tests); APPEND (CLIENT_CREATE_TARGET_COMMENT, &create_target_data->comment); APPEND (CLIENT_CREATE_TARGET_COPY, &create_target_data->copy); APPEND (CLIENT_CREATE_TARGET_HOSTS, &create_target_data->hosts); APPEND (CLIENT_CREATE_TARGET_NAME, &create_target_data->name); APPEND (CLIENT_CREATE_TARGET_NAME_MAKE_UNIQUE, &create_target_data->make_name_unique); APPEND (CLIENT_CREATE_TARGET_PORT_RANGE, &create_target_data->port_range); APPEND (CLIENT_CREATE_TARGET_SSH_LSC_CREDENTIAL_PORT, &create_target_data->ssh_port); APPEND (CLIENT_CREATE_TASK_ALTERABLE, &create_task_data->alterable); case CLIENT_CREATE_TASK_COMMENT: append_to_task_comment (create_task_data->task, text, text_len); break; APPEND (CLIENT_CREATE_TASK_HOSTS_ORDERING, &create_task_data->hosts_ordering); APPEND (CLIENT_CREATE_TASK_COPY, &create_task_data->copy); case CLIENT_CREATE_TASK_NAME: append_to_task_name (create_task_data->task, text, text_len); break; APPEND (CLIENT_CREATE_TASK_OBSERVERS, &create_task_data->observers); APPEND (CLIENT_CREATE_TASK_PREFERENCES_PREFERENCE_NAME, &create_task_data->preference->name); APPEND (CLIENT_CREATE_TASK_PREFERENCES_PREFERENCE_VALUE, &create_task_data->preference->value); APPEND (CLIENT_CREATE_TASK_SCHEDULE_PERIODS, &create_task_data->schedule_periods); APPEND (CLIENT_CREATE_USER_COPY, &create_user_data->copy); APPEND (CLIENT_CREATE_USER_HOSTS, &create_user_data->hosts); APPEND (CLIENT_CREATE_USER_IFACES, &create_user_data->ifaces); APPEND (CLIENT_CREATE_USER_NAME, &create_user_data->name); APPEND (CLIENT_CREATE_USER_PASSWORD, &create_user_data->password); APPEND (CLIENT_CREATE_USER_SOURCES_SOURCE, &create_user_data->current_source); APPEND (CLIENT_MODIFY_AGENT_COMMENT, &modify_agent_data->comment); APPEND (CLIENT_MODIFY_AGENT_NAME, &modify_agent_data->name); APPEND (CLIENT_MODIFY_ALERT_NAME, &modify_alert_data->name); APPEND (CLIENT_MODIFY_ALERT_COMMENT, &modify_alert_data->comment); APPEND (CLIENT_MODIFY_ALERT_EVENT, &modify_alert_data->event); APPEND (CLIENT_MODIFY_ALERT_CONDITION, &modify_alert_data->condition); APPEND (CLIENT_MODIFY_ALERT_METHOD, &modify_alert_data->method); APPEND (CLIENT_MODIFY_ALERT_EVENT_DATA, &modify_alert_data->part_data); APPEND (CLIENT_MODIFY_ALERT_CONDITION_DATA, &modify_alert_data->part_data); APPEND (CLIENT_MODIFY_ALERT_METHOD_DATA, &modify_alert_data->part_data); APPEND (CLIENT_MODIFY_ALERT_EVENT_DATA_NAME, &modify_alert_data->part_name); APPEND (CLIENT_MODIFY_ALERT_CONDITION_DATA_NAME, &modify_alert_data->part_name); APPEND (CLIENT_MODIFY_ALERT_METHOD_DATA_NAME, &modify_alert_data->part_name); APPEND (CLIENT_MODIFY_FILTER_COMMENT, &modify_filter_data->comment); APPEND (CLIENT_MODIFY_FILTER_NAME, &modify_filter_data->name); APPEND (CLIENT_MODIFY_FILTER_TERM, &modify_filter_data->term); APPEND (CLIENT_MODIFY_FILTER_TYPE, &modify_filter_data->type); APPEND (CLIENT_MODIFY_GROUP_COMMENT, &modify_group_data->comment); APPEND (CLIENT_MODIFY_GROUP_NAME, &modify_group_data->name); APPEND (CLIENT_MODIFY_GROUP_USERS, &modify_group_data->users); APPEND (CLIENT_MODIFY_NOTE_ACTIVE, &modify_note_data->active); APPEND (CLIENT_MODIFY_NOTE_HOSTS, &modify_note_data->hosts); APPEND (CLIENT_MODIFY_NOTE_PORT, &modify_note_data->port); APPEND (CLIENT_MODIFY_NOTE_SEVERITY, &modify_note_data->severity); APPEND (CLIENT_MODIFY_NOTE_TEXT, &modify_note_data->text); APPEND (CLIENT_MODIFY_NOTE_THREAT, &modify_note_data->threat); APPEND (CLIENT_MODIFY_OVERRIDE_ACTIVE, &modify_override_data->active); APPEND (CLIENT_MODIFY_OVERRIDE_HOSTS, &modify_override_data->hosts); APPEND (CLIENT_MODIFY_OVERRIDE_NEW_SEVERITY, &modify_override_data->new_severity); APPEND (CLIENT_MODIFY_OVERRIDE_NEW_THREAT, &modify_override_data->new_threat); APPEND (CLIENT_MODIFY_OVERRIDE_PORT, &modify_override_data->port); APPEND (CLIENT_MODIFY_OVERRIDE_SEVERITY, &modify_override_data->severity); APPEND (CLIENT_MODIFY_OVERRIDE_TEXT, &modify_override_data->text); APPEND (CLIENT_MODIFY_OVERRIDE_THREAT, &modify_override_data->threat); APPEND (CLIENT_MODIFY_PERMISSION_COMMENT, &modify_permission_data->comment); APPEND (CLIENT_MODIFY_PERMISSION_NAME, &modify_permission_data->name); APPEND (CLIENT_MODIFY_PERMISSION_RESOURCE_TYPE, &modify_permission_data->resource_type); APPEND (CLIENT_MODIFY_PERMISSION_SUBJECT_TYPE, &modify_permission_data->subject_type); APPEND (CLIENT_MODIFY_PORT_LIST_COMMENT, &modify_port_list_data->comment); APPEND (CLIENT_MODIFY_PORT_LIST_NAME, &modify_port_list_data->name); APPEND (CLIENT_MODIFY_ROLE_COMMENT, &modify_role_data->comment); APPEND (CLIENT_MODIFY_ROLE_NAME, &modify_role_data->name); APPEND (CLIENT_MODIFY_ROLE_USERS, &modify_role_data->users); APPEND (CLIENT_MODIFY_SCANNER_COMMENT, &modify_scanner_data->comment); APPEND (CLIENT_MODIFY_SCANNER_NAME, &modify_scanner_data->name); APPEND (CLIENT_MODIFY_SCANNER_HOST, &modify_scanner_data->host); APPEND (CLIENT_MODIFY_SCANNER_PORT, &modify_scanner_data->port); APPEND (CLIENT_MODIFY_SCANNER_TYPE, &modify_scanner_data->type); APPEND (CLIENT_MODIFY_SCANNER_CA_PUB, &modify_scanner_data->ca_pub); APPEND (CLIENT_MODIFY_SCANNER_KEY_PUB, &modify_scanner_data->key_pub); APPEND (CLIENT_MODIFY_SCANNER_KEY_PRIV, &modify_scanner_data->key_priv); APPEND (CLIENT_MODIFY_SCHEDULE_COMMENT, &modify_schedule_data->comment); APPEND (CLIENT_MODIFY_SCHEDULE_DURATION, &modify_schedule_data->duration); APPEND (CLIENT_MODIFY_SCHEDULE_DURATION_UNIT, &modify_schedule_data->duration_unit); APPEND (CLIENT_MODIFY_SCHEDULE_FIRST_TIME_DAY_OF_MONTH, &modify_schedule_data->first_time_day_of_month); APPEND (CLIENT_MODIFY_SCHEDULE_FIRST_TIME_HOUR, &modify_schedule_data->first_time_hour); APPEND (CLIENT_MODIFY_SCHEDULE_FIRST_TIME_MINUTE, &modify_schedule_data->first_time_minute); APPEND (CLIENT_MODIFY_SCHEDULE_FIRST_TIME_MONTH, &modify_schedule_data->first_time_month); APPEND (CLIENT_MODIFY_SCHEDULE_FIRST_TIME_YEAR, &modify_schedule_data->first_time_year); APPEND (CLIENT_MODIFY_SCHEDULE_NAME, &modify_schedule_data->name); APPEND (CLIENT_MODIFY_SCHEDULE_PERIOD, &modify_schedule_data->period); APPEND (CLIENT_MODIFY_SCHEDULE_PERIOD_UNIT, &modify_schedule_data->period_unit); APPEND (CLIENT_MODIFY_SCHEDULE_TIMEZONE, &modify_schedule_data->timezone); APPEND (CLIENT_MODIFY_SLAVE_COMMENT, &modify_slave_data->comment); APPEND (CLIENT_MODIFY_SLAVE_NAME, &modify_slave_data->name); APPEND (CLIENT_MODIFY_SLAVE_HOST, &modify_slave_data->host); APPEND (CLIENT_MODIFY_SLAVE_PORT, &modify_slave_data->port); APPEND (CLIENT_MODIFY_SLAVE_LOGIN, &modify_slave_data->login); APPEND (CLIENT_MODIFY_SLAVE_PASSWORD, &modify_slave_data->password); APPEND (CLIENT_MODIFY_TAG_ACTIVE, &modify_tag_data->active); APPEND (CLIENT_MODIFY_TAG_RESOURCE_TYPE, &modify_tag_data->resource_type); APPEND (CLIENT_MODIFY_TAG_COMMENT, &modify_tag_data->comment); APPEND (CLIENT_MODIFY_TAG_NAME, &modify_tag_data->name); APPEND (CLIENT_MODIFY_TAG_VALUE, &modify_tag_data->value); APPEND (CLIENT_MODIFY_TARGET_EXCLUDE_HOSTS, &modify_target_data->exclude_hosts); APPEND (CLIENT_MODIFY_TARGET_REVERSE_LOOKUP_ONLY, &modify_target_data->reverse_lookup_only); APPEND (CLIENT_MODIFY_TARGET_REVERSE_LOOKUP_UNIFY, &modify_target_data->reverse_lookup_unify); APPEND (CLIENT_MODIFY_TARGET_ALIVE_TESTS, &modify_target_data->alive_tests); APPEND (CLIENT_MODIFY_TARGET_COMMENT, &modify_target_data->comment); APPEND (CLIENT_MODIFY_TARGET_HOSTS, &modify_target_data->hosts); APPEND (CLIENT_MODIFY_TARGET_NAME, &modify_target_data->name); APPEND (CLIENT_MODIFY_TARGET_SSH_LSC_CREDENTIAL_PORT, &modify_target_data->ssh_port); APPEND (CLIENT_RUN_WIZARD_MODE, &run_wizard_data->mode); APPEND (CLIENT_RUN_WIZARD_NAME, &run_wizard_data->name); APPEND (CLIENT_RUN_WIZARD_PARAMS_PARAM_NAME, &run_wizard_data->param->name); APPEND (CLIENT_RUN_WIZARD_PARAMS_PARAM_VALUE, &run_wizard_data->param->value); default: /* Just pass over the text. */ break; } } /** * @brief Handle an OMP XML parsing error. * * Simply leave the error for the caller of the parser to handle. * * @param[in] context Parser context. * @param[in] error The error. * @param[in] user_data Dummy parameter. */ static void omp_xml_handle_error (/*@unused@*/ GMarkupParseContext* context, GError *error, /*@unused@*/ gpointer user_data) { tracef (" XML ERROR %s\n", error->message); } /* OMP input processor. */ /** @todo Most likely the client should get these from init_omp_process * inside an omp_parser_t and should pass the omp_parser_t to * process_omp_client_input. process_omp_client_input can pass then * pass them on to the other Manager "libraries". */ extern char from_client[]; extern buffer_size_t from_client_start; extern buffer_size_t from_client_end; /** * @brief Initialise OMP library. * * @param[in] log_config Logging configuration list. * @param[in] nvt_cache_mode True when running in NVT caching mode. * @param[in] database Location of manage database. * @param[in] max_ips_per_target Max number of IPs per target. * @param[in] max_email_attachment_size Max size of email attachments. * @param[in] max_email_include_size Max size of email inclusions. * @param[in] progress Function to update progress, or NULL. * @param[in] skip_db_check Skip DB check. * * @return 0 success, -1 error, -2 database is wrong version, -3 database * needs to be initialized from server, -4 max_ips_per_target out of * range. */ int init_omp (GSList *log_config, int nvt_cache_mode, const gchar *database, int max_ips_per_target, int max_email_attachment_size, int max_email_include_size, void (*progress) (), int skip_db_check) { g_log_set_handler (G_LOG_DOMAIN, ALL_LOG_LEVELS, (GLogFunc) openvas_log_func, log_config); command_data_init (&command_data); return init_manage (log_config, nvt_cache_mode, database, max_ips_per_target, max_email_attachment_size, max_email_include_size, progress, skip_db_check); } /** * @brief Initialise OMP library data for a process. * * @param[in] update_nvt_cache 0 operate normally, -1 just update NVT cache, * -2 just rebuild NVT cache. * @param[in] database Location of manage database. * @param[in] write_to_client Function to write to client. * @param[in] write_to_client_data Argument to \p write_to_client. * @param[in] disable Commands to disable. * * This should run once per process, before the first call to \ref * process_omp_client_input. */ void init_omp_process (int update_nvt_cache, const gchar *database, int (*write_to_client) (const char*, void*), void* write_to_client_data, gchar **disable) { forked = 0; init_manage_process (update_nvt_cache, database); /* Create the XML parser. */ xml_parser.start_element = omp_xml_handle_start_element; xml_parser.end_element = omp_xml_handle_end_element; xml_parser.text = omp_xml_handle_text; xml_parser.passthrough = NULL; xml_parser.error = omp_xml_handle_error; if (xml_context) g_markup_parse_context_free (xml_context); xml_context = g_markup_parse_context_new (&xml_parser, 0, omp_parser_new (write_to_client, write_to_client_data, disable), (GDestroyNotify) omp_parser_free); } /** * @brief Process any XML available in \ref from_client. * * \if STATIC * * Call the XML parser and let the callback functions do the work * (\ref omp_xml_handle_start_element, \ref omp_xml_handle_end_element, * \ref omp_xml_handle_text and \ref omp_xml_handle_error). * * The callback functions will queue any resulting scanner commands in * \ref to_scanner (using \ref send_to_server) and any replies for * the client in \ref to_client (using \ref send_to_client). * * \endif * * @todo The -2 return has been replaced by send_to_client trying to write * the to_client buffer to the client when it is full. This is * necessary, as the to_client buffer may fill up halfway through the * processing of an OMP element. * * @return 0 success, -1 error, -2 or -3 too little space in \ref to_client * or the scanner output buffer (respectively), -4 XML syntax error. */ int process_omp_client_input () { gboolean success; GError* error = NULL; /* Terminate any pending transaction. (force close = TRUE). */ manage_transaction_stop (TRUE); /* In the XML parser handlers all writes to the to_scanner buffer must be * complete OTP commands, because the caller may also write into to_scanner * between calls to this function (via manage_check_current_task). */ if (xml_context == NULL) return -1; current_error = 0; success = g_markup_parse_context_parse (xml_context, from_client + from_client_start, from_client_end - from_client_start, &error); if (success == FALSE) { int err; if (error) { err = -4; if (g_error_matches (error, G_MARKUP_ERROR, G_MARKUP_ERROR_UNKNOWN_ELEMENT)) tracef (" client error: G_MARKUP_ERROR_UNKNOWN_ELEMENT\n"); else if (g_error_matches (error, G_MARKUP_ERROR, G_MARKUP_ERROR_INVALID_CONTENT)) { if (current_error) { /* This is the return status for a forked child. */ forked = 2; /* Prevent further forking. */ g_error_free (error); return current_error; } tracef (" client error: G_MARKUP_ERROR_INVALID_CONTENT\n"); } else if (g_error_matches (error, G_MARKUP_ERROR, G_MARKUP_ERROR_UNKNOWN_ATTRIBUTE)) tracef (" client error: G_MARKUP_ERROR_UNKNOWN_ATTRIBUTE\n"); else err = -1; infof (" Failed to parse client XML: %s\n", error->message); g_error_free (error); } else err = -1; /* In all error cases the caller must cease to call this function as it * would be too hard, if possible at all, to figure out the position of * start of the next command. */ return err; } from_client_end = from_client_start = 0; if (forked) return 3; return 0; } /** * @brief Buffer the response for process_omp. * * @param[in] msg OMP response. * @param[in] buffer Buffer. * * @return TRUE if failed, else FALSE. */ int process_omp_write (const char* msg, void* buffer) { tracef ("-> client internal: %s\n", msg); g_string_append ((GString*) buffer, msg); return FALSE; } /** * @brief Process an XML string. * * \if STATIC * * Call the XML parser and let the callback functions do the work * (\ref omp_xml_handle_start_element, \ref omp_xml_handle_end_element, * \ref omp_xml_handle_text and \ref omp_xml_handle_error). * * The callback functions will queue any resulting scanner commands in * \ref to_scanner (using \ref send_to_server) and any replies for * the client in \ref to_client (using \ref send_to_client). * * \endif * * @todo The -2 return has been replaced by send_to_client trying to write * the to_client buffer to the client when it is full. This is * necessary, as the to_client buffer may fill up halfway through the * processing of an OMP element. * * @return 0 success, -1 error, -2 or -3 too little space in \ref to_client * or the scanner output buffer (respectively), -4 XML syntax error. */ static int process_omp (omp_parser_t *parser, const gchar *command, gchar **response) { gboolean success; GError* error = NULL; GString *buffer; int (*client_writer) (const char*, void*); void* client_writer_data; GMarkupParseContext *old_xml_context; client_state_t old_client_state; command_data_t old_command_data; /* Terminate any pending transaction. (force close = TRUE). */ manage_transaction_stop (TRUE); if (response) *response = NULL; old_xml_context = xml_context; xml_context = g_markup_parse_context_new (&xml_parser, 0, parser, NULL); if (xml_context == NULL) { xml_context = old_xml_context; return -1; } old_command_data = command_data; command_data_init (&command_data); old_client_state = client_state; client_state = CLIENT_AUTHENTIC; buffer = g_string_new (""); client_writer = parser->client_writer; client_writer_data = parser->client_writer_data; parser->client_writer = process_omp_write; parser->client_writer_data = buffer; current_error = 0; success = g_markup_parse_context_parse (xml_context, command, strlen (command), &error); parser->client_writer = client_writer; parser->client_writer_data = client_writer_data; xml_context = old_xml_context; client_state = old_client_state; command_data = old_command_data; if (success == FALSE) { int err; if (error) { err = -4; if (g_error_matches (error, G_MARKUP_ERROR, G_MARKUP_ERROR_UNKNOWN_ELEMENT)) tracef (" client error: G_MARKUP_ERROR_UNKNOWN_ELEMENT\n"); else if (g_error_matches (error, G_MARKUP_ERROR, G_MARKUP_ERROR_INVALID_CONTENT)) { if (current_error) { /* This is the return status for a forked child. */ forked = 2; /* Prevent further forking. */ g_error_free (error); return current_error; } tracef (" client error: G_MARKUP_ERROR_INVALID_CONTENT\n"); } else if (g_error_matches (error, G_MARKUP_ERROR, G_MARKUP_ERROR_UNKNOWN_ATTRIBUTE)) tracef (" client error: G_MARKUP_ERROR_UNKNOWN_ATTRIBUTE\n"); else err = -1; infof (" Failed to parse client XML: %s\n", error->message); g_error_free (error); } else err = -1; return err; } if (response) *response = g_string_free (buffer, FALSE); else g_string_free (buffer, TRUE); if (forked) return 3; return 0; } /* OMP change processor. */ /** * @brief Deal with any changes caused by other processes. * * @return 0 success, 1 did something, -1 too little space in the scanner * output buffer. */ int process_omp_change () { return manage_check_current_task (); } openvas-manager-6.0.9/src/manage_ranges_all_tcp_nmap_5_51_top_100.c000644 001751 001751 00000011032 12557600615 026113 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Manage library: Ranges for All TCP and Nmap 5.51 Top 100 UDP. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2009,2010 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #include "manage.h" #include "sql.h" /** * @brief Insert a port range. */ #define RANGE(type, start, end) \ sql ("INSERT INTO port_ranges" \ " (uuid, port_list, type, start, \"end\", comment, exclude)" \ " VALUES" \ " (make_uuid (), %llu, %i," \ " '" G_STRINGIFY (start) "'," \ " '" G_STRINGIFY (end) "'," \ " '', 0)", \ list, \ type) /** * @brief Make port ranges for IANA TCP 2012. * * Caller must lock the db. * * @param[in] list Port list. */ void make_port_ranges_all_tcp_nmap_5_51_top_100 (port_list_t list) { sql_begin_immediate (); RANGE (PORT_PROTOCOL_TCP, 1, 65535); RANGE (PORT_PROTOCOL_UDP, 7, 7); RANGE (PORT_PROTOCOL_UDP, 9, 9); RANGE (PORT_PROTOCOL_UDP, 17, 17); RANGE (PORT_PROTOCOL_UDP, 19, 19); RANGE (PORT_PROTOCOL_UDP, 49, 49); RANGE (PORT_PROTOCOL_UDP, 53, 53); RANGE (PORT_PROTOCOL_UDP, 67, 69); RANGE (PORT_PROTOCOL_UDP, 80, 80); RANGE (PORT_PROTOCOL_UDP, 88, 88); RANGE (PORT_PROTOCOL_UDP, 111, 111); RANGE (PORT_PROTOCOL_UDP, 120, 120); RANGE (PORT_PROTOCOL_UDP, 123, 123); RANGE (PORT_PROTOCOL_UDP, 135, 139); RANGE (PORT_PROTOCOL_UDP, 158, 158); RANGE (PORT_PROTOCOL_UDP, 161, 162); RANGE (PORT_PROTOCOL_UDP, 177, 177); RANGE (PORT_PROTOCOL_UDP, 427, 427); RANGE (PORT_PROTOCOL_UDP, 443, 443); RANGE (PORT_PROTOCOL_UDP, 445, 445); RANGE (PORT_PROTOCOL_UDP, 497, 497); RANGE (PORT_PROTOCOL_UDP, 500, 500); RANGE (PORT_PROTOCOL_UDP, 514, 515); RANGE (PORT_PROTOCOL_UDP, 518, 518); RANGE (PORT_PROTOCOL_UDP, 520, 520); RANGE (PORT_PROTOCOL_UDP, 593, 593); RANGE (PORT_PROTOCOL_UDP, 623, 623); RANGE (PORT_PROTOCOL_UDP, 626, 626); RANGE (PORT_PROTOCOL_UDP, 631, 631); RANGE (PORT_PROTOCOL_UDP, 996, 999); RANGE (PORT_PROTOCOL_UDP, 1022, 1023); RANGE (PORT_PROTOCOL_UDP, 1025, 1030); RANGE (PORT_PROTOCOL_UDP, 1433, 1434); RANGE (PORT_PROTOCOL_UDP, 1645, 1646); RANGE (PORT_PROTOCOL_UDP, 1701, 1701); RANGE (PORT_PROTOCOL_UDP, 1718, 1719); RANGE (PORT_PROTOCOL_UDP, 1812, 1813); RANGE (PORT_PROTOCOL_UDP, 1900, 1900); RANGE (PORT_PROTOCOL_UDP, 2000, 2000); RANGE (PORT_PROTOCOL_UDP, 2048, 2049); RANGE (PORT_PROTOCOL_UDP, 2222, 2223); RANGE (PORT_PROTOCOL_UDP, 3283, 3283); RANGE (PORT_PROTOCOL_UDP, 3456, 3456); RANGE (PORT_PROTOCOL_UDP, 3703, 3703); RANGE (PORT_PROTOCOL_UDP, 4444, 4444); RANGE (PORT_PROTOCOL_UDP, 4500, 4500); RANGE (PORT_PROTOCOL_UDP, 5000, 5000); RANGE (PORT_PROTOCOL_UDP, 5060, 5060); RANGE (PORT_PROTOCOL_UDP, 5353, 5353); RANGE (PORT_PROTOCOL_UDP, 5632, 5632); RANGE (PORT_PROTOCOL_UDP, 9200, 9200); RANGE (PORT_PROTOCOL_UDP, 10000, 10000); RANGE (PORT_PROTOCOL_UDP, 17185, 17185); RANGE (PORT_PROTOCOL_UDP, 20031, 20031); RANGE (PORT_PROTOCOL_UDP, 30718, 30718); RANGE (PORT_PROTOCOL_UDP, 31337, 31337); RANGE (PORT_PROTOCOL_UDP, 32768, 32769); RANGE (PORT_PROTOCOL_UDP, 32771, 32771); RANGE (PORT_PROTOCOL_UDP, 32815, 32815); RANGE (PORT_PROTOCOL_UDP, 33281, 33281); RANGE (PORT_PROTOCOL_UDP, 49152, 49154); RANGE (PORT_PROTOCOL_UDP, 49156, 49156); RANGE (PORT_PROTOCOL_UDP, 49181, 49182); RANGE (PORT_PROTOCOL_UDP, 49185, 49186); RANGE (PORT_PROTOCOL_UDP, 49188, 49188); RANGE (PORT_PROTOCOL_UDP, 49190, 49194); RANGE (PORT_PROTOCOL_UDP, 49200, 49201); sql ("END TRANSACTION"); } openvas-manager-6.0.9/src/openvasmd_log_conf.cmake_in000644 001751 001751 00000002255 12557600615 024015 0ustar00michaelmichael000000 000000 # OpenVAS Manager logging configuration # # WARNING: Setting the level of any group (besides event*) to include debug # may reveal passwords in the logs. [md main] prepend=%t %p prepend_time_format=%Y-%m-%d %Hh%M.%S %Z file=${OPENVAS_LOG_DIR}/openvasmd.log level=127 [md comm] prepend=%t %p prepend_time_format=%Y-%m-%d %Hh%M.%S %Z file=${OPENVAS_LOG_DIR}/openvasmd.log level=127 [md file] prepend=%t %p prepend_time_format=%Y-%m-%d %Hh%M.%S %Z file=${OPENVAS_LOG_DIR}/openvasmd.log level=127 [md manage] prepend=%t %p prepend_time_format=%Y-%m-%d %Hh%M.%S %Z file=${OPENVAS_LOG_DIR}/openvasmd.log level=127 [md omp] prepend=%t %p prepend_time_format=%Y-%m-%d %Hh%M.%S %Z file=${OPENVAS_LOG_DIR}/openvasmd.log level=127 [md otp] prepend=%t %p prepend_time_format=%Y-%m-%d %Hh%M.%S %Z file=${OPENVAS_LOG_DIR}/openvasmd.log level=127 [event syslog] prepend=%t %p prepend_time_format=%Y-%m-%d %Hh%M.%S %Z file=syslog syslog_facility=daemon level=128 [event snmp] prepend=%t %p prepend_time_format=%Y-%m-%d %Hh%M.%S %Z file=syslog syslog_facility=local0 level=128 [*] prepend=%t %p prepend_time_format=%Y-%m-%d %Hh%M.%S %Z file=${OPENVAS_LOG_DIR}/openvasmd.log level=127 openvas-manager-6.0.9/src/lsc_crypt.c000644 001751 001751 00000054021 12557600615 020627 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: LSC credentials encryption support * * Authors: * Werner Koch * * Copyright: * Copyright (C) 2013 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #include #include #include #include #include #include #include #ifdef S_SPLINT_S #include "splint.h" #endif #include "lsc_crypt.h" #undef G_LOG_DOMAIN /** * @brief GLib log domain. */ #define G_LOG_DOMAIN "md crypt" /** * @brief The name of the encryption key. * * Note that the code will use the "=" prefix flag to indicate an * exact search. Thus when creating the key it should not have a * comment or email address part. */ #define ENCRYPTION_KEY_UID "OpenVAS Credential Encryption" /** * @brief The maximum size of an encrypted value * * To avoid excessive memory allocations we put a limit on the size of * values stored in a name/value pair. */ #define MAX_VALUE_LENGTH (128 * 1024) /* Provide a replacement for an error code in libgpg-error > 1.10. */ #ifndef GPG_ERR_AMBIGUOUS # define GPG_ERR_AMBIGUOUS GPG_ERR_AMBIGUOUS_NAME #endif /** * @brief A linked list to help caching results. */ struct namelist_s { struct namelist_s *next; size_t valoff; /* Offset to the value in the plaintext buffer or 0 if VALUE below is used instead. Note that a value will never be at the begin of the plaintext buffer. VALOFF and VALUE 0/NULL indicates a NULL value. */ char *value; char name[1]; /* The name. */ }; /** * @brief The context object for encryption operations * * This context is used to track the underlying gpgme conectec and to * provide a decryption cache. */ struct lsc_crypt_ctx_s { gpgme_ctx_t encctx; gpgme_key_t enckey; /* The key to be used for encryption. */ char *plaintext; size_t plaintextlen; struct namelist_s *namelist; /* Info describing PLAINTEXT. */ }; /* Simple helper functions */ /** * @brief Return a fixed string instead of NULL * * This is a convenience functions to return a descriptive string for * a NULL pointer. Some printf implementations already do that for * the "s" format but it is not a standard. Thus we use this little * helper. */ static G_GNUC_CONST const char * nonnull (const char *s) { return s? s :"[none]"; } /** * @brief Append a 32 bit unsigned integer to a GString. * * This function is used to append a 32 bit unsigned value to a * GString in network byte order (big endian). * * @param buffer GString as destination * @param value The 32 bit unsigned value */ static void put32 (GString *buffer, uint32_t value) { unsigned char tmp[4]; tmp[0] = value >> 24; tmp[1] = value >> 16; tmp[2] = value >> 8; tmp[3] = value; g_string_append_len (buffer, (char*)tmp, 4); } /** * @brief Extract a 32 bit unsigned integer from a buffer * * @param buffer Pointer to an arbitrary buffer with a length of at * least 4 bytes. * @return An unsigned 32 bit integer value taken from the first 4 * bytes of the buffer which is assumed to be in big-endian * encoding. */ static G_GNUC_PURE uint32_t get32 (const void *buffer) { const unsigned char *s = buffer; uint32_t value; value = s[0] << 24; value |= s[1] << 16; value |= s[2] << 8; value |= s[3]; return value; } /** * @brief Log function with extra gpg-error style output * * If \p err is not 0, the appropriate error string is appended to * the output. It takes care to only add the error source string if * it makes sense. * * @param level The GLib style log level * @param err An gpg-error value or 0 * @param fmt The printf style format string, followed by its * arguments. */ static void log_gpgme (GLogLevelFlags level, gpg_error_t err, const char *fmt, ...) { va_list arg_ptr; char *msg; va_start (arg_ptr, fmt); msg = g_strdup_vprintf (fmt, arg_ptr); va_end (arg_ptr); if (err && gpg_err_source (err) != GPG_ERR_SOURCE_ANY) g_log (G_LOG_DOMAIN, level, "%s: %s <%s>", msg, gpg_strerror (err), gpg_strsource (err)); else if (err) g_log (G_LOG_DOMAIN, level, "%s: %s", msg, gpg_strerror (err)); else g_log (G_LOG_DOMAIN, level, "%s", msg); g_free (msg); } /* Local functions. */ /** * @brief Create the credential encryption key * * This should only be called if the key does not yet exist. * * @param ctx The initialized encryption context * * @return On success 0 is returned; any other value indicates an error. */ static int create_the_key (lsc_crypt_ctx_t ctx) { const char parms[] = "\n" "Key-Type: RSA\n" "Key-Length: 2048\n" "Key-Usage: encrypt\n" "Name-Real: " ENCRYPTION_KEY_UID "\n" "Expire-Date: 0\n" "%no-protection\n" "%no-ask-passphrase\n" "\n"; gpg_error_t err; log_gpgme (G_LOG_LEVEL_INFO, 0, "starting key generation ..."); err = gpgme_op_genkey (ctx->encctx, parms, NULL, NULL); if (err) { log_gpgme(G_LOG_LEVEL_WARNING, err, "error creating OpenPGP key '%s'", ENCRYPTION_KEY_UID); return -1; } log_gpgme (G_LOG_LEVEL_INFO, 0, "OpenPGP key '%s' has been generated", ENCRYPTION_KEY_UID); return 0; } /** * @brief Locate the encryption key * * This function is used to find and return the standard encryption * key. * * @param ctx An initialized encryption context * @param no_create If TRUE, do not try to create a missing encryption key. * * @return A gpgme key object or NULL on error. */ static gpgme_key_t find_the_key (lsc_crypt_ctx_t ctx, gboolean no_create) { gpg_error_t err; int nfound, any_skipped; gpgme_key_t found, key; again: /* Search for the public key. Note that the "=" prefix flag enables an exact search. */ err = gpgme_op_keylist_start (ctx->encctx, "="ENCRYPTION_KEY_UID, 0); if (err) { log_gpgme (G_LOG_LEVEL_WARNING, err, "error starting search for OpenPGP key '%s'", ENCRYPTION_KEY_UID); return NULL; } nfound = any_skipped = 0; found = NULL; while (!(err = gpgme_op_keylist_next (ctx->encctx, &key))) { if (!key->can_encrypt || key->revoked || key->expired || key->disabled || key->invalid) { log_gpgme (G_LOG_LEVEL_MESSAGE, 0, "skipping unusable OpenPGP key %s", key->subkeys? nonnull (key->subkeys->keyid):"?"); any_skipped = 1; continue; } nfound++; if (!found) { gpgme_key_ref (key); found = key; } gpgme_key_unref (key); } if (gpgme_err_code (err) == GPG_ERR_EOF) err = 0; gpgme_op_keylist_end (ctx->encctx); if (err) { /* We better reset the gpgme context after an error. */ gpgme_release (ctx->encctx); ctx->encctx = openvas_init_gpgme_ctx (); if (!ctx->encctx) { g_critical ("%s: can't continue w/o a gpgme context\n", G_STRFUNC); exit (EXIT_FAILURE); } } else if (!found) { static int genkey_tried; /* Try to create the key if we have not seen any matching key at all and if this is the first time in this process' lifetime. */ if (!any_skipped && !genkey_tried && !no_create) { genkey_tried = 1; if (!create_the_key (ctx)) goto again; /* Created - search again. */ } err = gpg_err_make (GPG_ERR_SOURCE_ANY, GPG_ERR_NOT_FOUND); } else if (nfound > 1) err = gpg_err_make (GPG_ERR_SOURCE_ANY, GPG_ERR_AMBIGUOUS); if (err) { log_gpgme (G_LOG_LEVEL_MESSAGE, err, "error searching for OpenPGP key '%s'", ENCRYPTION_KEY_UID); gpgme_key_unref (found); found = NULL; } return found; } /** * @brief Encrypt data using the standard key * * Encrypt the given plaintext using the standard credential key and * return a base 64 encoded ciphertext. * * @param[in] ctx An initialized encryption context * @param[in] plaintext The data to be encrypted * @param[in] plaintextlen The length in bytes of \p plaintext * * @return A base64 encoded ciphertext to be released by the caller. * NULL is returned on error. */ static char * do_encrypt (lsc_crypt_ctx_t ctx, const void *plaintext, size_t plaintextlen) { gpg_error_t err; gpgme_data_t in, out; gpgme_key_t keyarray[2]; char *ciphertext; size_t ciphertextlen; char *result; if (!ctx->enckey) { ctx->enckey = find_the_key (ctx, 0); if (!ctx->enckey) return NULL; } err = gpgme_data_new_from_mem (&in, plaintext, plaintextlen, 0); if (err) { log_gpgme (G_LOG_LEVEL_WARNING, err, "%s: error creating data object from plaintext", G_STRFUNC); return NULL; } err = gpgme_data_new (&out); if (err) { log_gpgme (G_LOG_LEVEL_WARNING, err, "%s: error creating data object for ciphertext", G_STRFUNC); gpgme_data_release (in); return NULL; } gpgme_set_armor (ctx->encctx, 0); keyarray[0] = ctx->enckey; keyarray[1] = NULL; err = gpgme_op_encrypt (ctx->encctx, keyarray, GPGME_ENCRYPT_ALWAYS_TRUST, in, out); gpgme_data_release (in); if (err) { log_gpgme (G_LOG_LEVEL_WARNING, err, "%s: error encrypting credential", G_STRFUNC); gpgme_data_release (out); return NULL; } ciphertext = gpgme_data_release_and_get_mem (out, &ciphertextlen); if (!ciphertext) { g_critical ("%s: error snatching memory", G_STRFUNC); exit (EXIT_FAILURE); } result = g_base64_encode ((unsigned char *)ciphertext, ciphertextlen); gpgme_free (ciphertext); return result; } /** * @brief Decrypt data encrypted tothe standard key * * Decrypt the base64 encoded ciphersting. On success store the size * of the plaintext at R_PLAINTEXTSIZE and return an allocated buffer * with the PLAINTEXT. The caller must release the result. Returns * NULL on error. * * @param ctx An initialized encryption context * @param[in] cipherstring The base64 encoded input * @param[out] r_plaintextlen The address of variable to receive the length * in bytes of the decrypted plaintext. On error * that value is not defined. * * @return An allocated buffer it the decrypten result (ie. the * plaintext). The caller must release this buffer. NULL is * returned on error. */ static char * do_decrypt (lsc_crypt_ctx_t ctx, const char *cipherstring, size_t *r_plaintextlen) { gpg_error_t err; gpgme_data_t in, out; char *ciphertext; size_t ciphertextlen; char *result; /* Unfortunately GPGME does not yet support plain base64 encoding. */ ciphertext = (char *)g_base64_decode (cipherstring, &ciphertextlen); if (!ciphertext || !ciphertextlen) return NULL; /* Empty or bad encoding. */ err = gpgme_data_new_from_mem (&in, ciphertext, ciphertextlen, 0); if (err) { log_gpgme (G_LOG_LEVEL_WARNING, err, "%s: error creating data object from ciphertext", G_STRFUNC); g_free (ciphertext); return NULL; } /* (We must release CIPHERTEXT only after IN.) */ err = gpgme_data_new (&out); if (err) { log_gpgme (G_LOG_LEVEL_WARNING, err, "%s: error creating data object for plaintext", G_STRFUNC); gpgme_data_release (in); g_free (ciphertext); return NULL; } err = gpgme_op_decrypt (ctx->encctx, in, out); gpgme_data_release (in); g_free (ciphertext); if (err) { gpgme_decrypt_result_t decres; gpgme_recipient_t recp; gpgme_data_release (out); log_gpgme (G_LOG_LEVEL_WARNING, err, "error decrypting credential"); decres = gpgme_op_decrypt_result (ctx->encctx); if (decres->unsupported_algorithm) log_gpgme (G_LOG_LEVEL_INFO, 0, " unsupported algorithm (%s)", decres->unsupported_algorithm); if (decres->wrong_key_usage) log_gpgme (G_LOG_LEVEL_INFO, 0, " wrong key usage"); for (recp = decres->recipients; recp; recp = recp->next) log_gpgme (G_LOG_LEVEL_INFO, recp->status, " encrypted to keyid %s, algo=%d", recp->keyid, recp->pubkey_algo); return NULL; } result = gpgme_data_release_and_get_mem (out, r_plaintextlen); if (!result) { g_critical ("%s: error snatching memory", G_STRFUNC); exit (EXIT_FAILURE); } return result; } /* API */ /** * @brief Return a new context for LSC encryption * * @return A new context object to be released with \ref * lsc_crypt_release. */ lsc_crypt_ctx_t lsc_crypt_new () { lsc_crypt_ctx_t ctx; ctx = g_malloc0 (sizeof *ctx); ctx->encctx = openvas_init_gpgme_ctx (); if (!ctx->encctx) { g_critical ("%s: can't continue w/o a gpgme context\n", G_STRFUNC); exit (EXIT_FAILURE); } return ctx; } /** * @brief Release an LSC encryption context * * @param[in] ctx The context or NULL */ void lsc_crypt_release (lsc_crypt_ctx_t ctx) { if (!ctx) return; lsc_crypt_flush (ctx); if (ctx->encctx) /* Check required for gpgme < 1.3.1 */ gpgme_release (ctx->encctx); g_free (ctx); } /** * @brief Create the standard credential encryption key * * This function creates a standard encryption key if such a key does * not yet exists. Note, that in general an encryption key is created * on-the-fly. * * @return 0 on success, 1 if the key already exists, and -1 for other * errors. */ int lsc_crypt_create_key () { int res = -1; lsc_crypt_ctx_t ctx; gpgme_key_t key; ctx = lsc_crypt_new (); key = find_the_key (ctx, TRUE); if (key) { gpgme_key_unref (key); g_warning ("A credentials encryption key already exists - " "not creating another one."); res = 1; } else { if (!create_the_key (ctx)) res = 0; } lsc_crypt_release (ctx); return res; } /** * @brief Flush an LSC encryption context * * This function is used to flush the context. The flushing * invalidates returned strings and internal caches. Basically this * is the same as releasing and creating the context but it is * optimized to keep some internal state. * * @param[in] ctx The context or NULL */ void lsc_crypt_flush (lsc_crypt_ctx_t ctx) { if (!ctx) return; while (ctx->namelist) { struct namelist_s *nl = ctx->namelist->next; g_free (ctx->namelist->value); g_free (ctx->namelist); ctx->namelist = nl; } g_free (ctx->plaintext); ctx->plaintext = NULL; } /** * @brief Encrypt a list of name/value pairs * * @param[in] ctx The context * @param[in] first_name The name of the first name/value pair. This * must be followed by a string value and * optionaly followed by more name and value * pairs. This list is terminated by a single * NULL instead of a name. * * @return A pointer to a freshly allocated string in base64 encoding. * Caller must free. On error NULL is returned. */ char * lsc_crypt_encrypt (lsc_crypt_ctx_t ctx, const char *first_name, ...) { va_list arg_ptr; GString *stringbuf; char *plaintext; size_t plaintextlen; char *ciphertext; const char *name, *value; size_t len; if (!ctx || !first_name) return NULL; /* Assuming a 2048 bit RSA ssh private key in PEM encoding, a buffer with an initial size of 2k should be large enough. */ stringbuf = g_string_sized_new (2048); name = first_name; va_start (arg_ptr, first_name); do { value = va_arg (arg_ptr, const char *); if (!value) value = ""; len = strlen (name); if (len) /* We skip pairs with an empty name. */ { put32 (stringbuf, len); g_string_append (stringbuf, name); len = strlen (value); if (len > MAX_VALUE_LENGTH) { g_warning ("%s: value for '%s' larger than our limit (%d)", G_STRFUNC, name, MAX_VALUE_LENGTH); g_string_free (stringbuf, TRUE); va_end (arg_ptr); return NULL; } put32 (stringbuf, len); g_string_append (stringbuf, value); } } while ((name = va_arg (arg_ptr, const char *))) ; va_end (arg_ptr); plaintext = stringbuf->str; plaintextlen = stringbuf->len; g_string_free (stringbuf, FALSE); g_assert (plaintextlen); ciphertext = do_encrypt (ctx, plaintext, plaintextlen); g_free (plaintext); return ciphertext; } /* Fixme: Shall we turn this into a public function? */ static const char * lsc_crypt_decrypt (lsc_crypt_ctx_t ctx, const char *ciphertext, const char *name) { size_t namelen; const char *p; size_t len; uint32_t n; int found; struct namelist_s *nl; if (!ctx || !name || !*name) return NULL; if (disable_encrypted_credentials) { static gboolean shown; if (!shown) { shown = 1; g_warning ("note that decryption of credentials has been disabled"); } return NULL; } if (!ctx->plaintext) { if (!ciphertext) return NULL; ctx->plaintext = do_decrypt (ctx, ciphertext, &ctx->plaintextlen); if (!ctx->plaintext) return NULL; } /* Try to return it from the cache. */ for (nl = ctx->namelist; nl; nl = nl->next) if (!strcmp (nl->name, name)) { return (nl->value ? nl->value : (nl->valoff ? (ctx->plaintext + nl->valoff) : NULL)); } /* Cache miss: Parse the data, cache the result, and return it. */ /* Fixme: Cache a not found status. */ namelen = strlen (name); p = ctx->plaintext; len = ctx->plaintextlen; found = 0; while (len) { if (len < 4) goto failed; n = get32 (p); p += 4; len -= 4; if (n > len) goto failed; if (n == namelen && !memcmp (p, name, namelen)) found = 1; p += n; len -= n; if (len < 4) goto failed; n = get32 (p); p += 4; len -= 4; if (n > len) goto failed; if (found) { if (n > MAX_VALUE_LENGTH) { g_warning ("%s: value for '%s' larger than our limit (%d)", G_STRFUNC, name, MAX_VALUE_LENGTH); return NULL; } nl = g_malloc (sizeof *nl + namelen); #if 0 strcpy (nl->name, name); #else /* The pointer arithmetic helps Clang see that nl is allocated * bigger than the size of *nl. */ strcpy (((char *) nl) + (nl->name - (char *) nl), name); #endif if (n + 1 < len && p[n] == 0) { /* The values is followed by another name and the first byte of that name's length is 0. Thus we don't need to take a copy because that length byte acts as the string terminator. */ nl->valoff = (p - ctx->plaintext); nl->value = NULL; } else { /* We need to take a copy of the value, so that we can add the string terminator. */ nl->valoff = 0; nl->value = g_malloc (n + 1); memcpy (nl->value, p, n); nl->value[n] = 0; } nl->next = ctx->namelist; ctx->namelist = nl; return nl->value? nl->value : (ctx->plaintext + nl->valoff); } p += n; len -= n; } if (!len) goto not_found; failed: g_warning ("%s: decrypted credential data block is inconsistent;" " %zu bytes remaining at offset %zu", G_STRFUNC, len, (size_t)(p - ctx->plaintext)); not_found: /* Cache a NULL value. */ nl = g_malloc (sizeof *nl + namelen); #if 0 strcpy (nl->name, name); #else /* The pointer arithmetic helps Clang see that nl is allocated * bigger than the size of *nl. */ strcpy (((char *) nl) + (nl->name - (char *) nl), name); #endif nl->valoff = 0; nl->value = NULL; nl->next = ctx->namelist; ctx->namelist = nl; return NULL; } /** * @brief Return an encrypted password in the clear. * * This function returns the encrypted password in the clear. The * clear value may also be NULL , if no password is available. If a * decryption has not yet been done, the passed \a ciphertext value is * first decrypted. Thus a changed value of ciphertext may not have * an effect. To force a decryption a call to \ref lsc_crypt_flush is * required. * * @param[in] ctx The context * @param[in] ciphertext The base64 encoded ciphertest. * * @return A const pointer to a string object. This pointer is valid * as long as the context is valid and \ref lsc_crypt_flush * has not been called. If no password is available NULL is * returned. */ const char * lsc_crypt_get_password (lsc_crypt_ctx_t ctx, const char *ciphertext) { return lsc_crypt_decrypt (ctx, ciphertext, "password"); } const char * lsc_crypt_get_private_key (lsc_crypt_ctx_t ctx, const char *ciphertext) { return lsc_crypt_decrypt (ctx, ciphertext, "private_key"); } openvas-manager-6.0.9/src/splint.h000644 001751 001751 00000007462 12557600615 020152 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Splint helper headers for OpenVAS Manager. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2009 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #ifdef S_SPLINT_S #ifndef OPENVAS_MANAGER_SPLINT_H #define OPENVAS_MANAGER_SPLINT_H /*@-exportheader@*/ /*@-incondefs@*/ /* GLib. */ /*@only@*/ gpointer g_malloc (gsize n_bytes); /*@only@*/ gpointer g_malloc0 (gsize n_bytes); void g_free (/*@only@*/ /*@out@*/ /*@null@*/ gpointer mem); void g_error_free (/*@only@*/ /*@out@*/ /*@null@*/ GError* error); gchar* g_array_free (/*@only@*/ /*@out@*/ /*@null@*/ GArray *array, gboolean free_segment); gchar* g_ptr_array_free (/*@only@*/ /*@out@*/ /*@null@*/ GPtrArray *array, gboolean free_segment); void g_ptr_array_add (/*@only@*/ GPtrArray *array, /*@keep@*/ gpointer data); /*@only@*/ GSList* g_slist_append (/*@keep@*/ GSList* list, /*@keep@*/ gpointer data); /** @todo These "keep"s depend on g_hash_table_new params. */ void g_hash_table_insert (GHashTable *hash_table, /*@keep@*/ gpointer key, /*@keep@*/ gpointer value); void g_hash_table_destroy (/*@only@*/ GHashTable *hash_table); void g_ptr_array_foreach (GPtrArray *array, GFunc func, /*@null@*/ gpointer user_data); guchar* g_base64_decode (const gchar *text, /*@out@*/ gsize *out_len); typedef /*@out@*/ gchar* gchar_pointer; gboolean g_file_get_contents (const gchar *filename, /*@out@*/ /** @todo Maybe? */ gchar_pointer *contents, /*@null@*/ /*@out@*/ gsize *length, /*@null@*/ /*@out@*/ GError **error) /*@defines *contents*/; typedef /*@null@*/ GError * gerrorpointer; gboolean g_file_set_contents (const gchar *filename, const gchar *contents, gssize length, /*@null@*/ gerrorpointer* error); /*@notnull@*/ gchar* g_build_filename (const gchar *first, ...); /*@dependent@*/ const gchar* g_dir_read_name (GDir *dir); /*@dependent@*/ const gchar* g_dir_close (/*@only@*/ /*@out@*/ GDir *dir); /*@only@*/ GRand* g_rand_new (); void g_rand_free (/*@only@*/ /*@out@*/ GRand *); void g_strfreev (/*@only@*/ /*@out@*/ gchar **); void g_key_file_free (/*@only@*/ /*@out@*/ GKeyFile *); void g_string_free (/*@only@*/ /*@out@*/ GString *, gboolean); void g_option_context_free (/*@only@*/ /*@out@*/ GOptionContext *); /* GNUTLS. */ #include /*@owned@*/ const char* gnutls_alert_get_name (gnutls_alert_description_t alert); /* Standard functions. */ typedef /*@null@*/ struct dirent * dirent_pointer; typedef /*@null@*/ dirent_pointer* dirent_pointer_pointer; int scandir (const char *dir, dirent_pointer_pointer *namelist, /*@null@*/ int(*filter)(const struct dirent *), int(*compar)(const struct dirent **, const struct dirent **)) /*@allocates *namelist@*/; int alphasort (const void *a, const void *b); /*@=incondefs@*/ /*@=exportheader@*/ #endif /* !OPENVAS_MANAGER_SPLINT_H */ #endif /* S_SPLINT_S */ openvas-manager-6.0.9/src/lsc_user.h000644 001751 001751 00000002611 12557600615 020447 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: LSC user credentials package generation. * * Authors: * Matthew Mundell * Felix Wolfsteller * * Copyright: * Copyright (C) 2009 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #ifndef _OPENVASMD_LSC_USER_H #define _OPENVASMD_LSC_USER_H #include int lsc_user_keys_create (const gchar *, gchar **); int lsc_user_rpm_recreate (const gchar *, const gchar *, void **, gsize *); int lsc_user_deb_recreate (const gchar *, const char *, gsize, void **, gsize *); int lsc_user_exe_recreate (const gchar *, const gchar *, void **, gsize *); #endif /* _OPENVASMD_LSC_USER_H */ openvas-manager-6.0.9/src/ompd.c000644 001751 001751 00000073117 12631501054 017561 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Module for OpenVAS Manager: the OMP daemon. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2009, 2013 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ /** * @file ompd.c * @brief The OpenVAS Manager OMP daemon. * * This file defines the OpenVAS Manager daemon. The Manager serves the OpenVAS * Management Protocol (OMP) to clients such as OpenVAS-Client. The Manager * and OMP give clients full access to an OpenVAS Scanner. * * The library provides two functions: \ref init_ompd and \ref serve_omp. * \ref init_ompd initialises the daemon. * \ref serve_omp serves OMP to a single client socket until end of file is * reached on the socket. */ #include "ompd.h" #include "scanner.h" #include "logf.h" #include "omp.h" /** @todo For scanner_init_state. */ #include "otp.h" #include "ovas-mngr-comm.h" #include "tracef.h" #include #include #include #include #include #include #include #include #include #include #include #ifdef S_SPLINT_S /** @todo Weird that these are missing. */ /*@-exportheader@*/ int socket(int domain, int type, int protocol); /*@=exportheader@*/ #endif #ifndef S_SPLINT_S #if FROM_BUFFER_SIZE > SSIZE_MAX #error FROM_BUFFER_SIZE too big for "read" #endif #endif /** * @brief Buffer of input from the client. */ char from_client[FROM_BUFFER_SIZE]; /** * @brief Size of \ref from_client data buffer, in bytes. */ buffer_size_t from_buffer_size = FROM_BUFFER_SIZE; /** * @brief The start of the data in the \ref from_client buffer. */ buffer_size_t from_client_start = 0; /** * @brief The end of the data in the \ref from_client buffer. */ buffer_size_t from_client_end = 0; /** * @brief Flag for running in NVT cache mode. */ static int ompd_nvt_cache_mode = 0; /** * @brief Initialise the OMP library for the OMP daemon. * * @param[in] log_config Log configuration * @param[in] nvt_cache_mode 0 operate normally, -1 just update NVT cache, * -2 just rebuild NVT cache. * @param[in] database Location of manage database. * @param[in] max_ips_per_target Max number of IPs per target. * @param[in] max_email_attachment_size Max size of email attachments. * @param[in] max_email_include_size Max size of email inclusions. * @param[in] progress Function to update progress, or NULL. * @param[in] skip_db_check Skip DB check. * * @return 0 success, -1 error, -2 database is wrong version, -3 database * needs to be initialized from server, -4 max_ips_per_target out of * range. */ int init_ompd (GSList *log_config, int nvt_cache_mode, const gchar *database, int max_ips_per_target, int max_email_attachment_size, int max_email_include_size, void (*progress) (), int skip_db_check) { return init_omp (log_config, nvt_cache_mode, database, max_ips_per_target, max_email_attachment_size, max_email_include_size, progress, skip_db_check); } /** * @brief Initialise a process forked within the OMP daemon. * * @param[in] database Location of manage database. * @param[in] disable Commands to disable. */ void init_ompd_process (const gchar *database, gchar **disable) { init_omp_process (0, database, NULL, NULL, disable); } /** * @brief Read as much from the client as the \ref from_client buffer will hold. * * @param[in] client_session The TLS session with the client. * @param[in] client_socket The socket connected to the client. * * @return 0 on reading everything available, -1 on error, -2 if * from_client buffer is full or -3 on reaching end of file. */ static int read_from_client (gnutls_session_t* client_session, /*@unused@*/ int client_socket) { while (from_client_end < from_buffer_size) { ssize_t count; count = gnutls_record_recv (*client_session, from_client + from_client_end, from_buffer_size - from_client_end); if (count < 0) { if (count == GNUTLS_E_AGAIN) /* Got everything available, return to `select'. */ return 0; if (count == GNUTLS_E_INTERRUPTED) /* Interrupted, try read again. */ continue; if (count == GNUTLS_E_REHANDSHAKE) { /** @todo Rehandshake. */ tracef (" should rehandshake\n"); continue; } if (gnutls_error_is_fatal ((int) count) == 0 && (count == GNUTLS_E_WARNING_ALERT_RECEIVED || count == GNUTLS_E_FATAL_ALERT_RECEIVED)) { int alert = gnutls_alert_get (*client_session); /*@dependent@*/ const char* alert_name = gnutls_alert_get_name (alert); g_warning ("%s: TLS Alert %d: %s\n", __FUNCTION__, alert, alert_name); } g_warning ("%s: failed to read from client: %s\n", __FUNCTION__, gnutls_strerror ((int) count)); return -1; } if (count == 0) /* End of file. */ return -3; from_client_end += count; } /* Buffer full. */ return -2; } /** @todo Move to openvas-libraries? */ /** * @brief Write as much as possible from \ref to_client to the client. * * @param[in] client_session The client session. * * @return 0 wrote everything, -1 error, -2 wrote as much as client accepted. */ static int write_to_client (gnutls_session_t* client_session) { while (to_client_start < to_client_end) { ssize_t count; count = gnutls_record_send (*client_session, to_client + to_client_start, to_client_end - to_client_start); if (count < 0) { if (count == GNUTLS_E_AGAIN) /* Wrote as much as client would accept. */ return -2; if (count == GNUTLS_E_INTERRUPTED) /* Interrupted, try write again. */ continue; if (count == GNUTLS_E_REHANDSHAKE) /** @todo Rehandshake. */ continue; g_warning ("%s: failed to write to client: %s\n", __FUNCTION__, gnutls_strerror ((int) count)); return -1; } logf ("=> client %.*s\n", to_client_end - to_client_start, to_client + to_client_start); to_client_start += count; tracef ("=> client %u bytes\n", (unsigned int) count); } tracef ("=> client done\n"); to_client_start = to_client_end = 0; /* Wrote everything. */ return 0; } /** * @brief Send a response message to the client. * * Queue a message in \ref to_client. * * @param[in] msg The message, a string. * @param[in] write_to_client_data Argument to \p write_to_client. * * @return TRUE if write to client failed, else FALSE. */ gboolean ompd_send_to_client (const char* msg, void* write_to_client_data) { assert (to_client_end <= TO_CLIENT_BUFFER_SIZE); assert (msg); while (((buffer_size_t) TO_CLIENT_BUFFER_SIZE) - to_client_end < strlen (msg)) { buffer_size_t length; /* Too little space in to_client buffer for message. */ switch (write_to_client (write_to_client_data)) { case 0: /* Wrote everything in to_client. */ break; case -1: /* Error. */ tracef (" %s full (%i < %zu); client write failed\n", __FUNCTION__, ((buffer_size_t) TO_CLIENT_BUFFER_SIZE) - to_client_end, strlen (msg)); return TRUE; case -2: /* Wrote as much as client was willing to accept. */ break; default: /* Programming error. */ assert (0); } length = ((buffer_size_t) TO_CLIENT_BUFFER_SIZE) - to_client_end; if (length > strlen (msg)) break; memmove (to_client + to_client_end, msg, length); tracef ("-> client: %.*s\n", (int) length, msg); to_client_end += length; msg += length; } if (strlen (msg)) { assert (strlen (msg) <= (((buffer_size_t) TO_CLIENT_BUFFER_SIZE) - to_client_end)); memmove (to_client + to_client_end, msg, strlen (msg)); tracef ("-> client: %s\n", msg); to_client_end += strlen (msg); } return FALSE; } static void session_clean (gnutls_session_t *sess, gnutls_certificate_credentials_t *creds) { if (sess && *sess) { gnutls_deinit (*sess); *sess = NULL; } if (creds && *creds) { gnutls_certificate_free_credentials (*creds); *creds = NULL; } } /** * @brief Serve the OpenVAS Management Protocol (OMP). * * Loop reading input from the sockets, processing * the input, and writing any results to the appropriate socket. * Exit the loop on reaching end of file on the client socket. * * Read input from the client and scanner. * Process the input with \ref process_omp_client_input and * \ref process_otp_scanner_input. Write the results to the client. * * \if STATIC * * Read input with \ref read_from_client and \ref openvas_scanner_read. * Write the results with \ref write_to_client. Write to the server * with \ref openvas_scanner_write. * * \endif * * If compiled with logging (\ref LOG) then log all input and output * with \ref logf. * * If client_socket is 0 or less, then update the NVT cache and exit. * * @param[in] client_session The TLS session with the client. * @param[in] client_credentials The TSL client credentials. * @param[in] client_socket The socket connected to the client, if any. * @param[in] database Location of manage database. * @param[in] disable Commands to disable. * @param[in] progress Function to mark progress, or NULL. * * @return 0 on success, -1 on error, 1 scanner still loading. */ int serve_omp (gnutls_session_t* client_session, gnutls_certificate_credentials_t* client_credentials, int client_socket, const gchar* database, gchar **disable, void (*progress) ()) { int nfds, scan_handler = 0, rc = 0; /* True if processing of the client input is waiting for space in the * to_scanner or to_client buffer. */ short client_input_stalled; /* Client status flag. Set to 0 when the client closes the connection * while the scanner is active. */ short client_active = client_socket > 0; if (client_socket < 0) ompd_nvt_cache_mode = client_socket; if (ompd_nvt_cache_mode) infof (" Updating NVT cache.\n"); else tracef (" Serving OMP.\n"); /* Initialise the XML parser and the manage library. */ init_omp_process (ompd_nvt_cache_mode, database, (int (*) (const char*, void*)) ompd_send_to_client, (void*) client_session, disable); #if 0 /** @todo Consider free_omp_data (); on return. */ if (tasks) free_tasks (); if (current_scanner_preference) free (current_scanner_preference); free_credentials (¤t_credentials); maybe_free_scanner_preferences (); // old #endif /* Setup the scanner address and try to connect. */ if (ompd_nvt_cache_mode && !openvas_scanner_connected ()) { /* Is here because it queries the DB and needs it initialized. * XXX: Move outside serve_omp (). */ if (manage_scanner_set_default ()) return -1; if (openvas_scanner_connect () || openvas_scanner_init (1)) { openvas_scanner_close (); return -1; } } client_input_stalled = 0; /** @todo Confirm and clarify complications, especially last one. */ /* Loop handling input from the sockets. * * That is, select on all the socket fds and then, as necessary * - read from the client into buffer from_client * - write to the scanner from buffer to_scanner * - read from the scanner into buffer from_scanner * - write to the client from buffer to_client. * * On reading from an fd, immediately try react to the input. On reading * from the client call process_omp_client_input, which parses OMP * commands and may write to to_scanner and to_client. On reading from * the scanner call process_otp_scanner_input, which updates information * kept about the scanner. * * There are a few complications here * - the program must read from or write to an fd returned by select * before selecting on the fd again, * - the program need only select on the fds for writing if there is * something to write, * - similarly, the program need only select on the fds for reading * if there is buffer space available, * - the buffers from_client and from_scanner can become full during * reading * - a read from the client can be stalled by the to_scanner buffer * filling up, or the to_client buffer filling up (in which case * process_omp_client_input will try to write the to_client buffer * itself), * - a read from the scanner can, theoretically, be stalled by the * to_scanner buffer filling up (during initialisation). */ nfds = openvas_scanner_get_nfds (client_socket); while (1) { int ret; fd_set readfds, writefds; /* Setup for select. */ /** @todo nfds must only include a socket if it's in >= one set. */ FD_ZERO (&readfds); FD_ZERO (&writefds); /** @todo Shutdown on failure (for example, if a read fails). */ if (client_active) { /* See whether to read from the client. */ if (from_client_end < from_buffer_size) FD_SET (client_socket, &readfds); /* See whether to write to the client. */ if (to_client_start < to_client_end) FD_SET (client_socket, &writefds); } /* See whether we need to read from the scannner. */ if (openvas_scanner_connected () && (scanner_init_state == SCANNER_INIT_DONE || scanner_init_state == SCANNER_INIT_DONE_CACHE_MODE || scanner_init_state == SCANNER_INIT_DONE_CACHE_MODE_UPDATE || scanner_init_state == SCANNER_INIT_SENT_COMPLETE_LIST || scanner_init_state == SCANNER_INIT_SENT_COMPLETE_LIST_UPDATE || scanner_init_state == SCANNER_INIT_SENT_VERSION) && !openvas_scanner_full ()) openvas_scanner_fd_set (&readfds); /* See whether we need to write to the scanner. */ if (openvas_scanner_connected () && (((scanner_init_state == SCANNER_INIT_TOP || scanner_init_state == SCANNER_INIT_DONE || scanner_init_state == SCANNER_INIT_DONE_CACHE_MODE || scanner_init_state == SCANNER_INIT_DONE_CACHE_MODE_UPDATE) && to_server_buffer_space () > 0) || scanner_init_state == SCANNER_INIT_CONNECTED || scanner_init_state == SCANNER_INIT_GOT_FEED_VERSION || scanner_init_state == SCANNER_INIT_GOT_PLUGINS)) openvas_scanner_fd_set (&writefds); /* Select, then handle result. Due to GNUTLS internal buffering * we test for pending records first and emulate a select call * in that case. Note, that GNUTLS guarantees that writes are * not buffered. Note also that GNUTLS versions < 3 did not * exhibit a problem in OpenVAS due to a different buffering * strategy. */ ret = 0; if (client_socket > 0 && FD_ISSET (client_socket, &readfds) && gnutls_record_check_pending (*client_session)) { FD_ZERO (&readfds); FD_ZERO (&writefds); ret++; FD_SET (client_socket, &readfds); } if (openvas_scanner_fd_isset (&readfds)) { if (openvas_scanner_session_peek ()) { if (!ret) { FD_ZERO (&readfds); FD_ZERO (&writefds); } ret++; openvas_scanner_fd_set (&readfds); } else if (openvas_scanner_peek () == 0) { /* Scanner has gone down. Exit. */ rc = -1; goto client_free; } } if (!ret) { /* Timeout periodically, so that process_omp_change runs * periodically. */ struct timeval timeout; timeout.tv_usec = 0; timeout.tv_sec = 1; ret = select (nfds, &readfds, &writefds, NULL, &timeout); } if ((ret < 0 && errno == EINTR) || ret == 0) { if (process_omp_change () == -1) { rc = -1; goto client_free; } if (!scan_handler && !ompd_nvt_cache_mode) continue; } else if (ret < 0) { g_warning ("%s: child select failed: %s\n", __FUNCTION__, strerror (errno)); rc = -1; goto client_free; } /* Read any data from the client. */ if (client_socket > 0 && FD_ISSET (client_socket, &readfds)) { #if TRACE || LOG buffer_size_t initial_start = from_client_end; #endif switch (read_from_client (client_session, client_socket)) { case 0: /* Read everything. */ break; case -1: /* Error. */ rc = -1; goto client_free; case -2: /* from_client buffer full. */ /* There may be more to read. */ break; case -3: /* End of file. */ tracef (" EOF reading from client.\n"); rc = 0; goto client_free; default: /* Programming error. */ assert (0); } #if TRACE || LOG /* This check prevents output in the "asynchronous network * error" case. */ if (from_client_end > initial_start) { logf ("<= client %.*s\n", from_client_end - initial_start, from_client + initial_start); #if TRACE_TEXT if (g_strstr_len (from_client + initial_start, from_client_end - initial_start, "")) tracef ("<= client Input may contain password, suppressed.\n"); else tracef ("<= client \"%.*s\"\n", from_client_end - initial_start, from_client + initial_start); #else tracef ("<= client %i bytes\n", from_client_end - initial_start); #endif } #endif /* TRACE || LOG */ ret = process_omp_client_input (); if (ret == 0) /* Processed all input. */ client_input_stalled = 0; else if (ret == 3) { /* In the parent after a start_task fork. Free the scanner session * without closing it, for usage by the child process. */ set_scanner_init_state (SCANNER_INIT_TOP); openvas_scanner_free (); nfds = openvas_scanner_get_nfds (client_socket); client_input_stalled = 0; /* Skip the rest of the loop because the scanner socket is * a new socket. This is asking for select trouble, really. */ continue; } else if (ret == 2) { /* Now in a process forked to run a task, which has * successfully started the task. Close the client * connection, as the parent process has continued the * session with the client. */ session_clean (client_session, client_credentials); client_active = 0; client_input_stalled = 0; scan_handler = 1; } else if (ret == 4) { /* Now in a process forked for some operation which has * successfully completed. Close the client connection, * and exit, as the parent process has continued the * session with the client. */ session_clean (client_session, client_credentials); return 0; } else if (ret == -10) { /* Now in a process forked to run a task, which has * failed in starting the task. */ session_clean (client_session, client_credentials); return -1; } else if (ret == -1 || ret == -4) { /* Error. Write rest of to_client to client, so that the * client gets any buffered output and the response to the * error. */ write_to_client (client_session); rc = -1; goto client_free; } else if (ret == -2) { /* to_scanner buffer full. */ tracef (" client input stalled 1\n"); client_input_stalled = 1; /* Break to write to_scanner. */ break; } else if (ret == -3) { /* to_client buffer full. */ tracef (" client input stalled 2\n"); client_input_stalled = 2; /* Break to write to_client. */ break; } else { /* Programming error. */ assert (0); client_input_stalled = 0; } } /* Read any data from the scanner. */ if (openvas_scanner_connected () && (openvas_scanner_fd_isset (&readfds) || scan_handler)) { switch (openvas_scanner_read ()) { case 0: /* Read everything. */ break; case -1: /* Error. */ /* This may be because the scanner closed the connection * at the end of a command. */ /** @todo Then should get EOF (-3). */ set_scanner_init_state (SCANNER_INIT_TOP); rc = -1; goto client_free; case -2: /* from_scanner buffer full. */ /* There may be more to read. */ break; case -3: /* End of file. */ set_scanner_init_state (SCANNER_INIT_TOP); if (client_active == 0) /* The client has closed the connection, so exit. */ return 0; /* Scanner went down, exit. */ rc = -1; goto client_free; default: /* Programming error. */ assert (0); } } /* Write any data to the scanner. */ if (openvas_scanner_connected () && (openvas_scanner_fd_isset (&writefds) || scan_handler)) { /* Write as much as possible to the scanner. */ switch (openvas_scanner_write (ompd_nvt_cache_mode)) { case 0: /* Wrote everything in to_scanner. */ break; case -1: /* Error. */ /** @todo This may be because the scanner closed the connection * at the end of a command? */ rc = -1; goto client_free; case -2: /* Wrote as much as scanner was willing to accept. */ break; case -3: /* Did an initialisation step. */ break; default: /* Programming error. */ assert (0); } } /* Write any data to the client. */ if (client_socket > 0 && FD_ISSET (client_socket, &writefds)) { /* Write as much as possible to the client. */ switch (write_to_client (client_session)) { case 0: /* Wrote everything in to_client. */ break; case -1: /* Error. */ rc = -1; goto client_free; case -2: /* Wrote as much as client was willing to accept. */ break; default: /* Programming error. */ assert (0); } } if (client_input_stalled) { /* Try process the client input, in case writing to the scanner * or client has freed some space in to_scanner or to_client. */ ret = process_omp_client_input (); if (ret == 0) /* Processed all input. */ client_input_stalled = 0; else if (ret == 3) { /* In the parent after a start_task fork. Free the scanner session * without closing it, for usage by the child process. */ openvas_scanner_free (); set_scanner_init_state (SCANNER_INIT_TOP); nfds = openvas_scanner_get_nfds (client_socket); /* Skip the rest of the loop because the scanner socket is * a new socket. This is asking for select trouble, really. */ continue; } else if (ret == 2) { /* Now in a process forked to run a task, which has * successfully started the task. Close the client * connection, as the parent process has continued the * session with the client. */ session_clean (client_session, client_credentials); scan_handler = 1; client_active = 0; } else if (ret == 4) { /* Now in a process forked for some operation which has * successfully completed. Close the client connection, * and exit, as the parent process has continued the * session with the client. */ session_clean (client_session, client_credentials); return 0; } else if (ret == -10) { /* Now in a process forked to run a task, which has * failed in starting the task. */ session_clean (client_session, client_credentials); return -1; } else if (ret == -1) { /* Error. Write rest of to_client to client, so that the * client gets any buffered output and the response to the * error. */ write_to_client (client_session); rc = -1; goto client_free; } else if (ret == -2) { /* to_scanner buffer full. */ tracef (" client input still stalled (1)\n"); client_input_stalled = 1; } else if (ret == -3) { /* to_client buffer full. */ tracef (" client input still stalled (2)\n"); client_input_stalled = 2; } else { /* Programming error. */ assert (0); client_input_stalled = 0; } } if (openvas_scanner_connected ()) { /* Try process the scanner input, in case writing to the scanner * has freed some space in to_scanner. */ ret = process_otp_scanner_input (progress); if (ret == 1) { /* Received scanner BYE. Write out the rest of to_scanner (the * BYE ACK). */ openvas_scanner_write (ompd_nvt_cache_mode); set_scanner_init_state (SCANNER_INIT_TOP); if (client_active == 0) return 0; openvas_scanner_free (); nfds = openvas_scanner_get_nfds (client_socket); } else if (ret == 2) { /* Bad login to scanner. */ if (client_active == 0) return 0; rc = -1; goto client_free; } else if (ret == 3) { /* Calls via serve_client() should continue. */ if (ompd_nvt_cache_mode) return 1; openvas_scanner_close (); } else if (ret == -1) { /* Error. */ rc = -1; goto client_free; } else if (ret == -3) /* to_scanner buffer still full. */ tracef (" scanner input stalled\n"); else /* Programming error. */ assert (ret == 0); } if (process_omp_change () == -1) { rc = -1; goto client_free; } } /* while (1) */ client_free: if (client_active) openvas_server_free (client_socket, *client_session, *client_credentials); return rc; } openvas-manager-6.0.9/src/manage_ranges_all_tcp_nmap_5_51_top_1000.c000644 001751 001751 00000104605 12557600615 026204 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Manage library: Ranges for All TCP and Nmap 5.51 Top 1000 UDP. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2009,2010 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #include "manage.h" #include "sql.h" /** * @brief Insert a port range. */ #define RANGE(type, start, end) \ sql ("INSERT INTO port_ranges" \ " (uuid, port_list, type, start, \"end\", comment, exclude)" \ " VALUES" \ " (make_uuid (), %llu, %i," \ " '" G_STRINGIFY (start) "'," \ " '" G_STRINGIFY (end) "'," \ " '', 0)", \ list, \ type) /** * @brief Make port ranges for IANA TCP 2012. * * Caller must lock the db. * * @param[in] list Port list. */ void make_port_ranges_all_tcp_nmap_5_51_top_1000 (port_list_t list) { sql_begin_immediate (); RANGE (PORT_PROTOCOL_TCP, 1, 65535); RANGE (PORT_PROTOCOL_UDP, 2, 3); RANGE (PORT_PROTOCOL_UDP, 7, 7); RANGE (PORT_PROTOCOL_UDP, 9, 9); RANGE (PORT_PROTOCOL_UDP, 13, 13); RANGE (PORT_PROTOCOL_UDP, 17, 17); RANGE (PORT_PROTOCOL_UDP, 19, 23); RANGE (PORT_PROTOCOL_UDP, 37, 38); RANGE (PORT_PROTOCOL_UDP, 42, 42); RANGE (PORT_PROTOCOL_UDP, 49, 49); RANGE (PORT_PROTOCOL_UDP, 53, 53); RANGE (PORT_PROTOCOL_UDP, 67, 69); RANGE (PORT_PROTOCOL_UDP, 80, 80); RANGE (PORT_PROTOCOL_UDP, 88, 88); RANGE (PORT_PROTOCOL_UDP, 111, 113); RANGE (PORT_PROTOCOL_UDP, 120, 120); RANGE (PORT_PROTOCOL_UDP, 123, 123); RANGE (PORT_PROTOCOL_UDP, 135, 139); RANGE (PORT_PROTOCOL_UDP, 158, 158); RANGE (PORT_PROTOCOL_UDP, 161, 162); RANGE (PORT_PROTOCOL_UDP, 177, 177); RANGE (PORT_PROTOCOL_UDP, 192, 192); RANGE (PORT_PROTOCOL_UDP, 199, 199); RANGE (PORT_PROTOCOL_UDP, 207, 207); RANGE (PORT_PROTOCOL_UDP, 217, 217); RANGE (PORT_PROTOCOL_UDP, 363, 363); RANGE (PORT_PROTOCOL_UDP, 389, 389); RANGE (PORT_PROTOCOL_UDP, 402, 402); RANGE (PORT_PROTOCOL_UDP, 407, 407); RANGE (PORT_PROTOCOL_UDP, 427, 427); RANGE (PORT_PROTOCOL_UDP, 434, 434); RANGE (PORT_PROTOCOL_UDP, 443, 443); RANGE (PORT_PROTOCOL_UDP, 445, 445); RANGE (PORT_PROTOCOL_UDP, 464, 464); RANGE (PORT_PROTOCOL_UDP, 497, 497); RANGE (PORT_PROTOCOL_UDP, 500, 500); RANGE (PORT_PROTOCOL_UDP, 502, 502); RANGE (PORT_PROTOCOL_UDP, 512, 515); RANGE (PORT_PROTOCOL_UDP, 517, 518); RANGE (PORT_PROTOCOL_UDP, 520, 520); RANGE (PORT_PROTOCOL_UDP, 539, 539); RANGE (PORT_PROTOCOL_UDP, 559, 559); RANGE (PORT_PROTOCOL_UDP, 593, 593); RANGE (PORT_PROTOCOL_UDP, 623, 623); RANGE (PORT_PROTOCOL_UDP, 626, 626); RANGE (PORT_PROTOCOL_UDP, 631, 631); RANGE (PORT_PROTOCOL_UDP, 639, 639); RANGE (PORT_PROTOCOL_UDP, 643, 643); RANGE (PORT_PROTOCOL_UDP, 657, 657); RANGE (PORT_PROTOCOL_UDP, 664, 664); RANGE (PORT_PROTOCOL_UDP, 682, 689); RANGE (PORT_PROTOCOL_UDP, 764, 764); RANGE (PORT_PROTOCOL_UDP, 767, 767); RANGE (PORT_PROTOCOL_UDP, 772, 776); RANGE (PORT_PROTOCOL_UDP, 780, 782); RANGE (PORT_PROTOCOL_UDP, 786, 786); RANGE (PORT_PROTOCOL_UDP, 789, 789); RANGE (PORT_PROTOCOL_UDP, 800, 800); RANGE (PORT_PROTOCOL_UDP, 814, 814); RANGE (PORT_PROTOCOL_UDP, 826, 826); RANGE (PORT_PROTOCOL_UDP, 829, 829); RANGE (PORT_PROTOCOL_UDP, 838, 838); RANGE (PORT_PROTOCOL_UDP, 902, 903); RANGE (PORT_PROTOCOL_UDP, 944, 944); RANGE (PORT_PROTOCOL_UDP, 959, 959); RANGE (PORT_PROTOCOL_UDP, 965, 965); RANGE (PORT_PROTOCOL_UDP, 983, 983); RANGE (PORT_PROTOCOL_UDP, 989, 990); RANGE (PORT_PROTOCOL_UDP, 996, 1001); RANGE (PORT_PROTOCOL_UDP, 1007, 1008); RANGE (PORT_PROTOCOL_UDP, 1012, 1014); RANGE (PORT_PROTOCOL_UDP, 1019, 1051); RANGE (PORT_PROTOCOL_UDP, 1053, 1060); RANGE (PORT_PROTOCOL_UDP, 1064, 1070); RANGE (PORT_PROTOCOL_UDP, 1072, 1072); RANGE (PORT_PROTOCOL_UDP, 1080, 1081); RANGE (PORT_PROTOCOL_UDP, 1087, 1088); RANGE (PORT_PROTOCOL_UDP, 1090, 1090); RANGE (PORT_PROTOCOL_UDP, 1100, 1101); RANGE (PORT_PROTOCOL_UDP, 1105, 1105); RANGE (PORT_PROTOCOL_UDP, 1124, 1124); RANGE (PORT_PROTOCOL_UDP, 1200, 1200); RANGE (PORT_PROTOCOL_UDP, 1214, 1214); RANGE (PORT_PROTOCOL_UDP, 1234, 1234); RANGE (PORT_PROTOCOL_UDP, 1346, 1346); RANGE (PORT_PROTOCOL_UDP, 1419, 1419); RANGE (PORT_PROTOCOL_UDP, 1433, 1434); RANGE (PORT_PROTOCOL_UDP, 1455, 1455); RANGE (PORT_PROTOCOL_UDP, 1457, 1457); RANGE (PORT_PROTOCOL_UDP, 1484, 1485); RANGE (PORT_PROTOCOL_UDP, 1524, 1524); RANGE (PORT_PROTOCOL_UDP, 1645, 1646); RANGE (PORT_PROTOCOL_UDP, 1701, 1701); RANGE (PORT_PROTOCOL_UDP, 1718, 1719); RANGE (PORT_PROTOCOL_UDP, 1761, 1761); RANGE (PORT_PROTOCOL_UDP, 1782, 1782); RANGE (PORT_PROTOCOL_UDP, 1804, 1804); RANGE (PORT_PROTOCOL_UDP, 1812, 1813); RANGE (PORT_PROTOCOL_UDP, 1885, 1886); RANGE (PORT_PROTOCOL_UDP, 1900, 1901); RANGE (PORT_PROTOCOL_UDP, 1993, 1993); RANGE (PORT_PROTOCOL_UDP, 2000, 2000); RANGE (PORT_PROTOCOL_UDP, 2002, 2002); RANGE (PORT_PROTOCOL_UDP, 2048, 2049); RANGE (PORT_PROTOCOL_UDP, 2051, 2051); RANGE (PORT_PROTOCOL_UDP, 2148, 2148); RANGE (PORT_PROTOCOL_UDP, 2160, 2161); RANGE (PORT_PROTOCOL_UDP, 2222, 2223); RANGE (PORT_PROTOCOL_UDP, 2343, 2343); RANGE (PORT_PROTOCOL_UDP, 2345, 2345); RANGE (PORT_PROTOCOL_UDP, 2362, 2362); RANGE (PORT_PROTOCOL_UDP, 2967, 2967); RANGE (PORT_PROTOCOL_UDP, 3052, 3052); RANGE (PORT_PROTOCOL_UDP, 3130, 3130); RANGE (PORT_PROTOCOL_UDP, 3283, 3283); RANGE (PORT_PROTOCOL_UDP, 3296, 3296); RANGE (PORT_PROTOCOL_UDP, 3343, 3343); RANGE (PORT_PROTOCOL_UDP, 3389, 3389); RANGE (PORT_PROTOCOL_UDP, 3401, 3401); RANGE (PORT_PROTOCOL_UDP, 3456, 3457); RANGE (PORT_PROTOCOL_UDP, 3659, 3659); RANGE (PORT_PROTOCOL_UDP, 3664, 3664); RANGE (PORT_PROTOCOL_UDP, 3702, 3703); RANGE (PORT_PROTOCOL_UDP, 4000, 4000); RANGE (PORT_PROTOCOL_UDP, 4008, 4008); RANGE (PORT_PROTOCOL_UDP, 4045, 4045); RANGE (PORT_PROTOCOL_UDP, 4444, 4444); RANGE (PORT_PROTOCOL_UDP, 4500, 4500); RANGE (PORT_PROTOCOL_UDP, 4666, 4666); RANGE (PORT_PROTOCOL_UDP, 4672, 4672); RANGE (PORT_PROTOCOL_UDP, 5000, 5003); RANGE (PORT_PROTOCOL_UDP, 5010, 5010); RANGE (PORT_PROTOCOL_UDP, 5050, 5050); RANGE (PORT_PROTOCOL_UDP, 5060, 5060); RANGE (PORT_PROTOCOL_UDP, 5093, 5093); RANGE (PORT_PROTOCOL_UDP, 5351, 5351); RANGE (PORT_PROTOCOL_UDP, 5353, 5353); RANGE (PORT_PROTOCOL_UDP, 5355, 5355); RANGE (PORT_PROTOCOL_UDP, 5500, 5500); RANGE (PORT_PROTOCOL_UDP, 5555, 5555); RANGE (PORT_PROTOCOL_UDP, 5632, 5632); RANGE (PORT_PROTOCOL_UDP, 6000, 6002); RANGE (PORT_PROTOCOL_UDP, 6004, 6004); RANGE (PORT_PROTOCOL_UDP, 6050, 6050); RANGE (PORT_PROTOCOL_UDP, 6346, 6347); RANGE (PORT_PROTOCOL_UDP, 6970, 6971); RANGE (PORT_PROTOCOL_UDP, 7000, 7000); RANGE (PORT_PROTOCOL_UDP, 7938, 7938); RANGE (PORT_PROTOCOL_UDP, 8000, 8001); RANGE (PORT_PROTOCOL_UDP, 8010, 8010); RANGE (PORT_PROTOCOL_UDP, 8181, 8181); RANGE (PORT_PROTOCOL_UDP, 8193, 8193); RANGE (PORT_PROTOCOL_UDP, 8900, 8900); RANGE (PORT_PROTOCOL_UDP, 9000, 9001); RANGE (PORT_PROTOCOL_UDP, 9020, 9020); RANGE (PORT_PROTOCOL_UDP, 9103, 9103); RANGE (PORT_PROTOCOL_UDP, 9199, 9200); RANGE (PORT_PROTOCOL_UDP, 9370, 9370); RANGE (PORT_PROTOCOL_UDP, 9876, 9877); RANGE (PORT_PROTOCOL_UDP, 9950, 9950); RANGE (PORT_PROTOCOL_UDP, 10000, 10000); RANGE (PORT_PROTOCOL_UDP, 10080, 10080); RANGE (PORT_PROTOCOL_UDP, 11487, 11487); RANGE (PORT_PROTOCOL_UDP, 16086, 16086); RANGE (PORT_PROTOCOL_UDP, 16402, 16402); RANGE (PORT_PROTOCOL_UDP, 16420, 16420); RANGE (PORT_PROTOCOL_UDP, 16430, 16430); RANGE (PORT_PROTOCOL_UDP, 16433, 16433); RANGE (PORT_PROTOCOL_UDP, 16449, 16449); RANGE (PORT_PROTOCOL_UDP, 16498, 16498); RANGE (PORT_PROTOCOL_UDP, 16503, 16503); RANGE (PORT_PROTOCOL_UDP, 16545, 16545); RANGE (PORT_PROTOCOL_UDP, 16548, 16548); RANGE (PORT_PROTOCOL_UDP, 16573, 16573); RANGE (PORT_PROTOCOL_UDP, 16674, 16674); RANGE (PORT_PROTOCOL_UDP, 16680, 16680); RANGE (PORT_PROTOCOL_UDP, 16697, 16697); RANGE (PORT_PROTOCOL_UDP, 16700, 16700); RANGE (PORT_PROTOCOL_UDP, 16708, 16708); RANGE (PORT_PROTOCOL_UDP, 16711, 16711); RANGE (PORT_PROTOCOL_UDP, 16739, 16739); RANGE (PORT_PROTOCOL_UDP, 16766, 16766); RANGE (PORT_PROTOCOL_UDP, 16779, 16779); RANGE (PORT_PROTOCOL_UDP, 16786, 16786); RANGE (PORT_PROTOCOL_UDP, 16816, 16816); RANGE (PORT_PROTOCOL_UDP, 16829, 16829); RANGE (PORT_PROTOCOL_UDP, 16832, 16832); RANGE (PORT_PROTOCOL_UDP, 16838, 16839); RANGE (PORT_PROTOCOL_UDP, 16862, 16862); RANGE (PORT_PROTOCOL_UDP, 16896, 16896); RANGE (PORT_PROTOCOL_UDP, 16912, 16912); RANGE (PORT_PROTOCOL_UDP, 16918, 16919); RANGE (PORT_PROTOCOL_UDP, 16938, 16939); RANGE (PORT_PROTOCOL_UDP, 16947, 16948); RANGE (PORT_PROTOCOL_UDP, 16970, 16970); RANGE (PORT_PROTOCOL_UDP, 16972, 16972); RANGE (PORT_PROTOCOL_UDP, 16974, 16974); RANGE (PORT_PROTOCOL_UDP, 17006, 17006); RANGE (PORT_PROTOCOL_UDP, 17018, 17018); RANGE (PORT_PROTOCOL_UDP, 17077, 17077); RANGE (PORT_PROTOCOL_UDP, 17091, 17091); RANGE (PORT_PROTOCOL_UDP, 17101, 17101); RANGE (PORT_PROTOCOL_UDP, 17146, 17146); RANGE (PORT_PROTOCOL_UDP, 17184, 17185); RANGE (PORT_PROTOCOL_UDP, 17205, 17205); RANGE (PORT_PROTOCOL_UDP, 17207, 17207); RANGE (PORT_PROTOCOL_UDP, 17219, 17219); RANGE (PORT_PROTOCOL_UDP, 17236, 17237); RANGE (PORT_PROTOCOL_UDP, 17282, 17282); RANGE (PORT_PROTOCOL_UDP, 17302, 17302); RANGE (PORT_PROTOCOL_UDP, 17321, 17321); RANGE (PORT_PROTOCOL_UDP, 17331, 17332); RANGE (PORT_PROTOCOL_UDP, 17338, 17338); RANGE (PORT_PROTOCOL_UDP, 17359, 17359); RANGE (PORT_PROTOCOL_UDP, 17417, 17417); RANGE (PORT_PROTOCOL_UDP, 17423, 17424); RANGE (PORT_PROTOCOL_UDP, 17455, 17455); RANGE (PORT_PROTOCOL_UDP, 17459, 17459); RANGE (PORT_PROTOCOL_UDP, 17468, 17468); RANGE (PORT_PROTOCOL_UDP, 17487, 17487); RANGE (PORT_PROTOCOL_UDP, 17490, 17490); RANGE (PORT_PROTOCOL_UDP, 17494, 17494); RANGE (PORT_PROTOCOL_UDP, 17505, 17505); RANGE (PORT_PROTOCOL_UDP, 17533, 17533); RANGE (PORT_PROTOCOL_UDP, 17549, 17549); RANGE (PORT_PROTOCOL_UDP, 17573, 17573); RANGE (PORT_PROTOCOL_UDP, 17580, 17580); RANGE (PORT_PROTOCOL_UDP, 17585, 17585); RANGE (PORT_PROTOCOL_UDP, 17592, 17592); RANGE (PORT_PROTOCOL_UDP, 17605, 17605); RANGE (PORT_PROTOCOL_UDP, 17615, 17616); RANGE (PORT_PROTOCOL_UDP, 17629, 17629); RANGE (PORT_PROTOCOL_UDP, 17638, 17638); RANGE (PORT_PROTOCOL_UDP, 17663, 17663); RANGE (PORT_PROTOCOL_UDP, 17673, 17674); RANGE (PORT_PROTOCOL_UDP, 17683, 17683); RANGE (PORT_PROTOCOL_UDP, 17726, 17726); RANGE (PORT_PROTOCOL_UDP, 17754, 17754); RANGE (PORT_PROTOCOL_UDP, 17762, 17762); RANGE (PORT_PROTOCOL_UDP, 17787, 17787); RANGE (PORT_PROTOCOL_UDP, 17814, 17814); RANGE (PORT_PROTOCOL_UDP, 17823, 17824); RANGE (PORT_PROTOCOL_UDP, 17836, 17836); RANGE (PORT_PROTOCOL_UDP, 17845, 17845); RANGE (PORT_PROTOCOL_UDP, 17888, 17888); RANGE (PORT_PROTOCOL_UDP, 17939, 17939); RANGE (PORT_PROTOCOL_UDP, 17946, 17946); RANGE (PORT_PROTOCOL_UDP, 17989, 17989); RANGE (PORT_PROTOCOL_UDP, 18004, 18004); RANGE (PORT_PROTOCOL_UDP, 18081, 18081); RANGE (PORT_PROTOCOL_UDP, 18113, 18113); RANGE (PORT_PROTOCOL_UDP, 18134, 18134); RANGE (PORT_PROTOCOL_UDP, 18156, 18156); RANGE (PORT_PROTOCOL_UDP, 18228, 18228); RANGE (PORT_PROTOCOL_UDP, 18234, 18234); RANGE (PORT_PROTOCOL_UDP, 18250, 18250); RANGE (PORT_PROTOCOL_UDP, 18255, 18255); RANGE (PORT_PROTOCOL_UDP, 18258, 18258); RANGE (PORT_PROTOCOL_UDP, 18319, 18319); RANGE (PORT_PROTOCOL_UDP, 18331, 18331); RANGE (PORT_PROTOCOL_UDP, 18360, 18360); RANGE (PORT_PROTOCOL_UDP, 18373, 18373); RANGE (PORT_PROTOCOL_UDP, 18449, 18449); RANGE (PORT_PROTOCOL_UDP, 18485, 18485); RANGE (PORT_PROTOCOL_UDP, 18543, 18543); RANGE (PORT_PROTOCOL_UDP, 18582, 18582); RANGE (PORT_PROTOCOL_UDP, 18605, 18605); RANGE (PORT_PROTOCOL_UDP, 18617, 18617); RANGE (PORT_PROTOCOL_UDP, 18666, 18666); RANGE (PORT_PROTOCOL_UDP, 18669, 18669); RANGE (PORT_PROTOCOL_UDP, 18676, 18676); RANGE (PORT_PROTOCOL_UDP, 18683, 18683); RANGE (PORT_PROTOCOL_UDP, 18807, 18807); RANGE (PORT_PROTOCOL_UDP, 18818, 18818); RANGE (PORT_PROTOCOL_UDP, 18821, 18821); RANGE (PORT_PROTOCOL_UDP, 18830, 18830); RANGE (PORT_PROTOCOL_UDP, 18832, 18832); RANGE (PORT_PROTOCOL_UDP, 18835, 18835); RANGE (PORT_PROTOCOL_UDP, 18869, 18869); RANGE (PORT_PROTOCOL_UDP, 18883, 18883); RANGE (PORT_PROTOCOL_UDP, 18888, 18888); RANGE (PORT_PROTOCOL_UDP, 18958, 18958); RANGE (PORT_PROTOCOL_UDP, 18980, 18980); RANGE (PORT_PROTOCOL_UDP, 18985, 18985); RANGE (PORT_PROTOCOL_UDP, 18987, 18987); RANGE (PORT_PROTOCOL_UDP, 18991, 18991); RANGE (PORT_PROTOCOL_UDP, 18994, 18994); RANGE (PORT_PROTOCOL_UDP, 18996, 18996); RANGE (PORT_PROTOCOL_UDP, 19017, 19017); RANGE (PORT_PROTOCOL_UDP, 19022, 19022); RANGE (PORT_PROTOCOL_UDP, 19039, 19039); RANGE (PORT_PROTOCOL_UDP, 19047, 19047); RANGE (PORT_PROTOCOL_UDP, 19075, 19075); RANGE (PORT_PROTOCOL_UDP, 19096, 19096); RANGE (PORT_PROTOCOL_UDP, 19120, 19120); RANGE (PORT_PROTOCOL_UDP, 19130, 19130); RANGE (PORT_PROTOCOL_UDP, 19140, 19141); RANGE (PORT_PROTOCOL_UDP, 19154, 19154); RANGE (PORT_PROTOCOL_UDP, 19161, 19161); RANGE (PORT_PROTOCOL_UDP, 19165, 19165); RANGE (PORT_PROTOCOL_UDP, 19181, 19181); RANGE (PORT_PROTOCOL_UDP, 19193, 19193); RANGE (PORT_PROTOCOL_UDP, 19197, 19197); RANGE (PORT_PROTOCOL_UDP, 19222, 19222); RANGE (PORT_PROTOCOL_UDP, 19227, 19227); RANGE (PORT_PROTOCOL_UDP, 19273, 19273); RANGE (PORT_PROTOCOL_UDP, 19283, 19283); RANGE (PORT_PROTOCOL_UDP, 19294, 19294); RANGE (PORT_PROTOCOL_UDP, 19315, 19315); RANGE (PORT_PROTOCOL_UDP, 19322, 19322); RANGE (PORT_PROTOCOL_UDP, 19332, 19332); RANGE (PORT_PROTOCOL_UDP, 19374, 19374); RANGE (PORT_PROTOCOL_UDP, 19415, 19415); RANGE (PORT_PROTOCOL_UDP, 19482, 19482); RANGE (PORT_PROTOCOL_UDP, 19489, 19489); RANGE (PORT_PROTOCOL_UDP, 19500, 19500); RANGE (PORT_PROTOCOL_UDP, 19503, 19504); RANGE (PORT_PROTOCOL_UDP, 19541, 19541); RANGE (PORT_PROTOCOL_UDP, 19600, 19600); RANGE (PORT_PROTOCOL_UDP, 19605, 19605); RANGE (PORT_PROTOCOL_UDP, 19616, 19616); RANGE (PORT_PROTOCOL_UDP, 19624, 19625); RANGE (PORT_PROTOCOL_UDP, 19632, 19632); RANGE (PORT_PROTOCOL_UDP, 19639, 19639); RANGE (PORT_PROTOCOL_UDP, 19647, 19647); RANGE (PORT_PROTOCOL_UDP, 19650, 19650); RANGE (PORT_PROTOCOL_UDP, 19660, 19660); RANGE (PORT_PROTOCOL_UDP, 19662, 19663); RANGE (PORT_PROTOCOL_UDP, 19682, 19683); RANGE (PORT_PROTOCOL_UDP, 19687, 19687); RANGE (PORT_PROTOCOL_UDP, 19695, 19695); RANGE (PORT_PROTOCOL_UDP, 19707, 19707); RANGE (PORT_PROTOCOL_UDP, 19717, 19719); RANGE (PORT_PROTOCOL_UDP, 19722, 19722); RANGE (PORT_PROTOCOL_UDP, 19728, 19728); RANGE (PORT_PROTOCOL_UDP, 19789, 19789); RANGE (PORT_PROTOCOL_UDP, 19792, 19792); RANGE (PORT_PROTOCOL_UDP, 19933, 19933); RANGE (PORT_PROTOCOL_UDP, 19935, 19936); RANGE (PORT_PROTOCOL_UDP, 19956, 19956); RANGE (PORT_PROTOCOL_UDP, 19995, 19995); RANGE (PORT_PROTOCOL_UDP, 19998, 19998); RANGE (PORT_PROTOCOL_UDP, 20003, 20004); RANGE (PORT_PROTOCOL_UDP, 20019, 20019); RANGE (PORT_PROTOCOL_UDP, 20031, 20031); RANGE (PORT_PROTOCOL_UDP, 20082, 20082); RANGE (PORT_PROTOCOL_UDP, 20117, 20117); RANGE (PORT_PROTOCOL_UDP, 20120, 20120); RANGE (PORT_PROTOCOL_UDP, 20126, 20126); RANGE (PORT_PROTOCOL_UDP, 20129, 20129); RANGE (PORT_PROTOCOL_UDP, 20146, 20146); RANGE (PORT_PROTOCOL_UDP, 20154, 20154); RANGE (PORT_PROTOCOL_UDP, 20164, 20164); RANGE (PORT_PROTOCOL_UDP, 20206, 20206); RANGE (PORT_PROTOCOL_UDP, 20217, 20217); RANGE (PORT_PROTOCOL_UDP, 20249, 20249); RANGE (PORT_PROTOCOL_UDP, 20262, 20262); RANGE (PORT_PROTOCOL_UDP, 20279, 20279); RANGE (PORT_PROTOCOL_UDP, 20288, 20288); RANGE (PORT_PROTOCOL_UDP, 20309, 20309); RANGE (PORT_PROTOCOL_UDP, 20313, 20313); RANGE (PORT_PROTOCOL_UDP, 20326, 20326); RANGE (PORT_PROTOCOL_UDP, 20359, 20360); RANGE (PORT_PROTOCOL_UDP, 20366, 20366); RANGE (PORT_PROTOCOL_UDP, 20380, 20380); RANGE (PORT_PROTOCOL_UDP, 20389, 20389); RANGE (PORT_PROTOCOL_UDP, 20409, 20409); RANGE (PORT_PROTOCOL_UDP, 20411, 20411); RANGE (PORT_PROTOCOL_UDP, 20423, 20425); RANGE (PORT_PROTOCOL_UDP, 20445, 20445); RANGE (PORT_PROTOCOL_UDP, 20449, 20449); RANGE (PORT_PROTOCOL_UDP, 20464, 20465); RANGE (PORT_PROTOCOL_UDP, 20518, 20518); RANGE (PORT_PROTOCOL_UDP, 20522, 20522); RANGE (PORT_PROTOCOL_UDP, 20525, 20525); RANGE (PORT_PROTOCOL_UDP, 20540, 20540); RANGE (PORT_PROTOCOL_UDP, 20560, 20560); RANGE (PORT_PROTOCOL_UDP, 20665, 20665); RANGE (PORT_PROTOCOL_UDP, 20678, 20679); RANGE (PORT_PROTOCOL_UDP, 20710, 20710); RANGE (PORT_PROTOCOL_UDP, 20717, 20717); RANGE (PORT_PROTOCOL_UDP, 20742, 20742); RANGE (PORT_PROTOCOL_UDP, 20752, 20752); RANGE (PORT_PROTOCOL_UDP, 20762, 20762); RANGE (PORT_PROTOCOL_UDP, 20791, 20791); RANGE (PORT_PROTOCOL_UDP, 20817, 20817); RANGE (PORT_PROTOCOL_UDP, 20842, 20842); RANGE (PORT_PROTOCOL_UDP, 20848, 20848); RANGE (PORT_PROTOCOL_UDP, 20851, 20851); RANGE (PORT_PROTOCOL_UDP, 20865, 20865); RANGE (PORT_PROTOCOL_UDP, 20872, 20872); RANGE (PORT_PROTOCOL_UDP, 20876, 20876); RANGE (PORT_PROTOCOL_UDP, 20884, 20884); RANGE (PORT_PROTOCOL_UDP, 20919, 20919); RANGE (PORT_PROTOCOL_UDP, 21000, 21000); RANGE (PORT_PROTOCOL_UDP, 21016, 21016); RANGE (PORT_PROTOCOL_UDP, 21060, 21060); RANGE (PORT_PROTOCOL_UDP, 21083, 21083); RANGE (PORT_PROTOCOL_UDP, 21104, 21104); RANGE (PORT_PROTOCOL_UDP, 21111, 21111); RANGE (PORT_PROTOCOL_UDP, 21131, 21131); RANGE (PORT_PROTOCOL_UDP, 21167, 21167); RANGE (PORT_PROTOCOL_UDP, 21186, 21186); RANGE (PORT_PROTOCOL_UDP, 21206, 21207); RANGE (PORT_PROTOCOL_UDP, 21212, 21212); RANGE (PORT_PROTOCOL_UDP, 21247, 21247); RANGE (PORT_PROTOCOL_UDP, 21261, 21261); RANGE (PORT_PROTOCOL_UDP, 21282, 21282); RANGE (PORT_PROTOCOL_UDP, 21298, 21298); RANGE (PORT_PROTOCOL_UDP, 21303, 21303); RANGE (PORT_PROTOCOL_UDP, 21318, 21318); RANGE (PORT_PROTOCOL_UDP, 21320, 21320); RANGE (PORT_PROTOCOL_UDP, 21333, 21333); RANGE (PORT_PROTOCOL_UDP, 21344, 21344); RANGE (PORT_PROTOCOL_UDP, 21354, 21354); RANGE (PORT_PROTOCOL_UDP, 21358, 21358); RANGE (PORT_PROTOCOL_UDP, 21360, 21360); RANGE (PORT_PROTOCOL_UDP, 21364, 21364); RANGE (PORT_PROTOCOL_UDP, 21366, 21366); RANGE (PORT_PROTOCOL_UDP, 21383, 21383); RANGE (PORT_PROTOCOL_UDP, 21405, 21405); RANGE (PORT_PROTOCOL_UDP, 21454, 21454); RANGE (PORT_PROTOCOL_UDP, 21468, 21468); RANGE (PORT_PROTOCOL_UDP, 21476, 21476); RANGE (PORT_PROTOCOL_UDP, 21514, 21514); RANGE (PORT_PROTOCOL_UDP, 21524, 21525); RANGE (PORT_PROTOCOL_UDP, 21556, 21556); RANGE (PORT_PROTOCOL_UDP, 21566, 21566); RANGE (PORT_PROTOCOL_UDP, 21568, 21568); RANGE (PORT_PROTOCOL_UDP, 21576, 21576); RANGE (PORT_PROTOCOL_UDP, 21609, 21609); RANGE (PORT_PROTOCOL_UDP, 21621, 21621); RANGE (PORT_PROTOCOL_UDP, 21625, 21625); RANGE (PORT_PROTOCOL_UDP, 21644, 21644); RANGE (PORT_PROTOCOL_UDP, 21649, 21649); RANGE (PORT_PROTOCOL_UDP, 21655, 21655); RANGE (PORT_PROTOCOL_UDP, 21663, 21663); RANGE (PORT_PROTOCOL_UDP, 21674, 21674); RANGE (PORT_PROTOCOL_UDP, 21698, 21698); RANGE (PORT_PROTOCOL_UDP, 21702, 21702); RANGE (PORT_PROTOCOL_UDP, 21710, 21710); RANGE (PORT_PROTOCOL_UDP, 21742, 21742); RANGE (PORT_PROTOCOL_UDP, 21780, 21780); RANGE (PORT_PROTOCOL_UDP, 21784, 21784); RANGE (PORT_PROTOCOL_UDP, 21800, 21800); RANGE (PORT_PROTOCOL_UDP, 21803, 21803); RANGE (PORT_PROTOCOL_UDP, 21834, 21834); RANGE (PORT_PROTOCOL_UDP, 21842, 21842); RANGE (PORT_PROTOCOL_UDP, 21847, 21847); RANGE (PORT_PROTOCOL_UDP, 21868, 21868); RANGE (PORT_PROTOCOL_UDP, 21898, 21898); RANGE (PORT_PROTOCOL_UDP, 21902, 21902); RANGE (PORT_PROTOCOL_UDP, 21923, 21923); RANGE (PORT_PROTOCOL_UDP, 21948, 21948); RANGE (PORT_PROTOCOL_UDP, 21967, 21967); RANGE (PORT_PROTOCOL_UDP, 22029, 22029); RANGE (PORT_PROTOCOL_UDP, 22043, 22043); RANGE (PORT_PROTOCOL_UDP, 22045, 22045); RANGE (PORT_PROTOCOL_UDP, 22053, 22053); RANGE (PORT_PROTOCOL_UDP, 22055, 22055); RANGE (PORT_PROTOCOL_UDP, 22105, 22105); RANGE (PORT_PROTOCOL_UDP, 22109, 22109); RANGE (PORT_PROTOCOL_UDP, 22123, 22124); RANGE (PORT_PROTOCOL_UDP, 22341, 22341); RANGE (PORT_PROTOCOL_UDP, 22692, 22692); RANGE (PORT_PROTOCOL_UDP, 22695, 22695); RANGE (PORT_PROTOCOL_UDP, 22739, 22739); RANGE (PORT_PROTOCOL_UDP, 22799, 22799); RANGE (PORT_PROTOCOL_UDP, 22846, 22846); RANGE (PORT_PROTOCOL_UDP, 22914, 22914); RANGE (PORT_PROTOCOL_UDP, 22986, 22986); RANGE (PORT_PROTOCOL_UDP, 22996, 22996); RANGE (PORT_PROTOCOL_UDP, 23040, 23040); RANGE (PORT_PROTOCOL_UDP, 23176, 23176); RANGE (PORT_PROTOCOL_UDP, 23354, 23354); RANGE (PORT_PROTOCOL_UDP, 23531, 23531); RANGE (PORT_PROTOCOL_UDP, 23557, 23557); RANGE (PORT_PROTOCOL_UDP, 23608, 23608); RANGE (PORT_PROTOCOL_UDP, 23679, 23679); RANGE (PORT_PROTOCOL_UDP, 23781, 23781); RANGE (PORT_PROTOCOL_UDP, 23965, 23965); RANGE (PORT_PROTOCOL_UDP, 23980, 23980); RANGE (PORT_PROTOCOL_UDP, 24007, 24007); RANGE (PORT_PROTOCOL_UDP, 24279, 24279); RANGE (PORT_PROTOCOL_UDP, 24511, 24511); RANGE (PORT_PROTOCOL_UDP, 24594, 24594); RANGE (PORT_PROTOCOL_UDP, 24606, 24606); RANGE (PORT_PROTOCOL_UDP, 24644, 24644); RANGE (PORT_PROTOCOL_UDP, 24854, 24854); RANGE (PORT_PROTOCOL_UDP, 24910, 24910); RANGE (PORT_PROTOCOL_UDP, 25003, 25003); RANGE (PORT_PROTOCOL_UDP, 25157, 25157); RANGE (PORT_PROTOCOL_UDP, 25240, 25240); RANGE (PORT_PROTOCOL_UDP, 25280, 25280); RANGE (PORT_PROTOCOL_UDP, 25337, 25337); RANGE (PORT_PROTOCOL_UDP, 25375, 25375); RANGE (PORT_PROTOCOL_UDP, 25462, 25462); RANGE (PORT_PROTOCOL_UDP, 25541, 25541); RANGE (PORT_PROTOCOL_UDP, 25546, 25546); RANGE (PORT_PROTOCOL_UDP, 25709, 25709); RANGE (PORT_PROTOCOL_UDP, 25931, 25931); RANGE (PORT_PROTOCOL_UDP, 26407, 26407); RANGE (PORT_PROTOCOL_UDP, 26415, 26415); RANGE (PORT_PROTOCOL_UDP, 26720, 26720); RANGE (PORT_PROTOCOL_UDP, 26872, 26872); RANGE (PORT_PROTOCOL_UDP, 26966, 26966); RANGE (PORT_PROTOCOL_UDP, 27015, 27015); RANGE (PORT_PROTOCOL_UDP, 27195, 27195); RANGE (PORT_PROTOCOL_UDP, 27444, 27444); RANGE (PORT_PROTOCOL_UDP, 27473, 27473); RANGE (PORT_PROTOCOL_UDP, 27482, 27482); RANGE (PORT_PROTOCOL_UDP, 27707, 27707); RANGE (PORT_PROTOCOL_UDP, 27892, 27892); RANGE (PORT_PROTOCOL_UDP, 27899, 27899); RANGE (PORT_PROTOCOL_UDP, 28122, 28122); RANGE (PORT_PROTOCOL_UDP, 28369, 28369); RANGE (PORT_PROTOCOL_UDP, 28465, 28465); RANGE (PORT_PROTOCOL_UDP, 28493, 28493); RANGE (PORT_PROTOCOL_UDP, 28543, 28543); RANGE (PORT_PROTOCOL_UDP, 28547, 28547); RANGE (PORT_PROTOCOL_UDP, 28641, 28641); RANGE (PORT_PROTOCOL_UDP, 28840, 28840); RANGE (PORT_PROTOCOL_UDP, 28973, 28973); RANGE (PORT_PROTOCOL_UDP, 29078, 29078); RANGE (PORT_PROTOCOL_UDP, 29243, 29243); RANGE (PORT_PROTOCOL_UDP, 29256, 29256); RANGE (PORT_PROTOCOL_UDP, 29810, 29810); RANGE (PORT_PROTOCOL_UDP, 29823, 29823); RANGE (PORT_PROTOCOL_UDP, 29977, 29977); RANGE (PORT_PROTOCOL_UDP, 30263, 30263); RANGE (PORT_PROTOCOL_UDP, 30303, 30303); RANGE (PORT_PROTOCOL_UDP, 30365, 30365); RANGE (PORT_PROTOCOL_UDP, 30544, 30544); RANGE (PORT_PROTOCOL_UDP, 30656, 30656); RANGE (PORT_PROTOCOL_UDP, 30697, 30697); RANGE (PORT_PROTOCOL_UDP, 30704, 30704); RANGE (PORT_PROTOCOL_UDP, 30718, 30718); RANGE (PORT_PROTOCOL_UDP, 30975, 30975); RANGE (PORT_PROTOCOL_UDP, 31059, 31059); RANGE (PORT_PROTOCOL_UDP, 31073, 31073); RANGE (PORT_PROTOCOL_UDP, 31109, 31109); RANGE (PORT_PROTOCOL_UDP, 31189, 31189); RANGE (PORT_PROTOCOL_UDP, 31195, 31195); RANGE (PORT_PROTOCOL_UDP, 31335, 31335); RANGE (PORT_PROTOCOL_UDP, 31337, 31337); RANGE (PORT_PROTOCOL_UDP, 31365, 31365); RANGE (PORT_PROTOCOL_UDP, 31625, 31625); RANGE (PORT_PROTOCOL_UDP, 31681, 31681); RANGE (PORT_PROTOCOL_UDP, 31731, 31731); RANGE (PORT_PROTOCOL_UDP, 31891, 31891); RANGE (PORT_PROTOCOL_UDP, 32345, 32345); RANGE (PORT_PROTOCOL_UDP, 32385, 32385); RANGE (PORT_PROTOCOL_UDP, 32528, 32528); RANGE (PORT_PROTOCOL_UDP, 32768, 32780); RANGE (PORT_PROTOCOL_UDP, 32798, 32798); RANGE (PORT_PROTOCOL_UDP, 32815, 32815); RANGE (PORT_PROTOCOL_UDP, 32818, 32818); RANGE (PORT_PROTOCOL_UDP, 32931, 32931); RANGE (PORT_PROTOCOL_UDP, 33030, 33030); RANGE (PORT_PROTOCOL_UDP, 33249, 33249); RANGE (PORT_PROTOCOL_UDP, 33281, 33281); RANGE (PORT_PROTOCOL_UDP, 33354, 33355); RANGE (PORT_PROTOCOL_UDP, 33459, 33459); RANGE (PORT_PROTOCOL_UDP, 33717, 33717); RANGE (PORT_PROTOCOL_UDP, 33744, 33744); RANGE (PORT_PROTOCOL_UDP, 33866, 33866); RANGE (PORT_PROTOCOL_UDP, 33872, 33872); RANGE (PORT_PROTOCOL_UDP, 34038, 34038); RANGE (PORT_PROTOCOL_UDP, 34079, 34079); RANGE (PORT_PROTOCOL_UDP, 34125, 34125); RANGE (PORT_PROTOCOL_UDP, 34358, 34358); RANGE (PORT_PROTOCOL_UDP, 34422, 34422); RANGE (PORT_PROTOCOL_UDP, 34433, 34433); RANGE (PORT_PROTOCOL_UDP, 34555, 34555); RANGE (PORT_PROTOCOL_UDP, 34570, 34570); RANGE (PORT_PROTOCOL_UDP, 34577, 34580); RANGE (PORT_PROTOCOL_UDP, 34758, 34758); RANGE (PORT_PROTOCOL_UDP, 34796, 34796); RANGE (PORT_PROTOCOL_UDP, 34855, 34855); RANGE (PORT_PROTOCOL_UDP, 34861, 34862); RANGE (PORT_PROTOCOL_UDP, 34892, 34892); RANGE (PORT_PROTOCOL_UDP, 35438, 35438); RANGE (PORT_PROTOCOL_UDP, 35702, 35702); RANGE (PORT_PROTOCOL_UDP, 35777, 35777); RANGE (PORT_PROTOCOL_UDP, 35794, 35794); RANGE (PORT_PROTOCOL_UDP, 36108, 36108); RANGE (PORT_PROTOCOL_UDP, 36206, 36206); RANGE (PORT_PROTOCOL_UDP, 36384, 36384); RANGE (PORT_PROTOCOL_UDP, 36458, 36458); RANGE (PORT_PROTOCOL_UDP, 36489, 36489); RANGE (PORT_PROTOCOL_UDP, 36669, 36669); RANGE (PORT_PROTOCOL_UDP, 36778, 36778); RANGE (PORT_PROTOCOL_UDP, 36893, 36893); RANGE (PORT_PROTOCOL_UDP, 36945, 36945); RANGE (PORT_PROTOCOL_UDP, 37144, 37144); RANGE (PORT_PROTOCOL_UDP, 37212, 37212); RANGE (PORT_PROTOCOL_UDP, 37393, 37393); RANGE (PORT_PROTOCOL_UDP, 37444, 37444); RANGE (PORT_PROTOCOL_UDP, 37602, 37602); RANGE (PORT_PROTOCOL_UDP, 37761, 37761); RANGE (PORT_PROTOCOL_UDP, 37783, 37783); RANGE (PORT_PROTOCOL_UDP, 37813, 37813); RANGE (PORT_PROTOCOL_UDP, 37843, 37843); RANGE (PORT_PROTOCOL_UDP, 38037, 38037); RANGE (PORT_PROTOCOL_UDP, 38063, 38063); RANGE (PORT_PROTOCOL_UDP, 38293, 38293); RANGE (PORT_PROTOCOL_UDP, 38412, 38412); RANGE (PORT_PROTOCOL_UDP, 38498, 38498); RANGE (PORT_PROTOCOL_UDP, 38615, 38615); RANGE (PORT_PROTOCOL_UDP, 39213, 39213); RANGE (PORT_PROTOCOL_UDP, 39217, 39217); RANGE (PORT_PROTOCOL_UDP, 39632, 39632); RANGE (PORT_PROTOCOL_UDP, 39683, 39683); RANGE (PORT_PROTOCOL_UDP, 39714, 39714); RANGE (PORT_PROTOCOL_UDP, 39723, 39723); RANGE (PORT_PROTOCOL_UDP, 39888, 39888); RANGE (PORT_PROTOCOL_UDP, 40019, 40019); RANGE (PORT_PROTOCOL_UDP, 40116, 40116); RANGE (PORT_PROTOCOL_UDP, 40441, 40441); RANGE (PORT_PROTOCOL_UDP, 40539, 40539); RANGE (PORT_PROTOCOL_UDP, 40622, 40622); RANGE (PORT_PROTOCOL_UDP, 40708, 40708); RANGE (PORT_PROTOCOL_UDP, 40711, 40711); RANGE (PORT_PROTOCOL_UDP, 40724, 40724); RANGE (PORT_PROTOCOL_UDP, 40732, 40732); RANGE (PORT_PROTOCOL_UDP, 40805, 40805); RANGE (PORT_PROTOCOL_UDP, 40847, 40847); RANGE (PORT_PROTOCOL_UDP, 40866, 40866); RANGE (PORT_PROTOCOL_UDP, 40915, 40915); RANGE (PORT_PROTOCOL_UDP, 41058, 41058); RANGE (PORT_PROTOCOL_UDP, 41081, 41081); RANGE (PORT_PROTOCOL_UDP, 41308, 41308); RANGE (PORT_PROTOCOL_UDP, 41370, 41370); RANGE (PORT_PROTOCOL_UDP, 41446, 41446); RANGE (PORT_PROTOCOL_UDP, 41524, 41524); RANGE (PORT_PROTOCOL_UDP, 41638, 41638); RANGE (PORT_PROTOCOL_UDP, 41702, 41702); RANGE (PORT_PROTOCOL_UDP, 41774, 41774); RANGE (PORT_PROTOCOL_UDP, 41896, 41896); RANGE (PORT_PROTOCOL_UDP, 41967, 41967); RANGE (PORT_PROTOCOL_UDP, 41971, 41971); RANGE (PORT_PROTOCOL_UDP, 42056, 42056); RANGE (PORT_PROTOCOL_UDP, 42172, 42172); RANGE (PORT_PROTOCOL_UDP, 42313, 42313); RANGE (PORT_PROTOCOL_UDP, 42431, 42431); RANGE (PORT_PROTOCOL_UDP, 42434, 42434); RANGE (PORT_PROTOCOL_UDP, 42508, 42508); RANGE (PORT_PROTOCOL_UDP, 42557, 42557); RANGE (PORT_PROTOCOL_UDP, 42577, 42577); RANGE (PORT_PROTOCOL_UDP, 42627, 42627); RANGE (PORT_PROTOCOL_UDP, 42639, 42639); RANGE (PORT_PROTOCOL_UDP, 43094, 43094); RANGE (PORT_PROTOCOL_UDP, 43195, 43195); RANGE (PORT_PROTOCOL_UDP, 43370, 43370); RANGE (PORT_PROTOCOL_UDP, 43514, 43514); RANGE (PORT_PROTOCOL_UDP, 43686, 43686); RANGE (PORT_PROTOCOL_UDP, 43824, 43824); RANGE (PORT_PROTOCOL_UDP, 43967, 43967); RANGE (PORT_PROTOCOL_UDP, 44101, 44101); RANGE (PORT_PROTOCOL_UDP, 44160, 44160); RANGE (PORT_PROTOCOL_UDP, 44179, 44179); RANGE (PORT_PROTOCOL_UDP, 44185, 44185); RANGE (PORT_PROTOCOL_UDP, 44190, 44190); RANGE (PORT_PROTOCOL_UDP, 44253, 44253); RANGE (PORT_PROTOCOL_UDP, 44334, 44334); RANGE (PORT_PROTOCOL_UDP, 44508, 44508); RANGE (PORT_PROTOCOL_UDP, 44923, 44923); RANGE (PORT_PROTOCOL_UDP, 44946, 44946); RANGE (PORT_PROTOCOL_UDP, 44968, 44968); RANGE (PORT_PROTOCOL_UDP, 45247, 45247); RANGE (PORT_PROTOCOL_UDP, 45380, 45380); RANGE (PORT_PROTOCOL_UDP, 45441, 45441); RANGE (PORT_PROTOCOL_UDP, 45685, 45685); RANGE (PORT_PROTOCOL_UDP, 45722, 45722); RANGE (PORT_PROTOCOL_UDP, 45818, 45818); RANGE (PORT_PROTOCOL_UDP, 45928, 45928); RANGE (PORT_PROTOCOL_UDP, 46093, 46093); RANGE (PORT_PROTOCOL_UDP, 46532, 46532); RANGE (PORT_PROTOCOL_UDP, 46836, 46836); RANGE (PORT_PROTOCOL_UDP, 47624, 47624); RANGE (PORT_PROTOCOL_UDP, 47765, 47765); RANGE (PORT_PROTOCOL_UDP, 47772, 47772); RANGE (PORT_PROTOCOL_UDP, 47808, 47808); RANGE (PORT_PROTOCOL_UDP, 47915, 47915); RANGE (PORT_PROTOCOL_UDP, 47981, 47981); RANGE (PORT_PROTOCOL_UDP, 48078, 48078); RANGE (PORT_PROTOCOL_UDP, 48189, 48189); RANGE (PORT_PROTOCOL_UDP, 48255, 48255); RANGE (PORT_PROTOCOL_UDP, 48455, 48455); RANGE (PORT_PROTOCOL_UDP, 48489, 48489); RANGE (PORT_PROTOCOL_UDP, 48761, 48761); RANGE (PORT_PROTOCOL_UDP, 49152, 49163); RANGE (PORT_PROTOCOL_UDP, 49165, 49182); RANGE (PORT_PROTOCOL_UDP, 49184, 49202); RANGE (PORT_PROTOCOL_UDP, 49204, 49205); RANGE (PORT_PROTOCOL_UDP, 49207, 49216); RANGE (PORT_PROTOCOL_UDP, 49220, 49220); RANGE (PORT_PROTOCOL_UDP, 49222, 49222); RANGE (PORT_PROTOCOL_UDP, 49226, 49226); RANGE (PORT_PROTOCOL_UDP, 49259, 49259); RANGE (PORT_PROTOCOL_UDP, 49262, 49262); RANGE (PORT_PROTOCOL_UDP, 49306, 49306); RANGE (PORT_PROTOCOL_UDP, 49350, 49350); RANGE (PORT_PROTOCOL_UDP, 49360, 49360); RANGE (PORT_PROTOCOL_UDP, 49393, 49393); RANGE (PORT_PROTOCOL_UDP, 49396, 49396); RANGE (PORT_PROTOCOL_UDP, 49503, 49503); RANGE (PORT_PROTOCOL_UDP, 49640, 49640); RANGE (PORT_PROTOCOL_UDP, 49968, 49968); RANGE (PORT_PROTOCOL_UDP, 50099, 50099); RANGE (PORT_PROTOCOL_UDP, 50164, 50164); RANGE (PORT_PROTOCOL_UDP, 50497, 50497); RANGE (PORT_PROTOCOL_UDP, 50612, 50612); RANGE (PORT_PROTOCOL_UDP, 50708, 50708); RANGE (PORT_PROTOCOL_UDP, 50919, 50919); RANGE (PORT_PROTOCOL_UDP, 51255, 51255); RANGE (PORT_PROTOCOL_UDP, 51456, 51456); RANGE (PORT_PROTOCOL_UDP, 51554, 51554); RANGE (PORT_PROTOCOL_UDP, 51586, 51586); RANGE (PORT_PROTOCOL_UDP, 51690, 51690); RANGE (PORT_PROTOCOL_UDP, 51717, 51717); RANGE (PORT_PROTOCOL_UDP, 51905, 51905); RANGE (PORT_PROTOCOL_UDP, 51972, 51972); RANGE (PORT_PROTOCOL_UDP, 52144, 52144); RANGE (PORT_PROTOCOL_UDP, 52225, 52225); RANGE (PORT_PROTOCOL_UDP, 52503, 52503); RANGE (PORT_PROTOCOL_UDP, 53006, 53006); RANGE (PORT_PROTOCOL_UDP, 53037, 53037); RANGE (PORT_PROTOCOL_UDP, 53571, 53571); RANGE (PORT_PROTOCOL_UDP, 53589, 53589); RANGE (PORT_PROTOCOL_UDP, 53838, 53838); RANGE (PORT_PROTOCOL_UDP, 54094, 54094); RANGE (PORT_PROTOCOL_UDP, 54114, 54114); RANGE (PORT_PROTOCOL_UDP, 54281, 54281); RANGE (PORT_PROTOCOL_UDP, 54321, 54321); RANGE (PORT_PROTOCOL_UDP, 54711, 54711); RANGE (PORT_PROTOCOL_UDP, 54807, 54807); RANGE (PORT_PROTOCOL_UDP, 54925, 54925); RANGE (PORT_PROTOCOL_UDP, 55043, 55043); RANGE (PORT_PROTOCOL_UDP, 55544, 55544); RANGE (PORT_PROTOCOL_UDP, 55587, 55587); RANGE (PORT_PROTOCOL_UDP, 56141, 56141); RANGE (PORT_PROTOCOL_UDP, 57172, 57172); RANGE (PORT_PROTOCOL_UDP, 57409, 57410); RANGE (PORT_PROTOCOL_UDP, 57813, 57813); RANGE (PORT_PROTOCOL_UDP, 57843, 57843); RANGE (PORT_PROTOCOL_UDP, 57958, 57958); RANGE (PORT_PROTOCOL_UDP, 57977, 57977); RANGE (PORT_PROTOCOL_UDP, 58002, 58002); RANGE (PORT_PROTOCOL_UDP, 58075, 58075); RANGE (PORT_PROTOCOL_UDP, 58178, 58178); RANGE (PORT_PROTOCOL_UDP, 58419, 58419); RANGE (PORT_PROTOCOL_UDP, 58631, 58631); RANGE (PORT_PROTOCOL_UDP, 58640, 58640); RANGE (PORT_PROTOCOL_UDP, 58797, 58797); RANGE (PORT_PROTOCOL_UDP, 59193, 59193); RANGE (PORT_PROTOCOL_UDP, 59207, 59207); RANGE (PORT_PROTOCOL_UDP, 59765, 59765); RANGE (PORT_PROTOCOL_UDP, 59846, 59846); RANGE (PORT_PROTOCOL_UDP, 60172, 60172); RANGE (PORT_PROTOCOL_UDP, 60381, 60381); RANGE (PORT_PROTOCOL_UDP, 60423, 60423); RANGE (PORT_PROTOCOL_UDP, 61024, 61024); RANGE (PORT_PROTOCOL_UDP, 61142, 61142); RANGE (PORT_PROTOCOL_UDP, 61319, 61319); RANGE (PORT_PROTOCOL_UDP, 61322, 61322); RANGE (PORT_PROTOCOL_UDP, 61370, 61370); RANGE (PORT_PROTOCOL_UDP, 61412, 61412); RANGE (PORT_PROTOCOL_UDP, 61481, 61481); RANGE (PORT_PROTOCOL_UDP, 61550, 61550); RANGE (PORT_PROTOCOL_UDP, 61685, 61685); RANGE (PORT_PROTOCOL_UDP, 61961, 61961); RANGE (PORT_PROTOCOL_UDP, 62154, 62154); RANGE (PORT_PROTOCOL_UDP, 62287, 62287); RANGE (PORT_PROTOCOL_UDP, 62575, 62575); RANGE (PORT_PROTOCOL_UDP, 62677, 62677); RANGE (PORT_PROTOCOL_UDP, 62699, 62699); RANGE (PORT_PROTOCOL_UDP, 62958, 62958); RANGE (PORT_PROTOCOL_UDP, 63420, 63420); RANGE (PORT_PROTOCOL_UDP, 63555, 63555); RANGE (PORT_PROTOCOL_UDP, 64080, 64080); RANGE (PORT_PROTOCOL_UDP, 64481, 64481); RANGE (PORT_PROTOCOL_UDP, 64513, 64513); RANGE (PORT_PROTOCOL_UDP, 64590, 64590); RANGE (PORT_PROTOCOL_UDP, 64727, 64727); sql ("END TRANSACTION"); } openvas-manager-6.0.9/src/otp.h000644 001751 001751 00000003661 12557600615 017440 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Headers for OpenVAS Manager: the OTP library. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2009 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #ifndef OPENVAS_MANAGER_OTP_H #define OPENVAS_MANAGER_OTP_H #include "manage.h" #include void init_otp_data (); int process_otp_scanner_input (void (*) ()); /** @todo Exported for following functions. */ /** * @brief Possible initialisation states of the scanner. */ typedef enum { SCANNER_INIT_CONNECTED, SCANNER_INIT_DONE, SCANNER_INIT_DONE_CACHE_MODE, /* Done, when in NVT cache rebuild. */ SCANNER_INIT_DONE_CACHE_MODE_UPDATE, /* Done, when in NVT cache update. */ SCANNER_INIT_GOT_FEED_VERSION, SCANNER_INIT_GOT_PLUGINS, SCANNER_INIT_SENT_COMPLETE_LIST, SCANNER_INIT_SENT_COMPLETE_LIST_UPDATE, SCANNER_INIT_SENT_VERSION, SCANNER_INIT_TOP } scanner_init_state_t; /** @todo Exported for ompd.c. */ extern scanner_init_state_t scanner_init_state; extern int scanner_current_loading; extern int scanner_total_loading; /** @todo Exported for ompd.c. */ void set_scanner_init_state (scanner_init_state_t state); /** @todo Exported for ompd.c. */ extern int scanner_init_offset; #endif openvas-manager-6.0.9/src/manage_sql.c000644 001751 001751 00006726051 12757560562 020763 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Manager Manage library: SQL backend. * * Authors: * Matthew Mundell * Timo Pollmeier * * Copyright: * Copyright (C) 2009-2013 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ /** * @file manage_sql.c * @brief The OpenVAS Manager management library (SQLite implementation). * * This file defines the SQLite specific portions of the OpenVAS manager * management library. */ #define _GNU_SOURCE #include "manage_sql.h" #include "manage_acl.h" #include "lsc_user.h" #include "sql.h" #include "scanner.h" #include "tracef.h" #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #ifdef S_SPLINT_S #include "splint.h" #endif /* Headers from backend specific manage_xxx.c file. */ int manage_create_sql_functions (); void create_tables (); void manage_attach_databases (); int manage_cert_loaded (); int manage_scap_loaded (); /* Headers for symbols defined in manage.c which are private to libmanage. */ /** * @brief Flag to force authentication to succeed. For scheduled tasks. */ int authenticate_allow_all; const char *threat_message_type (const char *); const char *message_type_threat (const char *); int delete_reports (task_t); int delete_slave_task (slave_t, const char *); int stop_task_internal (task_t); int validate_username (const gchar *); /* Port range headers. */ void make_port_ranges_iana_tcp_2012 (port_list_t); void make_port_ranges_iana_tcp_udp_2012 (port_list_t); void make_port_ranges_all_tcp_nmap_5_51_top_100 (port_list_t); void make_port_ranges_all_tcp_nmap_5_51_top_1000 (port_list_t); void make_port_ranges_nmap_5_51_top_2000_top_100 (port_list_t); void make_config_discovery (char *const, const char * const); void make_config_host_discovery (char *const, const char * const); void make_config_system_discovery (char *const, const char * const); void check_config_host_discovery (const char *); /* Static headers. */ static void nvt_selector_add (const char*, const char*, const char*, int); static int nvt_selector_families_growing (const char*); static int nvt_selector_nvts_growing_2 (const char*, int); static void nvt_selector_remove_selector (const char*, const char*, int); static void update_config_caches (config_t); static void update_all_config_caches (); static gchar* select_config_nvts (config_t, const char*, int, const char*); int family_count (); static int report_counts_cache_exists (report_t, int); static void report_severity_data (report_t, int, const char *, const char *, const char *, const char *, int, int, severity_data_t*, severity_data_t*); static int cache_report_counts (report_t, int, severity_data_t*, int); static char* task_owner_uuid (task_t); static int insert_nvt_selectors (const char *, const array_t*); static int validate_param_value (report_format_t, report_format_param_t param, const char *, const char *); int delete_task_lock (task_t, int); gchar* clean_hosts (const char *, int*); int create_port_list_unique (const char *, const char *, const char *, port_list_t *); int valid_type (const char*); static gboolean find_user_by_name (const char *, user_t *user); gboolean find_group (const char*, group_t*); gboolean find_role (const char *, group_t *); gboolean find_role_with_permission (const char *, role_t *, const char *); static gboolean find_user_by_name (const char *, user_t *); int user_ensure_in_db (const gchar *, const gchar *); static int report_format_verify (report_format_t); void cleanup_prognosis_iterator (); int set_password (const gchar *, const gchar *, const gchar *, gchar **); void permissions_set_locations (const char *, resource_t, resource_t, int); void permissions_set_orphans (const char *, resource_t, int); void permissions_set_subjects (const char *, resource_t, resource_t, int); static resource_t permission_resource (permission_t); resource_t permission_subject (permission_t); char * permission_subject_type (permission_t); void tags_set_locations (const char *, resource_t, resource_t, int); void tags_set_orphans (const char *, resource_t, int); int role_is_predefined (role_t); int role_is_predefined_id (const char *); /* Variables. */ /** * @brief Function to mark progress. */ void (*progress) () = NULL; /** * @brief Max number of hosts per target. */ static int max_hosts = MANAGE_MAX_HOSTS; /** * @brief Memory cache of NVT information from the database. */ nvtis_t* nvti_cache = NULL; /** * @brief Name of the database file. */ gchar* task_db_name = NULL; /** * @brief Whether a transaction has been opened and not committed yet. */ static gboolean in_transaction; /** * @brief Time of reception of the currently processed message. */ static struct timeval last_msg; static int check_config_families (); static int task_second_last_report (task_t, report_t *); /* OMP commands. */ /** * @brief The OMP command list. */ command_t omp_commands[] = {{"AUTHENTICATE", "Authenticate with the manager." }, {"COMMANDS", "Run a list of commands."}, {"CREATE_AGENT", "Create an agent."}, {"CREATE_ALERT", "Create an alert."}, {"CREATE_CONFIG", "Create a config."}, {"CREATE_FILTER", "Create a filter."}, {"CREATE_GROUP", "Create a group."}, {"CREATE_LSC_CREDENTIAL", "Create a local security check credential."}, {"CREATE_NOTE", "Create a note."}, {"CREATE_OVERRIDE", "Create an override."}, {"CREATE_PERMISSION", "Create a permission."}, {"CREATE_PORT_LIST", "Create a port list."}, {"CREATE_PORT_RANGE", "Create a port range in a port list."}, {"CREATE_REPORT", "Create a report."}, {"CREATE_REPORT_FORMAT", "Create a report format."}, {"CREATE_ROLE", "Create a role."}, {"CREATE_SCANNER", "Create a scanner."}, {"CREATE_SCHEDULE", "Create a schedule."}, {"CREATE_SLAVE", "Create a slave."}, {"CREATE_TAG", "Create a tag."}, {"CREATE_TARGET", "Create a target."}, {"CREATE_TASK", "Create a task."}, {"CREATE_USER", "Create a new user."}, {"DELETE_AGENT", "Delete an agent."}, {"DELETE_ALERT", "Delete an alert."}, {"DELETE_CONFIG", "Delete a config."}, {"DELETE_FILTER", "Delete a filter."}, {"DELETE_GROUP", "Delete a group."}, {"DELETE_LSC_CREDENTIAL", "Delete a local security check credential."}, {"DELETE_NOTE", "Delete a note."}, {"DELETE_OVERRIDE", "Delete an override."}, {"DELETE_PERMISSION", "Delete a permission."}, {"DELETE_PORT_LIST", "Delete a port list."}, {"DELETE_PORT_RANGE", "Delete a port range."}, {"DELETE_REPORT", "Delete a report."}, {"DELETE_REPORT_FORMAT", "Delete a report format."}, {"DELETE_ROLE", "Delete a role."}, {"DELETE_SCANNER", "Delete a scanner."}, {"DELETE_SCHEDULE", "Delete a schedule."}, {"DELETE_SLAVE", "Delete a slave."}, {"DELETE_TAG", "Delete a tag."}, {"DELETE_TARGET", "Delete a target."}, {"DELETE_TASK", "Delete a task."}, {"DELETE_USER", "Delete an existing user."}, {"DESCRIBE_AUTH", "Get details about the used authentication methods."}, {"DESCRIBE_CERT", "Get details of the CERT feed this Manager uses."}, {"DESCRIBE_FEED", "Get details of the NVT feed this Manager uses."}, {"DESCRIBE_SCAP", "Get details of the SCAP feed this Manager uses."}, {"EMPTY_TRASHCAN", "Empty the trashcan."}, {"GET_AGENTS", "Get all agents."}, {"GET_AGGREGATES", "Get aggregates of resources."}, {"GET_ALERTS", "Get all alerts."}, {"GET_CONFIGS", "Get all configs."}, {"GET_FILTERS", "Get all filters."}, {"GET_GROUPS", "Get all groups."}, {"GET_INFO", "Get raw information for a given item."}, {"GET_LSC_CREDENTIALS", "Get all local security check credentials."}, {"GET_NOTES", "Get all notes."}, {"GET_NVTS", "Get one or all available NVTs."}, {"GET_NVT_FAMILIES", "Get a list of all NVT families."}, {"GET_NVT_FEED_VERSION", "Get NVT feed version."}, {"GET_OVERRIDES", "Get all overrides."}, {"GET_PERMISSIONS", "Get all permissions."}, {"GET_PORT_LISTS", "Get all port lists."}, {"GET_PREFERENCES", "Get preferences for all available NVTs."}, {"GET_REPORTS", "Get all reports."}, {"GET_REPORT_FORMATS", "Get all report formats."}, {"GET_RESULTS", "Get results."}, {"GET_ROLES", "Get all roles."}, {"GET_SCANNERS", "Get all scanners."}, {"GET_SCHEDULES", "Get all schedules."}, {"GET_SETTINGS", "Get all settings."}, {"GET_SLAVES", "Get all slaves."}, {"GET_SYSTEM_REPORTS", "Get all system reports."}, {"GET_TAGS", "Get all tags."}, {"GET_TARGETS", "Get all targets."}, {"GET_TASKS", "Get all tasks."}, {"GET_USERS", "Get all users."}, {"GET_VERSION", "Get the OpenVAS Manager Protocol version."}, {"HELP", "Get this help text."}, {"MODIFY_AGENT", "Modify an existing agent."}, {"MODIFY_ALERT", "Modify an existing alert."}, {"MODIFY_AUTH", "Modify the authentication methods."}, {"MODIFY_CONFIG", "Update an existing config."}, {"MODIFY_FILTER", "Modify an existing filter."}, {"MODIFY_GROUP", "Modify an existing group."}, {"MODIFY_LSC_CREDENTIAL", "Modify an existing LSC credential."}, {"MODIFY_NOTE", "Modify an existing note."}, {"MODIFY_OVERRIDE", "Modify an existing override."}, {"MODIFY_PERMISSION", "Modify an existing permission."}, {"MODIFY_PORT_LIST", "Modify an existing port list."}, {"MODIFY_REPORT", "Modify an existing report."}, {"MODIFY_REPORT_FORMAT", "Modify an existing report format."}, {"MODIFY_ROLE", "Modify an existing role."}, {"MODIFY_SCANNER", "Modify an existing scanner."}, {"MODIFY_SCHEDULE", "Modify an existing schedule."}, {"MODIFY_SETTING", "Modify an existing setting."}, {"MODIFY_SLAVE", "Modify an existing slave."}, {"MODIFY_TAG", "Modify an existing tag."}, {"MODIFY_TARGET", "Modify an existing target."}, {"MODIFY_TASK", "Update an existing task."}, {"MODIFY_USER", "Modify a user."}, {"RESTORE", "Restore a resource."}, {"RESUME_TASK", "Resume a stopped task."}, {"RUN_WIZARD", "Run a wizard."}, {"START_TASK", "Manually start an existing task."}, {"STOP_TASK", "Stop a running task."}, {"SYNC_CERT", "Synchronize with a CERT feed."}, {"SYNC_FEED", "Synchronize with an NVT feed."}, {"SYNC_SCAP", "Synchronize with a SCAP feed."}, {"TEST_ALERT", "Run an alert."}, {"VERIFY_AGENT", "Verify an agent."}, {"VERIFY_REPORT_FORMAT", "Verify a report format."}, {"VERIFY_SCANNER", "Verify a scanner."}, {NULL, NULL}}; /** * @brief Check whether a command name is valid. * * @param[in] name Command name. * * @return 1 yes, 0 no. */ int valid_omp_command (const char* name) { command_t *command; command = omp_commands; while (command[0].name) if (strcasecmp (command[0].name, name) == 0) return 1; else command++; return 0; } /** * @brief Get the type associated with an OMP command. * * @param[in] name Command name. * * @return Freshly allocated type name if any, else NULL. */ gchar * omp_command_type (const char* name) { const char *under; under = strchr (name, '_'); if (under && (strlen (under) > 1)) { gchar *command; under++; command = g_strdup (under); if (command[strlen (command) - 1] == 's') command[strlen (command) - 1] = '\0'; if (valid_type (command)) return command; g_free (command); } return NULL; } /** * @brief Check whether an OMP command takes a resource. * * MODIFY_TARGET, for example, takes a target. * * @param[in] name Command name. * * @return 1 if takes resource, else 0. */ static int omp_command_takes_resource (const char* name) { assert (name); return strcasecmp (name, "AUTHENTICATE") && strcasecmp (name, "COMMANDS") && strcasestr (name, "CREATE_") != name && strcasestr (name, "DESCRIBE_") != name && strcasecmp (name, "EMPTY_TRASHCAN") && strcasecmp (name, "GET_VERSION") && strcasecmp (name, "HELP") && strcasecmp (name, "RUN_WIZARD") && strcasestr (name, "SYNC_") != name; } /* General helpers. */ /** * @brief Check if a resource with a certain name exists already. * * Conflicting resource can be global or owned by the current user. * * @param[in] name Name of resource to check for. * @param[in] type Type of resource. * @param[in] resource Resource to ignore, 0 otherwise. */ static gboolean resource_with_name_exists (const char *name, const char *type, resource_t resource) { int ret; char *quoted_name, *quoted_type; assert (type); if (!name) return 0; quoted_name = sql_quote (name); quoted_type = sql_quote (type); if (resource) ret = sql_int ("SELECT COUNT(*) FROM %ss" " WHERE name = '%s'" " AND id != %llu" " AND ((owner IS NULL)" " OR (owner = (SELECT users.id FROM users" " WHERE users.uuid = '%s')));", quoted_type, quoted_name, resource, current_credentials.uuid); else ret = sql_int ("SELECT COUNT(*) FROM %ss" " WHERE name = '%s'" " AND ((owner IS NULL)" " OR (owner = (SELECT users.id FROM users" " WHERE users.uuid = '%s')));", quoted_type, quoted_name, current_credentials.uuid); g_free (quoted_name); g_free (quoted_type); return !!ret; } /** * @brief Check if a resource with a certain name exists already. * * Conflicting resource can be owned by anybody. * * @param[in] name Name of resource to check for. * @param[in] type Type of resource. * @param[in] resource Resource to ignore, 0 otherwise. */ static gboolean resource_with_name_exists_global (const char *name, const char *type, resource_t resource) { int ret; char *quoted_name, *quoted_type; assert (type); if (!name) return 0; quoted_name = sql_quote (name); quoted_type = sql_quote (type); if (resource) ret = sql_int ("SELECT COUNT(*) FROM %ss" " WHERE name = '%s'" " AND id != %llu;", quoted_type, quoted_name, resource); else ret = sql_int ("SELECT COUNT(*) FROM %ss" " WHERE name = '%s';", quoted_type, quoted_name); g_free (quoted_name); g_free (quoted_type); return !!ret; } /** * @brief Get the threat of a CVSS. * * @param cvss CVSS. * * @return Static threat name. */ static const char * cvss_threat (double cvss) { if (cvss < 0.0 || cvss > 10.0) return ""; if (cvss <= 2.0) return "Low"; if (cvss <= 5.0) return "Medium"; return "High"; } /** * @brief Test whether a string equal to a given string exists in an array. * * @param[in] array Array of gchar* pointers. * @param[in] string String. * * @return 1 if a string equal to \arg string exists in \arg array, else 0. */ static int member (GPtrArray *array, const char *string) { const gchar *item; int index = 0; while ((item = (gchar*) g_ptr_array_index (array, index++))) if (strcmp (item, string) == 0) return 1; return 0; } /** * @brief Ensure a string is in an array. * * @param[in] array Array. * @param[in] string String. Copied into array. */ static void array_add_new_string (array_t *array, const gchar *string) { guint index; for (index = 0; index < array->len; index++) if (strcmp (g_ptr_array_index (array, index), string) == 0) return; array_add (array, g_strdup (string)); } /** * @brief Find a resource in the trashcan given a UUID. * * @param[in] type Type of resource. * @param[in] uuid UUID of resource. * @param[out] resource Resource return, 0 if succesfully failed to find * resource. * * @return FALSE on success (including if failed to find resource), TRUE on * error. */ static gboolean find_trash (const char *type, const char *uuid, resource_t *resource) { gchar *quoted_uuid; if (!uuid) return FALSE; quoted_uuid = sql_quote (uuid); if (user_owns_trash_uuid (type, quoted_uuid) == 0) { g_free (quoted_uuid); *resource = 0; return FALSE; } switch (sql_int64 (resource, "SELECT id FROM %ss_trash WHERE uuid = '%s';", type, quoted_uuid)) { case 0: break; case 1: /* Too few rows in result of query. */ *resource = 0; break; default: /* Programming error. */ assert (0); case -1: g_free (quoted_uuid); return TRUE; break; } g_free (quoted_uuid); return FALSE; } /** * @brief Convert an OTP time into seconds since epoch. * * Use UTC as timezone. * * @param[in] text_time Time as text in ctime format. * * @return Time since epoch. */ static int parse_otp_time (const char *text_time) { int epoch_time; struct tm tm; gchar *tz; /* Scanner sends UTC in ctime format: "Wed Jun 30 21:49:08 1993". */ /* Store current TZ. */ tz = getenv ("TZ") ? g_strdup (getenv ("TZ")) : NULL; if (setenv ("TZ", "UTC", 1) == -1) { g_warning ("%s: Failed to switch to UTC", __FUNCTION__); if (tz != NULL) setenv ("TZ", tz, 1); g_free (tz); return 0; } if (strptime ((char*) text_time, "%a %b %d %H:%M:%S %Y", &tm) == NULL) { g_warning ("%s: Failed to parse time", __FUNCTION__); if (tz != NULL) setenv ("TZ", tz, 1); g_free (tz); return 0; } epoch_time = mktime (&tm); if (epoch_time == -1) { g_warning ("%s: Failed to make time", __FUNCTION__); if (tz != NULL) setenv ("TZ", tz, 1); g_free (tz); return 0; } /* Revert to stored TZ. */ if (tz) { if (setenv ("TZ", tz, 1) == -1) { g_warning ("%s: Failed to switch to original TZ", __FUNCTION__); g_free (tz); return 0; } } else unsetenv ("TZ"); g_free (tz); return epoch_time; } /** * @brief Convert a ctime into seconds since epoch. * * Use the current timezone. * * @param[in] text_time Time as text in ctime format. * * @return Time since epoch. */ static int parse_ctime (const char *text_time) { int epoch_time; struct tm tm; /* ctime format: "Wed Jun 30 21:49:08 1993". */ if (strptime ((char*) text_time, "%a %b %d %H:%M:%S %Y", &tm) == NULL) { g_warning ("%s: Failed to parse time", __FUNCTION__); return 0; } epoch_time = mktime (&tm); if (epoch_time == -1) { g_warning ("%s: Failed to make time", __FUNCTION__); return 0; } return epoch_time; } /** * @brief Convert an ISO time into seconds since epoch. * * For backward compatibility, if the conversion fails try parse in ctime * format. * * @param[in] text_time Time as text in ISO format: 2011-11-03T09:23:28+02:00. * * @return Time since epoch. 0 on error. */ static int parse_iso_time (const char *text_time) { int epoch_time; struct tm tm; if (strptime ((char*) text_time, "%FT%T%z", &tm) == NULL) { gchar *tz; if (strptime ((char*) text_time, "%FT%TZ", &tm) == NULL) return parse_ctime (text_time); /* Store current TZ. */ tz = getenv ("TZ") ? g_strdup (getenv ("TZ")) : NULL; if (setenv ("TZ", "UTC", 1) == -1) { g_warning ("%s: Failed to switch to UTC", __FUNCTION__); if (tz != NULL) setenv ("TZ", tz, 1); g_free (tz); return 0; } if (strptime ((char*) text_time, "%FT%TZ", &tm) == NULL) { assert (0); g_warning ("%s: Failed to parse time", __FUNCTION__); if (tz != NULL) setenv ("TZ", tz, 1); g_free (tz); return 0; } epoch_time = mktime (&tm); if (epoch_time == -1) { g_warning ("%s: Failed to make time", __FUNCTION__); if (tz != NULL) setenv ("TZ", tz, 1); g_free (tz); return 0; } /* Revert to stored TZ. */ if (tz) { if (setenv ("TZ", tz, 1) == -1) { g_warning ("%s: Failed to switch to original TZ", __FUNCTION__); g_free (tz); return 0; } } else unsetenv ("TZ"); g_free (tz); } else { gchar *tz, *new_tz; int offset_hour, offset_minute; char sign; /* Get the timezone offset from the string. */ if (sscanf ((char*) text_time, "%*u-%*u-%*uT%*u:%*u:%*u%[-+]%d:%d", &sign, &offset_hour, &offset_minute) != 3) { /* Perhaps %z is an acronym like "CEST". Assume it's local time. */ epoch_time = mktime (&tm); if (epoch_time == -1) { g_warning ("%s: Failed to make time", __FUNCTION__); return 0; } return epoch_time; } /* Store current TZ. */ tz = getenv ("TZ") ? g_strdup (getenv ("TZ")) : NULL; /* Switch to the timezone in the time string. */ new_tz = g_strdup_printf ("UTC%c%d:%d", sign == '-' ? '+' : '-', offset_hour, offset_minute); if (setenv ("TZ", new_tz, 1) == -1) { g_warning ("%s: Failed to switch to %s", __FUNCTION__, new_tz); g_free (new_tz); if (tz != NULL) setenv ("TZ", tz, 1); g_free (tz); return 0; } g_free (new_tz); /* Parse time again under the new timezone. */ if (strptime ((char*) text_time, "%FT%T%z", &tm) == NULL) { assert (0); g_warning ("%s: Failed to parse time", __FUNCTION__); if (tz != NULL) setenv ("TZ", tz, 1); g_free (tz); return 0; } epoch_time = mktime (&tm); if (epoch_time == -1) { g_warning ("%s: Failed to make time", __FUNCTION__); if (tz != NULL) setenv ("TZ", tz, 1); g_free (tz); return 0; } /* Revert to stored TZ. */ if (tz) { if (setenv ("TZ", tz, 1) == -1) { g_warning ("%s: Failed to switch to original TZ", __FUNCTION__); g_free (tz); return 0; } } else unsetenv ("TZ"); g_free (tz); } return epoch_time; } /** * @brief Create an ISO time from seconds since epoch. * * @param[in] epoch_time Time in seconds from epoch. * @param[out] abbrev Abbreviation for current timezone. * * @return Pointer to ISO time in static memory, or NULL on error. */ static char * iso_time_internal (time_t *epoch_time, const char **abbrev) { struct tm *tm; static char time_string[100]; tm = localtime (epoch_time); if (timezone == 0) { if (strftime (time_string, 98, "%FT%TZ", tm) == 0) return NULL; if (abbrev) *abbrev = "UTC"; } else { int len; if (strftime (time_string, 98, "%FT%T%z", tm) == 0) return NULL; /* Insert the ISO 8601 colon by hand. */ len = strlen (time_string); time_string[len + 1] = '\0'; time_string[len] = time_string[len - 1]; time_string[len - 1] = time_string[len - 2]; time_string[len - 2] = ':'; if (abbrev) { static char abbrev_string[100]; if (strftime (abbrev_string, 98, "%Z", tm) == 0) return NULL; *abbrev = abbrev_string; } } return time_string; } /** * @brief Create an ISO time from seconds since epoch. * * @param[in] epoch_time Time in seconds from epoch. * * @return Pointer to ISO time in static memory, or NULL on error. */ char * iso_time (time_t *epoch_time) { return iso_time_internal (epoch_time, NULL); } /** * @brief Create an ISO time from seconds since epoch, given a timezone. * * @param[in] epoch_time Time in seconds from epoch. * @param[in] timezone Timezone. * @param[out] abbrev Timezone abbreviation. * * @return Pointer to ISO time in static memory, or NULL on error. */ char * iso_time_tz (time_t *epoch_time, const char *timezone, const char **abbrev) { gchar *tz; char *ret; if (timezone == NULL) return iso_time (epoch_time); /* Store current TZ. */ tz = getenv ("TZ") ? g_strdup (getenv ("TZ")) : NULL; if (setenv ("TZ", timezone, 1) == -1) { g_warning ("%s: Failed to switch to timezone", __FUNCTION__); if (tz != NULL) setenv ("TZ", tz, 1); g_free (tz); return iso_time (epoch_time); } tzset (); ret = iso_time_internal (epoch_time, abbrev); /* Revert to stored TZ. */ if (tz) { if (setenv ("TZ", tz, 1) == -1) { g_warning ("%s: Failed to switch to original TZ", __FUNCTION__); g_free (tz); return ret; } } else unsetenv ("TZ"); g_free (tz); return ret; } /** * @brief Get the current offset from UTC of a timezone. * * @param[in] zone Timezone, or NULL for UTC. * * @return Seconds east of UTC. */ long current_offset (const char *zone) { gchar *tz; long offset; time_t now; struct tm *now_broken; if (zone == NULL) return 0; /* Store current TZ. */ tz = getenv ("TZ") ? g_strdup (getenv ("TZ")) : NULL; if (setenv ("TZ", zone, 1) == -1) { g_warning ("%s: Failed to switch to timezone", __FUNCTION__); if (tz != NULL) setenv ("TZ", tz, 1); g_free (tz); return 0; } tzset (); time (&now); now_broken = localtime (&now); if (setenv ("TZ", "UTC", 1) == -1) { g_warning ("%s: Failed to switch to UTC", __FUNCTION__); if (tz != NULL) setenv ("TZ", tz, 1); g_free (tz); return 0; } tzset (); offset = - (now - mktime (now_broken)); /* Revert to stored TZ. */ if (tz) { if (setenv ("TZ", tz, 1) == -1) { g_warning ("%s: Failed to switch to original TZ", __FUNCTION__); g_free (tz); return 0; } } else unsetenv ("TZ"); g_free (tz); return offset; } /** * @brief Get the offset from UTC of a timezone at a particular time. * * @param[in] zone Timezone, or NULL for UTC. * @param[in] time Time. * * @return Seconds east of UTC. */ long time_offset (const char *zone, time_t time) { gchar *tz; struct tm *time_broken; int mins; char buf[100]; if (zone == NULL || strcmp (zone, "UTC") == 0) return 0; /* Store current TZ. */ tz = getenv ("TZ") ? g_strdup (getenv ("TZ")) : NULL; if (setenv ("TZ", zone, 1) == -1) { g_warning ("%s: Failed to switch to timezone", __FUNCTION__); if (tz != NULL) setenv ("TZ", tz, 1); g_free (tz); return 0; } tzset (); time_broken = localtime (&time); if (strftime (buf, 100, "%z", time_broken) == 0) { g_warning ("%s: Failed to format timezone", __FUNCTION__); if (tz != NULL) setenv ("TZ", tz, 1); g_free (tz); return 0; } if (strlen (buf) > 3) { mins = atoi (buf); mins /= 100; mins *= 60; mins += atoi (buf + 3); } else mins = 0; /* Revert to stored TZ. */ if (tz) { if (setenv ("TZ", tz, 1) == -1) { g_warning ("%s: Failed to switch to original TZ", __FUNCTION__); g_free (tz); return mins * 60; } } else unsetenv ("TZ"); g_free (tz); return mins * 60; } /** * @brief Find a string in an array. * * @param[in] array Array. * @param[in] string String. * * @return The string from the array if found, else NULL. */ static gchar* array_find_string (array_t *array, const gchar *string) { guint index; for (index = 0; index < array->len; index++) { gchar *ele; ele = (gchar*) g_ptr_array_index (array, index); if (ele && (strcmp (ele, string) == 0)) return ele; } return NULL; } /** * @brief Find a string in a glib style string vector. * * @param[in] vector Vector. * @param[in] string String. * * @return The string from the vector if found, else NULL. */ static const gchar* vector_find_string (const gchar **vector, const gchar *string) { if (vector == NULL) return NULL; while (*vector) if (strcmp (*vector, string) == 0) return *vector; else vector++; return NULL; } /** * @brief Find a filter string in a glib style string vector. * * @param[in] vector Vector. * @param[in] string String. * * @return 1 if found, 2 if found with underscore prefix, else NULL. */ static int vector_find_filter (const gchar **vector, const gchar *string) { gchar *underscore; if (vector_find_string (vector, string)) return 1; underscore = g_strdup_printf ("_%s", string); if (vector_find_string (vector, underscore)) { g_free (underscore); return 2; } g_free (underscore); return 0; } /** * @brief Extract a tag from an OTP tag list. * * @param[in] tags Tag list. * @param[out] tag Tag name. * * @return Newly allocated tag value. */ gchar * tag_value (const gchar *tags, const gchar *tag) { gchar **split, **point; /* creation_date=2009-04-09 14:18:58 +0200 (Thu, 09 Apr 2009)|... */ if (tags == NULL) return g_strdup (""); split = g_strsplit (tags, "|", 0); point = split; while (*point) { if ((strlen (*point) > strlen (tag)) && (strncmp (*point, tag, strlen (tag)) == 0) && ((*point)[strlen (tag)] == '=')) { gchar *ret; ret = g_strdup (*point + strlen (tag) + 1); g_strfreev (split); return ret; } point++; } g_strfreev (split); return g_strdup (""); } /** * @brief Try convert an OTP NVT tag time string into epoch time. * * @param[in] string String. * @param[out] seconds Time as seconds since the epoch. * * @return -1 failed to parse time, -2 failed to make time, -3 failed to parse * timezone offset, 0 success. */ int parse_time (const gchar *string, int *seconds) { int epoch_time, offset; struct tm tm; if ((strcmp ((char*) string, "") == 0) || (strcmp ((char*) string, "$Date: $") == 0) || (strcmp ((char*) string, "$Date$") == 0) || (strcmp ((char*) string, "$Date:$") == 0) || (strcmp ((char*) string, "$Date") == 0) || (strcmp ((char*) string, "$$") == 0)) { if (seconds) *seconds = 0; return 0; } /* Parse the time. */ /* 2011-08-09 08:20:34 +0200 (Tue, 09 Aug 2011) */ /* $Date: 2012-02-17 16:05:26 +0100 (Fr, 17. Feb 2012) $ */ /* $Date: Fri, 11 Nov 2011 14:42:28 +0100 $ */ if ((strptime ((char*) string, "%F %T %z", &tm) == NULL) && (strptime ((char*) string, "$Date: %F %T %z", &tm) == NULL) && (strptime ((char*) string, "%a %b %d %T %Y %z", &tm) == NULL) && (strptime ((char*) string, "$Date: %a, %d %b %Y %T %z", &tm) == NULL) && (strptime ((char*) string, "$Date: %a %b %d %T %Y %z", &tm) == NULL)) { g_warning ("%s: Failed to parse time: %s", __FUNCTION__, string); return -1; } epoch_time = mktime (&tm); if (epoch_time == -1) { g_warning ("%s: Failed to make time: %s", __FUNCTION__, string); return -2; } /* Get the timezone offset from the string. */ if ((sscanf ((char*) string, "%*u-%*u-%*u %*u:%*u:%*u %d%*[^]]", &offset) != 1) && (sscanf ((char*) string, "$Date: %*u-%*u-%*u %*u:%*u:%*u %d%*[^]]", &offset) != 1) && (sscanf ((char*) string, "%*s %*s %*s %*u:%*u:%*u %*u %d%*[^]]", &offset) != 1) && (sscanf ((char*) string, "$Date: %*s %*s %*s %*u %*u:%*u:%*u %d%*[^]]", &offset) != 1) && (sscanf ((char*) string, "$Date: %*s %*s %*s %*u:%*u:%*u %*u %d%*[^]]", &offset) != 1)) { g_warning ("%s: Failed to parse timezone offset: %s", __FUNCTION__, string); return -3; } /* Use the offset to convert to UTC. */ if (offset < 0) { epoch_time += ((-offset) / 100) * 60 * 60; epoch_time += ((-offset) % 100) * 60; } else if (offset > 0) { epoch_time -= (offset / 100) * 60 * 60; epoch_time -= (offset % 100) * 60; } if (seconds) *seconds = epoch_time; return 0; } /* Filter utilities. */ /** * @brief Get the symbol of a keyword relation. * * @param[in] relation Relation. * * @return Relation symbol. */ const char * keyword_relation_symbol (keyword_relation_t relation) { switch (relation) { case KEYWORD_RELATION_APPROX: return "~"; case KEYWORD_RELATION_COLUMN_ABOVE: return ">"; case KEYWORD_RELATION_COLUMN_APPROX: return "~"; case KEYWORD_RELATION_COLUMN_EQUAL: return "="; case KEYWORD_RELATION_COLUMN_BELOW: return "<"; case KEYWORD_RELATION_COLUMN_REGEXP: return ":"; default: return ""; } } /** * @brief Free a keyword. * * @param[in] keyword Filter keyword. */ static void keyword_free (keyword_t* keyword) { g_free (keyword->string); g_free (keyword->column); } /** * @brief Parse a filter keyword. * * @param[in] keyword Filter keyword. */ static void parse_keyword (keyword_t* keyword) { gchar *string; int digits; if (keyword->column == NULL && keyword->equal == 0) { keyword->relation = KEYWORD_RELATION_APPROX; keyword->type = KEYWORD_TYPE_STRING; return; } /* Special values to substitute */ if (keyword->column && (strcasecmp (keyword->column, "severity") == 0 || strcasecmp (keyword->column, "new_severity") == 0)) { if (strcasecmp (keyword->string, "Log") == 0) { keyword->double_value = SEVERITY_LOG; keyword->type = KEYWORD_TYPE_DOUBLE; return; } if (strcasecmp (keyword->string, "False Positive") == 0) { keyword->double_value = SEVERITY_FP; keyword->type = KEYWORD_TYPE_DOUBLE; return; } else if (strcasecmp (keyword->string, "Debug") == 0) { keyword->double_value = SEVERITY_DEBUG; keyword->type = KEYWORD_TYPE_DOUBLE; return; } else if (strcasecmp (keyword->string, "Error") == 0) { keyword->double_value = SEVERITY_ERROR; keyword->type = KEYWORD_TYPE_DOUBLE; return; } } /* The type. */ string = keyword->string; if (*string == '\0') { keyword->type = KEYWORD_TYPE_STRING; return; } if (*string && *string == '-' && strlen (string) > 1) string++; digits = 0; while (*string && isdigit (*string)) { digits = 1; string++; } if (digits == 0) keyword->type = KEYWORD_TYPE_STRING; else if (*string) { struct tm date; gchar next; int parsed_integer; double parsed_double; char dummy[2]; memset (&date, 0, sizeof (date)); next = *(string + 1); if (next == '\0' && *string == 's') { time_t now; now = time (NULL); keyword->integer_value = now + atoi (keyword->string); keyword->type = KEYWORD_TYPE_INTEGER; } else if (next == '\0' && *string == 'm') { time_t now; now = time (NULL); keyword->integer_value = now + (atoi (keyword->string) * 60); keyword->type = KEYWORD_TYPE_INTEGER; } else if (next == '\0' && *string == 'h') { time_t now; now = time (NULL); keyword->integer_value = now + (atoi (keyword->string) * 3600); keyword->type = KEYWORD_TYPE_INTEGER; } else if (next == '\0' && *string == 'd') { time_t now; now = time (NULL); keyword->integer_value = now + (atoi (keyword->string) * 86400); keyword->type = KEYWORD_TYPE_INTEGER; } else if (next == '\0' && *string == 'w') { time_t now; now = time (NULL); keyword->integer_value = now + atoi (keyword->string) * 604800; keyword->type = KEYWORD_TYPE_INTEGER; } else if (next == '\0' && *string == 'M') { time_t now; now = time (NULL); keyword->integer_value = add_months (now, atoi (keyword->string)); keyword->type = KEYWORD_TYPE_INTEGER; } else if (next == '\0' && *string == 'y') { time_t now; now = time (NULL); keyword->integer_value = add_months (now, atoi (keyword->string) * 12); keyword->type = KEYWORD_TYPE_INTEGER; } else if (strptime (keyword->string, "%Y-%m-%dT%H:%M", &date)) { keyword->integer_value = mktime (&date); keyword->type = KEYWORD_TYPE_INTEGER; } else if (strptime (keyword->string, "%Y-%m-%d", &date)) { keyword->integer_value = mktime (&date); keyword->type = KEYWORD_TYPE_INTEGER; } else if (sscanf (keyword->string, "%d%1s", &parsed_integer, dummy) == 1) { keyword->integer_value = parsed_integer; keyword->type = KEYWORD_TYPE_INTEGER; } else if (sscanf (keyword->string, "%lf%1s", &parsed_double, dummy) == 1 && parsed_double <= DBL_MAX) { keyword->double_value = parsed_double; keyword->type = KEYWORD_TYPE_DOUBLE; } else keyword->type = KEYWORD_TYPE_STRING; } else { keyword->integer_value = atoi (keyword->string); keyword->type = KEYWORD_TYPE_INTEGER; } } /** * @brief Check whether a keyword has any effect in the filter. * * Some keywords are redundant, like a second sort= keyword. * * @param[in] array Array of existing keywords. * @param[in] keyword Keyword under consideration. * * @return 0 no, 1 yes. */ static int keyword_applies (array_t *array, const keyword_t *keyword) { if (keyword->column && ((strcmp (keyword->column, "sort") == 0) || (strcmp (keyword->column, "sort-reverse") == 0)) && (keyword->relation == KEYWORD_RELATION_COLUMN_EQUAL)) { int index; index = array->len; while (index--) { keyword_t *item; item = (keyword_t*) g_ptr_array_index (array, index); if (item->column && ((strcmp (item->column, "sort") == 0) || (strcmp (item->column, "sort-reverse") == 0))) return 0; } return 1; } if (keyword->column && (strcmp (keyword->column, "first") == 0)) { int index; index = array->len; while (index--) { keyword_t *item; item = (keyword_t*) g_ptr_array_index (array, index); if (item->column && (strcmp (item->column, "first") == 0)) return 0; } } if (keyword->column && (strcmp (keyword->column, "rows") == 0)) { int index; index = array->len; while (index--) { keyword_t *item; item = (keyword_t*) g_ptr_array_index (array, index); if (item->column && (strcmp (item->column, "rows") == 0)) return 0; } } if (keyword->column && (strcmp (keyword->column, "apply_overrides") == 0)) { int index; index = array->len; while (index--) { keyword_t *item; item = (keyword_t*) g_ptr_array_index (array, index); if (item->column && (strcmp (item->column, "apply_overrides") == 0)) return 0; } } return 1; } /** * @brief Free a split filter. * * @param[in] split Split filter. */ void filter_free (array_t *split) { keyword_t **point; for (point = (keyword_t**) split->pdata; *point; point++) keyword_free (*point); array_free (split); } /** * @brief Split the filter term into parts. * * @param[in] given_filter Filter term. * * @return Array of strings, the parts. */ array_t * split_filter (const gchar* given_filter) { int in_quote, between; array_t *parts; const gchar *current_part, *filter; keyword_t *keyword; filter = given_filter; parts = make_array (); in_quote = 0; between = 1; keyword = NULL; current_part = filter; /* To silence compiler warning. */ while (*filter) { switch (*filter) { case '=': if (between) { /* Empty index. Start a part. */ keyword = g_malloc0 (sizeof (keyword_t)); keyword->equal = 1; current_part = filter + 1; between = 0; break; } case ':': case '~': case '>': case '<': if (between) { /* Empty index. Just start a part for now. */ keyword = g_malloc0 (sizeof (keyword_t)); current_part = filter; between = 0; break; } if (in_quote) break; /* End of an index. */ if (keyword == NULL) { assert (0); break; } if (keyword->column) /* Already had an index char. */ break; if (filter <= (current_part - 1)) { assert (0); break; } keyword->column = g_strndup (current_part, filter - current_part); current_part = filter + 1; switch (*filter) { case '=': keyword->relation = KEYWORD_RELATION_COLUMN_EQUAL; break; case '~': keyword->relation = KEYWORD_RELATION_COLUMN_APPROX; break; case '>': keyword->relation = KEYWORD_RELATION_COLUMN_ABOVE; break; case '<': keyword->relation = KEYWORD_RELATION_COLUMN_BELOW; break; case ':': keyword->relation = KEYWORD_RELATION_COLUMN_REGEXP; break; } break; case ' ': case '\t': case '\n': case '\r': if (in_quote || between) break; /* End of a part. */ if (keyword == NULL) { assert (0); break; } keyword->string = g_strndup (current_part, filter - current_part); parse_keyword (keyword); if (keyword_applies (parts, keyword)) array_add (parts, keyword); keyword = NULL; between = 1; break; case '"': if (in_quote) { /* End of a quoted part. */ if (keyword == NULL) { assert (0); break; } keyword->quoted = 1; keyword->string = g_strndup (current_part, filter - current_part); parse_keyword (keyword); if (keyword_applies (parts, keyword)) array_add (parts, keyword); keyword = NULL; in_quote = 0; between = 1; } else if (between) { /* Start of a quoted part. */ keyword = g_malloc0 (sizeof (keyword_t)); in_quote = 1; current_part = filter + 1; between = 0; } else if (keyword->column && filter == current_part) { /* A quoted index. */ in_quote = 1; current_part++; } else if (keyword->equal && filter == current_part) { /* A quoted exact term, like ="abc". */ in_quote = 1; current_part++; } /* Else just a quote in a keyword, like ab"cd. */ break; default: if (between) { /* Start of a part. */ keyword = g_malloc0 (sizeof (keyword_t)); current_part = filter; between = 0; } break; } filter++; } if (between == 0) { if (keyword == NULL) assert (0); else { keyword->quoted = in_quote; keyword->string = g_strdup (current_part); parse_keyword (keyword); if (keyword_applies (parts, keyword)) array_add (parts, keyword); keyword = NULL; } } assert (keyword == NULL); { int index, first, max, sort; keyword_t *keyword; index = parts->len; first = max = sort = 0; while (index--) { keyword_t *item; item = (keyword_t*) g_ptr_array_index (parts, index); if (item->column && (strcmp (item->column, "first") == 0)) first = 1; else if (item->column && (strcmp (item->column, "rows") == 0)) max = 1; else if (item->column && ((strcmp (item->column, "sort") == 0) || (strcmp (item->column, "sort-reverse") == 0))) sort = 1; } if (first == 0) { keyword = g_malloc0 (sizeof (keyword_t)); keyword->column = g_strdup ("first"); keyword->string = g_strdup ("1"); keyword->type = KEYWORD_TYPE_STRING; keyword->relation = KEYWORD_RELATION_COLUMN_EQUAL; array_add (parts, keyword); } if (max == 0) { keyword = g_malloc0 (sizeof (keyword_t)); keyword->column = g_strdup ("rows"); /* If there was a filter, make max_return default to Rows Per * Page. This keeps the pre-filters OMP behaviour when the filter * is empty, but is more convenenient for clients that set the * filter. */ if (strlen (given_filter)) keyword->string = g_strdup ("-2"); else keyword->string = g_strdup ("-1"); keyword->type = KEYWORD_TYPE_STRING; keyword->relation = KEYWORD_RELATION_COLUMN_EQUAL; array_add (parts, keyword); } if (sort == 0) { keyword = g_malloc0 (sizeof (keyword_t)); keyword->column = g_strdup ("sort"); keyword->string = g_strdup ("name"); keyword->type = KEYWORD_TYPE_STRING; keyword->relation = KEYWORD_RELATION_COLUMN_EQUAL; array_add (parts, keyword); } } array_add (parts, NULL); return parts; } /** * @brief Get info from a filter. * * @param[in] filter Filter. * @param[out] first Number of first item. * @param[out] max Max number of rows. * @param[out] sort_field Sort field. * @param[out] sort_order Sort order. */ void manage_filter_controls (const gchar *filter, int *first, int *max, gchar **sort_field, int *sort_order) { keyword_t **point; array_t *split; if (filter == NULL) { if (first) *first = 1; if (max) *max = -1; if (sort_field) *sort_field = g_strdup ("name"); if (sort_order) *sort_order = 1; return; } split = split_filter (filter); point = (keyword_t**) split->pdata; if (first) { *first = 1; while (*point) { keyword_t *keyword; keyword = *point; if (keyword->column && (strcmp (keyword->column, "first") == 0)) { *first = atoi (keyword->string); if (*first < 0) *first = 0; break; } point++; } } point = (keyword_t**) split->pdata; if (max) { *max = -1; while (*point) { keyword_t *keyword; keyword = *point; if (keyword->column && (strcmp (keyword->column, "rows") == 0)) { *max = atoi (keyword->string); if (*max == -2) setting_value_int ("5f5a8712-8017-11e1-8556-406186ea4fc5", max); else if (*max < 1) *max = -1; break; } point++; } } point = (keyword_t**) split->pdata; if (sort_field || sort_order) { if (sort_field) *sort_field = NULL; if (sort_order) *sort_order = 1; while (*point) { keyword_t *keyword; keyword = *point; if (keyword->column && (strcmp (keyword->column, "sort") == 0)) { if (sort_field) *sort_field = g_strdup (keyword->string); if (sort_order) *sort_order = 1; break; } if (keyword->column && (strcmp (keyword->column, "sort-reverse") == 0)) { if (sort_field) *sort_field = g_strdup (keyword->string); if (sort_order) *sort_order = 0; break; } point++; } if (sort_field && (*sort_field == NULL)) *sort_field = g_strdup ("name"); } filter_free (split); return; } /** * @brief Get an int column from a filter split. * * @param[in] point Filter split. * @param[in] column Name of column. * @param[out] val Value of column. * * @return 0 success, 1 fail. */ int filter_control_int (keyword_t **point, const char *column, int *val) { if (val) while (*point) { keyword_t *keyword; keyword = *point; if (keyword->column && (strcmp (keyword->column, column) == 0)) { *val = atoi (keyword->string); return 0; } point++; } return 1; } /** * @brief Get a string column from a filter split. * * @param[in] point Filter split. * @param[in] column Name of column. * @param[out] string Value of column, freshly allocated. * * @return 0 success, 1 fail. */ int filter_control_str (keyword_t **point, const char *column, gchar **string) { if (string) while (*point) { keyword_t *keyword; keyword = *point; if (keyword->column && (strcmp (keyword->column, column) == 0)) { *string = g_strdup (keyword->string); return 0; } point++; } return 1; } /** * @brief Get info from a filter for report. * * @param[in] filter Filter. * @param[out] first Number of first item. * @param[out] max Max number of rows. * @param[out] sort_field Sort field. * @param[out] sort_order Sort order. * @param[out] result_hosts_only Whether to show only hosts with results. * @param[out] min_cvss_base Minimum CVSS base of included results. All * results if NULL. * @param[out] min_qod Minimum QoD base of included results. All * results if NULL. * @param[out] levels String describing threat levels (message types) * to include in count (for example, "hmlgd" for * High, Medium, Low, loG and Debug). All levels if * NULL. * @param[out] delta_states String describing delta states to include in count * (for example, "sngc" Same, New, Gone and Changed). * All levels if NULL. * @param[out] search_phrase Phrase that results must include. All results * if NULL or "". * @param[out] search_phrase_exact Whether search phrase is exact. * @param[out] autofp Whether to apply auto FP filter. * @param[out] notes Whether to include notes. * @param[out] overrides Whether to include overrides. * @param[out] apply_overrides Whether to apply overrides. * @param[out] zone Timezone. */ void manage_report_filter_controls (const gchar *filter, int *first, int *max, gchar **sort_field, int *sort_order, int *result_hosts_only, gchar **min_cvss_base, gchar **min_qod, gchar **levels, gchar **delta_states, gchar **search_phrase, int *search_phrase_exact, int *autofp, int *notes, int *overrides, int *apply_overrides, gchar **zone) { keyword_t **point; array_t *split; int val; gchar *string; if (filter == NULL) return; split = split_filter (filter); point = (keyword_t**) split->pdata; if (first) { *first = 1; while (*point) { keyword_t *keyword; keyword = *point; if (keyword->column && (strcmp (keyword->column, "first") == 0)) { *first = atoi (keyword->string); if (*first < 0) *first = 0; break; } point++; } /* Switch from 1 to 0 indexing. */ (*first)--; } point = (keyword_t**) split->pdata; if (max) { *max = 100; while (*point) { keyword_t *keyword; keyword = *point; if (keyword->column && (strcmp (keyword->column, "rows") == 0)) { *max = atoi (keyword->string); if (*max == -2) setting_value_int ("5f5a8712-8017-11e1-8556-406186ea4fc5", max); else if (*max < 1) *max = -1; break; } point++; } } point = (keyword_t**) split->pdata; if (sort_field || sort_order) { if (sort_field) *sort_field = NULL; if (sort_order) *sort_order = 1; while (*point) { keyword_t *keyword; keyword = *point; if (keyword->column && (strcmp (keyword->column, "sort") == 0)) { if (sort_field) *sort_field = g_strdup (keyword->string); if (sort_order) *sort_order = 1; break; } if (keyword->column && (strcmp (keyword->column, "sort-reverse") == 0)) { if (sort_field) *sort_field = g_strdup (keyword->string); if (sort_order) *sort_order = 0; break; } point++; } if (sort_field && (*sort_field == NULL)) // FIX name?? *sort_field = g_strdup ("name"); } if (search_phrase) { GString *phrase; phrase = g_string_new (""); point = (keyword_t**) split->pdata; if (search_phrase_exact) *search_phrase_exact = 0; while (*point) { keyword_t *keyword; keyword = *point; if (keyword->column == NULL) { if (search_phrase_exact && keyword->equal) /* If one term is "exact" then the search is "exact", because * for reports the filter terms are combined into a single * search term. */ *search_phrase_exact = 1; g_string_append_printf (phrase, "%s ", keyword->string); } point++; } *search_phrase = g_strchomp (phrase->str); g_string_free (phrase, FALSE); } if (result_hosts_only) { if (filter_control_int ((keyword_t **) split->pdata, "result_hosts_only", &val)) *result_hosts_only = 1; else *result_hosts_only = val; } if (autofp) { if (filter_control_int ((keyword_t **) split->pdata, "autofp", &val)) *autofp = 0; else *autofp = val; } if (notes) { if (filter_control_int ((keyword_t **) split->pdata, "notes", &val)) *notes = 1; else *notes = val; } if (overrides) { if (filter_control_int ((keyword_t **) split->pdata, "overrides", &val)) *overrides = 1; else *overrides = val; } if (apply_overrides) { if (filter_control_int ((keyword_t **) split->pdata, "apply_overrides", &val)) { if (filter_control_int ((keyword_t **) split->pdata, "overrides", &val)) *apply_overrides = 1; else *apply_overrides = val; } else *apply_overrides = val; } if (delta_states) { if (filter_control_str ((keyword_t **) split->pdata, "delta_states", &string)) *delta_states = NULL; else *delta_states = string; } if (levels) { if (filter_control_str ((keyword_t **) split->pdata, "levels", &string)) *levels = NULL; else *levels = string; } if (min_cvss_base) { if (filter_control_str ((keyword_t **) split->pdata, "min_cvss_base", &string)) *min_cvss_base = NULL; else *min_cvss_base = string; } if (min_qod) { if (filter_control_str ((keyword_t **) split->pdata, "min_qod", &string)) *min_qod = NULL; else *min_qod = string; } if (zone) { if (filter_control_str ((keyword_t **) split->pdata, "timezone", &string)) *zone = NULL; else *zone = string; } filter_free (split); return; } /** * @brief Append relation to filter. * * @param[in] clean Filter. * @param[in] keyword Keyword * @param[in] relation Relation char. */ static void append_relation (GString *clean, keyword_t *keyword, const char relation) { if ((strcmp (keyword->column, "rows") == 0) && (strcmp (keyword->string, "-2") == 0)) { int max; setting_value_int ("5f5a8712-8017-11e1-8556-406186ea4fc5", &max); g_string_append_printf (clean, " %s%c%i", keyword->column, relation, max); } else if (keyword->quoted) g_string_append_printf (clean, " %s%c\"%s\"", keyword->column, relation, keyword->string); else g_string_append_printf (clean, " %s%c%s", keyword->column, relation, keyword->string); } /** * @brief Clean a filter, removing a keyword in the process. * * @param[in] filter Filter. * @param[in] column Keyword to remove, or NULL. * * @return Cleaned filter. */ gchar * manage_clean_filter_remove (const gchar *filter, const gchar *column) { GString *clean; keyword_t **point; array_t *split; if (filter == NULL) return g_strdup (""); clean = g_string_new (""); split = split_filter (filter); point = (keyword_t**) split->pdata; while (*point) { keyword_t *keyword; keyword = *point; if (keyword->column && column && strlen (column) && ((strcasecmp (keyword->column, column) == 0) || (keyword->column[0] == '_' && strcasecmp (keyword->column + 1, column) == 0))) { /* Remove this keyword. */; } else if (keyword->column) switch (keyword->relation) { case KEYWORD_RELATION_COLUMN_EQUAL: append_relation (clean, keyword, '='); break; case KEYWORD_RELATION_COLUMN_APPROX: append_relation (clean, keyword, '~'); break; case KEYWORD_RELATION_COLUMN_ABOVE: append_relation (clean, keyword, '>'); break; case KEYWORD_RELATION_COLUMN_BELOW: append_relation (clean, keyword, '<'); break; case KEYWORD_RELATION_COLUMN_REGEXP: append_relation (clean, keyword, ':'); break; case KEYWORD_RELATION_APPROX: if (keyword->quoted) g_string_append_printf (clean, " \"%s\"", keyword->string); else g_string_append_printf (clean, " %s", keyword->string); break; } else if (keyword->quoted) g_string_append_printf (clean, " %s\"%s\"", keyword->equal ? "=" : "", keyword->string); else g_string_append_printf (clean, " %s%s", keyword->equal ? "=" : "", keyword->string); point++; } filter_free (split); return g_strstrip (g_string_free (clean, FALSE)); } /** * @brief Clean a filter. * * @param[in] filter Filter. * * @return Cleaned filter. */ gchar * manage_clean_filter (const gchar *filter) { return manage_clean_filter_remove (filter, NULL); } /** * @brief Return SQL join words for filter_clause. * * @param[in] first Whether keyword is first. * @param[in] last_was_and Whether last keyword was "and". * @param[in] last_was_not Whether last keyword was "not". * * @return SQL join words. */ static const char * get_join (int first, int last_was_and, int last_was_not) { const char *pre; if (first) { if (last_was_not) pre = "NOT "; else pre = ""; } else { if (last_was_and) { if (last_was_not) pre = " AND NOT "; else pre = " AND "; } else { if (last_was_not) pre = " OR NOT "; else pre = " OR "; } } return pre; } /** * @brief Iterator column. */ typedef struct { gchar *select; ///< Column for SELECT. gchar *filter; ///< Filter column name. NULL to use select_column. keyword_type_t type; ///< Type of column. } column_t; /** * @brief Get the column expression for a filter column. * * @param[in] select_columns SELECT columns. * @param[in] filter_column Filter column. * @param[in] type Type of filter column. The type is not given, * instead this is whether the filter term can be * unambiguously parsed as integer (e.g. 14) or a * double (e.g. 8.0). Skip type shortcuts if value * is KEYWORD_TYPE_UNKNOWN. * * @return Column for the SELECT statement. */ static gchar * columns_select_column_single (column_t *select_columns, const char *filter_column, keyword_type_t type) { column_t *columns; if (select_columns == NULL) return NULL; columns = select_columns; while ((*columns).select) { if ((*columns).filter && strcmp ((*columns).filter, filter_column) == 0) { /* Only include numeric columns when the filter term is numeric. */ if (type == KEYWORD_TYPE_UNKNOWN || type == KEYWORD_TYPE_INTEGER || type == KEYWORD_TYPE_DOUBLE) return (*columns).select; if ((*columns).type != KEYWORD_TYPE_INTEGER && (*columns).type != KEYWORD_TYPE_DOUBLE) return (*columns).select; } if ((*columns).filter && *((*columns).filter) && *((*columns).filter) == '_' && strcmp (((*columns).filter) + 1, filter_column) == 0) { /* Only include numeric columns when the filter term is numeric. */ if (type == KEYWORD_TYPE_UNKNOWN || type == KEYWORD_TYPE_INTEGER || type == KEYWORD_TYPE_DOUBLE) return (*columns).select; if ((*columns).type != KEYWORD_TYPE_INTEGER && (*columns).type != KEYWORD_TYPE_DOUBLE) return (*columns).select; } columns++; } columns = select_columns; while ((*columns).select) { if (strcmp ((*columns).select, filter_column) == 0) return (*columns).select; columns++; } return NULL; } /** * @brief Get the selection term for a filter column. * * @param[in] select_columns SELECT columns. * @param[in] where_columns WHERE "columns". * @param[in] filter_column Filter column. * * @return Column for the SELECT statement. */ static gchar * columns_select_column (column_t *select_columns, column_t *where_columns, const char *filter_column) { gchar *column; column = columns_select_column_single (select_columns, filter_column, KEYWORD_TYPE_UNKNOWN); if (column) return column; return columns_select_column_single (where_columns, filter_column, KEYWORD_TYPE_UNKNOWN); } /** * @brief Get the selection term for a filter column. * * @param[in] select_columns SELECT columns. * @param[in] where_columns WHERE "columns". * @param[in] filter_column Filter column. * @param[in] type Type of the filter column. * * @return Column for the SELECT statement. */ static gchar * columns_select_column_with_type (column_t *select_columns, column_t *where_columns, const char *filter_column, keyword_type_t type) { gchar *column; column = columns_select_column_single (select_columns, filter_column, type); if (column) return column; return columns_select_column_single (where_columns, filter_column, type); } /** * @brief Get the SELECT column for a filter column. * * @param[in] select_columns SELECT columns. * * @return Column for the SELECT statement. */ static gchar * columns_build_select (column_t *select_columns) { if (select_columns == NULL) return g_strdup ("''"); if ((*select_columns).select) { column_t *columns; GString *select; columns = select_columns; select = g_string_new (""); g_string_append (select, (*columns).select); if ((*columns).filter) g_string_append_printf (select, " AS %s", (*columns).filter); columns++; while ((*columns).select) { g_string_append_printf (select, ", %s", (*columns).select); if ((*columns).filter) g_string_append_printf (select, " AS %s", (*columns).filter); columns++; } return g_string_free (select, FALSE); } return g_strdup ("''"); } /** * @brief Return keyword type of a string. * * @param[in] string String. * * @return Type. */ static keyword_type_t keyword_type_from_string (const char* string) { gchar *stripped, *stripped_end; double value; int end; stripped = g_strstrip (g_strdup (string)); strtol (stripped, &stripped_end, 10); if (*stripped_end == '\0') { g_free (stripped); return KEYWORD_TYPE_INTEGER; } end = 0; if ((sscanf (stripped, "%lf%n", &value, &end) == 1) && (end == strlen (stripped))) { g_free (stripped); return KEYWORD_TYPE_DOUBLE; } g_free (stripped); return KEYWORD_TYPE_STRING; } /** * @brief Check whether a keyword applies to a column. * * @param[in] keyword Keyword. * @param[in] column Column. * * @return 1 if applies, else 0. */ static int keyword_applies_to_column (keyword_t *keyword, const char* column) { if ((strcmp (column, "threat") == 0) && (strstr ("None", keyword->string) == NULL) && (strstr ("False Positive", keyword->string) == NULL) && (strstr ("Debug", keyword->string) == NULL) && (strstr ("Error", keyword->string) == NULL) && (strstr ("Alarm", keyword->string) == NULL) && (strstr ("High", keyword->string) == NULL) && (strstr ("Medium", keyword->string) == NULL) && (strstr ("Low", keyword->string) == NULL) && (strstr ("Log", keyword->string) == NULL)) return 0; if ((strcmp (column, "trend") == 0) && (strstr ("more", keyword->string) == NULL) && (strstr ("less", keyword->string) == NULL) && (strstr ("up", keyword->string) == NULL) && (strstr ("down", keyword->string) == NULL) && (strstr ("same", keyword->string) == NULL)) return 0; if ((strcmp (column, "status") == 0) && (strstr ("Delete Requested", keyword->string) == NULL) && (strstr ("Ultimate Delete Requested", keyword->string) == NULL) && (strstr ("Done", keyword->string) == NULL) && (strstr ("New", keyword->string) == NULL) && (strstr ("Running", keyword->string) == NULL) && (strstr ("Stop Requested", keyword->string) == NULL) && (strstr ("Stopped", keyword->string) == NULL) && (strstr ("Internal Error", keyword->string) == NULL)) return 0; return 1; } /** * @brief Return SQL WHERE clause for restricting a SELECT to a filter term. * * @param[in] type Resource type. * @param[in] filter Filter term. * @param[out] trash Whether the trash table is being queried. * @param[in] columns Columns in the SQL statement. * @param[in] where_columns Columns in SQL that only appear in WHERE clause. * @param[out] order_return If given then order clause. * @param[out] first_return If given then first row. * @param[out] max_return If given then max rows. * @param[out] permissions When given then permissions string vector. * @param[out] owner_filter When given then value of owner keyword. * * @return WHERE clause for filter if one is required, else NULL. */ static gchar * filter_clause (const char* type, const char* filter, const char **filter_columns, column_t *select_columns, column_t *where_columns, int trash, gchar **order_return, int *first_return, int *max_return, array_t **permissions, gchar **owner_filter) { GString *clause, *order; keyword_t **point; int first_keyword, first_order, last_was_and, last_was_not, last_was_re, skip; array_t *split; if (filter == NULL) filter = ""; while (*filter && isspace (*filter)) filter++; if (permissions) *permissions = make_array (); if (owner_filter) *owner_filter = NULL; /* Add SQL to the clause for each keyword or phrase. */ if (max_return) *max_return = -1; clause = g_string_new (""); order = g_string_new (""); split = split_filter (filter); point = (keyword_t**) split->pdata; first_keyword = 1; last_was_and = 0; last_was_not = 0; last_was_re = 0; first_order = 1; while (*point) { gchar *quoted_keyword; int index; keyword_t *keyword; skip = 0; keyword = *point; if ((keyword->column == NULL) && (strlen (keyword->string) == 0)) { point++; continue; } if ((keyword->column == NULL) && (strcasecmp (keyword->string, "or") == 0)) { point++; continue; } if ((keyword->column == NULL) && (strcasecmp (keyword->string, "and") == 0)) { last_was_and = 1; point++; continue; } if ((keyword->column == NULL) && (strcasecmp (keyword->string, "not") == 0)) { last_was_not = 1; point++; continue; } if ((keyword->column == NULL) && (strcasecmp (keyword->string, "re") == 0)) { last_was_re = 1; point++; continue; } if ((keyword->column == NULL) && (strcasecmp (keyword->string, "regexp") == 0)) { last_was_re = 1; point++; continue; } /* Check for ordering parts, like sort=name or sort-reverse=string. */ if (keyword->column && (strcasecmp (keyword->column, "sort") == 0)) { if (strcmp (keyword->string, "ROWID") && (vector_find_filter (filter_columns, keyword->string) == 0)) { point++; continue; } if (first_order) { if ((strcmp (type, "slave") == 0) && (strcmp (keyword->string, "port") == 0)) g_string_append_printf (order, " ORDER BY CAST (port AS INTEGER)" " ASC"); else if ((strcmp (type, "task") == 0) && (strcmp (keyword->string, "threat") == 0)) { gchar *column; column = columns_select_column (select_columns, where_columns, keyword->string); assert (column); g_string_append_printf (order, " ORDER BY order_threat (%s) ASC", column); } else if (strcmp (keyword->string, "severity") == 0 || strcmp (keyword->string, "original_severity") == 0 || strcmp (keyword->string, "cvss") == 0 || strcmp (keyword->string, "cvss_base") == 0 || strcmp (keyword->string, "max_cvss") == 0) { gchar *column; column = columns_select_column (select_columns, where_columns, keyword->string); g_string_append_printf (order, " ORDER BY CASE CAST (%s AS text)" " WHEN '' THEN NULL" " ELSE CAST (%s AS REAL) END ASC", column, column); } else if (strcmp (keyword->string, "roles") == 0) { gchar *column; column = columns_select_column (select_columns, where_columns, keyword->string); assert (column); g_string_append_printf (order, " ORDER BY" " CASE WHEN %s %s 'Admin.*'" " THEN '0' || %s" " ELSE '1' || %s END ASC", column, sql_regexp_op (), column, column); } else if ((strcmp (keyword->string, "created") == 0) || (strcmp (keyword->string, "modified") == 0) || (strcmp (keyword->string, "published") == 0) || (strcmp (keyword->string, "qod") == 0) || (strcmp (keyword->string, "cves") == 0) || (strcmp (keyword->string, "high") == 0) || (strcmp (keyword->string, "medium") == 0) || (strcmp (keyword->string, "low") == 0) || (strcmp (keyword->string, "log") == 0) || (strcmp (keyword->string, "false_positive") == 0)) { gchar *column; column = columns_select_column (select_columns, where_columns, keyword->string); assert (column); g_string_append_printf (order, " ORDER BY %s ASC", column); } else if ((strcmp (keyword->string, "ips") == 0) || (strcmp (keyword->string, "total") == 0) || (strcmp (keyword->string, "tcp") == 0) || (strcmp (keyword->string, "udp") == 0)) { gchar *column; column = columns_select_column (select_columns, where_columns, keyword->string); assert (column); g_string_append_printf (order, " ORDER BY CAST (%s AS INTEGER) ASC", column); } else if ((strcmp (type, "note") && strcmp (type, "override")) || (strcmp (keyword->string, "nvt") && strcmp (keyword->string, "name"))) { gchar *column; column = columns_select_column (select_columns, where_columns, keyword->string); assert (column); g_string_append_printf (order, " ORDER BY lower (%s) ASC", column); } else /* Special case for notes text sorting. */ g_string_append_printf (order, " ORDER BY nvt ASC," " lower (%ss%s.text) ASC", type, trash ? "_trash" : ""); first_order = 0; } else /* To help the client split_filter restricts the filter to one * sorting term, preventing this from happening. */ g_string_append_printf (order, ", %s ASC", keyword->string); point++; continue; } else if (keyword->column && (strcasecmp (keyword->column, "sort-reverse") == 0)) { if (strcmp (keyword->string, "ROWID") && (vector_find_filter (filter_columns, keyword->string) == 0)) { point++; continue; } if (first_order) { if ((strcmp (type, "slave") == 0) && (strcmp (keyword->string, "port") == 0)) g_string_append_printf (order, " ORDER BY CAST (port AS INTEGER)" " DESC"); else if ((strcmp (type, "task") == 0) && (strcmp (keyword->string, "threat") == 0)) { gchar *column; column = columns_select_column (select_columns, where_columns, keyword->string); assert (column); g_string_append_printf (order, " ORDER BY order_threat (%s) DESC", column); } else if (strcmp (keyword->string, "severity") == 0 || strcmp (keyword->string, "original_severity") == 0 || strcmp (keyword->string, "cvss") == 0 || strcmp (keyword->string, "cvss_base") == 0 || strcmp (keyword->string, "max_cvss") == 0) { gchar *column; column = columns_select_column (select_columns, where_columns, keyword->string); g_string_append_printf (order, " ORDER BY CASE CAST (%s AS text)" " WHEN '' THEN NULL" " ELSE CAST (%s AS REAL) END DESC", column, column); } else if (strcmp (keyword->string, "roles") == 0) { gchar *column; column = columns_select_column (select_columns, where_columns, keyword->string); assert (column); g_string_append_printf (order, " ORDER BY" " CASE WHEN %s %s 'Admin.*'" " THEN '0' || %s" " ELSE '1' || %s END DESC", column, sql_regexp_op (), column, column); } else if ((strcmp (keyword->string, "created") == 0) || (strcmp (keyword->string, "modified") == 0) || (strcmp (keyword->string, "published") == 0) || (strcmp (keyword->string, "qod") == 0) || (strcmp (keyword->string, "cves") == 0) || (strcmp (keyword->string, "high") == 0) || (strcmp (keyword->string, "medium") == 0) || (strcmp (keyword->string, "low") == 0) || (strcmp (keyword->string, "log") == 0) || (strcmp (keyword->string, "false_positive") == 0)) { gchar *column; column = columns_select_column (select_columns, where_columns, keyword->string); assert (column); g_string_append_printf (order, " ORDER BY %s DESC", column); } else if ((strcmp (keyword->string, "ips") == 0) || (strcmp (keyword->string, "total") == 0) || (strcmp (keyword->string, "tcp") == 0) || (strcmp (keyword->string, "udp") == 0)) { gchar *column; column = columns_select_column (select_columns, where_columns, keyword->string); assert (column); g_string_append_printf (order, " ORDER BY CAST (%s AS INTEGER) DESC", column); } else if ((strcmp (type, "note") && strcmp (type, "override")) || (strcmp (keyword->string, "nvt") && strcmp (keyword->string, "name"))) { gchar *column; tracef (" %s: select_columns: %p", __FUNCTION__, select_columns); tracef (" %s: where_columns: %p", __FUNCTION__, where_columns); tracef (" %s: keyword->string: %p", __FUNCTION__, keyword->string); column = columns_select_column (select_columns, where_columns, keyword->string); assert (column); g_string_append_printf (order, " ORDER BY lower (%s) DESC", column); } else /* Special case for notes text sorting. */ g_string_append_printf (order, " ORDER BY nvt DESC," " lower (%ss%s.text) DESC", type, trash ? "_trash" : ""); first_order = 0; } else /* To help the client split_filter restricts the filter to one * sorting term, preventing this from happening. */ g_string_append_printf (order, ", %s DESC", keyword->string); point++; continue; } else if (keyword->column && (strcasecmp (keyword->column, "first") == 0)) { if (first_return) { /* Subtract 1 to switch from 1 to 0 indexing. */ *first_return = atoi (keyword->string) - 1; if (*first_return < 0) *first_return = 0; } point++; continue; } else if (keyword->column && (strcasecmp (keyword->column, "rows") == 0)) { if (max_return) *max_return = atoi (keyword->string); point++; continue; } else if (keyword->column && (strcasecmp (keyword->column, "permission") == 0)) { if (permissions) array_add (*permissions, g_strdup (keyword->string)); point++; continue; } /* Add tag criteria to clause: tag name with optional value */ else if (keyword->column && (strcasecmp (keyword->column, "tag") == 0)) { gchar **tag_split, *tag_name, *tag_value; int value_given, value_numeric; quoted_keyword = sql_quote (keyword->string); tag_split = g_strsplit (quoted_keyword, "=", 2); tag_name = g_strdup (tag_split[0] ? tag_split[0] : ""); if (tag_split[0] && tag_split[1]) { tag_value = g_strdup (tag_split[1]); value_given = 1; } else { tag_value = g_strdup (""); value_given = 0; } value_numeric = 0; if (value_given) { double test_d; value_numeric = (sscanf (tag_value, "%lf", &test_d) > 0); } if (keyword->relation == KEYWORD_RELATION_COLUMN_EQUAL || keyword->relation == KEYWORD_RELATION_COLUMN_ABOVE || keyword->relation == KEYWORD_RELATION_COLUMN_BELOW) { if (strcasecmp (type, "allinfo") == 0) g_string_append_printf (clause, "%s" "(EXISTS" " (SELECT * FROM tags" " WHERE tags.name = '%s'" " AND tags.active != 0" " AND tags.resource_uuid" " = allinfo.uuid" " AND tags.resource_type" " = allinfo.type" " %s%s%s))", get_join (first_keyword, last_was_and, last_was_not), tag_name, (value_given ? (value_numeric ? "AND CAST" " (tags.value AS REAL) = " : "AND CAST" " (tags.value AS TEXT) = '") : ""), value_given ? tag_value : "", (value_given && value_numeric == 0 ? "'" : "")); else g_string_append_printf (clause, "%s" "(EXISTS" " (SELECT * FROM tags" " WHERE tags.name = '%s'" " AND tags.active != 0" " AND tags.resource_uuid = %ss.uuid" " AND tags.resource_type = '%s'" " %s%s%s))", get_join (first_keyword, last_was_and, last_was_not), tag_name, type, type, (value_given ? (value_numeric ? "AND CAST" " (tags.value AS REAL) = " : "AND CAST" " (tags.value AS TEXT) = '") : ""), value_given ? tag_value : "", (value_given && value_numeric == 0 ? "'" : "")); } else if (keyword->relation == KEYWORD_RELATION_COLUMN_APPROX) { if (strcasecmp (type, "allinfo") == 0) g_string_append_printf (clause, "%s" "(EXISTS" " (SELECT * FROM tags" " WHERE tags.name LIKE '%%%%%s%%%%'" " AND tags.active != 0" " AND tags.resource_uuid" " = allinfo.uuid" " AND tags.resource_type" " = allinfo.type" " AND tags.value LIKE '%%%%%s%%%%'))", get_join (first_keyword, last_was_and, last_was_not), tag_name, tag_value); else g_string_append_printf (clause, "%s" "(EXISTS" " (SELECT * FROM tags" " WHERE tags.name LIKE '%%%%%s%%%%'" " AND tags.active != 0" " AND tags.resource_uuid = %ss.uuid" " AND tags.resource_type = '%s'" " AND tags.value LIKE '%%%%%s%%%%'))", get_join (first_keyword, last_was_and, last_was_not), tag_name, type, type, tag_value); } else if (keyword->relation == KEYWORD_RELATION_COLUMN_REGEXP) { if (strcasecmp (type, "allinfo") == 0) g_string_append_printf (clause, "%s" "(EXISTS" " (SELECT * FROM tags" " WHERE tags.name %s '%s'" " AND tags.active != 0" " AND tags.resource_uuid" " = allinfo.uuid" " AND tags.resource_type" " = allinfo.type" " AND tags.value" " %s '%s'))", get_join (first_keyword, last_was_and, last_was_not), sql_regexp_op (), tag_name, sql_regexp_op (), tag_value); else g_string_append_printf (clause, "%s" "(EXISTS" " (SELECT * FROM tags" " WHERE tags.name %s '%s'" " AND tags.active != 0" " AND tags.resource_uuid = %ss.uuid" " AND tags.resource_type = '%s'" " AND tags.value" " %s '%s'))", get_join (first_keyword, last_was_and, last_was_not), sql_regexp_op (), tag_name, type, type, sql_regexp_op (), tag_value); } g_strfreev(tag_split); g_free(tag_name); g_free(tag_value); first_keyword = 0; last_was_and = 0; last_was_not = 0; } /* Add SQL to the clause for each column name. */ quoted_keyword = NULL; if (keyword->relation == KEYWORD_RELATION_COLUMN_EQUAL) { if (vector_find_filter (filter_columns, keyword->column) == 0) { last_was_and = 0; last_was_not = 0; point++; continue; } if (keyword->column && (strlen (keyword->column) > 3) && (strcmp (keyword->column + strlen (keyword->column) - 3, "_id") == 0) && strcasecmp (keyword->column, "nvt_id")) { gchar *type_term; type_term = g_strndup (keyword->column, strlen (keyword->column) - 3); if (valid_type (type_term) == 0) { g_free (type_term); last_was_and = 0; last_was_not = 0; point++; continue; } quoted_keyword = sql_quote (keyword->string); if (strcmp (quoted_keyword, "")) g_string_append_printf (clause, "%s(((SELECT id FROM %ss" " WHERE %ss.uuid = '%s')" " = %ss.%s" " OR %ss.%s IS NULL" " OR %ss.%s = 0)", get_join (first_keyword, last_was_and, last_was_not), type_term, type_term, quoted_keyword, type, type_term, type, type_term, type, type_term); else g_string_append_printf (clause, "%s((%ss.%s IS NULL" " OR %ss.%s = 0)", get_join (first_keyword, last_was_and, last_was_not), type, type_term, type, type_term); g_free (type_term); } else if (keyword->column && strcmp (keyword->column, "owner")) { gchar *column; quoted_keyword = sql_quote (keyword->string); column = columns_select_column (select_columns, where_columns, keyword->column); assert (column); if (keyword->type == KEYWORD_TYPE_INTEGER) g_string_append_printf (clause, "%s(CAST (%s AS NUMERIC) = %i", get_join (first_keyword, last_was_and, last_was_not), column, keyword->integer_value); else if (keyword->type == KEYWORD_TYPE_DOUBLE) g_string_append_printf (clause, "%s(CAST (%s AS NUMERIC) = %f", get_join (first_keyword, last_was_and, last_was_not), column, keyword->double_value); else if (strcmp (quoted_keyword, "")) g_string_append_printf (clause, "%s(CAST (%s AS TEXT) = '%s'", get_join (first_keyword, last_was_and, last_was_not), column, quoted_keyword); else g_string_append_printf (clause, "%s((%s IS NULL OR CAST (%s AS TEXT) = '%s')", get_join (first_keyword, last_was_and, last_was_not), column, column, quoted_keyword); } else { /* Skip term. Owner filtering is done via where_owned. */ skip = 1; if (owner_filter && (*owner_filter == NULL)) *owner_filter = g_strdup (keyword->string); } } else if (keyword->relation == KEYWORD_RELATION_COLUMN_APPROX) { gchar *column; if (vector_find_filter (filter_columns, keyword->column) == 0) { last_was_and = 0; last_was_not = 0; point++; continue; } quoted_keyword = sql_quote (keyword->string); column = columns_select_column (select_columns, where_columns, keyword->column); assert (column); g_string_append_printf (clause, "%s(CAST (%s AS TEXT) LIKE '%%%%%s%%%%'", get_join (first_keyword, last_was_and, last_was_not), column, quoted_keyword); } else if (keyword->relation == KEYWORD_RELATION_COLUMN_ABOVE) { gchar *column; if (vector_find_filter (filter_columns, keyword->column) == 0) { last_was_and = 0; last_was_not = 0; point++; continue; } quoted_keyword = sql_quote (keyword->string); column = columns_select_column (select_columns, where_columns, keyword->column); assert (column); if (keyword->type == KEYWORD_TYPE_INTEGER) g_string_append_printf (clause, "%s(CAST (%s AS NUMERIC) > %i", get_join (first_keyword, last_was_and, last_was_not), column, keyword->integer_value); else if (keyword->type == KEYWORD_TYPE_DOUBLE) g_string_append_printf (clause, "%s(CAST (%s AS NUMERIC) > %f", get_join (first_keyword, last_was_and, last_was_not), column, keyword->double_value); else g_string_append_printf (clause, "%s(CAST (%s AS TEXT) > '%s'", get_join (first_keyword, last_was_and, last_was_not), column, quoted_keyword); } else if (keyword->relation == KEYWORD_RELATION_COLUMN_BELOW) { gchar *column; if (vector_find_filter (filter_columns, keyword->column) == 0) { last_was_and = 0; last_was_not = 0; point++; continue; } quoted_keyword = sql_quote (keyword->string); column = columns_select_column (select_columns, where_columns, keyword->column); assert (column); if (keyword->type == KEYWORD_TYPE_INTEGER) g_string_append_printf (clause, "%s(CAST (%s AS NUMERIC) < %i", get_join (first_keyword, last_was_and, last_was_not), column, keyword->integer_value); else if (keyword->type == KEYWORD_TYPE_DOUBLE) g_string_append_printf (clause, "%s(CAST (%s AS NUMERIC) < %f", get_join (first_keyword, last_was_and, last_was_not), column, keyword->double_value); else g_string_append_printf (clause, "%s(CAST (%s AS TEXT) < '%s'", get_join (first_keyword, last_was_and, last_was_not), column, quoted_keyword); } else if (keyword->relation == KEYWORD_RELATION_COLUMN_REGEXP) { gchar *column; if (vector_find_filter (filter_columns, keyword->column) == 0) { last_was_and = 0; last_was_not = 0; point++; continue; } quoted_keyword = sql_quote (keyword->string); column = columns_select_column (select_columns, where_columns, keyword->column); assert (column); g_string_append_printf (clause, "%s(CAST (%s AS TEXT) %s '%s'", get_join (first_keyword, last_was_and, last_was_not), column, sql_regexp_op (), quoted_keyword); } else if (keyword->equal) { const char *filter_column; /* Keyword like "=example". */ g_string_append_printf (clause, "%s(", (first_keyword ? "" : (last_was_and ? " AND " : " OR "))); quoted_keyword = sql_quote (keyword->string); if (last_was_not) for (index = 0; (filter_column = filter_columns[index]) != NULL; index++) { gchar *select_column; select_column = columns_select_column (select_columns, where_columns, filter_column); assert (select_column); if (keyword->type == KEYWORD_TYPE_INTEGER) g_string_append_printf (clause, "%s" "(%s IS NULL" " OR CAST (%s AS NUMERIC)" " != %i)", (index ? " AND " : ""), select_column, select_column, keyword->integer_value); else if (keyword->type == KEYWORD_TYPE_DOUBLE) g_string_append_printf (clause, "%s" "(%s IS NULL" " OR CAST (%s AS NUMERIC)" " != %f)", (index ? " AND " : ""), select_column, select_column, keyword->double_value); else g_string_append_printf (clause, "%s" "(%s IS NULL" " OR CAST (%s AS TEXT)" " != '%s')", (index ? " AND " : ""), select_column, select_column, quoted_keyword); } else for (index = 0; (filter_column = filter_columns[index]) != NULL; index++) { gchar *select_column; select_column = columns_select_column (select_columns, where_columns, filter_column); assert (select_column); if (keyword->type == KEYWORD_TYPE_INTEGER) g_string_append_printf (clause, "%sCAST (%s AS NUMERIC)" " = %i", (index ? " OR " : ""), select_column, keyword->integer_value); else if (keyword->type == KEYWORD_TYPE_DOUBLE) g_string_append_printf (clause, "%sCAST (%s AS NUMERIC)" " = %f", (index ? " OR " : ""), select_column, keyword->double_value); else g_string_append_printf (clause, "%sCAST (%s AS TEXT)" " = '%s'", (index ? " OR " : ""), select_column, quoted_keyword); } } else { const char *filter_column; keyword_type_t type; g_string_append_printf (clause, "%s(", (first_keyword ? "" : (last_was_and ? " AND " : " OR "))); quoted_keyword = sql_quote (keyword->string); type = last_was_re /* Prevent type-based shortcuts when term is a regex. */ ? KEYWORD_TYPE_UNKNOWN : keyword_type_from_string (keyword->string); if (last_was_not) for (index = 0; (filter_column = filter_columns[index]) != NULL; index++) { gchar *select_column; select_column = columns_select_column_with_type (select_columns, where_columns, filter_column, type); if (keyword_applies_to_column (keyword, filter_column) && select_column) g_string_append_printf (clause, "%s" "(%s IS NULL" " OR CAST (%s AS TEXT)" " NOT %s '%s%s%s')", (index ? " AND " : ""), select_column, select_column, last_was_re ? sql_regexp_op () : "LIKE", last_was_re ? "" : "%%", quoted_keyword, last_was_re ? "" : "%%"); else g_string_append_printf (clause, "%s t ()", (index ? " AND " : "")); } else for (index = 0; (filter_column = filter_columns[index]) != NULL; index++) { gchar *select_column; select_column = columns_select_column_with_type (select_columns, where_columns, filter_column, type); if (keyword_applies_to_column (keyword, filter_column) && select_column) g_string_append_printf (clause, "%sCAST (%s AS TEXT)" " %s '%s%s%s'", (index ? " OR " : ""), select_column, last_was_re ? sql_regexp_op () : "LIKE", last_was_re ? "" : "%%", quoted_keyword, last_was_re ? "" : "%%"); else g_string_append_printf (clause, "%snot t ()", (index ? " OR " : "")); } } if (skip == 0) { g_string_append (clause, ")"); first_keyword = 0; last_was_and = 0; last_was_not = 0; last_was_re = 0; } g_free (quoted_keyword); point++; } filter_free (split); if (order_return) *order_return = g_string_free (order, FALSE); else g_string_free (order, TRUE); if (max_return) { if (*max_return == -2) setting_value_int ("5f5a8712-8017-11e1-8556-406186ea4fc5", max_return); else if (*max_return < 1) *max_return = -1; } if (strlen (clause->str)) return g_string_free (clause, FALSE); g_string_free (clause, TRUE); return NULL; } /* Resources. */ /** * @brief Filter columns for GET iterator. */ #define ANON_GET_ITERATOR_FILTER_COLUMNS "uuid", \ "created", "modified", "_owner" /** * @brief Filter columns for GET iterator. */ #define GET_ITERATOR_FILTER_COLUMNS "uuid", "name", "comment", \ "created", "modified", "_owner" /** * @brief Columns for GET iterator, as a single string. * * @param[in] prefix Column prefix. */ #define GET_ITERATOR_COLUMNS_STRING \ "id, uuid, name, comment, iso_time (creation_time)," \ " iso_time (modification_time), creation_time AS created," \ " modification_time AS modified" /** * @brief Columns for GET iterator. * * @param[in] prefix Column prefix. */ #define GET_ITERATOR_COLUMNS_PREFIX(prefix) \ { prefix "id", NULL }, \ { prefix "uuid", NULL }, \ { prefix "name", NULL }, \ { prefix "comment", NULL }, \ { " iso_time (" prefix "creation_time)", NULL }, \ { " iso_time (" prefix "modification_time)", NULL }, \ { prefix "creation_time", "created" }, \ { prefix "modification_time", "modified" } /** * @brief Columns for GET iterator. * * @param[in] table Table. */ #define GET_ITERATOR_COLUMNS(table) \ GET_ITERATOR_COLUMNS_PREFIX(""), \ { \ "(SELECT name FROM users AS inner_users" \ " WHERE inner_users.id = " G_STRINGIFY (table) ".owner)", \ "_owner" \ }, \ { "owner", NULL } /** * @brief Number of columns for GET iterator. */ #define GET_ITERATOR_COLUMN_COUNT 10 /** * @brief Check whether a resource type name is valid. * * @param[in] type Type of resource. * * @return 1 yes, 0 no. */ int valid_type (const char* type) { return (strcasecmp (type, "agent") == 0) || (strcasecmp (type, "alert") == 0) || (strcasecmp (type, "config") == 0) || (strcasecmp (type, "filter") == 0) || (strcasecmp (type, "group") == 0) || (strcasecmp (type, "info") == 0) || (strcasecmp (type, "lsc_credential") == 0) || (strcasecmp (type, "note") == 0) || (strcasecmp (type, "override") == 0) || (strcasecmp (type, "permission") == 0) || (strcasecmp (type, "port_list") == 0) || (strcasecmp (type, "report") == 0) || (strcasecmp (type, "report_format") == 0) || (strcasecmp (type, "result") == 0) || (strcasecmp (type, "role") == 0) || (strcasecmp (type, "scanner") == 0) || (strcasecmp (type, "schedule") == 0) || (strcasecmp (type, "slave") == 0) || (strcasecmp (type, "tag") == 0) || (strcasecmp (type, "target") == 0) || (strcasecmp (type, "task") == 0) || (strcasecmp (type, "user") == 0); } /** * @brief Return pretty name of type. * * @param[in] type Database name. * * @return 1 yes, 0 no. */ const char * type_pretty_name (const char* type) { if (strcasecmp (type, "agent") == 0) return "Agent"; if (strcasecmp (type, "alert") == 0) return "Alert"; if (strcasecmp (type, "config") == 0) return "Config"; if (strcasecmp (type, "lsc_credential") == 0) return "Credential"; if (strcasecmp (type, "filter") == 0) return "Filter"; if (strcasecmp (type, "note") == 0) return "Note"; if (strcasecmp (type, "override") == 0) return "Override"; if (strcasecmp (type, "permission") == 0) return "Permission"; if (strcasecmp (type, "port_list") == 0) return "Port List"; if (strcasecmp (type, "report") == 0) return "Report"; if (strcasecmp (type, "report_format") == 0) return "Report Format"; if (strcasecmp (type, "result") == 0) return "Result"; if (strcasecmp (type, "role") == 0) return "Role"; if (strcasecmp (type, "scanner") == 0) return "Scanner"; if (strcasecmp (type, "schedule") == 0) return "Schedule"; if (strcasecmp (type, "slave") == 0) return "Slave"; if (strcasecmp (type, "tag") == 0) return "Tag"; if (strcasecmp (type, "target") == 0) return "Target"; if (strcasecmp (type, "task") == 0) return "Task"; if (strcasecmp (type, "info") == 0) return "SecInfo"; return ""; } /** * @brief Return DB name of type. * * @param[in] type Database or pretty name. * * @return Database name of type if possible, else NULL. */ const char * type_db_name (const char* type) { if (type == NULL) return NULL; if (valid_type (type)) return type; if (strcasecmp (type, "Agent") == 0) return "agent"; if (strcasecmp (type, "Alert") == 0) return "alert"; if (strcasecmp (type, "Config") == 0) return "config"; if (strcasecmp (type, "Credential") == 0) return "lsc_credential"; if (strcasecmp (type, "Filter") == 0) return "filter"; if (strcasecmp (type, "Note") == 0) return "note"; if (strcasecmp (type, "Override") == 0) return "override"; if (strcasecmp (type, "Permission") == 0) return "permission"; if (strcasecmp (type, "Port List") == 0) return "port_list"; if (strcasecmp (type, "Report") == 0) return "report"; if (strcasecmp (type, "Report Format") == 0) return "report_format"; if (strcasecmp (type, "Result") == 0) return "result"; if (strcasecmp (type, "Role") == 0) return "role"; if (strcasecmp (type, "Scanner") == 0) return "scanner"; if (strcasecmp (type, "Schedule") == 0) return "schedule"; if (strcasecmp (type, "Slave") == 0) return "slave"; if (strcasecmp (type, "Tag") == 0) return "tag"; if (strcasecmp (type, "Target") == 0) return "target"; if (strcasecmp (type, "Task") == 0) return "task"; if (strcasecmp (type, "SecInfo") == 0) return "info"; return NULL; } /** * @brief Check whether a type has a name and comment. * * @param[in] type Type of resource. * * @return 1 yes, 0 no. */ int type_named (const char *type) { return strcasecmp (type, "note") && strcasecmp (type, "override"); } /** * @brief Check whether a type has a comment. * * @param[in] type Type of resource. * * @return 1 yes, 0 no. */ int type_has_comment (const char *type) { return strcasecmp (type, "report_format"); } /** * @brief Check whether a resource type has an owner. * * @param[in] type Type of resource. * * @return 1 yes, 0 no. */ int type_owned (const char* type) { return (strcasecmp (type, "info") && strcasecmp (type, "nvt") && strcasecmp (type, "cve") && strcasecmp (type, "cpe") && strcasecmp (type, "ovaldef") && strcasecmp (type, "cert_bund_adv") && strcasecmp (type, "dfn_cert_adv") && strcasecmp (type, "allinfo")); } /** * @brief Check whether the trash is in the real table. * * @param[in] type Type of resource. * * @return 1 yes, 0 no. */ static int type_trash_in_table (const char *type) { return strcasecmp (type, "task") == 0; } /** * @brief Find a resource given a UUID. * * @param[in] type Type of resource. * @param[in] uuid UUID of resource. * @param[out] resource Resource return, 0 if succesfully failed to find resource. * * @return FALSE on success (including if failed to find resource), TRUE on error. */ gboolean find_resource (const char* type, const char* uuid, resource_t* resource) { gchar *quoted_uuid; quoted_uuid = sql_quote (uuid); if (user_owns_uuid (type, quoted_uuid, 0) == 0) { g_free (quoted_uuid); *resource = 0; return FALSE; } // TODO should really check type switch (sql_int64 (resource, "SELECT id FROM %ss WHERE uuid = '%s'%s;", type, quoted_uuid, strcmp (type, "task") ? "" : " AND hidden < 2")) { case 0: break; case 1: /* Too few rows in result of query. */ *resource = 0; break; default: /* Programming error. */ assert (0); case -1: g_free (quoted_uuid); return TRUE; break; } g_free (quoted_uuid); return FALSE; } /** * @brief Find a resource given a UUID and a permission. * * @param[in] type Type of resource. * @param[in] uuid UUID of resource. * @param[out] resource Resource return, 0 if succesfully failed to find * resource. * @param[in] permission Permission. * @param[in] trash Whether resource is in trashcan. * * @return FALSE on success (including if failed to find resource), TRUE on * error. */ gboolean find_resource_with_permission (const char* type, const char* uuid, resource_t* resource, const char *permission, int trash) { gchar *quoted_uuid; if (uuid == NULL) return TRUE; quoted_uuid = sql_quote (uuid); if (user_has_access_uuid (type, quoted_uuid, permission, trash) == 0) { g_free (quoted_uuid); *resource = 0; return FALSE; } // TODO should really check type switch (sql_int64 (resource, "SELECT id FROM %ss%s WHERE uuid = '%s'%s;", type, (strcmp (type, "task") && trash) ? "_trash" : "", quoted_uuid, strcmp (type, "task") ? "" : (trash ? " AND hidden = 2" : " AND hidden < 2"))) { case 0: break; case 1: /* Too few rows in result of query. */ *resource = 0; break; default: /* Programming error. */ assert (0); case -1: g_free (quoted_uuid); return TRUE; break; } g_free (quoted_uuid); return FALSE; } /** * @brief Find a resource given a name. * * @param[in] type Type of resource. * @param[in] name A resource name. * @param[out] resource Resource return, 0 if succesfully failed to find * resource. * * @return FALSE on success (including if failed to find resource), TRUE on * error. */ static gboolean find_resource_by_name (const char* type, const char* name, resource_t *resource) { gchar *quoted_name; quoted_name = sql_quote (name); // TODO should really check type switch (sql_int64 (resource, "SELECT id FROM %ss WHERE name = '%s'" " ORDER BY id DESC;", type, quoted_name)) { case 0: break; case 1: /* Too few rows in result of query. */ *resource = 0; break; default: /* Programming error. */ assert (0); case -1: g_free (quoted_name); return TRUE; break; } g_free (quoted_name); return FALSE; } /** * @brief Find a resource given a UUID and a permission. * * @param[in] type Type of resource. * @param[in] name Name of resource. * @param[out] resource Resource return, 0 if succesfully failed to find * resource. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find resource), TRUE on * error. */ gboolean find_resource_by_name_with_permission (const char *type, const char *name, resource_t *resource, const char *permission) { gchar *quoted_name; assert (strcmp (type, "task")); if (name == NULL) return TRUE; quoted_name = sql_quote (name); // TODO should really check type switch (sql_int64 (resource, "SELECT id FROM %ss WHERE name = '%s'" " ORDER BY id DESC;", type, quoted_name)) { case 0: { gchar *uuid; uuid = sql_string ("SELECT uuid FROM %ss WHERE id = %llu;", type, *resource); if (user_has_access_uuid (type, uuid, permission, 0) == 0) { g_free (uuid); g_free (quoted_name); *resource = 0; return FALSE; } g_free (uuid); } break; case 1: /* Too few rows in result of query. */ *resource = 0; break; default: /* Programming error. */ assert (0); case -1: g_free (quoted_name); return TRUE; break; } g_free (quoted_name); return FALSE; } /** * @brief Create a resource from an existing resource. * * @param[in] type Type of resource. * @param[in] name Name of new resource. NULL to copy from existing. * @param[in] comment Comment on new resource. NULL to copy from existing. * @param[in] resource_id UUID of existing resource. * @param[in] columns Extra columns in resource. * @param[in] make_name_unique When name NULL, whether to make existing name * unique. * @param[out] new_resource Address for new resource, or NULL. * @param[out] old_resource Address for existing resource, or NULL. * * @return 0 success, 1 resource exists already, 2 failed to find existing * resource, 99 permission denied, -1 error. */ static int copy_resource_lock (const char *type, const char *name, const char *comment, const char *resource_id, const char *columns, int make_name_unique, resource_t* new_resource, resource_t *old_resource) { gchar *quoted_name, *quoted_uuid, *uniquify, *command; int named; user_t owner; resource_t resource; resource_t new; if (resource_id == NULL) return -1; command = g_strdup_printf ("create_%s", type); if (user_may (command) == 0) { g_free (command); return 99; } g_free (command); command = g_strdup_printf ("get_%ss", type); if (find_resource_with_permission (type, resource_id, &resource, command, 0)) { g_free (command); return -1; } g_free (command); if (resource == 0) return 2; if (find_user_by_name (current_credentials.username, &owner) || owner == 0) { return -1; } if (strcmp (type, "permission") == 0) { resource_t perm_resource; perm_resource = permission_resource (resource); if ((perm_resource == 0) && (user_can_everything (current_credentials.uuid) == 0)) /* Only admins can copy permissions that apply to whole commands. */ return 99; } named = type_named (type); if (named && name && *name && resource_with_name_exists (name, type, 0)) return 1; if (name && *name) quoted_name = sql_quote (name); else quoted_name = NULL; quoted_uuid = sql_quote (resource_id); /* Copy the existing resource. */ if (make_name_unique) uniquify = g_strdup_printf ("uniquify ('%s', name, %llu, '%cClone')", type, owner, strcmp (type, "user") ? ' ' : '_'); else uniquify = g_strdup ("name"); if (named && comment && strlen (comment)) { gchar *quoted_comment; quoted_comment = sql_nquote (comment, strlen (comment)); sql ("INSERT INTO %ss" " (uuid, owner, name, comment, creation_time, modification_time%s%s)" " SELECT make_uuid ()," " (SELECT id FROM users where users.uuid = '%s')," " %s%s%s, '%s', m_now (), m_now ()%s%s" " FROM %ss WHERE uuid = '%s';", type, columns ? ", " : "", columns ? columns : "", current_credentials.uuid, quoted_name ? "'" : "", quoted_name ? quoted_name : uniquify, quoted_name ? "'" : "", quoted_comment, columns ? ", " : "", columns ? columns : "", type, quoted_uuid); g_free (quoted_comment); } else if (named) sql ("INSERT INTO %ss" " (uuid, owner, name%s, creation_time, modification_time%s%s)" " SELECT make_uuid ()," " (SELECT id FROM users where users.uuid = '%s')," " %s%s%s%s, m_now (), m_now ()%s%s" " FROM %ss WHERE uuid = '%s';", type, type_has_comment (type) ? ", comment" : "", columns ? ", " : "", columns ? columns : "", current_credentials.uuid, quoted_name ? "'" : "", quoted_name ? quoted_name : uniquify, quoted_name ? "'" : "", type_has_comment (type) ? ", comment" : "", columns ? ", " : "", columns ? columns : "", type, quoted_uuid); else sql ("INSERT INTO %ss" " (uuid, owner, creation_time, modification_time%s%s)" " SELECT make_uuid (), (SELECT id FROM users where users.uuid = '%s')," " m_now (), m_now ()%s%s" " FROM %ss WHERE uuid = '%s';", type, columns ? ", " : "", columns ? columns : "", current_credentials.uuid, columns ? ", " : "", columns ? columns : "", type, quoted_uuid); new = sql_last_insert_id (); /* Copy attached tags */ sql ("INSERT INTO tags" " (uuid, owner, name, comment, creation_time, modification_time," " resource_type, resource, resource_uuid, resource_location," " active, value)" " SELECT make_uuid (), (SELECT id FROM users where users.uuid = '%s')," " name, comment, m_now (), m_now ()," " resource_type, %llu, (SELECT uuid FROM %ss WHERE id = %llu)," " resource_location, active, value" " FROM tags WHERE resource_type = '%s' AND resource = %llu" " AND resource_location = " G_STRINGIFY (LOCATION_TABLE) ";", current_credentials.uuid, new, type, new, type, resource); if (new_resource) *new_resource = new; if (old_resource) *old_resource = resource; g_free (quoted_uuid); g_free (quoted_name); g_free (uniquify); if (sql_last_insert_id () == 0) return -1; return 0; } /** * @brief Create a resource from an existing resource. * * @param[in] type Type of resource. * @param[in] name Name of new resource. NULL to copy from existing. * @param[in] comment Comment on new resource. NULL to copy from existing. * @param[in] resource_id UUID of existing resource. * @param[in] columns Extra columns in resource. * @param[in] make_name_unique When name NULL, whether to make existing name * unique. * @param[out] new_resource New resource. * * @return 0 success, 1 resource exists already, 2 failed to find existing * resource, 99 permission denied, -1 error. */ int copy_resource (const char *type, const char *name, const char *comment, const char *resource_id, const char *columns, int make_name_unique, resource_t* new_resource) { int ret; assert (current_credentials.uuid); sql_begin_immediate (); ret = copy_resource_lock (type, name, comment, resource_id, columns, make_name_unique, new_resource, NULL); if (ret) sql ("ROLLBACK;"); else sql ("COMMIT;"); return ret; } /** * @brief Get whether a resource exists. * * @param[in] type Type. * @param[in] resource Resource. * @param[in] location Location. * * @return 1 yes, 0 no, -1 error in type. */ int resource_exists (const char *type, resource_t resource, int location) { if (valid_db_resource_type (type) == 0) return -1; if (location == LOCATION_TABLE) return sql_int ("SELECT EXISTS (SELECT id FROM %ss WHERE id = %llu);", type, resource); return sql_int ("SELECT EXISTS (SELECT id FROM %ss%s WHERE id = %llu);", type, strcmp (type, "task") ? "_trash" : "", resource); } /** * @brief Get the name of a resource. * * @param[in] type Type. * @param[in] uuid UUID. * @param[in] location Location. * @param[out] name Return for freshly allocated name. * * @return 0 success, 1 error in type. */ int resource_name (const char *type, const char *uuid, int location, char **name) { if (valid_db_resource_type (type) == 0) return 1; if (strcasecmp (type, "note") == 0) *name = sql_string ("SELECT 'Note for: '" " || (SELECT name" " FROM nvts" " WHERE nvts.uuid = notes%s.nvt)" " FROM notes%s" " WHERE uuid = '%s';", location == LOCATION_TABLE ? "" : "_trash", location == LOCATION_TABLE ? "" : "_trash", uuid); else if (strcasecmp (type, "override") == 0) *name = sql_string ("SELECT 'Override for: '" " || (SELECT name" " FROM nvts" " WHERE nvts.uuid = overrides%s.nvt)" " FROM overrides%s" " WHERE uuid = '%s';", location == LOCATION_TABLE ? "" : "_trash", location == LOCATION_TABLE ? "" : "_trash", uuid); else if (strcasecmp (type, "report") == 0) *name = sql_string ("SELECT (SELECT name FROM tasks WHERE id = task)" " || ' - '" " || (SELECT" " CASE (SELECT end_time FROM tasks" " WHERE id = task)" " WHEN 0 THEN 'N/A'" " ELSE (SELECT iso_time (end_time)" " FROM tasks WHERE id = task)" " END)" " FROM reports" " WHERE uuid = '%s';", uuid); else if (strcasecmp (type, "result") == 0) *name = sql_string ("SELECT (SELECT name FROM tasks WHERE id = task)" " || ' - '" " || (SELECT name FROM nvts WHERE oid = nvt)" " || ' - '" " || (SELECT" " CASE (SELECT end_time FROM tasks" " WHERE id = task)" " WHEN 0 THEN 'N/A'" " ELSE (SELECT iso_time (end_time)" " FROM tasks WHERE id = task)" " END)" " FROM results" " WHERE uuid = '%s';", uuid); else if (location == LOCATION_TABLE) *name = sql_string ("SELECT name" " FROM %ss" " WHERE uuid = '%s';", type, uuid); else if ((strcmp (type, "nvt")) && (strcmp (type, "cpe")) && (strcmp (type, "cve")) && (strcmp (type, "ovaldef")) && (strcmp (type, "cert_bund_adv")) && (strcmp (type, "dfn_cert_adv")) && (strcmp (type, "report")) && (strcmp (type, "result")) && (strcmp (type, "user"))) *name = sql_string ("SELECT name" " FROM %ss%s" " WHERE uuid = '%s';", type, strcmp (type, "task") ? "_trash" : "", uuid); else *name = NULL; return 0; } /** * @brief Initialise a GET iterator, including observed resources. * * @param[in] iterator Iterator. * @param[in] type Type of resource. * @param[in] get GET data. * @param[in] select_columns Columns for SQL. * @param[in] trash_select_columns Columns for SQL trash case. * @param[in] where_columns WHERE columns. * @param[in] trash_where_columns WHERE columns for trashcan. * @param[in] filter_columns Columns for filter. * @param[in] distinct Whether the query should be distinct. Skipped * for trash and single resource. * @param[in] extra_tables Extra tables to join in FROM clause. * @param[in] extra_where Extra WHERE clauses. Skipped for single * resource. * @param[in] owned Only get items owned by the current user. * * @return 0 success, 1 failed to find resource, 2 failed to find filter, -1 * error. */ static int init_get_iterator2 (iterator_t* iterator, const char *type, const get_data_t *get, column_t *select_columns, column_t *trash_select_columns, column_t *where_columns, column_t *trash_where_columns, const char **filter_columns, int distinct, const char *extra_tables, const char *extra_where, int owned) { int first, max; gchar *clause, *order, *filter, *owned_clause; array_t *permissions; resource_t resource = 0; gchar *owner_filter; gchar *columns; assert (get); if (select_columns == NULL) { assert (0); return -1; } if (get->id && owned && (current_credentials.uuid == NULL)) { gchar *quoted_uuid = sql_quote (get->id); switch (sql_int64 (&resource, "SELECT id FROM %ss WHERE uuid = '%s';", type, quoted_uuid)) { case 0: break; case 1: /* Too few rows in result of query. */ g_free (quoted_uuid); return 1; break; default: /* Programming error. */ assert (0); case -1: g_free (quoted_uuid); return -1; break; } g_free (quoted_uuid); } else if (get->id && owned) { /* For now assume that the permission is "get_". Callers wishing * to iterate over a single resource with other permissions can use * uuid= in the filter (instead of passing get->id). */ if (find_resource_with_permission (type, get->id, &resource, NULL, get->trash)) return -1; if (resource == 0) return 1; } if (get->filt_id && strcmp (get->filt_id, "0")) { if (get->filter_replacement) /* Replace the filter term with one given by the caller. This is * used by GET_REPORTS to use the default filter with any task (when * given the special value of -3 in filt_id). */ filter = g_strdup (get->filter_replacement); else filter = filter_term (get->filt_id); if (filter == NULL) return 2; } else filter = NULL; clause = filter_clause (type, filter ? filter : get->filter, filter_columns, (get->trash && trash_select_columns) ? trash_select_columns : select_columns, (get->trash && trash_where_columns) ? trash_where_columns : where_columns, get->trash, &order, &first, &max, &permissions, &owner_filter); g_free (filter); if (resource) /* Ownership test is done above by find function. */ owned_clause = g_strdup (" t ()"); else owned_clause = where_owned (type, get, owned, owner_filter, resource, permissions); g_free (owner_filter); array_free (permissions); if (get->trash && trash_select_columns) columns = columns_build_select (trash_select_columns); else columns = columns_build_select (select_columns); if (resource && get->trash) init_iterator (iterator, "SELECT %s" " FROM %ss%s %s" " WHERE id = %llu" " AND %s" "%s;", columns, type, type_trash_in_table (type) ? "" : "_trash", extra_tables ? extra_tables : "", resource, owned_clause, order); else if (get->trash) init_iterator (iterator, "SELECT %s" " FROM %ss%s %s" " WHERE" "%s" "%s" "%s;", columns, type, type_trash_in_table (type) ? "" : "_trash", extra_tables ? extra_tables : "", owned_clause, extra_where ? extra_where : "", order); else if (resource) init_iterator (iterator, "SELECT %s" " FROM %ss %s" " WHERE id = %llu" " AND %s" "%s;", columns, type, extra_tables ? extra_tables : "", resource, owned_clause, order); else if (distinct == 0) /* The purpose of the inner SELECT is to use the minimum number of columns * when considering the whole table. Once the filtering has reduced the * selection to the rows that will appear on the page, then the outer SELECT * includes all the requested columns. */ init_iterator (iterator, "SELECT %s" " FROM %ss %s" " WHERE id IN (SELECT id" " FROM %ss %s" " WHERE %s" " %s%s%s%s%s" " LIMIT %s OFFSET %i)" "%s;", columns, type, extra_tables ? extra_tables : "", type, extra_tables ? extra_tables : "", owned_clause, clause ? " AND (" : "", clause ? clause : "", clause ? ")" : "", extra_where ? extra_where : "", order, sql_select_limit (max), first, order); else { init_iterator (iterator, "%sSELECT %s" " FROM %ss %s" " WHERE" " %s" "%s%s%s%s%s" " LIMIT %s OFFSET %i%s;", distinct ? "SELECT DISTINCT * FROM (" : "", columns, type, extra_tables ? extra_tables : "", owned_clause, clause ? " AND (" : "", clause ? clause : "", clause ? ")" : "", extra_where ? extra_where : "", order, sql_select_limit (max), first, distinct ? ") AS subquery_for_distinct" : ""); } g_free (columns); g_free (owned_clause); g_free (order); g_free (clause); return 0; } /** * @brief Initialise a GET iterator, including observed resources. * * @param[in] iterator Iterator. * @param[in] type Type of resource. * @param[in] get GET data. * @param[in] select_columns Columns for SQL. * @param[in] trash_select_columns Columns for SQL trash case. * @param[in] filter_columns Columns for filter. * @param[in] distinct Whether the query should be distinct. Skipped * for trash and single resource. * @param[in] extra_tables Extra tables to join in FROM clause. * @param[in] extra_where Extra WHERE clauses. Skipped for single * resource. * @param[in] owned Only get items owned by the current user. * * @return 0 success, 1 failed to find resource, 2 failed to find filter, -1 * error. */ static int init_get_iterator (iterator_t* iterator, const char *type, const get_data_t *get, column_t *select_columns, column_t *trash_select_columns, const char **filter_columns, int distinct, const char *extra_tables, const char *extra_where, int owned) { return init_get_iterator2 (iterator, type, get, select_columns, trash_select_columns, NULL, NULL, filter_columns, distinct, extra_tables, extra_where, owned); } // FIX column_t * type_select_columns (const char *type, int); column_t * type_where_columns (const char *type, int); /** * @brief Initialise a GET_AGGREGATES iterator, including observed resources. * * @param[in] iterator Iterator. * @param[in] type Type of resource. * @param[in] get GET data. * @param[in] columns Columns for SQL. * @param[in] trash_columns Columns for SQL trash case. * @param[in] filter_columns Columns for filter. * @param[in] distinct Whether the query should be distinct. Skipped * for trash and single resource. * @param[in] stat_column Column to calculate statistics for. * @param[in] group_column Column to group data by. * @param[in] extra_tables Join tables. Skipped for trash and single * resource. * @param[in] extra_where Extra WHERE clauses. Skipped for single * resource. * @param[in] no_pagination Ignore max and first limits. * @param[in] owned Only get items owned by the current user. * * @return 0 success, 1 failed to find resource, 2 failed to find filter, * 3 invalid stat_column, 4 invalid group_column, 5 invalid type, * 6 trashcan not used by type, -1 error. */ int init_aggregate_iterator (iterator_t* iterator, const char *type, const get_data_t *get, int distinct, const char *stat_column, const char *group_column, const char *extra_tables, const char *extra_where) { int owned; gchar *apply_overrides_str, *min_qod_str; int apply_overrides, min_qod; column_t *select_columns, *where_columns; gchar *columns; gchar *trash_columns; gchar *opts_table; const char **filter_columns; int first, max; gchar *from_table, *trash_extra, *clause, *filter_order, *filter; gchar *owned_clause; array_t *permissions; resource_t resource = 0; gchar *owner_filter; gchar *aggregate_select, *aggregate_group_by; gchar *outer_group_by; gchar *select_group_column, *select_stat_column; gchar *order; assert (get); if (get->id) g_warning ("%s: Called with an id parameter", __FUNCTION__); if (get->filt_id && strcmp (get->filt_id, "0")) { if (get->filter_replacement) /* Replace the filter term with one given by the caller. This is * used by GET_REPORTS to use the default filter with any task (when * given the special value of -3 in filt_id). */ filter = g_strdup (get->filter_replacement); else filter = filter_term (get->filt_id); if (filter == NULL) return 2; } else filter = NULL; apply_overrides_str = filter_term_value (filter ? filter : get->filter, "apply_overrides"); apply_overrides = apply_overrides_str ? atoi (apply_overrides_str) : 1; min_qod_str = filter_term_value (filter ? filter : get->filter, "min_qod"); min_qod = min_qod_str ? atoi (min_qod_str) : MIN_QOD_DEFAULT; g_free (apply_overrides_str); g_free (min_qod_str); select_columns = type_select_columns (type, apply_overrides); columns = type_columns (type, apply_overrides); trash_columns = type_trash_columns (type, apply_overrides); where_columns = type_where_columns (type, apply_overrides); filter_columns = type_filter_columns (type, apply_overrides); opts_table = type_opts_table (type, apply_overrides, min_qod); if (columns == NULL || filter_columns == NULL) { g_free (columns); g_free (trash_columns); return 5; } if (get->trash && trash_columns == NULL) { g_free (columns); g_free (trash_columns); return 6; } owned = type_owned (type); if (stat_column && vector_find_filter (filter_columns, stat_column) == 0) { g_free (columns); g_free (trash_columns); return 3; } if (group_column && vector_find_filter (filter_columns, group_column) == 0) { g_free (columns); g_free (trash_columns); return 4; } clause = filter_clause (type, filter ? filter : get->filter, filter_columns, select_columns, where_columns, get->trash, &filter_order, &first, &max, &permissions, &owner_filter); g_free (filter); if (resource) /* Ownership test is done above by find function. */ owned_clause = g_strdup (" 1"); else owned_clause = where_owned (type, get, owned, owner_filter, resource, permissions); if (strcasecmp (type, "TASK") == 0) { if (get->trash) trash_extra = g_strdup (" AND hidden = 2"); else trash_extra = g_strdup (" AND hidden = 0"); } else trash_extra = g_strdup (""); g_free (owner_filter); array_free (permissions); select_group_column = NULL; select_stat_column = NULL; if (group_column == NULL) { select_group_column = NULL; } else { int i = 0; while (select_columns[i].select != NULL) { if (strcmp (select_columns[i].select, group_column) == 0 || (select_columns[i].filter && strcmp (select_columns[i].filter, group_column) == 0)) { select_group_column = g_strdup (select_columns[i].select); break; } i++; } if ((select_group_column == NULL) && where_columns) { i = 0; while (where_columns[i].select != NULL) { if (strcmp (where_columns[i].select, group_column) == 0 || (where_columns[i].filter && strcmp (where_columns[i].filter, group_column) == 0)) { select_group_column = g_strdup (where_columns[i].select); break; } i++; } } } if (stat_column == NULL) select_stat_column = NULL; else { int i = 0; while (select_columns[i].select != NULL) { if (strcmp (select_columns[i].select, stat_column) == 0 || (select_columns[i].filter && strcmp (select_columns[i].filter, stat_column) == 0)) { select_stat_column = g_strdup (select_columns[i].select); break; } i++; } if ((select_stat_column == NULL) && where_columns) { i = 0; while (where_columns[i].select != NULL) { if (strcmp (where_columns[i].select, stat_column) == 0 || (where_columns[i].filter && strcmp (where_columns[i].filter, stat_column) == 0)) { select_stat_column = g_strdup (where_columns[i].select); break; } i++; } } } /* Round time fields to the next day to reduce amount of rows returned * This returns "pseudo-UTC" dates which are used by the GSA charts because * the JavaScript Date objects do not support setting the timezone. */ if (group_column && (strcmp (group_column, "created") == 0 || strcmp (group_column, "modified") == 0 || strcmp (group_column, "published") == 0)) outer_group_by = g_strdup_printf ("GROUP BY CAST (strftime ('%%s'," " date(%s, 'unixepoch'," " 'localtime')," " 'localtime')" " AS INTEGER)", "aggregate_group_value"); else outer_group_by = g_strdup ("GROUP BY aggregate_group_value"); order = g_strdup_printf ("ORDER BY %s ASC", "aggregate_group_value"); if (group_column && strcmp (group_column, "")) { if (stat_column && strcmp (stat_column, "")) aggregate_select = g_strdup_printf (" count(*) AS aggregate_count," " min(%s) AS aggregate_min," " max(%s) AS aggregate_max," " avg(%s) * count(*)" " AS aggregate_avg," " sum(%s) AS aggregate_sum," " %s as aggregate_group_value", select_stat_column, select_stat_column, select_stat_column, select_stat_column, select_group_column); else aggregate_select = g_strdup_printf (" count(*) AS aggregate_count," " NULL AS aggregate_min," " NULL AS aggregate_max," " NULL AS aggregate_avg," " NULL AS aggregate_sum," " %s as aggregate_group_value", select_group_column); aggregate_group_by = g_strdup_printf (" GROUP BY %s", select_group_column); } else { if (stat_column && strcmp (stat_column, "")) aggregate_select = g_strdup_printf (" count(*) AS aggregate_count," " min(%s) AS aggregate_min," " max(%s) AS aggregate_max," " avg(%s) * count(*)" " AS aggregate_avg," " sum(%s) AS aggregate_sum," " NULL as aggregate_group_value", select_stat_column, select_stat_column, select_stat_column, select_stat_column); else { g_free (columns); g_free (trash_columns); g_free (owned_clause); g_free (trash_extra); g_free (order); g_free (clause); return -1; } aggregate_group_by = g_strdup (""); } from_table = type_table (type, get->trash); init_iterator (iterator, "SELECT sum(aggregate_count)," " min(aggregate_min), max (aggregate_max)," " sum (aggregate_avg) / sum(aggregate_count)," " sum (aggregate_sum), aggregate_group_value" " FROM (SELECT%s %s, %s" " FROM %s%s%s" " WHERE" " %s%s" " %s%s%s%s" " %s)" " %s %s;", distinct ? " DISTINCT" : "", aggregate_select, columns, from_table, opts_table ? opts_table : "", extra_tables ? extra_tables : "", owned_clause, trash_extra, clause ? " AND (" : "", clause ? clause : "", clause ? ")" : "", extra_where ? extra_where : "", aggregate_group_by, outer_group_by, order); g_free (columns); g_free (trash_columns); g_free (owned_clause); g_free (trash_extra); g_free (filter_order); g_free (order); g_free (clause); g_free (aggregate_group_by); g_free (aggregate_select); g_free (outer_group_by); g_free (select_group_column); return 0; } /** * @brief Get the count from an aggregate iterator. * * @param[in] iterator Iterator. * * @return The count of resources in the current group. */ int aggregate_iterator_count (iterator_t* iterator) { return sql_column_int (iterator->stmt, 0); } /** * @brief Get the minimum from an aggregate iterator. * * @param[in] iterator Iterator. * * @return The minimum value in the current group. */ double aggregate_iterator_min (iterator_t* iterator) { return sql_column_double (iterator->stmt, 1); } /** * @brief Get the maximum from an aggregate iterator. * * @param[in] iterator Iterator. * * @return The maximum value in the current group. */ double aggregate_iterator_max (iterator_t* iterator) { return sql_column_double (iterator->stmt, 2); } /** * @brief Get the mean from an aggregate iterator. * * @param[in] iterator Iterator. * * @return The mean value in the current group. */ double aggregate_iterator_mean (iterator_t* iterator) { return sql_column_double (iterator->stmt, 3); } /** * @brief Get the sum from a statistics iterator. * * @param[in] iterator Iterator. * * @return The sum of values in the current group. */ double aggregate_iterator_sum (iterator_t* iterator) { return sql_column_double (iterator->stmt, 4); } /** * @brief Get the value of the group column from a statistics iterator. * * @param[in] iterator Iterator. * * @return The value, or NULL if iteration is complete. Freed by * cleanup_iterator. */ const char* aggregate_iterator_value (iterator_t* iterator) { const char *ret; if (iterator->done) return NULL; ret = (const char*) sql_column_text (iterator->stmt, 5); return ret; } /** * @brief Count number of a particular resource. * * @param[in] type Type of resource. * @param[in] get GET params. * @param[in] select_columns SELECT columns. * @param[in] trash_select_columns SELECT columns for trashcan. * @param[in] where_columns WHERE columns. * @param[in] trash_where_columns WHERE columns for trashcan. * @param[in] filter_columns Extra columns. * @param[in] distinct Whether the query should be distinct. Skipped * for trash and single resource. * @param[in] extra_tables Join tables. Skipped for trash and single * resource. * @param[in] extra_where Extra WHERE clauses. Skipped for trash and * single resource. * @param[in] owned Only count items owned by current user. * * @return Total number of resources in filtered set. */ static int count2 (const char *type, const get_data_t *get, column_t *select_columns, column_t *trash_select_columns, column_t *where_columns, column_t *trash_where_columns, const char **filter_columns, int distinct, const char *extra_tables, const char *extra_where, int owned) { int ret; gchar *clause, *owned_clause, *owner_filter, *columns, *filter; array_t *permissions; assert (current_credentials.uuid); assert (get); if (get->filt_id && strcmp (get->filt_id, "0")) { filter = filter_term (get->filt_id); if (filter == NULL) return -1; } else filter = NULL; clause = filter_clause (type, filter ? filter : get->filter, filter_columns, get->trash && trash_select_columns ? trash_select_columns : select_columns, get->trash && trash_where_columns ? trash_where_columns : where_columns, get->trash, NULL, NULL, NULL, &permissions, &owner_filter); g_free (filter); owned_clause = where_owned (type, get, owned, owner_filter, 0, permissions); g_free (owner_filter); array_free (permissions); if (get->trash && trash_select_columns) columns = columns_build_select (trash_select_columns); else columns = columns_build_select (select_columns); if ((distinct == 0) && (extra_tables == NULL) && (clause == NULL) && (extra_where == NULL) && (strcmp (owned_clause, " t ()") == 0)) ret = sql_int ("SELECT count (*) FROM %ss%s;", type, get->trash && strcmp (type, "task") ? "_trash" : ""); else ret = sql_int ("SELECT count (%scount_id)" " FROM (SELECT %ss%s.id AS count_id, %s" " FROM %ss%s%s" " WHERE %s" " %s%s%s%s) AS subquery;", distinct ? "DISTINCT " : "", type, get->trash && strcmp (type, "task") ? "_trash" : "", columns, type, get->trash && strcmp (type, "task") ? "_trash" : "", extra_tables ? extra_tables : "", owned_clause, clause ? " AND (" : "", clause ? clause : "", clause ? ") " : "", extra_where ? extra_where : ""); g_free (columns); g_free (owned_clause); g_free (clause); return ret; } /** * @brief Count number of a particular resource. * * @param[in] type Type of resource. * @param[in] get GET params. * @param[in] select_columns SELECT columns. * @param[in] trash_select_columns SELECT columns for trashcan. * @param[in] filter_columns Extra columns. * @param[in] distinct Whether the query should be distinct. Skipped * for trash and single resource. * @param[in] extra_tables Join tables. Skipped for trash and single * resource. * @param[in] extra_where Extra WHERE clauses. Skipped for trash and * single resource. * @param[in] owned Only count items owned by current user. * * @return Total number of resources in filtered set. */ static int count (const char *type, const get_data_t *get, column_t *select_columns, column_t *trash_select_columns, const char **filter_columns, int distinct, const char *extra_tables, const char *extra_where, int owned) { return count2 (type, get, select_columns, trash_select_columns, NULL, NULL, filter_columns, distinct, extra_tables, extra_where, owned); } /** * @brief Count number of info of a given subtype with a given name. * * @param[in] type GET_INFO subtype. * @param[out] name Name of the info item. * * @return Total number of get_info items of given type, -1 on error. */ int info_name_count (const char *type, const char *name) { gchar *quoted_name; int count; assert(type); assert(name); quoted_name = sql_quote (name); count = sql_int ("SELECT COUNT(id)" " FROM %ss" " WHERE name = '%s';", type, quoted_name); g_free (quoted_name); return count; } /** * @brief Return the database version supported by this manager. * * @return Database version supported by this manager. */ int manage_db_supported_version () { return OPENVASMD_DATABASE_VERSION; } /** * @brief Return the database version of the actual database. * * @return Database version read from database, -2 if database is empty, * -1 on error. */ int manage_db_version () { int number; char *version; if (manage_db_empty ()) return -2; version = sql_string ("SELECT value FROM %s.meta" " WHERE name = 'database_version' LIMIT 1;", sql_schema ()); if (version) { number = atoi (version); free (version); return number; } return -1; } /** * @brief Return the database version supported by this manager. * * @return Database version supported by this manager. */ int manage_scap_db_supported_version () { return OPENVASMD_SCAP_DATABASE_VERSION; } /** * @brief Return the database version of the actual database. * * @return Database version read from database if possible, else -1. */ int manage_scap_db_version () { if (manage_scap_loaded () == 0) return -1; int number; char *version = sql_string ("SELECT value FROM scap.meta" " WHERE name = 'database_version' LIMIT 1;"); if (version) { number = atoi (version); free (version); return number; } return -1; } /** * @brief Return the database version supported by this manager. * * @return Database version supported by this manager. */ int manage_cert_db_supported_version () { return OPENVASMD_CERT_DATABASE_VERSION; } /** * @brief Return the database version of the actual database. * * @return Database version read from database if possible, else -1. */ int manage_cert_db_version () { if (manage_cert_loaded () == 0) return -1; int number; char *version = sql_string ("SELECT value FROM cert.meta" " WHERE name = 'database_version' LIMIT 1;"); if (version) { number = atoi (version); free (version); return number; } return -1; } /** * @brief Returns associated name for a tcp/ip port. * * @param number Port number to get name for. * @param protocol Protocol type of port. * * @return associated name for port if found, NULL otherwise. */ char * manage_port_name (int number, const char *protocol) { if (protocol == NULL || number <= 0 || number > 65535) return NULL; return sql_string ("SELECT name FROM port_names" " WHERE number = %i AND protocol = '%s' LIMIT 1;", number, protocol); } /** * @brief Returns formatted port number, protocol and iana name from * @brief field in "number/proto" form. * * @param field Number/Protocol string. * * @return Formatted port name string, NULL if error. */ gchar * port_name_formatted (const char *field) { int number; char *protocol, *port_name; if (field == NULL) return NULL; protocol = g_newa (char, strlen (field)); if (sscanf (field, "%i/%s", &number, protocol) != 2) return g_strdup (field); port_name = manage_port_name (number, protocol); if (port_name) { char *formatted = g_strdup_printf ("%i/%s (IANA: %s)", number, protocol, port_name); free (port_name); return formatted; } else return g_strdup (field); } /** * @brief Set the database version of the actual database. * * Caller must organise transaction. * * @param version New version number. */ void set_db_version (int version) { sql ("DELETE FROM %s.meta WHERE name = 'database_version';", sql_schema ()); sql ("INSERT INTO %s.meta (name, value)" " VALUES ('database_version', '%i');", sql_schema (), version); } /** * @brief Encrypt, re-encrypt or decrypt all credentials * * All plaintext credentials in the lsc_credentials table are * encrypted, all already encrypted credentials are encrypted again * using the latest key. * * @param[in] decrypt_flag If true decrypt all credentials. * * @return 0 success, -1 error. */ static int encrypt_all_credentials (gboolean decrypt_flag) { iterator_t iterator; unsigned long ntotal, nencrypted, nreencrypted, ndecrypted; init_iterator (&iterator, "SELECT id, password, private_key FROM lsc_credentials"); iterator.crypt_ctx = lsc_crypt_new (); sql_begin_immediate (); ntotal = nencrypted = nreencrypted = ndecrypted = 0; while (next (&iterator)) { long long int rowid; const char *password, *privkey; ntotal++; if (!(ntotal % 10)) g_message (" %lu credentials so far processed", ntotal); rowid = iterator_int64 (&iterator, 0); password = iterator_string (&iterator, 1); privkey = iterator_string (&iterator, 2); /* If there is no password or private key, skip the row. */ if (!password && !privkey) continue; /* If the row is alread encrypted, retrieve the plaintext values first. */ if (privkey && !strcmp (privkey, ";;encrypted;;")) { const char *tmp = password; lsc_crypt_flush (iterator.crypt_ctx); password = lsc_crypt_get_password (iterator.crypt_ctx, tmp); privkey = lsc_crypt_get_private_key (iterator.crypt_ctx, tmp); /* If there is no password or private key, skip the row. */ if (!password && !privkey) continue; nreencrypted++; } else { if (decrypt_flag) continue; /* Skip non-encrypted rows. */ nencrypted++; } if (decrypt_flag) { char *quoted_password, *quoted_privkey; quoted_password = sql_insert (password); quoted_privkey = sql_insert (privkey); sql ("UPDATE lsc_credentials SET password = %s," " private_key = %s," " modification_time = m_now ()" " WHERE id = %llu;", quoted_password, quoted_privkey, rowid); g_free (quoted_password); g_free (quoted_privkey); ndecrypted++; } else { char *encblob; if (password && privkey) encblob = lsc_crypt_encrypt (iterator.crypt_ctx, "password", password, "private_key", privkey, NULL); else if (password) encblob = lsc_crypt_encrypt (iterator.crypt_ctx, "password", password, NULL); else encblob = lsc_crypt_encrypt (iterator.crypt_ctx, "private_key", privkey, NULL); if (!encblob) { sql ("ROLLBACK;"); cleanup_iterator (&iterator); return -1; } sql ("UPDATE lsc_credentials SET password = '%s'," " private_key = ';;encrypted;;'," " modification_time = m_now ()" " WHERE id = %llu;", encblob, rowid); g_free (encblob); } } sql ("COMMIT;"); if (decrypt_flag) g_message ("%lu out of %lu credentials decrypted", ndecrypted, ntotal); else g_message ("%lu out of %lu credentials encrypted and %lu re-encrypted", nencrypted, ntotal, nreencrypted); cleanup_iterator (&iterator); return 0; } /** * @brief Driver to encrypt or re-encrypt all credentials * * All plaintext credentials in the lsc_credentials table are * encrypted, all already encrypted credentials are encrypted again * using the latest key. * * @param[in] log_config Log configuration. * @param[in] database Location of manage database. * @param[in] decrypt_flag If true decrypt all credentials. * * @return 0 success, -1 error, * -2 database is wrong version, -3 database needs to be initialised * from server. */ int manage_encrypt_all_credentials (GSList *log_config, const gchar *database, gboolean decrypt_flag) { int ret; const gchar *db; db = database ? database : sql_default_database (); ret = init_manage_helper (log_config, db, 70000, NULL); assert (ret != -4); if (ret) return ret; init_manage_process (0, db); ret = encrypt_all_credentials (decrypt_flag); cleanup_manage_process (TRUE); return ret; } /* Collation. */ /** * @brief Collate two message type strings. * * A lower threat is considered less than a higher threat, so Medium is * less than High. * * @param[in] data Dummy for callback. * @param[in] one_len Length of first string. * @param[in] arg_one First string. * @param[in] two_len Length of second string. * @param[in] arg_two Second string. * * @return -1, 0 or 1 if first is less than, equal to or greater than second. */ int collate_message_type (void* data, int one_len, const void* arg_one, int two_len, const void* arg_two) { const char* one = (const char*) arg_one; const char* two = (const char*) arg_two; if (strncmp (one, "Security Hole", one_len) == 0) { if (strncmp (two, "Security Hole", two_len) == 0) return 0; return 1; } if (strncmp (two, "Security Hole", two_len) == 0) return -1; if (strncmp (one, "Security Warning", one_len) == 0) { if (strncmp (two, "Security Warning", two_len) == 0) return 0; return 1; } if (strncmp (two, "Security Warning", two_len) == 0) return -1; if (strncmp (one, "Security Note", one_len) == 0) { if (strncmp (two, "Security Note", two_len) == 0) return 0; return 1; } if (strncmp (two, "Security Note", two_len) == 0) return -1; if (strncmp (one, "Log Message", one_len) == 0) { if (strncmp (two, "Log Message", two_len) == 0) return 0; return 1; } if (strncmp (two, "Log Message", two_len) == 0) return -1; if (strncmp (one, "Debug Message", one_len) == 0) { if (strncmp (two, "Debug Message", two_len) == 0) return 0; return 1; } if (strncmp (two, "Debug Message", two_len) == 0) return -1; if (strncmp (one, "Error Message", one_len) == 0) { if (strncmp (two, "Error Message", two_len) == 0) return 0; return 1; } if (strncmp (two, "Error Message", two_len) == 0) return -1; return strncmp (one, two, MIN (one_len, two_len)); } /** * @brief Compare two number strings for collate_ip. * * @param[in] one_arg First string. * @param[in] two_arg Second string. * * @return -1, 0 or 1 if first is less than, equal to or greater than second. */ static int collate_ip_compare (const char *one_arg, const char *two_arg) { int one = atoi (one_arg); int two = atoi (two_arg); return one == two ? 0 : (one < two ? -1 : 1); } /** * @brief Collate two IP addresses. * * For example, 127.0.0.2 is less than 127.0.0.3 and 127.0.0.10. * * Only works correctly for IPv4 addresses. * * @param[in] data Dummy for callback. * @param[in] one_len Length of first IP (a string). * @param[in] arg_one First string. * @param[in] two_len Length of second IP (a string). * @param[in] arg_two Second string. * * @return -1, 0 or 1 if first is less than, equal to or greater than second. */ int collate_ip (void* data, int one_len, const void* arg_one, int two_len, const void* arg_two) { int ret, one_dot, two_dot; char one_a[4], one_b[4], one_c[4], one_d[4]; char two_a[4], two_b[4], two_c[4], two_d[4]; const char* one = (const char*) arg_one; const char* two = (const char*) arg_two; if ((sscanf (one, "%3[0-9].%3[0-9].%3[0-9].%n%3[0-9]", one_a, one_b, one_c, &one_dot, one_d) == 4) && (sscanf (two, "%3[0-9].%3[0-9].%3[0-9].%n%3[0-9]", two_a, two_b, two_c, &two_dot, two_d) == 4)) { int ret = collate_ip_compare (one_a, two_a); if (ret) return ret < 0 ? -1 : 1; ret = collate_ip_compare (one_b, two_b); if (ret) return ret < 0 ? -1 : 1; ret = collate_ip_compare (one_c, two_c); if (ret) return ret < 0 ? -1 : 1; /* Ensure that the last number is limited to digits in the arg. */ one_d[one_len - one_dot] = '\0'; two_d[two_len - two_dot] = '\0'; ret = collate_ip_compare (one_d, two_d); if (ret) return ret < 0 ? -1 : 1; return 0; } ret = strncmp (one, two, MIN (one_len, two_len)); return ret == 0 ? 0 : (ret < 0 ? -1 : 1); } /* Access control. */ /** * @brief Generate accessor for an SQL iterator. * * This convenience macro is used to generate an accessor returning a * const string pointer. * * @param[in] name Name of accessor. * @param[in] col Column number to access. */ #define DEF_ACCESS(name, col) \ const char* \ name (iterator_t* iterator) \ { \ const char *ret; \ if (iterator->done) return NULL; \ ret = iterator_string (iterator, col); \ return ret; \ } /** * @brief Initialise a task user iterator. * * @param[in] iterator Iterator. * @param[in] task Task. */ void init_task_user_iterator (iterator_t *iterator, task_t task) { init_iterator (iterator, "SELECT DISTINCT 1, resource, subject," " (SELECT name FROM users" " WHERE users.id = permissions.subject)" " FROM permissions" /* Any permission implies 'get_tasks'. */ " WHERE resource_type = 'task'" " AND resource = %llu" " AND resource_location = " G_STRINGIFY (LOCATION_TABLE) " AND subject_type = 'user'" " AND subject_location = " G_STRINGIFY (LOCATION_TABLE) ";", task); } DEF_ACCESS (task_user_iterator_name, 3); /** * @brief Initialise a task group iterator. * * @param[in] iterator Iterator. * @param[in] task Task. */ void init_task_group_iterator (iterator_t *iterator, task_t task) { init_iterator (iterator, "SELECT DISTINCT 1, resource, subject," " (SELECT name FROM groups" " WHERE groups.id = permissions.subject)," " (SELECT uuid FROM groups" " WHERE groups.id = permissions.subject)" " FROM permissions" /* Any permission implies 'get_tasks'. */ " WHERE resource_type = 'task'" " AND resource = %llu" " AND resource_location = " G_STRINGIFY (LOCATION_TABLE) " AND subject_type = 'group'" " AND subject_location = " G_STRINGIFY (LOCATION_TABLE) ";", task); } DEF_ACCESS (task_group_iterator_name, 3); DEF_ACCESS (task_group_iterator_uuid, 4); /** * @brief Initialise a task role iterator. * * @param[in] iterator Iterator. * @param[in] task Task. */ void init_task_role_iterator (iterator_t *iterator, task_t task) { init_iterator (iterator, "SELECT DISTINCT 1, resource, subject," " (SELECT name FROM roles" " WHERE roles.id = permissions.subject)," " (SELECT uuid FROM roles" " WHERE roles.id = permissions.subject)" " FROM permissions" /* Any permission implies 'get'. */ " WHERE resource_type = 'task'" " AND resource = %llu" " AND resource_location = " G_STRINGIFY (LOCATION_TABLE) " AND subject_type = 'role'", task); } DEF_ACCESS (task_role_iterator_name, 3); DEF_ACCESS (task_role_iterator_uuid, 4); /* Events and Alerts. */ /** * @brief Find a alert for a specific permission, given a UUID. * * @param[in] uuid UUID of alert. * @param[out] alert Alert return, 0 if succesfully failed to find alert. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find alert), TRUE on error. */ gboolean find_alert_with_permission (const char* uuid, alert_t* alert, const char *permission) { return find_resource_with_permission ("alert", uuid, alert, permission, 0); } /** * @brief Validate an email address. * * @param[in] address Email address. * * @return 0 success, 1 failure. */ static int validate_email (const char* address) { gchar **split, *point; assert (address); split = g_strsplit (address, "@", 0); if (split[0] == NULL || split[1] == NULL || split[2]) { g_strfreev (split); return 1; } /* Local part. */ point = split[0]; while (*point) if (isalnum (*point) || strchr ("!#$%&'*+-/=?^_`{|}~", *point) || ((*point == '.') && (point > split[0]) && point[1] && (point[1] != '.') && (point[-1] != '.'))) point++; else { g_strfreev (split); return 1; } /* Domain. */ point = split[1]; while (*point) if (isalnum (*point) || strchr ("-_", *point) /* RFC actually forbids _. */ || ((*point == '.') && (point > split[1]) && point[1] && (point[1] != '.') && (point[-1] != '.'))) point++; else { g_strfreev (split); return 1; } g_strfreev (split); return 0; } /** * @brief Validate an email address list. * * @param[in] list Comma separated list of email addresses. * * @return 0 success, 1 failure. */ static int validate_email_list (const char *list) { gchar **split, **point; assert (list); split = g_strsplit (list, ",", 0); if (split[0] == NULL) { g_strfreev (split); return 1; } point = split; while (*point) { const char *address; address = *point; while (*address && (*address == ' ')) address++; if (validate_email (address)) { g_strfreev (split); return 1; } point++; } g_strfreev (split); return 0; } /** * @brief Validate condition data for an alert. * * @param[in] name Name. * @param[in] data Data to validate. * @param[in] condition The condition. * * @return 0 on success, 1 unexpected data name, 2 syntax error in data, * 3 failed to find filter for condition, -1 internal error. */ static int validate_alert_condition_data (gchar *name, gchar* data, alert_condition_t condition) { if (condition == ALERT_CONDITION_ALWAYS) return 1; if (condition == ALERT_CONDITION_SEVERITY_AT_LEAST) { if (strcmp (name, "severity")) return 1; if (g_regex_match_simple ("^(-1(\\.0)?|[0-9](\\.[0-9])?|10(\\.0))$", data ? data : "", 0, 0) == 0) return 2; } else if (condition == ALERT_CONDITION_SEVERITY_CHANGED) { if (strcmp (name, "direction")) return 1; if (g_regex_match_simple ("^(increased|decreased|changed)$", data ? data : "", 0, 0) == 0) return 2; } else if (condition == ALERT_CONDITION_FILTER_COUNT_AT_LEAST) { if (strcmp (name, "filter_id") == 0) { filter_t filter; if (data == NULL) return 3; filter = 0; if (find_filter_with_permission (data, &filter, "get_filters")) return -1; if (filter == 0) return 3; return 0; } if (strcmp (name, "count")) return 1; } else if (condition == ALERT_CONDITION_FILTER_COUNT_CHANGED) { if (strcmp (name, "filter_id") == 0) { filter_t filter; if (data == NULL) return 3; filter = 0; if (find_filter_with_permission (data, &filter, "get_filters")) return -1; if (filter == 0) return 3; return 0; } if (strcmp (name, "direction") && strcmp (name, "count")) return 1; if (strcmp (name, "direction") == 0 && g_regex_match_simple ("^(increased|decreased|changed)$", data ? data : "", 0, 0) == 0) return 2; } return 0; } /** * @brief Validate method data for the SCP method. * * @param[in] method Method that data corresponds to. * @param[in] name Name of data. * @param[in] data The data. * * @return 0 valid, 15 error in SCP host, 17 failed to find report format for * SCP method, 18 error in SCP username, 19 error in SCP path, -1 error. */ int validate_scp_data (alert_method_t method, const gchar *name, gchar **data) { if (method == ALERT_METHOD_SCP && strcmp (name, "scp_username") == 0) { if (strlen (*data) == 0) return 18; if (strchr (*data, '@') || strchr (*data, ':')) return 18; } if (method == ALERT_METHOD_SCP && strcmp (name, "scp_path") == 0) { if (strlen (*data) == 0) return 19; } if (method == ALERT_METHOD_SCP && strcmp (name, "scp_host") == 0) { int type; gchar *stripped; stripped = g_strstrip (g_strdup (*data)); type = openvas_get_host_type (stripped); g_free (stripped); if ((type != HOST_TYPE_IPV4) && (type != HOST_TYPE_IPV6) && (type != HOST_TYPE_NAME)) return 15; } if (method == ALERT_METHOD_SCP && strcmp (name, "scp_report_format") == 0) { report_format_t report_format; report_format = 0; if (find_report_format_with_permission (*data, &report_format, "get_report_formats")) return -1; if (report_format == 0) return 17; } return 0; } /** * @brief Validate method data for the Send method. * * @param[in] method Method that data corresponds to. * @param[in] name Name of data. * @param[in] data The data. * * @return 0 valid, 12 error in Send host, 13 error in Send port, 14 failed * to find report format for Send method, -1 error. */ int validate_send_data (alert_method_t method, const gchar *name, gchar **data) { if (method == ALERT_METHOD_SEND && strcmp (name, "send_host") == 0) { int type; gchar *stripped; stripped = g_strstrip (g_strdup (*data)); type = openvas_get_host_type (stripped); g_free (stripped); if ((type != HOST_TYPE_IPV4) && (type != HOST_TYPE_IPV6) && (type != HOST_TYPE_NAME)) return 12; } if (method == ALERT_METHOD_SEND && strcmp (name, "send_port") == 0) { int port; gchar *stripped, *end; stripped = g_strstrip (g_strdup (*data)); port = strtol (stripped, &end, 10); g_free (stripped); if (*end != '\0') return 13; g_free (*data); *data = g_strdup_printf ("%i", port); } if (method == ALERT_METHOD_SEND && strcmp (name, "send_report_format") == 0) { report_format_t report_format; report_format = 0; if (find_report_format_with_permission (*data, &report_format, "get_report_formats")) return -1; if (report_format == 0) return 14; } return 0; } /** * @brief Create an alert. * * @param[in] name Name of alert. * @param[in] comment Comment on alert. * @param[in] filter_id Filter. * @param[in] event Type of event. * @param[in] event_data Type-specific event data. * @param[in] condition Event condition. * @param[in] condition_data Condition-specific data. * @param[in] method Escalation method. * @param[in] method_data Data for escalation method. * @param[out] alert Created alert on success. * * @return 0 success, 1 escalation exists already, 2 validation of email failed, * 3 failed to find filter, 4 type must be "result" if specified, * 5 unexpected condition data name, 6 syntax error in condition data, * 7 email subject too long, 8 email message too long, 9 failed to find * filter for condition, 12 error in Send host, 13 error in Send port, * 14 failed to find report format for Send method, 15 error in * SCP host, 17 failed to find report format for SCP method, 18 error * in SCP username, 99 permission denied, -1 error. */ int create_alert (const char* name, const char* comment, const char* filter_id, event_t event, GPtrArray* event_data, alert_condition_t condition, GPtrArray* condition_data, alert_method_t method, GPtrArray* method_data, alert_t *alert) { int index; gchar *item, *quoted_comment; gchar *quoted_name; filter_t filter; assert (current_credentials.uuid); sql_begin_immediate (); if (user_may ("create_alert") == 0) { sql ("ROLLBACK;"); return 99; } filter = 0; if (filter_id && strcmp (filter_id, "0")) { char *type; if (find_filter_with_permission (filter_id, &filter, "get_filters")) { sql ("ROLLBACK;"); return -1; } if (filter == 0) { sql ("ROLLBACK;"); return 3; } /* Filter type must be result if specified. */ type = sql_string ("SELECT type FROM filters WHERE id = %llu;", filter); if (type && strcasecmp (type, "result")) { free (type); sql ("ROLLBACK;"); return 4; } free (type); } if (resource_with_name_exists (name, "alert", 0)) { sql ("ROLLBACK;"); return 1; } quoted_name = sql_quote (name); quoted_comment = sql_quote (comment ?: ""); sql ("INSERT INTO alerts (uuid, owner, name, comment, event, condition," " method, filter, creation_time, modification_time)" " VALUES (make_uuid ()," " (SELECT id FROM users WHERE users.uuid = '%s')," " '%s', '%s', %i, %i, %i, %llu, m_now (), m_now ());", current_credentials.uuid, quoted_name, quoted_comment, event, condition, method, filter); g_free (quoted_comment); g_free (quoted_name); *alert = sql_last_insert_id (); index = 0; while ((item = (gchar*) g_ptr_array_index (condition_data, index++))) { int validation_result; gchar *name = sql_quote (item); gchar *data = sql_quote (item + strlen (item) + 1); validation_result = validate_alert_condition_data (name, data, condition); if (validation_result) { g_free (name); g_free (data); sql ("ROLLBACK;"); switch (validation_result) { case 1: return 5; case 2: return 6; case 3: return 9; default: return -1; } } sql ("INSERT INTO alert_condition_data (alert, name, data)" " VALUES (%llu, '%s', '%s');", *alert, name, data); g_free (name); g_free (data); } index = 0; while ((item = (gchar*) g_ptr_array_index (event_data, index++))) { gchar *name = sql_quote (item); gchar *data = sql_quote (item + strlen (item) + 1); sql ("INSERT INTO alert_event_data (alert, name, data)" " VALUES (%llu, '%s', '%s');", *alert, name, data); g_free (name); g_free (data); } index = 0; while ((item = (gchar*) g_ptr_array_index (method_data, index++))) { int ret; gchar *name, *data; name = sql_quote (item); data = sql_quote (item + strlen (item) + 1); if (method == ALERT_METHOD_EMAIL && strcmp (name, "to_address") == 0 && validate_email_list (data)) { g_free (name); g_free (data); sql ("ROLLBACK;"); return 2; } if (method == ALERT_METHOD_EMAIL && strcmp (name, "from_address") == 0 && validate_email (data)) { g_free (name); g_free (data); sql ("ROLLBACK;"); return 2; } if (method == ALERT_METHOD_EMAIL && strcmp (name, "subject") == 0 && strlen (data) > 80) { g_free (name); g_free (data); sql ("ROLLBACK;"); return 7; } if (method == ALERT_METHOD_EMAIL && strcmp (name, "message") == 0 && strlen (data) > 1000) { g_free (name); g_free (data); sql ("ROLLBACK;"); return 8; } ret = validate_scp_data (method, name, &data); if (ret) { g_free (name); g_free (data); sql ("ROLLBACK;"); return ret; } ret = validate_send_data (method, name, &data); if (ret) { g_free (name); g_free (data); sql ("ROLLBACK;"); return ret; } sql ("INSERT INTO alert_method_data (alert, name, data)" " VALUES (%llu, '%s', '%s');", *alert, name, data); g_free (name); g_free (data); } sql ("COMMIT;"); return 0; } /** * @brief Create an alert from an existing alert. * * @param[in] name Name of new alert. NULL to copy from existing. * @param[in] comment Comment on new alert. NULL to copy from * existing. * @param[in] alert_id UUID of existing alert. * @param[out] new_alert New alert. * * @return 0 success, 1 alert exists already, 2 failed to find existing * alert, 99 permission denied, -1 error. */ int copy_alert (const char* name, const char* comment, const char* alert_id, alert_t* new_alert) { int ret; alert_t new, old; assert (current_credentials.uuid); if (alert_id == NULL) return -1; sql_begin_immediate (); ret = copy_resource_lock ("alert", name, comment, alert_id, "event, condition, method, filter", 1, &new, &old); if (ret) { sql ("ROLLBACK;"); return ret; } /* Copy the alert condition data */ sql ("INSERT INTO alert_condition_data (alert, name, data)" " SELECT %llu, name, data FROM alert_condition_data" " WHERE alert = %llu;", new, old); /* Copy the alert event data */ sql ("INSERT INTO alert_event_data (alert, name, data)" " SELECT %llu, name, data FROM alert_event_data" " WHERE alert = %llu;", new, old); /* Copy the alert method data */ sql ("INSERT INTO alert_method_data (alert, name, data)" " SELECT %llu, name, data FROM alert_method_data" " WHERE alert = %llu;", new, old); sql ("COMMIT;"); if (new_alert) *new_alert = new; return 0; } /** * @brief Modify an alert. * * @param[in] alert_id UUID of alert. * @param[in] name Name of alert. * @param[in] comment Comment on alert. * @param[in] filter_id Filter. * @param[in] event Type of event. * @param[in] event_data Type-specific event data. * @param[in] condition Event condition. * @param[in] condition_data Condition-specific data. * @param[in] method Escalation method. * @param[in] method_data Data for escalation method. * * @return 0 success, 1 failed to find alert, 2 alert with new name exists, * 3 alert_id required, 4 failed to find filter, 5 filter type must be * result if specified, 6 Provided email address not valid, * 7 unexpected condition data name, 8 syntax error in condition data, * 9 email subject too long, 10 email message too long, 11 failed to * find filter for condition, 12 error in Send host, 13 error in Send * port, 14 failed to find report format for Send method, * 99 permission denied, -1 internal error. */ int modify_alert (const char *alert_id, const char *name, const char *comment, const char *filter_id, event_t event, GPtrArray *event_data, alert_condition_t condition, GPtrArray *condition_data, alert_method_t method, GPtrArray *method_data) { int index; gchar *quoted_name, *quoted_comment, *item; alert_t alert; filter_t filter; if (alert_id == NULL) return 3; sql_begin_immediate (); assert (current_credentials.uuid); if (user_may ("modify_alert") == 0) { sql ("ROLLBACK;"); return 99; } alert = 0; if (find_alert_with_permission (alert_id, &alert, "modify_alert")) { sql ("ROLLBACK;"); return -1; } if (alert == 0) { sql ("ROLLBACK;"); return 1; } /* Check whether an alert with the same name exists already. */ if (resource_with_name_exists (name, "alert", alert)) { sql ("ROLLBACK;"); return 2; } /* Check filter. */ filter = 0; if (filter_id && strcmp (filter_id, "0")) { char *type; if (find_filter_with_permission (filter_id, &filter, "get_filters")) { sql ("ROLLBACK;"); return -1; } if (filter == 0) { sql ("ROLLBACK;"); return 4; } /* Filter type must be report if specified. */ type = sql_string ("SELECT type FROM filters WHERE id = %llu;", filter); if (type && strcasecmp (type, "result")) { free (type); sql ("ROLLBACK;"); return 5; } free (type); } quoted_name = sql_quote (name ?: ""); quoted_comment = sql_quote (comment ? comment : ""); sql ("UPDATE alerts SET" " name = '%s'," " comment = '%s'," " filter = %llu," " modification_time = m_now ()" " WHERE id = %llu;", quoted_name, quoted_comment, filter, alert); g_free (quoted_comment); g_free (quoted_name); /* Modify alert event */ if (event != EVENT_ERROR) { sql ("UPDATE alerts set event = %i WHERE id = %llu", event, alert); sql ("DELETE FROM alert_event_data WHERE alert = %llu", alert); index = 0; while ((item = (gchar*) g_ptr_array_index (event_data, index++))) { gchar *name = sql_quote (item); gchar *data = sql_quote (item + strlen (item) + 1); sql ("INSERT INTO alert_event_data (alert, name, data)" " VALUES (%llu, '%s', '%s');", alert, name, data); g_free (name); g_free (data); } } /* Modify alert condition */ if (condition != ALERT_CONDITION_ERROR) { sql ("UPDATE alerts set condition = %i WHERE id = %llu", condition, alert); sql ("DELETE FROM alert_condition_data WHERE alert = %llu", alert); index = 0; while ((item = (gchar*) g_ptr_array_index (condition_data, index++))) { int validation_result; gchar *name = sql_quote (item); gchar *data = sql_quote (item + strlen (item) + 1); validation_result = validate_alert_condition_data (name, data, condition); if (validation_result) { g_free (name); g_free (data); sql ("ROLLBACK;"); switch (validation_result) { case 1: return 7; case 2: return 8; case 3: return 11; default: return -1; } } sql ("INSERT INTO alert_condition_data (alert, name, data)" " VALUES (%llu, '%s', '%s');", alert, name, data); g_free (name); g_free (data); } } /* Modify alert method */ if (method != ALERT_METHOD_ERROR) { sql ("UPDATE alerts set method = %i WHERE id = %llu", method, alert); sql ("DELETE FROM alert_method_data WHERE alert = %llu", alert); index = 0; while ((item = (gchar*) g_ptr_array_index (method_data, index++))) { int ret; gchar *name, *data; name = sql_quote (item); data = sql_quote (item + strlen (item) + 1); if (method == ALERT_METHOD_EMAIL && strcmp (name, "to_address") == 0 && validate_email_list (data)) { g_free (name); g_free (data); sql ("ROLLBACK;"); return 6; } if (method == ALERT_METHOD_EMAIL && strcmp (name, "from_address") == 0 && validate_email (data)) { g_free (name); g_free (data); sql ("ROLLBACK;"); return 6; } if (method == ALERT_METHOD_EMAIL && strcmp (name, "subject") == 0 && strlen (data) > 80) { g_free (name); g_free (data); sql ("ROLLBACK;"); return 9; } if (method == ALERT_METHOD_EMAIL && strcmp (name, "message") == 0 && strlen (data) > 1000) { g_free (name); g_free (data); sql ("ROLLBACK;"); return 10; } ret = validate_scp_data (method, name, &data); if (ret) { g_free (name); g_free (data); sql ("ROLLBACK;"); return ret; } ret = validate_send_data (method, name, &data); if (ret) { g_free (name); g_free (data); sql ("ROLLBACK;"); return ret; } sql ("INSERT INTO alert_method_data (alert, name, data)" " VALUES (%llu, '%s', '%s');", alert, name, data); g_free (name); g_free (data); } } sql ("COMMIT;"); return 0; } /** * @brief Delete an alert. * * @param[in] alert_id UUID of alert. * @param[in] ultimate Whether to remove entirely, or to trashcan. * * @return 0 success, 1 fail because a task refers to the alert, 2 failed * to find target, 99 permission denied, -1 error. */ int delete_alert (const char *alert_id, int ultimate) { alert_t alert = 0; sql_begin_immediate (); if (user_may ("delete_alert") == 0) { sql ("ROLLBACK;"); return 99; } if (find_alert_with_permission (alert_id, &alert, "delete_alert")) { sql ("ROLLBACK;"); return -1; } if (alert == 0) { if (find_trash ("alert", alert_id, &alert)) { sql ("ROLLBACK;"); return -1; } if (alert == 0) { sql ("ROLLBACK;"); return 2; } if (ultimate == 0) { /* It's already in the trashcan. */ sql ("COMMIT;"); return 0; } /* Check if it's in use by a task in the trashcan. */ if (sql_int ("SELECT count(*) FROM task_alerts" " WHERE alert = %llu" " AND alert_location = " G_STRINGIFY (LOCATION_TRASH) ";", alert)) { sql ("ROLLBACK;"); return 1; } permissions_set_orphans ("alert", alert, LOCATION_TRASH); tags_set_orphans ("alert", alert, LOCATION_TRASH); sql ("DELETE FROM alert_condition_data_trash WHERE alert = %llu;", alert); sql ("DELETE FROM alert_event_data_trash WHERE alert = %llu;", alert); sql ("DELETE FROM alert_method_data_trash WHERE alert = %llu;", alert); sql ("DELETE FROM alerts_trash WHERE id = %llu;", alert); sql ("COMMIT;"); return 0; } if (ultimate == 0) { alert_t trash_alert; if (sql_int ("SELECT count(*) FROM task_alerts" " WHERE alert = %llu" " AND alert_location = " G_STRINGIFY (LOCATION_TABLE) " AND (SELECT hidden < 2 FROM tasks" " WHERE id = task_alerts.task);", alert)) { sql ("ROLLBACK;"); return 1; } sql ("INSERT INTO alerts_trash" " (uuid, owner, name, comment, event, condition, method, filter," " filter_location, creation_time, modification_time)" " SELECT uuid, owner, name, comment, event, condition, method," " filter, " G_STRINGIFY (LOCATION_TABLE) ", creation_time," " m_now ()" " FROM alerts WHERE id = %llu;", alert); trash_alert = sql_last_insert_id (); sql ("INSERT INTO alert_condition_data_trash" " (alert, name, data)" " SELECT %llu, name, data" " FROM alert_condition_data WHERE alert = %llu;", trash_alert, alert); sql ("INSERT INTO alert_event_data_trash" " (alert, name, data)" " SELECT %llu, name, data" " FROM alert_event_data WHERE alert = %llu;", trash_alert, alert); sql ("INSERT INTO alert_method_data_trash" " (alert, name, data)" " SELECT %llu, name, data" " FROM alert_method_data WHERE alert = %llu;", trash_alert, alert); /* Update the location of the alert in any trashcan tasks. */ sql ("UPDATE task_alerts" " SET alert = %llu," " alert_location = " G_STRINGIFY (LOCATION_TRASH) " WHERE alert = %llu" " AND alert_location = " G_STRINGIFY (LOCATION_TABLE) ";", trash_alert, alert); permissions_set_locations ("alert", alert, trash_alert, LOCATION_TRASH); tags_set_locations ("alert", alert, trash_alert, LOCATION_TRASH); } else if (sql_int ("SELECT count(*) FROM task_alerts" " WHERE alert = %llu" " AND alert_location = " G_STRINGIFY (LOCATION_TABLE) ";", alert)) { sql ("ROLLBACK;"); return 1; } else { permissions_set_orphans ("alert", alert, LOCATION_TABLE); tags_set_orphans ("alert", alert, LOCATION_TABLE); } sql ("DELETE FROM alert_condition_data WHERE alert = %llu;", alert); sql ("DELETE FROM alert_event_data WHERE alert = %llu;", alert); sql ("DELETE FROM alert_method_data WHERE alert = %llu;", alert); sql ("DELETE FROM alerts WHERE id = %llu;", alert); sql ("COMMIT;"); return 0; } /** * @brief Return the UUID of an alert. * * @param[in] alert Alert. * * @return UUID of alert. */ char * alert_uuid (alert_t alert) { return sql_string ("SELECT uuid FROM alerts WHERE id = %llu;", alert); } /** * @brief Return the name of an alert. * * @param[in] alert Alert. * * @return Name of alert. */ char * alert_name (alert_t alert) { return sql_string ("SELECT name FROM alerts WHERE id = %llu;", alert); } /** * @brief Return the UUID of the filter of an alert. * * @param[in] alert Alert. * * @return UUID if there's a filter, else NULL. */ char * alert_filter_id (alert_t alert) { return sql_string ("SELECT" " (CASE WHEN (SELECT filter IS NULL OR filter = 0" " FROM alerts WHERE id = %llu)" " THEN NULL" " ELSE (SELECT uuid FROM filters" " WHERE id = (SELECT filter FROM alerts" " WHERE id = %llu))" " END);", alert, alert); } /** * @brief Return the condition associated with an alert. * * @param[in] alert Alert. * * @return Condition. */ static alert_condition_t alert_condition (alert_t alert) { return sql_int ("SELECT condition FROM alerts WHERE id = %llu;", alert); } /** * @brief Return the method associated with an alert. * * @param[in] alert Alert. * * @return Method. */ static alert_method_t alert_method (alert_t alert) { return sql_int ("SELECT method FROM alerts WHERE id = %llu;", alert); } /** * @brief Filter columns for alert iterator. */ #define ALERT_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "event", "condition", "method", \ "filter", NULL } /** * @brief Alert iterator columns. */ #define ALERT_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS (alerts), \ { "event", NULL }, \ { "condition", NULL}, \ { "method", NULL }, \ { "filter", NULL}, \ { G_STRINGIFY (LOCATION_TABLE), NULL}, \ { NULL, NULL } \ } /** * @brief Alert iterator columns for trash case. */ #define ALERT_ITERATOR_TRASH_COLUMNS \ { \ GET_ITERATOR_COLUMNS (alerts_trash), \ { "event", NULL }, \ { "condition", NULL}, \ { "method", NULL }, \ { "filter", NULL}, \ { "filter_location", NULL}, \ { NULL, NULL } \ } /** * @brief Count the number of alerts. * * @param[in] get GET params. * * @return Total number of alerts filtered set. */ int alert_count (const get_data_t *get) { static const char *filter_columns[] = ALERT_ITERATOR_FILTER_COLUMNS; static column_t columns[] = ALERT_ITERATOR_COLUMNS; static column_t trash_columns[] = ALERT_ITERATOR_TRASH_COLUMNS; return count ("alert", get, columns, trash_columns, filter_columns, 0, 0, 0, TRUE); } /** * @brief Return whether a alert is in use by a task. * * @param[in] alert Alert. * * @return 1 if in use, else 0. */ int alert_in_use (alert_t alert) { return !!sql_int ("SELECT count (*) FROM task_alerts WHERE alert = %llu;", alert); } /** * @brief Return whether a trashcan alert is in use by a task. * * @param[in] alert Alert. * * @return 1 if in use, else 0. */ int trash_alert_in_use (alert_t alert) { return !!sql_int ("SELECT count(*) FROM task_alerts" " WHERE alert = %llu" " AND alert_location = " G_STRINGIFY (LOCATION_TRASH), alert); } /** * @brief Return whether a alert is writable. * * @param[in] alert Alert. * * @return 1 if writable, else 0. */ int alert_writable (alert_t alert) { return 1; } /** * @brief Return whether a trashcan alert is writable. * * @param[in] alert Alert. * * @return 1 if writable, else 0. */ int trash_alert_writable (alert_t alert) { return 1; } /** * @brief Initialise an alert iterator, including observed alerts. * * @param[in] iterator Iterator. * @param[in] get GET data. * * @return 0 success, 1 failed to find alert, failed to find filter (filt_id), * -1 error. */ int init_alert_iterator (iterator_t* iterator, const get_data_t *get) { static const char *filter_columns[] = ALERT_ITERATOR_FILTER_COLUMNS; static column_t columns[] = ALERT_ITERATOR_COLUMNS; static column_t trash_columns[] = ALERT_ITERATOR_TRASH_COLUMNS; return init_get_iterator (iterator, "alert", get, columns, trash_columns, filter_columns, 0, NULL, NULL, TRUE); } /** * @brief Return the event from an alert iterator. * * @param[in] iterator Iterator. * * @return Event of the alert or NULL if iteration is complete. */ int alert_iterator_event (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT); return ret; } /** * @brief Return the condition from an alert iterator. * * @param[in] iterator Iterator. * * @return Condition of the alert or NULL if iteration is complete. */ int alert_iterator_condition (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 1); return ret; } /** * @brief Return the method from an alert iterator. * * @param[in] iterator Iterator. * * @return Method of the alert or NULL if iteration is complete. */ int alert_iterator_method (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 2); return ret; } /** * @brief Return the filter from an alert iterator. * * @param[in] iterator Iterator. * * @return Filter of the alert or NULL if iteration is complete. */ filter_t alert_iterator_filter (iterator_t* iterator) { if (iterator->done) return -1; return (filter_t) iterator_int64 (iterator, GET_ITERATOR_COLUMN_COUNT + 3); } /** * @brief Return the filter UUID from an alert iterator. * * @param[in] iterator Iterator. * * @return UUID of filter of the alert or NULL if iteration is complete. */ char * alert_iterator_filter_uuid (iterator_t* iterator) { filter_t filter; if (iterator->done) return NULL; filter = alert_iterator_filter (iterator); if (filter) { if (iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 4) == LOCATION_TABLE) return filter_uuid (filter); return trash_filter_uuid (filter); } return NULL; } /** * @brief Return the filter name from an alert iterator. * * @param[in] iterator Iterator. * * @return Name of filter of the alert or NULL if iteration is complete. */ char * alert_iterator_filter_name (iterator_t* iterator) { filter_t filter; if (iterator->done) return NULL; filter = alert_iterator_filter (iterator); if (filter) { if (iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 4) == LOCATION_TABLE) return filter_name (filter); return trash_filter_name (filter); } return NULL; } /** * @brief Return the location of an alert iterator filter. * * @param[in] iterator Iterator. * * @return 0 in table, 1 in trash. */ int alert_iterator_filter_trash (iterator_t* iterator) { if (iterator->done) return 0; if (alert_iterator_filter (iterator) && (iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 4) == LOCATION_TRASH)) return 1; return 0; } /** * @brief Return the filter readable state from an alert iterator. * * @param[in] iterator Iterator. * * @return Whether filter is readable. */ int alert_iterator_filter_readable (iterator_t* iterator) { filter_t filter; if (iterator->done) return 0; filter = alert_iterator_filter (iterator); if (filter) { char *uuid; uuid = alert_iterator_filter_uuid (iterator); if (uuid) { int readable; readable = user_has_access_uuid ("filter", uuid, "get_filters", iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 4) == LOCATION_TRASH); free (uuid); return readable; } } return 0; } /** * @brief Initialise an alert data iterator. * * @param[in] iterator Iterator. * @param[in] alert Alert. * @param[in] trash Whether to iterate over trashcan alert data. * @param[in] table Type of data: "condition", "event" or "method", * corresponds to substring of the table to select * from. */ void init_alert_data_iterator (iterator_t *iterator, alert_t alert, int trash, const char *table) { init_iterator (iterator, "SELECT name, data FROM alert_%s_data%s" " WHERE alert = %llu;", table, trash ? "_trash" : "", alert); } /** * @brief Return the name from an alert data iterator. * * @param[in] iterator Iterator. * * @return Name of the alert data or NULL if iteration is complete. */ const char* alert_data_iterator_name (iterator_t* iterator) { const char *ret; if (iterator->done) return NULL; ret = iterator_string (iterator, 0); return ret; } /** * @brief Return the data from an alert data iterator. * * @param[in] iterator Iterator. * * * @return Data of the alert data or NULL if iteration is complete. */ const char* alert_data_iterator_data (iterator_t* iterator) { const char *ret; if (iterator->done) return NULL; ret = iterator_string (iterator, 1); return ret; } /** * @brief Return data associated with an alert. * * @param[in] alert Alert. * @param[in] type Type of data: "condition", "event" or "method". * @param[in] name Name of the data. * * @return Freshly allocated data if it exists, else NULL. */ char * alert_data (alert_t alert, const char *type, const char *name) { gchar *quoted_name; char *data; assert (strcmp (type, "condition") == 0 || strcmp (type, "event") == 0 || strcmp (type, "method") == 0); quoted_name = sql_quote (name); data = sql_string ("SELECT data FROM alert_%s_data" " WHERE alert = %llu AND name = '%s';", type, alert, quoted_name); g_free (quoted_name); return data; } /** * @brief Initialise a task alert iterator. * * @param[in] iterator Iterator. * @param[in] task Task. * @param[in] event Event. */ void init_task_alert_iterator (iterator_t* iterator, task_t task, event_t event) { gchar *owned_clause; get_data_t get; array_t *permissions; get.trash = 0; permissions = make_array (); array_add (permissions, g_strdup ("get_alerts")); owned_clause = where_owned ("alert", &get, 0, "any", 0, permissions); array_free (permissions); if (event) init_iterator (iterator, "SELECT alerts.id, alerts.uuid, alerts.name" " FROM alerts, task_alerts" " WHERE task_alerts.task = %llu AND event = %i" " AND task_alerts.alert = alerts.id" " AND %s;", task, event, owned_clause); else init_iterator (iterator, "SELECT alerts.id, alerts.uuid, alerts.name" " FROM alerts, task_alerts" " WHERE task_alerts.task = %llu" " AND task_alerts.alert = alerts.id" " AND %s;", task, owned_clause); g_free (owned_clause); } /** * @brief Get the alert from a task alert iterator. * * @param[in] iterator Iterator. * * @return alert. */ alert_t task_alert_iterator_alert (iterator_t* iterator) { if (iterator->done) return 0; return (task_t) iterator_int64 (iterator, 0); } /** * @brief Get the UUID from a task alert iterator. * * @param[in] iterator Iterator. * * @return UUID, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (task_alert_iterator_uuid, 1); /** * @brief Get the name from a task alert iterator. * * @param[in] iterator Iterator. * * @return Name, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (task_alert_iterator_name, 2); /** * @brief Send an email. * * @param[in] to_address Address to send to. * @param[in] from_address Address to send to. * @param[in] subject Subject of email. * @param[in] body Body of email. * @param[in] attachment Attachment in line broken base64, or NULL. * @param[in] attachment_type Attachment MIME type, or NULL. * @param[in] attachment_name Base file name of the attachment, or NULL. * @param[in] attachment_extension Attachment file extension, or NULL. * * @return 0 success, -1 error. */ static int email (const char *to_address, const char *from_address, const char *subject, const char *body, const gchar *attachment, const char *attachment_type, const char *attachment_name, const char *attachment_extension) { int ret, content_fd, to_fd; gchar *command; GError *error = NULL; char content_file_name[] = "/tmp/openvasmd-content-XXXXXX"; char to_file_name[] = "/tmp/openvasmd-to-XXXXXX"; FILE *content_file; content_fd = mkstemp (content_file_name); if (content_fd == -1) { g_warning ("%s: mkstemp: %s\n", __FUNCTION__, strerror (errno)); return -1; } tracef (" EMAIL to %s from %s subject: %s, body: %s", to_address, from_address, subject, body); content_file = fdopen (content_fd, "w"); if (content_file == NULL) { g_warning ("%s: %s", __FUNCTION__, strerror (errno)); close (content_fd); return -1; } if (fprintf (content_file, "To: %s\n" "From: %s\n" "Subject: %s\n" "%s%s%s" "\n" "%s" "%s\n", to_address, from_address ? from_address : "automated@openvas.org", subject, (attachment ? "MIME-Version: 1.0\n" "Content-Type: multipart/mixed;" " boundary=\"" : ""), /* @todo Future callers may give email containing this string. */ (attachment ? "=-=-=-=-=" : ""), (attachment ? "\"\n" : ""), (attachment ? "--=-=-=-=-=\n" "Content-Type: text/plain; charset=utf-8\n" "Content-Transfer-Encoding: 8bit\n" "Content-Disposition: inline\n" "\n" : ""), body) < 0) { g_warning ("%s: output error", __FUNCTION__); fclose (content_file); return -1; } if (attachment) { int len; if (fprintf (content_file, "--=-=-=-=-=\n" "Content-Type: %s\n" "Content-Disposition: attachment;" " filename=\"%s.%s\"\n" "Content-Transfer-Encoding: base64\n" "Content-Description: OpenVAS report\n\n", attachment_type, attachment_name, attachment_extension) < 0) { g_warning ("%s: output error", __FUNCTION__); fclose (content_file); return -1; } len = strlen (attachment); while (len) if (len > 72) { if (fprintf (content_file, "%.*s\n", 72, attachment) < 0) { g_warning ("%s: output error", __FUNCTION__); fclose (content_file); return -1; } attachment += 72; len -= 72; } else { if (fprintf (content_file, "%s\n", attachment) < 0) { g_warning ("%s: output error", __FUNCTION__); fclose (content_file); return -1; } break; } if (fprintf (content_file, "--=-=-=-=-=--\n") < 0) { g_warning ("%s: output error", __FUNCTION__); fclose (content_file); return -1; } } while (fflush (content_file)) if (errno == EINTR) continue; else { g_warning ("%s", strerror (errno)); fclose (content_file); return -1; } to_fd = mkstemp (to_file_name); if (to_fd == -1) { g_warning ("%s: mkstemp: %s\n", __FUNCTION__, strerror (errno)); fclose (content_file); return -1; } g_file_set_contents (to_file_name, to_address, strlen (to_address), &error); if (error) { g_warning ("%s", error->message); g_error_free (error); fclose (content_file); close (to_fd); return -1; } command = g_strdup_printf ("xargs -a %s -I XXX" " /usr/sbin/sendmail XXX < %s" " > /dev/null 2>&1", to_file_name, content_file_name); tracef (" command: %s\n", command); ret = system (command); if ((ret == -1) || WEXITSTATUS (ret)) { g_warning ("%s: system failed with ret %i, %i, %s\n", __FUNCTION__, ret, WEXITSTATUS (ret), command); g_free (command); fclose (content_file); close (to_fd); unlink (content_file_name); unlink (to_file_name); return -1; } g_free (command); fclose (content_file); close (to_fd); unlink (content_file_name); unlink (to_file_name); return 0; } /** * @brief GET an HTTP resource. * * @param[in] url URL. * * @return 0 success, -1 error. */ static int http_get (const char *url) { int ret; gchar *standard_out = NULL; gchar *standard_err = NULL; gint exit_status; gchar **cmd; tracef (" HTTP_GET %s", url); cmd = (gchar **) g_malloc (5 * sizeof (gchar *)); cmd[0] = g_strdup ("/usr/bin/wget"); cmd[1] = g_strdup ("-O"); cmd[2] = g_strdup ("-"); cmd[3] = g_strdup (url); cmd[4] = NULL; g_debug ("%s: Spawning in /tmp/: %s %s %s %s\n", __FUNCTION__, cmd[0], cmd[1], cmd[2], cmd[3]); if ((g_spawn_sync ("/tmp/", cmd, NULL, /* Environment. */ G_SPAWN_SEARCH_PATH, NULL, /* Setup function. */ NULL, &standard_out, &standard_err, &exit_status, NULL) == FALSE) || (WIFEXITED (exit_status) == 0) || WEXITSTATUS (exit_status)) { g_debug ("%s: wget failed: %d (WIF %i, WEX %i)", __FUNCTION__, exit_status, WIFEXITED (exit_status), WEXITSTATUS (exit_status)); g_debug ("%s: stdout: %s\n", __FUNCTION__, standard_out); g_debug ("%s: stderr: %s\n", __FUNCTION__, standard_err); ret = -1; } else { if (strlen (standard_out) > 80) standard_out[80] = '\0'; g_debug (" HTTP_GET %s: %s", url, standard_out); ret = 0; } g_free (cmd[0]); g_free (cmd[1]); g_free (cmd[2]); g_free (cmd[3]); g_free (cmd[4]); g_free (cmd); g_free (standard_out); g_free (standard_err); return ret; } /** * @brief Send a report to a host via TCP. * * @param[in] host Address of host. * @param[in] port Port of host. * @param[in] report Report that should be sent. * @param[in] report_size Size of the report. * * @return 0 success, -1 error. */ static int run_alert_script (const char *alert_id, const char *command_args, const char *report, int report_size) { gchar *script, *script_dir; gchar *report_file; char report_dir[] = "/tmp/openvasmd_alert_XXXXXX"; GError *error; if (report == NULL) return -1; tracef ("report: %s", report); /* Setup files. */ if (mkdtemp (report_dir) == NULL) { g_warning ("%s: mkdtemp failed\n", __FUNCTION__); return -1; } report_file = g_strdup_printf ("%s/report", report_dir); error = NULL; g_file_set_contents (report_file, report, report_size, &error); if (error) { g_warning ("%s", error->message); g_error_free (error); g_free (report_file); return -1; } /* Setup file names. */ script_dir = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "global_alert_methods", alert_id, NULL); script = g_build_filename (script_dir, "alert", NULL); if (!g_file_test (script, G_FILE_TEST_EXISTS)) { g_warning ("%s: Failed to find alert script: %s\n", __FUNCTION__, script); g_free (report_file); g_free (script); g_free (script_dir); return -1; } { gchar *command; char *previous_dir; int ret; /* Change into the script directory. */ /** @todo NULL arg is glibc extension. */ previous_dir = getcwd (NULL, 0); if (previous_dir == NULL) { g_warning ("%s: Failed to getcwd: %s\n", __FUNCTION__, strerror (errno)); g_free (report_file); g_free (previous_dir); g_free (script); g_free (script_dir); return -1; } if (chdir (script_dir)) { g_warning ("%s: Failed to chdir: %s\n", __FUNCTION__, strerror (errno)); g_free (report_file); g_free (previous_dir); g_free (script); g_free (script_dir); return -1; } g_free (script_dir); /* Call the script. */ command = g_strdup_printf ("%s %s %s" " > /dev/null 2> /dev/null", script, command_args, report_file); g_free (script); g_debug (" command: %s\n", command); if (geteuid () == 0) { pid_t pid; struct passwd *nobody; /* Run the command with lower privileges in a fork. */ nobody = getpwnam ("nobody"); if ((nobody == NULL) || chown (report_dir, nobody->pw_uid, nobody->pw_gid) || chown (report_file, nobody->pw_uid, nobody->pw_gid)) { g_warning ("%s: Failed to set permissions for user nobody: %s\n", __FUNCTION__, strerror (errno)); g_free (previous_dir); g_free (report_file); g_free (command); return -1; } g_free (report_file); pid = fork (); switch (pid) { case 0: { /* Child. Drop privileges, run command, exit. */ cleanup_manage_process (FALSE); if (setgroups (0,NULL)) { g_warning ("%s (child): setgroups: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } if (setgid (nobody->pw_gid)) { g_warning ("%s (child): setgid: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } if (setuid (nobody->pw_uid)) { g_warning ("%s (child): setuid: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } /* RATS: ignore, command is defined above. */ ret = system (command); /* Ignore the shell command exit status, because we've not * specified what it must be in the past. */ if (ret == -1) { g_warning ("%s (child):" " system failed with ret %i, %i, %s\n", __FUNCTION__, ret, WEXITSTATUS (ret), command); exit (EXIT_FAILURE); } exit (EXIT_SUCCESS); } case -1: /* Parent when error. */ g_warning ("%s: Failed to fork: %s\n", __FUNCTION__, strerror (errno)); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); g_free (command); g_free (command); return -1; break; default: { int status; /* Parent on success. Wait for child, and check result. */ while (waitpid (pid, &status, 0) < 0) { if (errno == ECHILD) { g_warning ("%s: Failed to get child exit status", __FUNCTION__); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); return -1; } if (errno == EINTR) continue; g_warning ("%s: wait: %s", __FUNCTION__, strerror (errno)); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); return -1; } if (WIFEXITED (status)) switch (WEXITSTATUS (status)) { case EXIT_SUCCESS: break; case EXIT_FAILURE: default: g_warning ("%s: child failed, %s\n", __FUNCTION__, command); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); return -1; } else { g_warning ("%s: child failed, %s\n", __FUNCTION__, command); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); return -1; } /* Child succeeded, continue to process result. */ break; } } } else { /* Just run the command as the current user. */ g_free (report_file); /* RATS: ignore, command is defined above. */ ret = system (command); /* Ignore the shell command exit status, because we've not * specified what it must be in the past. */ if (ret == -1) { g_warning ("%s: system failed with ret %i, %i, %s\n", __FUNCTION__, ret, WEXITSTATUS (ret), command); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); g_free (command); return -1; } } g_free (command); /* Change back to the previous directory. */ if (chdir (previous_dir)) { g_warning ("%s: Failed to chdir back: %s\n", __FUNCTION__, strerror (errno)); g_free (previous_dir); return -1; } g_free (previous_dir); /* Remove the directory. */ openvas_file_remove_recurse (report_dir); return 0; } } /** * @brief Send an SNMP TRAP to a host. * * @param[in] host Address of host. * @param[in] port Port of host. * * @return 0 success, -1 error. */ static int snmp_to_host (const char *community, const char *agent, const char *message) { gchar *clean_community, *clean_agent, *clean_message, *command_args; int ret; tracef ("SNMP to host: %s", agent); if (community == NULL || agent == NULL || message == NULL) { g_warning ("%s: parameter was NULL", __FUNCTION__); return -1; } clean_community = g_shell_quote (community); clean_agent = g_shell_quote (agent); clean_message = g_shell_quote (message); command_args = g_strdup_printf ("%s %s %s", clean_community, clean_agent, clean_message); g_free (clean_community); g_free (clean_agent); g_free (clean_message); ret = run_alert_script ("9d435134-15d3-11e6-bf5c-28d24461215b", command_args, "", 0); g_free (command_args); return ret; } /** * @brief Send a report to a host via TCP. * * @param[in] host Address of host. * @param[in] port Port of host. * @param[in] report Report that should be sent. * @param[in] report_size Size of the report. * * @return 0 success, -1 error. */ static int send_to_host (const char *host, const char *port, const char *report, int report_size) { gchar *clean_host, *clean_port, *command_args; int ret; tracef ("send to host: %s:%s", host, port); if (host == NULL) return -1; clean_host = g_shell_quote (host); clean_port = g_shell_quote (port); command_args = g_strdup_printf ("%s %s", clean_host, clean_port); g_free (clean_host); g_free (clean_port); ret = run_alert_script ("4a398d42-87c0-11e5-a1c0-28d24461215b", command_args, report, report_size); g_free (command_args); return ret; } /** * @brief Send a report to a host via TCP. * * @param[in] password Password. * @param[in] username Username. * @param[in] host Address of host. * @param[in] path Destination filename with path. * @param[in] known_host Content for known_hosts file. * @param[in] report Report that should be sent. * @param[in] report_size Size of the report. * * @return 0 success, -1 error. */ static int scp_to_host (const char *password, const char *username, const char *host, const char *path, const char *known_hosts, const char *report, int report_size) { gchar *clean_password, *clean_username, *clean_host, *clean_path; gchar *clean_known_hosts, *command_args; int ret; tracef ("scp to host: %s@%s:%s", username, host, path); if (password == NULL || username == NULL || host == NULL || path == NULL) return -1; if (known_hosts == NULL) known_hosts = ""; clean_password = g_shell_quote (password); clean_username = g_shell_quote (username); clean_host = g_shell_quote (host); clean_path = g_shell_quote (path); clean_known_hosts = g_shell_quote (known_hosts); command_args = g_strdup_printf ("%s %s %s %s %s", clean_password, clean_username, clean_host, clean_path, clean_known_hosts); g_free (clean_password); g_free (clean_username); g_free (clean_host); g_free (clean_path); g_free (clean_known_hosts); ret = run_alert_script ("2db07698-ec49-11e5-bcff-28d24461215b", command_args, report, report_size); g_free (command_args); return ret; } /** * @brief Send a report to a Sourcefire Defense Center. * * @param[in] ip IP of center. * @param[in] port Port of center. * @param[in] pkcs12_64 PKCS12 content in base64. * @param[in] report Report in "Sourcefire" format. * * @return 0 success, -1 error. */ static int send_to_sourcefire (const char *ip, const char *port, const char *pkcs12_64, const char *report) { gchar *script, *script_dir; gchar *report_file, *pkcs12_file, *pkcs12; gchar *clean_ip, *clean_port; char report_dir[] = "/tmp/openvasmd_escalate_XXXXXX"; GError *error; gsize pkcs12_len; if ((report == NULL) || (ip == NULL) || (port == NULL)) return -1; tracef ("send to sourcefire: %s:%s", ip, port); tracef ("report: %s", report); /* Setup files. */ if (mkdtemp (report_dir) == NULL) { g_warning ("%s: mkdtemp failed\n", __FUNCTION__); return -1; } report_file = g_strdup_printf ("%s/report.csv", report_dir); error = NULL; g_file_set_contents (report_file, report, strlen (report), &error); if (error) { g_warning ("%s", error->message); g_error_free (error); g_free (report_file); return -1; } pkcs12_file = g_strdup_printf ("%s/pkcs12", report_dir); if (strlen (pkcs12_64)) pkcs12 = (gchar*) g_base64_decode (pkcs12_64, &pkcs12_len); else { pkcs12 = g_strdup (""); pkcs12_len = 0; } error = NULL; g_file_set_contents (pkcs12_file, pkcs12, pkcs12_len, &error); if (error) { g_warning ("%s", error->message); g_error_free (error); g_free (report_file); g_free (pkcs12_file); return -1; } /* Setup file names. */ script_dir = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "global_alert_methods", "cd1f5a34-6bdc-11e0-9827-002264764cea", NULL); script = g_build_filename (script_dir, "alert", NULL); if (!g_file_test (script, G_FILE_TEST_EXISTS)) { g_free (report_file); g_free (pkcs12_file); g_free (script); g_free (script_dir); return -1; } { gchar *command; char *previous_dir; int ret; /* Change into the script directory. */ /** @todo NULL arg is glibc extension. */ previous_dir = getcwd (NULL, 0); if (previous_dir == NULL) { g_warning ("%s: Failed to getcwd: %s\n", __FUNCTION__, strerror (errno)); g_free (report_file); g_free (pkcs12_file); g_free (previous_dir); g_free (script); g_free (script_dir); return -1; } if (chdir (script_dir)) { g_warning ("%s: Failed to chdir: %s\n", __FUNCTION__, strerror (errno)); g_free (report_file); g_free (pkcs12_file); g_free (previous_dir); g_free (script); g_free (script_dir); return -1; } g_free (script_dir); /* Call the script. */ clean_ip = g_shell_quote (ip); clean_port = g_shell_quote (port); command = g_strdup_printf ("%s %s %s %s %s > /dev/null" " 2> /dev/null", script, clean_ip, clean_port, pkcs12_file, report_file); g_free (script); g_free (clean_ip); g_free (clean_port); g_debug (" command: %s\n", command); if (geteuid () == 0) { pid_t pid; struct passwd *nobody; /* Run the command with lower privileges in a fork. */ nobody = getpwnam ("nobody"); if ((nobody == NULL) || chown (report_dir, nobody->pw_uid, nobody->pw_gid) || chown (report_file, nobody->pw_uid, nobody->pw_gid) || chown (pkcs12_file, nobody->pw_uid, nobody->pw_gid)) { g_warning ("%s: Failed to set permissions for user nobody: %s\n", __FUNCTION__, strerror (errno)); g_free (report_file); g_free (pkcs12_file); g_free (previous_dir); return -1; } g_free (report_file); g_free (pkcs12_file); pid = fork (); switch (pid) { case 0: { /* Child. Drop privileges, run command, exit. */ cleanup_manage_process (FALSE); if (setgroups (0,NULL)) { g_warning ("%s (child): setgroups: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } if (setgid (nobody->pw_gid)) { g_warning ("%s (child): setgid: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } if (setuid (nobody->pw_uid)) { g_warning ("%s (child): setuid: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } /* RATS: ignore, command is defined above. */ ret = system (command); /* Ignore the shell command exit status, because we've not * specified what it must be in the past. */ if (ret == -1) { g_warning ("%s (child):" " system failed with ret %i, %i, %s\n", __FUNCTION__, ret, WEXITSTATUS (ret), command); exit (EXIT_FAILURE); } exit (EXIT_SUCCESS); } case -1: /* Parent when error. */ g_warning ("%s: Failed to fork: %s\n", __FUNCTION__, strerror (errno)); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); g_free (command); return -1; break; default: { int status; /* Parent on success. Wait for child, and check result. */ g_free (command); while (waitpid (pid, &status, 0) < 0) { if (errno == ECHILD) { g_warning ("%s: Failed to get child exit status", __FUNCTION__); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); return -1; } if (errno == EINTR) continue; g_warning ("%s: wait: %s", __FUNCTION__, strerror (errno)); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); return -1; } if (WIFEXITED (status)) switch (WEXITSTATUS (status)) { case EXIT_SUCCESS: break; case EXIT_FAILURE: default: g_warning ("%s: child failed, %s\n", __FUNCTION__, command); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); return -1; } else { g_warning ("%s: child failed, %s\n", __FUNCTION__, command); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); return -1; } /* Child succeeded, continue to process result. */ break; } } } else { /* Just run the command as the current user. */ g_free (report_file); g_free (pkcs12_file); /* RATS: ignore, command is defined above. */ ret = system (command); /* Ignore the shell command exit status, because we've not * specified what it must be in the past. */ if (ret == -1) { g_warning ("%s: system failed with ret %i, %i, %s\n", __FUNCTION__, ret, WEXITSTATUS (ret), command); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); g_free (command); return -1; } g_free (command); } /* Change back to the previous directory. */ if (chdir (previous_dir)) { g_warning ("%s: Failed to chdir back: %s\n", __FUNCTION__, strerror (errno)); g_free (previous_dir); return -1; } g_free (previous_dir); /* Remove the directory. */ openvas_file_remove_recurse (report_dir); return 0; } } /** * @brief Send a report to a verinice.PRO server. * * @param[in] url URL of the server. * @param[in] username Username for server access. * @param[in] password Password for server access. * @param[in] archive Verinice archive that should be sent. * @param[in] archive_size Size of the verinice archive * * @return 0 success, -1 error. */ static int send_to_verinice (const char *url, const char *username, const char *password, const char *archive, int archive_size) { gchar *script, *script_dir; gchar *archive_file; gchar *clean_url, *clean_username, *clean_password; char archive_dir[] = "/tmp/openvasmd_alert_XXXXXX"; GError *error; if ((archive == NULL) || (url == NULL)) return -1; tracef ("send to verinice: %s", url); tracef ("archive: %s", archive); /* Setup files. */ if (mkdtemp (archive_dir) == NULL) { g_warning ("%s: mkdtemp failed\n", __FUNCTION__); return -1; } archive_file = g_strdup_printf ("%s/archive.vna", archive_dir); error = NULL; g_file_set_contents (archive_file, archive, archive_size, &error); if (error) { g_warning ("%s", error->message); g_error_free (error); g_free (archive_file); return -1; } /* Setup file names. */ script_dir = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "global_alert_methods", "f9d97653-f89b-41af-9ba1-0f6ee00e9c1a", NULL); script = g_build_filename (script_dir, "alert", NULL); if (!g_file_test (script, G_FILE_TEST_EXISTS)) { g_warning ("%s: Failed to find alert script: %s\n", __FUNCTION__, script); g_free (archive_file); g_free (script); g_free (script_dir); return -1; } { gchar *command; gchar *log_command; /* Command with password removed. */ char *previous_dir; int ret; /* Change into the script directory. */ /** @todo NULL arg is glibc extension. */ previous_dir = getcwd (NULL, 0); if (previous_dir == NULL) { g_warning ("%s: Failed to getcwd: %s\n", __FUNCTION__, strerror (errno)); g_free (archive_file); g_free (previous_dir); g_free (script); g_free (script_dir); return -1; } if (chdir (script_dir)) { g_warning ("%s: Failed to chdir: %s\n", __FUNCTION__, strerror (errno)); g_free (archive_file); g_free (previous_dir); g_free (script); g_free (script_dir); return -1; } g_free (script_dir); /* Call the script. */ clean_url = g_shell_quote (url); clean_username = g_shell_quote (username); clean_password = g_shell_quote (password); command = g_strdup_printf ("%s %s %s %s %s > /dev/null" " 2> /dev/null", script, clean_url, clean_username, clean_password, archive_file); log_command = g_strdup_printf ("%s %s %s ****** %s > /dev/null" " 2> /dev/null", script, clean_url, clean_username, archive_file); g_free (script); g_free (clean_url); g_free (clean_username); g_free (clean_password); g_debug (" command: %s\n", log_command); if (geteuid () == 0) { pid_t pid; struct passwd *nobody; /* Run the command with lower privileges in a fork. */ nobody = getpwnam ("nobody"); if ((nobody == NULL) || chown (archive_dir, nobody->pw_uid, nobody->pw_gid) || chown (archive_file, nobody->pw_uid, nobody->pw_gid)) { g_warning ("%s: Failed to set permissions for user nobody: %s\n", __FUNCTION__, strerror (errno)); g_free (previous_dir); g_free (archive_file); g_free (command); g_free (log_command); return -1; } g_free (archive_file); pid = fork (); switch (pid) { case 0: { /* Child. Drop privileges, run command, exit. */ cleanup_manage_process (FALSE); if (setgroups (0,NULL)) { g_warning ("%s (child): setgroups: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } if (setgid (nobody->pw_gid)) { g_warning ("%s (child): setgid: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } if (setuid (nobody->pw_uid)) { g_warning ("%s (child): setuid: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } /* RATS: ignore, command is defined above. */ ret = system (command); /* Ignore the shell command exit status, because we've not * specified what it must be in the past. */ if (ret == -1) { g_warning ("%s (child):" " system failed with ret %i, %i, %s\n", __FUNCTION__, ret, WEXITSTATUS (ret), log_command); exit (EXIT_FAILURE); } exit (EXIT_SUCCESS); } case -1: /* Parent when error. */ g_warning ("%s: Failed to fork: %s\n", __FUNCTION__, strerror (errno)); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); g_free (command); g_free (log_command); return -1; break; default: { int status; /* Parent on success. Wait for child, and check result. */ while (waitpid (pid, &status, 0) < 0) { if (errno == ECHILD) { g_warning ("%s: Failed to get child exit status", __FUNCTION__); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); return -1; } if (errno == EINTR) continue; g_warning ("%s: wait: %s", __FUNCTION__, strerror (errno)); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); return -1; } if (WIFEXITED (status)) switch (WEXITSTATUS (status)) { case EXIT_SUCCESS: break; case EXIT_FAILURE: default: g_warning ("%s: child failed, %s\n", __FUNCTION__, log_command); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); return -1; } else { g_warning ("%s: child failed, %s\n", __FUNCTION__, log_command); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); return -1; } /* Child succeeded, continue to process result. */ break; } } } else { /* Just run the command as the current user. */ g_free (archive_file); /* RATS: ignore, command is defined above. */ ret = system (command); /* Ignore the shell command exit status, because we've not * specified what it must be in the past. */ if (ret == -1) { g_warning ("%s: system failed with ret %i, %i, %s\n", __FUNCTION__, ret, WEXITSTATUS (ret), log_command); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); g_free (command); return -1; } } g_free (command); g_free (log_command); /* Change back to the previous directory. */ if (chdir (previous_dir)) { g_warning ("%s: Failed to chdir back: %s\n", __FUNCTION__, strerror (errno)); g_free (previous_dir); return -1; } g_free (previous_dir); /* Remove the directory. */ openvas_file_remove_recurse (archive_dir); return 0; } } /** * @brief Default max number of bytes of reports included in email alerts. */ #define MAX_CONTENT_LENGTH 20000 /** * @brief Maximum number of bytes of reports included in email alerts. * * A value less or equal to 0 allows any size. */ static int max_content_length = MAX_CONTENT_LENGTH; /** * @brief Default max number of bytes of reports attached to email alerts. */ #define MAX_ATTACH_LENGTH 1048576 /** * @brief Maximum number of bytes of reports attached to email alerts. * * A value less or equal to 0 allows any size. */ static int max_attach_length = MAX_ATTACH_LENGTH; /** * @brief Format string for simple notice alert email. */ #define SIMPLE_NOTICE_FORMAT \ "%s.\n" \ "\n" \ "After the event %s,\n" \ "the following condition was met: %s\n" \ "\n" \ "This email escalation is not configured to provide more details.\n" \ "Full details are stored on the scan engine.\n" \ "\n" \ "\n" \ "Note:\n" \ "This email was sent to you as a configured security scan escalation.\n" \ "Please contact your local system administrator if you think you\n" \ "should not have received it.\n" /** * @brief Print an alert subject. * * @param[in] subject Format string for subject. * @param[in] event Event. * @param[in] event_data Event data. * @param[in] task Task. * * @return Freshly allocated subject. */ static gchar * alert_subject_print (const gchar *subject, event_t event, const void *event_data, task_t task) { int formatting; const gchar *point, *end; GString *new_subject; assert (subject); new_subject = g_string_new (""); for (formatting = 0, point = subject, end = (subject + strlen (subject)); point < end; point++) if (formatting) { switch (*point) { case '$': g_string_append_c (new_subject, '$'); break; case 'e': { gchar *event_desc; event_desc = event_description (event, event_data, NULL); g_string_append (new_subject, event_desc); g_free (event_desc); break; } case 'n': { char *name = task_name (task); g_string_append (new_subject, name); free (name); break; } default: g_string_append_c (new_subject, '$'); g_string_append_c (new_subject, *point); break; } formatting = 0; } else if (*point == '$') formatting = 1; else g_string_append_c (new_subject, *point); return g_string_free (new_subject, FALSE); } /** * @brief Print an alert message. * * @param[in] message Format string for message. * @param[in] event Event. * @param[in] event_data Event data. * @param[in] task Task. * @param[in] format_name Report format name. * @param[in] filter Filter. * @param[in] term Filter term. * @param[in] content The report, for inlining. * @param[in] content_length Length of content. * @param[in] truncated Whether the report was truncated. * @param[in] max_length Max allowed length of content. * * @return Freshly allocated message. */ static gchar * alert_message_print (const gchar *message, event_t event, const void *event_data, task_t task, alert_t alert, alert_condition_t condition, gchar *format_name, filter_t filter, const gchar *term, const gchar *zone, const gchar *host_summary, const gchar *content, gsize content_length, int truncated, int max_length) { int formatting; const gchar *point, *end; GString *new_message; assert (message); new_message = g_string_new (""); for (formatting = 0, point = message, end = (message + strlen (message)); point < end; point++) if (formatting) { switch (*point) { case '$': g_string_append_c (new_message, '$'); break; case 'c': { gchar *condition_desc; condition_desc = alert_condition_description (condition, alert); g_string_append (new_message, condition_desc); g_free (condition_desc); break; } case 'e': { gchar *event_desc; event_desc = event_description (event, event_data, NULL); g_string_append (new_message, event_desc); g_free (event_desc); break; } case 'H': { /* Host summary. */ g_string_append (new_message, host_summary ? host_summary : "N/A"); break; } case 'i': { if (content) { g_string_append_printf (new_message, "%.*s", /* Cast for 64 bit. */ (int) MIN (content_length, max_content_length), content); if (content_length > max_content_length) g_string_append_printf (new_message, "\n... (report truncated after" " %i characters)\n", max_content_length); } break; } case 'n': { char *name = task_name (task); g_string_append (new_message, name); free (name); break; } case 'r': { /* Report format name. */ g_string_append (new_message, format_name ? format_name : "N/A"); break; } case 'F': { /* Name of filter. */ if (filter) { char *name = filter_name (filter); g_string_append (new_message, name); free (name); } else g_string_append (new_message, "N/A"); break; } case 'f': { /* Filter term. */ g_string_append (new_message, term ? term : "N/A"); break; } case 't': { if (truncated) g_string_append_printf (new_message, "Note: This report exceeds the" " maximum length of %i characters" " and thus\n" "was truncated.\n", max_length); break; } case 'z': { /* Timezone. */ g_string_append (new_message, zone ? zone : "N/A"); break; } case 'R': default: g_string_append_c (new_message, '$'); g_string_append_c (new_message, *point); break; } formatting = 0; } else if (*point == '$') formatting = 1; else g_string_append_c (new_message, *point); return g_string_free (new_message, FALSE); } /** * @brief Print an SCP alert file path. * * @param[in] message Format string for message. * @param[in] task Task. * * @return Freshly allocated message. */ static gchar * scp_alert_path_print (const gchar *message, task_t task) { int formatting; const gchar *point, *end; GString *new_message; assert (message); new_message = g_string_new (""); for (formatting = 0, point = message, end = (message + strlen (message)); point < end; point++) if (formatting) { switch (*point) { case '$': g_string_append_c (new_message, '$'); break; case 'n': if (task) { char *name = task_name (task); g_string_append (new_message, name); free (name); } break; } formatting = 0; } else if (*point == '$') formatting = 1; else g_string_append_c (new_message, *point); return g_string_free (new_message, FALSE); } /** * @brief Escalate an event. * * @param[in] alert Alert. * @param[in] task Task. * @param[in] report Report. 0 for most recent report. * @param[in] event Event. * @param[in] event_data Event data. * @param[in] method Method from alert. * @param[in] condition Condition from alert, which was met by event. * @param[in] sort_order Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "type". * @param[in] result_hosts_only Whether to show only hosts with results. * @param[in] min_cvss_base Minimum CVSS base of included results. All * results if NULL. * @param[in] min_qod Minimum QoD of included results. All * results if NULL. * @param[in] levels String describing threat levels (message types) * to include in count (for example, "hmlgd" for * High, Medium, Low, loG and Debug). All levels if * NULL. * @param[in] delta_states Delta states. Allows caller to specify the * value for the delta_states param in the filter * string. * @param[in] apply_overrides Whether to apply overrides. * @param[in] search_phrase Phrase that results must include. All results * if NULL or "". * @param[in] autofp Whether to apply auto FP filter. * @param[in] notes Whether to include notes. * @param[in] notes_details If notes, Whether to include details. * @param[in] overrides Whether to include overrides. * @param[in] overrides_details If overrides, Whether to include details. * @param[in] first_result The result to start from. The results are 0 * indexed. * @param[in] max_results The maximum number of results returned. * @param[in] zone Timezone. * * @return 0 success, -1 error, -2 failed to find report format, -3 failed to * find filter. */ static int escalate_2 (alert_t alert, task_t task, report_t report, event_t event, const void* event_data, alert_method_t method, alert_condition_t condition, /* Report filtering. */ int sort_order, const char* sort_field, int result_hosts_only, const char *min_cvss_base, const char *min_qod, const char *levels, const char *delta_states, int apply_overrides, const char *search_phrase, int autofp, int notes, int notes_details, int overrides, int overrides_details, int first_result, int max_results, const char *zone) { char *name_alert, *name_task; gchar *event_desc, *alert_desc; name_alert = alert_name (alert); name_task = task_name (task); event_desc = event_description (event, event_data, NULL); alert_desc = alert_condition_description (condition, alert); g_log ("event alert", G_LOG_LEVEL_MESSAGE, "The alert %s%s%s was triggered " "(Event: %s, Condition: %s)", name_alert, name_task ? " for task " : "", name_task ? name_task : "", event_desc, alert_desc); free (name_task); free (name_alert); free (event_desc); free (alert_desc); switch (method) { case ALERT_METHOD_EMAIL: { char *to_address; char *format_name; format_name = NULL; to_address = alert_data (alert, "method", "to_address"); if (to_address) { int ret; gchar *body, *subject; char *name, *notice, *from_address, *filt_id; gchar *base64, *type, *extension; filter_t filter; base64 = NULL; type = NULL; extension = NULL; from_address = alert_data (alert, "method", "from_address"); notice = alert_data (alert, "method", "notice"); filt_id = alert_filter_id (alert); filter = 0; if (filt_id) { if (find_filter_with_permission (filt_id, &filter, "get_filters")) return -1; if (filter == 0) return -3; } name = task_name (task); if (notice && strcmp (notice, "0") == 0) { gchar *event_desc, *condition_desc, *report_content; gchar *alert_subject, *message; gchar *term, *report_zone, *host_summary; char *format_uuid; report_format_t report_format = 0; gsize content_length; /* Message with inlined report. */ if (report == 0) switch (sql_int64 (&report, "SELECT max (id) FROM reports" " WHERE task = %llu", task)) { case 0: if (report) break; case 1: /* Too few rows in result of query. */ case -1: free (notice); free (name); free (to_address); free (from_address); return -1; break; default: /* Programming error. */ assert (0); return -1; } format_uuid = alert_data (alert, "method", "notice_report_format"); if (((format_uuid == NULL) || find_report_format_with_permission (format_uuid, &report_format, "get_report_formats") || (report_format == 0)) /* Fallback to TXT. */ && (find_report_format_with_permission ("a3810a62-1f62-11e1-9219-406186ea4fc5", &report_format, "get_report_formats") || (report_format == 0))) { g_free (format_uuid); free (filt_id); free (notice); free (name); free (to_address); free (from_address); return -2; } g_free (format_uuid); event_desc = event_description (event, event_data, NULL); term = NULL; report_zone = NULL; host_summary = NULL; report_content = manage_report (report, report_format, filt_id, sort_order, sort_field, result_hosts_only, min_cvss_base, min_qod, levels, delta_states, apply_overrides, search_phrase, autofp, notes, notes_details, overrides, overrides_details, first_result, max_results, NULL, /* Type. */ &content_length, NULL, /* Extension. */ NULL, /* Content type. */ zone, &term, &report_zone, &host_summary); if (report_content == NULL) { free (event_desc); free (filt_id); free (notice); free (name); free (to_address); free (from_address); g_free (term); g_free (report_zone); g_free (host_summary); return -1; } format_name = report_format_name (report_format); condition_desc = alert_condition_description (condition, alert); subject = g_strdup_printf ("[OpenVAS-Manager] Task '%s': %s", name ? name : "Internal Error", event_desc); alert_subject = alert_data (alert, "method", "subject"); if (alert_subject && strlen (alert_subject)) { g_free (subject); subject = alert_subject_print (alert_subject, event, event_data, task); } g_free (alert_subject); message = alert_data (alert, "method", "message"); if (message == NULL || strlen (message) == 0) { g_free (message); message = g_strdup (ALERT_MESSAGE_INCLUDE); } body = alert_message_print (message, event, event_data, task, alert, condition, format_name, filter, term, report_zone, host_summary, report_content, content_length, content_length > max_content_length, max_content_length); g_free (message); g_free (report_content); g_free (event_desc); g_free (condition_desc); g_free (term); g_free (report_zone); g_free (host_summary); } else if (notice && strcmp (notice, "2") == 0) { gchar *event_desc, *condition_desc, *report_content; char *format_uuid; report_format_t report_format = 0; gsize content_length; gchar *alert_subject, *message; gchar *term, *report_zone, *host_summary; /* Message with attached report. */ if (report == 0) switch (sql_int64 (&report, "SELECT max (id) FROM reports" " WHERE task = %llu", task)) { case 0: if (report) break; case 1: /* Too few rows in result of query. */ case -1: free (notice); free (name); free (to_address); free (from_address); return -1; break; default: /* Programming error. */ assert (0); return -1; } format_uuid = alert_data (alert, "method", "notice_attach_format"); if (((format_uuid == NULL) || find_report_format_with_permission (format_uuid, &report_format, "get_report_formats") || (report_format == 0)) /* Fallback to TXT. */ && (find_report_format_with_permission ("19f6f1b3-7128-4433-888c-ccc764fe6ed5", &report_format, "get_report_formats") || (report_format == 0))) { g_free (format_uuid); free (filt_id); free (notice); free (name); free (to_address); free (from_address); return -2; } g_free (format_uuid); event_desc = event_description (event, event_data, NULL); term = NULL; report_zone = NULL; host_summary = NULL; report_content = manage_report (report, report_format, filt_id, sort_order, sort_field, result_hosts_only, min_cvss_base, min_qod, levels, delta_states, apply_overrides, search_phrase, autofp, notes, notes_details, overrides, overrides_details, first_result, max_results, NULL, /* Type. */ &content_length, &extension, &type, zone, &term, &report_zone, &host_summary); if (report_content == NULL) { g_free (event_desc); free (filt_id); free (notice); free (name); free (to_address); free (from_address); return -1; } format_name = report_format_name (report_format); condition_desc = alert_condition_description (condition, alert); subject = g_strdup_printf ("[OpenVAS-Manager] Task '%s': %s", name ? name : "Internal Error", event_desc); alert_subject = alert_data (alert, "method", "subject"); if (alert_subject && strlen (alert_subject)) { g_free (subject); subject = alert_subject_print (alert_subject, event, event_data, task); } g_free (alert_subject); if (max_attach_length <= 0 || content_length <= max_attach_length) base64 = g_base64_encode ((guchar*) report_content, content_length); g_free (report_content); message = alert_data (alert, "method", "message"); if (message == NULL || strlen (message) == 0) { g_free (message); message = g_strdup (ALERT_MESSAGE_ATTACH); } body = alert_message_print (message, event, event_data, task, alert, condition, format_name, filter, term, report_zone, host_summary, NULL, 0, base64 == NULL, max_attach_length); g_free (message); g_free (event_desc); g_free (condition_desc); g_free (term); g_free (report_zone); g_free (host_summary); } else { gchar *event_desc, *generic_desc, *condition_desc; gchar *alert_subject, *message; /* Simple notice message. */ format_name = NULL; event_desc = event_description (event, event_data, name); generic_desc = event_description (event, event_data, NULL); condition_desc = alert_condition_description (condition, alert); subject = g_strdup_printf ("[OpenVAS-Manager] Task '%s':" " An event occurred", name); alert_subject = alert_data (alert, "method", "subject"); if (alert_subject && strlen (alert_subject)) { g_free (subject); subject = alert_subject_print (alert_subject, event, event_data, task); } g_free (alert_subject); message = alert_data (alert, "method", "message"); if (message && strlen (message)) body = alert_message_print (message, event, event_data, task, alert, condition, NULL, 0, NULL, NULL, NULL, NULL, 0, 0, 0); else body = g_strdup_printf (SIMPLE_NOTICE_FORMAT, event_desc, generic_desc, condition_desc); g_free (message); g_free (event_desc); g_free (generic_desc); g_free (condition_desc); } free (filt_id); free (notice); gchar *fname_format, *file_name; gchar *report_id, *creation_time, *modification_time; fname_format = sql_string ("SELECT value FROM settings" " WHERE name" " = 'Report Export File Name'" " AND ((owner IS NULL)" " OR (owner =" " (SELECT id FROM users" " WHERE users.uuid = '%s')))" " ORDER BY owner DESC LIMIT 1;", current_credentials.uuid); report_id = report_uuid (report); creation_time = sql_string ("SELECT iso_time (start_time)" " FROM reports" " WHERE id = %llu", report); modification_time = sql_string ("SELECT iso_time (end_time)" " FROM reports" " WHERE id = %llu", report); file_name = openvas_export_file_name (fname_format, current_credentials.username, "report", report_id, creation_time, modification_time, name, format_name); ret = email (to_address, from_address, subject, body, base64, type, file_name ? file_name : "openvas-report", extension); free (extension); free (type); free (name); free (format_name); g_free (base64); free (to_address); free (from_address); g_free (subject); g_free (body); g_free (fname_format); g_free (file_name); g_free (report_id); g_free (creation_time); g_free (modification_time); return ret; } return -1; } case ALERT_METHOD_HTTP_GET: { char *url; url = alert_data (alert, "method", "URL"); if (url) { int ret, formatting; gchar *point, *end; GString *new_url; new_url = g_string_new (""); for (formatting = 0, point = url, end = (url + strlen (url)); point < end; point++) if (formatting) { switch (*point) { case '$': g_string_append_c (new_url, '$'); break; case 'c': { gchar *condition_desc; condition_desc = alert_condition_description (condition, alert); g_string_append (new_url, condition_desc); g_free (condition_desc); break; } case 'e': { gchar *event_desc; event_desc = event_description (event, event_data, NULL); g_string_append (new_url, event_desc); g_free (event_desc); break; } case 'n': { char *name = task_name (task); g_string_append (new_url, name); free (name); break; } default: g_string_append_c (new_url, '$'); g_string_append_c (new_url, *point); break; } formatting = 0; } else if (*point == '$') formatting = 1; else g_string_append_c (new_url, *point); ret = http_get (new_url->str); g_string_free (new_url, TRUE); g_free (url); return ret; } return -1; } case ALERT_METHOD_SCP: { char *password, *username, *host, *path, *known_hosts, *filt_id; gchar *report_content, *format_uuid, *alert_path; gsize content_length; report_format_t report_format; int ret; filter_t filter; #if 0 // TODO if (event == EVENT_NEW_SECINFO || event == EVENT_UPDATED_SECINFO) { gchar *message; message = new_secinfo_message (event, event_data, alert); host = alert_data (alert, "method", "send_host"); port = alert_data (alert, "method", "send_port"); tracef ("send host: %s", host); tracef ("send port: %s", port); ret = send_to_host (host, port, message, strlen (message)); g_free (message); free (host); free (port); return ret; } #endif format_uuid = alert_data (alert, "method", "send_report_format"); if (format_uuid && strlen (format_uuid)) { if (find_report_format_with_permission (format_uuid, &report_format, "get_report_formats") || (report_format == 0)) { g_warning ("%s: Could not find Send RFP '%s'", __FUNCTION__, format_uuid); g_free (format_uuid); return -2; } g_free (format_uuid); } else { g_free (format_uuid); if (find_report_format_with_permission ("a994b278-1f62-11e1-96ac-406186ea4fc5", &report_format, "get_report_formats") || (report_format == 0)) { g_warning ("%s: Could not find XML RFP for Send", __FUNCTION__); return -2; } } if (report == 0) switch (sql_int64 (&report, "SELECT max (id) FROM reports" " WHERE task = %llu", task)) { case 0: if (report) break; case 1: /* Too few rows in result of query. */ case -1: return -1; break; default: /* Programming error. */ assert (0); return -1; } filt_id = alert_filter_id (alert); if (filt_id) { if (find_filter_with_permission (filt_id, &filter, "get_filters")) return -1; if (filter == 0) return -3; } report_content = manage_report (report, report_format, filt_id, sort_order, sort_field, result_hosts_only, min_cvss_base, min_qod, levels, delta_states, apply_overrides, search_phrase, autofp, notes, notes_details, overrides, overrides_details, first_result, max_results, NULL, /* Type. */ &content_length, NULL, /* Extension. */ NULL, /* Content type. */ zone, NULL, NULL, NULL); free (filt_id); if (report_content == NULL) { g_warning ("%s: Empty Report", __FUNCTION__); return -1; } password = alert_data (alert, "method", "scp_password"); username = alert_data (alert, "method", "scp_username"); host = alert_data (alert, "method", "scp_host"); path = alert_data (alert, "method", "scp_path"); known_hosts = alert_data (alert, "method", "scp_known_hosts"); alert_path = scp_alert_path_print (path, task); free (path); ret = scp_to_host (password, username, host, alert_path, known_hosts, report_content, content_length); free (password); free (username); free (host); g_free (alert_path); free (known_hosts); g_free (report_content); return ret; } case ALERT_METHOD_SEND: { char *host, *port, *filt_id; gchar *report_content, *format_uuid; gsize content_length; report_format_t report_format; int ret; filter_t filter; format_uuid = alert_data (alert, "method", "send_report_format"); if (format_uuid && strlen (format_uuid)) { if (find_report_format_with_permission (format_uuid, &report_format, "get_report_formats") || (report_format == 0)) { g_warning ("%s: Could not find Send RFP '%s'", __FUNCTION__, format_uuid); g_free (format_uuid); return -2; } g_free (format_uuid); } else { g_free (format_uuid); if (find_report_format_with_permission ("a994b278-1f62-11e1-96ac-406186ea4fc5", &report_format, "get_report_formats") || (report_format == 0)) { g_warning ("%s: Could not find XML RFP for Send", __FUNCTION__); return -2; } } if (report == 0) switch (sql_int64 (&report, "SELECT max (id) FROM reports" " WHERE task = %llu", task)) { case 0: if (report) break; case 1: /* Too few rows in result of query. */ case -1: return -1; break; default: /* Programming error. */ assert (0); return -1; } filt_id = alert_filter_id (alert); if (filt_id) { if (find_filter_with_permission (filt_id, &filter, "get_filters")) return -1; if (filter == 0) return -3; } report_content = manage_report (report, report_format, filt_id, sort_order, sort_field, result_hosts_only, min_cvss_base, min_qod, levels, delta_states, apply_overrides, search_phrase, autofp, notes, notes_details, overrides, overrides_details, first_result, max_results, NULL, /* Type. */ &content_length, NULL, /* Extension. */ NULL, /* Content type. */ zone, NULL, NULL, NULL); free (filt_id); if (report_content == NULL) { g_warning ("%s: Empty Report", __FUNCTION__); return -1; } host = alert_data (alert, "method", "send_host"); port = alert_data (alert, "method", "send_port"); tracef ("send host: %s", host); tracef ("send port: %s", port); ret = send_to_host (host, port, report_content, content_length); free (host); free (port); g_free (report_content); return ret; } case ALERT_METHOD_SNMP: { char *community, *agent, *snmp_message; int ret; gchar *message; community = alert_data (alert, "method", "snmp_community"); agent = alert_data (alert, "method", "snmp_agent"); snmp_message = alert_data (alert, "method", "snmp_message"); tracef ("snmp_message: %s", snmp_message); tracef ("snmp_community: %s", community); tracef ("snmp_agent: %s", agent); if (snmp_message) { message = alert_subject_print (snmp_message, event, event_data, task); } else { gchar *event_desc; event_desc = event_description (event, event_data, NULL); message = g_strdup_printf ("%s", event_desc); g_free (event_desc); } ret = snmp_to_host (community, agent, message); free (agent); free (community); free (snmp_message); g_free (message); return ret; } case ALERT_METHOD_SOURCEFIRE: { char *ip, *port, *pkcs12, *filt_id; gchar *report_content; gsize content_length; report_format_t report_format; int ret; filter_t filter; if (lookup_report_format ("Sourcefire", &report_format) || (report_format == 0)) return -2; if (report == 0) switch (sql_int64 (&report, "SELECT max (id) FROM reports" " WHERE task = %llu", task)) { case 0: if (report) break; case 1: /* Too few rows in result of query. */ case -1: return -1; break; default: /* Programming error. */ assert (0); return -1; } filt_id = alert_filter_id (alert); if (filt_id) { if (find_filter_with_permission (filt_id, &filter, "get_filters")) return -1; if (filter == 0) return -3; } report_content = manage_report (report, report_format, filt_id, sort_order, sort_field, result_hosts_only, min_cvss_base, min_qod, levels, delta_states, apply_overrides, search_phrase, autofp, notes, notes_details, overrides, overrides_details, first_result, max_results, NULL, /* Type. */ &content_length, NULL, /* Extension. */ NULL, /* Content type. */ zone, NULL, NULL, NULL); if (report_content == NULL) return -1; ip = alert_data (alert, "method", "defense_center_ip"); port = alert_data (alert, "method", "defense_center_port"); if (port == NULL) port = g_strdup ("8307"); pkcs12 = alert_data (alert, "method", "pkcs12"); tracef (" sourcefire ip: %s", ip); tracef (" sourcefire port: %s", port); tracef ("sourcefire pkcs12: %s", pkcs12); ret = send_to_sourcefire (ip, port, pkcs12, report_content); free (filt_id); free (ip); g_free (port); free (pkcs12); g_free (report_content); return ret; } case ALERT_METHOD_SYSLOG: { char *submethod; gchar *message, *event_desc, *level; event_desc = event_description (event, event_data, NULL); message = g_strdup_printf ("%s: %s", event_name (event), event_desc); g_free (event_desc); submethod = alert_data (alert, "method", "submethod"); level = g_strdup_printf ("event %s", submethod); g_free (submethod); tracef (" syslog level: %s", level); tracef ("syslog message: %s", message); g_log (level, G_LOG_LEVEL_MESSAGE, "%s", message); g_free (level); g_free (message); return 0; } case ALERT_METHOD_VERINICE: { char *url, *username, *password, *filt_id; gchar *report_content, *format_uuid; gsize content_length; report_format_t report_format; int ret; filter_t filter; format_uuid = alert_data (alert, "method", "verinice_server_report_format"); if (format_uuid && strlen (format_uuid)) { if (find_report_format_with_permission (format_uuid, &report_format, "get_report_formats") || (report_format == 0)) { g_warning ("Could not find Verinice RFP '%s'", format_uuid); g_free (format_uuid); return -2; } g_free (format_uuid); } else if (lookup_report_format ("Verinice ISM", &report_format) || (report_format == 0)) { g_warning ("Could not find default verinice RFP"); return -2; } if (report == 0) switch (sql_int64 (&report, "SELECT max (id) FROM reports" " WHERE task = %llu", task)) { case 0: if (report) break; case 1: /* Too few rows in result of query. */ case -1: return -1; break; default: /* Programming error. */ assert (0); return -1; } filt_id = alert_filter_id (alert); if (filt_id) { if (find_filter_with_permission (filt_id, &filter, "get_filters")) return -1; if (filter == 0) return -3; } report_content = manage_report (report, report_format, filt_id, sort_order, sort_field, result_hosts_only, min_cvss_base, min_qod, levels, delta_states, apply_overrides, search_phrase, autofp, notes, notes_details, overrides, overrides_details, first_result, max_results, NULL, /* Type. */ &content_length, NULL, /* Extension. */ NULL, /* Content type. */ zone, NULL, NULL, NULL); if (report_content == NULL) { g_warning ("Empty Report"); return -1; } url = alert_data (alert, "method", "verinice_server_url"); username = alert_data (alert, "method", "verinice_server_username"); password = alert_data (alert, "method", "verinice_server_password"); tracef (" verinice url: %s", url); tracef ("verinice username: %s", username); ret = send_to_verinice (url, username, password, report_content, content_length); free (filt_id); free (url); g_free (report_content); return ret; } case ALERT_METHOD_ERROR: default: break; } return -1; } /** * @brief Escalate an event with preset report filtering. * * @param[in] alert Alert. * @param[in] task Task. * @param[in] report Report. * @param[in] event Event. * @param[in] event_data Event data. * @param[in] method Method from alert. * @param[in] condition Condition from alert, which was met by event. * * @return 0 success, -1 error, -2 failed to find report format for alert, * -3 failed to find filter for alert. */ static int escalate_1 (alert_t alert, task_t task, report_t report, event_t event, const void* event_data, alert_method_t method, alert_condition_t condition) { return escalate_2 (alert, task, report, event, event_data, method, condition, 0, /* Descending. */ "severity", /* Sort field. */ 0, /* Result hosts only. */ NULL, /* Min CVSS base. */ NULL, /* Min QoD. */ NULL, /* Levels. */ NULL, /* Delta states. */ 1, /* Apply overrides. */ NULL, /* Search phrase. */ 0, /* Auto FP. */ 1, /* Notes. */ 1, /* Notes details. */ 1, /* Overrides. */ 1, /* Overrides details. */ 0, /* First results. */ /* Max results. */ (method == ALERT_METHOD_EMAIL ? 1000 : -1), NULL); /* Timezone. */ } /** * @brief Escalate an alert with task and event data. * * @param[in] alert_id Alert UUID. * @param[in] task_id Task UUID. * @param[in] event Event. * @param[in] event_data Event data. * * @return 0 success, 1 failed to find alert, 2 failed to find task, * 99 permission denied, -1 error, -2 failed to find report format * for alert, -3 failed to find filter for alert. */ int manage_alert (const char *alert_id, const char *task_id, event_t event, const void* event_data) { alert_t alert; task_t task; alert_condition_t condition; alert_method_t method; if (user_may ("test_alert") == 0) return 99; if (find_alert_with_permission (alert_id, &alert, "test_alert")) return -1; if (alert == 0) return 1; if (find_task_with_permission (task_id, &task, NULL)) return -1; if (task == 0) return 2; condition = alert_condition (alert); method = alert_method (alert); return escalate_1 (alert, task, 0, event, event_data, method, condition); } /** * @brief Return whether an event applies to a task and an alert. * * @param[in] event Event. * @param[in] event_data Event data. * @param[in] task Task. * @param[in] alert Alert. * * @return 1 if event applies, else 0. */ static int event_applies (event_t event, const void *event_data, task_t task, alert_t alert) { switch (event) { case EVENT_TASK_RUN_STATUS_CHANGED: { int ret; char *alert_event_data; alert_event_data = alert_data (alert, "event", "status"); if (alert_event_data == NULL) return 0; ret = (task_run_status (task) == (task_status_t) event_data) && (strcmp (alert_event_data, run_status_name_internal ((task_status_t) event_data)) == 0); free (alert_event_data); return ret; } default: return 0; } } /** * @brief Return whether the condition of an alert is met by a task. * * @param[in] task Task. * @param[in] report Report. * @param[in] alert Alert. * @param[in] condition Condition. * * @return 1 if met, else 0. */ static int condition_met (task_t task, report_t report, alert_t alert, alert_condition_t condition) { switch (condition) { case ALERT_CONDITION_ALWAYS: return 1; break; case ALERT_CONDITION_FILTER_COUNT_AT_LEAST: { char *filter_id, *count_string; report_t last_report; int first_result, max_results, sort_order, result_hosts_only; int autofp, notes, overrides; gchar *filter, *zone; gchar *sort_field, *levels, *search_phrase; gchar *min_cvss_base, *min_qod; gchar *delta_states; int debugs, holes, infos, logs, warnings, false_positives; int search_phrase_exact, apply_overrides, count; double severity; /* True if there are at least the given number of results matched by * the given filter in the last finished report. */ filter_id = alert_data (alert, "condition", "filter_id"); count_string = alert_data (alert, "condition", "count"); if (count_string) { count = atoi (count_string); free (count_string); } else count = 0; if (filter_id && strlen (filter_id) && strcmp (filter_id, "0")) filter = filter_term (filter_id); else filter = NULL; free (filter_id); /* Set the filter parameters from the filter term. */ manage_report_filter_controls (filter ? filter : "", &first_result, &max_results, &sort_field, &sort_order, &result_hosts_only, &min_cvss_base, &min_qod, &levels, &delta_states, &search_phrase, &search_phrase_exact, &autofp, ¬es, &overrides, &apply_overrides, &zone); g_free (filter); if (report) last_report = report; else { last_report = 0; if (task_last_report (task, &last_report)) g_warning ("%s: failed to get last report\n", __FUNCTION__); } tracef ("%s: last_report: %llu", __FUNCTION__, last_report); if (last_report) { report_counts_id (last_report, &debugs, &holes, &infos, &logs, &warnings, &false_positives, &severity, 1, NULL, 0, min_qod); tracef ("%s: count: %i vs %i", __FUNCTION__, debugs + holes + infos + logs + warnings + false_positives, count); if ((debugs + holes + infos + logs + warnings + false_positives) >= count) return 1; } break; } case ALERT_CONDITION_FILTER_COUNT_CHANGED: { char *direction, *filter_id, *count_string; report_t last_report; int first_result, max_results, sort_order, result_hosts_only; int autofp, notes, overrides; gchar *filter, *zone; gchar *sort_field, *levels, *search_phrase; gchar *min_cvss_base, *min_qod; gchar *delta_states; int debugs, holes, infos, logs, warnings, false_positives; int search_phrase_exact, apply_overrides, count; double severity; /* True if the number of results matched by the given filter in the * last finished report changed in the given direction with respect * to the second last finished report. */ direction = alert_data (alert, "condition", "direction"); filter_id = alert_data (alert, "condition", "filter_id"); count_string = alert_data (alert, "condition", "count"); if (count_string) { count = atoi (count_string); free (count_string); } else count = 0; if (filter_id && strlen (filter_id) && strcmp (filter_id, "0")) filter = filter_term (filter_id); else filter = NULL; free (filter_id); /* Set the filter parameters from the filter term. */ manage_report_filter_controls (filter ? filter : "", &first_result, &max_results, &sort_field, &sort_order, &result_hosts_only, &min_cvss_base, &min_qod, &levels, &delta_states, &search_phrase, &search_phrase_exact, &autofp, ¬es, &overrides, &apply_overrides, &zone); free (filter); if (report) last_report = report; else { last_report = 0; if (task_last_report (task, &last_report)) g_warning ("%s: failed to get last report\n", __FUNCTION__); } if (last_report) { report_t second_last_report; int last_count; report_counts_id (last_report, &debugs, &holes, &infos, &logs, &warnings, &false_positives, &severity, 1, NULL, 0, min_qod); last_count = debugs + holes + infos + logs + warnings + false_positives; second_last_report = 0; if (task_second_last_report (task, &second_last_report)) g_warning ("%s: failed to get second last report\n", __FUNCTION__); if (second_last_report) { int cmp, second_last_count; report_counts_id (second_last_report, &debugs, &holes, &infos, &logs, &warnings, &false_positives, &severity, 1, NULL, 0, min_qod); second_last_count = debugs + holes + infos + logs + warnings + false_positives; cmp = last_count - second_last_count; tracef ("cmp: %i\n", cmp); tracef ("direction: %s\n", direction); tracef ("last_count: %i\n", last_count); tracef ("second_last_count: %i\n", second_last_count); if (count < 0) { count = -count; if (direction == NULL || strcasecmp (direction, "increased") == 0) { free (direction); direction = g_strdup ("decreased"); } else if (strcasecmp (direction, "decreased") == 0) { free (direction); direction = g_strdup ("increased"); } } if (direction == NULL) { /* Same as "increased". */ if (cmp > count) return 1; } else if (((strcasecmp (direction, "changed") == 0) && (abs (cmp) > count)) || ((strcasecmp (direction, "increased") == 0) && (cmp > count)) || ((strcasecmp (direction, "decreased") == 0) && (cmp < count))) { free (direction); return 1; } } else { tracef ("direction: %s\n", direction); tracef ("last_count: %i\n", last_count); tracef ("second_last_count NULL\n"); if (((strcasecmp (direction, "changed") == 0) || (strcasecmp (direction, "increased") == 0)) && (last_count > 0)) { free (direction); return 1; } } } free (direction); break; } case ALERT_CONDITION_SEVERITY_AT_LEAST: { char *condition_severity_str; /* True if the threat level of the last finished report is at * least the given level. */ condition_severity_str = alert_data (alert, "condition", "severity"); if (condition_severity_str) { double condition_severity_dbl, task_severity_dbl; condition_severity_dbl = g_ascii_strtod (condition_severity_str, 0); task_severity_dbl = task_severity_double (task, 1, MIN_QOD_DEFAULT, 0); if (task_severity_dbl >= condition_severity_dbl) { free (condition_severity_str); return 1; } } free (condition_severity_str); break; } case ALERT_CONDITION_SEVERITY_CHANGED: { char *direction; double last_severity, second_last_severity; /* True if the threat level of the last finished report changed * in the given direction with respect to the second last finished * report. */ direction = alert_data (alert, "condition", "direction"); last_severity = task_severity_double (task, 1, MIN_QOD_DEFAULT, 0); second_last_severity = task_severity_double (task, 1, MIN_QOD_DEFAULT, 1); if (direction && last_severity > SEVERITY_MISSING && second_last_severity > SEVERITY_MISSING) { double cmp = last_severity - second_last_severity; tracef ("cmp: %f\n", cmp); tracef ("direction: %s\n", direction); tracef ("last_level: %1.1f\n", last_severity); tracef ("second_last_level: %1.1f\n", second_last_severity); if (((strcasecmp (direction, "changed") == 0) && cmp) || ((strcasecmp (direction, "increased") == 0) && (cmp > 0)) || ((strcasecmp (direction, "decreased") == 0) && (cmp < 0))) { free (direction); return 1; } } else if (direction && last_severity > SEVERITY_MISSING) { tracef ("direction: %s\n", direction); tracef ("last_level: %1.1f\n", last_severity); tracef ("second_last_level NULL\n"); if ((strcasecmp (direction, "changed") == 0) || (strcasecmp (direction, "increased") == 0)) { free (direction); return 1; } } free (direction); break; } default: break; } return 0; } /** * @brief Produce an event. * * @param[in] task Task. * @param[in] report Report. * @param[in] event Event. * @param[in] event_data Event type specific details. */ static void event (task_t task, report_t report, event_t event, void* event_data) { iterator_t alerts; GArray *alerts_triggered; guint index; tracef (" EVENT %i on task %llu", event, task); alerts_triggered = g_array_new (TRUE, TRUE, sizeof (alert_t)); init_task_alert_iterator (&alerts, task, event); while (next (&alerts)) { alert_t alert = task_alert_iterator_alert (&alerts); if (event_applies (event, event_data, task, alert)) { alert_condition_t condition; condition = alert_condition (alert); if (condition_met (task, report, alert, condition)) g_array_append_val (alerts_triggered, alert); } } cleanup_iterator (&alerts); /* Run the alerts outside the iterator, because they make take some * time and the iterator would prevent update processes (OMP MODIFY_XXX, * CREATE_XXX, ...) from locking the database. */ index = alerts_triggered->len; while (index--) { alert_t alert; alert_condition_t condition; alert = g_array_index (alerts_triggered, alert_t, index); condition = alert_condition (alert); escalate_1 (alert, task, report, event, event_data, alert_method (alert), condition); } g_array_free (alerts_triggered, TRUE); } /** * @brief Initialise an alert task iterator. * * Iterate over all tasks that use the alert. * * @param[in] iterator Iterator. * @param[in] alert Alert. * @param[in] ascending Whether to sort ascending or descending. */ void init_alert_task_iterator (iterator_t* iterator, alert_t alert, int ascending) { gchar *available; get_data_t get; array_t *permissions; assert (alert); get.trash = 0; permissions = make_array (); array_add (permissions, g_strdup ("get_tasks")); available = where_owned ("task", &get, 1, "any", 0, permissions); array_free (permissions); init_iterator (iterator, "SELECT tasks.name, tasks.uuid, %s FROM tasks, task_alerts" " WHERE tasks.id = task_alerts.task" " AND task_alerts.alert = %llu" " AND hidden = 0" " ORDER BY tasks.name %s;", available, alert, ascending ? "ASC" : "DESC"); g_free (available); } /** * @brief Return the name from an alert task iterator. * * @param[in] iterator Iterator. * * @return Name of the task or NULL if iteration is complete. */ const char* alert_task_iterator_name (iterator_t* iterator) { const char *ret; if (iterator->done) return NULL; ret = iterator_string (iterator, 0); return ret; } /** * @brief Return the uuid from an alert task iterator. * * @param[in] iterator Iterator. * * @return UUID of the task or NULL if iteration is complete. */ const char* alert_task_iterator_uuid (iterator_t* iterator) { const char *ret; if (iterator->done) return NULL; ret = iterator_string (iterator, 1); return ret; } /** * @brief Get the read permission status from a GET iterator. * * @param[in] iterator Iterator. * * @return 1 if may read, else 0. */ int alert_task_iterator_readable (iterator_t* iterator) { if (iterator->done) return 0; return iterator_int (iterator, 2); } /* Task functions. */ /** * @brief Append value to field of task. * * @param[in] task Task. * @param[in] field Field. * @param[in] value Value. */ static void append_to_task_string (task_t task, const char* field, const char* value) { char* current; gchar* quote; current = sql_string ("SELECT %s FROM tasks WHERE id = %llu;", field, task); if (current) { gchar* new = g_strconcat ((const gchar*) current, value, NULL); free (current); quote = sql_nquote (new, strlen (new)); g_free (new); } else quote = sql_nquote (value, strlen (value)); sql ("UPDATE tasks SET %s = '%s', modification_time = m_now ()" " WHERE id = %llu;", field, quote, task); g_free (quote); } /** * @brief Filter columns for task iterator. */ #define TASK_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "status", "total", "first_report", \ "last_report", "threat", "trend", "severity", "schedule", "next_due", \ "first", "last", NULL } /** * @brief Task iterator columns. */ #define TASK_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS (tasks), \ { "run_status", NULL }, \ { \ "(SELECT count(*) FROM reports" \ " WHERE task = tasks.id)", \ "total", \ KEYWORD_TYPE_INTEGER \ }, \ { \ "(SELECT uuid FROM reports WHERE task = tasks.id" \ /* TODO 1 == TASK_STATUS_DONE */ \ " AND scan_run_status = 1" \ " ORDER BY date ASC LIMIT 1)", \ "first_report" \ }, \ { "run_status_name (run_status)", "status" }, \ { \ "(SELECT uuid FROM reports WHERE task = tasks.id" \ /* TODO 1 == TASK_STATUS_DONE */ \ " AND scan_run_status = 1" \ " ORDER BY date DESC LIMIT 1)", \ "last_report" \ }, \ { \ "(SELECT count(*) FROM reports" \ /* TODO 1 == TASK_STATUS_DONE */ \ " WHERE task = tasks.id AND scan_run_status = 1)", \ NULL, \ KEYWORD_TYPE_INTEGER \ }, \ { "hosts_ordering", NULL }, \ { "scanner", NULL }, \ { NULL, NULL } \ } /** * @brief Task iterator WHERE columns. */ #define TASK_ITERATOR_WHERE_COLUMNS \ { \ { "task_threat_level (id, opts.override, opts.min_qod)", "threat" }, \ { "task_trend (id, opts.override, opts.min_qod)", "trend" }, \ { \ "task_severity (id, opts.override, opts.min_qod)", \ "severity", \ KEYWORD_TYPE_DOUBLE \ }, \ { \ "(SELECT schedules.name FROM schedules" \ " WHERE schedules.id = tasks.schedule)", \ "schedule" \ }, \ { \ "(CASE WHEN schedule_next_time IS NULL" \ " THEN -1" \ " WHEN schedule_next_time = 0 AND tasks.schedule > 0" \ " THEN (SELECT first_time" \ " FROM schedules" \ " WHERE schedules.id = tasks.schedule)" \ " ELSE schedule_next_time" \ " END)", \ "next_due" \ }, \ { \ "(SELECT date FROM reports WHERE task = tasks.id" \ /* TODO 1 == TASK_STATUS_DONE */ \ " AND scan_run_status = 1" \ " ORDER BY date ASC LIMIT 1)", \ "first" \ }, \ { \ "(SELECT date FROM reports WHERE task = tasks.id" \ /* TODO 1 == TASK_STATUS_DONE */ \ " AND scan_run_status = 1" \ " ORDER BY date DESC LIMIT 1)", \ "last" \ }, \ { NULL, NULL } \ } /** * @brief Generate the extra_tables string for a task iterator. * * @param[in] override Whether to apply overrides. * @param[in] min_qod Minimum QoD of results to count. * @return Newly allocated string with the extra_tables clause. */ static gchar* task_iterator_opts_table (int override, int min_qod) { return g_strdup_printf (", (SELECT" " %d AS override," " %d AS min_qod)" " AS opts", override, min_qod); } /** * @brief Initialise a task iterator, limited to current user's tasks. * * @param[in] iterator Task iterator. * @param[in] trash Whether to iterate over trashcan tasks. */ static void init_user_task_iterator (iterator_t* iterator, int trash) { static column_t select_columns[] = TASK_ITERATOR_COLUMNS; gchar *extra_tables; gchar *columns; extra_tables = task_iterator_opts_table (0, MIN_QOD_DEFAULT); columns = columns_build_select (select_columns); init_iterator (iterator, "SELECT %s" " FROM tasks%s" " WHERE ((owner IS NULL)" " OR (owner = (SELECT id FROM users" " WHERE users.uuid = '%s')))" "%s;", columns, extra_tables, current_credentials.uuid, trash ? " AND hidden = 2" : " AND hidden < 2"); g_free (extra_tables); g_free (columns); } /** * @brief Initialise a task iterator. * * @param[in] iterator Task iterator. * @param[in] get GET data. * * @return 0 success, 1 failed to find target, 2 failed to find filter, * -1 error. */ int init_task_iterator (iterator_t* iterator, const get_data_t *get) { static const char *filter_columns[] = TASK_ITERATOR_FILTER_COLUMNS; static column_t columns[] = TASK_ITERATOR_COLUMNS; static column_t where_columns[] = TASK_ITERATOR_WHERE_COLUMNS; char *filter; gchar *value; int overrides, min_qod; gchar *extra_tables; int ret; if (get->filt_id && strcmp (get->filt_id, "0")) { filter = filter_term (get->filt_id); if (filter == NULL) return 2; } else filter = NULL; value = filter_term_value (filter ? filter : get->filter, "apply_overrides"); overrides = value && strcmp (value, "0"); g_free (value); value = filter_term_value (filter ? filter : get->filter, "min_qod"); if (value == NULL || sscanf (value, "%d", &min_qod) != 1) min_qod = MIN_QOD_DEFAULT; g_free (value); free (filter); extra_tables = task_iterator_opts_table (overrides, min_qod); ret = init_get_iterator2 (iterator, "task", get, /* SELECT columns. */ columns, columns, /* Filterable columns not in SELECT columns. */ where_columns, where_columns, filter_columns, 0, extra_tables, (get->id && (strcmp (get->id, MANAGE_EXAMPLE_TASK_UUID) == 0)) ? " AND hidden = 1" : (get->trash ? " AND hidden = 2" : " AND hidden = 0"), current_credentials.uuid ? TRUE : FALSE); g_free (extra_tables); return ret; } /** * @brief Get the run status from a task iterator. * * @param[in] iterator Iterator. * * @return Task run status. */ task_status_t task_iterator_run_status (iterator_t* iterator) { task_status_t ret; if (iterator->done) return TASK_STATUS_INTERNAL_ERROR; ret = (unsigned int) iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT); return ret; } /** * @brief Get the number of reports of a task iterator. * * @param[in] iterator Iterator. * * @return Count of all task reports. */ int task_iterator_total_reports (iterator_t* iterator) { if (iterator->done) return 0; return iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 1); } /** * @brief Get the first report UUID from a task iterator. * * @param[in] iterator Iterator. * * @return First report UUID. */ const char * task_iterator_first_report (iterator_t* iterator) { if (iterator->done) return 0; return iterator_string (iterator, GET_ITERATOR_COLUMN_COUNT + 2); } /** * @brief Get the run status name from a task iterator. * * @param[in] iterator Iterator. * * @return Task run status name. */ const char * task_iterator_run_status_name (iterator_t* iterator) { if (iterator->done) return 0; return iterator_string (iterator, GET_ITERATOR_COLUMN_COUNT + 3); } /** * @brief Get the last report UUID from a task iterator. * * @param[in] iterator Iterator. * * @return Last report UUID. */ const char * task_iterator_last_report (iterator_t* iterator) { if (iterator->done) return 0; return iterator_string (iterator, GET_ITERATOR_COLUMN_COUNT + 4); } /** * @brief Get the number of reports of a task iterator. * * @param[in] iterator Iterator. * * @return Count of all task reports. */ int task_iterator_finished_reports (iterator_t *iterator) { if (iterator->done) return 0; return iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 5); } /** * @brief Get the hosts ordering value from a task iterator. * * @param[in] iterator Iterator. * * @return Task hosts ordering. */ const char * task_iterator_hosts_ordering (iterator_t* iterator) { if (iterator->done) return 0; return iterator_string (iterator, GET_ITERATOR_COLUMN_COUNT + 6); } /** * @brief Get the UUID of task scanner from a task iterator. * * @param[in] iterator Iterator. * * @return Task scanner if found, NULL otherwise. */ scanner_t task_iterator_scanner (iterator_t* iterator) { if (iterator->done) return 0; return iterator_int64 (iterator, GET_ITERATOR_COLUMN_COUNT + 7); } /** * @brief Return whether a task is in use by a task. * * @param[in] task Task. * * @return 0. */ int task_in_use (task_t task) { task_status_t status; status = task_run_status (task); return status == TASK_STATUS_DELETE_REQUESTED || status == TASK_STATUS_DELETE_WAITING || status == TASK_STATUS_DELETE_ULTIMATE_REQUESTED || status == TASK_STATUS_DELETE_ULTIMATE_WAITING || status == TASK_STATUS_REQUESTED || status == TASK_STATUS_RUNNING || status == TASK_STATUS_STOP_REQUESTED_GIVEUP || status == TASK_STATUS_STOP_REQUESTED || status == TASK_STATUS_STOP_WAITING; } /** * @brief Return whether a trashcan task is referenced by a task. * * @param[in] task Task. * * @return 0. */ int trash_task_in_use (task_t task) { return task_in_use (task); } /** * @brief Return whether a task is an Alterable Task. * * @param[in] task Task. * * @return 1 if Alterable, else 0. */ int task_alterable (task_t task) { return sql_int ("SELECT alterable FROM tasks" " WHERE id = %llu", task); } /** * @brief Return whether a task is writable. * * @param[in] task Task. * * @return 1 if writable, else 0. */ int task_writable (task_t task) { return sql_int ("SELECT hidden = 0 FROM tasks" " WHERE id = %llu", task); } /** * @brief Return whether a trashcan task is writable. * * @param[in] task Task. * * @return 1 if writable, else 0. */ int trash_task_writable (task_t task) { return sql_int ("SELECT hidden = 2 FROM tasks" " WHERE id = %llu", task); } /** * @brief Initialize the manage library for a process. * * Open the SQL database, attach secondary databases, and define functions. * * @param[in] update_nvt_cache 0 operate normally, -1 just update NVT cache, * -2 just rebuild NVT cache. * @param[in] database Location of manage database. */ void init_manage_process (int update_nvt_cache, const gchar *database) { gchar *mgr_dir; int ret; if (sql_is_open ()) { if (update_nvt_cache == -2) { if (progress) progress (); sql_begin_exclusive (); sql ("DELETE FROM nvt_cves;"); sql ("DELETE FROM nvts;"); if (progress) progress (); sql ("DELETE FROM nvt_preferences;"); } return; } /* Ensure the mgr directory exists. */ mgr_dir = g_build_filename (OPENVAS_STATE_DIR, "mgr", NULL); ret = g_mkdir_with_parents (mgr_dir, 0755 /* "rwxr-xr-x" */); g_free (mgr_dir); if (ret == -1) { g_warning ("%s: failed to create mgr directory: %s\n", __FUNCTION__, strerror (errno)); abort (); } { struct stat state; int err; err = stat (database ? database : sql_default_database (), &state); if (err) switch (errno) { case ENOENT: break; default: g_warning ("%s: failed to stat database: %s\n", __FUNCTION__, strerror (errno)); abort (); } else if (state.st_mode & (S_IXUSR | S_IRWXG | S_IRWXO)) { g_warning ("%s: database permissions are too loose, repairing\n", __FUNCTION__); if (chmod (database ? database : sql_default_database (), S_IRUSR | S_IWUSR)) { g_warning ("%s: chmod failed: %s\n", __FUNCTION__, strerror (errno)); abort (); } } } /* Open the database. */ if (sql_open (database)) { g_warning ("%s: sql_open failed\n", __FUNCTION__); abort (); } if (update_nvt_cache) { if (update_nvt_cache == -2) { if (progress) progress (); sql_begin_exclusive (); sql ("DELETE FROM nvt_cves;"); sql ("DELETE FROM nvts;"); if (progress) progress (); sql ("DELETE FROM nvt_preferences;"); } } else { /* Attach the SCAP and CERT databases. */ manage_attach_databases (); } /* Define functions for SQL. */ if (manage_create_sql_functions ()) { g_warning ("%s: failed to create functions", __FUNCTION__); abort (); } } /** * @brief Reinitialize the manage library for a process. * * This is mandatory after a fork, to not carry open databases around (refer * to database documentation). */ void reinit_manage_process () { cleanup_manage_process (FALSE); init_manage_process (0, task_db_name); } /** * @brief Setup config preferences for a config. * * @param[in] config The config. * @param[in] safe_checks safe_checks option: 1 for "yes", 0 for "no". * @param[in] optimize_test optimize_test option: 1 for "yes", 0 for "no". * @param[in] port_range port_range option: 1 for "yes", 0 for "no". */ static void setup_full_config_prefs (config_t config, int safe_checks, int optimize_test, int port_range) { sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'SERVER_PREFS', 'max_hosts', '20');", config); sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'SERVER_PREFS', 'max_checks', '4');", config); sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'SERVER_PREFS', 'cgi_path', '/cgi-bin:/scripts');", config); if (port_range) sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'SERVER_PREFS', 'port_range', '1-65535');", config); else sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'SERVER_PREFS', 'port_range', 'default');", config); sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'SERVER_PREFS', 'auto_enable_dependencies', 'yes');", config); if (optimize_test) sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'SERVER_PREFS', 'optimize_test', 'yes');", config); else sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'SERVER_PREFS', 'optimize_test', 'no');", config); if (safe_checks) sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'SERVER_PREFS', 'safe_checks', 'yes');", config); else sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'SERVER_PREFS', 'safe_checks', 'no');", config); sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'SERVER_PREFS', 'use_mac_addr', 'no');", config); sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'SERVER_PREFS', 'unscanned_closed', 'yes');", config); sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'SERVER_PREFS', 'unscanned_closed_udp', 'yes');", config); sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'SERVER_PREFS', 'log_whole_attack', 'no');", config); sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'SERVER_PREFS', 'checks_read_timeout', '5');", config); sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'SERVER_PREFS', 'network_scan', 'no');", config); sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'SERVER_PREFS', 'non_simult_ports', '139, 445');", config); sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'SERVER_PREFS', 'plugins_timeout', '320');", config); sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'SERVER_PREFS', 'nasl_no_signature_check', 'yes');", config); sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'PLUGINS_PREFS'," " 'Ping Host[checkbox]:Mark unrechable Hosts as dead (not scanning)'," " 'yes');", config); sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%i, 'PLUGINS_PREFS'," " 'Login configurations[checkbox]:NTLMSSP'," " 'yes');", config); } /** * @brief Update the memory cache of NVTs. */ static void update_nvti_cache () { iterator_t nvts; nvtis_free (nvti_cache); nvti_cache = nvtis_new (); init_nvt_iterator (&nvts, (nvt_t) 0, (config_t) 0, NULL, NULL, 1, NULL); while (next (&nvts)) { nvti_t *nvti = nvti_new (); nvti_set_oid (nvti, nvt_iterator_oid (&nvts)); nvti_set_name (nvti, nvt_iterator_name (&nvts)); nvti_set_family (nvti, nvt_iterator_family (&nvts)); nvti_set_cvss_base (nvti, nvt_iterator_cvss_base (&nvts)); nvti_set_cve (nvti, nvt_iterator_cve (&nvts)); nvti_set_bid (nvti, nvt_iterator_bid (&nvts)); nvti_set_xref (nvti, nvt_iterator_xref (&nvts)); nvti_set_tag (nvti, nvt_iterator_tag (&nvts)); nvtis_add (nvti_cache, nvti); } cleanup_iterator (&nvts); } /** * @brief Update the memory cache of NVTs, if this has been requested. * * @return 0 success, 1 failed to get lock, -1 error. */ int manage_update_nvti_cache () { int ret; ret = sql_begin_immediate_giveup (); if (ret) return ret; if (sql_int ("SELECT value FROM %s.meta" " WHERE name = 'update_nvti_cache';", sql_schema ())) { update_nvti_cache (); sql ("UPDATE %s.meta SET value = 0 WHERE name = 'update_nvti_cache';", sql_schema ()); } sql ("COMMIT;"); return 0; } /** * @brief Insert a port range. */ #define RANGE(type, start, end) \ sql ("INSERT INTO port_ranges" \ " (uuid, port_list, type, start, \"end\", comment, exclude)" \ " VALUES" \ " (make_uuid (), %llu, %i," \ " '" G_STRINGIFY (start) "'," \ " '" G_STRINGIFY (end) "'," \ " '', 0)", \ list, \ type) /** * @brief Make port ranges. * * Caller must lock the db. * * @param[in] list Port list. */ static void make_port_ranges_openvas_default (port_list_t list) { RANGE (PORT_PROTOCOL_TCP, 1, 5); RANGE (PORT_PROTOCOL_TCP, 7, 7); RANGE (PORT_PROTOCOL_TCP, 9, 9); RANGE (PORT_PROTOCOL_TCP, 11, 11); RANGE (PORT_PROTOCOL_TCP, 13, 13); RANGE (PORT_PROTOCOL_TCP, 15, 15); RANGE (PORT_PROTOCOL_TCP, 17, 25); RANGE (PORT_PROTOCOL_TCP, 27, 27); RANGE (PORT_PROTOCOL_TCP, 29, 29); RANGE (PORT_PROTOCOL_TCP, 31, 31); RANGE (PORT_PROTOCOL_TCP, 33, 33); RANGE (PORT_PROTOCOL_TCP, 35, 35); RANGE (PORT_PROTOCOL_TCP, 37, 39); RANGE (PORT_PROTOCOL_TCP, 41, 59); RANGE (PORT_PROTOCOL_TCP, 61, 224); RANGE (PORT_PROTOCOL_TCP, 242, 248); RANGE (PORT_PROTOCOL_TCP, 256, 268); RANGE (PORT_PROTOCOL_TCP, 280, 287); RANGE (PORT_PROTOCOL_TCP, 308, 322); RANGE (PORT_PROTOCOL_TCP, 333, 333); RANGE (PORT_PROTOCOL_TCP, 344, 700); RANGE (PORT_PROTOCOL_TCP, 702, 702); RANGE (PORT_PROTOCOL_TCP, 704, 707); RANGE (PORT_PROTOCOL_TCP, 709, 711); RANGE (PORT_PROTOCOL_TCP, 721, 721); RANGE (PORT_PROTOCOL_TCP, 723, 723); RANGE (PORT_PROTOCOL_TCP, 729, 731); RANGE (PORT_PROTOCOL_TCP, 740, 742); RANGE (PORT_PROTOCOL_TCP, 744, 744); RANGE (PORT_PROTOCOL_TCP, 747, 754); RANGE (PORT_PROTOCOL_TCP, 758, 765); RANGE (PORT_PROTOCOL_TCP, 767, 767); RANGE (PORT_PROTOCOL_TCP, 769, 777); RANGE (PORT_PROTOCOL_TCP, 780, 783); RANGE (PORT_PROTOCOL_TCP, 786, 787); RANGE (PORT_PROTOCOL_TCP, 799, 801); RANGE (PORT_PROTOCOL_TCP, 808, 808); RANGE (PORT_PROTOCOL_TCP, 810, 810); RANGE (PORT_PROTOCOL_TCP, 828, 829); RANGE (PORT_PROTOCOL_TCP, 847, 848); RANGE (PORT_PROTOCOL_TCP, 860, 860); RANGE (PORT_PROTOCOL_TCP, 871, 871); RANGE (PORT_PROTOCOL_TCP, 873, 873); RANGE (PORT_PROTOCOL_TCP, 886, 888); RANGE (PORT_PROTOCOL_TCP, 898, 898); RANGE (PORT_PROTOCOL_TCP, 900, 904); RANGE (PORT_PROTOCOL_TCP, 911, 913); RANGE (PORT_PROTOCOL_TCP, 927, 927); RANGE (PORT_PROTOCOL_TCP, 950, 950); RANGE (PORT_PROTOCOL_TCP, 953, 953); RANGE (PORT_PROTOCOL_TCP, 975, 975); RANGE (PORT_PROTOCOL_TCP, 989, 1002); RANGE (PORT_PROTOCOL_TCP, 1005, 1005); RANGE (PORT_PROTOCOL_TCP, 1008, 1008); RANGE (PORT_PROTOCOL_TCP, 1010, 1010); RANGE (PORT_PROTOCOL_TCP, 1023, 1027); RANGE (PORT_PROTOCOL_TCP, 1029, 1036); RANGE (PORT_PROTOCOL_TCP, 1040, 1040); RANGE (PORT_PROTOCOL_TCP, 1042, 1042); RANGE (PORT_PROTOCOL_TCP, 1045, 1045); RANGE (PORT_PROTOCOL_TCP, 1047, 1112); RANGE (PORT_PROTOCOL_TCP, 1114, 1117); RANGE (PORT_PROTOCOL_TCP, 1119, 1120); RANGE (PORT_PROTOCOL_TCP, 1122, 1127); RANGE (PORT_PROTOCOL_TCP, 1139, 1139); RANGE (PORT_PROTOCOL_TCP, 1154, 1155); RANGE (PORT_PROTOCOL_TCP, 1161, 1162); RANGE (PORT_PROTOCOL_TCP, 1168, 1170); RANGE (PORT_PROTOCOL_TCP, 1178, 1178); RANGE (PORT_PROTOCOL_TCP, 1180, 1181); RANGE (PORT_PROTOCOL_TCP, 1183, 1188); RANGE (PORT_PROTOCOL_TCP, 1194, 1194); RANGE (PORT_PROTOCOL_TCP, 1199, 1231); RANGE (PORT_PROTOCOL_TCP, 1233, 1286); RANGE (PORT_PROTOCOL_TCP, 1288, 1774); RANGE (PORT_PROTOCOL_TCP, 1776, 2028); RANGE (PORT_PROTOCOL_TCP, 2030, 2030); RANGE (PORT_PROTOCOL_TCP, 2032, 2035); RANGE (PORT_PROTOCOL_TCP, 2037, 2038); RANGE (PORT_PROTOCOL_TCP, 2040, 2065); RANGE (PORT_PROTOCOL_TCP, 2067, 2083); RANGE (PORT_PROTOCOL_TCP, 2086, 2087); RANGE (PORT_PROTOCOL_TCP, 2089, 2152); RANGE (PORT_PROTOCOL_TCP, 2155, 2155); RANGE (PORT_PROTOCOL_TCP, 2159, 2167); RANGE (PORT_PROTOCOL_TCP, 2170, 2177); RANGE (PORT_PROTOCOL_TCP, 2180, 2181); RANGE (PORT_PROTOCOL_TCP, 2190, 2191); RANGE (PORT_PROTOCOL_TCP, 2199, 2202); RANGE (PORT_PROTOCOL_TCP, 2213, 2213); RANGE (PORT_PROTOCOL_TCP, 2220, 2223); RANGE (PORT_PROTOCOL_TCP, 2232, 2246); RANGE (PORT_PROTOCOL_TCP, 2248, 2255); RANGE (PORT_PROTOCOL_TCP, 2260, 2260); RANGE (PORT_PROTOCOL_TCP, 2273, 2273); RANGE (PORT_PROTOCOL_TCP, 2279, 2289); RANGE (PORT_PROTOCOL_TCP, 2294, 2311); RANGE (PORT_PROTOCOL_TCP, 2313, 2371); RANGE (PORT_PROTOCOL_TCP, 2381, 2425); RANGE (PORT_PROTOCOL_TCP, 2427, 2681); RANGE (PORT_PROTOCOL_TCP, 2683, 2824); RANGE (PORT_PROTOCOL_TCP, 2826, 2854); RANGE (PORT_PROTOCOL_TCP, 2856, 2924); RANGE (PORT_PROTOCOL_TCP, 2926, 3096); RANGE (PORT_PROTOCOL_TCP, 3098, 3299); RANGE (PORT_PROTOCOL_TCP, 3302, 3321); RANGE (PORT_PROTOCOL_TCP, 3326, 3366); RANGE (PORT_PROTOCOL_TCP, 3372, 3403); RANGE (PORT_PROTOCOL_TCP, 3405, 3545); RANGE (PORT_PROTOCOL_TCP, 3547, 3707); RANGE (PORT_PROTOCOL_TCP, 3709, 3765); RANGE (PORT_PROTOCOL_TCP, 3767, 3770); RANGE (PORT_PROTOCOL_TCP, 3772, 3800); RANGE (PORT_PROTOCOL_TCP, 3802, 3802); RANGE (PORT_PROTOCOL_TCP, 3845, 3871); RANGE (PORT_PROTOCOL_TCP, 3875, 3876); RANGE (PORT_PROTOCOL_TCP, 3885, 3885); RANGE (PORT_PROTOCOL_TCP, 3900, 3900); RANGE (PORT_PROTOCOL_TCP, 3928, 3929); RANGE (PORT_PROTOCOL_TCP, 3939, 3939); RANGE (PORT_PROTOCOL_TCP, 3959, 3959); RANGE (PORT_PROTOCOL_TCP, 3970, 3971); RANGE (PORT_PROTOCOL_TCP, 3984, 3987); RANGE (PORT_PROTOCOL_TCP, 3999, 4036); RANGE (PORT_PROTOCOL_TCP, 4040, 4042); RANGE (PORT_PROTOCOL_TCP, 4045, 4045); RANGE (PORT_PROTOCOL_TCP, 4080, 4080); RANGE (PORT_PROTOCOL_TCP, 4096, 4100); RANGE (PORT_PROTOCOL_TCP, 4111, 4111); RANGE (PORT_PROTOCOL_TCP, 4114, 4114); RANGE (PORT_PROTOCOL_TCP, 4132, 4134); RANGE (PORT_PROTOCOL_TCP, 4138, 4138); RANGE (PORT_PROTOCOL_TCP, 4141, 4145); RANGE (PORT_PROTOCOL_TCP, 4154, 4154); RANGE (PORT_PROTOCOL_TCP, 4160, 4160); RANGE (PORT_PROTOCOL_TCP, 4199, 4200); RANGE (PORT_PROTOCOL_TCP, 4242, 4242); RANGE (PORT_PROTOCOL_TCP, 4300, 4300); RANGE (PORT_PROTOCOL_TCP, 4321, 4321); RANGE (PORT_PROTOCOL_TCP, 4333, 4333); RANGE (PORT_PROTOCOL_TCP, 4343, 4351); RANGE (PORT_PROTOCOL_TCP, 4353, 4358); RANGE (PORT_PROTOCOL_TCP, 4369, 4369); RANGE (PORT_PROTOCOL_TCP, 4400, 4400); RANGE (PORT_PROTOCOL_TCP, 4442, 4457); RANGE (PORT_PROTOCOL_TCP, 4480, 4480); RANGE (PORT_PROTOCOL_TCP, 4500, 4500); RANGE (PORT_PROTOCOL_TCP, 4545, 4547); RANGE (PORT_PROTOCOL_TCP, 4555, 4555); RANGE (PORT_PROTOCOL_TCP, 4557, 4557); RANGE (PORT_PROTOCOL_TCP, 4559, 4559); RANGE (PORT_PROTOCOL_TCP, 4567, 4568); RANGE (PORT_PROTOCOL_TCP, 4600, 4601); RANGE (PORT_PROTOCOL_TCP, 4658, 4662); RANGE (PORT_PROTOCOL_TCP, 4672, 4672); RANGE (PORT_PROTOCOL_TCP, 4752, 4752); RANGE (PORT_PROTOCOL_TCP, 4800, 4802); RANGE (PORT_PROTOCOL_TCP, 4827, 4827); RANGE (PORT_PROTOCOL_TCP, 4837, 4839); RANGE (PORT_PROTOCOL_TCP, 4848, 4849); RANGE (PORT_PROTOCOL_TCP, 4868, 4869); RANGE (PORT_PROTOCOL_TCP, 4885, 4885); RANGE (PORT_PROTOCOL_TCP, 4894, 4894); RANGE (PORT_PROTOCOL_TCP, 4899, 4899); RANGE (PORT_PROTOCOL_TCP, 4950, 4950); RANGE (PORT_PROTOCOL_TCP, 4983, 4983); RANGE (PORT_PROTOCOL_TCP, 4987, 4989); RANGE (PORT_PROTOCOL_TCP, 4998, 4998); RANGE (PORT_PROTOCOL_TCP, 5000, 5011); RANGE (PORT_PROTOCOL_TCP, 5020, 5025); RANGE (PORT_PROTOCOL_TCP, 5031, 5031); RANGE (PORT_PROTOCOL_TCP, 5042, 5042); RANGE (PORT_PROTOCOL_TCP, 5050, 5057); RANGE (PORT_PROTOCOL_TCP, 5060, 5061); RANGE (PORT_PROTOCOL_TCP, 5064, 5066); RANGE (PORT_PROTOCOL_TCP, 5069, 5069); RANGE (PORT_PROTOCOL_TCP, 5071, 5071); RANGE (PORT_PROTOCOL_TCP, 5081, 5081); RANGE (PORT_PROTOCOL_TCP, 5093, 5093); RANGE (PORT_PROTOCOL_TCP, 5099, 5102); RANGE (PORT_PROTOCOL_TCP, 5137, 5137); RANGE (PORT_PROTOCOL_TCP, 5145, 5145); RANGE (PORT_PROTOCOL_TCP, 5150, 5152); RANGE (PORT_PROTOCOL_TCP, 5154, 5154); RANGE (PORT_PROTOCOL_TCP, 5165, 5165); RANGE (PORT_PROTOCOL_TCP, 5190, 5193); RANGE (PORT_PROTOCOL_TCP, 5200, 5203); RANGE (PORT_PROTOCOL_TCP, 5222, 5222); RANGE (PORT_PROTOCOL_TCP, 5225, 5226); RANGE (PORT_PROTOCOL_TCP, 5232, 5232); RANGE (PORT_PROTOCOL_TCP, 5236, 5236); RANGE (PORT_PROTOCOL_TCP, 5250, 5251); RANGE (PORT_PROTOCOL_TCP, 5264, 5265); RANGE (PORT_PROTOCOL_TCP, 5269, 5269); RANGE (PORT_PROTOCOL_TCP, 5272, 5272); RANGE (PORT_PROTOCOL_TCP, 5282, 5282); RANGE (PORT_PROTOCOL_TCP, 5300, 5311); RANGE (PORT_PROTOCOL_TCP, 5314, 5315); RANGE (PORT_PROTOCOL_TCP, 5351, 5355); RANGE (PORT_PROTOCOL_TCP, 5400, 5432); RANGE (PORT_PROTOCOL_TCP, 5435, 5435); RANGE (PORT_PROTOCOL_TCP, 5454, 5456); RANGE (PORT_PROTOCOL_TCP, 5461, 5463); RANGE (PORT_PROTOCOL_TCP, 5465, 5465); RANGE (PORT_PROTOCOL_TCP, 5500, 5504); RANGE (PORT_PROTOCOL_TCP, 5510, 5510); RANGE (PORT_PROTOCOL_TCP, 5520, 5521); RANGE (PORT_PROTOCOL_TCP, 5530, 5530); RANGE (PORT_PROTOCOL_TCP, 5540, 5540); RANGE (PORT_PROTOCOL_TCP, 5550, 5550); RANGE (PORT_PROTOCOL_TCP, 5553, 5556); RANGE (PORT_PROTOCOL_TCP, 5566, 5566); RANGE (PORT_PROTOCOL_TCP, 5569, 5569); RANGE (PORT_PROTOCOL_TCP, 5595, 5605); RANGE (PORT_PROTOCOL_TCP, 5631, 5632); RANGE (PORT_PROTOCOL_TCP, 5666, 5666); RANGE (PORT_PROTOCOL_TCP, 5673, 5680); RANGE (PORT_PROTOCOL_TCP, 5688, 5688); RANGE (PORT_PROTOCOL_TCP, 5690, 5690); RANGE (PORT_PROTOCOL_TCP, 5713, 5717); RANGE (PORT_PROTOCOL_TCP, 5720, 5720); RANGE (PORT_PROTOCOL_TCP, 5729, 5730); RANGE (PORT_PROTOCOL_TCP, 5741, 5742); RANGE (PORT_PROTOCOL_TCP, 5745, 5746); RANGE (PORT_PROTOCOL_TCP, 5755, 5755); RANGE (PORT_PROTOCOL_TCP, 5757, 5757); RANGE (PORT_PROTOCOL_TCP, 5766, 5768); RANGE (PORT_PROTOCOL_TCP, 5771, 5771); RANGE (PORT_PROTOCOL_TCP, 5800, 5803); RANGE (PORT_PROTOCOL_TCP, 5813, 5813); RANGE (PORT_PROTOCOL_TCP, 5858, 5859); RANGE (PORT_PROTOCOL_TCP, 5882, 5882); RANGE (PORT_PROTOCOL_TCP, 5888, 5889); RANGE (PORT_PROTOCOL_TCP, 5900, 5903); RANGE (PORT_PROTOCOL_TCP, 5968, 5969); RANGE (PORT_PROTOCOL_TCP, 5977, 5979); RANGE (PORT_PROTOCOL_TCP, 5987, 5991); RANGE (PORT_PROTOCOL_TCP, 5997, 6010); RANGE (PORT_PROTOCOL_TCP, 6050, 6051); RANGE (PORT_PROTOCOL_TCP, 6064, 6073); RANGE (PORT_PROTOCOL_TCP, 6085, 6085); RANGE (PORT_PROTOCOL_TCP, 6100, 6112); RANGE (PORT_PROTOCOL_TCP, 6123, 6123); RANGE (PORT_PROTOCOL_TCP, 6141, 6150); RANGE (PORT_PROTOCOL_TCP, 6175, 6177); RANGE (PORT_PROTOCOL_TCP, 6200, 6200); RANGE (PORT_PROTOCOL_TCP, 6253, 6253); RANGE (PORT_PROTOCOL_TCP, 6255, 6255); RANGE (PORT_PROTOCOL_TCP, 6270, 6270); RANGE (PORT_PROTOCOL_TCP, 6300, 6300); RANGE (PORT_PROTOCOL_TCP, 6321, 6322); RANGE (PORT_PROTOCOL_TCP, 6343, 6343); RANGE (PORT_PROTOCOL_TCP, 6346, 6347); RANGE (PORT_PROTOCOL_TCP, 6373, 6373); RANGE (PORT_PROTOCOL_TCP, 6382, 6382); RANGE (PORT_PROTOCOL_TCP, 6389, 6389); RANGE (PORT_PROTOCOL_TCP, 6400, 6400); RANGE (PORT_PROTOCOL_TCP, 6455, 6456); RANGE (PORT_PROTOCOL_TCP, 6471, 6471); RANGE (PORT_PROTOCOL_TCP, 6500, 6503); RANGE (PORT_PROTOCOL_TCP, 6505, 6510); RANGE (PORT_PROTOCOL_TCP, 6543, 6543); RANGE (PORT_PROTOCOL_TCP, 6547, 6550); RANGE (PORT_PROTOCOL_TCP, 6558, 6558); RANGE (PORT_PROTOCOL_TCP, 6566, 6566); RANGE (PORT_PROTOCOL_TCP, 6580, 6582); RANGE (PORT_PROTOCOL_TCP, 6588, 6588); RANGE (PORT_PROTOCOL_TCP, 6620, 6621); RANGE (PORT_PROTOCOL_TCP, 6623, 6623); RANGE (PORT_PROTOCOL_TCP, 6628, 6628); RANGE (PORT_PROTOCOL_TCP, 6631, 6631); RANGE (PORT_PROTOCOL_TCP, 6665, 6670); RANGE (PORT_PROTOCOL_TCP, 6672, 6673); RANGE (PORT_PROTOCOL_TCP, 6699, 6701); RANGE (PORT_PROTOCOL_TCP, 6714, 6714); RANGE (PORT_PROTOCOL_TCP, 6767, 6768); RANGE (PORT_PROTOCOL_TCP, 6776, 6776); RANGE (PORT_PROTOCOL_TCP, 6788, 6790); RANGE (PORT_PROTOCOL_TCP, 6831, 6831); RANGE (PORT_PROTOCOL_TCP, 6841, 6842); RANGE (PORT_PROTOCOL_TCP, 6850, 6850); RANGE (PORT_PROTOCOL_TCP, 6881, 6889); RANGE (PORT_PROTOCOL_TCP, 6891, 6891); RANGE (PORT_PROTOCOL_TCP, 6901, 6901); RANGE (PORT_PROTOCOL_TCP, 6939, 6939); RANGE (PORT_PROTOCOL_TCP, 6961, 6966); RANGE (PORT_PROTOCOL_TCP, 6969, 6970); RANGE (PORT_PROTOCOL_TCP, 6998, 7015); RANGE (PORT_PROTOCOL_TCP, 7020, 7021); RANGE (PORT_PROTOCOL_TCP, 7030, 7030); RANGE (PORT_PROTOCOL_TCP, 7070, 7070); RANGE (PORT_PROTOCOL_TCP, 7099, 7100); RANGE (PORT_PROTOCOL_TCP, 7121, 7121); RANGE (PORT_PROTOCOL_TCP, 7161, 7161); RANGE (PORT_PROTOCOL_TCP, 7170, 7170); RANGE (PORT_PROTOCOL_TCP, 7174, 7174); RANGE (PORT_PROTOCOL_TCP, 7200, 7201); RANGE (PORT_PROTOCOL_TCP, 7210, 7210); RANGE (PORT_PROTOCOL_TCP, 7269, 7269); RANGE (PORT_PROTOCOL_TCP, 7273, 7273); RANGE (PORT_PROTOCOL_TCP, 7280, 7281); RANGE (PORT_PROTOCOL_TCP, 7283, 7283); RANGE (PORT_PROTOCOL_TCP, 7300, 7300); RANGE (PORT_PROTOCOL_TCP, 7320, 7320); RANGE (PORT_PROTOCOL_TCP, 7326, 7326); RANGE (PORT_PROTOCOL_TCP, 7391, 7392); RANGE (PORT_PROTOCOL_TCP, 7395, 7395); RANGE (PORT_PROTOCOL_TCP, 7426, 7431); RANGE (PORT_PROTOCOL_TCP, 7437, 7437); RANGE (PORT_PROTOCOL_TCP, 7464, 7464); RANGE (PORT_PROTOCOL_TCP, 7491, 7491); RANGE (PORT_PROTOCOL_TCP, 7501, 7501); RANGE (PORT_PROTOCOL_TCP, 7510, 7511); RANGE (PORT_PROTOCOL_TCP, 7544, 7545); RANGE (PORT_PROTOCOL_TCP, 7560, 7560); RANGE (PORT_PROTOCOL_TCP, 7566, 7566); RANGE (PORT_PROTOCOL_TCP, 7570, 7570); RANGE (PORT_PROTOCOL_TCP, 7575, 7575); RANGE (PORT_PROTOCOL_TCP, 7588, 7588); RANGE (PORT_PROTOCOL_TCP, 7597, 7597); RANGE (PORT_PROTOCOL_TCP, 7624, 7624); RANGE (PORT_PROTOCOL_TCP, 7626, 7627); RANGE (PORT_PROTOCOL_TCP, 7633, 7634); RANGE (PORT_PROTOCOL_TCP, 7648, 7649); RANGE (PORT_PROTOCOL_TCP, 7666, 7666); RANGE (PORT_PROTOCOL_TCP, 7674, 7676); RANGE (PORT_PROTOCOL_TCP, 7743, 7743); RANGE (PORT_PROTOCOL_TCP, 7775, 7779); RANGE (PORT_PROTOCOL_TCP, 7781, 7781); RANGE (PORT_PROTOCOL_TCP, 7786, 7786); RANGE (PORT_PROTOCOL_TCP, 7797, 7798); RANGE (PORT_PROTOCOL_TCP, 7800, 7801); RANGE (PORT_PROTOCOL_TCP, 7845, 7846); RANGE (PORT_PROTOCOL_TCP, 7875, 7875); RANGE (PORT_PROTOCOL_TCP, 7902, 7902); RANGE (PORT_PROTOCOL_TCP, 7913, 7913); RANGE (PORT_PROTOCOL_TCP, 7932, 7933); RANGE (PORT_PROTOCOL_TCP, 7967, 7967); RANGE (PORT_PROTOCOL_TCP, 7979, 7980); RANGE (PORT_PROTOCOL_TCP, 7999, 8005); RANGE (PORT_PROTOCOL_TCP, 8007, 8010); RANGE (PORT_PROTOCOL_TCP, 8022, 8022); RANGE (PORT_PROTOCOL_TCP, 8032, 8033); RANGE (PORT_PROTOCOL_TCP, 8044, 8044); RANGE (PORT_PROTOCOL_TCP, 8074, 8074); RANGE (PORT_PROTOCOL_TCP, 8080, 8082); RANGE (PORT_PROTOCOL_TCP, 8088, 8089); RANGE (PORT_PROTOCOL_TCP, 8098, 8098); RANGE (PORT_PROTOCOL_TCP, 8100, 8100); RANGE (PORT_PROTOCOL_TCP, 8115, 8116); RANGE (PORT_PROTOCOL_TCP, 8118, 8118); RANGE (PORT_PROTOCOL_TCP, 8121, 8122); RANGE (PORT_PROTOCOL_TCP, 8130, 8132); RANGE (PORT_PROTOCOL_TCP, 8160, 8161); RANGE (PORT_PROTOCOL_TCP, 8181, 8194); RANGE (PORT_PROTOCOL_TCP, 8199, 8201); RANGE (PORT_PROTOCOL_TCP, 8204, 8208); RANGE (PORT_PROTOCOL_TCP, 8224, 8225); RANGE (PORT_PROTOCOL_TCP, 8245, 8245); RANGE (PORT_PROTOCOL_TCP, 8311, 8311); RANGE (PORT_PROTOCOL_TCP, 8351, 8351); RANGE (PORT_PROTOCOL_TCP, 8376, 8380); RANGE (PORT_PROTOCOL_TCP, 8400, 8403); RANGE (PORT_PROTOCOL_TCP, 8416, 8417); RANGE (PORT_PROTOCOL_TCP, 8431, 8431); RANGE (PORT_PROTOCOL_TCP, 8443, 8444); RANGE (PORT_PROTOCOL_TCP, 8450, 8450); RANGE (PORT_PROTOCOL_TCP, 8473, 8473); RANGE (PORT_PROTOCOL_TCP, 8554, 8555); RANGE (PORT_PROTOCOL_TCP, 8649, 8649); RANGE (PORT_PROTOCOL_TCP, 8733, 8733); RANGE (PORT_PROTOCOL_TCP, 8763, 8765); RANGE (PORT_PROTOCOL_TCP, 8786, 8787); RANGE (PORT_PROTOCOL_TCP, 8804, 8804); RANGE (PORT_PROTOCOL_TCP, 8863, 8864); RANGE (PORT_PROTOCOL_TCP, 8875, 8875); RANGE (PORT_PROTOCOL_TCP, 8880, 8880); RANGE (PORT_PROTOCOL_TCP, 8888, 8894); RANGE (PORT_PROTOCOL_TCP, 8900, 8901); RANGE (PORT_PROTOCOL_TCP, 8910, 8911); RANGE (PORT_PROTOCOL_TCP, 8954, 8954); RANGE (PORT_PROTOCOL_TCP, 8989, 8989); RANGE (PORT_PROTOCOL_TCP, 8999, 9002); RANGE (PORT_PROTOCOL_TCP, 9006, 9006); RANGE (PORT_PROTOCOL_TCP, 9009, 9009); RANGE (PORT_PROTOCOL_TCP, 9020, 9026); RANGE (PORT_PROTOCOL_TCP, 9080, 9080); RANGE (PORT_PROTOCOL_TCP, 9090, 9091); RANGE (PORT_PROTOCOL_TCP, 9100, 9103); RANGE (PORT_PROTOCOL_TCP, 9110, 9111); RANGE (PORT_PROTOCOL_TCP, 9131, 9131); RANGE (PORT_PROTOCOL_TCP, 9152, 9152); RANGE (PORT_PROTOCOL_TCP, 9160, 9164); RANGE (PORT_PROTOCOL_TCP, 9200, 9207); RANGE (PORT_PROTOCOL_TCP, 9210, 9211); RANGE (PORT_PROTOCOL_TCP, 9217, 9217); RANGE (PORT_PROTOCOL_TCP, 9281, 9285); RANGE (PORT_PROTOCOL_TCP, 9287, 9287); RANGE (PORT_PROTOCOL_TCP, 9292, 9292); RANGE (PORT_PROTOCOL_TCP, 9321, 9321); RANGE (PORT_PROTOCOL_TCP, 9343, 9344); RANGE (PORT_PROTOCOL_TCP, 9346, 9346); RANGE (PORT_PROTOCOL_TCP, 9374, 9374); RANGE (PORT_PROTOCOL_TCP, 9390, 9390); RANGE (PORT_PROTOCOL_TCP, 9396, 9397); RANGE (PORT_PROTOCOL_TCP, 9400, 9400); RANGE (PORT_PROTOCOL_TCP, 9418, 9418); RANGE (PORT_PROTOCOL_TCP, 9495, 9495); RANGE (PORT_PROTOCOL_TCP, 9500, 9500); RANGE (PORT_PROTOCOL_TCP, 9535, 9537); RANGE (PORT_PROTOCOL_TCP, 9593, 9595); RANGE (PORT_PROTOCOL_TCP, 9600, 9600); RANGE (PORT_PROTOCOL_TCP, 9612, 9612); RANGE (PORT_PROTOCOL_TCP, 9704, 9704); RANGE (PORT_PROTOCOL_TCP, 9747, 9747); RANGE (PORT_PROTOCOL_TCP, 9753, 9753); RANGE (PORT_PROTOCOL_TCP, 9797, 9797); RANGE (PORT_PROTOCOL_TCP, 9800, 9802); RANGE (PORT_PROTOCOL_TCP, 9872, 9872); RANGE (PORT_PROTOCOL_TCP, 9875, 9876); RANGE (PORT_PROTOCOL_TCP, 9888, 9889); RANGE (PORT_PROTOCOL_TCP, 9898, 9901); RANGE (PORT_PROTOCOL_TCP, 9909, 9909); RANGE (PORT_PROTOCOL_TCP, 9911, 9911); RANGE (PORT_PROTOCOL_TCP, 9950, 9952); RANGE (PORT_PROTOCOL_TCP, 9990, 10005); RANGE (PORT_PROTOCOL_TCP, 10007, 10008); RANGE (PORT_PROTOCOL_TCP, 10012, 10012); RANGE (PORT_PROTOCOL_TCP, 10080, 10083); RANGE (PORT_PROTOCOL_TCP, 10101, 10103); RANGE (PORT_PROTOCOL_TCP, 10113, 10116); RANGE (PORT_PROTOCOL_TCP, 10128, 10128); RANGE (PORT_PROTOCOL_TCP, 10252, 10252); RANGE (PORT_PROTOCOL_TCP, 10260, 10260); RANGE (PORT_PROTOCOL_TCP, 10288, 10288); RANGE (PORT_PROTOCOL_TCP, 10607, 10607); RANGE (PORT_PROTOCOL_TCP, 10666, 10666); RANGE (PORT_PROTOCOL_TCP, 10752, 10752); RANGE (PORT_PROTOCOL_TCP, 10990, 10990); RANGE (PORT_PROTOCOL_TCP, 11000, 11001); RANGE (PORT_PROTOCOL_TCP, 11111, 11111); RANGE (PORT_PROTOCOL_TCP, 11201, 11201); RANGE (PORT_PROTOCOL_TCP, 11223, 11223); RANGE (PORT_PROTOCOL_TCP, 11319, 11321); RANGE (PORT_PROTOCOL_TCP, 11367, 11367); RANGE (PORT_PROTOCOL_TCP, 11371, 11371); RANGE (PORT_PROTOCOL_TCP, 11600, 11600); RANGE (PORT_PROTOCOL_TCP, 11720, 11720); RANGE (PORT_PROTOCOL_TCP, 11751, 11751); RANGE (PORT_PROTOCOL_TCP, 11965, 11965); RANGE (PORT_PROTOCOL_TCP, 11967, 11967); RANGE (PORT_PROTOCOL_TCP, 11999, 12006); RANGE (PORT_PROTOCOL_TCP, 12076, 12076); RANGE (PORT_PROTOCOL_TCP, 12109, 12109); RANGE (PORT_PROTOCOL_TCP, 12168, 12168); RANGE (PORT_PROTOCOL_TCP, 12172, 12172); RANGE (PORT_PROTOCOL_TCP, 12223, 12223); RANGE (PORT_PROTOCOL_TCP, 12321, 12321); RANGE (PORT_PROTOCOL_TCP, 12345, 12346); RANGE (PORT_PROTOCOL_TCP, 12361, 12362); RANGE (PORT_PROTOCOL_TCP, 12468, 12468); RANGE (PORT_PROTOCOL_TCP, 12701, 12701); RANGE (PORT_PROTOCOL_TCP, 12753, 12753); RANGE (PORT_PROTOCOL_TCP, 13160, 13160); RANGE (PORT_PROTOCOL_TCP, 13223, 13224); RANGE (PORT_PROTOCOL_TCP, 13701, 13702); RANGE (PORT_PROTOCOL_TCP, 13705, 13706); RANGE (PORT_PROTOCOL_TCP, 13708, 13718); RANGE (PORT_PROTOCOL_TCP, 13720, 13722); RANGE (PORT_PROTOCOL_TCP, 13724, 13724); RANGE (PORT_PROTOCOL_TCP, 13782, 13783); RANGE (PORT_PROTOCOL_TCP, 13818, 13822); RANGE (PORT_PROTOCOL_TCP, 14001, 14001); RANGE (PORT_PROTOCOL_TCP, 14033, 14034); RANGE (PORT_PROTOCOL_TCP, 14141, 14141); RANGE (PORT_PROTOCOL_TCP, 14145, 14145); RANGE (PORT_PROTOCOL_TCP, 14149, 14149); RANGE (PORT_PROTOCOL_TCP, 14194, 14194); RANGE (PORT_PROTOCOL_TCP, 14237, 14237); RANGE (PORT_PROTOCOL_TCP, 14936, 14937); RANGE (PORT_PROTOCOL_TCP, 15000, 15000); RANGE (PORT_PROTOCOL_TCP, 15126, 15126); RANGE (PORT_PROTOCOL_TCP, 15345, 15345); RANGE (PORT_PROTOCOL_TCP, 15363, 15363); RANGE (PORT_PROTOCOL_TCP, 16360, 16361); RANGE (PORT_PROTOCOL_TCP, 16367, 16368); RANGE (PORT_PROTOCOL_TCP, 16384, 16384); RANGE (PORT_PROTOCOL_TCP, 16660, 16661); RANGE (PORT_PROTOCOL_TCP, 16959, 16959); RANGE (PORT_PROTOCOL_TCP, 16969, 16969); RANGE (PORT_PROTOCOL_TCP, 16991, 16991); RANGE (PORT_PROTOCOL_TCP, 17007, 17007); RANGE (PORT_PROTOCOL_TCP, 17185, 17185); RANGE (PORT_PROTOCOL_TCP, 17219, 17219); RANGE (PORT_PROTOCOL_TCP, 17300, 17300); RANGE (PORT_PROTOCOL_TCP, 17770, 17772); RANGE (PORT_PROTOCOL_TCP, 18000, 18000); RANGE (PORT_PROTOCOL_TCP, 18181, 18187); RANGE (PORT_PROTOCOL_TCP, 18190, 18190); RANGE (PORT_PROTOCOL_TCP, 18241, 18241); RANGE (PORT_PROTOCOL_TCP, 18463, 18463); RANGE (PORT_PROTOCOL_TCP, 18769, 18769); RANGE (PORT_PROTOCOL_TCP, 18888, 18888); RANGE (PORT_PROTOCOL_TCP, 19191, 19191); RANGE (PORT_PROTOCOL_TCP, 19194, 19194); RANGE (PORT_PROTOCOL_TCP, 19283, 19283); RANGE (PORT_PROTOCOL_TCP, 19315, 19315); RANGE (PORT_PROTOCOL_TCP, 19398, 19398); RANGE (PORT_PROTOCOL_TCP, 19410, 19412); RANGE (PORT_PROTOCOL_TCP, 19540, 19541); RANGE (PORT_PROTOCOL_TCP, 19638, 19638); RANGE (PORT_PROTOCOL_TCP, 19726, 19726); RANGE (PORT_PROTOCOL_TCP, 20000, 20001); RANGE (PORT_PROTOCOL_TCP, 20005, 20005); RANGE (PORT_PROTOCOL_TCP, 20011, 20012); RANGE (PORT_PROTOCOL_TCP, 20034, 20034); RANGE (PORT_PROTOCOL_TCP, 20200, 20200); RANGE (PORT_PROTOCOL_TCP, 20202, 20203); RANGE (PORT_PROTOCOL_TCP, 20222, 20222); RANGE (PORT_PROTOCOL_TCP, 20670, 20670); RANGE (PORT_PROTOCOL_TCP, 20999, 21000); RANGE (PORT_PROTOCOL_TCP, 21490, 21490); RANGE (PORT_PROTOCOL_TCP, 21544, 21544); RANGE (PORT_PROTOCOL_TCP, 21590, 21590); RANGE (PORT_PROTOCOL_TCP, 21800, 21800); RANGE (PORT_PROTOCOL_TCP, 21845, 21849); RANGE (PORT_PROTOCOL_TCP, 22000, 22001); RANGE (PORT_PROTOCOL_TCP, 22222, 22222); RANGE (PORT_PROTOCOL_TCP, 22273, 22273); RANGE (PORT_PROTOCOL_TCP, 22289, 22289); RANGE (PORT_PROTOCOL_TCP, 22305, 22305); RANGE (PORT_PROTOCOL_TCP, 22321, 22321); RANGE (PORT_PROTOCOL_TCP, 22370, 22370); RANGE (PORT_PROTOCOL_TCP, 22555, 22555); RANGE (PORT_PROTOCOL_TCP, 22800, 22800); RANGE (PORT_PROTOCOL_TCP, 22951, 22951); RANGE (PORT_PROTOCOL_TCP, 23456, 23456); RANGE (PORT_PROTOCOL_TCP, 24000, 24006); RANGE (PORT_PROTOCOL_TCP, 24242, 24242); RANGE (PORT_PROTOCOL_TCP, 24249, 24249); RANGE (PORT_PROTOCOL_TCP, 24345, 24347); RANGE (PORT_PROTOCOL_TCP, 24386, 24386); RANGE (PORT_PROTOCOL_TCP, 24554, 24554); RANGE (PORT_PROTOCOL_TCP, 24677, 24678); RANGE (PORT_PROTOCOL_TCP, 24922, 24922); RANGE (PORT_PROTOCOL_TCP, 25000, 25009); RANGE (PORT_PROTOCOL_TCP, 25378, 25378); RANGE (PORT_PROTOCOL_TCP, 25544, 25544); RANGE (PORT_PROTOCOL_TCP, 25793, 25793); RANGE (PORT_PROTOCOL_TCP, 25867, 25867); RANGE (PORT_PROTOCOL_TCP, 25901, 25901); RANGE (PORT_PROTOCOL_TCP, 25903, 25903); RANGE (PORT_PROTOCOL_TCP, 26000, 26000); RANGE (PORT_PROTOCOL_TCP, 26208, 26208); RANGE (PORT_PROTOCOL_TCP, 26260, 26264); RANGE (PORT_PROTOCOL_TCP, 27000, 27010); RANGE (PORT_PROTOCOL_TCP, 27345, 27345); RANGE (PORT_PROTOCOL_TCP, 27374, 27374); RANGE (PORT_PROTOCOL_TCP, 27504, 27504); RANGE (PORT_PROTOCOL_TCP, 27665, 27665); RANGE (PORT_PROTOCOL_TCP, 27999, 27999); RANGE (PORT_PROTOCOL_TCP, 28001, 28001); RANGE (PORT_PROTOCOL_TCP, 29559, 29559); RANGE (PORT_PROTOCOL_TCP, 29891, 29891); RANGE (PORT_PROTOCOL_TCP, 30001, 30002); RANGE (PORT_PROTOCOL_TCP, 30100, 30102); RANGE (PORT_PROTOCOL_TCP, 30303, 30303); RANGE (PORT_PROTOCOL_TCP, 30999, 30999); RANGE (PORT_PROTOCOL_TCP, 31337, 31337); RANGE (PORT_PROTOCOL_TCP, 31339, 31339); RANGE (PORT_PROTOCOL_TCP, 31416, 31416); RANGE (PORT_PROTOCOL_TCP, 31457, 31457); RANGE (PORT_PROTOCOL_TCP, 31554, 31554); RANGE (PORT_PROTOCOL_TCP, 31556, 31556); RANGE (PORT_PROTOCOL_TCP, 31620, 31620); RANGE (PORT_PROTOCOL_TCP, 31765, 31765); RANGE (PORT_PROTOCOL_TCP, 31785, 31787); RANGE (PORT_PROTOCOL_TCP, 32261, 32261); RANGE (PORT_PROTOCOL_TCP, 32666, 32666); RANGE (PORT_PROTOCOL_TCP, 32768, 32780); RANGE (PORT_PROTOCOL_TCP, 32786, 32787); RANGE (PORT_PROTOCOL_TCP, 32896, 32896); RANGE (PORT_PROTOCOL_TCP, 33270, 33270); RANGE (PORT_PROTOCOL_TCP, 33331, 33331); RANGE (PORT_PROTOCOL_TCP, 33434, 33434); RANGE (PORT_PROTOCOL_TCP, 33911, 33911); RANGE (PORT_PROTOCOL_TCP, 34249, 34249); RANGE (PORT_PROTOCOL_TCP, 34324, 34324); RANGE (PORT_PROTOCOL_TCP, 34952, 34952); RANGE (PORT_PROTOCOL_TCP, 36865, 36865); RANGE (PORT_PROTOCOL_TCP, 37475, 37475); RANGE (PORT_PROTOCOL_TCP, 37651, 37651); RANGE (PORT_PROTOCOL_TCP, 38037, 38037); RANGE (PORT_PROTOCOL_TCP, 38201, 38201); RANGE (PORT_PROTOCOL_TCP, 38292, 38293); RANGE (PORT_PROTOCOL_TCP, 39681, 39681); RANGE (PORT_PROTOCOL_TCP, 40412, 40412); RANGE (PORT_PROTOCOL_TCP, 40841, 40843); RANGE (PORT_PROTOCOL_TCP, 41111, 41111); RANGE (PORT_PROTOCOL_TCP, 41508, 41508); RANGE (PORT_PROTOCOL_TCP, 41794, 41795); RANGE (PORT_PROTOCOL_TCP, 42508, 42510); RANGE (PORT_PROTOCOL_TCP, 43118, 43118); RANGE (PORT_PROTOCOL_TCP, 43188, 43190); RANGE (PORT_PROTOCOL_TCP, 44321, 44322); RANGE (PORT_PROTOCOL_TCP, 44333, 44334); RANGE (PORT_PROTOCOL_TCP, 44442, 44443); RANGE (PORT_PROTOCOL_TCP, 44818, 44818); RANGE (PORT_PROTOCOL_TCP, 45000, 45000); RANGE (PORT_PROTOCOL_TCP, 45054, 45054); RANGE (PORT_PROTOCOL_TCP, 45678, 45678); RANGE (PORT_PROTOCOL_TCP, 45966, 45966); RANGE (PORT_PROTOCOL_TCP, 47000, 47000); RANGE (PORT_PROTOCOL_TCP, 47557, 47557); RANGE (PORT_PROTOCOL_TCP, 47624, 47624); RANGE (PORT_PROTOCOL_TCP, 47806, 47806); RANGE (PORT_PROTOCOL_TCP, 47808, 47808); RANGE (PORT_PROTOCOL_TCP, 47891, 47891); RANGE (PORT_PROTOCOL_TCP, 48000, 48003); RANGE (PORT_PROTOCOL_TCP, 48556, 48556); RANGE (PORT_PROTOCOL_TCP, 49400, 49400); RANGE (PORT_PROTOCOL_TCP, 50000, 50004); RANGE (PORT_PROTOCOL_TCP, 50505, 50505); RANGE (PORT_PROTOCOL_TCP, 50776, 50776); RANGE (PORT_PROTOCOL_TCP, 51210, 51210); RANGE (PORT_PROTOCOL_TCP, 53001, 53001); RANGE (PORT_PROTOCOL_TCP, 54320, 54321); RANGE (PORT_PROTOCOL_TCP, 57341, 57341); RANGE (PORT_PROTOCOL_TCP, 59595, 59595); RANGE (PORT_PROTOCOL_TCP, 60177, 60177); RANGE (PORT_PROTOCOL_TCP, 60179, 60179); RANGE (PORT_PROTOCOL_TCP, 61439, 61441); RANGE (PORT_PROTOCOL_TCP, 61446, 61446); RANGE (PORT_PROTOCOL_TCP, 65000, 65000); RANGE (PORT_PROTOCOL_TCP, 65301, 65301); } /** * @brief Ensure the predefined example task and report exists. */ static void check_db_tasks () { if (sql_int ("SELECT count(*) FROM tasks" " WHERE uuid = '" MANAGE_EXAMPLE_TASK_UUID "';") == 0) { sql ("INSERT into tasks (uuid, owner, name, hidden, comment," " run_status, start_time, end_time, config, target, scanner, slave," " alterable, creation_time, modification_time)" " VALUES ('" MANAGE_EXAMPLE_TASK_UUID "', NULL, 'Example task'," " 1, 'This is an example task for the help pages.', %u," " 1251236905, 1251237136," " (SELECT id FROM configs WHERE name = 'Full and fast')," " (SELECT id FROM targets WHERE name = 'Localhost')," " (SELECT id FROM scanners WHERE uuid = '" SCANNER_UUID_DEFAULT "')," " 0, 0, m_now (), m_now ());", TASK_STATUS_DONE); } if (sql_int ("SELECT count(*) FROM reports" " WHERE uuid = '343435d6-91b0-11de-9478-ffd71f4c6f30';") == 0) { task_t task; result_t result; report_t report; /* Setup a dummy user, so that find_task will work. */ current_credentials.uuid = ""; if (find_task (MANAGE_EXAMPLE_TASK_UUID, &task)) g_warning ("%s: error while finding example task", __FUNCTION__); else if (task == 0) g_warning ("%s: failed to find example task", __FUNCTION__); else { sql ("INSERT into reports (uuid, owner, hidden, task, comment," " start_time, end_time, scan_run_status, slave_progress," " slave_task_uuid)" " VALUES ('343435d6-91b0-11de-9478-ffd71f4c6f30', NULL, 1, %llu," " 'This is an example report for the help pages.'," " 1251236905, 1251237136," " %u, 0, '');", task, TASK_STATUS_DONE); report = sql_last_insert_id (); sql ("INSERT into results (owner, date, uuid, task, host, port, nvt," " type, severity, description, qod)" " VALUES (NULL, m_now(), 'cb291ec0-1b0d-11df-8aa1-002264764cea'," " %llu, '127.0.0.1', 'telnet (23/tcp)'," " '1.3.6.1.4.1.25623.1.0.10330', 'Security Note', 2.0," " 'A telnet server seems to be running on this port'," " '" G_STRINGIFY (QOD_DEFAULT) "');", task); result = sql_last_insert_id (); report_add_result (report, result); manage_report_host_add (report, "127.0.0.1", 1251236906, 1251237135); } current_credentials.uuid = NULL; } } /** * @brief Ensure the predefined target exists. */ static void check_db_targets () { if (sql_int ("SELECT count(*) FROM targets WHERE name = 'Localhost';") == 0) sql ("INSERT INTO targets" " (uuid, owner, name, hosts, creation_time, modification_time," " port_range)" " VALUES ('" TARGET_UUID_LOCALHOST "', NULL, 'Localhost'," " 'localhost', m_now (), m_now ()," " (SELECT id FROM port_lists WHERE uuid = '" PORT_LIST_UUID_DEFAULT "'));"); else /* The port list was wrong for a while, so make sure it's correct. */ sql ("UPDATE targets SET port_range = " " (SELECT id FROM port_lists" " WHERE uuid = '" PORT_LIST_UUID_DEFAULT "')" " WHERE uuid = '" TARGET_UUID_LOCALHOST "';"); } /** * @brief Ensure the predefined scanner exists. * * @return 0 if success, -1 if error. */ static int check_db_scanners () { if (sql_int ("SELECT count(*) FROM scanners WHERE uuid = '%s';", SCANNER_UUID_DEFAULT) == 0) { char *ca_pub, *key_pub, *key_priv; char *quoted_ca_pub, *quoted_key_pub, *quoted_key_priv; GError *error = NULL; if (!g_file_get_contents (CACERT, &ca_pub, NULL, &error)) { g_warning ("%s: %s\n", __FUNCTION__, error->message); g_error_free (error); return -1; } if (!g_file_get_contents (CLIENTCERT, &key_pub, NULL, &error)) { g_warning ("%s: %s\n", __FUNCTION__, error->message); g_error_free (error); g_free (ca_pub); return -1; } if (!g_file_get_contents (CLIENTKEY, &key_priv, NULL, &error)) { g_warning ("%s: %s\n", __FUNCTION__, error->message); g_error_free (error); g_free (ca_pub); g_free (key_pub); return -1; } quoted_ca_pub = sql_quote (ca_pub); quoted_key_pub = sql_quote (key_pub); quoted_key_priv = sql_quote (key_priv); g_free (ca_pub); g_free (key_pub); g_free (key_priv); sql ("INSERT INTO scanners" " (uuid, owner, name, host, port, type, ca_pub, key_pub, key_priv," " creation_time, modification_time)" " VALUES ('" SCANNER_UUID_DEFAULT "', NULL, 'OpenVAS Default'," " 'localhost', 9391, %d, '%s', '%s', '%s', m_now (), m_now ());", SCANNER_TYPE_OPENVAS, quoted_ca_pub, quoted_key_pub, quoted_key_priv); g_free (quoted_ca_pub); g_free (quoted_key_pub); g_free (quoted_key_priv); } return 0; } /** * @brief Ensure that the predefined port lists exist. */ static void check_db_port_lists () { if (sql_int ("SELECT count(*) FROM port_lists" " WHERE uuid = '" PORT_LIST_UUID_DEFAULT "';") == 0) { port_list_t list; sql ("INSERT INTO port_lists (uuid, owner, name, comment, creation_time," " modification_time)" " VALUES ('" PORT_LIST_UUID_DEFAULT "', NULL, 'OpenVAS Default'," " '', m_now (), m_now ())"); list = sql_last_insert_id (); make_port_ranges_openvas_default (list); } if (sql_int ("SELECT count(*) FROM port_lists" " WHERE uuid = '" PORT_LIST_UUID_ALL_TCP "';") == 0) { port_list_t list; sql ("INSERT INTO port_lists (uuid, owner, name, comment, creation_time," " modification_time)" " VALUES ('" PORT_LIST_UUID_ALL_TCP "', NULL, 'All TCP'," " '', m_now (), m_now ())"); list = sql_last_insert_id (); RANGE (PORT_PROTOCOL_TCP, 1, 65535); } if (sql_int ("SELECT count(*) FROM port_lists" " WHERE uuid = '" PORT_LIST_UUID_ALL_TCP_NMAP_5_51_TOP_100 "';") == 0) { port_list_t list; sql ("INSERT INTO port_lists (uuid, owner, name, comment, creation_time," " modification_time)" " VALUES ('" PORT_LIST_UUID_ALL_TCP_NMAP_5_51_TOP_100 "', NULL," " 'All TCP and Nmap 5.51 top 100 UDP', '', m_now (), m_now ())"); list = sql_last_insert_id (); make_port_ranges_all_tcp_nmap_5_51_top_100 (list); } if (sql_int ("SELECT count(*) FROM port_lists" " WHERE uuid = '" PORT_LIST_UUID_ALL_TCP_NMAP_5_51_TOP_1000 "';") == 0) { port_list_t list; sql ("INSERT INTO port_lists (uuid, owner, name, comment, creation_time," " modification_time)" " VALUES ('" PORT_LIST_UUID_ALL_TCP_NMAP_5_51_TOP_1000 "', NULL," " 'All TCP and Nmap 5.51 top 1000 UDP', '', m_now (), m_now ())"); list = sql_last_insert_id (); make_port_ranges_all_tcp_nmap_5_51_top_1000 (list); } if (sql_int ("SELECT count(*) FROM port_lists" " WHERE uuid = '" PORT_LIST_UUID_ALL_PRIV_TCP "';") == 0) { port_list_t list; sql ("INSERT INTO port_lists (uuid, owner, name, comment, creation_time," " modification_time)" " VALUES ('" PORT_LIST_UUID_ALL_PRIV_TCP "', NULL," " 'All privileged TCP', '', m_now (), m_now ())"); list = sql_last_insert_id (); RANGE (PORT_PROTOCOL_TCP, 1, 1023); } if (sql_int ("SELECT count(*) FROM port_lists" " WHERE uuid = '" PORT_LIST_UUID_ALL_PRIV_TCP_UDP "';") == 0) { port_list_t list; sql ("INSERT INTO port_lists (uuid, owner, name, comment, creation_time," " modification_time)" " VALUES ('" PORT_LIST_UUID_ALL_PRIV_TCP_UDP "', NULL," " 'All privileged TCP and UDP', '', m_now (), m_now ())"); list = sql_last_insert_id (); RANGE (PORT_PROTOCOL_TCP, 1, 1023); RANGE (PORT_PROTOCOL_UDP, 1, 1023); } if (sql_int ("SELECT count(*) FROM port_lists" " WHERE uuid = '" PORT_LIST_UUID_ALL_IANA_TCP_2012 "';") == 0) { port_list_t list; sql ("INSERT INTO port_lists (uuid, owner, name, comment, creation_time," " modification_time)" " VALUES ('" PORT_LIST_UUID_ALL_IANA_TCP_2012 "', NULL," " 'All IANA assigned TCP 2012-02-10', '', m_now (), m_now ())"); list = sql_last_insert_id (); make_port_ranges_iana_tcp_2012 (list); } if (sql_int ("SELECT count(*) FROM port_lists" " WHERE uuid = '" PORT_LIST_UUID_ALL_IANA_TCP_UDP_2012 "';") == 0) { port_list_t list; sql ("INSERT INTO port_lists (uuid, owner, name, comment, creation_time," " modification_time)" " VALUES ('" PORT_LIST_UUID_ALL_IANA_TCP_UDP_2012 "', NULL," " 'All IANA assigned TCP and UDP 2012-02-10', '', m_now (), m_now ())"); list = sql_last_insert_id (); make_port_ranges_iana_tcp_udp_2012 (list); } if (sql_int ("SELECT count(*) FROM port_lists" " WHERE uuid = '" PORT_LIST_UUID_NMAP_5_51_TOP_2000_TOP_100 "';") == 0) { port_list_t list; sql ("INSERT INTO port_lists (uuid, owner, name, comment, creation_time," " modification_time)" " VALUES ('" PORT_LIST_UUID_NMAP_5_51_TOP_2000_TOP_100 "', NULL," " 'Nmap 5.51 top 2000 TCP and top 100 UDP', '', m_now (), m_now ())"); list = sql_last_insert_id (); make_port_ranges_nmap_5_51_top_2000_top_100 (list); } /* * Ensure that the highest number in a port range is 65535. At some point * ranges were initialised to 65536. * * This should be a migrator, but this way is easier to backport. */ sql ("UPDATE port_ranges SET \"end\" = 65535 WHERE \"end\" = 65536;"); sql ("UPDATE port_ranges SET start = 65535 WHERE start = 65536;"); } /** * @brief Bring UUIDs for single report format up to date. * * @param[in] old Old UUID. * @param[in] new New UUID. */ static void update_report_format_uuid (const char *old, const char *new) { gchar *dir; dir = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "global_report_formats", old, NULL); if (g_file_test (dir, G_FILE_TEST_EXISTS)) openvas_file_remove_recurse (dir); g_free (dir); sql ("UPDATE report_formats" " SET uuid = '%s', modification_time = m_now ()" " WHERE uuid = '%s';", new, old); sql ("UPDATE alert_method_data" " SET data = '%s'" " WHERE data = '%s';", new, old); } /** * @brief Bring report format UUIDs in database up to date. */ static void update_report_format_uuids () { /* Same as migrate_58_to_59, to enable backporting r13519 to OpenVAS-5 * without backporting the 58 to 59 migrator. In future these should be * done here instead of in a migrator. */ update_report_format_uuid ("a0704abb-2120-489f-959f-251c9f4ffebd", "5ceff8ba-1f62-11e1-ab9f-406186ea4fc5"); update_report_format_uuid ("b993b6f5-f9fb-4e6e-9c94-dd46c00e058d", "6c248850-1f62-11e1-b082-406186ea4fc5"); update_report_format_uuid ("929884c6-c2c4-41e7-befb-2f6aa163b458", "77bd6c4a-1f62-11e1-abf0-406186ea4fc5"); update_report_format_uuid ("9f1ab17b-aaaa-411a-8c57-12df446f5588", "7fcc3a1a-1f62-11e1-86bf-406186ea4fc5"); update_report_format_uuid ("f5c2a364-47d2-4700-b21d-0a7693daddab", "9ca6fe72-1f62-11e1-9e7c-406186ea4fc5"); update_report_format_uuid ("1a60a67e-97d0-4cbf-bc77-f71b08e7043d", "a0b5bfb2-1f62-11e1-85db-406186ea4fc5"); update_report_format_uuid ("19f6f1b3-7128-4433-888c-ccc764fe6ed5", "a3810a62-1f62-11e1-9219-406186ea4fc5"); update_report_format_uuid ("d5da9f67-8551-4e51-807b-b6a873d70e34", "a994b278-1f62-11e1-96ac-406186ea4fc5"); /* New updates go here. Oldest must come first, so add at the end. */ update_report_format_uuid ("7fcc3a1a-1f62-11e1-86bf-406186ea4fc5", "a684c02c-b531-11e1-bdc2-406186ea4fc5"); update_report_format_uuid ("a0b5bfb2-1f62-11e1-85db-406186ea4fc5", "c402cc3e-b531-11e1-9163-406186ea4fc5"); } /** * @brief Initialize the default settings. * * Ensure all the default manager settings exist. */ static void check_db_settings () { if (sql_int ("SELECT count(*) FROM settings" " WHERE uuid = '6765549a-934e-11e3-b358-406186ea4fc5'" " AND owner IS NULL;") == 0) sql ("INSERT into settings (uuid, owner, name, comment, value)" " VALUES" " ('6765549a-934e-11e3-b358-406186ea4fc5', NULL," " 'User Interface Language'," " 'Preferred language to be used in client user interfaces.'," " 'Browser Language');"); if (sql_int ("SELECT count(*) FROM settings" " WHERE uuid = '5f5a8712-8017-11e1-8556-406186ea4fc5'" " AND owner IS NULL;") == 0) sql ("INSERT into settings (uuid, owner, name, comment, value)" " VALUES" " ('5f5a8712-8017-11e1-8556-406186ea4fc5', NULL, 'Rows Per Page'," " 'The default number of rows displayed in any listing.'," " 10);"); if (sql_int ("SELECT count(*) FROM settings" " WHERE uuid = '20f3034c-e709-11e1-87e7-406186ea4fc5'" " AND owner IS NULL;") == 0) sql ("INSERT into settings (uuid, owner, name, comment, value)" " VALUES" " ('20f3034c-e709-11e1-87e7-406186ea4fc5', NULL, 'Wizard Rows'," " 'If the number of rows in a listing is above this any wizard" " be hidden.'," " 3);"); if (sql_int ("SELECT count(*) FROM settings" " WHERE uuid = 'f16bb236-a32d-4cd5-a880-e0fcf2599f59'" " AND owner IS NULL;") == 0) sql ("INSERT into settings (uuid, owner, name, comment, value)" " VALUES" " ('f16bb236-a32d-4cd5-a880-e0fcf2599f59', NULL, 'Severity Class'," " 'Severity class used for severity bars.'," " 'nist');"); if (sql_int ("SELECT count(*) FROM settings" " WHERE uuid = '77ec2444-e7f2-4a80-a59b-f4237782d93f'" " AND owner IS NULL;") == 0) sql ("INSERT into settings (uuid, owner, name, comment, value)" " VALUES" " ('77ec2444-e7f2-4a80-a59b-f4237782d93f', NULL, 'Dynamic Severity'," " 'Whether to use dynamic severity scores by default.'," " '0');"); if (sql_int ("SELECT count(*) FROM settings" " WHERE uuid = '578a1c14-e2dc-45ef-a591-89d31391d007'" " AND owner IS NULL;") == 0) sql ("INSERT into settings (uuid, owner, name, comment, value)" " VALUES" " ('578a1c14-e2dc-45ef-a591-89d31391d007', NULL, 'Auto-Refresh'," " 'The delay between automatic page refreshs in seconds.'," " '0');"); if (sql_int ("SELECT count(*) FROM settings" " WHERE uuid = 'a6ac88c5-729c-41ba-ac0a-deea4a3441f2'" " AND owner IS NULL;") == 0) sql ("INSERT into settings (uuid, owner, name, comment, value)" " VALUES" " ('a6ac88c5-729c-41ba-ac0a-deea4a3441f2', NULL," " 'Details Export File Name'," " 'File name format string for the export of resource details.'," " '%%T-%%U');"); if (sql_int ("SELECT count(*) FROM settings" " WHERE uuid = '0872a6ed-4f85-48c5-ac3f-a5ef5e006745'" " AND owner IS NULL;") == 0) sql ("INSERT into settings (uuid, owner, name, comment, value)" " VALUES" " ('0872a6ed-4f85-48c5-ac3f-a5ef5e006745', NULL," " 'List Export File Name'," " 'File name format string for the export of resource lists.'," " '%%T-%%D');"); if (sql_int ("SELECT count(*) FROM settings" " WHERE uuid = 'e1a2ae0b-736e-4484-b029-330c9e15b900'" " AND owner IS NULL;") == 0) sql ("INSERT into settings (uuid, owner, name, comment, value)" " VALUES" " ('e1a2ae0b-736e-4484-b029-330c9e15b900', NULL," " 'Report Export File Name'," " 'File name format string for the export of reports.'," " '%%T-%%U');"); if (sql_int ("SELECT count(*) FROM settings" " WHERE uuid = '7eda49c5-096c-4bef-b1ab-d080d87300df'" " AND owner IS NULL;") == 0) sql ("INSERT into settings (uuid, owner, name, comment, value)" " VALUES" " ('7eda49c5-096c-4bef-b1ab-d080d87300df', NULL," " 'Default Severity'," " 'Severity to use if none is specified or available from SecInfo.'," " '10.0');"); } /** * @brief Add permission to role. * * Caller must ensure args are SQL escaped. * * @param[in] role Role. * @param[in] permission Permission. */ void add_role_permission (const gchar *role, const gchar *permission) { sql ("INSERT INTO permissions" " (uuid, owner, name, comment, resource_type, resource, resource_uuid," " resource_location, subject_type, subject, subject_location," " creation_time, modification_time)" " VALUES" " (make_uuid (), NULL, lower ('%s'), '', ''," " 0, '', " G_STRINGIFY (LOCATION_TABLE) ", 'role'," " (SELECT id FROM roles WHERE uuid = '%s')," " " G_STRINGIFY (LOCATION_TABLE) ", m_now (), m_now ());", permission, role); } /** * @brief Refresh nvt_cves table. * * Caller must organise transaction. */ void refresh_nvt_cves () { iterator_t nvts; sql ("DELETE FROM nvt_cves;"); init_iterator (&nvts, "SELECT id, oid, cve FROM nvts;"); while (next (&nvts)) { gchar **split, **point; split = g_strsplit_set (iterator_string (&nvts, 2), " ,", 0); point = split; while (*point) { g_strstrip (*point); if (strlen (*point)) { gchar *quoted_cve, *quoted_oid; quoted_cve = sql_insert (*point); quoted_oid = sql_insert (iterator_string (&nvts, 1)); sql ("INSERT INTO nvt_cves (nvt, oid, cve_name)" " VALUES (%llu, %s, %s);", iterator_int64 (&nvts, 0), quoted_oid, quoted_cve); g_free (quoted_cve); g_free (quoted_oid); } point++; } g_strfreev (split); } cleanup_iterator (&nvts); if (sql_is_sqlite3 ()) sql ("REINDEX nvt_cves_by_oid;"); } /** * @brief Ensure that the databases are the right versions. * * @param[in] nvt_cache_mode True when running in NVT caching mode. * * @return 0 success, -1 error, -2 database is wrong version, -3 database * needs to be initialised from server. */ int check_db_versions (int nvt_cache_mode) { char *database_version; int scap_db_version, cert_db_version; database_version = sql_string ("SELECT value FROM %s.meta" " WHERE name = 'database_version';", sql_schema ()); if (nvt_cache_mode) { if (database_version && strcmp (database_version, G_STRINGIFY (OPENVASMD_DATABASE_VERSION))) { g_message ("%s: database version of database: %s\n", __FUNCTION__, database_version); g_message ("%s: database version supported by manager: %s\n", __FUNCTION__, G_STRINGIFY (OPENVASMD_DATABASE_VERSION)); g_free (database_version); return -2; } g_free (database_version); /* If database_version was NULL then meta was missing, so assume * that the database is missing, which is OK. */ } else { long long int count; if (database_version) { if (strcmp (database_version, G_STRINGIFY (OPENVASMD_DATABASE_VERSION))) { g_message ("%s: database version of database: %s\n", __FUNCTION__, database_version); g_message ("%s: database version supported by manager: %s\n", __FUNCTION__, G_STRINGIFY (OPENVASMD_DATABASE_VERSION)); g_free (database_version); return -2; } g_free (database_version); /* Check that the database was initialised from the scanner. * * This can also fail after a migration, for example if the database * was created before NVT preferences were cached in the database. */ if (sql_int64 (&count, "SELECT count(*) FROM %s.meta" " WHERE name = 'nvts_feed_version'" " OR name = 'nvt_preferences_enabled';", sql_schema ()) || count < 2) g_warning ("database must be initialised from scanner" " (with --update or --rebuild)"); } else /* Assume database is missing. */ g_warning ("database must be initialised from scanner" " (with --update or --rebuild)"); } /* Check SCAP database version. */ scap_db_version = manage_scap_db_version (); if (scap_db_version == -1) g_message ("No SCAP database found"); else if (scap_db_version != manage_scap_db_supported_version ()) { g_message ("%s: database version of SCAP database: %i\n", __FUNCTION__, scap_db_version); g_message ("%s: SCAP database version supported by manager: %s\n", __FUNCTION__, G_STRINGIFY (OPENVASMD_SCAP_DATABASE_VERSION)); return -2; } /* Check CERT database version. */ cert_db_version = manage_cert_db_version (); if (cert_db_version == -1) g_message ("No CERT database found"); else if (cert_db_version != manage_cert_db_supported_version ()) { g_message ("%s: database version of CERT database: %i\n", __FUNCTION__, cert_db_version); g_message ("%s: CERT database version supported by manager: %s\n", __FUNCTION__, G_STRINGIFY (OPENVASMD_CERT_DATABASE_VERSION)); return -2; } return 0; } /** * @brief Ensures the sanity of nvts cache in DB. */ static void check_db_nvts () { /* Ensure the nvti cache update flag exists and is clear. */ if (sql_int ("SELECT count(*) FROM %s.meta" " WHERE name = 'update_nvti_cache';", sql_schema ())) sql ("UPDATE %s.meta SET value = 0 WHERE name = 'update_nvti_cache';", sql_schema ()); else sql ("INSERT INTO %s.meta (name, value)" " VALUES ('update_nvti_cache', 0);", sql_schema ()); /* * Ensure every part of the predefined selector exists. * This restores entries lost due to the error solved 2010-08-13 by r8805. */ if (sql_int ("SELECT count(*) FROM nvt_selectors WHERE name =" " '" MANAGE_NVT_SELECTOR_UUID_ALL "'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_ALL) ";") == 0) { sql ("INSERT into nvt_selectors (name, exclude, type, family_or_nvt)" " VALUES ('" MANAGE_NVT_SELECTOR_UUID_ALL "', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_ALL) ", NULL);"); } if (sql_int ("SELECT count(*) FROM nvt_selectors WHERE name =" " '" MANAGE_NVT_SELECTOR_UUID_ALL "'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) " AND family_or_nvt = '1.3.6.1.4.1.25623.1.0.810002';") == 0) { sql ("INSERT into nvt_selectors" " (name, exclude, type, family_or_nvt, family)" " VALUES ('" MANAGE_NVT_SELECTOR_UUID_ALL "', 1, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," /* OID of the "CPE Inventory" NVT. */ " '1.3.6.1.4.1.25623.1.0.810002', 'Service detection');"); } if (sql_int ("SELECT count(*) FROM nvt_selectors WHERE name =" " '" MANAGE_NVT_SELECTOR_UUID_ALL "'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) " AND family_or_nvt = '1.3.6.1.4.1.25623.1.0.810003';") == 0) { sql ("INSERT into nvt_selectors" " (name, exclude, type, family_or_nvt, family)" " VALUES ('" MANAGE_NVT_SELECTOR_UUID_ALL "', 1, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," /* OID of the "Host Summary" NVT. */ " '1.3.6.1.4.1.25623.1.0.810003', 'General');"); } if (sql_int ("SELECT count(*) FROM nvt_selectors WHERE name =" " '" MANAGE_NVT_SELECTOR_UUID_ALL "'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_FAMILY) " AND family_or_nvt = 'Port scanners';") == 0) { sql ("INSERT into nvt_selectors" " (name, exclude, type, family_or_nvt, family)" " VALUES ('" MANAGE_NVT_SELECTOR_UUID_ALL "', 1, " G_STRINGIFY (NVT_SELECTOR_TYPE_FAMILY) "," " 'Port scanners', 'Port scanners');"); } if (sql_int ("SELECT count(*) FROM nvt_selectors WHERE name =" " '" MANAGE_NVT_SELECTOR_UUID_ALL "'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) " AND family_or_nvt = '1.3.6.1.4.1.25623.1.0.14259';") == 0) { sql ("INSERT into nvt_selectors" " (name, exclude, type, family_or_nvt, family)" " VALUES ('" MANAGE_NVT_SELECTOR_UUID_ALL "', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," /* OID of the "Nmap (NASL wrapper)" NVT. */ " '1.3.6.1.4.1.25623.1.0.14259', 'Port scanners');"); } if (sql_int ("SELECT count(*) FROM nvt_selectors WHERE name =" " '" MANAGE_NVT_SELECTOR_UUID_ALL "'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) " AND family_or_nvt = '1.3.6.1.4.1.25623.1.0.100315';") == 0) { sql ("INSERT into nvt_selectors" " (name, exclude, type, family_or_nvt, family)" " VALUES ('" MANAGE_NVT_SELECTOR_UUID_ALL "', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," /* OID of the "Ping Host" NVT. */ " '1.3.6.1.4.1.25623.1.0.100315', 'Port scanners');"); } if (sql_int ("SELECT count(*) FROM nvt_selectors WHERE name =" " '" MANAGE_NVT_SELECTOR_UUID_ALL "'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) " AND family_or_nvt = '1.3.6.1.4.1.25623.1.0.80109';") == 0) { sql ("INSERT into nvt_selectors" " (name, exclude, type, family_or_nvt, family)" " VALUES ('" MANAGE_NVT_SELECTOR_UUID_ALL "', 1, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) "," /* OID of the "w3af (NASL wrapper)" NVT. */ " '1.3.6.1.4.1.25623.1.0.80109', 'Web application abuses');"); } /* Ensure the NVT CVE table is filled. */ if (sql_int ("SELECT count (*) FROM nvt_cves;") == 0) { sql_begin_immediate (); refresh_nvt_cves (); sql ("COMMIT;"); } } /** * @brief Ensure the predefined configs exist. */ static void check_db_configs () { if (sql_int ("SELECT count(*) FROM configs" " WHERE name = 'Full and fast';") == 0) { config_t config; sqli (&config, "INSERT into configs (uuid, owner, name, nvt_selector, comment," " family_count, nvt_count, nvts_growing, families_growing," " type, creation_time, modification_time)" " VALUES ('" CONFIG_UUID_FULL_AND_FAST "', NULL, 'Full and fast'," " '" MANAGE_NVT_SELECTOR_UUID_ALL "'," " 'Most NVT''s; optimized by using previously collected information.'," " %i, %i, 1, 1, 0, m_now (), m_now ())", family_nvt_count (NULL) - family_nvt_count ("Port scanners") + 1, family_count ()); /* Setup preferences for the config. */ setup_full_config_prefs (config, 1, 1, 0); } if (sql_int ("SELECT count(*) FROM configs" " WHERE name = 'Full and fast ultimate';") == 0) { config_t config; sqli (&config, "INSERT into configs (uuid, owner, name, nvt_selector, comment," " family_count, nvt_count, nvts_growing, families_growing," " type, creation_time, modification_time)" " VALUES ('" CONFIG_UUID_FULL_AND_FAST_ULTIMATE "', NULL," " 'Full and fast ultimate', '" MANAGE_NVT_SELECTOR_UUID_ALL "'," " 'Most NVT''s including those that can stop services/hosts;" " optimized by using previously collected information.'," " %i, %i, 1, 1, 0, m_now (), m_now ())", family_nvt_count (NULL) - family_nvt_count ("Port scanners") + 1, family_count ()); /* Setup preferences for the config. */ setup_full_config_prefs (config, 0, 1, 0); } if (sql_int ("SELECT count(*) FROM configs" " WHERE name = 'Full and very deep';") == 0) { config_t config; sqli (&config, "INSERT into configs (uuid, owner, name, nvt_selector, comment," " family_count, nvt_count, nvts_growing, families_growing," " type, creation_time, modification_time)" " VALUES ('" CONFIG_UUID_FULL_AND_VERY_DEEP "', NULL," " 'Full and very deep', '" MANAGE_NVT_SELECTOR_UUID_ALL "'," " 'Most NVT''s; don''t trust previously collected information; slow.'," " %i, %i, 1, 1, 0, m_now (), m_now ())", family_nvt_count (NULL) - family_nvt_count ("Port scanners") + 1, family_count ()); /* Setup preferences for the config. */ setup_full_config_prefs (config, 1, 0, 1); } if (sql_int ("SELECT count(*) FROM configs" " WHERE name = 'Full and very deep ultimate';") == 0) { config_t config; sqli (&config, "INSERT into configs (uuid, owner, name, nvt_selector, comment," " family_count, nvt_count, nvts_growing, families_growing," " type, creation_time, modification_time)" " VALUES ('" CONFIG_UUID_FULL_AND_VERY_DEEP_ULTIMATE "'," " NULL, 'Full and very deep ultimate'," " '" MANAGE_NVT_SELECTOR_UUID_ALL "'," " 'Most NVT''s including those that can stop services/hosts;" " don''t trust previously collected information; slow.'," " %i, %i, 1, 1, 0, m_now (), m_now ())", family_nvt_count (NULL) - family_nvt_count ("Port scanners") + 1, family_count ()); /* Setup preferences for the config. */ setup_full_config_prefs (config, 0, 0, 1); } if (sql_int ("SELECT count(*) FROM configs" " WHERE uuid = '" CONFIG_UUID_EMPTY "';") == 0) { config_t config; sqli (&config, "INSERT into configs (uuid, name, owner, nvt_selector, comment," " family_count, nvt_count, nvts_growing, families_growing," " type, creation_time, modification_time)" " VALUES ('" CONFIG_UUID_EMPTY "', 'empty', NULL, 'empty'," " 'Empty and static configuration template.'," " 0, 0, 0, 0, 0, m_now (), m_now ())"); /* Setup preferences for the config. */ setup_full_config_prefs (config, 1, 1, 0); } if (sql_int ("SELECT count(*) FROM configs" " WHERE uuid = '%s';", CONFIG_UUID_DISCOVERY) == 0) make_config_discovery (CONFIG_UUID_DISCOVERY, MANAGE_NVT_SELECTOR_UUID_DISCOVERY); /* In the Service Detection family, NVTs sometimes move to Product * Detection, and once an NVT was removed. So remove those NVTs * from Service Detection in the NVT selector. */ sql ("DELETE FROM nvt_selectors" " WHERE name = '" MANAGE_NVT_SELECTOR_UUID_DISCOVERY "'" " AND family = 'Service detection'" " AND (((SELECT family FROM nvts" " WHERE oid = nvt_selectors.family_or_nvt)" " = 'Product detection')" " OR NOT EXISTS (SELECT * FROM nvts" " WHERE oid = nvt_selectors.family_or_nvt));"); if (sql_int ("SELECT count(*) FROM configs" " WHERE uuid = '%s';", CONFIG_UUID_HOST_DISCOVERY) == 0) make_config_host_discovery (CONFIG_UUID_HOST_DISCOVERY, MANAGE_NVT_SELECTOR_UUID_HOST_DISCOVERY); check_config_host_discovery (CONFIG_UUID_HOST_DISCOVERY); if (sql_int ("SELECT count(*) FROM configs" " WHERE uuid = '%s';", CONFIG_UUID_SYSTEM_DISCOVERY) == 0) make_config_system_discovery (CONFIG_UUID_SYSTEM_DISCOVERY, MANAGE_NVT_SELECTOR_UUID_SYSTEM_DISCOVERY); } /** * @brief Ensure every report format has a unique UUID. * * @return 0 success, -1 error. */ static int make_report_format_uuids_unique () { iterator_t rows; sql_begin_immediate (); sql ("CREATE TEMPORARY TABLE duplicates" " AS SELECT id, uuid, make_uuid () AS new_uuid, owner," " (SELECT uuid FROM users" " WHERE users.id = outer_report_formats.owner)" " AS owner_uuid," " (SELECT owner from report_formats" " WHERE uuid = outer_report_formats.uuid" " ORDER BY id ASC LIMIT 1)" " AS original_owner," " (SELECT uuid FROM users" " WHERE users.id = (SELECT owner from report_formats" " WHERE uuid = outer_report_formats.uuid" " ORDER BY id ASC LIMIT 1))" " AS original_owner_uuid" " FROM report_formats AS outer_report_formats" " WHERE id > (SELECT id from report_formats" " WHERE uuid = outer_report_formats.uuid" " ORDER BY id ASC LIMIT 1);"); sql ("UPDATE alert_method_data" " SET data = (SELECT new_uuid FROM duplicates" " WHERE duplicates.id = alert_method_data.alert)" " WHERE alert IN (SELECT id FROM duplicates);"); /* Update UUIDs on disk. */ init_iterator (&rows, "SELECT id, uuid, new_uuid, owner, owner_uuid, original_owner," " original_owner_uuid" " FROM duplicates;"); while (next (&rows)) { gchar *dir, *new_dir; const char *old_uuid, *new_uuid; int copy; old_uuid = iterator_string (&rows, 1); new_uuid = iterator_string (&rows, 2); if (iterator_int64 (&rows, 3) == 0) { /* Global report format. */ if (iterator_int64 (&rows, 5) == 0) { /* Shared subdir in the global dir, so copy. */ copy = 1; dir = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "global_report_formats", old_uuid, NULL); new_dir = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "global_report_formats", new_uuid, NULL); } else { const char *owner_uuid; /* Dedicated subdir in global dir, but must be renamed. */ copy = 0; owner_uuid = iterator_string (&rows, 6); dir = g_build_filename (OPENVAS_STATE_DIR, "openvasmd", "report_formats", owner_uuid, old_uuid, NULL); new_dir = g_build_filename (OPENVAS_STATE_DIR, "openvasmd", "report_formats", owner_uuid, new_uuid, NULL); } } else if (iterator_int64 (&rows, 5) == 0) { const char *owner_uuid; /* Dedicated subdir in user dir, but must be renamed. */ copy = 0; owner_uuid = iterator_string (&rows, 4); dir = g_build_filename (OPENVAS_STATE_DIR, "openvasmd", "report_formats", owner_uuid, old_uuid, NULL); new_dir = g_build_filename (OPENVAS_STATE_DIR, "openvasmd", "report_formats", owner_uuid, new_uuid, NULL); } else { const char *owner_uuid, *original_owner_uuid; /* Two user-owned report formats, may be the same user. */ owner_uuid = iterator_string (&rows, 4); original_owner_uuid = iterator_string (&rows, 6); /* Copy the subdir if both report formats owned by one user. */ copy = owner_uuid && original_owner_uuid && (strcmp (owner_uuid, original_owner_uuid) == 0); dir = g_build_filename (OPENVAS_STATE_DIR, "openvasmd", "report_formats", owner_uuid, old_uuid, NULL); new_dir = g_build_filename (OPENVAS_STATE_DIR, "openvasmd", "report_formats", owner_uuid, new_uuid, NULL); } if (copy) { gchar *command; int ret; command = g_strdup_printf ("cp -a %s %s > /dev/null 2>&1", dir, new_dir); tracef (" command: %s\n", command); ret = system (command); g_free (command); if (ret == -1 || WEXITSTATUS (ret)) { /* Presume dir missing, just log a warning. */ g_warning ("%s: cp %s to %s failed", __FUNCTION__, dir, new_dir); } else g_debug ("%s: copied %s to %s", __FUNCTION__, dir, new_dir); } else { if (rename (dir, new_dir)) { g_warning ("%s: rename %s to %s: %s", __FUNCTION__, dir, new_dir, strerror (errno)); if (errno != ENOENT) { g_free (dir); g_free (new_dir); sql ("ROLLBACK;"); return -1; } } else g_debug ("%s: moved %s to %s", __FUNCTION__, dir, new_dir); } g_free (dir); g_free (new_dir); } cleanup_iterator (&rows); sql ("UPDATE report_formats" " SET uuid = (SELECT new_uuid FROM duplicates" " WHERE duplicates.id = report_formats.id)" " WHERE id IN (SELECT id FROM duplicates);"); if (sql_changes () > 0) g_debug ("%s: gave %d report format(s) new UUID(s) to keep UUIDs unique.", __FUNCTION__, sql_changes ()); sql ("DROP TABLE duplicates;"); sql ("COMMIT;"); return 0; } /** * @brief Description for Verinice ISM report format. */ #define VERINICE_ISM_CONTROL_DESCRIPTION \ "Dear IS Coordinator,\n" \ "\n" \ "A new scan has been carried out and the results are now available in Verinice.\n" \ "If responsible persons are linked to the asset groups, the tasks are already created.\n" \ "\n" \ "Please check the results in a timely manner.\n" \ "\n" \ "Best regards\n" \ "CIS" /** * @brief Ensure the predefined report formats exist. * * @return 0 success, -1 error. */ static int check_db_report_formats () { /* Bring report format UUIDs in database up to date. */ update_report_format_uuids (); if (make_report_format_uuids_unique ()) return -1; if (sql_int ("SELECT count(*) FROM report_formats" " WHERE uuid = '5057e5cc-b825-11e4-9d0e-28d24461215b';") == 0) { report_format_t report_format; sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type, signature, trust, trust_time, flags," " creation_time, modification_time)" " VALUES ('5057e5cc-b825-11e4-9d0e-28d24461215b', NULL, 'Anonymous XML'," " 'Anonymous version of the raw XML report'," " 'Complete scan report in OpenVAS Manager XML format.\n'," " 'xml', 'text/xml', '', %i, %i, 1, m_now (), m_now ());", TRUST_YES, time (NULL)); report_format = sql_last_insert_id (); report_format_verify (report_format); } if (sql_int ("SELECT count(*) FROM report_formats" " WHERE uuid = '910200ca-dc05-11e1-954f-406186ea4fc5';") == 0) { report_format_t report_format; sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type, signature, trust, trust_time, flags," " creation_time, modification_time)" " VALUES ('910200ca-dc05-11e1-954f-406186ea4fc5', NULL, 'ARF'," " 'Asset Reporting Format v1.0.0.'," " 'NIST Asset Reporting Format 1.1 compliant document.\n'," " 'xml', 'text/xml', '', %i, %i, 1, m_now (), m_now ());", TRUST_YES, time (NULL)); report_format = sql_last_insert_id (); report_format_verify (report_format); } if (sql_int ("SELECT count(*) FROM report_formats" " WHERE uuid = '5ceff8ba-1f62-11e1-ab9f-406186ea4fc5';") == 0) { report_format_t report_format; sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type, signature, trust, trust_time, flags," " creation_time, modification_time)" " VALUES ('5ceff8ba-1f62-11e1-ab9f-406186ea4fc5', NULL, 'CPE'," " 'Common Product Enumeration CSV table.'," " 'CPE stands for Common Product Enumeration. It is a structured naming scheme for\n" "information technology systems, platforms, and packages. In other words: CPE\n" "provides a unique identifier for virtually any software product that is known for\n" "a vulnerability.\n" "\n" "The CPE dictionary is maintained by MITRE and NIST. MITRE also maintains CVE\n" "(Common Vulnerability Enumeration) and other relevant security standards.\n" "\n" "The report selects all CPE tables from the results and forms a single table\n" "as a comma separated values file.\n'," " 'csv', 'text/csv', '', %i, %i, 1, m_now (), m_now ());", TRUST_YES, time (NULL)); report_format = sql_last_insert_id (); report_format_verify (report_format); } if (sql_int ("SELECT count(*) FROM report_formats" " WHERE uuid = 'c1645568-627a-11e3-a660-406186ea4fc5';") == 0) { report_format_t report_format; sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type, signature, trust, trust_time, flags," " creation_time, modification_time)" " VALUES ('c1645568-627a-11e3-a660-406186ea4fc5', NULL, 'CSV Results'," " 'CSV result list.'," " 'List of results.'," " 'csv', 'text/csv', '', %i, %i, 1, m_now (), m_now ());", TRUST_YES, time (NULL)); report_format = sql_last_insert_id (); report_format_verify (report_format); } if (sql_int ("SELECT count(*) FROM report_formats" " WHERE uuid = '9087b18c-626c-11e3-8892-406186ea4fc5';") == 0) { report_format_t report_format; sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type, signature, trust, trust_time, flags," " creation_time, modification_time)" " VALUES ('9087b18c-626c-11e3-8892-406186ea4fc5', NULL, 'CSV Hosts'," " 'CSV host summary.'," " 'Base host information and result counts'," " 'csv', 'text/csv', '', %i, %i, 1, m_now (), m_now ());", TRUST_YES, time (NULL)); report_format = sql_last_insert_id (); report_format_verify (report_format); } if (sql_int ("SELECT count(*) FROM report_formats" " WHERE uuid = '6c248850-1f62-11e1-b082-406186ea4fc5';") == 0) { report_format_t report_format; sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type, signature, trust, trust_time, flags," " creation_time, modification_time)" " VALUES ('6c248850-1f62-11e1-b082-406186ea4fc5', NULL, 'HTML'," " 'Single page HTML report.'," " 'A single HTML page listing results of a scan. Style information is embedded in\n" "the HTML, so the page is suitable for viewing in a browser as is.\n'," " 'html', 'text/html', '', %i, %i, 1, m_now (), m_now ());", TRUST_YES, time (NULL)); report_format = sql_last_insert_id (); report_format_verify (report_format); } if (sql_int ("SELECT count(*) FROM report_formats" " WHERE uuid = '77bd6c4a-1f62-11e1-abf0-406186ea4fc5';") == 0) { report_format_t report_format; sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type, signature, trust, trust_time, flags," " creation_time, modification_time)" " VALUES ('77bd6c4a-1f62-11e1-abf0-406186ea4fc5', NULL, 'ITG'," " 'German \"IT-Grundschutz-Kataloge\" report.'," " 'Tabular report on the German \"IT-Grundschutz-Kataloge\",\n" "as published and maintained by the German Federal Agency for IT-Security.\n'," " 'csv', 'text/csv', '', %i, %i, 1, m_now (), m_now ());", TRUST_YES, time (NULL)); report_format = sql_last_insert_id (); report_format_verify (report_format); } if (sql_int ("SELECT count(*) FROM report_formats" " WHERE uuid = 'a684c02c-b531-11e1-bdc2-406186ea4fc5';") == 0) { report_format_t report_format; sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type, signature, trust, trust_time, flags," " creation_time, modification_time)" " VALUES ('a684c02c-b531-11e1-bdc2-406186ea4fc5', NULL, 'LaTeX'," " 'LaTeX source file.'," " 'Report as LaTeX source file for further processing.\n'," " 'tex', 'text/plain', '', %i, %i, 1, m_now (), m_now ());", TRUST_YES, time (NULL)); report_format = sql_last_insert_id (); report_format_verify (report_format); } if (sql_int ("SELECT count(*) FROM report_formats" " WHERE uuid = '9ca6fe72-1f62-11e1-9e7c-406186ea4fc5';") == 0) { report_format_t report_format; sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type, signature, trust, trust_time, flags," " creation_time, modification_time)" " VALUES ('9ca6fe72-1f62-11e1-9e7c-406186ea4fc5', NULL, 'NBE'," " 'Legacy OpenVAS report.'," " 'The traditional OpenVAS Scanner text based format.'," " 'nbe', 'text/plain', '', %i, %i, 1, m_now (), m_now ());", TRUST_YES, time (NULL)); report_format = sql_last_insert_id (); report_format_verify (report_format); } if (sql_int ("SELECT count(*) FROM report_formats" " WHERE uuid = 'c402cc3e-b531-11e1-9163-406186ea4fc5';") == 0) { report_format_t report_format; sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type, signature, trust, trust_time, flags," " creation_time, modification_time)" " VALUES ('c402cc3e-b531-11e1-9163-406186ea4fc5', NULL, 'PDF'," " 'Portable Document Format report.'," " 'Scan results in Portable Document Format (PDF).'," "'pdf', 'application/pdf', '', %i, %i, 1, m_now (), m_now ());", TRUST_YES, time (NULL)); report_format = sql_last_insert_id (); report_format_verify (report_format); } if (sql_int ("SELECT count(*) FROM report_formats" " WHERE uuid = 'a3810a62-1f62-11e1-9219-406186ea4fc5';") == 0) { report_format_t report_format; sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type, signature, trust, trust_time, flags," " creation_time, modification_time)" " VALUES ('a3810a62-1f62-11e1-9219-406186ea4fc5', NULL, 'TXT'," " 'Plain text report.'," " 'Plain text report, best viewed with fixed font size.'," " 'txt', 'text/plain', '', %i, %i, 1, m_now (), m_now ());", TRUST_YES, time (NULL)); report_format = sql_last_insert_id (); report_format_verify (report_format); } if (sql_int ("SELECT count(*) FROM report_formats" " WHERE uuid = 'a994b278-1f62-11e1-96ac-406186ea4fc5';") == 0) { report_format_t report_format; sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type, signature, trust, trust_time, flags," " creation_time, modification_time)" " VALUES ('a994b278-1f62-11e1-96ac-406186ea4fc5', NULL, 'XML'," " 'Raw XML report.'," " 'Complete scan report in OpenVAS Manager XML format.'," " 'xml', 'text/xml', '', %i, %i, 1, m_now (), m_now ());", TRUST_YES, time (NULL)); report_format = sql_last_insert_id (); report_format_verify (report_format); } if (sql_int ("SELECT count(*) FROM report_formats" " WHERE uuid = '9e5e5deb-879e-4ecc-8be6-a71cd0875cdd';") == 0) { report_format_t report_format; report_format_param_t report_format_param; /* Create Topology report format */ sql ("INSERT INTO report_formats (uuid, owner, name, summary, description," " extension, content_type, signature, trust, trust_time, flags," " creation_time, modification_time)" " VALUES ('9e5e5deb-879e-4ecc-8be6-a71cd0875cdd', NULL, 'Topology SVG'," " 'Network topology SVG image.'," " 'Scan results in topologic structure as scalable vector graphics.\n'," " 'svg', 'image/svg+xml', '', %i, %i, 1, m_now (), m_now ());", TRUST_YES, time (NULL)); report_format = sql_last_insert_id (); /* Create report "Graph Type" format parameter and parameter options */ sql ("INSERT INTO report_format_params (report_format, name, type, value," " type_min, type_max, type_regex, fallback)" " VALUES (%lli, 'Graph Type', 2, 'twopi', -9223372036854775808," " 9223372036854775807,'','twopi');", report_format); report_format_param = sql_last_insert_id (); sql ("INSERT INTO report_format_param_options (report_format_param, value)" "VALUES (%lli, 'circo');", report_format_param); sql ("INSERT INTO report_format_param_options (report_format_param, value)" "VALUES (%lli, 'dot');", report_format_param); sql ("INSERT INTO report_format_param_options (report_format_param, value)" "VALUES (%lli, 'twopi');", report_format_param); /* Create report "Node Distance" format parameter */ sql ("INSERT INTO report_format_params (report_format, name, type, value," " type_min, type_max, type_regex, fallback)" " VALUES (%lli, 'Node Distance', 1, 8, 1, 20, '', 8);", report_format); } if (sql_int ("SELECT count(*) FROM report_formats" " WHERE uuid = 'c15ad349-bd8d-457a-880a-c7056532ee15';") == 0) { report_format_t report_format; sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type, signature, trust, trust_time, flags," " creation_time, modification_time)" " VALUES ('c15ad349-bd8d-457a-880a-c7056532ee15', NULL, 'Verinice ISM'," " 'Greenbone Verinice ISM Report, v1.1.10.'," " 'Information Security Management Report for Verinice import, version 1.1.10.\n'," " 'vna', 'application/zip', '', %i, %i, 1, m_now (), m_now ());", TRUST_YES, time (NULL)); report_format = sql_last_insert_id (); /* Create report "Attach HTML report" format parameter */ sql ("INSERT INTO report_format_params (report_format, name, type, value," " type_min, type_max, type_regex, fallback)" " VALUES (%lli, 'Attach HTML report', %i, 1, 0, 1, '', 1);", report_format, REPORT_FORMAT_PARAM_TYPE_BOOLEAN); /* Create "ISM Control Description" parameter */ sql ("INSERT INTO report_format_params (report_format, name, type, value," " type_min, type_max, type_regex, fallback)" " VALUES (%lli, 'ISM Control Description', %i, '%s', 0, 100000, ''," " '%s');", report_format, REPORT_FORMAT_PARAM_TYPE_TEXT, VERINICE_ISM_CONTROL_DESCRIPTION, VERINICE_ISM_CONTROL_DESCRIPTION); report_format_verify (report_format); } else { if (sql_int ("SELECT count(*) FROM report_format_params" " WHERE report_format" " = (SELECT id FROM report_formats" " WHERE uuid = 'c15ad349-bd8d-457a-880a-c7056532ee15')" " AND name = 'Attach HTML report';") == 0) /* Create report "Attach HTML report" format parameter */ sql ("INSERT INTO report_format_params (report_format, name, type, value," " type_min, type_max, type_regex, fallback)" " VALUES ((SELECT id FROM report_formats" " WHERE uuid = 'c15ad349-bd8d-457a-880a-c7056532ee15')," " 'Attach HTML report', %i, 1, 0, 1, '', 1);", REPORT_FORMAT_PARAM_TYPE_BOOLEAN); if (sql_int ("SELECT count(*) FROM report_format_params" " WHERE report_format" " = (SELECT id FROM report_formats" " WHERE uuid = 'c15ad349-bd8d-457a-880a-c7056532ee15')" " AND name = 'ISM Control Description';") == 0) /* Create report "Attach HTML report" format parameter */ sql ("INSERT INTO report_format_params (report_format, name, type, value," " type_min, type_max, type_regex, fallback)" " VALUES ((SELECT id FROM report_formats" " WHERE uuid = 'c15ad349-bd8d-457a-880a-c7056532ee15')," " 'ISM Control Description', %i, '%s', 0, 100000, ''," " '%s');", REPORT_FORMAT_PARAM_TYPE_TEXT, VERINICE_ISM_CONTROL_DESCRIPTION, VERINICE_ISM_CONTROL_DESCRIPTION); } if (sql_int ("SELECT count(*) FROM report_formats" " WHERE uuid = '50c9950a-f326-11e4-800c-28d24461215b';") == 0) { report_format_t report_format; sql ("INSERT into report_formats (uuid, owner, name, summary, description," " extension, content_type, signature, trust, trust_time, flags," " creation_time, modification_time)" " VALUES ('50c9950a-f326-11e4-800c-28d24461215b', NULL, 'Verinice ITG'," " 'Greenbone Verinice ITG Report, v1.0.1.'," " 'IT-Grundschutz Report for Verinice import, version 1.0.1.\n'," " 'vna', 'application/zip', '', %i, %i, 1, m_now (), m_now ());", TRUST_YES, time (NULL)); report_format = sql_last_insert_id (); report_format_verify (report_format); } return 0; } /** * @brief Ensure that the report formats trash directory matches the database. * * @return -1 if error, 0 if success. */ static int check_db_report_formats_trash () { gchar *dir; GError *error; GDir *directory; const gchar *entry; dir = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "report_formats_trash", NULL); error = NULL; directory = g_dir_open (dir, 0, &error); if (directory == NULL) { assert (error); if (!g_error_matches (error, G_FILE_ERROR, G_FILE_ERROR_NOENT)) { g_warning ("g_dir_open (%s) failed - %s\n", dir, error->message); g_error_free (error); g_free (dir); return -1; } } else { entry = NULL; while ((entry = g_dir_read_name (directory)) != NULL) { gchar *end; if (strtol (entry, &end, 10) < 0) /* Only interested in positive numbers. */ continue; if (*end != '\0') /* Only interested in numbers. */ continue; /* Check whether the db has a report format with this ID. */ if (sql_int ("SELECT count(*) FROM report_formats_trash" " WHERE id = %s;", entry) == 0) { int ret; gchar *entry_path; /* Remove the directory. */ entry_path = g_build_filename (dir, entry, NULL); ret = openvas_file_remove_recurse (entry_path); g_free (entry_path); if (ret) { g_warning ("%s: failed to remove %s from %s", __FUNCTION__, entry, dir); g_dir_close (directory); g_free (dir); return -1; } } } g_dir_close (directory); } g_free (dir); return 0; } /** * @brief Ensure the predefined permissions exists. */ static void check_db_permissions () { if (sql_int ("SELECT count(*) FROM permissions" " WHERE uuid = '" PERMISSION_UUID_ADMIN_EVERYTHING "';") == 0) sql ("INSERT INTO permissions" " (uuid, owner, name, comment, resource_type, resource, resource_uuid," " resource_location, subject_type, subject, subject_location," " creation_time, modification_time)" " VALUES" " ('" PERMISSION_UUID_ADMIN_EVERYTHING "', NULL, 'Everything', '', ''," " 0, '', " G_STRINGIFY (LOCATION_TABLE) ", 'role'," " (SELECT id FROM roles WHERE uuid = '" ROLE_UUID_ADMIN "')," " " G_STRINGIFY (LOCATION_TABLE) ", m_now (), m_now ());"); if (sql_int ("SELECT count(*) FROM permissions" " WHERE uuid = '" PERMISSION_UUID_SUPER_ADMIN_EVERYTHING "';") == 0) { sql ("INSERT INTO permissions" " (uuid, owner, name, comment, resource_type, resource, resource_uuid," " resource_location, subject_type, subject, subject_location," " creation_time, modification_time)" " VALUES" " ('" PERMISSION_UUID_SUPER_ADMIN_EVERYTHING "', NULL, 'Everything'," " '', '', 0, '', " G_STRINGIFY (LOCATION_TABLE) ", 'role'," " (SELECT id FROM roles WHERE uuid = '" ROLE_UUID_SUPER_ADMIN "')," " " G_STRINGIFY (LOCATION_TABLE) ", m_now (), m_now ());"); sql ("INSERT INTO permissions" " (uuid, owner, name, comment, resource_type, resource, resource_uuid," " resource_location, subject_type, subject, subject_location," " creation_time, modification_time)" " VALUES" " (make_uuid (), NULL, 'Super'," " '', '', 0, '', " G_STRINGIFY (LOCATION_TABLE) ", 'role'," " (SELECT id FROM roles WHERE uuid = '" ROLE_UUID_SUPER_ADMIN "')," " " G_STRINGIFY (LOCATION_TABLE) ", m_now (), m_now ());"); } if (sql_int ("SELECT count(*) FROM permissions" " WHERE subject_type = 'role'" " AND subject = (SELECT id FROM roles" " WHERE uuid = '" ROLE_UUID_GUEST "')" " AND resource = 0;") <= 1) { sql_begin_exclusive (); /* Clean-up any remaining permissions. */ sql ("DELETE FROM permissions WHERE subject_type = 'role'" " AND subject = (SELECT id FROM roles" " WHERE uuid = '" ROLE_UUID_GUEST "');"); add_role_permission (ROLE_UUID_GUEST, "AUTHENTICATE"); add_role_permission (ROLE_UUID_GUEST, "COMMANDS"); add_role_permission (ROLE_UUID_GUEST, "HELP"); add_role_permission (ROLE_UUID_GUEST, "GET_AGGREGATES"); add_role_permission (ROLE_UUID_GUEST, "GET_FILTERS"); add_role_permission (ROLE_UUID_GUEST, "GET_INFO"); add_role_permission (ROLE_UUID_GUEST, "GET_NVTS"); add_role_permission (ROLE_UUID_GUEST, "GET_SETTINGS"); sql ("COMMIT;"); } if (sql_int ("SELECT count(*) FROM permissions" " WHERE subject_type = 'role'" " AND subject = (SELECT id FROM roles" " WHERE uuid = '" ROLE_UUID_INFO "')" " AND resource = 0;") <= 1) { sql_begin_exclusive (); /* Clean-up any remaining permissions. */ sql ("DELETE FROM permissions WHERE subject_type = 'role'" " AND subject = (SELECT id FROM roles" " WHERE uuid = '" ROLE_UUID_INFO "');"); add_role_permission (ROLE_UUID_INFO, "AUTHENTICATE"); add_role_permission (ROLE_UUID_INFO, "COMMANDS"); add_role_permission (ROLE_UUID_INFO, "HELP"); add_role_permission (ROLE_UUID_INFO, "GET_AGGREGATES"); add_role_permission (ROLE_UUID_INFO, "GET_INFO"); add_role_permission (ROLE_UUID_INFO, "GET_NVTS"); add_role_permission (ROLE_UUID_INFO, "GET_SETTINGS"); add_role_permission (ROLE_UUID_INFO, "MODIFY_SETTING"); sql ("COMMIT;"); } if (sql_int ("SELECT count(*) FROM permissions" " WHERE subject_type = 'role'" " AND subject = (SELECT id FROM roles" " WHERE uuid = '" ROLE_UUID_MONITOR "')" " AND resource = 0;") <= 1) { sql_begin_exclusive (); /* Clean-up any remaining permissions. */ sql ("DELETE FROM permissions WHERE subject_type = 'role'" " AND subject = (SELECT id FROM roles" " WHERE uuid = '" ROLE_UUID_MONITOR "');"); add_role_permission (ROLE_UUID_MONITOR, "AUTHENTICATE"); add_role_permission (ROLE_UUID_MONITOR, "COMMANDS"); add_role_permission (ROLE_UUID_MONITOR, "GET_SETTINGS"); add_role_permission (ROLE_UUID_MONITOR, "GET_SYSTEM_REPORTS"); add_role_permission (ROLE_UUID_MONITOR, "HELP"); sql ("COMMIT;"); } if (sql_int ("SELECT count(*) FROM permissions" " WHERE subject_type = 'role'" " AND subject = (SELECT id FROM roles" " WHERE uuid = '" ROLE_UUID_USER "')" " AND resource = 0;") <= 1) { command_t *command; command = omp_commands; sql_begin_exclusive (); /* Clean-up any remaining permissions. */ sql ("DELETE FROM permissions WHERE subject_type = 'role'" " AND subject = (SELECT id FROM roles" " WHERE uuid = '" ROLE_UUID_USER "');"); while (command[0].name) { if (strstr (command[0].name, "DESCRIBE") == NULL && strcmp (command[0].name, "GET_VERSION") && strstr (command[0].name, "GROUP") == NULL && strstr (command[0].name, "ROLE") == NULL && strstr (command[0].name, "SYNC") == NULL && strstr (command[0].name, "USER") == NULL) add_role_permission (ROLE_UUID_USER, command[0].name); command++; } sql ("COMMIT;"); } if (sql_int ("SELECT count(*) FROM permissions" " WHERE subject_type = 'role'" " AND subject = (SELECT id FROM roles" " WHERE uuid = '" ROLE_UUID_OBSERVER "')" " AND resource = 0;") <= 1) { command_t *command; command = omp_commands; sql_begin_exclusive (); /* Clean-up any remaining permissions. */ sql ("DELETE FROM permissions WHERE subject_type = 'role'" " AND subject = (SELECT id FROM roles" " WHERE uuid = '" ROLE_UUID_OBSERVER "');"); while (command[0].name) { if ((strstr (command[0].name, "GET") == command[0].name) && strcmp (command[0].name, "GET_GROUPS") && strcmp (command[0].name, "GET_ROLES") && strcmp (command[0].name, "GET_USERS") && strcmp (command[0].name, "GET_VERSION")) add_role_permission (ROLE_UUID_OBSERVER, command[0].name); command++; } add_role_permission (ROLE_UUID_OBSERVER, "AUTHENTICATE"); add_role_permission (ROLE_UUID_OBSERVER, "HELP"); add_role_permission (ROLE_UUID_OBSERVER, "GET_SETTINGS"); add_role_permission (ROLE_UUID_OBSERVER, "MODIFY_SETTING"); sql ("COMMIT;"); } } /** * @brief Ensure the predefined roles exists. */ static void check_db_roles () { if (sql_int ("SELECT count(*) FROM roles WHERE uuid = '" ROLE_UUID_ADMIN "';") == 0) sql ("INSERT INTO roles" " (uuid, owner, name, comment, creation_time, modification_time)" " VALUES" " ('" ROLE_UUID_ADMIN "', NULL, 'Admin'," " 'Administrator. Full privileges.'," " m_now (), m_now ());"); if (sql_int ("SELECT count(*) FROM roles WHERE uuid = '" ROLE_UUID_GUEST "';") == 0) sql ("INSERT INTO roles" " (uuid, owner, name, comment, creation_time, modification_time)" " VALUES" " ('" ROLE_UUID_GUEST "', NULL, 'Guest'," " 'Guest.'," " m_now (), m_now ());"); if (sql_int ("SELECT count(*) FROM roles WHERE uuid = '" ROLE_UUID_INFO "';") == 0) sql ("INSERT INTO roles" " (uuid, owner, name, comment, creation_time, modification_time)" " VALUES" " ('" ROLE_UUID_INFO "', NULL, 'Info'," " 'Information browser.'," " m_now (), m_now ());"); if (sql_int ("SELECT count(*) FROM roles WHERE uuid = '" ROLE_UUID_MONITOR "';") == 0) sql ("INSERT INTO roles" " (uuid, owner, name, comment, creation_time, modification_time)" " VALUES" " ('" ROLE_UUID_MONITOR "', NULL, 'Monitor'," " 'Performance monitor.'," " m_now (), m_now ());"); if (sql_int ("SELECT count(*) FROM roles WHERE uuid = '" ROLE_UUID_USER "';") == 0) sql ("INSERT INTO roles" " (uuid, owner, name, comment, creation_time, modification_time)" " VALUES" " ('" ROLE_UUID_USER "', NULL, 'User'," " 'Standard user.'," " m_now (), m_now ());"); if (sql_int ("SELECT count(*) FROM roles WHERE uuid = '" ROLE_UUID_SUPER_ADMIN "';") == 0) sql ("INSERT INTO roles" " (uuid, owner, name, comment, creation_time, modification_time)" " VALUES" " ('" ROLE_UUID_SUPER_ADMIN "', NULL, 'Super Admin'," " 'Super administrator. Full privileges with access to all users.'," " m_now (), m_now ());"); if (sql_int ("SELECT count(*) FROM roles" " WHERE uuid = '" ROLE_UUID_OBSERVER "';") == 0) sql ("INSERT INTO roles" " (uuid, owner, name, comment, creation_time, modification_time)" " VALUES" " ('" ROLE_UUID_OBSERVER "', NULL, 'Observer'," " 'Observer.'," " m_now (), m_now ());"); } /** * @brief Ensure that the database is in order. * * @return 0 success, -1 error. */ static int check_db () { create_tables (); if (progress) progress (); set_db_version (OPENVASMD_DATABASE_VERSION); check_db_nvts (); check_db_configs (); check_db_port_lists (); check_db_targets (); if (check_db_scanners ()) return -1; check_db_tasks (); if (check_db_report_formats ()) return -1; if (check_db_report_formats_trash ()) return -1; check_db_roles (); check_db_permissions (); check_db_settings (); check_generate_scripts (); if (progress) progress (); return 0; } /** * @brief Ensure the generate scripts are all executable. * * Used by a migrator. */ void check_generate_scripts () { iterator_t rows; init_iterator (&rows, "SELECT owner," " uuid," " (SELECT uuid FROM users" " WHERE users.id = report_formats.owner)" " FROM report_formats;"); while (next (&rows)) { resource_t owner; owner = iterator_int64 (&rows, 0); if (owner) { const gchar *report_format_uuid, *user_uuid; gchar *path; report_format_uuid = iterator_string (&rows, 1); if (report_format_uuid == NULL) continue; user_uuid = iterator_string (&rows, 2); if (user_uuid == NULL) continue; path = g_build_filename (OPENVAS_STATE_DIR, "openvasmd", "report_formats", user_uuid, report_format_uuid, "generate", NULL); if (chmod (path, 0755 /* rwxr-xr-x */)) g_warning ("%s: chmod %s failed: %s\n", __FUNCTION__, path, strerror (errno)); g_free (path); } } cleanup_iterator (&rows); } /** * @brief Stop any active tasks. */ void stop_active_tasks () { iterator_t tasks; get_data_t get; /* Set requested and running tasks to stopped. */ assert (current_credentials.uuid == NULL); memset (&get, '\0', sizeof (get)); init_task_iterator (&tasks, &get); while (next (&tasks)) { switch (task_iterator_run_status (&tasks)) { case TASK_STATUS_DELETE_REQUESTED: case TASK_STATUS_DELETE_ULTIMATE_REQUESTED: case TASK_STATUS_DELETE_ULTIMATE_WAITING: case TASK_STATUS_DELETE_WAITING: case TASK_STATUS_REQUESTED: case TASK_STATUS_RUNNING: case TASK_STATUS_STOP_REQUESTED_GIVEUP: case TASK_STATUS_STOP_REQUESTED: case TASK_STATUS_STOP_WAITING: { task_t index = get_iterator_resource (&tasks); /* Set the current user, for event checks. */ current_credentials.uuid = task_owner_uuid (index); set_task_run_status (index, TASK_STATUS_STOPPED); free (current_credentials.uuid); break; } default: break; } } cleanup_iterator (&tasks); current_credentials.uuid = NULL; /* Set requested and running reports to stopped. */ sql ("UPDATE reports SET scan_run_status = %u" " WHERE scan_run_status = %u" " OR scan_run_status = %u" " OR scan_run_status = %u" " OR scan_run_status = %u" " OR scan_run_status = %u" " OR scan_run_status = %u" " OR scan_run_status = %u" " OR scan_run_status = %u" " OR scan_run_status = %u;", TASK_STATUS_STOPPED, TASK_STATUS_DELETE_REQUESTED, TASK_STATUS_DELETE_ULTIMATE_REQUESTED, TASK_STATUS_DELETE_ULTIMATE_WAITING, TASK_STATUS_DELETE_WAITING, TASK_STATUS_REQUESTED, TASK_STATUS_RUNNING, TASK_STATUS_STOP_REQUESTED, TASK_STATUS_STOP_REQUESTED_GIVEUP, TASK_STATUS_STOP_WAITING); } /** * @brief Clean up database tables. * * Remove superfluous entries from tables. */ void cleanup_tables () { /* Remove group and role assignments of deleted users. * * This should be a migrator, but this way is easier to backport. */ sql ("DELETE FROM group_users" " WHERE \"user\" NOT IN (SELECT id FROM users);"); sql ("DELETE FROM group_users_trash" " WHERE \"user\" NOT IN (SELECT id FROM users);"); sql ("DELETE FROM role_users" " WHERE \"user\" NOT IN (SELECT id FROM users);"); sql ("DELETE FROM role_users_trash" " WHERE \"user\" NOT IN (SELECT id FROM users);"); } /** * @brief Initialize the manage library. * * Check DB version, do startup database checks, load the NVT cache. * Optionally also stop active tasks. * * @param[in] log_config Log configuration. * @param[in] nvt_cache_mode True when running in NVT caching mode. * @param[in] database Location of database. * @param[in] max_ips_per_target Max number of IPs per target. * @param[in] max_email_attachment_size Max size of email attachments. * @param[in] max_email_include_size Max size of email inclusions. * @param[in] update_progress Function to update progress, or NULL. * * @param[in] stop_tasks Stop any active tasks. * @param[in] skip_db_check Skip DB check. * * @return 0 success, -1 error, -2 database is wrong version, -3 database needs * to be initialised from server, -4 max_ips_per_target out of range. */ static int init_manage_internal (GSList *log_config, int nvt_cache_mode, const gchar *database, int max_ips_per_target, int max_email_attachment_size, int max_email_include_size, void (*update_progress) (), int stop_tasks, int skip_db_check) { int ret; /* Summary of init cases: * * daemon [--foreground] * init_ompd cache 0 * init_manage * serve_and_schedule * forks child (serve_omp) * init_ompd_process * init_manage_process * manage_schedule * fork_connection_for_schedular * fork one * init_ompd_process * init_manage_process * serve_client * fork two * omp_auth, omp_start_task_report, omp_resume_task_report. * --rebuild --update * rebuild_nvt_cache_retry * forks update_or_rebuild_nvt_cache * init_ompd cache -1 or -2 * init_manage * serve_omp * init_ompd_process * --create-user --delete-user --get-users * manage_create, ... * init_manage_helper * --encrypt/decrypt-all-credentials * manage_encrypt_... * init_manage_helper * --backup-database * (no init because no db access required) * --migrate * manage_migrate * init_manage_process (sorts out db state itself) */ /* The number of 70000 is choosen to cover "192.168.0.0-192.168.255.255" */ if ((max_ips_per_target <= 0) || (max_ips_per_target > 70000)) return -4; max_hosts = max_ips_per_target; if (max_email_attachment_size) max_attach_length = max_email_attachment_size; if (max_email_include_size) max_content_length = max_email_include_size; progress = update_progress; g_log_set_handler (G_LOG_DOMAIN, ALL_LOG_LEVELS, (GLogFunc) openvas_log_func, log_config); memset (¤t_credentials, '\0', sizeof (current_credentials)); init_manage_process (0, database); /* Check that the versions of the databases are correct. */ ret = check_db_versions (nvt_cache_mode); if (ret) return ret; /* Ensure the database is complete, removing superfluous rows. * * Assume that all other running processes are from the same Manager version, * because some of these checks will modify the database if it is out of * date. This is relevant because the caller may be a command option process * like a --create-user process. */ if (skip_db_check == 0) { ret = check_db (); if (ret) return ret; cleanup_tables (); } if (stop_tasks && (nvt_cache_mode == 0)) /* Stop any active tasks. */ stop_active_tasks (); /* Load the NVT cache into memory. */ if (nvti_cache == NULL) update_nvti_cache (); sql_close (); task_db_name = g_strdup (database); return 0; } /** * @brief Initialize the manage library. * * Check DB version, do startup database checks, load the NVT cache. * * Ensure all tasks are in a clean initial state. * * Beware that calling this function while tasks are running may lead to * problems. * * @param[in] log_config Log configuration. * @param[in] nvt_cache_mode True when running in NVT caching mode. * @param[in] database Location of database. * @param[in] max_ips_per_target Max number of IPs per target. * @param[in] max_email_attachment_size Max size of email attachments. * @param[in] max_email_include_size Max size of email inclusions. * @param[in] update_progress Function to update progress, or NULL. * * @param[in] skip_db_check Skip DB check. * * @return 0 success, -1 error, -2 database is wrong version, -3 database needs * to be initialised from server, -4 max_ips_per_target out of range. */ int init_manage (GSList *log_config, int nvt_cache_mode, const gchar *database, int max_ips_per_target, int max_email_attachment_size, int max_email_include_size, void (*update_progress) (), int skip_db_check) { return init_manage_internal (log_config, nvt_cache_mode, database, max_ips_per_target, max_email_attachment_size, max_email_include_size, update_progress, 1, /* Stop active tasks. */ skip_db_check); } /** * @brief Initialize the manage library for a helper program. * * This should be called at the beginning of any program that accesses the * database. Forked processes should call init_manage_process. The daemon * itself calls init_manage, including in NVT cache mode (--rebuild/update). * * @param[in] log_config Log configuration. * @param[in] nvt_cache_mode True when running in NVT caching mode. * @param[in] database Location of database. * @param[in] max_ips_per_target Max number of IPs per target. * @param[in] update_progress Function to update progress, or NULL. * * * @return 0 success, -1 error, -2 database is wrong version, -3 database needs * to be initialised from server, -4 max_ips_per_target out of range. */ int init_manage_helper (GSList *log_config, const gchar *database, int max_ips_per_target, void (*update_progress) ()) { return init_manage_internal (log_config, 0, /* Run daemon in NVT cache mode. */ database, max_ips_per_target, 0, /* Default max_email_attachment_size. */ 0, /* Default max_email_include_size. */ update_progress, 0, /* Stop active tasks. */ 0); /* Skip DB check. */ } /** * @brief Cleanup the manage library. * * Optionally put any running task in the stopped state and close the database. * * @param[in] cleanup If TRUE perform all cleanup operations, else only * those required at the start of a forked process. */ void cleanup_manage_process (gboolean cleanup) { if (sql_is_open ()) { if (cleanup) { if (current_scanner_task) set_task_run_status (current_scanner_task, TASK_STATUS_STOPPED); cleanup_prognosis_iterator (); sql_close (); } else sql_close_fork (); } } /** * @brief Cleanup as immediately as possible. * * Put any running task in the error state and close the database. * * Intended for handlers for signals like SIGSEGV and SIGABRT. * * @param[in] signal Dummy argument for use as signal handler. */ void manage_cleanup_process_error (int signal) { g_log (G_LOG_DOMAIN, G_LOG_LEVEL_DEBUG, "Received %s signal.\n", sys_siglist[signal]); if (sql_is_open ()) { if (current_scanner_task) { g_warning ("%s: Error exit, setting running task to Internal Error", __FUNCTION__); set_task_run_status (current_scanner_task, TASK_STATUS_INTERNAL_ERROR); } sql_close (); } } /** * @brief Get user hash. * * This is for "file" users, now entirely stored in db. * * @param[in] username User name. * * @return Hash. */ gchar * manage_user_hash (const gchar *username) { gchar *hash, *quoted_username; quoted_username = sql_quote (username); hash = sql_string ("SELECT password FROM users WHERE name = '%s';", quoted_username); g_free (quoted_username); return hash; } /** * @brief Get user uuid. * * @param[in] username User name. * @param[in] method Authentication method. * * @return UUID. */ gchar * manage_user_uuid (const gchar *username, auth_method_t method) { gchar *uuid, *quoted_username, *quoted_method; quoted_username = sql_quote (username); quoted_method = sql_quote (auth_method_name (method)); uuid = sql_string ("SELECT uuid FROM users" " WHERE name = '%s' AND method = '%s';", quoted_username, quoted_method); g_free (quoted_username); g_free (quoted_method); return uuid; } /** * @brief Ensure the user exists in the database. * * @param[in] name User name. * @param[in] method Auth method. * * @return 0 success. */ int user_ensure_in_db (const gchar *name, const gchar *method) { gchar *quoted_name, *quoted_method; if ((method == NULL) || (strcasecmp (method, "file") == 0)) /* A "file" user, now entirely stored in db. */ return 0; /* SELECT then INSERT instead of using "INSERT OR REPLACE", so that the * id stays the same. */ quoted_name = sql_quote (name); quoted_method = sql_quote (method); if (sql_int ("SELECT count(*)" " FROM users WHERE name = '%s' and method = '%s';", quoted_name, quoted_method)) { g_free (quoted_method); g_free (quoted_name); return 0; } sql ("INSERT INTO users" " (uuid, owner, name, comment, password, timezone, method, hosts," " hosts_allow, ifaces, ifaces_allow, creation_time, modification_time)" " VALUES" " (make_uuid ()," " (SELECT id FROM users WHERE users.uuid = '%s')," " '%s', '', NULL, NULL, '%s', '', 2, '', 2, m_now (), m_now ());", current_credentials.uuid, quoted_name, quoted_method); g_free (quoted_method); g_free (quoted_name); return 0; } /** * @brief Set user role. * * This works for any auth method. * * @param[in] name User name. * @param[in] method Auth method. * @param[in] role User role. * * @return 0 success. */ int manage_user_set_role (const gchar *name, const gchar *method, const gchar *role) { gchar *quoted_role, *quoted_name, *quoted_method; assert ((strcmp (role, "Admin") == 0) || (strcmp (role, "User") == 0) || (strcmp (role, "Observer") == 0)); user_ensure_in_db (name, method); quoted_role = sql_quote (role); quoted_name = sql_quote (name); quoted_method = sql_quote (method); sql ("DELETE FROM role_users" " WHERE \"user\" = (SELECT id FROM users" " WHERE name = '%s' AND method = '%s');", quoted_name, quoted_method); sql ("INSERT INTO role_users (role, \"user\")" " VALUE ((SELECT id FROM users" " WHERE name = '%s' AND method = '%s')," " (SELECT id FROM roles" " WHERE name = '%s'));", quoted_name, quoted_method, quoted_role); g_free (quoted_role); g_free (quoted_name); g_free (quoted_method); return 0; } /** * @brief Check if user exists. * * @param[in] name User name. * @param[in] method Auth method. * * @return 0 yes, 1 no. */ int manage_user_exists (const gchar *name, auth_method_t method) { gchar *quoted_name, *quoted_method; int ret; quoted_name = sql_quote (name); quoted_method = sql_quote (auth_method_name (method)); ret = sql_int ("SELECT count (*) FROM users" " WHERE name = '%s' AND method = '%s';", quoted_name, quoted_method); g_free (quoted_name); g_free (quoted_method); return ret; } /** * @brief Set the address of scanner to connect to. * * @param[in] uuid Scanner UUID. * * @return 0 if success, -1 if error. */ int manage_scanner_set (const char *uuid) { scanner_t scanner = 0; char *host, *ca_pub, *key_pub, *key_priv; int port, type; if (uuid == NULL) return -1; if (!current_credentials.uuid) current_credentials.uuid = ""; if (find_scanner (uuid, &scanner) || scanner == 0) { g_warning ("Failed to find scanner %s\n", uuid); return -1; } if (!strcmp (current_credentials.uuid, "")) current_credentials.uuid = NULL; type = scanner_type (scanner); if (type != SCANNER_TYPE_OPENVAS) { g_warning ("Scanner %s not an OpenVAS Scanner\n", uuid); return -1; } host = scanner_host (scanner); port = scanner_port (scanner); if (openvas_scanner_set_address (host, port)) { g_warning ("Failed to set %s:%d as scanner\n", host, port); g_free (host); return -1; } ca_pub = scanner_ca_pub (scanner); key_pub = scanner_key_pub (scanner); key_priv = scanner_key_priv (scanner); openvas_scanner_set_certs (ca_pub, key_pub, key_priv); g_free (host); g_free (ca_pub); g_free (key_pub); g_free (key_priv); return 0; } /** * @brief Set the default scanner as the scanner to connect to. * * @return 0 if success, -1 if error. */ int manage_scanner_set_default () { return manage_scanner_set (SCANNER_UUID_DEFAULT); } /** * @brief Set credentials for authenticate. * * @param[in] credentials Credentials. * * @return 0 success, 99 permission denied. */ static int credentials_setup (credentials_t *credentials) { assert (credentials->uuid); credentials->role = g_strdup (user_is_super_admin (credentials->uuid) ? "Super Admin" : (user_is_admin (credentials->uuid) ? "Admin" : (user_is_observer (credentials->uuid) ? "Observer" : (user_is_user (credentials->uuid) ? "User" : "")))); if (user_may ("authenticate") == 0) { free (credentials->uuid); credentials->uuid = NULL; g_free (credentials->role); credentials->role = NULL; return 99; } credentials->timezone = sql_string ("SELECT timezone FROM users" " WHERE uuid = '%s';", credentials->uuid); credentials->severity_class = sql_string ("SELECT value FROM settings" " WHERE name = 'Severity Class'" " AND ((owner IS NULL)" " OR (owner =" " (SELECT id FROM users" " WHERE users.uuid = '%s')))" " ORDER BY owner DESC LIMIT 1;", credentials->uuid); credentials->dynamic_severity = sql_int ("SELECT value FROM settings" " WHERE name = 'Dynamic Severity'" " AND ((owner IS NULL)" " OR (owner =" " (SELECT id FROM users" " WHERE users.uuid = '%s')))" " ORDER BY owner DESC LIMIT 1;", credentials->uuid); credentials->default_severity = sql_double ("SELECT value FROM settings" " WHERE name = 'Default Severity'" " AND ((owner IS NULL)" " OR (owner =" " (SELECT id FROM users" " WHERE users.uuid = '%s')))" " ORDER BY coalesce (owner, 0) DESC LIMIT 1;", credentials->uuid); return 0; } /** * @brief Authenticate credentials. * * @param[in] credentials Credentials. * * @return 0 authentication success, 1 authentication failure, 99 permission * denied, -1 error. */ int authenticate (credentials_t* credentials) { if (credentials->username && credentials->password) { int fail; auth_method_t auth_method; if (authenticate_allow_all) { /* This flag is set for scheduled tasks only. Take the stored uuid * to be able to tell apart locally authenticated vs remotely * authenticated users (in order to fetch the correct rules). */ credentials->uuid = get_scheduled_user_uuid (); if (*credentials->uuid) { if (credentials_setup (credentials)) return 99; manage_session_init (credentials->uuid); return 0; } return -1; } fail = openvas_authenticate_method (credentials->username, credentials->password, &auth_method); if (fail == 0) { gchar *quoted_name, *quoted_method; /* Authentication succeeded. */ user_ensure_in_db (credentials->username, auth_method_name (auth_method)); quoted_name = sql_quote (credentials->username); quoted_method = sql_quote (auth_method_name (auth_method)); credentials->uuid = sql_string ("SELECT uuid FROM users" " WHERE name = '%s'" " AND method = '%s';", quoted_name, quoted_method); g_free (quoted_name); g_free (quoted_method); if (credentials_setup (credentials)) { free (credentials->uuid); credentials->uuid = NULL; credentials->role = NULL; return 99; } manage_session_init (credentials->uuid); return 0; } return fail; } return 1; } /** * @brief Return number of resources of a certain type for current user. * * @param[in] type Type. * @param[in] get GET params. * * @return The number of resources associated with the current user. */ int resource_count (const char *type, const get_data_t *get) { static const char *filter_columns[] = { "owner", NULL }; static column_t select_columns[] = {{ "owner", NULL }, { NULL, NULL }}; get_data_t count_get; memset (&count_get, '\0', sizeof (count_get)); count_get.trash = get->trash; if (type_owned (type)) count_get.filter = "rows=-1 first=1 permission=any owner=any"; else count_get.filter = "rows=-1 first=1 permission=any"; return count (get->subtype ? get->subtype : type, &count_get, type_owned (type) ? select_columns : NULL, type_owned (type) ? select_columns : NULL, type_owned (type) ? filter_columns : NULL, 0, NULL, strcmp (type, "task") ? ((strcmp (type, "report") && strcmp (type, "result")) ? NULL : " AND (SELECT hidden FROM tasks" " WHERE tasks.id = task)" " = 0") : (get->id && (strcmp (get->id, MANAGE_EXAMPLE_TASK_UUID) == 0)) ? " AND hidden = 1" : (get->trash ? " AND hidden = 2" : " AND hidden = 0"), type_owned (type)); } /** * @brief Test whether a resource of the given type and unique ID exists. * * @param[in] type Type. * @param[in] id Unique ID. * * @return 1 if the resource exists, 0 otherwise. */ int resource_id_exists (const char *type, const char * id) { return !!sql_int ("SELECT count(*)" " FROM %ss" " WHERE uuid='%s'" " %s;", type, id, (strcmp (type, "task") == 0) ? "AND hidden=0" : ""); } /** * @brief Test Whether a resource of the given type and ID exists in the trash. * * @param[in] type Type. * @param[in] id Unique ID. * * @return 1 if the resource exists, 0 otherwise. */ int trash_id_exists (const char *type, const char * id) { if ((strcmp (type, "nvt") == 0) || (strcmp (type, "cpe") == 0) || (strcmp (type, "cve") == 0) || (strcmp (type, "ovaldef") == 0) || (strcmp (type, "cert_bund_adv") == 0) || (strcmp (type, "dfn_cert_adv") == 0) || (strcmp (type, "report") == 0) || (strcmp (type, "result") == 0) || (strcmp (type, "user") == 0)) return 0; else if (strcmp (type, "task")) return !!sql_int ("SELECT count(*)" " FROM %ss_trash" " WHERE uuid='%s';", type, id); else return !!sql_int ("SELECT count(*)" " FROM tasks" " WHERE uuid='%s'" " AND hidden=2;", id); } /** * @brief Return the number of tasks associated with the current user. * * @param[in] get GET params. * * @return The number of tasks associated with the current user. */ unsigned int task_count (const get_data_t *get) { static const char *extra_columns[] = TASK_ITERATOR_FILTER_COLUMNS; static column_t columns[] = TASK_ITERATOR_COLUMNS; static column_t where_columns[] = TASK_ITERATOR_WHERE_COLUMNS; char *filter; gchar *value; int overrides, min_qod; gchar *extra_tables; int ret; if (get->filt_id && strcmp (get->filt_id, "0")) { filter = filter_term (get->filt_id); if (filter == NULL) return 2; } else filter = NULL; value = filter_term_value (filter ? filter : get->filter, "apply_overrides"); overrides = value && strcmp (value, "0"); g_free (value); value = filter_term_value (filter ? filter : get->filter, "min_qod"); if (value == NULL || sscanf (value, "%d", &min_qod) != 1) min_qod = MIN_QOD_DEFAULT; g_free (value); free (filter); extra_tables = task_iterator_opts_table (overrides, min_qod); ret = count2 ("task", get, columns, columns, where_columns, where_columns, extra_columns, 0, extra_tables, (get->id && (strcmp (get->id, MANAGE_EXAMPLE_TASK_UUID) == 0)) ? " AND hidden = 1" : (get->trash ? " AND hidden = 2" : " AND hidden = 0"), TRUE); g_free (extra_tables); return ret; } /** * @brief Return the identifier of a task. * * @param[in] task Task. * * @return ID of task. */ unsigned int task_id (task_t task) { /** @todo The cast is a hack for compatibility with the old, alternate, * FS based storage mechanism. */ return (unsigned int) task; } /** * @brief Return the UUID of a task. * * @param[in] task Task. * @param[out] id Pointer to a newly allocated string. * * @return 0. */ int task_uuid (task_t task, char ** id) { *id = sql_string ("SELECT uuid FROM tasks WHERE id = %llu;", task); return 0; } /** * @brief Return whether a task is in the trashcan. * * @param[in] task Task. * * @return 1 if in trashcan, else 0. */ int task_in_trash (task_t task) { return sql_int ("SELECT hidden = 2" " FROM tasks WHERE id = %llu;", task); } /** * @brief Return the name of the owner of a task. * * @param[in] task Task. * * @return Newly allocated user name. */ char* task_owner_name (task_t task) { return sql_string ("SELECT name FROM users WHERE id =" " (SELECT owner FROM tasks WHERE id = %llu);", task); } /** * @brief Return the name of the owner of a task. * * @param[in] task Task. * * @return Newly allocated user name. */ static char* task_owner_uuid (task_t task) { return sql_string ("SELECT uuid FROM users WHERE id =" " (SELECT owner FROM tasks WHERE id = %llu);", task); } /** * @brief Return the name of a task. * * @param[in] task Task. * * @return Task name. */ char* task_name (task_t task) { return sql_string ("SELECT name FROM tasks WHERE id = %llu;", task); } /** * @brief Return the comment of a task. * * @param[in] task Task. * * @return Comment of task. */ char* task_comment (task_t task) { return sql_string ("SELECT comment FROM tasks WHERE id = %llu;", task); } /** * @brief Return the hosts ordering of a task. * * @param[in] task Task. * * @return Hosts ordering of task. */ char* task_hosts_ordering (task_t task) { return sql_string ("SELECT hosts_ordering FROM tasks WHERE id = %llu;", task); } /** * @brief Return the observers of a task. * * @param[in] task Task. * * @return Observers of task. */ char* task_observers (task_t task) { iterator_t users; GString *observers; observers = g_string_new (""); init_task_user_iterator (&users, task); if (next (&users)) { g_string_append (observers, task_user_iterator_name (&users)); while (next (&users)) g_string_append_printf (observers, " %s", task_user_iterator_name (&users)); } cleanup_iterator (&users); return g_string_free (observers, FALSE); } /** * @brief Return the config of a task. * * @param[in] task Task. * * @return Config of task. */ config_t task_config (task_t task) { config_t config; switch (sql_int64 (&config, "SELECT config FROM tasks WHERE id = %llu;", task)) { case 0: return config; default: /* Programming error. */ case 1: /* Too few rows in result of query. */ case -1: /* Error. */ /* Every task should have a config. */ assert (0); return 0; break; } } /** * @brief Return the UUID of the config of a task. * * @param[in] task Task. * * @return UUID of config of task. */ char* task_config_uuid (task_t task) { if (task_config_in_trash (task)) return sql_string ("SELECT uuid FROM configs_trash WHERE id =" " (SELECT config FROM tasks WHERE id = %llu);", task); return sql_string ("SELECT uuid FROM configs WHERE id =" " (SELECT config FROM tasks WHERE id = %llu);", task); } /** * @brief Return the name of the config of a task. * * @param[in] task Task. * * @return Name of config of task. */ char* task_config_name (task_t task) { if (task_config_in_trash (task)) return sql_string ("SELECT name FROM configs_trash WHERE id =" " (SELECT config FROM tasks WHERE id = %llu);", task); return sql_string ("SELECT name FROM configs WHERE id =" " (SELECT config FROM tasks WHERE id = %llu);", task); } /** * @brief Return whether the config of a task is in the trashcan. * * @param[in] task Task. * * @return 1 if in trashcan, else 0. */ int task_config_in_trash (task_t task) { return sql_int ("SELECT config_location = " G_STRINGIFY (LOCATION_TRASH) " FROM tasks WHERE id = %llu;", task); } /** * @brief Set the config of a task. * * @param[in] task Task. * @param[in] config Config. */ void set_task_config (task_t task, config_t config) { sql ("UPDATE tasks SET config = %llu, modification_time = m_now ()" " WHERE id = %llu;", config, task); } /** * @brief Return the target of a task. * * @param[in] task Task. * * @return Target of task. */ target_t task_target (task_t task) { target_t target = 0; switch (sql_int64 (&target, "SELECT target FROM tasks WHERE id = %llu;", task)) { case 0: return target; break; case 1: /* Too few rows in result of query. */ default: /* Programming error. */ assert (0); case -1: return 0; break; } } /** * @brief Set the target of a task. * * @param[in] task Task. * @param[in] target Target. */ void set_task_target (task_t task, target_t target) { sql ("UPDATE tasks SET target = %llu, modification_time = m_now ()" " WHERE id = %llu;", target, task); } /** * @brief Set the hosts ordering of a task. * * @param[in] task Task. * @param[in] ordering Hosts ordering. */ void set_task_hosts_ordering (task_t task, const char *ordering) { char *quoted_ordering = sql_quote (ordering ?: ""); sql ("UPDATE tasks SET hosts_ordering = '%s', modification_time = m_now ()" " WHERE id = %llu;", quoted_ordering, task); g_free (quoted_ordering); } /** * @brief Return whether the target of a task is in the trashcan. * * @param[in] task Task. * * @return 1 if in trash, else 0. */ int task_target_in_trash (task_t task) { return sql_int ("SELECT target_location = " G_STRINGIFY (LOCATION_TRASH) " FROM tasks WHERE id = %llu;", task); } /** * @brief Return the scanner of a task. * * @param[in] task Task. * * @return scanner of task. */ scanner_t task_scanner (task_t task) { scanner_t scanner = 0; switch (sql_int64 (&scanner, "SELECT scanner FROM tasks WHERE id = %llu;", task)) { case 0: return scanner; break; case 1: /* Too few rows in result of query. */ default: /* Programming error. */ assert (0); case -1: return 0; break; } } /** * @brief Set the scanner of a task. * * @param[in] task Task. * @param[in] scanner Scanner. */ void set_task_scanner (task_t task, scanner_t scanner) { sql ("UPDATE tasks SET scanner = %llu, modification_time = m_now ()" " WHERE id = %llu;", scanner, task); } /** * @brief Return the slave of a task. * * @param[in] task Task. * * @return Slave of task. */ slave_t task_slave (task_t task) { slave_t slave = 0; switch (sql_int64 (&slave, "SELECT slave FROM tasks WHERE id = %llu;", task)) { case 0: return slave; break; case 1: /* Too few rows in result of query. */ default: /* Programming error. */ assert (0); case -1: return 0; break; } } /** * @brief Set the slave of a task. * * @param[in] task Task. * @param[in] slave Slave. */ void set_task_slave (task_t task, slave_t slave) { sql ("UPDATE tasks SET slave = %llu, modification_time = m_now ()" " WHERE id = %llu;", slave, task); } /** * @brief Return whether the slave of a task is in the trashcan. * * @param[in] task Task. * * @return 1 if in trash, else 0. */ int task_slave_in_trash (task_t task) { return sql_int ("SELECT slave_location = " G_STRINGIFY (LOCATION_TRASH) " FROM tasks WHERE id = %llu;", task); } /** * @brief Return the run state of a task. * * @param[in] task Task. * * @return Task run status. */ task_status_t task_run_status (task_t task) { return (unsigned int) sql_int ("SELECT run_status FROM tasks WHERE id = %llu;", task); } /** * @brief Set a report's scheduled flag. * * Set flag if task was scheduled, else clear flag. * * @param[in] report Report. */ void set_report_scheduled (report_t report) { /* Using unused column "nbefile" instead of adding column "flags", to avoid * backporting a migrator. */ if (authenticate_allow_all) /* The task was scheduled. */ sql ("UPDATE reports SET nbefile = 1 WHERE id = %llu;", report); else sql ("UPDATE reports SET nbefile = 0 WHERE id = %llu;", report); } /** * @brief Get a report's scheduled flag. * * @param[in] report Report. */ static int report_scheduled (report_t report) { /* Using unused column "nbefile" instead of adding column "flags", to avoid * backporting a migrator. */ return sql_int ("SELECT nbefile FROM reports WHERE id = %llu;", report); } /** * @brief Set the run state of a task. * * @param[in] task Task. * @param[in] status New run status. */ void set_task_run_status (task_t task, task_status_t status) { char *uuid; char *name; if ((task == current_scanner_task) && current_report) sql ("UPDATE reports SET scan_run_status = %u WHERE id = %llu;", status, current_report); sql ("UPDATE tasks SET run_status = %u WHERE id = %llu;", status, task); task_uuid (task, &uuid); name = task_name (task); g_log ("event task", G_LOG_LEVEL_MESSAGE, "Status of task %s (%s) has changed to %s", name, uuid, run_status_name (status)); free (uuid); free (name); event (task, (task == current_scanner_task) ? current_report : 0, EVENT_TASK_RUN_STATUS_CHANGED, (void*) status); } /** * @brief Atomically set the run state of a task to requested. * * @param[in] task Task. * @param[out] status Old run status of task. * * @return 0 success, 1 task is active already. */ int set_task_requested (task_t task, task_status_t *status) { task_status_t run_status; sql_begin_exclusive (); run_status = task_run_status (task); if (run_status == TASK_STATUS_REQUESTED || run_status == TASK_STATUS_RUNNING || run_status == TASK_STATUS_STOP_REQUESTED || run_status == TASK_STATUS_STOP_REQUESTED_GIVEUP || run_status == TASK_STATUS_STOP_WAITING || run_status == TASK_STATUS_DELETE_REQUESTED || run_status == TASK_STATUS_DELETE_ULTIMATE_REQUESTED || run_status == TASK_STATUS_DELETE_ULTIMATE_WAITING || run_status == TASK_STATUS_DELETE_WAITING) { sql ("END;"); *status = run_status; return 1; } set_task_run_status (task, TASK_STATUS_REQUESTED); sql ("COMMIT;"); *status = run_status; return 0; } /** * @brief Return number of results in a task. * * @param[in] task Task. * @param[in] min_qod Minimum QOD. * * @return Result count. */ int task_result_count (task_t task, int min_qod) { return sql_int ("SELECT count (*) FROM results" " WHERE task = %llu" " AND qod > %i" " AND severity > " G_STRINGIFY (SEVERITY_ERROR) ";", task, min_qod); } /** * @brief Return the running report of a task. * * @param[in] task Task. * * @return Current report of task if task is active, else (report_t) 0. */ report_t task_running_report (task_t task) { task_status_t run_status = task_run_status (task); if (run_status == TASK_STATUS_REQUESTED || run_status == TASK_STATUS_RUNNING) { return (unsigned int) sql_int ("SELECT max(id) FROM reports" " WHERE task = %llu AND end_time IS NULL" " AND scan_run_status = %u;", task, TASK_STATUS_RUNNING); } return (report_t) 0; } /** * @brief Return the current report of a task. * * @param[in] task Task. * * @return Current report of task if task is active, else (report_t) 0. */ report_t task_iterator_current_report (iterator_t *iterator) { task_t task = get_iterator_resource (iterator); task_status_t run_status = task_iterator_run_status (iterator); if (run_status == TASK_STATUS_REQUESTED || run_status == TASK_STATUS_RUNNING || run_status == TASK_STATUS_DELETE_REQUESTED || run_status == TASK_STATUS_DELETE_ULTIMATE_REQUESTED || run_status == TASK_STATUS_STOP_REQUESTED || run_status == TASK_STATUS_STOP_REQUESTED_GIVEUP || run_status == TASK_STATUS_STOPPED) { return (unsigned int) sql_int ("SELECT max(id) FROM reports" " WHERE task = %llu" " AND (scan_run_status = %u" " OR scan_run_status = %u" " OR scan_run_status = %u" " OR scan_run_status = %u" " OR scan_run_status = %u" " OR scan_run_status = %u" " OR scan_run_status = %u);", task, TASK_STATUS_REQUESTED, TASK_STATUS_RUNNING, TASK_STATUS_DELETE_REQUESTED, TASK_STATUS_DELETE_ULTIMATE_REQUESTED, TASK_STATUS_STOP_REQUESTED, TASK_STATUS_STOP_REQUESTED_GIVEUP, TASK_STATUS_STOPPED); } return (report_t) 0; } /** * @brief Return the upload progress of a task. * * @param[in] task Task. * * @return Task upload progress, as a percentage, or -1 on error. */ int task_upload_progress (task_t task) { report_t report; report = task_running_report (task); if (report) { int count; if (report_scan_result_count (report, NULL, NULL, 0, NULL, NULL, 0, 0, &count)) return -1; return sql_int ("SELECT" " max (min (((%i * 100) / upload_result_count), 100), -1)" " FROM tasks" " WHERE id = %llu;", count, task); } return -1; } /** * @brief Set the start time of a task. * * @param[in] task Task. * @param[in] time New time. ISO format. Freed before return. */ void set_task_start_time (task_t task, char* time) { sql ("UPDATE tasks SET start_time = %i, modification_time = m_now ()" " WHERE id = %llu;", parse_iso_time (time), task); free (time); } /** * @brief Set the start time of a task. * * @param[in] task Task. * @param[in] time New time. Seconds since epoch. */ void set_task_start_time_epoch (task_t task, int time) { sql ("UPDATE tasks SET start_time = %i, modification_time = m_now ()" " WHERE id = %llu;", time, task); } /** * @brief Set the start time of a task. * * @param[in] task Task. * @param[in] time New time. OTP format (ctime). Freed before return. */ void set_task_start_time_otp (task_t task, char* time) { sql ("UPDATE tasks SET start_time = %i, modification_time = m_now ()" " WHERE id = %llu;", parse_otp_time (time), task); free (time); } /** * @brief Get the report from the most recently completed invocation of task. * * @param[in] task The task. * @param[out] report Report return, 0 if succesfully failed to select report. * * @return 0 success, -1 error. */ int task_last_report (task_t task, report_t *report) { switch (sql_int64 (report, "SELECT id FROM reports WHERE task = %llu" " AND scan_run_status = %u" " ORDER BY date DESC LIMIT 1;", task, TASK_STATUS_DONE)) { case 0: break; case 1: /* Too few rows in result of query. */ *report = 0; return 0; break; default: /* Programming error. */ assert (0); case -1: return -1; break; } return 0; } /** * @brief Get the report from second most recently completed invocation of task. * * @param[in] task The task. * @param[out] report Report return, 0 if succesfully failed to select report. * * @return 0 success, -1 error. */ static int task_second_last_report (task_t task, report_t *report) { switch (sql_int64 (report, "SELECT id FROM reports WHERE task = %llu" " AND scan_run_status = %u" " ORDER BY date DESC LIMIT 1 OFFSET 1;", task, TASK_STATUS_DONE)) { case 0: break; case 1: /* Too few rows in result of query. */ *report = 0; return 0; break; default: /* Programming error. */ assert (0); case -1: return -1; break; } return 0; } /** * @brief Get the report from the most recently stopped invocation of task. * * @param[in] task The task. * @param[out] report Report return, 0 if succesfully failed to select report. * * @return 0 success, -1 error. */ int task_last_stopped_report (task_t task, report_t *report) { switch (sql_int64 (report, "SELECT id FROM reports WHERE task = %llu" " AND scan_run_status = %u" " ORDER BY date DESC LIMIT 1;", task, TASK_STATUS_STOPPED)) { case 0: break; case 1: /* Too few rows in result of query. */ *report = 0; return 0; break; default: /* Programming error. */ assert (0); case -1: return -1; break; } return 0; } /** * @brief Get report ID from second most recently completed invocation of task. * * @param[in] task The task. * * @return The UUID of the report as a newly allocated string. */ gchar* task_second_last_report_id (task_t task) { return sql_string ("SELECT uuid FROM reports WHERE task = %llu" " AND scan_run_status = %u" " ORDER BY date DESC LIMIT 1 OFFSET 1;", task, TASK_STATUS_DONE); } /** * @brief Add an alert to a task. * * @param[in] task Task. * @param[in] alert Alert. */ void add_task_alert (task_t task, alert_t alert) { sql ("INSERT INTO task_alerts (task, alert, alert_location)" " VALUES (%llu, %llu, " G_STRINGIFY (LOCATION_TABLE) ");", task, alert); } /** * @brief Set the alerts on a task, removing any previous alerts. * * @param[in] task Task. * @param[in] alerts Alerts. * @param[out] alert_id_return ID of alert on "failed to find" error. * * @return 0 success, -1 error, 1 failed to find alert. */ int set_task_alerts (task_t task, array_t *alerts, gchar **alert_id_return) { alert_t alert = 0; guint index; sql_begin_immediate (); sql ("DELETE FROM task_alerts where task = %llu;", task); index = alerts->len; while (index--) { gchar *alert_id; alert_id = (gchar*) g_ptr_array_index (alerts, index); if (strcmp (alert_id, "0") == 0) continue; if (find_alert_with_permission (alert_id, &alert, "get_alerts")) { sql ("ROLLBACK;"); return -1; } if (alert == 0) { sql ("ROLLBACK;"); if (alert_id_return) *alert_id_return = alert_id; return 1; } sql ("INSERT INTO task_alerts (task, alert, alert_location)" " VALUES (%llu, %llu, " G_STRINGIFY (LOCATION_TABLE) ");", task, alert); } sql ("COMMIT;"); return 0; } /** * @brief Set the alterable state of a task. * * @param[in] task Task. * @param[in] alterable Whether task is alterable. */ void set_task_alterable (task_t task, int alterable) { sql ("UPDATE tasks SET alterable = %i WHERE id = %llu;", alterable, task); } /** * @brief Set observer groups on a task, removing any previous groups. * * @param[in] task Task. * @param[in] groups Groups. * @param[out] group_id_return ID of group on "failed to find" error. * * @return 0 success, -1 error, 1 failed to find group. */ int set_task_groups (task_t task, array_t *groups, gchar **group_id_return) { group_t group = 0; guint index; sql_begin_immediate (); sql ("DELETE FROM permissions" " WHERE resource_type = 'task'" " AND resource = %llu" " AND subject_type = 'group'" " AND name = 'get';", task); index = 0; while (index < groups->len) { gchar *group_id; group_id = (gchar*) g_ptr_array_index (groups, index); if (strcmp (group_id, "0") == 0) { index++; continue; } if (find_group (group_id, &group)) { sql ("ROLLBACK;"); return -1; } if (group == 0) { sql ("ROLLBACK;"); if (group_id_return) *group_id_return = group_id; return 1; } sql ("INSERT INTO permissions" " (uuid, owner, name, comment, resource_type, resource," " resource_uuid, resource_location, subject_type, subject," " subject_location, creation_time, modification_time)" " VALUES" " (make_uuid ()," " (SELECT id FROM users WHERE users.uuid = '%s')," " 'get_tasks', '', 'task', %llu," " (SELECT uuid FROM tasks WHERE tasks.id = %llu)," " " G_STRINGIFY (LOCATION_TABLE) ", 'group', %llu," " " G_STRINGIFY (LOCATION_TABLE) ", m_now (), m_now ());", current_credentials.uuid, task, task, group); index++; } sql ("COMMIT;"); return 0; } /** * @brief Set the schedule of a task. * * @param[in] task Task. * @param[in] schedule Schedule. * @param[in] periods Number of schedule periods. * * @return 0 success, -1 error. */ int set_task_schedule (task_t task, schedule_t schedule, int periods) { sql ("UPDATE tasks" " SET schedule = %llu," " schedule_periods = %i," " schedule_next_time = (SELECT next_time (first_time," " period," " period_months)" " FROM schedules" " WHERE id = %llu)," " modification_time = m_now ()" " WHERE id = %llu;", schedule, periods, schedule, task); return 0; } /** * @brief Set the schedule of a task. * * @param[in] task_id Task UUID. * @param[in] schedule Schedule. * @param[in] periods Number of schedule periods. * * @return 0 success, -1 error. */ int set_task_schedule_uuid (const gchar *task_id, schedule_t schedule, int periods) { gchar *quoted_task_id; quoted_task_id = sql_quote (task_id); sql ("UPDATE tasks" " SET schedule = %llu," " schedule_periods = %i," " schedule_next_time = (SELECT next_time (first_time," " period," " period_months)" " FROM schedules" " WHERE id = %llu)," " modification_time = m_now ()" " WHERE uuid = '%s';", schedule, periods, schedule, quoted_task_id); g_free (quoted_task_id); return 0; } /** * @brief Set the schedule periods of a task, given a UUID. * * The task modification time stays the same. * * @param[in] task_id Task UUID. * @param[in] periods Schedule periods. * * @return 0 success, -1 error. */ int set_task_schedule_periods (const gchar *task_id, int periods) { gchar *quoted_task_id; quoted_task_id = sql_quote (task_id); sql ("UPDATE tasks" " SET schedule_periods = %i" " WHERE uuid = '%s';", periods, quoted_task_id); g_free (quoted_task_id); return 0; } /** * @brief Set the schedule periods of a task, given an ID. * * The task modification time stays the same. * * @param[in] task Task UUID. * @param[in] periods Schedule periods. * * @return 0 success, -1 error. */ int set_task_schedule_periods_id (task_t task, int periods) { sql ("UPDATE tasks" " SET schedule_periods = %i" " WHERE id = %llu;", periods, task); return 0; } /** * @brief Return the schedule of a task. * * @param[in] task Task. * * @return Schedule. */ schedule_t task_schedule (task_t task) { schedule_t schedule = 0; switch (sql_int64 (&schedule, "SELECT schedule FROM tasks WHERE id = %llu;", task)) { case 0: return schedule; break; case 1: /* Too few rows in result of query. */ default: /* Programming error. */ assert (0); case -1: return 0; break; } } /** * @brief Return the schedule of a task. * * @param[in] task Task. * * @return Schedule. */ schedule_t task_schedule_uuid (const gchar *task_id) { schedule_t schedule; gchar *quoted_task_id; quoted_task_id = sql_quote (task_id); schedule = 0; switch (sql_int64 (&schedule, "SELECT schedule FROM tasks WHERE uuid = '%s';", quoted_task_id)) { case 0: g_free (quoted_task_id); return schedule; break; case 1: /* Too few rows in result of query. */ default: /* Programming error. */ assert (0); case -1: g_free (quoted_task_id); return 0; break; } } /** * @brief Get whether the task schedule is in the trash. * * @param[in] task Task. * * @return 1 if in trash, else 0. */ int task_schedule_in_trash (task_t task) { return sql_int ("SELECT schedule_location = " G_STRINGIFY (LOCATION_TRASH) " FROM tasks" " WHERE id = %llu;", task); } /** * @brief Get the number of times the period schedule should run on the task. * * @param[in] task Task. * * @return Number of times. */ int task_schedule_periods (task_t task) { return sql_int ("SELECT schedule_periods FROM tasks WHERE id = %llu;", task); } /** * @brief Set the next time a scheduled task will be due. * * @param[in] task_id Task UUID. * * @return Task schedule periods. */ int task_schedule_periods_uuid (const gchar *task_id) { gchar *quoted_task_id; int ret; quoted_task_id = sql_quote (task_id); ret = sql_int ("SELECT schedule_periods FROM tasks WHERE uuid = '%s';", quoted_task_id); g_free (quoted_task_id); return ret; } /** * @brief Get next time a scheduled task will run, following schedule timezone. * * @param[in] task Task. * * @return If the task has a schedule, the next time the task will run (0 if it * has already run), otherwise 0. */ int task_schedule_next_time_tz (task_t task) { int next_time; int ret; iterator_t schedules; get_data_t get; schedule_t schedule; schedule = task_schedule (task); memset (&get, '\0', sizeof (get)); next_time = sql_int ("SELECT schedule_next_time FROM tasks" " WHERE id = %llu;", task); if (next_time == 0) return 0; get.id = schedule_uuid (schedule); ret = init_schedule_iterator (&schedules, &get); free (get.id); if (ret) return next_time; if (next (&schedules)) next_time += schedule_iterator_initial_offset (&schedules) - time_offset (schedule_iterator_timezone (&schedules), next_time); cleanup_iterator (&schedules); return next_time; } /** * @brief Set the next time a scheduled task will be due. * * @param[in] task_id Task UUID. */ time_t task_schedule_next_time (const gchar *task_id) { gchar *quoted_task_id; time_t ret; quoted_task_id = sql_quote (task_id); ret = (time_t) sql_int ("SELECT schedule_next_time FROM tasks" " WHERE uuid = '%s';", quoted_task_id); g_free (quoted_task_id); return ret; } /** * @brief Set the next time a scheduled task will be due. * * @param[in] task Task. * @param[in] time New next time. */ void set_task_schedule_next_time (task_t task, time_t time) { sql ("UPDATE tasks SET schedule_next_time = %i WHERE id = %llu;", time, task); } /** * @brief Set the next time a scheduled task will be due. * * @param[in] task_id Task UUID. * @param[in] time New next time. */ void set_task_schedule_next_time_uuid (const gchar *task_id, time_t time) { gchar *quoted_task_id; quoted_task_id = sql_quote (task_id); sql ("UPDATE tasks SET schedule_next_time = %i WHERE uuid = '%s';", time, quoted_task_id); g_free (quoted_task_id); } /** * @brief Return the severity score of a task, taking overrides into account. * * @param[in] task Task. * @param[in] overrides Whether to apply overrides. * @param[in] min_qod Minimum QoD of results to count. * @param[in] offset Offset of report to get severity from: * 0 = use last report, 1 = use next to last report * * @return Severity score of last report on task if there is one, as a freshly * allocated string, else NULL. */ char * task_severity (task_t task, int overrides, int min_qod, int offset) { char* severity; gchar *severity_sql, *ov, *new_severity_sql; if (current_credentials.uuid == NULL) return NULL; if (task_target (task) == 0) /* Container task. */ return NULL; if (setting_dynamic_severity_int ()) severity_sql = g_strdup("CASE WHEN results.severity" " > " G_STRINGIFY (SEVERITY_LOG) " THEN coalesce ((SELECT CAST (cvss_base" " AS REAL)" " FROM nvts" " WHERE nvts.oid" " = results.nvt)," " results.severity)" " ELSE results.severity END"); else severity_sql = g_strdup ("results.severity"); if (overrides) { gchar *owned_clause; owned_clause = where_owned_for_get ("override", NULL); ov = g_strdup_printf ("SELECT overrides.new_severity" " FROM overrides" " WHERE overrides.nvt = results.nvt" " AND %s" " AND ((overrides.end_time = 0)" " OR (overrides.end_time >= m_now ()))" " AND (overrides.task = results.task" " OR overrides.task = 0)" " AND (overrides.result = results.id" " OR overrides.result = 0)" " AND (overrides.hosts is NULL" " OR overrides.hosts = ''" " OR hosts_contains (overrides.hosts, results.host))" " AND (overrides.port is NULL" " OR overrides.port = ''" " OR overrides.port = results.port)" " AND severity_matches_ov (%s, overrides.severity)" " ORDER BY overrides.result DESC, overrides.task DESC," " overrides.port DESC, overrides.severity ASC," " overrides.creation_time DESC" " LIMIT 1", owned_clause, severity_sql); new_severity_sql = g_strdup_printf ("coalesce ((%s), %s)", ov, severity_sql); g_free (owned_clause); g_free (ov); } else new_severity_sql = g_strdup (severity_sql); g_free (severity_sql); severity = sql_string ("SELECT max (%s)" " FROM results" " WHERE results.report" " = +(SELECT id FROM reports" " WHERE reports.task = %llu" " AND reports.scan_run_status = %u" " ORDER BY reports.date DESC" " LIMIT 1 OFFSET %d)" " AND results.qod" " >= %d;", new_severity_sql, task, TASK_STATUS_DONE, offset, min_qod); g_free (new_severity_sql); return severity; } /** * @brief Return the severity score of a task, taking overrides into account. * * @param[in] task Task. * @param[in] overrides Whether to apply overrides. * @param[in] min_qod Minimum QoD of results to count. * @param[in] offset Offset of report to get severity from: * 0 = use last report, 1 = use next to last report * * @return Severity score of last report on task as a double if there is one, * else SEVERITY_MISSING. */ double task_severity_double (task_t task, int overrides, int min_qod, int offset) { char* severity; double severity_dbl; severity = task_severity (task, overrides, min_qod, offset); if (severity == NULL || sscanf (severity, "%lf", &severity_dbl) != 1) { free (severity); return SEVERITY_MISSING; } else { free (severity); return severity_dbl; } } /** * @brief Set the observers of a task. * * @param[in] task Task. * @param[in] observers Observers. * * @return 0 success, -1 error, 1 user name validation failed, 2 failed to find * user. */ int set_task_observers (task_t task, const gchar *observers) { gchar **split, **point; GList *added; // TODO the tricky bit here is if you have to own the task to set observers. assert (current_credentials.username); added = NULL; split = g_strsplit_set (observers, " ,", 0); sql_begin_immediate (); sql ("DELETE FROM permissions" " WHERE resource_type = 'task' AND resource = %llu" " AND subject_type = 'user';", task); point = split; while (*point) { user_t user; gchar *name; name = *point; g_strstrip (name); if (strcmp (name, "") == 0) { point++; continue; } if ((strcmp (name, current_credentials.username) == 0) || g_list_find_custom (added, name, (GCompareFunc) strcmp)) { point++; continue; } added = g_list_prepend (added, name); if (openvas_user_exists (name) == 0) { g_list_free (added); g_strfreev (split); sql ("ROLLBACK;"); return 2; } if (find_user_by_name (name, &user)) { g_list_free (added); g_strfreev (split); sql ("ROLLBACK;"); return -1; } if (user == 0) { gchar *uuid; /** @todo Similar to validate_user in openvas-administrator. */ if (g_regex_match_simple ("^[[:alnum:]-_]+$", name, 0, 0) == 0) { g_list_free (added); g_strfreev (split); sql ("ROLLBACK;"); return 1; } uuid = openvas_user_uuid (name); if (uuid == NULL) { g_list_free (added); g_strfreev (split); sql ("ROLLBACK;"); return -1; } if (sql_int ("SELECT count(*) FROM users WHERE uuid = '%s';", uuid) == 0) { gchar *quoted_name; quoted_name = sql_quote (name); sql ("INSERT INTO users" " (uuid, name, creation_time, modification_time)" " VALUES" " ('%s', '%s', m_now (), m_now ());", uuid, quoted_name); g_free (quoted_name); user = sql_last_insert_id (); } else { /* user_find should have found it. */ assert (0); g_free (uuid); g_list_free (added); g_strfreev (split); sql ("ROLLBACK;"); return -1; } g_free (uuid); } sql ("INSERT INTO permissions" " (uuid, owner, name, comment, resource_type, resource," " resource_uuid, resource_location, subject_type, subject," " subject_location, creation_time, modification_time)" " VALUES" " (make_uuid ()," " (SELECT id FROM users WHERE users.uuid = '%s')," " 'get_tasks', '', 'task', %llu," " (SELECT uuid FROM tasks WHERE tasks.id = %llu)," " " G_STRINGIFY (LOCATION_TABLE) ", 'user', %llu," " " G_STRINGIFY (LOCATION_TABLE) ", m_now (), m_now ());", current_credentials.uuid, task, task, user); point++; } g_list_free (added); g_strfreev (split); sql ("COMMIT;"); return 0; } /** * @brief Clear once-off schedules from tasks where the duration has passed. * * @param[in] task Task. 0 for all. */ void clear_duration_schedules (task_t task) { gchar *task_element; const gchar *duration_expired_element; if (task) task_element = g_strdup_printf (" AND id = %llu", task); else task_element = g_strdup (""); duration_expired_element = " AND (SELECT first_time + duration FROM schedules" " WHERE schedules.id = schedule)" " < m_now ()"; sql ("UPDATE tasks" " SET schedule = 0," " schedule_next_time = 0," " modification_time = m_now ()" " WHERE schedule > 0" "%s" " AND (SELECT period FROM schedules WHERE schedules.id = schedule) = 0" " AND (SELECT duration FROM schedules WHERE schedules.id = schedule) > 0" "%s" " AND run_status != %i" " AND run_status != %i;", task_element, task ? "" : duration_expired_element, TASK_STATUS_RUNNING, TASK_STATUS_REQUESTED); g_free (task_element); } /** * @brief Update tasks with limited run schedules which have durations. * * If a task is given, assume that the task has finished. Otherwise only * update the task if more time than the duration has passed the start time. * * @param[in] task Task. 0 for all. */ void update_duration_schedule_periods (task_t task) { gchar *task_element; const gchar *duration_expired_element; if (task) task_element = g_strdup_printf (" AND id = %llu", task); else task_element = g_strdup (""); duration_expired_element = /* The task has started, so assume that the start time was the last * most recent start of the period. */ " AND (SELECT first_time" " + (((m_now () - first_time) / period) * period)" " + duration" " FROM schedules" " WHERE schedules.id = schedule)" " < m_now ()"; sql ("UPDATE tasks" " SET schedule = 0," " schedule_next_time = 0," " modification_time = m_now ()" " WHERE schedule > 0" "%s" " AND schedule_periods = 1" " AND (SELECT period FROM schedules WHERE schedules.id = schedule) > 0" " AND (SELECT duration FROM schedules WHERE schedules.id = schedule) > 0" " AND schedule_next_time = 0" /* Set as flag when starting task. */ "%s" " AND run_status != %i" " AND run_status != %i;", task_element, task ? "" : duration_expired_element, TASK_STATUS_RUNNING, TASK_STATUS_REQUESTED); g_free (task_element); } /** * @brief Auto delete reports. */ void auto_delete_reports () { iterator_t tasks; tracef ("%s", __FUNCTION__); if (sql_begin_exclusive_giveup ()) return; init_iterator (&tasks, "SELECT id, name," " (SELECT value FROM task_preferences" " WHERE name = 'auto_delete_data'" " AND task = tasks.id)" " FROM tasks" " WHERE owner is NOT NULL" " AND hidden = 0" " AND EXISTS (SELECT * FROM task_preferences" " WHERE task = tasks.id" " AND name = 'auto_delete'" " AND value = 'keep');"); while (next (&tasks)) { task_t task; iterator_t reports; const char *keep_string; int keep; task = iterator_int64 (&tasks, 0); keep_string = iterator_string (&tasks, 2); if (keep_string == NULL) continue; keep = atoi (keep_string); if (keep < 5 || keep > 1200) continue; tracef ("%s: %s (%i)", __FUNCTION__, iterator_string (&tasks, 1), keep); init_iterator (&reports, "SELECT id FROM reports" " WHERE task = %llu" " AND start_time IS NOT NULL" " AND start_time > 0" " ORDER BY start_time DESC LIMIT %s OFFSET %i;", task, sql_select_limit (-1), keep); while (next (&reports)) { int ret; report_t report; report = iterator_int64 (&reports, 0); assert (report); tracef ("%s: delete %llu", __FUNCTION__, report); ret = delete_report_internal (report); if (ret == 2) { /* Report is in use. */ tracef ("%s: %llu is in use", __FUNCTION__, report); continue; } if (ret) { g_warning ("%s: failed to delete %llu (%i)\n", __FUNCTION__, report, ret); sql ("ROLLBACK;"); } } cleanup_iterator (&reports); } cleanup_iterator (&tasks); sql ("COMMIT;"); } /* Results. */ /** * @brief Find a result for a set of permissions, given a UUID. * * @param[in] uuid UUID of result. * @param[out] result Result return, 0 if succesfully failed to find * result. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find result), TRUE on error. */ gboolean find_result_with_permission (const char* uuid, result_t* result, const char *permission) { gchar *quoted_uuid = sql_quote (uuid); if (user_has_access_uuid ("result", quoted_uuid, permission, 0) == 0) { g_free (quoted_uuid); *result = 0; return FALSE; } switch (sql_int64 (result, "SELECT id FROM results WHERE uuid = '%s';", quoted_uuid)) { case 0: break; case 1: /* Too few rows in result of query. */ *result = 0; break; default: /* Programming error. */ assert (0); case -1: g_free (quoted_uuid); return TRUE; break; } g_free (quoted_uuid); return FALSE; } /** * @brief Make an OSP result. * * @param[in] task The task associated with the result. * @param[in] host Target host of result. * @param[in] nvt The uuid of oval definition that produced the * result, a title for the result otherwise. * @param[in] type Type of result. "Alarm", etc. * @param[in] description Description of the result. * @param[in] port Result port. * @param[in] severity Result severity. * * @return A result descriptor for the new result, 0 if error. */ result_t make_osp_result (task_t task, const char *host, const char *nvt, const char *type, const char *description, const char *port, const char *severity) { char *nvt_revision = NULL, *quoted_desc, *quoted_nvt, *result_severity; char *quoted_port; assert (task); assert (type); if (nvt && g_str_has_prefix (nvt, "oval:")) nvt_revision = ovaldef_version (nvt); quoted_desc = sql_quote (description ?: ""); quoted_nvt = sql_quote (nvt ?: ""); quoted_port = sql_quote (port ?: ""); if (!severity || !strcmp (severity, "")) { if (!strcmp (type, severity_to_type (SEVERITY_ERROR))) result_severity = g_strdup (G_STRINGIFY (SEVERITY_ERROR)); else { if (nvt && g_str_has_prefix (nvt, "CVE-")) { result_severity = cve_cvss_base (nvt); if (result_severity == NULL || strcmp (result_severity, "") == 0) { g_free (result_severity); result_severity = g_strdup_printf ("%0.1f", setting_default_severity_dbl ()); g_debug ("%s: OSP CVE result without severity for '%s'", __FUNCTION__, nvt); } } else { /* result_severity = g_strdup_printf ("%0.1f", setting_default_severity_dbl ()); */ g_warning ("%s: Non-CVE OSP result without severity for test %s", __FUNCTION__, nvt ? nvt : "(unknown)"); return 0; } } } else result_severity = sql_quote (severity); sql ("INSERT into results" " (owner, date, task, host, port, nvt, nvt_version, severity, type," " qod, qod_type, description, uuid)" " VALUES (NULL, m_now(), %llu, '%s', '%s', '%s', '%s', '%s', '%s'," " '%s', '', '%s', make_uuid ());", task, host ?: "", quoted_port, quoted_nvt, nvt_revision ?: "", result_severity ?: "0", type, G_STRINGIFY (QOD_DEFAULT), quoted_desc); g_free (result_severity); g_free (nvt_revision); g_free (quoted_desc); g_free (quoted_nvt); g_free (quoted_port); return sql_last_insert_id (); } /** * @brief Get QoD percentage for a qod_type string. * * @param[in] qod_type The QoD type string. * * @return A QoD percentage value, QOD_DEFAULT if string is NULL or unknown. */ int qod_from_type (const char *qod_type) { if (qod_type == NULL) return QOD_DEFAULT; else if (strcmp (qod_type, "exploit") == 0) return 100; else if (strcmp (qod_type, "remote_vul") == 0) return 99; else if (strcmp (qod_type, "remote_app") == 0) return 98; else if (strcmp (qod_type, "package") == 0) return 97; else if (strcmp (qod_type, "registry") == 0) return 97; else if (strcmp (qod_type, "remote_active") == 0) return 95; else if (strcmp (qod_type, "remote_banner") == 0) return 80; else if (strcmp (qod_type, "executable_version") == 0) return 80; else if (strcmp (qod_type, "remote_analysis") == 0) return 70; else if (strcmp (qod_type, "remote_probe") == 0) return 50; else if (strcmp (qod_type, "remote_banner_unreliable") == 0) return 30; else if (strcmp (qod_type, "executable_version_unreliable") == 0) return 30; else if (strcmp (qod_type, "general_note") == 0) return 1; else return QOD_DEFAULT; } /** * @brief Make a result. * * @param[in] task The task associated with the result. * @param[in] host Host. * @param[in] port The port the result refers to. * @param[in] nvt The OID of the NVT that produced the result. * @param[in] type Type of result. "Security Hole", etc. * @param[in] description Description of the result. * * @return A result descriptor for the new result, 0 if error. */ result_t make_result (task_t task, const char* host, const char* port, const char* nvt, const char* type, const char* description) { result_t result; gchar *nvt_revision, *severity; gchar *quoted_descr, *quoted_qod_type; int qod; nvt_t nvt_id = 0; if (nvt && strcmp (nvt, "") && (find_nvt (nvt, &nvt_id) || nvt_id <= 0)) { g_warning ("NVT '%s' not found. Result not created.\n", nvt); return 0; } else if (nvt && strcmp (nvt, "")) { nvti_t *nvti; nvti = nvtis_lookup (nvti_cache, nvt); if (nvti) { gchar *qod_str, *qod_type; qod_str = tag_value (nvti_tag (nvti), "qod"); qod_type = tag_value (nvti_tag (nvti), "qod_type"); if (qod_str == NULL || sscanf (qod_str, "%d", &qod) != 1) qod = qod_from_type (qod_type); quoted_qod_type = sql_quote (qod_type); g_free (qod_str); g_free (qod_type); } else { qod = QOD_DEFAULT; quoted_qod_type = g_strdup (""); } if (strcasecmp (type, "Alarm") == 0) { severity = sql_string ("SELECT coalesce(cvss_base, '0.0')" " FROM nvts WHERE uuid = '%s';", nvt); } else if (strcasecmp (type, "Log Message") == 0) severity = g_strdup (G_STRINGIFY (SEVERITY_LOG)); else if (strcasecmp (type, "Debug Message") == 0) severity = g_strdup (G_STRINGIFY (SEVERITY_DEBUG)); else if (strcasecmp (type, "Error Message") == 0) severity = g_strdup (G_STRINGIFY (SEVERITY_ERROR)); else { g_warning ("%s: Invalid message type: '%s'", __FUNCTION__, type); return 0; } nvt_revision = sql_string ("SELECT version FROM nvts WHERE uuid = '%s';", nvt); } else { qod = QOD_DEFAULT; quoted_qod_type = g_strdup (""); if (strcasecmp (type, "Log Message") == 0) severity = g_strdup (G_STRINGIFY (SEVERITY_LOG)); else if (strcasecmp (type, "Debug Message") == 0) severity = g_strdup (G_STRINGIFY (SEVERITY_DEBUG)); else if (strcasecmp (type, "Error Message") == 0) severity = g_strdup (G_STRINGIFY (SEVERITY_ERROR)); else { if (strcasecmp (type, "Alarm") == 0) g_warning ("%s: Message type requires an NVT: '%s'", __FUNCTION__, type); else g_warning ("%s: Invalid message type: '%s'", __FUNCTION__, type); return 0; } nvt_revision = g_strdup (""); } if (!strcmp (severity, "")) { g_free (severity); severity = g_strdup ("0.0"); } quoted_descr = sql_quote (description ?: ""); sql ("INSERT into results" " (owner, date, task, host, port, nvt, nvt_version, severity, type," " description, uuid, qod, qod_type)" " VALUES" " (NULL, m_now (), %llu, '%s', '%s', '%s', '%s', '%s', '%s'," " '%s', make_uuid (), %i, '%s');", task, host ?: "", port ?: "", nvt ?: "", nvt_revision, severity, type, quoted_descr, qod, quoted_qod_type); g_free (quoted_descr); g_free (quoted_qod_type); g_free (nvt_revision); g_free (severity); result = sql_last_insert_id (); return result; } /** * @brief Return the UUID of a result. * * @param[in] result Result. * @param[out] id Pointer to a newly allocated string. * * @return 0. */ int result_uuid (result_t result, char ** id) { *id = sql_string ("SELECT uuid FROM results WHERE id = %llu;", result); return 0; } /** * @brief Get product detection results corresponding to a given vulnerability * detection result. * * @param[in] result Vulnerability detection result. * @param[out] ref Detection result UUID. * @param[out] product Product name. * @param[out] location Product location. * @param[out] oid Detection script OID. * @param[out] name Detection script name. * * @return -1 on error, 0 on success. */ int result_detection_reference (result_t result, char **ref, char **product, char **location, char **oid, char **name) { char *report, *host = NULL; if ((ref == NULL) || (product == NULL) || (location == NULL) || (oid == NULL) || (name == NULL)) return -1; *ref = *product = *location = *oid = *name = NULL; report = sql_string ("SELECT report FROM results WHERE id = %llu;", result); if (report == NULL) goto detect_cleanup; host = sql_string ("SELECT host FROM results where id = %llu;", result); if (host == NULL) goto detect_cleanup; *oid = sql_string ("SELECT value" " FROM report_host_details" " WHERE report_host = (SELECT id" " FROM report_hosts" " WHERE report = %s" " AND host = '%s')" " AND name = 'detected_by'" " AND source_name = (SELECT nvt FROM results" " WHERE id = %llu);", report, host, result); if (*oid == NULL) goto detect_cleanup; *location = sql_string ("SELECT value" " FROM report_host_details" " WHERE report_host = (SELECT id" " FROM report_hosts" " WHERE report = %s" " AND host = '%s')" " AND name = 'detected_at'" " AND source_name = (SELECT nvt" " FROM results" " WHERE id = %llu);", report, host, result); if (*location == NULL) goto detect_cleanup; *product = sql_string ("SELECT name" " FROM report_host_details" " WHERE report_host = (SELECT id" " FROM report_hosts" " WHERE report = %s" " AND host = '%s')" " AND source_name = '%s'" " AND value = '%s';", report, host, *oid, *location); if (*product == NULL) goto detect_cleanup; *name = sql_string ("SELECT name FROM nvts WHERE oid = '%s';", *oid); if (*name == NULL) goto detect_cleanup; /* Get the result produced by the detection NVT when it detected the * product. The result port or description must include the product * location in order for this to work. */ *ref = sql_string ("SELECT uuid" " FROM results" " WHERE report = %s" " AND host = '%s'" " AND nvt = '%s'" " AND (description LIKE '%%%s%%'" " OR port LIKE '%%%s%%');", report, host, *oid, *location, *location); if (*ref == NULL) goto detect_cleanup; g_free (report); g_free (host); return 0; detect_cleanup: g_free (report); g_free (host); return -1; } /* Prognostics. */ /** * @brief Return highest CVE for an App. * * @param[in] cpe CPE. */ double cpe_highest_cvss (const char *cpe) { int highest; gchar *quoted_cpe; quoted_cpe = sql_quote (cpe); highest = sql_double ("SELECT" " (CASE WHEN EXISTS (SELECT id FROM cpes" " WHERE name = '%s')" " THEN (SELECT max_cvss FROM cpes WHERE name = '%s')" " ELSE -1" " END);", quoted_cpe, quoted_cpe); g_free (quoted_cpe); return highest; } /** * @brief Prognosis iterator prepared statement. */ static sql_stmt_t *prognosis_stmt = NULL; /** * @brief Cleanup the prognosis iterator prepared statement. */ void cleanup_prognosis_iterator () { if (prognosis_stmt) { sql_finalize (prognosis_stmt); prognosis_stmt = NULL; } } /** * @brief Initialise a prognosis iterator. * * @param[in] iterator Iterator. * @param[in] cpe CPE. */ void init_prognosis_iterator (iterator_t *iterator, const char *cpe) { if (prognosis_stmt == NULL) prognosis_stmt = sql_prepare ("SELECT cves.name, cves.cvss," " cves.description, cpes.name" " FROM scap.cves, scap.cpes," " scap.affected_products" " WHERE cpes.name=$1" " AND cpes.id=affected_products.cpe" " AND cves.id=affected_products.cve" " ORDER BY CAST (cves.cvss AS NUMERIC)" " DESC;"); else { if (sql_reset (prognosis_stmt)) { g_warning ("%s: sql_reset failed\n", __FUNCTION__); abort (); } } if (prognosis_stmt == NULL) abort (); init_prepared_iterator (iterator, prognosis_stmt); /* Bind iterator. */ if (sql_bind_text (prognosis_stmt, 1, cpe, -1)) { g_warning ("%s: sql_bind_text failed\n", __FUNCTION__); abort (); } } DEF_ACCESS (prognosis_iterator_cve, 0); DEF_ACCESS (prognosis_iterator_cvss, 1); DEF_ACCESS (prognosis_iterator_description, 2); DEF_ACCESS (prognosis_iterator_cpe, 3); /** * @brief Get the CVSS from a result iterator as a double. * * @param[in] iterator Iterator. * * @return CVSS. */ double prognosis_iterator_cvss_double (iterator_t* iterator) { if (iterator->done) return 0; return iterator_double (iterator, 1); } /** * @brief Return SQL WHERE for restricting a SELECT to a search phrase. * * @param[in] search_phrase Phrase that results must include. All results if * NULL or "". * * @return WHERE clause for search phrase if one is required, else NULL. */ static GString * prognosis_where_search_phrase (const char* search_phrase) { if (search_phrase) { GString *phrase_sql; gchar *quoted_search_phrase; if (strlen (search_phrase) == 0) return NULL; quoted_search_phrase = sql_quote (search_phrase); phrase_sql = g_string_new (""); g_string_append_printf (phrase_sql, " AND (cves.description LIKE '%%%%%s%%%%'" " OR cves.name LIKE '%%%%%s%%%%'" " OR cpes.name LIKE '%%%%%s%%%%')", quoted_search_phrase, quoted_search_phrase, quoted_search_phrase); g_free (quoted_search_phrase); return phrase_sql; } return NULL; } /** * @brief Return SQL WHERE for restricting a SELECT to levels. * * @param[in] levels String describing threat levels (message types) * to include in report (for example, "hmlgd" for * High, Medium, Low, loG and Debug). All levels if * NULL. * * @return WHERE clause for levels if one is required, else NULL. */ static const char * prognosis_where_levels (const char* levels) { char *high, *medium, *low; if (levels == NULL || strlen (levels) == 0) return ""; high = strchr (levels, 'h'); medium = strchr (levels, 'm'); low = strchr (levels, 'l'); if (high && medium && low) return ""; if (high && medium) return " AND cves.cvss > 2"; if (high && low) return " AND (cves.cvss > 5 OR cves.cvss <= 2)"; if (medium && low) return " AND cves.cvss <= 5"; if (high) return " AND cves.cvss > 5"; if (medium) return " AND cves.cvss <= 5 AND cves.cvss > 2"; if (low) return " AND cves.cvss <= 2"; return ""; } /** * @brief Return SQL WHERE for restricting a SELECT to a minimum CVSS base. * * @param[in] min_cvss_base Minimum value for CVSS. * * @return WHERE clause if one is required, else NULL. */ static GString * prognosis_where_cvss_base (const char* min_cvss_base) { if (min_cvss_base) { GString *cvss_sql; gchar *quoted_min_cvss_base; if (strlen (min_cvss_base) == 0) return NULL; quoted_min_cvss_base = sql_quote (min_cvss_base); cvss_sql = g_string_new (""); g_string_append_printf (cvss_sql, " AND CAST (cves.cvss AS REAL)" " >= CAST ('%s' AS REAL)", quoted_min_cvss_base); g_free (quoted_min_cvss_base); return cvss_sql; } return NULL; } /** * @brief Return SQL ORDER BY for sorting results in a prognostic report. * * @param[in] sort_field Name of the field to sort by. * @param[in] ascending Sort in ascending order if true, descending if false. * * @return ORDER BY clause. */ static GString * prognosis_order_by (const char* sort_field, int ascending) { GString* order_sql = g_string_new(""); if (strcmp (sort_field, "ROWID") == 0) g_string_append_printf (order_sql, " ORDER BY cves.id %s", ascending ? "ASC" : "DESC"); else if (strcmp (sort_field, "host") == 0) g_string_append_printf (order_sql, " ORDER BY" " inet ((SELECT host FROM report_hosts" " WHERE id" " = report_host_details.report_host))" " %s," " severity DESC", ascending ? "ASC" : "DESC"); else if (strcmp (sort_field, "vulnerability") == 0) g_string_append_printf (order_sql, " ORDER BY" " vulnerability %s", ascending ? "ASC" : "DESC"); else if (strcmp (sort_field, "location") == 0) g_string_append_printf (order_sql, " ORDER BY" " location," " severity %s", ascending ? "ASC" : "DESC"); else g_string_append_printf (order_sql, " ORDER BY" " severity %s", ascending ? "ASC" : "DESC"); return order_sql; } /** * @brief Initialise a report host prognosis iterator. * * @param[in] iterator Iterator. * @param[in] report_host Report host whose prognosis the iterator loops over. * All report_hosts if NULL. * @param[in] first_result The result to start from. The results are 0 * indexed. * @param[in] max_results The maximum number of results returned. * @param[in] levels String describing threat levels (message types) * to include in count (for example, "hmlgd" for * High, Medium, Low, loG and Debug). All levels if * NULL. * @param[in] search_phrase Phrase that results must include. All results * @param[in] min_cvss_base Minimum value for CVSS. All results if NULL. * @param[in] sort_order Whether to sort in ascending order. * @param[in] sort_field Name of the field to sort by. */ static void init_host_prognosis_iterator (iterator_t* iterator, report_host_t report_host, int first_result, int max_results, const char *levels, const char *search_phrase, const char *min_cvss_base, int sort_order, const char *sort_field) { GString *phrase_sql, *cvss_sql, *order_sql; if (levels == NULL) levels = "hmlgdf"; phrase_sql = prognosis_where_search_phrase (search_phrase); cvss_sql = prognosis_where_cvss_base (min_cvss_base); order_sql = prognosis_order_by (sort_field, sort_order); init_iterator (iterator, "SELECT cves.name AS vulnerability," " CAST (cves.cvss AS NUMERIC) AS severity," " cves.description," " cpes.name AS location," " (SELECT host FROM report_hosts" " WHERE id = %llu) AS host" " FROM scap.cves, scap.cpes, scap.affected_products," " report_host_details" " WHERE report_host_details.report_host = %llu" " AND cpes.name = report_host_details.value" " AND report_host_details.name = 'App'" " AND cpes.id=affected_products.cpe" " AND cves.id=affected_products.cve" "%s%s%s%s" " LIMIT %s OFFSET %i;", report_host, report_host, phrase_sql ? phrase_sql->str : "", prognosis_where_levels (levels), cvss_sql ? cvss_sql->str : "", order_sql ? order_sql->str : "", sql_select_limit (max_results), first_result); if (phrase_sql) g_string_free (phrase_sql, TRUE); if (cvss_sql) g_string_free (cvss_sql, TRUE); if (order_sql) g_string_free (order_sql, TRUE); } /** * @brief Count all filtered results for a prognostic report. * * @param[in] report_host Report host for which to count. * @param[in] search_phrase Phrase that results must include. All results * @param[in] min_cvss_base Minimum value for CVSS. All results if NULL. * @param[out] all Number of messages to increment. * @param[out] holes Number of hole messages to increment. * @param[out] infos Number of info messages to increment. * @param[out] warnings Number of warning messages to increment. */ static void prognostic_report_result_count (report_host_t report_host, const char *search_phrase, const char *min_cvss_base, int *all, int *holes, int *infos, int *warnings) { GString *phrase_sql, *cvss_sql; int host_holes, host_warnings, host_infos; phrase_sql = prognosis_where_search_phrase (search_phrase); cvss_sql = prognosis_where_cvss_base (min_cvss_base); host_holes = sql_int ("SELECT count (*)" " FROM scap.cves, scap.cpes, scap.affected_products," " report_host_details" " WHERE report_host_details.report_host = %llu" " AND cpes.name = report_host_details.value" " AND report_host_details.name = 'App'" " AND cpes.id=affected_products.cpe" " AND cves.id=affected_products.cve" "%s%s%s;", report_host, phrase_sql ? phrase_sql->str : "", prognosis_where_levels ("h"), cvss_sql ? cvss_sql->str : ""); host_warnings = sql_int ("SELECT count (*)" " FROM scap.cves, scap.cpes, scap.affected_products," " report_host_details" " WHERE report_host_details.report_host = %llu" " AND cpes.name = report_host_details.value" " AND report_host_details.name = 'App'" " AND cpes.id=affected_products.cpe" " AND cves.id=affected_products.cve" "%s%s%s;", report_host, phrase_sql ? phrase_sql->str : "", prognosis_where_levels ("m"), cvss_sql ? cvss_sql->str : ""); host_infos = sql_int ("SELECT count (*)" " FROM scap.cves, scap.cpes, scap.affected_products," " report_host_details" " WHERE report_host_details.report_host = %llu" " AND cpes.name = report_host_details.value" " AND report_host_details.name = 'App'" " AND cpes.id=affected_products.cpe" " AND cves.id=affected_products.cve" "%s%s%s;", report_host, phrase_sql ? phrase_sql->str : "", prognosis_where_levels ("l"), cvss_sql ? cvss_sql->str : ""); *all += host_holes + host_warnings + host_infos; *holes += host_holes; *warnings += host_warnings; *infos += host_infos; if (phrase_sql) g_string_free (phrase_sql, TRUE); if (cvss_sql) g_string_free (cvss_sql, TRUE); } /** * @brief Count total number of results for a prognostic report. * * @param[in] report_host Report host for which to count. * @param[out] total Total count of all results. */ static void prognostic_report_result_total (report_host_t report_host, int *total) { if (total) *total = sql_int ("SELECT count (*)" " FROM scap.cves, scap.cpes, scap.affected_products," " report_host_details" " WHERE report_host_details.report_host = %llu" " AND cpes.name = report_host_details.value" " AND report_host_details.name = 'App'" " AND cpes.id=affected_products.cpe" " AND cves.id=affected_products.cve;", report_host); } /* Reports. */ /** * @brief Clear all cached report result counts. * * @param[in] override Flag for override or regular case. */ void reports_clear_count_cache (int override) { sql ("DELETE FROM report_counts WHERE override = %d;", override); } /** * @brief Rebuild the report count cache for all reports and users. * * @param[in] clear Whether to clear the cache before rebuilding. * @param[out] changes_out The number of processed user/report combinations. */ void reports_build_count_cache (int clear, int* changes_out) { int changes; int user_changes, user_changes_no_ov, user_changes_ov; iterator_t users; iterator_t reports; gchar *old_uuid, *old_username; changes = 0; if (clear) { reports_clear_count_cache (0); reports_clear_count_cache (1); } old_uuid = current_credentials.uuid; old_username = current_credentials.username; init_iterator (&users, "SELECT id, uuid, name FROM users;"); while (next (&users)) { user_changes = 0; user_changes_no_ov = 0; user_changes_ov = 0; gchar *user_uuid = g_strdup (iterator_string (&users, 1)); gchar *user_name = g_strdup (iterator_string (&users, 2)); gchar *owned_clause; g_debug ("%s: Rebuilding report cache for user '%s' (%s)", __FUNCTION__, user_name, user_uuid); current_credentials.uuid = user_uuid; current_credentials.username = user_name; manage_session_init (user_uuid); owned_clause = where_owned_for_get ("report", NULL); init_iterator (&reports, "SELECT id, uuid FROM reports", owned_clause); g_free (owned_clause); while (next (&reports)) { report_t report = iterator_int64 (&reports, 0); const char* report_id = iterator_string (&reports, 1); if (user_has_access_uuid ("report", report_id, NULL, 0)) { int updated = 0; severity_data_t severity_data; // Cache report without overrides if (clear || report_counts_cache_exists (report, 0) == 0) { init_severity_data (&severity_data); report_severity_data (report, 0, NULL, NULL, NULL, NULL, 0, 0, &severity_data, NULL); cache_report_counts (report, 0, &severity_data, 0); cleanup_severity_data (&severity_data); updated = 1; user_changes_no_ov++; } // Cache report with overrides if (clear || report_counts_cache_exists (report, 1) == 0) { init_severity_data (&severity_data); report_severity_data (report, 1, NULL, NULL, NULL, NULL, 0, 0, &severity_data, NULL); cache_report_counts (report, 1, &severity_data, 0); cleanup_severity_data (&severity_data); updated = 1; user_changes_ov++; } if (updated) { changes++; user_changes++; } } } cleanup_iterator (&reports); g_debug ("%s: Rebuilt cache for %d reports" " (%d with overrides / %d without)", __FUNCTION__, user_changes, user_changes_ov, user_changes_no_ov); g_free (user_uuid); g_free (user_name); } cleanup_iterator (&users); current_credentials.uuid = old_uuid; current_credentials.username = old_username; manage_session_init (old_uuid); if (changes_out) *changes_out = changes; } /** * @brief Cached report counts. * * @param[in] report Report. */ void report_cache_counts (report_t report) { int debugs, holes, infos, logs, warnings, false_positives; double severity; // TODO: Cache for non-default QoD report_counts_id (report, &debugs, &holes, &infos, &logs, &warnings, &false_positives, &severity, 0, NULL, 0, G_STRINGIFY (MIN_QOD_DEFAULT)); report_counts_id (report, &debugs, &holes, &infos, &logs, &warnings, &false_positives, &severity, 1, NULL, 0, G_STRINGIFY (MIN_QOD_DEFAULT)); } /** * @brief Make a report. * * @param[in] task The task associated with the report. * @param[in] uuid The UUID of the report. * @param[in] status The run status of the scan associated with the report. * * @return A report descriptor for the new report. */ report_t make_report (task_t task, const char* uuid, task_status_t status) { sql ("INSERT into reports (uuid, owner, hidden, task, date, nbefile, comment," " scan_run_status, slave_progress, slave_task_uuid)" " VALUES ('%s'," " (SELECT owner FROM tasks WHERE tasks.id = %llu)," " 0, %llu, %i, '', '', %u, 0, '');", uuid, task, task, time (NULL), status); return sql_last_insert_id (); } /** * @brief Create the current report for a task. * * @param[in] task The task. * @param[out] report_id Report ID. * @param[in] status Run status of scan associated with report. * * @return 0 success, -1 current_report is already set, -2 failed to generate ID. */ int create_current_report (task_t task, char **report_id, task_status_t status) { char *id; assert (current_report == (report_t) 0); if (current_report) return -1; if (report_id == NULL) report_id = &id; /* Generate report UUID. */ *report_id = openvas_uuid_make (); if (*report_id == NULL) return -2; /* Create the report. */ current_report = make_report (task, *report_id, status); set_report_scheduled (current_report); return 0; } /** * @brief Free a host detail. * * @param[in] detail Host detail. */ void host_detail_free (host_detail_t *detail) { g_free (detail->ip); g_free (detail->name); g_free (detail->source_desc); g_free (detail->source_name); g_free (detail->source_type); g_free (detail->value); } /** * @brief Create the current report for a task. * * @param[in] report The detail's report. * @param[in] host The detail's host. * @param[in] s_type The detail's source type. * @param[in] s_name The detail's source name. * @param[in] s_desc The detail's source description. * @param[in] name The detail's name. * @param[in] type The detail's type. */ void insert_report_host_detail (report_t report, const char *host, const char *s_type, const char *s_name, const char *s_desc, const char *name, const char *value) { char *quoted_host, *quoted_source_name, *quoted_source_type; char *quoted_source_desc, *quoted_name, *quoted_value; quoted_host = sql_quote (host); quoted_source_type = sql_quote (s_type); quoted_source_name = sql_quote (s_name); quoted_source_desc = sql_quote (s_desc); quoted_name = sql_quote (name); quoted_value = sql_quote (value); sql ("INSERT INTO report_host_details" " (report_host, source_type, source_name, source_description," " name, value)" " VALUES" " ((SELECT id FROM report_hosts" " WHERE report = %llu AND host = '%s')," " '%s', '%s', '%s', '%s', '%s');", report, quoted_host, quoted_source_type, quoted_source_name, quoted_source_desc, quoted_name, quoted_value); g_free (quoted_host); g_free (quoted_source_type); g_free (quoted_source_name); g_free (quoted_source_desc); g_free (quoted_name); g_free (quoted_value); } /** * @brief Create a report from an array of results. * * @param[in] results Array of create_report_result_t pointers. * @param[in] task_id UUID of container task, or NULL to create new one. * @param[in] task_name Name for container task. * @param[in] task_comment Comment for container task. * @param[in] scan_start Scan start time text. * @param[in] scan_end Scan end time text. * @param[in] host_starts Array of create_report_result_t pointers. Host * name in host, time in description. * @param[in] host_ends Array of create_report_result_t pointers. Host * name in host, time in description. * @param[in] details Array of host_detail_t pointers. * @param[out] report_id Report ID. * * @return 0 success, 99 permission denied, -1 error, -2 failed to generate ID, * -3 task_name is NULL, -4 failed to find task, -5 task must be * container. */ int create_report (array_t *results, const char *task_id, const char *task_name, const char *task_comment, const char *scan_start, const char *scan_end, array_t *host_starts, array_t *host_ends, array_t *details, char **report_id) { int index; create_report_result_t *result, *end, *start; report_t report; user_t owner; task_t task; pid_t pid; host_detail_t *detail; if (user_may ("create_report") == 0) return 99; if (task_id == NULL && task_name == NULL) return -3; /* Find or create the task. */ sql_begin_immediate (); if (task_id) { int rc = 0; if (find_task (task_id, &task)) rc = -1; else if (task == 0) rc = -4; else if (task_target (task)) rc = -5; if (rc) { sql ("ROLLBACK;"); return rc; } } else task = make_task (g_strdup (task_name), task_comment ? g_strdup (task_comment) : NULL); /* Generate report UUID. */ *report_id = openvas_uuid_make (); if (*report_id == NULL) return -2; /* Create the report. */ report = make_report (task, *report_id, TASK_STATUS_RUNNING); if (scan_start) { sql ("UPDATE reports SET start_time = %i WHERE id = %llu;", parse_iso_time (scan_start), report); } if (scan_end) { sql ("UPDATE reports SET end_time = %i WHERE id = %llu;", parse_iso_time (scan_end), report); } /* Show that the upload has started. */ set_task_run_status (task, TASK_STATUS_RUNNING); sql ("UPDATE tasks SET upload_result_count = %llu WHERE id = %llu;", results->len, task); sql ("COMMIT;"); /* Fork a child to import the results while the parent responds to the * client. */ pid = fork (); switch (pid) { case 0: /* Child. Reopen the database (required after fork) and carry on * to import the reports, . */ reinit_manage_process (); break; case -1: /* Parent when error. */ g_warning ("%s: fork: %s\n", __FUNCTION__, strerror (errno)); set_task_run_status (task, TASK_STATUS_INTERNAL_ERROR); return -1; break; default: /* Parent. Return, in order to respond to client. */ return 0; break; } /* Add the results. */ if (sql_int64 (&owner, "SELECT owner FROM tasks WHERE tasks.id = %llu", task)) { g_warning ("%s: failed to get owner of task\n", __FUNCTION__); return -1; } sql_begin_immediate (); index = 0; while ((start = (create_report_result_t*) g_ptr_array_index (host_starts, index++))) if (start->host && start->description) manage_report_host_add (report, start->host, parse_iso_time (start->description), 0); index = 0; while ((result = (create_report_result_t*) g_ptr_array_index (results, index++))) { gchar *quoted_host, *quoted_port, *quoted_nvt_oid; gchar *quoted_description, *quoted_scan_nvt_version, *quoted_severity; gchar *quoted_qod, *quoted_qod_type; quoted_host = sql_quote (result->host ? result->host : ""); quoted_port = sql_quote (result->port ? result->port : ""); quoted_nvt_oid = sql_quote (result->nvt_oid ? result->nvt_oid : ""); quoted_description = sql_quote (result->description ? result->description : ""); quoted_scan_nvt_version = sql_quote (result->scan_nvt_version ? result->scan_nvt_version : ""); quoted_severity = sql_quote (result->severity ? result->severity : ""); if (result->qod && strcmp (result->qod, "") && strcmp (result->qod, "0")) quoted_qod = sql_quote (result->qod); else quoted_qod = g_strdup (G_STRINGIFY (QOD_DEFAULT)); quoted_qod_type = sql_quote (result->qod_type ? result->qod_type : ""); sql ("INSERT INTO results" " (uuid, owner, date, task, host, port, nvt, type, description," " nvt_version, severity, qod, qod_type)" " VALUES" " (make_uuid (), %llu, m_now (), %llu, '%s', '%s', '%s', '%s', '%s'," " '%s', '%s', '%s', '%s');", owner, task, quoted_host, quoted_port, quoted_nvt_oid, result->threat ? threat_message_type (result->threat) : "Log Message", quoted_description, quoted_scan_nvt_version, quoted_severity, quoted_qod, quoted_qod_type); g_free (quoted_host); g_free (quoted_port); g_free (quoted_nvt_oid); g_free (quoted_description); g_free (quoted_scan_nvt_version); g_free (quoted_severity); g_free (quoted_qod); g_free (quoted_qod_type); report_add_result (report, sql_last_insert_id ()); } index = 0; while ((end = (create_report_result_t*) g_ptr_array_index (host_ends, index++))) if (end->host) { gchar *quoted_host; quoted_host = sql_quote (end->host); if (end->description) sql ("UPDATE report_hosts SET end_time = %i" " WHERE report = %llu AND host = '%s';", parse_iso_time (end->description), report, quoted_host); else sql ("UPDATE report_hosts SET end_time = NULL" " WHERE report = %llu AND host = '%s';", report, quoted_host); g_free (quoted_host); } index = 0; while ((detail = (host_detail_t*) g_ptr_array_index (details, index++))) if (detail->ip && detail->name) insert_report_host_detail (report, detail->ip, detail->source_type ?: "", detail->source_name ?: "", detail->source_desc ?: "", detail->name, detail->value ?: ""); sql ("COMMIT;"); current_scanner_task = task; current_report = report; set_task_run_status (task, TASK_STATUS_DONE); current_scanner_task = 0; current_report = 0; exit (EXIT_SUCCESS); /*@notreached@*/ return 0; } /** * @brief Return the UUID of a report. * * @param[in] report Report. * * @return Report UUID. */ char* report_uuid (report_t report) { return sql_string ("SELECT uuid FROM reports WHERE id = %llu;", report); } /** * @brief Return the task of a report. * * @param[in] report A report. * @param[out] task Task return, 0 if succesfully failed to find task. * * @return FALSE on success (including if failed to find report), TRUE on error. */ gboolean report_task (report_t report, task_t *task) { switch (sql_int64 (task, "SELECT task FROM reports WHERE id = %llu;", report)) { case 0: break; case 1: /* Too few rows in result of query. */ *task = 0; break; default: /* Programming error. */ assert (0); case -1: return TRUE; break; } return FALSE; } /** * @brief Return the UUID of a report's slave. * * @param[in] report Report. * * @return Slave UUID. */ char* report_slave_uuid (report_t report) { return sql_string ("SELECT slave_uuid FROM reports WHERE id = %llu;", report); } /** * @brief Return the name of a report's slave. * * @param[in] report Report. * * @return Slave name. */ char* report_slave_name (report_t report) { return sql_string ("SELECT slave_name FROM reports WHERE id = %llu;", report); } /** * @brief Return the host of a report's slave. * * @param[in] report Report. * * @return Slave UUID. */ char* report_slave_host (report_t report) { return sql_string ("SELECT slave_host FROM reports WHERE id = %llu;", report); } /** * @brief Return the host of a report's slave. * * @param[in] report Report. * * @return Slave UUID. */ char* report_slave_port (report_t report) { return sql_string ("SELECT slave_port FROM reports WHERE id = %llu;", report); } /** * @brief Return the source interface of a report. * * @param[in] report Report. * * @return Source interface. */ char* report_source_iface (report_t report) { return sql_string ("SELECT source_iface FROM reports WHERE id = %llu;", report); } /** * @brief Set the UUID of the slave on a report. * * @param[in] report Report. * @param[in] uuid UUID. */ void report_set_slave_uuid (report_t report, const gchar *uuid) { gchar *quoted_uuid; quoted_uuid = sql_quote (uuid); sql ("UPDATE reports SET slave_uuid = '%s' WHERE id = %llu;", quoted_uuid, report); g_free (quoted_uuid); } /** * @brief Set the name of the slave on a report. * * @param[in] report Report. * @param[in] name Name. */ void report_set_slave_name (report_t report, const gchar *name) { gchar *quoted_name; quoted_name = sql_quote (name); sql ("UPDATE reports SET slave_name = '%s' WHERE id = %llu;", quoted_name, report); g_free (quoted_name); } /** * @brief Set the host of the slave of a report. * * @param[in] report Report. * @param[in] host Host. */ void report_set_slave_host (report_t report, const gchar *host) { gchar *quoted_host; quoted_host = sql_quote (host); sql ("UPDATE reports SET slave_host = '%s' WHERE id = %llu;", quoted_host, report); g_free (quoted_host); } /** * @brief Set the port of the slave of a report. * * @param[in] report Report. * @param[in] port Port. */ void report_set_slave_port (report_t report, int port) { sql ("UPDATE reports SET slave_port = %i WHERE id = %llu;", port, report); } /** * @brief Set the source interface of a report. * * @param[in] report Report. * @param[in] iface Source interface. */ void report_set_source_iface (report_t report, const gchar *iface) { gchar *quoted_iface; quoted_iface = sql_quote (iface); sql ("UPDATE reports SET source_iface = '%s' WHERE id = %llu;", quoted_iface, report); g_free (quoted_iface); } /** * @brief Add a result to a report. * * @param[in] report The report. * @param[in] result The result. */ void report_add_result (report_t report, result_t result) { char *ov_severity_str; double severity, ov_severity; int qod; rowid_t rowid; gchar *owned_clause; if (report == 0 || result == 0) return; sql ("UPDATE results SET report = %llu," " owner = (SELECT reports.owner" " FROM reports WHERE id = %llu)" " WHERE id = %llu;", report, report, result); qod = sql_int ("SELECT qod FROM results WHERE id = %llu;", result); if (qod < MIN_QOD_DEFAULT) return; severity = sql_double ("SELECT severity FROM results WHERE id = %llu;", result); rowid = 0; sql_int64 (&rowid, "SELECT id FROM report_counts" " WHERE report = %llu" " AND \"user\" = (SELECT id FROM users WHERE users.uuid = '%s')" " AND override = 0" " AND severity = %1.1f;", report, current_credentials.uuid, severity); if (rowid) sql ("UPDATE report_counts SET count = count + 1" " WHERE id = %llu;", rowid); else sql ("INSERT INTO report_counts" " (report, \"user\", override, severity, count, end_time)" " VALUES" " (%llu, (SELECT id FROM users WHERE uuid='%s'), 0, %1.1f, 1, 0);", report, current_credentials.uuid, severity); owned_clause = where_owned_for_get ("override", NULL); ov_severity_str = sql_string ("SELECT coalesce (overrides.new_severity, %1.1f)" " FROM overrides, results" " WHERE results.id = %llu" " AND overrides.nvt = results.nvt" " AND %s" " AND ((overrides.end_time = 0)" " OR (overrides.end_time >= m_now ()))" " AND (overrides.task =" " (SELECT reports.task FROM reports" " WHERE reports.id = %llu)" " OR overrides.task = 0)" " AND (overrides.result = results.id" " OR overrides.result = 0)" " AND (overrides.hosts is NULL" " OR overrides.hosts = ''" " OR hosts_contains (overrides.hosts, results.host))" " AND (overrides.port is NULL" " OR overrides.port = ''" " OR overrides.port = results.port)" " AND severity_matches_ov (%1.1f, overrides.severity)" " ORDER BY overrides.result DESC, overrides.task DESC," " overrides.port DESC, overrides.severity ASC," " overrides.creation_time DESC" " LIMIT 1", severity, result, owned_clause, report, severity); g_free (owned_clause); if (ov_severity_str == NULL || (sscanf (ov_severity_str, "%lf", &ov_severity) != 1)) ov_severity = severity; rowid = 0; sql_int64 (&rowid, "SELECT id FROM report_counts" " WHERE report = %llu" " AND \"user\" = (SELECT id FROM users WHERE users.uuid = '%s')" " AND override = 1" " AND severity = %1.1f;", report, current_credentials.uuid, ov_severity); if (rowid) sql ("UPDATE report_counts" " SET count = count + 1" " WHERE id = %llu;", rowid); else sql ("INSERT INTO report_counts" " (report, \"user\", override, severity, count, end_time)" " VALUES" " (%llu, (SELECT id FROM users WHERE uuid='%s'), 1, %1.1f, 1, 0);", report, current_credentials.uuid, ov_severity); sql ("UPDATE report_counts" " SET end_time = (SELECT coalesce(min(overrides.end_time), 0)" " FROM overrides, results" " WHERE overrides.nvt = results.nvt" " AND results.report = %llu" " AND overrides.end_time >= m_now ())" " WHERE report = %llu AND override = 1;", report, report); } /** * @brief Filter columns for report iterator. */ #define REPORT_ITERATOR_FILTER_COLUMNS \ { ANON_GET_ITERATOR_FILTER_COLUMNS, "task_id", "name", "date", "status", \ "task", "severity", "false_positive", "log", "low", "medium", "high", \ NULL } /** * @brief Report iterator columns. */ #define REPORT_ITERATOR_COLUMNS \ { \ { "id", NULL }, \ { "uuid", NULL }, \ { "iso_time (start_time)", "name" }, \ { "''", NULL }, \ { "iso_time (start_time)", NULL }, \ { "iso_time (end_time)", NULL }, \ { "start_time", "created" }, \ { "end_time", "modified" }, \ { "''", NULL }, \ { NULL, NULL } \ } /** * @brief Report iterator columns. */ #define REPORT_ITERATOR_WHERE_COLUMNS \ { \ { "run_status_name (scan_run_status)", "status" }, \ { "(SELECT uuid FROM tasks WHERE tasks.id = task)", "task_id" }, \ { "date", NULL }, \ { "(SELECT name FROM tasks WHERE tasks.id = task)", "task" }, \ { \ "report_severity (id, opts.override, opts.min_qod)", \ "severity", \ KEYWORD_TYPE_DOUBLE \ }, \ { \ "(CASE WHEN (SELECT target IS NULL FROM tasks WHERE tasks.id = task)" \ " THEN 'Container'" \ " ELSE run_status_name (scan_run_status)" \ " || (SELECT CAST (temp / 100 AS text)" \ " || CAST (temp / 10 AS text)" \ " || CAST (temp % 10 as text)" \ " FROM (SELECT report_progress (id) AS temp) AS temp_sub)" \ " END)", \ "status" \ }, \ { \ "report_severity_count (id, opts.override, opts.min_qod," \ " 'False Positive')", \ "false_positive", \ KEYWORD_TYPE_INTEGER \ }, \ { \ "report_severity_count (id, opts.override, opts.min_qod, 'Log')", \ "log", \ KEYWORD_TYPE_INTEGER \ }, \ { \ "report_severity_count (id, opts.override, opts.min_qod, 'Low')", \ "low", \ KEYWORD_TYPE_INTEGER \ }, \ { \ "report_severity_count (id, opts.override, opts.min_qod, 'Medium')", \ "medium", \ KEYWORD_TYPE_INTEGER \ }, \ { \ "report_severity_count (id, opts.override, opts.min_qod, 'High')", \ "high", \ KEYWORD_TYPE_INTEGER \ }, \ { \ "(SELECT name FROM users WHERE users.id = reports.owner)", \ "_owner" \ }, \ { NULL, NULL } \ } /** * @brief Generate the extra_tables string for a report iterator. * * @param[in] override Whether to apply overrides. * @param[in] min_qod Minimum QoD of results to count. * * @return Newly allocated string with the extra_tables clause. */ static gchar* report_iterator_opts_table (int override, int min_qod) { return g_strdup_printf (", (SELECT" " %d AS override," " %d AS min_qod)" " AS opts", override, min_qod); } /** * @brief Count number of reports. * * @param[in] get GET params. * * @return Total number of reports in filtered set. */ int report_count (const get_data_t *get) { static const char *filter_columns[] = REPORT_ITERATOR_FILTER_COLUMNS; static column_t columns[] = REPORT_ITERATOR_COLUMNS; static column_t where_columns[] = REPORT_ITERATOR_WHERE_COLUMNS; gchar *extra_tables; int ret; extra_tables = report_iterator_opts_table (0, MIN_QOD_DEFAULT); ret = count2 ("report", get, columns, NULL, where_columns, NULL, filter_columns, 0, extra_tables, get->trash ? " AND (SELECT hidden FROM tasks" " WHERE tasks.id = task)" " = 2" : " AND (SELECT hidden FROM tasks" " WHERE tasks.id = task)" " = 0", TRUE); g_free (extra_tables); return ret; } /** * @brief Initialise a report iterator, including observed reports. * * @param[in] iterator Iterator. * @param[in] get GET data. * * @return 0 success, 1 failed to find report, 2 failed to find filter, * -1 error. */ int init_report_iterator (iterator_t* iterator, const get_data_t *get) { static const char *filter_columns[] = REPORT_ITERATOR_FILTER_COLUMNS; static column_t columns[] = REPORT_ITERATOR_COLUMNS; static column_t where_columns[] = REPORT_ITERATOR_WHERE_COLUMNS; char *filter; gchar *value; int overrides, min_qod; gchar *extra_tables; int ret; if (get->filt_id && strcmp (get->filt_id, "0")) { filter = filter_term (get->filt_id); if (filter == NULL) return 2; } else filter = NULL; value = filter_term_value (filter ? filter : get->filter, "apply_overrides"); overrides = value && strcmp (value, "0"); g_free (value); value = filter_term_value (filter ? filter : get->filter, "min_qod"); if (value == NULL || sscanf (value, "%d", &min_qod) != 1) min_qod = MIN_QOD_DEFAULT; g_free (value); free (filter); extra_tables = report_iterator_opts_table (overrides, min_qod); ret = init_get_iterator2 (iterator, "report", get, /* Columns. */ columns, NULL, /* Filterable columns not in SELECT columns. */ where_columns, NULL, filter_columns, 0, extra_tables, get->trash ? " AND (SELECT hidden FROM tasks" " WHERE tasks.id = task)" " = 2" : " AND (SELECT hidden FROM tasks" " WHERE tasks.id = task)" " = 0", TRUE); g_free (extra_tables); return ret; } /** * @brief Initialise a report iterator. * * @param[in] iterator Iterator. * @param[in] task Task whose reports the iterator loops over. */ void init_report_iterator_task (iterator_t* iterator, task_t task) { assert (task); init_iterator (iterator, "SELECT id, uuid FROM reports WHERE task = %llu;", task); } #if 0 /** * @brief Get the NAME from a host iterator. * * @param[in] iterator Iterator. * * @return The NAME of the host. Caller must use only before calling * cleanup_iterator. */ #endif /** * @brief Get the UUID from a report iterator. * * @param[in] iterator Iterator. * * @return UUID, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (report_iterator_uuid, 1); /** * @brief Read the next report from an iterator. * * @param[in] iterator Task iterator. * @param[out] report Report. * * @return TRUE if there was a next task, else FALSE. */ gboolean next_report (iterator_t* iterator, report_t* report) { if (next (iterator)) { *report = iterator_int64 (iterator, 0); return TRUE; } return FALSE; } /** * @brief Return SQL WHERE for restricting a SELECT to levels. * * @param[in] levels String describing threat levels (message types) * to include in report (for example, "hmlgd" for * High, Medium, Low, loG and Debug). All levels if * NULL. * @param[in] new_severity_sql SQL for new severity. * * @return WHERE clause for levels if one is required, else NULL. */ static GString * where_levels (const char* levels, const char *new_severity_sql) { int count; GString *levels_sql; /* Generate SQL for constraints on message type, according to levels. */ if (levels == NULL || strlen (levels) == 0) { levels_sql = g_string_new (""); g_string_append_printf (levels_sql, " AND %s != " G_STRINGIFY (SEVERITY_ERROR), new_severity_sql); return levels_sql; } levels_sql = NULL; count = 0; /* High. */ if (strchr (levels, 'h')) { count = 1; // FIX handles dynamic "severity" in caller? levels_sql = g_string_new (""); g_string_append_printf (levels_sql, " AND (severity_in_level (%s, 'high')", new_severity_sql); } /* Medium. */ if (strchr (levels, 'm')) { if (count == 0) { levels_sql = g_string_new (""); g_string_append_printf (levels_sql, " AND (severity_in_level (%s, 'medium')", new_severity_sql); } else g_string_append_printf (levels_sql, " OR severity_in_level (%s, 'medium')", new_severity_sql); count++; } /* Low. */ if (strchr (levels, 'l')) { if (count == 0) { levels_sql = g_string_new (""); g_string_append_printf (levels_sql, " AND (severity_in_level (%s, 'low')", new_severity_sql); } else g_string_append_printf (levels_sql, " OR severity_in_level (%s, 'low')", new_severity_sql); count++; } /* loG. */ if (strchr (levels, 'g')) { if (count == 0) { levels_sql = g_string_new (""); g_string_append_printf (levels_sql, " AND ((%s" " = " G_STRINGIFY (SEVERITY_LOG) ")", new_severity_sql); } else g_string_append_printf (levels_sql, " OR (%s" " = " G_STRINGIFY (SEVERITY_LOG) ")", new_severity_sql); count++; } /* Debug. */ if (strchr (levels, 'd')) { if (count == 0) { levels_sql = g_string_new (""); g_string_append_printf (levels_sql, " AND ((%s" " = " G_STRINGIFY (SEVERITY_DEBUG) ")", new_severity_sql); } else g_string_append_printf (levels_sql, " OR (%s" " = " G_STRINGIFY (SEVERITY_DEBUG) ")", new_severity_sql); count++; } /* False Positive. */ if (strchr (levels, 'f')) { if (count == 0) { levels_sql = g_string_new (""); g_string_append_printf (levels_sql, " AND ((%s" " = " G_STRINGIFY (SEVERITY_FP) ")", new_severity_sql); } else g_string_append_printf (levels_sql, " OR (%s" " = " G_STRINGIFY (SEVERITY_FP) ")", new_severity_sql); count++; } else if (count) levels_sql = g_string_append (levels_sql, ")"); if (count == 6) { /* All levels. */ g_string_free (levels_sql, TRUE); levels_sql = g_string_new (""); g_string_append_printf (levels_sql, "AND %s != " G_STRINGIFY (SEVERITY_ERROR), new_severity_sql); } return levels_sql; } /** * @brief Return SQL WHERE for restricting a SELECT to levels. * * @param[in] levels String describing threat levels (message types) * to include in report (for example, "hmlgd" for * High, Medium, Low, loG and Debug). All levels if * NULL. * @param[in] new_severity_sql SQL for new severity. * @param[in] auto_type_sql SQL for auto type. * * @return WHERE clause for levels if one is required, else NULL. */ static GString * where_levels_auto (const char *levels, const char *new_severity_sql, const char *auto_type_sql) { int count; GString *levels_sql; /* Generate SQL for constraints on message type, according to levels. */ if (levels == NULL || strlen (levels) == 0) { levels_sql = g_string_new (""); g_string_append_printf (levels_sql, " AND %s != " G_STRINGIFY (SEVERITY_ERROR), new_severity_sql); return levels_sql; } levels_sql = NULL; count = 0; /* High. */ if (strchr (levels, 'h')) { count = 1; // FIX handles dynamic "severity" in caller? levels_sql = g_string_new (""); g_string_append_printf (levels_sql, " AND (((%s IS NULL) AND (severity_in_level (%s, 'high')", auto_type_sql, new_severity_sql); } /* Medium. */ if (strchr (levels, 'm')) { if (count == 0) { levels_sql = g_string_new (""); g_string_append_printf (levels_sql, " AND (((%s IS NULL) AND (severity_in_level (%s, 'medium')", auto_type_sql, new_severity_sql); } else g_string_append_printf (levels_sql, " OR severity_in_level (%s, 'medium')", new_severity_sql); count++; } /* Low. */ if (strchr (levels, 'l')) { if (count == 0) { levels_sql = g_string_new (""); g_string_append_printf (levels_sql, " AND (((%s IS NULL) AND (severity_in_level (%s, 'low')", auto_type_sql, new_severity_sql); } else g_string_append_printf (levels_sql, " OR severity_in_level (%s, 'low')", new_severity_sql); count++; } /* loG. */ if (strchr (levels, 'g')) { if (count == 0) { levels_sql = g_string_new (""); g_string_append_printf (levels_sql, " AND (((%s IS NULL) AND (severity_in_level (%s, 'log')", auto_type_sql, new_severity_sql); } else g_string_append_printf (levels_sql, " OR severity_in_level (%s, 'log')", new_severity_sql); count++; } /* Debug. */ if (strchr (levels, 'd')) { if (count == 0) { levels_sql = g_string_new (""); g_string_append_printf (levels_sql, " AND (((%s IS NULL)" " AND ((%s" " = " G_STRINGIFY (SEVERITY_DEBUG) ")", auto_type_sql, new_severity_sql); } else g_string_append_printf (levels_sql, " OR (%s" " = " G_STRINGIFY (SEVERITY_DEBUG) ")", new_severity_sql); count++; } /* False Positive. */ if (strchr (levels, 'f')) { if (count == 0) { levels_sql = g_string_new (""); g_string_append_printf (levels_sql, " AND (((%s IS NULL)" " AND %s" " = " G_STRINGIFY (SEVERITY_FP) ")" " OR %s = 1)", auto_type_sql, new_severity_sql, auto_type_sql); } else g_string_append_printf (levels_sql, " OR %s" " = " G_STRINGIFY (SEVERITY_FP) "))" " OR %s = 1)", new_severity_sql, auto_type_sql); count++; } else if (count) levels_sql = g_string_append (levels_sql, ")))"); if (count == 6) { /* All levels. */ g_string_free (levels_sql, TRUE); levels_sql = g_string_new (""); g_string_append_printf (levels_sql, " AND %s != " G_STRINGIFY (SEVERITY_ERROR), new_severity_sql); } return levels_sql; } /** * @brief Return SQL WHERE for restricting a SELECT to levels. * * @param[in] levels String describing threat levels (message types) * to include in report (for example, "hmlgd" for * High, Medium, Low, loG and Debug). All levels if * NULL. * * @return WHERE clause for levels if one is required, else NULL. */ static GString * where_levels_type (const char* levels) { int count; GString *levels_sql; /* Generate SQL for constraints on message type, according to levels. */ if (levels == NULL || strlen (levels) == 0) return g_string_new (" AND severity != " G_STRINGIFY (SEVERITY_ERROR)); levels_sql = NULL; count = 0; /* High. */ if (strchr (levels, 'h')) { count = 1; // FIX handles dynamic "severity" in caller? levels_sql = g_string_new (" AND (severity_in_level (severity, 'high')"); } /* Medium. */ if (strchr (levels, 'm')) { if (count == 0) levels_sql = g_string_new (" AND (severity_in_level (severity, 'medium')"); else levels_sql = g_string_append (levels_sql, " OR severity_in_level (severity, 'medium')"); count++; } /* Low. */ if (strchr (levels, 'l')) { if (count == 0) levels_sql = g_string_new (" AND (severity_in_level (severity, 'low')"); else levels_sql = g_string_append (levels_sql, " OR severity_in_level (severity, 'low')"); count++; } /* loG. */ if (strchr (levels, 'g')) { if (count == 0) levels_sql = g_string_new (" AND (severity_in_level (severity, 'log')"); else levels_sql = g_string_append (levels_sql, " OR severity_in_level (severity, 'log')"); } /* Debug. */ if (strchr (levels, 'd')) { if (count == 0) levels_sql = g_string_new (" AND ((severity" " = " G_STRINGIFY (SEVERITY_DEBUG) ")"); else levels_sql = g_string_append (levels_sql, " OR (severity" " = " G_STRINGIFY (SEVERITY_DEBUG) ")"); count++; } /* False Positive. */ if (strchr (levels, 'f')) { if (count == 0) levels_sql = g_string_new (" AND ((severity" " = " G_STRINGIFY (SEVERITY_FP) "))"); else levels_sql = g_string_append (levels_sql, " OR (severity" " = " G_STRINGIFY (SEVERITY_FP) "))"); count++; } else if (count) levels_sql = g_string_append (levels_sql, ")"); if (count == 6) { /* All levels. */ g_string_free (levels_sql, TRUE); levels_sql = g_string_new (" AND severity != " G_STRINGIFY (SEVERITY_ERROR)); } return levels_sql; } /** * @brief Return SQL WHERE for restricting a SELECT to a minimum CVSS base. * * @param[in] min_cvss_base Minimum value for CVSS. * * @return WHERE clause if one is required, else NULL. */ static GString * where_cvss_base (const char* min_cvss_base) { if (min_cvss_base) { GString *cvss_sql; gchar *quoted_min_cvss_base; if (strlen (min_cvss_base) == 0) return NULL; quoted_min_cvss_base = sql_quote (min_cvss_base); cvss_sql = g_string_new (""); g_string_append_printf (cvss_sql, " AND CAST ((SELECT cvss_base FROM nvts WHERE nvts.oid = results.nvt) AS REAL)" " >= CAST ('%s' AS REAL)", quoted_min_cvss_base); g_free (quoted_min_cvss_base); return cvss_sql; } return NULL; } /** * @brief Return SQL WHERE for restricting a SELECT to a minimum QoD. * * @param[in] min_cvss_base Minimum value for QoD. * * @return WHERE clause if one is required, else NULL. */ static gchar* where_qod (const char* min_qod) { gchar *qod_sql; if (min_qod && strlen (min_qod)) { gchar *quoted_qod = sql_quote (min_qod); qod_sql = g_strdup_printf (" AND (qod >= CAST ('%s' AS INTEGER))", quoted_qod); g_free (quoted_qod); } else qod_sql = g_strdup_printf (" AND (qod >= CAST ('%d' AS INTEGER))", MIN_QOD_DEFAULT); return qod_sql; } /** * @brief Return SQL WHERE for restricting a SELECT to a search phrase. * * @param[in] search_phrase Phrase that results must include. All results if * NULL or "". * @param[in] exact Whether match must be exact. * * @return WHERE clause for search phrase if one is required, else NULL. */ static GString * where_search_phrase (const char* search_phrase, int exact) { if (search_phrase) { GString *phrase_sql; gchar *quoted_search_phrase; if (strlen (search_phrase) == 0) return NULL; /* Changing these SQL terms may require a change in report_counts_match. */ quoted_search_phrase = sql_quote (search_phrase); phrase_sql = g_string_new (""); if (exact) g_string_append_printf (phrase_sql, " AND (port = '%s'" " OR host = '%s'" " OR nvt = '%s'" " OR nvt IN (SELECT oid FROM nvts" " WHERE name = '%s'" " OR tag LIKE '%%%%=%s|%%%%'" " OR tag LIKE '%%%%=%s'" " OR cve LIKE '%%%%%s%%%%')" " OR description = '%s')", quoted_search_phrase, quoted_search_phrase, quoted_search_phrase, quoted_search_phrase, quoted_search_phrase, quoted_search_phrase, quoted_search_phrase, quoted_search_phrase); else g_string_append_printf (phrase_sql, " AND (port LIKE '%%%%%s%%%%'" " OR host LIKE '%%%%%s%%%%'" " OR nvt LIKE '%%%%%s%%%%'" " OR nvt IN (SELECT oid FROM nvts" " WHERE name LIKE '%%%%%s%%%%'" " OR tag LIKE '%%%%=%%%%%s%%%%'" " OR cve LIKE '%%%%%s%%%%')" " OR description LIKE '%%%%%s%%%%')", quoted_search_phrase, quoted_search_phrase, quoted_search_phrase, quoted_search_phrase, quoted_search_phrase, quoted_search_phrase, quoted_search_phrase); g_free (quoted_search_phrase); return phrase_sql; } return NULL; } /** * @brief SQL for retrieving CVSS base. */ #define CVSS_BASE_SQL \ "(SELECT cvss_base FROM nvts WHERE nvts.oid = results.nvt)" /** * @brief Filter columns for result iterator. */ #define RESULT_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "host", "location", "nvt", \ "type", "original_type", "auto_type", \ "description", "task", "report", "cvss_base", "nvt_version", \ "severity", "original_severity", "vulnerability", "date", "report_id", \ "solution_type", "qod", "qod_type", "task_id", "cve", NULL } /** * @brief Result iterator columns. */ #define RESULT_ITERATOR_COLUMNS \ { \ { "id", NULL }, \ { "uuid", NULL }, \ { "(SELECT name FROM nvts WHERE nvts.oid = nvt)", "name" }, \ { "''", "comment" }, \ { " iso_time ( date )", "creation_time" }, \ { " iso_time ( date )", "modification_time" }, \ { "date", "created" }, \ { "date", "modified" }, \ { "(SELECT name FROM users WHERE users.id = results.owner)", \ "_owner" }, \ { "owner", NULL }, \ { "host", NULL }, \ { "port", "location" }, \ { "nvt", NULL }, \ { "severity_to_type (severity)", "original_type" }, \ { "severity_to_type ((SELECT new_severity FROM result_new_severities" \ " WHERE result_new_severities.result = results.id" \ " AND result_new_severities.user" \ " = (SELECT users.id" \ " FROM current_credentials, users" \ " WHERE current_credentials.uuid = users.uuid)" \ " AND result_new_severities.override = opts.override" \ " AND result_new_severities.dynamic = opts.dynamic" \ " LIMIT 1))", "type" }, \ { "(SELECT autofp FROM results_autofp" \ " WHERE (result = results.id) AND (autofp_selection = opts.autofp))", \ "auto_type" }, \ { "description", NULL }, \ { "task", NULL }, \ { "report", "report_rowid" }, \ { "(SELECT cvss_base FROM nvts WHERE nvts.oid = nvt)", "cvss_base" }, \ { "nvt_version", NULL }, \ { "severity", "original_severity" }, \ { "(SELECT new_severity FROM result_new_severities" \ " WHERE result_new_severities.result = results.id" \ " AND result_new_severities.user" \ " = (SELECT users.id" \ " FROM current_credentials, users" \ " WHERE current_credentials.uuid = users.uuid)" \ " AND result_new_severities.override = opts.override" \ " AND result_new_severities.dynamic = opts.dynamic" \ " LIMIT 1)", "severity" }, \ { "(SELECT name FROM nvts WHERE nvts.oid = nvt)", \ "vulnerability" }, \ { "date" , NULL }, \ { "(SELECT uuid FROM reports WHERE id = report)", "report_id" }, \ { "(SELECT solution_type FROM nvts WHERE nvts.oid = nvt)", \ "solution_type" }, \ { "qod", NULL }, \ { "qod_type", NULL }, \ { "qod_type", NULL }, \ { "(SELECT uuid FROM tasks WHERE id = task)", "task_id" }, \ { "(SELECT cve FROM nvts WHERE oid = nvt)", "cve" }, \ { NULL, NULL } \ } /** * @brief Generate the extra_tables string for a result iterator. * * @param[in] autofp Whether to apply auto FP filter. * @param[in] override Whether to apply overrides. * @param[in] dynamic Whether to use dynamic severity scores. * * @return Newly allocated string with the extra_tables clause. */ static gchar* result_iterator_opts_table (int autofp, int override, int dynamic) { return g_strdup_printf (", (SELECT" " %d AS autofp," " %d AS override," " %d AS dynamic) AS opts", autofp, override, dynamic); } /** * @brief Initialise a result iterator. * * @param[in] iterator Iterator. * @param[in] get GET data. * * @return 0 success, 1 failed to find result, failed to find filter (filt_id), * -1 error. */ int init_result_get_iterator (iterator_t* iterator, const get_data_t *get, int autofp, int override, int min_qod, int dynamic_severity) { static const char *filter_columns[] = RESULT_ITERATOR_FILTER_COLUMNS; static column_t columns[] = RESULT_ITERATOR_COLUMNS; int ret; gchar *min_qod_str, *min_qod_clause; gchar *extra_tables, *extra_where; extra_tables = result_iterator_opts_table (autofp, override, dynamic_severity); min_qod_str = g_strdup_printf ("%d", min_qod); min_qod_clause = where_qod (min_qod_str); g_free (min_qod_str); extra_where = g_strdup_printf("%s%s", min_qod_clause, get->trash ? "AND ((SELECT (hidden = 2) FROM tasks" " WHERE tasks.id = task))" : "AND ((SELECT (hidden = 0) FROM tasks" " WHERE tasks.id = task))"); ret = init_get_iterator (iterator, "result", get, columns, columns, filter_columns, 0, extra_tables, extra_where, TRUE); g_free (extra_tables); g_free (extra_where); return ret; } /** * @brief Count the number of results. * * @param[in] get GET params. * * @return Total number of results in filtered set. */ int result_count (const get_data_t *get, int autofp, int override, int min_qod, int dynamic_severity) { static const char *filter_columns[] = RESULT_ITERATOR_FILTER_COLUMNS; static column_t columns[] = RESULT_ITERATOR_COLUMNS; int ret; gchar *min_qod_str, *min_qod_clause; gchar *extra_tables, *extra_where; extra_tables = result_iterator_opts_table (autofp, override, dynamic_severity); min_qod_str = g_strdup_printf ("%d", min_qod); min_qod_clause = where_qod (min_qod_str); g_free (min_qod_str); extra_where = g_strdup_printf("%s%s", min_qod_clause, get->trash ? "AND ((SELECT (hidden = 2) FROM tasks" " WHERE tasks.id = task))" : "AND ((SELECT (hidden = 0) FROM tasks" " WHERE tasks.id = task))"); ret = count ("result", get, columns, columns, filter_columns, 0, extra_tables, extra_where, TRUE); g_free (extra_tables); g_free (extra_where); return ret; } /** * @brief Initialise a result iterator. * * The results are ordered by host, then port and type (severity) according * to sort_field. * * @param[in] iterator Iterator. * @param[in] report Report whose results the iterator loops over, * or 0 to use result. * @param[in] result Single result to iterate over. 0 for all. * Overridden by report. * @param[in] first_result The result to start from. The results are 0 * indexed. * @param[in] max_results The maximum number of results returned. * @param[in] ascending Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "type". * @param[in] levels String describing threat levels (message types) * to include in report (for example, "hmlgdf" for * High, Medium, Low, loG, Debug and False positive). * All levels if NULL. * @param[in] autofp Whether to apply auto FP filter. * @param[in] search_phrase Phrase that results must include. All results if * NULL or "". * @param[in] search_phrase_exact Whether search phrase is exact. * @param[in] min_cvss_base Minimum value for CVSS. All results if NULL. * @param[in] min_qod Minimum value for QoD. All results if NULL. * @param[in] override Whether to override the threat and CVSS. */ void init_result_iterator (iterator_t* iterator, report_t report, result_t result, int first_result, int max_results, int ascending, const char* sort_field, const char* levels, int autofp, const char* search_phrase, int search_phrase_exact, const char* min_cvss_base, const char* min_qod, int override) { int dynamic_severity = setting_dynamic_severity_int (); // TODO: Add parameter GString *levels_sql, *phrase_sql, *cvss_sql; gchar *severity_sql, *qod_sql, *order_sql, *sql; assert ((report && result) == 0); /* TODO: The generated SQL is now out of hand. */ if (dynamic_severity) severity_sql = g_strdup("CASE WHEN results.severity" " > " G_STRINGIFY (SEVERITY_LOG) " THEN (SELECT CAST (" CVSS_BASE_SQL " AS REAL)" " FROM nvts" " WHERE nvts.oid = results.nvt)" " ELSE results.severity END"); else severity_sql = g_strdup("results.severity"); /* Allocate the query. */ if (report) { gchar *new_severity_sql, *auto_type_sql; if (sort_field == NULL) sort_field = "type"; if (levels == NULL) levels = "hmlgdf"; if (strcmp (sort_field, "location") == 0) sort_field = "port"; phrase_sql = where_search_phrase (search_phrase, search_phrase_exact); cvss_sql = where_cvss_base (min_cvss_base); qod_sql = where_qod (min_qod); new_severity_sql = g_strdup_printf("(SELECT new_severity FROM result_new_severities" " WHERE result_new_severities.result = results.id" " AND result_new_severities.user" " = (SELECT id FROM users WHERE uuid = '%s')" " AND override = %d" " AND dynamic = %d" " LIMIT 1)", current_credentials.uuid, override, dynamic_severity); switch (autofp) { case 1: auto_type_sql = g_strdup_printf ("(SELECT autofp FROM results_autofp" " WHERE result = results.id" " AND autofp_selection = 1)"); break; case 2: auto_type_sql = g_strdup_printf ("(SELECT autofp FROM results_autofp" " WHERE result = results.id" " AND autofp_selection = 2)"); break; default: auto_type_sql = g_strdup ("NULL"); break; } if (strcmp (sort_field, "ROWID") == 0) order_sql = g_strdup_printf (" ORDER BY results.id %s", ascending ? "ASC" : "DESC"); else if (strcmp (sort_field, "port") == 0) order_sql = g_strdup_printf (" ORDER BY" " order_port (port) %s," " inet (host)," " (CASE WHEN %s IS NULL" " THEN CAST (%s AS REAL)" " ELSE " G_STRINGIFY (SEVERITY_FP) " END)" " DESC," " (CASE WHEN %s IS NULL" " THEN %s" " ELSE %s" " END)" " DESC," " nvt," " description", ascending ? "ASC" : "DESC", auto_type_sql, new_severity_sql, auto_type_sql, new_severity_sql, auto_type_sql); else if (strcmp (sort_field, "host") == 0) order_sql = g_strdup_printf (" ORDER BY" " inet (host) %s," " (CASE WHEN %s IS NULL" " THEN CAST (%s AS REAL)" " ELSE " G_STRINGIFY (SEVERITY_FP) " END)" " DESC," " (CASE WHEN %s IS NULL" " THEN %s" " ELSE %s" " END)" " DESC," " order_port (port)," " nvt," " description", ascending ? "ASC" : "DESC", auto_type_sql, new_severity_sql, auto_type_sql, new_severity_sql, auto_type_sql); else if (strcmp (sort_field, "vulnerability") == 0) order_sql = g_strdup_printf (" ORDER BY" " vulnerability %s," " order_port (port)," " inet (host)," " (CASE WHEN %s IS NULL" " THEN CAST (%s AS REAL)" " ELSE " G_STRINGIFY (SEVERITY_FP) " END)" " DESC," " (CASE WHEN %s IS NULL" " THEN %s" " ELSE %s" " END)" " DESC," " nvt," " description", ascending ? "ASC" : "DESC", auto_type_sql, new_severity_sql, auto_type_sql, new_severity_sql, auto_type_sql); else if (strcmp (sort_field, "solution_type") == 0) order_sql = g_strdup_printf (" ORDER BY" " solution_type %s," " vulnerability," " order_port (port)," " inet (host)," " (CASE WHEN %s IS NULL" " THEN CAST (%s AS REAL)" " ELSE " G_STRINGIFY (SEVERITY_FP) " END)" " DESC," " (CASE WHEN %s IS NULL" " THEN %s" " ELSE %s" " END)" " DESC," " nvt," " description", ascending ? "ASC" : "DESC", auto_type_sql, new_severity_sql, auto_type_sql, new_severity_sql, auto_type_sql); else if (strcmp (sort_field, "qod") == 0) order_sql = g_strdup_printf (" ORDER BY" " qod %s," " vulnerability," " order_port (port)," " inet (host)," " (CASE WHEN %s IS NULL" " THEN CAST (%s AS REAL)" " ELSE " G_STRINGIFY (SEVERITY_FP) " END)" " DESC," " (CASE WHEN %s IS NULL" " THEN %s" " ELSE %s" " END)" " DESC," " nvt," " description", ascending ? "ASC" : "DESC", auto_type_sql, new_severity_sql, auto_type_sql, new_severity_sql, auto_type_sql); else order_sql = g_strdup_printf (" ORDER BY " " (CASE WHEN %s IS NULL" " THEN CAST (%s AS REAL)" " ELSE " G_STRINGIFY (SEVERITY_FP) " END)" " %s," " (CASE WHEN %s IS NULL" " THEN %s" " ELSE %s" " END)" " DESC," " order_port (port)," " inet (host)," " (CASE" " WHEN CAST (" CVSS_BASE_SQL " AS REAL)" " >= 0.0" " THEN CAST (" CVSS_BASE_SQL " AS REAL)" " ELSE 0.0" " END) DESC," " nvt," " description", auto_type_sql, new_severity_sql, ascending ? "ASC" : "DESC", auto_type_sql, new_severity_sql, auto_type_sql); levels_sql = where_levels_auto (levels, new_severity_sql, auto_type_sql); sql = g_strdup_printf ("SELECT results.id, uuid," " (SELECT name FROM nvts" " WHERE nvts.oid = results.nvt)" " AS name," " '' as comment," " iso_time (date)," " iso_time (date)," " date AS created," " date AS modified," " (SELECT name FROM users WHERE users.id" " = results.owner) AS _owner," " owner, host, port, nvt," " severity_to_type (%s) AS type," " severity_to_type (%s) AS new_type," " %s AS auto_type," " results.description," " results.task," " results.report," " " CVSS_BASE_SQL " AS cvss_base," " nvt_version," " %s AS severity," " %s AS new_severity," " (SELECT name FROM nvts" " WHERE nvts.oid = results.nvt)" " AS vulnerability," " date," " (SELECT uuid FROM reports" " WHERE id = results.report) AS report_id," " (SELECT solution_type FROM nvts" " WHERE oid = nvt) AS solution_type," " qod," " qod_type" " FROM results" " WHERE results.report = %llu" "%s" "%s" "%s" "%s" "%s" " LIMIT %s OFFSET %i;", severity_sql, new_severity_sql, auto_type_sql, severity_sql, new_severity_sql, report, levels_sql ? levels_sql->str : "", phrase_sql ? phrase_sql->str : "", cvss_sql ? cvss_sql->str : "", qod_sql ? qod_sql : "", order_sql, sql_select_limit (max_results), first_result > 0 ? first_result : 0); if (levels_sql) g_string_free (levels_sql, TRUE); if (phrase_sql) g_string_free (phrase_sql, TRUE); if (cvss_sql) g_string_free (cvss_sql, TRUE); g_free (qod_sql); g_free (auto_type_sql); g_free (new_severity_sql); g_free (order_sql); } else if (result) { gchar *new_severity_sql, *auto_type_sql; new_severity_sql = g_strdup_printf("(SELECT new_severity FROM result_new_severities" " WHERE result_new_severities.result = results.id" " AND result_new_severities.user" " = (SELECT id FROM users WHERE uuid = '%s')" " AND override = %d" " AND dynamic = %d" " LIMIT 1)", current_credentials.uuid, override, dynamic_severity); switch (autofp) { case 1: auto_type_sql = g_strdup_printf ("(SELECT autofp FROM results_autofp" " WHERE result = results.id" " AND autofp_selection = 1)"); break; case 2: auto_type_sql = g_strdup_printf ("(SELECT autofp FROM results_autofp" " WHERE result = results.id" " AND autofp_selection = 2)"); break; default: auto_type_sql = g_strdup ("NULL"); break; } sql = g_strdup_printf ("SELECT results.id, uuid," " (SELECT name FROM nvts" " WHERE nvts.oid = results.nvt)" " AS name," " '' as comment," " iso_time (date)," " iso_time (date)," " date AS created," " date AS modified," " (SELECT name FROM users WHERE users.id" " = results.owner) AS _owner," " owner, host, port, nvt," " severity_to_type (%s), severity_to_type (%s)," " %s, description," " results.task," " results.report," " NULL," " results.nvt_version," " %s," " %s," " (SELECT name FROM nvts" " WHERE nvts.oid = results.nvt)" " AS vulnerability," " date," " (SELECT uuid FROM reports" " WHERE id = results.report) AS report_id," " (SELECT solution_type FROM nvts" " WHERE oid = nvt) AS solution_type," " qod," " qod_type" " FROM results" " WHERE id = %llu;", severity_sql, new_severity_sql, auto_type_sql, severity_sql, new_severity_sql, result); g_free (auto_type_sql); g_free (new_severity_sql); } else sql = g_strdup_printf ("SELECT results.id, uuid," " (SELECT name FROM nvts" " WHERE nvts.oid = results.nvt)" " AS name," " '' as comment," " iso_time (date)," " iso_time (date)," " date AS created," " date AS modified," " (SELECT name FROM users WHERE users.id" " = results.owner) AS _owner," " results.owner, host, port, nvt," " severity_to_type (%s), severity_to_type (%s)," " severity_to_type (%s), description," " results.task, results.report, NULL," " nvt_version, %s, %s," " (SELECT name FROM nvts" " WHERE nvts.oid = results.nvt)" " AS vulnerability," " date" " FROM results, reports" " WHERE results.report = reports.id" " AND reports.owner =" " (SELECT id FROM users WHERE uuid = '%s');", severity_sql, severity_sql, severity_sql, severity_sql, severity_sql, current_credentials.uuid); init_iterator (iterator, sql); g_free (severity_sql); g_free (sql); } /** * @brief Get the result from a result iterator. * * @param[in] iterator Iterator. * * @return The result. */ result_t result_iterator_result (iterator_t* iterator) { if (iterator->done) return 0; return (result_t) iterator_int64 (iterator, 0); } /** * @brief Get the host from a result iterator. * * @param[in] iterator Iterator. * * @return The host of the result. Caller must only use before calling * cleanup_iterator. */ DEF_ACCESS (result_iterator_host, GET_ITERATOR_COLUMN_COUNT); /** * @brief Get the port from a result iterator. * * @param[in] iterator Iterator. * * @return The port of the result. Caller must only use before calling * cleanup_iterator. */ DEF_ACCESS (result_iterator_port, GET_ITERATOR_COLUMN_COUNT + 1); /** * @brief Get the NVT OID from a result iterator. * * @param[in] iterator Iterator. * * @return The NVT OID of the result. Caller must only use before calling * cleanup_iterator. */ DEF_ACCESS (result_iterator_nvt_oid, GET_ITERATOR_COLUMN_COUNT + 2); /** * @brief Get the NVT name from a result iterator. * * @param[in] iterator Iterator. * * @return The name of the NVT that produced the result, or NULL on error. */ const char* result_iterator_nvt_name (iterator_t *iterator) { nvti_t *nvti; if (iterator->done) return NULL; nvti = nvtis_lookup (nvti_cache, result_iterator_nvt_oid (iterator)); if (nvti) return nvti_name (nvti); return NULL; } /** * @brief Get the NVT family from a result iterator. * * @param[in] iterator Iterator. * * @return The family of the NVT that produced the result, or NULL on error. */ const char* result_iterator_nvt_family (iterator_t *iterator) { nvti_t *nvti; if (iterator->done) return NULL; nvti = nvtis_lookup (nvti_cache, result_iterator_nvt_oid (iterator)); if (nvti) return nvti_family (nvti); return NULL; } /** * @brief Get the NVT CVSS base value from a result iterator. * * @param[in] iterator Iterator. * * @return The CVSS base of the NVT that produced the result, or NULL on error. */ const char* result_iterator_nvt_cvss_base (iterator_t *iterator) { nvti_t *nvti; if (iterator->done) return NULL; nvti = nvtis_lookup (nvti_cache, result_iterator_nvt_oid (iterator)); if (nvti) return nvti_cvss_base (nvti); return NULL; } /** * @brief Get the NVT CVE from a result iterator. * * @param[in] iterator Iterator. * * @return The CVE of the NVT that produced the result, or NULL on error. */ const char* result_iterator_nvt_cve (iterator_t *iterator) { nvti_t *nvti; if (iterator->done) return NULL; nvti = nvtis_lookup (nvti_cache, result_iterator_nvt_oid (iterator)); if (nvti) return nvti_cve (nvti); return NULL; } /** * @brief Get the NVT BID from a result iterator. * * @param[in] iterator Iterator. * * @return The BID of the NVT that produced the result, or NULL on error. */ const char* result_iterator_nvt_bid (iterator_t *iterator) { nvti_t *nvti; if (iterator->done) return NULL; nvti = nvtis_lookup (nvti_cache, result_iterator_nvt_oid (iterator)); if (nvti) return nvti_bid (nvti); return NULL; } /** * @brief Get the NVT XREF from a result iterator. * * @param[in] iterator Iterator. * * @return The XREF of the NVT that produced the result, or NULL on error. */ const char* result_iterator_nvt_xref (iterator_t *iterator) { nvti_t *nvti; if (iterator->done) return NULL; nvti = nvtis_lookup (nvti_cache, result_iterator_nvt_oid (iterator)); if (nvti) return nvti_xref (nvti); return NULL; } /** * @brief Get the NVT tags from a result iterator. * * @param[in] iterator Iterator. * * @return The tags of the NVT that produced the result, or NULL on error. */ const char* result_iterator_nvt_tag (iterator_t *iterator) { nvti_t *nvti; if (iterator->done) return NULL; nvti = nvtis_lookup (nvti_cache, result_iterator_nvt_oid (iterator)); if (nvti) return nvti_tag (nvti); return NULL; } /** * @brief Get the original type from a result iterator. * * This is the column 'type'. * * @param[in] iterator Iterator. * * @return The original type of the result. Caller must only use before calling * cleanup_iterator. */ DEF_ACCESS (result_iterator_original_type, GET_ITERATOR_COLUMN_COUNT + 3); /** * @brief Get the type from a result iterator. * * This is the the autofp adjusted overridden type. * * @param[in] iterator Iterator. * * @return The type of the result. Caller must only use before calling * cleanup_iterator. */ const char* result_iterator_type (iterator_t *iterator) { if (iterator->done) return NULL; /* auto_type */ if (iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 5)) return "False Positive"; /* new_type */ return iterator_string (iterator, GET_ITERATOR_COLUMN_COUNT + 4); } /** * @brief Get the descr from a result iterator. * * @param[in] iterator Iterator. * * @return The descr of the result. Caller must only use before calling * cleanup_iterator. */ DEF_ACCESS (result_iterator_descr, GET_ITERATOR_COLUMN_COUNT + 6); /** * @brief Get the task from a result iterator. * * @param[in] iterator Iterator. * * @return The task associated with the result, or 0 on error. */ task_t result_iterator_task (iterator_t* iterator) { if (iterator->done) return 0; return (task_t) iterator_int64 (iterator, GET_ITERATOR_COLUMN_COUNT + 7); } /** * @brief Get the report from a result iterator. * * @param[in] iterator Iterator. * * @return The report associated with the result, or 0 on error. */ report_t result_iterator_report (iterator_t* iterator) { if (iterator->done) return 0; return (task_t) iterator_int64 (iterator, GET_ITERATOR_COLUMN_COUNT + 8); } /** * @brief Get the NVT version used during the scan from a result iterator. * * @param[in] iterator Iterator. * * @return The version of NVT used by the scan that produced the result. * Caller must only use before calling cleanup_iterator. */ const char* result_iterator_scan_nvt_version (iterator_t *iterator) { const char* ret; if (iterator->done) return NULL; /* nvt_version */ ret = iterator_string (iterator, GET_ITERATOR_COLUMN_COUNT + 10); return ret ? ret : ""; } /** * @brief Get the original severity from a result iterator. * * This is the original severity without overrides and autofp. * * @param[in] iterator Iterator. * * @return The original severity of the result. Caller must only use before * calling cleanup_iterator. */ const char* result_iterator_original_severity (iterator_t *iterator) { const char* ret; if (iterator->done) return NULL; /* severity */ ret = iterator_string (iterator, GET_ITERATOR_COLUMN_COUNT + 11); return ret ? ret : ""; } /** * @brief Get the severity from a result iterator. * * This is the the autofp adjusted overridden severity. * * @param[in] iterator Iterator. * * @return The severity of the result. Caller must only use before calling * cleanup_iterator. */ const char* result_iterator_severity (iterator_t *iterator) { const char* ret; if (iterator->done) return NULL; /* auto_type */ if (iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 5)) return G_STRINGIFY (SEVERITY_FP); /* new_severity */ ret = iterator_string (iterator, GET_ITERATOR_COLUMN_COUNT + 12); return ret ? ret : ""; } /** * @brief Get the severity from a result iterator as double. * * This is the the autofp adjusted overridden severity. * * @param[in] iterator Iterator. * * @return The severity of the result. Caller must only use before calling * cleanup_iterator. */ double result_iterator_severity_double (iterator_t *iterator) { if (iterator->done) return 0.0; /* auto_type */ if (iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 5)) return SEVERITY_FP; return iterator_double (iterator, GET_ITERATOR_COLUMN_COUNT + 12); } /** * @brief Get the original severity/threat level from a result iterator. * * This is the original level without overrides and autofp. * * @param[in] iterator Iterator. * * @return The original threat level of the result. Caller must only use before * calling cleanup_iterator. */ const char* result_iterator_original_level (iterator_t *iterator) { double severity; const char* ret; if (iterator->done) return NULL; if (iterator_null (iterator, GET_ITERATOR_COLUMN_COUNT + 11)) return NULL; /* severity */ severity = iterator_double (iterator, GET_ITERATOR_COLUMN_COUNT + 11); ret = severity_to_level (severity, 0); return ret ? ret : ""; } /** * @brief Get the severity/threat level from a result iterator. * * This is the the autofp adjusted overridden level. * * @param[in] iterator Iterator. * * @return The threat level of the result. Caller must only use before * calling cleanup_iterator. */ const char* result_iterator_level (iterator_t *iterator) { double severity; const char* ret; if (iterator->done) return NULL; /* auto_type */ if (iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 5)) return "False Positive"; /* new_severity */ if (iterator_null (iterator, GET_ITERATOR_COLUMN_COUNT + 12)) return NULL; severity = iterator_double (iterator, GET_ITERATOR_COLUMN_COUNT + 12); ret = severity_to_level (severity, 0); return ret ? ret : ""; } /** * @brief Get the qod from a result iterator. * * @param[in] iterator Iterator. * * @return The qod of the result. Caller must only use before calling * cleanup_iterator. */ DEF_ACCESS (result_iterator_qod, GET_ITERATOR_COLUMN_COUNT + 17); /** * @brief Get the qod_type from a result iterator. * * @param[in] iterator Iterator. * * @return The qod type of the result. Caller must only use before calling * cleanup_iterator. */ DEF_ACCESS (result_iterator_qod_type, GET_ITERATOR_COLUMN_COUNT + 18); /** * @brief Initialise a host iterator. * * @param[in] iterator Iterator. * @param[in] report Report whose hosts the iterator loops over. * @param[in] host Single host to iterate over. All hosts if NULL. * @param[in] report_host Single report host to iterate over. All if 0. */ void init_host_iterator (iterator_t* iterator, report_t report, const char *host, report_host_t report_host) { if (report) { if (report_host) init_iterator (iterator, "SELECT id, host, iso_time (start_time)," " iso_time (end_time), current_port, max_port, report," " (SELECT uuid FROM reports WHERE id = report)" " FROM report_hosts WHERE id = %llu" " AND report = %llu" "%s%s%s" " ORDER BY inet (host);", report_host, report, host ? " AND host = '" : "", host ? host : "", host ? "'" : ""); else init_iterator (iterator, "SELECT id, host, iso_time (start_time)," " iso_time (end_time), current_port, max_port, report," " (SELECT uuid FROM reports WHERE id = report)" " FROM report_hosts WHERE report = %llu" "%s%s%s" " ORDER BY inet (host);", report, host ? " AND host = '" : "", host ? host : "", host ? "'" : ""); } else { if (report_host) init_iterator (iterator, "SELECT id, host, iso_time (start_time)," " iso_time (end_time), current_port, max_port, report," " (SELECT uuid FROM reports WHERE id = report)" " FROM report_hosts WHERE id = %llu" "%s%s%s" " ORDER BY inet (host);", report_host, host ? " AND host = '" : "", host ? host : "", host ? "'" : ""); else init_iterator (iterator, "SELECT id, host, iso_time (start_time)," " iso_time (end_time), current_port, max_port, report," " (SELECT uuid FROM reports WHERE id = report)" " FROM report_hosts" "%s%s%s" " ORDER BY inet (host);", host ? " WHERE host = '" : "", host ? host : "", host ? "'" : ""); } } /** * @brief Get the report host from a host iterator. * * @param[in] iterator Iterator. * * @return Report host. */ static report_host_t host_iterator_report_host (iterator_t* iterator) { if (iterator->done) return 0; return (report_host_t) iterator_int64 (iterator, 0); } /** * @brief Get the host from a host iterator. * * @param[in] iterator Iterator. * * @return The host of the host. Caller must use only before calling * cleanup_iterator. */ DEF_ACCESS (host_iterator_host, 1); /** * @brief Get the start time from a host iterator. * * @param[in] iterator Iterator. * * @return The start time of the host. Caller must use only before calling * cleanup_iterator. */ DEF_ACCESS (host_iterator_start_time, 2); /** * @brief Get the end time from a host iterator. * * @param[in] iterator Iterator. * * @return The end time of the host. Caller must use only before calling * cleanup_iterator. */ DEF_ACCESS (host_iterator_end_time, 3); /** * @brief Get the current port from a host iterator. * * @param[in] iterator Iterator. * * @return Current port. */ int host_iterator_current_port (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, 4); return ret; } /** * @brief Get the max port from a host iterator. * * @param[in] iterator Iterator. * * @return Current port. */ int host_iterator_max_port (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, 5); return ret; } /** * @brief Get the report from a host iterator. * * @param[in] iterator Iterator. * * @return The report of the host. */ static report_t host_iterator_report (iterator_t* iterator) { if (iterator->done) return 0; return (report_host_t) iterator_int64 (iterator, 6); } /** * @brief Get the report UUID from a host iterator. * * @param[in] iterator Iterator. * * @return The UUID of the report of the host. Caller must use only before * calling cleanup_iterator. */ DEF_ACCESS (host_iterator_report_uuid, 7); /** * @brief Initialise a report errors iterator. * * @param[in] iterator Iterator. * @param[in] report The report. */ void init_report_errors_iterator (iterator_t* iterator, report_t report) { if (report) init_iterator (iterator, "SELECT results.host, results.port, results.nvt," " results.description," " coalesce((SELECT name FROM nvts" " WHERE nvts.oid = results.nvt), '')," " coalesce((SELECT cvss_base FROM nvts" " WHERE nvts.oid = results.nvt), '')," " results.nvt_version, results.severity" " FROM results" " WHERE results.type = 'Error Message'" " AND results.report = %llu", report); } /** * @brief Get the host from a report error messages iterator. * * @param[in] iterator Iterator. * * @return The host of the report error message. Caller must use only before * calling cleanup_iterator. */ DEF_ACCESS (report_errors_iterator_host, 0); /** * @brief Get the port from a report error messages iterator. * * @param[in] iterator Iterator. * * @return The port of the report error message. Caller must use only before * calling cleanup_iterator. */ DEF_ACCESS (report_errors_iterator_port, 1); /** * @brief Get the nvt oid from a report error messages iterator. * * @param[in] iterator Iterator. * * @return The nvt of the report error message. Caller must use only before * calling cleanup_iterator. */ DEF_ACCESS (report_errors_iterator_nvt_oid, 2); /** * @brief Get the description from a report error messages iterator. * * @param[in] iterator Iterator. * * @return The description of the report error message. Caller must use only * before calling cleanup_iterator. */ DEF_ACCESS (report_errors_iterator_desc, 3); /** * @brief Get the nvt name from a report error messages iterator. * * @param[in] iterator Iterator. * * @return The nvt of the report error message. Caller must use only before * calling cleanup_iterator. */ DEF_ACCESS (report_errors_iterator_nvt_name, 4); /** * @brief Get the nvt cvss base from a report error messages iterator. * * @param[in] iterator Iterator. * * @return The nvt cvss base of the report error message. Caller must use only * before calling cleanup_iterator. */ DEF_ACCESS (report_errors_iterator_nvt_cvss, 5); /** * @brief Get the nvt cvss base from a report error messages iterator. * * @param[in] iterator Iterator. * * @return The nvt version at scan time of the report error message. * Caller must use only before calling cleanup_iterator. */ DEF_ACCESS (report_errors_iterator_scan_nvt_version, 6); /** * @brief Get the nvt cvss base from a report error messages iterator. * * @param[in] iterator Iterator. * * @return The severity at scan time of the report error message. * Caller must use only before calling cleanup_iterator. */ DEF_ACCESS (report_errors_iterator_severity, 7); /** * @brief Initialise a report host details iterator. * * @param[in] iterator Iterator. * @param[in] report_host Report host whose details the iterator loops over. * All report_hosts if NULL. */ static void init_report_host_details_iterator (iterator_t* iterator, report_host_t report_host) { /* The 'detected_at' and 'detected_by' entries are filtered out of the final * reports as they are only used internally for product detection. */ init_iterator (iterator, "SELECT id, name, value, source_type, source_name," " source_description, NULL" " FROM report_host_details WHERE report_host = %llu" " AND NOT name IN ('detected_at', 'detected_by')" " UNION" " SELECT 0, 'Closed CVE', cve, 'openvasmd', oid," " nvts.name, cvss_base" " FROM nvts, report_host_details" " WHERE cve != 'NOCVE'" " AND family IN (" LSC_FAMILY_LIST ")" " AND nvts.oid = report_host_details.source_name" " AND report_host = %llu" " AND report_host_details.name = 'EXIT_CODE'" " AND report_host_details.value = 'EXIT_NOTVULN';", report_host, report_host); } /** * @brief Get the name from a report host details iterator. * * @param[in] iterator Iterator. * * @return The name of the report host detail. Caller must use only before * calling cleanup_iterator. */ DEF_ACCESS (report_host_details_iterator_name, 1); /** * @brief Get the value from a report host details iterator. * * @param[in] iterator Iterator. * * @return The value of the report host detail. Caller must use only before * calling cleanup_iterator. */ DEF_ACCESS (report_host_details_iterator_value, 2); /** * @brief Get the source type from a report host details iterator. * * @param[in] iterator Iterator. * * @return The source type of the report host detail. Caller must use only * before calling cleanup_iterator. */ DEF_ACCESS (report_host_details_iterator_source_type, 3); /** * @brief Get the source name from a report host details iterator. * * @param[in] iterator Iterator. * * @return The source name of the report host detail. Caller must use only * before calling cleanup_iterator. */ DEF_ACCESS (report_host_details_iterator_source_name, 4); /** * @brief Get the source description from a report host details iterator. * * @param[in] iterator Iterator. * * @return The source description of the report host detail. Caller must use * only before calling cleanup_iterator. */ DEF_ACCESS (report_host_details_iterator_source_desc, 5); /** * @brief Get the extra info from a report host details iterator. * * @param[in] iterator Iterator. * * @return Extra info of the report host detail. Caller must use * only before calling cleanup_iterator. */ DEF_ACCESS (report_host_details_iterator_extra, 6); /** * @brief Initialise an asset iterator. * * @param[in] iterator Iterator. * @param[in] first_result The host to start from. The hosts are 0 * indexed. * @param[in] max_results The maximum number of hosts returned. * @param[in] levels String describing threat levels (message types) * to include in hosts (for example, "hml" for * High, Medium and Low). All levels if NULL. * @param[in] search_phrase Phrase that host IPs must include. All * hosts if NULL or "". * @param[in] apply_overrides Whether to apply overrides. */ static void init_asset_iterator (iterator_t* iterator, int first_result, int max_results, const char *levels, const char *search_phrase, int apply_overrides) { assert (current_credentials.uuid); if (levels && strlen (levels)) { GString *levels_sql; gchar *severity_sql, *new_severity_sql, *last_report_sql; if (setting_dynamic_severity_int ()) severity_sql = g_strdup("CASE WHEN results.severity" " > " G_STRINGIFY (SEVERITY_LOG) " THEN coalesce ((SELECT CAST (cvss_base" " AS REAL)" " FROM nvts" " WHERE nvts.oid" " = results.nvt)," " results.severity)" " ELSE results.severity END"); else severity_sql = g_strdup ("results.severity"); if (apply_overrides) { gchar *ov, *owned_clause; owned_clause = where_owned_for_get ("override", NULL); ov = g_strdup_printf ("SELECT overrides.new_severity" " FROM overrides" " WHERE overrides.nvt = results.nvt" " AND %s" " AND ((overrides.end_time = 0)" " OR (overrides.end_time >= m_now ()))" /** @todo Include tasks.hidden and task pref in_assets? */ " AND (overrides.task =" " (SELECT reports.task FROM reports" " WHERE reports.id = results.report)" " OR overrides.task = 0)" " AND (overrides.result = results.id" " OR overrides.result = 0)" " AND (overrides.hosts is NULL" " OR overrides.hosts = ''" " OR hosts_contains (overrides.hosts, results.host))" " AND (overrides.port is NULL" " OR overrides.port = ''" " OR overrides.port = results.port)" " AND severity_matches_ov (%s, overrides.severity)" " ORDER BY overrides.result DESC, overrides.task DESC," " overrides.port DESC, overrides.severity ASC," " overrides.creation_time DESC" " LIMIT 1", owned_clause, severity_sql); g_free (owned_clause); new_severity_sql = g_strdup_printf ("coalesce ((%s), %s)", ov, severity_sql); g_free (severity_sql); g_free (ov); } else new_severity_sql = g_strdup_printf ("%s", severity_sql); levels_sql = where_levels (levels, new_severity_sql); last_report_sql = g_strdup_printf (" (SELECT report FROM report_hosts" " WHERE report_hosts.host = distinct_host" " AND end_time IS NOT NULL" " AND report_hosts.report" " IN (SELECT reports.id FROM reports" " WHERE user_owns ('task', reports.task))" " AND (SELECT reports.scan_run_status = %u" " FROM reports" " WHERE reports.id = report)" " AND (SELECT hidden FROM tasks" " WHERE tasks.id" " = (SELECT task FROM reports" " WHERE reports.id = report))" " = 0" " AND (SELECT value FROM task_preferences" " WHERE task_preferences.task" " = (SELECT task FROM reports" " WHERE reports.id = report)" " AND task_preferences.name = 'in_assets')" " = 'yes'" " ORDER BY id DESC LIMIT 1)", TASK_STATUS_DONE); if (search_phrase && strlen (search_phrase)) { gchar *quoted_search_phrase; quoted_search_phrase = sql_quote (search_phrase); init_iterator (iterator, "SELECT" " distinct_host" " FROM (SELECT DISTINCT host AS distinct_host, inet (host)" " FROM report_hosts" " ORDER BY inet (host))" " AS distinct_host_subquery" /* Search IP. */ " WHERE (distinct_host LIKE '%%%s%%%'" /* Search hostname. */ " OR EXISTS" " (SELECT * FROM report_host_details" " WHERE report_host" " = (SELECT id FROM report_hosts" " WHERE report = %s" " AND host = distinct_host)" " AND (name = 'hostname'" " OR name = 'best_os_txt'" " OR name = 'best_os_cpe' OR name = 'App'" " OR name = 'ports')" " AND source_type = 'nvt'" " AND value LIKE '%%%s%%'))" /* Filter levels. */ " AND EXISTS (SELECT results.id" " FROM results" " WHERE results.report = %s" " AND results.host = distinct_host" " AND qod >= " G_STRINGIFY (MIN_QOD_DEFAULT) " %s)" " LIMIT %s OFFSET %i;", quoted_search_phrase, last_report_sql, quoted_search_phrase, last_report_sql, levels_sql ? levels_sql->str : "", sql_select_limit (max_results), first_result); g_free (quoted_search_phrase); } else init_iterator (iterator, "SELECT" " distinct_host" " FROM (SELECT DISTINCT host AS distinct_host, inet (host)" " FROM report_hosts" " ORDER BY inet (host))" " AS distinct_host_subquery" " WHERE EXISTS (SELECT results.id" " FROM results" " WHERE results.report = %s" " AND results.host = distinct_host" " AND qod >= " G_STRINGIFY (MIN_QOD_DEFAULT) " %s)" " LIMIT %s OFFSET %i;", last_report_sql, levels_sql ? levels_sql->str : "", sql_select_limit (max_results), first_result); if (levels_sql) g_string_free (levels_sql, TRUE); g_free (new_severity_sql); g_free (last_report_sql); } else if (search_phrase && strlen (search_phrase)) { gchar *quoted_search_phrase; quoted_search_phrase = sql_quote (search_phrase); init_iterator (iterator, "SELECT host" " FROM report_hosts" " WHERE report_hosts.report" " IN (SELECT reports.id FROM reports" " WHERE user_owns ('task', reports.task))" " AND (SELECT tasks.hidden FROM tasks, reports" " WHERE reports.task = tasks.id" " AND reports.id = report_hosts.report)" " = 0" " AND (SELECT value FROM task_preferences, tasks," " reports" " WHERE reports.task = tasks.id" " AND reports.id = report_hosts.report" " AND task_preferences.task = tasks.id" " AND task_preferences.name = 'in_assets')" " = 'yes'" " AND report_hosts.end_time IS NOT NULL" " GROUP BY host" " HAVING host LIKE '%%%s%%'" " OR EXISTS" " (SELECT * FROM report_host_details" " WHERE report_hosts.id = report_host" " AND (name = 'hostname' OR name = 'best_os_txt'" " OR name = 'best_os_cpe' OR name = 'App'" " OR name = 'ports')" " AND source_type = 'nvt'" " AND value LIKE '%%%s%%')" " ORDER BY inet (host)" " LIMIT %s OFFSET %i;", quoted_search_phrase, quoted_search_phrase, sql_select_limit (max_results), first_result); g_free (quoted_search_phrase); } else init_iterator (iterator, "SELECT DISTINCT host, inet (host) FROM report_hosts" " WHERE report_hosts.report" " IN (SELECT reports.id FROM reports" " WHERE user_owns ('task', reports.task))" " AND (SELECT tasks.hidden FROM tasks, reports" " WHERE reports.task = tasks.id" " AND reports.id = report_hosts.report)" " = 0" " AND (SELECT value FROM task_preferences, tasks," " reports" " WHERE reports.task = tasks.id" " AND reports.id = report_hosts.report" " AND task_preferences.task = tasks.id" " AND task_preferences.name = 'in_assets')" " = 'yes'" " AND report_hosts.end_time IS NOT NULL" " ORDER BY inet (host)" " LIMIT %s OFFSET %i;", sql_select_limit (max_results), first_result); } /** * @brief Get the IP from a asset iterator. * * @param[in] iterator Iterator. * * @return Host IP. */ DEF_ACCESS (asset_iterator_ip, 0); /** * @brief Set the end time of a task. * * @param[in] task Task. * @param[in] time New time. Freed before return. If NULL, clear end time. */ void set_task_end_time (task_t task, char* time) { if (time) { sql ("UPDATE tasks SET end_time = %i WHERE id = %llu;", parse_iso_time (time), task); free (time); } else sql ("UPDATE tasks SET end_time = NULL WHERE id = %llu;", task); } /** * @brief Get the start time of a scan. * * @param[in] report The report associated with the scan. * * @return Start time of scan, in a newly allocated string. */ char* scan_start_time (report_t report) { char *time = sql_string ("SELECT iso_time (start_time)" " FROM reports WHERE id = %llu;", report); return time ? time : g_strdup (""); } /** * @brief Get the start time of a scan, in seconds since the epoch. * * @param[in] report The report associated with the scan. * * @return Start time of scan, in seconds. */ int scan_start_time_epoch (report_t report) { return sql_int ("SELECT start_time FROM reports WHERE id = %llu;", report); } /** * @brief Set the start time of a scan. * * @param[in] report The report associated with the scan. * @param[in] timestamp Start time. In ISO format. */ void set_scan_start_time (report_t report, const char* timestamp) { sql ("UPDATE reports SET start_time = %i WHERE id = %llu;", parse_iso_time (timestamp), report); } /** * @brief Set the start time of a scan. * * @param[in] report The report associated with the scan. * @param[in] timestamp Start time. Epoch format. */ void set_scan_start_time_epoch (report_t report, time_t timestamp) { sql ("UPDATE reports SET start_time = %i WHERE ROWID = %llu;", timestamp, report); } /** * @brief Set the start time of a scan. * * @param[in] report The report associated with the scan. * @param[in] timestamp Start time. In OTP format (ctime). */ void set_scan_start_time_otp (report_t report, const char* timestamp) { sql ("UPDATE reports SET start_time = %i WHERE id = %llu;", parse_otp_time (timestamp), report); } /** * @brief Get the end time of a scan. * * @param[in] report The report associated with the scan. * * @return End time of scan, in a newly allocated string. */ char* scan_end_time (report_t report) { char *time = sql_string ("SELECT iso_time (end_time)" " FROM reports WHERE id = %llu;", report); return time ? time : g_strdup (""); } /** * @brief Get the end time of a scan. * * @param[in] uuid The report associated with the scan. * * @return End time of scan, in a newly allocated string. */ char* scan_end_time_uuid (const char *uuid) { char *time, *quoted_uuid; quoted_uuid = sql_quote (uuid); time = sql_string ("SELECT iso_time (end_time)" " FROM reports WHERE uuid = '%s';", quoted_uuid); return time ? time : g_strdup (""); } /** * @brief Set the end time of a scan. * * @param[in] report The report associated with the scan. * @param[in] timestamp End time. Epoch format. */ void set_scan_end_time_epoch (report_t report, time_t timestamp) { if (timestamp) sql ("UPDATE reports SET end_time = %i WHERE ROWID = %llu;", timestamp, report); } /** * @brief Set the end time of a scan. * * @param[in] report The report associated with the scan. * @param[in] timestamp End time. ISO format. If NULL, clear end time. */ void set_scan_end_time (report_t report, const char* timestamp) { if (timestamp) sql ("UPDATE reports SET end_time = %i WHERE id = %llu;", parse_iso_time (timestamp), report); else sql ("UPDATE reports SET end_time = NULL WHERE id = %llu;", report); } /** * @brief Set the end time of a scan. * * @param[in] report The report associated with the scan. * @param[in] timestamp End time. OTP format (ctime). If NULL, clear end * time. */ void set_scan_end_time_otp (report_t report, const char* timestamp) { if (timestamp) sql ("UPDATE reports SET end_time = %i WHERE id = %llu;", parse_otp_time (timestamp), report); else sql ("UPDATE reports SET end_time = NULL WHERE id = %llu;", report); report_cache_counts (report); } /** * @brief Set the end time of a scanned host. * * @param[in] report Report associated with the scan. * @param[in] host Host. * @param[in] timestamp End time. ISO format. */ void set_scan_host_end_time (report_t report, const char* host, const char* timestamp) { gchar *quoted_host; quoted_host = sql_quote (host); if (sql_int ("SELECT COUNT(*) FROM report_hosts" " WHERE report = %llu AND host = '%s';", report, quoted_host)) sql ("UPDATE report_hosts SET end_time = %i" " WHERE report = %llu AND host = '%s';", parse_iso_time (timestamp), report, quoted_host); else manage_report_host_add (report, host, 0, parse_iso_time (timestamp)); g_free (quoted_host); } /** * @brief Get the end time of a scanned host. * * @param[in] report Report associated with the scan. * @param[in] host Host. */ int scan_host_end_time (report_t report, const char* host) { gchar *quoted_host; int ret; quoted_host = sql_quote (host); ret = sql_int ("SELECT end_time FROM report_hosts" " WHERE report = %llu AND host = '%s';", report, quoted_host); g_free (quoted_host); return ret; } /** * @brief Set the end time of a scanned host. * * @param[in] report Report associated with the scan. * @param[in] host Host. * @param[in] timestamp End time. OTP format (ctime). */ void set_scan_host_end_time_otp (report_t report, const char* host, const char* timestamp) { gchar *quoted_host; quoted_host = sql_quote (host); if (sql_int ("SELECT COUNT(*) FROM report_hosts" " WHERE report = %llu AND host = '%s';", report, quoted_host)) sql ("UPDATE report_hosts SET end_time = %i" " WHERE report = %llu AND host = '%s';", parse_otp_time (timestamp), report, quoted_host); else manage_report_host_add (report, host, 0, parse_otp_time (timestamp)); g_free (quoted_host); } /** * @brief Set the start time of a scanned host. * * @param[in] report Report associated with the scan. * @param[in] host Host. * @param[in] timestamp Start time. ISO format. */ void set_scan_host_start_time (report_t report, const char* host, const char* timestamp) { gchar *quoted_host; quoted_host = sql_quote (host); if (sql_int ("SELECT COUNT(*) FROM report_hosts" " WHERE report = %llu AND host = '%s';", report, quoted_host)) sql ("UPDATE report_hosts SET start_time = %i" " WHERE report = %llu AND host = '%s';", parse_iso_time (timestamp), report, quoted_host); else manage_report_host_add (report, host, parse_iso_time (timestamp), 0); g_free (quoted_host); } /** * @brief Set the start time of a scanned host. * * @param[in] report Report associated with the scan. * @param[in] host Host. * @param[in] timestamp Start time. OTP format (ctime). */ void set_scan_host_start_time_otp (report_t report, const char* host, const char* timestamp) { gchar *quoted_host; quoted_host = sql_quote (host); if (sql_int ("SELECT COUNT(*) FROM report_hosts" " WHERE report = %llu AND host = '%s';", report, quoted_host)) sql ("UPDATE report_hosts SET start_time = %i" " WHERE report = %llu AND host = '%s';", parse_otp_time (timestamp), report, quoted_host); else manage_report_host_add (report, host, parse_otp_time (timestamp), 0); g_free (quoted_host); } /** * @brief Get the timestamp of a report. * * @todo Lacks permission check. Caller contexts all have permission * checks before calling this so it's safe. Rework callers so * they pass report_t instead of UUID string. * * @param[in] report_id UUID of report. * @param[out] timestamp Timestamp on success. Caller must free. * * @return 0 on success, -1 on error. */ int report_timestamp (const char* report_id, gchar** timestamp) { const char* stamp; time_t time = sql_int ("SELECT date FROM reports where uuid = '%s';", report_id); stamp = iso_time (&time); if (stamp == NULL) return -1; *timestamp = g_strdup (stamp); return 0; } /** * @brief Return the run status of the scan associated with a report. * * @param[in] report Report. * @param[out] status Scan run status. * * @return 0 on success, -1 on error. */ int report_scan_run_status (report_t report, int* status) { *status = sql_int ("SELECT scan_run_status FROM reports" " WHERE reports.id = %llu;", report); return 0; } /** * @brief Return the run status of the scan associated with a report. * * @param[in] report Report. * @param[out] status Scan run status. * * @return 0 on success, -1 on error. */ int set_report_scan_run_status (report_t report, task_status_t status) { sql ("UPDATE reports SET scan_run_status = %u WHERE id = %llu;", status, report); return 0; } /** * @brief Return SQL for the auto_type column. * * @param[in] report Report. * @param[in] autofp Whether to apply the auto FP filter. * * @return Message count. */ static gchar * column_auto_type (report_t report, int autofp) { gchar *auto_type_sql; switch (autofp) { case 1: auto_type_sql = g_strdup_printf (" (CASE WHEN" " (((SELECT family FROM nvts WHERE oid = results.nvt)" " IN (" LSC_FAMILY_LIST "))" " OR results.nvt = '0'" /* Open ports previously had 0 NVT. */ " OR EXISTS" " (SELECT id FROM nvts" " WHERE oid = results.nvt" " AND" " (cve = 'NOCVE'" " OR cve NOT IN (SELECT cve FROM nvts" " WHERE oid IN (SELECT source_name" " FROM report_host_details" " WHERE report_host" " = (SELECT id" " FROM report_hosts" " WHERE report = %llu" " AND host = results.host)" " AND name = 'EXIT_CODE'" " AND value = 'EXIT_NOTVULN')" " AND family IN (" LSC_FAMILY_LIST ")))))" " THEN NULL" " ELSE 1 END)", report); break; case 2: auto_type_sql = g_strdup_printf (" (CASE WHEN" " ((SELECT family FROM nvts WHERE oid = results.nvt)" " IN (" LSC_FAMILY_LIST ")" " OR results.nvt = '0'" /* Open ports previously had 0 NVT. */ " OR EXISTS" " (SELECT id FROM nvts AS outer_nvts" " WHERE oid = results.nvt" " AND" " (cve = 'NOCVE'" " OR NOT EXISTS" " (SELECT cve FROM nvts" " WHERE oid IN (SELECT source_name" " FROM report_host_details" " WHERE report_host" " = (SELECT id" " FROM report_hosts" " WHERE report = %llu" " AND host = results.host)" " AND name = 'EXIT_CODE'" " AND value = 'EXIT_NOTVULN')" " AND family IN (" LSC_FAMILY_LIST ")" /* The CVE of the result NVT is outer_nvts.cve. The CVE of the * NVT that has registered the "closed" host detail is nvts.cve. * Either can be a list of CVEs. */ " AND common_cve (nvts.cve, outer_nvts.cve)))))" " THEN NULL" " ELSE 1 END)", report); break; default: auto_type_sql = g_strdup (" NULL"); break; } return auto_type_sql; } /** * @brief Get the number of results in the scan associated with a report. * * @param[in] report Report. * @param[in] levels String describing threat levels (message types) * to include in count (for example, "hmlgd" for * High, Medium, Low, loG and Debug). All levels if * NULL. * @param[in] search_phrase Phrase that results must include. All results if * NULL or "". * @param[in] search_phrase_exact Whether search phrase is exact. * @param[in] min_cvss_base Minimum QoD of included results. All * results if NULL. * @param[in] min_cvss_base Minimum CVSS base of included results. All * results if NULL. * @param[in] override Whether to override threats. * @param[in] autofp Whether to apply the auto FP filter. * @param[out] count Total number of results in the scan. * * @return 0 on success, -1 on error. */ int report_scan_result_count (report_t report, const char* levels, const char* search_phrase, int search_phrase_exact, const char* min_cvss_base, const char* min_qod, int override, int autofp, int* count) { GString *levels_sql, *phrase_sql, *cvss_sql; gchar *qod_sql; gchar *new_severity_sql = NULL; phrase_sql = where_search_phrase (search_phrase, search_phrase_exact); cvss_sql = where_cvss_base (min_cvss_base); qod_sql = where_qod (min_qod); if (report_counts_cache_exists (report, override) && autofp == 0 && (min_cvss_base == NULL || strcmp (min_cvss_base, "") == 0) && (search_phrase == NULL || strcmp (search_phrase, "") == 0) && (min_qod == NULL || strcmp (min_qod, "") == 0 || strcmp (min_qod, G_STRINGIFY (MIN_QOD_DEFAULT)) == 0)) { *count = sql_int ("SELECT sum (count)" " FROM report_counts" " WHERE report = %llu" " AND override = %d" " AND \"user\" = (SELECT id FROM users" " WHERE users.uuid = '%s')" " AND severity >= " G_STRINGIFY (SEVERITY_FP) ";", report, override, current_credentials.uuid); return 0; } if (override) { gchar *severity_sql, *ov, *auto_type_sql; gchar *owned_clause; auto_type_sql = NULL; if (setting_dynamic_severity_int ()) severity_sql = g_strdup("CASE WHEN results.severity" " > " G_STRINGIFY (SEVERITY_LOG) " THEN coalesce ((SELECT CAST (cvss_base" " AS REAL)" " FROM nvts" " WHERE nvts.oid" " = results.nvt)," " results.severity)" " ELSE results.severity END"); else severity_sql = g_strdup ("results.severity"); owned_clause = where_owned_for_get ("override", NULL); ov = g_strdup_printf ("SELECT overrides.new_severity" " FROM overrides" " WHERE overrides.nvt = results.nvt" " AND %s" " AND ((overrides.end_time = 0)" " OR (overrides.end_time >= m_now ()))" " AND (overrides.task = results.task" " OR overrides.task = 0)" " AND (overrides.result = results.id" " OR overrides.result = 0)" " AND (overrides.hosts is NULL" " OR overrides.hosts = ''" " OR hosts_contains (overrides.hosts, results.host))" " AND (overrides.port is NULL" " OR overrides.port = ''" " OR overrides.port = results.port)" " AND severity_matches_ov (%s, overrides.severity)" " ORDER BY overrides.result DESC, overrides.task DESC," " overrides.port DESC, overrides.severity ASC," " overrides.creation_time DESC" " LIMIT 1", owned_clause, severity_sql); g_free (owned_clause); new_severity_sql = g_strdup_printf ("coalesce ((%s), %s)", ov, severity_sql); auto_type_sql = column_auto_type (report, autofp); levels_sql = where_levels_auto (levels, new_severity_sql, auto_type_sql); g_free (auto_type_sql); g_free (severity_sql); g_free (ov); } else levels_sql = where_levels_type (levels); *count = sql_int ("SELECT count(results.id)" " FROM results" " WHERE results.report = %llu" " AND (CAST (%s AS REAL)" " >= " G_STRINGIFY (SEVERITY_FP) ")" "%s%s%s%s;", report, new_severity_sql ? new_severity_sql : "severity", levels_sql ? levels_sql->str : "", phrase_sql ? phrase_sql->str : "", cvss_sql ? cvss_sql->str : "", qod_sql ? qod_sql : ""); if (levels_sql) g_string_free (levels_sql, TRUE); if (phrase_sql) g_string_free (phrase_sql, TRUE); if (cvss_sql) g_string_free (cvss_sql, TRUE); g_free (qod_sql); g_free (new_severity_sql); return 0; } /** * @brief Check if a result matches the autofp filter criteria. * * @param[in] results Result iterator. * @param[in] autofp Whether to apply the auto FP filter. * * @return 1 if match, 0 otherwise. */ static int report_counts_autofp_match (iterator_t *results, int autofp) { if (strcmp (iterator_string (results, 1), "0") == 0) /* Open port special case. These previously had nvt 0. */ return 1; switch (autofp) { case 1: if (sql_int ("SELECT count (*) FROM nvts" " WHERE oid = '%s'" " AND" " (family IN (" LSC_FAMILY_LIST ")" " OR cve = 'NOCVE'" " OR cve NOT IN (SELECT cve FROM nvts" " WHERE oid IN (SELECT source_name" " FROM report_host_details" " WHERE report_host" " = (SELECT id" " FROM report_hosts" " WHERE report = %llu" " AND host = '%s')" " AND name = 'EXIT_CODE'" " AND value" " = 'EXIT_NOTVULN')" " AND family IN (" LSC_FAMILY_LIST ")));", iterator_string (results, 1), iterator_int64 (results, 6), iterator_string (results, 3))) return 1; break; case 2: if (sql_int ("SELECT count (*) FROM nvts AS outer_nvts" " WHERE oid = '%s'" " AND" " (family IN (" LSC_FAMILY_LIST ")" " OR cve = 'NOCVE'" " OR NOT EXISTS" " (SELECT cve FROM nvts" " WHERE oid IN (SELECT source_name" " FROM report_host_details" " WHERE report_host" " = (SELECT id FROM report_hosts" " WHERE report = %llu" " AND host = '%s')" " AND name = 'EXIT_CODE'" " AND value = 'EXIT_NOTVULN')" " AND family IN (" LSC_FAMILY_LIST ")" /* The CVE of the result NVT is outer_nvts.cve. The CVE * of the NVT that has registered the "closed" host * detail is nvts.cve. Either can be a list of CVEs. */ " AND common_cve (nvts.cve, outer_nvts.cve)));", iterator_string (results, 1), iterator_int64 (results, 6), iterator_string (results, 3))) return 1; break; } return 0; } /** * @brief Check if a result matches the filter criteria. * * @param[in] results Result iterator. * @param[in] search_phrase Search phrase. * @param[in] search_phrase_exact Whether search phrase is exact. * @param[in] min_cvss_base Minimum CVSS base. * @param[in] min_cvss_base Minimum QoD. * @param[in] autofp Whether to apply the auto FP filter. * * @return 1 if match, 0 otherwise. */ static int report_counts_match (iterator_t *results, const char *search_phrase, int search_phrase_exact, const char *min_cvss_base, const char* min_qod, int autofp) { if (autofp && (report_counts_autofp_match (results, autofp) == 0)) return 0; if (min_qod) { int min_qod_int; if (sscanf (min_qod, "%d", &min_qod_int) != 1) min_qod_int = -1; if (iterator_int (results, 8) < min_qod_int) return 0; } /* This must match the conditions in the SQL in where_search_phrase. */ if (search_phrase && search_phrase_exact) { if (/* Port. */ (strcmp (iterator_string (results, 4), search_phrase) == 0) /* Host. */ || (strcmp (iterator_string (results, 3), search_phrase) == 0) /* NVT OID. */ || (strcmp (iterator_string (results, 1), search_phrase) == 0) /* Description. */ || (strcmp (iterator_string (results, 5), search_phrase) == 0) /* NVT Name, Tag or CVE. */ || sql_int ("SELECT EXISTS (SELECT 1 FROM nvts" " WHERE oid = '%s'" " AND (name = '%s'" " OR tag LIKE '%%%%=%s|%%%%'" " OR tag LIKE '%%%%=%s'" " OR cve LIKE '%%%%%s%%%%'))", iterator_string (results, 1), search_phrase, search_phrase, search_phrase, search_phrase)) { if (min_cvss_base && iterator_int (results, 1)) { gchar *quoted_min_cvss_base; quoted_min_cvss_base = sql_quote (min_cvss_base); if (sql_int ("SELECT EXISTS (SELECT id FROM nvts" " WHERE nvts.oid = '%s')" " AND (SELECT (CAST (cvss_base AS REAL))" " >= CAST ('%s' AS REAL)" " FROM nvts" " WHERE nvts.oid = '%s');", iterator_string (results, 1), quoted_min_cvss_base, iterator_string (results, 1))) return 1; } else return 1; } } else if (search_phrase) { if (/* Port. */ (strcasestr (iterator_string (results, 4), search_phrase) != 0) /* Host. */ || (strcasestr (iterator_string (results, 3), search_phrase) != 0) /* NVT OID. */ || (strcasestr (iterator_string (results, 1), search_phrase) != 0) /* Description. */ || (strcasestr (iterator_string (results, 5), search_phrase) != 0) /* NVT Name, Tag or CVE. */ || sql_int ("SELECT EXISTS (SELECT 1 FROM nvts" " WHERE oid = '%s'" " AND (name LIKE '%%%%%s%%%%'" " OR tag LIKE '%%%%=%%%%%s%%%%'" " OR cve LIKE '%%%%%s%%%%'))", iterator_string (results, 1), search_phrase, search_phrase, search_phrase)) { if (min_cvss_base && iterator_int (results, 1)) { gchar *quoted_min_cvss_base; quoted_min_cvss_base = sql_quote (min_cvss_base); if (sql_int ("SELECT EXISTS (SELECT id FROM nvts" " WHERE nvts.oid = '%s')" " AND (SELECT (CAST (cvss_base AS REAL))" " >= CAST ('%s' AS REAL)" " FROM nvts" " WHERE nvts.oid = '%s');", iterator_string (results, 1), quoted_min_cvss_base, iterator_string (results, 1))) { g_free (quoted_min_cvss_base); return 1; } g_free (quoted_min_cvss_base); } else return 1; } } else if (min_cvss_base && iterator_int (results, 1)) { gchar *quoted_min_cvss_base; quoted_min_cvss_base = sql_quote (min_cvss_base); if (sql_int ("SELECT EXISTS (SELECT id FROM nvts" " WHERE nvts.oid = '%s')" " AND (SELECT (CAST (cvss_base AS REAL))" " >= CAST ('%s' AS REAL)" " FROM nvts" " WHERE nvts.oid = '%s');", iterator_string (results, 1), quoted_min_cvss_base, iterator_string (results, 1))) { g_free (quoted_min_cvss_base); return 1; } g_free (quoted_min_cvss_base); } else return 1; return 0; } /** * @brief Prepare quick statement for report_severity_data. * * @return Statement. */ sql_stmt_t * report_severity_data_prepare () { sql_stmt_t *stmt; gchar *owned_clause; owned_clause = where_owned_for_get ("override", NULL); stmt = sql_prepare ("SELECT 1 FROM overrides" " WHERE (overrides.nvt = $1)" " AND %s" " AND ((overrides.end_time = 0)" " OR (overrides.end_time >= m_now ()))", owned_clause); g_free (owned_clause); if (stmt == NULL) { g_warning ("%s: sql_prepare stmt failed\n", __FUNCTION__); abort (); } return stmt; } /** * @brief Prepare quick statement for report_severity_data. * * @return Statement. */ sql_stmt_t * report_severity_data_prepare_full (task_t task) { sql_stmt_t *full_stmt; gchar *owned_clause; owned_clause = where_owned_for_get ("override", NULL); full_stmt = sql_prepare ("SELECT severity_to_type (overrides.new_severity)," " overrides.new_severity" " FROM overrides" " WHERE overrides.nvt = $1" // 1 " AND %s" " AND ((overrides.end_time = 0)" " OR (overrides.end_time >= m_now ()))" " AND (overrides.task = 0" " OR overrides.task = %llu)" " AND (overrides.result = 0" " OR overrides.result = $2)" // 2 " AND (overrides.hosts is NULL" " OR overrides.hosts = ''" " OR hosts_contains (overrides.hosts, $3))" // 3 " AND (overrides.port is NULL" " OR overrides.port = ''" " OR overrides.port = $4)" // 4 " AND severity_matches_ov ($5," // 5 " overrides.severity)" " ORDER BY overrides.result DESC, overrides.task DESC," " overrides.port DESC, overrides.severity ASC," " overrides.modification_time DESC;", owned_clause, task); g_free (owned_clause); if (full_stmt == NULL) { g_warning ("%s: sql_prepare full_stmt failed\n", __FUNCTION__); abort (); } return full_stmt; } /** * @brief Get the result severity counts for a report. * * @param[in] report Report. * @param[in] override Whether to override the threat. * @param[in] host Host to which to limit the count. NULL to allow all. * @param[in] min_cvss_base Minimum CVSS base of filtered results. All * results if NULL. * @param[in] min_qod Minimum QoD of filtered results. All * results if NULL. * @param[in] search_phrase Phrase that filtered results must include. All results * if NULL or "". * @param[in] search_phrase_exact Whether search phrase is exact. * @param[in] autofp Whether to apply the auto FP filter. * @param[out] severity_data The severity data struct to store counts in. * @param[out] filtered_severity_data The severity data struct to store counts in. */ static void report_severity_data (report_t report, int override, const char *host, const char *min_cvss_base, const char *min_qod, const char *search_phrase, int search_phrase_exact, int autofp, severity_data_t* severity_data, severity_data_t* filtered_severity_data) { iterator_t results; task_t task; sql_stmt_t *stmt, *full_stmt; gchar *quoted_host, *severity_sql, *qod_sql, *owned_clause; int ret; owned_clause = where_owned_for_get ("override", NULL); if (override && sql_int ("SELECT count(*)" " FROM overrides" " WHERE %s" " AND ((overrides.end_time = 0)" " OR (overrides.end_time >= m_now ()))", owned_clause)) { /* Prepare quick inner statement. */ stmt = report_severity_data_prepare (); /* Prepare full inner statement. */ report_task (report, &task); full_stmt = report_severity_data_prepare_full (task); /* Loop through all results. */ if (host) quoted_host = sql_quote (host); else quoted_host = NULL; if (setting_dynamic_severity_int ()) severity_sql = g_strdup("CASE WHEN results.severity" " > " G_STRINGIFY (SEVERITY_LOG) " THEN coalesce ((SELECT CAST (cvss_base" " AS REAL)" " FROM nvts" " WHERE nvts.oid" " = results.nvt)," " results.severity)" " ELSE results.severity END"); else severity_sql = g_strdup ("results.severity"); qod_sql = where_qod (min_qod); init_iterator (&results, "SELECT results.id, results.nvt, results.type," " results.host, results.port, results.description," " results.report, %s, qod" " FROM results" " WHERE" "%s%s%s" " results.report = %llu" "%s;", severity_sql, host ? " results.host = '" : "", host ? quoted_host : "", host ? "' AND" : "", report, qod_sql); g_free (severity_sql); if (host) g_free (quoted_host); while (next (&results)) { const char *nvt, *new_type; double new_severity; nvt = iterator_string (&results, 1); while (1) { /* Bind the current result values into the quick statement. */ if (sql_bind_text (stmt, 1, nvt, -1)) { g_warning ("%s: sql_bind_text failed\n", __FUNCTION__); abort (); } /* Run the quick inner statement to check for overrides. */ ret = sql_exec (stmt); if (ret == -2 || ret == 2) { /* Gave up with statement reset, or schema error. Retry. */ sql_finalize (stmt); stmt = report_severity_data_prepare (); continue; } if (ret < 0) { g_warning ("%s: sql_exec failed\n", __FUNCTION__); abort (); } break; } /* Check the result. */ if (ret == 0) { new_severity = iterator_double (&results, 7); new_type = iterator_string (&results, 2); if (new_type) { if (severity_data) { if (autofp == 0 || report_counts_autofp_match (&results, autofp) || new_severity == SEVERITY_LOG) severity_data_add (severity_data, new_severity); else severity_data_add (severity_data, SEVERITY_FP); } if (filtered_severity_data) { if (report_counts_match (&results, search_phrase, search_phrase_exact, min_cvss_base, min_qod, autofp)) severity_data_add (filtered_severity_data, new_severity); else if (report_counts_match (&results, search_phrase, search_phrase_exact, min_cvss_base, min_qod, 0)) severity_data_add (filtered_severity_data, SEVERITY_FP); } } } else { result_t result; const char *host, *port; double severity; /* There is an override on this NVT, get the new threat value. */ while (1) { /* Bind the current result values into the full statement. */ if (sql_bind_text (full_stmt, 1, nvt, -1)) { g_warning ("%s: sql_bind_text failed\n", __FUNCTION__); abort (); } result = (result_t) iterator_int64 (&results, 0); if (sql_bind_int64 (full_stmt, 2, &result)) { g_warning ("%s: sql_bind_int64 failed\n", __FUNCTION__); abort (); } host = iterator_string (&results, 3); if (sql_bind_text (full_stmt, 3, host, -1)) { g_warning ("%s: sql_bind_text failed\n", __FUNCTION__); abort (); } port = iterator_string (&results, 4); if (sql_bind_text (full_stmt, 4, port, -1)) { g_warning ("%s: sql_bind_text failed\n", __FUNCTION__); abort (); } severity = iterator_double (&results, 7); if (sql_bind_double (full_stmt, 5, &severity)) { g_warning ("%s: sql_bind_double failed\n", __FUNCTION__); abort (); } /* Run the full inner statement. */ ret = sql_exec (full_stmt); if (ret == -2 || ret == 2) { /* Gave up with statement reset, or schema error. * Retry. */ sql_finalize (full_stmt); full_stmt = report_severity_data_prepare_full (task); continue; } if (ret < 0) { g_warning ("%s: sql_exec failed\n", __FUNCTION__); abort (); } break; } /* Check the result. */ if (ret == 0) { new_type = iterator_string (&results, 2); new_severity = iterator_double (&results, 7); } else { new_type = sql_column_text (full_stmt, 0); new_severity = sql_column_double (full_stmt, 1); } if (new_type) { if (severity_data) { if (autofp == 0 || report_counts_autofp_match (&results, autofp) || new_severity == SEVERITY_LOG) severity_data_add (severity_data, new_severity); else severity_data_add (severity_data, SEVERITY_FP); } if (filtered_severity_data) { if (report_counts_match (&results, search_phrase, search_phrase_exact, min_cvss_base, min_qod, autofp)) severity_data_add (filtered_severity_data, new_severity); else if (report_counts_match (&results, search_phrase, search_phrase_exact, min_cvss_base, min_qod, 0)) severity_data_add (filtered_severity_data, SEVERITY_FP); } } /* Reset the full inner statement. */ if (sql_reset (full_stmt)) { g_warning ("%s: sql_reset failed\n", __FUNCTION__); abort (); } } /* Reset the quick inner statement. */ if (sql_reset (stmt)) { g_warning ("%s: sql_reset failed\n", __FUNCTION__); abort (); } } cleanup_iterator (&results); sql_finalize (stmt); sql_finalize (full_stmt); } else { /* Loop through all results. */ if (host) quoted_host = sql_quote (host); else quoted_host = NULL; severity_sql = g_strdup_printf ("(SELECT new_severity FROM result_new_severities" " WHERE result_new_severities.result = results.id" " AND result_new_severities.user" " = (SELECT users.id" " FROM current_credentials, users" " WHERE current_credentials.uuid" " = users.uuid)" " AND result_new_severities.override = %d" " AND result_new_severities.dynamic = %d" " LIMIT 1)", override, setting_dynamic_severity_int ()); qod_sql = where_qod (min_qod); init_iterator (&results, "SELECT results.id, results.nvt, results.type," " results.host, results.port, results.description," " results.report, %s, results.qod" " FROM results" " WHERE" "%s%s%s" " results.report = %llu" " %s;", severity_sql, host ? " results.host = '" : "", host ? quoted_host : "", host ? "' AND" : "", report, qod_sql); g_free (qod_sql); g_free (severity_sql); if (host) g_free (quoted_host); while (next (&results)) { const char *new_type; double new_severity; /* Check the result. */ new_type = iterator_string (&results, 2); new_severity = iterator_double (&results, 7); if (new_type) { if (severity_data) { if (autofp == 0 || report_counts_autofp_match (&results, autofp) || new_severity == SEVERITY_LOG) severity_data_add (severity_data, new_severity); else severity_data_add (severity_data, SEVERITY_FP); } if (filtered_severity_data) { if (report_counts_match (&results, search_phrase, search_phrase_exact, min_cvss_base, min_qod, autofp)) severity_data_add (filtered_severity_data, new_severity); else if (report_counts_match (&results, search_phrase, search_phrase_exact, min_cvss_base, min_qod, 0)) severity_data_add (filtered_severity_data, SEVERITY_FP); } } } cleanup_iterator (&results); } g_free (owned_clause); } /** * @brief Get the message counts for a report given the UUID. * * @todo Lacks permission check. Caller contexts all have permission * checks before calling this so it's safe. Rework callers to * use report_counts_id instead. * * @param[in] report_id ID of report. * @param[out] debugs Number of debug messages. * @param[out] holes Number of hole messages. * @param[out] infos Number of info messages. * @param[out] logs Number of log messages. * @param[out] warnings Number of warning messages. * @param[out] false_positives Number of false positives. * @param[out] severity Maximum severity score. * @param[in] override Whether to override the threat. * @param[in] autofp Whether to apply the auto FP filter. * * @return 0 on success, -1 on error. */ int report_counts (const char* report_id, int* debugs, int* holes, int* infos, int* logs, int* warnings, int* false_positives, double* severity, int override, int autofp, int min_qod) { report_t report; gchar *min_qod_str = g_strdup_printf ("%d", min_qod); int ret; // TODO Wrap in transaction. if (find_report_with_permission (report_id, &report, "get_reports")) return -1; // TODO Check if report was found. ret = report_counts_id (report, debugs, holes, infos, logs, warnings, false_positives, severity, override, NULL, autofp, min_qod_str); return ret; } /** * @brief Test if a counts cache exists for a report and the current user. * @param[in] report The report to check. * @param[in] override Whether to check for overridden results. * * @return 1 if cache exists, 0 otherwise. */ static int report_counts_cache_exists (report_t report, int override) { if (setting_dynamic_severity_int ()) return 0; else return sql_int ("SELECT EXISTS (SELECT * FROM report_counts" " WHERE report = %llu" " AND override = %d" " AND \"user\" = (SELECT id FROM users" " WHERE users.uuid = '%s')" " AND (end_time = 0 OR end_time >= m_now ()));", report, override, current_credentials.uuid); } /** * @brief Get cached result counts for a report and the current user. * * @param[in] report The report to get counts from. * @param[in] override Whether to get overridden results. * @param[out] data The severity_data_t to save counts in. */ static void report_counts_from_cache (report_t report, int override, severity_data_t* data) { iterator_t iterator; init_iterator (&iterator, "SELECT severity, count FROM report_counts" " WHERE report = %llu" " AND override = %i" " AND \"user\" = (SELECT id FROM users" " WHERE users.uuid = '%s')" " AND (end_time = 0 OR end_time >= m_now ());", report, override, current_credentials.uuid); while (next (&iterator)) { severity_data_add_count (data, iterator_double (&iterator, 0), iterator_int (&iterator, 1)); } cleanup_iterator (&iterator); } /** * @brief Cache the message counts for a report. * * @param[in] report Report. * @param[in] override Whether overrides were applied to the results. * @param[in] data Severity data struct containing the message counts. * @param[in] make_transaction True to wrap in an exclusive transaction. * * @return 0 if successful, 1 gave up, -1 error (see sql_giveup). */ static int cache_report_counts (report_t report, int override, severity_data_t* data, int make_transaction) { /* Try cache results. Give up if the database is locked because this could * happen while the caller has an SQL statement open. If another process * tries to write to the database between the statement open and * cache_report_counts then they'll deadlock. */ int i, ret; double severity; int end_time; // Do not cache results when using dynamic severity. if (setting_dynamic_severity_int ()) return 0; if (make_transaction) { ret = sql_begin_exclusive_giveup (); if (ret) return ret; } ret = sql_giveup ("DELETE FROM report_counts" " WHERE report = %llu" " AND override = %i" " AND \"user\" = (SELECT id FROM users" " WHERE users.uuid = '%s');", report, override, current_credentials.uuid); if (ret) { if (make_transaction) sql ("ROLLBACK;"); return ret; } if (data->total == 0) { /* Create dummy entry for empty reports */ ret = sql_giveup ("INSERT INTO report_counts" " (report, \"user\", override, severity, count," " end_time)" " VALUES (%llu," " (SELECT id FROM users" " WHERE users.uuid = '%s')," " %d, " G_STRINGIFY (SEVERITY_MISSING) "," " 0, 0);", report, current_credentials.uuid, override); if (ret) { if (make_transaction) sql ("ROLLBACK;"); return ret; } } else { i = 0; if (override) end_time = sql_int ("SELECT coalesce(min(end_time), 0)" " FROM overrides, results" " WHERE overrides.nvt = results.nvt" " AND results.report = %llu" " AND overrides.end_time >= m_now ();", report); else end_time = 0; severity = severity_data_value (i); while (severity <= (data->max + (1.0 / SEVERITY_SUBDIVISIONS / SEVERITY_SUBDIVISIONS)) && severity != SEVERITY_MISSING) { if (data->counts[i] > 0) { ret = sql_giveup ("INSERT INTO report_counts" " (report, \"user\", override, severity, count," " end_time)" " VALUES (%llu," " (SELECT id FROM users" " WHERE users.uuid = '%s')," " %d, %1.1f, %d, %d);", report, current_credentials.uuid, override, severity, data->counts[i], end_time); if (ret) { if (make_transaction) sql ("ROLLBACK;"); return ret; } } i++; severity = severity_data_value (i); } } if (make_transaction) { ret = sql_giveup ("COMMIT;"); if (ret) { sql ("ROLLBACK;"); return ret; } } return 0; } /** * @brief Get the message counts for a report. * * @param[in] report Report. * @param[out] debugs Number of debug messages. * @param[out] holes Number of hole messages. * @param[out] infos Number of info messages. * @param[out] logs Number of log messages. * @param[out] warnings Number of warning messages. * @param[out] false_positives Number of false positive messages. * @param[out] severity Maximum severity of the report. * @param[in] override Whether to override the threat. * @param[in] host Host to which to limit the count. NULL to allow all. * @param[in] min_cvss_base Minimum CVSS base of filtered results. All * results if NULL. * @param[in] min_qod Minimum QoD of filtered results. All * results if NULL. * @param[in] search_phrase Phrase that filtered results must include. * All results if NULL or "". * @param[in] search_phrase_exact Whether search phrase is exact. * @param[in] autofp Whether to apply the auto FP filter. * @param[out] filtered_debugs Number of debug messages after filtering. * @param[out] filtered_holes Number of hole messages after filtering. * @param[out] filtered_infos Number of info messages after filtering. * @param[out] filtered_logs Number of log messages after filtering. * @param[out] filtered_warnings Number of warning messages after filtering. * @param[out] filtered_false_positives Number of false positive messages after * filtering. * @param[out] filtered_severity Maximum severity after filtering. * * @return 0 on success, -1 on error. */ static int report_counts_id_filt (report_t report, int* debugs, int* holes, int* infos, int* logs, int* warnings, int* false_positives, double* severity, int override, const char *host, const char *min_cvss_base, const char *min_qod, const char *search_phrase, int search_phrase_exact, int autofp, int* filtered_debugs, int* filtered_holes, int* filtered_infos, int* filtered_logs, int* filtered_warnings, int* filtered_false_positives, double* filtered_severity) { int filtered_requested, cache_exists; const char *severity_class; severity_data_t severity_data, filtered_severity_data; filtered_requested = (filtered_holes || filtered_warnings || filtered_infos || filtered_logs || filtered_false_positives || filtered_severity); severity_class = setting_severity (); if (current_credentials.uuid == NULL || strcmp (current_credentials.uuid, "") == 0) g_warning ("%s: called by NULL or dummy user", __FUNCTION__); cache_exists = report_counts_cache_exists (report, override); init_severity_data (&severity_data); init_severity_data (&filtered_severity_data); /* This adds time and is out of scope of OMP threat levels, so skip it */ if (debugs) *debugs = 0; if (filtered_debugs) *filtered_debugs = 0; if (search_phrase && strcmp (search_phrase, "") == 0) search_phrase = NULL; if (min_cvss_base && strcmp (min_cvss_base, "") == 0) min_cvss_base = NULL; // TODO: Cache different min_qod values if (cache_exists && autofp == 0 && host == NULL && min_cvss_base == NULL && ((min_qod && strcmp (min_qod, G_STRINGIFY (MIN_QOD_DEFAULT)) == 0) || min_qod == NULL) && search_phrase == NULL) { /* Get unfiltered counts from cache. */ report_counts_from_cache (report, override, &severity_data); if (filtered_requested) report_counts_from_cache (report, override, &filtered_severity_data); } else { /* Recalculate. */ if (filtered_requested) report_severity_data (report, override, host, min_cvss_base, min_qod, search_phrase, search_phrase_exact, autofp, &severity_data, &filtered_severity_data); else report_severity_data (report, override, host, min_cvss_base, min_qod, search_phrase, search_phrase_exact, autofp, &severity_data, NULL); } severity_data_level_counts (&severity_data, severity_class, NULL, NULL, false_positives, logs, infos, warnings, holes); severity_data_level_counts (&filtered_severity_data, severity_class, NULL, NULL, filtered_false_positives, filtered_logs, filtered_infos, filtered_warnings, filtered_holes); if (severity) *severity = severity_data.max; if (filtered_severity && filtered_requested) *filtered_severity = filtered_severity_data.max; if (autofp == 0 && host == NULL && cache_exists == 0 && min_cvss_base == NULL && search_phrase == NULL) cache_report_counts (report, override, &severity_data, 1); cleanup_severity_data (&severity_data); cleanup_severity_data (&filtered_severity_data); return 0; } /** * @brief Get the message counts for a report. * * @param[in] report Report. * @param[out] debugs Number of debug messages. * @param[out] holes Number of hole messages. * @param[out] infos Number of info messages. * @param[out] logs Number of log messages. * @param[out] warnings Number of warning messages. * @param[out] false_positives Number of false positive messages. * @param[out] severity Maximum severity score. * @param[in] override Whether to override the threat. * @param[in] host Host to which to limit the count. NULL to allow all. * @param[in] autofp Whether to apply the auto FP filter. * @param[in] min_qod Minimum QoD of results to count. * * @return 0 on success, -1 on error. */ int report_counts_id (report_t report, int* debugs, int* holes, int* infos, int* logs, int* warnings, int* false_positives, double* severity, int override, const char *host, int autofp, const char* min_qod) { return report_counts_id_filt (report, debugs, holes, infos, logs, warnings, false_positives, severity, override, host, NULL, min_qod, NULL, 0, autofp, NULL, NULL, NULL, NULL, NULL, NULL, NULL); } /** * @brief Get the maximum severity of a report. * * @param[in] report Report. * @param[in] overrides Whether to apply overrides. * @param[in] min_qod Minimum QoD of results to count. * * @return Severity score of the report. */ double report_severity (report_t report, int overrides, int min_qod) { double severity; iterator_t iterator; // TODO: Cache for non-default QoD. init_iterator (&iterator, "SELECT max(severity)" " FROM report_counts" " WHERE report = %llu" " AND override = %d" " AND (end_time = 0 or end_time >= m_now ());", report, overrides); if (next (&iterator) && min_qod == MIN_QOD_DEFAULT && (iterator_null (&iterator, 0) == 0)) { g_debug ("%s: max(severity)=%s", __FUNCTION__, iterator_string (&iterator, 0)); severity = iterator_double (&iterator, 0); } else { gchar *min_qod_str = g_strdup_printf ("%d", min_qod); g_debug ("%s: could not get max from cache", __FUNCTION__); report_counts_id (report, NULL, NULL, NULL, NULL, NULL, NULL, &severity, overrides, NULL, 0, min_qod_str); g_free (min_qod_str); } cleanup_iterator (&iterator); return severity; } /** * @brief Delete a report. * * It's up to the caller to provide the transaction. * * @param[in] report Report. * * @return 0 success, 1 report is hidden, 2 report is in use, -1 error. */ int delete_report_internal (report_t report) { task_t task; char *slave_task_uuid; if (sql_int ("SELECT hidden FROM reports WHERE id = %llu;", report)) return 1; if (sql_int ("SELECT count(*) FROM reports WHERE id = %llu" " AND (scan_run_status = %u OR scan_run_status = %u" " OR scan_run_status = %u OR scan_run_status = %u" " OR scan_run_status = %u);", report, TASK_STATUS_RUNNING, TASK_STATUS_REQUESTED, TASK_STATUS_DELETE_REQUESTED, TASK_STATUS_DELETE_ULTIMATE_REQUESTED, TASK_STATUS_STOP_REQUESTED, TASK_STATUS_STOP_REQUESTED_GIVEUP, TASK_STATUS_STOP_WAITING)) return 2; if (report_task (report, &task)) return -1; /* Remove any associated slave task. */ slave_task_uuid = report_slave_task_uuid (report); if (slave_task_uuid) { slave_t slave; /* A stopped report leaves the task on the slave. Try delete the task. */ /** @todo Store slave on report, in case task is assigned new slave. */ /** @todo Even that may fail because the slave itself may change. */ slave = task_slave (task); /* For now just forget about it if the slave is 0. */ if (slave) delete_slave_task (slave, slave_task_uuid); } /* Remove the report data. */ sql ("DELETE FROM report_host_details WHERE report_host IN" " (SELECT id FROM report_hosts WHERE report = %llu);", report); sql ("DELETE FROM report_hosts WHERE report = %llu;", report); sql ("UPDATE tags" " SET resource = 0, resource_location = " G_STRINGIFY (LOCATION_TABLE) " WHERE resource IN" " (SELECT id FROM results WHERE report = %llu);", report); sql ("UPDATE tags_trash" " SET resource = 0, resource_location = " G_STRINGIFY (LOCATION_TABLE) " WHERE resource IN" " (SELECT id FROM results WHERE report = %llu);", report); sql ("DELETE FROM results WHERE report = %llu;", report); sql ("DELETE FROM report_counts WHERE report = %llu;", report); sql ("DELETE FROM reports WHERE id = %llu;", report); /* Adjust permissions. */ permissions_set_orphans ("report", report, LOCATION_TABLE); tags_set_orphans ("report", report, LOCATION_TABLE); /* Update the task state. */ switch (sql_int64 (&report, "SELECT max (id) FROM reports WHERE task = %llu", task)) { case 0: if (report) { int status; if (report_scan_run_status (report, &status)) return -1; sql ("UPDATE tasks SET run_status = %u WHERE id = %llu;", status, task); } else sql ("UPDATE tasks SET run_status = %u WHERE id = %llu;", TASK_STATUS_NEW, task); break; case 1: /* Too few rows in result of query. */ break; default: /* Programming error. */ assert (0); case -1: return -1; break; } return 0; } /** * @brief Modify a report. * * @param[in] report_id UUID of report. * @param[in] comment Comment on report. * * @return 0 success, 1 failed to find report, 2 report_id required, 3 comment * required, 99 permission denied, -1 internal error. */ int modify_report (const char *report_id, const char *comment) { gchar *quoted_comment; report_t report; if (report_id == NULL) return 2; if (comment == NULL) return 3; sql_begin_immediate (); assert (current_credentials.uuid); if (user_may ("modify_report") == 0) { sql ("ROLLBACK;"); return 99; } report = 0; if (find_report_with_permission (report_id, &report, "modify_report")) { sql ("ROLLBACK;"); return -1; } if (report == 0) { sql ("ROLLBACK;"); return 1; } quoted_comment = sql_quote (comment ? comment : ""); sql ("UPDATE reports SET" " comment = '%s'" " WHERE id = %llu;", quoted_comment, report); g_free (quoted_comment); sql ("COMMIT;"); return 0; } /** * @brief Delete a report. * * @param[in] report_id UUID of report. * @param[in] dummy Dummy arg to match other delete functions. * * @return 0 success, 1 report is hidden, 2 report is in use, 99 permission * denied, -1 error. */ int delete_report (const char *report_id, int dummy) { report_t report; int ret; sql_begin_exclusive (); if (user_may ("delete_report") == 0) { sql ("ROLLBACK;"); return 99; } report = 0; if (find_report_with_permission (report_id, &report, "delete_report")) { sql ("ROLLBACK;"); return -1; } if (report == 0) { sql ("ROLLBACK;"); return 1; } ret = delete_report_internal (report); if (ret) { sql ("ROLLBACK;"); return ret; } sql ("COMMIT;"); return 0; } /** * @brief Return the slave progress of a report. * * @param[in] report Report. * * @return Number of reports. */ int report_slave_progress (report_t report) { return sql_int ("SELECT slave_progress FROM reports WHERE id = %llu;", report); } /** * @brief Set slave progress of a report. * * @param[in] report The report. * @param[in] progress The new progress value. * * @return 0 success. */ int set_report_slave_progress (report_t report, int progress) { sql ("UPDATE reports SET slave_progress = %i WHERE id = %llu;", progress, report); return 0; } /** * @brief Return the UUID of the task on the slave. * * @param[in] report The report. * * @return UUID of the slave task if any, else NULL. */ char* report_slave_task_uuid (report_t report) { char *uuid; uuid = sql_string ("SELECT slave_task_uuid FROM reports WHERE id = %llu;", report); if (uuid && strlen (uuid)) return uuid; free (uuid); return NULL; } /** * @brief Set the UUID of the slave task, on the local task. * * @param[in] report The report. * @param[in] uuid UUID. */ void set_report_slave_task_uuid (report_t report, const char *uuid) { gchar *quoted_uuid = sql_quote (uuid); sql ("UPDATE reports SET slave_task_uuid = '%s' WHERE id = %llu;", quoted_uuid, report); g_free (quoted_uuid); } /** * @brief Prepare a partial report for restarting the scan from the beginning. * * @param[in] report The report. */ void trim_report (report_t report) { /* Remove results for all hosts. */ sql ("DELETE FROM results WHERE id IN" " (SELECT results.id FROM results" " WHERE results.report = %llu);", report); /* Remove all hosts and host details. */ sql ("DELETE FROM report_host_details WHERE report_host IN" " (SELECT id FROM report_hosts WHERE report = %llu);", report); sql ("DELETE FROM report_hosts" " WHERE report = %llu;", report); /* Clear and rebuild counts cache */ sql ("DELETE FROM report_counts WHERE report = %llu;", current_report); report_cache_counts (current_report); } /** * @brief Prepare a partial report for resumption of the scan. * * @param[in] report The report. */ void trim_partial_report (report_t report) { /* Remove results for partial hosts. */ sql ("DELETE FROM results WHERE id IN" " (SELECT results.id FROM results, report_hosts" " WHERE results.report = %llu" " AND report_hosts.report = %llu" " AND results.host = report_hosts.host" " AND report_hosts.end_time = 0);", report, report); /* Remove partial hosts and host details. */ sql ("DELETE FROM report_host_details WHERE report_host IN" " (SELECT report_hosts.id FROM report_hosts" " WHERE report_hosts.report = %llu" " AND report_hosts.end_time = 0);", report); sql ("DELETE FROM report_hosts" " WHERE report = %llu" " AND end_time is NULL;", report); /* Clear and rebuild counts cache */ sql ("DELETE FROM report_counts WHERE report = %llu;", report); report_cache_counts (report); } /** * @brief Compares two textual port representations, sorting descending * @brief by severity * * @param[in] arg_one First threat level. * @param[in] arg_two Second threat level. * * @return 1, 0 or -1 if first given severity is less than, equal to or greater * than second. */ static gint compare_severity_desc (gconstpointer arg_one, gconstpointer arg_two) { double one_severity, two_severity; gchar *one = *((gchar**) arg_one); gchar *two = *((gchar**) arg_two); gint host; one += strlen (one) + 1; two += strlen (two) + 1; one_severity = g_strtod (one, NULL); two_severity = g_strtod (two, NULL); one += strlen (one) + 1; two += strlen (two) + 1; host = strcmp (one, two); if (host == 0) { if (one_severity > two_severity) return -1; else if (one_severity < two_severity) return 1; else { one = *((gchar**) arg_one); two = *((gchar**) arg_two); return strcmp (two, one); } } return host; } /** * @brief Compares two textual port representations, sorting descending * @brief by severity * * @param[in] arg_one First port. * @param[in] arg_two Second port. * * @return -1, 0 or 1 if first given severity is less than, equal to or greater * than second. */ static gint compare_severity_asc (gconstpointer arg_one, gconstpointer arg_two) { double one_severity, two_severity; gchar *one = *((gchar**) arg_one); gchar *two = *((gchar**) arg_two); gint host; one += strlen (one) + 1; two += strlen (two) + 1; one_severity = g_strtod (one, NULL); two_severity = g_strtod (two, NULL); one += strlen (one) + 1; two += strlen (two) + 1; host = strcmp (one, two); if (host == 0) { if (one_severity < two_severity) return -1; else if (one_severity > two_severity) return 1; else { one = *((gchar**) arg_one); two = *((gchar**) arg_two); return strcmp (one, two); } } return host; } /** * @brief Some result info, for sorting. */ struct result_buffer { gchar *host; ///< Host. gchar *port; ///< Port. gchar *severity; ///< Severity. double severity_double; ///< Severity. }; /** * @brief Buffer host type. */ typedef struct result_buffer result_buffer_t; /** * @brief Create a result buffer. * * @param[in] host Host. * @param[in] port Port. * @param[in] severity Severity. * @param[in] severity_double Severity. * * @return Freshly allocated result buffer. */ static result_buffer_t* result_buffer_new (const gchar *host, const gchar *port, const gchar *severity, double severity_double) { result_buffer_t *result_buffer; result_buffer = g_malloc (sizeof (result_buffer_t)); result_buffer->host = g_strdup (host); result_buffer->port = g_strdup (port); result_buffer->severity = g_strdup (severity); result_buffer->severity_double = severity_double; return result_buffer; } /** * @brief Free a result buffer. * * @param[in] result_buffer Result buffer. */ static void result_buffer_free (result_buffer_t *result_buffer) { g_free (result_buffer->host); g_free (result_buffer->port); g_free (result_buffer->severity); g_free (result_buffer); } /** * @brief Compares two buffered results, sorting by host, port then severity. * * @param[in] arg_one First result. * @param[in] arg_two Second result. * * @return -1, 0 or 1 if first given result is less than, equal to or greater * than second. */ static gint compare_port_severity (gconstpointer arg_one, gconstpointer arg_two) { int host; result_buffer_t *one, *two; one = *((result_buffer_t**) arg_one); two = *((result_buffer_t**) arg_two); host = strcmp (one->host, two->host); if (host == 0) { double severity_cmp; int port; port = strcmp (one->port, two->port); if (port != 0) return port; severity_cmp = two->severity_double - one->severity_double; if (severity_cmp > 0) return 1; else if (severity_cmp < 0) return -1; else return 0; } return host; } /** @todo Defined in omp.c! */ void buffer_results_xml (GString *, iterator_t *, task_t, int, int, int, int, int, int, int, const char *, iterator_t *, int); /** * @brief Comparison returns. */ typedef enum { COMPARE_RESULTS_CHANGED, COMPARE_RESULTS_ERROR, COMPARE_RESULTS_GONE, COMPARE_RESULTS_NEW, COMPARE_RESULTS_SAME } compare_results_t; /** * @brief Convert port to int for order comparison. * * @param[in] port Port, as text. * * @return Port, as integer. */ static int port_order (const char* port) { int port_num; /* Must match order_port SQL function. */ port_num = atoi (port); if (port_num > 0) return port_num; if (sscanf (port, "%*s (%i/%*s)", &port_num) == 1) return port_num; return 0; } /** * @brief Return the sort order of two results. * * @param[in] results Iterator containing first result. * @param[in] delta_results Iterator containing second result. * @param[in] sort_order Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "type". * * @return < 0 if first comes before second, 0 if equal, > 0 if first comes * after second. */ static compare_results_t result_cmp (iterator_t *results, iterator_t *delta_results, int sort_order, const char* sort_field) { const char *host, *delta_host, *port, *delta_port, *type, *delta_type; const char *nvt, *delta_nvt, *name, *delta_name; int ret; double severity, delta_severity; if (sort_field == NULL) sort_field = "type"; tracef (" delta: %s: sort_order: %i", __FUNCTION__, sort_order); tracef (" delta: %s: sort_field: %s", __FUNCTION__, sort_field); host = result_iterator_host (results); delta_host = result_iterator_host (delta_results); port = result_iterator_port (results); delta_port = result_iterator_port (delta_results); type = result_iterator_type (results); delta_type = result_iterator_type (delta_results); severity = result_iterator_severity_double (results); delta_severity = result_iterator_severity_double (delta_results); nvt = result_iterator_nvt_oid (results); delta_nvt = result_iterator_nvt_oid (delta_results); name = result_iterator_nvt_name (results); delta_name = result_iterator_nvt_name (delta_results); /* sort_order 0 is descending. */ if (strcmp (sort_field, "ROWID") == 0) { if (sort_order) return result_iterator_result (results) > result_iterator_result (delta_results); return result_iterator_result (results) < result_iterator_result (delta_results); } ret = collate_ip (NULL, strlen (host), host, strlen (delta_host), delta_host); tracef (" delta: %s: host: %s VS %s (%i)", __FUNCTION__, host, delta_host, ret); if (ret) return ret; if ((strcmp (sort_field, "port") == 0) || (strcmp (sort_field, "location") == 0)) { /* Sorting port first. */ tracef (" delta: %s: port first", __FUNCTION__); ret = port_order (port) - port_order (delta_port); tracef (" delta: %s: port: %s VS %s (%i)", __FUNCTION__, port, delta_port, ret); if (ret) { if (sort_order) return ret; return -ret; } tracef (" delta: %s: severity: %e VS %e", __FUNCTION__, severity, delta_severity); if (severity >= 0 && delta_severity >= 0) { if (severity > delta_severity) return -1; if (severity < delta_severity) return 1; } ret = collate_message_type (NULL, strlen (type), type, strlen (delta_type), delta_type); tracef (" delta: %s: threat: %s VS %s (%i)", __FUNCTION__, type, delta_type, ret); if (ret) return -ret; ret = strcmp (nvt, delta_nvt); tracef (" delta: %s: NVT: %s VS %s (%i)", __FUNCTION__, nvt, delta_nvt, ret); if (ret) return ret; return 0; } if ((strcmp (sort_field, "name") == 0) || (strcmp (sort_field, "vulnerability") == 0)) { /* Sorting NVT name first. */ tracef (" delta: %s: name first", __FUNCTION__); ret = strcmp (name, delta_name); tracef (" delta: %s: name: %s VS %s (%i)", __FUNCTION__, name, delta_name, ret); if (ret) { if (sort_order) return ret; return -ret; } ret = port_order (port) - port_order (delta_port); tracef (" delta: %s: port: %s VS %s (%i)", __FUNCTION__, port, delta_port, ret); if (ret) return ret; tracef (" delta: %s: severity: %e VS %e", __FUNCTION__, severity, delta_severity); if (severity >= 0 && delta_severity >= 0) { if (severity > delta_severity) return -1; if (severity < delta_severity) return 1; } ret = collate_message_type (NULL, strlen (type), type, strlen (delta_type), delta_type); tracef (" delta: %s: threat: %s VS %s (%i)", __FUNCTION__, type, delta_type, ret); if (ret) return -ret; ret = strcmp (nvt, delta_nvt); tracef (" delta: %s: NVT: %s VS %s (%i)", __FUNCTION__, nvt, delta_nvt, ret); if (ret) return ret; return 0; } /* Sorting severity first. */ tracef (" delta: %s: severity first", __FUNCTION__); tracef (" delta: %s: severity: %e VS %e", __FUNCTION__, severity, delta_severity); if (severity >= 0 && delta_severity >= 0) { if (severity > delta_severity) return -1; if (severity < delta_severity) return 1; } ret = collate_message_type (NULL, strlen (type), type, strlen (delta_type), delta_type); tracef (" delta: %s: threat: %s VS %s (%i)", __FUNCTION__, type, delta_type, ret); if (ret) return ret; ret = port_order (port) - port_order (delta_port); tracef (" delta: %s: port: %s VS %s (%i)", __FUNCTION__, port, delta_port, ret); if (ret) return ret; ret = strcmp (nvt, delta_nvt); tracef (" delta: %s: NVT: %s VS %s (%i)", __FUNCTION__, nvt, delta_nvt, ret); if (ret) return ret; return 0; } /** * @brief Compare two results. * * @param[in] results Iterator containing first result. * @param[in] delta_results Iterator containing second result. * @param[in] sort_order Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "type". * * @return Result of comparison. */ static compare_results_t compare_results (iterator_t *results, iterator_t *delta_results, int sort_order, const char* sort_field) { int ret; const char *descr, *delta_descr; tracef (" delta: %s", __FUNCTION__); ret = result_cmp (results, delta_results, sort_order, sort_field); if (ret > 0) /* The delta result sorts first, so it is new. */ return COMPARE_RESULTS_NEW; if (ret < 0) /* The 'results' result sorts first, so it has gone. */ return COMPARE_RESULTS_GONE; descr = result_iterator_descr (results); delta_descr = result_iterator_descr (delta_results); tracef (" delta: %s: descr: %s VS %s (%i)", __FUNCTION__, descr, delta_descr, strcmp (descr, delta_descr)); ret = strcmp (descr, delta_descr); if (ret) return COMPARE_RESULTS_CHANGED; return COMPARE_RESULTS_SAME; } /** * @brief Compare two results, writing associated XML to a buffer. * * @param[in] buffer Buffer. * @param[in] results Iterator containing first result. * @param[in] delta_results Iterator containing second result. * @param[in] task Task associated with report. * @param[in] notes Whether to include notes. * @param[in] notes_details If notes, Whether to include details. * @param[in] overrides Whether to include overrides. * @param[in] overrides_details If overrides, Whether to include details. * @param[in] sort_order Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "type". * @param[in] changed Whether to include changed results. * @param[in] gone Whether to include gone results. * @param[in] new Whether to include new results. * @param[in] same Whether to include same results. * @param[in] max_results Value to decrement if result is buffered. * @param[in] first_result Skip result and decrement if positive. * @param[in] used 0 if used, 1 if skipped. * @param[in] would_use 0 if would use (first_result aside), 1 if skipped. * * @return Result of comparison. */ static compare_results_t compare_and_buffer_results (GString *buffer, iterator_t *results, iterator_t *delta_results, task_t task, int notes, int notes_details, int overrides, int overrides_details, int sort_order, const char* sort_field, int changed, int gone, int new, int same, int *max_results, int *first_result, int *used, int *would_use) { compare_results_t state; state = compare_results (results, delta_results, sort_order, sort_field); *used = 0; *would_use = 0; switch (state) { case COMPARE_RESULTS_CHANGED: if (changed) { *would_use = 1; if (*first_result) { tracef (" delta: skip"); (*first_result)--; break; } *used = 1; (*max_results)--; if (buffer) buffer_results_xml (buffer, results, task, notes, notes_details, overrides, overrides_details, 0, 0, 0, "changed", delta_results, 1); } break; case COMPARE_RESULTS_GONE: if (gone) { *would_use = 1; if (*first_result) { tracef (" delta: skip"); (*first_result)--; break; } *used = 1; (*max_results)--; if (buffer) buffer_results_xml (buffer, results, task, notes, notes_details, overrides, overrides_details, 0, 0, 0, "gone", delta_results, 0); } break; case COMPARE_RESULTS_NEW: if (new) { *would_use = 1; if (*first_result) { tracef (" delta: skip"); (*first_result)--; break; } *used = 1; (*max_results)--; if (buffer) buffer_results_xml (buffer, delta_results, task, notes, notes_details, overrides, overrides_details, 0, 0, 0, "new", delta_results, 0); } break; case COMPARE_RESULTS_SAME: if (same) { *would_use = 1; if (*first_result) { tracef (" delta: skip"); (*first_result)--; break; } *used = 1; (*max_results)--; if (buffer) buffer_results_xml (buffer, results, task, notes, notes_details, overrides, overrides_details, 0, 0, 0, "same", delta_results, 0); } break; default: return COMPARE_RESULTS_ERROR; } return state; } /** * @brief Write to a file or close stream and exit. * * @param[in] stream Stream to write to. * @param[in] format Format specification. * @param[in] args Arguments. */ #define PRINT(stream, format, args...) \ do \ { \ gchar *msg; \ msg = g_markup_printf_escaped (format, ## args); \ if (fprintf (stream, "%s", msg) < 0) \ { \ g_free (msg); \ fclose (stream); \ return -1; \ } \ g_free (msg); \ } \ while (0) /** * @brief Write XML to a file or close stream and return. * * @param[in] stream Stream to write to. * @param[in] xml XML. */ #define PRINT_XML(stream, xml) \ do \ { \ if (fprintf (stream, "%s", xml) < 0) \ { \ fclose (stream); \ return -1; \ } \ } \ while (0) #if 0 void dump (GArray *ports) { int index; for (index = 0; index < ports->len; index++) { char *port = g_array_index (ports, char*, index); char *threat = port + strlen (port) + 1; tracef (" == %s %s %s", threat + strlen (threat) + 1, port, threat); } } #endif /** * @brief Add a port to a port tree. * * @param[in] ports The tree. * @param[in] results Result iterator on result whose port to add. */ static void add_port (GTree *ports, iterator_t *results) { const char *port, *host; double *old_severity, *severity; GTree *host_ports; /* Ensure there's an inner tree for the host. */ host = result_iterator_host (results); host_ports = g_tree_lookup (ports, host); if (host_ports == NULL) { host_ports = g_tree_new_full ((GCompareDataFunc) strcmp, NULL, g_free, g_free); g_tree_insert (ports, g_strdup (host), host_ports); } /* Ensure the highest threat is recorded for the port in the inner tree. */ port = result_iterator_port (results); severity = g_malloc (sizeof (double)); *severity = result_iterator_severity_double (results); old_severity = g_tree_lookup (host_ports, port); tracef (" delta: %s: adding %s severity %1.1f on host %s", __FUNCTION__, port, *severity, host); if (old_severity == NULL) g_tree_insert (host_ports, g_strdup (port), severity); else if (severity > old_severity) { *old_severity = *severity; g_free (severity); } } /** * @brief Print delta host ports. * * @param[in] key Port. * @param[in] value Threat. * @param[in] data Host and stream. */ static gboolean print_host_port (gpointer key, gpointer value, gpointer data) { gpointer *host_and_stream; host_and_stream = (gpointer*) data; tracef (" delta: %s: host %s port %s", __FUNCTION__, (gchar*) host_and_stream[0], (gchar*) key); fprintf ((FILE*) host_and_stream[1], "" "%s" "%s" "%1.1f" "%s" "", (gchar*) host_and_stream[0], (gchar*) key, *((double*) value), severity_to_level (*((double*) value), 0)); return FALSE; } /** * @brief Print delta ports. * * @param[in] key Host. * @param[in] value Port tree. * @param[in] stream Stream. */ static gboolean print_host_ports (gpointer key, gpointer value, gpointer stream) { gpointer host_and_stream[2]; host_and_stream[0] = key; host_and_stream[1] = stream; tracef (" delta: %s: host %s", __FUNCTION__, (gchar*) key); g_tree_foreach ((GTree*) value, print_host_port, host_and_stream); return FALSE; } /** * @brief Add port to ports array. * * @param[in] key Port. * @param[in] value Threat. * @param[in] ports Ports array. */ static gboolean array_add_port (gpointer key, gpointer value, gpointer ports) { gpointer *port_threat; port_threat = g_malloc (2 * sizeof (gpointer)); port_threat[0] = key; port_threat[1] = value; array_add ((array_t*) ports, port_threat); return FALSE; } /** * @brief Print delta ports, in descending order. * * @param[in] key Host. * @param[in] value Port tree. * @param[in] stream Stream. */ static gboolean print_host_ports_desc (gpointer key, gpointer value, gpointer stream) { guint index; array_t *ports; tracef (" delta: %s: host %s", __FUNCTION__, (gchar*) key); /* Convert tree to array. */ ports = make_array (); g_tree_foreach ((GTree*) value, array_add_port, ports); /* Print the array backwards. */ index = ports->len; while (index--) { gpointer *port_threat; port_threat = g_ptr_array_index (ports, index); fprintf ((FILE*) stream, "" "%s" "%s" "%1.1f" "%s" "", (gchar*) key, (gchar*) port_threat[0], *((double*) port_threat[1]), severity_to_level (*((double*) port_threat[1]), 0)); } array_free (ports); return FALSE; } /** * @brief Compare port severities, ascending. * * @param[in] one First. * @param[in] two Second. */ static gint compare_ports_severity (gconstpointer one, gconstpointer two) { gpointer *port_threat_one, *port_threat_two; port_threat_one = *((gpointer**) one); port_threat_two = *((gpointer**) two); if (*((double*) port_threat_one[1]) > *((double*) port_threat_two[1])) return 1; else if (*((double*) port_threat_one[1]) < *((double*) port_threat_two[1])) return -1; else return 0; } /** * @brief Compare port severities, descending. * * @param[in] one First. * @param[in] two Second. */ static gint compare_ports_severity_desc (gconstpointer one, gconstpointer two) { gpointer *port_threat_one, *port_threat_two; port_threat_one = *((gpointer**) one); port_threat_two = *((gpointer**) two); if (*((double*) port_threat_one[1]) < *((double*) port_threat_two[1])) return 1; else if (*((double*) port_threat_one[1]) > *((double*) port_threat_two[1])) return -1; else return 0; } /** * @brief Print delta ports, ordering by severity. * * @param[in] key Host. * @param[in] value Port tree. * @param[in] stream Stream. * @param[in] ascending Ascending or descending. */ static gboolean print_host_ports_by_severity (gpointer key, gpointer value, gpointer stream, int ascending) { guint index, len; array_t *ports; tracef (" delta: %s: host %s", __FUNCTION__, (gchar*) key); /* Convert tree to array. */ ports = make_array (); g_tree_foreach ((GTree*) value, array_add_port, ports); /* Sort the array. */ if (ascending) g_ptr_array_sort (ports, compare_ports_severity); else g_ptr_array_sort (ports, compare_ports_severity_desc); /* Print the sorted array. */ index = 0; len = ports->len; while (index < len) { gpointer *port_threat; port_threat = g_ptr_array_index (ports, index); fprintf ((FILE*) stream, "" "%s" "%s" "%1.1f" "%s" "", (gchar*) key, (gchar*) port_threat[0], *((double*) port_threat[1]), severity_to_level (*((double*) port_threat[1]), 0)); index++; } array_free (ports); return FALSE; } /** * @brief Print delta ports, ordering by severity descending. * * @param[in] key Host. * @param[in] value Port tree. * @param[in] stream Stream. */ static gboolean print_host_ports_by_severity_desc (gpointer key, gpointer value, gpointer stream) { return print_host_ports_by_severity (key, value, stream, 0); } /** * @brief Print delta ports, ordering by severity ascending. * * @param[in] key Host. * @param[in] value Port tree. * @param[in] stream Stream. */ static gboolean print_host_ports_by_severity_asc (gpointer key, gpointer value, gpointer stream) { return print_host_ports_by_severity (key, value, stream, 1); } /** * @brief Free delta host ports. * * @param[in] host_ports Ports. * @param[in] dummy Dummy. */ static gboolean free_host_ports (GTree *host_ports, gpointer dummy) { g_tree_destroy (host_ports); return FALSE; } /** * @brief Get N'th last report_host given a host. * * The last report_host is at position 1, the second last at position 2, and * so on. * * @param[in] host Host. * @param[in] report_host Report host. * @param[in] position Position from end. */ static gboolean host_nthlast_report_host (const char *host, report_host_t *report_host, int position) { gchar *quoted_host; assert (current_credentials.uuid); if (position == 0) position = 1; quoted_host = sql_quote (host); switch (sql_int64 (report_host, "SELECT id FROM report_hosts WHERE host = '%s'" " AND user_owns ('task'," " (SELECT reports.task FROM reports" " WHERE reports.id" " = report_hosts.report))" " AND (SELECT tasks.hidden FROM tasks, reports" " WHERE reports.task = tasks.id" " AND reports.id = report_hosts.report)" " = 0" " AND (SELECT value FROM task_preferences, tasks," " reports" " WHERE reports.task = tasks.id" " AND reports.id = report_hosts.report" " AND task_preferences.task = tasks.id" " AND task_preferences.name = 'in_assets')" " = 'yes'" " AND report_hosts.end_time IS NOT NULL" " ORDER BY id DESC LIMIT 1 OFFSET %i;", quoted_host, position - 1)) { case 0: break; case 1: /* Too few rows in result of query. */ *report_host = 0; break; default: /* Programming error. */ assert (0); case -1: return TRUE; break; } g_free (quoted_host); return FALSE; } /** * @brief Count host reports. * * @param[in] host Host. * * @return Report count. */ static int host_report_count (const char *host) { int count; gchar *quoted_host; assert (current_credentials.uuid); quoted_host = sql_quote (host); count = sql_int ("SELECT count (*) FROM report_hosts WHERE host = '%s'" " AND (SELECT reports.owner FROM reports" " WHERE reports.id = report_hosts.report)" " = (SELECT id FROM users" " WHERE users.uuid = '%s')" " AND (SELECT tasks.hidden FROM tasks, reports" " WHERE reports.task = tasks.id" " AND reports.id = report_hosts.report)" " = 0" " AND (SELECT reports.scan_run_status FROM reports" " WHERE reports.id = report_hosts.report)" " = %u;", quoted_host, current_credentials.uuid, TASK_STATUS_DONE); g_free (quoted_host); return count; } /** * @brief Count hosts. * * @return Host count. */ static int host_count () { return sql_int ("SELECT count (DISTINCT host) FROM report_hosts" " WHERE host != 'localhost';"); } /** * @brief Count hosts with filtering. * * @param[in] levels Levels. * @param[in] search_phrase Phrase that host IPs must include. All hosts * if NULL or "". * @param[in] apply_overrides Whether to apply overrides. * * @return Host count. */ static int filtered_host_count (const char *levels, const char *search_phrase, int apply_overrides) { assert (current_credentials.uuid); if (levels && strlen (levels)) { int ret; GString *levels_sql; gchar *severity_sql, *new_severity_sql, *last_report_sql; if (setting_dynamic_severity_int ()) severity_sql = g_strdup("CASE WHEN results.severity" " > " G_STRINGIFY (SEVERITY_LOG) " THEN coalesce ((SELECT CAST (cvss_base" " AS REAL)" " FROM nvts" " WHERE nvts.oid" " = results.nvt)," " results.severity)" " ELSE results.severity END"); else severity_sql = g_strdup ("results.severity"); if (apply_overrides) { gchar *ov, *owned_clause; owned_clause = where_owned_for_get ("override", NULL); ov = g_strdup_printf ("SELECT overrides.new_severity" " FROM overrides" " WHERE overrides.nvt = results.nvt" " AND %s" " AND ((overrides.end_time = 0)" " OR (overrides.end_time >= m_now ()))" " AND (overrides.task =" " (SELECT reports.task FROM reports" " WHERE reports.id = results.report)" " OR overrides.task = 0)" " AND (overrides.result = results.id" " OR overrides.result = 0)" " AND (overrides.hosts is NULL" " OR overrides.hosts = ''" " OR hosts_contains (overrides.hosts, results.host))" " AND (overrides.port is NULL" " OR overrides.port = ''" " OR overrides.port = results.port)" " AND (severity_matches_ov (%s, overrides.severity))" " ORDER BY overrides.result DESC, overrides.task DESC," " overrides.port DESC, overrides.severity ASC," " overrides.creation_time DESC" " LIMIT 1", owned_clause, severity_sql); g_free (owned_clause); new_severity_sql = g_strdup_printf ("coalesce ((%s),%s)", ov, severity_sql); g_free (ov); } else new_severity_sql = g_strdup_printf ("%s", severity_sql); g_free (severity_sql); levels_sql = where_levels (levels, new_severity_sql); last_report_sql = g_strdup_printf (" (SELECT report FROM report_hosts" " WHERE report_hosts.host = distinct_host" " AND end_time IS NOT NULL" " AND report_hosts.report" " IN (SELECT reports.id FROM reports" " WHERE user_owns ('task', reports.task))" " AND (SELECT reports.scan_run_status = %u" " FROM reports" " WHERE reports.id = report)" " AND (SELECT hidden FROM tasks" " WHERE tasks.id" " = (SELECT task FROM reports" " WHERE reports.id = report))" " = 0" " AND (SELECT value FROM task_preferences" " WHERE task_preferences.task" " = (SELECT task FROM reports" " WHERE reports.id = report)" " AND task_preferences.name = 'in_assets')" " = 'yes'" " ORDER BY id DESC LIMIT 1)", TASK_STATUS_DONE); if (search_phrase && strlen (search_phrase)) { gchar *quoted_search_phrase; quoted_search_phrase = sql_quote (search_phrase); ret = sql_int ("SELECT" " count (*)" " FROM (SELECT DISTINCT host AS distinct_host" " FROM report_hosts)" " AS distinct_host_subquery" /* Search IP. */ " WHERE (distinct_host LIKE '%%%s%%%'" /* Search hostname. */ " OR EXISTS" " (SELECT * FROM report_host_details" " WHERE report_host" " = (SELECT id FROM report_hosts" " WHERE report = %s" " AND host = distinct_host)" " AND (name = 'hostname'" " OR name = 'best_os_txt'" " OR name = 'best_os_cpe' OR name = 'App'" " OR name = 'ports')" " AND source_type = 'nvt'" " AND value LIKE '%%%s%%'))" " AND EXISTS (SELECT results.id, %s AS new_severity" " FROM results" " WHERE results.report = %s" " AND results.host = distinct_host" " AND qod >= " G_STRINGIFY (MIN_QOD_DEFAULT) " %s);", quoted_search_phrase, last_report_sql, quoted_search_phrase, last_report_sql, new_severity_sql, levels_sql ? levels_sql->str : ""); g_free (quoted_search_phrase); } else ret = sql_int ("SELECT" " count (*)" " FROM (SELECT DISTINCT host AS distinct_host" " FROM report_hosts)" " AS distinct_host_subquery" " WHERE EXISTS (SELECT results.id, %s AS new_severity" " FROM results" " WHERE results.report = %s" " AND results.host = distinct_host" " AND qod >= " G_STRINGIFY (MIN_QOD_DEFAULT) " %s);", new_severity_sql, last_report_sql, levels_sql ? levels_sql->str : ""); if (levels_sql) g_string_free (levels_sql, TRUE); g_free (new_severity_sql); g_free (last_report_sql); return ret; } else if (search_phrase && strlen (search_phrase)) { int retn; gchar *quoted_search_phrase; quoted_search_phrase = sql_quote (search_phrase); retn = sql_int ("SELECT count(*) FROM" " (SELECT host" " FROM report_hosts" " WHERE report_hosts.report" " IN (SELECT reports.id FROM reports" " WHERE user_owns ('task', reports.task))" " AND (SELECT tasks.hidden FROM tasks, reports" " WHERE reports.task = tasks.id" " AND reports.id = report_hosts.report)" " = 0" " AND report_hosts.end_time IS NOT NULL" " GROUP BY host" " HAVING host LIKE '%%%s%%'" " OR EXISTS" " (SELECT * FROM report_host_details" " WHERE report_hosts.id = report_host" " AND (name = 'hostname' OR name = 'best_os_txt'" " OR name = 'best_os_cpe' OR name = 'App'" " OR name = 'ports')" " AND source_type = 'nvt'" " AND value LIKE '%%%s%%')" " ORDER BY inet (host));", quoted_search_phrase, quoted_search_phrase); g_free (quoted_search_phrase); return retn; } return sql_int ("SELECT count(*) FROM" " (SELECT DISTINCT host FROM report_hosts" " WHERE report_hosts.report" " IN (SELECT reports.id FROM reports" " WHERE user_owns ('task', reports.task))" " AND (SELECT tasks.hidden FROM tasks, reports" " WHERE reports.task = tasks.id" " AND reports.id = report_hosts.report)" " = 0" " AND report_hosts.end_time IS NOT NULL);"); } /** * @brief Buffer host. */ struct buffer_host { gchar *ip; ///< IP of host. report_host_t report_host; ///< Report host of host. }; /** * @brief Buffer host type. */ typedef struct buffer_host buffer_host_t; /** * @brief Free print_report_xml prognostic host buffer. * * @param[in] buffer The buffer. */ static void free_buffer (array_t *buffer) { guint index; /* Free the buffer. */ index = buffer->len; while (index--) { buffer_host_t *buffer_host; buffer_host = (buffer_host_t*) g_ptr_array_index (buffer, index); if (buffer_host) { g_free (buffer_host->ip); g_free (buffer_host); } } g_ptr_array_free (buffer, TRUE); } /** * @brief Get filter term corresponding to report filtering. * * @param[in] sort_order Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "type". * @param[in] result_hosts_only Whether to show only hosts with results. * @param[in] min_cvss_base Minimum CVSS base of included results. All * results if NULL. * @param[in] min_qod Minimum QoD of included results. All * results if NULL. * @param[in] levels String describing threat levels (message types) * to include in count (for example, "hmlgd" for * High, Medium, Low, loG and Debug). All levels if * NULL. * @param[in] delta_states String describing delta states to include in count * (for example, "sngc" Same, New, Gone and Changed). * All levels if NULL. * @param[in] search_phrase Phrase that results must include. All results * if NULL or "". * @param[in] search_phrase_exact Whether search phrase is exact. * @param[in] autofp Whether to apply the auto FP filter. * @param[in] notes Whether to include notes. * @param[in] overrides Whether to include overrides. * @param[in] first_result The result to start from. The results are 0 * indexed. * @param[in] max_results The maximum number of results returned. * * @return Filter term. */ static gchar * report_filter_term (int sort_order, const char* sort_field, int result_hosts_only, const char *min_cvss_base, const char *min_qod, const char *levels, const char *delta_states, const char *search_phrase, int search_phrase_exact, int autofp, int notes, int overrides, int first_result, int max_results, const char *zone) { return g_strdup_printf ("%s%s%s" "%s%s=%s" " result_hosts_only=%i" " min_cvss_base=%s" " min_qod=%s" " levels=%s" " autofp=%i" " notes=%i" " overrides=%i" " first=%i" " rows=%i" " delta_states=%s" "%s%s%s", (search_phrase && strlen (search_phrase) && search_phrase_exact) ? "=" : "", search_phrase && strlen (search_phrase) ? "\"" : "", search_phrase ? search_phrase : "", search_phrase && strlen (search_phrase) ? "\" " : "", sort_order ? "sort" : "sort-reverse", // FIX "id" is no longer a sort option sort_field ? sort_field : "id", result_hosts_only, min_cvss_base ? min_cvss_base : "", min_qod ? min_qod : "", levels ? levels : "hmlgd", autofp, notes, overrides, first_result + 1, max_results, delta_states ? delta_states : "cgns", (zone && strlen (zone)) ? " timezone=\"" : "", (zone && strlen (zone)) ? zone : "", (zone && strlen (zone)) ? "\"" : ""); } /** * @brief Count a report's total number of hosts. * * @return Host count. */ static int report_host_count (report_t report) { return sql_int ("SELECT count (DISTINCT id) FROM report_hosts" " WHERE report = %llu;", report); } /** * @brief Count a report's total number of tcp/ip ports. * @brief Ignores ports entries in "general/..." form. * * @return Ports count. */ static int report_port_count (report_t report) { return sql_int ("SELECT count (DISTINCT port) FROM results" " WHERE report = %llu AND port != ''" " AND port NOT LIKE 'general/%';", report); } /** * @brief Count a prognostic report host's total number of tcp/ip ports. * @brief Ignores ports entries in "general/..." form. * * @return Ports count for prognostic report host. */ static int prognostic_host_port_count (report_t report, const char *host) { return sql_int ("SELECT count (DISTINCT port) FROM results" " WHERE report = %llu AND host = '%s'" " AND port NOT LIKE 'general/%';", report, host); } /** * @brief Count a report's total number of closed cves. * * @return Closed CVE count. */ static int report_closed_cve_count (report_t report) { return sql_int (" SELECT count(id) FROM nvts" " WHERE cve != 'NOCVE'" " AND family IN (" LSC_FAMILY_LIST ")" " AND oid IN" " (SELECT source_name FROM report_host_details" " WHERE report_host IN " " (SELECT id FROM report_hosts WHERE report = %llu)" " AND name = 'EXIT_CODE'" " AND value = 'EXIT_NOTVULN');", report); } /** * @brief Count a report's total number of vulnerabilities. * * @return Vulnerabilities count. */ static int report_vuln_count (report_t report) { return sql_int ("SELECT count (DISTINCT nvt) FROM results" " WHERE report = %llu AND nvt != '0'" " AND severity != " G_STRINGIFY (SEVERITY_ERROR) ";", report); } /** * @brief Count a report's total number of detected Operating Systems. * * @return OS count. */ static int report_os_count (report_t report) { return sql_int ("SELECT count (DISTINCT value) FROM report_host_details" " WHERE report_host IN" " (SELECT id from report_hosts WHERE report = %llu)" " AND name = 'best_os_cpe';", report); } /** * @brief Count a report's total number of detected Apps. * * @return App count. */ static int report_app_count (report_t report) { return sql_int ("SELECT count (DISTINCT value) FROM report_host_details" " WHERE report_host IN" " (SELECT id from report_hosts WHERE report = %llu)" " AND name = 'App';", report); } /** * @brief Count a report's total number of found SSL Certificates. * * @return SSL Certificates count. */ static int report_ssl_cert_count (report_t report) { return sql_int ("SELECT count (DISTINCT id) FROM report_host_details" " WHERE report_host IN" " (SELECT id from report_hosts WHERE report = %llu)" " AND name = 'SSLInfo';", report); } /** * @brief Count a report's total number of error messages. * * @return Error Messages count. */ static int report_error_count (report_t report) { return sql_int ("SELECT count (id) FROM results" " WHERE report = %llu and type = 'Error Message';", report); } /** * @brief Write report host detail to file stream. * * @param[in] stream Stream to write to. * @param[in] details Pointer to report host details iterator. */ #define PRINT_REPORT_HOST_DETAIL(stream, details) \ do \ { \ PRINT(stream, \ "" \ "%s" \ "%s" \ "" \ "%s" \ "%s" \ "%s" \ "" \ "%s" \ "", \ report_host_details_iterator_name (details), \ report_host_details_iterator_value (details), \ report_host_details_iterator_source_type (details), \ report_host_details_iterator_source_name (details), \ report_host_details_iterator_source_desc (details), \ report_host_details_iterator_extra (details) ? \ report_host_details_iterator_extra (details) \ : ""); \ } \ while (0) /** * @brief Print the XML for a report's host details to a file stream. * @param[in] report_host The report host. * @param[in] stream File stream to write to. * * @return 0 on success, -1 error. */ static int print_report_host_details_xml (report_host_t report_host, FILE *stream) { iterator_t details; init_report_host_details_iterator (&details, report_host); while (next (&details)) PRINT_REPORT_HOST_DETAIL (stream, &details); cleanup_iterator (&details); return 0; } /** * @brief Write report error message to file stream. * * @param[in] stream Stream to write to. * @param[in] errors Pointer to report error messages iterator. */ #define PRINT_REPORT_ERROR(stream, errors) \ do \ { \ PRINT (stream, \ "" \ "%s" \ "%s" \ "%s" \ "" \ "%s" \ "%s" \ "" \ "%s" \ "%s" \ "", \ report_errors_iterator_host (errors), \ report_errors_iterator_port (errors), \ report_errors_iterator_desc (errors), \ report_errors_iterator_nvt_oid (errors), \ report_errors_iterator_nvt_name (errors), \ report_errors_iterator_nvt_cvss (errors), \ report_errors_iterator_scan_nvt_version (errors), \ report_errors_iterator_severity (errors)); \ } \ while (0) /** * @brief Print the XML for a report's error messages to a file stream. * @param[in] report The report. * @param[in] stream File stream to write to. * * @return 0 on success, -1 error. */ static int print_report_errors_xml (report_t report, FILE *stream) { iterator_t errors; init_report_errors_iterator (&errors, report); PRINT (stream, "%i", report_error_count (report)); while (next (&errors)) PRINT_REPORT_ERROR (stream, &errors); cleanup_iterator (&errors); PRINT (stream, ""); return 0; } /** * @brief Print the XML for a report of type assets. * @param[in] out File stream to write to. * @param[in] host Host or NULL. * @param[in] first_result The result to start from. The results are 0 * indexed. * @param[in] max_results The maximum number of results returned. * @param[in] levels String describing threat levels (message types) * @param[in] search_phrase Phrase that results must include. * @param[in] pos Position of report from end. * @param[in] get GET command data. * @param[in] apply_overrides Whether to apply overrides. * @param[in] autofp Whether to apply the auto FP filter. * * @return 0 on success, -1 error. */ static int print_report_assets_xml (FILE *out, const char *host, int first_result, int max_results, gchar *levels, gchar *search_phrase, int pos, const get_data_t *get, int apply_overrides, int autofp) { iterator_t hosts; if (host) { PRINT (out, "" "1" "1" "" ""); } else { // TODO Slow (about 30% of assets page). init_asset_iterator (&hosts, first_result, max_results, levels, search_phrase, apply_overrides); PRINT (out, "" "%i" "%i" "", host_count (), // TODO Slow (about 30% of assets page). filtered_host_count (levels, search_phrase, apply_overrides)); PRINT (out, "", /* Add 1 for 1 indexing. */ first_result + 1, max_results); } while (host || next (&hosts)) { report_host_t report_host; const char *ip; ip = host ? host : asset_iterator_ip (&hosts); if (host_nthlast_report_host (ip, &report_host, pos)) { if (host == NULL) cleanup_iterator (&hosts); return -1; } if (report_host) { iterator_t report_hosts; init_host_iterator (&report_hosts, 0, NULL, report_host); if (next (&report_hosts)) { iterator_t details; report_t report; int holes, infos, logs, warnings, false_positives; double severity, highest_cvss; PRINT (out, "" "%s" "%s" "%s", ip, host_iterator_start_time (&report_hosts), host_iterator_end_time (&report_hosts)); PRINT (out, "" "report/@id" "%s" "" "" "openvasmd" "UUID of current report" "" "", host_iterator_report_uuid (&report_hosts)); PRINT (out, "" "report_count" "%i" "" "" "openvasmd" "Number of reports" "" "", host_report_count (ip)); report = host_iterator_report (&report_hosts); report_counts_id (report, NULL, &holes, &infos, &logs, &warnings, &false_positives, &severity, apply_overrides, ip, autofp, G_STRINGIFY (MIN_QOD_DEFAULT)); PRINT (out, "" "report/result_count/high" "%i" "" "" "openvasmd" "Number of highs" "" "", holes); PRINT (out, "" "report/result_count/medium" "%i" "" "" "openvasmd" "Number of mediums" "" "", warnings); PRINT (out, "" "report/result_count/low" "%i" "" "" "openvasmd" "Number of lows" "" "", infos); PRINT (out, "" "report/result_count/log" "%i" "" "" "openvasmd" "Number of logs" "" "", logs); /* Print all the host details. */ highest_cvss = -1; init_report_host_details_iterator (&details, report_host); while (next (&details)) { const char *value; value = report_host_details_iterator_value (&details); PRINT_REPORT_HOST_DETAIL (out, &details); if (manage_scap_loaded () && get->details && (strcmp (report_host_details_iterator_name (&details), "App") == 0)) { iterator_t prognosis; double cvss; int first; /* Print details of all CVEs on the App. */ first = 1; cvss = -1; init_prognosis_iterator (&prognosis, value); while (next (&prognosis)) { if (first) { cvss = prognosis_iterator_cvss_double (&prognosis); first = 0; } PRINT (out, "" "%s/CVE" "%s" "" "" "%s/%s/CVSS" "%s" "", value, prognosis_iterator_cve (&prognosis), value, prognosis_iterator_cve (&prognosis), prognosis_iterator_cvss (&prognosis)); } /* Print App prognosis, according to highest CVSS. */ if (cvss >= 0) PRINT (out, "" "%s/threat" "%s" "", value, cvss_threat (cvss)); cleanup_iterator (&prognosis); } if (manage_scap_loaded () && (strcmp (report_host_details_iterator_name (&details), "App") == 0)) { int highest; /* Check if this App's CVSS is the highest CVSS for * this host. */ highest = cpe_highest_cvss (value); if (highest > highest_cvss) highest_cvss = highest; } } cleanup_iterator (&details); /* Print prognosis of host, according to highest CVSS. */ if (highest_cvss >= 0) PRINT (out, "" "prognosis" "%s" "", cvss_threat (highest_cvss)); PRINT (out, "" "report/pos" "%i" "" "" "openvasmd" "Position of report from end" "" "", pos); } cleanup_iterator (&report_hosts); PRINT (out, ""); } if (host) break; } if (host == NULL) cleanup_iterator (&hosts); return 0; } /** * @brief Print the XML for a report port summary to a file. * * @param[in] report The report. * @param[in] out File stream. * @param[in] first_result The result to start from. The results are 0 * indexed. * @param[in] max_results The maximum number of results returned. * @param[in] sort_order Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "type". * @param[in] levels String describing threat levels (message types) * @param[in] autofp Whether to apply the auto FP filter. * @param[in] search_phrase Phrase that results must include. All * results if NULL or "". * @param[in] search_phrase_exact Whether search phrase is exact. * @param[in] min_cvss_base Minimum CVSS base of included results. All * results if NULL. * @param[in] min_qod Minimum QoD of included results. All * results if NULL. * @param[in] apply_overrides Whether to apply overrides. * * @return 0 on success, -1 error. */ static int print_report_port_xml (report_t report, FILE *out, int first_result, int max_results, int sort_order, const char *sort_field, const char *levels, int autofp, const char *search_phrase, int search_phrase_exact, const char *min_cvss_base, const char *min_qod, int apply_overrides) { iterator_t results; result_buffer_t *last_item; GArray *ports = g_array_new (TRUE, FALSE, sizeof (gchar*)); init_result_iterator (&results, report, 0, first_result, max_results, /* Sort by the requested field in the requested order, in case there is * a first_result and/or max_results (these are applied after the * sorting). */ sort_order, sort_field, levels, autofp, search_phrase, search_phrase_exact, min_cvss_base, min_qod, apply_overrides); /* Buffer the results, removing duplicates. */ last_item = NULL; while (next (&results)) { const char *port = result_iterator_port (&results); const char *host = result_iterator_host (&results); double cvss_double; cvss_double = result_iterator_severity_double (&results); if (last_item && strcmp (port, last_item->port) == 0 && strcmp (host, last_item->host) == 0 && last_item->severity_double <= cvss_double) { last_item->severity_double = cvss_double; g_free (last_item->severity); last_item->severity = g_strdup (result_iterator_severity (&results)); } else { const char *cvss; result_buffer_t *item; cvss = result_iterator_severity (&results); if (cvss == NULL) { cvss_double = 0.0; cvss = "0.0"; } item = result_buffer_new (host, port, cvss, cvss_double); g_array_append_val (ports, item); last_item = item; } } /* Handle sorting by threat and ROWID. */ if (sort_field == NULL || strcmp (sort_field, "port")) { int index, length; /** @todo Sort by ROWID if was requested. */ /* Sort by port then severity. */ g_array_sort (ports, compare_port_severity); /* Remove duplicates. */ last_item = NULL; for (index = 0, length = ports->len; index < length; index++) { result_buffer_t *item; item = g_array_index (ports, result_buffer_t*, index); if (last_item && (strcmp (item->port, last_item->port) == 0) && (strcmp (item->host, last_item->host) == 0)) { if (item->severity_double > last_item->severity_double) { gchar *severity; severity = last_item->severity; last_item->severity = item->severity; item->severity = severity; last_item->severity_double = item->severity_double; } g_array_remove_index (ports, index); length = ports->len; index--; } else last_item = item; } /* Sort by severity. */ if (sort_order) g_array_sort (ports, compare_severity_asc); else g_array_sort (ports, compare_severity_desc); } /* Write to file from the buffer. */ PRINT (out, "" "%i", /* Add 1 for 1 indexing. */ first_result + 1, max_results, report_port_count (report)); { result_buffer_t *item; int index = 0; while ((item = g_array_index (ports, result_buffer_t*, index++))) { PRINT (out, "" "%s" "%s" "%s" "%s" "", item->host, item->port, item->severity, severity_to_level (g_strtod (item->severity, NULL), 0)); result_buffer_free (item); } g_array_free (ports, TRUE); } PRINT (out, ""); cleanup_iterator (&results); return 0; } /** * @brief Print the XML for a report of type assets. * * @param[in] out File stream to write to. * @param[in] host Host or NULL. * @param[in] first_result The result to start from. The results are 0 * indexed. * @param[in] max_results The maximum number of results returned. * @param[in] levels String describing threat levels (message types) * @param[in] search_phrase Phrase that results must include. * @param[in] pos Position of report from end. * @param[in] get GET command data. * @param[in] apply_overrides Whether to apply overrides. * @param[in] autofp Whether to apply the auto FP filter. * @param[in] host_search_phrase Phrase that results must include. All results * if NULL or "". For hosts. * @param[in] host_levels String describing threat levels (message types) * to include in count (for example, "hmlgd" for * High, Medium, Low, loG and Debug). All levels if * NULL. * @param[in] host_first_result The host result to start from. The results * are 0 indexed. * @param[in] host_max_results The host maximum number of results returned. * @param[in] min_cvss_base Minimum CVSS base of included results. All * results if NULL. * @param[in] result_hosts_only Whether to show only hosts with results. * @param[in] sort_order Whether to sort in ascending order. * @param[in] sort_field Name of the field to sort by. * * @return 0 on success, -1 error. */ static int print_report_prognostic_xml (FILE *out, const char *host, int first_result, int max_results, gchar *levels, gchar *search_phrase, int pos, const get_data_t *get, int apply_overrides, int autofp, const char *host_search_phrase, const char *host_levels, int host_first_result, int host_max_results, gchar *min_cvss_base, int result_hosts_only, int sort_order, const char *sort_field) { array_t *buffer, *apps; buffer_host_t *buffer_host; int index, skip, result_total, total_host_count; int holes, infos, logs, warnings; int f_holes, f_infos, f_logs, f_warnings; iterator_t hosts; time_t now; gchar *scan_start, *scan_end; time (&now); if (host == NULL) { host_levels = host_levels ? host_levels : "hmlgd"; init_asset_iterator (&hosts, host_first_result, host_max_results, host_levels, host_search_phrase, apply_overrides); } buffer = make_array (); apps = make_array (); holes = warnings = infos = logs = 0; f_holes = f_warnings = f_infos = f_logs = 0; skip = 0; total_host_count = 0; result_total = 0; /* Output the results, buffering the associated hosts. */ PRINT (out, "", /* Add 1 for 1 indexing. */ first_result + 1, max_results); while (host || next (&hosts)) { iterator_t report_hosts; report_host_t report_host; const char *ip; ip = host ? host : asset_iterator_ip (&hosts); if (host_nthlast_report_host (ip, &report_host, pos)) { if (host == NULL) cleanup_iterator (&hosts); free_buffer (buffer); array_free (apps); return -1; } if (report_host) { int filtered, host_result_total; filtered = 0; host_result_total = 0; total_host_count++; prognostic_report_result_total (report_host, &host_result_total); result_total += host_result_total; prognostic_report_result_count (report_host, search_phrase, min_cvss_base, &filtered, &f_holes, &f_infos, &f_warnings); filtered = (strchr (levels, 'h') ? f_holes : 0) + (strchr (levels, 'l') ? f_infos : 0) + (strchr (levels, 'g') ? f_logs : 0) + (strchr (levels, 'm') ? f_warnings : 0); if (!filtered) /* Skip this host. */ report_host = 0; } if (report_host) { init_host_iterator (&report_hosts, 0, NULL, report_host); if (next (&report_hosts)) { iterator_t prognosis; int buffered; buffered = 0; init_host_prognosis_iterator (&prognosis, report_host, 0, -1, levels, search_phrase, min_cvss_base, sort_order, sort_field); while (next (&prognosis)) { const char *threat; threat = cvss_threat (prognosis_iterator_cvss_double (&prognosis)); array_add_new_string (apps, prognosis_iterator_cpe (&prognosis)); if (skip < first_result) { /* Skip result. */ skip++; continue; } if (max_results == 0) continue; buffered = 1; PRINT (out, "" "%s" "0" "" "" "" "%s" "" "The host carries the product: %s\n" "It is vulnerable according to: %s.\n" "\n" "%s" "" "" "%s" "" "" "", ip, threat, prognosis_iterator_cpe (&prognosis), prognosis_iterator_cve (&prognosis), prognosis_iterator_description (&prognosis), prognosis_iterator_cve (&prognosis), prognosis_iterator_cvss (&prognosis), prognosis_iterator_cpe (&prognosis)); max_results--; } if (buffered || (result_hosts_only == 0)) { /* Buffer IP and report_host. */ buffer_host_t *buffer_host; buffer_host = (buffer_host_t*) g_malloc (sizeof (buffer_host_t)); buffer_host->report_host = report_host; buffer_host->ip = g_strdup (ip); array_add (buffer, buffer_host); } cleanup_iterator (&prognosis); } cleanup_iterator (&report_hosts); } if (host) break; } if (host == NULL) cleanup_iterator (&hosts); PRINT (out, ""); /* Output buffered hosts. */ if (host) { PRINT (out, "" "1" "1" "" ""); } else { PRINT (out, "" "%i" "%i" "", host_count (), buffer->len); PRINT (out, "", /* Add 1 for 1 indexing. */ host_first_result + 1, host_max_results); } scan_start = g_strdup (iso_time (&now)); time (&now); scan_end = g_strdup (iso_time (&now)); PRINT (out, "%s" "%s", scan_start, scan_end); array_terminate (buffer); index = 0; while ((buffer_host = g_ptr_array_index (buffer, index++))) { iterator_t report_hosts; init_host_iterator (&report_hosts, 0, NULL, buffer_host->report_host); if (next (&report_hosts)) { report_t report; int h_holes, h_infos, h_logs, h_warnings, h_false_positives; double h_severity; PRINT (out, "" "%s%s" "" "" "%s%s" "", buffer_host->ip, scan_start, buffer_host->ip, scan_end); PRINT (out, "" "%s" "%s" "%s", buffer_host->ip, host_iterator_start_time (&report_hosts), host_iterator_end_time (&report_hosts)); PRINT (out, "" "report/@id" "%s" "" "" "openvasmd" "UUID of current report" "" "", host_iterator_report_uuid (&report_hosts)); PRINT (out, "" "port_count" "%i" "" "" "openvasmd" "Ports number of current host" "" "", prognostic_host_port_count (host_iterator_report (&report_hosts), buffer_host->ip)); PRINT (out, "" "report_count" "%i" "" "" "openvasmd" "Number of reports" "" "", host_report_count (buffer_host->ip)); report = host_iterator_report (&report_hosts); report_counts_id (report, NULL, &h_holes, &h_infos, &h_logs, &h_warnings, &h_false_positives, &h_severity, 0, buffer_host->ip, 0, G_STRINGIFY (MIN_QOD_DEFAULT)); PRINT (out, "" "report/result_count/high" "%i" "" "" "openvasmd" "Number of highs" "" "", h_holes); PRINT (out, "" "report/result_count/medium" "%i" "" "" "openvasmd" "Number of mediums" "" "", h_warnings); PRINT (out, "" "report/result_count/low" "%i" "" "" "openvasmd" "Number of lows" "" "", h_infos); if (print_report_host_details_xml (buffer_host->report_host, out)) { array_free (apps); return -1; } PRINT (out, "" "report/pos" "%i" "" "" "openvasmd" "Position of report from end" "" "", pos); PRINT (out, ""); } cleanup_iterator (&report_hosts); } g_free (scan_start); g_free (scan_end); free_buffer (buffer); PRINT (out, "" "%i" "%i" "%i" "00" "%i%i" "%i%i" "%i%i" "%i%i" "" "0" "0" "" "", result_total, result_total, (strchr (levels, 'h') ? f_holes : 0) + (strchr (levels, 'l') ? f_infos : 0) + (strchr (levels, 'g') ? f_logs : 0) + (strchr (levels, 'm') ? f_warnings : 0), holes, (strchr (levels, 'h') ? f_holes : 0), infos, (strchr (levels, 'l') ? f_infos : 0), logs, (strchr (levels, 'g') ? f_logs : 0), warnings, (strchr (levels, 'm') ? f_warnings : 0)); PRINT (out, "%i", total_host_count); PRINT (out, "%i", apps->len); array_free (apps); return 0; } /** * @brief Check whether the scan of a report is active. * * @param[in] report Report. * * @return 1 if active, else 0. */ static int report_active (report_t report) { int run_status; report_scan_run_status (report, &run_status); if (run_status == TASK_STATUS_REQUESTED || run_status == TASK_STATUS_RUNNING || run_status == TASK_STATUS_DELETE_REQUESTED || run_status == TASK_STATUS_DELETE_ULTIMATE_REQUESTED || run_status == TASK_STATUS_STOP_REQUESTED || run_status == TASK_STATUS_STOP_REQUESTED_GIVEUP || run_status == TASK_STATUS_STOPPED) return 1; return 0; } /** * @brief Get progress for active report. * * @param[in] report Report. * @param[in] maximum_hosts Maximum number of hosts in target. * @param[out] hosts_xml Return for hosts XML if required, else NULL. * * @return Progress XML. */ static int report_progress_active (report_t report, int maximum_hosts, gchar **hosts_xml) { long total = 0; int num_hosts = 0, total_progress; iterator_t hosts; GString *string; string = g_string_new (""); init_host_iterator (&hosts, report, NULL, 0); while (next (&hosts)) { unsigned int max_port, current_port; long progress; max_port = host_iterator_max_port (&hosts); current_port = host_iterator_current_port (&hosts); if (max_port) { progress = (current_port * 100) / max_port; if (progress < 0) progress = 0; else if (progress > 100) progress = 100; } else progress = current_port ? 100 : 0; total += progress; num_hosts++; if (hosts_xml) g_string_append_printf (string, "" "%s" "%li" "", host_iterator_host (&hosts), progress); } cleanup_iterator (&hosts); total_progress = maximum_hosts ? (total / maximum_hosts) : 0; #if 1 tracef (" total: %li\n", total); tracef (" num_hosts: %i\n", num_hosts); tracef (" maximum_hosts: %i\n", maximum_hosts); tracef (" total_progress: %i\n", total_progress); #endif if (total_progress == 0) total_progress = 1; else if (total_progress == 100) total_progress = 99; if (hosts_xml) *hosts_xml = g_string_free (string, FALSE); else g_string_free (string, TRUE); return total_progress; } /** * @brief Calculate the progress of a report. * * @param[in] report Report. * @param[in] task Report's task. * @param[out] hosts_xml Return for hosts XML if required, else NULL. * * @return Progress. */ int report_progress (report_t report, task_t task, gchar **hosts_xml) { target_t target; char *hosts, *exclude_hosts; int maximum_hosts, progress; if (report == 0) { if (hosts_xml) *hosts_xml = g_strdup (""); return -1; } /* Handles both slave and OSP cases. */ if ((progress = report_slave_progress (report))) { if (hosts_xml) *hosts_xml = g_strdup (""); return progress; } target = task_target (task); if (task_target_in_trash (task)) { hosts = target ? trash_target_hosts (target) : NULL; exclude_hosts = target ? trash_target_exclude_hosts (target) : NULL; } else { hosts = target ? target_hosts (target) : NULL; exclude_hosts = target ? target_exclude_hosts (target) : NULL; } maximum_hosts = hosts ? manage_count_hosts (hosts, exclude_hosts) : 0; g_free (hosts); g_free (exclude_hosts); if (report_active (report)) return report_progress_active (report, maximum_hosts, hosts_xml); if (hosts_xml) *hosts_xml = g_strdup (""); return -1; } /** * @brief Buffer XML for a severity class. * * @param[in] severity Severity name. * * @return Freshly allocated XML on success, else NULL. */ gchar * severity_class_xml (const gchar *severity) { if (severity) { if ((strcmp (severity, "nist") == 0) || (strcmp (severity, "bsi") == 0)) return g_strdup_printf ("" "nist" "%s" "" "None" "0.0" "0.0" "" "" "Low" "0.1" "3.9" "" "" "Medium" "4.0" "6.9" "" "" "High" "7.0" "10.0" "" "", strcmp (severity, "nist") == 0 ? "NVD Vulnerability Severity Ratings" : "BSI Schwachstellenampel (Germany)"); else if (strcmp (severity, "classic") == 0) return g_strdup_printf ("" "classic" "OpenVAS Classic" "" "None" "0.0" "0.0" "" "" "Low" "0.1" "2.0" "" "" "Medium" "2.1" "5.0" "" "" "High" "5.1" "10.0" "" ""); else if (strcmp (severity, "pci-dss") == 0) return g_strdup_printf ("" "pci-dss" "PCI-DSS" "" "None" "0.0" "3.9" "" "" "High" "4.0" "10.0" "" ""); } return NULL; } /** * @brief Restore original TZ. * * @param[in] tz Original TZ. Freed here. * * @return 0 success, -1 error. */ static int tz_revert (gchar *zone, char *tz) { if (zone && strlen (zone)) { /* Revert to stored TZ. */ if (tz) { if (setenv ("TZ", tz, 1) == -1) { g_warning ("%s: Failed to switch to original TZ", __FUNCTION__); g_free (tz); g_free (zone); return -1; } } else unsetenv ("TZ"); g_free (tz); } g_free (zone); return 0; } /** * @brief Print the XML for a report to a file. * * @param[in] host_summary_buffer Summary. * @param[in] host Host. * @param[in] start Start time, in ISO format. * @param[in] end End time, in ISO format. */ static void host_summary_append (GString *host_summary_buffer, const char *host, const char *start_iso, const char *end_iso) { if (host_summary_buffer) { struct tm start_tm, end_tm; char start[200], end[200]; if (strptime (start_iso, "%FT%H:%M:%S", &start_tm) == NULL) { g_warning ("%s: Failed to parse start", __FUNCTION__); return; } if (strftime (start, 200, "%b %d, %H:%M:%S", &start_tm) == 0) { g_warning ("%s: Failed to format start", __FUNCTION__); return; } if (strptime (end_iso, "%FT%H:%M:%S", &end_tm) == NULL) { g_warning ("%s: Failed to parse end", __FUNCTION__); return; } if (strftime (end, 200, "%b %d, %H:%M:%S", &end_tm) == 0) { g_warning ("%s: Failed to format end", __FUNCTION__); return; } g_string_append_printf (host_summary_buffer, " %-15s %-16s %s\n", host, start, end); } } /** * @brief Print the XML for a report to a file. * * @param[in] report The report. * @param[in] delta Report to compare with the report. * @param[in] task Task associated with report. * @param[in] xml_file File name. * @param[in] get GET command data. * @param[in] sort_order Whether to sort ascending or descending. * @param[in] given_sort_field Field to sort on, or NULL for "type". * @param[in] result_hosts_only Whether to show only hosts with results. * @param[in] given_min_cvss_base Minimum CVSS base of included results. All * results if NULL. * @param[in] given_min_qod Minimum QoD of included results. All results * if NULL. * @param[in] report_format Format of report that will be created from XML. * @param[in] given_levels String describing threat levels (message types) * to include in count (for example, "hmlgd" for * High, Medium, Low, loG and Debug). All levels if * NULL. * @param[in] given_delta_states String describing delta states to include in * count (for example, "sngc" Same, New, Gone * and Changed). All levels if NULL. * @param[in] given_apply_overrides Whether to apply overrides. * @param[in] given_search_phrase Phrase that results must include. All * results if NULL or "". * @param[in] autofp Whether to apply the auto FP filter. * @param[in] notes Whether to include notes. * @param[in] notes_details If notes, Whether to include details. * @param[in] overrides Whether to include overrides. * @param[in] overrides_details If overrides, Whether to include details. * @param[in] first_result The result to start from. The results are 0 * indexed. * @param[in] max_results The maximum number of results returned. * @param[in] type Type of report, NULL, "scan" or "assets". * @param[in] host Host or NULL, when type "assets". * @param[in] pos Position of report from end, when type * "assets". * @param[in] host_search_phrase Phrase that results must include. All results * if NULL or "". For hosts. * @param[in] host_levels String describing threat levels (message types) * to include in count (for example, "hmlgd" for * High, Medium, Low, loG and Debug). All levels if * NULL. * @param[in] host_first_result The host result to start from. The results * are 0 indexed. * @param[in] host_max_results The host maximum number of results returned. * @param[in] ignore_pagination Whether to ignore pagination data. * @param[in] given_zone Timezone. NULL or "" for user's timezone. * @param[out] filter_term_return Filter term used in report. * @param[out] zone_return Actual zone used in report. * @param[out] host_summary Summary of results per host. * * @return 0 on success, -1 error, 2 failed to find filter (before any printing). */ static int print_report_xml (report_t report, report_t delta, task_t task, gchar* xml_file, const get_data_t *get, int sort_order, const char *given_sort_field, int result_hosts_only, const char *given_min_cvss_base, const char *given_min_qod, report_format_t report_format, const char *given_levels, const char *given_delta_states, int given_apply_overrides, const char *given_search_phrase, int autofp, int notes, int notes_details, int overrides, int overrides_details, int first_result, int max_results, const char *type, const char *host, int pos, const char *host_search_phrase, const char *host_levels, int host_first_result, int host_max_results, int ignore_pagination, const char *given_zone, gchar **filter_term_return, gchar **zone_return, gchar **host_summary) { FILE *out; gchar *clean, *term, *sort_field, *levels, *search_phrase; gchar *min_cvss_base, *min_qod; gchar *delta_states, *timestamp; char *uuid, *tsk_uuid = NULL, *start_time, *end_time; int result_count, filtered_result_count, run_status; array_t *result_hosts; iterator_t results, delta_results, params; int debugs, holes, infos, logs, warnings, false_positives; int f_debugs, f_holes, f_infos, f_logs, f_warnings, f_false_positives; int orig_f_debugs, orig_f_holes, orig_f_infos, orig_f_logs; int orig_f_warnings, orig_f_false_positives, orig_filtered_result_count; int search_phrase_exact, apply_overrides; double severity, f_severity; gchar *tz, *zone; GString *host_summary_buffer; /* Init some vars to prevent warnings from older compilers. */ orig_filtered_result_count = 0; orig_f_false_positives = orig_f_warnings = orig_f_logs = orig_f_infos = 0; orig_f_holes = orig_f_debugs = 0; /** @todo Leaks on error in PRINT. The process normally exits then anyway. */ /* run_status is set by report_scan_run_status when either of "delta" and * "report" are true. run_status is only used by run_status_name, only when * either of "delta" and "report" are true, and only after a * report_scan_run_status call. Still GCC 4.4.5 (Debian 4.4.5-8) gives a * "may be used uninitialized" warning, so init it here to quiet the * warning. */ run_status = TASK_STATUS_INTERNAL_ERROR; if (type && strcmp (type, "scan") && strcmp (type, "assets") && strcmp (type, "prognostic")) return -1; if ((type == NULL) || (strcmp (type, "scan") == 0)) { type = NULL; if (report == 0) { assert (0); return -1; } } out = fopen (xml_file, "w"); if (out == NULL) { g_warning ("%s: fopen failed: %s\n", __FUNCTION__, strerror (errno)); return -1; } assert (get); if ((get->filt_id && strlen (get->filt_id) && strcmp (get->filt_id, "0")) || (get->filter && strlen (get->filter))) { term = NULL; if (get->filt_id && strlen (get->filt_id) && strcmp (get->filt_id, "0")) { term = filter_term (get->filt_id); if (term == NULL) { fclose (out); return 2; } } /* Set the filter parameters from the filter term. */ manage_report_filter_controls (term ? term : get->filter, &first_result, &max_results, &sort_field, &sort_order, &result_hosts_only, &min_cvss_base, &min_qod, &levels, &delta_states, &search_phrase, &search_phrase_exact, &autofp, ¬es, &overrides, &apply_overrides, &zone); } else { sort_field = g_strdup (given_sort_field); levels = g_strdup (given_levels); search_phrase = g_strdup (given_search_phrase); search_phrase_exact = 0; min_cvss_base = g_strdup (given_min_cvss_base); min_qod = g_strdup (given_min_qod); delta_states = g_strdup (given_delta_states); apply_overrides = given_apply_overrides; zone = given_zone ? g_strdup (given_zone) : NULL; /* Build the filter term from the old style GET attributes. */ term = report_filter_term (sort_order, sort_field, result_hosts_only, min_cvss_base, min_qod, levels, delta_states, search_phrase, search_phrase_exact, autofp, notes, overrides, first_result, max_results, zone); } levels = levels ? levels : g_strdup ("hmlgd"); if (delta && sort_field && strcmp (sort_field, "name") && strcmp (sort_field, "vulnerability") && strcmp (sort_field, "host") && strcmp (sort_field, "port") && strcmp (sort_field, "location") && strcmp (sort_field, "severity")) { tracef (" delta: %s: exit because sort_field: %s", __FUNCTION__, sort_field); fclose (out); g_free (term); g_free (sort_field); g_free (levels); g_free (search_phrase); g_free (min_cvss_base); g_free (min_qod); g_free (delta_states); return -1; } if (task && task_uuid (task, &tsk_uuid)) { fclose (out); g_free (term); g_free (sort_field); g_free (levels); g_free (search_phrase); g_free (min_cvss_base); g_free (min_qod); g_free (delta_states); return -1; } if (zone && strlen (zone)) { /* Store current TZ. */ tz = getenv ("TZ") ? g_strdup (getenv ("TZ")) : NULL; if (setenv ("TZ", zone, 1) == -1) { g_warning ("%s: Failed to switch to timezone", __FUNCTION__); if (tz != NULL) setenv ("TZ", tz, 1); g_free (tz); g_free (zone); return -1; } tzset (); } else /* Keep compiler quiet. */ tz = NULL; if (delta && report) { uuid = report_uuid (report); PRINT (out, "", uuid); free (uuid); } else if (report) { uuid = report_uuid (report); PRINT (out, "", uuid); free (uuid); } else if (type && (strcmp (type, "assets") == 0)) PRINT (out, "", manage_scap_loaded (), type); else PRINT (out, "", type); PRINT (out, "%s", OMP_VERSION); if (delta) { delta_states = delta_states ? delta_states : g_strdup("cgns"); report_scan_run_status (delta, &run_status); uuid = report_uuid (delta); PRINT (out, "" "" "%s", uuid, run_status_name (run_status ? run_status : TASK_STATUS_INTERNAL_ERROR)); if (report_timestamp (uuid, ×tamp)) { free (uuid); g_free (sort_field); g_free (levels); g_free (search_phrase); g_free (min_cvss_base); g_free (min_qod); g_free (delta_states); tz_revert (zone, tz); return -1; } PRINT (out, "%s", timestamp); g_free (timestamp); start_time = scan_start_time (delta); PRINT (out, "%s", start_time); free (start_time); end_time = scan_end_time (delta); PRINT (out, "%s", end_time); free (end_time); PRINT (out, "" ""); } PRINT (out, ""); init_report_format_param_iterator (¶ms, report_format, 0, 1, NULL); while (next (¶ms)) PRINT (out, "%s%s", report_format_param_iterator_name (¶ms), report_format_param_iterator_value (¶ms)); cleanup_iterator (¶ms); PRINT (out, ""); if (report) { if (delta == 0) { report_scan_result_count (report, NULL, NULL, 0, NULL, "0", apply_overrides, autofp, &result_count); } report_scan_result_count (report, levels, search_phrase, search_phrase_exact, min_cvss_base, min_qod, apply_overrides, autofp, &filtered_result_count); report_scan_run_status (report, &run_status); } clean = manage_clean_filter (term ? term : (get->filter ? get->filter : "")); g_free (term); term = clean; if (filter_term_return) *filter_term_return = g_strdup (term); PRINT (out, "%s%s" "" "%s" "%s" "%s" "%i" "%i" "%i" "%i" "%i" "%s" "%s" "%s", sort_field ? sort_field : "type", sort_order ? "ascending" : "descending", get->filt_id ? get->filt_id : "0", term, levels, search_phrase ? search_phrase : "", autofp, notes ? 1 : 0, overrides ? 1 : 0, apply_overrides ? 1 : 0, result_hosts_only ? 1 : 0, min_cvss_base ? min_cvss_base : "", min_qod ? min_qod : "", zone ? zone : ""); g_free (term); if (strchr (levels, 'h')) PRINT (out, "High"); if (strchr (levels, 'm')) PRINT (out, "Medium"); if (strchr (levels, 'l')) PRINT (out, "Low"); if (strchr (levels, 'g')) PRINT (out, "Log"); if (strchr (levels, 'd')) PRINT (out, "Debug"); if (strchr (levels, 'f')) PRINT (out, "False Positive"); if (delta) { PRINT (out, "%s" "" "%s" "%i" "%i" "%i" "%i" "", host ? host : "", delta_states, strchr (delta_states, 'c') != NULL, strchr (delta_states, 'g') != NULL, strchr (delta_states, 'n') != NULL, strchr (delta_states, 's') != NULL); } else if (type && (strcmp (type, "prognostic") == 0)) PRINT (out, "%s", host ? host : ""); PRINT (out, ""); { const char *severity_setting; gchar *class_xml; severity_setting = setting_severity (); class_xml = severity_class_xml (severity_setting); if (class_xml) { PRINT_XML (out, class_xml); g_free (class_xml); } } if (report) { uuid = report_uuid (report); PRINT (out, "" "%i", resource_tag_count ("report", report, 1)); if (get->details || get->id) { iterator_t tags; init_resource_tag_iterator (&tags, "report", report, 1, NULL, 1); while (next (&tags)) { PRINT (out, "" "%s" "%s" "%s" "", resource_tag_iterator_uuid (&tags), resource_tag_iterator_name (&tags), resource_tag_iterator_value (&tags), resource_tag_iterator_comment (&tags)); } cleanup_iterator (&tags); } PRINT (out, ""); free (uuid); } if (report) { PRINT (out, "%s", run_status_name (run_status ? run_status : TASK_STATUS_INTERNAL_ERROR)); PRINT (out, "%i", report_host_count (report)); PRINT (out, "%i", report_closed_cve_count (report)); PRINT (out, "%i", report_vuln_count (report)); PRINT (out, "%i", report_os_count (report)); PRINT (out, "%i", report_app_count (report)); PRINT (out, "%i", report_ssl_cert_count (report)); } if (task && tsk_uuid) { char *tsk_name, *task_target_uuid, *comment; target_t target; gchar *progress_xml; iterator_t tags; tsk_name = task_name (task); comment = task_comment (task); target = task_target (task); if (task_target_in_trash (task)) task_target_uuid = trash_target_uuid (target); else task_target_uuid = target_uuid (target); if ((target == 0) && (task_run_status (task) == TASK_STATUS_RUNNING)) progress_xml = g_strdup_printf ("%i", task_upload_progress (task)); else { int progress; progress = report_progress (report, task, NULL); progress_xml = g_strdup_printf ("%i", progress); } PRINT (out, "" "%s" "%s" "" "%i" "" "%s", tsk_uuid, tsk_name ? tsk_name : "", comment ? comment : "", task_target_uuid ? task_target_uuid : "", task_target_in_trash (task), progress_xml); g_free (progress_xml); free (comment); free (tsk_name); free (tsk_uuid); PRINT (out, "" "%i", resource_tag_count ("task", task, 1)); init_resource_tag_iterator (&tags, "task", task, 1, NULL, 1); while (next (&tags)) { PRINT (out, "" "%s" "%s" "%s" "", resource_tag_iterator_uuid (&tags), resource_tag_iterator_name (&tags), resource_tag_iterator_value (&tags), resource_tag_iterator_comment (&tags)); } cleanup_iterator (&tags); PRINT (out, "" ""); { char *slave_uuid, *slave_name, *slave_host, *slave_port, *source_iface; /* Info about the situation at the time of scan. */ PRINT (out, "" ""); slave_uuid = report_slave_uuid (report); slave_name = report_slave_name (report); slave_host = report_slave_host (report); slave_port = report_slave_port (report); if (slave_uuid) /* @id "" means no slave. Missing SLAVE means we don't know. */ PRINT (out, "" "%s" "%s" "%s" "", slave_uuid, slave_name ? slave_name : "", slave_host ? slave_host : "", slave_port ? slave_port : ""); free (slave_uuid); free (slave_name); free (slave_host); free (slave_port); source_iface = report_source_iface (report); if (source_iface) /* VALUE "" means preference was not set. Missing PREFERENCE means * we don't know. */ PRINT (out, "" "" "Network Source Interface" "source_iface" "%s" "" "", source_iface); free (source_iface); PRINT (out, "" ""); } } if (type && (strcmp (type, "assets") == 0)) { int ret; ret = print_report_assets_xml (out, host, ignore_pagination ? 1 : first_result, ignore_pagination ? -1 : max_results, levels, search_phrase, pos, get, apply_overrides, autofp); g_free (sort_field); g_free (levels); g_free (search_phrase); g_free (min_cvss_base); g_free (min_qod); g_free (delta_states); tz_revert (zone, tz); if (ret) return ret; PRINT (out, ""); if (fclose (out)) { g_warning ("%s: fclose failed: %s\n", __FUNCTION__, strerror (errno)); return -1; } return 0; } if (type && (strcmp (type, "prognostic") == 0)) { int ret; ret = print_report_prognostic_xml (out, host, ignore_pagination ? 1 : first_result, ignore_pagination ? -1 : max_results, levels, search_phrase, pos, get, apply_overrides, autofp, host_search_phrase, host_levels, host_first_result, host_max_results, min_cvss_base, result_hosts_only, sort_order, sort_field); g_free (sort_field); g_free (levels); g_free (search_phrase); g_free (min_cvss_base); g_free (min_qod); g_free (delta_states); tz_revert (zone, tz); if (ret) return ret; PRINT (out, ""); if (fclose (out)) { g_warning ("%s: fclose failed: %s\n", __FUNCTION__, strerror (errno)); return -1; } return 0; } uuid = report_uuid (report); if (report_timestamp (uuid, ×tamp)) { free (uuid); tz_revert (zone, tz); return -1; } free (uuid); PRINT (out, "%s", timestamp); g_free (timestamp); start_time = scan_start_time (report); PRINT (out, "%s", start_time); free (start_time); { time_t start_time_epoch; const char *abbrev; gchar *report_zone; start_time_epoch = scan_start_time_epoch (report); abbrev = NULL; if (zone && strlen (zone)) report_zone = g_strdup (zone); else report_zone = setting_timezone (); iso_time_tz (&start_time_epoch, report_zone, &abbrev); if (zone_return) *zone_return = g_strdup (report_zone ? report_zone : ""); PRINT (out, "%s" "%s", report_zone ? report_zone : "Coordinated Universal Time", abbrev ? abbrev : "UTC"); g_free (report_zone); } /* Port summary. */ if (get->details && (delta == 0)) { if (print_report_port_xml (report, out, ignore_pagination ? 0 : first_result, ignore_pagination ? -1 : max_results, sort_order, sort_field, levels, autofp, search_phrase, search_phrase_exact, min_cvss_base, min_qod, apply_overrides)) { tz_revert (zone, tz); return -1; } } /* Prepare result counts. */ report_counts_id_filt (report, &debugs, &holes, &infos, &logs, &warnings, &false_positives, &severity, apply_overrides, NULL, min_cvss_base, min_qod, search_phrase, search_phrase_exact, autofp, &f_debugs, &f_holes, &f_infos, &f_logs, &f_warnings, &f_false_positives, &f_severity); /* Results. */ if (delta && get->details) { #if 0 init_result_iterator (&results, report, 0, 0, -1, sort_order, sort_field, levels, autofp, search_phrase, search_phrase_exact, min_cvss_base, min_qod, apply_overrides); init_result_iterator (&delta_results, delta, 0, 0, -1, sort_order, sort_field, levels, autofp, search_phrase, search_phrase_exact, min_cvss_base, min_qod, apply_overrides); tracef (" delta: %s: REPORT 1:", __FUNCTION__); while (next (&results)) tracef (" delta: %s: %s %s %s %s %.30s", __FUNCTION__, result_iterator_nvt_name (&results), result_iterator_host (&results), result_iterator_type (&results), result_iterator_port (&results), result_iterator_descr (&results)); cleanup_iterator (&results); tracef (" delta: %s: REPORT 1 END", __FUNCTION__); tracef (" delta: %s: REPORT 2:", __FUNCTION__); while (next (&delta_results)) tracef (" delta: %s: %s %s %s %s %.30s", __FUNCTION__, result_iterator_nvt_name (&delta_results), result_iterator_host (&delta_results), result_iterator_type (&delta_results), result_iterator_port (&delta_results), result_iterator_descr (&delta_results)); cleanup_iterator (&delta_results); tracef (" delta: %s: REPORT 2 END", __FUNCTION__); #endif init_result_iterator (&results, report, 0, 0, -1, sort_order, sort_field, levels, autofp, search_phrase, search_phrase_exact, min_cvss_base, min_qod, apply_overrides); init_result_iterator (&delta_results, delta, 0, 0, -1, sort_order, sort_field, levels, autofp, search_phrase, search_phrase_exact, min_cvss_base, min_qod, apply_overrides); } else if (get->details) init_result_iterator (&results, report, 0, ignore_pagination ? 0 : first_result, ignore_pagination ? -1 : max_results, sort_order, sort_field, levels, autofp, search_phrase, search_phrase_exact, min_cvss_base, min_qod, apply_overrides); if (get->details) PRINT (out, "", /* Add 1 for 1 indexing. */ ignore_pagination ? 1 : first_result + 1, ignore_pagination ? -1 : max_results); if (get->details && result_hosts_only) result_hosts = make_array (); else /* Quiet erroneous compiler warning. */ result_hosts = NULL; if (delta && get->details) { gboolean done, delta_done; int changed, gone, new, same; /* A tree of host, tree pairs, where the inner tree is a sorted tree * of port, threat pairs. */ GTree *ports; orig_f_debugs = f_debugs; orig_f_holes = f_holes; orig_f_infos = f_infos; orig_f_logs = f_logs; orig_f_warnings = f_warnings; orig_f_false_positives = f_false_positives; orig_filtered_result_count = filtered_result_count; changed = (strchr (delta_states, 'c') != NULL); gone = (strchr (delta_states, 'g') != NULL); new = (strchr (delta_states, 'n') != NULL); same = (strchr (delta_states, 's') != NULL); ports = g_tree_new_full ((GCompareDataFunc) strcmp, NULL, g_free, (GDestroyNotify) free_host_ports); /* Compare the results in the two iterators, which are sorted. */ tracef (" delta: %s: start", __FUNCTION__); tracef (" delta: %s: sort_field: %s", __FUNCTION__, sort_field); done = !next (&results); delta_done = !next (&delta_results); while (1) { GString *buffer; compare_results_t state; int used, would_use; if (max_results == 0) break; if (done) { if (delta_done) break; if (new) /* Extra results in 'delta_results'. */ do { const char *level; tracef (" delta: %s: extra from report 2: %s", __FUNCTION__, result_iterator_nvt_oid (&results)); if (first_result) { tracef (" delta: skip"); first_result--; continue; } /* Increase the result count. */ level = result_iterator_level (&delta_results); orig_filtered_result_count++; filtered_result_count++; if (strcmp (level, "High") == 0) { orig_f_holes++; f_holes++; } else if (strcmp (level, "Medium") == 0) { orig_f_warnings++; f_warnings++; } else if (strcmp (level, "Low") == 0) { orig_f_infos++; f_infos++; } else if (strcmp (level, "Log") == 0) { orig_f_logs++; f_logs++; } else if (strcmp (level, "False Positive") == 0) { orig_f_false_positives++; f_false_positives++; } tracef (" delta: %s: extra from report 2: %s", __FUNCTION__, result_iterator_nvt_oid (&delta_results)); buffer = g_string_new (""); buffer_results_xml (buffer, &delta_results, task, notes, notes_details, overrides, overrides_details, 0, 0, 0, "new", NULL, 0); PRINT_XML (out, buffer->str); g_string_free (buffer, TRUE); if (result_hosts_only) array_add_new_string (result_hosts, result_iterator_host (&delta_results)); add_port (ports, &delta_results); max_results--; if (max_results == 0) break; } while (next (&delta_results)); delta_done = TRUE; break; } if (delta_done) { /* Extra results in 'results'. */ if (gone) do { tracef (" delta: %s: extra from report 1: %s", __FUNCTION__, result_iterator_nvt_oid (&results)); if (first_result) { tracef (" delta: skip"); first_result--; continue; } buffer = g_string_new (""); buffer_results_xml (buffer, &results, task, notes, notes_details, overrides, overrides_details, 0, 0, 0, "gone", NULL, 0); PRINT_XML (out, buffer->str); g_string_free (buffer, TRUE); if (result_hosts_only) array_add_new_string (result_hosts, result_iterator_host (&results)); add_port (ports, &results); max_results--; if (max_results == 0) break; } while (next (&results)); else do { const char *level; /* Decrease the result count. */ level = result_iterator_level (&results); orig_filtered_result_count--; filtered_result_count--; if (strcmp (level, "High") == 0) { orig_f_holes--; f_holes--; } else if (strcmp (level, "Medium") == 0) { orig_f_warnings--; f_warnings--; } else if (strcmp (level, "Low") == 0) { orig_f_infos--; f_infos--; } else if (strcmp (level, "Log") == 0) { orig_f_logs--; f_logs--; } else if (strcmp (level, "False Positive") == 0) { orig_f_false_positives--; f_false_positives--; } } while (next (&results)); done = TRUE; break; } /* Compare the two results. */ buffer = g_string_new (""); state = compare_and_buffer_results (buffer, &results, &delta_results, task, notes, notes_details, overrides, overrides_details, sort_order, sort_field, changed, gone, new, same, &max_results, &first_result, &used, &would_use); if (state == COMPARE_RESULTS_ERROR) { g_warning ("%s: compare_and_buffer_results failed\n", __FUNCTION__); g_free (sort_field); g_free (levels); g_free (search_phrase); g_free (min_cvss_base); g_free (min_qod); g_free (delta_states); cleanup_iterator (&results); cleanup_iterator (&delta_results); tz_revert (zone, tz); return -1; } PRINT_XML (out, buffer->str); g_string_free (buffer, TRUE); if ((used == 0) && ((state == COMPARE_RESULTS_GONE) || (state == COMPARE_RESULTS_SAME) || (state == COMPARE_RESULTS_CHANGED))) { const char *level; /* Decrease the result count. */ level = result_iterator_level (&results); filtered_result_count--; if (strcmp (level, "High") == 0) { f_holes--; } else if (strcmp (level, "Medium") == 0) { f_warnings--; } else if (strcmp (level, "Low") == 0) { f_infos--; } else if (strcmp (level, "Log") == 0) { f_logs--; } else if (strcmp (level, "False Positive") == 0) { f_false_positives--; } } if ((would_use == 0) && ((state == COMPARE_RESULTS_GONE) || (state == COMPARE_RESULTS_SAME) || (state == COMPARE_RESULTS_CHANGED))) { const char *level; /* Decrease the result count. */ level = result_iterator_level (&results); orig_filtered_result_count--; if (strcmp (level, "High") == 0) { orig_f_holes--; } else if (strcmp (level, "Medium") == 0) { orig_f_warnings--; } else if (strcmp (level, "Low") == 0) { orig_f_infos--; } else if (strcmp (level, "Log") == 0) { orig_f_logs--; } else if (strcmp (level, "False Positive") == 0) { orig_f_false_positives--; } } /* Move on to the next. */ if (state == COMPARE_RESULTS_GONE) { /* "Used" just the 'results' result. */ if (used) { if (result_hosts_only) array_add_new_string (result_hosts, result_iterator_host (&results)); add_port (ports, &results); } done = !next (&results); } else if ((state == COMPARE_RESULTS_SAME) || (state == COMPARE_RESULTS_CHANGED)) { /* "Used" both results. */ if (used) { if (result_hosts_only) array_add_new_string (result_hosts, result_iterator_host (&results)); add_port (ports, &results); } done = !next (&results); delta_done = !next (&delta_results); } else if (state == COMPARE_RESULTS_NEW) { if (would_use) { const char *level; /* Would have "used" just the 'delta_results' result, on * an earlier page. */ /* Increase the result count. */ level = result_iterator_level (&delta_results); orig_filtered_result_count++; if (strcmp (level, "High") == 0) { orig_f_holes++; } else if (strcmp (level, "Medium") == 0) { orig_f_warnings++; } else if (strcmp (level, "Low") == 0) { orig_f_infos++; } else if (strcmp (level, "Log") == 0) { orig_f_logs++; } else if (strcmp (level, "False Positive") == 0) { orig_f_false_positives++; } } if (used) { const char *level; /* "Used" just the 'delta_results' result. */ /* Increase the result count. */ level = result_iterator_level (&delta_results); filtered_result_count++; if (strcmp (level, "High") == 0) { f_holes++; } else if (strcmp (level, "Medium") == 0) { f_warnings++; } else if (strcmp (level, "Low") == 0) { f_infos++; } else if (strcmp (level, "Log") == 0) { f_logs++; } else if (strcmp (level, "False Positive") == 0) { f_false_positives++; } if (result_hosts_only) array_add_new_string (result_hosts, result_iterator_host (&delta_results)); add_port (ports, &delta_results); } delta_done = !next (&delta_results); } else assert (0); } /* Compare remaining results, for the filtered report counts. */ tracef (" delta: %s: counting rest", __FUNCTION__); while (1) { compare_results_t state; int used, would_use; if (done) { if (delta_done) break; if (new) /* Extra results in 'delta_results'. */ do { const char *level; tracef (" delta: %s: extra from report 2: %s", __FUNCTION__, result_iterator_nvt_oid (&delta_results)); /* Increase the result count. */ level = result_iterator_level (&delta_results); orig_filtered_result_count++; if (strcmp (level, "High") == 0) { orig_f_holes++; } else if (strcmp (level, "Medium") == 0) { orig_f_warnings++; } else if (strcmp (level, "Low") == 0) { orig_f_infos++; } else if (strcmp (level, "Log") == 0) { orig_f_logs++; } else if (strcmp (level, "False Positive") == 0) { orig_f_false_positives++; } } while (next (&delta_results)); break; } if (delta_done) { /* Extra results in 'results'. */ if (gone) do { tracef (" delta: %s: extra from report 1: %s", __FUNCTION__, result_iterator_nvt_oid (&results)); /* It's in the count already. */ } while (next (&results)); else do { const char *level; /* Decrease the result count. */ level = result_iterator_level (&results); orig_filtered_result_count--; if (strcmp (level, "High") == 0) { orig_f_holes--; } else if (strcmp (level, "Medium") == 0) { orig_f_warnings--; } else if (strcmp (level, "Low") == 0) { orig_f_infos--; } else if (strcmp (level, "Log") == 0) { orig_f_logs--; } else if (strcmp (level, "False Positive") == 0) { orig_f_false_positives--; } } while (next (&results)); break; } /* Compare the two results. */ state = compare_and_buffer_results (NULL, &results, &delta_results, task, notes, notes_details, overrides, overrides_details, sort_order, sort_field, changed, gone, new, same, &max_results, &first_result, &used, &would_use); if (state == COMPARE_RESULTS_ERROR) { g_warning ("%s: compare_and_buffer_results failed\n", __FUNCTION__); g_free (sort_field); g_free (levels); g_free (search_phrase); g_free (min_cvss_base); g_free (min_qod); g_free (delta_states); cleanup_iterator (&results); cleanup_iterator (&delta_results); tz_revert (zone, tz); return -1; } if (state == COMPARE_RESULTS_NEW) { if (used) { const char *level; /* "Used" just the 'delta_results' result. */ /* Increase the result count. */ level = result_iterator_level (&delta_results); orig_filtered_result_count++; if (strcmp (level, "High") == 0) { orig_f_holes++; } else if (strcmp (level, "Medium") == 0) { orig_f_warnings++; } else if (strcmp (level, "Low") == 0) { orig_f_infos++; } else if (strcmp (level, "Log") == 0) { orig_f_logs++; } else if (strcmp (level, "False Positive") == 0) { orig_f_false_positives++; } } } else if (used) { /* It's in the count already. */ } else { const char *level; /* Decrease the result count. */ level = result_iterator_level (&results); orig_filtered_result_count--; if (strcmp (level, "High") == 0) { orig_f_holes--; } else if (strcmp (level, "Medium") == 0) { orig_f_warnings--; } else if (strcmp (level, "Low") == 0) { orig_f_infos--; } else if (strcmp (level, "Log") == 0) { orig_f_logs--; } else if (strcmp (level, "False Positive") == 0) { orig_f_false_positives--; } } /* Move on to the next. */ if (state == COMPARE_RESULTS_GONE) { /* "Used" just the 'results' result. */ done = !next (&results); } else if ((state == COMPARE_RESULTS_SAME) || (state == COMPARE_RESULTS_CHANGED)) { /* "Used" both results. */ done = !next (&results); delta_done = !next (&delta_results); } else if (state == COMPARE_RESULTS_NEW) { /* "Used" just the 'delta_results' result. */ delta_done = !next (&delta_results); } else assert (0); } PRINT (out, ""); /* Write ports to file. */ PRINT (out, "", /* Add 1 for 1 indexing. */ first_result + 1, max_results); if (sort_field == NULL || strcmp (sort_field, "port")) { if (sort_order) g_tree_foreach (ports, print_host_ports_by_severity_asc, out); else g_tree_foreach (ports, print_host_ports_by_severity_desc, out); } else if (sort_order) g_tree_foreach (ports, print_host_ports, out); else g_tree_foreach (ports, print_host_ports_desc, out); g_tree_destroy (ports); PRINT (out, ""); } else if (get->details) { while (next (&results)) { GString *buffer = g_string_new (""); buffer_results_xml (buffer, &results, task, notes, notes_details, overrides, overrides_details, 1, 1, 0, NULL, NULL, 0); PRINT_XML (out, buffer->str); g_string_free (buffer, TRUE); if (result_hosts_only) array_add_new_string (result_hosts, result_iterator_host (&results)); } PRINT (out, ""); } if (get->details) cleanup_iterator (&results); if (delta && get->details) cleanup_iterator (&delta_results); /* Print result counts and severity. */ if (delta) /** @todo The f_debugs, etc. vars are setup to give the page count. */ PRINT (out, "" "%i" "%i" "%i" "%i" "%i" "%i" "" "%i" "" "", orig_filtered_result_count, (strchr (levels, 'd') ? orig_f_debugs : 0), (strchr (levels, 'h') ? orig_f_holes : 0), (strchr (levels, 'l') ? orig_f_infos : 0), (strchr (levels, 'g') ? orig_f_logs : 0), (strchr (levels, 'm') ? orig_f_warnings : 0), (strchr (levels, 'f') ? orig_f_false_positives : 0)); else { PRINT (out, "" "%i" "%i" "%i" "%i%i" "%i%i" "%i%i" "%i%i" "%i%i" "" "%i" "%i" "" "", result_count, result_count, filtered_result_count, debugs, (strchr (levels, 'd') ? f_debugs : 0), holes, (strchr (levels, 'h') ? f_holes : 0), infos, (strchr (levels, 'l') ? f_infos : 0), logs, (strchr (levels, 'g') ? f_logs : 0), warnings, (strchr (levels, 'm') ? f_warnings : 0), false_positives, (strchr (levels, 'f') ? f_false_positives : 0)); PRINT (out, "" "%1.1f" "%1.1f" "", severity, f_severity); } if (host_summary) { host_summary_buffer = g_string_new (""); g_string_append_printf (host_summary_buffer, " %-15s %-16s End\n", "Host", "Start"); } else host_summary_buffer = NULL; if (get->details && result_hosts_only) { gchar *host; int index = 0; array_terminate (result_hosts); while ((host = g_ptr_array_index (result_hosts, index++))) { gboolean present; iterator_t hosts; init_host_iterator (&hosts, report, host, 0); present = next (&hosts); if (delta && (present == FALSE)) { cleanup_iterator (&hosts); init_host_iterator (&hosts, delta, host, 0); present = next (&hosts); } if (present) { host_summary_append (host_summary_buffer, host, host_iterator_start_time (&hosts), host_iterator_end_time (&hosts)); PRINT (out, "" "%s" "%s" "%s", host, host_iterator_start_time (&hosts), host_iterator_end_time (&hosts) ? host_iterator_end_time (&hosts) : ""); if (print_report_host_details_xml (host_iterator_report_host (&hosts), out)) { tz_revert (zone, tz); if (host_summary_buffer) g_string_free (host_summary_buffer, TRUE); return -1; } PRINT (out, ""); PRINT (out, "" "%s%s" "", host, host_iterator_start_time (&hosts)); PRINT (out, "" "%s%s" "", host, host_iterator_end_time (&hosts) ? host_iterator_end_time (&hosts) : ""); } cleanup_iterator (&hosts); } array_free (result_hosts); } else if (get->details) { iterator_t hosts; init_host_iterator (&hosts, report, NULL, 0); while (next (&hosts)) { host_summary_append (host_summary_buffer, host_iterator_host (&hosts), host_iterator_start_time (&hosts), host_iterator_end_time (&hosts)); PRINT (out, "" "%s" "%s" "%s", host_iterator_host (&hosts), host_iterator_start_time (&hosts), host_iterator_end_time (&hosts) ? host_iterator_end_time (&hosts) : ""); if (print_report_host_details_xml (host_iterator_report_host (&hosts), out)) { tz_revert (zone, tz); if (host_summary_buffer) g_string_free (host_summary_buffer, TRUE); return -1; } PRINT (out, ""); PRINT (out, "%s%s", host_iterator_host (&hosts), host_iterator_start_time (&hosts)); } cleanup_iterator (&hosts); init_host_iterator (&hosts, report, NULL, 0); while (next (&hosts)) PRINT (out, "%s%s", host_iterator_host (&hosts), host_iterator_end_time (&hosts) ? host_iterator_end_time (&hosts) : ""); cleanup_iterator (&hosts); } end_time = scan_end_time (report); PRINT (out, "%s", end_time); free (end_time); if (delta == 0 && print_report_errors_xml (report, out)) { tz_revert (zone, tz); if (host_summary_buffer) g_string_free (host_summary_buffer, TRUE); return -1; } PRINT (out, ""); g_free (sort_field); g_free (levels); g_free (search_phrase); g_free (min_cvss_base); g_free (min_qod); g_free (delta_states); if (host_summary && host_summary_buffer) *host_summary = g_string_free (host_summary_buffer, FALSE); if (fclose (out)) { g_warning ("%s: fclose failed: %s\n", __FUNCTION__, strerror (errno)); return -1; } return 0; } /** * @brief Generate a report. * * @param[in] report Report. * @param[in] report_format Report format. * @param[in] filt_id ID of filter or NULL, overrides other args. * @param[in] sort_order Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "type". * @param[in] result_hosts_only Whether to show only hosts with results. * @param[in] min_cvss_base Minimum CVSS base of included results. All * results if NULL. * @param[in] min_qod Minimum QoD of included results. All * results if NULL. * @param[in] levels String describing threat levels (message types) * to include in count (for example, "hmlgd" for * High, Medium, Low, loG and Debug). All levels if * NULL. * @param[in] delta_states Delta states. Allows caller to specify the * value for the delta_states param in the filter * string. * @param[in] apply_overrides Whether to apply overrides. * @param[in] search_phrase Phrase that results must include. All results * if NULL or "". * @param[in] autofp Whether to apply auto FP filter. * @param[in] notes Whether to include notes. * @param[in] notes_details If notes, Whether to include details. * @param[in] overrides Whether to include overrides. * @param[in] overrides_details If overrides, Whether to include details. * @param[in] first_result The result to start from. The results are 0 * indexed. * @param[in] max_results The maximum number of results returned. * @param[in] type Type of report: NULL or "scan". * @param[out] output_length NULL or location for length of return. * @param[out] extension NULL or location for report format extension. * Only defined on success. * @param[out] content_type NULL or location for report format content * type. Only defined on success. * @param[in] zone Timezone. NULL or "" for user's timezone. * @param[out] filter_term_return Filter term used in report. * @param[out] zone_return Actual zone used in report. * @param[out] host_summary Summary of results per host. * * @return Contents of report on success, NULL on error. */ gchar * manage_report (report_t report, report_format_t report_format, const char *filt_id, int sort_order, const char* sort_field, int result_hosts_only, const char *min_cvss_base, const char *min_qod, const char *levels, const char *delta_states, int apply_overrides, const char *search_phrase, int autofp, int notes, int notes_details, int overrides, int overrides_details, int first_result, int max_results, const char *type, gsize *output_length, gchar **extension, gchar **content_type, const char *zone, gchar **filter_term_return, gchar **zone_return, gchar **host_summary) { task_t task; gchar *xml_file; char xml_dir[] = "/tmp/openvasmd_XXXXXX"; int ret; get_data_t get; memset (&get, 0, sizeof (get)); if (type && strcmp (type, "scan")) return NULL; /* Print the report as XML to a file. */ if (((report_format_predefined (report_format) == 0) && (report_format_trust (report_format) != TRUST_YES)) || (report_task (report, &task))) { return NULL; } if (mkdtemp (xml_dir) == NULL) { g_warning ("%s: mkdtemp failed\n", __FUNCTION__); return NULL; } xml_file = g_strdup_printf ("%s/report.xml", xml_dir); get.filt_id = filt_id ? g_strdup (filt_id) : NULL; get.details = 1; ret = print_report_xml (report, 0, task, xml_file, &get, sort_order, sort_field, result_hosts_only, min_cvss_base, min_qod, report_format, levels, delta_states, apply_overrides, search_phrase, autofp, notes, notes_details, overrides, overrides_details, first_result, max_results, type, NULL, 0, NULL, NULL, 0, 0, 0, zone, filter_term_return, zone_return, host_summary); g_free (get.filt_id); if (ret) { g_free (xml_file); return NULL; } /* Pass the file to the report format generate script, sending the output * to a file. */ { iterator_t formats; const char *uuid_format; gchar *script, *script_dir; get_data_t report_format_get; /* Setup file names. */ memset (&report_format_get, '\0', sizeof (report_format_get)); report_format_get.id = report_format_uuid (report_format); init_report_format_iterator (&formats, &report_format_get); if (next (&formats) == FALSE) { g_free (xml_file); cleanup_iterator (&formats); return NULL; } /* Set convenience return parameters. */ assert (report_format_iterator_extension (&formats)); assert (report_format_iterator_content_type (&formats)); if (extension) *extension = g_strdup (report_format_iterator_extension (&formats)); if (content_type) *content_type = g_strdup (report_format_iterator_content_type (&formats)); uuid_format = get_iterator_uuid (&formats); if (report_format_global (report_format)) script_dir = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "global_report_formats", uuid_format, NULL); else { gchar *owner; owner = sql_string ("SELECT uuid FROM users" " WHERE id = (SELECT owner FROM" " report_formats WHERE id = %llu);", report_format); script_dir = g_build_filename (OPENVAS_STATE_DIR, "openvasmd", "report_formats", owner, uuid_format, NULL); g_free (owner); } cleanup_iterator (&formats); script = g_build_filename (script_dir, "generate", NULL); if (!g_file_test (script, G_FILE_TEST_EXISTS)) { g_free (script); g_free (script_dir); if (extension) g_free (*extension); if (content_type) g_free (*content_type); g_free (xml_file); return NULL; } { gchar *output_file, *command; char *previous_dir; int ret; /* Change into the script directory. */ /** @todo NULL arg is glibc extension. */ previous_dir = getcwd (NULL, 0); if (previous_dir == NULL) { g_warning ("%s: Failed to getcwd: %s\n", __FUNCTION__, strerror (errno)); g_free (previous_dir); g_free (script); g_free (script_dir); g_free (xml_file); if (extension) g_free (*extension); if (content_type) g_free (*content_type); return NULL; } if (chdir (script_dir)) { g_warning ("%s: Failed to chdir: %s\n", __FUNCTION__, strerror (errno)); g_free (previous_dir); g_free (script); g_free (script_dir); g_free (xml_file); if (extension) g_free (*extension); if (content_type) g_free (*content_type); return NULL; } g_free (script_dir); output_file = g_strdup_printf ("%s/report.out", xml_dir); /* Call the script. */ command = g_strdup_printf ("%s %s > %s" " 2> /dev/null", script, xml_file, output_file); g_free (script); g_debug (" command: %s\n", command); if (geteuid () == 0) { pid_t pid; struct passwd *nobody; /* Run the command with lower privileges in a fork. */ nobody = getpwnam ("nobody"); if ((nobody == NULL) || chown (xml_dir, nobody->pw_uid, nobody->pw_gid) || chown (xml_file, nobody->pw_uid, nobody->pw_gid)) { g_warning ("%s: Failed to set dir permissions: %s\n", __FUNCTION__, strerror (errno)); g_free (previous_dir); g_free (output_file); g_free (xml_file); if (extension) g_free (*extension); if (content_type) g_free (*content_type); return NULL; } g_free (xml_file); pid = fork (); switch (pid) { case 0: { /* Child. Drop privileges, run command, exit. */ cleanup_manage_process (FALSE); if (setgroups (0,NULL)) { g_warning ("%s (child): setgroups: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } if (setgid (nobody->pw_gid)) { g_warning ("%s (child): setgid: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } if (setuid (nobody->pw_uid)) { g_warning ("%s (child): setuid: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } /* RATS: ignore, command is defined above. */ ret = system (command); /* Ignore the shell command exit status, because we've not * specified what it must be in the past. */ if (ret == -1) { g_warning ("%s (child):" " system failed with ret %i, %i, %s\n", __FUNCTION__, ret, WEXITSTATUS (ret), command); exit (EXIT_FAILURE); } exit (EXIT_SUCCESS); } case -1: /* Parent when error. */ g_warning ("%s: Failed to fork: %s\n", __FUNCTION__, strerror (errno)); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); g_free (output_file); g_free (command); if (extension) g_free (*extension); if (content_type) g_free (*content_type); return NULL; break; default: { int status; /* Parent on success. Wait for child, and check result. */ g_free (command); while (waitpid (pid, &status, 0) < 0) { if (errno == ECHILD) { g_warning ("%s: Failed to get child exit status", __FUNCTION__); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); g_free (output_file); if (extension) g_free (*extension); if (content_type) g_free (*content_type); return NULL; } if (errno == EINTR) continue; g_warning ("%s: wait: %s", __FUNCTION__, strerror (errno)); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); g_free (output_file); if (extension) g_free (*extension); if (content_type) g_free (*content_type); return NULL; } if (WIFEXITED (status)) switch (WEXITSTATUS (status)) { case EXIT_SUCCESS: break; case EXIT_FAILURE: default: g_warning ("%s: child failed, %s\n", __FUNCTION__, command); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); g_free (output_file); if (extension) g_free (*extension); if (content_type) g_free (*content_type); return NULL; } else { g_warning ("%s: child failed, %s\n", __FUNCTION__, command); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); g_free (output_file); if (extension) g_free (*extension); if (content_type) g_free (*content_type); return NULL; } /* Child succeeded, continue to process result. */ break; } } } else { /* Just run the command as the current user. */ /* RATS: ignore, command is defined above. */ ret = system (command); if (ret == -1) { g_warning ("%s: system failed with ret %i, %i, %s\n", __FUNCTION__, ret, WEXITSTATUS (ret), command); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); g_free (output_file); g_free (command); if (extension) g_free (*extension); if (content_type) g_free (*content_type); return NULL; } g_free (command); } { GError *get_error; gchar *output; gsize output_len; /* Change back to the previous directory. */ if (chdir (previous_dir)) { g_warning ("%s: Failed to chdir back: %s\n", __FUNCTION__, strerror (errno)); g_free (previous_dir); g_free (output_file); if (extension) g_free (*extension); if (content_type) g_free (*content_type); return NULL; } g_free (previous_dir); /* Read the script output from file. */ get_error = NULL; g_file_get_contents (output_file, &output, &output_len, &get_error); g_free (output_file); if (get_error) { g_warning ("%s: Failed to get output: %s\n", __FUNCTION__, get_error->message); g_error_free (get_error); if (extension) g_free (*extension); if (content_type) g_free (*content_type); return NULL; } /* Remove the directory. */ openvas_file_remove_recurse (xml_dir); /* Return the output. */ if (output_length) *output_length = output_len; return output; } } } } /** * @brief Size of base64 chunk in manage_send_report. */ #define MANAGE_SEND_REPORT_CHUNK64_SIZE 262144 /** * @brief Size of file chunk in manage_send_report. */ #define MANAGE_SEND_REPORT_CHUNK_SIZE (MANAGE_SEND_REPORT_CHUNK64_SIZE * 3 / 4) /** * @brief Generate a report. * * @param[in] report Report. * @param[in] delta_report Report to compare with. * @param[in] report_format Report format. * @param[in] get GET command data. * @param[in] sort_order Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "type". * @param[in] result_hosts_only Whether to show only hosts with results. * @param[in] min_cvss_base Minimum CVSS base of included results. All * results if NULL. * @param[in] min_qod Minimum QoD of included results. All * results if NULL. * @param[in] levels String describing threat levels (message types) * to include in count (for example, "hmlgd" for * High, Medium, Low, loG and Debug). All levels if * NULL. * @param[in] delta_states String describing delta states to include in count * (for example, "sngc" Same, New, Gone and Changed). * All levels if NULL. * @param[in] apply_overrides Whether to apply overrides. * @param[in] search_phrase Phrase that results must include. All results * if NULL or "". * @param[in] autofp Whether to apply auto FP filter. * @param[in] notes Whether to include notes. * @param[in] notes_details If notes, Whether to include details. * @param[in] overrides Whether to include overrides. * @param[in] overrides_details If overrides, Whether to include details. * @param[in] first_result The result to start from. The results are 0 * indexed. * @param[in] max_results The maximum number of results returned. * @param[in] ignore_pagination Whether to ignore pagination. * @param[in] base64 Whether to base64 encode the report. * @param[in] send Function to write to client. * @param[in] send_data_1 Second argument to \p send. * @param[in] send_data_2 Third argument to \p send. * @param[in] alert_id ID of alert to escalate report with, * instead of getting report. NULL to get * report. * @param[in] type Type of report: NULL, "scan" or "assets". * @param[in] host Host or NULL, when type "assets". * @param[in] pos Position of report from end, when host. 1 for * last. * @param[in] host_search_phrase Phrase that results must include. All results * if NULL or "". For hosts. * @param[in] host_levels String describing threat levels (message types) * to include in count (for example, "hmlgd" for * High, Medium, Low, loG and Debug). All levels if * NULL. * @param[in] host_first_result The host result to start from. The results * are 0 indexed. * @param[in] host_max_results The host maximum number of results returned. * @param[in] prefix Text to send to client before the report. * @param[in] zone Timezone. NULL or "" for user's default. * * @return 0 success, -1 error, -2 failed to find alert report format, -3 error * during alert, -4 failed to find alert filter, 1 failed to find alert, * 2 failed to find filter (before anything sent to client). */ int manage_send_report (report_t report, report_t delta_report, report_format_t report_format, const get_data_t *get, int sort_order, const char* sort_field, int result_hosts_only, const char *min_cvss_base, const char *min_qod, const char *levels, const char *delta_states, int apply_overrides, const char *search_phrase, int autofp, int notes, int notes_details, int overrides, int overrides_details, int first_result, int max_results, int ignore_pagination, int base64, gboolean (*send) (const char *, int (*) (const char *, void*), void*), int (*send_data_1) (const char *, void*), void *send_data_2, const char *alert_id, const char *type, const char *host, int pos, const char *host_search_phrase, const char *host_levels, int host_first_result, int host_max_results, const gchar* prefix, const char *zone) { task_t task; gchar *xml_file; char xml_dir[] = "/tmp/openvasmd_XXXXXX"; int ret; if (type && (strcmp (type, "assets") == 0)) task = 0; else if (type && (strcmp (type, "prognostic") == 0)) task = 0; else if (type && (strcmp (type, "scan"))) return -1; else if (report_task (report, &task)) return -1; /* Escalate instead, if requested. */ if (alert_id) { alert_t alert = 0; alert_condition_t condition; alert_method_t method; if (find_alert_with_permission (alert_id, &alert, "get_alerts")) return -1; if (alert == 0) return 1; condition = alert_condition (alert); method = alert_method (alert); ret = escalate_2 (alert, task, report, EVENT_TASK_RUN_STATUS_CHANGED, (void*) TASK_STATUS_DONE, method, condition, /* Report filtering. */ sort_order, sort_field, result_hosts_only, min_cvss_base, min_qod, levels, delta_states, apply_overrides, search_phrase, autofp, notes, notes_details, overrides, overrides_details, first_result, max_results, zone); if (ret == -3) return -4; if (ret == -1) return -3; if (ret) return -2; return 0; } /* Print the report as XML to a file. */ if ((report_format_predefined (report_format) == 0) && (report_format_trust (report_format) != TRUST_YES)) return -1; if (mkdtemp (xml_dir) == NULL) { g_warning ("%s: mkdtemp failed\n", __FUNCTION__); return -1; } xml_file = g_strdup_printf ("%s/report.xml", xml_dir); ret = print_report_xml (report, delta_report, task, xml_file, get, sort_order, sort_field, result_hosts_only, min_cvss_base, min_qod, report_format, levels, delta_states, apply_overrides, search_phrase, autofp, notes, notes_details, overrides, overrides_details, first_result, max_results, type, host, pos, host_search_phrase, host_levels, host_first_result, host_max_results, ignore_pagination, zone, NULL, NULL, NULL); if (ret) { g_free (xml_file); if (ret == 2) return 2; return -1; } /* Pass the file to the report format generate script, sending the output * to a file. */ { iterator_t formats; const char *uuid_format; gchar *script, *script_dir; get_data_t report_format_get; /* Setup file names. */ memset (&report_format_get, '\0', sizeof (report_format_get)); report_format_get.id = report_format_uuid (report_format); init_report_format_iterator (&formats, &report_format_get); if (next (&formats) == FALSE) { g_free (xml_file); cleanup_iterator (&formats); return -1; } uuid_format = get_iterator_uuid (&formats); if (report_format_global (report_format)) script_dir = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "global_report_formats", uuid_format, NULL); else { gchar *owner; owner = sql_string ("SELECT uuid FROM users" " WHERE id = (SELECT owner FROM" " report_formats WHERE id = %llu);", report_format); script_dir = g_build_filename (OPENVAS_STATE_DIR, "openvasmd", "report_formats", owner, uuid_format, NULL); g_free (owner); } cleanup_iterator (&formats); script = g_build_filename (script_dir, "generate", NULL); if (!g_file_test (script, G_FILE_TEST_EXISTS)) { g_free (script); g_free (script_dir); g_free (xml_file); return -1; } { gchar *output_file, *command; char *previous_dir; int ret; /* Change into the script directory. */ /** @todo NULL arg is glibc extension. */ previous_dir = getcwd (NULL, 0); if (previous_dir == NULL) { g_warning ("%s: Failed to getcwd: %s\n", __FUNCTION__, strerror (errno)); g_free (previous_dir); g_free (script); g_free (script_dir); g_free (xml_file); return -1; } if (chdir (script_dir)) { g_warning ("%s: Failed to chdir: %s\n", __FUNCTION__, strerror (errno)); g_free (previous_dir); g_free (script); g_free (script_dir); g_free (xml_file); return -1; } g_free (script_dir); output_file = g_strdup_printf ("%s/report.out", xml_dir); /* Call the script. */ command = g_strdup_printf ("%s %s > %s" " 2> /dev/null", script, xml_file, output_file); g_free (script); g_debug (" command: %s\n", command); if (geteuid () == 0) { pid_t pid; struct passwd *nobody; /* Run the command with lower privileges in a fork. */ nobody = getpwnam ("nobody"); if ((nobody == NULL) || chown (xml_dir, nobody->pw_uid, nobody->pw_gid) || chown (xml_file, nobody->pw_uid, nobody->pw_gid)) { g_warning ("%s: Failed to set dir permissions: %s\n", __FUNCTION__, strerror (errno)); g_free (previous_dir); g_free (xml_file); g_free (output_file); return -1; } g_free (xml_file); pid = fork (); switch (pid) { case 0: { /* Child. Drop privileges, run command, exit. */ cleanup_manage_process (FALSE); if (setgroups (0,NULL)) { g_warning ("%s (child): setgroups: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } if (setgid (nobody->pw_gid)) { g_warning ("%s (child): setgid: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } if (setuid (nobody->pw_uid)) { g_warning ("%s (child): setuid: %s\n", __FUNCTION__, strerror (errno)); exit (EXIT_FAILURE); } /* RATS: ignore, command is defined above. */ ret = system (command); /* Ignore the shell command exit status, because we've not * specified what it must be in the past. */ if (ret == -1) { g_warning ("%s (child):" " system failed with ret %i, %i, %s\n", __FUNCTION__, ret, WEXITSTATUS (ret), command); exit (EXIT_FAILURE); } exit (EXIT_SUCCESS); } case -1: /* Parent when error. */ g_warning ("%s: Failed to fork: %s\n", __FUNCTION__, strerror (errno)); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); g_free (output_file); g_free (command); return -1; break; default: { int status; /* Parent on success. Wait for child, and check result. */ g_free (command); while (waitpid (pid, &status, 0) < 0) { if (errno == ECHILD) { g_warning ("%s: Failed to get child exit status", __FUNCTION__); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); g_free (output_file); return -1; } if (errno == EINTR) continue; g_warning ("%s: wait: %s", __FUNCTION__, strerror (errno)); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); g_free (output_file); return -1; } if (WIFEXITED (status)) switch (WEXITSTATUS (status)) { case EXIT_SUCCESS: break; case EXIT_FAILURE: default: g_warning ("%s: child failed, %s\n", __FUNCTION__, command); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); g_free (output_file); return -1; } else { g_warning ("%s: child failed, %s\n", __FUNCTION__, command); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); g_free (output_file); return -1; } /* Child succeeded, continue to process result. */ break; } } } else { /* Just run the command as the current user. */ g_free (xml_file); /* RATS: ignore, command is defined above. */ ret = system (command); /* Ignore the shell command exit status, because we've not * specified what it must be in the past. */ if (ret == -1) { g_warning ("%s: system failed with ret %i, %i, %s\n", __FUNCTION__, ret, WEXITSTATUS (ret), command); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); g_free (command); g_free (output_file); return -1; } g_free (command); } { char chunk[MANAGE_SEND_REPORT_CHUNK_SIZE + 1]; FILE *stream; /* Change back to the previous directory. */ if (chdir (previous_dir)) { g_warning ("%s: Failed to chdir back: %s\n", __FUNCTION__, strerror (errno)); g_free (previous_dir); g_free (output_file); return -1; } g_free (previous_dir); /* Read the script output from file in chunks, sending to client. */ stream = fopen (output_file, "r"); g_free (output_file); if (stream == NULL) { g_warning ("%s: %s\n", __FUNCTION__, strerror (errno)); return -1; } if (prefix && send (prefix, send_data_1, send_data_2)) { fclose (stream); g_warning ("%s: send prefix error\n", __FUNCTION__); return -1; } while (1) { int left; char *dest; /* Read a chunk. */ left = MANAGE_SEND_REPORT_CHUNK_SIZE; dest = chunk; while (1) { int ret = fread (dest, 1, left, stream); if (ferror (stream)) { fclose (stream); g_warning ("%s: error after fread\n", __FUNCTION__); return -1; } left -= ret; if (left == 0) break; if (feof (stream)) break; dest += ret; } /* Send the chunk. */ if (left < MANAGE_SEND_REPORT_CHUNK_SIZE) { if (base64) { gchar *chunk64; chunk64 = g_base64_encode ((guchar*) chunk, MANAGE_SEND_REPORT_CHUNK_SIZE - left); if (send (chunk64, send_data_1, send_data_2)) { g_free (chunk64); fclose (stream); g_warning ("%s: send error\n", __FUNCTION__); return -1; } g_free (chunk64); } else { chunk[MANAGE_SEND_REPORT_CHUNK_SIZE - left] = '\0'; if (send (chunk, send_data_1, send_data_2)) { fclose (stream); g_warning ("%s: send error\n", __FUNCTION__); return -1; } } } /* Check if there's more. */ if (feof (stream)) break; } fclose (stream); /* Remove the directory. */ openvas_file_remove_recurse (xml_dir); /* Return the output. */ return 0; } } } } /* More task stuff. */ /** @todo Should be on tasks page above. */ /** * @brief Return the number of finished reports associated with a task. * * @param[in] task Task. * * @return Number of reports. */ unsigned int task_finished_report_count (task_t task) { return (unsigned int) sql_int ("SELECT count(*) FROM reports" " WHERE task = %llu" " AND scan_run_status = %u;", task, TASK_STATUS_DONE); } /** * @brief Return the trend of a task, given counts. * * @param[in] holes_a Number of holes on earlier report. * @param[in] warns_a Number of warnings on earlier report. * @param[in] infos_a Number of infos on earlier report. * @param[in] severity_a Severity of earlier report. * @param[in] holes_b Number of holes on later report. * @param[in] warns_b Number of warnings on later report. * @param[in] infos_b Number of infos on later report. * @param[in] severity_b Severity of later report. * * @return "up", "down", "more", "less", "same" or if too few reports "". */ static const char * task_trend_calc (int holes_a, int warns_a, int infos_a, double severity_a, int holes_b, int warns_b, int infos_b, double severity_b) { int threat_a, threat_b; /* Check if the severity score changed. */ if (severity_a > severity_b) return "up"; if (severity_a < severity_b) return "down"; /* Calculate trend. */ if (holes_a > 0) threat_a = 4; else if (warns_a > 0) threat_a = 3; else if (infos_a > 0) threat_a = 2; else threat_a = 1; if (holes_b > 0) threat_b = 4; else if (warns_b > 0) threat_b = 3; else if (infos_b > 0) threat_b = 2; else threat_b = 1; /* Check if the threat level changed. */ if (threat_a > threat_b) return "up"; if (threat_a < threat_b) return "down"; /* Check if the threat count changed in the highest level. */ if (holes_a) { if (holes_a > holes_b) return "more"; if (holes_a < holes_b) return "less"; return "same"; } if (warns_a) { if (warns_a > warns_b) return "more"; if (warns_a < warns_b) return "less"; return "same"; } if (infos_a) { if (infos_a > infos_b) return "more"; if (infos_a < infos_b) return "less"; return "same"; } return "same"; } /** * @brief Return the trend of a task, given counts. * * @param[in] task Task. * @param[in] holes_a Number of holes on earlier report. * @param[in] warns_a Number of warnings on earlier report. * @param[in] infos_a Number of infos on earlier report. * @param[in] severity_a Severity score of earlier report. * @param[in] holes_b Number of holes on later report. * @param[in] warns_b Number of warnings on later report. * @param[in] infos_b Number of infos on later report. * @param[in] severity_b Severity score of later report. * * @return "up", "down", "more", "less", "same" or if too few reports "". */ const char * task_iterator_trend_counts (iterator_t *iterator, int holes_a, int warns_a, int infos_a, double severity_a, int holes_b, int warns_b, int infos_b, double severity_b) { /* Ensure there are enough reports. */ if (task_iterator_finished_reports (iterator) <= 1) return ""; /* Skip running tasks. */ if (task_iterator_run_status (iterator) == TASK_STATUS_RUNNING) return ""; return task_trend_calc (holes_a, warns_a, infos_a, severity_a, holes_b, warns_b, infos_b, severity_b); } /** * @brief Return the trend of a task. * * @param[in] task Task. * @param[in] override Whether to override the threat. * @param[in] min_qod The minimum QoD of results to count. * * @return "up", "down", "more", "less", "same" or if too few reports "". */ const char * task_trend (task_t task, int override, int min_qod) { report_t last_report, second_last_report; int holes_a, warns_a, infos_a, logs_a, false_positives_a; int holes_b, warns_b, infos_b, logs_b, false_positives_b; double severity_a, severity_b; gchar *min_qod_str; /* Ensure there are enough reports. */ if (task_finished_report_count (task) <= 1) return ""; /* Get trend only for authenticated users to avoid caching result counts for dummy or NULL users */ if (current_credentials.uuid == NULL || strcmp (current_credentials.uuid, "") == 0) return ""; /* Skip running and container tasks. */ if (task_run_status (task) == TASK_STATUS_RUNNING) return ""; if (task_target (task) == 0) return NULL; /* Get details of last report. */ task_last_report (task, &last_report); if (last_report == 0) return ""; min_qod_str = g_strdup_printf ("%d", min_qod); /* Count the logs and false positives too, as report_counts_id is faster * with all five. */ if (report_counts_id (last_report, NULL, &holes_a, &infos_a, &logs_a, &warns_a, &false_positives_a, &severity_a, override, NULL, 0, min_qod_str)) /** @todo Either fail better or abort at SQL level. */ abort (); /* Get details of second last report. */ task_second_last_report (task, &second_last_report); if (second_last_report == 0) { g_free (min_qod_str); return ""; } /* Count the logs and false positives too, as report_counts_id is faster * with all five. */ if (report_counts_id (second_last_report, NULL, &holes_b, &infos_b, &logs_b, &warns_b, &false_positives_b, &severity_b, override, NULL, 0, min_qod_str)) //TODO: Make param /** @todo Either fail better or abort at SQL level. */ abort (); g_free (min_qod_str); return task_trend_calc (holes_a, warns_a, infos_a, severity_a, holes_b, warns_b, infos_b, severity_b); } /** * @brief Dummy function. */ void free_tasks () { /* Empty. */ } /** * @brief Make a task. * * The char* parameters name and comment are used directly and freed * when the task is freed. * * @param[in] name The name of the task. * @param[in] comment A comment associated the task. * * @return A pointer to the new task. */ task_t make_task (char* name, char* comment) { task_t task; char* uuid = openvas_uuid_make (); gchar *quoted_name, *quoted_comment; if (uuid == NULL) abort (); quoted_name = name ? sql_quote ((gchar*) name) : NULL; quoted_comment = comment ? sql_quote ((gchar*) comment) : NULL; sql ("INSERT into tasks" " (owner, uuid, name, hidden, comment, schedule," " schedule_next_time, slave, config_location, target_location," " schedule_location, slave_location, alterable, creation_time," " modification_time)" " VALUES ((SELECT id FROM users WHERE users.uuid = '%s')," " '%s', '%s', 0, '%s', 0, 0, 0, 0, 0, 0, 0, 0, m_now ()," " m_now ());", current_credentials.uuid, uuid, quoted_name ? quoted_name : "", quoted_comment ? quoted_comment : ""); task = sql_last_insert_id (); set_task_run_status (task, TASK_STATUS_NEW); sql ("INSERT INTO task_preferences (task, name, value)" " VALUES (%llu, 'in_assets', 'yes')", task); free (uuid); free (name); free (comment); g_free (quoted_name); g_free (quoted_comment); return task; } /** * @brief Complete the creation of a task. * * @param[in] uuid The UUID of the task. */ void make_task_complete (const char *uuid) { task_t task; if (find_task (uuid, &task)) return; if (task == 0) return; event (task, 0, EVENT_TASK_RUN_STATUS_CHANGED, (void*) TASK_STATUS_NEW); } #ifdef S_SPLINT_S typedef /*@only@*/ struct dirent * only_dirent_pointer; #endif /** * @brief Dummy function. * * @return 0. */ int load_tasks () { return 0; } /** * @brief Dummy function. * * @return 0. */ int save_tasks () { return 0; } /** * @brief Set a task parameter. * * The "value" parameter is used directly and freed either immediately or * when the task is freed. * * @param[in] task A pointer to a task. * @param[in] parameter The name of the parameter (in any case): NAME * or COMMENT. * @param[in] value The value of the parameter. * * @return 0 on success, -2 if parameter name error, -3 value error (NULL). */ int set_task_parameter (task_t task, const char* parameter, /*@only@*/ char* value) { /** @todo Free value consistently. */ tracef (" set_task_parameter %u %s\n", task_id (task), parameter ? parameter : "(null)"); if (value == NULL) return -3; if (parameter == NULL) { free (value); return -2; } else if (strcasecmp ("NAME", parameter) == 0) { gchar* quoted_value = sql_quote (value ?: ""); sql ("UPDATE tasks SET name = '%s', modification_time = m_now ()" " WHERE id = %llu;", quoted_value, task); g_free (quoted_value); } else if (strcasecmp ("COMMENT", parameter) == 0) { gchar* quote = sql_nquote (value, strlen (value)); sql ("UPDATE tasks SET comment = '%s', modification_time = m_now ()" " WHERE id = %llu;", quote, task); g_free (quote); } else { free (value); return -2; } return 0; } /** * @brief Create a task from an existing task. * * @param[in] name Name of new task. NULL to copy from existing. * @param[in] comment Comment on new task. NULL to copy from existing. * @param[in] task_id UUID of existing task. * @param[in] alterable Whether the new task will be alterable. * @param[out] new_task New task. * * @return 0 success, 2 failed to find existing task, 99 permission denied, * -1 error. */ int copy_task (const char* name, const char* comment, const char *task_id, int alterable, task_t* new_task) { task_t new, old; int ret; assert (current_credentials.uuid); if (task_id == NULL) return -1; sql_begin_immediate (); // FIX task names are allowed to clash ret = copy_resource_lock ("task", name, comment, task_id, "config, target, schedule, schedule_periods," " schedule_next_time, slave, config_location," " target_location, schedule_location," " slave_location, hosts_ordering, scanner", 1, &new, &old); if (ret) { sql ("ROLLBACK;"); return ret; } sql ("UPDATE tasks SET alterable = %i, hidden = 0 WHERE id = %llu;", alterable, new); set_task_run_status (new, TASK_STATUS_NEW); sql ("INSERT INTO task_preferences (task, name, value)" " SELECT %llu, name, value FROM task_preferences" " WHERE task = %llu;", new, old); sql ("INSERT INTO task_alerts (task, alert, alert_location)" " SELECT %llu, alert, alert_location FROM task_alerts" " WHERE task = %llu;", new, old); // FIX do this for all types, or none sql ("INSERT INTO permissions" " (uuid, owner, name, comment, resource_type, resource, resource_uuid," " resource_location, subject_type, subject, subject_location," " creation_time, modification_time)" " SELECT make_uuid (), (SELECT owner FROM tasks WHERE id = %llu)," " name, comment, resource_type, %llu," " (SELECT uuid FROM tasks WHERE id = %llu)," " resource_location, subject_type, subject, subject_location," " m_now (), m_now ()" " FROM permissions" " WHERE owner = (SELECT owner FROM tasks WHERE id = %llu)" " AND resource_type = 'task'" " AND resource_location = " G_STRINGIFY (LOCATION_TABLE) " AND resource = %llu;", new, new, new, old, old); if (ret) { sql ("ROLLBACK;"); return ret; } sql ("COMMIT;"); if (new_task) *new_task = new; return 0; } /** * @brief Request deletion of a task. * * Stop the task beforehand with \ref stop_task_internal, if it is running. * * Used only for CREATE_TASK in omp.c. Always ultimate. * * @param[in] task_pointer A pointer to the task. * * @return 0 if deleted, 1 if delete requested, 2 if task is hidden, * -1 if error, -5 if scanner is down. */ int request_delete_task (task_t* task_pointer) { task_t task = *task_pointer; int hidden; tracef (" request delete task %u\n", task_id (task)); hidden = sql_int ("SELECT hidden from tasks WHERE id = %llu;", *task_pointer); if (hidden == 1) return 2; /* Technically the task could be in the trashcan, if someone gets the UUID * with GET_TASKS before the CREATE_TASK finishes, and removes the task. * Pretend it was deleted. There'll be half a task in the trashcan. */ if (hidden == 2) return 0; if (current_credentials.uuid == NULL) return -1; switch (stop_task_internal (task)) { case 0: /* Stopped. */ return delete_task_lock (task, 1); case 1: /* Stop requested. */ set_task_run_status (task, TASK_STATUS_DELETE_ULTIMATE_REQUESTED); return 1; default: /* Programming error. */ assert (0); case -1: /* Error. */ return -1; break; case -5: /* Scanner down. */ return -5; break; } return 0; } static gboolean find_trash_task (const char*, task_t*); /** * @brief Request deletion of a task. * * Stop the task beforehand with \ref stop_task_internal, if it is running. * * @param[in] task_id UUID of task. * @param[in] ultimate Whether to remove entirely, or to trashcan. * * @return 0 if deleted, 1 if delete requested, 2 if task is hidden, 3 failed * to find task, 99 permission denied, -1 if error, -5 if scanner is * down. */ int request_delete_task_uuid (const char *task_id, int ultimate) { task_t task = 0; /* Tasks have special handling for the trashcan. Other resources have trash * tables, like targets_trash. Tasks are marked as trash in the tasks table * by giving the "hidden" field a value of 2. This means that the results can * stay in the results table and will still refer to the correct task. This * should all work because there is already handling of the hidden flag * everywhere else. */ tracef (" request delete task %s\n", task_id); sql_begin_immediate (); if (user_may ("delete_task") == 0) { sql ("ROLLBACK;"); return 99; } if (find_task_with_permission (task_id, &task, "delete_task")) { sql ("ROLLBACK;"); return -1; } if (task == 0) { if (find_trash_task (task_id, &task)) { sql ("ROLLBACK;"); return -1; } if (task == 0) { sql ("ROLLBACK;"); return 3; } if (ultimate == 0) { /* It's already in the trashcan. */ sql ("COMMIT;"); return 0; } if (delete_reports (task)) { sql ("ROLLBACK;"); return -1; } permissions_set_orphans ("task", task, LOCATION_TRASH); tags_set_orphans ("task", task, LOCATION_TRASH); sql ("DELETE FROM results WHERE task = %llu;", task); sql ("DELETE FROM task_alerts WHERE task = %llu;", task); sql ("DELETE FROM task_files WHERE task = %llu;", task); sql ("DELETE FROM task_preferences WHERE task = %llu;", task); sql ("DELETE FROM tasks WHERE id = %llu;", task); sql ("COMMIT;"); return 0; } if (sql_int ("SELECT hidden from tasks WHERE id = %llu;", task) == 1) { sql ("ROLLBACK;"); return 2; } if (current_credentials.uuid == NULL) { sql ("ROLLBACK;"); return -1; } switch (stop_task_internal (task)) { case 0: /* Stopped. */ { int ret; ret = delete_task (task, ultimate); if (ret) sql ("ROLLBACK;"); else sql ("COMMIT;"); return ret; } case 1: /* Stop requested. */ if (ultimate) set_task_run_status (task, TASK_STATUS_DELETE_ULTIMATE_REQUESTED); else set_task_run_status (task, TASK_STATUS_DELETE_REQUESTED); sql ("COMMIT;"); return 1; default: /* Programming error. */ assert (0); case -1: /* Error. */ sql ("ROLLBACK;"); return -1; break; case -5: /* Scanner down. */ sql ("ROLLBACK;"); return -5; break; } /*@notreached@*/ sql ("COMMIT;"); return 0; } /** * @brief Complete deletion of a task. * * The caller must do the locking, and must do the hidden check. * * The caller must handle the case where the task is already in the trashcan. * * @param[in] task The task. * @param[in] ultimate Whether to remove entirely, or to trashcan. * * @return 0 on success, 1 if task is hidden, -1 on error. */ int delete_task (task_t task, int ultimate) { tracef (" delete task %llu\n", task); /** @todo Many other places just assert this. */ if (current_credentials.uuid == NULL) return -1; if (ultimate) { if (delete_reports (task)) return -1; permissions_set_orphans ("task", task, task_in_trash (task) ? LOCATION_TRASH : LOCATION_TABLE); tags_set_orphans ("task", task, task_in_trash (task) ? LOCATION_TRASH : LOCATION_TABLE); sql ("DELETE FROM results WHERE task = %llu;", task); sql ("DELETE FROM task_alerts WHERE task = %llu;", task); sql ("DELETE FROM task_files WHERE task = %llu;", task); sql ("DELETE FROM task_preferences WHERE task = %llu;", task); sql ("DELETE FROM tasks WHERE id = %llu;", task); } else { permissions_set_locations ("task", task, task, LOCATION_TRASH); tags_set_locations ("task", task, task, LOCATION_TRASH); sql ("UPDATE tags SET resource_location = " G_STRINGIFY (LOCATION_TRASH) " WHERE resource_type = 'report'" " AND resource IN (SELECT id FROM reports" " WHERE reports.task = %llu);", task); sql ("UPDATE tags SET resource_location = " G_STRINGIFY (LOCATION_TRASH) " WHERE resource_type = 'result'" " AND resource IN (SELECT results.id FROM results" " WHERE results.task = %llu);", task); sql ("UPDATE tags_trash SET resource_location = " G_STRINGIFY (LOCATION_TRASH) " WHERE resource_type = 'report'" " AND resource IN (SELECT id FROM reports" " WHERE reports.task = %llu);", task); sql ("UPDATE tags_trash SET resource_location = " G_STRINGIFY (LOCATION_TRASH) " WHERE resource_type = 'result'" " AND resource IN (SELECT results.id FROM results" " WHERE results.task = %llu);", task); sql ("UPDATE tasks SET hidden = 2 WHERE id = %llu;", task); } return 0; } /** * @brief Complete deletion of a task. * * This sets up a transaction around the delete. * * @param[in] task The task. * @param[in] ultimate Whether to remove entirely, or to trashcan. * * @return 0 on success, 1 if task is hidden, -1 on error. */ int delete_task_lock (task_t task, int ultimate) { int ret; tracef (" delete task %llu\n", task); sql_begin_exclusive (); if (sql_int ("SELECT hidden FROM tasks WHERE id = %llu;", task)) { sql ("ROLLBACK;"); return -1; } /** @todo Many other places just assert this. */ if (current_credentials.uuid == NULL) { sql ("ROLLBACK;"); return -1; } ret = delete_task (task, ultimate); if (ret) sql ("ROLLBACK;"); else sql ("COMMIT;"); return ret; } /** * @brief Delete all trash tasks. * * The caller must do the transaction. * * @return 0 on success, -1 on error. */ static int delete_trash_tasks () { iterator_t tasks; init_user_task_iterator (&tasks, 1); while (next (&tasks)) { task_t task; task = get_iterator_resource (&tasks); if (delete_reports (task)) { cleanup_iterator (&tasks); return -1; } sql ("DELETE FROM results WHERE task = %llu;", task); sql ("DELETE FROM task_alerts WHERE task = %llu;", task); sql ("DELETE FROM task_files WHERE task = %llu;", task); sql ("DELETE FROM task_preferences WHERE task = %llu;", task); sql ("DELETE FROM tasks WHERE id = %llu;", task); } cleanup_iterator (&tasks); return 0; } /** * @brief Append text to the comment associated with a task. * * @param[in] task A pointer to the task. * @param[in] text The text to append. * @param[in] length Length of the text. */ void append_to_task_comment (task_t task, const char* text, /*@unused@*/ int length) { append_to_task_string (task, "comment", text); } /** * @brief Append text to the name associated with a task. * * @param[in] task A pointer to the task. * @param[in] text The text to append. * @param[in] length Length of the text. */ void append_to_task_name (task_t task, const char* text, /*@unused@*/ int length) { append_to_task_string (task, "name", text); } /** * @brief Set the ports for a particular host in a scan. * * @param[in] report Report associated with scan. * @param[in] host Host. * @param[in] current New value for port currently being scanned. * @param[in] max New value for last port to be scanned. */ void set_scan_ports (report_t report, const char* host, unsigned int current, unsigned int max) { sql ("UPDATE report_hosts SET current_port = %i, max_port = %i" " WHERE host = '%s' AND report = %llu;", current, max, host, report); } /** * @brief Find a task given an identifier. * * @param[in] uuid A task identifier. * @param[out] task Task return, 0 if succesfully failed to find task. * * @return FALSE on success (including if failed to find task), TRUE on error. */ gboolean find_task (const char* uuid, task_t* task) { if (user_owns_uuid ("task", uuid, 0) == 0) { *task = 0; return FALSE; } switch (sql_int64 (task, "SELECT id FROM tasks WHERE uuid = '%s'" " AND hidden != 2;", uuid)) { case 0: break; case 1: /* Too few rows in result of query. */ *task = 0; break; default: /* Programming error. */ assert (0); case -1: return TRUE; break; } return FALSE; } /** * @brief Find a task for a specific permission, given a UUID. * * @param[in] uuid UUID of task. * @param[out] task Task return, 0 if succesfully failed to find task. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find task), TRUE on error. */ gboolean find_task_with_permission (const char* uuid, task_t* task, const char *permission) { return find_resource_with_permission ("task", uuid, task, permission, 0); } /** * @brief Find a task in the trashcan for a specific permission, given a UUID. * * @param[in] uuid UUID of task. * @param[out] task Task return, 0 if succesfully failed to find task. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find task), TRUE on error. */ gboolean find_trash_task_with_permission (const char* uuid, task_t* task, const char *permission) { return find_resource_with_permission ("task", uuid, task, permission, 1); } /** * @brief Find a task in the trashcan, given an identifier. * * @param[in] uuid A task identifier. * @param[out] task Task return, 0 if succesfully failed to find task. * * @return FALSE on success (including if failed to find task), TRUE on error. */ static gboolean find_trash_task (const char* uuid, task_t* task) { if (user_owns_uuid ("task", uuid, 1) == 0) { *task = 0; return FALSE; } switch (sql_int64 (task, "SELECT id FROM tasks WHERE uuid = '%s'" " AND hidden = 2;", uuid)) { case 0: break; case 1: /* Too few rows in result of query. */ *task = 0; break; default: /* Programming error. */ assert (0); case -1: return TRUE; break; } return FALSE; } /** * @brief Find a report for a specific permission, given a UUID. * * @param[in] uuid UUID of report. * @param[out] report Report return, 0 if succesfully failed to find * report. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find report), TRUE on error. */ gboolean find_report_with_permission (const char* uuid, report_t* report, const char *permission) { return find_resource_with_permission ("report", uuid, report, permission, 0); } /** * @brief Reset all running information for a task. * * @param[in] task Task. */ void reset_task (task_t task) { sql ("UPDATE tasks SET" " start_time = 0," " end_time = 0" " WHERE id = %llu;", task); } /** * @brief Add a file to a task, or update the file on the task. * * @param[in] task Task. * @param[in] name Name of file. * @param[in] content Content for file in base64 encoding. */ void manage_task_update_file (task_t task, const char *name, const void *content) { gchar* quoted_name = sql_quote (name); gchar* quoted_content = sql_quote (content); /** @todo Probably better to save ASCII instead of base64. */ if (sql_int ("SELECT count(*) FROM task_files" " WHERE task = %llu AND name = '%s';", task, quoted_name)) { /* Update the existing file. */ sql ("UPDATE task_files SET content = '%s'" " WHERE task = %llu AND name = '%s';", quoted_content, task, quoted_name); } else { /* Insert the file. */ sql ("INSERT INTO task_files (task, name, content)" " VALUES (%llu, '%s', '%s');", task, quoted_name, quoted_content); } sql ("UPDATE tasks SET modification_time = m_now () WHERE id = %llu;", task); g_free (quoted_name); g_free (quoted_content); } /** * @brief Remove a file on a task. * * @param[in] task Task. * @param[in] name Name of file. * * @return 0 success, -1 error. */ int manage_task_remove_file (task_t task, const char *name) { if (sql_int ("SELECT count(*) FROM task_files" " WHERE task = %llu AND name = '%s';", task)) { gchar* quoted_name = sql_quote (name); sql ("DELETE FROM task_files WHERE task = %llu AND name = '%s';", task, quoted_name); sql ("UPDATE tasks SET modification_time = m_now () WHERE id = %llu;", task); g_free (quoted_name); return 0; } return -1; } /** * @brief Initialise a task file iterator. * * @param[in] iterator Iterator. * @param[in] task Task. * @param[in] file File name, NULL for all files. */ void init_task_file_iterator (iterator_t* iterator, task_t task, const char* file) { gchar* sql; if (file) { gchar *quoted_file = sql_nquote (file, strlen (file)); sql = g_strdup_printf ("SELECT name, content, length(content)" " FROM task_files" " WHERE task = %llu" " AND name = '%s';", task, quoted_file); g_free (quoted_file); } else sql = g_strdup_printf ("SELECT name, content, length(content)" " FROM task_files" " WHERE task = %llu;", task); init_iterator (iterator, sql); g_free (sql); } /** * @brief Get the name of the file from a task file iterator. * * @param[in] iterator Iterator. * * @return Name of the file or NULL if iteration is complete. */ DEF_ACCESS (task_file_iterator_name, 0); /** * @brief Get the content of the file from a task file iterator. * * @param[in] iterator Iterator. * * @return Content of the file or NULL if iteration is complete. */ DEF_ACCESS (task_file_iterator_content, 1); /* Targets. */ /** * @brief Get the maximum allowed number of hosts per target. * * @return Maximum. */ int manage_max_hosts () { return max_hosts; } /** * @brief Set the maximum allowed number of hosts per target. * * @param[in] new_max New max_hosts value. */ void manage_set_max_hosts (int new_max) { max_hosts = new_max; } /** * @brief Find a target for a specific permission, given a UUID. * * @param[in] uuid UUID of target. * @param[out] target Target return, 0 if succesfully failed to find target. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find target), TRUE on error. */ gboolean find_target_with_permission (const char* uuid, target_t* target, const char *permission) { return find_resource_with_permission ("target", uuid, target, permission, 0); } /** * @brief Return number of hosts described by a hosts string. * * @param[in] given_hosts String describing hosts. * @param[in] exclude_hosts String describing hosts excluded from given set. * * @return Number of hosts, or -1 on error. */ int manage_count_hosts (const char *given_hosts, const char *exclude_hosts) { int count; openvas_hosts_t *hosts; hosts = openvas_hosts_new_with_max (given_hosts, manage_max_hosts ()); if (hosts == NULL) return -1; if (exclude_hosts) /* Don't resolve hostnames in excluded hosts. */ openvas_hosts_exclude (hosts, exclude_hosts, 0); count = openvas_hosts_count (hosts); openvas_hosts_free (hosts); return count; } /** * @brief Trim leading and trailing space from a hosts string. * * @param[in] string String. May be modified. * * @return Either string or some address within string. */ static gchar * trim_hosts (gchar *string) { gchar *host, *end; /* Trim leading and trailing space. */ host = string; while ((*host == ' ') || (*host == '\t')) host++; end = host; while (*end) { if ((*end == ' ') || (*end == '\t')) { *end = '\0'; break; } end++; } return host; } /** * @brief Clean a hosts string. * * @param[in] given_hosts String describing hosts. * @param[out] max Max number of hosts, adjusted for duplicates. * * @return Freshly allocated new hosts string, or NULL on error. */ gchar* clean_hosts (const char *given_hosts, int *max) { array_t *clean_array; GString *clean; gchar **split, **point, *hosts, *hosts_start, *host; guint index; /* Treat newlines like commas. */ hosts = hosts_start = g_strdup (given_hosts); while (*hosts) { if (*hosts == '\n') *hosts = ','; hosts++; } split = g_strsplit (hosts_start, ",", 0); g_free (hosts_start); point = split; if ((point == NULL) || (*point == NULL)) { g_strfreev (split); return g_strdup (""); } clean_array = make_array (); while (*point) { host = trim_hosts (*point); if (*host) { /* Prevent simple duplicates. */ if (array_find_string (clean_array, host) == NULL) array_add (clean_array, host); else if (max) (*max)--; } point += 1; } clean = g_string_new (""); host = (gchar*) g_ptr_array_index (clean_array, 0); if (host) g_string_append_printf (clean, "%s", host); for (index = 1; index < clean_array->len; index++) { host = (gchar*) g_ptr_array_index (clean_array, index); if (host) g_string_append_printf (clean, ", %s", host); } return g_string_free (clean, FALSE); } /** * @brief Start a new IMMEDIATE transaction. */ void manage_transaction_start () { if (!in_transaction) { sql_begin_immediate (); in_transaction = TRUE; } gettimeofday (&last_msg, NULL); } /** * @brief Commit the current transaction, if any. * * The algorithm is extremely naive (time elapsed since the last message * was received) but delivers good enough performances when facing * bursts of messages. * * @param[in] force_commit Force committing the pending transaction. */ void manage_transaction_stop (gboolean force_commit) { struct timeval now; if (!in_transaction) return; gettimeofday (&now, NULL); if (force_commit || TIMEVAL_SUBTRACT_MS (now, last_msg) >= 500) { sql ("COMMIT;"); in_transaction = FALSE; } } /** * @brief Validate a single port. * * @param[in] port A port. * * @return 0 success, 1 failed. */ static int validate_port (const char *port) { const char *first; while (*port && isblank (*port)) port++; if (*port == '\0') return 1; first = port; while (*first && isdigit (*first)) first++; if (first == port) return 1; while (*first && isblank (*first)) first++; if (*first == '\0') { long int number; number = strtol (port, NULL, 10); if (number <= 0) return 1; if (number > 65535) return 1; return 0; } return 1; } /** * @brief Validate a single port. * @brief May come in values such as 100/foo and 100/foo (IANA: bar). * @brief Will also validate values such as: general/tcp. * * @param[in] port A port. * * @return 0 success, 1 failed. */ static int validate_results_port (const char *port) { int num; char *buff; if (!port) return 1; if (strncmp ("general/", port, 8) == 0) return 0; num = atoi (port); if (num > 0 && num < 65535) return 0; buff = g_newa (char, strlen (port)); sscanf (port, "%s (%i/%s)", buff, &num, buff); if (num > 0 && num < 65535) return 0; return 1; } /** * @brief Convert alive test name to alive test bitfield. * * @param[in] alive_tests Name of alive test. * * @return Alive test, or -1 on error. */ static int alive_test_from_string (const char* alive_tests) { alive_test_t alive_test; if (alive_tests == NULL || strcmp (alive_tests, "") == 0 || strcmp (alive_tests, "Scan Config Default") == 0) alive_test = 0; else if (strcmp (alive_tests, "ICMP, TCP-ACK Service & ARP Ping") == 0) alive_test = ALIVE_TEST_TCP_ACK_SERVICE | ALIVE_TEST_ICMP | ALIVE_TEST_ARP; else if (strcmp (alive_tests, "TCP-ACK Service & ARP Ping") == 0) alive_test = ALIVE_TEST_TCP_ACK_SERVICE | ALIVE_TEST_ARP; else if (strcmp (alive_tests, "ICMP & ARP Ping") == 0) alive_test = ALIVE_TEST_ICMP | ALIVE_TEST_ARP; else if (strcmp (alive_tests, "ICMP & TCP-ACK Service Ping") == 0) alive_test = ALIVE_TEST_ICMP | ALIVE_TEST_TCP_ACK_SERVICE; else if (strcmp (alive_tests, "ARP Ping") == 0) alive_test = ALIVE_TEST_ARP; else if (strcmp (alive_tests, "TCP-ACK Service Ping") == 0) alive_test = ALIVE_TEST_TCP_ACK_SERVICE; else if (strcmp (alive_tests, "TCP-SYN Service Ping") == 0) alive_test = ALIVE_TEST_TCP_SYN_SERVICE; else if (strcmp (alive_tests, "ICMP Ping") == 0) alive_test = ALIVE_TEST_ICMP; else if (strcmp (alive_tests, "Consider Alive") == 0) alive_test = ALIVE_TEST_CONSIDER_ALIVE; else return -1; return alive_test; } /** * @brief Create a target. * * @param[in] name Name of target. * @param[in] hosts Host list of target. * @param[in] exclude_hosts List of hosts to exclude from \p hosts. * @param[in] comment Comment on target. * @param[in] port_list_id Port list of target (overrides \p port_range). * @param[in] port_range Port range of target. * @param[in] ssh_lsc_credential SSH LSC credential. * @param[in] ssh_port Port for SSH LSC login. * @param[in] smb_lsc_credential SMB LSC credential. * @param[in] esxi_lsc_credential ESXi LSC credential. * @param[in] reverse_lookup_only Scanner preference reverse_lookup_only. * @param[in] reverse_lookup_unify Scanner preference reverse_lookup_unify. * @param[in] alive_tests Alive tests. * @param[in] make_name_unique Whether to make name unique. * @param[out] target Created target. * * @return 0 success, 1 target exists already, 2 error in host specification, * 3 too many hosts, 4 error in port range, 5 error in SSH port, * 6 failed to find port list, 7 error in alive tests, * 99 permission denied, -1 error. */ int create_target (const char* name, const char* hosts, const char* exclude_hosts, const char* comment, const char* port_list_id, const char* port_range, lsc_credential_t ssh_lsc_credential, const char* ssh_port, lsc_credential_t smb_lsc_credential, lsc_credential_t esxi_lsc_credential, const char *reverse_lookup_only, const char *reverse_lookup_unify, const char *alive_tests, int make_name_unique, target_t* target) { gchar *quoted_name, *quoted_hosts, *quoted_exclude_hosts, *quoted_comment; gchar *port_list_comment, *quoted_ssh_port, *clean; port_list_t port_list; int ret, alive_test, max; assert (current_credentials.uuid); if (port_range && validate_port_range (port_range)) return 4; if (ssh_port && validate_port (ssh_port)) return 5; alive_test = alive_test_from_string (alive_tests); if (alive_test <= -1) return 7; sql_begin_immediate (); if (user_may ("create_target") == 0) { sql ("ROLLBACK;"); return 99; } if (make_name_unique) { int suffix; /* Ensure the name is unique. */ quoted_name = sql_quote (name); suffix = 1; while (resource_with_name_exists (quoted_name, "target", 0)) { gchar *new_name; g_free (quoted_name); new_name = g_strdup_printf ("%s %i", name, suffix++); quoted_name = sql_quote (new_name); g_free (new_name); } } else { if (resource_with_name_exists (name, "target", 0)) { sql ("ROLLBACK;"); return 1; } } quoted_name = sql_quote (name); quoted_exclude_hosts = exclude_hosts ? sql_quote (exclude_hosts) : g_strdup (""); max = manage_count_hosts (hosts, quoted_exclude_hosts); if (max <= 0) { g_free (quoted_exclude_hosts); g_free (quoted_name); sql ("ROLLBACK;"); return 2; } clean = clean_hosts (hosts, &max); if (max > max_hosts) { g_free (quoted_exclude_hosts); g_free (quoted_name); sql ("ROLLBACK;"); return 3; } quoted_hosts = sql_quote (clean); g_free (clean); if (port_list_id) { if (find_port_list_with_permission (port_list_id, &port_list, "get_port_lists") || (port_list == 0)) { g_free (quoted_name); return 6; } } else { port_list_comment = g_strdup_printf ("Autogenerated for target %s.", name); ret = create_port_list_unique (name, port_list_comment, port_range, &port_list); g_free (port_list_comment); if (ret) { g_free (quoted_name); sql ("ROLLBACK;"); return ret; } } if (ssh_lsc_credential) quoted_ssh_port = sql_insert (ssh_port ? ssh_port : "22"); else quoted_ssh_port = g_strdup ("NULL"); if (reverse_lookup_only == NULL || strcmp (reverse_lookup_only, "0") == 0) reverse_lookup_only = "0"; else reverse_lookup_only = "1"; if (reverse_lookup_unify == NULL || strcmp (reverse_lookup_unify, "0") == 0) reverse_lookup_unify = "0"; else reverse_lookup_unify = "1"; if (comment) { quoted_comment = sql_nquote (comment, strlen (comment)); sql ("INSERT INTO targets" " (uuid, name, owner, hosts, exclude_hosts, comment, lsc_credential," " ssh_port, smb_lsc_credential, esxi_lsc_credential," " port_range, reverse_lookup_only," " reverse_lookup_unify, alive_test, creation_time," " modification_time)" " VALUES (make_uuid (), '%s'," " (SELECT id FROM users WHERE users.uuid = '%s'), '%s'," " '%s', '%s', %llu, %s, %llu, %llu, %llu, '%s', '%s', %i," " m_now (), m_now ());", quoted_name, current_credentials.uuid, quoted_hosts, quoted_exclude_hosts, quoted_comment, ssh_lsc_credential, quoted_ssh_port, smb_lsc_credential, esxi_lsc_credential, port_list, reverse_lookup_only, reverse_lookup_unify, alive_test); g_free (quoted_comment); } else sql ("INSERT INTO targets" " (uuid, name, owner, hosts, exclude_hosts, comment, lsc_credential," " ssh_port, smb_lsc_credential, esxi_lsc_credential," " port_range, reverse_lookup_only," " reverse_lookup_unify, alive_test, creation_time, modification_time)" " VALUES (make_uuid (), '%s'," " (SELECT id FROM users WHERE users.uuid = '%s')," " '%s', '%s', '', %llu, %s, %llu, %llu, %llu, '%s', '%s', %i," " m_now (), m_now ());", quoted_name, current_credentials.uuid, quoted_hosts, quoted_exclude_hosts, quoted_exclude_hosts, ssh_lsc_credential, quoted_ssh_port, smb_lsc_credential, esxi_lsc_credential, port_list, reverse_lookup_only, reverse_lookup_unify, alive_test); if (target) *target = sql_last_insert_id (); g_free (quoted_name); g_free (quoted_hosts); g_free (quoted_exclude_hosts); g_free (quoted_ssh_port); sql ("COMMIT;"); return 0; } /** * @brief Create a target from an existing target. * * @param[in] name Name of new target. NULL to copy from existing. * @param[in] comment Comment on new target. NULL to copy from existing. * @param[in] target_id UUID of existing target. * @param[out] new_target New target. * * @return 0 success, 1 target exists already, 2 failed to find existing * target, 99 permission denied, -1 error. */ int copy_target (const char* name, const char* comment, const char *target_id, target_t* new_target) { return copy_resource ("target", name, comment, target_id, "hosts, exclude_hosts, lsc_credential, ssh_port," " smb_lsc_credential, esxi_lsc_credential, port_range," " reverse_lookup_only, reverse_lookup_unify," " alive_test", 1, new_target); } /** * @brief Delete a target. * * @param[in] target_id UUID of target. * @param[in] ultimate Whether to remove entirely, or to trashcan. * * @return 0 success, 1 fail because a task refers to the target, 2 failed * to find target, 3 predefined target, 99 permission denied, -1 error. */ int delete_target (const char *target_id, int ultimate) { target_t target = 0; if (strcmp (target_id, TARGET_UUID_LOCALHOST) == 0) return 3; sql_begin_immediate (); if (user_may ("delete_target") == 0) { sql ("ROLLBACK;"); return 99; } if (find_target_with_permission (target_id, &target, "delete_target")) { sql ("ROLLBACK;"); return -1; } if (target == 0) { if (find_trash ("target", target_id, &target)) { sql ("ROLLBACK;"); return -1; } if (target == 0) { sql ("ROLLBACK;"); return 2; } if (ultimate == 0) { /* It's already in the trashcan. */ sql ("COMMIT;"); return 0; } /* Check if it's in use by a task in the trashcan. */ if (sql_int ("SELECT count(*) FROM tasks" " WHERE target = %llu" " AND target_location = " G_STRINGIFY (LOCATION_TRASH) ";", target)) { sql ("ROLLBACK;"); return 1; } permissions_set_orphans ("target", target, LOCATION_TRASH); tags_set_orphans ("target", target, LOCATION_TRASH); sql ("DELETE FROM targets_trash WHERE id = %llu;", target); sql ("COMMIT;"); return 0; } if (ultimate == 0) { if (sql_int ("SELECT count(*) FROM tasks" " WHERE target = %llu" " AND target_location = " G_STRINGIFY (LOCATION_TABLE) " AND (hidden = 0 OR hidden = 1);", target)) { sql ("ROLLBACK;"); return 1; } sql ("INSERT INTO targets_trash" " (uuid, owner, name, hosts, exclude_hosts, comment, lsc_credential," " ssh_port, smb_lsc_credential, port_range, ssh_location," " smb_location, port_list_location, reverse_lookup_only," " reverse_lookup_unify, alive_test, creation_time," " modification_time, esxi_lsc_credential, esxi_location)" " SELECT uuid, owner, name, hosts, exclude_hosts, comment," " lsc_credential, ssh_port, smb_lsc_credential, port_range," " " G_STRINGIFY (LOCATION_TABLE) "," " " G_STRINGIFY (LOCATION_TABLE) "," " " G_STRINGIFY (LOCATION_TABLE) "," " reverse_lookup_only, reverse_lookup_unify, alive_test," " creation_time, modification_time," " esxi_lsc_credential, " G_STRINGIFY (LOCATION_TABLE) " FROM targets WHERE id = %llu;", target); /* Update the location of the target in any trashcan tasks. */ sql ("UPDATE tasks" " SET target = %llu," " target_location = " G_STRINGIFY (LOCATION_TRASH) " WHERE target = %llu" " AND target_location = " G_STRINGIFY (LOCATION_TABLE) ";", sql_last_insert_id (), target); permissions_set_locations ("target", target, sql_last_insert_id (), LOCATION_TRASH); tags_set_locations ("target", target, sql_last_insert_id (), LOCATION_TRASH); } else if (sql_int ("SELECT count(*) FROM tasks" " WHERE target = %llu" " AND target_location = " G_STRINGIFY (LOCATION_TABLE), target)) { sql ("ROLLBACK;"); return 1; } else { permissions_set_orphans ("target", target, LOCATION_TABLE); tags_set_orphans ("target", target, LOCATION_TABLE); } sql ("DELETE FROM targets WHERE id = %llu;", target); sql ("COMMIT;"); return 0; } /** * @brief Modify a target. * * @param[in] target_id UUID of target. * @param[in] name Name of target. * @param[in] hosts Host list of target. * @param[in] exclude_hosts List of hosts to exclude from \p hosts. * @param[in] comment Comment on target. * @param[in] port_list_id Port list of target (overrides \p port_range). * @param[in] ssh_lsc_credential_id SSH LSC credential. * @param[in] ssh_port Port for SSH LSC login. * @param[in] smb_lsc_credential_id SMB LSC credential. * @param[in] esxi_lsc_credential_id ESXi LSC credential. * @param[in] reverse_lookup_only Scanner preference reverse_lookup_only. * @param[in] reverse_lookup_unify Scanner preference reverse_lookup_unify. * @param[in] alive_tests Alive tests. * * @return 0 success, 1 target exists already, 2 error in host specification, * 3 too many hosts, 4 error in port range, 5 error in SSH port, * 6 failed to find port list, 7 failed to find SSH cred, 8 failed to * find SMB cred, 9 failed to find target, 10 error in alive tests, * 11 zero length name, 12 exclude hosts requires hosts * 13 hosts requires exclude hosts, * 14 hosts must be at least one character, 15 target is in use, * 16 failed to find ESXi cred, * 99 permission denied, -1 error. */ int modify_target (const char *target_id, const char *name, const char *hosts, const char *exclude_hosts, const char *comment, const char *port_list_id, const char *ssh_lsc_credential_id, const char *ssh_port, const char *smb_lsc_credential_id, const char *esxi_lsc_credential_id, const char *reverse_lookup_only, const char *reverse_lookup_unify, const char *alive_tests) { target_t target; assert (target_id); sql_begin_immediate (); assert (current_credentials.uuid); if (user_may ("modify_target") == 0) { sql ("ROLLBACK;"); return 99; } if (hosts && (exclude_hosts == NULL)) { sql ("ROLLBACK;"); return 13; } target = 0; if (find_target_with_permission (target_id, &target, "modify_target")) { sql ("ROLLBACK;"); return -1; } if (target == 0) { sql ("ROLLBACK;"); return 9; } if (name) { gchar *quoted_name; if (strlen (name) == 0) { sql ("ROLLBACK;"); return 11; } if (resource_with_name_exists (name, "target", target)) { sql ("ROLLBACK;"); return 1; } quoted_name = sql_quote (name); sql ("UPDATE targets SET" " name = '%s'," " modification_time = m_now ()" " WHERE id = %llu;", quoted_name, target); g_free (quoted_name); } if (comment) { gchar *quoted_comment; quoted_comment = sql_quote (comment); sql ("UPDATE targets SET" " comment = '%s'," " modification_time = m_now ()" " WHERE id = %llu;", quoted_comment, target); g_free (quoted_comment); } if (alive_tests) { int alive_test; alive_test = alive_test_from_string (alive_tests); if (alive_test <= -1) { sql ("ROLLBACK;"); return 10; } sql ("UPDATE targets SET" " alive_test = '%i'," " modification_time = m_now ()" " WHERE id = %llu;", alive_test, target); } if (port_list_id) { port_list_t port_list; if (target_in_use (target)) { sql ("ROLLBACK;"); return 15; } port_list = 0; if (find_port_list_with_permission (port_list_id, &port_list, "get_port_lists")) { sql ("ROLLBACK;"); return -1; } if (port_list == 0) { sql ("ROLLBACK;"); return 6; } sql ("UPDATE targets SET" " port_range = %llu," " modification_time = m_now ()" " WHERE id = %llu;", port_list, target); } if (ssh_lsc_credential_id) { lsc_credential_t ssh_lsc_credential; gchar *quoted_ssh_port; if (target_in_use (target)) { sql ("ROLLBACK;"); return 15; } ssh_lsc_credential = 0; if (strcmp (ssh_lsc_credential_id, "0")) { if (find_lsc_credential_with_permission (ssh_lsc_credential_id, &ssh_lsc_credential, "get_lsc_credentials")) { sql ("ROLLBACK;"); return -1; } if (ssh_lsc_credential == 0) { sql ("ROLLBACK;"); return 7; } if (ssh_port && validate_port (ssh_port)) { sql ("ROLLBACK;"); return 5; } quoted_ssh_port = sql_insert (ssh_port ? ssh_port : "22"); } else quoted_ssh_port = g_strdup ("NULL"); sql ("UPDATE targets SET" " lsc_credential = %llu," " ssh_port = %s," " modification_time = m_now ()" " WHERE id = %llu;", ssh_lsc_credential, quoted_ssh_port, target); g_free (quoted_ssh_port); } if (smb_lsc_credential_id) { lsc_credential_t smb_lsc_credential; if (target_in_use (target)) { sql ("ROLLBACK;"); return 15; } smb_lsc_credential = 0; if (strcmp (smb_lsc_credential_id, "0")) { if (find_lsc_credential_with_permission (smb_lsc_credential_id, &smb_lsc_credential, "get_lsc_credentials")) { sql ("ROLLBACK;"); return -1; } if (smb_lsc_credential == 0) { sql ("ROLLBACK;"); return 7; } } sql ("UPDATE targets SET" " smb_lsc_credential = %llu," " modification_time = m_now ()" " WHERE id = %llu;", smb_lsc_credential, target); } if (esxi_lsc_credential_id) { lsc_credential_t esxi_lsc_credential; if (target_in_use (target)) { sql ("ROLLBACK;"); return 15; } esxi_lsc_credential = 0; if (strcmp (esxi_lsc_credential_id, "0")) { if (find_lsc_credential_with_permission (esxi_lsc_credential_id, &esxi_lsc_credential, "get_lsc_credentials")) { sql ("ROLLBACK;"); return -1; } if (esxi_lsc_credential == 0) { sql ("ROLLBACK;"); return 16; } } sql ("UPDATE targets SET" " esxi_lsc_credential = %llu," " modification_time = m_now ()" " WHERE id = %llu;", esxi_lsc_credential, target); } if (exclude_hosts) { gchar *quoted_exclude_hosts, *quoted_hosts, *clean; int max; if (target_in_use (target)) { sql ("ROLLBACK;"); return 15; } quoted_exclude_hosts = sql_quote (exclude_hosts); if (hosts == NULL) { g_free (quoted_exclude_hosts); sql ("ROLLBACK;"); return 12; } if (strlen (hosts) == 0) { g_free (quoted_exclude_hosts); sql ("ROLLBACK;"); return 14; } max = manage_count_hosts (hosts, quoted_exclude_hosts); if (max <= 0) { g_free (quoted_exclude_hosts); sql ("ROLLBACK;"); return 2; } clean = clean_hosts (hosts, &max); if (max > max_hosts) { g_free (quoted_exclude_hosts); sql ("ROLLBACK;"); return 3; } quoted_hosts = sql_quote (clean); g_free (clean); sql ("UPDATE targets SET" " hosts = '%s'," " exclude_hosts = '%s'," " modification_time = m_now ()" " WHERE id = %llu;", quoted_hosts, quoted_exclude_hosts, target); g_free (quoted_hosts); g_free (quoted_exclude_hosts); } if (reverse_lookup_only) { if (target_in_use (target)) { sql ("ROLLBACK;"); return 15; } sql ("UPDATE targets SET" " reverse_lookup_only = '%i'," " modification_time = m_now ()" " WHERE id = %llu;", strcmp (reverse_lookup_only, "0") ? 1 : 0, target); } if (reverse_lookup_unify) { if (target_in_use (target)) { sql ("ROLLBACK;"); return 15; } sql ("UPDATE targets SET" " reverse_lookup_unify = '%i'," " modification_time = m_now ()" " WHERE id = %llu;", strcmp (reverse_lookup_unify, "0") ? 1 : 0, target); } sql ("COMMIT;"); return 0; } /** * @brief Filter columns for target iterator. */ #define TARGET_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "hosts", "exclude_hosts", "ips", "port_list", \ "ssh_credential", "smb_credential", "esxi_credential", NULL } /** * @brief Target iterator columns. */ #define TARGET_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS (targets), \ { "hosts", NULL }, \ { "lsc_credential", NULL }, \ { "ssh_port", NULL }, \ { "smb_lsc_credential", NULL }, \ { "port_range", NULL }, \ { "0", NULL }, \ { "0", NULL }, \ { \ "(SELECT uuid FROM port_lists" \ " WHERE port_lists.id = port_range)", \ NULL \ }, \ { \ "(SELECT name FROM port_lists" \ " WHERE port_lists.id = port_range)", \ "port_list" \ }, \ { "0", NULL }, \ { "exclude_hosts", NULL }, \ { "reverse_lookup_only", NULL }, \ { "reverse_lookup_unify", NULL }, \ { "alive_test", NULL }, \ { "esxi_lsc_credential", NULL }, \ { "0", NULL }, \ { \ "(SELECT name FROM lsc_credentials" \ " WHERE lsc_credentials.id = lsc_credential)", \ "ssh_credential" \ }, \ { \ "(SELECT name FROM lsc_credentials" \ " WHERE lsc_credentials.id = smb_lsc_credential)", \ "smb_credential" \ }, \ { \ "(SELECT name FROM lsc_credentials" \ " WHERE lsc_credentials.id = esxi_lsc_credential)", \ "esxi_credential" \ }, \ { "hosts", NULL }, \ { "max_hosts (hosts, exclude_hosts)", "ips" }, \ { NULL, NULL } \ } /** * @brief Target iterator columns for trash case. */ #define TARGET_ITERATOR_TRASH_COLUMNS \ { \ GET_ITERATOR_COLUMNS (targets_trash), \ { "hosts", NULL }, \ { "lsc_credential", NULL }, \ { "ssh_port", NULL }, \ { "smb_lsc_credential", NULL }, \ { "port_range", NULL }, \ { "ssh_location", NULL }, \ { "smb_location", NULL }, \ { \ "(CASE" \ " WHEN port_list_location = " G_STRINGIFY (LOCATION_TRASH) \ " THEN (SELECT uuid FROM port_lists_trash" \ " WHERE port_lists_trash.id = port_range)" \ " ELSE (SELECT uuid FROM port_lists" \ " WHERE port_lists.id = port_range)" \ " END)", \ NULL \ }, \ { \ "(CASE" \ " WHEN port_list_location = " G_STRINGIFY (LOCATION_TRASH) \ " THEN (SELECT name FROM port_lists_trash" \ " WHERE port_lists_trash.id = port_range)" \ " ELSE (SELECT name FROM port_lists" \ " WHERE port_lists.id = port_range)" \ " END)", \ NULL \ }, \ { "port_list_location = " G_STRINGIFY (LOCATION_TRASH), NULL }, \ { "exclude_hosts", NULL }, \ { "reverse_lookup_only", NULL }, \ { "reverse_lookup_unify", NULL }, \ { "alive_test", NULL }, \ { "esxi_lsc_credential", NULL }, \ { "esxi_location", NULL }, \ { NULL, NULL } \ } /** * @brief Count number of targets. * * @param[in] get GET params. * * @return Total number of targets in filtered set. */ int target_count (const get_data_t *get) { static const char *extra_columns[] = TARGET_ITERATOR_FILTER_COLUMNS; static column_t columns[] = TARGET_ITERATOR_COLUMNS; static column_t trash_columns[] = TARGET_ITERATOR_TRASH_COLUMNS; return count ("target", get, columns, trash_columns, extra_columns, 0, 0, 0, TRUE); } /** * @brief Initialise a target iterator, limited to the current user's targets. * * @param[in] iterator Iterator. * @param[in] target Target to limit iteration to. */ void init_user_target_iterator (iterator_t* iterator, target_t target) { static column_t select_columns[] = TARGET_ITERATOR_COLUMNS; gchar *columns; assert (target); columns = columns_build_select (select_columns); init_iterator (iterator, "SELECT %s" " FROM targets" " WHERE id = %llu" " AND ((owner IS NULL)" " OR (owner = (SELECT id FROM users" " WHERE users.uuid = '%s')));", columns, target, current_credentials.uuid); g_free (columns); } /** * @brief Initialise a target iterator, given a single target. * * @param[in] iterator Iterator. * @param[in] target Single target to iterate. */ void init_target_iterator_one (iterator_t* iterator, target_t target) { get_data_t get; assert (target); memset (&get, '\0', sizeof (get)); get.id = target_uuid (target); get.filter = "owner=any permission=get_targets"; init_target_iterator (iterator, &get); } /** * @brief Initialise a target iterator, including observed targets. * * @param[in] iterator Iterator. * @param[in] get GET data. * * @return 0 success, 1 failed to find target, 2 failed to find filter, * -1 error. */ int init_target_iterator (iterator_t* iterator, const get_data_t *get) { static const char *filter_columns[] = TARGET_ITERATOR_FILTER_COLUMNS; static column_t columns[] = TARGET_ITERATOR_COLUMNS; static column_t trash_columns[] = TARGET_ITERATOR_TRASH_COLUMNS; return init_get_iterator (iterator, "target", get, columns, trash_columns, filter_columns, 0, NULL, NULL, TRUE); } /** * @brief Get the hosts of the target from a target iterator. * * @param[in] iterator Iterator. * * @return Hosts of the target or NULL if iteration is complete. */ DEF_ACCESS (target_iterator_hosts, GET_ITERATOR_COLUMN_COUNT); /** * @brief Get the SSH LSC credential from a target iterator. * * @param[in] iterator Iterator. * * @return SSH LSC credential. */ int target_iterator_ssh_credential (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 1); return ret; } /** * @brief Get the SSH LSC port of the target from a target iterator. * * @param[in] iterator Iterator. * * @return SSH LSC port of the target or NULL if iteration is complete. */ DEF_ACCESS (target_iterator_ssh_port, GET_ITERATOR_COLUMN_COUNT + 2); /** * @brief Get the SMB LSC credential from a target iterator. * * @param[in] iterator Iterator. * * @return SMB LSC credential. */ int target_iterator_smb_credential (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 3); return ret; } /** * @brief Get the location of the SSH LSC credential from a target iterator. * * @param[in] iterator Iterator. * * @return 0 in table, 1 in trash */ int target_iterator_ssh_trash (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 5); return ret; } /** * @brief Get the location of the SMB LSC credential from a target iterator. * * @param[in] iterator Iterator. * * @return 0 in table, 1 in trash */ int target_iterator_smb_trash (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 6); return ret; } /** * @brief Get the port list uuid of the target from a target iterator. * * @param[in] iterator Iterator. * * @return UUID of the target port list or NULL if iteration is complete. */ DEF_ACCESS (target_iterator_port_list_uuid, GET_ITERATOR_COLUMN_COUNT + 7); /** * @brief Get the port list name of the target from a target iterator. * * @param[in] iterator Iterator. * * @return Name of the target port list or NULL if iteration is complete. */ DEF_ACCESS (target_iterator_port_list_name, GET_ITERATOR_COLUMN_COUNT + 8); /** * @brief Get the location of the port list from a target iterator. * * @param[in] iterator Iterator. * * @return 0 in table, 1 in trash. */ int target_iterator_port_list_trash (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 9); return ret; } /** * @brief Get the excluded hosts of the target from a target iterator. * * @param[in] iterator Iterator. * * @return Excluded hosts of the target or NULL if iteration is complete. */ DEF_ACCESS (target_iterator_exclude_hosts, GET_ITERATOR_COLUMN_COUNT + 10); /** * @brief Get the reverse lookup only value from a target iterator. * * @param[in] iterator Iterator. * * @return Reverse lookup only of the target or NULL if iteration is complete. */ DEF_ACCESS (target_iterator_reverse_lookup_only, GET_ITERATOR_COLUMN_COUNT + 11); /** * @brief Get the reverse lookup unify value from a target iterator. * * @param[in] iterator Iterator. * * @return Reverse lookup unify of the target or NULL if iteration is complete. */ DEF_ACCESS (target_iterator_reverse_lookup_unify, GET_ITERATOR_COLUMN_COUNT + 12); /** * @brief Get the alive test description from a target iterator. * * @param[in] iterator Iterator. * * @return Reverse lookup unify of the target or NULL if iteration is complete. */ const char* target_iterator_alive_tests (iterator_t* iterator) { int tests; if (iterator->done) return ""; tests = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 13); if ((tests & ALIVE_TEST_TCP_ACK_SERVICE) && (tests & ALIVE_TEST_ICMP) && (tests & ALIVE_TEST_ARP)) return "ICMP, TCP-ACK Service & ARP Ping"; if ((tests & ALIVE_TEST_TCP_ACK_SERVICE) && (tests & ALIVE_TEST_ARP)) return "TCP-ACK Service & ARP Ping"; if ((tests & ALIVE_TEST_ICMP) && (tests & ALIVE_TEST_ARP)) return "ICMP & ARP Ping"; if ((tests & ALIVE_TEST_ICMP) && (tests & ALIVE_TEST_TCP_ACK_SERVICE)) return "ICMP & TCP-ACK Service Ping"; if (tests & ALIVE_TEST_ARP) return "ARP Ping"; if (tests & ALIVE_TEST_TCP_ACK_SERVICE) return "TCP-ACK Service Ping"; if (tests & ALIVE_TEST_TCP_SYN_SERVICE) return "TCP-SYN Service Ping"; if (tests & ALIVE_TEST_ICMP) return "ICMP Ping"; if (tests & ALIVE_TEST_CONSIDER_ALIVE) return "Consider Alive"; return "Scan Config Default"; } /** * @brief Get the ESXi LSC credential from a target iterator. * * @param[in] iterator Iterator. * * @return ESXi LSC credential. */ int target_iterator_esxi_credential (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 14); return ret; } /** * @brief Get the ESXi LSC credential from a target iterator. * * @param[in] iterator Iterator. * * @return ESXi LSC credential. */ int target_iterator_esxi_trash (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 15); return ret; } /** * @brief Return the UUID of a tag. * * @param[in] tag Tag. * * @return Newly allocated UUID if available, else NULL. */ char* tag_uuid (tag_t tag) { return sql_string ("SELECT uuid FROM tags WHERE id = %llu;", tag); } /** * @brief Return the UUID of a target. * * @param[in] target Target. * * @return Newly allocated UUID if available, else NULL. */ char* target_uuid (target_t target) { return sql_string ("SELECT uuid FROM targets WHERE id = %llu;", target); } /** * @brief Return the UUID of a trashcan target. * * @param[in] target Target. * * @return Newly allocated UUID if available, else NULL. */ char* trash_target_uuid (target_t target) { return sql_string ("SELECT uuid FROM targets_trash WHERE id = %llu;", target); } /** * @brief Return the name of a target. * * @param[in] target Target. * * @return Newly allocated name if available, else NULL. */ char* target_name (target_t target) { return sql_string ("SELECT name FROM targets WHERE id = %llu;", target); } /** * @brief Return the name of a trashcan target. * * @param[in] target Target. * * @return Newly allocated name if available, else NULL. */ char* trash_target_name (target_t target) { return sql_string ("SELECT name FROM targets_trash WHERE id = %llu;", target); } /** * @brief Return whether a trashcan target is readable. * * @param[in] target Target. * * @return 1 if readable, else 0. */ int trash_target_readable (target_t target) { char *uuid; target_t found; if (target == 0) return 0; uuid = target_uuid (target); if (find_trash ("target", uuid, &found)) { g_free (uuid); return 0; } g_free (uuid); return found > 0; } /** * @brief Return the hosts associated with a target. * * @param[in] target Target. * * @return Newly allocated comma separated list of hosts if available, * else NULL. */ char* target_hosts (target_t target) { return sql_string ("SELECT hosts FROM targets WHERE id = %llu;", target); } /** * @brief Return the excluded hosts associated with a target. * * @param[in] target Target. * * @return Newly allocated comma separated list of excluded hosts if available, * else NULL. */ char* target_exclude_hosts (target_t target) { return sql_string ("SELECT exclude_hosts FROM targets WHERE id = %llu;", target); } /** * @brief Return the reverse_lookup_only value of a target. * * @param[in] target Target. * * @return Reverse lookup only value if available, else NULL. */ char* target_reverse_lookup_only (target_t target) { return sql_string ("SELECT reverse_lookup_only FROM targets" " WHERE id = %llu;", target); } /** * @brief Return the reverse_lookup_unify value of a target. * * @param[in] target Target. * * @return Reverse lookup unify value if available, else NULL. */ char* target_reverse_lookup_unify (target_t target) { return sql_string ("SELECT reverse_lookup_unify FROM targets" " WHERE id = %llu;", target); } /** * @brief Return the hosts associated with a trashcan target. * * @param[in] target Target. * * @return Newly allocated comma separated list of hosts if available, * else NULL. */ char* trash_target_hosts (target_t target) { return sql_string ("SELECT hosts FROM targets_trash WHERE id = %llu;", target); } /** * @brief Return the excluded hosts associated with a trashcan target. * * @param[in] target Target. * * @return Newly allocated comma separated list of excluded hosts if available, * else NULL. */ char* trash_target_exclude_hosts (target_t target) { return sql_string ("SELECT exclude_hosts FROM targets_trash" " WHERE id = %llu;", target); } /** * @brief Return the SSH LSC port of a target. * * @param[in] target Target. * * @return Newly allocated port if available, else NULL. */ char* target_ssh_port (target_t target) { return sql_string ("SELECT ssh_port FROM targets WHERE id = %llu;", target); } /** * @brief Return the SSH credential associated with a target, if any. * * @param[in] target Target. * * @return SSH credential if any, else 0. */ lsc_credential_t target_ssh_lsc_credential (target_t target) { lsc_credential_t lsc_credential; switch (sql_int64 (&lsc_credential, "SELECT lsc_credential FROM targets" " WHERE id = %llu;", target)) { case 0: break; case 1: /* Too few rows in result of query. */ return 0; break; default: /* Programming error. */ assert (0); case -1: /** @todo Move return to arg; return -1. */ return 0; break; } return lsc_credential; } /** * @brief Return the SMB credential associated with a target, if any. * * @param[in] target Target. * * @return SMB credential if any, else 0. */ lsc_credential_t target_smb_lsc_credential (target_t target) { lsc_credential_t lsc_credential; switch (sql_int64 (&lsc_credential, "SELECT smb_lsc_credential FROM targets" " WHERE id = %llu;", target)) { case 0: break; case 1: /* Too few rows in result of query. */ return 0; break; default: /* Programming error. */ assert (0); case -1: /** @todo Move return to arg; return -1. */ return 0; break; } return lsc_credential; } /** * @brief Return the ESXi credential associated with a target, if any. * * @param[in] target Target. * * @return ESXi credential if any, else 0. */ lsc_credential_t target_esxi_lsc_credential (target_t target) { lsc_credential_t lsc_credential; switch (sql_int64 (&lsc_credential, "SELECT esxi_lsc_credential FROM targets" " WHERE id = %llu;", target)) { case 0: break; case 1: /* Too few rows in result of query. */ return 0; break; default: /* Programming error. */ assert (0); case -1: /** @todo Move return to arg; return -1. */ return 0; break; } return lsc_credential; } /** * @brief Return the port list associated with a target, if any. * * @param[in] target Target. * * @return Port list */ port_list_t target_port_list (target_t target) { port_list_t port_list; switch (sql_int64 (&port_list, "SELECT port_range FROM targets" " WHERE id = %llu;", target)) { case 0: break; case 1: /* Too few rows in result of query. */ return 0; break; default: /* Programming error. */ assert (0); case -1: /** @todo Move return to arg; return -1. */ return 0; break; } return port_list; } /** * @brief Return the port range of a target, in OTP format. * * For "OpenVAS Default", return the explicit port ranges instead of "default". * * @param[in] target Target. * * @return Newly allocated port range if available, else NULL. */ char* target_port_range (target_t target) { GString *range; iterator_t ranges; range = g_string_new (""); init_port_range_iterator (&ranges, target_port_list (target), 0, 1, "type, CAST (start AS INTEGER)"); if (next (&ranges)) { const char *start, *end; int type; start = port_range_iterator_start (&ranges); end = port_range_iterator_end (&ranges); type = port_range_iterator_type_int (&ranges); /* Scanner can only handle: T:1-3,5-6,9,U:1-2 */ if (end && strcmp (end, "0") && strcmp (end, start)) g_string_append_printf (range, "%s%s-%s", (type == PORT_PROTOCOL_UDP ? "U:" : "T:"), start, end); else g_string_append_printf (range, "%s%s", (type == PORT_PROTOCOL_UDP ? "U:" : "T:"), start); while (next (&ranges)) { int tcp; start = port_range_iterator_start (&ranges); end = port_range_iterator_end (&ranges); tcp = (type == PORT_PROTOCOL_TCP); type = port_range_iterator_type_int (&ranges); if (end && strcmp (end, "0") && strcmp (end, start)) g_string_append_printf (range, ",%s%s-%s", (tcp && type == PORT_PROTOCOL_UDP ? "U:" : ""), start, end); else g_string_append_printf (range, ",%s%s", (tcp && type == PORT_PROTOCOL_UDP ? "U:" : ""), start); } } cleanup_iterator (&ranges); return g_string_free (range, FALSE); } /** * @brief Return a target's alive tests. * * @param[in] target Target. * * @return Alive test bitfield. */ alive_test_t target_alive_tests (target_t target) { return sql_int ("SELECT alive_test FROM targets WHERE id = %llu;", target); } /** * @brief Return whether a target is in use by a task. * * @param[in] target Target. * * @return 1 if in use, else 0. */ int target_in_use (target_t target) { return !!sql_int ("SELECT count(*) FROM tasks" " WHERE target = %llu" " AND target_location = " G_STRINGIFY (LOCATION_TABLE) " AND (hidden = 0 OR hidden = 1);", target); } /** * @brief Return whether a trashcan target is referenced by a task. * * @param[in] target Target. * * @return 1 if in use, else 0. */ int trash_target_in_use (target_t target) { return !!sql_int ("SELECT count(*) FROM tasks" " WHERE target = %llu" " AND target_location = " G_STRINGIFY (LOCATION_TRASH), target); } /** * @brief Return whether a target is writable. * * @param[in] target Target. * * @return 1 if writable, else 0. */ int target_writable (target_t target) { return sql_int ("SELECT count(*) FROM targets" " WHERE id = %llu" " AND uuid = '" TARGET_UUID_LOCALHOST "'", target) == 0; } /** * @brief Return whether a trashcan target is writable. * * @param[in] target Target. * * @return 1 if writable, else 0. */ int trash_target_writable (target_t target) { return (sql_int ("SELECT count(*) FROM targets_trash" " WHERE id = %llu" " AND uuid = '" TARGET_UUID_LOCALHOST "'", target) || trash_target_in_use (target)) == 0; } /** * @brief Initialise a target task iterator. * * Iterates over all tasks that use the target. * * @param[in] iterator Iterator. * @param[in] target Target. */ void init_target_task_iterator (iterator_t* iterator, target_t target) { gchar *available; get_data_t get; array_t *permissions; assert (target); get.trash = 0; permissions = make_array (); array_add (permissions, g_strdup ("get_tasks")); available = where_owned ("task", &get, 1, "any", 0, permissions); array_free (permissions); init_iterator (iterator, "SELECT name, uuid, %s FROM tasks" " WHERE target = %llu" " AND hidden = 0" " ORDER BY name ASC;", available, target); g_free (available); } /** * @brief Get the name from a target_task iterator. * * @param[in] iterator Iterator. * * @return The name of the host, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (target_task_iterator_name, 0); /** * @brief Get the uuid from a target_task iterator. * * @param[in] iterator Iterator. * * @return The uuid of the host, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (target_task_iterator_uuid, 1); /** * @brief Get the read permission status from a GET iterator. * * @param[in] iterator Iterator. * * @return 1 if may read, else 0. */ int target_task_iterator_readable (iterator_t* iterator) { if (iterator->done) return 0; return iterator_int (iterator, 2); } /* Configs. */ /** * @brief Find a config given a UUID. * * @param[in] uuid Config UUID. * @param[out] config Config return, 0 if succesfully failed to find config. * * @return FALSE on success (including if failed to find config), TRUE on error. */ gboolean find_config (const char* uuid, config_t* config) { gchar *quoted_uuid = sql_quote (uuid); if (user_owns_uuid ("config", quoted_uuid, 0) == 0) { g_free (quoted_uuid); *config = 0; return FALSE; } switch (sql_int64 (config, "SELECT id FROM configs WHERE uuid = '%s';", quoted_uuid)) { case 0: break; case 1: /* Too few rows in result of query. */ *config = 0; break; default: /* Programming error. */ assert (0); case -1: g_free (quoted_uuid); return TRUE; break; } g_free (quoted_uuid); return FALSE; } /** * @brief Find a config for a set of permissions, given a UUID. * * @param[in] uuid UUID of config. * @param[out] config Config return, 0 if succesfully failed to find * config. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find config), TRUE on error. */ gboolean find_config_with_permission (const char* uuid, config_t* config, const char *permission) { return find_resource_with_permission ("config", uuid, config, permission, 0); } /** * @brief Insert preferences into a config. * * @param[in] config Config. * @param[in] preferences Preferences. * @param[in] config_type Config type. * * @return 0 success, -1 error, -4 input error. */ static int config_insert_preferences (config_t config, const array_t* preferences /* preference_t. */, const char* config_type) { int index = 0; const preference_t *preference; if (preferences == NULL) return -4; while ((preference = (preference_t*) g_ptr_array_index (preferences, index++))) /* Simply skip the preference if the value is NULL, for exports * where sensitive information is left out. */ if (preference->value) { GString *value; int alt_index = 0; const gchar *alt; gchar *quoted_value; if (preference->name == NULL) return -4; if (strcmp (preference->name, "Timeout") == 0) { gchar *quoted_nvt_oid; /* Special Timeout preference. */ if (preference->nvt_oid == NULL && (config_type == NULL || strcmp (config_type, "0") == 0)) return -4; quoted_nvt_oid = sql_quote (preference->nvt_oid); quoted_value = sql_quote (preference->value); sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%llu, 'SERVER_PREFS', 'timeout.%s', '%s');", config, quoted_nvt_oid, quoted_value); g_free (quoted_nvt_oid); g_free (quoted_value); } else if (preference->type) { gchar *quoted_type, *quoted_nvt_name, *quoted_preference_name; gchar *quoted_default; /* Presume NVT or OSP preference. */ if (preference->nvt_name == NULL && (config_type == NULL || strcmp (config_type, "0") == 0)) return -4; value = g_string_new (preference->value); while ((alt = (gchar*) g_ptr_array_index (preference->alts, alt_index++))) g_string_append_printf (value, ";%s", alt); quoted_nvt_name = preference->nvt_name ? sql_quote (preference->nvt_name) : NULL; quoted_preference_name = sql_quote (preference->name); quoted_type = sql_quote (preference->type); quoted_value = sql_quote (value->str); g_string_free (value, TRUE); quoted_default = preference->default_value ? sql_quote (preference->default_value) : NULL; if (config_type == NULL || strcmp (config_type, "0") == 0) { /* NVT preference */ /* LDAPsearch[entry]:Timeout value */ sql ("INSERT INTO config_preferences" " (config, type, name, value)" " VALUES (%llu, 'PLUGINS_PREFS', '%s[%s]:%s', '%s');", config, quoted_nvt_name, quoted_type, quoted_preference_name, quoted_value); } else { /* OSP preference */ sql ("INSERT into config_preferences" " (config, type, name, value, default_value)" " VALUES (%llu, '%s', '%s', '%s', '%s');", config, quoted_type, quoted_preference_name, quoted_value, quoted_default); } g_free (quoted_nvt_name); g_free (quoted_preference_name); g_free (quoted_type); g_free (quoted_value); g_free (quoted_default); } else { gchar *quoted_name; /* Presume scanner preference. */ quoted_name = sql_quote (preference->name); quoted_value = sql_quote (preference->value); sql ("INSERT into config_preferences (config, type, name, value)" " VALUES (%llu, 'SERVER_PREFS', '%s', '%s');", config, quoted_name, quoted_value); g_free (quoted_name); g_free (quoted_value); } } return 0; } /** * @brief Create a config. * * If a config with the same name exists already then add a unique integer * suffix onto the name. * * @param[in] proposed_name Proposed name of config. * @param[in] comment Comment on config. * @param[in] selectors NVT selectors. * @param[in] preferences Preferences. * @param[in] config_type Config type. * @param[out] config On success the config. * @param[out] name On success the name of the config. * * @return 0 success, 1 config exists already, 99 permission denied, -1 error, * -2 name empty, -3 input error in selectors, -4 input error in * preferences. */ int create_config (const char* proposed_name, const char* comment, const array_t* selectors /* nvt_selector_t. */, const array_t* preferences /* preference_t. */, const char* config_type, config_t *config, char **name) { int ret; gchar *quoted_comment, *candidate_name, *quoted_candidate_name; gchar *quoted_type; char *selector_uuid; unsigned int num = 1; assert (current_credentials.uuid); if (proposed_name == NULL || strlen (proposed_name) == 0) return -2; selector_uuid = openvas_uuid_make (); if (selector_uuid == NULL) return -1; sql_begin_immediate (); if (user_may ("create_config") == 0) { sql ("ROLLBACK;"); free (selector_uuid); return 99; } candidate_name = g_strdup (proposed_name); quoted_candidate_name = sql_quote (candidate_name); quoted_type = config_type ? sql_quote (config_type) : g_strdup ("0"); while (1) { if (!resource_with_name_exists (quoted_candidate_name, "config", 0)) break; g_free (candidate_name); g_free (quoted_candidate_name); candidate_name = g_strdup_printf ("%s %u", proposed_name, ++num); quoted_candidate_name = sql_quote (candidate_name); } if (comment) { quoted_comment = sql_nquote (comment, strlen (comment)); sql ("INSERT INTO configs (uuid, name, owner, nvt_selector, comment," " type, creation_time, modification_time)" " VALUES (make_uuid (), '%s'," " (SELECT id FROM users WHERE users.uuid = '%s')," " '%s', '%s', '%s', m_now (), m_now ());", quoted_candidate_name, current_credentials.uuid, selector_uuid, quoted_comment, quoted_type); g_free (quoted_comment); } else sql ("INSERT INTO configs (uuid, name, owner, nvt_selector, comment," " type, creation_time, modification_time)" " VALUES (make_uuid (), '%s'," " (SELECT id FROM users WHERE users.uuid = '%s')," " '%s', '', '%s', m_now (), m_now ());", quoted_candidate_name, current_credentials.uuid, selector_uuid, quoted_type); g_free (quoted_candidate_name); g_free (quoted_type); /* Insert the selectors into the nvt_selectors table. */ *config = sql_last_insert_id (); if (config_type == NULL || strcmp (config_type, "0") == 0) { if ((ret = insert_nvt_selectors (selector_uuid, selectors))) { sql ("ROLLBACK;"); free (selector_uuid); return ret; } } free (selector_uuid); /* Insert the preferences into the config_preferences table. */ if ((ret = config_insert_preferences (*config, preferences, config_type))) { sql ("ROLLBACK;"); return ret; } /* Update family and NVT count caches. */ update_config_caches (*config); sql ("COMMIT;"); *name = candidate_name; return 0; } /** * @brief Get list of OSP Scanner parameters. * * @param[in] scanner Scanner. * * @return List of scanner parameters, NULL if error. */ static GSList * get_scanner_params (scanner_t scanner) { GSList *list = NULL; osp_connection_t *connection; connection = osp_scanner_connect (scanner); if (!connection) return NULL; osp_get_scanner_details (connection, NULL, &list); osp_connection_close (connection); return list; } /** * @brief Create a config from an OSP scanner. * * @param[in] scanner_id UUID of scanner to create config from. * * @return 0 success, 1 couldn't find scanner, 2 scanner not of OSP type, * 3 config name exists already, 4 couldn't get params from scanner, * 99 permission denied, -1 error. */ int create_config_from_scanner (const char *scanner_id, const char *name, const char *comment, char **uuid) { scanner_t scanner; config_t config; GSList *params, *element; char *quoted_name, *quoted_comment; assert (current_credentials.uuid); assert (scanner_id); sql_begin_immediate (); if (user_may ("create_config") == 0) { sql ("ROLLBACK;"); return 99; } if (find_scanner_with_permission (scanner_id, &scanner, "create_config")) { sql ("ROLLBACK;"); return -1; } if (scanner == 0) { sql ("ROLLBACK;"); return 1; } if (scanner_type (scanner) != SCANNER_TYPE_OSP) { sql ("ROLLBACK;"); return 2; } if (resource_with_name_exists (name, "config", 0)) { sql ("ROLLBACK;"); return 3; } params = get_scanner_params (scanner); if (!params) { sql ("ROLLBACK;"); return 4; } quoted_name = sql_quote (name ?: ""); quoted_comment = sql_quote (comment ?: ""); /* Create new OSP config. */ sql ("INSERT INTO configs (uuid, name, owner, nvt_selector, comment," " type, creation_time, modification_time)" " VALUES (make_uuid (), '%s'," " (SELECT id FROM users WHERE users.uuid = '%s')," " '', '%s', 1, m_now (), m_now ());", quoted_name, current_credentials.uuid, quoted_comment); g_free (quoted_name); g_free (quoted_comment); config = sql_last_insert_id (); *uuid = config_uuid (config); element = params; while (element) { char *param_id; osp_param_t *param = element->data; param_id = sql_quote (osp_param_id (param)); /* XXX: Ignoring username, password and port parameters as these are taken * from the task's LSC Credentials / Target. */ if (strcmp (param_id, "username") && strcmp (param_id, "password") && strcmp (param_id, "port")) { char *param_type, *param_def, *param_value = NULL; param_type = sql_quote (osp_param_type_str (param)); if (!strcmp (param_type, "selection")) { char **strarray = g_strsplit (osp_param_default (param), "|", 2); param_value = sql_quote (strarray[0] ?: ""); param_def = sql_quote (strarray[1] ?: param_value); g_strfreev (strarray); } else param_def = sql_quote (osp_param_default (param)); sql ("INSERT INTO config_preferences (config, name, type, value," " default_value) VALUES (%llu, '%s', '%s', '%s', '%s')", config , param_id, param_type, param_value ?: param_def, param_def); g_free (param_type); g_free (param_def); g_free (param_value); } g_free (param_id); osp_param_free (element->data); element = element->next; } g_slist_free (params); sql ("COMMIT;"); return 0; } /** * @brief Return the UUID of a config. * * @param[in] config Config. * @param[out] id Pointer to a newly allocated string. * * @return Newly allocated config uuid pointer. */ char * config_uuid (config_t config) { return sql_string ("SELECT uuid FROM configs WHERE id = %llu;", config); } /** * @brief Return the type of a config. * * @param[in] config Config. * * @return Config type, -1 if not found. */ int config_type (config_t config) { int type; char *str; str = sql_string ("SELECT type FROM configs WHERE id = %llu;", config); if (!str) return -1; type = atoi (str); g_free (str); return type; } /** * @brief Get the timeout value for an NVT in a config. * * @param[in] config Config. * @param[in] oid ID of NVT. * * @return Newly allocated timeout if set for the NVT, else NULL. */ char * config_nvt_timeout (config_t config, const char *oid) { return sql_string ("SELECT value FROM config_preferences" " WHERE config = %llu" " AND type = 'SERVER_PREFS'" " AND name = 'timeout.%s';", config, oid); } /** * @brief Check scanner and config values match for a task. * * @param[in] config Scan Config. * @param[in] scanner Scanner. * * @return 1 if config and scanner types match, 0 otherwise. */ int create_task_check_config_scanner (config_t config, scanner_t scanner) { int ctype, stype; assert (config); assert (scanner); ctype = config_type (config); stype = scanner_type (scanner); if (ctype == 0 && stype == SCANNER_TYPE_OPENVAS) return 1; if (ctype == 1 && stype == SCANNER_TYPE_OSP) return 1; return 0; } /** * @brief Check scanner and slave values match for a task. * * @param[in] task Task. * @param[in] slave_id ID of slave. "0" to use task's config. * @param[in] scanner_id ID of scanner. * * @return 1 if slave and scanner values match, 0 otherwise. */ int modify_task_check_slave_scanner (task_t task, const char *slave_id, const char *scanner_id) { gchar *existing_scanner_id; /* If slave ID is NULL caller will leave the slave as it is. */ if (slave_id == NULL) { /* If scanner ID is NULL or 0, caller will leave the scanner alone * too. They should already match, so that's fine. */ if ((scanner_id == NULL) || (strcmp (scanner_id, "0") == 0)) return 1; if (task_slave (task)) { /* Scanner will change, so ensure the new one accepts slaves. */ if (strcmp (scanner_id, SCANNER_UUID_DEFAULT)) return 0; } return 1; } /* If slave ID is 0 caller will clear the slave, which is always fine. */ if (slave_id && (strcmp (slave_id, "0") == 0)) return 1; /* Otherwise, caller will set an existing slave on the task. */ if ((scanner_id == NULL) || (strcmp (scanner_id, "0") == 0)) /* Scanner ID is NULL or 0, caller will leave the scanner as it is. */ existing_scanner_id = scanner_uuid (task_scanner (task)); else /* Caller will set a new scanner on the task. */ existing_scanner_id = NULL; /* Either way, ensure that the scanner accepts slaves. */ if (strcmp (existing_scanner_id ? existing_scanner_id : scanner_id, SCANNER_UUID_DEFAULT)) { g_free (existing_scanner_id); return 0; } g_free (existing_scanner_id); return 1; } /** * @brief Check scanner and config values match for a task. * * @param[in] task Task. * @param[in] config_id ID of config. "0" to use task's config. * @param[in] scanner_id ID of scanner. * * @return 1 if config and scanner types match, 0 otherwise. */ int modify_task_check_config_scanner (task_t task, const char *config_id, const char *scanner_id) { config_t config = 0; scanner_t scanner = 0; int ctype, stype; if (config_id == NULL) config_id = "0"; if (scanner_id == NULL) scanner_id = "0"; if (!strcmp (config_id, "0") && !strcmp (scanner_id, "0")) return 1; if (strcmp (config_id, "0")) find_config_with_permission (config_id, &config, "get_configs"); else config = task_config (task); find_scanner_with_permission (scanner_id, &scanner, "get_scanners"); ctype = config_type (config); stype = scanner_type (scanner); /* OSP Scanner with OSP config. */ if (stype == SCANNER_TYPE_OSP && ctype == 1) return 1; /* OpenVAS Scanner with OpenVAS config. */ if (stype == SCANNER_TYPE_OPENVAS && ctype == 0) return 1; /* Default Scanner with OpenVAS Config. */ if (scanner == 0 && ctype == 0) return 1; return 0; } /** * @brief Create a config from an existing config. * * @param[in] name Name of new config and NVT selector. * @param[in] comment Comment on new config. * @param[in] config_id UUID of existing config. * @param[out] new_config New config. * * @return 0 success, 1 config exists already, 2 failed to find existing * config, 99 permission denied, -1 error. */ int copy_config (const char* name, const char* comment, const char *config_id, config_t* new_config) { int ret, type; char *config_selector; gchar *quoted_config_selector; config_t new, old; assert (current_credentials.uuid); sql_begin_immediate (); /* Copy the existing config. */ ret = copy_resource_lock ("config", name, comment, config_id, " family_count, nvt_count, families_growing," " nvts_growing, type", 1, &new, &old); if (ret) { sql ("ROLLBACK;"); return ret; } sql ("INSERT INTO config_preferences (config, type, name, value," " default_value)" " SELECT %llu, type, name, value, default_value FROM config_preferences" " WHERE config = %llu;", new, old); type = config_type (new); if (type > 0) { /* Don't create nvt_selector etc,. for non-standard configs * (eg. OSP config.) Only config preferences are copied. */ sql ("COMMIT;"); if (new_config) *new_config = new; return 0; } sql ("UPDATE configs SET nvt_selector = make_uuid () WHERE id = %llu;", new); config_selector = config_nvt_selector (old); if (config_selector == NULL) { sql ("ROLLBACK;"); return -1; } quoted_config_selector = sql_quote (config_selector); free (config_selector); sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " SELECT (SELECT nvt_selector FROM configs WHERE id = %llu)," " exclude, type, family_or_nvt, family" " FROM nvt_selectors" " WHERE name = '%s';", new, quoted_config_selector); g_free (quoted_config_selector); sql ("COMMIT;"); if (new_config) *new_config = new; return 0; } /** * @brief Delete a config. * * @param[in] config_id UUID of config. * @param[in] ultimate Whether to remove entirely, or to trashcan. * * @return 0 success, 1 fail because a task refers to the config, 2 failed to * find config, 99 permission denied, -1 error. */ int delete_config (const char *config_id, int ultimate) { config_t config = 0; if ((strcmp (config_id, CONFIG_UUID_FULL_AND_FAST) == 0) || (strcmp (config_id, CONFIG_UUID_FULL_AND_FAST_ULTIMATE) == 0) || (strcmp (config_id, CONFIG_UUID_FULL_AND_VERY_DEEP) == 0) || (strcmp (config_id, CONFIG_UUID_FULL_AND_VERY_DEEP_ULTIMATE) == 0) || (strcmp (config_id, CONFIG_UUID_DISCOVERY) == 0) || (strcmp (config_id, CONFIG_UUID_HOST_DISCOVERY) == 0) || (strcmp (config_id, CONFIG_UUID_SYSTEM_DISCOVERY) == 0) || (strcmp (config_id, CONFIG_UUID_EMPTY) == 0)) return 1; sql_begin_immediate (); if (user_may ("delete_config") == 0) { sql ("ROLLBACK;"); return 99; } if (find_config_with_permission (config_id, &config, "delete_config")) { sql ("ROLLBACK;"); return -1; } if (config == 0) { if (find_trash ("config", config_id, &config)) { sql ("ROLLBACK;"); return -1; } if (config == 0) { sql ("ROLLBACK;"); return 2; } if (ultimate == 0) { /* It's already in the trashcan. */ sql ("COMMIT;"); return 0; } /* Check if it's in use by a task in the trashcan. */ if (sql_int ("SELECT count(*) FROM tasks" " WHERE config = %llu" " AND config_location = " G_STRINGIFY (LOCATION_TRASH) ";", config)) { sql ("ROLLBACK;"); return 1; } permissions_set_orphans ("config", config, LOCATION_TRASH); tags_set_orphans ("config", config, LOCATION_TRASH); sql ("DELETE FROM nvt_selectors WHERE name =" " (SELECT nvt_selector FROM configs_trash WHERE id = %llu);", config); sql ("DELETE FROM config_preferences_trash WHERE config = %llu;", config); sql ("DELETE FROM configs_trash WHERE id = %llu;", config); sql ("COMMIT;"); return 0; } if (ultimate) { if (sql_int ("SELECT count(*) FROM tasks" " WHERE config = %llu" " AND config_location = " G_STRINGIFY (LOCATION_TABLE), config)) { sql ("ROLLBACK;"); return 1; } sql ("DELETE FROM nvt_selectors WHERE name =" " (SELECT nvt_selector FROM configs_trash WHERE id = %llu);", config); permissions_set_orphans ("config", config, LOCATION_TABLE); tags_set_orphans ("config", config, LOCATION_TABLE); } else { config_t trash_config; if (sql_int ("SELECT count(*) FROM tasks" " WHERE config = %llu" " AND config_location = " G_STRINGIFY (LOCATION_TABLE) " AND (hidden = 0 OR hidden = 1);", config)) { sql ("ROLLBACK;"); return 1; } sql ("INSERT INTO configs_trash" " (uuid, owner, name, nvt_selector, comment, family_count, nvt_count," " families_growing, nvts_growing, type," " creation_time, modification_time)" " SELECT uuid, owner, name, nvt_selector, comment, family_count," " nvt_count, families_growing, nvts_growing," " type, creation_time, modification_time" " FROM configs WHERE id = %llu;", config); trash_config = sql_last_insert_id (); sql ("INSERT INTO config_preferences_trash" " (config, type, name, value, default_value)" " SELECT %llu, type, name, value, default_value" " FROM config_preferences WHERE config = %llu;", trash_config, config); /* Update the location of the config in any trashcan tasks. */ sql ("UPDATE tasks" " SET config = %llu," " config_location = " G_STRINGIFY (LOCATION_TRASH) " WHERE config = %llu" " AND config_location = " G_STRINGIFY (LOCATION_TABLE) ";", trash_config, config); permissions_set_locations ("config", config, trash_config, LOCATION_TRASH); tags_set_locations ("config", config, trash_config, LOCATION_TRASH); } sql ("DELETE FROM config_preferences WHERE config = %llu;", config); sql ("DELETE FROM configs WHERE id = %llu;", config); sql ("COMMIT;"); return 0; } /** * @brief Filter columns for scan configs iterator. */ #define CONFIG_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "nvt_selector", "families_total", \ "nvts_total", "families_trend", "nvts_trend", NULL } /** * @brief Scan config iterator columns. */ #define CONFIG_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS (configs), \ { "nvt_selector", NULL }, \ { "family_count", "families_total" }, \ { "nvt_count", "nvts_total"}, \ { "families_growing", "families_trend"}, \ { "nvts_growing", "nvts_trend"}, \ { "type", NULL }, \ { NULL, NULL } \ } /** * @brief Scan config iterator columns for trash case. */ #define CONFIG_ITERATOR_TRASH_COLUMNS \ { \ GET_ITERATOR_COLUMNS (configs_trash), \ { "nvt_selector", NULL }, \ { "family_count", "families_total" }, \ { "nvt_count", "nvts_total"}, \ { "families_growing", "families_trend"}, \ { "nvts_growing", "nvts_trend"}, \ { "type", NULL }, \ { NULL, NULL } \ } /** * @brief Count the number of scan configs. * * @param[in] get GET params. * * @return Total number of scan configs filtered set. */ int config_count (const get_data_t *get) { static const char *filter_columns[] = CONFIG_ITERATOR_FILTER_COLUMNS; static column_t columns[] = CONFIG_ITERATOR_COLUMNS; static column_t trash_columns[] = CONFIG_ITERATOR_TRASH_COLUMNS; return count ("config", get, columns, trash_columns, filter_columns, 0, 0, 0, TRUE); } /** * @brief Initialise a config iterator, limited to user's configs. * * @param[in] iterator Iterator. * @param[in] config Config. 0 for all. * @param[in] trash Whether to iterate over trashcan configs. * @param[in] ascending Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "id". */ void init_user_config_iterator (iterator_t* iterator, config_t config, int trash, int ascending, const char* sort_field) { static column_t select_columns[] = CONFIG_ITERATOR_COLUMNS; gchar *columns; gchar *sql; assert (current_credentials.uuid); columns = columns_build_select (select_columns); if (config) sql = g_strdup_printf ("SELECT %s" " FROM configs%s" " WHERE id = %llu" " AND ((owner IS NULL) OR (owner =" " (SELECT id FROM users" " WHERE users.uuid = '%s')))" " ORDER BY %s %s;", columns, trash ? "_trash" : "", config, current_credentials.uuid, sort_field ? sort_field : "id", ascending ? "ASC" : "DESC"); else sql = g_strdup_printf ("SELECT %s" " FROM configs%s" " WHERE ((owner IS NULL) OR (owner =" " (SELECT id FROM users" " WHERE users.uuid = '%s')))" " ORDER BY %s %s;", columns, trash ? "_trash" : "", current_credentials.uuid, sort_field ? sort_field : "id", ascending ? "ASC" : "DESC"); g_free (columns); init_iterator (iterator, sql); g_free (sql); } /** * @brief Initialise a scan config iterator. * * @param[in] iterator Iterator. * @param[in] get GET data. * * @return 0 success, 1 failed to find scan config, failed to find filter, * -1 error. */ int init_config_iterator (iterator_t* iterator, const get_data_t *get) { static const char *filter_columns[] = CONFIG_ITERATOR_FILTER_COLUMNS; static column_t columns[] = CONFIG_ITERATOR_COLUMNS; static column_t trash_columns[] = CONFIG_ITERATOR_TRASH_COLUMNS; return init_get_iterator (iterator, "config", get, columns, trash_columns, filter_columns, 0, NULL, NULL, TRUE); } /** * @brief Get the nvt_selector from a config iterator. * * @param[in] iterator Iterator. * * @return The nvt_selector of the config, or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (config_iterator_nvt_selector, GET_ITERATOR_COLUMN_COUNT); /** * @brief Get the family count from a config iterator. * * @param[in] iterator Iterator. * * @return Family count if known, -1 else. */ int config_iterator_family_count (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 1); return ret; } /** * @brief Get the nvt count from a config iterator. * * @param[in] iterator Iterator. * * @return Nvt count if known, -1 else. */ int config_iterator_nvt_count (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 2); return ret; } /** * @brief Get the families growing state from a config iterator. * * @param[in] iterator Iterator. * * @return Families growing flag. */ int config_iterator_families_growing (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT +3); return ret; } /** * @brief Get the NVTs growing state from a config iterator. * * @param[in] iterator Iterator. * * @return NVTs growing flag. */ int config_iterator_nvts_growing (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 4); return ret; } /** * @brief Get the type from a config iterator. * * @param[in] iterator Iterator. * * @return Config type. */ int config_iterator_type (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 5); return ret; } /** * @brief Return whether a config is referenced by a task. * * The predefined configs are always in use. * * @param[in] config Config. * * @return 1 if in use, else 0. */ int config_in_use (config_t config) { if (sql_int ("SELECT count(*) FROM configs" " WHERE id = %i" " AND (uuid = '" CONFIG_UUID_FULL_AND_FAST "'" " OR uuid = '" CONFIG_UUID_FULL_AND_FAST_ULTIMATE "'" " OR uuid = '" CONFIG_UUID_FULL_AND_VERY_DEEP "'" " OR uuid = '" CONFIG_UUID_FULL_AND_VERY_DEEP_ULTIMATE "'" " OR uuid = '" CONFIG_UUID_EMPTY "'" " OR uuid = '" CONFIG_UUID_DISCOVERY "'" " OR uuid = '" CONFIG_UUID_HOST_DISCOVERY "'" " OR uuid = '" CONFIG_UUID_SYSTEM_DISCOVERY "');", config)) return 1; return sql_int ("SELECT count(*) FROM tasks" " WHERE config = %llu" " AND config_location = " G_STRINGIFY (LOCATION_TABLE) " AND (hidden = 0 OR hidden = 1);", config); } /** * @brief Return whether a config is referenced by a task outside the trashcan. * * @param[in] config Config. * * @return 1 if in use, else 0. */ int config_writable (config_t config) { return !config_in_use (config); } /** * @brief Return whether a trashcan config is referenced by a task. * * @param[in] config Config. * * @return 1 if in use, else 0. */ int trash_config_in_use (config_t config) { return sql_int ("SELECT count(*) FROM tasks" " WHERE config = %llu" " AND config_location = " G_STRINGIFY (LOCATION_TRASH), config); } /** * @brief Return whether a trashcan config is writable. * * @param[in] config Config. * * @return 1 if in use, else 0. */ int trash_config_writable (config_t config) { return !trash_config_in_use (config); } /** * @brief Return whether a trashcan config is readable. * * @param[in] config_id Config UUID. * * @return 1 if readable, else 0. */ int trash_config_readable_uuid (const gchar *config_id) { config_t found; found = 0; if (find_trash ("config", config_id, &found)) return 0; return found > 0; } /** * @brief Initialise a preference iterator. * * Assume the caller has permission to access the config. * * @param[in] iterator Iterator. * @param[in] config Config. * @param[in] section Preference section, NULL for general preferences. */ void init_preference_iterator (iterator_t* iterator, config_t config) { gchar* sql; sql = g_strdup_printf ("SELECT name, value, type, default_value FROM" " config_preferences WHERE config = %llu;", config); init_iterator (iterator, sql); g_free (sql); } /** * @brief Get the name from a preference iterator. * * @param[in] iterator Iterator. * * @return The name of the preference iterator, or NULL if iteration is * complete. Freed by cleanup_iterator. */ DEF_ACCESS (preference_iterator_name, 0); /** * @brief Get the value from a preference iterator. * * @param[in] iterator Iterator. * * @return The value of the preference iterator, or NULL if iteration is * complete. Freed by cleanup_iterator. */ DEF_ACCESS (preference_iterator_value, 1); /** * @brief Get the type from a preference iterator. * * @param[in] iterator Iterator. * * @return The value of the preference iterator, or NULL if iteration is * complete. Freed by cleanup_iterator. */ DEF_ACCESS (preference_iterator_type, 2); /** * @brief Get the default from a preference iterator. * * @param[in] iterator Iterator. * * @return The default of the preference iterator, or NULL if iteration is * complete. Freed by cleanup_iterator. */ DEF_ACCESS (preference_iterator_default, 3); /** * @brief Initialise an "OTP" preference iterator. * * Assume the caller has permission to access the config. * * This version substitutes the scanner preference when the NVT preference * is missing. * * @param[in] iterator Iterator. * @param[in] config Config containing preferences. * @param[in] section Preference section, NULL for general preferences. */ void init_otp_pref_iterator (iterator_t* iterator, config_t config, const char* section) { gchar *quoted_section; assert (config); assert (section); assert ((strcmp (section, "PLUGINS_PREFS") == 0) || (strcmp (section, "SERVER_PREFS") == 0)); quoted_section = sql_quote (section); init_iterator (iterator, "SELECT config_preferences.name, config_preferences.value" " FROM config_preferences, nvt_preferences" " WHERE config_preferences.config = %llu" " AND config_preferences.type = '%s'" " AND (config_preferences.name = nvt_preferences.name" " OR config_preferences.name LIKE 'timeout.%')" " AND config_preferences.name != 'max_checks'" " AND config_preferences.name != 'max_hosts'" " UNION" " SELECT nvt_preferences.name, nvt_preferences.value" " FROM nvt_preferences" " WHERE nvt_preferences.name %s" " AND (SELECT COUNT(*) FROM config_preferences" " WHERE config = %llu" " AND config_preferences.name = nvt_preferences.name) = 0;", config, quoted_section, strcmp (quoted_section, "SERVER_PREFS") == 0 ? "NOT LIKE '%[%]%'" : "LIKE '%[%]%'", config); g_free (quoted_section); } /** * @brief Get the NAME from a host iterator. * * @param[in] iterator Iterator. * * @return NAME, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (otp_pref_iterator_name, 0); /** * @brief Get the value from a otp_pref iterator. * * @param[in] iterator Iterator. * * @return Value, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (otp_pref_iterator_value, 1); /** * @brief Return the NVT selector associated with a config. * * @param[in] config Config. * * @return Name of NVT selector if config exists and NVT selector is set, else * NULL. */ char* config_nvt_selector (config_t config) { return sql_string ("SELECT nvt_selector FROM configs WHERE id = %llu;", config); } /** * @brief Set a preference of a config. * * @param[in] config Config. * @param[in] nvt UUID of NVT. NULL for scanner preference. * @param[in] name Preference name, including NVT name and preference * type. * @param[in] value_64 Preference value in base64. NULL for an NVT * preference removes the preference from the config. * * @return 0 success, 1 config in use, 2 empty radio value, -1 error. */ int manage_set_config_preference (config_t config, const char* nvt, const char* name, const char* value_64) { gchar *quoted_name, *quoted_value, *value; int type_start = -1, type_end = -1, count; if (value_64 == NULL) { int end = -1; sql_begin_immediate (); if (sql_int ("SELECT count(*) FROM tasks" " WHERE config = %llu AND (hidden = 0 OR hidden = 1);", config)) { sql ("ROLLBACK;"); return 1; } quoted_name = sql_quote (name); /* scanner[scanner]:Timeout */ count = sscanf (name, "%*[^[][scanner]:%n", &end); if (count == 0 && end > 0) { /* A scanner preference. Remove type decoration from name. */ g_free (quoted_name); quoted_name = sql_quote (name + end); } sql ("DELETE FROM config_preferences" " WHERE config = %llu" " AND name = '%s';", config, quoted_name); sql ("COMMIT;"); g_free (quoted_name); return 0; } sql_begin_immediate (); if (sql_int ("SELECT count(*) FROM tasks" " WHERE config = %llu AND (hidden = 0 OR hidden = 1);", config)) { sql ("ROLLBACK;"); return 1; } quoted_name = sql_quote (name); if (strlen (value_64)) { gsize value_len; value = (gchar*) g_base64_decode (value_64, &value_len); } else value = g_strdup (""); /* LDAPsearch[entry]:Timeout value */ count = sscanf (name, "%*[^[][%n%*[^]]%n]:", &type_start, &type_end); if (count == 0 && type_start > 0 && type_end > 0) { if (strncmp (name + type_start, "radio", type_end - type_start) == 0) { char *old_value; gchar **split, **point; GString *string; if (strlen (value) == 0) { g_free (quoted_name); g_free (value); sql ("ROLLBACK;"); return 2; } /* A radio. Put the new value on the front of the list of options. */ old_value = sql_string ("SELECT value FROM config_preferences" " WHERE config = %llu" " AND type %s" " AND name = '%s'", config, nvt ? "= 'PLUGINS_PREFS'" : "is NULL", quoted_name); if (old_value == NULL) old_value = sql_string ("SELECT value FROM nvt_preferences" " WHERE name = '%s'", quoted_name); if (old_value) { string = g_string_new (value); split = g_strsplit (old_value, ";", 0); free (old_value); point = split; while (*point) { if (strlen (*point) == 0) { g_free (quoted_name); g_strfreev (split); g_free (value); g_string_free (string, TRUE); sql ("ROLLBACK;"); return -1; } if (strcmp (*point, value)) { g_string_append_c (string, ';'); g_string_append (string, *point); } point++; } g_strfreev (split); g_free (value); value = g_string_free (string, FALSE); } } else if (strncmp (name + type_start, "scanner", type_end - type_start) == 0) { /* A scanner preference. Remove type decoration from name. */ g_free (quoted_name); quoted_name = sql_quote (name + type_end + 2); } } quoted_value = sql_quote ((gchar*) value); g_free (value); if (config_type (config) > 0) sql ("UPDATE config_preferences SET value = '%s'" " WHERE config = %llu AND name = '%s';", quoted_value, config, quoted_name); else { /* nvt prefs are not present on first modification. */ sql ("DELETE FROM config_preferences" " WHERE config = %llu AND type %s AND name = '%s'", config, nvt ? "= 'PLUGINS_PREFS'" : "= 'SERVER_PREFS'", quoted_name); sql ("INSERT INTO config_preferences" " (config, type, name, value) VALUES (%llu, %s, '%s', '%s');", config, nvt ? "'PLUGINS_PREFS'" : "'SERVER_PREFS'", quoted_name, quoted_value); } sql ("COMMIT;"); g_free (quoted_name); g_free (quoted_value); return 0; } /** * @brief Set the comment of a config. * * @param[in] config Config. * @param[in] comment New comment. * * @return 0 success, -1 error. */ int manage_set_config_comment (config_t config, const char* comment) { gchar *quoted_comment; quoted_comment = sql_quote (comment); sql ("UPDATE configs SET comment = '%s', modification_time = m_now ()" " WHERE id = %llu;", quoted_comment, config); g_free (quoted_comment); return 0; } /** * @brief Set the name of a config. * * @param[in] config Config. * @param[in] name New name. * * @return 0 success, 1 config with new name exists already, -1 error. */ int manage_set_config_name (config_t config, const char* name) { gchar *quoted_name; assert (current_credentials.uuid); sql_begin_immediate (); if (resource_with_name_exists (name, "config", config)) { sql ("ROLLBACK;"); return 1; } quoted_name = sql_quote (name); sql ("UPDATE configs SET name = '%s', modification_time = m_now ()" " WHERE id = %llu;", quoted_name, config); g_free (quoted_name); sql ("COMMIT;"); return 0; } /** * @brief Set the name of a config. * * @param[in] config Config. * @param[in] name New name. * @param[in] comment New comment. * * @return 0 success, 1 config with new name exists already, -1 error. */ int manage_set_config_name_comment (config_t config, const char* name, const char* comment) { gchar *quoted_name, *quoted_comment; assert (current_credentials.uuid); sql_begin_immediate (); if (resource_with_name_exists (name, "config", config)) { sql ("ROLLBACK;"); return 1; } quoted_name = sql_quote (name); quoted_comment = sql_quote (comment); sql ("UPDATE configs SET name = '%s', comment = '%s'," " modification_time = m_now ()" " WHERE id = %llu;", quoted_name, quoted_comment, config); g_free (quoted_name); g_free (quoted_comment); sql ("COMMIT;"); return 0; } /** * @brief Set the NVT's selected for a single family of a config. * * @param[in] config Config. * @param[in] family Family name. * @param[in] selected_nvts NVT's. * * @return 0 success, 1 config in use, -1 error. */ int manage_set_config_nvts (config_t config, const char* family, GPtrArray* selected_nvts) { char *selector; gchar *quoted_family, *quoted_selector; int new_nvt_count = 0, old_nvt_count; sql_begin_exclusive (); if (sql_int ("SELECT count(*) FROM tasks" " WHERE config = %llu AND (hidden = 0 OR hidden = 1);", config)) { sql ("ROLLBACK;"); return 1; } quoted_family = sql_quote (family); selector = config_nvt_selector (config); if (selector == NULL) { /* The config should always have a selector. */ g_free (quoted_family); return -1; } quoted_selector = sql_quote (selector); /* If the family is growing, then exclude all no's, otherwise the family * is static, so include all yes's. */ if (nvt_selector_family_growing (selector, family, config_families_growing (config))) { iterator_t nvts; old_nvt_count = nvt_selector_nvt_count (selector, family, 1); free (selector); /* Clear any NVT selectors for this family from the config. */ sql ("DELETE FROM nvt_selectors" " WHERE name = '%s'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) " AND family = '%s';", quoted_selector, quoted_family); /* Exclude all no's. */ new_nvt_count = family_nvt_count (family); init_nvt_iterator (&nvts, (nvt_t) 0, config, family, NULL, 1, NULL); while (next (&nvts)) { const char *oid = nvt_iterator_oid (&nvts); gchar *quoted_oid; if (member (selected_nvts, oid)) continue; quoted_oid = sql_quote (oid); sql ("INSERT INTO nvt_selectors" " (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 1, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) ", '%s', '%s');", quoted_selector, quoted_oid, quoted_family); g_free (quoted_oid); new_nvt_count--; } cleanup_iterator (&nvts); } else { old_nvt_count = nvt_selector_nvt_count (selector, family, 0); free (selector); /* Clear any NVT selectors for this family from the config. */ sql ("DELETE FROM nvt_selectors" " WHERE name = '%s'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) " AND family = '%s';", quoted_selector, quoted_family); /* Include all yes's. */ if (selected_nvts) { gchar *nvt; new_nvt_count = 0; while ((nvt = (gchar*) g_ptr_array_index (selected_nvts, new_nvt_count))) { gchar *quoted_nvt = sql_quote (nvt); sql ("INSERT INTO nvt_selectors" " (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) ", '%s', '%s');", quoted_selector, quoted_nvt, quoted_family); g_free (quoted_nvt); new_nvt_count++; } } } /* Update the cached config info. */ sql ("UPDATE configs SET family_count = family_count + %i," " nvt_count = nvt_count - %i + %i," " modification_time = m_now ()" " WHERE id = %llu;", old_nvt_count == 0 ? (new_nvt_count == 0 ? 0 : 1) : (new_nvt_count == 0 ? -1 : 0), old_nvt_count, MAX (new_nvt_count, 0), config); sql ("COMMIT;"); g_free (quoted_family); g_free (quoted_selector); return 0; } /** * @brief Switch between constraining and generating representation. * * It's up to the caller to start and end a transaction. * * @param[in] config Config name. * @param[in] constraining 1 families currently growing, 0 families currently * static. * * @return 0 success, -1 error. */ static int switch_representation (config_t config, int constraining) { char* selector; gchar *quoted_selector; selector = config_nvt_selector (config); if (selector == NULL) return -1; quoted_selector = sql_quote (selector); if (constraining) { iterator_t families; /* Currently constraining the universe. */ /* Remove the all selector. */ nvt_selector_remove_selector (quoted_selector, NULL, NVT_SELECTOR_TYPE_ALL); /* Convert each family. */ init_family_iterator (&families, 0, NULL, 1); while (next (&families)) { const char *family = family_iterator_name (&families); if (family) { gchar *quoted_family = sql_quote (family); if (nvt_selector_family_growing (selector, family, 1)) /* Add a family include. */ nvt_selector_add (quoted_selector, quoted_family, NULL, 0); else /* Remove the family exclude. */ nvt_selector_remove_selector (quoted_selector, quoted_family, NVT_SELECTOR_TYPE_FAMILY); g_free (quoted_family); } } cleanup_iterator (&families); /* Update the cached config info. */ sql ("UPDATE configs SET families_growing = 0 WHERE id = %llu;", config); } else { iterator_t families; /* Currently generating from empty. */ /* Add the all selector. */ sql ("INSERT INTO nvt_selectors" " (name, exclude, type, family_or_nvt)" " VALUES ('%s', 0, 0, 0);", quoted_selector); /* Convert each family. */ init_family_iterator (&families, 0, NULL, 1); while (next (&families)) { const char *family = family_iterator_name (&families); if (family) { gchar *quoted_family = sql_quote (family); if (nvt_selector_family_growing (selector, family, 0)) /* Remove the family include. */ nvt_selector_remove_selector (quoted_selector, quoted_family, NVT_SELECTOR_TYPE_FAMILY); else /* Add a family exclude. */ nvt_selector_add (quoted_selector, quoted_family, NULL, 1); g_free (quoted_family); } } cleanup_iterator (&families); /* Update the cached config info. */ sql ("UPDATE configs SET families_growing = 1 WHERE id = %llu;", config); } free (selector); g_free (quoted_selector); return 0; } /** * @brief Initialise a config task iterator. * * Iterate over all tasks that use the config. * * @param[in] iterator Iterator. * @param[in] config Config. * @param[in] ascending Whether to sort ascending or descending. */ void init_config_task_iterator (iterator_t* iterator, config_t config, int ascending) { gchar *available; get_data_t get; array_t *permissions; assert (config); get.trash = 0; permissions = make_array (); array_add (permissions, g_strdup ("get_tasks")); available = where_owned ("task", &get, 1, "any", 0, permissions); array_free (permissions); init_iterator (iterator, "SELECT name, uuid, %s FROM tasks" " WHERE config = %llu" " AND hidden = 0" " ORDER BY name %s;", available, config, ascending ? "ASC" : "DESC"); } /** * @brief Get the name from a config_task iterator. * * @param[in] iterator Iterator. * * @return Name, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (config_task_iterator_name, 0); /** * @brief Get the UUID from a config_task iterator. * * @param[in] iterator Iterator. * * @return UUID, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (config_task_iterator_uuid, 1); /** * @brief Get the read permission status from a GET iterator. * * @param[in] iterator Iterator. * * @return 1 if may read, else 0. */ int config_task_iterator_readable (iterator_t* iterator) { if (iterator->done) return 0; return iterator_int (iterator, 2); } /** * @brief Initialise a config timeout iterator. * * Iterate over all timeout preferences of NVTs that have timeouts. * * @param[in] iterator Iterator. * @param[in] config Config. */ void init_config_timeout_iterator (iterator_t* iterator, config_t config) { init_iterator (iterator, "SELECT name, substr (name, 9)," " (SELECT name FROM nvts" " WHERE oid = substr (config_preferences.name, 9))," " value" " FROM config_preferences" " WHERE config = %llu" " AND substr (name, 1, 8) = 'timeout.'" /* Ensure that the NVT pref comes first, in case an * error in the GSA added the NVT pref as a Scanner * pref. */ " ORDER BY type", config); } /** * @brief Get the NVT OID from a config timeout iterator. * * @param[in] iterator Iterator. * * @return NVT OID, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (config_timeout_iterator_oid, 1); /** * @brief Get the NVT OID from a config timeout iterator. * * @param[in] iterator Iterator. * * @return NVT OID, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (config_timeout_iterator_nvt_name, 2); /** * @brief Get the value from a config timeout iterator. * * @param[in] iterator Iterator. * * @return Timeout value, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (config_timeout_iterator_value, 3); /* NVT's. */ /** * @brief Get the name of an NVT. * * @param[in] nvt NVT. * * @return Freshly allocated name of NVT if possible, else NULL. */ char * manage_nvt_name (nvt_t nvt) { return sql_string ("SELECT name FROM nvts WHERE id = %llu;", nvt); } /** * @brief Guess the OID of an NVT given a name. * * @param[in] name Name of NVT. * * @return OID of NVT if possible, else NULL. */ char * nvt_oid (const char *name) { gchar *quoted_name = sql_quote (name); char *ret = sql_string ("SELECT oid FROM nvts WHERE name = '%s' LIMIT 1;", quoted_name); g_free (quoted_name); return ret; } /** * @brief Return feed version of the plugins in the plugin cache. * * @return Number of plugins if the plugins are cached, else NULL. */ char* nvts_feed_version () { return sql_string ("SELECT value FROM %s.meta" " WHERE name = 'nvts_feed_version';", sql_schema ()); } /** * @brief Set the feed version of the plugins in the plugin cache. * * @param[in] feed_version New feed version. * * Also queue an update to the nvti cache. */ void set_nvts_feed_version (const char *feed_version) { gchar* quoted = sql_quote (feed_version); sql ("DELETE FROM %s.meta WHERE name = 'nvts_feed_version';", sql_schema ()); sql ("INSERT INTO %s.meta (name, value)" " VALUES ('nvts_feed_version', '%s');", sql_schema (), quoted); g_free (quoted); sql ("UPDATE %s.meta SET value = 1 WHERE name = 'update_nvti_cache';", sql_schema ()); } /** * @brief Find an NVT given an identifier. * * @param[in] oid An NVT identifier. * @param[out] nvt NVT return, 0 if succesfully failed to find task. * * @return FALSE on success (including if failed to find NVT), TRUE on error. */ gboolean find_nvt (const char* oid, nvt_t* nvt) { switch (sql_int64 (nvt, "SELECT id FROM nvts WHERE oid = '%s';", oid)) { case 0: break; case 1: /* Too few rows in result of query. */ *nvt = 0; break; default: /* Programming error. */ assert (0); case -1: return TRUE; break; } return FALSE; } /** * @brief Make an nvt from an nvti. * * @param[in] nvti NVTI. * @param[in] remove Whether to remove the NVT from the cache first. * * @return An NVT. */ nvt_t make_nvt_from_nvti (const nvti_t *nvti, int remove) { gchar *qod_str, *qod_type; /** @todo Freeing string literals. */ gchar *quoted_version, *quoted_name, *quoted_summary; gchar *quoted_copyright, *quoted_cve, *quoted_bid, *quoted_xref, *quoted_tag; gchar *quoted_cvss_base, *quoted_qod_type, *quoted_family, *value; gchar *quoted_solution_type; int creation_time, modification_time, qod; if (remove) { sql_begin_exclusive (); sql ("DELETE FROM nvts WHERE oid = '%s';", nvti_oid (nvti)); } quoted_version = sql_quote (nvti_version (nvti)); quoted_name = sql_quote (nvti_name (nvti) ? nvti_name (nvti) : ""); quoted_summary = sql_quote (nvti_summary (nvti) ? nvti_summary (nvti) : ""); quoted_copyright = sql_quote (nvti_copyright (nvti) ? nvti_copyright (nvti) : ""); quoted_cve = sql_quote (nvti_cve (nvti) ? nvti_cve (nvti) : ""); quoted_bid = sql_quote (nvti_bid (nvti) ? nvti_bid (nvti) : ""); quoted_xref = sql_quote (nvti_xref (nvti) ? nvti_xref (nvti) : ""); if (nvti_tag (nvti)) { const char *tags; gchar **split, **point; GString *tag; tags = nvti_tag (nvti); /* creation_date=2009-04-09 14:18:58 +0200 (Thu, 09 Apr 2009)|... */ split = g_strsplit (tags, "|", 0); point = split; while (*point) { if (((strlen (*point) > strlen ("creation_date")) && (strncmp (*point, "creation_date", strlen ("creation_date")) == 0) && ((*point)[strlen ("creation_date")] == '=')) || ((strlen (*point) > strlen ("last_modification")) && (strncmp (*point, "last_modification", strlen ("last_modification")) == 0) && ((*point)[strlen ("last_modification")] == '='))) { gchar **move; move = point; g_free (*point); while (*move) { move[0] = move[1]; move++; } } else point++; } point = split; tag = g_string_new (""); while (*point) { if (point[1]) g_string_append_printf (tag, "%s|", *point); else g_string_append_printf (tag, "%s", *point); point++; } g_strfreev (split); quoted_tag = sql_quote (tag->str); g_string_free (tag, TRUE); } else quoted_tag = g_strdup (""); quoted_cvss_base = sql_quote (nvti_cvss_base (nvti) ? nvti_cvss_base (nvti) : ""); qod_str = tag_value (nvti_tag (nvti), "qod"); qod_type = tag_value (nvti_tag (nvti), "qod_type"); if (qod_str == NULL || sscanf (qod_str, "%d", &qod) != 1) qod = qod_from_type (qod_type); quoted_qod_type = sql_quote (qod_type ? qod_type : ""); g_free (qod_str); g_free (qod_type); quoted_family = sql_quote (nvti_family (nvti) ? nvti_family (nvti) : ""); value = tag_value (nvti_tag (nvti), "creation_date"); switch (parse_time (value, &creation_time)) { case -1: g_warning ("%s: Failed to parse creation time of %s: %s", __FUNCTION__, nvti_oid (nvti), value); creation_time = 0; break; case -2: g_warning ("%s: Failed to make time: %s", __FUNCTION__, value); creation_time = 0; break; case -3: g_warning ("%s: Failed to parse timezone offset: %s", __FUNCTION__, value); creation_time = 0; break; } g_free (value); value = tag_value (nvti_tag (nvti), "last_modification"); switch (parse_time (value, &modification_time)) { case -1: g_warning ("%s: Failed to parse last_modification time of %s: %s", __FUNCTION__, nvti_oid (nvti), value); modification_time = 0; break; case -2: g_warning ("%s: Failed to make time: %s", __FUNCTION__, value); modification_time = 0; break; case -3: g_warning ("%s: Failed to parse timezone offset: %s", __FUNCTION__, value); modification_time = 0; break; } g_free (value); value = tag_value (nvti_tag (nvti), "solution_type"); if (value) { quoted_solution_type = sql_quote (value); g_free (value); } else quoted_solution_type = g_strdup (""); sql ("DELETE FROM nvts WHERE oid = '%s';", nvti_oid (nvti)); sql ("INSERT into nvts (oid, version, name, summary, copyright," " cve, bid, xref, tag, category, family, cvss_base," " creation_time, modification_time, uuid, solution_type," " qod, qod_type)" " VALUES ('%s', '%s', '%s', '%s', '%s', '%s', '%s', '%s'," " '%s', %i, '%s', '%s', %i, %i, '%s', '%s', %d, '%s');", nvti_oid (nvti), quoted_version, quoted_name, quoted_summary, quoted_copyright, quoted_cve, quoted_bid, quoted_xref, quoted_tag, nvti_category (nvti), quoted_family, quoted_cvss_base, creation_time, modification_time, nvti_oid (nvti), quoted_solution_type, qod, quoted_qod_type); if (remove) sql ("COMMIT;"); g_free (quoted_version); g_free (quoted_name); g_free (quoted_summary); g_free (quoted_copyright); g_free (quoted_cve); g_free (quoted_bid); g_free (quoted_xref); g_free (quoted_tag); g_free (quoted_cvss_base); g_free (quoted_family); g_free (quoted_solution_type); g_free (quoted_qod_type); return sql_last_insert_id (); } /** * @brief Filter columns for NVT info iterator. */ #define NVT_INFO_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "version", "summary", "cve", "bid", "xref", \ "family", "cvss_base", "severity", "cvss", "script_tags", "qod", \ "qod_type", "solution_type", NULL } /** * @brief NVT iterator columns. */ #define NVT_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS_PREFIX (""), \ { "''", "_owner" }, \ { "0", NULL }, \ { "oid", NULL }, \ { "version", NULL }, \ { "name", NULL }, \ { "summary", NULL }, \ { "copyright", NULL }, \ { "cve", NULL }, \ { "bid", NULL }, \ { "xref", NULL }, \ { "tag", NULL }, \ { "category", NULL }, \ { "family", NULL }, \ { "cvss_base", NULL }, \ { "cvss_base", "severity" }, \ { "cvss_base", "cvss" }, \ { "qod", NULL }, \ { "qod_type", NULL }, \ { "solution_type" , NULL }, \ { "tag", "script_tags" }, \ { NULL, NULL } \ } /** * @brief NVT iterator columns. */ #define NVT_ITERATOR_COLUMNS_NVTS \ { \ GET_ITERATOR_COLUMNS_PREFIX ("nvts."), \ { "''", "_owner" }, \ { "0", NULL }, \ { "oid", NULL }, \ { "version", NULL }, \ { "nvts.name", NULL }, \ { "summary", NULL }, \ { "copyright", NULL }, \ { "cve", NULL }, \ { "bid", NULL }, \ { "xref", NULL }, \ { "tag", NULL }, \ { "category", NULL }, \ { "nvts.family", NULL }, \ { "cvss_base", NULL }, \ { "cvss_base", "severity" }, \ { "cvss_base", "cvss" }, \ { "qod", NULL }, \ { "qod_type", NULL }, \ { "solution_type" , NULL }, \ { "tag", "script_tags" }, \ { NULL, NULL } \ } /** * @brief Initialise an NVT iterator. * * @param[in] iterator Iterator. * @param[in] get GET data. * @param[in] name Name of the info * * @return 0 success, 1 failed to find NVT, 2 failed to find filter, * -1 error. */ int init_nvt_info_iterator (iterator_t* iterator, get_data_t *get, const char *name) { static const char *filter_columns[] = NVT_INFO_ITERATOR_FILTER_COLUMNS; static column_t columns[] = NVT_ITERATOR_COLUMNS; gchar *clause = NULL; int ret; if (get->id) { // FIX what for anyway? gchar *quoted = sql_quote (get->id); clause = g_strdup_printf (" AND uuid = '%s'", quoted); g_free (quoted); } else if (name) { gchar *quoted = sql_quote (name); clause = g_strdup_printf (" AND name = '%s'", quoted); g_free (quoted); /* The entry is specified by name, so filtering just gets in the way. */ g_free (get->filter); get->filter = NULL; } ret = init_get_iterator (iterator, "nvt", get, /* Columns. */ columns, /* Columns for trashcan. */ NULL, filter_columns, 0, NULL, clause, 0); g_free (clause); return ret; } /** * @brief Get NVT iterator SELECT columns. * * @return SELECT columns */ static gchar * nvt_iterator_columns () { static column_t select_columns[] = NVT_ITERATOR_COLUMNS; static gchar *columns = NULL; if (columns == NULL) columns = columns_build_select (select_columns); return columns; } /** * @brief Get NVT iterator SELECT columns. * * @return SELECT columns */ static gchar * nvt_iterator_columns_nvts () { static column_t select_columns[] = NVT_ITERATOR_COLUMNS_NVTS; static gchar *columns = NULL; if (columns == NULL) columns = columns_build_select (select_columns); return columns; } /** * @brief Count number of nvt. * * @param[in] get GET params. * * @return Total number of cpes in filtered set. */ int nvt_info_count (const get_data_t *get) { static const char *extra_columns[] = NVT_INFO_ITERATOR_FILTER_COLUMNS; static column_t columns[] = NVT_ITERATOR_COLUMNS; return count ("nvt", get, columns, NULL, extra_columns, 0, 0, 0, FALSE); } /** * @brief Initialise an NVT iterator. * * @param[in] iterator Iterator. * @param[in] nvt NVT to iterate over, all if 0. * @param[in] config Config to limit selection to. NULL for all NVTs. * Overridden by \arg nvt. * @param[in] category Category to limit selection to. NULL for all. * @param[in] family Family to limit selection to. NULL for all NVTs. * Overridden by \arg config. * @param[in] ascending Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "id". */ void init_nvt_iterator (iterator_t* iterator, nvt_t nvt, config_t config, const char* family, const char *category, int ascending, const char* sort_field) { assert ((nvt && family) == 0); if (nvt) { gchar* sql; sql = g_strdup_printf ("SELECT %s" " FROM nvts WHERE id = %llu;", nvt_iterator_columns (), nvt); init_iterator (iterator, sql); g_free (sql); } else if (config) { gchar* sql; if (family == NULL) abort (); sql = select_config_nvts (config, family, ascending, sort_field); if (sql) { init_iterator (iterator, sql); g_free (sql); } else init_iterator (iterator, "SELECT %s" " FROM nvts LIMIT 0;", nvt_iterator_columns ()); } else if (family) { gchar *quoted_family = sql_quote (family); init_iterator (iterator, "SELECT %s" " FROM nvts" " WHERE family = '%s'" " ORDER BY %s %s;", nvt_iterator_columns (), quoted_family, sort_field ? sort_field : "name", ascending ? "ASC" : "DESC"); g_free (quoted_family); } else if (category) { gchar *quoted_category; quoted_category = sql_quote (category); init_iterator (iterator, "SELECT %s" " FROM nvts" " WHERE category = '%s'" " ORDER BY %s %s;", nvt_iterator_columns (), quoted_category, sort_field ? sort_field : "name", ascending ? "ASC" : "DESC"); g_free (quoted_category); } else init_iterator (iterator, "SELECT %s" " FROM nvts" " ORDER BY %s %s;", nvt_iterator_columns (), sort_field ? sort_field : "name", ascending ? "ASC" : "DESC"); } /** * @brief Initialise an NVT iterator, for NVTs of a certain CVE. * * @param[in] iterator Iterator. * @param[in] cve CVE name. * @param[in] ascending Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "id". */ void init_cve_nvt_iterator (iterator_t* iterator, const char *cve, int ascending, const char* sort_field) { init_iterator (iterator, "SELECT %s" " FROM nvts" " WHERE cve LIKE '%%%s%%'" " ORDER BY %s %s;", nvt_iterator_columns (), cve ? cve : "", sort_field ? sort_field : "name", ascending ? "ASC" : "DESC"); } /** * @brief Get the OID from an NVT iterator. * * @param[in] iterator Iterator. * * @return OID, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (nvt_iterator_oid, GET_ITERATOR_COLUMN_COUNT); /** * @brief Get the version from an NVT iterator. * * @param[in] iterator Iterator. * * @return Version, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (nvt_iterator_version, GET_ITERATOR_COLUMN_COUNT + 1); /** * @brief Get the name from an NVT iterator. * * @param[in] iterator Iterator. * * @return Name, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (nvt_iterator_name, GET_ITERATOR_COLUMN_COUNT + 2); /** * @brief Get the summary from an NVT iterator. * * @param[in] iterator Iterator. * * @return Summary, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (nvt_iterator_summary, GET_ITERATOR_COLUMN_COUNT + 3); /** * @brief Get the copyright from an NVT iterator. * * @param[in] iterator Iterator. * * @return Copyright, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (nvt_iterator_copyright, GET_ITERATOR_COLUMN_COUNT + 4); /** * @brief Get the cve from an NVT iterator. * * @param[in] iterator Iterator. * * @return Cve, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (nvt_iterator_cve, GET_ITERATOR_COLUMN_COUNT + 5); /** * @brief Get the bid from an NVT iterator. * * @param[in] iterator Iterator. * * @return Bid, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (nvt_iterator_bid, GET_ITERATOR_COLUMN_COUNT + 6); /** * @brief Get the xref from an NVT iterator. * * @param[in] iterator Iterator. * * @return Xref, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (nvt_iterator_xref, GET_ITERATOR_COLUMN_COUNT + 7); /** * @brief Get the tag from an NVT iterator. * * @param[in] iterator Iterator. * * @return Tag, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (nvt_iterator_tag, GET_ITERATOR_COLUMN_COUNT + 8); /** * @brief Get the category from an NVT iterator. * * @param[in] iterator Iterator. * * @return Category. */ int nvt_iterator_category (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 9); return ret; } /** * @brief Get the family from an NVT iterator. * * @param[in] iterator Iterator. * * @return Family, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (nvt_iterator_family, GET_ITERATOR_COLUMN_COUNT + 10); /** * @brief Get the cvss_base from an NVT iterator. * * @param[in] iterator Iterator. * * @return Cvss_base, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (nvt_iterator_cvss_base, GET_ITERATOR_COLUMN_COUNT + 11); /** * @brief Get the qod from an NVT iterator. * * @param[in] iterator Iterator. * * @return QoD, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (nvt_iterator_qod, GET_ITERATOR_COLUMN_COUNT + 14); /** * @brief Get the qod_type from an NVT iterator. * * @param[in] iterator Iterator. * * @return QoD type, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (nvt_iterator_qod_type, GET_ITERATOR_COLUMN_COUNT + 15); /** * @brief Get the solution_type from an NVT iterator. * * @param[in] iterator Iterator. * * @return Solution type, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (nvt_iterator_solution_type, GET_ITERATOR_COLUMN_COUNT + 16); /** * @brief Get the number of NVTs in one or all families. * * @param[in] family Family name. NULL for all families. * * @return Number of NVTs in family, or total number of nvts. */ int family_nvt_count (const char *family) { gchar *quoted_family; if (family == NULL) { static int nvt_count = -1; if (nvt_count == -1) nvt_count = sql_int ("SELECT COUNT(*) FROM nvts" " WHERE family != 'Credentials';"); return nvt_count; } quoted_family = sql_quote (family); int ret = sql_int ("SELECT COUNT(*) FROM nvts WHERE family = '%s';", quoted_family); g_free (quoted_family); return ret; } /** * @brief Get the number of families. * * @return Total number of families. */ int family_count () { return sql_int ("SELECT COUNT(distinct family) FROM nvts" " WHERE family != 'Credentials';"); } /** * @brief Update the cached count and growing information in a config. * * It's up to the caller to organise a transaction. * * @param[in] configs Config to update. */ static void update_config_cache (iterator_t *configs) { const char *selector; gchar *quoted_selector, *quoted_name; int families_growing; if (config_iterator_type (configs) > 0) return; quoted_name = sql_quote (get_iterator_name (configs)); selector = config_iterator_nvt_selector (configs); families_growing = nvt_selector_families_growing (selector); quoted_selector = sql_quote (selector); sql ("UPDATE configs" " SET family_count = %i, nvt_count = %i," " families_growing = %i, nvts_growing = %i" " WHERE name = '%s';", nvt_selector_family_count (quoted_selector, families_growing), nvt_selector_nvt_count (quoted_selector, NULL, families_growing), families_growing, nvt_selector_nvts_growing_2 (quoted_selector, families_growing), quoted_name); g_free (quoted_name); g_free (quoted_selector); } /** * @brief Update the cached count and growing information in every config. * * Only consider configs for the current user. * * It's up to the caller to organise a transaction. * * @param[in] config Config to update. 0 for all. */ static void update_config_caches (config_t config) { iterator_t configs; init_user_config_iterator (&configs, config, 0, 1, NULL); while (next (&configs)) update_config_cache (&configs); cleanup_iterator (&configs); } /** * @brief Update count and growing info in every config across all users. * * It's up to the caller to organise a transaction. */ static void update_all_config_caches () { static column_t select_columns[] = CONFIG_ITERATOR_COLUMNS; gchar *columns; iterator_t configs; columns = columns_build_select (select_columns); init_iterator (&configs, "SELECT %s FROM configs;", columns); g_free (columns); while (next (&configs)) update_config_cache (&configs); cleanup_iterator (&configs); } /** * @brief Update count and growing info in config, without checking user. * * For use during initialisation. * * @param[in] uuid Config UUID. * * It's up to the caller to organise a transaction. */ void update_config_cache_init (const char *uuid) { static column_t select_columns[] = CONFIG_ITERATOR_COLUMNS; gchar *columns; iterator_t configs; columns = columns_build_select (select_columns); init_iterator (&configs, "SELECT %s FROM configs WHERE uuid = '%s';", columns, uuid); g_free (columns); while (next (&configs)) update_config_cache (&configs); cleanup_iterator (&configs); } /** * @brief Inserts a nvt from nvti structure. * * @param[in] nvti nvti_t to insert in nvts table. * @param[in] dummy dummy pointer to match GFunc prototype. * */ static void insert_nvt_from_nvti (gpointer nvti, gpointer dummy) { if (nvti == NULL) return; if (progress) progress (); make_nvt_from_nvti (nvti, 0); } /** * @brief Inserts NVTs in DB from a list of nvti_t structures. * * @param[in] nvts_list List of nvts to be inserted. */ static void insert_nvts_list (GList *nvts_list) { g_list_foreach (nvts_list, insert_nvt_from_nvti, NULL); } /** * @brief Complete an update of the NVT cache. * * @param[in] nvts_list List of nvti_t to insert. * @param[in] mode -1 updating, -2 rebuilding. */ void manage_complete_nvt_cache_update (GList *nvts_list, int mode) { iterator_t configs; /* In the case of rebuild, nvti's are in scanner_plugins_list, insert * them into DB. */ insert_nvts_list (nvts_list); /* Remove preferences from configs where the preference has vanished from * the associated NVT. */ if (progress) progress (); init_iterator (&configs, "SELECT id FROM configs;"); while (next (&configs)) sql ("DELETE FROM config_preferences" " WHERE config = %llu" " AND type = 'PLUGINS_PREFS'" " AND name NOT IN (SELECT nvt_preferences.name FROM nvt_preferences);", get_iterator_resource (&configs)); cleanup_iterator (&configs); if (progress) progress (); if (check_config_families ()) g_warning ("%s: Error updating config families." " One or more configs refer to an outdated family of an NVT.", __FUNCTION__); if (progress) progress (); update_all_config_caches (); if (progress) progress (); refresh_nvt_cves (); if (mode == -2) sql ("COMMIT;"); if (progress) progress (); } /* NVT selectors. * * An NVT selector is a named selection of NVT's from the cache of all * NVT's. * * An NVT selector is made up of zero or more selectors. The selectors * combine in id order to make a selection. Depending on the choice * of selectors the selection can be static or growing. A growing * selection can grow when new NVT's enter the NVT cache, either because it * selects new families or because it selects new NVT's within exising * families. * * There are three types of selectors that an NVT selector can contain. * * 1) The "all selector", which selects all families and all NVT's in * those families. The only way to construct the NVT selector so * that it grows to includes new families, is to add this selector. * * 2) A "family" selector, which designates an entire family. * * 3) An "NVT" selector, which designates a single NVT. * * The naming overlaps here. It's a selector of type NVT, which is * part of an "NVT selector" (a named collection of selectors). * * The family and NVT type selectors can either include or exclude the * designated NVT's. * * While the all selector provides a way to select every single NVT, the * empty NVT selector corresponds to an empty NVT set. * * The selectors provide a mechanism to select a wide range of NVT * combinations. The mechanism allows for complex selections involving * redundant selectors. The Manager, however, only implements a simple * subset of the possible combinations of selectors. This simple subset * is split into two cases. * * 1) Constraining the universe. * * The all selector and an optional exclude for each family, * optional NVT includes in the excluded families, and optional NVT * includes in all other families. * * This allows a growing collection of families, while any family * can still have a static NVT selection. * * 2) Generating from empty. * * An empty set of selectors with an optional include for each family, * optional NVT excludes in the included families, and optional NVT * includes in all other families. * * This allows a static collection of families, while any family * can still grow when new NVT's enter the family. * * Either case allows one or more NVT's to be excluded from the family, both * when the family is growing and when the family is static. */ /* These could handle strange cases, like when a family is * included then excluded, or all is included then later excluded. * However, OMP prevents those cases from occuring. */ /** * @brief Get the number of families selected by an NVT selector. * * A growing family which has all current NVT's excluded is still * considered as selected by the NVT selector. * * @param[in] quoted_selector SQL-quoted selector name. * @param[in] families_growing 1 if families are growing, else 0. * * @return The number of families selected by an NVT selector. */ int nvt_selector_family_count (const char* quoted_selector, int families_growing) { if (families_growing) /* Assume the only family selectors are excludes. */ return family_count () - sql_int ("SELECT COUNT(distinct family_or_nvt) FROM nvt_selectors" " WHERE name = '%s'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_FAMILY) " AND exclude = 0" " LIMIT 1;", quoted_selector); /* Assume that the only family selectors are includes, and that if a * selection has any NVT includes then it only has NVT includes. */ return sql_int ("SELECT COUNT (DISTINCT family)" " FROM (SELECT DISTINCT family FROM nvt_selectors" " WHERE name = '%s'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_FAMILY) " AND exclude = 0" " UNION SELECT family FROM nvt_selectors" " WHERE name = '%s'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) " AND exclude = 0" " AND family IS NOT NULL) AS subquery;", quoted_selector, quoted_selector); } /** * @brief Get the family growth status of an NVT selector. * * @param[in] selector NVT selector. * * @return 1 growing, 0 static. */ static int nvt_selector_families_growing (const char* selector) { /** @todo Quote selector. */ /* The number of families can only grow if there is selector that includes * all. */ #if 0 return sql_int ("SELECT COUNT(*) FROM nvt_selectors" " WHERE name = '%s'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_ALL) " AND exclude = 0" " LIMIT 1;", selector); #else char *string; string = sql_string ("SELECT name FROM nvt_selectors" " WHERE name = '%s'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_ALL) " AND exclude = 0" " LIMIT 1;", selector); if (string == NULL) return 0; free (string); return 1; #endif } /** * @brief Get the NVT growth status of an NVT selector. * * @param[in] quoted_selector SQL-quoted selector name. * @param[in] families_growing 1 if families are growing, else 0. * * @return 1 growing, 0 static. */ static int nvt_selector_nvts_growing_2 (const char* quoted_selector, int families_growing) { if (families_growing) /* Assume the only family selectors are excludes. */ return (family_count () - sql_int ("SELECT COUNT(distinct family_or_nvt) FROM nvt_selectors" " WHERE name = '%s'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_FAMILY) " AND exclude = 0" " LIMIT 1;", quoted_selector)) > 0; /* Assume the only family selectors are includes. */ return sql_int ("SELECT COUNT(*) FROM nvt_selectors" " WHERE name = '%s'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_FAMILY) " AND exclude = 0" " LIMIT 1;", quoted_selector) > 0; } /** @todo Move these config functions to the config section. */ /** * @brief Get the NVT growth status of a config. * * @param[in] config Config. * * @return 1 growing, 0 static. */ int config_nvts_growing (config_t config) { return sql_int ("SELECT nvts_growing FROM configs" " WHERE id = %llu;", config); } /** * @brief Get the family growth status of a config. * * @param[in] config Config. * * @return 1 growing, 0 static. */ int config_families_growing (config_t config) { return sql_int ("SELECT families_growing FROM configs" " WHERE id = %llu;", config); } /** * @brief Initialise an NVT selector iterator. * * @param[in] iterator Iterator. * @param[in] selector Name of single selector to iterate over, NULL for all. * @param[in] config Config to limit iteration to, 0 for all. * @param[in] type Type of selector. All if config is given. */ void init_nvt_selector_iterator (iterator_t* iterator, const char* selector, config_t config, int type) { gchar *sql; assert (selector ? config == 0 : (config ? selector == NULL : 1)); assert (config ? type == NVT_SELECTOR_TYPE_ANY : (type >= 0 && type <= 2)); if (selector) { gchar *quoted_selector = sql_quote (selector); sql = g_strdup_printf ("SELECT exclude, family_or_nvt, name, type" " FROM nvt_selectors" " WHERE name = '%s' AND type = %i;", quoted_selector, type); g_free (quoted_selector); } else if (config) sql = g_strdup_printf ("SELECT exclude, family_or_nvt, name, type" " FROM nvt_selectors" " WHERE name =" " (SELECT nvt_selector FROM configs" " WHERE configs.id = %llu);", config); else sql = g_strdup_printf ("SELECT exclude, family_or_nvt, name, type" " FROM nvt_selectors" " WHERE type = %i;", type); init_iterator (iterator, sql); g_free (sql); } /** * @brief Get whether the selector rule is an include rule. * * @param[in] iterator Iterator. * * @return -1 if iteration is complete, 1 if include, else 0. */ int nvt_selector_iterator_include (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, 0); return ret == 0; } /** * @brief Get the NVT or family from an NVT selector iterator. * * @param[in] iterator Iterator. * * @return NVT selector, or NULL if iteration is complete. */ DEF_ACCESS (nvt_selector_iterator_nvt, 1); /** * @brief Get the name from an NVT selector iterator. * * @param[in] iterator Iterator. * * @return NVT selector, or NULL if iteration is complete. */ DEF_ACCESS (nvt_selector_iterator_name, 2); /** * @brief Get the type from an NVT selector. * * @param[in] iterator Iterator. * * @return -1 if iteration is complete, 1 if include, else 0. */ int nvt_selector_iterator_type (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, 3); return ret; } /** * @brief Initialise an NVT selector family iterator. * * @param[in] iterator Iterator. * @param[in] all True if families are growing in the selector, else 0. * Only considered with a selector. * @param[in] selector Name of NVT selector. NULL for all families. * @param[in] ascending Whether to sort ascending or descending. */ void init_family_iterator (iterator_t* iterator, int all, const char* selector, int ascending) { gchar *quoted_selector; if (selector == NULL) { init_iterator (iterator, "SELECT distinct family FROM nvts" " WHERE family != 'Credentials'" " ORDER BY family %s;", ascending ? "ASC" : "DESC"); return; } quoted_selector = sql_quote (selector); if (all) /* Constraining the universe. Presume there is a family exclude for * every NVT include. */ init_iterator (iterator, "SELECT distinct family FROM nvts" " WHERE family != 'Credentials'" " EXCEPT" " SELECT distinct family FROM nvt_selectors" " WHERE type = " G_STRINGIFY (NVT_SELECTOR_TYPE_FAMILY) " AND exclude = 1" " AND name = '%s'" " UNION" " SELECT distinct family FROM nvt_selectors" " WHERE type = " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) " AND exclude = 0" " AND name = '%s'" " ORDER BY 1 %s;", /* 1 is family. */ quoted_selector, quoted_selector, ascending ? "ASC" : "DESC"); else /* Generating from empty. Presume any exclude is covered by an include. */ init_iterator (iterator, "SELECT distinct family FROM nvt_selectors" " WHERE (type = 1 OR type = 2) AND name = '%s'" " AND family != 'Credentials'" " ORDER BY 1 %s;", /* 1 is family. */ quoted_selector, ascending ? "ASC" : "DESC"); g_free (quoted_selector); } /** * @brief Get the name from a family iterator. * * @param[in] iterator Iterator. * * @return Name, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (family_iterator_name, 0); /** * @brief Get whether an NVT selector family is growing. * * @param[in] selector NVT selector. * @param[in] family Family name. * @param[in] all True if selector is an "all" selector, else 0. * * @return 1 growing, 0 static. */ int nvt_selector_family_growing (const char *selector, const char *family, int all) { int ret; gchar *quoted_family; gchar *quoted_selector; quoted_selector = sql_quote (selector); quoted_family = sql_quote (family); if (all) { /* Constraining the universe. It's static if there is a family * exclude. */ ret = sql_int ("SELECT COUNT(*) FROM nvt_selectors" " WHERE name = '%s'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_FAMILY) " AND family_or_nvt = '%s'" " AND exclude = 1" " LIMIT 1;", quoted_selector, quoted_family); g_free (quoted_selector); g_free (quoted_family); return ret ? 0 : 1; } /* Generating from empty. It's growing if there is a family include. */ ret = sql_int ("SELECT COUNT(*) FROM nvt_selectors" " WHERE name = '%s'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_FAMILY) " AND family_or_nvt = '%s'" " AND exclude = 0" " LIMIT 1;", quoted_selector, quoted_family); g_free (quoted_selector); g_free (quoted_family); return ret ? 1 : 0; } /** * @brief Get the number of NVTs selected by an NVT selector. * * @param[in] selector NVT selector. * @param[in] family Family name. NULL for all. * @param[in] growing True if the given family is growing, else 0. * If \param family is NULL, true if the the families * are growing, else 0. * * @return Number of NVTs selected in one or all families. */ int nvt_selector_nvt_count (const char *selector, const char *family, int growing) { if (family) { int ret; /* Count in a single family. */ if (growing) { gchar *quoted_family = sql_quote (family); gchar *quoted_selector = sql_quote (selector); ret = sql_int ("SELECT COUNT(*) FROM nvts WHERE family = '%s';", quoted_family); ret -= sql_int ("SELECT COUNT(*) FROM nvt_selectors" " WHERE exclude = 1 AND type = 2" " AND name = '%s' AND family = '%s';", quoted_selector, quoted_family); g_free (quoted_family); g_free (quoted_selector); } else { gchar *quoted_selector = sql_quote (selector); gchar *quoted_family = sql_quote (family); ret = sql_int ("SELECT COUNT(*) FROM nvt_selectors" " WHERE exclude = 0 AND type = 2" " AND name = '%s' AND family = '%s';", quoted_selector, quoted_family); g_free (quoted_family); g_free (quoted_selector); } return ret; } else { int count; iterator_t families; /* Count in each family. */ count = 0; init_family_iterator (&families, 0, NULL, 1); while (next (&families)) { const char *family = family_iterator_name (&families); if (family) count += nvt_selector_nvt_count (selector, family, nvt_selector_family_growing (selector, family, growing)); } cleanup_iterator (&families); return count; } } /** * @brief Return SQL for selecting NVT's of a config from one family. * * @param[in] config Config. * @param[in] family Family to limit selection to. * @param[in] ascending Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "nvts.id". * * @return Freshly allocated SELECT statement on success, or NULL on error. */ static gchar* select_config_nvts (const config_t config, const char* family, int ascending, const char* sort_field) { gchar *quoted_selector; char *selector = config_nvt_selector (config); if (selector == NULL) /* The config should always have a selector. */ return NULL; /** @todo Free. */ quoted_selector = sql_quote (selector); free (selector); /** @todo Quote family. */ if (config_nvts_growing (config)) { int constraining; /* The number of NVT's can increase. */ constraining = config_families_growing (config); if (constraining) { /* Constraining the universe. */ if (sql_int ("SELECT COUNT(*) FROM nvt_selectors WHERE name = '%s';", quoted_selector) == 1) /* There is one selector, it should be the all selector. */ return g_strdup_printf ("SELECT %s" " FROM nvts WHERE family = '%s'" " ORDER BY %s %s;", nvt_iterator_columns (), family, sort_field ? sort_field : "name", ascending ? "ASC" : "DESC"); /* There are multiple selectors. */ if (sql_int ("SELECT COUNT(*) FROM nvt_selectors" " WHERE name = '%s' AND exclude = 1" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_FAMILY) " AND family_or_nvt = '%s'" ";", quoted_selector, family)) /* The family is excluded, just iterate the NVT includes. */ return g_strdup_printf ("SELECT %s" " FROM nvts, nvt_selectors" " WHERE" " nvts.family = '%s'" " AND nvt_selectors.name = '%s'" " AND nvt_selectors.family = '%s'" " AND nvt_selectors.type = " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) " AND nvt_selectors.exclude = 0" " AND nvts.oid = nvt_selectors.family_or_nvt" " ORDER BY %s %s;", nvt_iterator_columns_nvts (), family, quoted_selector, family, sort_field ? sort_field : "nvts.name", ascending ? "ASC" : "DESC"); /* The family is included. Iterate all NVT's minus excluded NVT's. */ return g_strdup_printf ("SELECT %s" " FROM nvts" " WHERE family = '%s'" " EXCEPT" " SELECT %s" " FROM nvt_selectors, nvts" " WHERE" " nvts.family = '%s'" " AND nvt_selectors.name = '%s'" " AND nvt_selectors.family = '%s'" " AND nvt_selectors.type = " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) " AND nvt_selectors.exclude = 1" " AND nvts.oid = nvt_selectors.family_or_nvt" " ORDER BY %s %s;", nvt_iterator_columns (), family, nvt_iterator_columns_nvts (), family, quoted_selector, family, // FIX PG "ERROR: missing FROM-clause" using nvts.name. sort_field && strcmp (sort_field, "nvts.name") ? sort_field : "3", /* 3 is nvts.name. */ ascending ? "ASC" : "DESC"); } else { int all; /* Generating from empty. */ all = sql_int ("SELECT COUNT(*) FROM nvt_selectors" " WHERE name = '%s' AND exclude = 0" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_FAMILY) " AND family_or_nvt = '%s';", quoted_selector, family); if (all) /* There is a family include for this family. */ return g_strdup_printf ("SELECT %s" " FROM nvts" " WHERE family = '%s'" " EXCEPT" " SELECT %s" " FROM nvt_selectors, nvts" " WHERE" " nvts.family = '%s'" " AND nvt_selectors.name = '%s'" " AND nvt_selectors.family = '%s'" " AND nvt_selectors.type = " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) " AND nvt_selectors.exclude = 1" " AND nvts.oid = nvt_selectors.family_or_nvt" " ORDER BY %s %s;", nvt_iterator_columns (), family, nvt_iterator_columns_nvts (), family, quoted_selector, family, // FIX PG "ERROR: missing FROM-clause" using nvts.name. sort_field && strcmp (sort_field, "nvts.name") ? sort_field : "3", /* 3 is nvts.name. */ ascending ? "ASC" : "DESC"); return g_strdup_printf (" SELECT %s" " FROM nvt_selectors, nvts" " WHERE" " nvts.family = '%s'" " AND nvt_selectors.name = '%s'" " AND nvt_selectors.family = '%s'" " AND nvt_selectors.type = " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) " AND nvt_selectors.exclude = 0" " AND nvts.oid = nvt_selectors.family_or_nvt" " ORDER BY %s %s;", nvt_iterator_columns_nvts (), family, quoted_selector, family, sort_field ? sort_field : "nvts.name", ascending ? "ASC" : "DESC"); } } else { gchar *sql, *quoted_family; /* The number of NVT's is static. Assume a simple list of NVT * includes. */ quoted_family = sql_quote (family); sql = g_strdup_printf ("SELECT %s" " FROM nvt_selectors, nvts" " WHERE nvts.family = '%s'" " AND nvt_selectors.exclude = 0" " AND nvt_selectors.type = " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) " AND nvt_selectors.name = '%s'" " AND nvts.oid = nvt_selectors.family_or_nvt" " ORDER BY %s %s;", nvt_iterator_columns_nvts (), quoted_family, quoted_selector, sort_field ? sort_field : "nvts.id", ascending ? "ASC" : "DESC"); g_free (quoted_family); return sql; } } /** * @brief Remove all selectors of a certain family from an NVT selector. * * @param[in] quoted_selector SQL-quoted selector name. * @param[in] quoted_family SQL-quoted family name. * @param[in] type Selector type to remove. * * @return 0 success, -1 error. */ static void nvt_selector_remove (const char* quoted_selector, const char* quoted_family, int type) { if (type == NVT_SELECTOR_TYPE_ANY) sql ("DELETE FROM nvt_selectors" " WHERE name = '%s'" " AND" " ((type = " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) " AND family = '%s')" " OR (type = " G_STRINGIFY (NVT_SELECTOR_TYPE_FAMILY) " AND family_or_nvt = '%s'));", quoted_selector, quoted_family, quoted_family); else if (type == NVT_SELECTOR_TYPE_NVT) sql ("DELETE FROM nvt_selectors" " WHERE name = '%s'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) " AND family = '%s';", quoted_selector, quoted_family); else if (type == NVT_SELECTOR_TYPE_FAMILY) sql ("DELETE FROM nvt_selectors" " WHERE name = '%s'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_FAMILY) " AND family_or_nvt = '%s';", quoted_selector, quoted_family); } /** * @brief Remove all selectors of a certain type from an NVT selector. * * @param[in] quoted_selector SQL-quoted selector name. * @param[in] family_or_nvt SQL-quoted family name or NVT UUID. * @param[in] type Selector type to remove. * * @return 0 success, -1 error. */ static void nvt_selector_remove_selector (const char* quoted_selector, const char* family_or_nvt, int type) { if (type == NVT_SELECTOR_TYPE_ANY) sql ("DELETE FROM nvt_selectors" " WHERE name = '%s' AND family_or_nvt = '%s');", quoted_selector, family_or_nvt); else if (type == NVT_SELECTOR_TYPE_ALL) sql ("DELETE FROM nvt_selectors" " WHERE name = '%s'" " AND type = " G_STRINGIFY (NVT_SELECTOR_TYPE_ALL) ";", quoted_selector); else sql ("DELETE FROM nvt_selectors" " WHERE name = '%s'" " AND type = %i" " AND family_or_nvt = '%s';", quoted_selector, type, family_or_nvt); } /** * @brief Add a selector to an NVT selector. * * @param[in] quoted_selector SQL-quoted selector name. * @param[in] quoted_family_or_nvt SQL-quoted family or NVT name. * @param[in] quoted_family SQL-quoted family name (NULL for families). * @param[in] exclude 1 exclude selector, 0 include selector. * * @return 0 success, -1 error. */ static void nvt_selector_add (const char* quoted_selector, const char* quoted_family_or_nvt, const char* quoted_family, int exclude) { if (quoted_family == NULL) sql ("INSERT INTO nvt_selectors" " (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', %i, " G_STRINGIFY (NVT_SELECTOR_TYPE_FAMILY) ", '%s', '%s');", quoted_selector, exclude, quoted_family_or_nvt, quoted_family_or_nvt); else sql ("INSERT INTO nvt_selectors" " (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', %i, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) ", '%s', '%s');", quoted_selector, exclude, quoted_family_or_nvt, quoted_family); } /** * @brief Set the family of an NVT selector. * * @param[in] quoted_selector SQL-quoted selector name. * @param[in] family_or_nvt Family name or NVT OID of selector. * @param[in] type Selector type to remove. * @param[in] family New family. * * @return 0 success, -1 error. */ static void nvt_selector_set_family (const char* quoted_selector, const char* family_or_nvt, int type, const char *family) { gchar *quoted_family_or_nvt, *quoted_family; quoted_family_or_nvt = sql_quote (family_or_nvt); quoted_family = sql_quote (family); sql ("UPDATE nvt_selectors SET family = '%s'" " WHERE name = '%s'" " AND family_or_nvt = '%s'" " AND type = %i;", quoted_family, quoted_selector, quoted_family_or_nvt, type); g_free (quoted_family); g_free (quoted_family_or_nvt); } /** * @brief Check whether a family is selected. * * Only works for "generating from empty" selection. * * @param[in] quoted_selector SQL-quoted selector name. * @param[in] quoted_family SQL-quoted family name (NULL for families). * * @return 1 if selected, else 0. */ static int family_is_selected (const char* quoted_selector, const char* quoted_family) { return sql_int ("SELECT count(*) FROM nvt_selectors" " WHERE name = '%s'" " AND (type = " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) " AND family = '%s')" " OR (type = " G_STRINGIFY (NVT_SELECTOR_TYPE_FAMILY) " AND family_or_nvt = '%s');", quoted_selector, quoted_family, quoted_family); } /** * @brief Check whether an NVT selector has a particular selector. * * @param[in] quoted_selector SQL-quoted selector name. * @param[in] family_or_nvt SQL-quoted UUID of NVT, or family name. * @param[in] type Selector type. * @param[in] exclude 1 exclude, 0 include. * * @return 1 if contains include/exclude, else 0. */ static int nvt_selector_has (const char* quoted_selector, const char* family_or_nvt, int type, int exclude) { return sql_int ("SELECT count(*) FROM nvt_selectors" " WHERE name = '%s'" " AND type = %i" " AND exclude = %i" " AND family_or_nvt = '%s'" " LIMIT 1;", quoted_selector, type, exclude, family_or_nvt); } /** * @brief Refresh NVT selection of a config from given families. * * @param[in] config Config. * @param[in] growing_all_families Growing families with all selection. * @param[in] static_all_families Static families with all selection. * @param[in] growing_families The rest of the growing families. * @param[in] grow_families 1 if families should grow, else 0. * * @return 0 success, config in use, -1 error. */ int manage_set_config_families (config_t config, GPtrArray* growing_all_families, GPtrArray* static_all_families, GPtrArray* growing_families, int grow_families) { iterator_t families; gchar *quoted_selector; int constraining; char *selector; sql_begin_exclusive (); if (sql_int ("SELECT count(*) FROM tasks" " WHERE config = %llu AND (hidden = 0 OR hidden = 1);", config)) { sql ("ROLLBACK;"); return 1; } if (config_type (config) > 0) { sql ("ROLLBACK;"); return 0; } constraining = config_families_growing (config); if (constraining + grow_families == 1) { if (switch_representation (config, constraining)) { sql ("ROLLBACK;"); return -1; } constraining = constraining == 0; } selector = config_nvt_selector (config); if (selector == NULL) { /* The config should always have a selector. */ sql ("ROLLBACK;"); return -1; } quoted_selector = sql_quote (selector); /* Loop through all the known families. */ init_family_iterator (&families, 1, NULL, 1); while (next (&families)) { const char *family; family = family_iterator_name (&families); if (family) { int old_nvt_count, new_nvt_count = 0, was_selected, max_nvt_count; int family_growing; int growing_all = member (growing_all_families, family); int static_all = member (static_all_families, family); gchar *quoted_family = sql_quote (family); assert ((growing_all && static_all) == 0); family_growing = nvt_selector_family_growing (selector, family, constraining); old_nvt_count = nvt_selector_nvt_count (selector, family, family_growing); max_nvt_count = family_nvt_count (family); if (growing_all || static_all) { if (old_nvt_count == max_nvt_count && ((growing_all && family_growing) || (static_all && family_growing == 0))) { /* Already in required state. */ g_free (quoted_family); continue; } was_selected = family_is_selected (quoted_selector, quoted_family); /* Flush all selectors in the family from the config. */ nvt_selector_remove (quoted_selector, quoted_family, NVT_SELECTOR_TYPE_ANY); if (static_all) { iterator_t nvts; /* Static selection of all the NVT's currently in the * family. */ if (constraining) { /* Constraining the universe. */ /* Add an exclude for the family. */ nvt_selector_add (quoted_selector, quoted_family, NULL, 1); } else { /* Generating from empty. */ } /* Add an include for every NVT in the family. */ init_nvt_iterator (&nvts, (nvt_t) 0, (config_t) 0, family, NULL, 1, NULL); while (next (&nvts)) { nvt_selector_add (quoted_selector, nvt_iterator_oid (&nvts), quoted_family, 0); new_nvt_count++; } cleanup_iterator (&nvts); } else if (growing_all) { /* Selection of an entire family, which grows with the family. */ if (constraining) { /* Constraining the universe. */ } else { /* Generating from empty. Add an include for the * family. */ nvt_selector_add (quoted_selector, quoted_family, NULL, 0); } new_nvt_count = max_nvt_count; } /* Update the cached config info. */ sql ("UPDATE configs SET nvt_count = nvt_count - %i + %i," " nvts_growing = %i, family_count = family_count + %i," " modification_time = m_now ()" " WHERE id = %llu;", old_nvt_count, new_nvt_count, growing_all ? 1 /* Recalculate the NVT growing state. */ : nvt_selector_nvts_growing_2 (quoted_selector, constraining), was_selected ? 0 : 1, config); } else { int must_grow = member (growing_families, family); if (must_grow) { /* The resulting family must be growing. If currently * growing, leave as is, otherwise switch family to * growing. */ if (old_nvt_count == max_nvt_count) { iterator_t nvts; /* All were selected. Clear selection, ensuring that * the family is growing in the process. */ nvt_selector_remove (quoted_selector, quoted_family, NVT_SELECTOR_TYPE_ANY); if (constraining == 0) /* Generating. */ nvt_selector_add (quoted_selector, quoted_family, NULL, 0); /* Add an exclude for every NVT in the family. */ init_nvt_iterator (&nvts, (nvt_t) 0, (config_t) 0, family, NULL, 1, NULL); while (next (&nvts)) nvt_selector_add (quoted_selector, nvt_iterator_oid (&nvts), quoted_family, 1); cleanup_iterator (&nvts); /* Update the cached config info. */ sql ("UPDATE configs SET nvt_count = nvt_count - %i," " nvts_growing = 1, modification_time = m_now ()" " WHERE id = %llu;", old_nvt_count, config); } else if (family_growing == 0) { iterator_t nvts; if (constraining == 0) nvt_selector_add (quoted_selector, quoted_family, NULL, 0); /* Remove any included NVT, add excludes for all * other NVT's. */ init_nvt_iterator (&nvts, (nvt_t) 0, (config_t) 0, family, NULL, 1, NULL); while (next (&nvts)) if (nvt_selector_has (quoted_selector, nvt_iterator_oid (&nvts), NVT_SELECTOR_TYPE_NVT, 0)) nvt_selector_remove_selector (quoted_selector, nvt_iterator_oid (&nvts), NVT_SELECTOR_TYPE_NVT); else nvt_selector_add (quoted_selector, nvt_iterator_oid (&nvts), quoted_family, 1); cleanup_iterator (&nvts); /* Update the cached config info. */ sql ("UPDATE configs SET nvts_growing = 1," " modification_time = m_now ()" " WHERE id = %llu;", config); } } else { /* The resulting family must be static. If currently * static, leave as is, otherwise switch family to * static. */ if (old_nvt_count == max_nvt_count) { /* All were selected, clear selection, ensuring the * family is static in the process. */ nvt_selector_remove (quoted_selector, quoted_family, NVT_SELECTOR_TYPE_ANY); if (constraining) nvt_selector_add (quoted_selector, quoted_family, NULL, 1); /* Update the cached config info. */ sql ("UPDATE configs SET nvts_growing = %i," " nvt_count = nvt_count - %i," " family_count = family_count - 1," " modification_time = m_now ()" " WHERE id = %llu;", /* Recalculate the NVT growing state. */ nvt_selector_nvts_growing_2 (quoted_selector, constraining), old_nvt_count, config); } else if (family_growing) { iterator_t nvts; if (constraining) nvt_selector_add (quoted_selector, quoted_family, NULL, 1); else nvt_selector_remove (quoted_selector, quoted_family, NVT_SELECTOR_TYPE_FAMILY); /* Remove any excluded NVT; add includes for all * other NVT's. */ init_nvt_iterator (&nvts, (nvt_t) 0, (config_t) 0, family, NULL, 1, NULL); while (next (&nvts)) if (nvt_selector_has (quoted_selector, nvt_iterator_oid (&nvts), NVT_SELECTOR_TYPE_NVT, 1)) nvt_selector_remove_selector (quoted_selector, nvt_iterator_oid (&nvts), NVT_SELECTOR_TYPE_NVT); else nvt_selector_add (quoted_selector, nvt_iterator_oid (&nvts), quoted_family, 0); cleanup_iterator (&nvts); /* Update the cached config info. */ sql ("UPDATE configs SET nvts_growing = %i," " modification_time = m_now ()" " WHERE id = %llu;", /* Recalculate the NVT growing state. */ nvt_selector_nvts_growing_2 (quoted_selector, constraining), config); } } } g_free (quoted_family); } } cleanup_iterator (&families); sql ("COMMIT;"); g_free (quoted_selector); free (selector); return 0; } /** * @brief Insert NVT selectors. * * @param[in] quoted_name Name of NVT selector. * @param[in] selectors NVT selectors. * * @return 0 success, -1 error, -3 input error. */ static int insert_nvt_selectors (const char *quoted_name, const array_t* selectors /* nvt_selector_t. */) { int index = 0; const nvt_selector_t *selector; if (selectors == NULL) return -3; while ((selector = (nvt_selector_t*) g_ptr_array_index (selectors, index++))) { int type; if (selector->type == NULL) return -3; /** @todo Check that selector->type is actually an integer. */ type = atoi (selector->type); if ((selector->family_or_nvt != NULL) && (type == NVT_SELECTOR_TYPE_NVT)) { gchar *quoted_family_or_nvt, *quoted_family, *family = NULL; nvti_t *nvti = nvtis_lookup (nvti_cache, selector->family_or_nvt); /* An NVT selector. */ if (nvti) { family = nvti_family (nvti); if (family == NULL) { g_warning ("%s: skipping NVT '%s' from import of config '%s'" " because the NVT is missing a family in the" " cache", __FUNCTION__, selector->family_or_nvt, quoted_name); continue; } } else { g_warning ("%s: skipping NVT '%s' from import of config '%s'" " because the NVT is missing from the cache", __FUNCTION__, selector->family_or_nvt, quoted_name); continue; } quoted_family_or_nvt = sql_quote (selector->family_or_nvt); quoted_family = sql_quote (family); sql ("INSERT into nvt_selectors (name, exclude, type, family_or_nvt," " family)" " VALUES ('%s', %i, %i, '%s', '%s');", quoted_name, selector->include ? 0 : 1, type, quoted_family_or_nvt, quoted_family); g_free (quoted_family_or_nvt); g_free (quoted_family); } else if (selector->family_or_nvt) { gchar *quoted_family_or_nvt; /* A family selector. */ if (type != NVT_SELECTOR_TYPE_FAMILY) { g_warning ("%s: skipping NVT '%s' from import of config '%s'" " because the type is wrong (expected family)", __FUNCTION__, selector->family_or_nvt, quoted_name); continue; } quoted_family_or_nvt = sql_quote (selector->family_or_nvt); sql ("INSERT into nvt_selectors (name, exclude, type, family_or_nvt," " family)" " VALUES ('%s', %i, %i, '%s', '%s');", quoted_name, selector->include ? 0 : 1, type, quoted_family_or_nvt, quoted_family_or_nvt); g_free (quoted_family_or_nvt); } else { /* An "all" selector. */ if (type != NVT_SELECTOR_TYPE_ALL) { g_warning ("%s: skipping NVT from import of config '%s'" " because the type is wrong (expected all)", __FUNCTION__, quoted_name); continue; } sql ("INSERT into nvt_selectors (name, exclude, type, family_or_nvt," " family)" " VALUES ('%s', %i, %i, NULL, NULL);", quoted_name, selector->include ? 0 : 1, type); } } return 0; } /** * @brief Change the family of an NVT in a config. * * This is for migrators, when an NVT family changes. * * @param[in] config Config. * @param[in] oid NVT OID. * @param[in] old_family Name of old family. * @param[in] new_family Name of new family. * * @return 0 success, -1 error. */ static int config_update_nvt_family (resource_t config, const char *oid, const char *old_family, const char *new_family) { int constraining; char* selector; gchar *quoted_selector; selector = config_nvt_selector (config); if (selector == NULL) { g_warning ("%s: Failed to get config selector", __FUNCTION__); return -1; } quoted_selector = sql_quote (selector); constraining = config_families_growing (config); g_debug ("%s: Updating NVT family for selector '%s'", __FUNCTION__, selector); if (constraining) { /* Constraining the universe. */ g_debug ("%s: Selector constrains universe", __FUNCTION__); if (nvt_selector_family_growing (selector, old_family, constraining)) { /* Old family is growing. */ g_debug ("%s: Old family is growing", __FUNCTION__); if (nvt_selector_has (quoted_selector, oid, NVT_SELECTOR_TYPE_NVT, 0 /* Included. */)) { /* NVT explicitly included in old family, which is redundant, so * drop selector. */ g_debug ("%s: Drop selector", __FUNCTION__); nvt_selector_remove_selector (quoted_selector, oid, NVT_SELECTOR_TYPE_NVT); } else if (nvt_selector_has (quoted_selector, oid, NVT_SELECTOR_TYPE_NVT, 1 /* Excluded. */)) { /* NVT explicitly excluded from old family. */ g_debug ("%s: NVT excluded from old family", __FUNCTION__); if (nvt_selector_family_growing (selector, new_family, constraining)) { /* New family is growing, change NVT to new family. */ g_debug ("%s: Change family", __FUNCTION__); nvt_selector_set_family (quoted_selector, oid, NVT_SELECTOR_TYPE_NVT, new_family); } else { /* New family static, NVT excluded already, so drop NVT * selector. */ g_debug ("%s: Remove selector", __FUNCTION__); nvt_selector_remove_selector (quoted_selector, oid, NVT_SELECTOR_TYPE_NVT); } } } else { /* Old family is static. */ g_debug ("%s: Old family is static", __FUNCTION__); if (nvt_selector_has (quoted_selector, oid, NVT_SELECTOR_TYPE_NVT, 0 /* Included. */)) { /* NVT explicitly included in old family. */ g_debug ("%s: NVT included in old family", __FUNCTION__); if (nvt_selector_family_growing (selector, new_family, constraining)) { /* New family is growing so it already includes the NVT. * Remove the NVT selector. */ g_debug ("%s: Remove selector", __FUNCTION__); nvt_selector_remove_selector (quoted_selector, oid, NVT_SELECTOR_TYPE_NVT); } else { /* New family static, change NVT to new family. */ g_debug ("%s: Change family", __FUNCTION__); nvt_selector_set_family (quoted_selector, oid, NVT_SELECTOR_TYPE_NVT, new_family); } } else if (nvt_selector_has (quoted_selector, oid, NVT_SELECTOR_TYPE_NVT, 1 /* Excluded. */)) { /* NVT explicitly excluded from old family, which is redundant, so * remove NVT selector. */ g_debug ("%s: Remove selector", __FUNCTION__); nvt_selector_remove_selector (quoted_selector, oid, NVT_SELECTOR_TYPE_NVT); } } } else { /* Generating from empty. */ g_debug ("%s: Selector generates from empty", __FUNCTION__); if (nvt_selector_family_growing (selector, old_family, constraining)) { /* Old family is growing. */ g_debug ("%s: Old family is growing", __FUNCTION__); if (nvt_selector_has (quoted_selector, oid, NVT_SELECTOR_TYPE_NVT, 0 /* Included. */)) { /* NVT explicitly included in old family. This is redundant, so * just remove the NVT selector. */ g_debug ("%s: Remove selector", __FUNCTION__); nvt_selector_remove_selector (quoted_selector, oid, NVT_SELECTOR_TYPE_NVT); } else if (nvt_selector_has (quoted_selector, oid, NVT_SELECTOR_TYPE_NVT, 1 /* Excluded. */)) { /* NVT explicitly excluded from old family. */ g_debug ("%s: NVT excluded from old family", __FUNCTION__); if (nvt_selector_family_growing (selector, new_family, constraining)) { /* New family is growing, change NVT to new family. */ g_debug ("%s: Change family", __FUNCTION__); nvt_selector_set_family (quoted_selector, oid, NVT_SELECTOR_TYPE_NVT, new_family); } else { /* New family static, so the NVT is already excluded from the * new family. Remove the NVT selector. */ g_debug ("%s: Remove selector", __FUNCTION__); nvt_selector_remove_selector (quoted_selector, oid, NVT_SELECTOR_TYPE_NVT); } } } else { /* Old family is static. */ g_debug ("%s: Old family is static", __FUNCTION__); if (nvt_selector_has (quoted_selector, oid, NVT_SELECTOR_TYPE_NVT, 0 /* Included. */)) { /* NVT explicitly included in old family. */ g_debug ("%s: NVT included in old family", __FUNCTION__); if (nvt_selector_family_growing (selector, new_family, constraining)) { /* New family growing, so the NVT is already in there. Remove * the NVT selector. */ g_debug ("%s: Remove selector", __FUNCTION__); nvt_selector_remove_selector (quoted_selector, oid, NVT_SELECTOR_TYPE_NVT); } else { /* New family is static, change NVT to new family. */ g_debug ("%s: Change family", __FUNCTION__); nvt_selector_set_family (quoted_selector, oid, NVT_SELECTOR_TYPE_NVT, new_family); } } else if (nvt_selector_has (quoted_selector, oid, NVT_SELECTOR_TYPE_NVT, 1 /* Excluded. */)) { /* NVT explicitly excluded from old family. This is redundant, * so just remove the NVT selector. */ g_debug ("%s: NVT exclude from old family, remove selector", __FUNCTION__); nvt_selector_remove_selector (quoted_selector, oid, NVT_SELECTOR_TYPE_NVT); } } } g_free (quoted_selector); free (selector); return 0; } /** * @brief Change the family of an NVT in all configs. * * @param[in] oid NVT OID. * @param[in] old_family Name of old family. * @param[in] new_family Name of new family. * * @return 0 success, -1 error. */ static int update_nvt_family (const char *oid, const char *old_family, const char *new_family) { int ret; iterator_t rows; ret = 0; init_iterator (&rows, "SELECT id FROM configs;"); while (next (&rows)) if (config_update_nvt_family (iterator_int64 (&rows, 0), oid, old_family, new_family)) ret = -1; cleanup_iterator (&rows); return ret; } /** * @brief Ensure that all configs refer to the right NVT families. * * When the family of an NVT is changed in the feed, then the config * refers to the wrong family. * * @param[in] config Config. * @param[in] oid NVT OID. * @param[in] old_family Name of old family. * @param[in] new_family Name of new family. * * @return 0 success, -1 error. */ static int check_config_families () { int ret; iterator_t selectors; ret = 0; /* Get all NVT selectors that have the wrong family. */ init_iterator (&selectors, "SELECT DISTINCT family_or_nvt, family," " (SELECT family FROM nvts WHERE oid = family_or_nvt)" " FROM nvt_selectors" " WHERE type = 2" " AND family != (SELECT family FROM nvts" " WHERE oid = family_or_nvt);"); while (next (&selectors)) /* Update the family of the NVT selector. */ if (update_nvt_family (iterator_string (&selectors, 0), iterator_string (&selectors, 1), iterator_string (&selectors, 2))) ret = -1; cleanup_iterator (&selectors); return ret; } /* NVT preferences. */ /** * @brief Add an NVT preference. * * @param[in] name The name of the preference. * @param[in] value The value of the preference. * @param[in] remove Whether to remove the preference from the database first. */ void manage_nvt_preference_add (const char* name, const char* value, int remove) { gchar* quoted_name = sql_quote (name); gchar* quoted_value = sql_quote (value); if (remove) { sql_begin_exclusive (); sql ("DELETE FROM nvt_preferences WHERE name = '%s';", quoted_name); } if (strcmp (name, "port_range")) sql ("INSERT into nvt_preferences (name, value)" " VALUES ('%s', '%s');", quoted_name, quoted_value); if (remove) sql ("COMMIT;"); g_free (quoted_name); g_free (quoted_value); } /** * @brief Enable the NVT preferences. */ void manage_nvt_preferences_enable () { sql ("DELETE FROM %s.meta WHERE name = 'nvt_preferences_enabled';", sql_schema ()); sql ("INSERT INTO %s.meta (name, value)" " VALUES ('nvt_preferences_enabled', 1);", sql_schema ()); } /** * @brief Initialise an NVT preference iterator. * * @param[in] iterator Iterator. * @param[in] name Name of NVT, NULL for all preferences. */ void init_nvt_preference_iterator (iterator_t* iterator, const char *name) { if (name) { gchar *quoted_name = sql_quote (name); init_iterator (iterator, "SELECT name, value FROM nvt_preferences" " WHERE name LIKE '%s[%%'" " AND name != 'cache_folder'" " AND name != 'include_folders'" " AND name != 'nasl_no_signature_check'" " AND name != 'network_targets'" " AND name != 'ntp_save_sessions'" " AND name NOT LIKE 'server_info_%%'" /* Task preferences. */ " AND name != 'max_checks'" " AND name != 'max_hosts'" " ORDER BY name ASC", quoted_name); g_free (quoted_name); } else init_iterator (iterator, "SELECT name, value FROM nvt_preferences" " WHERE name != 'cache_folder'" " AND name != 'include_folders'" " AND name != 'nasl_no_signature_check'" " AND name != 'network_targets'" " AND name != 'ntp_save_sessions'" " AND name NOT LIKE 'server_info_%%'" /* Task preferences. */ " AND name != 'max_checks'" " AND name != 'max_hosts'" " ORDER BY name ASC"); } /** * @brief Get the name from an NVT preference iterator. * * @param[in] iterator Iterator. * * @return Name, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (nvt_preference_iterator_name, 0); /** * @brief Get the value from an NVT preference iterator. * * @param[in] iterator Iterator. * * @return Value, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (nvt_preference_iterator_value, 1); /** * @brief Get the real name from an NVT preference iterator. * * @param[in] iterator Iterator. * * @return Real name. */ char* nvt_preference_iterator_real_name (iterator_t* iterator) { const char *ret; if (iterator->done) return NULL; ret = iterator_string (iterator, 0); if (ret) { int value_start = -1, value_end = -1, count; /* LDAPsearch[entry]:Timeout value */ count = sscanf (ret, "%*[^[][%*[^]]]:%n%*[ -~]%n", &value_start, &value_end); if (count == 0 && value_start > 0 && value_end > 0) { ret += value_start; return g_strdup (ret); } return g_strdup (ret); } return NULL; } /** * @brief Get the type from an NVT preference iterator. * * @param[in] iterator Iterator. * * @return Type. */ char* nvt_preference_iterator_type (iterator_t* iterator) { const char *ret; if (iterator->done) return NULL; ret = iterator_string (iterator, 0); if (ret) { int type_start = -1, type_end = -1, count; count = sscanf (ret, "%*[^[][%n%*[^]]%n]:", &type_start, &type_end); if (count == 0 && type_start > 0 && type_end > 0) { ret += type_start; return g_strndup (ret, type_end - type_start); } return NULL; } return NULL; } /** * @brief Get the NVT from an NVT preference iterator. * * @param[in] iterator Iterator. * * @return NVT. */ char* nvt_preference_iterator_nvt (iterator_t* iterator) { const char *ret; if (iterator->done) return NULL; ret = iterator_string (iterator, 0); if (ret) { int type_start = -1, count; count = sscanf (ret, "%*[^[]%n[%*[^]]]:", &type_start); if (count == 0 && type_start > 0) { return g_strndup (ret, type_start); } return NULL; } return NULL; } /** * @brief Get the config value from an NVT preference iterator. * * @param[in] iterator Iterator. * @param[in] config Config. * * @return Freshly allocated config value. */ char* nvt_preference_iterator_config_value (iterator_t* iterator, config_t config) { gchar *quoted_name, *value; const char *ret; if (iterator->done) return NULL; quoted_name = sql_quote (iterator_string (iterator, 0)); value = sql_string ("SELECT value FROM config_preferences" " WHERE config = %llu" " AND name = '%s'" /* Ensure that the NVT pref comes first, in case an * error in the GSA added the NVT pref as a Scanner * pref. */ " ORDER BY type", config, quoted_name); g_free (quoted_name); if (value) return value; ret = iterator_string (iterator, 1); if (ret) return g_strdup (ret); return NULL; } /** * @brief Get the number preferences available for an NVT. * * @param[in] name Name of NVT. * * @return Number of possible preferences on NVT. */ int nvt_preference_count (const char *name) { gchar *quoted_name = sql_quote (name); int ret = sql_int ("SELECT COUNT(*) FROM nvt_preferences" " WHERE name LIKE '%s[%%';", quoted_name); g_free (quoted_name); return ret; } /** * @brief Get the value of a task preference. * * @param[in] task Task. * @param[in] name Preference name. * * @return Freshly allocated task preference value or NULL if pref missing. */ char* task_preference_value (task_t task, const char *name) { gchar *quoted_name, *value; quoted_name = sql_quote (name); value = sql_string ("SELECT value FROM task_preferences" " WHERE task = %llu" " AND name = '%s';", task, quoted_name); if (value) { g_free (quoted_name); return value; } value = sql_string ("SELECT value FROM nvt_preferences" " WHERE name = '%s';", quoted_name); g_free (quoted_name); return value; } /** * @brief Set the preferences of a task. * * Only the given preferences are affected. A NULL value means to remove * the preference (reverts to using scanner value). * * @param[in] task Task. * @param[in] preferences Preferences. * * @return 0 success, 1 invalid auto_delete value, 2 auto_delete_data out of * range. */ int set_task_preferences (task_t task, array_t *preferences) { if (preferences) { guint index; for (index = 0; index < preferences->len; index++) { name_value_t *pair; pair = (name_value_t*) g_ptr_array_index (preferences, index); if (pair && pair->name) { gchar *quoted_name; quoted_name = sql_quote (pair->name); if (pair->value) { gchar *quoted_value; if ((strcmp (pair->name, "auto_delete") == 0) && (strcmp (pair->value, "keep")) && (strcmp (pair->value, "no"))) { return 1; } if (strcmp (pair->name, "auto_delete_data") == 0) { int keep; keep = atoi (pair->value); if (keep < 5 || keep > 1200) return 2; } quoted_value = sql_quote (pair->value); sql_begin_immediate (); if (sql_int ("SELECT COUNT(*) FROM task_preferences" " WHERE task = %llu AND name = '%s';", task, quoted_name)) sql ("UPDATE task_preferences" " SET value = '%s'" " WHERE task = %llu AND name = '%s';", quoted_value, task, quoted_name); else sql ("INSERT INTO task_preferences" " (task, name, value)" " VALUES" " (%llu, '%s', '%s');", task, quoted_name, quoted_value); sql ("COMMIT;"); g_free (quoted_value); } else sql ("DELETE FROM task_preferences WHERE name = '%s';", quoted_name); g_free (quoted_name); sql ("UPDATE tasks SET modification_time = m_now ()" " WHERE id = %llu;", task); } } } return 0; } /* LSC Credentials. */ /** * @brief Find an LSC credential given a UUID. * * @param[in] uuid UUID of LSC credential. * @param[out] lsc_credential LSC credential return, 0 if succesfully failed * to find credential. * * @return FALSE on success (including if failed to find LSC credential), * TRUE on error. */ gboolean find_lsc_credential (const char* uuid, lsc_credential_t* lsc_credential) { gchar *quoted_uuid = sql_quote (uuid); if (user_owns_uuid ("lsc_credential", quoted_uuid, 0) == 0) { g_free (quoted_uuid); *lsc_credential = 0; return FALSE; } switch (sql_int64 (lsc_credential, "SELECT id FROM lsc_credentials WHERE uuid = '%s';", quoted_uuid)) { case 0: break; case 1: /* Too few rows in result of query. */ *lsc_credential = 0; break; default: /* Programming error. */ assert (0); case -1: g_free (quoted_uuid); return TRUE; break; } g_free (quoted_uuid); return FALSE; } /** * @brief Find an LSC credential for a specific permission, given a UUID. * * @param[in] uuid UUID of lsc_credential. * @param[out] lsc_credential LSC credential return, 0 if succesfully failed * to find LSC credential. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find lsc_credential), TRUE * on error. */ gboolean find_lsc_credential_with_permission (const char* uuid, lsc_credential_t* lsc_credential, const char *permission) { return find_resource_with_permission ("lsc_credential", uuid, lsc_credential, permission, 0); } /** * @brief Length of password generated in create_lsc_credential. */ #define PASSWORD_LENGTH 10 /** * @brief Create an LSC credential. * * @param[in] name Name of LSC credential. Must be at least one * character long. * @param[in] comment Comment on LSC credential. * @param[in] login Name of LSC credential user. Must be at least * one character long. * @param[in] given_password Password for password-only credential, NULL to * generate credentials. * @param[in] key_private Private key, or NULL. * @param[out] lsc_credential Created LSC credential. * * @return 0 success, 1 LSC credential exists already, 2 name contains space, * 3 Failed to create public key from private key/password, * 99 permission denied, -1 error. */ int create_lsc_credential (const char* name, const char* comment, const char* login, const char* given_password, const char* key_private, lsc_credential_t *lsc_credential) { gchar *quoted_name, *private_key; int i; GRand *rand; gchar password[PASSWORD_LENGTH]; const char *s = login; assert (name && strlen (name) > 0); assert (login && strlen (login) > 0); assert (current_credentials.uuid); assert (comment); sql_begin_immediate (); if (user_may ("create_lsc_credential") == 0) { sql ("ROLLBACK;"); return 99; } if (resource_with_name_exists (name, "lsc_credential", 0)) { sql ("ROLLBACK;"); return 1; } quoted_name = sql_quote (name); if (key_private) { lsc_crypt_ctx_t crypt_ctx; gchar *quoted_login, *quoted_phrase, *quoted_comment, *quoted_private; if (!openvas_ssh_public_from_private (key_private, given_password)) return 3; /* Key pair credential. */ if (!strcmp (key_private, ";;encrypted;;")) { g_free (quoted_name); sql ("ROLLBACK;"); return -1; } /* Encrypt password and private key. Note that we do not need to call sql_quote because the result of the encryption is base64 encoded and does not contain apostrophes. */ if (!disable_encrypted_credentials) { crypt_ctx = lsc_crypt_new (); quoted_phrase = lsc_crypt_encrypt (crypt_ctx, "password", given_password, "private_key", key_private, NULL); if (!quoted_phrase) { g_free (quoted_name); lsc_crypt_release (crypt_ctx); sql ("ROLLBACK;"); return -1; } quoted_private = g_strdup (";;encrypted;;"); } else { crypt_ctx = NULL; quoted_phrase = given_password ? sql_quote (given_password) : g_strdup (""); quoted_private = sql_quote (key_private); } quoted_login = sql_quote (login); quoted_comment = sql_quote (comment); sql ("INSERT INTO lsc_credentials" " (uuid, name, owner, login, password, comment," " private_key, creation_time, modification_time)" " VALUES" " (make_uuid (), '%s'," " (SELECT id FROM users WHERE users.uuid = '%s')," " '%s', '%s', '%s', '%s', m_now (), m_now ());", quoted_name, current_credentials.uuid, quoted_login, quoted_phrase, quoted_comment, quoted_private); g_free (quoted_name); g_free (quoted_login); g_free (quoted_phrase); g_free (quoted_comment); g_free (quoted_private); lsc_crypt_release (crypt_ctx); if (lsc_credential) *lsc_credential = sql_last_insert_id (); sql ("COMMIT;"); return 0; } if (given_password) { lsc_crypt_ctx_t crypt_ctx; gchar *quoted_login, *quoted_password, *quoted_comment, *quoted_private; /* Password-only credential. */ if (!disable_encrypted_credentials) { crypt_ctx = lsc_crypt_new (); quoted_password = lsc_crypt_encrypt (crypt_ctx, "password", given_password, NULL); if (!quoted_password) { g_free (quoted_name); lsc_crypt_release (crypt_ctx); sql ("ROLLBACK;"); return -1; } quoted_private = g_strdup ("';;encrypted;;'"); } else { crypt_ctx = NULL; quoted_password = sql_quote (given_password); quoted_private = g_strdup ("NULL"); } quoted_login = sql_quote (login); quoted_comment = sql_quote (comment); sql ("INSERT INTO lsc_credentials" " (uuid, name, owner, login, password, comment, " " private_key, creation_time, modification_time)" " VALUES" " (make_uuid (), '%s'," " (SELECT id FROM users WHERE users.uuid = '%s')," " '%s', '%s', '%s', %s, m_now (), m_now ());", quoted_name, current_credentials.uuid, quoted_login, quoted_password, quoted_comment, quoted_private); g_free (quoted_name); g_free (quoted_login); g_free (quoted_password); g_free (quoted_comment); g_free (quoted_private); lsc_crypt_release (crypt_ctx); if (lsc_credential) *lsc_credential = sql_last_insert_id (); sql ("COMMIT;"); return 0; } /* Ensure the login is alphanumeric, to help the package generation. */ while (*s) if (isalnum (*s)) s++; else { g_free (quoted_name); sql ("ROLLBACK;"); return 2; } /* Create the keys and packages. */ rand = g_rand_new (); for (i = 0; i < PASSWORD_LENGTH - 1; i++) { password[i] = (gchar) g_rand_int_range (rand, '0', 'z'); if (password[i] == '\\') password[i] = '{'; } password[PASSWORD_LENGTH - 1] = '\0'; g_rand_free (rand); if (lsc_user_keys_create (password, &private_key)) { g_free (quoted_name); sql ("ROLLBACK;"); return -1; } { lsc_crypt_ctx_t crypt_ctx; gchar *quoted_login, *quoted_password, *quoted_comment; gchar *quoted_private_key; /* Generated key credential. */ if (!disable_encrypted_credentials) { crypt_ctx = lsc_crypt_new (); quoted_password = lsc_crypt_encrypt (crypt_ctx, "password", password, "private_key", private_key, NULL); if (!quoted_password) { lsc_crypt_release (crypt_ctx); g_free (private_key); g_free (quoted_name); sql ("ROLLBACK;"); return -1; } quoted_private_key = g_strdup (";;encrypted;;"); } else { crypt_ctx = NULL; quoted_password = sql_quote (password); quoted_private_key = sql_quote (private_key); } quoted_login = sql_quote (login); quoted_comment = sql_quote (comment); sql_quiet ("INSERT INTO lsc_credentials" " (uuid, name, owner, login, password, comment," " private_key, creation_time, modification_time)" " VALUES" " (make_uuid (), '%s'," " (SELECT id FROM users WHERE users.uuid = '%s')," " '%s', '%s', '%s', '%s', m_now (), m_now ());", quoted_name, current_credentials.uuid, quoted_login, quoted_password, quoted_comment, quoted_private_key); g_free (quoted_name); g_free (quoted_login); g_free (quoted_password); g_free (quoted_comment); g_free (quoted_private_key); lsc_crypt_release (crypt_ctx); } g_free (private_key); if (lsc_credential) *lsc_credential = sql_last_insert_id (); sql ("COMMIT;"); return 0; } /** * @brief Create an LSC Credential from an existing one. * * @param[in] name Name of new LSC Credential. NULL to copy * from existing. * @param[in] comment Comment on new LSC Credential. NULL to copy * from existing. * @param[in] lsc_credential_id UUID of existing LSC Credential. * @param[out] new_lsc_credential New LSC Credential. * * @return 0 success, 1 LSC Credential exists already, 2 failed to find * existing LSC Credential, -1 error. */ int copy_lsc_credential (const char* name, const char* comment, const char *lsc_credential_id, lsc_credential_t* new_lsc_credential) { return copy_resource ("lsc_credential", name, comment, lsc_credential_id, "login, password, private_key", 1, new_lsc_credential); } /** * @brief Return whether an LSC credential is the packaged type. * * @param[in] cred_id The LSC Credential uuid. * * @return 0 false, 1 true. */ static int lsc_credential_packaged (const char *cred_id) { get_data_t get; iterator_t iter; const char *key; memset (&get, '\0', sizeof (get)); get.id = g_strdup (cred_id); if (init_lsc_credential_iterator (&iter, &get) || !next (&iter)) return 0; key = lsc_credential_iterator_private_key (&iter); cleanup_iterator (&iter); return key ? 1 : 0; } /** * @brief Modify a LSC Credential. * * @param[in] lsc_credential_id UUID of lsc credential. * @param[in] name Name of lsc credential. * @param[in] comment Comment on lsc credential. * @param[in] login Login of lsc credential. * @param[in] password Password of lsc credential. * * @return 0 success, 1 failed to find credential, 2 credential with new name * exists, 3 lsc_credential_id required, 4 attempt to modify login/pass * of packaged lsc credential, 99 permission denied, -1 internal error. */ int modify_lsc_credential (const char *lsc_credential_id, const char *name, const char *comment, const char *login, const char *password) { lsc_credential_t lsc_credential; if (lsc_credential_id == NULL) return 3; sql_begin_immediate (); assert (current_credentials.uuid); if (user_may ("modify_lsc_credential") == 0) { sql ("ROLLBACK;"); return 99; } lsc_credential = 0; if (find_lsc_credential_with_permission (lsc_credential_id, &lsc_credential, "modify_lsc_credential")) { sql ("ROLLBACK;"); return -1; } if (lsc_credential == 0) { sql ("ROLLBACK;"); return 1; } /* Check attempt to change login or password of packaged LSC credential */ if ((login || password) && lsc_credential_packaged (lsc_credential_id)) return 4; /* Check whether a lsc_credential with the same name exists already. */ if (name) { if (resource_with_name_exists (name, "lsc_credential", lsc_credential)) { sql ("ROLLBACK;"); return 2; } } /* Update values */ if (name) set_lsc_credential_name (lsc_credential, name); if (comment) set_lsc_credential_comment (lsc_credential, comment); if (login) set_lsc_credential_login (lsc_credential, login); if (password) set_lsc_credential_password (lsc_credential, password); sql ("COMMIT;"); return 0; } /** * @brief Delete an LSC credential. * * @param[in] lsc_credential_id UUID of LSC credential. * @param[in] ultimate Whether to remove entirely, or to trashcan. * * @return 0 success, 1 fail because the LSC credential is in use, 99 permission * denied, -1 error. */ int delete_lsc_credential (const char *lsc_credential_id, int ultimate) { lsc_credential_t lsc_credential = 0; sql_begin_immediate (); if (user_may ("delete_lsc_credential") == 0) { sql ("ROLLBACK;"); return 99; } if (find_lsc_credential_with_permission (lsc_credential_id, &lsc_credential, "delete_lsc_credential")) { sql ("ROLLBACK;"); return -1; } if (lsc_credential == 0) { if (find_trash ("lsc_credential", lsc_credential_id, &lsc_credential)) { sql ("ROLLBACK;"); return -1; } if (lsc_credential == 0) { sql ("ROLLBACK;"); return 2; } if (ultimate == 0) { /* It's already in the trashcan. */ sql ("COMMIT;"); return 0; } /* Check if it's in use by a target in the trashcan. */ if (sql_int ("SELECT count(*) FROM targets_trash" " WHERE (lsc_credential = %llu" " AND ssh_location = " G_STRINGIFY (LOCATION_TRASH) ")" " OR (smb_lsc_credential = %llu" " AND smb_location = " G_STRINGIFY (LOCATION_TRASH) ")" " OR (esxi_lsc_credential = %llu" " AND esxi_location = " G_STRINGIFY (LOCATION_TRASH) ");", lsc_credential, lsc_credential, lsc_credential)) { sql ("ROLLBACK;"); return 1; } permissions_set_orphans ("lsc_credential", lsc_credential, LOCATION_TRASH); tags_set_orphans ("lsc_credential", lsc_credential, LOCATION_TRASH); sql ("DELETE FROM lsc_credentials_trash WHERE id = %llu;", lsc_credential); sql ("COMMIT;"); return 0; } if (sql_int ("SELECT count(*) FROM targets" " WHERE lsc_credential = %llu" " OR smb_lsc_credential = %llu" " OR esxi_lsc_credential = %llu", lsc_credential, lsc_credential, lsc_credential)) { sql ("ROLLBACK;"); return 1; } if (ultimate == 0) { sql ("INSERT INTO lsc_credentials_trash" " (uuid, owner, name, login, password, comment, " " private_key, creation_time, modification_time)" " SELECT uuid, owner, name, login, password, comment, " " private_key, creation_time, modification_time" " FROM lsc_credentials WHERE id = %llu;", lsc_credential); /* Update the credential references in any trashcan targets. This * situation is possible if the user restores the credential when the * target is in the trashcan. */ sql ("UPDATE targets_trash" " SET ssh_location = " G_STRINGIFY (LOCATION_TRASH) "," " lsc_credential = %llu" " WHERE lsc_credential = %llu;", sql_last_insert_id (), lsc_credential); sql ("UPDATE targets_trash" " SET smb_location = " G_STRINGIFY (LOCATION_TRASH) "," " smb_lsc_credential = %llu" " WHERE smb_lsc_credential = %llu;", sql_last_insert_id (), lsc_credential); sql ("UPDATE targets_trash" " SET esxi_location = " G_STRINGIFY (LOCATION_TRASH) "," " esxi_lsc_credential = %llu" " WHERE esxi_lsc_credential = %llu;", sql_last_insert_id (), lsc_credential); permissions_set_locations ("lsc_credential", lsc_credential, sql_last_insert_id (), LOCATION_TRASH); tags_set_locations ("lsc_credential", lsc_credential, sql_last_insert_id (), LOCATION_TRASH); } else { permissions_set_orphans ("lsc_credential", lsc_credential, LOCATION_TABLE); tags_set_orphans ("lsc_credential", lsc_credential, LOCATION_TABLE); } sql ("DELETE FROM lsc_credentials WHERE id = %llu;", lsc_credential); sql ("COMMIT;"); return 0; } /** * @brief Filter columns for LSC Credential iterator. */ #define LSC_CREDENTIAL_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "login", NULL } /** * @brief LSC Credential iterator columns. */ #define LSC_CREDENTIAL_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS (lsc_credentials), \ { "login", NULL }, \ { "password", NULL }, \ { "private_key", NULL }, \ { NULL, NULL } \ } /** * @brief LSC Credential iterator columns for trash case. */ #define LSC_CREDENTIAL_ITERATOR_TRASH_COLUMNS \ { \ GET_ITERATOR_COLUMNS (lsc_credentials_trash), \ { "login", NULL }, \ { "password", NULL }, \ { "private_key", NULL }, \ { NULL, NULL } \ } /** * @brief Count number of LSC Credentials. * * @param[in] get GET params. * * @return Total number of LSC Credentials in filtered set. */ int lsc_credential_count (const get_data_t *get) { static const char *filter_columns[] = LSC_CREDENTIAL_ITERATOR_FILTER_COLUMNS; static column_t columns[] = LSC_CREDENTIAL_ITERATOR_COLUMNS; static column_t trash_columns[] = LSC_CREDENTIAL_ITERATOR_TRASH_COLUMNS; return count ("lsc_credential", get, columns, trash_columns, filter_columns, 0, 0, 0, TRUE); } /** * @brief Check whether a LSC Credential is in use. * * @param[in] lsc_credential LSC Credential. * * @return 1 yes, 0 no. */ int lsc_credential_in_use (lsc_credential_t lsc_credential) { return !!sql_int ("SELECT count (*) FROM targets" " WHERE lsc_credential = %llu" " OR smb_lsc_credential = %llu" " OR esxi_lsc_credential = %llu;", lsc_credential, lsc_credential, lsc_credential); } /** * @brief Check whether a trashcan LSC Credential is in use. * * @param[in] lsc_credential LSC Credential. * * @return 1 yes, 0 no. */ int trash_lsc_credential_in_use (lsc_credential_t lsc_credential) { return !!sql_int ("SELECT count (*) FROM targets_trash" " WHERE (lsc_credential = %llu" " AND ssh_location = " G_STRINGIFY (LOCATION_TRASH)")" " OR (smb_lsc_credential = %llu" " AND smb_location = " G_STRINGIFY (LOCATION_TRASH) ")" " OR (esxi_lsc_credential = %llu" " AND esxi_location = " G_STRINGIFY (LOCATION_TRASH) ");", lsc_credential, lsc_credential, lsc_credential); } /** * @brief Check whether a LSC Credential is writable. * * @param[in] lsc_credential LSC Credential. * * @return 1 yes, 0 no. */ int lsc_credential_writable (lsc_credential_t lsc_credential) { return 1; } /** * @brief Check whether a trashcan LSC Credential is writable. * * @param[in] lsc_credential LSC Credential. * * @return 1 yes, 0 no. */ int trash_lsc_credential_writable (lsc_credential_t lsc_credential) { return 1; } /** * @brief Set the name of an LSC credential. * * @param[in] lsc_credential The LSC credential. * @param[in] name Name. */ void set_lsc_credential_name (lsc_credential_t lsc_credential, const char *name) { gchar *quoted_name = sql_quote (name); sql ("UPDATE lsc_credentials SET name = '%s', modification_time = m_now ()" " WHERE id = %llu;", quoted_name, lsc_credential); g_free (quoted_name); } /** * @brief Set the comment of an LSC credential. * * @param[in] lsc_credential The LSC credential. * @param[in] comment Comment. */ void set_lsc_credential_comment (lsc_credential_t lsc_credential, const char *comment) { gchar *quoted_comment = sql_quote (comment); sql ("UPDATE lsc_credentials SET comment = '%s', modification_time = m_now ()" " WHERE id = %llu;", quoted_comment, lsc_credential); g_free (quoted_comment); } /** * @brief Set the login of an LSC credential. * * @param[in] lsc_credential The LSC credential. * @param[in] login Login. */ void set_lsc_credential_login (lsc_credential_t lsc_credential, const char *login) { gchar *quoted_login = sql_quote (login); sql ("UPDATE lsc_credentials SET login = '%s', modification_time = m_now ()" " WHERE id = %llu;", quoted_login, lsc_credential); g_free (quoted_login); } /** * @brief Set the password of an LSC credential. * * @param[in] lsc_credential The LSC credential. * @param[in] password Password. */ void set_lsc_credential_password (lsc_credential_t lsc_credential, const char *password) { lsc_crypt_ctx_t crypt_ctx; gchar *quoted_password, *quoted_private; if (!disable_encrypted_credentials) { crypt_ctx = lsc_crypt_new (); quoted_password = lsc_crypt_encrypt (crypt_ctx, "password", password, NULL); if (!quoted_password) { g_critical ("%s: encryption failed", G_STRFUNC); lsc_crypt_release (crypt_ctx); return; } quoted_private = g_strdup ("';;encrypted;;'"); } else { crypt_ctx = NULL; quoted_password = sql_quote (password); quoted_private = g_strdup ("NULL"); } sql ("UPDATE lsc_credentials SET password = '%s', private_key = %s," " modification_time = m_now ()" " WHERE id = %llu;", quoted_password, quoted_private, lsc_credential); g_free (quoted_password); g_free (quoted_private); lsc_crypt_release (crypt_ctx); } /** * @brief Initialise an LSC Credential iterator, given a single LSC credential. * * @param[in] iterator Iterator. * @param[in] lsc_credential Single LSC credential to iterate. */ void init_lsc_credential_iterator_one (iterator_t* iterator, lsc_credential_t lsc_credential) { get_data_t get; assert (lsc_credential); memset (&get, '\0', sizeof (get)); get.id = lsc_credential_uuid (lsc_credential); get.filter = "owner=any permission=get_lsc_credentials"; init_lsc_credential_iterator (iterator, &get); } /** * @brief Initialise a LSC Credential iterator. * * @param[in] iterator Iterator. * @param[in] get GET data. * * @return 0 success, 1 failed to find filter, failed to find filter (filt_id), * -1 error. */ int init_lsc_credential_iterator (iterator_t* iterator, const get_data_t *get) { static const char *filter_columns[] = LSC_CREDENTIAL_ITERATOR_FILTER_COLUMNS; static column_t columns[] = LSC_CREDENTIAL_ITERATOR_COLUMNS; static column_t trash_columns[] = LSC_CREDENTIAL_ITERATOR_TRASH_COLUMNS; return init_get_iterator (iterator, "lsc_credential", get, columns, trash_columns, filter_columns, 0, NULL, NULL, TRUE); } /* * Common code for lsc_credential_iterator_password and * lsc_credential_iterator_private_key. */ static const char* lsc_credential_iterator_pass_or_priv (iterator_t* iterator, int want_privkey) { const char *password, *privkey, *result; if (iterator->done) return NULL; password = iterator_string (iterator, GET_ITERATOR_COLUMN_COUNT + 1); privkey = iterator_string (iterator, GET_ITERATOR_COLUMN_COUNT + 2); /* If we do not have a private key, there is no encrypted data. Return the password as is or NULL. */ if (!privkey) return want_privkey? NULL : password; /* If we have a private key but it has not the flag value, we return the password field or the private key. */ if (strcmp (privkey, ";;encrypted;;")) return want_privkey? privkey : password; /* This is an encrypted credential. */ if (!iterator->crypt_ctx) iterator->crypt_ctx = lsc_crypt_new (); if (want_privkey) result = lsc_crypt_get_private_key (iterator->crypt_ctx, password); else result = lsc_crypt_get_password (iterator->crypt_ctx, password); return result; } /** * @brief Get the login from an LSC credential iterator. * * @param[in] iterator Iterator. * * @return Login, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (lsc_credential_iterator_login, GET_ITERATOR_COLUMN_COUNT); /** * @brief Get the password from an LSC credential iterator. * * @param[in] iterator Iterator. * * @return Password, or NULL if iteration is complete. Freed by * cleanup_iterator. */ const char* lsc_credential_iterator_password (iterator_t* iterator) { return lsc_credential_iterator_pass_or_priv (iterator, 0); } /** * @brief Get the private_key from an LSC credential iterator. * * @param[in] iterator Iterator. * * @return Private_key, or NULL if iteration is complete. Freed by * cleanup_iterator. */ const char* lsc_credential_iterator_private_key (iterator_t* iterator) { return lsc_credential_iterator_pass_or_priv (iterator, 1); } /** * @brief Get the rpm from an LSC credential iterator. * * @param[in] iterator Iterator. * * @return Rpm, or NULL if iteration is complete. Free with g_free(). */ char* lsc_credential_iterator_rpm (iterator_t *iterator) { const char *private_key, *login, *pass; void *rpm; char *public_key; gsize rpm_size; gchar *rpm64; if (iterator->done) return NULL; private_key = lsc_credential_iterator_private_key (iterator); pass = lsc_credential_iterator_password (iterator); public_key = openvas_ssh_public_from_private (private_key, pass); if (!public_key) return NULL; login = lsc_credential_iterator_login (iterator); if (lsc_user_rpm_recreate (login, public_key, &rpm, &rpm_size)) { g_free (public_key); return NULL; } g_free (public_key); rpm64 = (rpm && rpm_size) ? g_base64_encode (rpm, rpm_size) : g_strdup (""); free (rpm); return rpm64; } /** * @brief Get the deb from an LSC credential iterator. * * @param[in] iterator Iterator. * * @return Deb, or NULL if iteration is complete. Free with g_free(). */ char* lsc_credential_iterator_deb (iterator_t *iterator) { const char *login, *private_key, *pass; char *public_key; void *deb, *rpm; gsize deb_size, rpm_size; gchar *deb64; if (iterator->done) return NULL; private_key = lsc_credential_iterator_private_key (iterator); pass = lsc_credential_iterator_password (iterator); public_key = openvas_ssh_public_from_private (private_key, pass); if (!public_key) return NULL; login = lsc_credential_iterator_login (iterator); if (lsc_user_rpm_recreate (login, public_key, &rpm, &rpm_size)) { g_free (public_key); return NULL; } g_free (public_key); if (lsc_user_deb_recreate (login, rpm, rpm_size, &deb, &deb_size)) { free (rpm); return NULL; } free (rpm); deb64 = (deb && deb_size) ? g_base64_encode (deb, deb_size) : g_strdup (""); free (deb); return deb64; } /** * @brief Get the exe from an LSC credential iterator. * * @param[in] iterator Iterator. * * @return Exe, or NULL if iteration is complete. Free with g_free(). */ char* lsc_credential_iterator_exe (iterator_t *iterator) { const char *login, *password; void *exe; gsize exe_size; gchar *exe64; if (iterator->done) return NULL; login = lsc_credential_iterator_login (iterator); password = lsc_credential_iterator_password (iterator); if (lsc_user_exe_recreate (login, password, &exe, &exe_size)) return NULL; exe64 = (exe && exe_size) ? g_base64_encode (exe, exe_size) : g_strdup (""); free (exe); return exe64; } /** * @brief Get the UUID of an LSC credential. * * @param[in] lsc_credential LSC credential. * * @return UUID. */ char* lsc_credential_uuid (lsc_credential_t lsc_credential) { return sql_string ("SELECT uuid FROM lsc_credentials WHERE id = %llu;", lsc_credential); } /** * @brief Get the UUID of an LSC credential in the trashcan. * * @param[in] lsc_credential LSC credential. * * @return UUID. */ char* trash_lsc_credential_uuid (lsc_credential_t lsc_credential) { return sql_string ("SELECT uuid FROM lsc_credentials_trash" " WHERE id = %llu;", lsc_credential); } /** * @brief Get the name of an LSC credential. * * @param[in] lsc_credential LSC credential. * * @return Name. */ char* lsc_credential_name (lsc_credential_t lsc_credential) { return sql_string ("SELECT name FROM lsc_credentials WHERE id = %llu;", lsc_credential); } /** * @brief Get the name of an LSC credential in the trashcan. * * @param[in] lsc_credential LSC credential. * * @return Name. */ char* trash_lsc_credential_name (lsc_credential_t lsc_credential) { return sql_string ("SELECT name FROM lsc_credentials_trash" " WHERE id = %llu;", lsc_credential); } /** * @brief Return whether a trashcan lsc_credential is readable. * * @param[in] lsc_credential LSC credential. * * @return 1 if readable, else 0. */ int trash_lsc_credential_readable (lsc_credential_t lsc_credential) { char *uuid; lsc_credential_t found; if (lsc_credential == 0) return 0; uuid = lsc_credential_uuid (lsc_credential); if (find_trash ("lsc_credential", uuid, &found)) { g_free (uuid); return 0; } g_free (uuid); return found > 0; } /** * @brief Initialise an LSC credential target iterator. * * Iterates over all targets that use the credential. * * @param[in] iterator Iterator. * @param[in] lsc_credential Name of LSC credential. * @param[in] ascending Whether to sort ascending or descending. */ void init_lsc_credential_target_iterator (iterator_t* iterator, lsc_credential_t lsc_credential, int ascending) { gchar *available; get_data_t get; array_t *permissions; assert (lsc_credential); get.trash = 0; permissions = make_array (); array_add (permissions, g_strdup ("get_targets")); available = where_owned ("target", &get, 1, "any", 0, permissions); array_free (permissions); init_iterator (iterator, "SELECT uuid, name, %s FROM targets" " WHERE lsc_credential = %llu" " OR smb_lsc_credential = %llu" " OR esxi_lsc_credential = %llu" " ORDER BY name %s;", available, lsc_credential, lsc_credential, lsc_credential, ascending ? "ASC" : "DESC"); g_free (available); } /** * @brief Get the uuid from an LSC credential_target iterator. * * @param[in] iterator Iterator. * * @return Uuid, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (lsc_credential_target_iterator_uuid, 0); /** * @brief Get the name from an LSC credential_target iterator. * * @param[in] iterator Iterator. * * @return Name, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (lsc_credential_target_iterator_name, 1); /** * @brief Get the read permission status from a GET iterator. * * @param[in] iterator Iterator. * * @return 1 if may read, else 0. */ int lsc_credential_target_iterator_readable (iterator_t* iterator) { if (iterator->done) return 0; return iterator_int (iterator, 2); } /* Agents. */ /** * @brief Find a agent for a specific permission, given a UUID. * * @param[in] uuid UUID of agent. * @param[out] agent Agent return, 0 if succesfully failed to find agent. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find agent), TRUE on error. */ gboolean find_agent_with_permission (const char* uuid, agent_t* agent, const char *permission) { return find_resource_with_permission ("agent", uuid, agent, permission, 0); } /** * @brief Find a signature in a feed. * * @param[in] location Feed directory to search for signature. * @param[in] installer_filename Installer filename. * @param[out] signature Freshly allocated installer signature. * @param[out] signature_size Size of installer signature. * @param[out] uuid Address for basename of linked signature * when the signature was found in the private * directory, if desired, else NULL. * * @return 0 success, -1 error. */ static int find_signature (const gchar *location, const gchar *installer_filename, gchar **signature, gsize *signature_size, gchar **uuid) { gchar *installer_basename = g_path_get_basename (installer_filename); if (uuid) *uuid = NULL; if (strlen (installer_basename)) { gchar *signature_filename, *signature_basename; GError *error = NULL; signature_basename = g_strdup_printf ("%s.asc", installer_basename); g_free (installer_basename); signature_filename = g_build_filename (OPENVAS_NVT_DIR, location, signature_basename, NULL); tracef ("signature_filename: %s\n", signature_filename); g_file_get_contents (signature_filename, signature, signature_size, &error); g_free (signature_filename); if (error) { if (uuid && (error->code == G_FILE_ERROR_NOENT)) { char *real; gchar **split; g_error_free (error); error = NULL; signature_filename = g_build_filename (OPENVAS_NVT_DIR, "private", location, signature_basename, NULL); tracef ("signature_filename (private): %s\n", signature_filename); g_free (signature_basename); g_file_get_contents (signature_filename, signature, signature_size, &error); if (error) { g_free (signature_filename); g_error_free (error); return -1; } real = realpath (signature_filename, NULL); g_free (signature_filename); tracef ("real pathname: %s\n", real); if (real == NULL) return -1; split = g_strsplit (basename (real), ".", 2); if (*split) *uuid = g_strdup (*split); else *uuid = g_strdup (basename (real)); tracef ("*uuid: %s\n", *uuid); g_strfreev (split); free (real); return 0; } g_free (signature_basename); g_error_free (error); return -1; } g_free (signature_basename); return 0; } g_free (installer_basename); return -1; } /** * @brief Return the name of the sysconf GnuPG home directory * * Returns the name of the GnuPG home directory to use when checking * signatures. It is the directory openvas/gnupg under the sysconfdir * that was set by configure (usually $prefix/etc). * * @return Static name of the Sysconf GnuPG home directory. */ static const char * get_sysconf_gpghome () { static char *name; if (!name) name = g_build_filename (OPENVAS_SYSCONF_DIR, "gnupg", NULL); return name; } /** * @brief Return the name of the trusted keys file name. * * We currently use the name pubring.gpg to be compatible with * previous installations. That file should best be installed * read-only so that it is not accidentally accessed while we are * running a verification. All files in that keyring are assumed to * be fully trustworthy. * * @return Static file name. */ static const char * get_trustedkeys_name () { static char *name; if (!name) name = g_build_filename (get_sysconf_gpghome (), "pubring.gpg", NULL); return name; } /** * @brief Execute gpg to verify an installer signature. * * @param[in] installer Installer. * @param[in] installer_size Size of installer. * @param[in] signature Installer signature. * @param[in] signature_size Size of installer signature. * @param[out] trust Trust value. * * @return 0 success, -1 error. */ static int verify_signature (const gchar *installer, gsize installer_size, const gchar *signature, gsize signature_size, int *trust) { gchar **cmd; gint exit_status; int ret = 0, installer_fd, signature_fd; gchar *standard_out = NULL; gchar *standard_err = NULL; char installer_file[] = "/tmp/openvasmd-installer-XXXXXX"; char signature_file[] = "/tmp/openvasmd-signature-XXXXXX"; GError *error = NULL; installer_fd = mkstemp (installer_file); if (installer_fd == -1) return -1; g_file_set_contents (installer_file, installer, installer_size, &error); if (error) { g_warning ("%s", error->message); g_error_free (error); close (installer_fd); return -1; } signature_fd = mkstemp (signature_file); if (signature_fd == -1) { close (installer_fd); return -1; } g_file_set_contents (signature_file, signature, signature_size, &error); if (error) { g_warning ("%s", error->message); g_error_free (error); close (installer_fd); close (signature_fd); return -1; } cmd = (gchar **) g_malloc (10 * sizeof (gchar *)); cmd[0] = g_strdup ("gpgv"); cmd[1] = g_strdup ("--homedir"); cmd[2] = g_strdup (get_sysconf_gpghome ()); cmd[3] = g_strdup ("--quiet"); cmd[4] = g_strdup ("--keyring"); cmd[5] = g_strdup (get_trustedkeys_name ()); cmd[6] = g_strdup ("--"); cmd[7] = g_strdup (signature_file); cmd[8] = g_strdup (installer_file); cmd[9] = NULL; g_debug ("%s: Spawning in /tmp/: %s %s %s %s %s %s %s %s %s\n", __FUNCTION__, cmd[0], cmd[1], cmd[2], cmd[3], cmd[4], cmd[5], cmd[6], cmd[7], cmd[8]); if ((g_spawn_sync ("/tmp/", cmd, NULL, /* Environment. */ G_SPAWN_SEARCH_PATH, NULL, /* Setup func. */ NULL, &standard_out, &standard_err, &exit_status, NULL) == FALSE) || (WIFEXITED (exit_status) == 0) || WEXITSTATUS (exit_status)) { if (WEXITSTATUS (exit_status) == 1) *trust = TRUST_NO; else { #if 0 g_debug ("%s: failed to run gpgv(%s): %d (WIF %i, WEX %i)", __FUNCTION__, get_trustedkeys_name (), exit_status, WIFEXITED (exit_status), WEXITSTATUS (exit_status)); g_debug ("%s: stdout: %s\n", __FUNCTION__, standard_out); g_debug ("%s: stderr: %s\n", __FUNCTION__, standard_err); ret = -1; #endif /* This can be caused by the contents of the signature file, so * always return success. */ *trust = TRUST_UNKNOWN; } } else *trust = TRUST_YES; g_free (cmd[0]); g_free (cmd[1]); g_free (cmd[2]); g_free (cmd[3]); g_free (cmd[4]); g_free (cmd[5]); g_free (cmd[6]); g_free (cmd[7]); g_free (cmd[8]); g_free (cmd); g_free (standard_out); g_free (standard_err); close (installer_fd); close (signature_fd); g_remove (installer_file); g_remove (signature_file); return ret; } /** * @brief Create an agent entry. * * @param[in] name Name of agent. Must be at least one character long. * @param[in] comment Comment on agent. * @param[in] installer_64 Installer, in base64. * @param[in] installer_filename Installer filename. * @param[in] installer_signature_64 Installer signature, in base64. * @param[in] howto_install Install HOWTO, in base64. * @param[in] howto_use Usage HOWTO, in base64. * @param[out] agent Created agent. * * @return 0 success, 1 agent exists already, 99 permission denied, -1 error. */ int create_agent (const char* name, const char* comment, const char* installer_64, const char* installer_filename, const char* installer_signature_64, const char* howto_install, const char* howto_use, agent_t *agent) { gchar *installer, *installer_signature; int installer_trust; gsize installer_size, installer_signature_size; assert (strlen (name) > 0); assert (installer_64); assert (installer_filename); assert (installer_signature_64); assert (current_credentials.uuid); installer_trust = TRUST_UNKNOWN; installer_size = 0; installer_signature_size = 0; /* Translate the installer and signature. */ if (strlen (installer_64)) installer = (gchar*) g_base64_decode (installer_64, &installer_size); else installer = g_strdup (""); if (strlen (installer_signature_64)) installer_signature = (gchar*) g_base64_decode (installer_signature_64, &installer_signature_size); else installer_signature = g_strdup (""); /* Verify the installer signature. */ if (strlen (installer_signature)) { if (verify_signature (installer, installer_size, installer_signature, installer_signature_size, &installer_trust)) { g_free (installer); g_free (installer_signature); return -1; } } else { g_free (installer_signature); if (find_signature ("agents", installer_filename, &installer_signature, &installer_signature_size, NULL) == 0) { if (verify_signature (installer, installer_size, installer_signature, installer_signature_size, &installer_trust)) { g_free (installer); g_free (installer_signature); return -1; } } } /* Check that the name is unique. */ sql_begin_immediate (); if (user_may ("create_agent") == 0) { sql ("ROLLBACK;"); return 99; } if (resource_with_name_exists (name, "agent", 0)) { g_free (installer); g_free (installer_signature); sql ("ROLLBACK;"); return 1; } /* Insert the packages. */ { int ret; sql_stmt_t *stmt; gchar *quoted_name, *quoted_comment, *quoted_filename; while (1) { quoted_name = sql_quote (name); quoted_comment = sql_quote (comment ?: ""); quoted_filename = sql_quote (installer_filename); /* Prepare statement. */ stmt = sql_prepare ("INSERT INTO agents" " (uuid, name, owner, comment, installer," " installer_64, installer_filename," " installer_signature_64," " installer_trust, installer_trust_time," " howto_install, howto_use," " creation_time, modification_time)" " VALUES" " (make_uuid (), '%s'," " (SELECT id FROM users" " WHERE users.uuid = '%s')," " '%s'," " $1, $2," /* installer, installer_64 */ " '%s'," " $3," /* installer_signature_64 */ " %i, %i, $4," /* howto_install */ " $5, m_now (), m_now ());", /* howto_use */ quoted_name, current_credentials.uuid, quoted_comment, quoted_filename, installer_trust, (int) time (NULL)); g_free (quoted_name); g_free (quoted_comment); g_free (quoted_filename); if (stmt == NULL) { g_warning ("%s: sql_prepare failed\n", __FUNCTION__); g_free (installer); g_free (installer_signature); sql ("ROLLBACK;"); return -1; } /* Bind the packages to the "$numbers" in the SQL statement. */ if (sql_bind_text (stmt, 1, installer, installer_size)) { g_warning ("%s: sql_bind_text failed\n", __FUNCTION__); sql ("ROLLBACK;"); g_free (installer); g_free (installer_signature); return -1; } g_free (installer); if (sql_bind_text (stmt, 2, installer_64, strlen (installer_64))) { g_warning ("%s: sql_bind_text failed\n", __FUNCTION__); sql ("ROLLBACK;"); g_free (installer_signature); return -1; } g_free (installer_signature); if (sql_bind_text (stmt, 3, installer_signature_64, strlen (installer_signature_64))) { g_warning ("%s: sql_bind_text failed\n", __FUNCTION__); sql ("ROLLBACK;"); return -1; } if (sql_bind_text (stmt, 4, howto_install, strlen (howto_install))) { g_warning ("%s: sql_bind_text failed\n", __FUNCTION__); sql ("ROLLBACK;"); return -1; } if (sql_bind_blob (stmt, 5, howto_use, strlen (howto_use))) { g_warning ("%s: sql_bind_blob failed\n", __FUNCTION__); sql ("ROLLBACK;"); return -1; } /* Run the statement. */ while ((ret = sql_exec (stmt)) > 0); if (ret == -2 || ret == 2) { /* Gave up with statement reset, or schema error. Retry. */ sql_finalize (stmt); continue; } if (ret < 0) { g_warning ("%s: sql_exec failed\n", __FUNCTION__); sql ("ROLLBACK;"); return -1; } break; } sql_finalize (stmt); } if (agent) *agent = sql_last_insert_id (); sql ("COMMIT;"); return 0; } /** * @brief Create an agent from an existing agent. * * @param[in] name Name of new agent. NULL to copy from existing. * @param[in] comment Comment on new agent. NULL to copy from existing. * @param[in] agent_id UUID of existing schedule. * @param[out] new_agent New agent. * * @return 0 success, 1 agent exists already, 2 failed to find existing * agent, 99 permission denied, -1 error. */ int copy_agent (const char* name, const char* comment, const char *agent_id, agent_t* new_agent) { return copy_resource ("agent", name, comment, agent_id, "installer, installer_64, installer_filename," " installer_signature_64, installer_trust," " installer_trust_time, howto_install, howto_use", 1, new_agent); } /** * @brief Modify an agent. * * @param[in] agent_id UUID of agent. * @param[in] name Name of agent. * @param[in] comment Comment on agent. * * @return 0 success, 1 failed to find agent, 2 agent with new name exists, * 3 agent_id required, 99 permission denied, -1 internal error. */ int modify_agent (const char *agent_id, const char *name, const char *comment) { gchar *quoted_name, *quoted_comment; agent_t agent; if (agent_id == NULL) return 3; sql_begin_immediate (); assert (current_credentials.uuid); if (user_may ("modify_agent") == 0) { sql ("ROLLBACK;"); return 99; } agent = 0; if (find_agent_with_permission (agent_id, &agent, "modify_agent")) { sql ("ROLLBACK;"); return -1; } if (agent == 0) { sql ("ROLLBACK;"); return 1; } /* Check whether a agent with the same name exists already. */ if (resource_with_name_exists (name, "agent", agent)) { sql ("ROLLBACK;"); return 2; } quoted_name = sql_quote (name ?: ""); quoted_comment = sql_quote (comment ?: ""); sql ("UPDATE agents SET" " name = '%s'," " comment = '%s'," " modification_time = m_now ()" " WHERE id = %llu;", quoted_name, quoted_comment, agent); g_free (quoted_comment); g_free (quoted_name); sql ("COMMIT;"); return 0; } /** * @brief Delete an agent. * * @param[in] agent_id UUID of agent. * @param[in] ultimate Whether to remove entirely, or to trashcan. * * @return 0 success, 2 failed to find agent, 99 permission denied, -1 error. */ int delete_agent (const char *agent_id, int ultimate) { agent_t agent = 0; sql_begin_immediate (); if (user_may ("delete_agent") == 0) { sql ("ROLLBACK;"); return 99; } if (find_agent_with_permission (agent_id, &agent, "delete_agent")) { sql ("ROLLBACK;"); return -1; } if (agent == 0) { if (find_trash ("agent", agent_id, &agent)) { sql ("ROLLBACK;"); return -1; } if (agent == 0) { sql ("ROLLBACK;"); return 2; } if (ultimate == 0) { /* It's already in the trashcan. */ sql ("COMMIT;"); return 0; } permissions_set_orphans ("agent", agent, LOCATION_TRASH); tags_set_orphans ("agent", agent, LOCATION_TRASH); sql ("DELETE FROM agents_trash WHERE id = %llu;", agent); sql ("COMMIT;"); return 0; } if (ultimate == 0) { sql ("INSERT INTO agents_trash" " (uuid, owner, name, comment, installer, installer_64," " installer_filename, installer_signature_64, installer_trust," " installer_trust_time, howto_install, howto_use, creation_time," " modification_time)" " SELECT" " uuid, owner, name, comment, installer, installer_64," " installer_filename, installer_signature_64, installer_trust," " installer_trust_time, howto_install, howto_use, creation_time," " modification_time" " FROM agents WHERE id = %llu;", agent); permissions_set_locations ("agent", agent, sql_last_insert_id (), LOCATION_TRASH); tags_set_locations ("agent", agent, sql_last_insert_id (), LOCATION_TRASH); } else { permissions_set_orphans ("agent", agent, LOCATION_TABLE); tags_set_orphans ("agent", agent, LOCATION_TABLE); } sql ("DELETE FROM agents WHERE id = %llu;", agent); sql ("COMMIT;"); return 0; } /** * @brief Check whether an agent is in use. * * @param[in] agent Agent. * * @return 1 yes, 0 no. */ int agent_in_use (agent_t agent) { return 0; } /** * @brief Check whether a trashcan agent is writable. * * @param[in] agent Agent. * * @return 1 yes, 0 no. */ int trash_agent_in_use (agent_t agent) { return 0; } /** * @brief Check whether a agent is writable. * * @param[in] agent Agent. * * @return 1 yes, 0 no. */ int agent_writable (agent_t agent) { return (agent_in_use (agent) == 0); } /** * @brief Check whether a trashcan agent is writable. * * @param[in] agent Agent. * * @return 1 yes, 0 no. */ int trash_agent_writable (agent_t agent) { return (trash_agent_in_use (agent) == 0); } /** * @brief Verify an agent. * * @param[in] agent_id Agent UUID. * * @return 0 success, 1 failed to find agent, 99 permission denied, -1 error. */ int verify_agent (const char *agent_id) { agent_t agent; int agent_trust = TRUST_UNKNOWN; iterator_t agents; get_data_t get; sql_begin_immediate (); if (user_may ("verify_agent") == 0) { sql ("ROLLBACK;"); return 99; } agent = 0; if (find_agent_with_permission (agent_id, &agent, "verify_agent")) return -1; if (agent == 0) return 1; memset (&get, 0, sizeof (get)); get.filter = g_strdup_printf ("uuid=%s owner=any permission=any", agent_id); init_agent_iterator (&agents, &get); g_free (get.filter); if (next (&agents)) { const char *signature_64; gchar *agent_signature = NULL; gsize agent_signature_size; signature_64 = agent_iterator_installer_signature_64 (&agents); find_signature ("agents", agent_iterator_installer_filename (&agents), &agent_signature, &agent_signature_size, NULL); if ((signature_64 && strlen (signature_64)) || agent_signature) { const char *installer; gsize installer_size; installer = agent_iterator_installer (&agents); installer_size = agent_iterator_installer_size (&agents); if (signature_64 && strlen (signature_64)) { gchar *signature; gsize signature_length; /* Try the signature from the database. */ signature = (gchar*) g_base64_decode (signature_64, &signature_length); if (verify_signature (installer, installer_size, signature, signature_length, &agent_trust)) { g_warning ("%s: verify_signature error\n", __FUNCTION__); cleanup_iterator (&agents); g_free (agent_signature); sql ("ROLLBACK;"); return -1; } } /* If the database signature is empty or the database * signature is bad, and there is a feed signature, then * try the feed signature. */ if (((agent_trust == TRUST_NO) || (agent_trust == TRUST_UNKNOWN)) && agent_signature) { if (verify_signature (installer, installer_size, agent_signature, strlen (agent_signature), &agent_trust)) { g_warning ("%s: verify_signature error\n", __FUNCTION__); cleanup_iterator (&agents); g_free (agent_signature); sql ("ROLLBACK;"); return -1; } if (agent_trust == TRUST_YES) { gchar *quoted_signature, *base64; base64 = (strlen (agent_signature) ? g_base64_encode ((guchar*) agent_signature, agent_signature_size) : g_strdup ("")); quoted_signature = sql_quote (base64); g_free (base64); sql ("UPDATE agents SET installer_signature_64 = '%s'" " WHERE id = %llu;", quoted_signature, agent); g_free (quoted_signature); } } g_free (agent_signature); } } else { g_warning ("%s: agent iterator empty\n", __FUNCTION__); cleanup_iterator (&agents); sql ("ROLLBACK;"); return -1; } cleanup_iterator (&agents); sql ("UPDATE agents SET installer_trust = %i, installer_trust_time = %i" " WHERE id = %llu;", agent_trust, time (NULL), agent); sql ("COMMIT;"); return 0; } /** * @brief Return the UUID of an agent. * * @param[in] agent Agent. * * @return UUID of Agent. */ char * agent_uuid (agent_t agent) { return sql_string ("SELECT uuid FROM agents WHERE id = %llu;", agent); } /** * @brief Filter columns for agent iterator. */ #define AGENT_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "trust", NULL } /** * @brief Agent iterator columns. */ #define AGENT_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS (agents), \ { "installer", NULL }, \ { "installer_64", NULL }, \ { "installer_filename", NULL }, \ { "installer_signature_64", NULL }, \ { "installer_trust" , NULL }, \ { "installer_trust_time", NULL }, \ { "howto_install", NULL }, \ { "howto_use", NULL }, \ { \ "(CASE" \ " WHEN installer_trust = 1 THEN 'yes'" \ " WHEN installer_trust = 2 THEN 'no'" \ " WHEN installer_trust = 3 THEN 'unknown'" \ " ELSE ''" \ " END)" \ " || ' (' || iso_time (installer_trust_time) || ')'", \ "trust" \ }, \ { NULL, NULL } \ } /** * @brief Agent iterator columns for trash case. */ #define AGENT_ITERATOR_TRASH_COLUMNS \ { \ GET_ITERATOR_COLUMNS (agents_trash), \ { "installer", NULL }, \ { "installer_64", NULL }, \ { "installer_filename", NULL }, \ { "installer_signature_64", NULL }, \ { "installer_trust" , NULL }, \ { "installer_trust_time", NULL }, \ { "howto_install", NULL }, \ { "howto_use", NULL }, \ { \ "(CASE" \ " WHEN installer_trust = 1 THEN 'yes'" \ " WHEN installer_trust = 2 THEN 'no'" \ " WHEN installer_trust = 3 THEN 'unknown'" \ " ELSE ''" \ " END)" \ " || ' (' || iso_time (installer_trust_time) || ')'", \ "trust" \ }, \ { NULL, NULL } \ } /** * @brief Get the resource from a GET iterator. * * @param[in] iterator Iterator. * * @return Resource. */ resource_t get_iterator_resource (iterator_t* iterator) { if (iterator->done) return 0; return iterator_int64 (iterator, 0); } /** * @brief Get the UUID of the resource from a GET iterator. * * @param[in] iterator Iterator. * * @return UUID of the resource or NULL if iteration is complete. */ DEF_ACCESS (get_iterator_uuid, 1); /** * @brief Get the name of the resource from a GET iterator. * * @param[in] iterator Iterator. * * @return Name of the resource or NULL if iteration is complete. */ DEF_ACCESS (get_iterator_name, 2); /** * @brief Get the comment from a GET iterator. * * @param[in] iterator Iterator. * * @return Comment. */ const char* get_iterator_comment (iterator_t* iterator) { const char *ret; if (iterator->done) return ""; ret = iterator_string (iterator, 3); return ret ? ret : ""; } /** * @brief Get the creation time of the resource from a GET iterator. * * @param[in] iterator Iterator. * * @return Creation time of the resource or NULL if iteration is complete. */ DEF_ACCESS (get_iterator_creation_time, 4); /** * @brief Get the modification time of the resource from a GET iterator. * * @param[in] iterator Iterator. * * @return Modification time of the resource or NULL if iteration is complete. */ DEF_ACCESS (get_iterator_modification_time, 5); /** * @brief Get the owner name of the resource from a GET iterator. * * @param[in] iterator Iterator. * * @return Owner name of the resource or NULL if iteration is complete. */ DEF_ACCESS (get_iterator_owner_name, 8); /** * @brief Get the owner from a GET iterator. * * @param[in] iterator Iterator. * * @return Owner. */ user_t get_iterator_owner (iterator_t* iterator) { if (iterator->done) return 0; return iterator_int64 (iterator, 9); } /** * @brief Initialise an agent iterator. * * @param[in] iterator Iterator. * @param[in] get GET data. * * @return 0 success, 1 failed to find agent, failed to find filter, -1 error. */ int init_agent_iterator (iterator_t* iterator, const get_data_t *get) { static const char *filter_columns[] = AGENT_ITERATOR_FILTER_COLUMNS; static column_t columns[] = AGENT_ITERATOR_COLUMNS; static column_t trash_columns[] = AGENT_ITERATOR_TRASH_COLUMNS; return init_get_iterator (iterator, "agent", get, columns, trash_columns, filter_columns, 0, NULL, NULL, TRUE); } /** * @brief Get the installer from an agent iterator. * * @param[in] iterator Iterator. * * @return Installer, or NULL if iteration is complete. Freed * by cleanup_iterator. */ DEF_ACCESS (agent_iterator_installer, GET_ITERATOR_COLUMN_COUNT); /** * @brief Get the installer_64 from an agent iterator. * * @param[in] iterator Iterator. * * @return Base 64 encoded installer, or NULL if iteration is complete. Freed * by cleanup_iterator. */ DEF_ACCESS (agent_iterator_installer_64, GET_ITERATOR_COLUMN_COUNT + 1); /** * @brief Get the installer size from an agent iterator. * * @param[in] iterator Iterator. * * @return Installer size, or NULL if iteration is complete. Freed * by cleanup_iterator. */ gsize agent_iterator_installer_size (iterator_t* iterator) { const char *installer_64; gsize installer_size; installer_64 = agent_iterator_installer_64 (iterator); if (installer_64 && strlen (installer_64)) { gchar *installer; installer = (gchar*) g_base64_decode ((gchar*) installer_64, &installer_size); g_free (installer); return installer_size; } return 0; } /** * @brief Get the installer_filename from an agent iterator. * * @param[in] iterator Iterator. * * @return Installer filename, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (agent_iterator_installer_filename, GET_ITERATOR_COLUMN_COUNT + 2); /** * @brief Get the installer_signature_64 from an agent iterator. * * @param[in] iterator Iterator. * * @return Installer signature in base64, or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (agent_iterator_installer_signature_64, GET_ITERATOR_COLUMN_COUNT + 3); /** * @brief Get the trust value from an agent iterator. * * @param[in] iterator Iterator. * * @return Trust value. */ const char* agent_iterator_trust (iterator_t* iterator) { if (iterator->done) return NULL; switch (iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 4)) { case 1: return "yes"; case 2: return "no"; case 3: return "unknown"; default: return NULL; } } /** * @brief Get the installer trust time from a agent iterator. * * @param[in] iterator Iterator. * * @return Time agent installer was verified. */ time_t agent_iterator_trust_time (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = (time_t) iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 5); return ret; } /** * @brief Get the install HOWTO from an agent iterator. * * @param[in] iterator Iterator. * * @return Install HOWTO, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (agent_iterator_howto_install, GET_ITERATOR_COLUMN_COUNT + 6); /** * @brief Get the usage HOWTO from an agent iterator. * * @param[in] iterator Iterator. * * @return Usage HOWTO, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (agent_iterator_howto_use, GET_ITERATOR_COLUMN_COUNT + 7); /** * @brief Count number of agents. * * @param[in] get GET params. * * @return Total number of agents in filtered set. */ int agent_count (const get_data_t *get) { static const char *filter_columns[] = AGENT_ITERATOR_FILTER_COLUMNS; static column_t columns[] = AGENT_ITERATOR_COLUMNS; static column_t trash_columns[] = AGENT_ITERATOR_TRASH_COLUMNS; return count ("agent", get, columns, trash_columns, filter_columns, 0, 0, 0, TRUE); } /* Notes. */ /** * @brief Find a note for a specific permission, given a UUID. * * @param[in] uuid UUID of note. * @param[out] note Note return, 0 if succesfully failed to find note. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find note), TRUE on error. */ gboolean find_note_with_permission (const char* uuid, note_t* note, const char *permission) { return find_resource_with_permission ("note", uuid, note, permission, 0); } /** * @brief Create a note. * * @param[in] active NULL or -1 on, 0 off, n on for n days. * @param[in] nvt OID of noted NVT. * @param[in] text Note text. * @param[in] hosts Hosts to apply note to, NULL for any host. * @param[in] port Port to apply note to, NULL for any port. * @param[in] severity Severity to apply note to, "" or NULL for any. * @param[in] threat Threat to apply note to, "" or NULL for any threat. * Only used if severity is "" or NULL. * @param[in] task Task to apply note to, 0 for any task. * @param[in] result Result to apply note to, 0 for any result. * @param[out] note Created note. * * @return 0 success, 1 failed to find NVT, 2 invalid port, 99 permission * denied, -1 error. */ int create_note (const char* active, const char* nvt, const char* text, const char* hosts, const char* port, const char* severity, const char* threat, task_t task, result_t result, note_t *note) { gchar *quoted_text, *quoted_hosts, *quoted_port, *quoted_severity; gchar *quoted_nvt; double severity_dbl; if (user_may ("create_note") == 0) return 99; if (nvt == NULL) return -1; quoted_nvt = sql_quote (nvt); if (strcmp (nvt, "0") && (sql_int ("SELECT count (*) FROM nvts WHERE oid = '%s'", quoted_nvt) == 0)) { g_free (quoted_nvt); return 1; } g_free (quoted_nvt); if (port && validate_results_port (port)) return 2; if (text == NULL) return -1; if (threat && strcmp (threat, "High") && strcmp (threat, "Medium") && strcmp (threat, "Low") && strcmp (threat, "Log") && strcmp (threat, "Debug") && strcmp (threat, "")) return -1; quoted_text = sql_insert (text); quoted_hosts = sql_insert (hosts); quoted_port = sql_insert (port); severity_dbl = 0.0; if (severity != NULL && strcmp (severity, "")) { if (sscanf (severity, "%lf", &severity_dbl) != 1 || ((severity_dbl < 0.0 || severity_dbl > 10.0) && severity_dbl != SEVERITY_LOG && severity_dbl != SEVERITY_DEBUG)) return 3; quoted_severity = g_strdup_printf ("'%1.1f'", severity_dbl); } else if (threat != NULL && strcmp (threat, "")) { if (strcmp (threat, "Alarm") == 0) severity_dbl = 0.1; else if (strcmp (threat, "High") == 0) severity_dbl = 0.1; else if (strcmp (threat, "Medium") == 0) severity_dbl = 0.1; else if (strcmp (threat, "Low") == 0) severity_dbl = 0.1; else if (strcmp (threat, "Log") == 0) severity_dbl = SEVERITY_LOG; else if (strcmp (threat, "Debug") == 0) severity_dbl = SEVERITY_DEBUG; else return -1; quoted_severity = g_strdup_printf ("'%1.1f'", severity_dbl); } else quoted_severity = g_strdup ("NULL"); sql ("INSERT INTO notes" " (uuid, owner, nvt, creation_time, modification_time, text, hosts," " port, severity, task, result, end_time)" " VALUES" " (make_uuid (), (SELECT id FROM users WHERE users.uuid = '%s')," " '%s', %i, %i, %s, %s, %s, %s, %llu, %llu, %i);", current_credentials.uuid, nvt, time (NULL), time (NULL), quoted_text, quoted_hosts, quoted_port, quoted_severity, task, result, (active == NULL || (strcmp (active, "-1") == 0)) ? 0 : (strcmp (active, "0") ? (time (NULL) + (atoi (active) * 60 * 60 * 24)) : 1)); g_free (quoted_text); g_free (quoted_hosts); g_free (quoted_port); g_free (quoted_severity); if (note) *note = sql_last_insert_id (); return 0; } /** * @brief Create a note from an existing note. * * @param[in] note_id UUID of existing note. * @param[out] new_note New note. * * @return 0 success, 1 note exists already, 2 failed to find existing * note, -1 error. */ int copy_note (const char *note_id, note_t* new_note) { return copy_resource ("note", NULL, NULL, note_id, "nvt, text, hosts, port, severity, task, result," "end_time", 1, new_note); } /** * @brief Delete a note. * * @param[in] note_id UUID of note. * @param[in] ultimate Whether to remove entirely, or to trashcan. * * @return 0 success, 2 failed to find note, 99 permission denied, -1 error. */ int delete_note (const char *note_id, int ultimate) { note_t note = 0; sql_begin_immediate (); if (user_may ("delete_note") == 0) { sql ("ROLLBACK;"); return 99; } if (find_note_with_permission (note_id, ¬e, "delete_note")) { sql ("ROLLBACK;"); return -1; } if (note == 0) { if (find_trash ("note", note_id, ¬e)) { sql ("ROLLBACK;"); return -1; } if (note == 0) { sql ("ROLLBACK;"); return 2; } if (ultimate == 0) { /* It's already in the trashcan. */ sql ("COMMIT;"); return 0; } permissions_set_orphans ("note", note, LOCATION_TRASH); tags_set_orphans ("note", note, LOCATION_TRASH); sql ("DELETE FROM notes_trash WHERE id = %llu;", note); sql ("COMMIT;"); return 0; } if (ultimate == 0) { sql ("INSERT INTO notes_trash" " (uuid, owner, nvt, creation_time, modification_time, text, hosts," " port, severity, task, result, end_time)" " SELECT uuid, owner, nvt, creation_time, modification_time, text," " hosts, port, severity, task, result, end_time" " FROM notes WHERE id = %llu;", note); permissions_set_locations ("note", note, sql_last_insert_id (), LOCATION_TRASH); tags_set_locations ("note", note, sql_last_insert_id (), LOCATION_TRASH); } else { permissions_set_orphans ("note", note, LOCATION_TABLE); tags_set_orphans ("note", note, LOCATION_TABLE); } sql ("DELETE FROM notes WHERE id = %llu;", note); sql ("COMMIT;"); return 0; } /** * @brief Return the UUID of a note. * * @param[in] note Note. * @param[out] id Pointer to a newly allocated string. * * @return 0. */ int note_uuid (note_t note, char ** id) { *id = sql_string ("SELECT uuid FROM notes WHERE id = %llu;", note); return 0; } /** * @brief Modify a note. * * @param[in] note Note. * @param[in] active NULL or -2 leave as is, -1 on, 0 off, n on for n * days. * @param[in] text Note text. * @param[in] hosts Hosts to apply note to, NULL for any host. * @param[in] port Port to apply note to, NULL for any port. * @param[in] severity Severity to apply note to, "" or NULL for any. * @param[in] threat Threat to apply note to, "" or NULL for any threat. * Only used if severity is "" or NULL. * @param[in] task Task to apply note to, 0 for any task. * @param[in] result Result to apply note to, 0 for any result. * * @return 0 success, -1 error, 1 syntax error in active, 2 invalid port, * 3 invalid severity. */ int modify_note (note_t note, const char *active, const char* text, const char* hosts, const char* port, const char* severity, const char* threat, task_t task, result_t result) { gchar *quoted_text, *quoted_hosts, *quoted_port, *quoted_severity; double severity_dbl; if (note == 0) return -1; if (text == NULL) return -1; if (threat && strcmp (threat, "High") && strcmp (threat, "Medium") && strcmp (threat, "Low") && strcmp (threat, "Log") && strcmp (threat, "Debug") && strcmp (threat, "Alarm") && strcmp (threat, "")) return -1; if (port && validate_results_port (port)) return 2; quoted_text = sql_insert (text); quoted_hosts = sql_insert (hosts); quoted_port = sql_insert (port); severity_dbl = 0.0; if (severity != NULL && strcmp (severity, "")) { if (sscanf (severity, "%lf", &severity_dbl) != 1 || ((severity_dbl < 0.0 || severity_dbl > 10.0) && severity_dbl != SEVERITY_LOG && severity_dbl != SEVERITY_DEBUG)) return 3; quoted_severity = g_strdup_printf ("'%1.1f'", severity_dbl); } else if (threat != NULL && strcmp (threat, "")) { if (strcmp (threat, "Alarm") == 0) severity_dbl = 0.1; else if (strcmp (threat, "High") == 0) severity_dbl = 0.1; else if (strcmp (threat, "Medium") == 0) severity_dbl = 0.1; else if (strcmp (threat, "Low") == 0) severity_dbl = 0.1; else if (strcmp (threat, "Log") == 0) severity_dbl = SEVERITY_LOG; else if (strcmp (threat, "Debug") == 0) severity_dbl = SEVERITY_DEBUG; else return -1; quoted_severity = g_strdup_printf ("'%1.1f'", severity_dbl); } else quoted_severity = g_strdup ("NULL"); if ((active == NULL) || (strcmp (active, "-2") == 0)) sql ("UPDATE notes SET" " modification_time = %i," " text = %s," " hosts = %s," " port = %s," " severity = %s," " task = %llu," " result = %llu" " WHERE id = %llu;", time (NULL), quoted_text, quoted_hosts, quoted_port, quoted_severity, task, result, note); else { const char *point; point = active; if (strcmp (point, "-1")) { while (*point && isdigit (*point)) point++; if (*point) return 1; } sql ("UPDATE notes SET" " end_time = %i," " modification_time = %i," " text = %s," " hosts = %s," " port = %s," " severity = %s," " task = %llu," " result = %llu" " WHERE id = %llu;", (strcmp (active, "-1") ? (strcmp (active, "0") ? (time (NULL) + atoi (active) * 60 * 60 * 24) : 1) : 0), time (NULL), quoted_text, quoted_hosts, quoted_port, quoted_severity, task, result, note); } g_free (quoted_text); g_free (quoted_hosts); g_free (quoted_port); g_free (quoted_severity); return 0; } /** * @brief Filter columns for note iterator. */ #define NOTE_ITERATOR_FILTER_COLUMNS \ { ANON_GET_ITERATOR_FILTER_COLUMNS, "name", "nvt", "text", "nvt_id", \ "task_name", "task_id", "hosts", "port", "active", "result", "severity", \ NULL } /** * @brief Note iterator columns. */ #define NOTE_ITERATOR_COLUMNS \ { \ { "notes.id", "id" }, \ { "notes.uuid", "uuid" }, \ { " (SELECT name FROM nvts WHERE oid = notes.nvt)", "name" }, \ { "CAST ('' AS TEXT)", NULL }, \ { "iso_time (notes.creation_time)", NULL }, \ { "iso_time (notes.modification_time)", NULL }, \ { "notes.creation_time", "created" }, \ { "notes.modification_time", "modified" }, \ { "(SELECT name FROM users WHERE users.id = notes.owner)", "_owner" }, \ { "owner", NULL }, \ /* Columns specific to notes. */ \ { "notes.nvt", "oid" }, \ { "notes.text", "text" }, \ { "notes.hosts", "hosts" }, \ { "notes.port", "port" }, \ { "severity_to_level (notes.severity, 1)", "threat" }, \ { "notes.task", NULL }, \ { "notes.result", "result" }, \ { "notes.end_time", NULL }, \ { "(notes.end_time = 0) OR (notes.end_time >= m_now ())", "active" }, \ { "(SELECT name FROM nvts WHERE oid = notes.nvt)", "nvt" }, \ { "notes.nvt", "nvt_id" }, \ { "(SELECT uuid FROM tasks WHERE id = notes.task)", "task_id" }, \ { "(SELECT name FROM tasks WHERE id = notes.task)", "task_name" }, \ { "notes.severity", "severity" }, \ { "(SELECT name FROM users WHERE users.id = notes.owner)", "_owner" }, \ { NULL, NULL } \ } /** * @brief Note iterator columns for trash case. */ #define NOTE_ITERATOR_TRASH_COLUMNS \ { \ { "notes_trash.id", "id" }, \ { "notes_trash.uuid", "uuid" }, \ { "CAST ('' AS TEXT)", NULL }, \ { "CAST ('' AS TEXT)", NULL }, \ { "iso_time (notes_trash.creation_time)", NULL }, \ { "iso_time (notes_trash.modification_time)", NULL }, \ { "notes_trash.creation_time", "created" }, \ { "notes_trash.modification_time", "modified" }, \ { "(SELECT name FROM users WHERE users.id = notes_trash.owner)", "_owner" }, \ { "owner", NULL }, \ /* Columns specific to notes_trash. */ \ { "notes_trash.nvt", "oid" }, \ { "notes_trash.text", "text" }, \ { "notes_trash.hosts", "hosts" }, \ { "notes_trash.port", "port" }, \ { "severity_to_level (notes_trash.severity, 1)", "threat" }, \ { "notes_trash.task", NULL }, \ { "notes_trash.result", "result" }, \ { "notes_trash.end_time", NULL }, \ { "(notes_trash.end_time = 0) OR (notes_trash.end_time >= m_now ())", \ "active" }, \ { "(SELECT name FROM nvts WHERE oid = notes_trash.nvt)", "nvt" }, \ { "notes_trash.nvt", "nvt_id" }, \ { "(SELECT uuid FROM tasks WHERE id = notes_trash.task)", "task_id" }, \ { "(SELECT name FROM tasks WHERE id = notes_trash.task)", "task_name" }, \ { "notes_trash.severity", "severity" }, \ { NULL, NULL } \ } /** * @brief Count number of notes. * * @param[in] get GET params. * @param[in] result Result to limit notes to, 0 for all. * @param[in] task If result is > 0, task whose notes on result to * include, otherwise task to limit notes to. 0 for * all tasks. * @param[in] nvt NVT to limit notes to, 0 for all. * * @return Total number of notes in filtered set. */ int note_count (const get_data_t *get, nvt_t nvt, result_t result, task_t task) { static const char *filter_columns[] = NOTE_ITERATOR_FILTER_COLUMNS; static column_t columns[] = NOTE_ITERATOR_COLUMNS; static column_t trash_columns[] = NOTE_ITERATOR_TRASH_COLUMNS; gchar *result_clause, *filter, *task_id; int ret; /* Treat the "task_id" filter keyword as if the task was given in "task". */ if (get->filt_id && strcmp (get->filt_id, "0")) { filter = filter_term (get->filt_id); if (filter == NULL) return 2; } else filter = NULL; task_id = filter_term_value (filter ? filter : get->filter, "task_id"); g_free (filter); if (task_id) { find_task (task_id, &task); g_free (task_id); } if (result) { gchar *severity_sql; if (setting_dynamic_severity_int ()) severity_sql = g_strdup_printf ("(SELECT CASE" " WHEN results.severity" " > " G_STRINGIFY (SEVERITY_LOG) " THEN nvts.cvss_base" " ELSE results.severity END" " FROM results, nvts" " WHERE (nvts.oid = results.nvt)" " AND (results.id = %llu))", result); else severity_sql = g_strdup_printf ("(SELECT results.severity" " FROM results" " WHERE results.id = %llu)", result); result_clause = g_strdup_printf (" AND" " (result = %llu" " OR (result = 0 AND nvt =" " (SELECT results.nvt FROM results" " WHERE results.id = %llu)))" " AND (hosts is NULL" " OR hosts = ''" " OR hosts_contains (hosts," " (SELECT results.host FROM results" " WHERE results.id = %llu)))" " AND (port is NULL" " OR port = ''" " OR port =" " (SELECT results.port FROM results" " WHERE results.id = %llu))" " AND (severity_matches_ov (%s," " severity))" " AND (task = 0 OR task = %llu)", result, result, result, result, severity_sql, task); g_free (severity_sql); } else if (task) { result_clause = g_strdup_printf (" AND (notes.task = %llu OR notes.task = 0)" " AND nvt IN" " (SELECT DISTINCT nvt FROM results" " WHERE results.task = %llu)" " AND (notes.result = 0" " OR (SELECT task FROM results" " WHERE results.id = notes.result)" " = %llu)", task, task, task); } else if (nvt) { result_clause = g_strdup_printf (" AND (notes.nvt =" " (SELECT oid FROM nvts WHERE nvts.id = %llu))" " AND ((notes.owner IS NULL) OR (notes.owner =" " (SELECT id FROM users WHERE users.uuid = '%s')))", nvt, current_credentials.uuid); } else result_clause = NULL; ret = count ("note", get, columns, trash_columns, filter_columns, task || nvt, NULL, result_clause, TRUE); g_free (result_clause); return ret; } /** * @brief Initialise a note iterator. * * @param[in] iterator Iterator. * @param[in] get GET data. * @param[in] result Result to limit notes to, 0 for all. * @param[in] task If result is > 0, task whose notes on result to * include, otherwise task to limit notes to. 0 for * all tasks. * @param[in] nvt NVT to limit notes to, 0 for all. * * @return 0 success, 1 failed to find target, 2 failed to find filter, * -1 error. */ int init_note_iterator (iterator_t* iterator, const get_data_t *get, nvt_t nvt, result_t result, task_t task) { static const char *filter_columns[] = NOTE_ITERATOR_FILTER_COLUMNS; static column_t columns[] = NOTE_ITERATOR_COLUMNS; static column_t trash_columns[] = NOTE_ITERATOR_TRASH_COLUMNS; gchar *result_clause, *filter, *task_id; int ret; assert (current_credentials.uuid); assert ((nvt && get->id) == 0); assert ((task && get->id) == 0); assert (result ? nvt == 0 : 1); assert (task ? nvt == 0 : 1); /* Treat the "task_id" filter keyword as if the task was given in "task". */ if (get->filt_id && strcmp (get->filt_id, "0")) { filter = filter_term (get->filt_id); if (filter == NULL) return 2; } else filter = NULL; task_id = filter_term_value (filter ? filter : get->filter, "task_id"); g_free (filter); if (task_id) { find_task (task_id, &task); g_free (task_id); } if (result) { gchar *severity_sql; if (setting_dynamic_severity_int ()) severity_sql = g_strdup_printf ("(SELECT CASE" " WHEN results.severity" " > " G_STRINGIFY (SEVERITY_LOG) " THEN nvts.cvss_base" " ELSE results.severity END" " FROM results, nvts" " WHERE (nvts.oid = results.nvt)" " AND (results.id = %llu))", result); else severity_sql = g_strdup_printf ("(SELECT results.severity" " FROM results" " WHERE results.id = %llu)", result); result_clause = g_strdup_printf (" AND" " (result = %llu" " OR (result = 0 AND nvt =" " (SELECT results.nvt FROM results" " WHERE results.id = %llu)))" " AND (hosts is NULL" " OR hosts = ''" " OR hosts_contains (hosts," " (SELECT results.host FROM results" " WHERE results.id = %llu)))" " AND (port is NULL" " OR port = ''" " OR port =" " (SELECT results.port FROM results" " WHERE results.id = %llu))" " AND (severity_matches_ov (%s," " severity))" " AND (task = 0 OR task = %llu)", result, result, result, result, severity_sql, task); g_free (severity_sql); } else if (task) { result_clause = g_strdup_printf (" AND (notes.task = %llu OR notes.task = 0)" " AND nvt IN" " (SELECT DISTINCT nvt FROM results" " WHERE results.task = %llu)" " AND (notes.result = 0" " OR (SELECT task FROM results" " WHERE results.id = notes.result)" " = %llu)", task, task, task); } else if (nvt) { result_clause = g_strdup_printf (" AND (notes.nvt =" " (SELECT oid FROM nvts WHERE nvts.id = %llu))" " AND ((notes.owner IS NULL) OR (notes.owner =" " (SELECT id FROM users WHERE users.uuid = '%s')))", nvt, current_credentials.uuid); } else result_clause = NULL; ret = init_get_iterator (iterator, "note", get, columns, trash_columns, filter_columns, task || nvt, NULL, result_clause, TRUE); g_free (result_clause); return ret; } /** * @brief Get the NVT OID from a note iterator. * * @param[in] iterator Iterator. * * @return NVT OID, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (note_iterator_nvt_oid, GET_ITERATOR_COLUMN_COUNT); /** * @brief Get the text from a note iterator. * * @param[in] iterator Iterator. * * @return Text, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (note_iterator_text, GET_ITERATOR_COLUMN_COUNT + 1); /** * @brief Get the hosts from a note iterator. * * @param[in] iterator Iterator. * * @return Hosts, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (note_iterator_hosts, GET_ITERATOR_COLUMN_COUNT + 2); /** * @brief Get the port from a note iterator. * * @param[in] iterator Iterator. * * @return Port, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (note_iterator_port, GET_ITERATOR_COLUMN_COUNT + 3); /** * @brief Get the threat from a note iterator. * * @param[in] iterator Iterator. * * @return Threat. */ const char * note_iterator_threat (iterator_t *iterator) { const char *ret; if (iterator->done) return NULL; ret = iterator_string (iterator, GET_ITERATOR_COLUMN_COUNT + 4); if (ret == NULL) return NULL; return message_type_threat (ret); } /** * @brief Get the task from a note iterator. * * @param[in] iterator Iterator. * * @return The task associated with the note, or 0 on error. */ task_t note_iterator_task (iterator_t* iterator) { if (iterator->done) return 0; return (task_t) iterator_int64 (iterator, GET_ITERATOR_COLUMN_COUNT + 5); } /** * @brief Get the result from a note iterator. * * @param[in] iterator Iterator. * * @return The result associated with the note, or 0 on error. */ result_t note_iterator_result (iterator_t* iterator) { if (iterator->done) return 0; return (result_t) iterator_int64 (iterator, GET_ITERATOR_COLUMN_COUNT + 6); } /** * @brief Get the end time from an note iterator. * * @param[in] iterator Iterator. * * @return Time until which note applies. 0 for always. 1 means the * note has been explicitly turned off. */ time_t note_iterator_end_time (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = (time_t) iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 7); return ret; } /** * @brief Get the active status from an note iterator. * * @param[in] iterator Iterator. * * @return 1 if active, else 0. */ int note_iterator_active (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 8); return ret; } /** * @brief Get the NVT name from a note iterator. * * @param[in] iterator Iterator. * * @return NVT name, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (note_iterator_nvt_name, GET_ITERATOR_COLUMN_COUNT + 9); /** * @brief Get the severity from a note iterator. * * @param[in] iterator Iterator. * * @return The severity to apply the note to, or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (note_iterator_severity, GET_ITERATOR_COLUMN_COUNT + 13); /* Overrides. */ /** * @brief Find a override for a specific permission, given a UUID. * * @param[in] uuid UUID of override. * @param[out] override Override return, 0 if succesfully failed to find * override. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find override), TRUE on * error. */ gboolean find_override_with_permission (const char* uuid, override_t* override, const char *permission) { return find_resource_with_permission ("override", uuid, override, permission, 0); } /** * @brief Create an override. * * @param[in] active NULL or -1 on, 0 off, n on for n days. * @param[in] nvt OID of overrided NVT. * @param[in] text Override text. * @param[in] hosts Hosts to apply override to, NULL for any host. * @param[in] port Port to apply override to, NULL for any port. * @param[in] threat Threat to apply override to, "" or NULL for any threat. * @param[in] new_threat Threat to override result to. * @param[in] severity Severity to apply override to, "" or NULL for any. * @param[in] new_severity Severity score to override "Alarm" type results to. * @param[in] task Task to apply override to, 0 for any task. * @param[in] result Result to apply override to, 0 for any result. * @param[out] override Created override. * * @return 0 success, 1 failed to find NVT, 2 invalid port, 3 invalid severity, * 99 permission denied, -1 error. */ int create_override (const char* active, const char* nvt, const char* text, const char* hosts, const char* port, const char* threat, const char* new_threat, const char* severity, const char* new_severity, task_t task, result_t result, override_t* override) { gchar *quoted_text, *quoted_hosts, *quoted_port, *quoted_severity; gchar *quoted_nvt; double severity_dbl, new_severity_dbl; if (user_may ("create_override") == 0) return 99; if (nvt == NULL) return -1; if (text == NULL) return -1; quoted_nvt = sql_quote (nvt); if (strcmp (nvt, "0") && (sql_int ("SELECT count (*) FROM nvts WHERE oid = '%s'", quoted_nvt) == 0)) { g_free (quoted_nvt); return 1; } g_free (quoted_nvt); if (port && validate_results_port (port)) return 2; if (threat && strcmp (threat, "High") && strcmp (threat, "Medium") && strcmp (threat, "Low") && strcmp (threat, "Log") && strcmp (threat, "Debug") && strcmp (threat, "Alarm") && strcmp (threat, "")) return -1; if (new_threat && strcmp (new_threat, "High") && strcmp (new_threat, "Medium") && strcmp (new_threat, "Low") && strcmp (new_threat, "Log") && strcmp (new_threat, "Debug") && strcmp (new_threat, "False Positive") && strcmp (new_threat, "Alarm") && strcmp (new_threat, "")) return -1; severity_dbl = 0.0; if (severity != NULL && strcmp (severity, "")) { if (sscanf (severity, "%lf", &severity_dbl) != 1 || ((severity_dbl < 0.0 || severity_dbl > 10.0) && severity_dbl != SEVERITY_LOG && severity_dbl != SEVERITY_DEBUG)) return 3; quoted_severity = g_strdup_printf ("'%1.1f'", severity_dbl); } else if (threat != NULL && strcmp (threat, "")) { if (strcmp (threat, "Alarm") == 0) severity_dbl = 0.1; else if (strcmp (threat, "High") == 0) severity_dbl = 0.1; else if (strcmp (threat, "Medium") == 0) severity_dbl = 0.1; else if (strcmp (threat, "Low") == 0) severity_dbl = 0.1; else if (strcmp (threat, "Log") == 0) severity_dbl = SEVERITY_LOG; else if (strcmp (threat, "Debug") == 0) severity_dbl = SEVERITY_DEBUG; else return -1; quoted_severity = g_strdup_printf ("'%1.1f'", severity_dbl); } else quoted_severity = g_strdup ("NULL"); new_severity_dbl = 0.0; if (new_severity != NULL && strcmp (new_severity, "")) { if (sscanf (new_severity, "%lf", &new_severity_dbl) != 1 || ((new_severity_dbl < 0.0 || new_severity_dbl > 10.0) && new_severity_dbl != SEVERITY_LOG && new_severity_dbl != SEVERITY_FP && new_severity_dbl != SEVERITY_DEBUG)) { g_free (quoted_severity); return 2; } } else if (new_threat != NULL && strcmp (new_threat, "")) { if (strcmp (new_threat, "Alarm") == 0) new_severity_dbl = 10.0; else if (strcmp (new_threat, "High") == 0) new_severity_dbl = 10.0; else if (strcmp (new_threat, "Medium") == 0) new_severity_dbl = 5.0; else if (strcmp (new_threat, "Low") == 0) new_severity_dbl = 2.0; else if (strcmp (new_threat, "Log") == 0) new_severity_dbl = SEVERITY_LOG; else if (strcmp (new_threat, "Debug") == 0) new_severity_dbl = SEVERITY_DEBUG; else return -1; } else { g_free (quoted_severity); return -1; } quoted_text = sql_insert (text); quoted_hosts = sql_insert (hosts); quoted_port = sql_insert (port); sql ("INSERT INTO overrides" " (uuid, owner, nvt, creation_time, modification_time, text, hosts," " port, severity, new_severity, task, result, end_time)" " VALUES" " (make_uuid (), (SELECT id FROM users WHERE users.uuid = '%s')," " '%s', %i, %i, %s, %s, %s, %s, %1.1f, %llu, %llu, %i);", current_credentials.uuid, nvt, time (NULL), time (NULL), quoted_text, quoted_hosts, quoted_port, quoted_severity, new_severity_dbl, task, result, (active == NULL || (strcmp (active, "-1") == 0)) ? 0 : (strcmp (active, "0") ? (time (NULL) + (atoi (active) * 60 * 60 * 24)) : 1)); g_free (quoted_text); g_free (quoted_hosts); g_free (quoted_port); g_free (quoted_severity); if (override) *override = sql_last_insert_id (); reports_clear_count_cache (1); return 0; } /** * @brief Return the UUID of an override. * * @param[in] override Override. * @param[out] id Pointer to a newly allocated string. * * @return 0. */ int override_uuid (override_t override, char ** id) { *id = sql_string ("SELECT uuid FROM overrides WHERE id = %llu;", override); return 0; } /** * @brief Create a override from an existing override. * * @param[in] override_id UUID of existing override. * @param[out] new_override New override. * * @return 0 success, 1 override exists already, 2 failed to find existing * override, -1 error. */ int copy_override (const char *override_id, override_t* new_override) { return copy_resource ("override", NULL, NULL, override_id, "nvt, text, hosts, port, severity, new_severity, task," " result, end_time", 1, new_override); } /** * @brief Delete a override. * * @param[in] override_id UUID of override. * @param[in] ultimate Whether to remove entirely, or to trashcan. * * @return 0 success, 2 failed to find override, 99 permission denied, -1 error. */ int delete_override (const char *override_id, int ultimate) { override_t override; sql_begin_immediate (); if (user_may ("delete_override") == 0) { sql ("ROLLBACK;"); return 99; } override = 0; if (find_override_with_permission (override_id, &override, "delete_override")) { sql ("ROLLBACK;"); return -1; } if (override == 0) { if (find_trash ("override", override_id, &override)) { sql ("ROLLBACK;"); return -1; } if (override == 0) { sql ("ROLLBACK;"); return 2; } if (ultimate == 0) { /* It's already in the trashcan. */ sql ("COMMIT;"); return 0; } permissions_set_orphans ("override", override, LOCATION_TRASH); tags_set_orphans ("override", override, LOCATION_TRASH); sql ("DELETE FROM overrides_trash WHERE id = %llu;", override); sql ("COMMIT;"); return 0; } if (ultimate == 0) { sql ("INSERT INTO overrides_trash" " (uuid, owner, nvt, creation_time, modification_time, text, hosts," " port, severity, new_severity, task, result, end_time)" " SELECT uuid, owner, nvt, creation_time, modification_time, text," " hosts, port, severity, new_severity,task," " result, end_time" " FROM overrides WHERE id = %llu;", override); permissions_set_locations ("override", override, sql_last_insert_id (), LOCATION_TRASH); tags_set_locations ("override", override, sql_last_insert_id (), LOCATION_TRASH); } else { permissions_set_orphans ("override", override, LOCATION_TABLE); tags_set_orphans ("override", override, LOCATION_TABLE); } sql ("DELETE FROM overrides WHERE id = %llu;", override); reports_clear_count_cache (1); sql ("COMMIT;"); return 0; } /** * @brief Modify an override. * * @param[in] override Override. * @param[in] active NULL or -2 leave as is, -1 on, 0 off, n on for n * days. * @param[in] text Override text. * @param[in] hosts Hosts to apply override to, NULL for any host. * @param[in] port Port to apply override to, NULL for any port. * @param[in] threat Threat to apply override to, "" or NULL for any threat. * @param[in] new_threat Threat to override result to. * @param[in] severity Severity to apply override to, "" or NULL for any threat. * @param[in] new_severity Severity score to override "Alarm" type results to. * @param[in] task Task to apply override to, 0 for any task. * @param[in] result Result to apply override to, 0 for any result. * * @return 0 success, -1 error, 1 syntax error in active, 2 invalid port, * 3 invalid severity score. */ int modify_override (override_t override, const char *active, const char* text, const char* hosts, const char* port, const char* threat, const char* new_threat, const char* severity, const char* new_severity, task_t task, result_t result) { gchar *quoted_text, *quoted_hosts, *quoted_port, *quoted_severity; double severity_dbl, new_severity_dbl; if (override == 0) return -1; if (text == NULL) return -1; if (port && validate_results_port (port)) return 2; if (threat && strcmp (threat, "High") && strcmp (threat, "Medium") && strcmp (threat, "Low") && strcmp (threat, "Log") && strcmp (threat, "Debug") && strcmp (threat, "Alarm") && strcmp (threat, "")) return -1; if (new_threat && strcmp (new_threat, "High") && strcmp (new_threat, "Medium") && strcmp (new_threat, "Low") && strcmp (new_threat, "Log") && strcmp (new_threat, "Debug") && strcmp (new_threat, "False Positive") && strcmp (new_threat, "Alarm") && strcmp (new_threat, "")) return -1; severity_dbl = 0.0; if (severity != NULL && strcmp (severity, "")) { if (sscanf (severity, "%lf", &severity_dbl) != 1 || ((severity_dbl < 0.0 || severity_dbl > 10.0) && severity_dbl != SEVERITY_LOG && severity_dbl != SEVERITY_DEBUG)) return 3; quoted_severity = g_strdup_printf ("'%1.1f'", severity_dbl); } else if (threat != NULL && strcmp (threat, "")) { if (strcmp (threat, "Alarm") == 0) severity_dbl = 0.1; else if (strcmp (threat, "High") == 0) severity_dbl = 0.1; else if (strcmp (threat, "Medium") == 0) severity_dbl = 0.1; else if (strcmp (threat, "Low") == 0) severity_dbl = 0.1; else if (strcmp (threat, "Log") == 0) severity_dbl = SEVERITY_LOG; else if (strcmp (threat, "Debug") == 0) severity_dbl = SEVERITY_DEBUG; else return -1; quoted_severity = g_strdup_printf ("'%1.1f'", severity_dbl); } else quoted_severity = g_strdup ("NULL"); new_severity_dbl = 0.0; if (new_severity != NULL && strcmp (new_severity, "")) { if (sscanf (new_severity, "%lf", &new_severity_dbl) != 1 || ((new_severity_dbl < 0.0 || new_severity_dbl > 10.0) && new_severity_dbl != SEVERITY_LOG && new_severity_dbl != SEVERITY_FP && new_severity_dbl != SEVERITY_DEBUG)) { g_free (quoted_severity); return 3; } } else if (new_threat != NULL && strcmp (new_threat, "")) { if (strcmp (new_threat, "Alarm") == 0) new_severity_dbl = 10.0; else if (strcmp (new_threat, "High") == 0) new_severity_dbl = 10.0; else if (strcmp (new_threat, "Medium") == 0) new_severity_dbl = 5.0; else if (strcmp (new_threat, "Low") == 0) new_severity_dbl = 2.0; else if (strcmp (new_threat, "Log") == 0) new_severity_dbl = SEVERITY_LOG; else if (strcmp (new_threat, "Debug") == 0) new_severity_dbl = SEVERITY_DEBUG; else { g_free (quoted_severity); return -1; } } else { g_free (quoted_severity); return -1; } quoted_text = sql_insert (text); quoted_hosts = sql_insert (hosts); quoted_port = sql_insert (port); if ((active == NULL) || (strcmp (active, "-2") == 0)) sql ("UPDATE overrides SET" " modification_time = %i," " text = %s," " hosts = %s," " port = %s," " severity = %s," " new_severity = %f," " task = %llu," " result = %llu" " WHERE id = %llu;", time (NULL), quoted_text, quoted_hosts, quoted_port, quoted_severity, new_severity_dbl, task, result, override); else { const char *point; point = active; if (strcmp (point, "-1")) { while (*point && isdigit (*point)) point++; if (*point) return 1; } sql ("UPDATE overrides SET" " end_time = %i," " modification_time = %i," " text = %s," " hosts = %s," " port = %s," " severity = %s," " new_severity = %f," " task = %llu," " result = %llu" " WHERE id = %llu;", (strcmp (active, "-1") ? (strcmp (active, "0") ? (time (NULL) + atoi (active) * 60 * 60 * 24) : 1) : 0), time (NULL), quoted_text, quoted_hosts, quoted_port, quoted_severity, new_severity_dbl, task, result, override); } g_free (quoted_text); g_free (quoted_hosts); g_free (quoted_port); g_free (quoted_severity); reports_clear_count_cache (1); return 0; } /** * @brief Filter columns for override iterator. */ #define OVERRIDE_ITERATOR_FILTER_COLUMNS \ { ANON_GET_ITERATOR_FILTER_COLUMNS, "name", "nvt", "text", "nvt_id", \ "task_name", "task_id", "hosts", "port", "threat", "new_threat", "active", \ "result", "severity", "new_severity", NULL } /** * @brief Override iterator columns. */ #define OVERRIDE_ITERATOR_COLUMNS \ { \ { "overrides.id", "id" }, \ { "overrides.uuid", "uuid" }, \ { "(SELECT name FROM nvts WHERE oid = overrides.nvt)", "name" }, \ { "CAST ('' AS TEXT)", NULL }, \ { "iso_time (overrides.creation_time)", NULL }, \ { "iso_time (overrides.modification_time)", NULL }, \ { "overrides.creation_time", "created" }, \ { "overrides.modification_time", "modified" }, \ { \ "(SELECT name FROM users WHERE users.id = overrides.owner)", \ "_owner" \ }, \ { "owner", NULL }, \ /* Columns specific to overrides. */ \ { "overrides.nvt", "oid" }, \ { "overrides.text", "text" }, \ { "overrides.hosts", "hosts" }, \ { "overrides.port", "port" }, \ { "severity_to_level (overrides.severity, 1)", "threat" }, \ { "severity_to_level (overrides.new_severity, 0)", "new_threat" }, \ { "overrides.task", NULL }, \ { "overrides.result", "result" }, \ { "overrides.end_time", NULL }, \ { \ "(overrides.end_time = 0) OR (overrides.end_time >= m_now ())", \ "active" \ }, \ { "(SELECT name FROM nvts WHERE oid = overrides.nvt)", "nvt" }, \ { "overrides.nvt", "nvt_id" }, \ { "(SELECT uuid FROM tasks WHERE id = overrides.task)", "task_id" }, \ { "(SELECT name FROM tasks WHERE id = overrides.task)", "task_name" }, \ { "overrides.severity", "severity" }, \ { "overrides.new_severity", "new_severity" }, \ { \ "(SELECT name FROM users WHERE users.id = overrides.owner)", \ "_owner" \ }, \ { NULL, NULL } \ } /** * @brief Override iterator columns for trash case. */ #define OVERRIDE_ITERATOR_TRASH_COLUMNS \ { \ { "overrides_trash.id", "id" }, \ { "overrides_trash.uuid", "uuid" }, \ { "CAST ('' AS TEXT)", NULL }, \ { "CAST ('' AS TEXT)", NULL }, \ { "iso_time (overrides_trash.creation_time)", NULL }, \ { "iso_time (overrides_trash.modification_time)", NULL }, \ { "overrides_trash.creation_time", "created" }, \ { "overrides_trash.modification_time", "modified" }, \ { \ "(SELECT name FROM users WHERE users.id = overrides_trash.owner)", \ "_owner" \ }, \ { "owner", NULL }, \ /* Columns specific to overrides_trash. */ \ { "overrides_trash.nvt", "oid" }, \ { "overrides_trash.text", "text" }, \ { "overrides_trash.hosts", "hosts" }, \ { "overrides_trash.port", "port" }, \ { "severity_to_level (overrides_trash.severity, 1)", "threat" }, \ { "severity_to_level (overrides_trash.new_severity, 0)", "new_threat" }, \ { "overrides_trash.task", NULL }, \ { "overrides_trash.result", "result" }, \ { "overrides_trash.end_time", NULL }, \ { \ "(overrides_trash.end_time = 0)" \ " OR (overrides_trash.end_time >= m_now ())", \ "active" \ }, \ { "(SELECT name FROM nvts WHERE oid = overrides_trash.nvt)", "nvt" }, \ { "overrides_trash.nvt", "nvt_id" }, \ { \ "(SELECT uuid FROM tasks WHERE id = overrides_trash.task)", \ "task_id" \ }, \ { \ "(SELECT name FROM tasks WHERE id = overrides_trash.task)", \ "task_name" \ }, \ { "overrides_trash.severity", NULL }, \ { "overrides_trash.new_severity", NULL }, \ { NULL, NULL } \ } /** * @brief Count number of overrides. * * @param[in] get GET params. * @param[in] result Result to limit overrides to, 0 for all. * @param[in] task If result is > 0, task whose overrides on result to * include, otherwise task to limit overrides to. 0 for * all tasks. * @param[in] nvt NVT to limit overrides to, 0 for all. * * @return Total number of overrides in filtered set. */ int override_count (const get_data_t *get, nvt_t nvt, result_t result, task_t task) { static const char *filter_columns[] = OVERRIDE_ITERATOR_FILTER_COLUMNS; static column_t columns[] = OVERRIDE_ITERATOR_COLUMNS; static column_t trash_columns[] = OVERRIDE_ITERATOR_TRASH_COLUMNS; gchar *result_clause, *filter, *task_id; int ret; /* Treat the "task_id" filter keyword as if the task was given in "task". */ if (get->filt_id && strcmp (get->filt_id, "0")) { filter = filter_term (get->filt_id); if (filter == NULL) return 2; } else filter = NULL; task_id = filter_term_value (filter ? filter : get->filter, "task_id"); g_free (filter); if (task_id) { find_task (task_id, &task); g_free (task_id); } if (result) { gchar *severity_sql; if (setting_dynamic_severity_int ()) severity_sql = g_strdup_printf ("(SELECT CASE" " WHEN results.severity" " > " G_STRINGIFY (SEVERITY_LOG) " THEN nvts.cvss_base" " ELSE results.severity END" " FROM results, nvts" " WHERE (nvts.oid = results.nvt)" " AND (results.id = %llu))", result); else severity_sql = g_strdup_printf ("(SELECT results.severity" " FROM results" " WHERE results.id = %llu)", result); result_clause = g_strdup_printf (" AND" " (result = %llu" " OR (result = 0 AND nvt =" " (SELECT results.nvt FROM results" " WHERE results.id = %llu)))" " AND (hosts is NULL" " OR hosts = ''" " OR hosts_contains (hosts," " (SELECT results.host FROM results" " WHERE results.id = %llu)))" " AND (port is NULL" " OR port = ''" " OR port =" " (SELECT results.port FROM results" " WHERE results.id = %llu))" " AND (severity_matches_ov (%s," " severity))" " AND (task = 0 OR task = %llu)", result, result, result, result, severity_sql, task); g_free (severity_sql); } else if (task) { result_clause = g_strdup_printf (" AND (overrides.task = %llu OR overrides.task = 0)" " AND nvt IN" " (SELECT DISTINCT nvt FROM results" " WHERE results.task = %llu)" " AND (overrides.result = 0" " OR (SELECT task FROM results" " WHERE results.id = overrides.result)" " = %llu)", task, task, task); } else if (nvt) { gchar *owned_clause; owned_clause = where_owned_for_get ("override", NULL); result_clause = g_strdup_printf (" AND (overrides.nvt" " = (SELECT oid FROM nvts WHERE nvts.id = %llu))" " AND %s", nvt, owned_clause); g_free (owned_clause); } else result_clause = NULL; ret = count ("override", get, columns, trash_columns, filter_columns, task || nvt, NULL, result_clause, TRUE); g_free (result_clause); return ret; } /** * @brief Initialise an override iterator. * * @param[in] iterator Iterator. * @param[in] get GET data. * @param[in] result Result to limit overrides to, 0 for all. * @param[in] task If result is > 0, task whose overrides on result to * include, otherwise task to limit overrides to. 0 for * all tasks. * @param[in] nvt NVT to limit overrides to, 0 for all. * * @return 0 success, 1 failed to find target, 2 failed to find filter, * -1 error. */ int init_override_iterator (iterator_t* iterator, const get_data_t *get, nvt_t nvt, result_t result, task_t task) { static const char *filter_columns[] = OVERRIDE_ITERATOR_FILTER_COLUMNS; static column_t columns[] = OVERRIDE_ITERATOR_COLUMNS; static column_t trash_columns[] = OVERRIDE_ITERATOR_TRASH_COLUMNS; gchar *result_clause, *filter, *task_id; int ret; assert (current_credentials.uuid); assert ((nvt && get->id) == 0); assert ((task && get->id) == 0); assert (result ? nvt == 0 : 1); assert (task ? nvt == 0 : 1); /* Treat the "task_id" filter keyword as if the task was given in "task". */ if (get->filt_id && strcmp (get->filt_id, "0")) { filter = filter_term (get->filt_id); if (filter == NULL) return 2; } else filter = NULL; task_id = filter_term_value (filter ? filter : get->filter, "task_id"); g_free (filter); if (task_id) { find_task (task_id, &task); g_free (task_id); } if (result) { gchar *severity_sql; if (setting_dynamic_severity_int ()) severity_sql = g_strdup_printf ("(SELECT CASE" " WHEN results.severity" " > " G_STRINGIFY (SEVERITY_LOG) " THEN nvts.cvss_base" " ELSE results.severity END" " FROM results, nvts" " WHERE (nvts.oid = results.nvt)" " AND (results.id = %llu))", result); else severity_sql = g_strdup_printf ("(SELECT results.severity" " FROM results" " WHERE results.id = %llu)", result); result_clause = g_strdup_printf (" AND" " (result = %llu" " OR (result = 0 AND nvt =" " (SELECT results.nvt FROM results" " WHERE results.id = %llu)))" " AND (hosts is NULL" " OR hosts = ''" " OR hosts_contains (hosts," " (SELECT results.host FROM results" " WHERE results.id = %llu)))" " AND (port is NULL" " OR port = ''" " OR port =" " (SELECT results.port FROM results" " WHERE results.id = %llu))" " AND (severity_matches_ov (%s," " severity))" " AND (task = 0 OR task = %llu)", result, result, result, result, severity_sql, task); g_free (severity_sql); } else if (task) { result_clause = g_strdup_printf (" AND (overrides.task = %llu OR overrides.task = 0)" " AND nvt IN" " (SELECT DISTINCT nvt FROM results" " WHERE results.task = %llu)" " AND (overrides.result = 0" " OR (SELECT task FROM results" " WHERE results.id = overrides.result)" " = %llu)", task, task, task); } else if (nvt) { gchar *owned_clause; owned_clause = where_owned_for_get ("override", NULL); result_clause = g_strdup_printf (" AND (overrides.nvt =" " (SELECT oid FROM nvts WHERE nvts.id = %llu))" " AND %s", nvt, owned_clause); g_free (owned_clause); } else result_clause = NULL; ret = init_get_iterator (iterator, "override", get, columns, trash_columns, filter_columns, task || nvt, NULL, result_clause, TRUE); g_free (result_clause); return ret; } /** * @brief Get the NVT OID from a override iterator. * * @param[in] iterator Iterator. * * @return NVT OID, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (override_iterator_nvt_oid, GET_ITERATOR_COLUMN_COUNT); /** * @brief Get the text from a override iterator. * * @param[in] iterator Iterator. * * @return Text, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (override_iterator_text, GET_ITERATOR_COLUMN_COUNT + 1); /** * @brief Get the hosts from a override iterator. * * @param[in] iterator Iterator. * * @return Hosts, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (override_iterator_hosts, GET_ITERATOR_COLUMN_COUNT + 2); /** * @brief Get the port from a override iterator. * * @param[in] iterator Iterator. * * @return Port, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (override_iterator_port, GET_ITERATOR_COLUMN_COUNT + 3); /** * @brief Get the threat from a override iterator. * * @param[in] iterator Iterator. * * @return Threat. */ const char * override_iterator_threat (iterator_t *iterator) { const char *ret; if (iterator->done) return NULL; ret = iterator_string (iterator, GET_ITERATOR_COLUMN_COUNT + 4); return ret; } /** * @brief Get the threat from an override iterator. * * @param[in] iterator Iterator. * * @return Threat. */ const char * override_iterator_new_threat (iterator_t *iterator) { const char *ret; if (iterator->done) return NULL; ret = iterator_string (iterator, GET_ITERATOR_COLUMN_COUNT + 5); return ret; } /** * @brief Get the task from a override iterator. * * @param[in] iterator Iterator. * * @return The task associated with the override, or 0 on error. */ task_t override_iterator_task (iterator_t* iterator) { if (iterator->done) return 0; return (task_t) iterator_int64 (iterator, GET_ITERATOR_COLUMN_COUNT + 6); } /** * @brief Get the result from a override iterator. * * @param[in] iterator Iterator. * * @return The result associated with the override, or 0 on error. */ result_t override_iterator_result (iterator_t* iterator) { if (iterator->done) return 0; return (result_t) iterator_int64 (iterator, GET_ITERATOR_COLUMN_COUNT + 7); } /** * @brief Get the end time from an override iterator. * * @param[in] iterator Iterator. * * @return Time until which override applies. 0 for always. 1 means the * override has been explicitly turned off. */ time_t override_iterator_end_time (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = (time_t) iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 8); return ret; } /** * @brief Get the active status from an override iterator. * * @param[in] iterator Iterator. * * @return 1 if active, else 0. */ int override_iterator_active (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 9); return ret; } /** * @brief Get the NVT name from a override iterator. * * @param[in] iterator Iterator. * * @return NVT name, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (override_iterator_nvt_name, GET_ITERATOR_COLUMN_COUNT + 10); /** * @brief Get the severity from an override iterator. * * @param[in] iterator Iterator. * * @return The severity score to which the override applies or NULL if * iteration is complete, Freed by cleanup_iterator. */ DEF_ACCESS (override_iterator_severity, GET_ITERATOR_COLUMN_COUNT + 14); /** * @brief Get the new severity from an override iterator. * * @param[in] iterator Iterator. * * @return The severity score to override to or NULL if * iteration is complete, Freed by cleanup_iterator. */ DEF_ACCESS (override_iterator_new_severity, GET_ITERATOR_COLUMN_COUNT + 15); /* Scanners */ /** * @brief Create the given scanner. * * @param[in] log_config Log configuration. * @param[in] database Location of manage database. * @param[in] name Name of scanner. * @param[in] host Host of scanner. * @param[in] port Port of scanner. * @param[in] type Type of scanner. * @param[in] ca_pub_path CA Certificate path. * @param[in] key_pub_path Certificate path. * @param[in] key_priv_path Private key path. * * @return 0 success, -1 error, -2 database is wrong version, -3 database needs * to be initialised from server. */ int manage_create_scanner (GSList *log_config, const gchar *database, const char *name, const char *host, const char *port, const char *type, const char *ca_pub_path, const char *key_pub_path, const char *key_priv_path) { const gchar *db; int ret; char *ca_pub, *key_pub, *key_priv; GError *error = NULL; if (openvas_auth_init_funcs (manage_user_hash, manage_user_set_role, manage_user_exists, manage_user_uuid)) return -1; db = database ? database : sql_default_database (); ret = init_manage_helper (log_config, db, 70000, NULL); assert (ret != -4); if (ret) return ret; init_manage_process (0, db); current_credentials.uuid = ""; if (!g_file_get_contents (ca_pub_path, &ca_pub, NULL, &error)) { g_warning ("%s: %s\n", __FUNCTION__, error->message); g_error_free (error); return -1; } if (!g_file_get_contents (key_pub_path, &key_pub, NULL, &error)) { g_warning ("%s: %s\n", __FUNCTION__, error->message); g_error_free (error); g_free (ca_pub); return -1; } if (!g_file_get_contents (key_priv_path, &key_priv, NULL, &error)) { g_warning ("%s: %s\n", __FUNCTION__, error->message); g_error_free (error); g_free (ca_pub); g_free (key_pub); return -1; } ret = create_scanner (name, NULL, host, port, type, NULL, ca_pub, key_pub, key_priv); g_free (ca_pub); g_free (key_pub); g_free (key_priv); switch (ret) { case 0: printf ("Scanner created.\n"); break; case 1: printf ("Scanner exists already.\n"); break; case 2: printf ("Invalid value provided.\n"); break; default: printf ("Failed to create scanner.\n"); break; } cleanup_manage_process (TRUE); return ret; } /** * @brief Delete the given scanner. * * @param[in] log_config Log configuration. * @param[in] database Location of manage database. * @param[in] uuid UUID of scanner. * * @return 0 success, 2 failed to find scanner, 3 scanner can't be deleted, * -1 error. -2 database is wrong version, -3 database needs to be * initialised from server. */ int manage_delete_scanner (GSList *log_config, const gchar *database, const gchar *uuid) { const gchar *db; int ret; assert (uuid); if (!strcmp (uuid, SCANNER_UUID_DEFAULT)) { printf ("Default OpenVAS Scanner can't be deleted.\n"); return 3; } if (openvas_auth_init_funcs (manage_user_hash, manage_user_set_role, manage_user_exists, manage_user_uuid)) return -1; db = database ? database : sql_default_database (); ret = init_manage_helper (log_config, db, 70000, NULL); assert (ret != -4); if (ret) return ret; init_manage_process (0, db); current_credentials.uuid = ""; switch ((ret = delete_scanner (uuid, 1))) { case 0: printf ("Scanner deleted.\n"); break; case 1: printf ("Scanner in use.\n"); break; case 2: printf ("Failed to find scanner.\n"); break; default: printf ("Internal Error.\n"); break; } current_credentials.uuid = NULL; cleanup_manage_process (TRUE); return ret; } /** * @brief Modify the given scanner. * * @param[in] log_config Log configuration. * @param[in] database Location of manage database. * @param[in] name Name of scanner. * @param[in] host Host of scanner. * @param[in] port Port of scanner. * @param[in] type Type of scanner. * @param[in] ca_pub_path CA Certificate path. * @param[in] key_pub_path Certificate path. * @param[in] key_priv_path Private key path. * * @return 0 success, , 1 failed to find scanner, 2 scanner with new name * exists, 3 scanner_id required, 4 invalid value, 99 permission * denied, -1 error, -2 database is wrong version, -3 database needs * to be initialised from server. */ int manage_modify_scanner (GSList *log_config, const gchar *database, const char *scanner_id, const char *name, const char *host, const char *port, const char *type, const char *ca_pub_path, const char *key_pub_path, const char *key_priv_path) { const gchar *db; int ret; char *ca_pub, *key_pub, *key_priv; GError *error = NULL; if (openvas_auth_init_funcs (manage_user_hash, manage_user_set_role, manage_user_exists, manage_user_uuid)) return -1; db = database ? database : sql_default_database (); ret = init_manage_helper (log_config, db, 70000, NULL); assert (ret != -4); if (ret) return ret; init_manage_process (0, db); current_credentials.uuid = ""; if (ca_pub_path) { if (g_file_get_contents (ca_pub_path, &ca_pub, NULL, &error) == 0) { g_warning ("%s: %s\n", __FUNCTION__, error->message); g_error_free (error); return -1; } } else ca_pub = NULL; if (key_pub_path) { if (g_file_get_contents (key_pub_path, &key_pub, NULL, &error) == 0) { g_warning ("%s: %s\n", __FUNCTION__, error->message); g_error_free (error); g_free (ca_pub); return -1; } } else key_pub = NULL; if (key_priv_path) { if (!g_file_get_contents (key_priv_path, &key_priv, NULL, &error)) { g_warning ("%s: %s\n", __FUNCTION__, error->message); g_error_free (error); g_free (ca_pub); g_free (key_pub); return -1; } } else key_priv = NULL; ret = modify_scanner (scanner_id, name, NULL, host, port, type, ca_pub, key_pub, key_priv); g_free (ca_pub); g_free (key_pub); g_free (key_priv); switch (ret) { case 0: printf ("Scanner modified.\n"); break; case 2: printf ("Scanner with new name exists already.\n"); break; case 3: printf ("Scanner ID required.\n"); break; case 4: printf ("Invalid value.\n"); break; case 99: printf ("Permission denied.\n"); break; default: printf ("Failed to modify scanner.\n"); break; } cleanup_manage_process (TRUE); return ret; } /** * @brief Verify the given scanner. * * @param[in] log_config Log configuration. * @param[in] database Location of manage database. * @param[in] uuid UUID of scanner. * * @return 0 success, 1 failed to find scanner, 2 failed to verify scanner, * -1 error. -2 database is wrong version, -3 database needs to be * initialised from server. */ int manage_verify_scanner (GSList *log_config, const gchar *database, const gchar *uuid) { const gchar *db; int ret; char *version; assert (uuid); if (openvas_auth_init_funcs (manage_user_hash, manage_user_set_role, manage_user_exists, manage_user_uuid)) return -1; db = database ? database : sql_default_database (); ret = init_manage_helper (log_config, db, 70000, NULL); assert (ret != -4); if (ret) return ret; init_manage_process (0, db); current_credentials.uuid = ""; switch ((ret = verify_scanner (uuid, &version))) { case 0: printf ("Scanner version: %s.\n", version); g_free (version); break; case 1: printf ("Failed to find scanner.\n"); break; case 2: printf ("Failed to verify scanner.\n"); break; default: printf ("Internal Error.\n"); break; } current_credentials.uuid = NULL; cleanup_manage_process (TRUE); return ret; } /** * @brief Find a scanner given a UUID. * * @param[in] uuid UUID of scanner. * @param[out] scanner Scanner return, 0 if succesfully failed to find scanner. * * @return FALSE on success (including if failed to find scanner), TRUE on error. */ gboolean find_scanner (const char* uuid, scanner_t *scanner) { return find_resource ("scanner", uuid, scanner); } /** * @brief Find a scanner for a specific permission, given a UUID. * * @param[in] uuid UUID of scanner. * @param[out] scanner Scanner return, 0 if succesfully failed to find * scanner. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find scanner), * TRUE on error. */ gboolean find_scanner_with_permission (const char* uuid, scanner_t* scanner, const char *permission) { return find_resource_with_permission ("scanner", uuid, scanner, permission, 0); } /** * @brief Create a scanner. * * @param[in] name Name of scanner. * @param[in] comment Comment on scanner. * @param[in] host Host of scanner. * @param[in] port Port of scanner. * @param[in] type Type of scanner. * @param[in] ca_cert CA Certificate for scanner. * @param[in] key_pub Certificate for scanner. * @param[in] key_priv Private key for scanner. * * @return 0 success, 1 scanner exists already, 2 Invalid value, * 99 permission denied. */ int create_scanner (const char* name, const char *comment, const char *host, const char *port, const char *type, scanner_t *new_scanner, const char *ca_pub, const char *key_pub, const char *key_priv) { char *quoted_name, *quoted_comment, *quoted_host, *quoted_ca_pub; char *quoted_key_pub, *quoted_key_priv; int iport, itype; assert (current_credentials.uuid); assert (name); sql_begin_immediate (); if (user_may ("create_scanner") == 0) { sql ("ROLLBACK;"); return 99; } if (!host || !port || !type || !ca_pub || !key_pub || !key_priv) return 2; iport = atoi (port); itype = atoi (type); if (iport <= 0 || iport > 65535) return 2; if (itype <= SCANNER_TYPE_NONE || itype >= SCANNER_TYPE_MAX) return 2; if (openvas_get_host_type (host) == -1) return 2; if (resource_with_name_exists (name, "scanner", 0)) { sql ("ROLLBACK;"); return 1; } quoted_name = sql_quote (name ?: ""); quoted_comment = sql_quote (comment ?: ""); quoted_host = sql_quote (host ?: ""); quoted_ca_pub = sql_quote (ca_pub ?: ""); quoted_key_pub = sql_quote (key_pub ?: ""); quoted_key_priv = sql_quote (key_priv ?: ""); sql ("INSERT INTO scanners (uuid, name, owner, comment, host, port, type," " ca_pub, key_pub, key_priv," " creation_time, modification_time)" " VALUES (make_uuid (), '%s'," " (SELECT id FROM users WHERE users.uuid = '%s')," " '%s', '%s', %d, %d, '%s', '%s', '%s', m_now (), m_now ());", quoted_name, current_credentials.uuid, quoted_comment, quoted_host, iport, itype, quoted_ca_pub, quoted_key_pub, quoted_key_priv); if (new_scanner) *new_scanner = sql_last_insert_id (); sql ("COMMIT;"); g_free (quoted_host); g_free (quoted_comment); g_free (quoted_name); g_free (quoted_ca_pub); g_free (quoted_key_pub); g_free (quoted_key_priv); return 0; } /** * @brief Create a cannerchedule from an existing cannerchedule. * * @param[in] name Name of new scanner. NULL to copy from existing. * @param[in] comment Comment on new scanner. NULL to copy from * existing. * @param[in] scanner_id UUID of existing scanner. * @param[out] new_scanner New scanner. * * @return 0 success, 1 scanner exists already, 2 failed to find existing * scanner, -1 error. */ int copy_scanner (const char* name, const char* comment, const char *scanner_id, scanner_t* new_scanner) { return copy_resource ("scanner", name, comment, scanner_id, "host, port, type, ca_pub, key_pub, key_priv", 1, new_scanner); } /** * @brief Modify an scanner. * * @param[in] scanner_id UUID of scanner. * @param[in] name Name of scanner. * @param[in] comment Comment on scanner. * @param[in] host Host of scanner. * @param[in] port Port of scanner. * @param[in] type Type of scanner. * @param[in] ca_cert CA Certificate of scanner or NULL. * @param[in] key_pub Certificate of scanner or NULL. * @param[in] key_priv Private key of scanner or NULL. * * @return 0 success, 1 failed to find scanner, 2 scanner with new name exists, * 3 scanner_id required, 4 invalid value, 99 permission denied, -1 * internal error. */ int modify_scanner (const char *scanner_id, const char *name, const char *comment, const char *host, const char *port, const char *type, const char *ca_pub, const char *key_pub, const char *key_priv) { gchar *quoted_name, *quoted_comment, *quoted_host, *new_port, *new_type; scanner_t scanner = 0; int iport, itype; assert (current_credentials.uuid); if (scanner_id == NULL) return 3; if (port) { iport = atoi (port); if (iport <= 0 || iport > 65535) return 4; } else /* Keep compiler quiet. */ iport = 0; if (type) { itype = atoi (type); if (itype <= SCANNER_TYPE_NONE || itype >= SCANNER_TYPE_MAX) return 4; } else /* Keep compiler quiet. */ itype = 0; if (host && (openvas_get_host_type (host) == -1)) return 4; sql_begin_immediate (); if (user_may ("modify_scanner") == 0) { sql ("ROLLBACK;"); return 99; } if (find_scanner_with_permission (scanner_id, &scanner, "modify_scanner")) { sql ("ROLLBACK;"); return -1; } if (scanner == 0) { sql ("ROLLBACK;"); return 1; } /* Check whether a scanner with the same name exists already. */ if (name) { if (resource_with_name_exists (name, "scanner", scanner)) { sql ("ROLLBACK;"); return 2; } } quoted_name = name ? sql_quote (name) : NULL; quoted_comment = sql_quote (comment ?: ""); quoted_host = host ? sql_quote (host) : NULL; new_port = port ? g_strdup_printf ("%d", iport) : g_strdup ("port"); new_type = type ? g_strdup_printf ("%d", itype) : g_strdup ("type"); sql ("UPDATE scanners SET name = %s%s%s, comment = %s%s%s, host = %s%s%s," " port = %s, type = %s, modification_time = m_now () WHERE id = %llu;", quoted_name ? "'" : "", quoted_name ? quoted_name : "name", quoted_name ? "'" : "", quoted_comment ? "'" : "", quoted_comment ? quoted_comment : "comment", quoted_comment ? "'" : "", quoted_host ? "'" : "", quoted_host ? quoted_host : "host", quoted_host ? "'" : "", new_port, new_type, scanner); g_free (new_type); g_free (new_port); g_free (quoted_host); g_free (quoted_comment); g_free (quoted_name); if (ca_pub && *ca_pub) { char *quoted_ca_pub = sql_quote (ca_pub); sql ("UPDATE scanners SET ca_pub = '%s' WHERE id = %llu;", quoted_ca_pub, scanner); g_free (quoted_ca_pub); } if (key_pub && *key_pub) { char *quoted_key_pub = sql_quote (key_pub); sql ("UPDATE scanners SET key_pub = '%s' WHERE id = %llu;", quoted_key_pub, scanner); g_free (quoted_key_pub); } if (key_priv && *key_priv) { char *quoted_key_priv = sql_quote (key_priv); sql ("UPDATE scanners SET key_priv = '%s' WHERE id = %llu;", quoted_key_priv, scanner); g_free (quoted_key_priv); } sql ("COMMIT;"); return 0; } /** * @brief Delete a scanner. * * @param[in] scanner_id UUID of scanner. * @param[in] ultimate Whether to remove entirely, or to trashcan. * * @return 0 success, 1 scanner in use, 2 failed to find scanner, 99 permission * denied, -1 error. */ int delete_scanner (const char *scanner_id, int ultimate) { scanner_t scanner = 0; sql_begin_immediate (); if (user_may ("delete_scanner") == 0) { sql ("ROLLBACK;"); return 99; } if (find_scanner_with_permission (scanner_id, &scanner, "delete_scanner")) { sql ("ROLLBACK;"); return -1; } if (scanner == 0) { if (find_trash ("scanner", scanner_id, &scanner)) { sql ("ROLLBACK;"); return -1; } if (scanner == 0) { sql ("ROLLBACK;"); return 2; } if (ultimate == 0) { /* It's already in the trashcan. */ sql ("COMMIT;"); return 0; } permissions_set_orphans ("scanner", scanner, LOCATION_TRASH); tags_set_orphans ("scanner", scanner, LOCATION_TRASH); sql ("DELETE FROM scanners_trash WHERE id = %llu;", scanner); sql ("COMMIT;"); return 0; } if (scanner_in_use (scanner)) return 1; if (ultimate == 0) { sql ("INSERT INTO scanners_trash" " (uuid, owner, name, comment, host, port, type, ca_pub," " key_pub, key_priv, creation_time, modification_time)" " SELECT uuid, owner, name, comment, host, port, type, ca_pub," " key_pub, key_priv, creation_time, modification_time" " FROM scanners WHERE id = %llu;", scanner); permissions_set_locations ("scanner", scanner, sql_last_insert_id (), LOCATION_TRASH); tags_set_locations ("scanner", scanner, sql_last_insert_id (), LOCATION_TRASH); } else { permissions_set_orphans ("scanner", scanner, LOCATION_TABLE); tags_set_orphans ("scanner", scanner, LOCATION_TABLE); } sql ("DELETE FROM scanners WHERE id = %llu;", scanner); sql ("COMMIT;"); return 0; } /** * @brief Filter columns for scanner iterator. */ #define SCANNER_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "host", "port", "type", NULL } /** * @brief Scanner iterator columns. */ #define SCANNER_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS (scanners), \ { "host" , NULL }, \ { "port" , NULL }, \ { "type", NULL }, \ { "ca_pub", NULL }, \ { "key_pub", NULL }, \ { "key_priv", NULL }, \ { NULL, NULL } \ } /** * @brief Scanner iterator columns for trash case. */ #define SCANNER_ITERATOR_TRASH_COLUMNS \ { \ GET_ITERATOR_COLUMNS (scanners_trash), \ { "host" , NULL }, \ { "port" , NULL }, \ { "type", NULL }, \ { NULL, NULL } \ } /** * @brief Initialise an scanner iterator. * * @param[in] iterator Iterator. * @param[in] get GET data. * * @return 0 success, 1 failed to find scanner, 2 failed to find filter, -1 error. */ int init_scanner_iterator (iterator_t* iterator, const get_data_t *get) { static const char *filter_columns[] = SCANNER_ITERATOR_FILTER_COLUMNS; static column_t columns[] = SCANNER_ITERATOR_COLUMNS; static column_t trash_columns[] = SCANNER_ITERATOR_TRASH_COLUMNS; return init_get_iterator (iterator, "scanner", get, columns, trash_columns, filter_columns, 0, NULL, NULL, TRUE); } /** * @brief Get the host from an scanner iterator. * * @param[in] iterator Iterator. * * @return Host, or NULL if iteration is complete. Freed * by cleanup_iterator. */ DEF_ACCESS (scanner_iterator_host, GET_ITERATOR_COLUMN_COUNT); /** * @brief Get the port from an scanner iterator. * * @param[in] iterator Iterator. * * @return Port, or -1 if iteration is complete. */ int scanner_iterator_port (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 1); return ret; } /** * @brief Get the type from an scanner iterator. * * @param[in] iterator Iterator. * * @return Type, or SCANNER_TYPE_NONE if iteration is complete. */ int scanner_iterator_type (iterator_t* iterator) { int ret; if (iterator->done) return SCANNER_TYPE_NONE; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 2); return ret; } /** * @brief Get the CA Certificate from a scanner iterator. * * @param[in] iterator Iterator. * * @return CA Certificate, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (scanner_iterator_ca_pub, GET_ITERATOR_COLUMN_COUNT + 3); /** * @brief Get the Scanner Certificate from a scanner iterator. * * @param[in] iterator Iterator. * * @return Scanner Certificate, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (scanner_iterator_key_pub, GET_ITERATOR_COLUMN_COUNT + 4); /** * @brief Get the Scanner private key from a scanner iterator. * * @param[in] iterator Iterator. * * @return Scanner private key, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (scanner_iterator_key_priv, GET_ITERATOR_COLUMN_COUNT + 5); /** * @brief Initialise a scanner task iterator. * * @param[in] iterator Iterator. * @param[in] scanner Scanner. */ void init_scanner_task_iterator (iterator_t* iterator, scanner_t scanner) { gchar *available; get_data_t get; array_t *permissions; assert (scanner); get.trash = 0; permissions = make_array (); array_add (permissions, g_strdup ("get_tasks")); available = where_owned ("task", &get, 1, "any", 0, permissions); array_free (permissions); init_iterator (iterator, "SELECT id, uuid, name, %s FROM tasks" " WHERE scanner = %llu AND hidden = 0" " ORDER BY name ASC;", available, scanner); g_free (available); } /** * @brief Get the UUID from a scanner task iterator. * * @param[in] iterator Iterator. * * @return UUID, or NULL if iteration is complete. Freed by cleanup_iterator. */ DEF_ACCESS (scanner_task_iterator_uuid, 1); /** * @brief Get the name from a scanner task iterator. * * @param[in] iterator Iterator. * * @return Name, or NULL if iteration is complete. Freed by cleanup_iterator. */ DEF_ACCESS (scanner_task_iterator_name, 2); /** * @brief Get the read permission status from a GET iterator. * * @param[in] iterator Iterator. * * @return 1 if may read, else 0. */ int scanner_task_iterator_readable (iterator_t* iterator) { if (iterator->done) return 0; return iterator_int (iterator, 3); } /** * @brief Check whether an scanner is in use. * * @param[in] scanner Scanner. * * @return 1 yes, 0 no. */ int scanner_in_use (scanner_t scanner) { return !!sql_int ("SELECT count(*) FROM tasks" " WHERE scanner = %llu;", scanner); } /** * @brief Check whether a trashcan scanner is writable. * * @param[in] scanner Scanner. * * @return 1 yes, 0 no. */ int trash_scanner_in_use (scanner_t scanner) { return 0; } /** * @brief Check whether a scanner is writable. * * @param[in] scanner Scanner. * * @return 1 yes, 0 no. */ int scanner_writable (scanner_t scanner) { return (scanner_in_use (scanner) == 0); } /** * @brief Check whether a trashcan scanner is writable. * * @param[in] scanner Scanner. * * @return 1 yes, 0 no. */ int trash_scanner_writable (scanner_t scanner) { return (trash_scanner_in_use (scanner) == 0); } /** * @brief Return the name of a scanner. * * @param[in] scanner Scanner. * * @return Newly allocated name if available, else NULL. */ char* scanner_name (scanner_t scanner) { return sql_string ("SELECT name FROM scanners WHERE id = %llu;", scanner); } /** * @brief Return the UUID of a scanner. * * @param[in] scanner Scanner. * * @return Newly allocated UUID. */ char * scanner_uuid (scanner_t scanner) { return sql_string ("SELECT uuid FROM scanners WHERE id = %llu;", scanner); } /** * @brief Return the host of a scanner. * * @param[in] scanner Scanner. * * @return Newly allocated host. */ char * scanner_host (scanner_t scanner) { return sql_string ("SELECT host FROM scanners WHERE id = %llu;", scanner); } /** * @brief Return the port of a scanner. * * @param[in] scanner Scanner. * * @return Scanner port, -1 if not found; */ int scanner_port (scanner_t scanner) { int port; char *str; str = sql_string ("SELECT port FROM scanners WHERE id = %llu;", scanner); if (!str) return -1; port = atoi (str); g_free (str); return port; } /** * @brief Return the type of a scanner. * * @param[in] scanner Scanner. * * @return Scanner type, -1 if not found; */ int scanner_type (scanner_t scanner) { int type; char *str; str = sql_string ("SELECT type FROM scanners WHERE id = %llu;", scanner); if (!str) return -1; type = atoi (str); g_free (str); return type; } /** * @brief Return the CA Certificate of a scanner. * * @param[in] scanner Scanner. * * @return Newly allocated CA Certificate. */ char * scanner_ca_pub (scanner_t scanner) { return sql_string ("SELECT ca_pub FROM scanners WHERE id = %llu;", scanner); } /** * @brief Return the Certificate of a scanner. * * @param[in] scanner Scanner. * * @return Newly allocated Certificate. */ char * scanner_key_pub (scanner_t scanner) { return sql_string ("SELECT key_pub FROM scanners WHERE id = %llu;", scanner); } /** * @brief Return the private key of a scanner. * * @param[in] scanner Scanner. * * @return Newly allocated private key. */ char * scanner_key_priv (scanner_t scanner) { return sql_string ("SELECT key_priv FROM scanners WHERE id = %llu;", scanner); } /** * @brief Count number of scanners. * * @param[in] get GET params. * * @return Total number of scanners in filtered set. */ int scanner_count (const get_data_t *get) { static const char *extra_columns[] = SCANNER_ITERATOR_FILTER_COLUMNS; static column_t columns[] = SCANNER_ITERATOR_COLUMNS; static column_t trash_columns[] = SCANNER_ITERATOR_TRASH_COLUMNS; return count ("scanner", get, columns, trash_columns, extra_columns, 0, 0, 0, TRUE); } /** * @brief Create a new connection to an OSP scanner. * * @param[in] scanner Scanner. * * @return New connection if success, NULL otherwise. */ osp_connection_t * osp_scanner_connect (scanner_t scanner) { int port; osp_connection_t *connection; char *host, *ca_pub, *key_pub, *key_priv; assert (scanner); host = scanner_host (scanner); port = scanner_port (scanner); ca_pub = scanner_ca_pub (scanner); key_pub = scanner_key_pub (scanner); key_priv = scanner_key_priv (scanner); connection = osp_connection_new (host, port, ca_pub, key_pub, key_priv); g_free (host); g_free (ca_pub); g_free (key_pub); g_free (key_priv); return connection; } /** * @brief Get an OSP Scanner's get_version info. * * @param[in] iterator Scanner object iterator. * @param[out] s_name Scanner name. * @param[out] s_ver Scanner version. * @param[out] d_name Daemon name. * @param[out] d_name Daemon version. * @param[out] p_name Protocol name. * @param[out] p_name Protocol version. * * @return 0 success, 1 for failure. */ int osp_get_version_from_iterator (iterator_t *iterator, char **s_name, char **s_ver, char **d_name, char **d_ver, char **p_name, char **p_ver) { osp_connection_t *connection; assert (iterator); connection = osp_connection_new (scanner_iterator_host (iterator), scanner_iterator_port (iterator), scanner_iterator_ca_pub (iterator), scanner_iterator_key_pub (iterator), scanner_iterator_key_priv (iterator)); if (!connection) return 1; if (osp_get_version (connection, s_name, s_ver, d_name, d_ver, p_name, p_ver)) return 1; osp_connection_close (connection); return 0; } /** * @brief Get an OSP Scanner's get_scanner_details info. * * @param[in] iterator Scanner object iterator. * @param[out] desc Scanner description. * @param[out] params Scanner parameters. * * @return 0 success, 1 for failure. */ int osp_get_details_from_iterator (iterator_t *iterator, char **desc, GSList **params) { osp_connection_t *connection; assert (iterator); connection = osp_connection_new (scanner_iterator_host (iterator), scanner_iterator_port (iterator), scanner_iterator_ca_pub (iterator), scanner_iterator_key_pub (iterator), scanner_iterator_key_priv (iterator)); if (!connection) return 1; if (osp_get_scanner_details (connection, desc, params)) return 1; osp_connection_close (connection); return 0; } /** * @brief Verify a scanner. * * @param[in] scanner_id Scanner UUID. * @param[out] version Version returned by the scanner. * * @return 0 success, 1 failed to find scanner, 2 failed to get version, * 99 if permission denied, -1 error. */ int verify_scanner (const char *scanner_id, char **version) { get_data_t get; iterator_t scanner; if (user_may ("verify_scanner") == 0) return 99; memset (&get, '\0', sizeof (get)); get.id = g_strdup (scanner_id); if (init_scanner_iterator (&scanner, &get) || !next (&scanner)) { g_free (get.id); return 1; } g_free (get.id); if (scanner_iterator_type (&scanner) == SCANNER_TYPE_OSP) { int ret = osp_get_version_from_iterator (&scanner, NULL, version, NULL, NULL, NULL, NULL); cleanup_iterator (&scanner); if (ret) return 2; return 0; } else if (scanner_iterator_type (&scanner) == SCANNER_TYPE_OPENVAS) { int ret = openvas_scanner_set_address (scanner_iterator_host (&scanner), scanner_iterator_port (&scanner)); openvas_scanner_set_certs (scanner_iterator_ca_pub (&scanner), scanner_iterator_key_pub (&scanner), scanner_iterator_key_priv (&scanner)); cleanup_iterator (&scanner); if (ret == -1) return 2; if (openvas_scanner_connected ()) openvas_scanner_close (); if (openvas_scanner_connect () || openvas_scanner_init (0) || openvas_scanner_close ()) return 2; if (version) *version = g_strdup ("OTP/2.0"); return 0; } assert (0); return -1; } /* Schedules. */ /** * @brief Find a schedule for a specific permission, given a UUID. * * @param[in] uuid UUID of schedule. * @param[out] schedule Schedule return, 0 if succesfully failed to find schedule. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find schedule), TRUE on error. */ gboolean find_schedule_with_permission (const char* uuid, schedule_t* schedule, const char *permission) { return find_resource_with_permission ("schedule", uuid, schedule, permission, 0); } /** * @brief Create a schedule. * * @param[in] name Name of schedule. * @param[in] comment Comment on schedule. * @param[in] first_time First time action will run. * @param[in] period How often the action will run in seconds. 0 means * once. * @param[in] period_months The months part of the period. * @param[in] duration The length of the time window the action will run * in. 0 means entire duration of action. * @param[out] timezone Timezone. * @param[out] schedule Created schedule. * * @return 0 success, 1 schedule exists already, 99 permission denied. */ int create_schedule (const char* name, const char *comment, time_t first_time, time_t period, time_t period_months, time_t duration, const char* timezone, schedule_t *schedule) { gchar *quoted_name, *quoted_timezone; gchar *insert_timezone; long offset; assert (current_credentials.uuid); sql_begin_immediate (); if (user_may ("create_schedule") == 0) { sql ("ROLLBACK;"); return 99; } if (resource_with_name_exists (name, "schedule", 0)) { sql ("ROLLBACK;"); return 1; } quoted_name = sql_quote (name); if (timezone && strcmp (timezone, "")) insert_timezone = g_strdup (timezone); else insert_timezone = sql_string ("SELECT timezone FROM users" " WHERE users.uuid = '%s';", current_credentials.uuid); if (insert_timezone == NULL) insert_timezone = g_strdup ("UTC"); else { insert_timezone = g_strstrip (insert_timezone); if (strcmp (insert_timezone, "") == 0) { g_free (insert_timezone); insert_timezone = g_strdup ("UTC"); } } offset = current_offset (insert_timezone); quoted_timezone = sql_quote (insert_timezone); if (comment) { gchar *quoted_comment = sql_nquote (comment, strlen (comment)); sql ("INSERT INTO schedules" " (uuid, name, owner, comment, first_time, period, period_months," " duration, timezone, initial_offset, creation_time," " modification_time)" " VALUES" " (make_uuid (), '%s'," " (SELECT id FROM users WHERE users.uuid = '%s')," " '%s', %i, %i, %i, %i," " '%s'," " %li, m_now (), m_now ());", quoted_name, current_credentials.uuid, quoted_comment, first_time, period, period_months, duration, quoted_timezone, offset); g_free (quoted_comment); } else sql ("INSERT INTO schedules" " (uuid, name, owner, comment, first_time, period, period_months," " duration, timezone, initial_offset, creation_time," " modification_time)" " VALUES" " (make_uuid (), '%s'," " (SELECT id FROM users WHERE users.uuid = '%s')," " '', %i, %i, %i, %i," " '%s'," " %li, m_now (), m_now ());", quoted_name, current_credentials.uuid, first_time, period, period_months, duration, quoted_timezone, offset); if (schedule) *schedule = sql_last_insert_id (); g_free (quoted_name); g_free (insert_timezone); g_free (quoted_timezone); sql ("COMMIT;"); return 0; } /** * @brief Create a schedule from an existing schedule. * * @param[in] name Name of new schedule. NULL to copy from existing. * @param[in] comment Comment on new schedule. NULL to copy from * existing. * @param[in] schedule_id UUID of existing schedule. * @param[out] new_schedule New schedule. * * @return 0 success, 1 schedule exists already, 2 failed to find existing * schedule, -1 error. */ int copy_schedule (const char* name, const char* comment, const char *schedule_id, schedule_t* new_schedule) { return copy_resource ("schedule", name, comment, schedule_id, "first_time, period, period_months, duration," " timezone, initial_offset", 1, new_schedule); } /** * @brief Delete a schedule. * * @param[in] schedule_id Schedule. * @param[in] ultimate Whether to remove entirely, or to trashcan. * * @return 0 success, 1 fail because a task refers to the schedule, * 99 permission denied, -1 error. */ int delete_schedule (const char *schedule_id, int ultimate) { schedule_t schedule = 0; sql_begin_immediate (); if (user_may ("delete_schedule") == 0) { sql ("ROLLBACK;"); return 99; } if (find_schedule_with_permission (schedule_id, &schedule, "delete_schedule")) { sql ("ROLLBACK;"); return -1; } if (schedule == 0) { if (find_trash ("schedule", schedule_id, &schedule)) { sql ("ROLLBACK;"); return -1; } if (schedule == 0) { sql ("ROLLBACK;"); return 2; } if (ultimate == 0) { /* It's already in the trashcan. */ sql ("COMMIT;"); return 0; } /* Check if it's in use by a task in the trashcan. */ if (sql_int ("SELECT count(*) FROM tasks" " WHERE schedule = %llu" " AND schedule_location = " G_STRINGIFY (LOCATION_TRASH) ";", schedule)) { sql ("ROLLBACK;"); return 1; } permissions_set_orphans ("schedule", schedule, LOCATION_TRASH); tags_set_orphans ("schedule", schedule, LOCATION_TRASH); sql ("DELETE FROM schedules_trash WHERE id = %llu;", schedule); sql ("COMMIT;"); return 0; } if (ultimate == 0) { if (sql_int ("SELECT count(*) FROM tasks" " WHERE schedule = %llu" " AND schedule_location = " G_STRINGIFY (LOCATION_TABLE) " AND (hidden = 0 OR hidden = 1);", schedule)) { sql ("ROLLBACK;"); return 1; } sql ("INSERT INTO schedules_trash" " (uuid, owner, name, comment, first_time, period, period_months," " duration, timezone, initial_offset, creation_time," " modification_time)" " SELECT uuid, owner, name, comment, first_time, period, period_months," " duration, timezone, initial_offset, creation_time," " modification_time" " FROM schedules WHERE id = %llu;", schedule); /* Update the location of the schedule in any trashcan tasks. */ sql ("UPDATE tasks" " SET schedule = %llu," " schedule_location = " G_STRINGIFY (LOCATION_TRASH) " WHERE schedule = %llu" " AND schedule_location = " G_STRINGIFY (LOCATION_TABLE) ";", sql_last_insert_id (), schedule); permissions_set_locations ("schedule", schedule, sql_last_insert_id (), LOCATION_TRASH); tags_set_locations ("schedule", schedule, sql_last_insert_id (), LOCATION_TRASH); } else if (sql_int ("SELECT count(*) FROM tasks" " WHERE schedule = %llu" " AND schedule_location = " G_STRINGIFY (LOCATION_TABLE), schedule)) { sql ("ROLLBACK;"); return 1; } else { permissions_set_orphans ("schedule", schedule, LOCATION_TABLE); tags_set_orphans ("schedule", schedule, LOCATION_TABLE); } sql ("DELETE FROM schedules WHERE id = %llu;", schedule); sql ("COMMIT;"); return 0; } /** * @brief Return whether a schedule is in use by a task. * * @param[in] schedule Schedule. * * @return 1 if in use, else 0. */ int schedule_in_use (schedule_t schedule) { return !!sql_int ("SELECT count (*) FROM tasks WHERE schedule = %llu;", schedule); } /** * @brief Return whether a trashcan schedule is in use by a task. * * @param[in] schedule schedule. * * @return 1 if in use, else 0. */ int trash_schedule_in_use (schedule_t schedule) { return !!sql_int ("SELECT count(*) FROM tasks" " WHERE schedule = %llu" " AND schedule_location = " G_STRINGIFY (LOCATION_TRASH), schedule); } /** * @brief Return whether a schedule is writable. * * @param[in] schedule Schedule. * * @return 1 if writable, else 0. */ int schedule_writable (schedule_t schedule) { return (schedule_in_use (schedule) == 0); } /** * @brief Return whether a trashcan schedule is writable. * * @param[in] schedule Schedule. * * @return 1 if writable, else 0. */ int trash_schedule_writable (schedule_t schedule) { return (trash_schedule_in_use (schedule) == 0); } /** * @brief Return whether a trashcan schedule is readable. * * @param[in] schedule Schedule. * * @return 1 if readable, else 0. */ int trash_schedule_readable (schedule_t schedule) { char *uuid; schedule_t found; if (schedule == 0) return 0; uuid = schedule_uuid (schedule); if (find_trash ("schedule", uuid, &found)) { g_free (uuid); return 0; } g_free (uuid); return found > 0; } /** * @brief Return the UUID of a schedule. * * @param[in] schedule Schedule. * * @return Newly allocated UUID. */ char * schedule_uuid (schedule_t schedule) { return sql_string ("SELECT uuid FROM schedules WHERE id = %llu;", schedule); } /** * @brief Return the name of a schedule. * * @param[in] schedule Schedule. * * @return Newly allocated name. */ char * schedule_name (schedule_t schedule) { return sql_string ("SELECT name FROM schedules WHERE id = %llu;", schedule); } /** * @brief Return the period of a schedule. * * @param[in] schedule Schedule. * * @return Period in seconds. */ int schedule_period (schedule_t schedule) { return sql_int ("SELECT period FROM schedules WHERE id = %llu;", schedule); } /** * @brief Return the period of a schedule. * * @param[in] schedule Schedule. * * @return Period in seconds. */ int schedule_duration (schedule_t schedule) { return sql_int ("SELECT duration FROM schedules WHERE id = %llu;", schedule); } /** * @brief Filter columns for schedule iterator. */ #define SCHEDULE_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "first_time", "period", "period_months", \ "duration", "timezone", "initial_offset", "first_run", "next_run", NULL } /** * @brief Schedule iterator columns. */ #define SCHEDULE_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS (schedules), \ { "first_time", NULL }, \ { "period", NULL }, \ { "period_months", NULL }, \ { "duration", NULL }, \ { "timezone", NULL }, \ { "initial_offset", NULL }, \ { "next_time (first_time, period, period_months)", "next_run" }, \ { "first_time", "first_run" }, \ { NULL, NULL } \ } /** * @brief Schedule iterator columns for trash case. */ #define SCHEDULE_ITERATOR_TRASH_COLUMNS \ { \ GET_ITERATOR_COLUMNS (schedules_trash), \ { "first_time", NULL }, \ { "period", NULL }, \ { "period_months", NULL }, \ { "duration", NULL }, \ { "timezone", NULL }, \ { "initial_offset", NULL }, \ { NULL, NULL } \ } /** * @brief Count the number of schedules. * * @param[in] get GET params. * * @return Total number of schedules filtered set. */ int schedule_count (const get_data_t *get) { static const char *filter_columns[] = SCHEDULE_ITERATOR_FILTER_COLUMNS; static column_t columns[] = SCHEDULE_ITERATOR_COLUMNS; static column_t trash_columns[] = SCHEDULE_ITERATOR_TRASH_COLUMNS; return count ("schedule", get, columns, trash_columns, filter_columns, 0, 0, 0, TRUE); } /** * @brief Initialise a schedule iterator. * * @param[in] iterator Iterator. * @param[in] get GET data. * * @return 0 success, 1 failed to find filter, failed to find filter (filt_id), * -1 error. */ int init_schedule_iterator (iterator_t* iterator, const get_data_t *get) { static const char *filter_columns[] = SCHEDULE_ITERATOR_FILTER_COLUMNS; static column_t columns[] = SCHEDULE_ITERATOR_COLUMNS; static column_t trash_columns[] = SCHEDULE_ITERATOR_TRASH_COLUMNS; return init_get_iterator (iterator, "schedule", get, columns, trash_columns, filter_columns, 0, NULL, NULL, TRUE); } /** * @brief Get the first time from a schedule iterator. * * @param[in] iterator Iterator. * * @return First time of schedule. */ time_t schedule_iterator_first_time (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = (time_t) iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT); return ret; } /** * @brief Get the next time a schedule could be schedulable. * * @param[in] iterator Iterator. * * @return Next time an action associated with schedule could be run. */ time_t schedule_iterator_next_time (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = (time_t) iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 6); return ret; } /** * @brief Get the period from a schedule iterator. * * @param[in] iterator Iterator. * * @return Period of schedule. */ time_t schedule_iterator_period (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = (time_t) iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 1); return ret; } /** * @brief Get the period months from a schedule iterator. * * @param[in] iterator Iterator. * * @return Period of schedule (months). */ time_t schedule_iterator_period_months (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = (time_t) iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 2); return ret; } /** * @brief Get the duration from a schedule iterator. * * @param[in] iterator Iterator. * * @return Duration of schedule. */ time_t schedule_iterator_duration (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = (time_t) iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 3); return ret; } /** * @brief Get the timezone from a schedule iterator. * * @param[in] iterator Iterator. * * @return Timezone, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (schedule_iterator_timezone, GET_ITERATOR_COLUMN_COUNT + 4); /** * @brief Get the initial offset from a schedule iterator. * * @param[in] iterator Iterator. * * @return Initial offset, or NULL if iteration is complete. Freed by * cleanup_iterator. */ time_t schedule_iterator_initial_offset (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = (time_t) iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 5); return ret; } /** * @brief Initialise a task schedule iterator. * * Lock the database before initialising. * * @param[in] iterator Iterator. * * @return 0 success, 1 failed to get lock, -1 error. */ int init_task_schedule_iterator (iterator_t* iterator) { int ret; gchar *task_clause, *schedule_clause; get_data_t get; array_t *permissions; ret = sql_begin_exclusive_giveup (); if (ret) return ret; get.trash = 0; permissions = make_array (); array_add (permissions, g_strdup ("start_task")); task_clause = where_owned_user ("", "users.id", "task", &get, 1, "any", 0, permissions); array_free (permissions); permissions = make_array (); array_add (permissions, g_strdup ("get_schedules")); schedule_clause = where_owned_user ("", "users.id", "schedule", &get, 1, "any", 0, permissions); array_free (permissions); init_iterator (iterator, "SELECT tasks.id, tasks.uuid," " schedules.id, tasks.schedule_next_time," " schedules.period, schedules.period_months," " schedules.first_time," " schedules.duration," " users.uuid, users.name, schedules.owner," " schedules.timezone, schedules.initial_offset" " FROM tasks, schedules, users" " WHERE tasks.schedule = schedules.id" " AND tasks.hidden = 0" /* And a user may run the task. */ " AND %s" /* And the same user has access to the schedule. */ " AND %s" /* Sort by task and prefer owner of task or schedule as user */ " ORDER BY tasks.id," " (users.id = tasks.owner) DESC," " (users.id = schedules.owner) DESC;", task_clause, schedule_clause); g_free (task_clause); g_free (schedule_clause); return 0; } /** * @brief Cleanup a task schedule iterator. * * @param[in] iterator Iterator. */ void cleanup_task_schedule_iterator (iterator_t* iterator) { cleanup_iterator (iterator); sql ("COMMIT;"); } /** * @brief Get the task from a task schedule iterator. * * @param[in] iterator Iterator. * * @return task. */ task_t task_schedule_iterator_task (iterator_t* iterator) { if (iterator->done) return 0; return (task_t) iterator_int64 (iterator, 0); } /** * @brief Get the task UUID from a task schedule iterator. * * @param[in] iterator Iterator. * * @return Task UUID, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (task_schedule_iterator_task_uuid, 1); /** * @brief Get the next time from a task schedule iterator. * * @param[in] iterator Iterator. * * @return Next time. */ time_t task_schedule_iterator_next_time (iterator_t* iterator) { if (iterator->done) return 0; return (time_t) iterator_int64 (iterator, 3); } /** * @brief Get the period from a task schedule iterator. * * @param[in] iterator Iterator. * * @return period. */ time_t task_schedule_iterator_period (iterator_t* iterator) { if (iterator->done) return 0; return (time_t) iterator_int64 (iterator, 4); } /** * @brief Get the period months from a task schedule iterator. * * @param[in] iterator Iterator. * * @return Period months. */ time_t task_schedule_iterator_period_months (iterator_t* iterator) { if (iterator->done) return 0; return (time_t) iterator_int64 (iterator, 5); } /** * @brief Get the first time from a task schedule iterator. * * @param[in] iterator Iterator. * * @return First time. */ time_t task_schedule_iterator_first_time (iterator_t* iterator) { if (iterator->done) return 0; return (time_t) iterator_int64 (iterator, 6); } /** * @brief Get the duration from a task schedule iterator. * * @param[in] iterator Iterator. * * @return Duration. */ time_t task_schedule_iterator_duration (iterator_t* iterator) { if (iterator->done) return 0; return (time_t) iterator_int64 (iterator, 7); } /** * @brief Get the task owner uuid from a task schedule iterator. * * @param[in] iterator Iterator. * * @return Owner UUID, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (task_schedule_iterator_owner_uuid, 8); /** * @brief Get the task owner name from a task schedule iterator. * * @param[in] iterator Iterator. * * @return Owner name, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (task_schedule_iterator_owner_name, 9); /** * @brief Get the schedule owner from a task schedule iterator. * * @param[in] iterator Iterator. * * @return Owner name, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (task_schedule_iterator_owner, 10); /** * @brief Get the timezone from a task schedule iterator. * * @param[in] iterator Iterator. * * @return Timezone, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (task_schedule_iterator_timezone, 11); /** * @brief Get the initial offset from a task schedule iterator. * * @param[in] iterator Iterator. * * @return Initial offset. */ time_t task_schedule_iterator_initial_offset (iterator_t* iterator) { if (iterator->done) return 0; return (time_t) iterator_int64 (iterator, 12); } /** * @brief Get the start due state from a task schedule iterator. * * @param[in] iterator Iterator. * * @return Start due flag. */ gboolean task_schedule_iterator_start_due (iterator_t* iterator) { task_status_t run_status; time_t start_time; if (iterator->done) return FALSE; if (task_schedule_iterator_next_time (iterator) == 0) return FALSE; run_status = task_run_status (task_schedule_iterator_task (iterator)); start_time = task_schedule_iterator_next_time (iterator) + task_schedule_iterator_initial_offset (iterator) - current_offset (task_schedule_iterator_timezone (iterator)); if ((run_status == TASK_STATUS_DONE || run_status == TASK_STATUS_INTERNAL_ERROR || run_status == TASK_STATUS_NEW || run_status == TASK_STATUS_STOPPED) && (start_time > 0) && (start_time <= time (NULL))) return TRUE; return FALSE; } /** * @brief Get the stop due state from a task schedule iterator. * * @param[in] iterator Iterator. * * @return Stop due flag. */ gboolean task_schedule_iterator_stop_due (iterator_t* iterator) { time_t period, period_months, duration; if (iterator->done) return FALSE; period = task_schedule_iterator_period (iterator); period_months = task_schedule_iterator_period_months (iterator); duration = task_schedule_iterator_duration (iterator); if (duration) { report_t report; report = task_running_report (task_schedule_iterator_task (iterator)); if (report && (report_scheduled (report) == 0)) return FALSE; } if (period && duration) { task_status_t run_status; run_status = task_run_status (task_schedule_iterator_task (iterator)); if (run_status == TASK_STATUS_RUNNING || run_status == TASK_STATUS_REQUESTED) { time_t now, first, start; now = time (NULL); first = task_schedule_iterator_first_time (iterator) + task_schedule_iterator_initial_offset (iterator) - current_offset (task_schedule_iterator_timezone (iterator)); start = first + (((now - first) / period) * period); if ((start + duration) < now) return TRUE; } } else if (period_months && duration) { task_status_t run_status; run_status = task_run_status (task_schedule_iterator_task (iterator)); if (run_status == TASK_STATUS_RUNNING || run_status == TASK_STATUS_REQUESTED) { time_t now, first, start; now = time (NULL); first = task_schedule_iterator_first_time (iterator) + task_schedule_iterator_initial_offset (iterator) - current_offset (task_schedule_iterator_timezone (iterator)); start = add_months (first, months_between (first, now)); if ((start + duration) < now) return TRUE; } } else if (duration) { task_status_t run_status; run_status = task_run_status (task_schedule_iterator_task (iterator)); if (run_status == TASK_STATUS_RUNNING || run_status == TASK_STATUS_REQUESTED) { time_t now, start; now = time (NULL); start = task_schedule_iterator_first_time (iterator) + task_schedule_iterator_initial_offset (iterator) - current_offset (task_schedule_iterator_timezone (iterator)); if ((start + duration) < now) return TRUE; } } return FALSE; } /** * @brief Initialise a schedule task iterator. * * @param[in] iterator Iterator. * @param[in] schedule Schedule. */ void init_schedule_task_iterator (iterator_t* iterator, schedule_t schedule) { gchar *available; get_data_t get; array_t *permissions; assert (current_credentials.uuid); get.trash = 0; permissions = make_array (); array_add (permissions, g_strdup ("get_tasks")); available = where_owned ("task", &get, 1, "any", 0, permissions); array_free (permissions); init_iterator (iterator, "SELECT id, uuid, name, %s FROM tasks" " WHERE schedule = %llu AND hidden = 0" " ORDER BY name ASC;", available, schedule, current_credentials.uuid); g_free (available); } /** * @brief Get the UUID from a schedule task iterator. * * @param[in] iterator Iterator. * * @return UUID, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (schedule_task_iterator_uuid, 1); /** * @brief Get the name from a schedule task iterator. * * @param[in] iterator Iterator. * * @return Name, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (schedule_task_iterator_name, 2); /** * @brief Get the read permission status from a GET iterator. * * @param[in] iterator Iterator. * * @return 1 if may read, else 0. */ int schedule_task_iterator_readable (iterator_t* iterator) { if (iterator->done) return 0; return iterator_int (iterator, 3); } /** * @brief Modify a schedule. * * @param[in] schedule_id UUID of schedule. * @param[in] name Name of schedule. * @param[in] comment Comment on schedule. * @param[in] first_time First time action will run. * @param[in] period How often the action will run in seconds. 0 means * once. * @param[in] period_months The months part of the period. * @param[in] duration The length of the time window the action will run * in. 0 means entire duration of action. * @param[in] timezone Timezone. * * @return 0 success, 1 failed to find schedule, 2 schedule with new name exists, * 3 error in type name, 4 schedule_id required, 99 permission denied, * -1 internal error. */ int modify_schedule (const char *schedule_id, const char *name, const char *comment, time_t first_time, time_t period, time_t period_months, time_t duration, const char *timezone) { gchar *quoted_name, *quoted_comment, *quoted_timezone; gchar *first_time_string, *duration_string, *period_string; gchar *period_months_string, *offset_string; schedule_t schedule; if (schedule_id == NULL) return 4; sql_begin_immediate (); assert (current_credentials.uuid); if (user_may ("modify_schedule") == 0) { sql ("ROLLBACK;"); return 99; } schedule = 0; if (find_schedule_with_permission (schedule_id, &schedule, "modify_schedule")) { sql ("ROLLBACK;"); return -1; } if (schedule == 0) { sql ("ROLLBACK;"); return 1; } /* Check whether a schedule with the same name exists already. */ if (name) { if (resource_with_name_exists (name, "schedule", schedule)) { sql ("ROLLBACK;"); return 2; } quoted_name = sql_quote (name); } else quoted_name = NULL; quoted_comment = comment ? sql_quote (comment) : NULL; if (duration == -1) duration_string = NULL; else duration_string = g_strdup_printf ("%li", duration); if (first_time == -1) first_time_string = NULL; else first_time_string = g_strdup_printf ("%li", first_time); if ((period_months == -1) || (period_months == 0)) { if (period == -1) { period_months_string = NULL; period_string = NULL; } else { period_months_string = g_strdup ("0"); period_string = g_strdup_printf ("%li", period); } } else { period_months_string = g_strdup_printf ("%li", period_months); period_string = g_strdup ("0"); } if (first_time) { if (timezone) offset_string = g_strdup_printf ("%li", current_offset (timezone)); else offset_string = NULL; } else offset_string = NULL; quoted_timezone = timezone ? sql_quote (timezone) : NULL; sql ("UPDATE schedules SET" " name = %s%s%s," " comment = %s%s%s," " timezone = %s%s%s," " first_time = %s," " period = %s," " period_months = %s," " duration = %s," " initial_offset = %s," " modification_time = m_now ()" " WHERE id = %llu;", quoted_name ? "'" : "", quoted_name ? quoted_name : "name", quoted_name ? "'" : "", quoted_comment ? "'" : "", quoted_comment ? quoted_comment : "comment", quoted_comment ? "'" : "", quoted_timezone ? "'" : "", quoted_timezone ? quoted_timezone : "timezone", quoted_timezone ? "'" : "", first_time ? first_time_string : "first_time", period_string ? period_string : "period", period_months_string ? period_months_string : "period_months", (duration >= 0) ? duration_string : "duration", offset_string ? offset_string : "initial_offset", schedule); sql ("UPDATE tasks SET schedule_next_time = " " (SELECT first_time FROM schedules WHERE id = %llu)" " WHERE schedule = %llu;", schedule, schedule); g_free (duration_string); g_free (first_time_string); g_free (offset_string); g_free (period_string); g_free (period_months_string); g_free (quoted_comment); g_free (quoted_name); g_free (quoted_timezone); sql ("COMMIT;"); return 0; } /* Report Formats. */ /** * @brief Possible port types. */ typedef enum { REPORT_FORMAT_FLAG_ACTIVE = 1 } report_format_flag_t; /** * @brief Find a reportformat for a specific permission, given a UUID. * * @param[in] uuid UUID of report format. * @param[out] report_format Report format return, 0 if succesfully failed to * find report_format. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find report_format), TRUE * on error. */ gboolean find_report_format_with_permission (const char* uuid, report_format_t* report_format, const char *permission) { return find_resource_with_permission ("report_format", uuid, report_format, permission, 0); } /** * @brief Find a report format given a name. * * @param[in] name Name of report_format. * @param[out] report_format Report format return, 0 if succesfully failed to * find report_format. * * @return FALSE on success (including if failed to find report format), TRUE * on error. */ gboolean lookup_report_format (const char* name, report_format_t* report_format) { gchar *quoted_name; assert (current_credentials.uuid); if (user_owns_name ("report_format", name) == 0) { *report_format = 0; return FALSE; } quoted_name = sql_quote (name); switch (sql_int64 (report_format, "SELECT id FROM report_formats" " WHERE name = '%s'" " AND ((owner IS NULL) OR (owner =" " (SELECT users.id FROM users WHERE users.uuid = '%s')));", quoted_name, current_credentials.uuid)) { case 0: break; case 1: /* Too few rows in result of query. */ *report_format = 0; break; default: /* Programming error. */ assert (0); case -1: g_free (quoted_name); return TRUE; break; } g_free (quoted_name); return FALSE; } /** * @brief Compare files for create_report_format. * * @param[in] one First. * @param[in] two Second. */ static gint compare_files (gconstpointer one, gconstpointer two) { gchar *file_one, *file_two; file_one = *((gchar**) one); file_two = *((gchar**) two); if (file_one == NULL) { if (file_two == NULL) return 0; return 1; } else if (file_two == NULL) return -1; return strcoll (file_one, file_two); } /** * @brief Create a report format. * * @param[in] uuid UUID of format. * @param[in] name Name of format. * @param[in] content_type Content type of format. * @param[in] extension File extension of format. * @param[in] summary Summary of format. * @param[in] description Description of format. * @param[in] global Whether the report is global. * @param[in] files Array of memory. Each item is a file name * string, a terminating NULL, the file contents * in base64 and a terminating NULL. * @param[in] params Array of params. * @param[in] params_options Array. Each item is an array corresponding to * params. Each item of an inner array is a string, * the text of an option in a selection. * @param[in] signature Signature. * @param[out] report_format Created report format. * * @return 0 success, 1 report format exists, 2 empty file name, 3 param value * validation failed, 4 param value validation failed, 5 param default * missing, 6 param min or max out of range, 7 param type missing, * 8 duplicate param name, 9 bogus param type name, 99 permission * denied, -1 error. */ int create_report_format (const char *uuid, const char *name, const char *content_type, const char *extension, const char *summary, const char *description, int global, array_t *files, array_t *params, array_t *params_options, const char *signature, report_format_t *report_format) { gchar *quoted_name, *quoted_summary, *quoted_description, *quoted_extension; gchar *quoted_content_type, *quoted_signature, *file_name, *dir; gchar *candidate_name, *new_uuid, *uuid_actual; report_format_t report_format_rowid; int index, num; gchar *format_signature = NULL; gsize format_signature_size; int format_trust = TRUST_UNKNOWN; create_report_format_param_t *param; assert (current_credentials.uuid); assert (uuid); assert (name); assert (files); assert (params); /* Verify the signature. */ if ((find_signature ("report_formats", uuid, &format_signature, &format_signature_size, &uuid_actual) == 0) || signature) { char *locale; GString *format; format = g_string_new (""); g_string_append_printf (format, "%s%s%s%i", uuid_actual ? uuid_actual : uuid, extension, content_type, global & 1); index = 0; locale = setlocale (LC_ALL, "C"); g_ptr_array_sort (files, compare_files); setlocale (LC_ALL, locale); while ((file_name = (gchar*) g_ptr_array_index (files, index++))) g_string_append_printf (format, "%s%s", file_name, file_name + strlen (file_name) + 1); index = 0; while ((param = (create_report_format_param_t*) g_ptr_array_index (params, index++))) { g_string_append_printf (format, "%s%s", param->name, param->type); if (param->type_min) { long long int min; min = strtoll (param->type_min, NULL, 0); if (min == LLONG_MIN) return 6; g_string_append_printf (format, "%lli", min); } if (param->type_max) { long long int max; max = strtoll (param->type_max, NULL, 0); if (max == LLONG_MAX) return 6; g_string_append_printf (format, "%lli", max); } g_string_append_printf (format, "%s", param->fallback); { array_t *options; int option_index; gchar *option_value; options = (array_t*) g_ptr_array_index (params_options, index - 1); if (options == NULL) return -1; option_index = 0; while ((option_value = (gchar*) g_ptr_array_index (options, option_index++))) g_string_append_printf (format, "%s", option_value); } } g_string_append_printf (format, "\n"); if (format_signature) signature = (const char*) format_signature; if (verify_signature (format->str, format->len, signature, strlen (signature), &format_trust)) { g_free (format_signature); g_string_free (format, TRUE); return -1; } g_string_free (format, TRUE); } sql_begin_immediate (); if (user_may ("create_report_format") == 0) { sql ("ROLLBACK;"); return 99; } if (sql_int ("SELECT COUNT(*) FROM report_formats WHERE uuid = '%s';", uuid) || sql_int ("SELECT COUNT(*) FROM report_formats_trash" " WHERE original_uuid = '%s';", uuid)) { gchar *base, *new, *old; char *real_old; /* Make a new UUID, because a report format exists with the given UUID. */ new_uuid = openvas_uuid_make (); if (new_uuid == NULL) { sql ("ROLLBACK;"); return -1; } /* Setup a private/report_formats/ link to the signature of the existing * report format in the feed. This allows the signature to be shared. */ base = g_strdup_printf ("%s.asc", uuid); old = g_build_filename (OPENVAS_NVT_DIR, "report_formats", base, NULL); real_old = realpath (old, NULL); if (real_old) { /* Signature exists in regular directory. */ g_free (old); old = g_strdup (real_old); free (real_old); } else { struct stat state; /* Signature may be in private directory. */ g_free (old); old = g_build_filename (OPENVAS_NVT_DIR, "private", "report_formats", base, NULL); if (lstat (old, &state)) { /* No. Signature may not exist in the feed yet. */ g_free (old); old = g_build_filename (OPENVAS_NVT_DIR, "report_formats", base, NULL); tracef ("using standard old: %s\n", old); } else { int count; /* Yes. Use the path it links to. */ real_old = g_malloc (state.st_size + 1); count = readlink (old, real_old, state.st_size + 1); if (count < 0 || count > state.st_size) { g_warning ("%s: readlink failed", __FUNCTION__); sql ("ROLLBACK;"); return -1; } real_old[state.st_size] = '\0'; g_free (old); old = real_old; tracef ("using linked old: %s\n", old); } } g_free (base); base = g_strdup_printf ("%s.asc", new_uuid); new = g_build_filename (OPENVAS_NVT_DIR, "private", "report_formats", base, NULL); g_free (base); if (symlink (old, new)) { g_warning ("%s: symlink failed: %s", __FUNCTION__, strerror (errno)); sql ("ROLLBACK;"); return -1; } } else new_uuid = NULL; candidate_name = g_strdup (name); quoted_name = sql_quote (candidate_name); num = 1; while (1) { if (!resource_with_name_exists (quoted_name, "report_format", 0)) break; g_free (candidate_name); g_free (quoted_name); candidate_name = g_strdup_printf ("%s %u", name, ++num); quoted_name = sql_quote (candidate_name); } g_free (candidate_name); /* Write files to disk. */ if (global) dir = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "global_report_formats", new_uuid ? new_uuid : uuid, NULL); else { assert (current_credentials.uuid); dir = g_build_filename (OPENVAS_STATE_DIR, "openvasmd", "report_formats", current_credentials.uuid, new_uuid ? new_uuid : uuid, NULL); } if (g_file_test (dir, G_FILE_TEST_EXISTS) && openvas_file_remove_recurse (dir)) { g_warning ("%s: failed to remove dir %s", __FUNCTION__, dir); g_free (dir); g_free (quoted_name); g_free (new_uuid); sql ("ROLLBACK;"); return -1; } if (g_mkdir_with_parents (dir, 0755 /* "rwxr-xr-x" */)) { g_warning ("%s: failed to create dir %s", __FUNCTION__, dir); g_free (dir); g_free (quoted_name); g_free (new_uuid); sql ("ROLLBACK;"); return -1; } if (global == 0) { gchar *report_dir; /* glib seems to apply the mode to the first dir only. */ report_dir = g_build_filename (OPENVAS_STATE_DIR, "openvasmd", "report_formats", current_credentials.uuid, NULL); if (chmod (report_dir, 0755 /* rwxr-xr-x */)) { g_warning ("%s: chmod failed: %s\n", __FUNCTION__, strerror (errno)); g_free (dir); g_free (report_dir); g_free (quoted_name); g_free (new_uuid); sql ("ROLLBACK;"); return -1; } g_free (report_dir); } /* glib seems to apply the mode to the first dir only. */ if (chmod (dir, 0755 /* rwxr-xr-x */)) { g_warning ("%s: chmod failed: %s\n", __FUNCTION__, strerror (errno)); g_free (dir); g_free (quoted_name); g_free (new_uuid); sql ("ROLLBACK;"); return -1; } index = 0; while ((file_name = (gchar*) g_ptr_array_index (files, index++))) { gchar *contents, *file, *full_file_name; gsize contents_size; GError *error; int ret; if (strlen (file_name) == 0) { openvas_file_remove_recurse (dir); g_free (dir); g_free (quoted_name); g_free (new_uuid); sql ("ROLLBACK;"); return 2; } file = file_name + strlen (file_name) + 1; if (strlen (file)) contents = (gchar*) g_base64_decode (file, &contents_size); else { contents = g_strdup (""); contents_size = 0; } full_file_name = g_build_filename (dir, file_name, NULL); error = NULL; g_file_set_contents (full_file_name, contents, contents_size, &error); g_free (contents); if (error) { g_warning ("%s: %s", __FUNCTION__, error->message); g_error_free (error); openvas_file_remove_recurse (dir); g_free (full_file_name); g_free (dir); g_free (quoted_name); g_free (new_uuid); sql ("ROLLBACK;"); return -1; } if (strcmp (file_name, "generate") == 0) ret = chmod (full_file_name, 0755 /* rwxr-xr-x */); else ret = chmod (full_file_name, S_IRUSR | S_IWUSR | S_IRGRP | S_IROTH); if (ret) { g_warning ("%s: chmod failed: %s\n", __FUNCTION__, strerror (errno)); openvas_file_remove_recurse (dir); g_free (full_file_name); g_free (dir); g_free (quoted_name); g_free (new_uuid); sql ("ROLLBACK;"); return -1; } g_free (full_file_name); } /* Add format to database. */ quoted_summary = summary ? sql_quote (summary) : NULL; quoted_description = description ? sql_quote (description) : NULL; quoted_extension = extension ? sql_quote (extension) : NULL; quoted_content_type = content_type ? sql_quote (content_type) : NULL; quoted_signature = signature ? sql_quote (signature) : NULL; g_free (format_signature); if (global) sql ("INSERT INTO report_formats" " (uuid, name, owner, summary, description, extension, content_type," " signature, trust, trust_time, flags, creation_time," " modification_time)" " VALUES ('%s', '%s', NULL, '%s', '%s', '%s', '%s', '%s', %i, %i, 0," " m_now (), m_now ());", new_uuid ? new_uuid : uuid, quoted_name, quoted_summary ? quoted_summary : "", quoted_description ? quoted_description : "", quoted_extension ? quoted_extension : "", quoted_content_type ? quoted_content_type : "", quoted_signature ? quoted_signature : "", format_trust, time (NULL)); else sql ("INSERT INTO report_formats" " (uuid, name, owner, summary, description, extension, content_type," " signature, trust, trust_time, flags, creation_time," " modification_time)" " VALUES ('%s', '%s'," " (SELECT id FROM users WHERE users.uuid = '%s')," " '%s', '%s', '%s', '%s', '%s', %i, %i, 0, m_now (), m_now ());", new_uuid ? new_uuid : uuid, quoted_name, current_credentials.uuid, quoted_summary ? quoted_summary : "", quoted_description ? quoted_description : "", quoted_extension ? quoted_extension : "", quoted_content_type ? quoted_content_type : "", quoted_signature ? quoted_signature : "", format_trust, time (NULL)); g_free (new_uuid); g_free (quoted_summary); g_free (quoted_description); g_free (quoted_extension); g_free (quoted_content_type); g_free (quoted_signature); g_free (quoted_name); /* Add params to database. */ report_format_rowid = sql_last_insert_id (); index = 0; while ((param = (create_report_format_param_t*) g_ptr_array_index (params, index++))) { gchar *quoted_param_name, *quoted_param_value, *quoted_param_fallback; rowid_t param_rowid; long long int min, max; if (param->type == NULL) { openvas_file_remove_recurse (dir); g_free (dir); sql ("ROLLBACK;"); return 7; } if (report_format_param_type_from_name (param->type) == REPORT_FORMAT_PARAM_TYPE_ERROR) { openvas_file_remove_recurse (dir); g_free (dir); sql ("ROLLBACK;"); return 9; } /* Param min and max are optional. LLONG_MIN and LLONG_MAX mark in the db * that they were missing, so if the user gives LLONG_MIN or LLONG_MAX it * is an error. This ensures that GPG verification works, because the * verification knows when to leave out min and max. */ if (param->type_min) { min = strtoll (param->type_min, NULL, 0); if (min == LLONG_MIN) { openvas_file_remove_recurse (dir); g_free (dir); sql ("ROLLBACK;"); return 6; } } else min = LLONG_MIN; if (param->type_max) { max = strtoll (param->type_max, NULL, 0); if (max == LLONG_MAX) { openvas_file_remove_recurse (dir); g_free (dir); sql ("ROLLBACK;"); return 6; } } else max = LLONG_MAX; if (param->fallback == NULL) { openvas_file_remove_recurse (dir); g_free (dir); sql ("ROLLBACK;"); return 5; } quoted_param_name = sql_quote (param->name); if (sql_int ("SELECT count(*) FROM report_format_params" " WHERE name = '%s' AND report_format = %llu;", quoted_param_name, report_format_rowid)) { g_free (quoted_param_name); openvas_file_remove_recurse (dir); g_free (dir); sql ("ROLLBACK;"); return 8; } quoted_param_value = sql_quote (param->value); quoted_param_fallback = sql_quote (param->fallback); sql ("INSERT INTO report_format_params" " (report_format, name, type, value, type_min, type_max, type_regex," " fallback)" " VALUES (%llu, '%s', %u, '%s', %lli, %lli, '', '%s');", report_format_rowid, quoted_param_name, report_format_param_type_from_name (param->type), quoted_param_value, min, max, quoted_param_fallback); g_free (quoted_param_name); g_free (quoted_param_value); g_free (quoted_param_fallback); param_rowid = sql_last_insert_id (); { array_t *options; int option_index; gchar *option_value; options = (array_t*) g_ptr_array_index (params_options, index - 1); if (options == NULL) { g_warning ("%s: options was NULL", __FUNCTION__); openvas_file_remove_recurse (dir); g_free (dir); sql ("ROLLBACK;"); return -1; } option_index = 0; while ((option_value = (gchar*) g_ptr_array_index (options, option_index++))) { gchar *quoted_option_value = sql_quote (option_value); sql ("INSERT INTO report_format_param_options" " (report_format_param, value)" " VALUES (%llu, '%s');", param_rowid, quoted_option_value); g_free (quoted_option_value); } } if (validate_param_value (report_format_rowid, param_rowid, param->name, param->value)) { openvas_file_remove_recurse (dir); g_free (dir); sql ("ROLLBACK;"); return 3; } if (validate_param_value (report_format_rowid, param_rowid, param->name, param->fallback)) { openvas_file_remove_recurse (dir); g_free (dir); sql ("ROLLBACK;"); return 4; } } if (report_format) *report_format = report_format_rowid; g_free (dir); sql ("COMMIT;"); return 0; } /** * @brief Create Report Format from an existing Report Format. * * @param[in] name Name of new Report Format. NULL to copy * from existing. * @param[in] source_uuid UUID of existing Report Format. * @param[out] new_report_format New Report Format. * * @return 0 success, 1 Report Format exists already, 2 failed to find existing * Report Format, 99 permission denied, -1 error. */ int copy_report_format (const char* name, const char* source_uuid, report_format_t* new_report_format) { report_format_t new, old; gchar *copy_uuid, *source_dir, *copy_dir; gchar *tmp_dir; int global, ret; assert (current_credentials.uuid); sql_begin_immediate (); ret = copy_resource_lock ("report_format", name, NULL, source_uuid, "extension, content_type, summary, description," " signature, trust, trust_time, flags", 1, &new, &old); if (ret) { sql ("ROLLBACK;"); return ret; } if (report_format_predefined (old)) sql ("UPDATE report_formats SET trust = %i, trust_time = %i" " WHERE id = %llu;", TRUST_YES, time (NULL), new); /* Copy report format parameters. */ sql ("INSERT INTO report_format_params " " (report_format, name, type, value, type_min, type_max," " type_regex, fallback)" " SELECT %llu, name, type, value, type_min, type_max," " type_regex, fallback" " FROM report_format_params WHERE report_format = %llu;", new, old); /* Copy files on disk. */ global = report_format_global (old); if (global) source_dir = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "global_report_formats", source_uuid, NULL); else { gchar *owner_uuid; owner_uuid = report_format_owner_uuid (old); assert (owner_uuid); source_dir = g_build_filename (OPENVAS_STATE_DIR, "openvasmd", "report_formats", owner_uuid, source_uuid, NULL); g_free (owner_uuid); } /* Check that the source directory exists. */ if (!g_file_test (source_dir, G_FILE_TEST_EXISTS)) { g_warning ("%s: report format directory %s not found", __FUNCTION__, source_dir); g_free (source_dir); sql ("ROLLBACK;"); return -1; } copy_uuid = report_format_uuid (new); if (copy_uuid == NULL) { sql ("ROLLBACK;"); return -1; } /* Prepare directory to copy into. */ copy_dir = g_build_filename (OPENVAS_STATE_DIR, "openvasmd", "report_formats", current_credentials.uuid, copy_uuid, NULL); if (g_file_test (copy_dir, G_FILE_TEST_EXISTS) && openvas_file_remove_recurse (copy_dir)) { g_warning ("%s: failed to remove dir %s", __FUNCTION__, copy_dir); g_free (source_dir); g_free (copy_dir); g_free (copy_uuid); sql ("ROLLBACK;"); return -1; } if (g_mkdir_with_parents (copy_dir, 0755 /* "rwxr-xr-x" */)) { g_warning ("%s: failed to create dir %s", __FUNCTION__, copy_dir); g_free (source_dir); g_free (copy_dir); g_free (copy_uuid); sql ("ROLLBACK;"); return -1; } /* Correct permissions as glib doesn't seem to do so. */ tmp_dir = g_build_filename (OPENVAS_STATE_DIR, "openvasmd", "report_formats", current_credentials.uuid, NULL); if (chmod (tmp_dir, 0755 /* rwxr-xr-x */)) { g_warning ("%s: chmod %s failed: %s\n", __FUNCTION__, tmp_dir, strerror (errno)); g_free (source_dir); g_free (copy_dir); g_free (copy_uuid); g_free (tmp_dir); sql ("ROLLBACK;"); return -1; } g_free (tmp_dir); tmp_dir = g_build_filename (OPENVAS_STATE_DIR, "openvasmd", "report_formats", current_credentials.uuid, copy_uuid, NULL); if (chmod (tmp_dir, 0755 /* rwxr-xr-x */)) { g_warning ("%s: chmod %s failed: %s\n", __FUNCTION__, tmp_dir, strerror (errno)); g_free (source_dir); g_free (copy_dir); g_free (copy_uuid); g_free (tmp_dir); sql ("ROLLBACK;"); return -1; } g_free (tmp_dir); g_free (copy_uuid); /* Copy files into new directory. */ { GDir *directory; GError *error; error = NULL; directory = g_dir_open (source_dir, 0, &error); if (directory == NULL) { if (error) { g_warning ("g_dir_open(%s) failed - %s\n", source_dir, error->message); g_error_free (error); } g_free (source_dir); g_free (copy_dir); sql ("ROLLBACK;"); return -1; } else { gchar *source_file, *copy_file; const gchar *filename; filename = g_dir_read_name (directory); while (filename) { source_file = g_build_filename (source_dir, filename, NULL); copy_file = g_build_filename (copy_dir, filename, NULL); if (openvas_file_copy (source_file, copy_file) == FALSE) { g_warning ("%s: copy of %s to %s failed.\n", __FUNCTION__, source_file, copy_file); g_free (source_file); g_free (copy_file); g_free (source_dir); g_free (copy_dir); sql ("ROLLBACK"); return -1; } g_free (source_file); g_free (copy_file); filename = g_dir_read_name (directory); } } } sql ("COMMIT"); g_free (source_dir); g_free (copy_dir); if (new_report_format) *new_report_format = new; return 0; } /** * @brief Modify a report format. * * @param[in] report_format_id UUID of report format. * @param[in] name Name of report format. * @param[in] summary Summary of report format. * @param[in] active Active flag. * @param[in] param_name Parameter to modify. * @param[in] param_value Value of parameter. * * @return 0 success, 1 failed to find report format, 2 report format_id * required, 3 failed to find report format parameter, 4 parameter value * validation failed, 99 permission denied, -1 internal error. */ int modify_report_format (const char *report_format_id, const char *name, const char *summary, const char *active, const char *param_name, const char *param_value) { report_format_t report_format; int ret = 0; if (report_format_id == NULL) return 2; sql_begin_immediate (); assert (current_credentials.uuid); if (user_may ("modify_report_format") == 0) { sql ("ROLLBACK;"); return 99; } report_format = 0; if (find_report_format_with_permission (report_format_id, &report_format, "modify_report_format")) { sql ("ROLLBACK;"); return -1; } if (report_format == 0) { sql ("ROLLBACK;"); return 1; } /* Update values */ if (name) set_report_format_name (report_format, name); if (summary) set_report_format_summary (report_format, summary); if (active) set_report_format_active (report_format, strcmp (active, "0")); sql ("COMMIT;"); /* Update format params if set */ if (param_name) { ret = set_report_format_param (report_format, param_name, param_value); if (ret == 1) ret = 3; if (ret == 2) ret = 4; } return ret; } /** * @brief Move a report format directory. * * @param[in] dir Old dir. * @param[in] new_dir New dir. * * @return 0 success, -1 error. */ static int move_report_format_dir (const char *dir, const char *new_dir) { if (g_file_test (dir, G_FILE_TEST_EXISTS) && openvas_file_check_is_dir (dir)) { if (rename (dir, new_dir)) { GError *error; GDir *directory; const gchar *entry; if (errno == EXDEV) { /* Across devices, move by hand. */ if (g_mkdir_with_parents (new_dir, 0755 /* "rwxr-xr-x" */)) { g_warning ("%s: failed to create dir %s", __FUNCTION__, new_dir); return -1; } error = NULL; directory = g_dir_open (dir, 0, &error); if (directory == NULL) { g_warning ("%s: failed to g_dir_open %s: %s\n", __FUNCTION__, dir, error->message); g_error_free (error); return -1; } entry = NULL; while ((entry = g_dir_read_name (directory))) { gchar *entry_path, *new_path; entry_path = g_build_filename (dir, entry, NULL); new_path = g_build_filename (new_dir, entry, NULL); if (openvas_file_move (entry_path, new_path) == FALSE) { g_warning ("%s: failed to move %s to %s", __FUNCTION__, entry_path, new_path); g_free (entry_path); g_free (new_path); g_dir_close (directory); return -1; } g_free (entry_path); g_free (new_path); } g_dir_close (directory); openvas_file_remove_recurse (dir); } else { g_warning ("%s: rename %s to %s: %s\n", __FUNCTION__, dir, new_dir, strerror (errno)); return -1; } } } else { g_warning ("%s: report dir missing: %s\n", __FUNCTION__, dir); return -1; } return 0; } /** * @brief Delete a report format. * * @param[in] report_format_id UUID of Report format. * @param[in] ultimate Whether to remove entirely, or to trashcan. * * @return 0 success, 1 report format in use, 2 failed to find report format, * 3 predefined report format, 99 permission denied, -1 error. */ int delete_report_format (const char *report_format_id, int ultimate) { gchar *dir; report_format_t report_format, trash_report_format; /* This is complicated in two ways * * - the UUID of a report format is the same every time it is * imported, so to prevent multiple deletes from producing * duplicate UUIDs in the trashcan, each report format in the * trashcan gets a new UUID, * * - the report format has information on disk on top of the * info in the db, so the disk information has to be held * in a special trashcan directory. */ sql_begin_immediate (); if (user_may ("delete_report_format") == 0) { sql ("ROLLBACK;"); return 99; } /* Look in the "real" table. */ if (find_report_format_with_permission (report_format_id, &report_format, "delete_report_format")) { sql ("ROLLBACK;"); return -1; } if (report_format == 0) { gchar *report_format_string, *base; /* Look in the trashcan. */ if (find_trash ("report_format", report_format_id, &report_format)) { sql ("ROLLBACK;"); return -1; } if (report_format == 0) { sql ("ROLLBACK;"); return 2; } if (ultimate == 0) { /* It's already in the trashcan. */ sql ("COMMIT;"); return 0; } /* Check if it's in use by a trash alert. */ if (trash_report_format_in_use (report_format)) { sql ("ROLLBACK;"); return 1; } /* Remove entirely. */ permissions_set_orphans ("report_format", report_format, LOCATION_TRASH); tags_set_orphans ("report_format", report_format, LOCATION_TRASH); base = sql_string ("SELECT original_uuid || '.asc'" " FROM report_formats_trash" " WHERE id = %llu;", report_format); sql ("DELETE FROM report_format_param_options_trash" " WHERE report_format_param" " IN (SELECT id from report_format_params_trash" " WHERE report_format = %llu);", report_format); sql ("DELETE FROM report_format_params_trash WHERE report_format = %llu;", report_format); sql ("DELETE FROM report_formats_trash WHERE id = %llu;", report_format); /* Remove the dirs last, in case any SQL rolls back. */ /* Trash files. */ report_format_string = g_strdup_printf ("%llu", report_format); dir = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "report_formats_trash", report_format_string, NULL); g_free (report_format_string); if (g_file_test (dir, G_FILE_TEST_EXISTS) && openvas_file_remove_recurse (dir)) { g_free (dir); g_free (base); sql ("ROLLBACK;"); return -1; } g_free (dir); /* Signature links in the feed. */ dir = g_build_filename (OPENVAS_NVT_DIR, "private", "report_formats", base, NULL); g_free (base); unlink (dir); g_free (dir); sql ("COMMIT;"); return 0; } if (report_format_predefined (report_format)) { sql ("ROLLBACK;"); return 3; } if (report_format_global (report_format)) dir = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "global_report_formats", report_format_id, NULL); else dir = g_build_filename (OPENVAS_STATE_DIR, "openvasmd", "report_formats", current_credentials.uuid, report_format_id, NULL); if (ultimate) { permissions_set_orphans ("report_format", report_format, LOCATION_TABLE); tags_set_orphans ("report_format", report_format, LOCATION_TABLE); /* Check if it's in use by a trash or regular alert. */ if (sql_int ("SELECT count(*) FROM alert_method_data_trash" " WHERE data = (SELECT uuid FROM report_formats" " WHERE id = %llu)" " AND (name = 'notice_attach_format'" " OR name = 'notice_report_format');", report_format)) { g_free (dir); sql ("ROLLBACK;"); return 1; } if (report_format_in_use (report_format)) { g_free (dir); sql ("ROLLBACK;"); return 1; } /* Remove directory. */ if (g_file_test (dir, G_FILE_TEST_EXISTS) && openvas_file_remove_recurse (dir)) { g_free (dir); sql ("ROLLBACK;"); return -1; } } else { iterator_t params; gchar *trash_dir; /* Check if it's in use by a regular alert. */ if (report_format_in_use (report_format)) { g_free (dir); sql ("ROLLBACK;"); return 1; } /* Move to trash. */ trash_dir = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "report_formats_trash", NULL); if (g_mkdir_with_parents (trash_dir, 0755 /* "rwxr-xr-x" */)) { g_warning ("%s: failed to create dir %s", __FUNCTION__, trash_dir); g_free (trash_dir); sql ("ROLLBACK;"); return -1; } g_free (trash_dir); sql ("INSERT INTO report_formats_trash" " (uuid, owner, name, extension, content_type, summary," " description, signature, trust, trust_time, flags, original_uuid," " creation_time, modification_time)" " SELECT" " make_uuid (), owner, name, extension, content_type, summary," " description, signature, trust, trust_time, flags, uuid," " creation_time, modification_time" " FROM report_formats" " WHERE id = %llu;", report_format); trash_report_format = sql_last_insert_id (); init_report_format_param_iterator (¶ms, report_format, 0, 1, NULL); while (next (¶ms)) { report_format_param_t param, trash_param; param = report_format_param_iterator_param (¶ms); sql ("INSERT INTO report_format_params_trash" " (report_format, name, type, value, type_min, type_max," " type_regex, fallback)" " SELECT" " %llu, name, type, value, type_min, type_max," " type_regex, fallback" " FROM report_format_params" " WHERE id = %llu;", trash_report_format, param); trash_param = sql_last_insert_id (); sql ("INSERT INTO report_format_param_options_trash" " (report_format_param, value)" " SELECT %llu, value" " FROM report_format_param_options" " WHERE report_format_param = %llu;", trash_param, param); } cleanup_iterator (¶ms); permissions_set_locations ("report_format", report_format, trash_report_format, LOCATION_TRASH); tags_set_locations ("report_format", report_format, trash_report_format, LOCATION_TRASH); } /* Remove from "real" tables. */ sql ("DELETE FROM report_format_param_options WHERE report_format_param" " IN (SELECT id from report_format_params WHERE report_format = %llu);", report_format); sql ("DELETE FROM report_format_params WHERE report_format = %llu;", report_format); sql ("DELETE FROM report_formats WHERE id = %llu;", report_format); /* Move the dir last, in case any SQL rolls back. */ if (ultimate == 0) { gchar *new_dir, *report_format_string; report_format_string = g_strdup_printf ("%llu", trash_report_format); new_dir = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "report_formats_trash", report_format_string, NULL); g_free (report_format_string); if (move_report_format_dir (dir, new_dir)) { g_free (dir); g_free (new_dir); sql ("ROLLBACK;"); return -1; } g_free (new_dir); } g_free (dir); sql ("COMMIT;"); return 0; } /** * @brief Verify a report format. * * @param[in] report_format Report format. * * @return 0 success, -1 error. */ int verify_report_format_internal (report_format_t report_format) { int format_trust = TRUST_UNKNOWN; iterator_t formats; get_data_t get; gchar *uuid; memset(&get, '\0', sizeof (get)); get.id = report_format_uuid (report_format); init_report_format_iterator (&formats, &get); if (next (&formats)) { const char *signature; gchar *format_signature = NULL; gsize format_signature_size; signature = report_format_iterator_signature (&formats); find_signature ("report_formats", get_iterator_uuid (&formats), &format_signature, &format_signature_size, &uuid); if ((signature && strlen (signature)) || format_signature) { GString *format; file_iterator_t files; iterator_t params; report_format_t report_format; format = g_string_new (""); report_format = get_iterator_resource (&formats); g_string_append_printf (format, "%s%s%s%i", uuid ? uuid : get_iterator_uuid (&formats), report_format_iterator_extension (&formats), report_format_iterator_content_type (&formats), report_format_global (report_format) & 1); g_free (uuid); init_report_format_file_iterator (&files, report_format); while (next_file (&files)) { gchar *content = file_iterator_content_64 (&files); g_string_append_printf (format, "%s%s", file_iterator_name (&files), content); g_free (content); } cleanup_file_iterator (&files); init_report_format_param_iterator (¶ms, report_format, 0, 1, NULL); while (next (¶ms)) { g_string_append_printf (format, "%s%s", report_format_param_iterator_name (¶ms), report_format_param_iterator_type_name (¶ms)); if (report_format_param_iterator_type_min (¶ms) > LLONG_MIN) g_string_append_printf (format, "%lli", report_format_param_iterator_type_min (¶ms)); if (report_format_param_iterator_type_max (¶ms) < LLONG_MAX) g_string_append_printf (format, "%lli", report_format_param_iterator_type_max (¶ms)); g_string_append_printf (format, "%s%s", report_format_param_iterator_type_regex (¶ms), report_format_param_iterator_fallback (¶ms)); { iterator_t options; init_param_option_iterator (&options, report_format_param_iterator_param (¶ms), 1, NULL); while (next (&options)) if (param_option_iterator_value (&options)) g_string_append_printf (format, "%s", param_option_iterator_value (&options)); } } cleanup_iterator (¶ms); g_string_append_printf (format, "\n"); if (format_signature) { /* Try the feed signature. */ if (verify_signature (format->str, format->len, format_signature, strlen (format_signature), &format_trust)) { cleanup_iterator (&formats); g_free (format_signature); g_string_free (format, TRUE); return -1; } } else if (signature && strlen (signature)) { /* Try the signature from the database. */ if (verify_signature (format->str, format->len, signature, strlen (signature), &format_trust)) { cleanup_iterator (&formats); g_free (format_signature); g_string_free (format, TRUE); return -1; } } g_free (format_signature); g_string_free (format, TRUE); } } else { return -1; } cleanup_iterator (&formats); sql ("UPDATE report_formats SET trust = %i, trust_time = %i," " modification_time = m_now ()" " WHERE id = %llu;", format_trust, time (NULL), report_format); return 0; } /** * @brief Verify a report format. * * @param[in] report_format_id Report format UUID. * * @return 0 success, 1 failed to find report format, 99 permission denied, * -1 error. */ int verify_report_format (const char *report_format_id) { int ret; report_format_t report_format; sql_begin_immediate (); if (user_may ("verify_report_format") == 0) { sql ("ROLLBACK;"); return 99; } report_format = 0; if (find_report_format_with_permission (report_format_id, &report_format, "verify_report_format")) { sql ("ROLLBACK;"); return -1; } if (report_format == 0) { sql ("ROLLBACK;"); return 1; } ret = verify_report_format_internal (report_format); if (ret) { sql ("ROLLBACK;"); return ret; } sql ("COMMIT;"); return 0; } /** * @brief Verify a report format. * * @param[in] report_format Report format. * * @return 0 success, 99 permission denied, -1 error. */ static int report_format_verify (report_format_t report_format) { int ret; sql_begin_immediate (); ret = verify_report_format_internal (report_format); if (ret) { sql ("ROLLBACK;"); return ret; } sql ("COMMIT;"); return 0; } /** * @brief Return the UUID of a report format. * * @param[in] report_format Report format. * * @return Newly allocated UUID. */ char * report_format_uuid (report_format_t report_format) { return sql_string ("SELECT uuid FROM report_formats WHERE id = %llu;", report_format); } /** * @brief Return the UUID of the owner of a report format. * * @param[in] report_format Report format. * * @return Newly allocated owner UUID if there is an owner, else NULL. */ char * report_format_owner_uuid (report_format_t report_format) { if (sql_int ("SELECT owner IS NULL FROM report_formats" " WHERE id = %llu;", report_format)) return NULL; return sql_string ("SELECT uuid FROM users" " WHERE id = (SELECT owner FROM report_formats" " WHERE id = %llu);", report_format); } /** * @brief Set the active flag of a report format. * * @param[in] report_format The report format. * @param[in] active Active flag. */ void set_report_format_active (report_format_t report_format, int active) { if (active) sql ("UPDATE report_formats SET flags = (flags | %llu), " " modification_time = m_now ()" " WHERE id = %llu;", (long long int) REPORT_FORMAT_FLAG_ACTIVE, report_format); else sql ("UPDATE report_formats SET flags = (flags & ~ %llu), " " modification_time = m_now ()" " WHERE id = %llu;", (long long int) REPORT_FORMAT_FLAG_ACTIVE, report_format); } /** * @brief Return the name of a report format. * * @param[in] report_format Report format. * * @return Newly allocated name. */ char * report_format_name (report_format_t report_format) { return sql_string ("SELECT name FROM report_formats WHERE id = %llu;", report_format); } /** * @brief Return the content type of a report format. * * @param[in] report_format Report format. * * @return Newly allocated content type. */ char * report_format_content_type (report_format_t report_format) { return sql_string ("SELECT content_type FROM report_formats" " WHERE id = %llu;", report_format); } /** * @brief Return whether a report format is referenced by an alert. * * @param[in] report_format Report Format. * * @return 1 if in use, else 0. */ int report_format_in_use (report_format_t report_format) { return !!sql_int ("SELECT count(*) FROM alert_method_data" " WHERE data = (SELECT uuid FROM report_formats" " WHERE id = %llu)" " AND (name = 'notice_attach_format'" " OR name = 'notice_report_format');", report_format); } /** * @brief Return whether a report format in trash is referenced by an alert. * * @param[in] report_format Report Format. * * @return 1 if in use, else 0. */ int trash_report_format_in_use (report_format_t report_format) { return !!sql_int ("SELECT count(*) FROM alert_method_data_trash" " WHERE data = (SELECT original_uuid" " FROM report_formats_trash" " WHERE id = %llu)" " AND (name = 'notice_attach_format'" " OR name = 'notice_report_format');", report_format); } /** * @brief Return whether a report format is writable. * * @param[in] report_format Report Format. * * @return 1 if writable, else 0. */ int report_format_writable (report_format_t report_format) { return (report_format_in_use (report_format) == 0 && report_format_global (report_format) == 0); } /** * @brief Return whether a trashcan report_format is writable. * * @param[in] report_format Report Format. * * @return 1 if writable, else 0. */ int trash_report_format_writable (report_format_t report_format) { return (trash_report_format_in_use (report_format) == 0 && trash_report_format_global (report_format) == 0); } /** * @brief Return the extension of a report format. * * @param[in] report_format Report format. * * @return Newly allocated extension. */ char * report_format_extension (report_format_t report_format) { return sql_string ("SELECT extension FROM report_formats WHERE id = %llu;", report_format); } /** * @brief Set the name of the report format. * * @param[in] report_format The report format. * @param[in] name Name. */ void set_report_format_name (report_format_t report_format, const char *name) { gchar *quoted_name = sql_quote (name); sql ("UPDATE report_formats SET name = '%s', modification_time = m_now ()" " WHERE id = %llu;", quoted_name, report_format); g_free (quoted_name); } /** * @brief Return whether a report format is global. * * @param[in] report_format Report format. * * @return 1 if global, else 0. */ int report_format_global (report_format_t report_format) { return sql_int ("SELECT owner is NULL FROM report_formats" " WHERE id = %llu;", report_format); } /** * @brief Return whether a report format is global. * * @param[in] report_format Report format. * * @return 1 if global, else 0. */ int trash_report_format_global (report_format_t report_format) { return sql_int ("SELECT owner is NULL FROM report_formats_trash" " WHERE id = %llu;", report_format); } /** * @brief Return whether a report format is predefined. * * @param[in] report_format Report format. * * @return 1 if predefined, else 0. */ int report_format_predefined (report_format_t report_format) { return sql_int ("SELECT uuid = '5057e5cc-b825-11e4-9d0e-28d24461215b'" " OR uuid = '910200ca-dc05-11e1-954f-406186ea4fc5'" " OR uuid = '5ceff8ba-1f62-11e1-ab9f-406186ea4fc5'" " OR uuid = 'c1645568-627a-11e3-a660-406186ea4fc5'" " OR uuid = '9087b18c-626c-11e3-8892-406186ea4fc5'" " OR uuid = '6c248850-1f62-11e1-b082-406186ea4fc5'" " OR uuid = '77bd6c4a-1f62-11e1-abf0-406186ea4fc5'" " OR uuid = 'a684c02c-b531-11e1-bdc2-406186ea4fc5'" " OR uuid = '9ca6fe72-1f62-11e1-9e7c-406186ea4fc5'" " OR uuid = 'c402cc3e-b531-11e1-9163-406186ea4fc5'" " OR uuid = 'a3810a62-1f62-11e1-9219-406186ea4fc5'" " OR uuid = 'a994b278-1f62-11e1-96ac-406186ea4fc5'" " OR uuid = '9e5e5deb-879e-4ecc-8be6-a71cd0875cdd'" " OR uuid = 'c15ad349-bd8d-457a-880a-c7056532ee15'" " OR uuid = '50c9950a-f326-11e4-800c-28d24461215b'" " FROM report_formats" " WHERE id = %llu;", report_format); } /** * @brief Return whether a report format is global. * * @param[in] report_format Report format. * * @return 1 if global, else 0. */ static int report_format_trash_global (report_format_t report_format) { return sql_int ("SELECT owner is NULL FROM report_formats_trash" " WHERE id = %llu;", report_format); } /** * @brief Return whether a report format is active. * * @param[in] report_format Report format. * * @return -1 on error, 1 if active, else 0. */ int report_format_active (report_format_t report_format) { long long int flag; switch (sql_int64 (&flag, "SELECT flags & %llu FROM report_formats" " WHERE id = %llu;", (long long int) REPORT_FORMAT_FLAG_ACTIVE, report_format)) { case 0: break; case 1: /* Too few rows in result of query. */ return 0; break; default: /* Programming error. */ assert (0); case -1: return -1; break; } return flag ? 1 : 0; } /** * @brief Set the summary of the report format. * * @param[in] report_format The report format. * @param[in] summary Summary. */ void set_report_format_summary (report_format_t report_format, const char *summary) { gchar *quoted_summary = sql_quote (summary); sql ("UPDATE report_formats SET summary = '%s', modification_time = m_now ()" " WHERE id = %llu;", quoted_summary, report_format); g_free (quoted_summary); } /** * @brief Return the type max of a report format param. * * @param[in] report_format Report format. * @param[in] name Name of param. * * @return Param type. */ static report_format_param_type_t report_format_param_type (report_format_t report_format, const char *name) { report_format_param_type_t type; gchar *quoted_name = sql_quote (name); type = (report_format_param_type_t) sql_int ("SELECT type FROM report_format_params" " WHERE report_format = %llu AND name = '%s';", report_format, quoted_name); g_free (quoted_name); return type; } /** * @brief Return the type max of a report format param. * * @param[in] report_format Report format. * @param[in] name Name of param. * * @return Max. */ static long long int report_format_param_type_max (report_format_t report_format, const char *name) { long long int max = 0; gchar *quoted_name = sql_quote (name); /* Assume it's there. */ sql_int64 (&max, "SELECT type_max FROM report_format_params" " WHERE report_format = %llu AND name = '%s';", report_format, quoted_name); g_free (quoted_name); return max; } /** * @brief Return the type min of a report format param. * * @param[in] report_format Report format. * @param[in] name Name of param. * * @return Min. */ static long long int report_format_param_type_min (report_format_t report_format, const char *name) { long long int min = 0; gchar *quoted_name = sql_quote (name); /* Assume it's there. */ sql_int64 (&min, "SELECT type_min FROM report_format_params" " WHERE report_format = %llu AND name = '%s';", report_format, quoted_name); g_free (quoted_name); return min; } /** * @brief Validate a value for a report format param. * * @param[in] report_format Report format. * @param[in] param Param. * @param[in] name Name of param. * @param[in] value Potential value of param. * * @return 0 success, 1 fail. */ static int validate_param_value (report_format_t report_format, report_format_param_t param, const char *name, const char *value) { switch (report_format_param_type (report_format, name)) { case REPORT_FORMAT_PARAM_TYPE_INTEGER: { long long int min, max, actual; min = report_format_param_type_min (report_format, name); /* Simply truncate out of range values. */ actual = strtoll (value, NULL, 0); if (actual < min) return 1; max = report_format_param_type_max (report_format, name); if (actual > max) return 1; } break; case REPORT_FORMAT_PARAM_TYPE_SELECTION: { iterator_t options; int found = 0; init_param_option_iterator (&options, param, 1, NULL); while (next (&options)) if (param_option_iterator_value (&options) && (strcmp (param_option_iterator_value (&options), value) == 0)) { found = 1; break; } cleanup_iterator (&options); if (found) break; return 1; } case REPORT_FORMAT_PARAM_TYPE_STRING: case REPORT_FORMAT_PARAM_TYPE_TEXT: { long long int min, max, actual; min = report_format_param_type_min (report_format, name); actual = strlen (value); if (actual < min) return 1; max = report_format_param_type_max (report_format, name); if (actual > max) return 1; } break; default: break; } return 0; } /** * @brief Set the value of the report format param. * * @param[in] report_format The report format. * @param[in] name Param name. * @param[in] value_64 Param value in base64. * * @return 0 success, 1 failed to find param, 2 validation of value failed, * -1 error. */ int set_report_format_param (report_format_t report_format, const char *name, const char *value_64) { gchar *quoted_name, *quoted_value, *value; gsize value_size; report_format_param_t param; quoted_name = sql_quote (name); sql_begin_immediate (); /* Ensure the param exists. */ switch (sql_int64 (¶m, "SELECT id FROM report_format_params" " WHERE name = '%s';", quoted_name)) { case 0: break; case 1: /* Too few rows in result of query. */ g_free (quoted_name); sql ("ROLLBACK;"); return 1; break; default: /* Programming error. */ assert (0); case -1: g_free (quoted_name); sql ("ROLLBACK;"); return -1; break; } /* Translate the value. */ if (value_64 && strlen (value_64)) value = (gchar*) g_base64_decode (value_64, &value_size); else { value = g_strdup (""); value_size = 0; } /* Validate the value. */ if (validate_param_value (report_format, param, name, value)) { sql ("ROLLBACK;"); g_free (quoted_name); return 2; } quoted_value = sql_quote (value); g_free (value); /* Update the database. */ sql ("UPDATE report_format_params SET value = '%s'" " WHERE report_format = %llu AND name = '%s';", quoted_value, report_format, quoted_name); g_free (quoted_name); g_free (quoted_value); sql ("COMMIT;"); return 0; } /** * @brief Return the trust of a report format. * * @param[in] report_format Report format. * * @return Trust: 1 yes, 2 no, 3 unknown. */ int report_format_trust (report_format_t report_format) { return sql_int ("SELECT trust FROM report_formats WHERE id = %llu;", report_format); } /** * @brief Filter columns for Report Format iterator. */ #define REPORT_FORMAT_ITERATOR_FILTER_COLUMNS \ { ANON_GET_ITERATOR_FILTER_COLUMNS, "name", "extension", "content_type", \ "summary", "description", "trust", "trust_time", "active", NULL } /** * @brief Report Format iterator columns. */ #define REPORT_FORMAT_ITERATOR_COLUMNS \ { \ { "id", NULL }, \ { "uuid", NULL }, \ { "name", NULL }, \ { "''", NULL }, \ { "iso_time (creation_time)", NULL }, \ { "iso_time (modification_time)", NULL }, \ { "creation_time", "created" }, \ { "modification_time", "modified" }, \ { \ "(SELECT name FROM users WHERE users.id = report_formats.owner)", \ "_owner" \ }, \ { "owner", NULL }, \ { "extension", NULL }, \ { "content_type", NULL }, \ { "summary", NULL }, \ { "description", NULL }, \ { "signature", NULL }, \ { "trust", NULL }, \ { "trust_time", NULL }, \ { "flags & 1", "active" }, \ { NULL, NULL } \ } /** * @brief Report Format iterator columns for trash case. */ #define REPORT_FORMAT_ITERATOR_TRASH_COLUMNS \ { \ { "id", NULL }, \ { "uuid", NULL }, \ { "name", NULL }, \ { "''", NULL }, \ { "iso_time (creation_time)", NULL }, \ { "iso_time (modification_time)", NULL }, \ { "creation_time", "created" }, \ { "modification_time", "modified" }, \ { \ "(SELECT name FROM users" \ " WHERE users.id = report_formats_trash.owner)", \ "_owner" \ }, \ { "owner", NULL }, \ { "extension", NULL }, \ { "content_type", NULL }, \ { "summary", NULL }, \ { "description", NULL }, \ { "signature", NULL }, \ { "trust", NULL }, \ { "trust_time", NULL }, \ { "flags & 1", "active" }, \ { NULL, NULL } \ } /** * @brief Count the number of Report Formats. * * @param[in] get GET params. * * @return Total number of Report Formats filtered set. */ int report_format_count (const get_data_t *get) { static const char *filter_columns[] = REPORT_FORMAT_ITERATOR_FILTER_COLUMNS; static column_t columns[] = REPORT_FORMAT_ITERATOR_COLUMNS; static column_t trash_columns[] = REPORT_FORMAT_ITERATOR_TRASH_COLUMNS; return count ("report_format", get, columns, trash_columns, filter_columns, 0, 0, 0, TRUE); } /** * @brief Initialise a Report Format iterator, including observed Report * Formats. * * @param[in] iterator Iterator. * @param[in] get GET data. * * @return 0 success, 1 failed to find Report Format, 2 failed to find filter, * -1 error. */ int init_report_format_iterator (iterator_t* iterator, const get_data_t *get) { static const char *filter_columns[] = REPORT_FORMAT_ITERATOR_FILTER_COLUMNS; static column_t columns[] = REPORT_FORMAT_ITERATOR_COLUMNS; static column_t trash_columns[] = REPORT_FORMAT_ITERATOR_TRASH_COLUMNS; return init_get_iterator (iterator, "report_format", get, columns, trash_columns, filter_columns, 0, NULL, NULL, TRUE); } /** * @brief Get the extension from a report format iterator. * * @param[in] iterator Iterator. * * @return Extension, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (report_format_iterator_extension, GET_ITERATOR_COLUMN_COUNT); /** * @brief Get the content type from a report format iterator. * * @param[in] iterator Iterator. * * @return Content type, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (report_format_iterator_content_type, GET_ITERATOR_COLUMN_COUNT + 1); /** * @brief Get the summary from a report format iterator. * * @param[in] iterator Iterator. * * @return Summary, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (report_format_iterator_summary, GET_ITERATOR_COLUMN_COUNT + 2); /** * @brief Get the description from a report format iterator. * * @param[in] iterator Iterator. * * @return Description, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (report_format_iterator_description, GET_ITERATOR_COLUMN_COUNT + 3); /** * @brief Get the signature from a report format iterator. * * @param[in] iterator Iterator. * * @return Signature, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (report_format_iterator_signature, GET_ITERATOR_COLUMN_COUNT + 4); /** * @brief Get the trust value from a report format iterator. * * @param[in] iterator Iterator. * * @return Trust value. */ const char* report_format_iterator_trust (iterator_t* iterator) { if (iterator->done) return NULL; switch (iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 5)) { case 1: return "yes"; case 2: return "no"; case 3: return "unknown"; default: return NULL; } } /** * @brief Get the trust time from a report format iterator. * * @param[in] iterator Iterator. * * @return Time report format was verified. */ time_t report_format_iterator_trust_time (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = (time_t) iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 6); return ret; } /** * @brief Get the active flag from a report format iterator. * * @param[in] iterator Iterator. * * @return Active flag, or -1 if iteration is complete. */ int report_format_iterator_active (iterator_t* iterator) { if (iterator->done) return -1; return (iterator_int64 (iterator, GET_ITERATOR_COLUMN_COUNT + 7) & REPORT_FORMAT_FLAG_ACTIVE) ? 1 : 0; } /** * @brief Initialise a Report Format alert iterator. * * Iterates over all alerts that use the Report Format. * * @param[in] iterator Iterator. * @param[in] report_format Report Format. */ void init_report_format_alert_iterator (iterator_t* iterator, report_format_t report_format) { gchar *available; get_data_t get; array_t *permissions; assert (report_format); get.trash = 0; permissions = make_array (); array_add (permissions, g_strdup ("get_alerts")); available = where_owned ("alert", &get, 1, "any", 0, permissions); array_free (permissions); init_iterator (iterator, "SELECT DISTINCT alerts.name, alerts.uuid, %s" " FROM alerts, alert_method_data" " WHERE alert_method_data.data = '%s'" " AND alert_method_data.alert = alerts.id" " ORDER BY alerts.name ASC;", available, report_format_uuid (report_format)); g_free (available); } /** * @brief Get the name from a report_format_alert iterator. * * @param[in] iterator Iterator. * * @return The name of the Report Format, or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (report_format_alert_iterator_name, 0); /** * @brief Get the UUID from a report_format_alert iterator. * * @param[in] iterator Iterator. * * @return The UUID of the Report Format, or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (report_format_alert_iterator_uuid, 1); /** * @brief Get the read permission status from a GET iterator. * * @param[in] iterator Iterator. * * @return 1 if may read, else 0. */ int report_format_alert_iterator_readable (iterator_t* iterator) { if (iterator->done) return 0; return iterator_int (iterator, 2); } /** * @brief Initialise a report format iterator. * * @param[in] iterator Iterator. * @param[in] report_format Single report_format to iterate over, or 0 for all. * @param[in] trash Whether to iterate over trashcan report formats. * @param[in] ascending Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "id". */ void init_report_format_param_iterator (iterator_t* iterator, report_format_t report_format, int trash, int ascending, const char* sort_field) { if (report_format) init_iterator (iterator, "SELECT id, name, value, type, type_min, type_max," " type_regex, fallback" " FROM report_format_params%s" " WHERE report_format = %llu" " ORDER BY %s %s;", trash ? "_trash" : "", report_format, sort_field ? sort_field : "id", ascending ? "ASC" : "DESC"); else init_iterator (iterator, "SELECT id, name, value, type, type_min, type_max," " type_regex, fallback" " FROM report_format_params%s" " ORDER BY %s %s;", trash ? "_trash" : "", sort_field ? sort_field : "id", ascending ? "ASC" : "DESC"); } /** * @brief Get the report format param from a report format param iterator. * * @param[in] iterator Iterator. * * @return Report format param. */ report_format_param_t report_format_param_iterator_param (iterator_t* iterator) { if (iterator->done) return 0; return (report_format_param_t) iterator_int64 (iterator, 0); } /** * @brief Get the name from a report format param iterator. * * @param[in] iterator Iterator. * * @return Name, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (report_format_param_iterator_name, 1); /** * @brief Get the value from a report format param iterator. * * @param[in] iterator Iterator. * * @return Value, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (report_format_param_iterator_value, 2); /** * @brief Get the name of the type of a report format param iterator. * * @param[in] iterator Iterator. * * @return Static string naming type, or NULL if iteration is complete. */ const char * report_format_param_iterator_type_name (iterator_t* iterator) { if (iterator->done) return NULL; return report_format_param_type_name (iterator_int (iterator, 3)); } /** * @brief Get the type from a report format param iterator. * * @param[in] iterator Iterator. * * @return Type. */ report_format_param_type_t report_format_param_iterator_type (iterator_t* iterator) { if (iterator->done) return -1; return iterator_int (iterator, 3); } /** * @brief Get the type min from a report format param iterator. * * @param[in] iterator Iterator. * * @return Type min. */ long long int report_format_param_iterator_type_min (iterator_t* iterator) { if (iterator->done) return -1; return iterator_int64 (iterator, 4); } /** * @brief Get the type max from a report format param iterator. * * @param[in] iterator Iterator. * * @return Type max. */ long long int report_format_param_iterator_type_max (iterator_t* iterator) { if (iterator->done) return -1; return iterator_int64 (iterator, 5); } /** * @brief Get the type regex from a report format param iterator. * * @param[in] iterator Iterator. * * @return Type regex, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (report_format_param_iterator_type_regex, 6); /** * @brief Get the default from a report format param iterator. * * @param[in] iterator Iterator. * * @return Default, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (report_format_param_iterator_fallback, 7); /** * @brief Initialise a report format param option iterator. * * @param[in] iterator Iterator. * @param[in] report_format_param Param whose options to iterate over. * @param[in] ascending Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "id". */ void init_param_option_iterator (iterator_t* iterator, report_format_param_t report_format_param, int ascending, const char *sort_field) { init_iterator (iterator, "SELECT id, value" " FROM report_format_param_options" " WHERE report_format_param = %llu" " ORDER BY %s %s;", report_format_param, sort_field ? sort_field : "id", ascending ? "ASC" : "DESC"); } /** * @brief Get the value from a report format param option iterator. * * @param[in] iterator Iterator. * * @return Value, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (param_option_iterator_value, 1); /* Slaves. */ /** * @brief Find a slave given a UUID. * * @param[in] uuid UUID of slave. * @param[out] slave Slave return, 0 if succesfully failed to find slave. * * @return FALSE on success (including if failed to find slave), TRUE on error. */ gboolean find_slave (const char* uuid, slave_t* slave) { return find_resource ("slave", uuid, slave); } /** * @brief Find a slave for a specific permission, given a UUID. * * @param[in] uuid UUID of slave. * @param[out] slave Slave return, 0 if succesfully failed to find slave. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find slave), TRUE on error. */ gboolean find_slave_with_permission (const char* uuid, slave_t* slave, const char *permission) { return find_resource_with_permission ("slave", uuid, slave, permission, 0); } /** * @brief Create a slave. * * @param[in] name Name of slave. * @param[in] comment Comment on slave. * @param[in] host Host of slave. * @param[in] port Port on host. * @param[in] login Host login name. * @param[in] password Password for \p login. * @param[out] slave NULL, or address for created slave. * * @return 0 success, 1 slave exists already, 99 permission denied, -1 error. */ int create_slave (const char* name, const char* comment, const char* host, const char* port, const char* login, const char* password, slave_t* slave) { gchar *quoted_name, *quoted_host, *quoted_port, *quoted_login; gchar *quoted_password; assert (name); assert (host); assert (port); assert (login); assert (password); assert (current_credentials.uuid); sql_begin_immediate (); if (user_may ("create_slave") == 0) { sql ("ROLLBACK;"); return 99; } /* Check whether a slave with the same name exists already. */ if (resource_with_name_exists (name, "slave", 0)) { sql ("ROLLBACK;"); return 1; } quoted_name = sql_quote (name); quoted_host = sql_quote (host); quoted_port = sql_quote (port); quoted_login = sql_quote (login); quoted_password = sql_quote (password); if (comment) { gchar *quoted_comment = sql_quote (comment); sql ("INSERT INTO slaves" " (uuid, name, owner, comment, host, port, login, password," " creation_time, modification_time)" " VALUES (make_uuid (), '%s'," " (SELECT id FROM users WHERE users.uuid = '%s')," " '%s', '%s', '%s', '%s', '%s', m_now (), m_now ());", quoted_name, current_credentials.uuid, quoted_comment, quoted_host, quoted_port, quoted_login, quoted_password); g_free (quoted_comment); } else sql ("INSERT INTO slaves" " (uuid, name, owner, comment, host, port, login, password," " creation_time, modification_time)" " VALUES (make_uuid (), '%s'," " (SELECT id FROM users WHERE users.uuid = '%s')," " '%s', '', '%s', '%s', '%s', m_now (), m_now ());", quoted_name, current_credentials.uuid, quoted_host, quoted_port, quoted_login, quoted_password); if (slave) *slave = sql_last_insert_id (); g_free (quoted_name); g_free (quoted_host); g_free (quoted_port); g_free (quoted_login); g_free (quoted_password); sql ("COMMIT;"); return 0; } /** * @brief Create a slave from an existing slave. * * @param[in] name Name of new slave. NULL to copy from existing. * @param[in] comment Comment on new slave. NULL to copy from * existing. * @param[in] slave_id UUID of existing slave. * @param[out] new_slave New slave. * * @return 0 success, 1 slave exists already, 2 failed to find existing slave, * -1 error. */ int copy_slave (const char* name, const char* comment, const char *slave_id, slave_t* new_slave) { return copy_resource ("slave", name, comment, slave_id, "host, port, login, password", 1, new_slave); } /** * @brief Modify a slave. * * @param[in] slave_id UUID of slave. * @param[in] name Name of slave. * @param[in] comment Comment on slave. * @param[in] host Host of slave. * @param[in] port Port on host. * @param[in] login Host login name. * @param[in] password Password for \p login. * * @return 0 success, 1 failed to find slave, 2 slave with new name exists, * 3 slave_id required, 99 permission denied, -1 internal error. */ int modify_slave (const char *slave_id, const char *name, const char *comment, const char *host, const char *port, const char *login, const char *password) { gchar *quoted_name, *quoted_comment, *quoted_host, *quoted_port; gchar *quoted_login, *quoted_password; slave_t slave; if (slave_id == NULL) return 3; sql_begin_immediate (); assert (current_credentials.uuid); if (user_may ("modify_slave") == 0) { sql ("ROLLBACK;"); return 99; } slave = 0; if (find_slave_with_permission (slave_id, &slave, "modify_slave")) { sql ("ROLLBACK;"); return -1; } if (slave == 0) { sql ("ROLLBACK;"); return 1; } /* Check whether a slave with the same name exists already. */ if (name) { if (resource_with_name_exists (name, "slave", slave)) { sql ("ROLLBACK;"); return 2; } } quoted_name = sql_quote(name ?: ""); quoted_comment = sql_quote (comment ? comment : ""); quoted_host = sql_quote (host ? host : ""); quoted_port = sql_quote (port ? port : ""); quoted_login = sql_quote (login ? login : ""); quoted_password = sql_quote (password ? password : ""); sql ("UPDATE slaves SET" " name = '%s'," " comment = '%s'," " host = '%s'," " port = '%s'," " login = '%s'," " password = '%s'," " modification_time = m_now ()" " WHERE id = %llu;", quoted_name, quoted_comment, quoted_host, quoted_port, quoted_login, quoted_password, slave); g_free (quoted_comment); g_free (quoted_name); g_free (quoted_host); g_free (quoted_port); g_free (quoted_login); g_free (quoted_password); sql ("COMMIT;"); return 0; } /** * @brief Delete a slave. * * @param[in] slave_id UUID of slave. * @param[in] ultimate Whether to remove entirely, or to trashcan. * * @return 0 success, 1 fail because a task refers to the slave, 2 failed to * find agent, 99 permission denied, -1 error. */ int delete_slave (const char *slave_id, int ultimate) { slave_t slave = 0; sql_begin_immediate (); if (user_may ("delete_slave") == 0) { sql ("ROLLBACK;"); return 99; } if (find_slave_with_permission (slave_id, &slave, "delete_slave")) { sql ("ROLLBACK;"); return -1; } if (slave == 0) { if (find_trash ("slave", slave_id, &slave)) { sql ("ROLLBACK;"); return -1; } if (slave == 0) { sql ("ROLLBACK;"); return 2; } if (ultimate == 0) { /* It's already in the trashcan. */ sql ("COMMIT;"); return 0; } /* Check if it's in use by a task in the trashcan. */ if (sql_int ("SELECT count(*) FROM tasks" " WHERE slave = %llu" " AND slave_location = " G_STRINGIFY (LOCATION_TRASH) ";", slave)) { sql ("ROLLBACK;"); return 1; } permissions_set_orphans ("slave", slave, LOCATION_TRASH); tags_set_orphans ("slave", slave, LOCATION_TRASH); sql ("DELETE FROM slaves_trash WHERE id = %llu;", slave); sql ("COMMIT;"); return 0; } if (ultimate == 0) { if (sql_int ("SELECT count(*) FROM tasks" " WHERE slave = %llu" " AND slave_location = " G_STRINGIFY (LOCATION_TABLE) " AND (hidden = 0 OR hidden = 1);", slave)) { sql ("ROLLBACK;"); return 1; } sql ("INSERT INTO slaves_trash" " (uuid, owner, name, comment, host, port, login, password," " creation_time, modification_time)" " SELECT" " uuid, owner, name, comment, host, port, login, password," " creation_time, modification_time" " FROM slaves WHERE id = %llu;", slave); /* Update the location of the slave in any trashcan tasks. */ sql ("UPDATE tasks" " SET slave = %llu," " slave_location = " G_STRINGIFY (LOCATION_TRASH) " WHERE slave = %llu" " AND slave_location = " G_STRINGIFY (LOCATION_TABLE) ";", sql_last_insert_id (), slave); permissions_set_locations ("slave", slave, sql_last_insert_id (), LOCATION_TRASH); tags_set_locations ("slave", slave, sql_last_insert_id (), LOCATION_TRASH); } else if (sql_int ("SELECT count(*) FROM tasks" " WHERE slave = %llu" " AND slave_location = " G_STRINGIFY (LOCATION_TABLE), slave)) { sql ("ROLLBACK;"); return 1; } else { permissions_set_orphans ("slave", slave, LOCATION_TABLE); tags_set_orphans ("slave", slave, LOCATION_TABLE); } sql ("DELETE FROM slaves WHERE id = %llu;", slave); sql ("COMMIT;"); return 0; } /** * @brief Return whether a slave is writable. * * @param[in] slave Slave. * * @return 1 if writable, else 0. */ int slave_writable (slave_t slave) { return 1; } /** * @brief Return whether a trashcan slave is writable. * * @param[in] slave Slave. * * @return 1 if writable, else 0. */ int trash_slave_writable (slave_t slave) { return 1; } /** * @brief Return whether a trashcan slave is readable. * * @param[in] slave Slave. * * @return 1 if readable, else 0. */ int trash_slave_readable (slave_t slave) { char *uuid; slave_t found; if (slave == 0) return 0; uuid = slave_uuid (slave); if (find_trash ("slave", uuid, &found)) { g_free (uuid); return 0; } g_free (uuid); return found > 0; } /** * @brief Filter columns for slave iterator. */ #define SLAVE_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "host", "port", "login", NULL } /** * @brief Slave iterator columns. */ #define SLAVE_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS (slaves), \ { "host", NULL }, \ { "port", NULL }, \ { "login", NULL }, \ { NULL, NULL } \ } /** * @brief Slave iterator columns for trash case. */ #define SLAVE_ITERATOR_TRASH_COLUMNS \ { \ GET_ITERATOR_COLUMNS (slaves_trash), \ { "host", NULL }, \ { "port", NULL }, \ { "login", NULL }, \ { NULL, NULL } \ } /** * @brief Count the number of slaves. * * @param[in] get GET params. * * @return Total number of slaves filtered set. */ int slave_count (const get_data_t *get) { static const char *filter_columns[] = SLAVE_ITERATOR_FILTER_COLUMNS; static column_t columns[] = SLAVE_ITERATOR_COLUMNS; static column_t trash_columns[] = SLAVE_ITERATOR_TRASH_COLUMNS; return count ("slave", get, columns, trash_columns, filter_columns, 0, 0, 0, TRUE); } /** * @brief Initialise a slave iterator. * * @param[in] iterator Iterator. * @param[in] get GET data. * * @return 0 success, 1 failed to find slave, failed to find filter, * -1 error. */ int init_slave_iterator (iterator_t* iterator, const get_data_t *get) { static const char *filter_columns[] = SLAVE_ITERATOR_FILTER_COLUMNS; static column_t columns[] = SLAVE_ITERATOR_COLUMNS; static column_t trash_columns[] = SLAVE_ITERATOR_TRASH_COLUMNS; return init_get_iterator (iterator, "slave", get, columns, trash_columns, filter_columns, 0, NULL, NULL, TRUE); } /** * @brief Get the host of the slave from a slave iterator. * * @param[in] iterator Iterator. * * @return Host of the slave or NULL if iteration is complete. */ DEF_ACCESS (slave_iterator_host, GET_ITERATOR_COLUMN_COUNT); /** * @brief Get the port of the slave from a slave iterator. * * @param[in] iterator Iterator. * * @return Port of the slave or NULL if iteration is complete. */ DEF_ACCESS (slave_iterator_port, GET_ITERATOR_COLUMN_COUNT + 1); /** * @brief Get the login of the slave from a slave iterator. * * @param[in] iterator Iterator. * * @return Login of the slave or NULL if iteration is complete. */ DEF_ACCESS (slave_iterator_login, GET_ITERATOR_COLUMN_COUNT + 2); /** * @brief Return the UUID of a slave. * * @param[in] slave Slave. * * @return Newly allocated UUID if available, else NULL. */ char* slave_uuid (slave_t slave) { return sql_string ("SELECT uuid FROM slaves WHERE id = %llu;", slave); } /** * @brief Return the UUID of a slave in the trashcan. * * @param[in] slave Slave. * * @return Newly allocated UUID if available, else NULL. */ char* trash_slave_uuid (slave_t slave) { return sql_string ("SELECT uuid FROM slaves_trash WHERE id = %llu;", slave); } /** * @brief Return the name of a slave. * * @param[in] slave Slave. * * @return Newly allocated name if available, else NULL. */ char* slave_name (slave_t slave) { return sql_string ("SELECT name FROM slaves WHERE id = %llu;", slave); } /** * @brief Return the name of a slave in the trashcan. * * @param[in] slave Slave. * * @return Newly allocated name if available, else NULL. */ char* trash_slave_name (slave_t slave) { return sql_string ("SELECT name FROM slaves_trash WHERE id = %llu;", slave); } /** * @brief Return the host associated with a slave. * * @param[in] slave Slave. * * @return Newly allocated host if available, else NULL. */ char* slave_host (slave_t slave) { return sql_string ("SELECT host FROM slaves WHERE id = %llu;", slave); } /** * @brief Return the login associated with a slave. * * @param[in] slave Slave. * * @return Newly allocated login if available, else NULL. */ char* slave_login (slave_t slave) { return sql_string ("SELECT login FROM slaves WHERE id = %llu;", slave); } /** * @brief Return the password associated with a slave. * * @param[in] slave Slave. * * @return Newly allocated password if available, else NULL. */ char* slave_password (slave_t slave) { return sql_string ("SELECT password FROM slaves WHERE id = %llu;", slave); } /** * @brief Return the port associated with a slave. * * @param[in] slave Slave. * * @return Port number on success; -1 on error. */ int slave_port (slave_t slave) { int ret; char *port = sql_string ("SELECT port FROM slaves WHERE id = %llu;", slave); if (port == NULL) return -1; ret = atoi (port); free (port); return ret; } /** * @brief Return whether a slave is referenced by a task * * @param[in] slave Slave. * * @return 1 if in use, else 0. */ int slave_in_use (slave_t slave) { return !!sql_int ("SELECT count(*) FROM tasks" " WHERE slave = %llu AND hidden = 0;", slave); } /** * @brief Return whether a slave is referenced by a task * * @param[in] slave Slave. * * @return 1 if in use, else 0. */ int trash_slave_in_use (slave_t slave) { return !!sql_int ("SELECT count(*) FROM tasks" " WHERE slave = %llu" " AND slave_location = " G_STRINGIFY (LOCATION_TRASH), slave); } /** * @brief Initialise a slave task iterator. * * Iterates over all tasks that use the slave. * * @param[in] iterator Iterator. * @param[in] slave Slave. */ void init_slave_task_iterator (iterator_t* iterator, slave_t slave) { gchar *available; get_data_t get; array_t *permissions; assert (current_credentials.uuid); get.trash = 0; permissions = make_array (); array_add (permissions, g_strdup ("get_tasks")); available = where_owned ("task", &get, 1, "any", 0, permissions); array_free (permissions); init_iterator (iterator, "SELECT id, uuid, name, %s FROM tasks" " WHERE slave = %llu AND hidden = 0" " ORDER BY name ASC;", available, slave, current_credentials.uuid); g_free (available); } /** * @brief Get the name from a slave task iterator. * * @param[in] iterator Iterator. * * @return The name of the host, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (slave_task_iterator_name, 2); /** * @brief Get the uuid from a slave task iterator. * * @param[in] iterator Iterator. * * @return The uuid of the host, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (slave_task_iterator_uuid, 1); /** * @brief Get the read permission status from a GET iterator. * * @param[in] iterator Iterator. * * @return 1 if may read, else 0. */ int slave_task_iterator_readable (iterator_t* iterator) { if (iterator->done) return 0; return iterator_int (iterator, 3); } /** * @brief Update the local task from the slave task. * * @param[in] task The local task. * @param[in] get_report Slave GET_REPORT response. * @param[out] report Report from get_report. * @param[out] next_result Next result counter. * * @return 0 success, -1 error. */ int update_from_slave (task_t task, entity_t get_report, entity_t *report, int *next_result) { entity_t entity, host_start, start; entities_t results, hosts, entities; entity = entity_child (get_report, "report"); if (entity == NULL) return -1; *report = entity_child (entity, "report"); if (*report == NULL) return -1; /* Set the scan start time. */ entities = (*report)->entities; while ((start = first_entity (entities))) { if (strcmp (entity_name (start), "scan_start") == 0) { set_task_start_time (current_scanner_task, g_strdup (entity_text (start))); set_scan_start_time (current_report, entity_text (start)); break; } entities = next_entities (entities); } /* Get any new results and hosts from the slave. */ hosts = (*report)->entities; while ((host_start = first_entity (hosts))) { if (strcmp (entity_name (host_start), "host_start") == 0) { entity_t host; host = entity_child (host_start, "host"); if (host == NULL) return -1; set_scan_host_start_time (current_report, entity_text (host), entity_text (host_start)); } hosts = next_entities (hosts); } entity = entity_child (*report, "results"); if (entity == NULL) return -1; assert (current_report); sql_begin_immediate (); results = entity->entities; while ((entity = first_entity (results))) { if (strcmp (entity_name (entity), "result") == 0) { entity_t host, port, nvt, threat, description; const char *oid; host = entity_child (entity, "host"); if (host == NULL) goto rollback_fail; port = entity_child (entity, "port"); if (port == NULL) goto rollback_fail; nvt = entity_child (entity, "nvt"); if (nvt == NULL) goto rollback_fail; oid = entity_attribute (nvt, "oid"); if ((oid == NULL) || (strlen (oid) == 0)) goto rollback_fail; threat = entity_child (entity, "threat"); if (threat == NULL) goto rollback_fail; description = entity_child (entity, "description"); if (description == NULL) goto rollback_fail; { result_t result; result = make_result (task, entity_text (host), entity_text (port), oid, threat_message_type (entity_text (threat)), entity_text (description)); if (current_report) report_add_result (current_report, result); } (*next_result)++; } results = next_entities (results); } sql ("COMMIT;"); return 0; rollback_fail: sql ("ROLLBACK;"); return -1; } /* Groups. */ /** * @brief Find a group given a UUID. * * @param[in] uuid UUID of group. * @param[out] group Group return, 0 if succesfully failed to find group. * * @return FALSE on success (including if failed to find group), TRUE on * error. */ gboolean find_group (const char* uuid, group_t* group) { return find_resource ("group", uuid, group); } /** * @brief Find a group for a specific permission, given a UUID. * * @param[in] uuid UUID of group. * @param[out] group Group return, 0 if succesfully failed to find group. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find group), TRUE on error. */ gboolean find_group_with_permission (const char* uuid, group_t* group, const char *permission) { return find_resource_with_permission ("group", uuid, group, permission, 0); } /** * @brief Create a group from an existing group. * * @param[in] name Name of new group. NULL to copy from existing. * @param[in] comment Comment on new group. NULL to copy from existing. * @param[in] group_id UUID of existing group. * @param[out] new_group_return New group. * * @return 0 success, 1 group exists already, 2 failed to find existing * group, 99 permission denied, -1 error. */ int copy_group (const char *name, const char *comment, const char *group_id, group_t *new_group_return) { int ret; group_t new, old; sql_begin_immediate (); ret = copy_resource_lock ("group", name, comment, group_id, NULL, 1, &new, &old); if (ret) { sql ("ROLLBACK;"); return ret; } sql ("INSERT INTO group_users (\"group\", \"user\")" " SELECT %llu, \"user\" FROM group_users" " WHERE \"group\" = %llu;", new, old); sql ("COMMIT;"); if (new_group_return) *new_group_return = new; return 0; } /** * @brief Add users to a group. * * Caller must take care of transaction. * * @param[in] type Type. * @param[in] resource Group or role. * @param[in] users List of users. * * @return 0 success, 2 failed to find user, 4 user name validation failed, * 99 permission denied, -1 error. */ static int add_users (const gchar *type, resource_t resource, const char *users) { if (users) { gchar **split, **point; GList *added; /* Add each user. */ added = NULL; split = g_strsplit_set (users, " ,", 0); point = split; while (*point) { user_t user; gchar *name; name = *point; g_strstrip (name); if (strcmp (name, "") == 0) { point++; continue; } if (g_list_find_custom (added, name, (GCompareFunc) strcmp)) { point++; continue; } added = g_list_prepend (added, name); if (openvas_user_exists (name) == 0) { g_list_free (added); g_strfreev (split); return 2; } if (find_user_by_name (name, &user)) { g_list_free (added); g_strfreev (split); return -1; } if (user == 0) { gchar *uuid; /** @todo Similar to validate_user in openvas-administrator. */ if (g_regex_match_simple ("^[[:alnum:]-_]+$", name, 0, 0) == 0) { g_list_free (added); g_strfreev (split); return 4; } uuid = openvas_user_uuid (name); if (uuid == NULL) { g_list_free (added); g_strfreev (split); return -1; } if (sql_int ("SELECT count(*) FROM users WHERE uuid = '%s';", uuid) == 0) { gchar *quoted_name; quoted_name = sql_quote (name); sql ("INSERT INTO users" " (uuid, name, creation_time, modification_time)" " VALUES" " ('%s', '%s', m_now (), m_now ());", uuid, quoted_name); g_free (quoted_name); user = sql_last_insert_id (); } else { /* find_user_by_name should have found it. */ assert (0); g_free (uuid); g_list_free (added); g_strfreev (split); return -1; } g_free (uuid); } if (find_user_by_name_with_permission (name, &user, "get_users")) { g_list_free (added); g_strfreev (split); return -1; } if (user == 0) { g_list_free (added); g_strfreev (split); return 99; } sql ("INSERT INTO %s_users (\"%s\", \"user\") VALUES (%llu, %llu);", type, type, resource, user); point++; } g_list_free (added); g_strfreev (split); } return 0; } /** * @brief Create a group. * * @param[in] group_name Group name. * @param[in] comment Comment on group. * @param[in] users Users group applies to. * @param[out] group Group return. * * @return 0 success, 1 group exists already, 2 failed to find user, 4 user * name validation failed, 99 permission denied, -1 error. */ int create_group (const char *group_name, const char *comment, const char *users, group_t* group) { int ret; gchar *quoted_group_name, *quoted_comment; assert (current_credentials.uuid); assert (group_name); assert (group); sql_begin_immediate (); if (user_may ("create_group") == 0) { sql ("ROLLBACK;"); return 99; } if (resource_with_name_exists (group_name, "group", 0)) { sql ("ROLLBACK;"); return 1; } quoted_group_name = sql_quote (group_name); quoted_comment = comment ? sql_quote (comment) : g_strdup (""); sql ("INSERT INTO groups" " (uuid, name, owner, comment, creation_time, modification_time)" " VALUES" " (make_uuid (), '%s'," " (SELECT id FROM users WHERE uuid = '%s')," " '%s', m_now (), m_now ());", quoted_group_name, current_credentials.uuid, quoted_comment); g_free (quoted_comment); g_free (quoted_group_name); *group = sql_last_insert_id (); ret = add_users ("group", *group, users); if (ret) sql ("ROLLBACK;"); else sql ("COMMIT;"); return ret; } /** * @brief Delete a group. * * @param[in] group_id UUID of group. * @param[in] ultimate Whether to remove entirely, or to trashcan. * * @return 0 success, 1 fail because a permission refers to the group, 2 failed * to find group, 3 predefined group, 99 permission denied, -1 error. */ int delete_group (const char *group_id, int ultimate) { group_t group = 0; sql_begin_immediate (); if (user_may ("delete_group") == 0) { sql ("ROLLBACK;"); return 99; } if (find_group_with_permission (group_id, &group, "delete_group")) { sql ("ROLLBACK;"); return -1; } if (group == 0) { if (find_trash ("group", group_id, &group)) { sql ("ROLLBACK;"); return -1; } if (group == 0) { sql ("ROLLBACK;"); return 2; } if (ultimate == 0) { /* It's already in the trashcan. */ sql ("COMMIT;"); return 0; } if (trash_group_in_use (group)) { sql ("ROLLBACK;"); return 1; } sql ("DELETE FROM permissions" " WHERE resource_type = 'group'" " AND resource = %llu" " AND resource_location = " G_STRINGIFY (LOCATION_TRASH) ";", group); sql ("DELETE FROM permissions_trash" " WHERE resource_type = 'group'" " AND resource = %llu" " AND resource_location = " G_STRINGIFY (LOCATION_TRASH) ";", group); sql ("DELETE FROM permissions" " WHERE subject_type = 'group'" " AND subject = %llu" " AND subject_location = " G_STRINGIFY (LOCATION_TRASH) ";", group); sql ("DELETE FROM permissions_trash" " WHERE subject_type = 'group'" " AND subject = %llu" " AND subject_location = " G_STRINGIFY (LOCATION_TRASH) ";", group); tags_set_orphans ("group", group, LOCATION_TRASH); sql ("DELETE FROM group_users_trash WHERE \"group\" = %llu;", group); sql ("DELETE FROM groups_trash WHERE id = %llu;", group); sql ("COMMIT;"); return 0; } if (group_in_use (group)) { sql ("ROLLBACK;"); return 1; } if (ultimate == 0) { group_t trash_group; sql ("INSERT INTO groups_trash" " (uuid, owner, name, comment, creation_time, modification_time)" " SELECT uuid, owner, name, comment, creation_time," " modification_time" " FROM groups WHERE id = %llu;", group); trash_group = sql_last_insert_id (); sql ("INSERT INTO group_users_trash" " (\"group\", \"user\")" " SELECT %llu, \"user\"" " FROM group_users WHERE \"group\" = %llu;", trash_group, group); permissions_set_locations ("group", group, trash_group, LOCATION_TRASH); tags_set_locations ("group", group, trash_group, LOCATION_TRASH); permissions_set_subjects ("group", group, trash_group, LOCATION_TRASH); } else { sql ("DELETE FROM permissions" " WHERE resource_type = 'group'" " AND resource = %llu" " AND resource_location = " G_STRINGIFY (LOCATION_TRASH) ";", group); sql ("DELETE FROM permissions_trash" " WHERE resource_type = 'group'" " AND resource = %llu" " AND resource_location = " G_STRINGIFY (LOCATION_TRASH) ";", group); sql ("DELETE FROM permissions" " WHERE subject_type = 'group'" " AND subject = %llu" " AND subject_location = " G_STRINGIFY (LOCATION_TABLE) ";", group); sql ("DELETE FROM permissions_trash" " WHERE subject_type = 'group'" " AND subject = %llu" " AND subject_location = " G_STRINGIFY (LOCATION_TABLE) ";", group); } tags_set_orphans ("group", group, LOCATION_TABLE); sql ("DELETE FROM group_users WHERE \"group\" = %llu;", group); sql ("DELETE FROM groups WHERE id = %llu;", group); sql ("COMMIT;"); return 0; } /** * @brief Return the UUID of a group. * * @param[in] group Group. * * @return Newly allocated UUID if available, else NULL. */ char* group_uuid (group_t group) { return sql_string ("SELECT uuid FROM groups WHERE id = %llu;", group); } /** * @brief Gets users of group as a string. * * @param[in] group Group. * * @return Users. */ gchar * group_users (group_t group) { return sql_string ("SELECT group_concat (name, ', ')" " FROM (SELECT users.name FROM users, group_users" " WHERE group_users.\"group\" = %llu" " AND group_users.user = users.id" " GROUP BY users.name)" " AS sub;", group); } /** * @brief Check whether a group is writable. * * @param[in] group Group. * * @return 1 yes, 0 no. */ int group_writable (group_t group) { return 1; } /** * @brief Check whether a trashcan group is writable. * * @param[in] group Group. * * @return 1 yes, 0 no. */ int trash_group_writable (group_t group) { return 1; } /** * @brief Check whether a group is in use. * * @param[in] group Group. * * @return 1 yes, 0 no. */ int group_in_use (group_t group) { return 0; } /** * @brief Check whether a trashcan group is in use. * * @param[in] group Group. * * @return 1 yes, 0 no. */ int trash_group_in_use (group_t group) { return 0; } /** * @brief Filter columns for group iterator. */ #define GROUP_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, NULL } /** * @brief Group iterator columns. */ #define GROUP_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS (groups), \ { NULL, NULL } \ } /** * @brief Group iterator columns for trash case. */ #define GROUP_ITERATOR_TRASH_COLUMNS \ { \ GET_ITERATOR_COLUMNS (groups_trash), \ { NULL, NULL } \ } /** * @brief Count number of groups. * * @param[in] get GET params. * * @return Total number of groups in grouped set. */ int group_count (const get_data_t *get) { static const char *filter_columns[] = GROUP_ITERATOR_FILTER_COLUMNS; static column_t columns[] = GROUP_ITERATOR_COLUMNS; static column_t trash_columns[] = GROUP_ITERATOR_TRASH_COLUMNS; return count ("group", get, columns, trash_columns, filter_columns, 0, 0, 0, TRUE); } /** * @brief Initialise a group iterator, including observed groups. * * @param[in] iterator Iterator. * @param[in] get GET data. * * @return 0 success, 1 failed to find group, failed to find group (filt_id), * -1 error. */ int init_group_iterator (iterator_t* iterator, const get_data_t *get) { static const char *filter_columns[] = GROUP_ITERATOR_FILTER_COLUMNS; static column_t columns[] = GROUP_ITERATOR_COLUMNS; static column_t trash_columns[] = GROUP_ITERATOR_TRASH_COLUMNS; return init_get_iterator (iterator, "group", get, columns, trash_columns, filter_columns, 0, NULL, NULL, TRUE); } /** * @brief Modify a group. * * @param[in] group_id UUID of group. * @param[in] name Name of group. * @param[in] comment Comment on group. * @param[in] users Group users. * * @return 0 success, 1 failed to find group, 2 failed to find user, 3 group_id * required, 4 user name validation failed, 5 group with new name * exists, 99 permission denied, -1 internal error. */ int modify_group (const char *group_id, const char *name, const char *comment, const char *users) { int ret; gchar *quoted_name, *quoted_comment; group_t group; assert (current_credentials.uuid); if (group_id == NULL) return 3; sql_begin_immediate (); if (user_may ("modify_group") == 0) { sql ("ROLLBACK;"); return 99; } group = 0; if (find_group_with_permission (group_id, &group, "modify_group")) { sql ("ROLLBACK;"); return -1; } if (group == 0) { sql ("ROLLBACK;"); return 1; } /* Check whether a group with the same name exists already. */ if (name) { if (resource_with_name_exists (name, "group", group)) { sql ("ROLLBACK;"); return 5; } } quoted_name = sql_quote(name ?: ""); quoted_comment = sql_quote (comment ? comment : ""); sql ("UPDATE groups SET" " name = '%s'," " comment = '%s'," " modification_time = m_now ()" " WHERE id = %llu;", quoted_name, quoted_comment, group); g_free (quoted_comment); g_free (quoted_name); sql ("DELETE FROM group_users WHERE \"group\" = %llu;", group); ret = add_users ("group", group, users); if (ret) sql ("ROLLBACK;"); else sql ("COMMIT;"); return ret; } /* Permissions. */ /** * @brief Adjust location of resource in permissions. * * @param[in] type Type. * @param[in] old Resource ID in old table. * @param[in] new Resource ID in new table. * @param[in] to Destination, trash or table. */ void permissions_set_locations (const char *type, resource_t old, resource_t new, int to) { sql ("UPDATE permissions SET resource_location = %i, resource = %llu" " WHERE resource_type = '%s' AND resource = %llu" " AND resource_location = %i;", to, new, type, old, to == LOCATION_TABLE ? LOCATION_TRASH : LOCATION_TABLE); sql ("UPDATE permissions_trash SET resource_location = %i, resource = %llu" " WHERE resource_type = '%s' AND resource = %llu" " AND resource_location = %i;", to, new, type, old, to == LOCATION_TABLE ? LOCATION_TRASH : LOCATION_TABLE); } /** * @brief Set permissions to orphan. * * @param[in] type Type. * @param[in] resource Resource ID. * @param[in] location Location: table or trash. */ void permissions_set_orphans (const char *type, resource_t resource, int location) { sql ("UPDATE permissions SET resource = -1" " WHERE resource_type = '%s' AND resource = %llu" " AND resource_location = %i;", type, resource, location); sql ("UPDATE permissions_trash SET resource = -1" " WHERE resource_type = '%s' AND resource = %llu" " AND resource_location = %i;", type, resource, location); } /** * @brief Adjust subject in permissions. * * @param[in] type Subject type. * @param[in] old Resource ID in old table. * @param[in] new Resource ID in new table. * @param[in] to Destination, trash or table. */ void permissions_set_subjects (const char *type, resource_t old, resource_t new, int to) { assert (type && (strcmp (type, "group") == 0 || strcmp (type, "role") == 0)); sql ("UPDATE permissions" " SET subject_location = %i, subject = %llu" " WHERE subject_location = %i" " AND subject_type = '%s'" " AND subject = %llu;", to, new, to == LOCATION_TRASH ? LOCATION_TABLE : LOCATION_TRASH, type, old); sql ("UPDATE permissions_trash" " SET subject_location = %i, subject = %llu" " WHERE subject_location = %i" " AND subject_type = '%s'" " AND subject = %llu;", to, new, to == LOCATION_TRASH ? LOCATION_TABLE : LOCATION_TRASH, type, old); } /** * @brief Find a permission given a UUID. * * @param[in] uuid UUID of permission. * @param[out] permission Permission return, 0 if succesfully failed to find * permission. * * @return FALSE on success (including if failed to find permission), TRUE on * error. */ gboolean find_permission (const char* uuid, permission_t* permission) { return find_resource ("permission", uuid, permission); } /** * @brief Check args for create_permission or modify_permission. * * @param[in] name_arg Name of permission. * @param[in] resource_type_arg Type of resource, for special permissions. * @param[in] resource_id UUID of resource. * @param[in] subject_type Type of subject. * @param[in] subject_id UUID of subject. * @param[out] name Name return. * @param[out] resource Resource return. * @param[out] resource_type Resource type return. * @param[out] resource_id Resource ID return. * @param[out] subject Subject return. * * @return 0 success, 2 failed to find subject, 3 failed to find resource, * 5 error in resource, 6 error in subject, 7 error in name, * 8 permission on permission, 9 permission does not accept resource, * 99 permission denied, -1 error. */ static int check_permission_args (const char *name_arg, const char *resource_type_arg, const char *resource_id_arg, const char *subject_type, const char *subject_id, gchar **name, resource_t *resource, char **resource_type, const char **resource_id, resource_t *subject) { if ((name_arg == NULL) || ((valid_omp_command (name_arg) == 0) && strcasecmp (name_arg, "super")) || (strcasecmp (name_arg, "get_version") == 0)) return 7; if (resource_id_arg && strcmp (resource_id_arg, "") && strcmp (resource_id_arg, "0") && (((omp_command_takes_resource (name_arg) == 0) && strcasecmp (name_arg, "super")))) return 9; if (resource_type_arg && strcmp (resource_type_arg, "group") && strcmp (resource_type_arg, "role") && strcmp (resource_type_arg, "user")) return 5; if (subject_type && strcmp (subject_type, "group") && strcmp (subject_type, "role") && strcmp (subject_type, "user")) return 6; if (subject_id == NULL) /* For now a permission must have a subject. */ return 6; if (subject_id && (subject_type == NULL)) return 6; assert (subject_type); *name = strcasecmp (name_arg, "super") ? g_ascii_strdown (name_arg, -1) : g_strdup ("Super"); *resource = 0; if (resource_id_arg && strcmp (resource_id_arg, "") && strcmp (resource_id_arg, "0")) { *resource_type = strcasecmp (*name, "super") ? omp_command_type (*name) : g_strdup (resource_type_arg); if (*resource_type == NULL) { g_free (*name); return 3; } if (find_resource (*resource_type, resource_id_arg, resource)) { g_free (*name); g_free (*resource_type); return -1; } if (*resource == 0) { g_free (*name); g_free (*resource_type); return 3; } *resource_id = resource_id_arg; } else { *resource_id = NULL; *resource_type = NULL; } if (strcasecmp (*name, "super") == 0) { if (*resource == 0) { g_free (*name); g_free (*resource_type); return 3; } if ((user_is_owner (*resource_type, *resource_id) == 0) && (user_can_super_everyone (current_credentials.uuid) == 0)) { g_free (*name); g_free (*resource_type); return 99; } } /* For simplicity refuse to make permissions on permissions. */ if (*resource && strcasestr (*name, "permission")) { g_free (*name); g_free (*resource_type); return 8; } /* Ensure the user may grant this permission. */ if (((*resource == 0) || strcasecmp (*name, "super") == 0) && (user_can_everything (current_credentials.uuid) == 0)) { g_free (*name); g_free (*resource_type); return 99; } *subject = 0; assert (subject_id); if (*resource) { /* Permission on a particular resource. Only need read access to the * subject. */ if (find_resource_with_permission (subject_type, subject_id, subject, NULL, /* GET permission. */ 0)) /* Trash. */ { g_free (*name); g_free (*resource_type); return -1; } } else { gchar *permission; /* Command level permission. Must have write access to the subject. */ /* However, modification of the predefined roles is forbidden. */ if (subject_id && strcmp (subject_type, "role") == 0 && role_is_predefined_id (subject_id)) return 99; permission = g_strdup_printf ("modify_%s", subject_type); if (find_resource_with_permission (subject_type, subject_id, subject, permission, 0)) /* Trash. */ { g_free (*name); g_free (*resource_type); g_free (permission); return -1; } g_free (permission); } if (*subject == 0) { g_free (*name); g_free (*resource_type); return 2; } return 0; } /** * @brief Create a permission. * * @param[in] name_arg Name of permission. * @param[in] comment Comment on permission. * @param[in] resource_type_arg Type of resource, for special permissions. * @param[in] resource_id_arg UUID of resource. * @param[in] subject_type Type of subject. * @param[in] subject_id UUID of subject. * @param[out] permission Permission. * * @return 0 success, 2 failed to find subject, 3 failed to find resource, * 5 error in resource, 6 error in subject, 7 error in name, * 8 permission on permission, 9 permission does not accept resource, * 99 permission denied, -1 internal error. */ int create_permission (const char *name_arg, const char *comment, const char *resource_type_arg, const char *resource_id_arg, const char *subject_type, const char *subject_id, permission_t *permission) { int ret; gchar *name, *quoted_name, *quoted_comment, *resource_type; resource_t resource, subject; const char *resource_id; assert (current_credentials.uuid); sql_begin_immediate (); if (user_may ("create_permission") == 0) { sql ("ROLLBACK;"); return 99; } ret = check_permission_args (name_arg, resource_type_arg, resource_id_arg, subject_type, subject_id, &name, &resource, &resource_type, &resource_id, &subject); if (ret) { sql ("ROLLBACK;"); return ret; } assert (subject); assert ((resource_id == resource_id_arg) || (resource_id == NULL)); quoted_name = sql_quote (name); g_free (name); quoted_comment = sql_quote (comment ? comment : ""); sql ("INSERT INTO permissions" " (uuid, owner, name, comment, resource_type, resource_uuid, resource," " resource_location, subject_type, subject, subject_location," " creation_time, modification_time)" " VALUES" " (make_uuid ()," " (SELECT id FROM users WHERE users.uuid = '%s')," " '%s', '%s', '%s', '%s', %llu, " G_STRINGIFY (LOCATION_TABLE) "," " %s%s%s, %llu, " G_STRINGIFY (LOCATION_TABLE) ", m_now (), m_now ());", current_credentials.uuid, quoted_name, quoted_comment, resource_id ? resource_type : "", resource_id ? resource_id : "", resource, subject_id ? "'" : "", subject_id ? subject_type : "NULL", subject_id ? "'" : "", subject); g_free (quoted_comment); g_free (quoted_name); g_free (resource_type); if (permission) *permission = sql_last_insert_id (); sql ("COMMIT;"); return 0; } /** * @brief Create a permission from an existing permission. * * @param[in] comment Comment on new permission. NULL to copy from existing. * @param[in] permission_id UUID of existing permission. * @param[out] new_permission New permission. * * @return 0 success, 1 permission exists already, 2 failed to find existing * permission, 99 permission denied, -1 error. */ int copy_permission (const char* comment, const char *permission_id, permission_t* new_permission) { int ret; permission_t permission, new, old; char *subject_type, *name; resource_t subject; sql_begin_immediate (); permission = 0; if (find_permission (permission_id, &permission)) { sql ("ROLLBACK;"); return -1; } if (permission == 0) { sql ("ROLLBACK;"); return 2; } /* Check if the subject is a predefined role. */ subject_type = permission_subject_type (permission); subject = permission_subject (permission); if (subject_type && strcmp (subject_type, "role") == 0 && subject && role_is_predefined (subject)) { free (subject_type); sql ("ROLLBACK;"); return 99; } free (subject_type); /* Refuse to copy Super On Everyone. */ name = permission_name (permission); if ((strcmp (name, "Super") == 0) && (permission_resource (permission) == 0)) { free (name); sql ("ROLLBACK;"); return 99; } free (name); ret = copy_resource_lock ("permission", NULL, comment, permission_id, "resource_type, resource, resource_uuid," " resource_location, subject_type, subject," " subject_location", 0, &new, &old); if (ret) { sql ("ROLLBACK;"); return ret; } sql ("COMMIT;"); if (new_permission) *new_permission = new; return 0; } /** * @brief Return the UUID of a permission. * * @param[in] permission Permission. * * @return Newly allocated UUID if available, else NULL. */ char* permission_uuid (permission_t permission) { return sql_string ("SELECT uuid FROM permissions WHERE id = %llu;", permission); } /** * @brief Return the resource of a permission. * * @param[in] permission Permission. * * @return Resource if there is one, else 0. */ static resource_t permission_resource (permission_t permission) { resource_t resource; sql_int64 (&resource, "SELECT resource FROM permissions WHERE id = %llu;", permission); return resource; } /** * @brief Return the name of a permission. * * @param[in] permission Permission. * * @return Newly allocated name if available, else NULL. */ char * permission_name (permission_t permission) { return sql_string ("SELECT name FROM permissions WHERE id = %llu;", permission); } /** * @brief Return the subject type of a permission. * * @param[in] permission Permission. * * @return Newly allocated subject type if available, else NULL. */ char * permission_subject_type (permission_t permission) { return sql_string ("SELECT subject_type FROM permissions WHERE id = %llu;", permission); } /** * @brief Return the subject of a permission. * * @param[in] permission Permission. * * @return Subject if there is one, else 0. */ resource_t permission_subject (permission_t permission) { resource_t subject; sql_int64 (&subject, "SELECT subject FROM permissions WHERE id = %llu;", permission); return subject; } /** * @brief Return the UUID of the subject of a permission. * * @param[in] permission Permission. * * @return Newly allocated subject ID if available, else NULL. */ char * permission_subject_id (permission_t permission) { return sql_string ("SELECT subject_id FROM permissions WHERE id = %llu;", permission); } /** * @brief Return the resource type of a permission. * * @param[in] permission Permission. * * @return Newly allocated resource type if available, else NULL. */ char * permission_resource_type (permission_t permission) { return sql_string ("SELECT resource_type FROM permissions WHERE id = %llu;", permission); } /** * @brief Return the UUID of the resource of a permission. * * @param[in] permission Permission. * * @return Newly allocated resource ID if available, else NULL. */ char * permission_resource_id (permission_t permission) { return sql_string ("SELECT resource_id FROM permissions WHERE id = %llu;", permission); } /** * @brief Return whether a permission is predefined. * * @param[in] permission Permission. * * @return 1 if predefined, else 0. */ int permission_is_predefined (permission_t permission) { return !!sql_int ("SELECT COUNT (*) FROM permissions" " WHERE id = %llu" " AND (uuid = '" PERMISSION_UUID_ADMIN_EVERYTHING "'" " OR (subject_type = 'role'" " AND resource = 0" " AND subject" " IN (SELECT id FROM roles" " WHERE uuid = '" ROLE_UUID_ADMIN "'" " OR uuid = '" ROLE_UUID_GUEST "'" " OR uuid = '" ROLE_UUID_INFO "'" " OR uuid = '" ROLE_UUID_MONITOR "'" " OR uuid = '" ROLE_UUID_USER "'" " OR uuid = '" ROLE_UUID_SUPER_ADMIN "'" " OR uuid = '" ROLE_UUID_OBSERVER "')))", permission); } /** * @brief Return whether a permission is in use. * * @param[in] permission Permission. * * @return 1 if in use, else 0. */ int permission_in_use (permission_t permission) { return 0; } /** * @brief Return whether a trashcan permission is referenced by a task. * * @param[in] permission Permission. * * @return 1 if in use, else 0. */ int trash_permission_in_use (permission_t permission) { return 0; } /** * @brief Return whether a permission is writable. * * @param[in] permission Permission. * * @return 1 if writable, else 0. */ int permission_writable (permission_t permission) { if (permission_is_predefined (permission)) return 0; return 1; } /** * @brief Return whether a trashcan permission is writable. * * @param[in] permission Permission. * * @return 1 if writable, else 0. */ int trash_permission_writable (permission_t permission) { return 1; } /** * @brief Filter columns for permission iterator. */ #define PERMISSION_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "type", "resource_uuid", "subject_type", \ "_subject", "_resource", "subject_uuid", "orphan", NULL } /** * @brief Permission iterator columns. */ #define PERMISSION_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS (permissions), \ { "resource_type", "type" }, \ { "resource_uuid", NULL }, \ { \ "(CASE" \ " WHEN resource_type = '' OR resource_type IS NULL" \ " THEN ''" \ " ELSE resource_name (resource_type, resource_uuid, resource_location)" \ " END)", \ "_resource" \ }, \ { "resource_location = " G_STRINGIFY (LOCATION_TRASH), NULL }, \ { "resource = -1", "orphan" }, \ { "subject_type", NULL }, \ { \ "(CASE" \ " WHEN subject_type = 'user'" \ " THEN (SELECT uuid FROM users WHERE users.id = subject)" \ " WHEN subject_type = 'group'" \ " AND subject_location = " G_STRINGIFY (LOCATION_TRASH) \ " THEN (SELECT uuid FROM groups_trash" \ " WHERE groups_trash.id = subject)" \ " WHEN subject_type = 'group'" \ " THEN (SELECT uuid FROM groups WHERE groups.id = subject)" \ " WHEN subject_location = " G_STRINGIFY (LOCATION_TRASH) \ " THEN (SELECT uuid FROM roles_trash" \ " WHERE roles_trash.id = subject)" \ " ELSE (SELECT uuid FROM roles WHERE roles.id = subject)" \ " END)", \ "subject_uuid" \ }, \ { \ "(CASE" \ " WHEN subject_type = 'user'" \ " THEN (SELECT name FROM users WHERE users.id = subject)" \ " WHEN subject_type = 'group'" \ " AND subject_location = " G_STRINGIFY (LOCATION_TRASH) \ " THEN (SELECT name FROM groups_trash" \ " WHERE groups_trash.id = subject)" \ " WHEN subject_type = 'group'" \ " THEN (SELECT name FROM groups WHERE groups.id = subject)" \ " WHEN subject_location = " G_STRINGIFY (LOCATION_TRASH) \ " THEN (SELECT name FROM roles_trash" \ " WHERE roles_trash.id = subject)" \ " ELSE (SELECT name FROM roles WHERE roles.id = subject)" \ " END)", \ "_subject" \ }, \ { "subject_location = " G_STRINGIFY (LOCATION_TRASH), NULL }, \ { NULL, NULL } \ } /** * @brief Permission iterator columns for trash case. */ #define PERMISSION_ITERATOR_TRASH_COLUMNS \ { \ GET_ITERATOR_COLUMNS (permissions_trash), \ { "resource_type", "type" }, \ { "resource_uuid", NULL }, \ { \ "(CASE" \ " WHEN resource_type = '' OR resource_type IS NULL" \ " THEN ''" \ " ELSE resource_name (resource_type, resource_uuid, resource_location)" \ " END)", \ "_resource" \ }, \ { "resource_location = " G_STRINGIFY (LOCATION_TRASH), NULL }, \ { "resource = -1", NULL }, \ { "subject_type", NULL }, \ { \ "(CASE" \ " WHEN subject_type = 'user'" \ " THEN (SELECT uuid FROM users WHERE users.id = subject)" \ " WHEN subject_type = 'group'" \ " AND subject_location = " G_STRINGIFY (LOCATION_TRASH) \ " THEN (SELECT uuid FROM groups_trash" \ " WHERE groups_trash.id = subject)" \ " WHEN subject_type = 'group'" \ " THEN (SELECT uuid FROM groups WHERE groups.id = subject)" \ " WHEN subject_location = " G_STRINGIFY (LOCATION_TRASH) \ " THEN (SELECT uuid FROM roles_trash" \ " WHERE roles_trash.id = subject)" \ " ELSE (SELECT uuid FROM roles WHERE roles.id = subject)" \ " END)", \ "subject_uuid" \ }, \ { \ "(CASE" \ " WHEN subject_type = 'user'" \ " THEN (SELECT name FROM users WHERE users.id = subject)" \ " WHEN subject_type = 'group'" \ " AND subject_location = " G_STRINGIFY (LOCATION_TRASH) \ " THEN (SELECT name FROM groups_trash" \ " WHERE groups_trash.id = subject)" \ " WHEN subject_type = 'group'" \ " THEN (SELECT name FROM groups WHERE groups.id = subject)" \ " WHEN subject_location = " G_STRINGIFY (LOCATION_TRASH) \ " THEN (SELECT name FROM roles_trash" \ " WHERE roles_trash.id = subject)" \ " ELSE (SELECT name FROM roles WHERE roles.id = subject)" \ " END)", \ "_subject" \ }, \ { "subject_location = " G_STRINGIFY (LOCATION_TRASH), NULL }, \ { NULL, NULL } \ } /** * @brief Count number of permissions. * * @param[in] get GET params. * * @return Total number of permissions in filtered set. */ int permission_count (const get_data_t *get) { static const char *filter_columns[] = PERMISSION_ITERATOR_FILTER_COLUMNS; static column_t columns[] = PERMISSION_ITERATOR_COLUMNS; static column_t trash_columns[] = PERMISSION_ITERATOR_TRASH_COLUMNS; return count ("permission", get, columns, trash_columns, filter_columns, 0, 0, 0, TRUE); } /** * @brief Initialise a permission iterator. * * @param[in] iterator Iterator. * @param[in] get GET data. * * @return 0 success, 1 failed to find target, 2 failed to find filter, * -1 error. */ int init_permission_iterator (iterator_t* iterator, const get_data_t *get) { static const char *filter_columns[] = PERMISSION_ITERATOR_FILTER_COLUMNS; static column_t columns[] = PERMISSION_ITERATOR_COLUMNS; static column_t trash_columns[] = PERMISSION_ITERATOR_TRASH_COLUMNS; return init_get_iterator (iterator, "permission", get, columns, trash_columns, filter_columns, 0, NULL, NULL, TRUE); } /** * @brief Get the type of resource from a permission iterator. * * @param[in] iterator Iterator. * * @return Type, or NULL if iteration is complete. */ DEF_ACCESS (permission_iterator_resource_type, GET_ITERATOR_COLUMN_COUNT); /** * @brief Get the UUID of the resource from a permission iterator. * * @param[in] iterator Iterator. * * @return UUID, or NULL if iteration is complete. */ DEF_ACCESS (permission_iterator_resource_uuid, GET_ITERATOR_COLUMN_COUNT + 1); /** * @brief Get the name of the resource from a permission iterator. * * @param[in] iterator Iterator. * * @return Name, or NULL if iteration is complete. */ DEF_ACCESS (permission_iterator_resource_name, GET_ITERATOR_COLUMN_COUNT + 2); /** * @brief Return the permission resource location. * * @param[in] iterator Iterator. * * @return Whether the resource is in the trashcan */ int permission_iterator_resource_in_trash (iterator_t* iterator) { if (iterator->done) return 0; return iterator_int64 (iterator, GET_ITERATOR_COLUMN_COUNT + 3); } /** * @brief Check if the permission resource has been deleted. * * @param[in] iterator Iterator. * * @return Whether the resource has been deleted. */ int permission_iterator_resource_orphan (iterator_t* iterator) { if (iterator->done) return 0; return iterator_int64 (iterator, GET_ITERATOR_COLUMN_COUNT + 4); } /** * @brief Get the type of subject from a permission iterator. * * @param[in] iterator Iterator. * * @return Type, or NULL if iteration is complete. */ DEF_ACCESS (permission_iterator_subject_type, GET_ITERATOR_COLUMN_COUNT + 5); /** * @brief Get the subject UUID from a permission iterator. * * @param[in] iterator Iterator. * * @return UUID, or NULL if iteration is complete. */ DEF_ACCESS (permission_iterator_subject_uuid, GET_ITERATOR_COLUMN_COUNT + 6); /** * @brief Get the subject name from a permission iterator. * * @param[in] iterator Iterator. * * @return Name, or NULL if iteration is complete. */ DEF_ACCESS (permission_iterator_subject_name, GET_ITERATOR_COLUMN_COUNT + 7); /** * @brief Return the permission subject location. * * @param[in] iterator Iterator. * * @return Whether the subject is in the trashcan */ int permission_iterator_subject_in_trash (iterator_t* iterator) { if (iterator->done) return 0; return iterator_int64 (iterator, GET_ITERATOR_COLUMN_COUNT + 8); } /** * @brief Find a permission with a given permission, given a UUID. * * @param[in] uuid UUID of permission. * @param[out] resource Permission return, 0 if succesfully failed to find * permission. * @param[in] permission Required permission, for example "delete". * * @return FALSE on success (including if failed to find permission), TRUE on * error. */ gboolean find_permission_with_permission (const char *uuid, permission_t *resource, const char *permission) { gchar *quoted_uuid = sql_quote (uuid); if (user_has_access_uuid ("permission", quoted_uuid, permission, 0) == 0) { g_free (quoted_uuid); *resource = 0; return FALSE; } switch (sql_int64 (resource, "SELECT id FROM permissions WHERE uuid = '%s';", quoted_uuid)) { case 0: break; case 1: /* Too few rows in result of query. */ *resource = 0; break; default: /* Programming error. */ assert (0); case -1: g_free (quoted_uuid); return TRUE; break; } g_free (quoted_uuid); return FALSE; } /** * @brief Delete a permission. * * @param[in] permission_id UUID of permission. * @param[in] ultimate Whether to remove entirely, or to trashcan. * * @return 0 success, 2 failed to find permission, 3 predefined permission, * 99 permission denied, -1 error. */ int delete_permission (const char *permission_id, int ultimate) { permission_t permission = 0; char *subject_type; resource_t subject; if (strcasecmp (permission_id, PERMISSION_UUID_ADMIN_EVERYTHING) == 0) return 3; sql_begin_immediate (); if (user_may ("delete_permission") == 0) { sql ("ROLLBACK;"); return 99; } if (find_permission_with_permission (permission_id, &permission, "delete_permission")) { sql ("ROLLBACK;"); return -1; } if (permission == 0) { if (find_trash ("permission", permission_id, &permission)) { sql ("ROLLBACK;"); return -1; } if (permission == 0) { sql ("ROLLBACK;"); return 2; } if (ultimate == 0) { /* It's already in the trashcan. */ sql ("COMMIT;"); return 0; } tags_set_orphans ("permission", permission, LOCATION_TRASH); sql ("DELETE FROM permissions_trash WHERE id = %llu;", permission); sql ("COMMIT;"); return 0; } /* Check if the subject is a predefined role. */ subject_type = permission_subject_type (permission); subject = permission_subject (permission); if (subject_type && strcmp (subject_type, "role") == 0 && subject && role_is_predefined (subject)) { free (subject_type); sql ("ROLLBACK;"); return 99; } free (subject_type); if (ultimate == 0) { sql ("INSERT INTO permissions_trash" " (uuid, owner, name, comment, resource_type, resource," " resource_uuid, resource_location, subject_type, subject," " subject_location, creation_time, modification_time)" " SELECT uuid, owner, name, comment, resource_type, resource," " resource_uuid, resource_location, subject_type, subject," " subject_location, creation_time, modification_time" " FROM permissions" " WHERE id = %llu;", permission); tags_set_locations ("permission", permission, sql_last_insert_id (), LOCATION_TRASH); } else tags_set_orphans ("permission", permission, LOCATION_TABLE); sql ("DELETE FROM permissions WHERE id = %llu;", permission); sql ("COMMIT;"); return 0; } /** * @brief Downcase a string in place. * * @param[in] string String. * * @return String, downcased. */ gchar * strdown (gchar *string) { gchar *point; if (string && *string) for (point = string; *point; point++) *point = g_ascii_tolower (*point); return string; } /** * @brief Modify a permission. * * @param[in] permission_id UUID of permission. * @param[in] name_arg Name of permission. * @param[in] comment Comment on permission. * @param[in] resource_id_arg UUID of resource. * @param[in] resource_type Type of resource, for Super permissions. * @param[in] subject_type Type of subject. * @param[in] subject_id UUID of subject. * * @return 0 success, 1 failed to find permission, 2 failed to find subject, * 3 failed to find resource, 4 permission_id required, 5 error in * resource, 6 error in subject, 7 error in name, 8 name required to * find resource, 9 permission does not accept resource, 99 permission * denied, -1 internal error. */ int modify_permission (const char *permission_id, const char *name_arg, const char *comment, const char *resource_id_arg, const char *resource_type_arg, const char *subject_type, const char *subject_id) { int ret; permission_t permission; resource_t resource, subject; char *existing_subject_type, *new_name, *new_resource_type; char *new_resource_id, *new_subject_type, *new_subject_id; gchar *name, *quoted_name, *resource_type; const char *resource_id; if (permission_id == NULL) return 4; sql_begin_immediate (); if (user_may ("modify_permission") == 0) { sql ("ROLLBACK;"); return 99; } permission = 0; if (find_permission (permission_id, &permission)) { sql ("ROLLBACK;"); return -1; } if (permission == 0) { sql ("ROLLBACK;"); return 1; } /* Check if it's a command-level permission on a predefined role. */ existing_subject_type = permission_subject_type (permission); resource = permission_resource (permission); subject = permission_subject (permission); if (resource == 0 && existing_subject_type && strcmp (existing_subject_type, "role") == 0 && subject && role_is_predefined (subject)) { free (existing_subject_type); sql ("ROLLBACK;"); return 99; } if (comment) { gchar *quoted_comment; quoted_comment = sql_quote (comment); sql ("UPDATE permissions SET" " comment = '%s'," " modification_time = m_now ()" " WHERE id = %llu;", quoted_comment, permission); g_free (quoted_comment); } new_name = name_arg ? NULL : permission_name (permission); if (resource_type_arg && resource_id_arg && strcmp (resource_id_arg, "0")) /* Given a resource. */ new_resource_type = NULL; else if (resource_id_arg && (strcmp (resource_id_arg, "0") == 0)) /* User wants to clear the resource. */ new_resource_type = NULL; else { new_resource_type = permission_resource_type (permission); if (new_resource_type && strcmp (new_resource_type, "group") && strcmp (new_resource_type, "role") && strcmp (new_resource_type, "user")) /* Type will come from command name. */ new_resource_type = NULL; } new_resource_id = (resource_id_arg && strcmp (resource_id_arg, "")) ? NULL : permission_resource_id (permission); new_subject_type = subject_type ? NULL : existing_subject_type; new_subject_id = subject_id ? NULL : permission_subject_id (permission); ret = check_permission_args (new_name ? new_name : name_arg, new_resource_type ? new_resource_type : resource_type_arg, new_resource_id ? new_resource_id : resource_id_arg, new_subject_type ? new_subject_type : subject_type, new_subject_id ? new_subject_id : subject_id, &name, &resource, &resource_type, &resource_id, &subject); free (new_name); if (ret) { free (new_resource_type); free (new_resource_id); free (existing_subject_type); free (new_subject_id); sql ("ROLLBACK;"); return ret; } assert (subject); assert ((resource_id == new_resource_id) || (resource_id == resource_id_arg) || (resource_id == NULL)); quoted_name = sql_quote (name); g_free (name); sql ("UPDATE permissions SET" " name = '%s'," " resource_type = '%s'," " resource_uuid = '%s'," " resource = %llu," " resource_location = " G_STRINGIFY (LOCATION_TABLE) "," " subject_type = '%s'," " subject = %llu," " modification_time = m_now ()" " WHERE id = %llu;", quoted_name, (resource_id && resource_type) ? resource_type : "", resource_id ? resource_id : "", resource, new_subject_type ? new_subject_type : subject_type, subject, permission); g_free (quoted_name); free (new_resource_type); free (new_resource_id); free (existing_subject_type); free (new_subject_id); sql ("COMMIT;"); return 0; } /* Port lists. */ /** * @brief Find a port list given a UUID. * * @param[in] uuid UUID of port_list. * @param[out] port_list Port_List return, 0 if succesfully failed to find * port_list. * * @return FALSE on success (including if failed to find port_list), TRUE on error. */ gboolean find_port_list (const char* uuid, port_list_t* port_list) { gchar *quoted_uuid = sql_quote (uuid); if (user_owns_uuid ("port_list", quoted_uuid, 0) == 0) { g_free (quoted_uuid); *port_list = 0; return FALSE; } switch (sql_int64 (port_list, "SELECT id FROM port_lists WHERE uuid = '%s';", quoted_uuid)) { case 0: break; case 1: /* Too few rows in result of query. */ *port_list = 0; break; default: /* Programming error. */ assert (0); case -1: g_free (quoted_uuid); return TRUE; break; } g_free (quoted_uuid); return FALSE; } /** * @brief Find a port list for a specific permission, given a UUID. * * @param[in] uuid UUID of port list. * @param[out] port_list Port list return, 0 if succesfully failed to find * port list. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find port_list), TRUE on * error. */ gboolean find_port_list_with_permission (const char* uuid, port_list_t* port_list, const char *permission) { return find_resource_with_permission ("port_list", uuid, port_list, permission, 0); } /** * @brief Return the UUID of the port list of a port_range. * * @param[in] port_range Port Range UUID. * * @return Newly allocated UUID if available, else NULL. */ char* port_range_port_list_uuid (const char *port_range) { gchar *quoted_port_range; char *ret; quoted_port_range = sql_quote (port_range); if (sql_int ("SELECT count (*) FROM port_ranges WHERE uuid = '%s';", quoted_port_range)) ret = sql_string ("SELECT uuid FROM port_lists" " WHERE id = (SELECT port_list FROM port_ranges" " WHERE uuid = '%s');", quoted_port_range); else ret = NULL; g_free (quoted_port_range); return ret; } /** * @brief Find a port range given a UUID. * * @param[in] uuid UUID of port_range. * @param[out] port_range Port range return, 0 if succesfully failed to find * port range. * @param[in] permission UUID of port_range. * * @return FALSE on success (including if failed to find port range), TRUE on * error. */ gboolean find_port_range_with_permission (const char *uuid, port_range_t *port_range, const char *permission) { char *port_list_uuid; gchar *quoted_uuid; port_list_t port_list; assert (current_credentials.uuid); *port_range = 0; if (uuid == NULL) return TRUE; port_list_uuid = port_range_port_list_uuid (uuid); if (port_list_uuid == NULL) return TRUE; if (find_port_list_with_permission (port_list_uuid, &port_list, permission) || port_list == 0) { g_free (port_list_uuid); return TRUE; } g_free (port_list_uuid); quoted_uuid = sql_quote (uuid); switch (sql_int64 (port_range, "SELECT id FROM port_ranges WHERE uuid = '%s';", quoted_uuid)) { case 0: break; case 1: /* Too few rows in result of query. */ *port_range = 0; break; default: /* Programming error. */ assert (0); case -1: g_free (quoted_uuid); return TRUE; break; } g_free (quoted_uuid); return FALSE; } /** * @brief Compare two ranges by type then start. * * @param[in] one First range. * @param[in] two Second range. */ static int range_compare (gconstpointer one, gconstpointer two) { range_t *range_one, *range_two; range_one = *((range_t**) one); range_two = *((range_t**) two); if (range_one->type > range_two->type) return 1; if (range_one->type < range_two->type) return -1; if (range_one->start > range_two->start) return 1; if (range_one->start < range_two->start) return -1; return 0; } /** * @brief Sort and merge ranges. * * @param[in] ranges Array of port ranges of type range_t. */ static void ranges_sort_merge (array_t *ranges) { if (ranges->len > 1) { int index; range_t *last_range; /* Sort by type then start. */ g_ptr_array_sort (ranges, range_compare); /* Merge overlaps. */ last_range = (range_t*) g_ptr_array_index (ranges, 0); for (index = 1; index < ranges->len; ) { range_t *range; range = (range_t*) g_ptr_array_index (ranges, index); if (range == NULL) break; if (range->type == last_range->type && range->start <= last_range->end) { if (range->end > last_range->end) last_range->end = range->end; /* This moves everything else up into the space. */ g_ptr_array_remove_index (ranges, index); } else { index++; last_range = range; } } } } /** * @brief Create a port list, with database locked. * * Caller must lock the database. * * @param[in] quoted_id SQL quoted UUID, or NULL. * @param[in] quoted_name SQL quoted name of port list. * @param[in] comment Comment on port list. * @param[in] ranges Port ranges of port list. * @param[out] port_list Created port list. * * @return 0 success. */ int create_port_list_lock (const char *quoted_id, const char *quoted_name, const char *comment, array_t *ranges, port_list_t* port_list) { gchar *quoted_comment; range_t *range; int index; assert (comment); quoted_comment = sql_quote (comment); if (quoted_id) sql ("INSERT INTO port_lists" " (uuid, owner, name, comment, creation_time, modification_time)" " VALUES" " ('%s', (SELECT id FROM users WHERE uuid = '%s'), '%s'," " '%s', m_now (), m_now ());", quoted_id, current_credentials.uuid, quoted_name, quoted_comment); else sql ("INSERT INTO port_lists" " (uuid, owner, name, comment, creation_time, modification_time)" " VALUES" " (make_uuid (), (SELECT id FROM users WHERE uuid = '%s'), '%s'," " '%s', m_now (), m_now ());", current_credentials.uuid, quoted_name, quoted_comment); g_free (quoted_comment); *port_list = sql_last_insert_id (); ranges_sort_merge (ranges); array_terminate (ranges); index = 0; while ((range = (range_t*) g_ptr_array_index (ranges, index++))) sql ("INSERT INTO port_ranges" " (uuid, port_list, type, start, \"end\", comment, exclude)" " VALUES" " (make_uuid (), %llu, %i, %i, %i, '', %i);", *port_list, range->type, range->start, range->end, range->exclude); return 0; } /** * @brief Create a port list having a unique name. * * Caller must provide transaction. * * @param[in] name Name of port list. * @param[in] comment Comment on port list. * @param[in] port_range Traditional OTP style port range. NULL for "default". * @param[out] port_list Created port list. * * @return 0 success, 4 error in port range. */ int create_port_list_unique (const char *name, const char *comment, const char* port_range, port_list_t* port_list) { gchar *quoted_name; array_t *ranges; int suffix, ret; assert (current_credentials.uuid); if (port_range == NULL || (strcmp (port_range, "default") == 0)) { if (find_port_list (PORT_LIST_UUID_DEFAULT, port_list) || (*port_list == 0)) return -1; return 0; } if (validate_port_range (port_range)) return 4; ranges = port_range_ranges (port_range); /* Check whether a port list with the same name exists already. */ suffix = 1; quoted_name = sql_quote (name); while (resource_with_name_exists (quoted_name, "port_list", 0)) { gchar *new_name; new_name = g_strdup_printf ("%s %i", name, suffix); g_free (quoted_name); quoted_name = sql_quote (new_name); g_free (new_name); suffix++; } ret = create_port_list_lock (NULL, quoted_name, comment, ranges, port_list); array_free (ranges); return ret; } /** * @brief Create a port_list. * * @param[in] id ID of port list. Only used with \p ranges. * @param[in] name Name of port list. * @param[in] comment Comment on port list. * @param[in] port_ranges OMP port range string. * @param[in] ranges Array of port ranges of type range_t. * Overrides port_ranges. * @param[out] port_list_return Created port list. * * @return 0 success, 1 port list exists already, 4 error in port_ranges, * 99 permission denied, -1 error. */ int create_port_list (const char* id, const char* name, const char* comment, const char* port_ranges, array_t *ranges, port_list_t* port_list_return) { gchar *quoted_name; port_list_t port_list; int ret; assert (current_credentials.uuid); if (ranges) { int suffix; gchar *quoted_id; if (id == NULL) return -1; sql_begin_immediate (); if (user_may ("create_port_list") == 0) { sql ("ROLLBACK;"); return 99; } /* Check whether this port list exists already. */ quoted_id = sql_quote (id); if (sql_int ("SELECT COUNT(*) FROM port_lists" " WHERE uuid = '%s'" " AND ((owner IS NULL) OR (owner =" " (SELECT users.id FROM users WHERE users.uuid = '%s')));", quoted_id, current_credentials.uuid)) { g_free (quoted_id); sql ("ROLLBACK;"); return 1; } if (sql_int ("SELECT COUNT(*) FROM port_lists_trash" " WHERE uuid = '%s'" " AND ((owner IS NULL) OR (owner =" " (SELECT users.id FROM users WHERE users.uuid = '%s')));", quoted_id, current_credentials.uuid)) { g_free (quoted_id); sql ("ROLLBACK;"); return 2; } /* Ensure the name is unique. */ quoted_name = sql_quote (name); suffix = 1; while (resource_with_name_exists (quoted_name, "port_list", 0)) { gchar *new_name; g_free (quoted_name); new_name = g_strdup_printf ("%s %i", name, suffix++); quoted_name = sql_quote (new_name); g_free (new_name); } ret = create_port_list_lock (quoted_id, quoted_name, comment ? comment : "", ranges, &port_list); g_free (quoted_name); if (ret) { sql ("ROLLBACK;"); return ret; } if (port_list_return) *port_list_return = port_list; sql ("COMMIT;"); return 0; } if (port_ranges == NULL) port_ranges = "default"; if (validate_port_range (port_ranges)) return 4; sql_begin_immediate (); if (user_may ("create_port_list") == 0) { sql ("ROLLBACK;"); return 99; } /* Check whether a port_list with the same name exists already. */ if (resource_with_name_exists (name, "port_list", 0)) { sql ("ROLLBACK;"); return 1; } quoted_name = sql_quote (name); if (port_ranges == NULL || (strcmp (port_ranges, "default") == 0)) { gchar *quoted_comment, *quoted_name; quoted_name = sql_quote (name); quoted_comment = sql_quote (comment ? comment : ""); sql ("INSERT INTO port_lists" " (uuid, owner, name, comment, creation_time, modification_time)" " VALUES" " (make_uuid (), (SELECT id FROM users WHERE uuid = '%s'), '%s'," " '%s', m_now (), m_now ());", current_credentials.uuid, quoted_name, quoted_comment); g_free (quoted_comment); g_free (quoted_name); port_list = sql_last_insert_id (); make_port_ranges_openvas_default (port_list); } else { ranges = port_range_ranges (port_ranges); ret = create_port_list_lock (NULL, quoted_name, comment ? comment : "", ranges, &port_list); array_free (ranges); if (ret) { g_free (quoted_name); sql ("ROLLBACK;"); return ret; } } if (port_list_return) *port_list_return = port_list; sql ("COMMIT;"); return 0; } /** * @brief Create Port List from an existing Port List. * * @param[in] name Name of new Port List. NULL to copy from * existing. * @param[in] comment Comment on new Port List. NULL to copy from * existing. * @param[in] port_list_id UUID of existing Port List. * @param[out] new_port_list New Port List. * * @return 0 success, 1 Port List exists already, 2 failed to find existing * Port List, 99 permission denied, -1 error. */ int copy_port_list (const char* name, const char* comment, const char* port_list_id, port_list_t* new_port_list) { int ret; port_list_t new, old; sql_begin_immediate (); ret = copy_resource_lock ("port_list", name, comment, port_list_id, NULL, 1, &new, &old); if (ret) { sql ("ROLLBACK;"); return ret; } /* Copy port ranges. */ sql ("INSERT INTO port_ranges " " (uuid, port_list, type, start, \"end\", comment, exclude)" " SELECT make_uuid(), %llu, type, start, \"end\", comment, exclude" " FROM port_ranges WHERE port_list = %llu;", new, old); sql ("COMMIT;"); if (new_port_list) *new_port_list = new; return 0; } /** * @brief Modify a Port List. * * @param[in] port_list_id UUID of Port List. * @param[in] name Name of Port List. * @param[in] comment Comment on Port List. * * @return 0 success, 1 failed to find port list, 2 port list with new name, * exists, 3 port_list_id required, 99 permission denied, -1 internal * error. */ int modify_port_list (const char *port_list_id, const char *name, const char *comment) { gchar *quoted_name, *quoted_comment; port_list_t port_list; if (port_list_id == NULL) return 3; sql_begin_immediate (); assert (current_credentials.uuid); if (user_may ("modify_port_list") == 0) { sql ("ROLLBACK;"); return 99; } port_list = 0; if (find_port_list_with_permission (port_list_id, &port_list, "modify_port_list")) { sql ("ROLLBACK;"); return -1; } if (port_list == 0) { sql ("ROLLBACK;"); return 1; } /* Check whether a Port List with the same name exists already. */ if (name) { if (resource_with_name_exists (name, "port_list", port_list)) { sql ("ROLLBACK;"); return 2; } } quoted_name = sql_quote (name ?: ""); quoted_comment = sql_quote (comment ?: ""); sql ("UPDATE port_lists SET" " name = '%s'," " comment = '%s'," " modification_time = m_now ()" " WHERE id = %llu;", quoted_name, quoted_comment, port_list); g_free (quoted_comment); g_free (quoted_name); sql ("COMMIT;"); return 0; } /** * @brief Create a port range in a port list. * * @param[in] port_list_id Port list UUID. * @param[in] type Type. * @param[in] start Start port. * @param[in] end End port. * @param[in] comment Comment. * @param[out] port_range_return Created port range. * * @return 0 success, 1 syntax error in start, 2 syntax error in end, 3 failed * to find port list, 4 syntax error in type, 5 port list in use, * 6 new range overlaps an existing range, 99 permission denied, * -1 error. */ int create_port_range (const char *port_list_id, const char *type, const char *start, const char *end, const char *comment, port_range_t *port_range_return) { int first, last; port_list_t port_list; port_protocol_t port_type; gchar *quoted_comment; first = atoi (start); if (first < 1 || first > 65535) return 1; last = atoi (end); if (last < 1 || last > 65535) return 2; if (strcasecmp (type, "TCP") == 0) port_type = PORT_PROTOCOL_TCP; else if (strcasecmp (type, "UDP") == 0) port_type = PORT_PROTOCOL_UDP; else return 4; if (last < first) { int tem; tem = first; first = last; last = tem; } sql_begin_immediate (); if (user_may ("create_port_range") == 0) { sql ("ROLLBACK;"); return 99; } port_list = 0; if (find_port_list (port_list_id, &port_list)) { sql ("ROLLBACK;"); return -1; } if (port_list == 0) { sql ("ROLLBACK;"); return 3; } if (port_list_in_use (port_list)) { sql ("ROLLBACK;"); return 5; } if (sql_int ("SELECT count (*) FROM port_ranges" " WHERE port_list = %llu" " AND type = %i" " AND ((start <= %i AND end >= %i)" " OR (start <= %i AND end >= %i)" " OR (start >= %i AND start <= %i)" " OR (end >= %i AND end <= %i))", port_list, port_type, first, first, last, last, first, last, first, last)) { sql ("ROLLBACK;"); return 6; } quoted_comment = comment ? sql_quote (comment) : g_strdup (""); sql ("INSERT INTO port_ranges" " (uuid, port_list, type, start, \"end\", comment, exclude)" " VALUES" " (make_uuid (), %llu, %i, %i, %i, '', 0);", port_list, port_type, first, last, quoted_comment); g_free (quoted_comment); if (port_range_return) *port_range_return = sql_last_insert_id (); sql ("COMMIT;"); return 0; } /** * @brief Delete a port list. * * @param[in] port_list_id UUID of port_list. * @param[in] ultimate Whether to remove entirely, or to trashcan. * * @return 0 success, 1 fail because a target refers to the port list, 2 failed * to find port list, 3 predefined port list, 99 permission denied, * -1 error. */ int delete_port_list (const char *port_list_id, int ultimate) { port_list_t port_list = 0; sql_begin_immediate (); if (user_may ("delete_port_list") == 0) { sql ("ROLLBACK;"); return 99; } if (find_port_list_with_permission (port_list_id, &port_list, "delete_port_list")) { sql ("ROLLBACK;"); return -1; } if (port_list && port_list_is_predefined (port_list)) { sql ("ROLLBACK;"); return 3; } if (port_list == 0) { if (find_trash ("port_list", port_list_id, &port_list)) { sql ("ROLLBACK;"); return -1; } if (port_list == 0) { sql ("ROLLBACK;"); return 2; } if (ultimate == 0) { /* It's already in the trashcan. */ sql ("COMMIT;"); return 0; } /* Check if it's in use by a target in the trashcan. */ if (sql_int ("SELECT count(*) FROM targets_trash" " WHERE port_range = %llu" " AND port_list_location" " = " G_STRINGIFY (LOCATION_TRASH) ";", port_list)) { sql ("ROLLBACK;"); return 1; } permissions_set_orphans ("port_list", port_list, LOCATION_TRASH); tags_set_orphans ("port_list", port_list, LOCATION_TRASH); sql ("DELETE FROM port_ranges_trash WHERE port_list = %llu;", port_list); sql ("DELETE FROM port_lists_trash WHERE id = %llu;", port_list); sql ("COMMIT;"); return 0; } if (sql_int ("SELECT count(*) FROM targets" " WHERE port_range = %llu;", port_list)) { sql ("ROLLBACK;"); return 1; } if (ultimate == 0) { port_list_t trash_port_list; sql ("INSERT INTO port_lists_trash" " (uuid, owner, name, comment, creation_time, modification_time)" " SELECT uuid, owner, name, comment, creation_time," " modification_time" " FROM port_lists WHERE id = %llu;", port_list); trash_port_list = sql_last_insert_id (); sql ("INSERT INTO port_ranges_trash" " (uuid, port_list, type, start, \"end\", comment, exclude)" " SELECT uuid, %llu, type, start, \"end\", comment, exclude" " FROM port_ranges WHERE port_list = %llu;", trash_port_list, port_list); /* Update the location of the port_list in any trashcan targets. */ sql ("UPDATE targets_trash" " SET port_range = %llu," " port_list_location = " G_STRINGIFY (LOCATION_TRASH) " WHERE port_range = %llu" " AND port_list_location = " G_STRINGIFY (LOCATION_TABLE) ";", trash_port_list, port_list); permissions_set_locations ("port_list", port_list, trash_port_list, LOCATION_TRASH); tags_set_locations ("port_list", port_list, trash_port_list, LOCATION_TRASH); } else { permissions_set_orphans ("port_list", port_list, LOCATION_TABLE); tags_set_orphans ("port_list", port_list, LOCATION_TABLE); } sql ("DELETE FROM port_ranges WHERE port_list = %llu;", port_list); sql ("DELETE FROM port_lists WHERE id = %llu;", port_list); sql ("COMMIT;"); return 0; } /** * @brief Delete a port range. * * @param[in] port_range_id UUID of port_range. * @param[in] dummy Dummy arg to match other delete functions. * * @return 0 success, 2 failed to find port range, 3 port range is part of * predefined port list, 99 permission denied, -1 error. */ int delete_port_range (const char *port_range_id, int dummy) { port_range_t port_range = 0; sql_begin_immediate (); if (user_may ("delete_port_range") == 0) { sql ("ROLLBACK;"); return 99; } if (find_port_range_with_permission (port_range_id, &port_range, "delete_port_range")) { sql ("ROLLBACK;"); return -1; } if (port_range == 0) { sql ("ROLLBACK;"); return 2; } if (sql_int ("SELECT count (*) FROM port_lists WHERE" " id = (SELECT port_list FROM port_ranges" " WHERE port_ranges.id = %llu)" " AND" " (uuid = '" PORT_LIST_UUID_DEFAULT "'" " OR uuid = '" PORT_LIST_UUID_ALL_TCP_NMAP_5_51_TOP_100 "'" " OR uuid = '" PORT_LIST_UUID_ALL_TCP_NMAP_5_51_TOP_1000 "'" " OR uuid = '" PORT_LIST_UUID_ALL_PRIV_TCP "'" " OR uuid = '" PORT_LIST_UUID_ALL_PRIV_TCP_UDP "'" " OR uuid = '" PORT_LIST_UUID_ALL_IANA_TCP_2012 "'" " OR uuid = '" PORT_LIST_UUID_ALL_IANA_TCP_UDP_2012 "'" " OR uuid = '" PORT_LIST_UUID_NMAP_5_51_TOP_2000_TOP_100 "');", port_range)) return 3; sql ("DELETE FROM port_ranges WHERE id = %llu;", port_range); sql ("COMMIT;"); return 0; } /** * @brief Filter columns for Port List iterator. */ #define PORT_LIST_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "total", "tcp", "udp", NULL } /** * @brief Port List iterator columns. */ #define PORT_LIST_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS (port_lists), \ { \ /* COUNT ALL ports */ \ "(SELECT" \ " sum ((CASE" \ " WHEN \"end\" IS NULL THEN start ELSE \"end\"" \ " END)" \ " - start" \ " + 1)" \ " FROM port_ranges WHERE port_list = port_lists.id)", \ "total" \ }, \ { \ /* COUNT TCP ports */ \ "(SELECT" \ " sum ((CASE" \ " WHEN \"end\" IS NULL THEN start ELSE \"end\"" \ " END)" \ " - start" \ " + 1)" \ " FROM port_ranges WHERE port_list = port_lists.id" \ " AND type = 0)", \ "tcp" \ }, \ { \ /* COUNT UDP ports */ \ "(SELECT" \ " sum ((CASE" \ " WHEN \"end\" IS NULL THEN start ELSE \"end\"" \ " END)" \ " - start" \ " + 1)" \ " FROM port_ranges WHERE port_list = port_lists.id" \ " AND type = 1)", \ "udp" \ }, \ { NULL, NULL } \ } /** * @brief Port List iterator columns for trash case. */ #define PORT_LIST_ITERATOR_TRASH_COLUMNS \ { \ GET_ITERATOR_COLUMNS (port_lists_trash), \ { \ /* COUNT ALL ports */ \ "(SELECT" \ " sum ((CASE" \ " WHEN \"end\" IS NULL THEN start ELSE \"end\"" \ " END)" \ " - start" \ " + 1)" \ " FROM port_ranges_trash" \ " WHERE port_list = port_lists_trash.id)", \ "total" \ }, \ { \ /* COUNT TCP ports */ \ "(SELECT" \ " sum ((CASE" \ " WHEN \"end\" IS NULL THEN start ELSE \"end\"" \ " END)" \ " - start" \ " + 1)" \ " FROM port_ranges_trash" \ " WHERE port_list = port_lists_trash.id AND type = 0)", \ "tcp" \ }, \ { \ /* COUNT UDP ports */ \ "(SELECT" \ " sum ((CASE" \ " WHEN \"end\" IS NULL THEN start ELSE \"end\"" \ " END)" \ " - start" \ " + 1)" \ " FROM port_ranges_trash" \ " WHERE port_list = port_lists_trash.id AND type = 1)", \ "udp" \ }, \ { NULL, NULL } \ } /** * @brief Count the number of Port Lists. * * @param[in] get GET params. * * @return Total number of Port Lists filtered set. */ int port_list_count (const get_data_t *get) { static const char *filter_columns[] = PORT_LIST_ITERATOR_FILTER_COLUMNS; static column_t columns[] = PORT_LIST_ITERATOR_COLUMNS; static column_t trash_columns[] = PORT_LIST_ITERATOR_TRASH_COLUMNS; return count ("port_list", get, columns, trash_columns, filter_columns, 0, 0, 0, TRUE); } /** * @brief Initialise a Port List iterator, including observed Port Lists. * * @param[in] iterator Iterator. * @param[in] get GET data. * * @return 0 success, 1 failed to find Port List, 2 failed to find filter, * -1 error. */ int init_port_list_iterator (iterator_t* iterator, const get_data_t *get) { static const char *filter_columns[] = PORT_LIST_ITERATOR_FILTER_COLUMNS; static column_t columns[] = PORT_LIST_ITERATOR_COLUMNS; static column_t trash_columns[] = PORT_LIST_ITERATOR_TRASH_COLUMNS; return init_get_iterator (iterator, "port_list", get, columns, trash_columns, filter_columns, 0, NULL, NULL, TRUE); } /** * @brief Get the port count from a port_list iterator. * * @param[in] iterator Iterator. * * @return Port count. */ int port_list_iterator_count_all (iterator_t* iterator) { if (iterator->done) return -1; return iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT); } /** * @brief Get the TCP port count from a port_list iterator. * * @param[in] iterator Iterator. * * @return TCP port count. */ int port_list_iterator_count_tcp (iterator_t* iterator) { if (iterator->done) return -1; return iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 1); } /** * @brief Get the UDP port count from a port_list iterator. * * @param[in] iterator Iterator. * * @return UDP port count. */ int port_list_iterator_count_udp (iterator_t* iterator) { if (iterator->done) return -1; return iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 2); } /** * @brief Return the UUID of a port_list. * * @param[in] port_list Port_List. * * @return Newly allocated UUID if available, else NULL. */ char* port_list_uuid (port_list_t port_list) { return sql_string ("SELECT uuid FROM port_lists WHERE id = %llu;", port_list); } /** * @brief Return the UUID of a port_range. * * @param[in] port_range Port_Range. * * @return Newly allocated UUID if available, else NULL. */ char* port_range_uuid (port_range_t port_range) { return sql_string ("SELECT uuid FROM port_ranges WHERE id = %llu;", port_range); } int port_list_is_predefined (port_list_t port_list) { return !!sql_int ("SELECT COUNT (*) FROM port_lists" " WHERE id = %llu AND" " (uuid = '" PORT_LIST_UUID_DEFAULT "'" " OR uuid = '" PORT_LIST_UUID_ALL_TCP "'" " OR uuid = '" PORT_LIST_UUID_ALL_TCP_NMAP_5_51_TOP_100 "'" " OR uuid = '" PORT_LIST_UUID_ALL_TCP_NMAP_5_51_TOP_1000 "'" " OR uuid = '" PORT_LIST_UUID_ALL_PRIV_TCP "'" " OR uuid = '" PORT_LIST_UUID_ALL_PRIV_TCP_UDP "'" " OR uuid = '" PORT_LIST_UUID_ALL_IANA_TCP_2012 "'" " OR uuid = '" PORT_LIST_UUID_NMAP_5_51_TOP_2000_TOP_100 "'" " OR uuid = '" PORT_LIST_UUID_ALL_IANA_TCP_UDP_2012 "');", port_list); } /** * @brief Return whether a port_list is in use by a task. * * @param[in] port_list Port_List. * * @return 1 if in use, else 0. */ int port_list_in_use (port_list_t port_list) { if (port_list_is_predefined (port_list)) return 1; return sql_int ("SELECT count(*) FROM targets" " WHERE port_range = %llu", port_list); } /** * @brief Check whether a trashcan Port List is in use. * * @param[in] port_list Port List. * * @return 1 yes, 0 no. */ int trash_port_list_in_use (port_list_t port_list) { return (sql_int ("SELECT count (*) FROM targets_trash" " WHERE port_range = %llu" " AND port_list_location = " G_STRINGIFY (LOCATION_TRASH) ";", port_list) > 0); } /** * @brief Check whether a Port List is writable. * * @param[in] port_list Port List. * * @return 1 yes, 0 no. */ int port_list_writable (port_list_t port_list) { if (port_list_is_predefined (port_list)) return 0; return (port_list_in_use (port_list) == 0); } /** * @brief Check whether a trashcan Port List is writable. * * @param[in] port_list Port List. * * @return 1 yes, 0 no. */ int trash_port_list_writable (port_list_t port_list) { return (trash_port_list_in_use (port_list) == 0); } /** * @brief Return whether a trashcan port list is readable. * * @param[in] port_list_id Port list UUID. * * @return 1 if readable, else 0. */ int trash_port_list_readable_uuid (const gchar *port_list_id) { port_list_t found; if (port_list_id == NULL) return 0; if (find_trash ("port_list", port_list_id, &found)) return 0; return found > 0; } /** * @brief Initialise a port_range iterator. * * @param[in] iterator Iterator. * @param[in] port_list Port list. * @param[in] trash Whether port_list is in the trashcan. * @param[in] ascending Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for type then start. */ void init_port_range_iterator (iterator_t* iterator, port_list_t port_list, int trash, int ascending, const char* sort_field) { assert (current_credentials.uuid); if (port_list) { char *uuid; uuid = port_list_uuid (port_list); assert (uuid); if (user_has_access_uuid ("port_list", uuid, "get_port_lists", trash)) init_iterator (iterator, "SELECT uuid, comment, start, \"end\", type, exclude" " FROM port_ranges%s" " WHERE port_list = %llu" " ORDER BY %s %s;", trash ? "_trash" : "", port_list, sort_field ? sort_field : "type, CAST (start AS INTEGER)", ascending ? "ASC" : "DESC"); else init_iterator (iterator, "SELECT uuid, comment, start, \"end\", type, exclude" " FROM port_ranges" " WHERE 1 == 0"); free (uuid); } else init_iterator (iterator, "SELECT uuid, comment, start, end, type, exclude" " FROM port_ranges%s" " WHERE" " (((SELECT owner FROM port_lists%s WHERE id = port_list)" " IS NULL)" " OR ((SELECT owner FROM port_lists%s WHERE id = port_list)" " = (SELECT id FROM users WHERE users.uuid = '%s'))" " OR (CAST (%i AS boolean)" " AND (" USER_MAY ("port_list") ")))" " ORDER BY %s %s;", trash ? "_trash" : "", trash ? "_trash" : "", trash ? "_trash" : "", current_credentials.uuid, trash ? 0 : 1, current_credentials.uuid, current_credentials.uuid, current_credentials.uuid, "get_port_lists", "get_port_lists", "get_port_lists", "get_port_lists", sort_field ? sort_field : "type, CAST (start AS INTEGER)", ascending ? "ASC" : "DESC"); } /** * @brief Get the UUID from a port range iterator. * * @param[in] iterator Iterator. * * @return The UUID of the range, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (port_range_iterator_uuid, 0); /** * @brief Get the comment from a port range iterator. * * @param[in] iterator Iterator. * * @return The comment of the range, or NULL if iteration is complete. Freed by * cleanup_iterator. */ const char* port_range_iterator_comment (iterator_t* iterator) { const char *ret; if (iterator->done) return ""; ret = iterator_string (iterator, 1); return ret ? ret : ""; } /** * @brief Get the comment from a port range iterator. * * @param[in] iterator Iterator. * * @return The comment of the range, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (port_range_iterator_start, 2); /** * @brief Get the comment from a port range iterator. * * @param[in] iterator Iterator. * * @return The comment of the range, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (port_range_iterator_end, 3); /** * @brief Get the type from a port range iterator. * * @param[in] iterator Iterator. * * @return The type of the range, or NULL if iteration is complete. Freed by * cleanup_iterator. */ const char* port_range_iterator_type (iterator_t* iterator) { if (iterator->done) return ""; switch ((port_protocol_t) iterator_int (iterator, 4)) { case PORT_PROTOCOL_TCP: return "tcp"; case PORT_PROTOCOL_UDP: return "udp"; default: return ""; } } /** * @brief Get the type from a port range iterator. * * @param[in] iterator Iterator. * * @return The type of the range, or NULL if iteration is complete. Freed by * cleanup_iterator. */ port_protocol_t port_range_iterator_type_int (iterator_t* iterator) { if (iterator->done) return PORT_PROTOCOL_OTHER; return (port_protocol_t) iterator_int (iterator, 4); } /** * @brief Initialise a port list target iterator. * * @param[in] iterator Iterator. * @param[in] port_list Port list. * @param[in] ascending Whether to sort ascending or descending. */ void init_port_list_target_iterator (iterator_t* iterator, port_list_t port_list, int ascending) { gchar *available; get_data_t get; array_t *permissions; assert (port_list); get.trash = 0; permissions = make_array (); array_add (permissions, g_strdup ("get_targets")); available = where_owned ("target", &get, 1, "any", 0, permissions); array_free (permissions); init_iterator (iterator, "SELECT uuid, name, %s FROM targets" " WHERE port_range = %llu" " ORDER BY name %s;", available, port_list, ascending ? "ASC" : "DESC"); g_free (available); } /** * @brief Get the UUID from a port list target iterator. * * @param[in] iterator Iterator. * * @return The UUID of the target, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (port_list_target_iterator_uuid, 0); /** * @brief Get the name from a port list target iterator. * * @param[in] iterator Iterator. * * @return The name of the target, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (port_list_target_iterator_name, 1); /** * @brief Get the read permission status from a GET iterator. * * @param[in] iterator Iterator. * * @return 1 if may read, else 0. */ int port_list_target_iterator_readable (iterator_t* iterator) { if (iterator->done) return 0; return iterator_int (iterator, 2); } /* Roles. */ /** * @brief Create a role from an existing role. * * @param[in] name Name of new role. NULL to copy from existing. * @param[in] comment Comment on new role. NULL to copy from existing. * @param[in] role_id UUID of existing role. * @param[out] new_role_return New role. * * @return 0 success, 1 role exists already, 2 failed to find existing * role, 99 permission denied, -1 error. */ int copy_role (const char *name, const char *comment, const char *role_id, role_t *new_role_return) { int ret; role_t new_role, old_role; sql_begin_immediate (); if (user_may ("create_role") == 0) return 99; if (role_can_super_everyone (role_id)) return 99; ret = copy_resource_lock ("role", name, comment, role_id, NULL, 1, &new_role, &old_role); if (ret) { sql ("ROLLBACK;"); return ret; } sql ("INSERT INTO permissions" " (uuid, owner, name, comment, resource_type, resource_uuid, resource," " resource_location, subject_type, subject, subject_location," " creation_time, modification_time)" " SELECT make_uuid ()," " (SELECT id FROM users WHERE users.uuid = '%s')," " name, comment, resource_type," " resource_uuid, resource, resource_location, subject_type, %llu," " subject_location, m_now (), m_now ()" " FROM permissions" " WHERE subject_type = 'role'" " AND subject = %llu" " AND subject_location = " G_STRINGIFY (LOCATION_TABLE) " AND resource = 0;", current_credentials.uuid, new_role, old_role); sql ("COMMIT;"); if (new_role_return) *new_role_return = new_role; return 0; } /** * @brief Create a role. * * @param[in] role_name Role name. * @param[in] comment Comment on role. * @param[in] users Users role applies to. * @param[in] role Role return. * * @return 0 success, 1 role exists already, 2 failed to find user, 4 user * name validation failed, 99 permission denied, -1 error. */ int create_role (const char *role_name, const char *comment, const char *users, role_t* role) { int ret; gchar *quoted_role_name, *quoted_comment; assert (current_credentials.uuid); assert (role_name); assert (role); sql_begin_immediate (); if (user_may ("create_role") == 0) { sql ("ROLLBACK;"); return 99; } if (resource_with_name_exists (role_name, "role", 0)) { sql ("ROLLBACK;"); return 1; } quoted_role_name = sql_quote (role_name); quoted_comment = comment ? sql_quote (comment) : g_strdup (""); sql ("INSERT INTO roles" " (uuid, name, owner, comment, creation_time, modification_time)" " VALUES" " (make_uuid (), '%s'," " (SELECT id FROM users WHERE users.uuid = '%s')," " '%s', m_now (), m_now ());", quoted_role_name, current_credentials.uuid, quoted_comment); g_free (quoted_comment); g_free (quoted_role_name); *role = sql_last_insert_id (); ret = add_users ("role", *role, users); if (ret) sql ("ROLLBACK;"); else sql ("COMMIT;"); return ret; } /** * @brief Return whether a role is predefined. * * @param[in] role Role. * * @return 1 if predefined, else 0. */ int role_is_predefined (role_t role) { return sql_int ("SELECT COUNT (*) FROM roles" " WHERE id = %llu" " AND (uuid = '" ROLE_UUID_ADMIN "'" " OR uuid = '" ROLE_UUID_GUEST "'" " OR uuid = '" ROLE_UUID_MONITOR "'" " OR uuid = '" ROLE_UUID_INFO "'" " OR uuid = '" ROLE_UUID_USER "'" " OR uuid = '" ROLE_UUID_SUPER_ADMIN "'" " OR uuid = '" ROLE_UUID_OBSERVER "');", role) != 0; } /** * @brief Return whether a role is predefined. * * @param[in] uuid UUID of role. * * @return 1 if predefined, else 0. */ int role_is_predefined_id (const char *uuid) { return uuid && ((strcmp (uuid, ROLE_UUID_ADMIN) == 0) || (strcmp (uuid, ROLE_UUID_GUEST) == 0) || (strcmp (uuid, ROLE_UUID_MONITOR) == 0) || (strcmp (uuid, ROLE_UUID_INFO) == 0) || (strcmp (uuid, ROLE_UUID_USER) == 0) || (strcmp (uuid, ROLE_UUID_SUPER_ADMIN) == 0) || (strcmp (uuid, ROLE_UUID_OBSERVER) == 0)); } /** * @brief Delete a role. * * @param[in] role_id UUID of role. * @param[in] ultimate Whether to remove entirely, or to trashcan. * * @return 0 success, 1 fail because a task refers to the role, 2 failed * to find role, 3 predefined role, -1 error. */ int delete_role (const char *role_id, int ultimate) { role_t role = 0; sql_begin_immediate (); if (user_may ("delete_role") == 0) { sql ("ROLLBACK;"); return 99; } if (find_role_with_permission (role_id, &role, "delete_role")) { sql ("ROLLBACK;"); return -1; } if (role == 0) { if (find_trash ("role", role_id, &role)) { sql ("ROLLBACK;"); return -1; } if (role == 0) { sql ("ROLLBACK;"); return 2; } if (ultimate == 0) { /* It's already in the trashcan. */ sql ("COMMIT;"); return 0; } if (trash_role_in_use (role)) { sql ("ROLLBACK;"); return 1; } sql ("DELETE FROM permissions" " WHERE resource_type = 'role'" " AND resource = %llu" " AND resource_location = " G_STRINGIFY (LOCATION_TRASH) ";", role); sql ("DELETE FROM permissions_trash" " WHERE resource_type = 'role'" " AND resource = %llu" " AND resource_location = " G_STRINGIFY (LOCATION_TRASH) ";", role); sql ("DELETE FROM permissions" " WHERE subject_type = 'role'" " AND subject = %llu" " AND subject_location = " G_STRINGIFY (LOCATION_TRASH) ";", role); sql ("DELETE FROM permissions_trash" " WHERE subject_type = 'role'" " AND subject = %llu" " AND subject_location = " G_STRINGIFY (LOCATION_TRASH) ";", role); tags_set_orphans ("role", role, LOCATION_TRASH); sql ("DELETE FROM role_users_trash WHERE role = %llu;", role); sql ("DELETE FROM roles_trash WHERE id = %llu;", role); sql ("COMMIT;"); return 0; } if (role_is_predefined (role)) { sql ("ROLLBACK;"); return 3; } if (role_in_use (role)) { sql ("ROLLBACK;"); return 1; } if (ultimate == 0) { role_t trash_role; sql ("INSERT INTO roles_trash" " (uuid, owner, name, comment, creation_time, modification_time)" " SELECT uuid, owner, name, comment, creation_time," " modification_time" " FROM roles WHERE id = %llu;", role); trash_role = sql_last_insert_id (); sql ("INSERT INTO role_users_trash" " (\"role\", \"user\")" " SELECT \"role\", \"user\"" " FROM role_users WHERE \"role\" = %llu;", role); permissions_set_locations ("role", role, trash_role, LOCATION_TRASH); tags_set_locations ("role", role, trash_role, LOCATION_TRASH); permissions_set_subjects ("role", role, trash_role, LOCATION_TRASH); } else { sql ("DELETE FROM permissions" " WHERE resource_type = 'role'" " AND resource = %llu" " AND resource_location = " G_STRINGIFY (LOCATION_TRASH) ";", role); sql ("DELETE FROM permissions_trash" " WHERE resource_type = 'role'" " AND resource = %llu" " AND resource_location = " G_STRINGIFY (LOCATION_TRASH) ";", role); sql ("DELETE FROM permissions" " WHERE subject_type = 'role'" " AND subject = %llu" " AND subject_location = " G_STRINGIFY (LOCATION_TABLE) ";", role); sql ("DELETE FROM permissions_trash" " WHERE subject_type = 'role'" " AND subject = %llu" " AND subject_location = " G_STRINGIFY (LOCATION_TABLE) ";", role); tags_set_orphans ("role", role, LOCATION_TABLE); } sql ("DELETE FROM role_users WHERE \"role\" = %llu;", role); sql ("DELETE FROM roles WHERE id = %llu;", role); sql ("COMMIT;"); return 0; } /** * @brief Find a role given a UUID. * * @param[in] uuid UUID of role. * @param[out] role Role return, 0 if succesfully failed to find role. * * @return FALSE on success (including if failed to find role), TRUE on * error. */ gboolean find_role (const char* uuid, role_t* role) { return find_resource ("role", uuid, role); } /** * @brief Find a role for a specific permission, given a UUID. * * @param[in] uuid UUID of role. * @param[out] role Role return, 0 if succesfully failed to find role. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find role), TRUE on error. */ gboolean find_role_with_permission (const char* uuid, role_t* role, const char *permission) { return find_resource_with_permission ("role", uuid, role, permission, 0); } /** * @brief Find a role given a name. * * @param[in] name A role name. * @param[out] role Role return, 0 if succesfully failed to find role. * * @return FALSE on success (including if failed to find role), TRUE on error. */ static gboolean find_role_by_name (const char* name, role_t *role) { return find_resource_by_name ("role", name, role); } /** * @brief Gets UUID of role. * * @param[in] role Role. * * @return Users. */ gchar * role_uuid (role_t role) { return sql_string ("SELECT uuid FROM roles WHERE id = %llu;", role); } /** * @brief Gets users of role as a string. * * @param[in] role Role. * * @return Users. */ gchar * role_users (role_t role) { return sql_string ("SELECT group_concat (name, ', ')" " FROM (SELECT users.name FROM users, role_users" " WHERE role_users.role = %llu" " AND role_users.user = users.id" " GROUP BY users.name)" " AS sub;", role); } /** * @brief Check whether a role is writable. * * @param[in] role Role. * * @return 1 yes, 0 no. */ int role_writable (role_t role) { if (role_is_predefined (role)) return 0; return 1; } /** * @brief Check whether a trashcan role is writable. * * @param[in] role Role. * * @return 1 yes, 0 no. */ int trash_role_writable (role_t role) { return 1; } /** * @brief Check whether a role is in use. * * @param[in] role Role. * * @return 1 yes, 0 no. */ int role_in_use (role_t role) { return 0; } /** * @brief Check whether a trashcan role is in use. * * @param[in] role Role. * * @return 1 yes, 0 no. */ int trash_role_in_use (role_t role) { return 0; } /** * @brief Modify a role. * * @param[in] role_id UUID of role. * @param[in] name Name of role. * @param[in] comment Comment on role. * @param[in] users Role users. * * @return 0 success, 1 failed to find role, 2 failed to find user, 3 role_id * required, 4 user name validation failed, 5 role with new name * exists, 99 permission denied, -1 internal error. */ int modify_role (const char *role_id, const char *name, const char *comment, const char *users) { int ret; gchar *quoted_name, *quoted_comment; role_t role; assert (current_credentials.uuid); if (role_id == NULL) return 3; sql_begin_immediate (); if (user_may ("modify_role") == 0) { sql ("ROLLBACK;"); return 99; } role = 0; if (find_role_with_permission (role_id, &role, "modify_role")) { sql ("ROLLBACK;"); return -1; } if (role == 0) { sql ("ROLLBACK;"); return 1; } /* Check whether a role with the same name exists already. */ if (name) { if (resource_with_name_exists (name, "role", role)) { sql ("ROLLBACK;"); return 5; } } quoted_name = sql_quote (name ?: ""); quoted_comment = sql_quote (comment ?: ""); sql ("UPDATE roles SET" " name = '%s'," " comment = '%s'," " modification_time = m_now ()" " WHERE id = %llu;", quoted_name, quoted_comment, role); g_free (quoted_comment); g_free (quoted_name); sql ("DELETE FROM role_users WHERE \"role\" = %llu;", role); ret = add_users ("role", role, users); if (ret) sql ("ROLLBACK;"); else sql ("COMMIT;"); return ret; } /** * @brief Filter columns for role iterator. */ #define ROLE_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, NULL } /** * @brief Role iterator columns. */ #define ROLE_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS (roles), \ { NULL, NULL } \ } /** * @brief Role iterator columns for trash case. */ #define ROLE_ITERATOR_TRASH_COLUMNS \ { \ GET_ITERATOR_COLUMNS (roles_trash), \ { NULL, NULL } \ } /** * @brief Count number of roles. * * @param[in] get GET params. * * @return Total number of roles in roleed set. */ int role_count (const get_data_t *get) { static const char *extra_columns[] = ROLE_ITERATOR_FILTER_COLUMNS; static column_t columns[] = ROLE_ITERATOR_COLUMNS; static column_t trash_columns[] = ROLE_ITERATOR_TRASH_COLUMNS; return count ("role", get, columns, trash_columns, extra_columns, 0, 0, 0, TRUE); } /** * @brief Initialise a role iterator, including observed roles. * * @param[in] iterator Iterator. * @param[in] get GET data. * * @return 0 success, 1 failed to find role, failed to find role (filt_id), * -1 error. */ int init_role_iterator (iterator_t* iterator, const get_data_t *get) { static const char *filter_columns[] = ROLE_ITERATOR_FILTER_COLUMNS; static column_t columns[] = ROLE_ITERATOR_COLUMNS; static column_t trash_columns[] = ROLE_ITERATOR_TRASH_COLUMNS; return init_get_iterator (iterator, "role", get, columns, trash_columns, filter_columns, 0, NULL, NULL, TRUE); } /* Filters. */ /** * @brief Find a filter given a UUID. * * @param[in] uuid UUID of filter. * @param[out] filter Filter return, 0 if succesfully failed to find filter. * * @return FALSE on success (including if failed to find filter), TRUE on error. */ gboolean find_filter (const char* uuid, filter_t* filter) { return find_resource ("filter", uuid, filter); } /** * @brief Find a filter for a specific permission, given a UUID. * * @param[in] uuid UUID of filter. * @param[out] filter Filter return, 0 if succesfully failed to find * filter. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find filter), TRUE on error. */ gboolean find_filter_with_permission (const char* uuid, filter_t* filter, const char *permission) { return find_resource_with_permission ("filter", uuid, filter, permission, 0); } /** * @brief Return the UUID of a filter. * * @param[in] filter Filter. * * @return Newly allocated UUID if available, else NULL. */ char* filter_uuid (filter_t filter) { return sql_string ("SELECT uuid FROM filters WHERE id = %llu;", filter); } /** * @brief Return the UUID of a trashcan filter. * * @param[in] filter Filter. * * @return Newly allocated UUID if available, else NULL. */ char* trash_filter_uuid (filter_t filter) { return sql_string ("SELECT uuid FROM filters_trash WHERE id = %llu;", filter); } /** * @brief Return the name of a filter. * * @param[in] filter Filter. * * @return name of filter. */ char* filter_name (filter_t filter) { return sql_string ("SELECT name FROM filters WHERE id = %llu;", filter); } /** * @brief Return the name of a trashcan filter. * * @param[in] filter Filter. * * @return name of filter. */ char* trash_filter_name (filter_t filter) { return sql_string ("SELECT name FROM filters_trash WHERE id = %llu;", filter); } /** * @brief Return the term of a filter. * * @param[in] uuid Filter UUID. * * @return Newly allocated term if available, else NULL. */ gchar* filter_term (const char *uuid) { gchar *quoted_uuid, *ret; quoted_uuid = sql_quote (uuid); ret = sql_string ("SELECT term FROM filters WHERE uuid = '%s';", quoted_uuid); g_free (quoted_uuid); return ret; } /** * @brief Return the value of a column keyword of a filter term. * * @param[in] term Filter term. * @param[in] column Column name. * * @return Value of column keyword if one exists, else NULL. */ gchar* filter_term_value (const char *term, const char *column) { keyword_t **point; array_t *split; if (term == NULL) return NULL; split = split_filter (term); point = (keyword_t**) split->pdata; while (*point) { keyword_t *keyword; keyword = *point; if (keyword->column && ((strcasecmp (keyword->column, column) == 0) || (keyword->column[0] == '_' && (strcasecmp (keyword->column + 1, column) == 0)))) { gchar *ret = g_strdup (keyword->string); filter_free (split); return ret; } point++; } filter_free (split); return NULL; } /** * @brief Create a filter. * * @param[in] name Name of filter. * @param[in] comment Comment on filter. * @param[in] type Type of resource. * @param[in] term Filter term. * @param[in] make_name_unique Whether to make name unique. * @param[out] filter Created filter. * * @return 0 success, 1 filter exists already, 2 error in type, 99 permission * denied. */ int create_filter (const char *name, const char *comment, const char *type, const char *term, int make_name_unique, filter_t* filter) { gchar *quoted_name, *quoted_comment, *quoted_term, *clean_term; assert (current_credentials.uuid); if (type && strlen (type)) { type = type_db_name (type); if (type == NULL || !valid_type (type)) return 2; } sql_begin_immediate (); if (user_may ("create_filter") == 0) { sql ("ROLLBACK;"); return 99; } if (make_name_unique) { int suffix; /* Ensure the name is unique. */ quoted_name = sql_quote (name); suffix = 1; while (resource_with_name_exists (quoted_name, "filter", 0)) { gchar *new_name; g_free (quoted_name); new_name = g_strdup_printf ("%s %i", name, suffix++); quoted_name = sql_quote (new_name); g_free (new_name); } } else { quoted_name = sql_quote (name ?: ""); if (resource_with_name_exists (name, "filter", 0)) { g_free (quoted_name); sql ("ROLLBACK;"); return 1; } } clean_term = manage_clean_filter (term ? term : ""); quoted_term = sql_quote (clean_term); g_free (clean_term); if (comment) { quoted_comment = sql_quote (comment); sql ("INSERT INTO filters" " (uuid, name, owner, comment, type, term, creation_time," " modification_time)" " VALUES (make_uuid (), '%s'," " (SELECT id FROM users WHERE users.uuid = '%s')," " '%s', %s%s%s, '%s', m_now (), m_now ());", quoted_name, current_credentials.uuid, quoted_comment, type ? "lower ('" : "", type ? type : "''", type ? "')" : "", quoted_term); g_free (quoted_comment); } else sql ("INSERT INTO filters" " (uuid, name, owner, comment, type, term, creation_time," " modification_time)" " VALUES (make_uuid (), '%s'," " (SELECT id FROM users WHERE users.uuid = '%s')," " '', %s%s%s, '%s', m_now (), m_now ());", quoted_name, current_credentials.uuid, type ? "lower ('" : "", type ? type : "''", type ? "')" : "", quoted_term); if (filter) *filter = sql_last_insert_id (); g_free (quoted_name); g_free (quoted_term); sql ("COMMIT;"); return 0; } /** * @brief Create a filter from an existing filter. * * @param[in] name Name of new filter. NULL to copy from existing. * @param[in] comment Comment on new filter. NULL to copy from existing. * @param[in] filter_id UUID of existing filter. * @param[out] new_filter New filter. * * @return 0 success, 1 filter exists already, 2 failed to find existing * filter, -1 error. */ int copy_filter (const char* name, const char* comment, const char *filter_id, filter_t* new_filter) { return copy_resource ("filter", name, comment, filter_id, "term, type", 1, new_filter); } /** * @brief Delete a filter. * * @param[in] filter_id UUID of filter. * @param[in] ultimate Whether to remove entirely, or to trashcan. * * @return 0 success, 1 fail because a task refers to the filter, 2 failed * to find filter, 3 predefined filter, 99 permission denied, -1 error. */ int delete_filter (const char *filter_id, int ultimate) { gchar *quoted_filter_id; filter_t filter = 0; sql_begin_immediate (); if (user_may ("delete_filter") == 0) { sql ("ROLLBACK;"); return 99; } if (find_filter_with_permission (filter_id, &filter, "delete_filter")) { sql ("ROLLBACK;"); return -1; } if (filter == 0) { if (find_trash ("filter", filter_id, &filter)) { sql ("ROLLBACK;"); return -1; } if (filter == 0) { sql ("ROLLBACK;"); return 2; } if (ultimate == 0) { /* It's already in the trashcan. */ sql ("COMMIT;"); return 0; } /* Check if it's in use by an alert in the trashcan. */ if (sql_int ("SELECT count(*) FROM alerts_trash" " WHERE filter = %llu" " AND filter_location = " G_STRINGIFY (LOCATION_TRASH) ";", filter)) { sql ("ROLLBACK;"); return 1; } /* Check if it's in use by the condition of an alert in the trashcan. */ if (sql_int ("SELECT count(*) FROM alert_condition_data_trash" " WHERE name = 'filter_id'" " AND data = (SELECT uuid FROM filters_trash" " WHERE id = %llu)" " AND (SELECT condition = %i OR condition = %i" " FROM alerts_trash WHERE id = alert);", filter, ALERT_CONDITION_FILTER_COUNT_AT_LEAST, ALERT_CONDITION_FILTER_COUNT_CHANGED)) { sql ("ROLLBACK;"); return 1; } permissions_set_orphans ("filter", filter, LOCATION_TRASH); tags_set_orphans ("filter", filter, LOCATION_TRASH); sql ("DELETE FROM filters_trash WHERE id = %llu;", filter); sql ("COMMIT;"); return 0; } /* Check if it's in use by an alert. */ if (sql_int ("SELECT count(*) FROM alerts" " WHERE filter = %llu;", filter)) { sql ("ROLLBACK;"); return 1; } /* Check if it's in use by the condition of an alert. */ if (sql_int ("SELECT count(*) FROM alert_condition_data" " WHERE name = 'filter_id'" " AND data = (SELECT uuid FROM filters" " WHERE id = %llu)" " AND (SELECT condition = %i OR condition = %i" " FROM alerts WHERE id = alert);", filter, ALERT_CONDITION_FILTER_COUNT_AT_LEAST, ALERT_CONDITION_FILTER_COUNT_CHANGED)) { sql ("ROLLBACK;"); return 1; } if (ultimate) { /* Check if it's in use by the condition of an alert in the trashcan. */ if (sql_int ("SELECT count(*) FROM alert_condition_data_trash" " WHERE name = 'filter_id'" " AND data = (SELECT uuid FROM filters" " WHERE id = %llu)" " AND (SELECT condition = %i OR condition = %i" " FROM alerts_trash WHERE id = alert);", filter, ALERT_CONDITION_FILTER_COUNT_AT_LEAST, ALERT_CONDITION_FILTER_COUNT_CHANGED)) { sql ("ROLLBACK;"); return 1; } } quoted_filter_id = sql_quote (filter_id); sql ("DELETE FROM settings WHERE name LIKE '%% Filter' AND value = '%s';", quoted_filter_id); g_free (quoted_filter_id); if (ultimate == 0) { sql ("INSERT INTO filters_trash" " (uuid, owner, name, comment, type, term, creation_time," " modification_time)" " SELECT uuid, owner, name, comment, type, term, creation_time," " modification_time" " FROM filters WHERE id = %llu;", filter); /* Update the location of the filter in any trashcan alerts. */ sql ("UPDATE alerts_trash" " SET filter = %llu," " filter_location = " G_STRINGIFY (LOCATION_TRASH) " WHERE filter = %llu" " AND filter_location = " G_STRINGIFY (LOCATION_TABLE) ";", sql_last_insert_id (), filter); permissions_set_locations ("filter", filter, sql_last_insert_id (), LOCATION_TRASH); tags_set_locations ("filter", filter, sql_last_insert_id (), LOCATION_TRASH); } else { permissions_set_orphans ("filter", filter, LOCATION_TABLE); tags_set_orphans ("filter", filter, LOCATION_TABLE); } sql ("DELETE FROM filters WHERE id = %llu;", filter); sql ("COMMIT;"); return 0; } /** * @brief Check whether a filter is in use. * * @param[in] filter Filter. * * @return 1 yes, 0 no. */ int filter_in_use (filter_t filter) { return !!sql_int ("SELECT count (*) FROM alerts WHERE filter = %llu;", filter); } /** * @brief Check whether a trashcan filter is in use. * * @param[in] filter Filter. * * @return 1 yes, 0 no. */ int trash_filter_in_use (filter_t filter) { return !!sql_int ("SELECT count (*) FROM alerts_trash" " WHERE filter = %llu" " AND filter_location = " G_STRINGIFY (LOCATION_TRASH) ";", filter); } /** * @brief Check whether a filter is writable. * * @param[in] filter Filter. * * @return 1 yes, 0 no. */ int filter_writable (filter_t filter) { return 1; } /** * @brief Check whether a trashcan filter is writable. * * @param[in] filter Filter. * * @return 1 yes, 0 no. */ int trash_filter_writable (filter_t filter) { return 1; } /** * @brief Filter columns for filter iterator. */ #define FILTER_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "type", "term", NULL } /** * @brief Filter iterator columns. */ #define FILTER_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS (filters), \ { "type" , NULL }, \ { "term", NULL }, \ { NULL, NULL } \ } /** * @brief Filter iterator columns for trash case. */ #define FILTER_ITERATOR_TRASH_COLUMNS \ { \ GET_ITERATOR_COLUMNS (filters_trash), \ { "type" , NULL }, \ { "term", NULL }, \ { NULL, NULL } \ } /** * @brief Count number of filters. * * @param[in] get GET params. * * @return Total number of filters in filtered set. */ int filter_count (const get_data_t *get) { static const char *filter_columns[] = FILTER_ITERATOR_FILTER_COLUMNS; static column_t columns[] = FILTER_ITERATOR_COLUMNS; static column_t trash_columns[] = FILTER_ITERATOR_TRASH_COLUMNS; return count ("filter", get, columns, trash_columns, filter_columns, 0, 0, 0, TRUE); } /** * @brief Initialise a filter iterator, including observed filters. * * @param[in] iterator Iterator. * @param[in] get GET data. * * @return 0 success, 1 failed to find filter, failed to find filter (filt_id), * -1 error. */ int init_filter_iterator (iterator_t* iterator, const get_data_t *get) { static const char *filter_columns[] = FILTER_ITERATOR_FILTER_COLUMNS; static column_t columns[] = FILTER_ITERATOR_COLUMNS; static column_t trash_columns[] = FILTER_ITERATOR_TRASH_COLUMNS; return init_get_iterator (iterator, "filter", get, columns, trash_columns, filter_columns, 0, NULL, NULL, TRUE); } /** * @brief Get the type from a filter iterator. * * @param[in] iterator Iterator. * * @return The type of the filter, or NULL if iteration is complete. Freed by * cleanup_iterator. "" for any type. */ const char* filter_iterator_type (iterator_t* iterator) { const char *ret; if (iterator->done) return NULL; ret = iterator_string (iterator, GET_ITERATOR_COLUMN_COUNT); return ret ? type_pretty_name (ret) : ""; } /** * @brief Get the term from a filter iterator. * * @param[in] iterator Iterator. * * @return The term of the filter, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (filter_iterator_term, GET_ITERATOR_COLUMN_COUNT + 1); /** * @brief Initialise a filter alert iterator. * * Iterates over all alerts that use the filter. * * @param[in] iterator Iterator. * @param[in] filter Filter. */ void init_filter_alert_iterator (iterator_t* iterator, filter_t filter) { gchar *available; get_data_t get; array_t *permissions; assert (filter); get.trash = 0; permissions = make_array (); array_add (permissions, g_strdup ("get_alerts")); available = where_owned ("alert", &get, 1, "any", 0, permissions); array_free (permissions); init_iterator (iterator, "SELECT name, uuid, %s FROM alerts" " WHERE filter = %llu" " OR (EXISTS (SELECT * FROM alert_condition_data" " WHERE name = 'filter_id'" " AND data = (SELECT uuid FROM filters" " WHERE id = %llu)" " AND alert = alerts.id)" " AND (condition = %i OR condition = %i))" " ORDER BY name ASC;", available, filter, filter, ALERT_CONDITION_FILTER_COUNT_AT_LEAST, ALERT_CONDITION_FILTER_COUNT_CHANGED); g_free (available); } /** * @brief Get the name from a filter_alert iterator. * * @param[in] iterator Iterator. * * @return The name of the host, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (filter_alert_iterator_name, 0); /** * @brief Get the UUID from a filter_alert iterator. * * @param[in] iterator Iterator. * * @return The UUID of the host, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (filter_alert_iterator_uuid, 1); /** * @brief Get the read permission status from a GET iterator. * * @param[in] iterator Iterator. * * @return 1 if may read, else 0. */ int filter_alert_iterator_readable (iterator_t* iterator) { if (iterator->done) return 0; return iterator_int (iterator, 2); } /** * @brief Modify a filter. * * @param[in] filter_id UUID of filter. * @param[in] name Name of filter. * @param[in] comment Comment on filter. * @param[in] term Filter term. * @param[in] type Type of filter. * * @return 0 success, 1 failed to find filter, 2 filter with new name exists, * 3 error in type name, 4 filter_id required, 5 filter is in use so * type must be "result" if specified, 99 permission denied, * -1 internal error. */ int modify_filter (const char *filter_id, const char *name, const char *comment, const char *term, const char *type) { gchar *quoted_name, *quoted_comment, *quoted_term, *quoted_type, *clean_term; filter_t filter; if (filter_id == NULL) return 4; type = type_db_name (type); if (type && !((strcmp (type, "") == 0) || valid_type (type))) return 3; sql_begin_immediate (); assert (current_credentials.uuid); if (user_may ("modify_filter") == 0) { sql ("ROLLBACK;"); return 99; } filter = 0; if (find_filter_with_permission (filter_id, &filter, "modify_filter")) { sql ("ROLLBACK;"); return -1; } if (filter == 0) { sql ("ROLLBACK;"); return 1; } /* If the filter is linked to an alert, check that the type is valid. */ if (filter_in_use (filter) && type && strcasecmp (type, "result")) { sql ("ROLLBACK;"); return 5; } /* Check whether a filter with the same name exists already. */ if (name) { if (resource_with_name_exists (name, "filter", filter)) { sql ("ROLLBACK;"); return 2; } } quoted_name = sql_quote(name ?: ""); clean_term = manage_clean_filter (term ? term : ""); quoted_term = sql_quote (clean_term); g_free (clean_term); quoted_comment = sql_quote (comment ? comment : ""); quoted_type = sql_quote (type ? type : ""); sql ("UPDATE filters SET" " name = '%s'," " comment = '%s'," " term = '%s'," " type = lower ('%s')," " modification_time = m_now ()" " WHERE id = %llu;", quoted_name, quoted_comment, quoted_term, quoted_type, filter); g_free (quoted_comment); g_free (quoted_name); g_free (quoted_term); g_free (quoted_type); sql ("COMMIT;"); return 0; } /* Schema. */ /** * @brief Generate the OMP schema. * * @param[in] format Name of schema format, "XML" or NULL for XML. * @param[out] output_return NULL or location for output. * @param[out] output_length NULL or location for length of output. * @param[out] extension NULL or location for schema extension. * @param[out] content_type NULL or location for schema content type. * * @return 0 success, 1 failed to find schema format, -1 error. */ int manage_schema (gchar *format, gchar **output_return, gsize *output_length, gchar **extension, gchar **content_type) { /* Pass the XML file to the schema generate script, sending the output * to a file. */ { gchar *script, *script_dir; gchar *uuid_format; char output_dir[] = "/tmp/openvasmd_schema_XXXXXX"; if (mkdtemp (output_dir) == NULL) { g_warning ("%s: mkdtemp failed\n", __FUNCTION__); return -1; } /* Setup file names. */ if (format == NULL) { if (extension) *extension = g_strdup ("xml"); if (content_type) *content_type = g_strdup ("text/xml"); uuid_format = "18e826fc-dab6-11df-b913-002264764cea"; } else if (strcasecmp (format, "HTML") == 0) { if (extension) *extension = g_strdup ("html"); if (content_type) *content_type = g_strdup ("text/html"); uuid_format = "02052818-dab6-11df-9be4-002264764cea"; } else if (strcasecmp (format, "RNC") == 0) { if (extension) *extension = g_strdup ("rnc"); if (content_type) *content_type = g_strdup ("text/x-rnc"); uuid_format = "787a4a18-dabc-11df-9486-002264764cea"; } else if (strcasecmp (format, "XML") == 0) { if (extension) *extension = g_strdup ("xml"); if (content_type) *content_type = g_strdup ("text/xml"); uuid_format = "18e826fc-dab6-11df-b913-002264764cea"; } else return 1; script_dir = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "global_schema_formats", uuid_format, NULL); script = g_build_filename (script_dir, "generate", NULL); if (!g_file_test (script, G_FILE_TEST_EXISTS)) { g_free (script); g_free (script_dir); if (extension) g_free (*extension); if (content_type) g_free (*content_type); return -1; } { gchar *output_file, *command; char *previous_dir; int ret; /* Change into the script directory. */ /** @todo NULL arg is glibc extension. */ previous_dir = getcwd (NULL, 0); if (previous_dir == NULL) { g_warning ("%s: Failed to getcwd: %s\n", __FUNCTION__, strerror (errno)); g_free (previous_dir); g_free (script); g_free (script_dir); if (extension) g_free (*extension); if (content_type) g_free (*content_type); return -1; } if (chdir (script_dir)) { g_warning ("%s: Failed to chdir: %s\n", __FUNCTION__, strerror (errno)); g_free (previous_dir); g_free (script); g_free (script_dir); if (extension) g_free (*extension); if (content_type) g_free (*content_type); return -1; } g_free (script_dir); output_file = g_strdup_printf ("%s/report.out", output_dir); /* Call the script. */ command = g_strdup_printf ("%s " OPENVAS_DATA_DIR "/openvasmd/global_schema_formats" "/18e826fc-dab6-11df-b913-002264764cea/OMP.xml" " > %s" " 2> /dev/null", script, output_file); g_free (script); g_debug (" command: %s\n", command); /* RATS: ignore, command is defined above. */ ret = system (command); if ((ret == -1) /* The schema "generate" script must exit with 0. */ || WEXITSTATUS (ret)) { g_warning ("%s: system failed with ret %i, %i, %s\n", __FUNCTION__, ret, WEXITSTATUS (ret), command); if (chdir (previous_dir)) g_warning ("%s: and chdir failed\n", __FUNCTION__); g_free (previous_dir); g_free (command); g_free (output_file); if (extension) g_free (*extension); if (content_type) g_free (*content_type); return -1; } { GError *get_error; gchar *output; gsize output_len; g_free (command); /* Change back to the previous directory. */ if (chdir (previous_dir)) { g_warning ("%s: Failed to chdir back: %s\n", __FUNCTION__, strerror (errno)); g_free (previous_dir); if (extension) g_free (*extension); if (content_type) g_free (*content_type); return -1; } g_free (previous_dir); /* Read the script output from file. */ get_error = NULL; g_file_get_contents (output_file, &output, &output_len, &get_error); g_free (output_file); if (get_error) { g_warning ("%s: Failed to get output: %s\n", __FUNCTION__, get_error->message); g_error_free (get_error); if (extension) g_free (*extension); if (content_type) g_free (*content_type); return -1; } /* Remove the output directory. */ openvas_file_remove_recurse (output_dir); /* Return the output. */ if (output_length) *output_length = output_len; if (output_return) *output_return = output; return 0; } } } } /* Trashcan. */ /** * @brief Restore a resource from the trashcan. * * @param[in] id UUID of resource. * * @return 0 success, 1 fail because the resource refers to another resource * in the trashcan, 2 failed to find resource in trashcan, 3 fail * because resource with such name exists already, 4 fail because * resource with UUID exists already, 99 permission denied, -1 error. */ int manage_restore (const char *id) { resource_t resource = 0; assert (current_credentials.uuid); sql_begin_immediate (); if (user_may ("restore") == 0) { sql ("ROLLBACK;"); return 99; } /* Agent. */ if (find_trash ("agent", id, &resource)) { sql ("ROLLBACK;"); return -1; } if (resource) { if (sql_int ("SELECT count(*) FROM agents" " WHERE name =" " (SELECT name FROM agents_trash WHERE id = %llu)" " AND ((owner IS NULL) OR (owner =" " (SELECT id FROM users WHERE users.uuid = '%s')));", resource, current_credentials.uuid)) { sql ("ROLLBACK;"); return 3; } sql ("INSERT INTO agents" " (uuid, owner, name, comment, installer, installer_64," " installer_filename, installer_signature_64, installer_trust," " installer_trust_time, howto_install, howto_use, creation_time," " modification_time)" " SELECT" " uuid, owner, name, comment, installer, installer_64," " installer_filename, installer_signature_64, installer_trust," " installer_trust_time, howto_install, howto_use, creation_time," " modification_time" " FROM agents_trash WHERE id = %llu;", resource); permissions_set_locations ("agent", resource, sql_last_insert_id (), LOCATION_TABLE); tags_set_locations ("agent", resource, sql_last_insert_id (), LOCATION_TABLE); sql ("DELETE FROM agents_trash WHERE id = %llu;", resource); sql ("COMMIT;"); return 0; } /* Config. */ if (find_trash ("config", id, &resource)) { sql ("ROLLBACK;"); return -1; } if (resource) { config_t config; if (sql_int ("SELECT count(*) FROM configs" " WHERE name =" " (SELECT name FROM configs_trash WHERE id = %llu)" " AND ((owner IS NULL) OR (owner =" " (SELECT id FROM users WHERE users.uuid = '%s')));", resource, current_credentials.uuid)) { sql ("ROLLBACK;"); return 3; } sql ("INSERT INTO configs" " (uuid, owner, name, nvt_selector, comment, family_count, nvt_count," " families_growing, nvts_growing, type, creation_time," " modification_time)" " SELECT uuid, owner, name, nvt_selector, comment, family_count," " nvt_count, families_growing, nvts_growing," " type, creation_time, modification_time" " FROM configs_trash WHERE id = %llu;", resource); config = sql_last_insert_id (); sql ("INSERT INTO config_preferences" " (config, type, name, value, default_value)" " SELECT %llu, type, name, value, default_value" " FROM config_preferences_trash WHERE config = %llu;", config, resource); /* Update the config in any trashcan tasks. */ sql ("UPDATE tasks" " SET config = %llu," " config_location = " G_STRINGIFY (LOCATION_TABLE) " WHERE config = %llu" " AND config_location = " G_STRINGIFY (LOCATION_TRASH), config, resource); permissions_set_locations ("config", resource, config, LOCATION_TABLE); tags_set_locations ("config", resource, config, LOCATION_TABLE); sql ("DELETE FROM config_preferences_trash WHERE config = %llu;", resource); sql ("DELETE FROM configs_trash WHERE id = %llu;", resource); sql ("COMMIT;"); return 0; } /* Alert. */ if (find_trash ("alert", id, &resource)) { sql ("ROLLBACK;"); return -1; } if (resource) { alert_t alert; if (sql_int ("SELECT count(*) FROM alerts" " WHERE name =" " (SELECT name FROM alerts_trash WHERE id = %llu)" " AND ((owner IS NULL) OR (owner =" " (SELECT id FROM users WHERE users.uuid = '%s')));", resource, current_credentials.uuid)) { sql ("ROLLBACK;"); return 3; } /* Check if it uses a filter in the trashcan. */ if (sql_int ("SELECT filter_location = " G_STRINGIFY (LOCATION_TRASH) " FROM alerts_trash WHERE id = %llu;", resource)) { sql ("ROLLBACK;"); return 1; } sql ("INSERT INTO alerts" " (uuid, owner, name, comment, event, condition, method, filter," " creation_time, modification_time)" " SELECT uuid, owner, name, comment, event, condition, method," " filter, creation_time, modification_time" " FROM alerts_trash WHERE id = %llu;", resource); alert = sql_last_insert_id (); sql ("INSERT INTO alert_condition_data" " (alert, name, data)" " SELECT %llu, name, data" " FROM alert_condition_data_trash WHERE alert = %llu;", alert, resource); sql ("INSERT INTO alert_event_data" " (alert, name, data)" " SELECT %llu, name, data" " FROM alert_event_data_trash WHERE alert = %llu;", alert, resource); sql ("INSERT INTO alert_method_data" " (alert, name, data)" " SELECT %llu, name, data" " FROM alert_method_data_trash WHERE alert = %llu;", alert, resource); /* Update the alert in any trashcan tasks. */ sql ("UPDATE task_alerts" " SET alert = %llu," " alert_location = " G_STRINGIFY (LOCATION_TABLE) " WHERE alert = %llu" " AND alert_location = " G_STRINGIFY (LOCATION_TRASH), alert, resource); permissions_set_locations ("alert", resource, alert, LOCATION_TABLE); tags_set_locations ("alert", resource, alert, LOCATION_TABLE); sql ("DELETE FROM alert_condition_data_trash WHERE alert = %llu;", resource); sql ("DELETE FROM alert_event_data_trash WHERE alert = %llu;", resource); sql ("DELETE FROM alert_method_data_trash WHERE alert = %llu;", resource); sql ("DELETE FROM alerts_trash WHERE id = %llu;", resource); sql ("COMMIT;"); return 0; } /* Filter. */ if (find_trash ("filter", id, &resource)) { sql ("ROLLBACK;"); return -1; } if (resource) { if (sql_int ("SELECT count(*) FROM filters" " WHERE name =" " (SELECT name FROM filters_trash WHERE id = %llu)" " AND ((owner IS NULL) OR (owner =" " (SELECT id FROM users WHERE users.uuid = '%s')));", resource, current_credentials.uuid)) { sql ("ROLLBACK;"); return 3; } sql ("INSERT INTO filters" " (uuid, owner, name, comment, type, term, creation_time," " modification_time)" " SELECT uuid, owner, name, comment, type, term, creation_time," " modification_time" " FROM filters_trash WHERE id = %llu;", resource); /* Update the filter in any trashcan alerts. */ sql ("UPDATE alerts_trash" " SET filter = %llu," " filter_location = " G_STRINGIFY (LOCATION_TABLE) " WHERE filter = %llu" " AND filter_location = " G_STRINGIFY (LOCATION_TRASH), sql_last_insert_id (), resource); permissions_set_locations ("filter", resource, sql_last_insert_id (), LOCATION_TABLE); tags_set_locations ("filter", resource, sql_last_insert_id (), LOCATION_TABLE); sql ("DELETE FROM filters_trash WHERE id = %llu;", resource); sql ("COMMIT;"); return 0; } /* Group. */ if (find_trash ("group", id, &resource)) { sql ("ROLLBACK;"); return -1; } if (resource) { group_t group; if (sql_int ("SELECT count(*) FROM groups" " WHERE name =" " (SELECT name FROM groups_trash WHERE id = %llu)" " AND ((owner IS NULL) OR (owner =" " (SELECT id FROM users WHERE users.uuid = '%s')));", resource, current_credentials.uuid)) { sql ("ROLLBACK;"); return 3; } sql ("INSERT INTO groups" " (uuid, owner, name, comment, creation_time," " modification_time)" " SELECT uuid, owner, name, comment, creation_time," " modification_time" " FROM groups_trash WHERE id = %llu;", resource); group = sql_last_insert_id (); sql ("INSERT INTO group_users" " (\"group\", \"user\")" " SELECT %llu, \"user\"" " FROM group_users_trash WHERE \"group\" = %llu;", group, resource); permissions_set_locations ("group", resource, group, LOCATION_TABLE); tags_set_locations ("group", resource, group, LOCATION_TABLE); permissions_set_subjects ("group", resource, group, LOCATION_TABLE); sql ("DELETE FROM group_users_trash WHERE \"group\" = %llu;", resource); sql ("DELETE FROM groups_trash WHERE id = %llu;", resource); sql ("COMMIT;"); return 0; } /* LSC credential. */ if (find_trash ("lsc_credential", id, &resource)) { sql ("ROLLBACK;"); return -1; } if (resource) { lsc_credential_t credential; if (sql_int ("SELECT count(*) FROM lsc_credentials" " WHERE name =" " (SELECT name FROM lsc_credentials_trash WHERE id = %llu)" " AND ((owner IS NULL) OR (owner =" " (SELECT id FROM users WHERE users.uuid = '%s')));", resource, current_credentials.uuid)) { sql ("ROLLBACK;"); return 3; } sql ("INSERT INTO lsc_credentials" " (uuid, owner, name, login, password, comment, " " private_key, creation_time, modification_time)" " SELECT uuid, owner, name, login, password, comment, " " private_key, creation_time, modification_time" " FROM lsc_credentials_trash WHERE id = %llu;", resource); credential = sql_last_insert_id (); /* Update the credentials in any trashcan targets. */ sql ("UPDATE targets_trash" " SET ssh_location = " G_STRINGIFY (LOCATION_TABLE) "," " lsc_credential = %llu" " WHERE lsc_credential = %llu" " AND ssh_location = " G_STRINGIFY (LOCATION_TRASH) ";", credential, resource); sql ("UPDATE targets_trash" " SET smb_location = " G_STRINGIFY (LOCATION_TABLE) "," " smb_lsc_credential = %llu" " WHERE smb_lsc_credential = %llu" " AND smb_location = " G_STRINGIFY (LOCATION_TRASH) ";", credential, resource); sql ("UPDATE targets_trash" " SET esxi_location = " G_STRINGIFY (LOCATION_TABLE) "," " esxi_lsc_credential = %llu" " WHERE esxi_lsc_credential = %llu" " AND esxi_location = " G_STRINGIFY (LOCATION_TRASH) ";", credential, resource); permissions_set_locations ("lsc_credential", resource, credential, LOCATION_TABLE); tags_set_locations ("lsc_credential", resource, credential, LOCATION_TABLE); sql ("DELETE FROM lsc_credentials_trash WHERE id = %llu;", resource); sql ("COMMIT;"); return 0; } /* Note. */ if (find_trash ("note", id, &resource)) { sql ("ROLLBACK;"); return -1; } if (resource) { sql ("INSERT INTO notes" " (uuid, owner, nvt, creation_time, modification_time, text, hosts," " port, severity, task, result, end_time)" " SELECT uuid, owner, nvt, creation_time, modification_time, text," " hosts, port, severity, task, result, end_time" " FROM notes_trash WHERE id = %llu;", resource); permissions_set_locations ("note", resource, sql_last_insert_id (), LOCATION_TABLE); tags_set_locations ("note", resource, sql_last_insert_id (), LOCATION_TABLE); sql ("DELETE FROM notes_trash WHERE id = %llu;", resource); sql ("COMMIT;"); return 0; } /* Override. */ if (find_trash ("override", id, &resource)) { sql ("ROLLBACK;"); return -1; } if (resource) { sql ("INSERT INTO overrides" " (uuid, owner, nvt, creation_time, modification_time, text, hosts," " port, severity, new_severity, task, result, end_time)" " SELECT uuid, owner, nvt, creation_time, modification_time, text," " hosts, port, severity, new_severity, task," " result, end_time" " FROM overrides_trash WHERE id = %llu;", resource); permissions_set_locations ("override", resource, sql_last_insert_id (), LOCATION_TABLE); tags_set_locations ("override", resource, sql_last_insert_id (), LOCATION_TABLE); sql ("DELETE FROM overrides_trash WHERE id = %llu;", resource); reports_clear_count_cache (1); sql ("COMMIT;"); return 0; } /* Permission. */ if (find_trash ("permission", id, &resource)) { sql ("ROLLBACK;"); return -1; } if (resource) { sql ("INSERT INTO permissions" " (uuid, owner, name, comment, resource_type, resource," " resource_uuid, resource_location, subject_type, subject," " subject_location, creation_time, modification_time)" " SELECT uuid, owner, name, comment, resource_type, resource," " resource_uuid, resource_location, subject_type, subject," " subject_location, creation_time, modification_time" " FROM permissions_trash" " WHERE id = %llu;", resource); tags_set_locations ("permission", resource, sql_last_insert_id (), LOCATION_TABLE); sql ("DELETE FROM permissions_trash WHERE id = %llu;", resource); sql ("COMMIT;"); return 0; } /* Port list. */ if (find_trash ("port_list", id, &resource)) { sql ("ROLLBACK;"); return -1; } if (resource) { port_list_t table_port_list; if (sql_int ("SELECT count(*) FROM port_lists" " WHERE name =" " (SELECT name FROM port_lists_trash WHERE id = %llu)" " AND ((owner IS NULL) OR (owner =" " (SELECT id FROM users WHERE users.uuid = '%s')));", resource, current_credentials.uuid)) { sql ("ROLLBACK;"); return 3; } sql ("INSERT INTO port_lists" " (uuid, owner, name, comment, creation_time, modification_time)" " SELECT uuid, owner, name, comment, creation_time, modification_time" " FROM port_lists_trash WHERE id = %llu;", resource); table_port_list = sql_last_insert_id (); sql ("INSERT INTO port_ranges" " (uuid, port_list, type, start, \"end\", comment, exclude)" " SELECT uuid, %llu, type, start, \"end\", comment, exclude" " FROM port_ranges_trash WHERE port_list = %llu;", table_port_list, resource); /* Update the port_list in any trashcan targets. */ sql ("UPDATE targets_trash" " SET port_range = %llu," " port_list_location = " G_STRINGIFY (LOCATION_TABLE) " WHERE port_range = %llu" " AND port_list_location = " G_STRINGIFY (LOCATION_TRASH), table_port_list, resource); permissions_set_locations ("port_list", resource, table_port_list, LOCATION_TABLE); tags_set_locations ("port_list", resource, sql_last_insert_id (), LOCATION_TABLE); sql ("DELETE FROM port_ranges_trash WHERE port_list = %llu;", resource); sql ("DELETE FROM port_lists_trash WHERE id = %llu;", resource); sql ("COMMIT;"); return 0; } /* Report format. */ if (find_trash ("report_format", id, &resource)) { sql ("ROLLBACK;"); return -1; } if (resource) { iterator_t params; report_format_t report_format; gchar *dir, *trash_dir, *resource_string; int global; char *trash_uuid; if (sql_int ("SELECT count(*) FROM report_formats" " WHERE name =" " (SELECT name FROM report_formats_trash WHERE id = %llu)" " AND ((owner IS NULL) OR (owner =" " (SELECT id FROM users WHERE users.uuid = '%s')));", resource, current_credentials.uuid)) { sql ("ROLLBACK;"); return 3; } if (sql_int ("SELECT count(*) FROM report_formats" " WHERE uuid = (SELECT original_uuid" " FROM report_formats_trash" " WHERE id = %llu);", resource)) { sql ("ROLLBACK;"); return 4; } /* Move to "real" tables. */ sql ("INSERT INTO report_formats" " (uuid, owner, name, extension, content_type, summary," " description, signature, trust, trust_time, flags," " creation_time, modification_time)" " SELECT" " original_uuid, owner, name, extension, content_type, summary," " description, signature, trust, trust_time, flags," " creation_time, modification_time" " FROM report_formats_trash" " WHERE id = %llu;", resource); report_format = sql_last_insert_id (); init_report_format_param_iterator (¶ms, resource, 1, 1, NULL); while (next (¶ms)) { report_format_param_t param, trash_param; trash_param = report_format_param_iterator_param (¶ms); sql ("INSERT INTO report_format_params" " (report_format, name, type, value, type_min, type_max," " type_regex, fallback)" " SELECT" " %llu, name, type, value, type_min, type_max," " type_regex, fallback" " FROM report_format_params_trash" " WHERE id = %llu;", report_format, trash_param); param = sql_last_insert_id (); sql ("INSERT INTO report_format_param_options" " (report_format_param, value)" " SELECT %llu, value" " FROM report_format_param_options_trash" " WHERE report_format_param = %llu;", param, trash_param); } cleanup_iterator (¶ms); global = report_format_trash_global (resource); trash_uuid = sql_string ("SELECT original_uuid FROM report_formats_trash" " WHERE id = %llu;", resource); if (trash_uuid == NULL) abort (); permissions_set_locations ("report_format", resource, report_format, LOCATION_TABLE); tags_set_locations ("report_format", resource, report_format, LOCATION_TABLE); /* Remove from trash tables. */ sql ("DELETE FROM report_format_param_options_trash" " WHERE report_format_param" " IN (SELECT id from report_format_params_trash" " WHERE report_format = %llu);", resource); sql ("DELETE FROM report_format_params_trash WHERE report_format = %llu;", resource); sql ("DELETE FROM report_formats_trash WHERE id = %llu;", resource); /* Move the dir last, in case any SQL rolls back. */ if (global) dir = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "global_report_formats", trash_uuid, NULL); else dir = g_build_filename (OPENVAS_STATE_DIR, "openvasmd", "report_formats", current_credentials.uuid, trash_uuid, NULL); free (trash_uuid); resource_string = g_strdup_printf ("%llu", resource); trash_dir = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "report_formats_trash", resource_string, NULL); g_free (resource_string); if (move_report_format_dir (trash_dir, dir)) { g_free (dir); g_free (trash_dir); sql ("ROLLBACK;"); return -1; } g_free (dir); g_free (trash_dir); sql ("COMMIT;"); return 0; } /* Role. */ if (find_trash ("role", id, &resource)) { sql ("ROLLBACK;"); return -1; } if (resource) { role_t role; if (sql_int ("SELECT count(*) FROM roles" " WHERE name =" " (SELECT name FROM roles_trash WHERE id = %llu)" " AND ((owner IS NULL) OR (owner =" " (SELECT id FROM users WHERE users.uuid = '%s')));", resource, current_credentials.uuid)) { sql ("ROLLBACK;"); return 3; } sql ("INSERT INTO roles" " (uuid, owner, name, comment, creation_time," " modification_time)" " SELECT uuid, owner, name, comment, creation_time," " modification_time" " FROM roles_trash WHERE id = %llu;", resource); role = sql_last_insert_id (); sql ("INSERT INTO role_users" " (role, \"user\")" " SELECT role, \"user\"" " FROM role_users_trash WHERE role = %llu;", resource); permissions_set_locations ("role", resource, role, LOCATION_TABLE); tags_set_locations ("role", resource, role, LOCATION_TABLE); permissions_set_subjects ("role", resource, role, LOCATION_TABLE); sql ("DELETE FROM role_users_trash WHERE role = %llu;", resource); sql ("DELETE FROM roles_trash WHERE id = %llu;", resource); sql ("COMMIT;"); return 0; } /* Scanner. */ if (find_trash ("scanner", id, &resource)) { sql ("ROLLBACK;"); return -1; } if (resource) { if (sql_int ("SELECT count(*) FROM scanners" " WHERE name =" " (SELECT name FROM scanners_trash WHERE id = %llu)" " AND ((owner IS NULL) OR (owner =" " (SELECT id FROM users WHERE users.uuid = '%s')));", resource, current_credentials.uuid)) { sql ("ROLLBACK;"); return 3; } sql ("INSERT INTO scanners" " (uuid, owner, name, comment, host, port, type, ca_pub," " key_pub, key_priv, creation_time, modification_time)" " SELECT uuid, owner, name, comment, host, port, type, ca_pub," " key_pub, key_priv, creation_time, modification_time" " FROM scanners_trash WHERE id = %llu;", resource); permissions_set_locations ("scanner", resource, sql_last_insert_id (), LOCATION_TABLE); tags_set_locations ("scanner", resource, sql_last_insert_id (), LOCATION_TABLE); sql ("DELETE FROM scanners_trash WHERE id = %llu;", resource); sql ("COMMIT;"); return 0; } /* Schedule. */ if (find_trash ("schedule", id, &resource)) { sql ("ROLLBACK;"); return -1; } if (resource) { if (sql_int ("SELECT count(*) FROM schedules" " WHERE name =" " (SELECT name FROM schedules_trash WHERE id = %llu)" " AND ((owner IS NULL) OR (owner =" " (SELECT id FROM users WHERE users.uuid = '%s')));", resource, current_credentials.uuid)) { sql ("ROLLBACK;"); return 3; } sql ("INSERT INTO schedules" " (uuid, owner, name, comment, first_time, period, period_months," " duration, timezone, initial_offset, creation_time," " modification_time)" " SELECT uuid, owner, name, comment, first_time, period," " period_months, duration, timezone, initial_offset," " creation_time, modification_time" " FROM schedules_trash WHERE id = %llu;", resource); /* Update the schedule in any trashcan tasks. */ sql ("UPDATE tasks" " SET schedule = %llu," " schedule_location = " G_STRINGIFY (LOCATION_TABLE) " WHERE schedule = %llu" " AND schedule_location = " G_STRINGIFY (LOCATION_TRASH), sql_last_insert_id (), resource); permissions_set_locations ("schedule", resource, sql_last_insert_id (), LOCATION_TABLE); tags_set_locations ("schedule", resource, sql_last_insert_id (), LOCATION_TABLE); sql ("DELETE FROM schedules_trash WHERE id = %llu;", resource); sql ("COMMIT;"); return 0; } /* Slave. */ if (find_trash ("slave", id, &resource)) { sql ("ROLLBACK;"); return -1; } if (resource) { if (sql_int ("SELECT count(*) FROM slaves" " WHERE name =" " (SELECT name FROM slaves_trash WHERE id = %llu)" " AND ((owner IS NULL) OR (owner =" " (SELECT id FROM users WHERE users.uuid = '%s')));", resource, current_credentials.uuid)) { sql ("ROLLBACK;"); return 3; } sql ("INSERT INTO slaves" " (uuid, owner, name, comment, host, port, login, password," " creation_time, modification_time)" " SELECT" " uuid, owner, name, comment, host, port, login, password," " creation_time, modification_time" " FROM slaves_trash WHERE id = %llu;", resource); /* Update the slave in any trashcan tasks. */ sql ("UPDATE tasks" " SET slave = %llu," " slave_location = " G_STRINGIFY (LOCATION_TABLE) " WHERE slave = %llu" " AND slave_location = " G_STRINGIFY (LOCATION_TRASH), sql_last_insert_id (), resource); permissions_set_locations ("slave", resource, sql_last_insert_id (), LOCATION_TABLE); tags_set_locations ("slave", resource, sql_last_insert_id (), LOCATION_TABLE); sql ("DELETE FROM slaves_trash WHERE id = %llu;", resource); sql ("COMMIT;"); return 0; } /* Tag */ if (find_trash ("tag", id, &resource)) { sql ("ROLLBACK;"); return -1; } if (resource) { sql ("INSERT INTO tags" " (uuid, owner, name, comment, creation_time," " modification_time, resource_type, resource, resource_uuid," " resource_location, active, value)" " SELECT uuid, owner, name, comment, creation_time," " modification_time, resource_type, resource, resource_uuid," " resource_location, active, value" " FROM tags_trash WHERE id = %llu;", resource); permissions_set_locations ("tag", resource, sql_last_insert_id (), LOCATION_TABLE); sql ("DELETE FROM tags_trash WHERE id = %llu;", resource); sql ("COMMIT;"); return 0; } /* Target. */ if (find_trash ("target", id, &resource)) { sql ("ROLLBACK;"); return -1; } if (resource) { if (sql_int ("SELECT count(*) FROM targets" " WHERE name =" " (SELECT name FROM targets_trash WHERE id = %llu)" " AND ((owner IS NULL) OR (owner =" " (SELECT id FROM users WHERE users.uuid = '%s')));", resource, current_credentials.uuid)) { sql ("ROLLBACK;"); return 3; } /* Check if it uses a credential or port list in the trashcan. */ if (sql_int ("SELECT ssh_location = " G_STRINGIFY (LOCATION_TRASH) " OR smb_location = " G_STRINGIFY (LOCATION_TRASH) " OR port_list_location = " G_STRINGIFY (LOCATION_TRASH) " FROM targets_trash WHERE id = %llu;", resource)) { sql ("ROLLBACK;"); return 1; } sql ("INSERT INTO targets" " (uuid, owner, name, hosts, exclude_hosts, comment, lsc_credential," " ssh_port, smb_lsc_credential, esxi_lsc_credential," " port_range, reverse_lookup_only, reverse_lookup_unify," " alive_test, creation_time, modification_time)" " SELECT uuid, owner, name, hosts, exclude_hosts, comment, " " lsc_credential, ssh_port, smb_lsc_credential," " esxi_lsc_credential, port_range," " reverse_lookup_only, reverse_lookup_unify, alive_test," " creation_time, modification_time" " FROM targets_trash WHERE id = %llu;", resource); /* Update the target in any trashcan tasks. */ sql ("UPDATE tasks" " SET target = %llu," " target_location = " G_STRINGIFY (LOCATION_TABLE) " WHERE target = %llu" " AND target_location = " G_STRINGIFY (LOCATION_TRASH), sql_last_insert_id (), resource); permissions_set_locations ("target", resource, sql_last_insert_id (), LOCATION_TABLE); tags_set_locations ("target", resource, sql_last_insert_id (), LOCATION_TABLE); sql ("DELETE FROM targets_trash WHERE id = %llu;", resource); sql ("COMMIT;"); return 0; } /* Task. */ if (find_trash_task (id, &resource)) { sql ("ROLLBACK;"); return -1; } if (resource) { /* Check if it's in use by a resource in the trashcan. */ if (sql_int ("SELECT (target_location = " G_STRINGIFY (LOCATION_TRASH) ")" " OR (config_location = " G_STRINGIFY (LOCATION_TRASH) ")" " OR (schedule_location = " G_STRINGIFY (LOCATION_TRASH) ")" " OR (slave_location = " G_STRINGIFY (LOCATION_TRASH) ")" " OR (SELECT count(*) > 0 FROM task_alerts" " WHERE task = tasks.id" " AND alert_location = " G_STRINGIFY (LOCATION_TRASH) ")" " FROM tasks WHERE id = %llu;", resource)) { sql ("ROLLBACK;"); return 1; } permissions_set_locations ("task", resource, resource, LOCATION_TABLE); tags_set_locations ("task", resource, resource, LOCATION_TABLE); sql ("UPDATE tags SET resource_location = " G_STRINGIFY (LOCATION_TABLE) " WHERE resource_type = 'report'" " AND resource IN (SELECT id FROM reports" " WHERE reports.task = %llu);", resource); sql ("UPDATE tags SET resource_location = " G_STRINGIFY (LOCATION_TABLE) " WHERE resource_type = 'result'" " AND resource IN (SELECT results.id FROM results" " WHERE results.task = %llu);", resource); sql ("UPDATE tags_trash SET resource_location = " G_STRINGIFY (LOCATION_TABLE) " WHERE resource_type = 'report'" " AND resource IN (SELECT id FROM reports" " WHERE reports.task = %llu);", resource); sql ("UPDATE tags_trash SET resource_location = " G_STRINGIFY (LOCATION_TABLE) " WHERE resource_type = 'result'" " AND resource IN (SELECT results.id FROM results" " WHERE results.task = %llu);", resource); sql ("UPDATE tasks SET hidden = 0 WHERE id = %llu;", resource); sql ("COMMIT;"); return 0; } sql ("ROLLBACK;"); return 2; } #define WHERE_OWNER \ " WHERE owner = (SELECT id FROM users WHERE uuid = '%s')", \ current_credentials.uuid /** * @brief Empty the trashcan. * * @return 0 success, 99 permission denied, -1 error. */ int manage_empty_trashcan () { iterator_t rows; GArray *report_formats; int index, length; sql_begin_immediate (); if (user_may ("empty_trashcan") == 0) { sql ("ROLLBACK;"); return 99; } sql ("DELETE FROM agents_trash" WHERE_OWNER); sql ("DELETE FROM nvt_selectors WHERE name IN" " (SELECT nvt_selector FROM configs_trash" " WHERE owner = (SELECT id FROM users" " WHERE uuid = '%s'));", current_credentials.uuid); sql ("DELETE FROM config_preferences_trash" " WHERE config IN (SELECT id FROM configs_trash" " WHERE owner = (SELECT id FROM users" " WHERE uuid = '%s'));", current_credentials.uuid); sql ("DELETE FROM configs_trash" WHERE_OWNER); sql ("DELETE FROM permissions" " WHERE subject_type = 'group'" " AND subject IN (SELECT id from groups_trash" " WHERE owner = (SELECT id FROM users" " WHERE uuid = '%s'))" " AND subject_location = " G_STRINGIFY (LOCATION_TRASH) ";", current_credentials.uuid); sql ("DELETE FROM group_users_trash" " WHERE \"group\" IN (SELECT id from groups_trash" " WHERE owner = (SELECT id FROM users" " WHERE uuid = '%s'));", current_credentials.uuid); sql ("DELETE FROM groups_trash" WHERE_OWNER); sql ("DELETE FROM alert_condition_data_trash" " WHERE alert IN (SELECT id from alerts_trash" " WHERE owner = (SELECT id FROM users" " WHERE uuid = '%s'));", current_credentials.uuid); sql ("DELETE FROM alert_event_data_trash" " WHERE alert IN (SELECT id from alerts_trash" " WHERE owner = (SELECT id FROM users" " WHERE uuid = '%s'));", current_credentials.uuid); sql ("DELETE FROM alert_method_data_trash" " WHERE alert IN (SELECT id from alerts_trash" " WHERE owner = (SELECT id FROM users" " WHERE uuid = '%s'));", current_credentials.uuid); sql ("DELETE FROM alerts_trash" WHERE_OWNER); sql ("DELETE FROM lsc_credentials_trash" WHERE_OWNER); sql ("DELETE FROM filters_trash" WHERE_OWNER); sql ("DELETE FROM notes_trash" WHERE_OWNER); sql ("DELETE FROM overrides_trash" WHERE_OWNER); sql ("DELETE FROM permissions_trash" WHERE_OWNER); sql ("DELETE FROM port_ranges_trash" " WHERE port_list IN (SELECT id from port_lists_trash" " WHERE owner = (SELECT id FROM users" " WHERE uuid = '%s'));", current_credentials.uuid); sql ("DELETE FROM port_lists_trash" WHERE_OWNER); sql ("DELETE FROM permissions" " WHERE subject_type = 'role'" " AND subject IN (SELECT id from roles_trash" " WHERE owner = (SELECT id FROM users" " WHERE uuid = '%s'))" " AND subject_location = " G_STRINGIFY (LOCATION_TRASH) ";", current_credentials.uuid); sql ("DELETE FROM role_users_trash" " WHERE role IN (SELECT id from roles_trash" " WHERE owner = (SELECT id FROM users" " WHERE uuid = '%s'));", current_credentials.uuid); sql ("DELETE FROM roles_trash" WHERE_OWNER); sql ("DELETE FROM scanners_trash" WHERE_OWNER); sql ("DELETE FROM schedules_trash" WHERE_OWNER); sql ("DELETE FROM slaves_trash" WHERE_OWNER); sql ("DELETE FROM tags_trash" WHERE_OWNER); sql ("DELETE FROM targets_trash" WHERE_OWNER); if (delete_trash_tasks ()) { sql ("ROLLBACK;"); return -1; } sql ("UPDATE permissions" " SET resource = -1" " WHERE resource > 0" " AND resource_location = " G_STRINGIFY (LOCATION_TRASH) " AND owner = (SELECT id FROM users WHERE uuid = '%s');", current_credentials.uuid); sql ("UPDATE tags" " SET resource = 0, resource_location = " G_STRINGIFY (LOCATION_TABLE) " WHERE resource_location = " G_STRINGIFY (LOCATION_TRASH) " AND owner = (SELECT id FROM users WHERE uuid = '%s');", current_credentials.uuid); sql ("DELETE FROM report_format_param_options_trash" " WHERE report_format_param" " IN (SELECT id from report_format_params_trash" " WHERE report_format" " IN (SELECT id FROM report_formats_trash" " WHERE owner = (SELECT id FROM users" " WHERE uuid = '%s')));", current_credentials.uuid); sql ("DELETE FROM report_format_params_trash" " WHERE report_format IN (SELECT id from report_formats_trash" " WHERE owner = (SELECT id FROM users" " WHERE uuid = '%s'));", current_credentials.uuid); init_iterator (&rows, "SELECT id FROM report_formats_trash" WHERE_OWNER); report_formats = g_array_new (FALSE, FALSE, sizeof (report_format_t)); length = 0; while (next (&rows)) { report_format_t id; id = iterator_int64 (&rows, 0); g_array_append_val (report_formats, id); length++; } cleanup_iterator (&rows); sql ("DELETE FROM report_formats_trash" WHERE_OWNER); /* Remove the report formats dirs last, in case any SQL rolls back. */ for (index = 0; index < length; index++) { gchar *dir, *name; name = g_strdup_printf ("%llu", g_array_index (report_formats, report_format_t, index)); dir = g_build_filename (OPENVAS_DATA_DIR, "openvasmd", "report_formats_trash", name, NULL); g_free (name); if (g_file_test (dir, G_FILE_TEST_EXISTS) && openvas_file_remove_recurse (dir)) { g_warning ("%s: failed to remove trash dir %s", __FUNCTION__, dir); g_free (dir); sql ("ROLLBACK;"); return -1; } g_free (dir); } g_array_free (report_formats, TRUE); sql ("COMMIT;"); return 0; } /* Assets. */ /** * @brief Add a report host. * * @param[in] report UUID of resource. * @param[in] host Host. * @param[in] start Start time. * @param[in] end End time. * * @return 0 success, -1 failed to parse XML. */ void manage_report_host_add (report_t report, const char *host, time_t start, time_t end) { char *quoted_host = sql_quote (host); sql ("INSERT INTO report_hosts" " (report, host, start_time, end_time, current_port, max_port)" " SELECT %llu, '%s', %lld, %lld, 0, 0" " WHERE NOT EXISTS (SELECT 1 FROM report_hosts WHERE report = %llu" " AND host = '%s');", report, quoted_host, (long long) start, (long long) end, report, quoted_host); g_free (quoted_host); } /** * @brief Add host details to a report host. * * @param[in] report UUID of resource. * @param[in] host Host. * @param[in] entity XML entity containing details. * * @return 0 success, -1 failed to parse XML. */ int manage_report_host_details (report_t report, const char *host, entity_t entity) { entities_t details; entity_t detail; details = entity->entities; while ((detail = first_entity (details))) { if (strcmp (entity_name (detail), "detail") == 0) { entity_t source, source_type, source_name, source_desc, name, value; source = entity_child (detail, "source"); if (source == NULL) return -1; source_type = entity_child (source, "type"); if (source_type == NULL) return -1; source_name = entity_child (source, "name"); if (source_name == NULL) return -1; source_desc = entity_child (source, "description"); if (source_desc == NULL) return -1; name = entity_child (detail, "name"); if (name == NULL) return -1; value = entity_child (detail, "value"); if (value == NULL) return -1; insert_report_host_detail (report, host, entity_text (source_type), entity_text (source_name), entity_text (source_desc), entity_text (name), entity_text (value)); } details = next_entities (details); } return 0; } /** * @brief Add a host detail to a report host. * * @param[in] report UUID of resource. * @param[in] host Host. * @param[in] xml Report host detail XML. * * @return 0 success, -1 failed to parse XML, -2 host was NULL. */ int manage_report_host_detail (report_t report, const char *host, const char *xml) { int ret; entity_t entity; if (host == NULL) return -2; entity = NULL; if (parse_entity (xml, &entity)) return -1; ret = manage_report_host_details (report, host, entity); free_entity (entity); return ret; } /* Settings. */ /** * @brief Filter columns for setting iterator. */ #define SETTING_ITERATOR_FILTER_COLUMNS \ { "name", "comment", "value", NULL } /** * @brief Setting iterator columns. */ #define SETTING_ITERATOR_COLUMNS \ { \ { "id" , NULL }, \ { "uuid", NULL }, \ { "name", NULL }, \ { "comment", NULL }, \ { "value", NULL }, \ { NULL, NULL } \ } /** * @brief Count number of settings. * * @param[in] filter Filter term. * * @return Total number of settings in filtered set. */ int setting_count (const char *filter) { static const char *filter_columns[] = SETTING_ITERATOR_FILTER_COLUMNS; static column_t select_columns[] = SETTING_ITERATOR_COLUMNS; gchar *clause; int ret; assert (current_credentials.uuid); clause = filter_clause ("setting", filter, filter_columns, select_columns, NULL, 0, NULL, NULL, NULL, NULL, NULL); ret = sql_int ("SELECT count (*)" " FROM settings" " WHERE" " (owner = (SELECT id FROM users WHERE uuid = '%s')" " OR (owner IS NULL" " AND uuid" " NOT IN (SELECT uuid FROM settings" " WHERE owner = (SELECT id FROM users" " WHERE uuid = '%s'))))" "%s%s;", current_credentials.uuid, current_credentials.uuid, clause ? " AND " : "", clause ? clause : ""); g_free (clause); return ret; } /** * @brief Return the uuid of a resource filter from settings. * * @param[in] resource Resource (eg. Filters, Targets, CPE). * * @return resource filter uuid in settings if it exists, "" otherwise. */ char * setting_filter (const char *resource) { return sql_string ("SELECT value FROM settings WHERE name = '%s Filter'" " AND ((owner IS NULL)" " OR (owner =" " (SELECT id FROM users WHERE users.uuid = '%s')))" " ORDER BY owner DESC;", resource, current_credentials.uuid); } /** * @brief Return the Severity Class user setting. * * @return User Severity Class in settings if it exists, "" otherwise. */ const char * setting_severity () { if (current_credentials.severity_class) return current_credentials.severity_class; return "nist"; } /** * @brief Return the Default Severity user setting as a double. * * @return The user's Default Severity. */ double setting_default_severity_dbl () { return current_credentials.default_severity; } /** * @brief Return the Dynamic Severity user setting as an int. * * @return 1 if user's Dynamic Severity is "Yes", 0 if it is "No", * or does not exist. */ int setting_dynamic_severity_int () { return current_credentials.dynamic_severity; } /** * @brief Return the user's timezone. * * @return User Severity Class in settings if it exists, else NULL. */ char * setting_timezone () { return sql_string ("SELECT timezone FROM users WHERE uuid = '%s'", current_credentials.uuid); } /** * @brief Initialise a setting iterator, including observed settings. * * @param[in] iterator Iterator. * @param[in] uuid UUID of setting to limit iteration to. 0 for all. * @param[in] filter Filter term. * @param[in] first First setting. * @param[in] max Maximum number of settings returned. * @param[in] ascending Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "id". */ void init_setting_iterator (iterator_t *iterator, const char *uuid, const char *filter, int first, int max, int ascending, const char *sort_field) { static const char *filter_columns[] = SETTING_ITERATOR_FILTER_COLUMNS; static column_t select_columns[] = SETTING_ITERATOR_COLUMNS; gchar *clause, *columns, *quoted_uuid; assert (current_credentials.uuid); if (first < 0) first = 0; if (max < 1) max = -1; clause = filter_clause ("setting", filter, filter_columns, select_columns, NULL, 0, NULL, NULL, NULL, NULL, NULL); quoted_uuid = uuid ? sql_quote (uuid) : NULL; columns = columns_build_select (select_columns); if (quoted_uuid) init_iterator (iterator, "SELECT %s" " FROM settings" " WHERE uuid = '%s'" " AND ((owner IS NULL)" " OR (owner = (SELECT id FROM users" " WHERE users.uuid = '%s')))" /* Force the user's setting to come before the default. */ " ORDER BY owner DESC;", columns, quoted_uuid, current_credentials.uuid); else init_iterator (iterator, "SELECT %s" " FROM settings" " WHERE" " (owner = (SELECT id FROM users WHERE uuid = '%s')" " OR (owner IS NULL" " AND uuid" " NOT IN (SELECT uuid FROM settings" " WHERE owner = (SELECT id FROM users" " WHERE uuid = '%s'))))" "%s%s" " ORDER BY %s %s" " LIMIT %s OFFSET %i;", columns, current_credentials.uuid, current_credentials.uuid, clause ? " AND " : "", clause ? clause : "", sort_field ? sort_field : "id", ascending ? "ASC" : "DESC", sql_select_limit (max), first); g_free (columns); g_free (clause); } /** * @brief Get the UUID from a setting iterator. * * @param[in] iterator Iterator. * * @return The UUID of the setting, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (setting_iterator_uuid, 1); /** * @brief Get the name from a setting iterator. * * @param[in] iterator Iterator. * * @return The name of the setting, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (setting_iterator_name, 2); /** * @brief Get the comment from a setting iterator. * * @param[in] iterator Iterator. * * @return The comment of the setting, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (setting_iterator_comment, 3); /** * @brief Get the value from a setting iterator. * * @param[in] iterator Iterator. * * @return The value of the setting, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (setting_iterator_value, 4); /** * @brief Get the value of a setting. * * @param[in] uuid UUID of setting. * @param[out] value Value. * * @return 0 success, -1 error. */ int setting_value_int (const char *uuid, int *value) { gchar *quoted_uuid; if (value == NULL || uuid == NULL) return -1; quoted_uuid = sql_quote (uuid); if (sql_int ("SELECT count (*)" " FROM settings" " WHERE uuid = '%s'" " AND ((owner IS NULL)" " OR (owner =" " (SELECT id FROM users WHERE users.uuid = '%s')));", quoted_uuid, current_credentials.uuid) == 0) { *value = -1; g_free (quoted_uuid); return -1; } *value = sql_int ("SELECT value" " FROM settings" " WHERE uuid = '%s'" " AND ((owner IS NULL)" " OR (owner =" " (SELECT id FROM users WHERE users.uuid = '%s')))" /* Force the user's setting to come before the default. */ " ORDER BY owner DESC;", quoted_uuid, current_credentials.uuid); g_free (quoted_uuid); return 0; } /** * @brief Set the value of a setting. * * @param[in] uuid UUID of setting. * @param[in] name Setting name. For Timezone and Password. * @param[in] value_64 New setting value, base64 encoded. * @param[out] r_errdesc If not NULL the address of a variable to receive * a malloced string with the error description. Will * always be set to NULL on success. * * @return 0 success, 1 failed to find setting, 2 syntax error in value, * 99 permission denied, -1 on error. */ int modify_setting (const gchar *uuid, const gchar *name, const gchar *value_64, gchar **r_errdesc) { char *setting_name; assert (current_credentials.uuid); if (user_may ("modify_setting") == 0) return 99; if (r_errdesc) *r_errdesc = NULL; if (name && (strcmp (name, "Timezone") == 0)) { gsize value_size; gchar *quoted_timezone, *value; if (value_64 && strlen (value_64)) value = (gchar*) g_base64_decode (value_64, &value_size); else { value = g_strdup (""); value_size = 0; } quoted_timezone = sql_quote (value); g_free (value); sql ("UPDATE users SET timezone = '%s', modification_time = m_now ()" " WHERE uuid = '%s';", quoted_timezone, current_credentials.uuid); g_free (quoted_timezone); return 0; } if (name && (strcmp (name, "Password") == 0)) { gsize value_size; gchar *value; int ret; assert (current_credentials.username); if (value_64 && strlen (value_64)) value = (gchar*) g_base64_decode (value_64, &value_size); else { value = g_strdup (""); value_size = 0; } ret = set_password (current_credentials.username, current_credentials.uuid, value, r_errdesc); g_free (value); return ret; } if (uuid && (strcmp (uuid, "5f5a8712-8017-11e1-8556-406186ea4fc5") == 0 || strcmp (uuid, "f16bb236-a32d-4cd5-a880-e0fcf2599f59") == 0 || strcmp (uuid, "20f3034c-e709-11e1-87e7-406186ea4fc5") == 0 || strcmp (uuid, "6765549a-934e-11e3-b358-406186ea4fc5") == 0 || strcmp (uuid, "77ec2444-e7f2-4a80-a59b-f4237782d93f") == 0 || strcmp (uuid, "7eda49c5-096c-4bef-b1ab-d080d87300df") == 0 || strcmp (uuid, "578a1c14-e2dc-45ef-a591-89d31391d007") == 0)) { gsize value_size; gchar *value, *quoted_uuid, *quoted_value; assert (current_credentials.username); quoted_uuid = sql_quote (uuid); if (sql_int ("SELECT count(*) FROM settings" " WHERE uuid = '%s'" " AND owner IS NULL;", quoted_uuid, current_credentials.uuid) == 0) { g_free (quoted_uuid); return 1; } if (value_64 && strlen (value_64)) value = (gchar*) g_base64_decode (value_64, &value_size); else { value = g_strdup (""); value_size = 0; } if (strcmp (uuid, "5f5a8712-8017-11e1-8556-406186ea4fc5") == 0) { const gchar *val; /* Rows Per Page. */ val = value; while (*val && isdigit (*val)) val++; if (*val && strcmp (value, "-1")) { g_free (quoted_uuid); return 2; } } if (strcmp (uuid, "6765549a-934e-11e3-b358-406186ea4fc5") == 0) { GRegex *languages_regex; gboolean match; /* * regex: colon-separated lists of language or language and country * codes (ISO 639-1, 639-2 and 3166-1 alpha-2) * as used in the LANGUAGE env variable by gettext */ languages_regex = g_regex_new ("^(Browser Language|" "([a-z]{2,3})(_[A-Z]{2})?(@[[:alnum:]_-]+)?" "(:([a-z]{2,3})(_[A-Z]{2})?(@[[:alnum:]_-]+)?)*)$", 0, 0, NULL); match = g_regex_match (languages_regex, value, 0, NULL); g_regex_unref (languages_regex); /* User Interface Language. */ if (match) { // Valid languages string or "Browser Language": // keep string as it is } /* Legacy full language names */ else if (strcmp (value, "Chinese") == 0) { g_free (value); value = g_strdup ("zh_CN"); } else if (strcmp (value, "English") == 0) { g_free (value); value = g_strdup ("en"); } else if (strcmp (value, "German") == 0) { g_free (value); value = g_strdup ("de"); } /* Invalid value */ else { g_free (quoted_uuid); g_free (value); return 2; } } if (strcmp (uuid, "f16bb236-a32d-4cd5-a880-e0fcf2599f59") == 0) { /* Severity Class */ g_free (current_credentials.severity_class); current_credentials.severity_class = g_strdup (value); } if (strcmp (uuid, "77ec2444-e7f2-4a80-a59b-f4237782d93f") == 0) { /* Dynamic Severity */ current_credentials.dynamic_severity = atoi (value); } if (strcmp (uuid, "7eda49c5-096c-4bef-b1ab-d080d87300df") == 0) { double severity_dbl; /* Default Severity */ if (sscanf (value, "%lf", &severity_dbl) != 1 || severity_dbl < 0.0 || severity_dbl > 10.0) { g_free (value); return 2; } else current_credentials.default_severity = severity_dbl; } quoted_value = sql_quote (value); g_free (value); if (sql_int ("SELECT count(*) FROM settings" " WHERE uuid = '%s'" " AND owner = (SELECT id FROM users WHERE uuid = '%s');", quoted_uuid, current_credentials.uuid)) sql ("UPDATE settings SET value = '%s'" " WHERE uuid = '%s'" " AND owner = (SELECT id FROM users WHERE uuid = '%s');", quoted_value, quoted_uuid, current_credentials.uuid); else sql ("INSERT INTO settings (uuid, owner, name, comment, value)" " VALUES" " ('%s'," " (SELECT id FROM users WHERE uuid = '%s')," " (SELECT name FROM settings" " WHERE uuid = '%s' AND owner IS NULL" " LIMIT 1)," " (SELECT comment FROM settings" " WHERE uuid = '%s' AND owner IS NULL" " LIMIT 1)," " '%s');", quoted_uuid, current_credentials.uuid, quoted_uuid, quoted_uuid, quoted_value); g_free (quoted_uuid); g_free (quoted_value); return 0; } /* Export file name format */ if (uuid && (strcmp (uuid, "a6ac88c5-729c-41ba-ac0a-deea4a3441f2") == 0 || strcmp (uuid, "0872a6ed-4f85-48c5-ac3f-a5ef5e006745") == 0 || strcmp (uuid, "e1a2ae0b-736e-4484-b029-330c9e15b900") == 0)) { gsize value_size; gchar *value, *quoted_value; assert (current_credentials.uuid); if (strcmp (uuid, "a6ac88c5-729c-41ba-ac0a-deea4a3441f2") == 0) setting_name = "Details Export File Name"; else if (strcmp (uuid, "0872a6ed-4f85-48c5-ac3f-a5ef5e006745") == 0) setting_name = "List Export File Name"; else if (strcmp (uuid, "e1a2ae0b-736e-4484-b029-330c9e15b900") == 0) setting_name = "Report Export File Name"; else return -1; if (value_64 && strlen (value_64)) value = (gchar*) g_base64_decode (value_64, &value_size); else { value = g_strdup (""); value_size = 0; } quoted_value = sql_quote (value); if (strcmp (value, "") == 0) { g_free (value); g_free (quoted_value); return 2; } if (sql_int ("SELECT count(*) FROM settings" " WHERE uuid = '%s'" " AND owner = (SELECT id FROM users WHERE uuid = '%s');", uuid, current_credentials.uuid)) sql ("UPDATE settings SET value = '%s'" " WHERE uuid = '%s'" " AND owner = (SELECT id FROM users WHERE uuid = '%s');", quoted_value, uuid, current_credentials.uuid); else sql ("INSERT INTO settings (uuid, owner, name, comment, value)" " VALUES" " ('%s'," " (SELECT id FROM users WHERE uuid = '%s')," " '%s'," " (SELECT comment FROM settings" " WHERE uuid = '%s' AND owner IS NULL)," " '%s');", uuid, current_credentials.uuid, setting_name, uuid, quoted_value); g_free (value); g_free (quoted_value); return 0; } /* Resources filters, default resource selections and chart preferences. */ setting_name = NULL; if (uuid) { /* Filters */ if (strcmp (uuid, "4a1334c1-cb93-4a79-8634-103b0a50bdcd") == 0) setting_name = g_strdup ("Agents Filter"); else if (strcmp (uuid, "b833a6f2-dcdc-4535-bfb0-a5154b5b5092") == 0) setting_name = g_strdup ("Alerts Filter"); else if (strcmp (uuid, "1a9fbd91-0182-44cd-bc88-a13a9b3b1bef") == 0) setting_name = g_strdup ("Configs Filter"); else if (strcmp (uuid, "186a5ac8-fe5a-4fb1-aa22-44031fb339f3") == 0) setting_name = g_strdup ("Credentials Filter"); else if (strcmp (uuid, "f9691163-976c-47e7-ad9a-38f2d5c81649") == 0) setting_name = g_strdup ("Filters Filter"); else if (strcmp (uuid, "96abcd5a-9b6d-456c-80b8-c3221bfa499d") == 0) setting_name = g_strdup ("Notes Filter"); else if (strcmp (uuid, "eaaaebf1-01ef-4c49-b7bb-955461c78e0a") == 0) setting_name = g_strdup ("Overrides Filter"); else if (strcmp (uuid, "ffb16b28-538c-11e3-b8f9-406186ea4fc5") == 0) setting_name = g_strdup ("Permissions Filter"); else if (strcmp (uuid, "7d52d575-baeb-4d98-bb68-e1730dbc6236") == 0) setting_name = g_strdup ("Port Lists Filter"); else if (strcmp (uuid, "48ae588e-9085-41bc-abcb-3d6389cf7237") == 0) setting_name = g_strdup ("Reports Filter"); else if (strcmp (uuid, "249c7a55-065c-47fb-b453-78e11a665565") == 0) setting_name = g_strdup ("Report Formats Filter"); else if (strcmp (uuid, "739ab810-163d-11e3-9af6-406186ea4fc5") == 0) setting_name = g_strdup ("Results Filter"); else if (strcmp (uuid, "f38e673a-bcd1-11e2-a19a-406186ea4fc5") == 0) setting_name = g_strdup ("Roles Filter"); else if (strcmp (uuid, "a83e321b-d994-4ae8-beec-bfb5fe3e7336") == 0) setting_name = g_strdup ("Schedules Filter"); else if (strcmp (uuid, "2681c32a-8dfd-40c9-a9c6-8d4e2c7799eb") == 0) setting_name = g_strdup ("Slaves Filter"); else if (strcmp (uuid, "108eea3b-fc61-483c-9da9-046762f137a8") == 0) setting_name = g_strdup ("Tags Filter"); else if (strcmp (uuid, "236e2e41-9771-4e7a-8124-c432045985e0") == 0) setting_name = g_strdup ("Targets Filter"); else if (strcmp (uuid, "1c981851-8244-466c-92c4-865ffe05e721") == 0) setting_name = g_strdup ("Tasks Filter"); else if (strcmp (uuid, "3414a107-ae46-4dea-872d-5c4479a48e8f") == 0) setting_name = g_strdup ("CPE Filter"); else if (strcmp (uuid, "def63b5a-41ef-43f4-b9ef-03ef1665db5d") == 0) setting_name = g_strdup ("CVE Filter"); else if (strcmp (uuid, "bef08b33-075c-4f8c-84f5-51f6137e40a3") == 0) setting_name = g_strdup ("NVT Filter"); else if (strcmp (uuid, "adb6ffc8-e50e-4aab-9c31-13c741eb8a16") == 0) setting_name = g_strdup ("OVAL Filter"); else if (strcmp (uuid, "e4cf514a-17e2-4ab9-9c90-336f15e24750") == 0) setting_name = g_strdup ("CERT-Bund Filter"); else if (strcmp (uuid, "312350ed-bc06-44f3-8b3f-ab9eb828b80b") == 0) setting_name = g_strdup ("DFN-CERT Filter"); else if (strcmp (uuid, "feefe56b-e2da-4913-81cc-1a6ae3b36e64") == 0) setting_name = g_strdup ("All SecInfo Filter"); /* Default resource selections */ else if (strcmp (uuid, "f9f5a546-8018-48d0-bef5-5ad4926ea899") == 0) setting_name = g_strdup ("Default Alert"); else if (strcmp (uuid, "fe7ea321-e3e3-4cc6-9952-da836aae83ce") == 0) setting_name = g_strdup ("Default OpenVAS Scan Config"); else if (strcmp (uuid, "fb19ac4b-614c-424c-b046-0bc32bf1be73") == 0) setting_name = g_strdup ("Default OSP Scan Config"); else if (strcmp (uuid, "6fc56b72-c1cf-451c-a4c4-3a9dc784c3bd") == 0) setting_name = g_strdup ("Default SSH Credential"); else if (strcmp (uuid, "a25c0cfe-f977-417b-b1da-47da370c03e8") == 0) setting_name = g_strdup ("Default SMB Credential"); else if (strcmp (uuid, "83545bcf-0c49-4b4c-abbf-63baf82cc2a7") == 0) setting_name = g_strdup ("Default ESXi Credential"); else if (strcmp (uuid, "d74a9ee8-7d35-4879-9485-ab23f1bd45bc") == 0) setting_name = g_strdup ("Default Port List"); else if (strcmp (uuid, "f7d0f6ed-6f9e-45dc-8bd9-05cced84e80d") == 0) setting_name = g_strdup ("Default OpenVAS Scanner"); else if (strcmp (uuid, "b20697c9-be0a-4cd4-8b4d-5fe7841ebb03") == 0) setting_name = g_strdup ("Default OSP Scanner"); else if (strcmp (uuid, "778eedad-5550-4de0-abb6-1320d13b5e18") == 0) setting_name = g_strdup ("Default Schedule"); else if (strcmp (uuid, "aec201fa-8a82-4b61-bebe-a44ea93b2909") == 0) setting_name = g_strdup ("Default Slave"); else if (strcmp (uuid, "23409203-940a-4b4a-b70c-447475f18323") == 0) setting_name = g_strdup ("Default Target"); /* Scan Management charts */ else if (strcmp (uuid, "3d5db3c7-5208-4b47-8c28-48efc621b1e0") == 0) setting_name = g_strdup ("Chart Selection Tasks Left"); else if (strcmp (uuid, "ce8608af-7e66-45a8-aa8a-76def4f9f838") == 0) setting_name = g_strdup ("Chart Selection Tasks Right"); /* SecInfo charts */ else if (strcmp (uuid, "84ab32da-fe69-44d8-8a8f-70034cf28d4e") == 0) setting_name = g_strdup ("Chart Selection SecInfo Dashboard 1"); else if (strcmp (uuid, "517d0efe-426e-49a9-baa7-eda2832c93e8") == 0) setting_name = g_strdup ("Chart Filter SecInfo Dashboard 1"); else if (strcmp (uuid, "42d48049-3153-43bf-b30d-72ca5ab1eb49") == 0) setting_name = g_strdup ("Chart Selection SecInfo Dashboard 2"); else if (strcmp (uuid, "3c693fb2-4f87-4b1f-a09e-cb9aa66440f4") == 0) setting_name = g_strdup ("Chart Filter SecInfo Dashboard 2"); else if (strcmp (uuid, "76f34fe0-254a-4481-97aa-c6f1da2f842b") == 0) setting_name = g_strdup ("Chart Selection SecInfo Dashboard 3"); else if (strcmp (uuid, "bffa72a5-8110-49f9-aa5e-f431ce834826") == 0) setting_name = g_strdup ("Chart Filter SecInfo Dashboard 3"); else if (strcmp (uuid, "71106ed7-b677-414e-bf67-2e7716441db3") == 0) setting_name = g_strdup ("Chart Selection SecInfo Dashboard 4"); else if (strcmp (uuid, "268079c6-f353-414f-9b7c-43f5419edf2d") == 0) setting_name = g_strdup ("Chart Filter SecInfo Dashboard 4"); else if (strcmp (uuid, "f68d9369-1945-477b-968f-121c6029971b") == 0) setting_name = g_strdup ("Chart Selection NVTs Left"); else if (strcmp (uuid, "af89a84a-d3ec-43a8-97a8-aa688bf093bc") == 0) setting_name = g_strdup ("Chart Selection NVTs Right"); else if (strcmp (uuid, "815ddd2e-8654-46c7-a05b-d73224102240") == 0) setting_name = g_strdup ("Chart Selection CVEs Left"); else if (strcmp (uuid, "418a5746-d68a-4a2d-864a-0da993b32220") == 0) setting_name = g_strdup ("Chart Selection CVEs Right"); else if (strcmp (uuid, "9cff9b4d-b164-43ce-8687-f2360afc7500") == 0) setting_name = g_strdup ("Chart Selection CPEs Left"); else if (strcmp (uuid, "629fdb73-35fa-4247-9018-338c202f7c03") == 0) setting_name = g_strdup ("Chart Selection CPEs Right"); else if (strcmp (uuid, "9563efc0-9f4e-4d1f-8f8d-0205e32b90a4") == 0) setting_name = g_strdup ("Chart Selection OVAL Definitions Left"); else if (strcmp (uuid, "fe1610a3-4e87-4b0d-9b7a-f0f66fef586b") == 0) setting_name = g_strdup ("Chart Selection OVAL Definitions Right"); else if (strcmp (uuid, "a6946f44-480f-4f37-8a73-28a4cd5310c4") == 0) setting_name = g_strdup ("Chart Selection CERT-Bund Advisories Left"); else if (strcmp (uuid, "469d50da-880a-4bfc-88ed-22e53764c683") == 0) setting_name = g_strdup ("Chart Selection CERT-Bund Advisories Right"); else if (strcmp (uuid, "9812ea49-682d-4f99-b3cc-eca051d1ce59") == 0) setting_name = g_strdup ("Chart Selection DFN-CERT Advisories Left"); else if (strcmp (uuid, "72014b52-4389-435d-9438-8c13601ecbd2") == 0) setting_name = g_strdup ("Chart Selection DFN-CERT Advisories Right"); else if (strcmp (uuid, "4c7b1ea7-b7e6-4d12-9791-eb9f72b6f864") == 0) setting_name = g_strdup ("Chart Selection All SecInfo Left"); else if (strcmp (uuid, "985f38eb-1a30-4a35-abb6-3eec05b5d54a") == 0) setting_name = g_strdup ("Chart Selection All SecInfo Right"); } if (setting_name) { gchar *quoted_value, *value; gsize value_size; assert (current_credentials.username); if (value_64 && strlen (value_64)) value = (gchar*) g_base64_decode (value_64, &value_size); else { value = g_strdup (""); value_size = 0; } quoted_value = sql_quote (value); if (sql_int ("SELECT count(*) FROM settings" " WHERE uuid = '%s'" " AND owner = (SELECT id FROM users WHERE uuid = '%s');", uuid, current_credentials.uuid)) sql ("UPDATE settings SET value = '%s'" " WHERE uuid = '%s'" " AND owner = (SELECT id FROM users WHERE uuid = '%s');", quoted_value, uuid, current_credentials.uuid); else sql ("INSERT INTO settings (uuid, owner, name, comment, value)" " VALUES" " ('%s'," " (SELECT id FROM users WHERE uuid = '%s')," " '%s'," " (SELECT comment FROM settings" " WHERE uuid = '%s' AND owner IS NULL)," " '%s');", uuid, current_credentials.uuid, setting_name, uuid, quoted_value); g_free (value); g_free (quoted_value); return 0; } return 1; } /* SCAP. */ /** * @brief Filter columns for CVE iterator. */ #define CVE_INFO_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "vector", \ "complexity", "authentication", "confidentiality_impact", \ "integrity_impact", "availability_impact", "products", \ "cvss", "description", "severity", "published", NULL } /** * @brief CVE iterator columns. */ #define CVE_INFO_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS_PREFIX (""), \ { "''", "_owner" }, \ { "0", NULL }, \ { "vector", NULL }, \ { "complexity", NULL }, \ { "authentication", NULL }, \ { "confidentiality_impact", NULL }, \ { "integrity_impact", NULL }, \ { "availability_impact", NULL }, \ { "products", NULL }, \ { "cvss", NULL }, \ { "description", NULL }, \ { "cvss", "severity" }, \ { "creation_time", "published" }, \ { NULL, NULL } \ } /** * @brief Filter columns for CVE iterator. */ #define CPE_INFO_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "title", "status", \ "deprecated_by_id", "max_cvss", "cves", "nvd_id", \ "severity", NULL } /** * @brief CPE iterator columns. */ #define CPE_INFO_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS_PREFIX (""), \ { "''", "_owner" }, \ { "0", NULL }, \ { "title", NULL }, \ { "status", NULL }, \ { "deprecated_by_id", NULL }, \ { "max_cvss", NULL }, \ { "cve_refs", "cves" }, \ { "nvd_id", NULL }, \ { "max_cvss", "severity" }, \ { NULL, NULL } \ } /** * @brief Filter columns for OVALDEF iterator. */ #define OVALDEF_INFO_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "version", "deprecated", \ "class", "title", "description", "file", \ "status", "max_cvss", "cves", "severity", NULL } /** * @brief OVALDEF iterator columns. */ #define OVALDEF_INFO_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS_PREFIX (""), \ { "''", "_owner" }, \ { "0", NULL }, \ { "version", NULL }, \ { "deprecated", NULL }, \ { "def_class", "class"}, \ { "title", NULL }, \ { "description", NULL }, \ { "xml_file", "file" }, \ { "status", NULL }, \ { "max_cvss", NULL }, \ { "cve_refs", "cves" }, \ { "max_cvss", "severity" }, \ { NULL, NULL } \ } /** * @brief Filter columns for CERT_BUND_ADV iterator. */ #define CERT_BUND_ADV_INFO_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "title", "summary", \ "cves", "max_cvss", "severity", NULL } /** * @brief CERT_BUND_ADV iterator columns. */ #define CERT_BUND_ADV_INFO_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS_PREFIX (""), \ { "''", "_owner" }, \ { "0", NULL }, \ { "title", NULL }, \ { "summary", NULL }, \ { "cve_refs", "cves" }, \ { "max_cvss", NULL }, \ { "max_cvss", "severity" }, \ { NULL, NULL } \ } /** * @brief Filter columns for DFN_CERT_ADV iterator. */ #define DFN_CERT_ADV_INFO_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "title", "summary", \ "cves", "max_cvss", "severity", NULL } /** * @brief DFN_CERT_ADV iterator columns. */ #define DFN_CERT_ADV_INFO_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS_PREFIX (""), \ { "''", "_owner" }, \ { "0", NULL }, \ { "title", NULL }, \ { "summary", NULL }, \ { "cve_refs", "cves" }, \ { "max_cvss", NULL }, \ { "max_cvss", "severity" }, \ { NULL, NULL } \ } /** * @brief Filter columns for All SecInfo iterator. */ #define ALL_INFO_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "type", "extra", "severity", NULL } /** * @brief All SecInfo iterator columns. */ #define ALL_INFO_ITERATOR_COLUMNS \ { \ { "id", NULL }, \ { "uuid", NULL }, \ { "name", NULL }, \ { "comment", NULL }, \ { "iso_time (created)", NULL }, \ { "iso_time (modified)", NULL }, \ { "created", NULL }, \ { "modified", NULL }, \ { "''", "_owner" }, \ { "0", NULL }, \ { "type", NULL }, \ { "extra", NULL }, \ { "severity", NULL }, \ { NULL, NULL } \ } /** * @brief All SecInfo iterator column union. */ #define ALL_INFO_UNION_COLUMNS \ "(SELECT " GET_ITERATOR_COLUMNS_STRING ", '' AS _owner, 'cve' AS type," \ " description as extra, cvss as severity" \ " FROM cves" \ " UNION ALL SELECT " GET_ITERATOR_COLUMNS_STRING ", '' AS _owner," \ " 'cpe' AS type, title as extra, max_cvss as severity" \ " FROM cpes" \ " UNION ALL SELECT " GET_ITERATOR_COLUMNS_STRING ", '' AS _owner," \ " 'nvt' AS type, CASE summary WHEN 'NOSUMMARY' THEN tag" \ " ELSE summary END AS extra," \ " CAST (cvss_base AS float) as severity" \ " FROM nvts" \ " UNION ALL SELECT " GET_ITERATOR_COLUMNS_STRING ", '' AS _owner," \ " 'cert_bund_adv' AS type, title as extra," \ " max_cvss as severity" \ " FROM cert_bund_advs" \ " UNION ALL SELECT " GET_ITERATOR_COLUMNS_STRING ", '' AS _owner," \ " 'dfn_cert_adv' AS type, title as extra," \ " max_cvss as severity" \ " FROM dfn_cert_advs" \ " UNION ALL SELECT " GET_ITERATOR_COLUMNS_STRING ", '' AS _owner," \ " 'ovaldef' AS type, title as extra, max_cvss as severity" \ " FROM ovaldefs)" \ " AS allinfo" /** * @brief Initialise an CVE iterator, for CVEs reported for a certain CPE. * * @param[in] iterator Iterator. * @param[in] cve CVE. * @param[in] ascending Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "id". */ void init_cpe_cve_iterator (iterator_t *iterator, const char *cve, int ascending, const char *sort_field) { gchar *quoted_cpe; assert (cve); quoted_cpe = sql_quote (cve); init_iterator (iterator, "SELECT id, name, cvss FROM cves WHERE id IN" " (SELECT cve FROM affected_products" " WHERE cpe =" " (SELECT id FROM cpes WHERE name = '%s'))" " ORDER BY %s %s;", quoted_cpe, sort_field ? sort_field : "cvss DESC, name", ascending ? "ASC" : "DESC"); g_free (quoted_cpe); } /** * @brief Get the name from a CVE iterator. * * @param[in] iterator Iterator. * * @return The name of the CVE, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (cve_iterator_name, 1); /** * @brief Get the CVSS from a CVE iterator. * * @param[in] iterator Iterator. * * @return The CVSS of the CVE, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (cve_iterator_cvss, 2); /** * @brief Count number of cpe. * * @param[in] get GET params. * * @return Total number of cpes in filtered set. */ int cpe_info_count (const get_data_t *get) { static const char *filter_columns[] = CPE_INFO_ITERATOR_FILTER_COLUMNS; static column_t columns[] = CPE_INFO_ITERATOR_COLUMNS; return count ("cpe", get, columns, NULL, filter_columns, 0, 0, 0, FALSE); } /** * @brief Initialise a info iterator. * * @param[in] iterator Iterator. * @param[in] get GET data. * @param[in] name Name of the info * * @return 0 success, 1 failed to find target, 2 failed to find filter, * -1 error. */ int init_cpe_info_iterator (iterator_t* iterator, get_data_t *get, const char *name) { static const char *filter_columns[] = CPE_INFO_ITERATOR_FILTER_COLUMNS; static column_t columns[] = CPE_INFO_ITERATOR_COLUMNS; gchar *clause = NULL; int ret; if (get->id) { gchar *quoted = sql_quote (get->id); clause = g_strdup_printf (" AND uuid = '%s'", quoted); g_free (quoted); /* The entry is specified by ID, so filtering just gets in the way. */ g_free (get->filter); get->filter = NULL; } else if (name) { gchar *quoted = sql_quote (name); clause = g_strdup_printf (" AND name = '%s'", quoted); g_free (quoted); /* The entry is specified by name, so filtering just gets in the way. */ g_free (get->filter); get->filter = NULL; } ret = init_get_iterator (iterator, "cpe", get, columns, NULL, filter_columns, 0, NULL, clause, FALSE); g_free (clause); return ret; } /** * @brief Get the short file name for an OVALDEF. * * @param[in] cve Full OVAL identifier with file suffix. * * @return The file name of the OVAL definition relative to the SCAP directory, * Freed by g_free. */ gchar * cve_cvss_base (const gchar *cve) { gchar *quoted_cve, *ret; quoted_cve = sql_quote (cve); ret = sql_string ("SELECT cvss FROM cves WHERE name = '%s'", quoted_cve); g_free (quoted_cve); return ret; } /** * @brief Count number of cve. * * @param[in] get GET params. * * @return Total number of cpes in filtered set. */ int cve_info_count (const get_data_t *get) { static const char *filter_columns[] = CVE_INFO_ITERATOR_FILTER_COLUMNS; static column_t columns[] = CVE_INFO_ITERATOR_COLUMNS; return count ("cve", get, columns, NULL, filter_columns, 0, 0, 0, FALSE); } /** * @brief Initialise a info iterator. * * @param[in] iterator Iterator. * @param[in] get GET data. * @param[in] name Name of the info * * @return 0 success, 1 failed to find target, 2 failed to find filter, * -1 error. */ int init_cve_info_iterator (iterator_t* iterator, get_data_t *get, const char *name) { static const char *filter_columns[] = CVE_INFO_ITERATOR_FILTER_COLUMNS; static column_t columns[] = CVE_INFO_ITERATOR_COLUMNS; gchar *clause = NULL; int ret; if (get->id) { gchar *quoted = sql_quote (get->id); clause = g_strdup_printf (" AND uuid = '%s'", quoted); g_free (quoted); /* The entry is specified by ID, so filtering just gets in the way. */ g_free (get->filter); get->filter = NULL; } else if (name) { gchar *quoted = sql_quote (name); clause = g_strdup_printf (" AND name = '%s'", quoted); g_free (quoted); /* The entry is specified by name, so filtering just gets in the way. */ g_free (get->filter); get->filter = NULL; } ret = init_get_iterator (iterator, "cve", get, columns, NULL, filter_columns, 0, NULL, clause, FALSE); g_free (clause); return ret; } /** * @brief Get the title from a CPE iterator. * * @param[in] iterator Iterator. * * @return The Title of the CPE, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (cpe_info_iterator_title, GET_ITERATOR_COLUMN_COUNT); /** * @brief Get the status from a CPE iterator. * * @param[in] iterator Iterator. * * @return The Status of the CPE, or NULL if iteration is complete. Freed by * cleanup_iterator. */ DEF_ACCESS (cpe_info_iterator_status, GET_ITERATOR_COLUMN_COUNT + 1); /** * @brief Get the id of the deprecating CPE from a CPE iterator. * * @param[in] iterator Iterator. * * @return The deprecated_by CVD ID, or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (cpe_info_iterator_deprecated_by, GET_ITERATOR_COLUMN_COUNT + 2); /** * @brief Get the Highest CVSS Score of all CVE's referencing this cpe. * * @param[in] iterator Iterator. * * @return The Highest CVSS of the CPE, or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (cpe_info_iterator_max_cvss, GET_ITERATOR_COLUMN_COUNT + 3); /** * @brief Get the Number of CVE's referencing this cpe from a CPE iterator. * * @param[in] iterator Iterator. * * @return The Number of references to the CPE, or NULL if iteration is * complete. Freed by cleanup_iterator. */ DEF_ACCESS (cpe_info_iterator_cve_refs, GET_ITERATOR_COLUMN_COUNT + 4); /** * @brief Get the NVD ID for this CPE. * * @param[in] iterator Iterator. * * @return The NVD ID of this CPE, or NULL if iteration is * complete. Freed by cleanup_iterator. */ DEF_ACCESS (cpe_info_iterator_nvd_id, GET_ITERATOR_COLUMN_COUNT + 5); /** * @brief Get the CVSS attack vector for this CVE. * * @param[in] iterator Iterator. * * @return The CVSS attack vector of this CVE, or NULL if iteration is * complete. Freed by cleanup_iterator. */ DEF_ACCESS (cve_info_iterator_vector, GET_ITERATOR_COLUMN_COUNT); /** * @brief Get the CVSS attack complexity for this CVE. * * @param[in] iterator Iterator. * * @return The CVSS attack complexity of this CVE, or NULL if iteration is * complete. Freed by cleanup_iterator. */ DEF_ACCESS (cve_info_iterator_complexity, GET_ITERATOR_COLUMN_COUNT + 1); /** * @brief Get the CVSS attack authentication for this CVE. * * @param[in] iterator Iterator. * * @return The CVSS attack authentication of this CVE, or NULL if iteration is * complete. Freed by cleanup_iterator. */ DEF_ACCESS (cve_info_iterator_authentication, GET_ITERATOR_COLUMN_COUNT + 2); /** * @brief Get the CVSS confidentiality impact for this CVE. * * @param[in] iterator Iterator. * * @return The CVSS confidentiality impact of this CVE, or NULL if iteration is * complete. Freed by cleanup_iterator. */ DEF_ACCESS (cve_info_iterator_confidentiality_impact, GET_ITERATOR_COLUMN_COUNT + 3); /** * @brief Get the CVSS integrity impact for this CVE. * * @param[in] iterator Iterator. * * @return The CVSS integrity impact of this CVE, or NULL if iteration is * complete. Freed by cleanup_iterator. */ DEF_ACCESS (cve_info_iterator_integrity_impact, GET_ITERATOR_COLUMN_COUNT + 4); /** * @brief Get the CVSS availability impact for this CVE. * * @param[in] iterator Iterator. * * @return The CVSS availability impact of this CVE, or NULL if iteration is * complete. Freed by cleanup_iterator. */ DEF_ACCESS (cve_info_iterator_availability_impact, GET_ITERATOR_COLUMN_COUNT + 5); /** * @brief Get a space seperated list of CPEs affected by this CVE. * * @param[in] iterator Iterator. * * @return A space seperated list of CPEs or NULL if iteration is * complete. Freed by cleanup_iterator. */ DEF_ACCESS (cve_info_iterator_products, GET_ITERATOR_COLUMN_COUNT + 6); /** * @brief Get the CVSS base score for this CVE. * * @param[in] iterator Iterator. * * @return The CVSS base score of this CVE, or NULL if iteration is * complete. Freed by cleanup_iterator. */ DEF_ACCESS (cve_info_iterator_cvss, GET_ITERATOR_COLUMN_COUNT + 7); /** * @brief Get the Summary for this CVE. * * @param[in] iterator Iterator. * * @return The Summary of this CVE, or NULL if iteration is * complete. Freed by cleanup_iterator. */ DEF_ACCESS (cve_info_iterator_description, GET_ITERATOR_COLUMN_COUNT + 8); /* OVAL data */ /** * @brief Initialise an OVAL definition (ovaldef) info iterator. * * @param[in] iterator Iterator. * @param[in] get GET data. * @param[in] name Name of the info * * @return 0 success, 1 failed to find target, 2 failed to find filter, * -1 error. */ int init_ovaldef_info_iterator (iterator_t* iterator, get_data_t *get, const char *name) { static const char *filter_columns[] = OVALDEF_INFO_ITERATOR_FILTER_COLUMNS; static column_t columns[] = OVALDEF_INFO_ITERATOR_COLUMNS; gchar *clause = NULL; int ret; if (get->id) { gchar *quoted = sql_quote (get->id); clause = g_strdup_printf (" AND uuid = '%s'", quoted); g_free (quoted); /* The entry is specified by ID, so filtering just gets in the way. */ g_free (get->filter); get->filter = NULL; } else if (name) { gchar *quoted = sql_quote (name); clause = g_strdup_printf (" AND name = '%s'", quoted); g_free (quoted); /* The entry is specified by name, so filtering just gets in the way. */ g_free (get->filter); get->filter = NULL; } ret = init_get_iterator (iterator, "ovaldef", get, columns, NULL, filter_columns, 0, NULL, clause, FALSE); g_free (clause); return ret; } /** * @brief Count number of ovaldef. * * @param[in] get GET params. * * @return Total number of OVAL definitions in filtered set. */ int ovaldef_info_count (const get_data_t *get) { static const char *filter_columns[] = OVALDEF_INFO_ITERATOR_FILTER_COLUMNS; static column_t columns[] = OVALDEF_INFO_ITERATOR_COLUMNS; return count ("ovaldef", get, columns, NULL, filter_columns, 0, 0, 0, FALSE); } /** * @brief Get the version number from an OVALDEF iterator. * * @param[in] iterator Iterator. * * @return The version number of the OVAL definition, * or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (ovaldef_info_iterator_version, GET_ITERATOR_COLUMN_COUNT); /** * @brief Get the deprecation status from an OVALDEF iterator. * * @param[in] iterator Iterator. * * @return True if the OVAL definition is deprecated, false if not, * or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (ovaldef_info_iterator_deprecated, GET_ITERATOR_COLUMN_COUNT + 1); /** * @brief Get the definition class from an OVALDEF iterator. * * @param[in] iterator Iterator. * * @return The definition class (e.g. 'patch' or 'vulnerability') of the OVAL * definition, or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (ovaldef_info_iterator_class, GET_ITERATOR_COLUMN_COUNT + 2); /** * @brief Get the title from an OVALDEF iterator. * * @param[in] iterator Iterator. * * @return The title / short description of the OVAL definition, * or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (ovaldef_info_iterator_title, GET_ITERATOR_COLUMN_COUNT + 3); /** * @brief Get the description from an OVALDEF iterator. * * @param[in] iterator Iterator. * * @return The long description of the OVAL definition, * or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (ovaldef_info_iterator_description, GET_ITERATOR_COLUMN_COUNT + 4); /** * @brief Get the source xml file from an OVALDEF iterator. * * @param[in] iterator Iterator. * * @return The short xml source file name of the OVAL definition, * or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (ovaldef_info_iterator_file, GET_ITERATOR_COLUMN_COUNT + 5); /** * @brief Get the repository entry status from an OVALDEF iterator. * * @param[in] iterator Iterator. * * @return The repository entry status of the OVAL definition, * or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (ovaldef_info_iterator_status, GET_ITERATOR_COLUMN_COUNT + 6); /** * @brief Get maximum CVSS score from an OVALDEF iterator. * * @param[in] iterator Iterator. * * @return The maximum CVSS score of the OVAL definition, * or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (ovaldef_info_iterator_max_cvss, GET_ITERATOR_COLUMN_COUNT + 7); /** * @brief Get number of referenced CVEs from an OVALDEF iterator. * * @param[in] iterator Iterator. * * @return The maximum CVSS score of the OVAL definition, * or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (ovaldef_info_iterator_cve_refs, GET_ITERATOR_COLUMN_COUNT + 8); /* CERT data */ /* CERT-Bund data */ /** * @brief Initialise an CERT-Bund advisory (cert_bund_adv) info iterator. * * @param[in] iterator Iterator. * @param[in] get GET data. * @param[in] name Name of the info * * @return 0 success, 1 failed to find target, 2 failed to find filter, * -1 error. */ int init_cert_bund_adv_info_iterator (iterator_t* iterator, get_data_t *get, const char *name) { static const char *filter_columns[] = CERT_BUND_ADV_INFO_ITERATOR_FILTER_COLUMNS; static column_t columns[] = CERT_BUND_ADV_INFO_ITERATOR_COLUMNS; gchar *clause = NULL; int ret; if (get->id) { gchar *quoted = sql_quote (get->id); clause = g_strdup_printf (" AND uuid = '%s'", quoted); g_free (quoted); /* The entry is specified by ID, so filtering just gets in the way. */ g_free (get->filter); get->filter = NULL; } else if (name) { gchar *quoted = sql_quote (name); clause = g_strdup_printf (" AND name = '%s'", quoted); g_free (quoted); /* The entry is specified by name, so filtering just gets in the way. */ g_free (get->filter); get->filter = NULL; } ret = init_get_iterator (iterator, "cert_bund_adv", get, columns, NULL, filter_columns, 0, NULL, clause, FALSE); g_free (clause); return ret; } /** * @brief Count number of cert_bund_adv. * * @param[in] get GET params. * * @return Total number of CERT-Bund advisories in filtered set. */ int cert_bund_adv_info_count (const get_data_t *get) { static const char *filter_columns[] = CERT_BUND_ADV_INFO_ITERATOR_FILTER_COLUMNS; static column_t columns[] = CERT_BUND_ADV_INFO_ITERATOR_COLUMNS; return count ("cert_bund_adv", get, columns, NULL, filter_columns, 0, 0, 0, FALSE); } /** * @brief Get the title from an CERT_BUND_ADV iterator. * * @param[in] iterator Iterator. * * @return The title of the CERT-Bund advisory, * or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (cert_bund_adv_info_iterator_title, GET_ITERATOR_COLUMN_COUNT); /** * @brief Get the summary from an CERT_BUND_ADV iterator. * * @param[in] iterator Iterator. * * @return The summary of the CERT-Bund advisory, * or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (cert_bund_adv_info_iterator_summary, GET_ITERATOR_COLUMN_COUNT + 1); /** * @brief Get the number of cves from an CERT_BUND_ADV iterator. * * @param[in] iterator Iterator. * * @return The number of CVEs referenced in the CERT-Bund advisory, * or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (cert_bund_adv_info_iterator_cve_refs, GET_ITERATOR_COLUMN_COUNT + 2); /** * @brief Get the maximum CVSS from an CERT_BUND_ADV iterator. * * @param[in] iterator Iterator. * * @return The maximum CVSS of the CVEs referenced in the CERT-Bund advisory, * or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (cert_bund_adv_info_iterator_max_cvss, GET_ITERATOR_COLUMN_COUNT + 3); /** * @brief Initialise CVE iterator, for CVEs referenced by a CERT-Bund advisory. * * @param[in] iterator Iterator. * @param[in] cve Name of the CVE. * @param[in] ascending Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "id". */ void init_cve_cert_bund_adv_iterator (iterator_t *iterator, const char *cve, int ascending, const char *sort_field) { static column_t select_columns[] = CERT_BUND_ADV_INFO_ITERATOR_COLUMNS; gchar *columns; assert (cve); columns = columns_build_select (select_columns); init_iterator (iterator, "SELECT %s" " FROM cert_bund_advs" " WHERE id IN (SELECT adv_id FROM cert_bund_cves" " WHERE cve_name = '%s')" " ORDER BY %s %s;", columns, cve, sort_field ? sort_field : "name", ascending ? "ASC" : "DESC"); g_free (columns); } /** * @brief Initialise an CERT-Bund iterator, for advisories relevant to a NVT. * * @param[in] iterator Iterator. * @param[in] oid OID of the NVT. * @param[in] ascending Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "id". */ void init_nvt_cert_bund_adv_iterator (iterator_t *iterator, const char *oid, int ascending, const char *sort_field) { static column_t select_columns[] = DFN_CERT_ADV_INFO_ITERATOR_COLUMNS; gchar *columns; assert (oid); columns = columns_build_select (select_columns); init_iterator (iterator, "SELECT %s" " FROM cert_bund_advs" " WHERE id IN (SELECT adv_id FROM cert_bund_cves" " WHERE cve_name IN (SELECT cve_name" " FROM nvt_cves" " WHERE oid = '%s'))" " ORDER BY %s %s;", columns, oid, sort_field ? sort_field : "name", ascending ? "ASC" : "DESC"); g_free (columns); } /* DFN-CERT data */ /** * @brief Initialise an DFN-CERT advisory (dfn_cert_adv) info iterator. * * @param[in] iterator Iterator. * @param[in] get GET data. * @param[in] name Name of the info * * @return 0 success, 1 failed to find target, 2 failed to find filter, * -1 error. */ int init_dfn_cert_adv_info_iterator (iterator_t* iterator, get_data_t *get, const char *name) { static const char *filter_columns[] = DFN_CERT_ADV_INFO_ITERATOR_FILTER_COLUMNS; static column_t columns[] = DFN_CERT_ADV_INFO_ITERATOR_COLUMNS; gchar *clause = NULL; int ret; if (get->id) { gchar *quoted = sql_quote (get->id); clause = g_strdup_printf (" AND uuid = '%s'", quoted); g_free (quoted); /* The entry is specified by ID, so filtering just gets in the way. */ g_free (get->filter); get->filter = NULL; } else if (name) { gchar *quoted = sql_quote (name); clause = g_strdup_printf (" AND name = '%s'", quoted); g_free (quoted); /* The entry is specified by name, so filtering just gets in the way. */ g_free (get->filter); get->filter = NULL; } ret = init_get_iterator (iterator, "dfn_cert_adv", get, columns, NULL, filter_columns, 0, NULL, clause, FALSE); g_free (clause); return ret; } /** * @brief Count number of dfn_cert_adv. * * @param[in] get GET params. * * @return Total number of DFN-CERT advisories in filtered set. */ int dfn_cert_adv_info_count (const get_data_t *get) { static const char *filter_columns[] = DFN_CERT_ADV_INFO_ITERATOR_FILTER_COLUMNS; static column_t columns[] = DFN_CERT_ADV_INFO_ITERATOR_COLUMNS; return count ("dfn_cert_adv", get, columns, NULL, filter_columns, 0, 0, 0, FALSE); } /** * @brief Get the title from an DFN_CERT_ADV iterator. * * @param[in] iterator Iterator. * * @return The title of the DFN-CERT advisory, * or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (dfn_cert_adv_info_iterator_title, GET_ITERATOR_COLUMN_COUNT); /** * @brief Get the summary from an DFN_CERT_ADV iterator. * * @param[in] iterator Iterator. * * @return The summary of the DFN-CERT advisory, * or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (dfn_cert_adv_info_iterator_summary, GET_ITERATOR_COLUMN_COUNT + 1); /** * @brief Get the number of cves from an DFN_CERT_ADV iterator. * * @param[in] iterator Iterator. * * @return The number of CVEs referenced in the DFN-CERT advisory, * or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (dfn_cert_adv_info_iterator_cve_refs, GET_ITERATOR_COLUMN_COUNT + 2); /** * @brief Get the maximum CVSS from an DFN_CERT_ADV iterator. * * @param[in] iterator Iterator. * * @return The maximum CVSS of the CVEs referenced in the DFN-CERT advisory, * or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (dfn_cert_adv_info_iterator_max_cvss, GET_ITERATOR_COLUMN_COUNT + 3); /** * @brief Initialise CVE iterator, for CVEs referenced by a DFN-CERT advisory. * * @param[in] iterator Iterator. * @param[in] cve Name of the CVE. * @param[in] ascending Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "id". */ void init_cve_dfn_cert_adv_iterator (iterator_t *iterator, const char *cve, int ascending, const char *sort_field) { static column_t select_columns[] = DFN_CERT_ADV_INFO_ITERATOR_COLUMNS; gchar *columns; assert (cve); columns = columns_build_select (select_columns); init_iterator (iterator, "SELECT %s" " FROM dfn_cert_advs" " WHERE id IN (SELECT adv_id FROM dfn_cert_cves" " WHERE cve_name = '%s')" " ORDER BY %s %s;", columns, cve, sort_field ? sort_field : "name", ascending ? "ASC" : "DESC"); g_free (columns); } /** * @brief Initialise an DFN-CERT iterator, for advisories relevant to a NVT. * * @param[in] iterator Iterator. * @param[in] oid OID of the NVT. * @param[in] ascending Whether to sort ascending or descending. * @param[in] sort_field Field to sort on, or NULL for "id". */ void init_nvt_dfn_cert_adv_iterator (iterator_t *iterator, const char *oid, int ascending, const char *sort_field) { static column_t select_columns[] = DFN_CERT_ADV_INFO_ITERATOR_COLUMNS; gchar *columns; assert (oid); columns = columns_build_select (select_columns); init_iterator (iterator, "SELECT %s" " FROM dfn_cert_advs" " WHERE id IN (SELECT adv_id FROM dfn_cert_cves" " WHERE cve_name IN (SELECT cve_name" " FROM nvt_cves" " WHERE oid = '%s'))" " ORDER BY %s %s;", columns, oid, sort_field ? sort_field : "name", ascending ? "ASC" : "DESC"); g_free (columns); } /** * @brief Get the short file name for an OVALDEF. * * @param[in] item_id Full OVAL identifier with file suffix. * * @return The file name of the OVAL definition relative to the SCAP directory, * Freed by g_free. */ gchar* get_ovaldef_short_filename (char* item_id) { return sql_string ("SELECT xml_file FROM ovaldefs WHERE uuid = '%s';", item_id); } /** * @brief Get the uuid for an OVALDEF from a name and file name. * * @param[in] name Oval definition name. * @param[in] fname Oval definition file name. * * @return The OVAL definition uuid from the SCAP directory. Freed by g_free. */ char* ovaldef_uuid (const char *name, const char *fname) { char *quoted_name, *quoted_fname, *ret; assert (name); assert (fname); quoted_name = sql_quote (name); quoted_fname = sql_quote (fname); ret = sql_string ("SELECT uuid FROM ovaldefs WHERE name = '%s'" " AND xml_file = '%s';", name, fname); g_free (quoted_name); g_free (quoted_fname); return ret; } /** * @brief Get the severity of an OVALDEF using an ID. * * @param[in] uuid Oval definition ID. * * @return The severity of the OVAL definition from the SCAP directory. * Freed by g_free. */ char * ovaldef_severity (const char *id) { char *quoted_id, *ret; assert (id); quoted_id = sql_quote (id); ret = sql_string ("SELECT max_cvss FROM ovaldefs WHERE uuid = '%s';", quoted_id); g_free (quoted_id); return ret; } /** * @brief Get the version of an OVALDEF using an ID. * * @param[in] uuid Oval definition ID. * * @return The version of the OVAL definition from the SCAP directory. * Freed by g_free. */ char * ovaldef_version (const char *id) { char *quoted_id, *ret; assert (id); quoted_id = sql_quote (id); ret = sql_string ("SELECT version FROM ovaldefs WHERE uuid = '%s';", quoted_id); g_free (quoted_id); return ret; } /** * @brief Get the CVE names of an OVALDEF as ", " separated str. * * @param[in] uuid Oval definition ID. * * @return String of CVEs affecting of the OVAL definition, NULL otherwise. * Freed by g_free. */ char * ovaldef_cves (const char *id) { char *quoted_id, *ret = NULL; iterator_t iterator; assert (id); quoted_id = sql_quote (id); init_iterator (&iterator, "SELECT DISTINCT cves.name FROM cves, ovaldefs," " affected_ovaldefs WHERE ovaldefs.uuid = '%s'" " AND cves.id = affected_ovaldefs.cve" " AND ovaldefs.id = affected_ovaldefs.ovaldef;", quoted_id); g_free (quoted_id); while (next (&iterator)) { char *tmp = ret; ret = g_strdup_printf ("%s%s%s", ret ?: "", ret ? ", " : "", iterator_string (&iterator, 0)); g_free (tmp); } cleanup_iterator (&iterator); return ret; } /* All SecInfo Data */ /** * @brief Count number of SecInfo entries. * * @param[in] get GET params. * * @return Total number of SecInfo entires in filtered set. */ int all_info_count (const get_data_t *get) { return total_info_count (get, 1); } /** * @brief Count number of all SecInfo entries. * * @param[in] get GET params. * @param[in] filtered Whether to count entries in filtered set only. * * @return Total number of SecInfo entires. */ int total_info_count (const get_data_t *get, int filtered) { gchar *clause; if (filtered) { static const char *filter_columns[] = ALL_INFO_ITERATOR_FILTER_COLUMNS; static column_t select_columns[] = ALL_INFO_ITERATOR_COLUMNS; gchar *filter; if (get->filt_id && strcmp (get->filt_id, "0")) { filter = filter_term (get->filt_id); if (filter == NULL) return -1; } else filter = NULL; clause = filter_clause ("allinfo", filter ? filter : get->filter, filter_columns, select_columns, NULL, get->trash, NULL, NULL, NULL, NULL, NULL); if (clause) return sql_int ("SELECT count (id) FROM" ALL_INFO_UNION_COLUMNS " WHERE %s;", clause); } return sql_int ("SELECT (SELECT count (*) FROM cves)" " + (SELECT count (*) FROM cpes)" " + (SELECT count (*) FROM nvts)" " + (SELECT count (*) FROM cert_bund_advs)" " + (SELECT count (*) FROM dfn_cert_advs)" " + (SELECT count (*) FROM ovaldefs);"); } /** * @brief Initialise an info iterator. * * @param[in] iterator Iterator. * @param[in] get GET data. * @param[in] name Name of the info * * * @return 0 success, 1 failed to find info, 2 failed to find filter, * -1 error. */ int init_all_info_iterator (iterator_t* iterator, get_data_t *get, const char *name) { static const char *filter_columns[] = ALL_INFO_ITERATOR_FILTER_COLUMNS; static column_t select_columns[] = ALL_INFO_ITERATOR_COLUMNS; int first, max; gchar *columns, *clause, *filter, *order; if (get->filt_id && strcmp (get->filt_id, "0")) { filter = filter_term (get->filt_id); if (filter == NULL) return 2; } else filter = NULL; clause = filter_clause ("allinfo", filter ? filter : get->filter, filter_columns, select_columns, NULL, get->trash, &order, &first, &max, NULL, NULL); columns = columns_build_select (select_columns); init_iterator (iterator, "SELECT %s" " FROM" ALL_INFO_UNION_COLUMNS " %s%s" " %s" " LIMIT %s OFFSET %i;", columns, clause ? "WHERE " : "", clause ? clause : "", order, sql_select_limit (max), first); g_free (order); g_free (filter); g_free (columns); g_free (clause); return 0; } /** * @brief Get the secinfo type from an all info iterator. * * @param[in] iterator Iterator. * * @return The type of a secinfo entry, * or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (all_info_iterator_type, GET_ITERATOR_COLUMN_COUNT); /** * @brief Get the secinfo extra information from an all info iterator. * * @param[in] iterator Iterator. * * @return extra info secinfo entry, * or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (all_info_iterator_extra, GET_ITERATOR_COLUMN_COUNT + 1); /** * @brief Get the severity from an all info iterator. * * @param[in] iterator Iterator. * * @return extra info secinfo entry, * or NULL if iteration is complete. * Freed by cleanup_iterator. */ DEF_ACCESS (all_info_iterator_severity, GET_ITERATOR_COLUMN_COUNT + 2); /* Users. */ /** * @brief Create the given user. * * @param[in] log_config Log configuration. * @param[in] database Location of manage database. * @param[in] name Name of user. * @param[in] role_name Role of user. Admin if NULL. * * @return 0 success, -1 error, * -2 database is wrong version, -3 database needs to be initialised * from server. */ int manage_create_user (GSList *log_config, const gchar *database, const gchar *name, const gchar *role_name) { char *uuid; array_t *roles; const gchar *db; int ret; if (openvas_auth_init_funcs (manage_user_hash, manage_user_set_role, manage_user_exists, manage_user_uuid)) return -1; db = database ? database : sql_default_database (); ret = init_manage_helper (log_config, db, 70000, NULL); assert (ret != -4); if (ret) return ret; init_manage_process (0, db); roles = make_array (); if (role_name) { role_t role; if (find_role_by_name (role_name, &role)) { array_free (roles); cleanup_manage_process (TRUE); printf ("Internal Error.\n"); return -1; } if (role == 0) { array_free (roles); cleanup_manage_process (TRUE); printf ("Failed to find role.\n"); return -1; } array_add (roles, role_uuid (role)); } else array_add (roles, g_strdup (ROLE_UUID_ADMIN)); uuid = openvas_uuid_make (); /* Setup a dummy user, so that create_user will work. */ current_credentials.uuid = ""; ret = create_user (name, uuid, NULL, 0, NULL, 0, NULL, NULL, NULL, roles, NULL, NULL, NULL, 0); switch (ret) { case 0: printf ("User created with password '%s'.\n", uuid); break; case -2: printf ("User exists already.\n"); break; default: printf ("Failed to create user.\n"); break; } current_credentials.uuid = NULL; array_free (roles); free (uuid); cleanup_manage_process (TRUE); return ret; } /** * @brief Delete the given user. * * @param[in] log_config Log configuration. * @param[in] database Location of manage database. * @param[in] name Name of user. * * @return 0 success, 2 failed to find user, 4 user has active tasks, -1 error. * -2 database is wrong version, -3 database needs to be initialised * from server. */ int manage_delete_user (GSList *log_config, const gchar *database, const gchar *name) { const gchar *db; int ret; if (openvas_auth_init_funcs (manage_user_hash, manage_user_set_role, manage_user_exists, manage_user_uuid)) return -1; db = database ? database : sql_default_database (); ret = init_manage_helper (log_config, db, 70000, NULL); assert (ret != -4); if (ret) return ret; init_manage_process (0, db); /* Setup a dummy user, so that delete_user will work. */ current_credentials.uuid = ""; switch ((ret = delete_user (NULL, name, 1, 0))) { case 0: printf ("User deleted.\n"); break; case 2: printf ("Failed to find user.\n"); break; case 4: printf ("User has active tasks.\n"); break; default: printf ("Internal Error.\n"); break; } current_credentials.uuid = NULL; cleanup_manage_process (TRUE); return ret; } /** * @brief List users. * * @param[in] log_config Log configuration. * @param[in] database Location of manage database. * @param[in] role_name Role name. * * @return 0 success, -1 error. */ int manage_get_users (GSList *log_config, const gchar *database, const gchar* role_name) { iterator_t users; const gchar *db; int ret; if (openvas_auth_init_funcs (manage_user_hash, manage_user_set_role, manage_user_exists, manage_user_uuid)) return -1; db = database ? database : sql_default_database (); ret = init_manage_helper (log_config, db, 70000, NULL); assert (ret != -4); if (ret) return ret; init_manage_process (0, db); if (role_name) { role_t role; if (find_role_by_name (role_name, &role)) { cleanup_manage_process (TRUE); printf ("Internal Error.\n"); return -1; } if (role == 0) { cleanup_manage_process (TRUE); printf ("Failed to find role.\n"); return -1; } init_iterator (&users, "SELECT name FROM users" " WHERE id IN (SELECT user FROM role_users" " WHERE role = %llu);", role); } else init_iterator (&users, "SELECT name FROM users;"); while (next (&users)) printf ("%s\n", iterator_string (&users, 0)); cleanup_iterator (&users); cleanup_manage_process (TRUE); return 0; } /** * @brief List scanners. * * @param[in] log_config Log configuration. * @param[in] database Location of manage database. * * @return 0 success, -1 error. */ int manage_get_scanners (GSList *log_config, const gchar *database) { iterator_t scanners; const gchar *db; int ret; if (openvas_auth_init_funcs (manage_user_hash, manage_user_set_role, manage_user_exists, manage_user_uuid)) return -1; db = database ? database : sql_default_database (); ret = init_manage_helper (log_config, db, 70000, NULL); assert (ret != -4); if (ret) return ret; init_manage_process (0, db); init_iterator (&scanners, "SELECT uuid, name FROM scanners;"); while (next (&scanners)) printf ("%s %s\n", iterator_string (&scanners, 0), iterator_string (&scanners, 1)); cleanup_iterator (&scanners); cleanup_manage_process (TRUE); return 0; } /** * @brief Set the password of a user. * * @param[in] name Name of user. * @param[in] uuid User UUID. * @param[in] password New password. * @param[out] r_errdesc Address to receive a malloced string with the error * description, or NULL. * * @return 0 success, -1 error. */ int set_password (const gchar *name, const gchar *uuid, const gchar *password, gchar **r_errdesc) { gchar *errstr, *hash; assert (name && uuid); if ((errstr = openvas_validate_password (password, name))) { g_warning ("new password for '%s' rejected: %s", name, errstr); if (r_errdesc) *r_errdesc = errstr; else g_free (errstr); return -1; } hash = get_password_hashes (GCRY_MD_MD5, password); sql ("UPDATE users SET password = '%s', modification_time = m_now ()" " WHERE uuid = '%s';", hash, uuid); g_free (hash); return 0; } /** * @brief Set the password of a user. * * @param[in] log_config Log configuration. * @param[in] database Location of manage database. * @param[in] name Name of user. * @param[in] password New password. * * @return 0 success, 1 failed to find user, -1 error. */ int manage_set_password (GSList *log_config, const gchar *database, const gchar *name, const gchar *password) { user_t user; char *uuid; int ret; const gchar *db; if (openvas_auth_init_funcs (manage_user_hash, manage_user_set_role, manage_user_exists, manage_user_uuid)) return -1; db = database ? database : sql_default_database (); ret = init_manage_helper (log_config, db, 70000, NULL); assert (ret != -4); if (ret) return ret; init_manage_process (0, db); sql_begin_immediate (); if (find_user_by_name (name, &user)) { sql ("ROLLBACK;"); return -1; } if (user == 0) { sql ("ROLLBACK;"); return 1; } uuid = user_uuid (user); if (uuid == NULL) { sql ("ROLLBACK;"); return -1; } ret = set_password (name, uuid, password, NULL); sql ("COMMIT;"); free (uuid); return ret; } /** * @brief Find a user for a specific permission, given a UUID. * * @param[in] uuid UUID of user. * @param[out] user User return, 0 if succesfully failed to find user. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find user), TRUE on error. */ gboolean find_user_with_permission (const char* uuid, user_t* user, const char *permission) { return find_resource_with_permission ("user", uuid, user, permission, 0); } /** * @brief Find a user given a name. * * @param[in] name A user name. * @param[out] user User return, 0 if succesfully failed to find user. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find user), TRUE on error. */ gboolean find_user_by_name_with_permission (const char* name, user_t *user, const char *permission) { return find_resource_by_name_with_permission ("user", name, user, permission); } /** * @brief Find a user given a name. * * @param[in] name A user name. * @param[out] user User return, 0 if succesfully failed to find user. * * @return FALSE on success (including if failed to find user), TRUE on error. */ static gboolean find_user_by_name (const char* name, user_t *user) { return find_resource_by_name ("user", name, user); } /** * @brief Adds a new user to the OpenVAS installation. * * @todo Adding users authenticating with certificates is not yet implemented. * * @param[in] name The name of the new user. * @param[in] password The password of the new user. * @param[in] hosts The host the user is allowed/forbidden to scan. * @param[in] hosts_allow Whether hosts is allow or forbid. * @param[in] ifaces Interfaces the user is allowed/forbidden to scan. * @param[in] ifaces_allow Whether ifaces is allow or forbid. * @param[in] allowed_methods Allowed login methods. * @param[in] groups Groups. * @param[out] group_id_return ID of group on "failed to find" error. * @param[in] roles Roles. * @param[out] role_id_return ID of role on "failed to find" error. * @param[out] r_errdesc If not NULL the address of a variable to receive * a malloced string with the error description. Will * always be set to NULL on success. * @param[out] new_user Created user. * @param[in] forbid_super_admin Whether to forbid creation of Super Admin. * * @return 0 if the user has been added successfully, 1 failed to find group, * 2 failed to find role, 3 syntax error in hosts, 99 permission denied, * -1 on error, -2 if user exists already. */ int create_user (const gchar * name, const gchar * password, const gchar * hosts, int hosts_allow, const gchar *ifaces, int ifaces_allow, const array_t * allowed_methods, array_t *groups, gchar **group_id_return, array_t *roles, gchar **role_id_return, gchar **r_errdesc, user_t *new_user, int forbid_super_admin) { char *errstr; gchar *quoted_hosts, *quoted_ifaces, *quoted_method, *quoted_name, *hash; gchar *clean, *generated; int index, max; user_t user; assert (name); assert (password); if (r_errdesc) *r_errdesc = NULL; /* allowed_methods is a NULL terminated array. */ if (allowed_methods && (allowed_methods->len > 2)) return -3; if (allowed_methods && (allowed_methods->len == 0)) allowed_methods = NULL; // TODO validate methods single source, one of ldap, ... if (validate_username (name) != 0) { g_warning ("Invalid characters in user name!"); if (r_errdesc) *r_errdesc = g_strdup ("Invalid characters in user name"); return -1; } if (allowed_methods && strcmp (g_ptr_array_index (allowed_methods, 0), "ldap_connect") == 0) password = generated = openvas_uuid_make (); else generated = NULL; if ((errstr = openvas_validate_password (password, name))) { g_warning ("new password for '%s' rejected: %s", name, errstr); if (r_errdesc) *r_errdesc = errstr; else g_free (errstr); g_free (generated); return -1; } sql_begin_immediate (); if (user_may ("create_user") == 0) { sql ("ROLLBACK;"); g_free (generated); return 99; } /* Check if user exists already. */ if (resource_with_name_exists_global (name, "user", 0)) { sql ("ROLLBACK;"); g_free (generated); return -2; } quoted_name = sql_quote (name); /* Check hosts. */ max = manage_max_hosts (); manage_set_max_hosts (MANAGE_USER_MAX_HOSTS); if (hosts && (manage_count_hosts (hosts, NULL) < 0)) { manage_set_max_hosts (max); sql ("ROLLBACK;"); g_free (generated); return 3; } manage_set_max_hosts (max); /* Get the password hashes. */ hash = get_password_hashes (GCRY_MD_MD5, password); /* Add the user to the database. */ clean = clean_hosts (hosts ? hosts : "", &max); quoted_hosts = sql_quote (clean); quoted_ifaces = sql_quote (ifaces ? ifaces : ""); g_free (clean); quoted_method = sql_quote (allowed_methods ? g_ptr_array_index (allowed_methods, 0) : "file"); sql ("INSERT INTO users" " (uuid, owner, name, password, hosts, hosts_allow," " ifaces, ifaces_allow, method, creation_time, modification_time)" " VALUES" " (make_uuid ()," " (SELECT id FROM users WHERE uuid = '%s')," " '%s', '%s', '%s', %i," " '%s', %i, '%s', m_now (), m_now ());", current_credentials.uuid, quoted_name, hash, quoted_hosts, hosts_allow, quoted_ifaces, ifaces_allow, quoted_method); user = sql_last_insert_id (); g_free (generated); g_free (hash); g_free (quoted_hosts); g_free (quoted_ifaces); g_free (quoted_method); g_free (quoted_name); /* Add the user to any given groups. */ index = 0; while (groups && (index < groups->len)) { gchar *group_id; group_t group; group_id = (gchar*) g_ptr_array_index (groups, index); if (strcmp (group_id, "0") == 0) { index++; continue; } if (find_group (group_id, &group)) { sql ("ROLLBACK;"); return -1; } if (group == 0) { sql ("ROLLBACK;"); if (group_id_return) *group_id_return = group_id; return 1; } sql ("INSERT INTO group_users (\"group\", \"user\") VALUES (%llu, %llu);", group, user); index++; } /* Add the user to any given roles. */ index = 0; while (roles && (index < roles->len)) { gchar *role_id; role_t role; role_id = (gchar*) g_ptr_array_index (roles, index); if (strcmp (role_id, "0") == 0) { index++; continue; } if (forbid_super_admin && role_can_super_everyone (role_id)) { sql ("ROLLBACK;"); return 99; } if (find_role (role_id, &role)) { sql ("ROLLBACK;"); return -1; } if (role == 0) { sql ("ROLLBACK;"); if (role_id_return) *role_id_return = role_id; return 2; } sql ("INSERT INTO role_users (role, \"user\") VALUES (%llu, %llu);", role, user); index++; } if (new_user) *new_user = user; sql ("COMMIT;"); return 0; } /** * @brief Create a user from an existing user. * * @param[in] name Name of new user. NULL to copy from existing. * @param[in] comment Comment on new user. NULL to copy from existing. * @param[in] user_id UUID of existing user. * @param[out] new_user New user. * * @return 0 success, 1 user exists already, 2 failed to find existing * user, 99 permission denied, -1 error. */ int copy_user (const char* name, const char* comment, const char *user_id, user_t* new_user) { user_t user; int ret; gchar *quoted_uuid; if (user_can_super_everyone (user_id)) return 99; sql_begin_immediate (); ret = copy_resource_lock ("user", name, comment, user_id, "password, timezone, hosts, hosts_allow," " ifaces, ifaces_allow, method", 1, &user, NULL); if (ret) { sql ("ROLLBACK;"); return ret; } sql ("UPDATE users SET password = NULL WHERE id = %llu;", user); quoted_uuid = sql_quote (user_id); sql ("INSERT INTO group_users (\"user\", \"group\")" " SELECT %llu, \"group\" FROM group_users" " WHERE \"user\" = (SELECT id FROM users WHERE uuid = '%s');", user, quoted_uuid); sql ("INSERT INTO role_users (\"user\", role)" " SELECT %llu, role FROM role_users" " WHERE \"user\" = (SELECT id FROM users WHERE uuid = '%s');", user, quoted_uuid); g_free (quoted_uuid); sql ("COMMIT;"); if (new_user) *new_user = user; return ret; } /** * @brief Delete a user. * * @param[in] user_id_arg UUID of user. * @param[in] name_arg Name of user. Overridden by user_id. * @param[in] ultimate Whether to remove entirely, or to trashcan. * @param[in] forbid_super_admin Whether to forbid removal of Super Admin. * * @return 0 success, 2 failed to find user, 4 user has active tasks, * 5 attempted suicide, 99 permission denied, -1 error. */ int delete_user (const char *user_id_arg, const char *name_arg, int ultimate, int forbid_super_admin) { iterator_t tasks; user_t user; get_data_t get; char *current_uuid; assert (user_id_arg || name_arg); if (current_credentials.username && current_credentials.uuid) { if (user_id_arg) { if (strcmp (user_id_arg, current_credentials.uuid) == 0) return 5; } else if (name_arg && (strcmp (name_arg, current_credentials.username) == 0)) return 5; } sql_begin_exclusive (); if (user_may ("delete_user") == 0) { sql ("ROLLBACK;"); return 99; } user = 0; if (user_id_arg) { if (forbid_super_admin && (strcmp (user_id_arg, ROLE_UUID_SUPER_ADMIN) == 0)) { sql ("ROLLBACK;"); return 99; } if (find_user_with_permission (user_id_arg, &user, "delete_user")) { sql ("ROLLBACK;"); return -1; } } else if (find_user_by_name_with_permission (name_arg, &user, "delete_user")) { sql ("ROLLBACK;"); return -1; } if (user == 0) return 2; if (forbid_super_admin) { char *uuid; uuid = user_uuid (user); if (user_is_super_admin (uuid)) { free (uuid); sql ("ROLLBACK;"); return 99; } free (uuid); } /* Set requested and running tasks to stopped. */ memset (&get, '\0', sizeof (get)); current_uuid = current_credentials.uuid; current_credentials.uuid = sql_string ("SELECT uuid FROM users" " WHERE id = %llu;", user); init_user_task_iterator (&tasks, 0); while (next (&tasks)) switch (task_iterator_run_status (&tasks)) { case TASK_STATUS_DELETE_REQUESTED: case TASK_STATUS_DELETE_ULTIMATE_REQUESTED: case TASK_STATUS_DELETE_ULTIMATE_WAITING: case TASK_STATUS_DELETE_WAITING: case TASK_STATUS_REQUESTED: case TASK_STATUS_RUNNING: case TASK_STATUS_STOP_REQUESTED_GIVEUP: case TASK_STATUS_STOP_REQUESTED: case TASK_STATUS_STOP_WAITING: { cleanup_iterator (&tasks); free (current_credentials.uuid); current_credentials.uuid = current_uuid; sql ("ROLLBACK;"); return 4; } default: break; } cleanup_iterator (&tasks); free (current_credentials.uuid); current_credentials.uuid = current_uuid; sql ("DELETE FROM agents WHERE owner = %llu;", user); sql ("DELETE FROM agents_trash WHERE owner = %llu;", user); sql ("DELETE FROM alert_condition_data" " WHERE alert IN (SELECT id FROM alerts WHERE owner = %llu);", user); sql ("DELETE FROM alert_condition_data" " WHERE alert IN (SELECT id FROM alerts_trash WHERE owner = %llu);", user); sql ("DELETE FROM alert_event_data" " WHERE alert IN (SELECT id FROM alerts WHERE owner = %llu);", user); sql ("DELETE FROM alert_event_data" " WHERE alert IN (SELECT id FROM alerts_trash WHERE owner = %llu);", user); sql ("DELETE FROM alert_method_data" " WHERE alert IN (SELECT id FROM alerts WHERE owner = %llu);", user); sql ("DELETE FROM alert_method_data" " WHERE alert IN (SELECT id FROM alerts_trash WHERE owner = %llu);", user); sql ("DELETE FROM alerts WHERE owner = %llu;", user); sql ("DELETE FROM alerts_trash WHERE owner = %llu;", user); sql ("DELETE FROM nvt_selectors" " WHERE name IN (SELECT nvt_selector FROM configs WHERE owner = %llu)" " AND name != '" MANAGE_NVT_SELECTOR_UUID_ALL "'" " AND name != '" MANAGE_NVT_SELECTOR_UUID_DISCOVERY "'" " AND name != '" MANAGE_NVT_SELECTOR_UUID_HOST_DISCOVERY "'" " AND name != '" MANAGE_NVT_SELECTOR_UUID_SYSTEM_DISCOVERY "';", user); sql ("DELETE FROM config_preferences" " WHERE config IN (SELECT id FROM configs WHERE owner = %llu);", user); sql ("DELETE FROM config_preferences_trash" " WHERE config IN (SELECT id FROM configs_trash WHERE owner = %llu);", user); sql ("DELETE FROM configs WHERE owner = %llu;", user); sql ("DELETE FROM configs_trash WHERE owner = %llu;", user); sql ("DELETE FROM filters WHERE owner = %llu;", user); sql ("DELETE FROM filters_trash WHERE owner = %llu;", user); sql ("DELETE FROM lsc_credentials WHERE owner = %llu;", user); sql ("DELETE FROM lsc_credentials_trash WHERE owner = %llu;", user); sql ("DELETE FROM notes WHERE owner = %llu;", user); sql ("DELETE FROM notes_trash WHERE owner = %llu;", user); /* Make permissions global if they are owned by the user and are related * to users/groups/roles that are owned by the user. */ sql ("UPDATE permissions SET owner = NULL" " WHERE owner = %llu" " AND ((subject_type = 'user' AND subject IN (SELECT id FROM users WHERE owner = %llu))" " OR (subject_type = 'group' AND subject IN (SELECT id FROM groups WHERE owner = %llu))" " OR (subject_type = 'role' AND subject IN (SELECT id FROM roles WHERE owner = %llu))" " OR (resource_type = 'user' AND resource IN (SELECT id FROM users WHERE owner = %llu))" " OR (resource_type = 'group' AND resource IN (SELECT id FROM groups WHERE owner = %llu))" " OR (resource_type = 'role' AND resource IN (SELECT id FROM roles WHERE owner = %llu)));", user, user, user, user, user, user, user); /* Make users, roles and groups global if they are owned by the user. */ sql ("UPDATE users SET owner = NULL WHERE owner = %llu;", user); sql ("UPDATE roles SET owner = NULL WHERE owner = %llu;", user); sql ("UPDATE groups SET owner = NULL WHERE owner = %llu;", user); /* Remove all other permissions owned by the user or given on the user. */ sql ("DELETE FROM permissions" " WHERE owner = %llu" " OR subject_type = 'user' AND subject = %llu" " OR (resource_type = 'user' AND resource = %llu);", /* For Super. */ user, user, user); sql ("DELETE FROM port_ranges" " WHERE port_list IN (SELECT id FROM port_lists WHERE owner = %llu);", user); sql ("DELETE FROM port_ranges_trash" " WHERE port_list IN (SELECT id FROM port_lists_trash" " WHERE owner = %llu);", user); sql ("DELETE FROM port_lists WHERE owner = %llu;", user); sql ("DELETE FROM port_lists_trash WHERE owner = %llu;", user); sql ("DELETE FROM report_format_param_options" " WHERE report_format_param" " IN (SELECT id FROM report_format_params" " WHERE report_format IN (SELECT id" " FROM report_formats" " WHERE owner = %llu));", user); sql ("DELETE FROM report_format_param_options_trash" " WHERE report_format_param" " IN (SELECT id FROM report_format_params_trash" " WHERE report_format IN (SELECT id" " FROM report_formats_trash" " WHERE owner = %llu));", user); sql ("DELETE FROM report_format_params" " WHERE report_format IN (SELECT id FROM report_formats" " WHERE owner = %llu);", user); sql ("DELETE FROM report_format_params_trash" " WHERE report_format IN (SELECT id" " FROM report_formats_trash" " WHERE owner = %llu);", user); sql ("DELETE FROM report_formats WHERE owner = %llu;", user); sql ("DELETE FROM report_formats_trash WHERE owner = %llu;", user); sql ("DELETE FROM report_counts WHERE \"user\" = %llu", user); sql ("DELETE FROM report_host_details" " WHERE report_host IN (SELECT id FROM report_hosts" " WHERE report IN (SELECT id FROM reports" " WHERE owner = %llu));", user); sql ("DELETE FROM report_hosts" " WHERE report IN (SELECT id FROM reports WHERE owner = %llu);", user); sql ("DELETE FROM results" " WHERE report IN (SELECT id FROM reports WHERE owner = %llu);", user); sql ("DELETE FROM reports WHERE owner = %llu;", user); sql ("DELETE FROM overrides WHERE owner = %llu;", user); sql ("DELETE FROM overrides_trash WHERE owner = %llu;", user); sql ("DELETE FROM permissions WHERE owner = %llu;", user); sql ("DELETE FROM permissions_trash WHERE owner = %llu;", user); sql ("DELETE FROM schedules WHERE owner = %llu;", user); sql ("DELETE FROM schedules_trash WHERE owner = %llu;", user); sql ("DELETE FROM slaves WHERE owner = %llu;", user); sql ("DELETE FROM slaves_trash WHERE owner = %llu;", user); sql ("DELETE FROM settings WHERE owner = %llu;", user); sql ("DELETE FROM tags WHERE owner = %llu;", user); sql ("DELETE FROM tags_trash WHERE owner = %llu;", user); sql ("DELETE FROM targets WHERE owner = %llu;", user); sql ("DELETE FROM targets_trash WHERE owner = %llu;", user); sql ("DELETE FROM task_files" " WHERE task IN (SELECT id FROM tasks WHERE owner = %llu);", user); sql ("DELETE FROM task_alerts" " WHERE task IN (SELECT id FROM tasks WHERE owner = %llu);", user); sql ("DELETE FROM task_preferences" " WHERE task IN (SELECT id FROM tasks WHERE owner = %llu);", user); sql ("DELETE FROM tasks WHERE owner = %llu;", user); sql ("UPDATE groups SET owner = 0 WHERE owner = %llu;", user); sql ("UPDATE roles SET owner = 0 WHERE owner = %llu;", user); sql ("UPDATE users SET owner = 0 WHERE owner = %llu;", user); sql ("DELETE FROM group_users WHERE \"user\" = %llu;", user); sql ("DELETE FROM group_users_trash WHERE \"user\" = %llu;", user); sql ("DELETE FROM role_users WHERE \"user\" = %llu;", user); sql ("DELETE FROM role_users_trash WHERE \"user\" = %llu;", user); sql ("DELETE FROM users WHERE id = %llu;", user); sql ("COMMIT;"); return 0; } /** * @brief Modify a user. * * @param[in] user_id The UUID of the user. Overrides name. * @param[in] name The name of the user. If NULL then set to name * when return is 3 or 4. * @param[in] new_name New name for the user. NULL to leave as is. * @param[in] password The password of the user. NULL to leave as is. * @param[in] hosts The host the user is allowed/forbidden to scan. * NULL to leave as is. * @param[in] hosts_allow Whether hosts is allow or forbid. * @param[in] ifaces Interfaces the user is allowed/forbidden to scan. * @param[in] ifaces_allow Whether ifaces is allow or forbid. * @param[in] allowed_methods Allowed login methods. * @param[in] groups Groups. * @param[out] group_id_return ID of group on "failed to find" error. * @param[in] roles Roles. * @param[out] role_id_return ID of role on "failed to find" error. * @param[out] r_errdesc If not NULL the address of a variable to receive * a malloced string with the error description. Will * always be set to NULL on success. * * @return 0 if the user has been added successfully, 1 failed to find group, * 2 failed to find user, 3 success and user gained admin, 4 success * and user lost admin, 5 failed to find role, 6 syntax error in hosts, * 7 syntax error in new name, 99 permission denied, -1 on error, * -2 for an unknown role, -3 if wrong number of methods. */ int modify_user (const gchar * user_id, gchar **name, const gchar *new_name, const gchar * password, const gchar * hosts, int hosts_allow, const gchar *ifaces, int ifaces_allow, const array_t * allowed_methods, array_t *groups, gchar **group_id_return, array_t *roles, gchar **role_id_return, gchar **r_errdesc) { char *errstr; gchar *hash, *quoted_hosts, *quoted_ifaces, *quoted_method, *clean, *uuid; gchar *quoted_new_name; user_t user; int max, was_admin, is_admin; if (r_errdesc) *r_errdesc = NULL; /* allowed_methods is a NULL terminated array. */ if (allowed_methods && (allowed_methods->len > 2)) return -3; if (allowed_methods && (allowed_methods->len == 0)) allowed_methods = NULL; if (allowed_methods && ((g_ptr_array_index (allowed_methods, 0) == NULL) || (strlen (g_ptr_array_index (allowed_methods, 0)) == 0))) allowed_methods = NULL; // FIX validate methods single source, one of "", "ldap", ... sql_begin_immediate (); if (user_may ("modify_user") == 0) { sql ("ROLLBACK;"); return 99; } user = 0; if (user_id) { if (find_user_with_permission (user_id, &user, "modify_user")) { sql ("ROLLBACK;"); return -1; } } else if (find_user_by_name_with_permission (*name, &user, "modify_user")) { sql ("ROLLBACK;"); return -1; } if (user == 0) { sql ("ROLLBACK;"); return 2; } uuid = sql_string ("SELECT uuid FROM users WHERE id = %llu", user); /* The only user that can edit a Super Admin is the Super Admin themself. */ if (user_can_super_everyone (uuid) && strcmp (uuid, current_credentials.uuid)) { g_free (uuid); sql ("ROLLBACK;"); return 99; } was_admin = user_is_admin (uuid); if (password) { char *user_name; user_name = sql_string ("SELECT name FROM users WHERE id = %llu", user); errstr = openvas_validate_password (password, user_name); g_free (user_name); if (errstr) { g_warning ("new password for '%s' rejected: %s", user_name, errstr); if (r_errdesc) *r_errdesc = errstr; else g_free (errstr); sql ("ROLLBACK;"); return -1; } } /* Check hosts. */ max = manage_max_hosts (); manage_set_max_hosts (MANAGE_USER_MAX_HOSTS); if (hosts && (manage_count_hosts (hosts, NULL) < 0)) { manage_set_max_hosts (max); sql ("ROLLBACK;"); return 6; } manage_set_max_hosts (max); /* Check new name. */ if (new_name) { if (validate_username (new_name) != 0) { sql ("ROLLBACK"); return 7; } if (strcmp (uuid, current_credentials.uuid) == 0) { sql ("ROLLBACK;"); return 99; } if (resource_with_name_exists_global (new_name, "user", user)) { sql ("ROLLBACK;"); return 8; } quoted_new_name = sql_quote (new_name); } else quoted_new_name = NULL; /* Get the password hashes. */ if (password) hash = get_password_hashes (GCRY_MD_MD5, password); else hash = NULL; /* Update the user in the database. */ clean = clean_hosts (hosts ? hosts : "", &max); if ((hosts_allow == 0) && (max == 0)) /* Convert "Deny none" to "Allow All". */ hosts_allow = 2; quoted_ifaces = sql_quote (ifaces ? ifaces : ""); quoted_hosts = sql_quote (clean); g_free (clean); quoted_method = sql_quote (allowed_methods ? g_ptr_array_index (allowed_methods, 0) : ""); sql ("UPDATE users" " SET name = %s%s%s," " hosts = '%s'," " hosts_allow = '%i'," " ifaces = '%s'," " ifaces_allow = %i," " method = %s%s%s," " modification_time = m_now ()" " WHERE id = %llu;", quoted_new_name ? "'" : "", quoted_new_name ? quoted_new_name : "name", quoted_new_name ? "'" : "", quoted_hosts, hosts_allow, quoted_ifaces, ifaces_allow, allowed_methods ? "'" : "", allowed_methods ? quoted_method : "method", allowed_methods ? "'" : "", user); g_free (quoted_new_name); g_free (quoted_hosts); g_free (quoted_ifaces); g_free (quoted_method); if (hash) sql ("UPDATE users" " SET password = '%s'" " WHERE id = %llu;", hash, user); g_free (hash); /* Update the user groups. */ if (groups) { int index; sql ("DELETE FROM group_users WHERE \"user\" = %llu;", user); index = 0; while (groups && (index < groups->len)) { gchar *group_id; group_t group; group_id = (gchar*) g_ptr_array_index (groups, index); if (strcmp (group_id, "0") == 0) { index++; continue; } if (find_group (group_id, &group)) { sql ("ROLLBACK;"); return -1; } if (group == 0) { sql ("ROLLBACK;"); if (group_id_return) *group_id_return = group_id; return 1; } sql ("INSERT INTO group_users (\"group\", \"user\")" " VALUES (%llu, %llu);", group, user); index++; } } /* Update the user roles. */ if (roles) { int index; sql ("DELETE FROM role_users" " WHERE \"user\" = %llu" " AND role != (SELECT id from roles" " WHERE uuid = '" ROLE_UUID_SUPER_ADMIN "');", user); index = 0; while (roles && (index < roles->len)) { gchar *role_id; role_t role; role_id = (gchar*) g_ptr_array_index (roles, index); if (strcmp (role_id, "0") == 0) { index++; continue; } if (find_role (role_id, &role)) { sql ("ROLLBACK;"); return -1; } if (role == 0) { sql ("ROLLBACK;"); if (role_id_return) *role_id_return = role_id; return 1; } if (role_can_super_everyone (role_id)) { sql ("ROLLBACK;"); return 99; } sql ("INSERT INTO role_users (role, \"user\") VALUES (%llu, %llu);", role, user); index++; } } sql ("COMMIT;"); if (was_admin) { is_admin = user_is_admin (uuid); g_free (uuid); if (is_admin) return 0; if (*name == NULL) *name = sql_string ("SELECT name FROM users WHERE id = %llu", user); return 4; } is_admin = user_is_admin (uuid); g_free (uuid); if (is_admin) { if (*name == NULL) *name = sql_string ("SELECT name FROM users WHERE id = %llu", user); return 3; } return 0; } /** * @brief Return the UUID of a user. * * Warning: this is only safe for users that are known to be in the db. * * @param[in] user User. * * @return Newly allocated UUID if available, else NULL. */ char* user_uuid (user_t user) { return sql_string ("SELECT uuid FROM users WHERE id = %llu;", user); } /** * @brief Check whether a user is in use. * * @param[in] user User. * * @return 1 yes, 0 no. */ int user_in_use (user_t user) { return 0; } /** * @brief Check whether a trashcan user is in use. * * @param[in] user User. * * @return 1 yes, 0 no. */ int trash_user_in_use (user_t user) { return 0; } /** * @brief Check whether a user is writable. * * @param[in] user User. * * @return 1 yes, 0 no. */ int user_writable (user_t user) { return 1; } /** * @brief Check whether a trashcan user is writable. * * @param[in] user User. * * @return 1 yes, 0 no. */ int trash_user_writable (user_t user) { return 1; } /** * @brief User columns for user iterator. */ #define USER_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "method", "roles", "groups", "hosts", \ "ifaces", NULL } /** * @brief User iterator columns. */ #define USER_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS (users), \ { "method", NULL }, \ { "hosts", NULL }, \ { "hosts_allow", NULL }, \ { \ "coalesce ((SELECT group_concat (name, ', ')" \ " FROM (SELECT DISTINCT name, order_role (name)" \ " FROM roles, role_users" \ " WHERE role_users.role = roles.id" \ " AND \"user\" = users.id" \ " ORDER BY order_role (roles.name) ASC)" \ " AS user_iterator_sub)," \ " '')", \ "roles" \ }, \ { \ "coalesce ((SELECT group_concat (name, ', ')" \ " FROM (SELECT DISTINCT name FROM groups, group_users" \ " WHERE group_users.\"group\" = groups.id" \ " AND \"user\" = users.id" \ " ORDER BY groups.name ASC)" \ " AS user_iterator_sub)," \ " '')", \ "groups" \ }, \ { "ifaces", NULL }, \ { "ifaces_allow", NULL }, \ { NULL, NULL } \ } /** * @brief User iterator columns for trash case. */ #define USER_ITERATOR_TRASH_COLUMNS \ { \ GET_ITERATOR_COLUMNS (users_trash), \ { "method", NULL }, \ { "hosts", NULL }, \ { "hosts_allow", NULL }, \ { "ifaces", NULL }, \ { "ifaces_allow", NULL }, \ { NULL, NULL } \ } /** * @brief Count number of users. * * @param[in] get GET params. * * @return Total number of users in usered set. */ int user_count (const get_data_t *get) { static const char *filter_columns[] = USER_ITERATOR_FILTER_COLUMNS; static column_t columns[] = USER_ITERATOR_COLUMNS; return count ("user", get, columns, NULL, filter_columns, 0, 0, 0, TRUE); } /** * @brief Initialise a user iterator, including observed users. * * @param[in] iterator Iterator. * @param[in] get GET data. * * @return 0 success, 1 failed to find user, failed to find user (filt_id), * -1 error. */ int init_user_iterator (iterator_t* iterator, const get_data_t *get) { static const char *filter_columns[] = USER_ITERATOR_FILTER_COLUMNS; static column_t columns[] = USER_ITERATOR_COLUMNS; static column_t trash_columns[] = USER_ITERATOR_TRASH_COLUMNS; return init_get_iterator (iterator, "user", get, columns, trash_columns, filter_columns, 0, NULL, NULL, TRUE); } /** * @brief Get the method of the user from a user iterator. * * @param[in] iterator Iterator. * * @return Method of the user or NULL if iteration is complete. */ DEF_ACCESS (user_iterator_method, GET_ITERATOR_COLUMN_COUNT); /** * @brief Get the hosts from a user iterator. * * @param[in] iterator Iterator. * * @return Hosts or NULL if iteration is complete. */ DEF_ACCESS (user_iterator_hosts, GET_ITERATOR_COLUMN_COUNT + 1); /** * @brief Get the hosts allow value from a user iterator. * * @param[in] iterator Iterator. * * @return Hosts allow. */ int user_iterator_hosts_allow (iterator_t* iterator) { if (iterator->done) return -1; return iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 2); } /** * @brief Get the ifaces from a user iterator. * * @param[in] iterator Iterator. * * @return Interfaces or NULL if iteration is complete. */ DEF_ACCESS (user_iterator_ifaces, GET_ITERATOR_COLUMN_COUNT + 5); /** * @brief Get the ifaces allow value from a user iterator. * * @param[in] iterator Iterator. * * @return Interfaces allow. */ int user_iterator_ifaces_allow (iterator_t* iterator) { if (iterator->done) return -1; return iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 6); } /** * @brief Initialise an info iterator. * * @param[in] iterator Iterator. * @param[in] user User. */ void init_user_group_iterator (iterator_t *iterator, user_t user) { gchar *available; get_data_t get; array_t *permissions; assert (user); get.trash = 0; permissions = make_array (); array_add (permissions, g_strdup ("get_groups")); available = where_owned ("group", &get, 1, "any", 0, permissions); array_free (permissions); init_iterator (iterator, "SELECT DISTINCT id, uuid, name, %s FROM groups" " WHERE id IN (SELECT \"group\" FROM group_users" " WHERE \"user\" = %llu)" " ORDER by name;", available, user); g_free (available); } /** * @brief Get the UUID from a user group iterator. * * @param[in] iterator Iterator. * * @return UUID or NULL if iteration is complete. Freed by cleanup_iterator. */ DEF_ACCESS (user_group_iterator_uuid, 1); /** * @brief Get the NAME from a user group iterator. * * @param[in] iterator Iterator. * * @return NAME or NULL if iteration is complete. Freed by cleanup_iterator. */ DEF_ACCESS (user_group_iterator_name, 2); /** * @brief Get the read permission status from a GET iterator. * * @param[in] iterator Iterator. * * @return 1 if may read, else 0. */ int user_group_iterator_readable (iterator_t* iterator) { if (iterator->done) return 0; return iterator_int (iterator, 3); } /** * @brief Initialise an info iterator. * * @param[in] iterator Iterator. * @param[in] user User. */ void init_user_role_iterator (iterator_t *iterator, user_t user) { gchar *available; get_data_t get; array_t *permissions; assert (user); get.trash = 0; permissions = make_array (); array_add (permissions, g_strdup ("get_roles")); available = where_owned ("role", &get, 1, "any", 0, permissions); array_free (permissions); init_iterator (iterator, "SELECT DISTINCT id, uuid, name, order_role (name), %s" " FROM roles" " WHERE id IN (SELECT role FROM role_users" " WHERE \"user\" = %llu)" " ORDER by order_role (name);", available, user); g_free (available); } /** * @brief Get the UUID from a user role iterator. * * @param[in] iterator Iterator. * * @return UUID or NULL if iteration is complete. Freed by cleanup_iterator. */ DEF_ACCESS (user_role_iterator_uuid, 1); /** * @brief Get the NAME from a user role iterator. * * @param[in] iterator Iterator. * * @return NAME or NULL if iteration is complete. Freed by cleanup_iterator. */ DEF_ACCESS (user_role_iterator_name, 2); /** * @brief Get the read permission status from a GET iterator. * * @param[in] iterator Iterator. * * @return 1 if may read, else 0. */ int user_role_iterator_readable (iterator_t* iterator) { if (iterator->done) return 0; return iterator_int (iterator, 4); } /* Tags */ /** * @brief Find a tag for a specific permission, given a UUID. * * @param[in] uuid UUID of tag. * @param[out] tag Tag return, 0 if succesfully failed to find tag. * @param[in] permission Permission. * * @return FALSE on success (including if failed to find tag), TRUE on error. */ gboolean find_tag_with_permission (const char* uuid, tag_t* tag, const char *permission) { return find_resource_with_permission ("tag", uuid, tag, permission, 0); } /** * @brief Create a tag from an existing tag. * * @param[in] name Name of new tag. NULL to copy from existing. * @param[in] comment Comment on new tag. NULL to copy from existing. * @param[in] tag_id UUID of existing tag. * @param[out] new_tag New tag. * * @return 0 success, 2 failed to find existing tag, * 99 permission denied, -1 error. */ int copy_tag (const char* name, const char* comment, const char *tag_id, tag_t* new_tag) { return copy_resource ("tag", name, comment, tag_id, "value, resource_type, resource, resource_location," " resource_uuid, active", 1, new_tag); } /** * @brief Create a tag. * * @param[in] name Name of the tag. * @param[in] comment Comment for the tag. * @param[in] value Value of the tag. * @param[in] resource_type Resource type to attach the tag to. * @param[in] resource_uuid Unique ID of the resource to attach the tag to. * @param[in] active 0 for inactive, NULL or any other value for active. * @param[out] tag Created tag. * * @return 0 success, 99 permission denied, -1 error. */ int create_tag (const char * name, const char * comment, const char * value, const char * resource_type, const char * resource_uuid, const char * active, tag_t * tag) { gchar *quoted_name, *quoted_comment, *quoted_value; gchar *lc_resource_type, *quoted_resource_type, *quoted_resource_uuid; int resource_location = LOCATION_TABLE; gchar *resource_permission = NULL; resource_t resource; sql_begin_immediate (); if (user_may ("create_tag") == 0) { sql ("ROLLBACK;"); return 99; } lc_resource_type = g_ascii_strdown (resource_type, -1); if (strcmp (lc_resource_type, "") && valid_db_resource_type (lc_resource_type) == 0) { g_free (lc_resource_type); sql ("ROLLBACK;"); return -1; } if ((strcmp (lc_resource_type, "cpe") == 0) || (strcmp (lc_resource_type, "cve") == 0) || (strcmp (lc_resource_type, "ovaldef") == 0) || (strcmp (lc_resource_type, "cert_bund_adv") == 0) || (strcmp (lc_resource_type, "dfn_cert_adv") == 0)) resource_permission = g_strdup ("get_info"); else resource_permission = g_strdup_printf ("get_%ss", resource_type); if (find_resource_with_permission (resource_type, resource_uuid, &resource, resource_permission, 0)) { sql ("ROLLBACK;"); g_free (lc_resource_type); g_free (resource_permission); return -1; } else if (resource == 0 && (strcmp (lc_resource_type, "nvt")) && (strcmp (lc_resource_type, "cve")) && (strcmp (lc_resource_type, "cpe")) && (strcmp (lc_resource_type, "ovaldef")) && (strcmp (lc_resource_type, "cert_bund_adv")) && (strcmp (lc_resource_type, "dfn_cert_adv")) && (strcmp (lc_resource_type, "report")) && (strcmp (lc_resource_type, "result")) && (strcmp (lc_resource_type, "user"))) { if (find_resource_with_permission (resource_type, resource_uuid, &resource, resource_permission, 1)) { sql ("ROLLBACK;"); g_free (lc_resource_type); g_free (resource_permission); return -1; } else if (resource != 0) resource_location = LOCATION_TRASH; } quoted_name = sql_insert (name); quoted_resource_type = sql_insert (lc_resource_type); quoted_resource_uuid = resource_uuid ? sql_insert (resource_uuid) : g_strdup ("''"); quoted_comment = sql_insert (comment ? comment : ""); quoted_value = sql_insert (value ? value : ""); sql ("INSERT INTO tags" " (uuid, owner, creation_time, modification_time, name, comment," " value, resource_type, resource_uuid, resource, resource_location," " active)" " VALUES" " (make_uuid (), (SELECT id FROM users WHERE users.uuid = '%s')," " %i, %i, %s, %s, %s, %s, %s, %llu, %d, %i);", current_credentials.uuid, time (NULL), time (NULL), quoted_name, quoted_comment, quoted_value, quoted_resource_type, quoted_resource_uuid, resource, resource_location, active ? (strcmp (active, "0") == 0 ? 0 : 1) : 1); g_free (quoted_name); g_free (lc_resource_type); g_free (quoted_resource_type); g_free (quoted_resource_uuid); g_free (quoted_comment); g_free (quoted_value); if (tag) *tag = sql_last_insert_id (); sql ("COMMIT;"); return 0; } /** * @brief Delete a tag. * * @param[in] tag_id UUID of tag. * @param[in] ultimate Whether to remove entirely, or to trashcan. * * @return 0 success, 2 failed to find tag, 99 permission denied, -1 error. */ int delete_tag (const char *tag_id, int ultimate) { tag_t tag = 0; sql_begin_immediate (); if (user_may ("delete_tag") == 0) { sql ("ROLLBACK;"); return 99; } if (find_tag_with_permission (tag_id, &tag, "delete_tag")) { sql ("ROLLBACK;"); return -1; } if (tag == 0) { if (find_trash ("tag", tag_id, &tag)) { sql ("ROLLBACK;"); return -1; } if (tag == 0) { sql ("ROLLBACK;"); return 2; } if (ultimate == 0) { /* It's already in the trashcan. */ sql ("COMMIT;"); return 0; } permissions_set_orphans ("tag", tag, LOCATION_TRASH); sql ("DELETE FROM tags_trash WHERE id = %llu;", tag); sql ("COMMIT;"); return 0; } if (ultimate == 0) { sql ("INSERT INTO tags_trash" " (uuid, owner, name, comment, creation_time," " modification_time, resource_type, resource, resource_uuid," " resource_location, active, value)" " SELECT uuid, owner, name, comment, creation_time," " modification_time, resource_type, resource, resource_uuid," " resource_location, active, value" " FROM tags WHERE id = %llu;", tag); permissions_set_locations ("tag", tag, sql_last_insert_id (), LOCATION_TRASH); } else { permissions_set_orphans ("tag", tag, LOCATION_TABLE); tags_set_orphans ("tag", tag, LOCATION_TABLE); } sql ("DELETE FROM tags WHERE id = %llu;", tag); sql ("COMMIT;"); return 0; } /** * @brief Modify a tag. * * @param[in] tag_id UUID of tag. * @param[in] name New name of the tag or NULL. * @param[in] comment New comment for the tag or NULL. * @param[in] value New value of the tag or NULL. * @param[in] resource_type New resource type to attach the tag to or NULL. * @param[in] resource_uuid New Unique ID of the resource to attach or NULL. * @param[in] active 0 for inactive, any other for active or NULL. * * @return 0 success, 1 failed to find tag, 2 tag_id required, 99 permission * denied, -1 internal error. */ int modify_tag (const char *tag_id, const char *name, const char *comment, const char *value, const char *resource_type, const char *resource_uuid, const char *active) { gchar *quoted_name, *quoted_comment, *quoted_value; gchar *lc_resource_type, *quoted_resource_type, *quoted_resource_uuid; tag_t tag; if (tag_id == NULL) return 2; sql_begin_immediate (); assert (current_credentials.uuid); if (user_may ("modify_tag") == 0) { sql ("ROLLBACK;"); return 99; } tag = 0; if (find_tag_with_permission (tag_id, &tag, "modify_tag")) { sql ("ROLLBACK;"); return -1; } if (tag == 0) { sql ("ROLLBACK;"); return 1; } lc_resource_type = (resource_type ? g_ascii_strdown (resource_type, -1) : g_strdup ("")); if (strcmp (lc_resource_type, "") && valid_db_resource_type (lc_resource_type) == 0) { sql ("ROLLBACK;"); return -1; } quoted_resource_type = sql_insert (lc_resource_type); quoted_name = sql_insert (name ? name : ""); quoted_resource_uuid = sql_insert (resource_uuid ? resource_uuid : ""); quoted_comment = sql_insert (comment ? comment : ""); quoted_value = sql_insert (value ? value : ""); if (name) { sql ("UPDATE tags SET" " name = %s" " WHERE id = %llu;", quoted_name, tag); } if (resource_type) { sql ("UPDATE tags SET" " resource_type = %s" " WHERE id = %llu;", quoted_resource_type, tag); } if (resource_uuid) { resource_t resource; gchar *resource_permission; int resource_location = LOCATION_TABLE; if ((strcmp (lc_resource_type, "cpe") == 0) || (strcmp (lc_resource_type, "cve") == 0) || (strcmp (lc_resource_type, "ovaldef") == 0) || (strcmp (lc_resource_type, "cert_bund_adv") == 0) || (strcmp (lc_resource_type, "dfn_cert_adv") == 0)) resource_permission = g_strdup ("get_info"); else resource_permission = g_strdup_printf ("get_%ss", resource_type); if (find_resource_with_permission (resource_type, resource_uuid, &resource, resource_permission, 0)) { sql ("ROLLBACK;"); g_free (lc_resource_type); g_free (resource_permission); return -1; } else if (resource == 0 && (strcmp (lc_resource_type, "nvt")) && (strcmp (lc_resource_type, "cve")) && (strcmp (lc_resource_type, "cpe")) && (strcmp (lc_resource_type, "ovaldef")) && (strcmp (lc_resource_type, "cert_bund_adv")) && (strcmp (lc_resource_type, "dfn_cert_adv")) && (strcmp (lc_resource_type, "report")) && (strcmp (lc_resource_type, "result")) && (strcmp (lc_resource_type, "user"))) { if (find_resource_with_permission (resource_type, resource_uuid, &resource, resource_permission, 1)) { sql ("ROLLBACK;"); g_free (lc_resource_type); g_free (resource_permission); return -1; } else if (resource != 0) resource_location = LOCATION_TRASH; } sql ("UPDATE tags SET" " resource_uuid = %s," " resource = %llu," " resource_location = %d" " WHERE id = %llu;", quoted_resource_uuid, resource, resource_location, tag); } if (comment) { sql ("UPDATE tags SET" " comment = %s" " WHERE id = %llu;", quoted_comment, tag); } if (value) { sql ("UPDATE tags SET" " value = %s" " WHERE id = %llu;", quoted_value, tag); } if (active) { sql ("UPDATE tags SET" " active = %i" " WHERE id = %llu;", strcmp (active, "0") ? 1 : 0, tag); } sql ("UPDATE tags SET" " modification_time = %i" " WHERE id = %llu;", time (NULL), tag); g_free (quoted_name); g_free (lc_resource_type); g_free (quoted_resource_type); g_free (quoted_resource_uuid); g_free (quoted_comment); g_free (quoted_value); sql ("COMMIT;"); return 0; } /** * @brief Filter columns for Tag iterator. */ #define TAG_ITERATOR_FILTER_COLUMNS \ { GET_ITERATOR_FILTER_COLUMNS, "resource_type", "resource", "resource_uuid", \ "resource_location", "active", "value", "orphan", "resource_name", NULL } /** * @brief Tag iterator columns. */ #define TAG_ITERATOR_COLUMNS \ { \ GET_ITERATOR_COLUMNS (tags), \ { "resource_type", NULL }, \ { "resource", NULL }, \ { "resource_uuid", NULL }, \ { "resource_location", NULL }, \ { "active", NULL }, \ { "value", NULL }, \ { "(resource = 0)", "orphan" }, \ { \ "resource_name (resource_type, resource_uuid, resource_location)", \ "resource_name" \ }, \ { NULL, NULL } \ } /** * @brief Tag iterator trash columns. */ #define TAG_ITERATOR_TRASH_COLUMNS \ { \ GET_ITERATOR_COLUMNS (tags_trash), \ { "resource_type", NULL }, \ { "resource", NULL }, \ { "resource_uuid", NULL }, \ { "resource_location", NULL }, \ { "active", NULL }, \ { "value", NULL }, \ { "(resource = 0)", "orphan" }, \ { \ "resource_name (resource_type, resource_uuid, resource_location)", \ "resource_name" \ }, \ { NULL, NULL } \ } /** * @brief Filter columns for Tag name iterator. */ #define TAG_NAME_ITERATOR_FILTER_COLUMNS \ { "name", "resource_type", NULL } /** * @brief Tag name iterator columns. */ #define TAG_NAME_ITERATOR_COLUMNS \ { \ { "name" , NULL }, \ { "resource_type" , NULL }, \ { NULL, NULL } \ } /** * @brief Initialise a tag iterator. * * @param[in] iterator Iterator. * @param[in] get GET data. * * @return 0 success, 1 failed to find tag, 2 failed to find filter, * -1 error. */ int init_tag_iterator (iterator_t* iterator, const get_data_t *get) { static const char *filter_columns[] = TAG_ITERATOR_FILTER_COLUMNS; static column_t columns[] = TAG_ITERATOR_COLUMNS; static column_t trash_columns[] = TAG_ITERATOR_TRASH_COLUMNS; return init_get_iterator (iterator, "tag", get, columns, trash_columns, filter_columns, 0, NULL, NULL, TRUE); } /** * @brief Count number of tags. * * @param[in] get GET params. * * @return Total number of tags in filtered set. */ int tag_count (const get_data_t *get) { static const char *filter_columns[] = TAG_ITERATOR_FILTER_COLUMNS; static column_t columns[] = TAG_ITERATOR_COLUMNS; static column_t trash_columns[] = TAG_ITERATOR_TRASH_COLUMNS; return count ("tag", get, columns, trash_columns, filter_columns, 0, 0, 0, TRUE); } /** * @brief Get the resource_type from a Tag iterator. * * @param[in] iterator Iterator. * * @return The resource type attached to a tag. */ DEF_ACCESS (tag_iterator_resource_type, GET_ITERATOR_COLUMN_COUNT); /** * @brief Get the resource_uuid from a Tag iterator. * * @param[in] iterator Iterator. * * @return The UUID of the resource attached to a tag. */ DEF_ACCESS (tag_iterator_resource_uuid, GET_ITERATOR_COLUMN_COUNT + 2); /** * @brief Get the resource_location from a Tag iterator. * * @param[in] iterator Iterator. * * @return Location of the resource of a tag (0 = normal table, 1 = trashcan). */ int tag_iterator_resource_location (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 3); return ret; } /** * @brief Get the readable status of a resource from a tag iterator. * * @param[in] iterator Iterator. * * @return 1 if readable, otherwise 0. */ int tag_iterator_resource_readable (iterator_t* iterator) { resource_t found; const char *type, *uuid; gchar *permission; if (iterator->done) return 0; type = tag_iterator_resource_type (iterator); uuid = tag_iterator_resource_uuid (iterator); if (type == NULL || uuid == NULL) return 0; if ((strcmp (type, "cpe") == 0) || (strcmp (type, "cve") == 0) || (strcmp (type, "ovaldef") == 0) || (strcmp (type, "cert_bund_adv") == 0) || (strcmp (type, "dfn_cert_adv") == 0)) permission = g_strdup ("get_info"); else permission = g_strdup_printf ("get_%ss", type); found = 0; find_resource_with_permission (type, uuid, &found, permission, tag_iterator_resource_location (iterator) == LOCATION_TRASH); g_free (permission); return found > 0; } /** * @brief Get if a tag is active from a Tag iterator. * * @param[in] iterator Iterator. * * @return Whether a tag is active (0 = inactive, 1 = active). */ int tag_iterator_active (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 4); return ret; } /** * @brief Get the value from a Tag iterator. * * @param[in] iterator Iterator. * * @return The value associated with a tag. */ DEF_ACCESS (tag_iterator_value, GET_ITERATOR_COLUMN_COUNT + 5); /** * @brief Get if a tag is orphaned from a Tag iterator. * * @param[in] iterator Iterator. * * @return Whether a tag is orphaned. */ int tag_iterator_orphan (iterator_t* iterator) { int ret; if (iterator->done) return -1; ret = iterator_int (iterator, GET_ITERATOR_COLUMN_COUNT + 6); return ret; } /** * @brief Get the resource_name from a Tag iterator. * * @param[in] iterator Iterator. * * @return The name of the resource attached to a tag. */ DEF_ACCESS (tag_iterator_resource_name, GET_ITERATOR_COLUMN_COUNT + 7); /** * @brief Initialise a iterator of tag names. * * @param[in] iterator Iterator. * @param[in] get GET params. * * @return 0 success, -1 error. */ int init_tag_name_iterator (iterator_t* iterator, const get_data_t *get) { static const char *filter_columns[] = TAG_NAME_ITERATOR_FILTER_COLUMNS; static column_t columns[] = TAG_NAME_ITERATOR_COLUMNS; return init_get_iterator (iterator, "tag", get, columns, columns, filter_columns, 1, NULL, NULL, TRUE); } /** * @brief Get the name from a Tag name iterator. * * @param[in] iterator Iterator. * * @return The tag name. */ DEF_ACCESS (tag_name_iterator_name, 0); /** * @brief Initialise a iterator of tags attached to a resource. * * @param[in] iterator Iterator. * @param[in] type Resource type. * @param[in] resource Resource. * @param[in] active_only Whether to select only active tags. * @param[in] sort_field Field to sort by. * @param[in] ascending Whether to sort in ascending order. * * @return 0 success, -1 error. */ int init_resource_tag_iterator (iterator_t* iterator, const char* type, resource_t resource, int active_only, const char* sort_field, int ascending) { assert (type); assert (resource); assert (current_credentials.uuid); init_iterator (iterator, "SELECT id, uuid, name, value, comment" " FROM tags" " WHERE resource_type = '%s'" " AND resource = %llu" "%s" " AND ((owner IS NULL)" " OR (owner =" " (SELECT id FROM users WHERE users.uuid = '%s')))" " ORDER BY %s %s;", type, resource, active_only ? " AND active=1" : "", current_credentials.uuid, sort_field ? sort_field : "active DESC, name", ascending ? "ASC" : "DESC"); return 0; } /** * @brief Get the Tag UUID from a resource Tag iterator. * * @param[in] iterator Iterator. * * @return The UUID of the tag. */ DEF_ACCESS (resource_tag_iterator_uuid, 1); /** * @brief Get the Tag name from a resource Tag iterator. * * @param[in] iterator Iterator. * * @return The name of the tag. */ DEF_ACCESS (resource_tag_iterator_name, 2); /** * @brief Get the Tag value from a resource Tag iterator. * * @param[in] iterator Iterator. * * @return The value of the tag. */ DEF_ACCESS (resource_tag_iterator_value, 3); /** * @brief Get the Tag comment from a resource Tag iterator. * * @param[in] iterator Iterator. * * @return The comment of the tag. */ DEF_ACCESS (resource_tag_iterator_comment, 4); /** * @brief Count number of tags attached to a resource. * * @param[in] type Resource type. * @param[in] resource Resource. * @param[in] active_only Whether to count only active tags. * * @return Total number of tags attached to the resource. */ int resource_tag_count (const char* type, resource_t resource, int active_only) { int ret; assert (type); assert (resource); ret = sql_int ("SELECT count (id)" " FROM tags" " WHERE resource_type = '%s'" " AND resource = %llu" " %s;", type, resource, active_only ? "AND active=1": ""); return ret; } /** * @brief Return whether a tag is in use by a task. * * @param[in] tag Tag. * * @return 1 if in use, else 0. */ int tag_in_use (tag_t tag) { return 0; } /** * @brief Return whether a trashcan tag is referenced by a task. * * @param[in] tag Tag. * * @return 1 if in use, else 0. */ int trash_tag_in_use (tag_t tag) { return 0; } /** * @brief Return whether a tag is writable. * * @param[in] tag Tag. * * @return 1 if writable, else 0. */ int tag_writable (tag_t tag) { return 1; } /** * @brief Return whether a trashcan tag is writable. * * @param[in] tag Tag. * * @return 1 if writable, else 0. */ int trash_tag_writable (tag_t tag) { return 0; } /** * @brief Return the SQL column definition for a resource iterator. * * @param[in] type Resource type to get columns of. * @param[in] apply_overrides Whether to apply overrides. * * @return The SQL column definitions. */ char* type_columns (const char *type, int apply_overrides) { if (type == NULL) return NULL; else if (strcasecmp (type, "TASK") == 0) { static column_t columns[] = TASK_ITERATOR_COLUMNS; return columns_build_select (columns); } else if (strcasecmp (type, "ALLINFO") == 0) { static column_t columns[] = ALL_INFO_ITERATOR_COLUMNS; return columns_build_select (columns); } else if (strcasecmp (type, "CPE") == 0) { static column_t columns[] = CPE_INFO_ITERATOR_COLUMNS; return columns_build_select (columns); } else if (strcasecmp (type, "CVE") == 0) { static column_t columns[] = CVE_INFO_ITERATOR_COLUMNS; return columns_build_select (columns); } else if (strcasecmp (type, "CERT_BUND_ADV") == 0) { static column_t columns[] = CERT_BUND_ADV_INFO_ITERATOR_COLUMNS; return columns_build_select (columns); } else if (strcasecmp (type, "DFN_CERT_ADV") == 0) { static column_t columns[] = DFN_CERT_ADV_INFO_ITERATOR_COLUMNS; return columns_build_select (columns); } else if (strcasecmp (type, "NVT") == 0) return g_strdup (nvt_iterator_columns ()); else if (strcasecmp (type, "OVALDEF") == 0) { static column_t columns[] = OVALDEF_INFO_ITERATOR_COLUMNS; return columns_build_select (columns); } else if (strcasecmp (type, "ALERT") == 0) { static column_t columns[] = ALERT_ITERATOR_COLUMNS; return columns_build_select (columns); } else return NULL; } // FIX /** * @brief Return the columns for a resource iterator. * * @param[in] type Resource type to get columns of. * @param[in] apply_overrides Whether to apply overrides. * * @return The columns. */ column_t * type_select_columns (const char *type, int apply_overrides) { static column_t task_columns[] = TASK_ITERATOR_COLUMNS; static column_t allinfo_columns[] = ALL_INFO_ITERATOR_COLUMNS; static column_t cpe_columns[] = CPE_INFO_ITERATOR_COLUMNS; static column_t cve_columns[] = CVE_INFO_ITERATOR_COLUMNS; static column_t cert_bund_adv_columns[] = CERT_BUND_ADV_INFO_ITERATOR_COLUMNS; static column_t dfn_cert_adv_columns[] = DFN_CERT_ADV_INFO_ITERATOR_COLUMNS; static column_t nvt_columns[] = NVT_ITERATOR_COLUMNS; static column_t ovaldef_columns[] = OVALDEF_INFO_ITERATOR_COLUMNS; static column_t alert_columns[] = ALERT_ITERATOR_COLUMNS; if (type == NULL) return NULL; else if (strcasecmp (type, "TASK") == 0) return task_columns; else if (strcasecmp (type, "ALLINFO") == 0) return allinfo_columns; else if (strcasecmp (type, "CPE") == 0) return cpe_columns; else if (strcasecmp (type, "CVE") == 0) return cve_columns; else if (strcasecmp (type, "CERT_BUND_ADV") == 0) return cert_bund_adv_columns; else if (strcasecmp (type, "DFN_CERT_ADV") == 0) return dfn_cert_adv_columns; else if (strcasecmp (type, "NVT") == 0) return nvt_columns; else if (strcasecmp (type, "OVALDEF") == 0) return ovaldef_columns; else if (strcasecmp (type, "ALERT") == 0) return alert_columns; return NULL; } /** * @brief Return the columns for a resource iterator. * * @param[in] type Resource type to get columns of. * @param[in] apply_overrides Whether to apply overrides. * * @return The columns. */ column_t * type_where_columns (const char *type, int apply_overrides) { static column_t task_columns[] = TASK_ITERATOR_WHERE_COLUMNS; static column_t report_columns[] = REPORT_ITERATOR_WHERE_COLUMNS; if (type == NULL) return NULL; else if (strcasecmp (type, "TASK") == 0) return task_columns; else if (strcasecmp (type, "REPORT") == 0) return report_columns; return NULL; } /** * @brief Return the filter columns for a resource iterator. * * @param[in] type Resource type to get columns of. * @param[in] apply_overrides Whether to apply overrides. * * @return The filter columns. */ const char** type_filter_columns (const char *type, int apply_overrides) { if (type == NULL) return NULL; else if (strcasecmp (type, "TASK") == 0) { static const char *ret[] = TASK_ITERATOR_FILTER_COLUMNS; return ret; } else if (strcasecmp (type, "ALLINFO") == 0) { static const char *ret[] = ALL_INFO_ITERATOR_FILTER_COLUMNS; return ret; } else if (strcasecmp (type, "CPE") == 0) { static const char *ret[] = CPE_INFO_ITERATOR_FILTER_COLUMNS; return ret; } else if (strcasecmp (type, "CVE") == 0) { static const char *ret[] = CVE_INFO_ITERATOR_FILTER_COLUMNS; return ret; } else if (strcasecmp (type, "CERT_BUND_ADV") == 0) { static const char *ret[] = CERT_BUND_ADV_INFO_ITERATOR_FILTER_COLUMNS; return ret; } else if (strcasecmp (type, "DFN_CERT_ADV") == 0) { static const char *ret[] = DFN_CERT_ADV_INFO_ITERATOR_FILTER_COLUMNS; return ret; } else if (strcasecmp (type, "NVT") == 0) { static const char *ret[] = NVT_INFO_ITERATOR_FILTER_COLUMNS; return ret; } else if (strcasecmp (type, "OVALDEF") == 0) { static const char *ret[] = OVALDEF_INFO_ITERATOR_FILTER_COLUMNS; return ret; } else if (strcasecmp (type, "ALERT") == 0) { static const char *ret[] = ALERT_ITERATOR_FILTER_COLUMNS; return ret; } else return NULL; } /** * @brief Return the SQL column definition for a trash resource iterator. * * @param[in] type Resource type to get columns of. * @param[in] apply_overrides Whether to apply overrides. * * @return The SQL column definitions. */ char* type_trash_columns (const char *type, int apply_overrides) { if (type == NULL) return NULL; else if (strcasecmp (type, "TASK") == 0) { static column_t columns[] = TASK_ITERATOR_COLUMNS; return columns_build_select (columns); } else if (strcasecmp (type, "ALERT") == 0) { static column_t columns[] = ALERT_ITERATOR_TRASH_COLUMNS; return columns_build_select (columns); } else return NULL; } /** * @brief Return the subquery definition for a resource type. * * @param[in] type Resource type to get columns of. * @param[in] apply_overrides Whether to apply overrides. * * @return The SQL subquery definition. */ gchar* type_opts_table (const char *type, int apply_overrides, int min_qod) { if (type == NULL) return NULL; else if (strcasecmp (type, "TASK") == 0) { return task_iterator_opts_table (apply_overrides, min_qod); } else return NULL; } /** * @brief Return the table name or union for a resource type. * * @param[in] type Resource type to get columns of. * @param[in] trash Whether to get the trash table. * * @return The SQL column definitions. */ char* type_table (const char *type, int trash) { if (type == NULL) return NULL; else if (strcasecmp (type, "ALLINFO") == 0) { return g_strdup (ALL_INFO_UNION_COLUMNS); } else if (trash && type_trash_in_table (type) == 0) { return g_strdup_printf ("%ss_trash", type); } else if (trash == 0 || type_trash_in_table (type)) { return g_strdup_printf ("%ss", type); } else return NULL; } /** * @brief Adjust location of resource in tags. * * @param[in] type Type. * @param[in] old Resource ID in old table. * @param[in] new Resource ID in new table. * @param[in] to Destination, trash or table. */ void tags_set_locations (const char *type, resource_t old, resource_t new, int to) { sql ("UPDATE tags SET resource_location = %i, resource = %llu" " WHERE resource_type = '%s' AND resource = %llu" " AND resource_location = %i;", to, new, type, old, to == LOCATION_TABLE ? LOCATION_TRASH : LOCATION_TABLE); sql ("UPDATE tags_trash SET resource_location = %i, resource = %llu" " WHERE resource_type = '%s' AND resource = %llu" " AND resource_location = %i;", to, new, type, old, to == LOCATION_TABLE ? LOCATION_TRASH : LOCATION_TABLE); } /** * @brief Set tags to orphan. * * @param[in] type Type. * @param[in] resource Resource. * @param[in] location Location: table or trash. */ void tags_set_orphans (const char *type, resource_t resource, int location) { sql ("UPDATE tags SET resource = 0, resource_location = " G_STRINGIFY (LOCATION_TABLE) " WHERE resource_type = '%s' AND resource = %llu" " AND resource_location = %i;", type, resource, location); sql ("UPDATE tags_trash SET resource = 0, resource_location = " G_STRINGIFY (LOCATION_TABLE) " WHERE resource_type = '%s' AND resource = %llu" " AND resource_location = %i;", type, resource, location); } /* Optimize. */ /** * @brief Run one of the optimizations. * * @param[in] log_config Log configuration. * @param[in] database Location of manage database. * @param[in] name Name of optimization. * * @return 0 success, 1 error in name, -1 error, * -2 database is wrong version, -3 database needs to be initialised * from server. */ int manage_optimize (GSList *log_config, const gchar *database, const gchar *name) { const gchar *db; gchar *success_text; int ret; if (name == NULL) { printf ("Name required for optimize.\n"); return 1; } if (openvas_auth_init_funcs (manage_user_hash, manage_user_set_role, manage_user_exists, manage_user_uuid)) return -1; db = database ? database : sql_default_database (); success_text = NULL; ret = init_manage_helper (log_config, db, 70000, NULL); assert (ret != -4); if (ret) return ret; init_manage_process (0, db); ret = 0; if (strcasecmp (name, "vacuum") == 0) { struct stat state; long long int old_size, new_size; old_size = 0LL; new_size = 0LL; ret = stat (db, &state); if (ret) switch (errno) { case ENOENT: break; default: g_warning ("%s: failed to stat database: %s", __FUNCTION__, strerror (errno)); } else old_size = state.st_size; if (sql_is_sqlite3 ()) sql ("VACUUM;"); else { sql_begin_exclusive (); sql ("VACUUM;"); sql ("COMMIT;"); } ret = stat (db, &state); if (ret) switch (errno) { case ENOENT: break; default: g_warning ("%s: failed to stat database: %s", __FUNCTION__, strerror (errno)); } else new_size = state.st_size; if (old_size && new_size) success_text = g_strdup_printf ("Optimized: vacuum." " Database file size reduced by" " %lld MiB (%0.1f %%).\n", (old_size - new_size) / (1024 * 1024), (old_size - new_size) * 100.0 / old_size); else success_text = g_strdup_printf ("Optimized: vacuum."); } else if (strcasecmp (name, "analyze") == 0) { sql ("ANALYZE;"); success_text = g_strdup_printf ("Optimized: analyze."); } else if (strcasecmp (name, "cleanup-config-prefs") == 0) { int changes; sql ("DELETE FROM config_preferences WHERE id NOT IN" " (SELECT min(id) FROM config_preferences" " GROUP BY config, type, name, value);"); changes = sql_changes(); success_text = g_strdup_printf ("Optimized: cleanup-config-prefs." " Duplicate config preferences removed:" " %d.", changes); } else if (strcasecmp (name, "remove-open-port-results") == 0) { int changes; sql ("DELETE FROM results WHERE nvt='0';"); changes = sql_changes(); success_text = g_strdup_printf ("Optimized: remove-open-port-results." " Superfluous open port results removed:" " %d.", changes); } else if (strcasecmp (name, "cleanup-port-names") == 0) { int changes_iana, changes_old_format; sql_begin_exclusive (); sql ("UPDATE results" " SET port = substr (port, 1," " strpos (port, ' (IANA:') - 1)" " WHERE port LIKE '% (IANA:%';"); changes_iana = sql_changes(); sql ("UPDATE results" " SET port = substr (port," " strpos (port ,'(') + 1," " strpos (port, ')') - strpos (port, '(') - 1)" " WHERE port LIKE '%(%)%';"); changes_old_format = sql_changes(); sql ("COMMIT;"); success_text = g_strdup_printf ("Optimized: cleanup-port-names." " Ports converted from old format: %d," " removed IANA port names: %d.", changes_old_format, changes_iana); } else if (strcasecmp (name, "cleanup-result-severities") == 0) { int missing_severity_changes = 0; sql_begin_exclusive(); if (sql_is_sqlite3 ()) sql ("UPDATE results" " SET severity" " = (SELECT value FROM settings" " WHERE uuid = '7eda49c5-096c-4bef-b1ab-d080d87300df'" " AND (settings.owner = results.owner" " OR settings.owner IS NULL)" " ORDER BY settings.owner DESC)" " WHERE severity IS NULL" " OR severity = '';"); else sql ("UPDATE results" " SET severity" " = (SELECT CAST (value AS real) FROM settings" " WHERE uuid = '7eda49c5-096c-4bef-b1ab-d080d87300df'" " AND (settings.owner = results.owner" " OR settings.owner IS NULL)" " ORDER BY settings.owner DESC)" " WHERE severity IS NULL;"); missing_severity_changes = sql_changes(); sql ("COMMIT;"); success_text = g_strdup_printf ("Optimized: cleanup-result-severities." " Missing severity scores added: %d.", missing_severity_changes); } else if (strcasecmp (name, "rebuild-report-cache") == 0) { int changes; sql_begin_exclusive (); reports_build_count_cache (1, &changes); sql ("COMMIT;"); success_text = g_strdup_printf ("Optimized: rebuild-report-cache." " Result counts recalculated for %d" " report/user combinations.", changes); } else if (strcasecmp (name, "update-report-cache") == 0) { int changes; sql_begin_exclusive (); reports_build_count_cache (0, &changes); sql ("COMMIT;"); success_text = g_strdup_printf ("Optimized: update-report-cache." " Result counts calculated for %d" " report/user combinations.", changes); } else { printf ("Error in optimize name.\n"); ret = 1; } if (success_text) { printf ("%s\n", success_text); g_message (" %s", success_text); g_free (success_text); } current_credentials.uuid = NULL; cleanup_manage_process (TRUE); return ret; } openvas-manager-6.0.9/src/sql.h000644 001751 001751 00000007311 12631501055 017420 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Headers for OpenVAS Manager: the SQL library. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2012 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #ifndef OPENVAS_MANAGER_SQL_H #define OPENVAS_MANAGER_SQL_H #include "lsc_crypt.h" /* For lsc_crypt_ctx_t. */ #include /* Types. */ /** * @brief A resource, like a task or target. */ typedef long long int resource_t; /** * @brief A prepared SQL statement. */ typedef struct sql_stmt sql_stmt_t; /** * @brief A generic SQL iterator. */ typedef struct { sql_stmt_t* stmt; ///< SQL statement. gboolean done; ///< End flag. int prepared; ///< Prepared flag. lsc_crypt_ctx_t crypt_ctx; ///< Encryption context. } iterator_t; /* Helpers. */ int openvas_usleep (unsigned int); int openvas_sleep (unsigned int); int sql_is_sqlite3 (); const char * sql_schema (); const char * sql_select_limit (int); const char * sql_regexp_op (); const char * sql_database (); const char * sql_default_database (); int sql_is_open (); int sql_open (const char *); void sql_close (); void sql_close_fork (); int sql_changes (); resource_t sql_last_insert_id (); gchar * sql_nquote (const char *, size_t); gchar * sql_quote (const char *); gchar * sql_insert (const char *); void sql (char * sql, ...); void sqli (resource_t *, char *, ...); int sql_error (char* sql, ...); int sql_giveup (char * sql, ...); void sql_quiet (char * sql, ...); double sql_double (char* sql, ...); int sql_int (char *, ...); char * sql_string (char *, ...); int sql_int64 (long long int * ret, char *, ...); void sql_rename_column (const char *, const char *, const char *, const char *); /* Transactions. */ void sql_begin_exclusive (); int sql_begin_exclusive_giveup (); void sql_begin_immediate (); int sql_begin_immediate_giveup (); /* Iterators. */ void init_prepared_iterator (iterator_t*, sql_stmt_t*); void init_iterator (iterator_t*, const char*, ...); double iterator_double (iterator_t*, int); int iterator_int (iterator_t*, int); long long int iterator_int64 (iterator_t*, int); int iterator_null (iterator_t*, int); const char* iterator_string (iterator_t*, int); const char* iterator_column_name (iterator_t*, int); int iterator_column_count (iterator_t*); void cleanup_iterator (iterator_t*); gboolean next (iterator_t*); /* Prepared statements. */ sql_stmt_t * sql_prepare (const char* sql, ...); int sql_bind_blob (sql_stmt_t *, int, const void *, int); int sql_bind_int64 (sql_stmt_t *, int, long long int *); int sql_bind_text (sql_stmt_t *, int, const gchar *, gsize); int sql_bind_double (sql_stmt_t *, int, double *); int sql_exec (sql_stmt_t *); void sql_finalize (sql_stmt_t *); int sql_reset (sql_stmt_t *); double sql_column_double (sql_stmt_t *, int); const char * sql_column_text (sql_stmt_t *, int); int sql_column_int (sql_stmt_t *, int); long long int sql_column_int64 (sql_stmt_t *, int); #endif /* not OPENVAS_MANAGER_SQL_H */ openvas-manager-6.0.9/src/omp.h000644 001751 001751 00000003111 12631501055 017406 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Headers for OpenVAS Manager: the OMP library. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2009 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #ifndef OPENVAS_MANAGER_OMP_H #define OPENVAS_MANAGER_OMP_H #include "types.h" #include #include /** * @brief The size of the \ref to_client data buffer, in bytes. */ #define TO_CLIENT_BUFFER_SIZE 26214400 int init_omp (GSList*, int, const gchar*, int, int, int, void (*) (), int); void init_omp_process (int, const gchar*, int (*) (const char*, void*), void*, gchar **); int process_omp_client_input (); int process_omp_change (); /** @todo As described in omp.c, probably should be replaced by omp_parser_t. */ extern char to_client[]; extern buffer_size_t to_client_start; extern buffer_size_t to_client_end; #endif openvas-manager-6.0.9/src/sql_pg.c000644 001751 001751 00000042471 12631501055 020107 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Manager Manage library: the SQL library. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2014 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #include "sql.h" #include "tracef.h" #include #include #include #include #include #include #include #include #include /* Headers of sql.c symbols used only here. */ int sql_x (char*, va_list args, sql_stmt_t**); /* Types. */ struct sql_stmt { gchar *sql; ///< SQL statement. PGresult *result; ///< Result set. int current_row; ///< Row position in results. int executed; ///< Whether statement has been executed. array_t *param_values; ///< Parameter values. GArray *param_lengths; ///< Parameter lengths (int's). GArray *param_formats; ///< Parameter formats (int's). }; /* Variables. */ /** * @brief Handle on the database. */ PGconn *conn = NULL; /* Helpers. */ /** * @brief Get whether backend is SQLite3. * * @return 0. */ int sql_is_sqlite3 () { return 0; } /** * @brief Get main schema name. * * @return Schema name. */ const char * sql_schema () { return "public"; } /** * @brief Setup a LIMIT argument. * * @param[in] max Max. * * @return Argument for LIMIT as a static string. */ const char * sql_select_limit (int max) { static char string[20]; if (max < 0) return "ALL"; if (snprintf (string, 19, "%i", max) < 0) { g_warning ("%s: snprintf failed\n", __FUNCTION__); abort (); } string[19] = '\0'; return string; } /** * @brief Add param to statement. * * @param[in] stmt Statement. * @param[in] param_value Value. * @param[in] param_size Size. * @param[in] param_format 0 text, 1 binary. */ static void sql_stmt_param_add (sql_stmt_t *stmt, const char *param_value, int param_size, int param_format) { array_add (stmt->param_values, g_strndup (param_value, param_size)); g_array_append_val (stmt->param_lengths, param_size); g_array_append_val (stmt->param_formats, param_format); } /** * @brief Init statement, preserving SQL. * * @param[in] stmt Statement. */ static void sql_stmt_init (sql_stmt_t *stmt) { memset (stmt, 0, sizeof (*stmt)); stmt->param_values = make_array (); stmt->param_lengths = g_array_new (FALSE, TRUE, sizeof (int)); stmt->param_formats = g_array_new (FALSE, TRUE, sizeof (int)); stmt->current_row = -1; } /** * @brief Get regular expression operator. * * @return Regexp operator. */ const char * sql_regexp_op () { return "~"; } /** * @brief Check whether the database is open. * * @return 1 if open, else 0. */ int sql_is_open () { return conn ? 1 : 0; } /** * @brief Log a NOTICE message. * * @param[in] arg Dummy arg. * @param[in] message Arg. * * @return 0 success, -1 error. */ static void log_notice (void *arg, const char *message) { g_debug ("%s", message); } /** * @brief Return name of current database. * * @return Name of database. */ const char * sql_database () { return PQdb (conn); } /** * @brief Return name of default database. * * @return Name. */ const char * sql_default_database () { return "tasks"; } /** * @brief Open the database. * * @param[in] database Database, or NULL for default. * * @return 0 success, -1 error. */ int sql_open (const char *database) { gchar *conn_info; conn_info = g_strdup_printf ("dbname = %s", database ? database : sql_default_database ()); conn = PQconnectdb (conn_info); g_free (conn_info); if (PQstatus (conn) != CONNECTION_OK) { g_warning ("%s: PQconnectdb to '%s' failed: %s\n", __FUNCTION__, database ? database : sql_default_database (), PQerrorMessage (conn)); return -1; } PQsetNoticeProcessor (conn, log_notice, NULL); tracef ("%s: db: %s\n", __FUNCTION__, PQdb (conn)); tracef ("%s: user: %s\n", __FUNCTION__, PQuser (conn)); tracef ("%s: port: %s\n", __FUNCTION__, PQport (conn)); return 0; } /** * @brief Close the database. */ void sql_close () { PQfinish (conn); conn = NULL; } /** * @brief Close the database in a forked process. */ void sql_close_fork () { // FIX PQfinish? conn = NULL; } /** * @brief Return 0. * * @return 0. */ int sql_changes () { /* TODO PQcmdTuples needs a PQresult. Callers use for info only anyway. */ return 0; } /** * @brief Get the ID of the last inserted row. */ resource_t sql_last_insert_id () { return sql_int ("SELECT LASTVAL ();"); } /** * @brief Perform an SQL statement, retrying if database is busy or locked. * * @param[out] resource Last inserted resource. * @param[in] sql Format string for SQL statement. * @param[in] ... Arguments for format string. */ void sqli (resource_t *resource, char* sql, ...) { gchar *new_sql; sql_stmt_t* stmt; int sql_x_ret; va_list args; assert (sql && strlen (sql) && (sql[strlen (sql) - 1] != ';')); /* Append RETURNING clause to SQL. */ new_sql = g_strdup_printf ("%s RETURNING id;", sql); /* Run statement, returning integer. */ va_start (args, sql); sql_x_ret = sql_x (new_sql, args, &stmt); va_end (args); g_free (new_sql); switch (sql_x_ret) { case 0: break; case 1: sql_finalize (stmt); abort (); default: assert (0); /* Fall through. */ case -1: sql_finalize (stmt); abort (); } if (resource) *resource = sql_column_int64 (stmt, 0); sql_finalize (stmt); } /** * @brief Prepare a statement. * * @param[in] retry Whether to keep retrying while database is busy or locked. * @param[in] log Whether to keep retrying while database is busy or locked. * @param[in] sql Format string for SQL statement. * @param[in] args Arguments for format string. * @param[out] stmt Statement return. * * @return 0 success, 1 gave up, -1 error. */ int sql_prepare_internal (int retry, int log, const char* sql, va_list args, sql_stmt_t **stmt) { assert (stmt); *stmt = (sql_stmt_t*) g_malloc (sizeof (sql_stmt_t)); sql_stmt_init (*stmt); (*stmt)->sql = g_strdup_vprintf (sql, args); if (log) tracef (" sql: %s\n", (*stmt)->sql); return 0; } /** * @brief Execute a prepared statement. * * @param[in] retry Whether to keep retrying while database is busy or locked. * @param[in] stmt Statement. * * @return 0 complete, 1 row available in results, -1 error, -2 gave up. */ int sql_exec_internal (int retry, sql_stmt_t *stmt) { PGresult *result; assert (stmt->sql); if (stmt->executed == 0) { // FIX retry? result = PQexecParams (conn, stmt->sql, stmt->param_values->len, NULL, /* Default param types. */ (const char* const*) stmt->param_values->pdata, (const int*) stmt->param_lengths->data, (const int*) stmt->param_formats->data, 0); /* Results as text. */ if (PQresultStatus (result) != PGRES_TUPLES_OK && PQresultStatus (result) != PGRES_COMMAND_OK) { g_warning ("%s: PQexec failed: %s (%i)\n", __FUNCTION__, PQresultErrorMessage (result), PQresultStatus (result)); g_warning ("%s: SQL: %s\n", __FUNCTION__, stmt->sql); #if 0 // FIX ? PQclear (result); PQfinish (conn); #endif return -1; } stmt->result = result; stmt->executed = 1; } if (stmt->current_row < (PQntuples (stmt->result) - 1)) { stmt->current_row++; return 1; } return 0; } /** * @brief Write debug messages with the query plan for an SQL query to the log. * * @param[in] sql Format string for the SQL query. * @param[in] args Format string arguments in a va_list. * * @return 0 success, -1 error. */ int sql_explain_internal (const char* sql, va_list args) { char *explain_sql; sql_stmt_t *explain_stmt; int explain_ret; explain_sql = g_strconcat ("EXPLAIN ", sql, NULL); if (sql_prepare_internal (1, 1, explain_sql, args, &explain_stmt)) { g_warning ("%s : Failed to prepare EXPLAIN statement", __FUNCTION__); g_free (explain_sql); return -1; } while (1) { explain_ret = sql_exec_internal (1, explain_stmt); if (explain_ret == 1) g_debug ("%s : %s", __FUNCTION__, PQgetvalue (explain_stmt->result, explain_stmt->current_row, 0)); else if (explain_ret == 0) break; else { g_warning ("%s : Failed to get EXPLAIN row", __FUNCTION__); sql_finalize (explain_stmt); g_free (explain_sql); return -1; } } sql_finalize (explain_stmt); g_free (explain_sql); return 0; } /* Transactions. */ /** * @brief Begin an exclusive transaction. */ void sql_begin_exclusive () { sql ("BEGIN;"); sql ("LOCK TABLE meta IN ACCESS EXCLUSIVE MODE;"); } /** * @brief Begin an exclusive transaction, giving up on failure. * * @return 0 got lock, 1 gave up, -1 error. */ int sql_begin_exclusive_giveup () { int ret; ret = sql_giveup ("BEGIN;"); if (ret) return ret; ret = sql_giveup ("LOCK TABLE meta IN ACCESS EXCLUSIVE MODE;"); if (ret) { sql ("ROLLBACK;"); return ret; } return 0; } /** * @brief Begin an immediate transaction. */ void sql_begin_immediate () { sql ("BEGIN;"); /* TODO This is just an exclusive lock. */ sql ("LOCK TABLE meta IN ACCESS EXCLUSIVE MODE;"); } /** * @brief Begin an immediate transaction. * * @return 0 got lock, 1 gave up, -1 error. */ int sql_begin_immediate_giveup () { /* TODO This is just an exclusive lock. */ return sql_begin_exclusive_giveup (); } /* Iterators. */ /** * @brief Get whether a column is NULL. * * @param[in] iterator Iterator. * @param[in] col Column offset. * * @return 1 if NULL, else 0. */ int iterator_null (iterator_t* iterator, int col) { if (iterator->done) abort (); assert (iterator->stmt->result); return PQgetisnull (iterator->stmt->result, 0, col); } /** * @brief Get a column name from an iterator. * * @param[in] iterator Iterator. * @param[in] col Column offset. * * @return Name of given column. */ const char* iterator_column_name (iterator_t* iterator, int col) { if (iterator->done) abort (); assert (iterator->stmt->result); return PQfname (iterator->stmt->result, col); } /** * @brief Get number of columns from an iterator. * * @param[in] iterator Iterator. * * @return Number of columns. */ int iterator_column_count (iterator_t* iterator) { if (iterator->done) abort (); assert (iterator->stmt->result); return PQnfields (iterator->stmt->result); } /* Prepared statements. */ /** * @brief Bind a param to a statement. * * @param[in] stmt Statement. * @param[in] position Position in statement. * @param[in] param_value Param value. * @param[in] param_size Param size. * @param[in] param_format 0 text, 1 binary. */ static void bind_param (sql_stmt_t *stmt, int position, const void *param_value, int param_size, int param_format) { if (position > stmt->param_values->len + 1) { g_critical ("%s: binding out of order: parameter %i after %i", __FUNCTION__, position, stmt->param_values->len); abort (); } sql_stmt_param_add (stmt, param_value, param_size, param_format); } /** * @brief Bind a blob to a statement. * * @param[in] stmt Statement. * @param[in] position Position in statement. * @param[in] value Blob. * @param[in] value_size Blob size. * * @return 0 success, -1 error. */ int sql_bind_blob (sql_stmt_t *stmt, int position, const void *value, int value_size) { bind_param (stmt, position, value, value_size, 1); return 0; } /** * @brief Bind an int64 value to a statement. * * @param[in] stmt Statement. * @param[in] position Position in statement. * @param[in] value Value. * * @return 0 success, -1 error. */ int sql_bind_int64 (sql_stmt_t *stmt, int position, long long int *value) { int actual; /* Caller is really binding an int4, because IDs in Postgres are int4s. */ actual = *value; bind_param (stmt, position, &actual, sizeof (actual), 1); return 0; } /** * @brief Bind a double value to a statement. * * @param[in] stmt Statement. * @param[in] position Position in statement. * @param[in] value Value. * * @return 0 success, -1 error. */ int sql_bind_double (sql_stmt_t *stmt, int position, double *value) { gchar *string; string = g_strdup_printf ("%f", *value); bind_param (stmt, position, string, strlen (string), 0); return 0; } /** * @brief Bind a text value to a statement. * * @param[in] stmt Statement. * @param[in] position Position in statement. * @param[in] value Value. * @param[in] value_size Value size, or -1 to use strlen of value. * * @return 0 success, -1 error. */ int sql_bind_text (sql_stmt_t *stmt, int position, const gchar *value, gsize value_size) { bind_param (stmt, position, value, value_size == -1 ? strlen (value) : value_size, 0); return 0; } /** * @brief Free a prepared statement. * * @param[in] stmt Statement. */ void sql_finalize (sql_stmt_t *stmt) { PQclear (stmt->result); g_free (stmt->sql); array_free (stmt->param_values); g_array_free (stmt->param_lengths, TRUE); g_array_free (stmt->param_formats, TRUE); g_free (stmt); } /** * @brief Reset a prepared statement. * * @param[in] stmt Statement. * * @return 0 success, -1 error. */ int sql_reset (sql_stmt_t *stmt) { gchar *sql; PQclear (stmt->result); array_free (stmt->param_values); g_array_free (stmt->param_lengths, TRUE); g_array_free (stmt->param_formats, TRUE); sql = stmt->sql; sql_stmt_init (stmt); stmt->sql = sql; return 0; } /** * @brief Return a column as a double from a prepared statement. * * It's up to the caller to ensure that there is a row available. * * @param[in] stmt Statement. * @param[in] position Column position. * * @return 0 success, -1 error. */ double sql_column_double (sql_stmt_t *stmt, int position) { if (PQgetisnull (stmt->result, stmt->current_row, position)) return 0.0; return atof (PQgetvalue (stmt->result, stmt->current_row, position)); } /** * @brief Return a column as text from a prepared statement. * * It's up to the caller to ensure that there is a row available. * * @param[in] stmt Statement. * @param[in] position Column position. * * @return Column value. NULL if column is NULL. */ const char * sql_column_text (sql_stmt_t *stmt, int position) { if (PQgetisnull (stmt->result, stmt->current_row, position)) return NULL; return (const char*) PQgetvalue (stmt->result, stmt->current_row, position); } /** * @brief Return a column as an integer from a prepared statement. * * It's up to the caller to ensure that there is a row available. * * @param[in] stmt Statement. * @param[in] position Column position. * * @return Column value. 0 if column is NULL or false. 1 if column true. */ int sql_column_int (sql_stmt_t *stmt, int position) { char *cell; if (PQgetisnull (stmt->result, stmt->current_row, position)) return 0; cell = PQgetvalue (stmt->result, stmt->current_row, position); switch (PQftype (stmt->result, position)) { case 16: /* BOOLOID */ return strcmp (cell, "f") ? 1 : 0; default: return atoi (cell); } } /** * @brief Return a column as an int64 from a prepared statement. * * It's up to the caller to ensure that there is a row available. * * @param[in] stmt Statement. * @param[in] position Column position. * * @return Column value. 0 if column is NULL or false. 1 if column true. */ long long int sql_column_int64 (sql_stmt_t *stmt, int position) { char *cell; if (PQgetisnull (stmt->result, stmt->current_row, position)) return 0; cell = PQgetvalue (stmt->result, stmt->current_row, position); switch (PQftype (stmt->result, position)) { case 16: /* BOOLOID */ return strcmp (cell, "f") ? 1 : 0; default: return atol (cell); } } openvas-manager-6.0.9/src/manage_acl.c000644 001751 001751 00000161076 12631501055 020674 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Manager Manage library: Access Control "Layer". * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2013 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ /** * @file manage_acl.c * @brief The OpenVAS Manager management library (Access Control Layer). * * This file isolates the access control portions of the OpenVAS manager * management library. */ #include "manage_acl.h" #include "manage_sql.h" #include "sql.h" #include #include #include /** * @brief Test whether a user may perform an operation. * * @param[in] operation Name of operation. * * @return 1 if user has permission, else 0. */ int user_may (const char *operation) { int ret; gchar *quoted_operation; assert (current_credentials.uuid); assert (operation); if (strlen (current_credentials.uuid) == 0) /* Allow the dummy user in init_manage to do anything. */ return 1; if (sql_int ("SELECT user_can_everything ('%s');", current_credentials.uuid)) return 1; quoted_operation = sql_quote (operation); ret = sql_int (USER_MAY ("0"), current_credentials.uuid, current_credentials.uuid, current_credentials.uuid, quoted_operation, quoted_operation, quoted_operation, quoted_operation); g_free (quoted_operation); return ret; } /** * @brief Check whether a role has Super Admin capability. * * @param[in] uuid Uuid of user. * * @return 1 if role can Super Admin, else 0. */ int role_can_super_everyone (const char *role_id) { gchar *quoted_role_id; quoted_role_id = sql_quote (role_id); if (sql_int (" SELECT EXISTS (SELECT * FROM permissions" " WHERE name = 'Super'" /* Super on everyone. */ " AND (resource = 0)" " AND subject_location" " = " G_STRINGIFY (LOCATION_TABLE) " AND (subject_type = 'role'" " AND subject" " = (SELECT id" " FROM roles" " WHERE uuid = '%s')));", role_id)) { g_free (quoted_role_id); return 1; } g_free (quoted_role_id); return 0; } /** * @brief Check whether a user is a Super Admin. * * @param[in] uuid Uuid of user. * * @return 1 if user is a Super Admin, else 0. */ int user_can_super_everyone (const char *uuid) { gchar *quoted_uuid; quoted_uuid = sql_quote (uuid); if (sql_int (" SELECT EXISTS (SELECT * FROM permissions" " WHERE name = 'Super'" /* Super on everyone. */ " AND (resource = 0)" " AND subject_location" " = " G_STRINGIFY (LOCATION_TABLE) " AND ((subject_type = 'user'" " AND subject" " = (SELECT id FROM users" " WHERE users.uuid = '%s'))" " OR (subject_type = 'group'" " AND subject" " IN (SELECT DISTINCT \"group\"" " FROM group_users" " WHERE \"user\"" " = (SELECT id" " FROM users" " WHERE users.uuid" " = '%s')))" " OR (subject_type = 'role'" " AND subject" " IN (SELECT DISTINCT role" " FROM role_users" " WHERE \"user\"" " = (SELECT id" " FROM users" " WHERE users.uuid" " = '%s')))));", quoted_uuid, quoted_uuid, quoted_uuid)) { g_free (quoted_uuid); return 1; } g_free (quoted_uuid); return 0; } /** * @brief Test whether a user may perform any operation. * * @param[in] user_id UUID of user. * * @return 1 if user has permission, else 0. */ int user_can_everything (const char *user_id) { gchar *quoted_user_id; int ret; quoted_user_id = sql_quote (user_id); ret = sql_int ("SELECT count(*) > 0 FROM permissions" " WHERE resource = 0" " AND subject_location" " = " G_STRINGIFY (LOCATION_TABLE) " AND ((subject_type = 'user'" " AND subject" " = (SELECT id FROM users" " WHERE users.uuid = '%s'))" " OR (subject_type = 'group'" " AND subject" " IN (SELECT DISTINCT \"group\"" " FROM group_users" " WHERE \"user\" = (SELECT id" " FROM users" " WHERE users.uuid" " = '%s')))" " OR (subject_type = 'role'" " AND subject" " IN (SELECT DISTINCT role" " FROM role_users" " WHERE \"user\" = (SELECT id" " FROM users" " WHERE users.uuid" " = '%s'))))" " AND name = 'Everything';", quoted_user_id, quoted_user_id, quoted_user_id); g_free (quoted_user_id); return ret; } /** * @brief Test whether a user has super permission on another user. * * @param[in] super_user_id UUID of user who may have super permission. * @param[in] other_user Other user. * * @return 1 if user has permission, else 0. */ int user_has_super (const char *super_user_id, user_t other_user) { gchar *quoted_super_user_id; quoted_super_user_id = sql_quote (super_user_id); if (sql_int (" SELECT EXISTS (SELECT * FROM permissions" " WHERE name = 'Super'" /* Super on everyone. */ " AND ((resource = 0)" /* Super on other_user. */ " OR ((resource_type = 'user')" " AND (resource = %llu))" /* Super on other_user's role. */ " OR ((resource_type = 'role')" " AND (resource" " IN (SELECT DISTINCT role" " FROM role_users" " WHERE \"user\" = %llu)))" /* Super on other_user's group. */ " OR ((resource_type = 'group')" " AND (resource" " IN (SELECT DISTINCT \"group\"" " FROM group_users" " WHERE \"user\" = %llu))))" " AND subject_location" " = " G_STRINGIFY (LOCATION_TABLE) " AND ((subject_type = 'user'" " AND subject" " = (SELECT id FROM users" " WHERE users.uuid = '%s'))" " OR (subject_type = 'group'" " AND subject" " IN (SELECT DISTINCT \"group\"" " FROM group_users" " WHERE \"user\"" " = (SELECT id" " FROM users" " WHERE users.uuid" " = '%s')))" " OR (subject_type = 'role'" " AND subject" " IN (SELECT DISTINCT role" " FROM role_users" " WHERE \"user\"" " = (SELECT id" " FROM users" " WHERE users.uuid" " = '%s')))));", other_user, other_user, other_user, super_user_id, super_user_id, super_user_id)) { g_free (quoted_super_user_id); return 1; } g_free (quoted_super_user_id); return 0; } /** * @brief Check whether a user is an Admin. * * @param[in] uuid Uuid of user. * * @return 1 if user is an Admin, else 0. */ int user_is_admin (const char *uuid) { int ret; gchar *quoted_uuid; quoted_uuid = sql_quote (uuid); ret = sql_int ("SELECT count (*) FROM role_users" " WHERE role = (SELECT id FROM roles" " WHERE uuid = '" ROLE_UUID_ADMIN "')" " AND \"user\" = (SELECT id FROM users WHERE uuid = '%s');", quoted_uuid); g_free (quoted_uuid); return ret; } /** * @brief Check whether a user is an Observer. * * @param[in] uuid Uuid of user. * * @return 1 if user is an Observer, else 0. */ int user_is_observer (const char *uuid) { int ret; gchar *quoted_uuid; quoted_uuid = sql_quote (uuid); ret = sql_int ("SELECT count (*) FROM role_users" " WHERE role = (SELECT id FROM roles" " WHERE uuid = '" ROLE_UUID_OBSERVER "')" " AND \"user\" = (SELECT id FROM users WHERE uuid = '%s');", quoted_uuid); g_free (quoted_uuid); return ret; } /** * @brief Check whether a user is a Super Admin. * * @param[in] uuid Uuid of user. * * @return 1 if user is a Super Admin, else 0. */ int user_is_super_admin (const char *uuid) { int ret; gchar *quoted_uuid; quoted_uuid = sql_quote (uuid); ret = sql_int ("SELECT count (*) FROM role_users" " WHERE role = (SELECT id FROM roles" " WHERE uuid = '" ROLE_UUID_SUPER_ADMIN "')" " AND \"user\" = (SELECT id FROM users WHERE uuid = '%s');", quoted_uuid); g_free (quoted_uuid); return ret; } /** * @brief Check whether a user has the User role. * * @param[in] uuid Uuid of user. * * @return 1 if user has the User role, else 0. */ int user_is_user (const char *uuid) { int ret; gchar *quoted_uuid; quoted_uuid = sql_quote (uuid); ret = sql_int ("SELECT count (*) FROM role_users" " WHERE role = (SELECT id FROM roles" " WHERE uuid = '" ROLE_UUID_USER "')" " AND \"user\" = (SELECT id FROM users WHERE uuid = '%s');", quoted_uuid); g_free (quoted_uuid); return ret; } /** * @brief Super clause. * * @param[in] format Value format specifier. */ #define SUPER_CLAUSE(format) \ " name = 'Super'" \ /* Super on everyone. */ \ " AND ((resource = 0)" \ /* Super on other_user. */ \ " OR ((resource_type = 'user')" \ " AND (resource = (SELECT %ss%s.owner" \ " FROM %ss%s" \ " WHERE %s = " format ")))" \ /* Super on other_user's role. */ \ " OR ((resource_type = 'role')" \ " AND (resource" \ " IN (SELECT DISTINCT role" \ " FROM role_users" \ " WHERE \"user\"" \ " = (SELECT %ss%s.owner" \ " FROM %ss%s" \ " WHERE %s" \ " = " format "))))" \ /* Super on other_user's group. */ \ " OR ((resource_type = 'group')" \ " AND (resource" \ " IN (SELECT DISTINCT \"group\"" \ " FROM group_users" \ " WHERE \"user\"" \ " = (SELECT %ss%s.owner" \ " FROM %ss%s" \ " WHERE %s = " format ")))))" \ " AND subject_location = " G_STRINGIFY (LOCATION_TABLE) \ " AND ((subject_type = 'user'" \ " AND subject" \ " = (SELECT id FROM users" \ " WHERE users.uuid = '%s'))" \ " OR (subject_type = 'group'" \ " AND subject" \ " IN (SELECT DISTINCT \"group\"" \ " FROM group_users" \ " WHERE \"user\"" \ " = (SELECT id" \ " FROM users" \ " WHERE users.uuid" \ " = '%s')))" \ " OR (subject_type = 'role'" \ " AND subject" \ " IN (SELECT DISTINCT role" \ " FROM role_users" \ " WHERE \"user\"" \ " = (SELECT id" \ " FROM users" \ " WHERE users.uuid" \ " = '%s'))))" /** * @brief Super clause arguments. * * @param[in] type Type of resource. * @param[in] field Field to compare. Typically "uuid". * @param[in] value Expected value of field. * @param[in] user_id UUID of user. * @param[in] trash Whether to search trash. */ #define SUPER_CLAUSE_ARGS(type, field, value, user_id, trash) \ type, \ trash ? (strcasecmp (type, "task") ? "_trash" : "") : "", \ type, \ trash ? (strcasecmp (type, "task") ? "_trash" : "") : "", \ field, \ value, \ type, \ trash ? (strcasecmp (type, "task") ? "_trash" : "") : "", \ type, \ trash ? (strcasecmp (type, "task") ? "_trash" : "") : "", \ field, \ value, \ type, \ trash ? (strcasecmp (type, "task") ? "_trash" : "") : "", \ type, \ trash ? (strcasecmp (type, "task") ? "_trash" : "") : "", \ field, \ value, \ user_id, \ user_id, \ user_id /** * @brief Test whether a user has Super permission on a resource. * * @param[in] type Type of resource. * @param[in] field Field to compare with value. * @param[in] value Identifier value of resource. * @param[in] trash Whether resource is in trash. * * @return 1 if user has Super, else 0. */ int user_has_super_on (const char *type, const char *field, const char *value, int trash) { gchar *quoted_value; quoted_value = sql_quote (value); if (sql_int ("SELECT EXISTS (SELECT * FROM permissions" " WHERE " SUPER_CLAUSE ("'%s'") ");", SUPER_CLAUSE_ARGS (type, field, quoted_value, current_credentials.uuid, trash))) { g_free (quoted_value); return 1; } g_free (quoted_value); return 0; } /** * @brief Test whether a user has Super permission on a resource. * * @param[in] type Type of resource. * @param[in] field Field to compare with resource. * @param[in] resource Resource. * @param[in] trash Whether resource is in trash. * * @return 1 if user has Super, else 0. */ int user_has_super_on_resource (const char *type, const char *field, resource_t resource, int trash) { if (sql_int ("SELECT EXISTS (SELECT * FROM permissions" " WHERE " SUPER_CLAUSE ("%llu") ");", SUPER_CLAUSE_ARGS (type, field, resource, current_credentials.uuid, trash))) return 1; return 0; } /** * @brief Test whether a user effectively owns a resource. * * A Super permissions can give a user effective ownership of another * user's resource. * * @param[in] type Type of resource, for example "report_format". * @param[in] name Name of resource. * * @return 1 if user owns resource, else 0. */ int user_owns_name (const char *type, const char *value) { gchar *quoted_value; int ret; assert (current_credentials.uuid); assert (type && strcmp (type, "result")); if ((strcmp (type, "nvt") == 0) || (strcmp (type, "cve") == 0) || (strcmp (type, "cpe") == 0) || (strcmp (type, "ovaldef") == 0) || (strcmp (type, "cert_bund_adv") == 0) || (strcmp (type, "dfn_cert_adv") == 0)) return 1; if (user_has_super_on (type, "name", value, 0)) return 1; quoted_value = sql_quote (value); ret = sql_int ("SELECT count(*) FROM %ss" " WHERE name = '%s'" " AND ((owner IS NULL) OR (owner =" " (SELECT users.id FROM users WHERE users.uuid = '%s')));", type, quoted_value, current_credentials.uuid); g_free (quoted_value); return ret; } /** * @brief Test whether a user is the actual owner of a resource. * * @param[in] type Type of resource, for example "task". * @param[in] uuid UUID of resource. * * @return 1 if user actually owns resource, else 0. */ int user_is_owner (const char *type, const char *uuid) { int ret; gchar *quoted_uuid; assert (uuid && current_credentials.uuid); quoted_uuid = g_strdup (uuid); ret = sql_int ("SELECT count(*) FROM %ss" " WHERE uuid = '%s'" " AND owner = (SELECT users.id FROM users" " WHERE users.uuid = '%s');", type, quoted_uuid, current_credentials.uuid); g_free (quoted_uuid); return ret; } /** * @brief Test whether a user effectively owns a resource. * * A Super permissions can give a user effective ownership of another * user's resource. * * @param[in] type Type of resource, for example "task". * @param[in] uuid UUID of resource. * @param[in] trash Whether the resource is in the trash. * * @return 1 if user owns resource, else 0. */ int user_owns_uuid (const char *type, const char *uuid, int trash) { int ret; gchar *quoted_uuid; assert (current_credentials.uuid); if ((strcmp (type, "nvt") == 0) || (strcmp (type, "cve") == 0) || (strcmp (type, "cpe") == 0) || (strcmp (type, "ovaldef") == 0) || (strcmp (type, "cert_bund_adv") == 0) || (strcmp (type, "dfn_cert_adv") == 0)) return 1; if (user_has_super_on (type, "uuid", uuid, 0)) return 1; quoted_uuid = sql_quote (uuid); if (strcmp (type, "result") == 0) ret = sql_int ("SELECT count(*) FROM results, reports" " WHERE results.uuid = '%s'" " AND results.report = reports.id" " AND ((reports.owner IS NULL) OR (reports.owner =" " (SELECT users.id FROM users WHERE users.uuid = '%s')));", quoted_uuid, current_credentials.uuid); else ret = sql_int ("SELECT count(*) FROM %ss%s" " WHERE uuid = '%s'" "%s" " AND ((owner IS NULL) OR (owner =" " (SELECT users.id FROM users WHERE users.uuid = '%s')));", type, (strcmp (type, "task") && trash) ? "_trash" : "", quoted_uuid, (strcmp (type, "task") ? "" : (trash ? " AND hidden = 2" : " AND hidden < 2")), current_credentials.uuid); g_free (quoted_uuid); return ret; } /** * @brief Test whether a user effectively owns a resource. * * A Super permissions can give a user effective ownership of another * user's resource. * * @param[in] type Type of resource, for example "task". * @param[in] resource Resource. * @param[in] trash Whether the resource is in the trash. * * @return 1 if user owns resource, else 0. */ int user_owns (const char *type, resource_t resource, int trash) { int ret; assert (current_credentials.uuid); if ((strcmp (type, "nvt") == 0) || (strcmp (type, "cve") == 0) || (strcmp (type, "cpe") == 0) || (strcmp (type, "ovaldef") == 0) || (strcmp (type, "cert_bund_adv") == 0) || (strcmp (type, "dfn_cert_adv") == 0)) return 1; if (user_has_super_on_resource (type, "id", resource, trash)) return 1; if (strcmp (type, "result") == 0) ret = sql_int ("SELECT count(*) FROM results, reports" " WHERE results.id = %llu" " AND results.report = reports.id" " AND ((reports.owner IS NULL) OR (reports.owner =" " (SELECT users.id FROM users WHERE users.uuid = '%s')));", resource, current_credentials.uuid); else ret = sql_int ("SELECT count(*) FROM %ss%s" " WHERE id = %llu" "%s" " AND ((owner IS NULL) OR (owner =" " (SELECT users.id FROM users WHERE users.uuid = '%s')));", type, (strcmp (type, "task") && trash) ? "_trash" : "", resource, (strcmp (type, "task") ? "" : (trash ? " AND hidden = 2" : " AND hidden < 2")), current_credentials.uuid); return ret; } /** * @brief Test whether a user effectively owns a resource. * * A Super permissions can give a user effective ownership of another * user's resource. * * @param[in] type Type of resource, for example "task". * @param[in] uuid UUID of resource. * * @return 1 if user owns resource, else 0. */ int user_owns_trash_uuid (const char *type, const char *uuid) { int ret; gchar *quoted_uuid; assert (current_credentials.uuid); assert (type && strcmp (type, "task")); if (user_has_super_on (type, "uuid", uuid, 1)) return 1; quoted_uuid = sql_quote (uuid); ret = sql_int ("SELECT count(*) FROM %ss_trash" " WHERE uuid = '%s'" " AND ((owner IS NULL) OR (owner =" " (SELECT users.id FROM users WHERE users.uuid = '%s')));", type, quoted_uuid, current_credentials.uuid); g_free (quoted_uuid); return ret; } /** * @brief Test whether the user may access a resource. * * @param[in] type Type of resource, for example "task". * @param[in] uuid UUID of resource. * @param[in] permission Permission. * @param[in] trash Whether the resource is in the trash. * * @return 1 if user may access resource, else 0. */ int user_has_access_uuid (const char *type, const char *uuid, const char *permission, int trash) { int ret, get; char *uuid_task; gchar *quoted_permission, *quoted_uuid; assert (current_credentials.uuid); if (permission && (valid_omp_command (permission) == 0)) return 0; if (!strcmp (current_credentials.uuid, "")) return 1; /* The Super case is checked here. */ ret = user_owns_uuid (type, uuid, trash); if (ret) return ret; if (trash) /* For simplicity, trashcan items are visible only to their owners. */ return 0; quoted_uuid = sql_quote (uuid); if (strcasecmp (type, "report") == 0) { task_t task; report_t report; switch (sql_int64 (&report, "SELECT id FROM reports WHERE uuid = '%s';", quoted_uuid)) { case 0: break; case 1: /* Too few rows in result of query. */ g_free (quoted_uuid); return 0; break; default: /* Programming error. */ assert (0); case -1: g_free (quoted_uuid); return 0; break; } report_task (report, &task); if (task == 0) { g_free (quoted_uuid); return 0; } task_uuid (task, &uuid_task); } else if (strcasecmp (type, "result") == 0) { task_t task; switch (sql_int64 (&task, "SELECT task FROM results WHERE uuid = '%s';", uuid)) { case 0: break; case 1: /* Too few rows in result of query. */ g_free (quoted_uuid); return 0; break; default: /* Programming error. */ assert (0); case -1: g_free (quoted_uuid); return 0; break; } task_uuid (task, &uuid_task); } else uuid_task = NULL; if ((strcmp (type, "permission") == 0) && ((permission == NULL) || (strlen (permission) > 3 && strncmp (permission, "get", 3) == 0))) { ret = sql_int ("SELECT count(*) FROM permissions" /* Any permission implies 'get'. */ " WHERE (resource_uuid = '%s'" /* Users may view any permissions that affect them. */ " OR uuid = '%s')" " AND subject_location = " G_STRINGIFY (LOCATION_TABLE) " AND ((subject_type = 'user'" " AND subject" " = (SELECT id FROM users" " WHERE users.uuid = '%s'))" " OR (subject_type = 'group'" " AND subject" " IN (SELECT DISTINCT \"group\"" " FROM group_users" " WHERE \"user\" = (SELECT id" " FROM users" " WHERE users.uuid" " = '%s')))" " OR (subject_type = 'role'" " AND subject" " IN (SELECT DISTINCT role" " FROM role_users" " WHERE \"user\" = (SELECT id" " FROM users" " WHERE users.uuid" " = '%s'))));", uuid_task ? uuid_task : quoted_uuid, uuid_task ? uuid_task : quoted_uuid, current_credentials.uuid, current_credentials.uuid, current_credentials.uuid); free (uuid_task); g_free (quoted_uuid); return ret; } else if (strcmp (type, "permission") == 0) { /* There are no "permissions on permissions", so if a user does not * effectively own a permission, there's no way for the user to access * the permission. */ free (uuid_task); g_free (quoted_uuid); return 0; } get = (permission == NULL || (strlen (permission) > 3 && strncmp (permission, "get", 3) == 0)); quoted_permission = sql_quote (permission ? permission : ""); ret = sql_int ("SELECT count(*) FROM permissions" " WHERE resource_uuid = '%s'" " AND subject_location = " G_STRINGIFY (LOCATION_TABLE) " AND ((subject_type = 'user'" " AND subject" " = (SELECT id FROM users" " WHERE users.uuid = '%s'))" " OR (subject_type = 'group'" " AND subject" " IN (SELECT DISTINCT \"group\"" " FROM group_users" " WHERE \"user\" = (SELECT id" " FROM users" " WHERE users.uuid" " = '%s')))" " OR (subject_type = 'role'" " AND subject" " IN (SELECT DISTINCT role" " FROM role_users" " WHERE \"user\" = (SELECT id" " FROM users" " WHERE users.uuid" " = '%s'))))" " %s%s%s;", uuid_task ? uuid_task : quoted_uuid, current_credentials.uuid, current_credentials.uuid, current_credentials.uuid, (get ? "" : "AND name = '"), (get ? "" : quoted_permission), (get ? "" : "'")); free (uuid_task); g_free (quoted_permission); g_free (quoted_uuid); return ret; } /** * @brief Generate the ownership part of an SQL WHERE clause for a given user. * * @param[in] user_id UUID of user. "" can be used to rely on * user_sql alone, except when type is "permission". * @param[in] user_sql SQL to get user. * @param[in] type Type of resource. * @param[in] get GET data. * @param[in] owned Only get items accessible by the given user. * @param[in] owner_filter Owner filter keyword. * @param[in] resource Resource. * @param[in] permissions Permissions. * * @return Newly allocated owned clause. */ gchar * where_owned_user (const char *user_id, const char *user_sql, const char *type, const get_data_t *get, int owned, const gchar *owner_filter, resource_t resource, array_t *permissions) { gchar *owned_clause; if (owned) { gchar *permission_clause, *filter_owned_clause; GString *permission_or; int index, table_trash, permissions_include_get; permissions_include_get = 0; permission_or = g_string_new (""); index = 0; if (permissions == NULL || permissions->len == 0) { /* Treat filters with no permissions keyword as "any". */ permission_or = g_string_new ("t ()"); index = 1; permissions_include_get = 1; } else if (permissions) for (; index < permissions->len; index++) { gchar *permission, *quoted; permission = (gchar*) g_ptr_array_index (permissions, index); if (strcasecmp (permission, "any") == 0) { g_string_free (permission_or, TRUE); permission_or = g_string_new ("t ()"); index = 1; permissions_include_get = 1; break; } if (g_str_has_prefix (permission, "get_")) permissions_include_get = 1; quoted = sql_quote (permission); if (index == 0) g_string_append_printf (permission_or, "name = '%s'", quoted); else g_string_append_printf (permission_or, " OR name = '%s'", quoted); g_free (quoted); } else permissions_include_get = 1; /* Check on index is because default is owner and global, for backward * compatibility. */ if (user_id && index) { gchar *clause; clause = g_strdup_printf ("OR EXISTS" " (SELECT id FROM permissions" " WHERE resource = %ss%s.id" " AND resource_type = '%s'" " AND resource_location = %i" " AND subject_location" " = " G_STRINGIFY (LOCATION_TABLE) " AND ((subject_type = 'user'" " AND subject" " = (%s))" " OR (subject_type = 'group'" " AND subject" " IN (SELECT DISTINCT \"group\"" " FROM group_users" " WHERE \"user\"" " = (%s)))" " OR (subject_type = 'role'" " AND subject" " IN (SELECT DISTINCT role" " FROM role_users" " WHERE \"user\"" " = (%s))))" " AND (%s))", type, get->trash && strcmp (type, "task") ? "_trash" : "", type, get->trash ? LOCATION_TRASH : LOCATION_TABLE, user_sql, user_sql, user_sql, permission_or->str); if (strcmp (type, "report") == 0) permission_clause = g_strdup_printf ("%s" " OR EXISTS" " (SELECT id FROM permissions" " WHERE resource = reports%s.task" " AND resource_type = 'task'" " AND subject_location" " = " G_STRINGIFY (LOCATION_TABLE) " AND ((subject_type = 'user'" " AND subject" " = (%s))" " OR (subject_type = 'group'" " AND subject" " IN (SELECT DISTINCT \"group\"" " FROM group_users" " WHERE \"user\"" " = (%s)))" " OR (subject_type = 'role'" " AND subject" " IN (SELECT DISTINCT role" " FROM role_users" " WHERE \"user\"" " = (%s))))" " AND (%s))", clause, get->trash ? "_trash" : "", user_sql, user_sql, user_sql, permission_or->str); else if (strcmp (type, "result") == 0) permission_clause = g_strdup_printf ("%s" " OR EXISTS" " (SELECT id FROM permissions" " WHERE resource = results%s.task" " AND resource_type = 'task'" " AND subject_location" " = " G_STRINGIFY (LOCATION_TABLE) " AND ((subject_type = 'user'" " AND subject" " = (%s))" " OR (subject_type = 'group'" " AND subject" " IN (SELECT DISTINCT \"group\"" " FROM group_users" " WHERE \"user\"" " = (%s)))" " OR (subject_type = 'role'" " AND subject" " IN (SELECT DISTINCT role" " FROM role_users" " WHERE \"user\"" " = (%s))))" " AND (%s))", clause, get->trash ? "_trash" : "", user_sql, user_sql, user_sql, permission_or->str); if ((strcmp (type, "report") == 0) || (strcmp (type, "result") == 0)) g_free (clause); else permission_clause = clause; } else permission_clause = NULL; g_string_free (permission_or, TRUE); table_trash = get->trash && strcasecmp (type, "task"); if (resource || (user_id == NULL)) owned_clause = g_strdup (" (t ())"); else if (strcmp (type, "permission") == 0) { int admin; assert (strcmp (user_id, "")); admin = user_can_everything (user_id); /* A user sees permissions that involve the user. Admin users also * see all higher level permissions. */ owned_clause = g_strdup_printf (/* Either the user is the owner. */ " ((permissions%s.owner = (%s))" /* Or, for admins, it's a global permission. */ " %s" /* Or the permission applies to the user. */ " OR (%i = 0" /* Skip for trash. */ " AND (permissions%s.subject_type = 'user'" " AND permissions%s.subject_location" " = " G_STRINGIFY (LOCATION_TABLE) " AND permissions%s.subject" " = (%s)))" /* Or the permission applies to the user's group. */ " OR (%i = 0" /* Skip for trash. */ " AND (permissions%s.subject_type = 'group'" " AND permissions%s.subject_location" " = " G_STRINGIFY (LOCATION_TABLE) " AND permissions%s.subject" " IN (SELECT DISTINCT \"group\"" " FROM group_users" " WHERE \"user\" = (%s))))" /* Or the permission applies to the user's role. */ " OR (%i = 0" /* Skip for trash. */ " AND (permissions%s.subject_type = 'role'" " AND permissions%s.subject_location" " = " G_STRINGIFY (LOCATION_TABLE) " AND permissions%s.subject" " IN (SELECT DISTINCT role" " FROM role_users" " WHERE \"user\" = (%s))))" /* Or the user has super permission. */ " OR EXISTS (SELECT * FROM permissions AS inside" " WHERE name = 'Super'" /* Super on everyone. */ " AND ((inside.resource = 0)" /* Super on outer permission user. */ " OR ((inside.resource_type = 'user')" " AND (inside.resource = permissions%s.owner))" /* Super on outer permission user's role. */ " OR ((inside.resource_type = 'role')" " AND (inside.resource" " IN (SELECT DISTINCT role" " FROM role_users" " WHERE \"user\"" " = permissions%s.owner)))" /* Super on outer permission user's group. */ " OR ((inside.resource_type = 'group')" " AND (inside.resource" " IN (SELECT DISTINCT \"group\"" " FROM group_users" " WHERE \"user\"" " = permissions%s.owner))))" " AND subject_location" " = " G_STRINGIFY (LOCATION_TABLE) " AND ((inside.subject_type = 'user'" " AND inside.subject" " = (%s))" " OR (inside.subject_type = 'group'" " AND inside.subject" " IN (SELECT DISTINCT \"group\"" " FROM group_users" " WHERE \"user\"" " = (%s)))" " OR (inside.subject_type = 'role'" " AND inside.subject" " IN (SELECT DISTINCT role" " FROM role_users" " WHERE \"user\"" " = (%s)))))" " %s)", get->trash ? "_trash" : "", user_sql, admin ? (get->trash ? "OR (permissions_trash.owner IS NULL)" : "OR (permissions.owner IS NULL)") : "", get->trash, table_trash ? "_trash" : "", table_trash ? "_trash" : "", table_trash ? "_trash" : "", user_sql, get->trash, table_trash ? "_trash" : "", table_trash ? "_trash" : "", table_trash ? "_trash" : "", user_sql, get->trash, table_trash ? "_trash" : "", table_trash ? "_trash" : "", table_trash ? "_trash" : "", user_sql, table_trash ? "_trash" : "", table_trash ? "_trash" : "", table_trash ? "_trash" : "", user_sql, user_sql, user_sql, permission_clause ? permission_clause : ""); } else owned_clause = g_strdup_printf (/* Either a global resource (like target Localhost). * * The globals are only required when GET permission * is requested, because it is only possible to read * the globals (unless the user has super on * everything like Super Admin does, but that is * covered by the super case below). */ " (%s%s%s%s%s" /* Or the user is the owner. */ " %s (%ss%s.owner" " = (%s))" /* Or the user has super permission. */ " OR EXISTS (SELECT * FROM permissions" " WHERE name = 'Super'" /* Super on everyone. */ " AND ((resource = 0)" /* Super on other_user. */ " OR ((resource_type = 'user')" " AND (resource = %ss%s.owner))" /* Super on other_user's role. */ " OR ((resource_type = 'role')" " AND (resource" " IN (SELECT DISTINCT role" " FROM role_users" " WHERE \"user\"" " = %ss%s.owner)))" /* Super on other_user's group. */ " OR ((resource_type = 'group')" " AND (resource" " IN (SELECT DISTINCT \"group\"" " FROM group_users" " WHERE \"user\"" " = %ss%s.owner))))" " AND subject_location" " = " G_STRINGIFY (LOCATION_TABLE) " AND ((subject_type = 'user'" " AND subject" " = (%s))" " OR (subject_type = 'group'" " AND subject" " IN (SELECT DISTINCT \"group\"" " FROM group_users" " WHERE \"user\"" " = (%s)))" " OR (subject_type = 'role'" " AND subject" " IN (SELECT DISTINCT role" " FROM role_users" " WHERE \"user\"" " = (%s)))))" " %s)", permissions_include_get ? "(" : "", permissions_include_get ? type : "", permissions_include_get ? "s" : "", permissions_include_get && table_trash ? "_trash" : "", permissions_include_get ? ".owner IS NULL)" : "", permissions_include_get ? "OR" : "", type, table_trash ? "_trash" : "", user_sql, type, table_trash ? "_trash" : "", type, table_trash ? "_trash" : "", type, table_trash ? "_trash" : "", user_sql, user_sql, user_sql, permission_clause ? permission_clause : ""); g_free (permission_clause); if (get->trash && (strcasecmp (type, "task") == 0)) { gchar *new; new = g_strdup_printf (" (%ss.hidden = 2" " AND %s)", type, owned_clause); g_free (owned_clause); owned_clause = new; } if (owner_filter == NULL || (owner_filter && (strcmp (owner_filter, "any") == 0))) filter_owned_clause = g_strdup (owned_clause); else if (owner_filter && strcmp (owner_filter, "")) { gchar *quoted; quoted = sql_quote (owner_filter); filter_owned_clause = g_strdup_printf ("(owner = (SELECT id" " FROM users" " WHERE name = '%s')" " AND %s)", quoted, owned_clause); g_free (quoted); } else filter_owned_clause = g_strdup_printf ("((owner = (%s)" " OR owner IS NULL)" " AND %s)", user_sql, owned_clause); g_free (owned_clause); owned_clause = filter_owned_clause; } else owned_clause = g_strdup (" t ()"); return owned_clause; } /** * @brief Generate the ownership part of an SQL WHERE clause. * * @param[in] type Type of resource. * @param[in] get GET data. * @param[in] owned Only get items owned by the current user. * @param[in] owner_filter Owner filter keyword. * @param[in] resource Resource. * @param[in] permissions Permissions. * * @return Newly allocated owned clause. */ gchar * where_owned (const char *type, const get_data_t *get, int owned, const gchar *owner_filter, resource_t resource, array_t *permissions) { gchar *ret, *user_sql; if (current_credentials.uuid) user_sql = g_strdup_printf ("SELECT id FROM users WHERE users.uuid = '%s'", current_credentials.uuid); else user_sql = NULL; ret = where_owned_user (current_credentials.uuid, user_sql, type, get, owned, owner_filter, resource, permissions); g_free (user_sql); return ret; } /** * @brief Generate ownership part of WHERE, for getting a type of resource. * * @param[in] type Type of resource. * @param[in] user_sql SQL for getting user. If NULL SQL will be for current * user. * * @return Newly allocated owned clause. */ gchar * where_owned_for_get (const char *type, const char *user_sql) { gchar *owned_clause; get_data_t get; array_t *permissions; gchar *user_sql_new; if (user_sql) user_sql_new = g_strdup (user_sql); else if (current_credentials.uuid) user_sql_new = g_strdup_printf ("SELECT id FROM users WHERE users.uuid = '%s'", current_credentials.uuid); else user_sql_new = NULL; get.trash = 0; permissions = make_array (); array_add (permissions, g_strdup_printf ("get_%ss", type)); owned_clause = where_owned_user (current_credentials.uuid ? current_credentials.uuid /* Use user_sql_new. */ : "", user_sql_new, type, &get, 1, /* Do owner checks. */ "any", 0, /* Resource. */ permissions); array_free (permissions); g_free (user_sql_new); return owned_clause; } openvas-manager-6.0.9/src/manage_config_discovery.c000644 001751 001751 00000215625 12631501055 023471 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Manage library: NVTs for "Discovery" scan configuration. * * Authors: * Hani Benhabiles * * Copyright: * Copyright (C) 2013 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #include "manage.h" #include "sql.h" /** * @brief Insert a nvt selector. */ #define NVT_SELECTOR(selector, oid, family) \ sql ("INSERT INTO nvt_selectors" \ " (name, exclude, type, family_or_nvt, family)" \ " VALUES" \ " ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_NVT) ", '%s','%s');", \ selector, oid, family) /** * @brief Make Discovery Scan Config. * * Caller must lock the db. * * @param[in] uuid UUID for new scan config. * @param[in] selector_name Name of NVT selector to use. */ void make_config_discovery (char *const uuid, char *const selector_name) { sql_begin_exclusive (); /* First, create the Discovery config. */ sql ("INSERT into configs (uuid, name, owner, nvt_selector, comment," " family_count, nvt_count, nvts_growing, families_growing," " type, creation_time, modification_time)" " VALUES ('%s', 'Discovery', NULL," " '%s', 'Network Discovery scan configuration.'," " 0, 0, 0, 0, 0, m_now (), m_now ());", uuid, selector_name); /* Setup the appropriate NVTs for the config. */ NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11929", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900534", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902019", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800991", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900539", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800995", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800997", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800999", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100106", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900381", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901084", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900384", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902023", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900620", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901089", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900387", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902028", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902106", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900547", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900705", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900628", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901087", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900624", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900543", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900629", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801869", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11865", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901174", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.12647", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900550", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901178", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900632", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.80079", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900556", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900714", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801874", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900710", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100201", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100206", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100208", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900394", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900712", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11945", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.20377", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900562", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103652", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901188", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902046", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900641", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103579", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902044", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900647", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.17583", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100215", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100217", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100219", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11963", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.80092", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900493", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900571", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.80095", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902134", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902058", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902137", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900578", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900576", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900659", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100221", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100301", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100302", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902053", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100226", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100224", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.18532", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.18533", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.18534", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801972", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100300", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902061", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902220", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900583", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900744", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900822", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900746", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900748", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900904", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902309", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.101013", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100154", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100313", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801988", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.101019", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.101018", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900827", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100311", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100233", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11986", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11987", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902311", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900596", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902078", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900598", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100082", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100160", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100240", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.101021", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900753", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100243", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900917", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.101025", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.18393", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900839", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100324", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100322", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100407", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100328", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100329", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902081", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902083", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902084", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900681", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902089", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900686", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900923", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100174", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900926", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100254", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100331", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100335", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100259", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100417", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100419", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900930", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900853", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900932", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900855", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100180", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100184", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100261", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100187", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100266", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100423", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100268", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100425", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100503", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.20834", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902187", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100192", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902503", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100194", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900867", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100196", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900945", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100432", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100437", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100517", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.19289", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800300", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100518", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801005", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801007", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.19608", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900950", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100280", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902513", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900956", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100285", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100288", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100367", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.102005", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.102006", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.102009", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.17975", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.102003", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800158", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801017", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800317", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.102001", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.66286", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902520", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900961", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902447", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900966", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100294", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10159", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100374", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.102013", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100376", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100456", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.102011", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.102017", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801100", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800165", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801102", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103979", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801106", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100292", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800407", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900971", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902533", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900976", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100382", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100540", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100466", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100464", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100468", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800170", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800098", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801112", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.19559", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800413", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801038", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801115", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801117", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801119", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10330", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10175", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902545", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902701", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902547", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100392", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900983", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100460", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100552", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11032", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100395", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100477", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800180", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100479", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801040", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100558", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801121", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103997", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801124", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800268", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801126", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801209", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11120", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11121", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10342", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11128", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902717", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.102048", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100801", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100489", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800272", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801053", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800274", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800276", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801213", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800355", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800279", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801138", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801217", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800432", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902480", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902561", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11134", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100486", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100571", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100573", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100651", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800280", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100819", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801069", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800523", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800603", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800525", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801067", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.14664", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800608", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801223", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800446", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100742", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800291", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801072", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801074", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100669", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100748", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801234", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800297", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100827", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.14674", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800617", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800610", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801152", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801232", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11153", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11154", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10379", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801081", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100755", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100911", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100675", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801087", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100838", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801244", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800467", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801403", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800547", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800627", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.802109", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800707", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800464", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800709", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100836", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801247", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10462", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800622", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10622", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100681", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103021", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801091", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800391", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800470", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801251", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800394", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800630", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800553", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800631", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800477", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800712", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.14772", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800559", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800716", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800633", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.14773", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103106", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100846", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801415", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100770", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103111", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100850", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100854", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103118", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801340", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100937", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100859", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800643", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801421", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800568", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800802", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800564", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.17200", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800728", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800807", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.14788", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100845", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.9000001", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100780", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801242", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103123", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103124", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103048", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103125", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100867", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800571", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103206", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800573", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100783", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800575", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103204", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801278", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801350", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801438", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800816", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800818", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800579", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800496", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103207", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800735", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100870", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900200", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100795", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103059", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100950", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801363", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801443", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.802145", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800900", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800901", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800821", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800825", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800905", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.15588", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103140", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10666", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103141", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103143", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103223", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103147", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800590", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800592", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900218", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800594", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.802230", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800832", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800677", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800911", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800913", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800918", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.802158", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103070", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800598", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103073", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103230", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801612", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103156", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901003", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103158", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801381", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800680", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800681", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901008", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800683", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.802244", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103317", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800765", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800688", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800923", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800768", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.17244", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800925", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.15765", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.15766", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800928", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10761", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103081", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103086", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901013", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103245", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801390", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901016", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800690", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801392", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800692", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800693", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.802178", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801394", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800933", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800779", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800936", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103326", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800939", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900242", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103098", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103255", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901025", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.80003", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.80004", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.80005", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.80006", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901107", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901023", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800941", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800864", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800786", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800949", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103181", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.20301", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900251", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900253", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900256", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900334", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900259", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900338", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800792", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800790", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901118", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800870", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800951", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901036", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801575", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800877", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800878", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800955", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801812", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.18219", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103190", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801737", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901121", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901044", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.80100", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103514", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800884", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800964", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800969", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.20160", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10884", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11822", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900194", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900352", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901056", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11906", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11907", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900357", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800891", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901135", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800893", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11908", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800895", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800898", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801916", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900360", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103294", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11913", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.80044", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.80045", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801681", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902009", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800980", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800984", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800988", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900371", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900374", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900376", "Service detection"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.17586", "Brute force attacks"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.17584", "Brute force attacks"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.17368", "Brute force attacks"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902799", "Databases"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.13859", "Denial of Service"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11762", "Firewalls"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.80059", "Firewalls"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100083", "Firewalls"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.14377", "Firewalls"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.14378", "Firewalls"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.80062", "FTP"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.80063", "FTP"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900518", "FTP"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800545", "FTP"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900608", "FTP"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.80064", "FTP"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100131", "FTP"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900815", "FTP"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901005", "FTP"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10990", "FTP"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901108", "FTP"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900510", "FTP"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900600", "FTP"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801057", "FTP"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900506", "FTP"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10920", "Malware"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10758", "Malware"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10921", "Malware"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900514", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10762", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900440", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11156", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900442", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10919", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800510", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800215", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800512", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800367", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800514", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800369", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800516", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900072", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800518", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100169", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900522", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800219", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900073", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800217", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900526", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100091", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900528", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900529", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900524", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.101007", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.80066", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100096", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100092", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900453", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900304", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900306", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.18373", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800221", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800225", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10107", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800227", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900234", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103585", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800000", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10185", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900535", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900239", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800001", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100100", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.802501", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900462", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100105", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800904", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100108", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10263", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100109", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800236", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800532", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100033", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103441", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100034", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902816", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800538", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100036", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800239", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.90022", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10793", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800018", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800019", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900173", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11033", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900470", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100114", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900472", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900474", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900324", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900326", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800241", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900479", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100119", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800540", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801754", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800542", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103978", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.14221", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11414", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800324", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11040", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100121", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800326", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900330", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800329", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900482", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900188", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100127", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900189", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100129", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10281", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100125", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100123", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800029", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800257", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800108", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100353", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.13849", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900191", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900490", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100133", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100134", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800339", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900198", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100136", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100138", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800260", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.50282", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800262", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103996", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10441", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900196", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103999", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100061", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10742", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.14315", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100063", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10746", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.15604", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.15901", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.12643", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900124", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100069", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900123", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.13858", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800341", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900128", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100140", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800345", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100142", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800348", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.17585", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800120", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.14629", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900508", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100074", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11140", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900430", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.17367", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.15615", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.15614", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800353", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.18356", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.800357", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900217", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.51662", "General"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11431", "Peer-To-Peer File Sharing"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11427", "Peer-To-Peer File Sharing"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11125", "Peer-To-Peer File Sharing"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10946", "Peer-To-Peer File Sharing"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.19585", "Peer-To-Peer File Sharing"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.13751", "Peer-To-Peer File Sharing"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.14644", "Peer-To-Peer File Sharing"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10265", "SNMP"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103416", "SNMP"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.18528", "SMTP problems"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.91984", "Remote file access"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.12639", "Remote file access"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900602", "RPC"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11111", "RPC"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11239", "Web Servers"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10661", "Web Servers"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.80024", "Web Servers"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.19689", "Web Servers"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10386", "Web Servers"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100075", "Useless services"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100080", "Useless services"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.901206", "Useless services"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10942", "Useless services"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.12231", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.80039", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10394", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10006", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.90011", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900012", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100062", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10674", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900032", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902798", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.900025", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.902425", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10144", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10401", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.103621", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10400", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.102016", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11011", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10794", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.10150", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.802726", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.11882", "Windows"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803551", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801632", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.810010", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801634", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803520", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803523", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803524", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803525", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803563", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803564", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803529", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803566", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803567", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803568", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803569", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801253", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801604", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801291", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803528", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801298", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801299", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801649", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801685", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801800", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801801", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803533", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801803", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803570", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801805", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803537", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803574", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803575", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801610", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801261", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801611", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801650", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801651", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801619", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801691", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801693", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801695", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801696", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803540", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801698", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801811", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803543", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803508", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803507", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803547", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803549", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803544", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801621", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801237", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801666", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803510", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803512", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803550", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803516", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801821", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.801822", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.803519", "Nmap NSE"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104147", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104163", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104149", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104026", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104165", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104167", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104029", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104048", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104063", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104066", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104067", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104068", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104110", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104111", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104085", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104069", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104114", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104130", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104089", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104088", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104010", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104135", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104137", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104157", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104158", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104018", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104053", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104057", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104074", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104075", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104091", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104076", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104093", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104120", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104121", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104104", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104109", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104001", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104125", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104124", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104143", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104021", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.104098", "Nmap NSE net"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.100315", "Port scanners"); NVT_SELECTOR (selector_name, "1.3.6.1.4.1.25623.1.0.14259", "Port scanners"); /* Add the Product Detection family. */ sql ("INSERT INTO nvt_selectors (name, exclude, type, family_or_nvt, family)" " VALUES ('%s', 0, " G_STRINGIFY (NVT_SELECTOR_TYPE_FAMILY) "," " 'Product detection', 'Product detection');", selector_name); /* Update number of families and nvts. */ sql ("UPDATE configs" " SET family_count = %i, nvt_count = %i," " modification_time = m_now ()" " WHERE uuid = '%s';", nvt_selector_family_count (selector_name, 0), nvt_selector_nvt_count (selector_name, NULL, 0), uuid); /* Add preferences for "ping host" nvt. */ sql ("INSERT INTO config_preferences (config, type, name, value)" " VALUES ((SELECT id FROM configs WHERE uuid = '%s')," " 'PLUGINS_PREFS'," " 'Ping Host[checkbox]:Mark unrechable Hosts as dead (not scanning)'," " 'yes');", uuid); sql ("INSERT INTO config_preferences (config, type, name, value)" " VALUES ((SELECT id FROM configs WHERE uuid = '%s')," " 'PLUGINS_PREFS'," " 'Ping Host[checkbox]:Report about unrechable Hosts'," " 'yes');", uuid); /* Add preferences for "Services" nvt in Discovery Scan Config. */ sql ("INSERT INTO config_preferences (config, type, name, value)" " VALUES ((SELECT id FROM configs WHERE uuid = '%s')," " 'PLUGINS_PREFS'," " 'Services[radio]:Test SSL based services'," " 'All;Known SSL ports;None');", uuid); sql ("COMMIT;"); } openvas-manager-6.0.9/src/scanner.h000644 001751 001751 00000003337 12757560563 020300 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Module for OpenVAS Manager: Scanner Connection API. * * Authors: * Hani Benhabiles * * Copyright: * Copyright (C) 2014 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #ifndef OPENVAS_MANAGER_SCANNER_H #define OPENVAS_MANAGER_SCANNER_H #include int openvas_scanner_read (); int openvas_scanner_write (int); int openvas_scanner_wait (); int openvas_scanner_close (); int openvas_scanner_connect (); void openvas_scanner_free (); int openvas_scanner_fd_isset (fd_set *); void openvas_scanner_fd_set (fd_set *); int openvas_scanner_peek (); int openvas_scanner_get_nfds (int); int openvas_scanner_session_peek (); int openvas_scanner_full (); int openvas_scanner_realloc (); int openvas_scanner_connected (); int openvas_scanner_init (int); int openvas_scanner_is_loading (); int openvas_scanner_set_address (const char *, int); void openvas_scanner_set_certs (const char *, const char *, const char *); #endif /* not OPENVAS_MANAGER_SCANNER_H */ openvas-manager-6.0.9/src/ompd.h000644 001751 001751 00000004124 12757560562 017600 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Headers for OpenVAS Manager: the OMP daemon. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2009 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #ifndef OPENVAS_MANAGER_OMPD_H #define OPENVAS_MANAGER_OMPD_H #include "types.h" #include #include #include /** * @brief Maximum number of seconds spent trying to read the protocol. */ #ifndef READ_PROTOCOL_TIMEOUT #define READ_PROTOCOL_TIMEOUT 300 #endif /** * @brief Size of \ref from_client and \ref from_scanner data buffers, in bytes. */ #define FROM_BUFFER_SIZE 1048576 extern buffer_size_t from_buffer_size; extern char from_client[]; extern buffer_size_t from_client_start; extern buffer_size_t from_client_end; extern char *from_scanner; extern buffer_size_t from_scanner_start; extern buffer_size_t from_scanner_end; /*@-exportlocal@*/ extern struct sockaddr_in scanner_address; /*@=exportlocal@*/ int init_ompd (GSList*, int, const gchar*, int, int, int, void (*) (), int); void init_ompd_process (const gchar *, gchar **); int serve_omp (gnutls_session_t*, gnutls_certificate_credentials_t*, int, const gchar*, gchar**, void (*progress) ()); /** @todo Temporarily declared here, for omp.c SEND_TO_CLIENT. */ extern char to_client[]; extern buffer_size_t to_client_start; extern buffer_size_t to_client_end; #endif openvas-manager-6.0.9/src/manage_ranges_nmap_5_51_top_2000_top_100.c000644 001751 001751 00000144550 12557600615 025754 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: Manage library: Ranges for Nmap 5.51 top 2000 top 100. * * Authors: * Matthew Mundell * * Copyright: * Copyright (C) 2009,2010 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #include "manage.h" #include "sql.h" /** * @brief Insert a port range. */ #define RANGE(type, start, end) \ sql ("INSERT INTO port_ranges" \ " (uuid, port_list, type, start, \"end\", comment, exclude)" \ " VALUES" \ " (make_uuid (), %llu, %i," \ " '" G_STRINGIFY (start) "'," \ " '" G_STRINGIFY (end) "'," \ " '', 0)", \ list, \ type) /** * @brief Make port ranges for Nmap top 2000 top 100. * * Caller must lock the db. * * @param[in] list Port list. */ void make_port_ranges_nmap_5_51_top_2000_top_100 (port_list_t list) { sql_begin_immediate (); RANGE (PORT_PROTOCOL_TCP, 1, 1); RANGE (PORT_PROTOCOL_TCP, 3, 4); RANGE (PORT_PROTOCOL_TCP, 6, 7); RANGE (PORT_PROTOCOL_TCP, 9, 9); RANGE (PORT_PROTOCOL_TCP, 13, 13); RANGE (PORT_PROTOCOL_TCP, 17, 17); RANGE (PORT_PROTOCOL_TCP, 19, 27); RANGE (PORT_PROTOCOL_TCP, 30, 30); RANGE (PORT_PROTOCOL_TCP, 32, 33); RANGE (PORT_PROTOCOL_TCP, 37, 37); RANGE (PORT_PROTOCOL_TCP, 42, 43); RANGE (PORT_PROTOCOL_TCP, 49, 49); RANGE (PORT_PROTOCOL_TCP, 53, 53); RANGE (PORT_PROTOCOL_TCP, 55, 55); RANGE (PORT_PROTOCOL_TCP, 57, 57); RANGE (PORT_PROTOCOL_TCP, 59, 59); RANGE (PORT_PROTOCOL_TCP, 70, 70); RANGE (PORT_PROTOCOL_TCP, 77, 77); RANGE (PORT_PROTOCOL_TCP, 79, 90); RANGE (PORT_PROTOCOL_TCP, 98, 100); RANGE (PORT_PROTOCOL_TCP, 102, 102); RANGE (PORT_PROTOCOL_TCP, 106, 106); RANGE (PORT_PROTOCOL_TCP, 109, 111); RANGE (PORT_PROTOCOL_TCP, 113, 113); RANGE (PORT_PROTOCOL_TCP, 119, 119); RANGE (PORT_PROTOCOL_TCP, 123, 123); RANGE (PORT_PROTOCOL_TCP, 125, 125); RANGE (PORT_PROTOCOL_TCP, 127, 127); RANGE (PORT_PROTOCOL_TCP, 135, 135); RANGE (PORT_PROTOCOL_TCP, 139, 139); RANGE (PORT_PROTOCOL_TCP, 143, 144); RANGE (PORT_PROTOCOL_TCP, 146, 146); RANGE (PORT_PROTOCOL_TCP, 157, 157); RANGE (PORT_PROTOCOL_TCP, 161, 161); RANGE (PORT_PROTOCOL_TCP, 163, 163); RANGE (PORT_PROTOCOL_TCP, 179, 179); RANGE (PORT_PROTOCOL_TCP, 199, 199); RANGE (PORT_PROTOCOL_TCP, 210, 212); RANGE (PORT_PROTOCOL_TCP, 220, 220); RANGE (PORT_PROTOCOL_TCP, 222, 223); RANGE (PORT_PROTOCOL_TCP, 225, 225); RANGE (PORT_PROTOCOL_TCP, 250, 252); RANGE (PORT_PROTOCOL_TCP, 254, 257); RANGE (PORT_PROTOCOL_TCP, 259, 259); RANGE (PORT_PROTOCOL_TCP, 264, 264); RANGE (PORT_PROTOCOL_TCP, 280, 280); RANGE (PORT_PROTOCOL_TCP, 301, 301); RANGE (PORT_PROTOCOL_TCP, 306, 306); RANGE (PORT_PROTOCOL_TCP, 311, 311); RANGE (PORT_PROTOCOL_TCP, 333, 333); RANGE (PORT_PROTOCOL_TCP, 340, 340); RANGE (PORT_PROTOCOL_TCP, 366, 366); RANGE (PORT_PROTOCOL_TCP, 388, 389); RANGE (PORT_PROTOCOL_TCP, 406, 407); RANGE (PORT_PROTOCOL_TCP, 411, 411); RANGE (PORT_PROTOCOL_TCP, 416, 417); RANGE (PORT_PROTOCOL_TCP, 419, 419); RANGE (PORT_PROTOCOL_TCP, 425, 425); RANGE (PORT_PROTOCOL_TCP, 427, 427); RANGE (PORT_PROTOCOL_TCP, 441, 445); RANGE (PORT_PROTOCOL_TCP, 447, 447); RANGE (PORT_PROTOCOL_TCP, 458, 458); RANGE (PORT_PROTOCOL_TCP, 464, 465); RANGE (PORT_PROTOCOL_TCP, 475, 475); RANGE (PORT_PROTOCOL_TCP, 481, 481); RANGE (PORT_PROTOCOL_TCP, 497, 497); RANGE (PORT_PROTOCOL_TCP, 500, 500); RANGE (PORT_PROTOCOL_TCP, 502, 502); RANGE (PORT_PROTOCOL_TCP, 512, 515); RANGE (PORT_PROTOCOL_TCP, 523, 524); RANGE (PORT_PROTOCOL_TCP, 540, 541); RANGE (PORT_PROTOCOL_TCP, 543, 545); RANGE (PORT_PROTOCOL_TCP, 548, 548); RANGE (PORT_PROTOCOL_TCP, 554, 557); RANGE (PORT_PROTOCOL_TCP, 563, 563); RANGE (PORT_PROTOCOL_TCP, 587, 587); RANGE (PORT_PROTOCOL_TCP, 593, 593); RANGE (PORT_PROTOCOL_TCP, 600, 600); RANGE (PORT_PROTOCOL_TCP, 602, 602); RANGE (PORT_PROTOCOL_TCP, 606, 606); RANGE (PORT_PROTOCOL_TCP, 610, 610); RANGE (PORT_PROTOCOL_TCP, 616, 617); RANGE (PORT_PROTOCOL_TCP, 621, 621); RANGE (PORT_PROTOCOL_TCP, 623, 623); RANGE (PORT_PROTOCOL_TCP, 625, 625); RANGE (PORT_PROTOCOL_TCP, 631, 631); RANGE (PORT_PROTOCOL_TCP, 636, 636); RANGE (PORT_PROTOCOL_TCP, 639, 639); RANGE (PORT_PROTOCOL_TCP, 641, 641); RANGE (PORT_PROTOCOL_TCP, 646, 646); RANGE (PORT_PROTOCOL_TCP, 648, 648); RANGE (PORT_PROTOCOL_TCP, 655, 655); RANGE (PORT_PROTOCOL_TCP, 657, 657); RANGE (PORT_PROTOCOL_TCP, 659, 660); RANGE (PORT_PROTOCOL_TCP, 666, 669); RANGE (PORT_PROTOCOL_TCP, 674, 674); RANGE (PORT_PROTOCOL_TCP, 683, 684); RANGE (PORT_PROTOCOL_TCP, 687, 687); RANGE (PORT_PROTOCOL_TCP, 690, 691); RANGE (PORT_PROTOCOL_TCP, 700, 701); RANGE (PORT_PROTOCOL_TCP, 705, 705); RANGE (PORT_PROTOCOL_TCP, 709, 711); RANGE (PORT_PROTOCOL_TCP, 713, 715); RANGE (PORT_PROTOCOL_TCP, 720, 720); RANGE (PORT_PROTOCOL_TCP, 722, 722); RANGE (PORT_PROTOCOL_TCP, 725, 726); RANGE (PORT_PROTOCOL_TCP, 728, 732); RANGE (PORT_PROTOCOL_TCP, 740, 740); RANGE (PORT_PROTOCOL_TCP, 748, 749); RANGE (PORT_PROTOCOL_TCP, 754, 754); RANGE (PORT_PROTOCOL_TCP, 757, 758); RANGE (PORT_PROTOCOL_TCP, 765, 765); RANGE (PORT_PROTOCOL_TCP, 777, 778); RANGE (PORT_PROTOCOL_TCP, 780, 780); RANGE (PORT_PROTOCOL_TCP, 782, 783); RANGE (PORT_PROTOCOL_TCP, 786, 787); RANGE (PORT_PROTOCOL_TCP, 790, 790); RANGE (PORT_PROTOCOL_TCP, 792, 792); RANGE (PORT_PROTOCOL_TCP, 795, 795); RANGE (PORT_PROTOCOL_TCP, 800, 803); RANGE (PORT_PROTOCOL_TCP, 805, 806); RANGE (PORT_PROTOCOL_TCP, 808, 808); RANGE (PORT_PROTOCOL_TCP, 822, 823); RANGE (PORT_PROTOCOL_TCP, 825, 825); RANGE (PORT_PROTOCOL_TCP, 829, 829); RANGE (PORT_PROTOCOL_TCP, 839, 840); RANGE (PORT_PROTOCOL_TCP, 843, 843); RANGE (PORT_PROTOCOL_TCP, 846, 846); RANGE (PORT_PROTOCOL_TCP, 856, 856); RANGE (PORT_PROTOCOL_TCP, 859, 859); RANGE (PORT_PROTOCOL_TCP, 862, 862); RANGE (PORT_PROTOCOL_TCP, 864, 864); RANGE (PORT_PROTOCOL_TCP, 873, 874); RANGE (PORT_PROTOCOL_TCP, 878, 878); RANGE (PORT_PROTOCOL_TCP, 880, 880); RANGE (PORT_PROTOCOL_TCP, 888, 888); RANGE (PORT_PROTOCOL_TCP, 898, 898); RANGE (PORT_PROTOCOL_TCP, 900, 905); RANGE (PORT_PROTOCOL_TCP, 911, 913); RANGE (PORT_PROTOCOL_TCP, 918, 918); RANGE (PORT_PROTOCOL_TCP, 921, 922); RANGE (PORT_PROTOCOL_TCP, 924, 924); RANGE (PORT_PROTOCOL_TCP, 928, 928); RANGE (PORT_PROTOCOL_TCP, 930, 931); RANGE (PORT_PROTOCOL_TCP, 943, 943); RANGE (PORT_PROTOCOL_TCP, 953, 953); RANGE (PORT_PROTOCOL_TCP, 969, 969); RANGE (PORT_PROTOCOL_TCP, 971, 971); RANGE (PORT_PROTOCOL_TCP, 980, 981); RANGE (PORT_PROTOCOL_TCP, 987, 987); RANGE (PORT_PROTOCOL_TCP, 990, 990); RANGE (PORT_PROTOCOL_TCP, 992, 993); RANGE (PORT_PROTOCOL_TCP, 995, 996); RANGE (PORT_PROTOCOL_TCP, 998, 1002); RANGE (PORT_PROTOCOL_TCP, 1004, 1015); RANGE (PORT_PROTOCOL_TCP, 1020, 1114); RANGE (PORT_PROTOCOL_TCP, 1116, 1119); RANGE (PORT_PROTOCOL_TCP, 1121, 1128); RANGE (PORT_PROTOCOL_TCP, 1130, 1132); RANGE (PORT_PROTOCOL_TCP, 1134, 1138); RANGE (PORT_PROTOCOL_TCP, 1141, 1141); RANGE (PORT_PROTOCOL_TCP, 1143, 1145); RANGE (PORT_PROTOCOL_TCP, 1147, 1154); RANGE (PORT_PROTOCOL_TCP, 1156, 1159); RANGE (PORT_PROTOCOL_TCP, 1162, 1169); RANGE (PORT_PROTOCOL_TCP, 1173, 1176); RANGE (PORT_PROTOCOL_TCP, 1179, 1180); RANGE (PORT_PROTOCOL_TCP, 1182, 1188); RANGE (PORT_PROTOCOL_TCP, 1190, 1192); RANGE (PORT_PROTOCOL_TCP, 1194, 1196); RANGE (PORT_PROTOCOL_TCP, 1198, 1201); RANGE (PORT_PROTOCOL_TCP, 1204, 1204); RANGE (PORT_PROTOCOL_TCP, 1207, 1213); RANGE (PORT_PROTOCOL_TCP, 1215, 1218); RANGE (PORT_PROTOCOL_TCP, 1220, 1223); RANGE (PORT_PROTOCOL_TCP, 1228, 1229); RANGE (PORT_PROTOCOL_TCP, 1233, 1234); RANGE (PORT_PROTOCOL_TCP, 1236, 1236); RANGE (PORT_PROTOCOL_TCP, 1239, 1241); RANGE (PORT_PROTOCOL_TCP, 1243, 1244); RANGE (PORT_PROTOCOL_TCP, 1247, 1251); RANGE (PORT_PROTOCOL_TCP, 1259, 1259); RANGE (PORT_PROTOCOL_TCP, 1261, 1262); RANGE (PORT_PROTOCOL_TCP, 1264, 1264); RANGE (PORT_PROTOCOL_TCP, 1268, 1268); RANGE (PORT_PROTOCOL_TCP, 1270, 1272); RANGE (PORT_PROTOCOL_TCP, 1276, 1277); RANGE (PORT_PROTOCOL_TCP, 1279, 1279); RANGE (PORT_PROTOCOL_TCP, 1282, 1282); RANGE (PORT_PROTOCOL_TCP, 1287, 1287); RANGE (PORT_PROTOCOL_TCP, 1290, 1291); RANGE (PORT_PROTOCOL_TCP, 1296, 1297); RANGE (PORT_PROTOCOL_TCP, 1299, 1303); RANGE (PORT_PROTOCOL_TCP, 1305, 1311); RANGE (PORT_PROTOCOL_TCP, 1314, 1319); RANGE (PORT_PROTOCOL_TCP, 1321, 1322); RANGE (PORT_PROTOCOL_TCP, 1324, 1324); RANGE (PORT_PROTOCOL_TCP, 1327, 1328); RANGE (PORT_PROTOCOL_TCP, 1330, 1331); RANGE (PORT_PROTOCOL_TCP, 1334, 1334); RANGE (PORT_PROTOCOL_TCP, 1336, 1337); RANGE (PORT_PROTOCOL_TCP, 1339, 1340); RANGE (PORT_PROTOCOL_TCP, 1347, 1347); RANGE (PORT_PROTOCOL_TCP, 1350, 1353); RANGE (PORT_PROTOCOL_TCP, 1357, 1357); RANGE (PORT_PROTOCOL_TCP, 1413, 1414); RANGE (PORT_PROTOCOL_TCP, 1417, 1417); RANGE (PORT_PROTOCOL_TCP, 1433, 1434); RANGE (PORT_PROTOCOL_TCP, 1443, 1443); RANGE (PORT_PROTOCOL_TCP, 1455, 1455); RANGE (PORT_PROTOCOL_TCP, 1461, 1461); RANGE (PORT_PROTOCOL_TCP, 1494, 1494); RANGE (PORT_PROTOCOL_TCP, 1500, 1501); RANGE (PORT_PROTOCOL_TCP, 1503, 1503); RANGE (PORT_PROTOCOL_TCP, 1516, 1516); RANGE (PORT_PROTOCOL_TCP, 1521, 1522); RANGE (PORT_PROTOCOL_TCP, 1524, 1526); RANGE (PORT_PROTOCOL_TCP, 1533, 1533); RANGE (PORT_PROTOCOL_TCP, 1547, 1547); RANGE (PORT_PROTOCOL_TCP, 1550, 1550); RANGE (PORT_PROTOCOL_TCP, 1556, 1556); RANGE (PORT_PROTOCOL_TCP, 1558, 1560); RANGE (PORT_PROTOCOL_TCP, 1565, 1566); RANGE (PORT_PROTOCOL_TCP, 1569, 1569); RANGE (PORT_PROTOCOL_TCP, 1580, 1580); RANGE (PORT_PROTOCOL_TCP, 1583, 1584); RANGE (PORT_PROTOCOL_TCP, 1592, 1592); RANGE (PORT_PROTOCOL_TCP, 1594, 1594); RANGE (PORT_PROTOCOL_TCP, 1598, 1598); RANGE (PORT_PROTOCOL_TCP, 1600, 1600); RANGE (PORT_PROTOCOL_TCP, 1605, 1605); RANGE (PORT_PROTOCOL_TCP, 1607, 1607); RANGE (PORT_PROTOCOL_TCP, 1615, 1615); RANGE (PORT_PROTOCOL_TCP, 1620, 1620); RANGE (PORT_PROTOCOL_TCP, 1622, 1622); RANGE (PORT_PROTOCOL_TCP, 1632, 1632); RANGE (PORT_PROTOCOL_TCP, 1635, 1635); RANGE (PORT_PROTOCOL_TCP, 1638, 1638); RANGE (PORT_PROTOCOL_TCP, 1641, 1641); RANGE (PORT_PROTOCOL_TCP, 1645, 1645); RANGE (PORT_PROTOCOL_TCP, 1658, 1658); RANGE (PORT_PROTOCOL_TCP, 1666, 1666); RANGE (PORT_PROTOCOL_TCP, 1677, 1677); RANGE (PORT_PROTOCOL_TCP, 1683, 1683); RANGE (PORT_PROTOCOL_TCP, 1687, 1688); RANGE (PORT_PROTOCOL_TCP, 1691, 1691); RANGE (PORT_PROTOCOL_TCP, 1694, 1694); RANGE (PORT_PROTOCOL_TCP, 1699, 1701); RANGE (PORT_PROTOCOL_TCP, 1703, 1703); RANGE (PORT_PROTOCOL_TCP, 1707, 1709); RANGE (PORT_PROTOCOL_TCP, 1711, 1713); RANGE (PORT_PROTOCOL_TCP, 1715, 1715); RANGE (PORT_PROTOCOL_TCP, 1717, 1723); RANGE (PORT_PROTOCOL_TCP, 1730, 1730); RANGE (PORT_PROTOCOL_TCP, 1735, 1736); RANGE (PORT_PROTOCOL_TCP, 1745, 1745); RANGE (PORT_PROTOCOL_TCP, 1750, 1750); RANGE (PORT_PROTOCOL_TCP, 1752, 1753); RANGE (PORT_PROTOCOL_TCP, 1755, 1755); RANGE (PORT_PROTOCOL_TCP, 1761, 1761); RANGE (PORT_PROTOCOL_TCP, 1782, 1783); RANGE (PORT_PROTOCOL_TCP, 1791, 1792); RANGE (PORT_PROTOCOL_TCP, 1799, 1801); RANGE (PORT_PROTOCOL_TCP, 1805, 1808); RANGE (PORT_PROTOCOL_TCP, 1811, 1812); RANGE (PORT_PROTOCOL_TCP, 1823, 1823); RANGE (PORT_PROTOCOL_TCP, 1825, 1825); RANGE (PORT_PROTOCOL_TCP, 1835, 1835); RANGE (PORT_PROTOCOL_TCP, 1839, 1840); RANGE (PORT_PROTOCOL_TCP, 1858, 1858); RANGE (PORT_PROTOCOL_TCP, 1861, 1864); RANGE (PORT_PROTOCOL_TCP, 1871, 1871); RANGE (PORT_PROTOCOL_TCP, 1875, 1875); RANGE (PORT_PROTOCOL_TCP, 1900, 1901); RANGE (PORT_PROTOCOL_TCP, 1911, 1912); RANGE (PORT_PROTOCOL_TCP, 1914, 1914); RANGE (PORT_PROTOCOL_TCP, 1918, 1918); RANGE (PORT_PROTOCOL_TCP, 1924, 1924); RANGE (PORT_PROTOCOL_TCP, 1927, 1927); RANGE (PORT_PROTOCOL_TCP, 1935, 1935); RANGE (PORT_PROTOCOL_TCP, 1947, 1947); RANGE (PORT_PROTOCOL_TCP, 1954, 1954); RANGE (PORT_PROTOCOL_TCP, 1958, 1958); RANGE (PORT_PROTOCOL_TCP, 1971, 1976); RANGE (PORT_PROTOCOL_TCP, 1981, 1981); RANGE (PORT_PROTOCOL_TCP, 1984, 1984); RANGE (PORT_PROTOCOL_TCP, 1998, 2013); RANGE (PORT_PROTOCOL_TCP, 2020, 2022); RANGE (PORT_PROTOCOL_TCP, 2025, 2025); RANGE (PORT_PROTOCOL_TCP, 2030, 2031); RANGE (PORT_PROTOCOL_TCP, 2033, 2035); RANGE (PORT_PROTOCOL_TCP, 2038, 2038); RANGE (PORT_PROTOCOL_TCP, 2040, 2049); RANGE (PORT_PROTOCOL_TCP, 2062, 2062); RANGE (PORT_PROTOCOL_TCP, 2065, 2065); RANGE (PORT_PROTOCOL_TCP, 2067, 2070); RANGE (PORT_PROTOCOL_TCP, 2080, 2083); RANGE (PORT_PROTOCOL_TCP, 2086, 2087); RANGE (PORT_PROTOCOL_TCP, 2095, 2096); RANGE (PORT_PROTOCOL_TCP, 2099, 2101); RANGE (PORT_PROTOCOL_TCP, 2103, 2107); RANGE (PORT_PROTOCOL_TCP, 2111, 2112); RANGE (PORT_PROTOCOL_TCP, 2115, 2115); RANGE (PORT_PROTOCOL_TCP, 2119, 2119); RANGE (PORT_PROTOCOL_TCP, 2121, 2121); RANGE (PORT_PROTOCOL_TCP, 2124, 2124); RANGE (PORT_PROTOCOL_TCP, 2126, 2126); RANGE (PORT_PROTOCOL_TCP, 2134, 2135); RANGE (PORT_PROTOCOL_TCP, 2142, 2142); RANGE (PORT_PROTOCOL_TCP, 2144, 2144); RANGE (PORT_PROTOCOL_TCP, 2148, 2148); RANGE (PORT_PROTOCOL_TCP, 2150, 2150); RANGE (PORT_PROTOCOL_TCP, 2160, 2161); RANGE (PORT_PROTOCOL_TCP, 2170, 2170); RANGE (PORT_PROTOCOL_TCP, 2179, 2179); RANGE (PORT_PROTOCOL_TCP, 2187, 2187); RANGE (PORT_PROTOCOL_TCP, 2190, 2191); RANGE (PORT_PROTOCOL_TCP, 2196, 2197); RANGE (PORT_PROTOCOL_TCP, 2200, 2201); RANGE (PORT_PROTOCOL_TCP, 2203, 2203); RANGE (PORT_PROTOCOL_TCP, 2222, 2222); RANGE (PORT_PROTOCOL_TCP, 2224, 2224); RANGE (PORT_PROTOCOL_TCP, 2232, 2232); RANGE (PORT_PROTOCOL_TCP, 2241, 2241); RANGE (PORT_PROTOCOL_TCP, 2250, 2251); RANGE (PORT_PROTOCOL_TCP, 2253, 2253); RANGE (PORT_PROTOCOL_TCP, 2260, 2262); RANGE (PORT_PROTOCOL_TCP, 2265, 2265); RANGE (PORT_PROTOCOL_TCP, 2269, 2271); RANGE (PORT_PROTOCOL_TCP, 2280, 2280); RANGE (PORT_PROTOCOL_TCP, 2288, 2288); RANGE (PORT_PROTOCOL_TCP, 2291, 2292); RANGE (PORT_PROTOCOL_TCP, 2300, 2302); RANGE (PORT_PROTOCOL_TCP, 2304, 2304); RANGE (PORT_PROTOCOL_TCP, 2312, 2313); RANGE (PORT_PROTOCOL_TCP, 2323, 2323); RANGE (PORT_PROTOCOL_TCP, 2325, 2326); RANGE (PORT_PROTOCOL_TCP, 2330, 2330); RANGE (PORT_PROTOCOL_TCP, 2335, 2335); RANGE (PORT_PROTOCOL_TCP, 2340, 2340); RANGE (PORT_PROTOCOL_TCP, 2366, 2366); RANGE (PORT_PROTOCOL_TCP, 2371, 2372); RANGE (PORT_PROTOCOL_TCP, 2381, 2383); RANGE (PORT_PROTOCOL_TCP, 2391, 2391); RANGE (PORT_PROTOCOL_TCP, 2393, 2394); RANGE (PORT_PROTOCOL_TCP, 2399, 2399); RANGE (PORT_PROTOCOL_TCP, 2401, 2401); RANGE (PORT_PROTOCOL_TCP, 2418, 2418); RANGE (PORT_PROTOCOL_TCP, 2425, 2425); RANGE (PORT_PROTOCOL_TCP, 2433, 2433); RANGE (PORT_PROTOCOL_TCP, 2435, 2436); RANGE (PORT_PROTOCOL_TCP, 2438, 2439); RANGE (PORT_PROTOCOL_TCP, 2449, 2449); RANGE (PORT_PROTOCOL_TCP, 2456, 2456); RANGE (PORT_PROTOCOL_TCP, 2463, 2463); RANGE (PORT_PROTOCOL_TCP, 2472, 2472); RANGE (PORT_PROTOCOL_TCP, 2492, 2492); RANGE (PORT_PROTOCOL_TCP, 2500, 2501); RANGE (PORT_PROTOCOL_TCP, 2505, 2505); RANGE (PORT_PROTOCOL_TCP, 2522, 2522); RANGE (PORT_PROTOCOL_TCP, 2525, 2525); RANGE (PORT_PROTOCOL_TCP, 2531, 2532); RANGE (PORT_PROTOCOL_TCP, 2550, 2551); RANGE (PORT_PROTOCOL_TCP, 2557, 2558); RANGE (PORT_PROTOCOL_TCP, 2567, 2567); RANGE (PORT_PROTOCOL_TCP, 2580, 2580); RANGE (PORT_PROTOCOL_TCP, 2583, 2584); RANGE (PORT_PROTOCOL_TCP, 2598, 2598); RANGE (PORT_PROTOCOL_TCP, 2600, 2602); RANGE (PORT_PROTOCOL_TCP, 2604, 2608); RANGE (PORT_PROTOCOL_TCP, 2622, 2623); RANGE (PORT_PROTOCOL_TCP, 2628, 2628); RANGE (PORT_PROTOCOL_TCP, 2631, 2631); RANGE (PORT_PROTOCOL_TCP, 2638, 2638); RANGE (PORT_PROTOCOL_TCP, 2644, 2644); RANGE (PORT_PROTOCOL_TCP, 2691, 2691); RANGE (PORT_PROTOCOL_TCP, 2700, 2702); RANGE (PORT_PROTOCOL_TCP, 2706, 2706); RANGE (PORT_PROTOCOL_TCP, 2710, 2712); RANGE (PORT_PROTOCOL_TCP, 2717, 2718); RANGE (PORT_PROTOCOL_TCP, 2723, 2723); RANGE (PORT_PROTOCOL_TCP, 2725, 2725); RANGE (PORT_PROTOCOL_TCP, 2728, 2728); RANGE (PORT_PROTOCOL_TCP, 2734, 2734); RANGE (PORT_PROTOCOL_TCP, 2800, 2800); RANGE (PORT_PROTOCOL_TCP, 2804, 2804); RANGE (PORT_PROTOCOL_TCP, 2806, 2806); RANGE (PORT_PROTOCOL_TCP, 2809, 2809); RANGE (PORT_PROTOCOL_TCP, 2811, 2812); RANGE (PORT_PROTOCOL_TCP, 2847, 2847); RANGE (PORT_PROTOCOL_TCP, 2850, 2850); RANGE (PORT_PROTOCOL_TCP, 2869, 2869); RANGE (PORT_PROTOCOL_TCP, 2875, 2875); RANGE (PORT_PROTOCOL_TCP, 2882, 2882); RANGE (PORT_PROTOCOL_TCP, 2888, 2889); RANGE (PORT_PROTOCOL_TCP, 2898, 2898); RANGE (PORT_PROTOCOL_TCP, 2901, 2903); RANGE (PORT_PROTOCOL_TCP, 2908, 2910); RANGE (PORT_PROTOCOL_TCP, 2920, 2920); RANGE (PORT_PROTOCOL_TCP, 2930, 2930); RANGE (PORT_PROTOCOL_TCP, 2957, 2958); RANGE (PORT_PROTOCOL_TCP, 2967, 2968); RANGE (PORT_PROTOCOL_TCP, 2973, 2973); RANGE (PORT_PROTOCOL_TCP, 2984, 2984); RANGE (PORT_PROTOCOL_TCP, 2987, 2988); RANGE (PORT_PROTOCOL_TCP, 2991, 2991); RANGE (PORT_PROTOCOL_TCP, 2997, 2998); RANGE (PORT_PROTOCOL_TCP, 3000, 3003); RANGE (PORT_PROTOCOL_TCP, 3005, 3007); RANGE (PORT_PROTOCOL_TCP, 3011, 3011); RANGE (PORT_PROTOCOL_TCP, 3013, 3014); RANGE (PORT_PROTOCOL_TCP, 3017, 3017); RANGE (PORT_PROTOCOL_TCP, 3023, 3023); RANGE (PORT_PROTOCOL_TCP, 3025, 3025); RANGE (PORT_PROTOCOL_TCP, 3030, 3031); RANGE (PORT_PROTOCOL_TCP, 3050, 3050); RANGE (PORT_PROTOCOL_TCP, 3052, 3052); RANGE (PORT_PROTOCOL_TCP, 3057, 3057); RANGE (PORT_PROTOCOL_TCP, 3062, 3063); RANGE (PORT_PROTOCOL_TCP, 3071, 3071); RANGE (PORT_PROTOCOL_TCP, 3077, 3077); RANGE (PORT_PROTOCOL_TCP, 3080, 3080); RANGE (PORT_PROTOCOL_TCP, 3089, 3089); RANGE (PORT_PROTOCOL_TCP, 3102, 3103); RANGE (PORT_PROTOCOL_TCP, 3118, 3119); RANGE (PORT_PROTOCOL_TCP, 3121, 3121); RANGE (PORT_PROTOCOL_TCP, 3128, 3128); RANGE (PORT_PROTOCOL_TCP, 3146, 3146); RANGE (PORT_PROTOCOL_TCP, 3162, 3162); RANGE (PORT_PROTOCOL_TCP, 3167, 3168); RANGE (PORT_PROTOCOL_TCP, 3190, 3190); RANGE (PORT_PROTOCOL_TCP, 3200, 3200); RANGE (PORT_PROTOCOL_TCP, 3210, 3211); RANGE (PORT_PROTOCOL_TCP, 3220, 3221); RANGE (PORT_PROTOCOL_TCP, 3240, 3240); RANGE (PORT_PROTOCOL_TCP, 3260, 3261); RANGE (PORT_PROTOCOL_TCP, 3263, 3263); RANGE (PORT_PROTOCOL_TCP, 3268, 3269); RANGE (PORT_PROTOCOL_TCP, 3280, 3281); RANGE (PORT_PROTOCOL_TCP, 3283, 3283); RANGE (PORT_PROTOCOL_TCP, 3291, 3291); RANGE (PORT_PROTOCOL_TCP, 3299, 3301); RANGE (PORT_PROTOCOL_TCP, 3304, 3304); RANGE (PORT_PROTOCOL_TCP, 3306, 3307); RANGE (PORT_PROTOCOL_TCP, 3310, 3311); RANGE (PORT_PROTOCOL_TCP, 3319, 3319); RANGE (PORT_PROTOCOL_TCP, 3322, 3325); RANGE (PORT_PROTOCOL_TCP, 3333, 3334); RANGE (PORT_PROTOCOL_TCP, 3351, 3351); RANGE (PORT_PROTOCOL_TCP, 3362, 3363); RANGE (PORT_PROTOCOL_TCP, 3365, 3365); RANGE (PORT_PROTOCOL_TCP, 3367, 3372); RANGE (PORT_PROTOCOL_TCP, 3374, 3374); RANGE (PORT_PROTOCOL_TCP, 3376, 3376); RANGE (PORT_PROTOCOL_TCP, 3388, 3390); RANGE (PORT_PROTOCOL_TCP, 3396, 3396); RANGE (PORT_PROTOCOL_TCP, 3399, 3400); RANGE (PORT_PROTOCOL_TCP, 3404, 3404); RANGE (PORT_PROTOCOL_TCP, 3410, 3410); RANGE (PORT_PROTOCOL_TCP, 3414, 3415); RANGE (PORT_PROTOCOL_TCP, 3419, 3419); RANGE (PORT_PROTOCOL_TCP, 3425, 3425); RANGE (PORT_PROTOCOL_TCP, 3430, 3430); RANGE (PORT_PROTOCOL_TCP, 3439, 3439); RANGE (PORT_PROTOCOL_TCP, 3443, 3443); RANGE (PORT_PROTOCOL_TCP, 3456, 3456); RANGE (PORT_PROTOCOL_TCP, 3476, 3476); RANGE (PORT_PROTOCOL_TCP, 3479, 3479); RANGE (PORT_PROTOCOL_TCP, 3483, 3483); RANGE (PORT_PROTOCOL_TCP, 3485, 3486); RANGE (PORT_PROTOCOL_TCP, 3493, 3493); RANGE (PORT_PROTOCOL_TCP, 3497, 3497); RANGE (PORT_PROTOCOL_TCP, 3503, 3503); RANGE (PORT_PROTOCOL_TCP, 3505, 3506); RANGE (PORT_PROTOCOL_TCP, 3511, 3511); RANGE (PORT_PROTOCOL_TCP, 3513, 3515); RANGE (PORT_PROTOCOL_TCP, 3517, 3517); RANGE (PORT_PROTOCOL_TCP, 3519, 3520); RANGE (PORT_PROTOCOL_TCP, 3526, 3527); RANGE (PORT_PROTOCOL_TCP, 3530, 3530); RANGE (PORT_PROTOCOL_TCP, 3532, 3532); RANGE (PORT_PROTOCOL_TCP, 3546, 3546); RANGE (PORT_PROTOCOL_TCP, 3551, 3551); RANGE (PORT_PROTOCOL_TCP, 3577, 3577); RANGE (PORT_PROTOCOL_TCP, 3580, 3580); RANGE (PORT_PROTOCOL_TCP, 3586, 3586); RANGE (PORT_PROTOCOL_TCP, 3599, 3600); RANGE (PORT_PROTOCOL_TCP, 3602, 3603); RANGE (PORT_PROTOCOL_TCP, 3621, 3622); RANGE (PORT_PROTOCOL_TCP, 3632, 3632); RANGE (PORT_PROTOCOL_TCP, 3636, 3637); RANGE (PORT_PROTOCOL_TCP, 3652, 3653); RANGE (PORT_PROTOCOL_TCP, 3656, 3656); RANGE (PORT_PROTOCOL_TCP, 3658, 3659); RANGE (PORT_PROTOCOL_TCP, 3663, 3663); RANGE (PORT_PROTOCOL_TCP, 3669, 3670); RANGE (PORT_PROTOCOL_TCP, 3672, 3672); RANGE (PORT_PROTOCOL_TCP, 3680, 3681); RANGE (PORT_PROTOCOL_TCP, 3683, 3684); RANGE (PORT_PROTOCOL_TCP, 3689, 3690); RANGE (PORT_PROTOCOL_TCP, 3697, 3697); RANGE (PORT_PROTOCOL_TCP, 3700, 3700); RANGE (PORT_PROTOCOL_TCP, 3703, 3703); RANGE (PORT_PROTOCOL_TCP, 3712, 3712); RANGE (PORT_PROTOCOL_TCP, 3728, 3728); RANGE (PORT_PROTOCOL_TCP, 3731, 3731); RANGE (PORT_PROTOCOL_TCP, 3737, 3737); RANGE (PORT_PROTOCOL_TCP, 3742, 3742); RANGE (PORT_PROTOCOL_TCP, 3749, 3749); RANGE (PORT_PROTOCOL_TCP, 3765, 3766); RANGE (PORT_PROTOCOL_TCP, 3784, 3784); RANGE (PORT_PROTOCOL_TCP, 3787, 3788); RANGE (PORT_PROTOCOL_TCP, 3790, 3790); RANGE (PORT_PROTOCOL_TCP, 3792, 3793); RANGE (PORT_PROTOCOL_TCP, 3795, 3796); RANGE (PORT_PROTOCOL_TCP, 3798, 3801); RANGE (PORT_PROTOCOL_TCP, 3803, 3803); RANGE (PORT_PROTOCOL_TCP, 3806, 3806); RANGE (PORT_PROTOCOL_TCP, 3808, 3814); RANGE (PORT_PROTOCOL_TCP, 3817, 3817); RANGE (PORT_PROTOCOL_TCP, 3820, 3820); RANGE (PORT_PROTOCOL_TCP, 3823, 3828); RANGE (PORT_PROTOCOL_TCP, 3830, 3831); RANGE (PORT_PROTOCOL_TCP, 3837, 3837); RANGE (PORT_PROTOCOL_TCP, 3839, 3839); RANGE (PORT_PROTOCOL_TCP, 3842, 3842); RANGE (PORT_PROTOCOL_TCP, 3846, 3853); RANGE (PORT_PROTOCOL_TCP, 3856, 3856); RANGE (PORT_PROTOCOL_TCP, 3859, 3860); RANGE (PORT_PROTOCOL_TCP, 3863, 3863); RANGE (PORT_PROTOCOL_TCP, 3868, 3872); RANGE (PORT_PROTOCOL_TCP, 3876, 3876); RANGE (PORT_PROTOCOL_TCP, 3878, 3880); RANGE (PORT_PROTOCOL_TCP, 3882, 3882); RANGE (PORT_PROTOCOL_TCP, 3888, 3890); RANGE (PORT_PROTOCOL_TCP, 3897, 3897); RANGE (PORT_PROTOCOL_TCP, 3899, 3899); RANGE (PORT_PROTOCOL_TCP, 3901, 3902); RANGE (PORT_PROTOCOL_TCP, 3904, 3909); RANGE (PORT_PROTOCOL_TCP, 3911, 3911); RANGE (PORT_PROTOCOL_TCP, 3913, 3916); RANGE (PORT_PROTOCOL_TCP, 3918, 3920); RANGE (PORT_PROTOCOL_TCP, 3922, 3923); RANGE (PORT_PROTOCOL_TCP, 3928, 3931); RANGE (PORT_PROTOCOL_TCP, 3935, 3937); RANGE (PORT_PROTOCOL_TCP, 3940, 3941); RANGE (PORT_PROTOCOL_TCP, 3943, 3946); RANGE (PORT_PROTOCOL_TCP, 3948, 3949); RANGE (PORT_PROTOCOL_TCP, 3952, 3952); RANGE (PORT_PROTOCOL_TCP, 3956, 3957); RANGE (PORT_PROTOCOL_TCP, 3961, 3964); RANGE (PORT_PROTOCOL_TCP, 3967, 3969); RANGE (PORT_PROTOCOL_TCP, 3971, 3972); RANGE (PORT_PROTOCOL_TCP, 3975, 3975); RANGE (PORT_PROTOCOL_TCP, 3979, 3983); RANGE (PORT_PROTOCOL_TCP, 3986, 3986); RANGE (PORT_PROTOCOL_TCP, 3989, 4007); RANGE (PORT_PROTOCOL_TCP, 4009, 4010); RANGE (PORT_PROTOCOL_TCP, 4016, 4016); RANGE (PORT_PROTOCOL_TCP, 4020, 4020); RANGE (PORT_PROTOCOL_TCP, 4022, 4022); RANGE (PORT_PROTOCOL_TCP, 4024, 4025); RANGE (PORT_PROTOCOL_TCP, 4029, 4029); RANGE (PORT_PROTOCOL_TCP, 4035, 4036); RANGE (PORT_PROTOCOL_TCP, 4039, 4040); RANGE (PORT_PROTOCOL_TCP, 4045, 4045); RANGE (PORT_PROTOCOL_TCP, 4056, 4056); RANGE (PORT_PROTOCOL_TCP, 4058, 4058); RANGE (PORT_PROTOCOL_TCP, 4065, 4065); RANGE (PORT_PROTOCOL_TCP, 4080, 4080); RANGE (PORT_PROTOCOL_TCP, 4087, 4087); RANGE (PORT_PROTOCOL_TCP, 4090, 4090); RANGE (PORT_PROTOCOL_TCP, 4096, 4096); RANGE (PORT_PROTOCOL_TCP, 4100, 4101); RANGE (PORT_PROTOCOL_TCP, 4111, 4113); RANGE (PORT_PROTOCOL_TCP, 4118, 4121); RANGE (PORT_PROTOCOL_TCP, 4125, 4126); RANGE (PORT_PROTOCOL_TCP, 4129, 4129); RANGE (PORT_PROTOCOL_TCP, 4135, 4135); RANGE (PORT_PROTOCOL_TCP, 4141, 4141); RANGE (PORT_PROTOCOL_TCP, 4143, 4143); RANGE (PORT_PROTOCOL_TCP, 4147, 4147); RANGE (PORT_PROTOCOL_TCP, 4158, 4158); RANGE (PORT_PROTOCOL_TCP, 4161, 4161); RANGE (PORT_PROTOCOL_TCP, 4164, 4164); RANGE (PORT_PROTOCOL_TCP, 4174, 4174); RANGE (PORT_PROTOCOL_TCP, 4190, 4190); RANGE (PORT_PROTOCOL_TCP, 4192, 4192); RANGE (PORT_PROTOCOL_TCP, 4200, 4200); RANGE (PORT_PROTOCOL_TCP, 4206, 4206); RANGE (PORT_PROTOCOL_TCP, 4220, 4220); RANGE (PORT_PROTOCOL_TCP, 4224, 4224); RANGE (PORT_PROTOCOL_TCP, 4234, 4234); RANGE (PORT_PROTOCOL_TCP, 4242, 4242); RANGE (PORT_PROTOCOL_TCP, 4252, 4252); RANGE (PORT_PROTOCOL_TCP, 4262, 4262); RANGE (PORT_PROTOCOL_TCP, 4279, 4279); RANGE (PORT_PROTOCOL_TCP, 4294, 4294); RANGE (PORT_PROTOCOL_TCP, 4297, 4298); RANGE (PORT_PROTOCOL_TCP, 4300, 4300); RANGE (PORT_PROTOCOL_TCP, 4302, 4302); RANGE (PORT_PROTOCOL_TCP, 4321, 4321); RANGE (PORT_PROTOCOL_TCP, 4325, 4325); RANGE (PORT_PROTOCOL_TCP, 4328, 4328); RANGE (PORT_PROTOCOL_TCP, 4333, 4333); RANGE (PORT_PROTOCOL_TCP, 4342, 4343); RANGE (PORT_PROTOCOL_TCP, 4355, 4358); RANGE (PORT_PROTOCOL_TCP, 4369, 4369); RANGE (PORT_PROTOCOL_TCP, 4374, 4376); RANGE (PORT_PROTOCOL_TCP, 4384, 4384); RANGE (PORT_PROTOCOL_TCP, 4388, 4388); RANGE (PORT_PROTOCOL_TCP, 4401, 4401); RANGE (PORT_PROTOCOL_TCP, 4407, 4407); RANGE (PORT_PROTOCOL_TCP, 4414, 4415); RANGE (PORT_PROTOCOL_TCP, 4418, 4418); RANGE (PORT_PROTOCOL_TCP, 4430, 4430); RANGE (PORT_PROTOCOL_TCP, 4433, 4433); RANGE (PORT_PROTOCOL_TCP, 4442, 4447); RANGE (PORT_PROTOCOL_TCP, 4449, 4449); RANGE (PORT_PROTOCOL_TCP, 4454, 4454); RANGE (PORT_PROTOCOL_TCP, 4464, 4464); RANGE (PORT_PROTOCOL_TCP, 4471, 4471); RANGE (PORT_PROTOCOL_TCP, 4476, 4476); RANGE (PORT_PROTOCOL_TCP, 4516, 4517); RANGE (PORT_PROTOCOL_TCP, 4530, 4530); RANGE (PORT_PROTOCOL_TCP, 4534, 4534); RANGE (PORT_PROTOCOL_TCP, 4545, 4545); RANGE (PORT_PROTOCOL_TCP, 4550, 4550); RANGE (PORT_PROTOCOL_TCP, 4555, 4555); RANGE (PORT_PROTOCOL_TCP, 4558, 4559); RANGE (PORT_PROTOCOL_TCP, 4567, 4567); RANGE (PORT_PROTOCOL_TCP, 4570, 4570); RANGE (PORT_PROTOCOL_TCP, 4599, 4602); RANGE (PORT_PROTOCOL_TCP, 4606, 4606); RANGE (PORT_PROTOCOL_TCP, 4609, 4609); RANGE (PORT_PROTOCOL_TCP, 4644, 4644); RANGE (PORT_PROTOCOL_TCP, 4649, 4649); RANGE (PORT_PROTOCOL_TCP, 4658, 4658); RANGE (PORT_PROTOCOL_TCP, 4662, 4662); RANGE (PORT_PROTOCOL_TCP, 4665, 4665); RANGE (PORT_PROTOCOL_TCP, 4687, 4687); RANGE (PORT_PROTOCOL_TCP, 4689, 4689); RANGE (PORT_PROTOCOL_TCP, 4700, 4700); RANGE (PORT_PROTOCOL_TCP, 4712, 4712); RANGE (PORT_PROTOCOL_TCP, 4745, 4745); RANGE (PORT_PROTOCOL_TCP, 4760, 4760); RANGE (PORT_PROTOCOL_TCP, 4767, 4767); RANGE (PORT_PROTOCOL_TCP, 4770, 4771); RANGE (PORT_PROTOCOL_TCP, 4778, 4778); RANGE (PORT_PROTOCOL_TCP, 4793, 4793); RANGE (PORT_PROTOCOL_TCP, 4800, 4800); RANGE (PORT_PROTOCOL_TCP, 4819, 4819); RANGE (PORT_PROTOCOL_TCP, 4848, 4848); RANGE (PORT_PROTOCOL_TCP, 4859, 4860); RANGE (PORT_PROTOCOL_TCP, 4875, 4877); RANGE (PORT_PROTOCOL_TCP, 4881, 4881); RANGE (PORT_PROTOCOL_TCP, 4899, 4900); RANGE (PORT_PROTOCOL_TCP, 4903, 4903); RANGE (PORT_PROTOCOL_TCP, 4912, 4912); RANGE (PORT_PROTOCOL_TCP, 4931, 4931); RANGE (PORT_PROTOCOL_TCP, 4949, 4949); RANGE (PORT_PROTOCOL_TCP, 4998, 5005); RANGE (PORT_PROTOCOL_TCP, 5009, 5017); RANGE (PORT_PROTOCOL_TCP, 5020, 5021); RANGE (PORT_PROTOCOL_TCP, 5023, 5023); RANGE (PORT_PROTOCOL_TCP, 5030, 5030); RANGE (PORT_PROTOCOL_TCP, 5033, 5033); RANGE (PORT_PROTOCOL_TCP, 5040, 5040); RANGE (PORT_PROTOCOL_TCP, 5050, 5055); RANGE (PORT_PROTOCOL_TCP, 5060, 5061); RANGE (PORT_PROTOCOL_TCP, 5063, 5063); RANGE (PORT_PROTOCOL_TCP, 5066, 5066); RANGE (PORT_PROTOCOL_TCP, 5070, 5070); RANGE (PORT_PROTOCOL_TCP, 5074, 5074); RANGE (PORT_PROTOCOL_TCP, 5080, 5081); RANGE (PORT_PROTOCOL_TCP, 5087, 5088); RANGE (PORT_PROTOCOL_TCP, 5090, 5090); RANGE (PORT_PROTOCOL_TCP, 5095, 5096); RANGE (PORT_PROTOCOL_TCP, 5098, 5098); RANGE (PORT_PROTOCOL_TCP, 5100, 5102); RANGE (PORT_PROTOCOL_TCP, 5111, 5111); RANGE (PORT_PROTOCOL_TCP, 5114, 5114); RANGE (PORT_PROTOCOL_TCP, 5120, 5122); RANGE (PORT_PROTOCOL_TCP, 5125, 5125); RANGE (PORT_PROTOCOL_TCP, 5133, 5133); RANGE (PORT_PROTOCOL_TCP, 5137, 5137); RANGE (PORT_PROTOCOL_TCP, 5147, 5147); RANGE (PORT_PROTOCOL_TCP, 5151, 5152); RANGE (PORT_PROTOCOL_TCP, 5190, 5190); RANGE (PORT_PROTOCOL_TCP, 5200, 5202); RANGE (PORT_PROTOCOL_TCP, 5212, 5212); RANGE (PORT_PROTOCOL_TCP, 5214, 5214); RANGE (PORT_PROTOCOL_TCP, 5219, 5219); RANGE (PORT_PROTOCOL_TCP, 5221, 5223); RANGE (PORT_PROTOCOL_TCP, 5225, 5226); RANGE (PORT_PROTOCOL_TCP, 5233, 5235); RANGE (PORT_PROTOCOL_TCP, 5242, 5242); RANGE (PORT_PROTOCOL_TCP, 5250, 5250); RANGE (PORT_PROTOCOL_TCP, 5252, 5252); RANGE (PORT_PROTOCOL_TCP, 5259, 5259); RANGE (PORT_PROTOCOL_TCP, 5261, 5261); RANGE (PORT_PROTOCOL_TCP, 5269, 5269); RANGE (PORT_PROTOCOL_TCP, 5279, 5280); RANGE (PORT_PROTOCOL_TCP, 5291, 5291); RANGE (PORT_PROTOCOL_TCP, 5298, 5298); RANGE (PORT_PROTOCOL_TCP, 5339, 5339); RANGE (PORT_PROTOCOL_TCP, 5347, 5347); RANGE (PORT_PROTOCOL_TCP, 5353, 5353); RANGE (PORT_PROTOCOL_TCP, 5357, 5357); RANGE (PORT_PROTOCOL_TCP, 5370, 5370); RANGE (PORT_PROTOCOL_TCP, 5377, 5377); RANGE (PORT_PROTOCOL_TCP, 5405, 5405); RANGE (PORT_PROTOCOL_TCP, 5414, 5414); RANGE (PORT_PROTOCOL_TCP, 5423, 5423); RANGE (PORT_PROTOCOL_TCP, 5431, 5433); RANGE (PORT_PROTOCOL_TCP, 5440, 5442); RANGE (PORT_PROTOCOL_TCP, 5444, 5444); RANGE (PORT_PROTOCOL_TCP, 5457, 5458); RANGE (PORT_PROTOCOL_TCP, 5473, 5473); RANGE (PORT_PROTOCOL_TCP, 5475, 5475); RANGE (PORT_PROTOCOL_TCP, 5500, 5502); RANGE (PORT_PROTOCOL_TCP, 5510, 5510); RANGE (PORT_PROTOCOL_TCP, 5520, 5520); RANGE (PORT_PROTOCOL_TCP, 5544, 5544); RANGE (PORT_PROTOCOL_TCP, 5550, 5550); RANGE (PORT_PROTOCOL_TCP, 5552, 5555); RANGE (PORT_PROTOCOL_TCP, 5557, 5557); RANGE (PORT_PROTOCOL_TCP, 5560, 5560); RANGE (PORT_PROTOCOL_TCP, 5566, 5566); RANGE (PORT_PROTOCOL_TCP, 5631, 5631); RANGE (PORT_PROTOCOL_TCP, 5633, 5633); RANGE (PORT_PROTOCOL_TCP, 5666, 5666); RANGE (PORT_PROTOCOL_TCP, 5678, 5680); RANGE (PORT_PROTOCOL_TCP, 5718, 5718); RANGE (PORT_PROTOCOL_TCP, 5730, 5730); RANGE (PORT_PROTOCOL_TCP, 5800, 5803); RANGE (PORT_PROTOCOL_TCP, 5807, 5807); RANGE (PORT_PROTOCOL_TCP, 5810, 5812); RANGE (PORT_PROTOCOL_TCP, 5815, 5815); RANGE (PORT_PROTOCOL_TCP, 5818, 5818); RANGE (PORT_PROTOCOL_TCP, 5822, 5823); RANGE (PORT_PROTOCOL_TCP, 5825, 5825); RANGE (PORT_PROTOCOL_TCP, 5850, 5850); RANGE (PORT_PROTOCOL_TCP, 5859, 5859); RANGE (PORT_PROTOCOL_TCP, 5862, 5862); RANGE (PORT_PROTOCOL_TCP, 5868, 5869); RANGE (PORT_PROTOCOL_TCP, 5877, 5877); RANGE (PORT_PROTOCOL_TCP, 5899, 5907); RANGE (PORT_PROTOCOL_TCP, 5909, 5911); RANGE (PORT_PROTOCOL_TCP, 5914, 5915); RANGE (PORT_PROTOCOL_TCP, 5918, 5918); RANGE (PORT_PROTOCOL_TCP, 5922, 5922); RANGE (PORT_PROTOCOL_TCP, 5925, 5925); RANGE (PORT_PROTOCOL_TCP, 5938, 5938); RANGE (PORT_PROTOCOL_TCP, 5940, 5940); RANGE (PORT_PROTOCOL_TCP, 5950, 5950); RANGE (PORT_PROTOCOL_TCP, 5952, 5952); RANGE (PORT_PROTOCOL_TCP, 5959, 5963); RANGE (PORT_PROTOCOL_TCP, 5968, 5968); RANGE (PORT_PROTOCOL_TCP, 5981, 5981); RANGE (PORT_PROTOCOL_TCP, 5987, 5989); RANGE (PORT_PROTOCOL_TCP, 5998, 6009); RANGE (PORT_PROTOCOL_TCP, 6017, 6017); RANGE (PORT_PROTOCOL_TCP, 6025, 6025); RANGE (PORT_PROTOCOL_TCP, 6050, 6051); RANGE (PORT_PROTOCOL_TCP, 6059, 6060); RANGE (PORT_PROTOCOL_TCP, 6068, 6068); RANGE (PORT_PROTOCOL_TCP, 6100, 6101); RANGE (PORT_PROTOCOL_TCP, 6103, 6103); RANGE (PORT_PROTOCOL_TCP, 6106, 6106); RANGE (PORT_PROTOCOL_TCP, 6112, 6112); RANGE (PORT_PROTOCOL_TCP, 6123, 6123); RANGE (PORT_PROTOCOL_TCP, 6129, 6129); RANGE (PORT_PROTOCOL_TCP, 6156, 6156); RANGE (PORT_PROTOCOL_TCP, 6203, 6203); RANGE (PORT_PROTOCOL_TCP, 6222, 6222); RANGE (PORT_PROTOCOL_TCP, 6247, 6247); RANGE (PORT_PROTOCOL_TCP, 6346, 6346); RANGE (PORT_PROTOCOL_TCP, 6389, 6389); RANGE (PORT_PROTOCOL_TCP, 6481, 6481); RANGE (PORT_PROTOCOL_TCP, 6500, 6500); RANGE (PORT_PROTOCOL_TCP, 6502, 6502); RANGE (PORT_PROTOCOL_TCP, 6504, 6504); RANGE (PORT_PROTOCOL_TCP, 6510, 6510); RANGE (PORT_PROTOCOL_TCP, 6520, 6520); RANGE (PORT_PROTOCOL_TCP, 6543, 6543); RANGE (PORT_PROTOCOL_TCP, 6547, 6547); RANGE (PORT_PROTOCOL_TCP, 6550, 6550); RANGE (PORT_PROTOCOL_TCP, 6565, 6567); RANGE (PORT_PROTOCOL_TCP, 6580, 6580); RANGE (PORT_PROTOCOL_TCP, 6600, 6600); RANGE (PORT_PROTOCOL_TCP, 6646, 6646); RANGE (PORT_PROTOCOL_TCP, 6662, 6662); RANGE (PORT_PROTOCOL_TCP, 6666, 6670); RANGE (PORT_PROTOCOL_TCP, 6689, 6689); RANGE (PORT_PROTOCOL_TCP, 6692, 6692); RANGE (PORT_PROTOCOL_TCP, 6699, 6699); RANGE (PORT_PROTOCOL_TCP, 6711, 6711); RANGE (PORT_PROTOCOL_TCP, 6732, 6732); RANGE (PORT_PROTOCOL_TCP, 6779, 6779); RANGE (PORT_PROTOCOL_TCP, 6788, 6789); RANGE (PORT_PROTOCOL_TCP, 6792, 6792); RANGE (PORT_PROTOCOL_TCP, 6839, 6839); RANGE (PORT_PROTOCOL_TCP, 6881, 6881); RANGE (PORT_PROTOCOL_TCP, 6896, 6896); RANGE (PORT_PROTOCOL_TCP, 6901, 6901); RANGE (PORT_PROTOCOL_TCP, 6969, 6969); RANGE (PORT_PROTOCOL_TCP, 7000, 7004); RANGE (PORT_PROTOCOL_TCP, 7007, 7007); RANGE (PORT_PROTOCOL_TCP, 7010, 7010); RANGE (PORT_PROTOCOL_TCP, 7019, 7019); RANGE (PORT_PROTOCOL_TCP, 7024, 7025); RANGE (PORT_PROTOCOL_TCP, 7050, 7051); RANGE (PORT_PROTOCOL_TCP, 7070, 7070); RANGE (PORT_PROTOCOL_TCP, 7080, 7080); RANGE (PORT_PROTOCOL_TCP, 7100, 7100); RANGE (PORT_PROTOCOL_TCP, 7103, 7103); RANGE (PORT_PROTOCOL_TCP, 7106, 7106); RANGE (PORT_PROTOCOL_TCP, 7123, 7123); RANGE (PORT_PROTOCOL_TCP, 7200, 7201); RANGE (PORT_PROTOCOL_TCP, 7241, 7241); RANGE (PORT_PROTOCOL_TCP, 7272, 7272); RANGE (PORT_PROTOCOL_TCP, 7278, 7278); RANGE (PORT_PROTOCOL_TCP, 7281, 7281); RANGE (PORT_PROTOCOL_TCP, 7402, 7402); RANGE (PORT_PROTOCOL_TCP, 7435, 7435); RANGE (PORT_PROTOCOL_TCP, 7438, 7438); RANGE (PORT_PROTOCOL_TCP, 7443, 7443); RANGE (PORT_PROTOCOL_TCP, 7496, 7496); RANGE (PORT_PROTOCOL_TCP, 7512, 7512); RANGE (PORT_PROTOCOL_TCP, 7625, 7625); RANGE (PORT_PROTOCOL_TCP, 7627, 7627); RANGE (PORT_PROTOCOL_TCP, 7676, 7676); RANGE (PORT_PROTOCOL_TCP, 7725, 7725); RANGE (PORT_PROTOCOL_TCP, 7741, 7741); RANGE (PORT_PROTOCOL_TCP, 7744, 7744); RANGE (PORT_PROTOCOL_TCP, 7749, 7749); RANGE (PORT_PROTOCOL_TCP, 7770, 7770); RANGE (PORT_PROTOCOL_TCP, 7777, 7778); RANGE (PORT_PROTOCOL_TCP, 7800, 7800); RANGE (PORT_PROTOCOL_TCP, 7878, 7878); RANGE (PORT_PROTOCOL_TCP, 7900, 7900); RANGE (PORT_PROTOCOL_TCP, 7911, 7911); RANGE (PORT_PROTOCOL_TCP, 7913, 7913); RANGE (PORT_PROTOCOL_TCP, 7920, 7921); RANGE (PORT_PROTOCOL_TCP, 7929, 7929); RANGE (PORT_PROTOCOL_TCP, 7937, 7938); RANGE (PORT_PROTOCOL_TCP, 7999, 8002); RANGE (PORT_PROTOCOL_TCP, 8007, 8011); RANGE (PORT_PROTOCOL_TCP, 8015, 8016); RANGE (PORT_PROTOCOL_TCP, 8019, 8019); RANGE (PORT_PROTOCOL_TCP, 8021, 8022); RANGE (PORT_PROTOCOL_TCP, 8031, 8031); RANGE (PORT_PROTOCOL_TCP, 8042, 8042); RANGE (PORT_PROTOCOL_TCP, 8045, 8045); RANGE (PORT_PROTOCOL_TCP, 8050, 8050); RANGE (PORT_PROTOCOL_TCP, 8080, 8090); RANGE (PORT_PROTOCOL_TCP, 8093, 8093); RANGE (PORT_PROTOCOL_TCP, 8095, 8095); RANGE (PORT_PROTOCOL_TCP, 8097, 8100); RANGE (PORT_PROTOCOL_TCP, 8118, 8118); RANGE (PORT_PROTOCOL_TCP, 8180, 8181); RANGE (PORT_PROTOCOL_TCP, 8189, 8189); RANGE (PORT_PROTOCOL_TCP, 8192, 8194); RANGE (PORT_PROTOCOL_TCP, 8200, 8200); RANGE (PORT_PROTOCOL_TCP, 8222, 8222); RANGE (PORT_PROTOCOL_TCP, 8254, 8254); RANGE (PORT_PROTOCOL_TCP, 8290, 8294); RANGE (PORT_PROTOCOL_TCP, 8300, 8300); RANGE (PORT_PROTOCOL_TCP, 8333, 8333); RANGE (PORT_PROTOCOL_TCP, 8383, 8383); RANGE (PORT_PROTOCOL_TCP, 8385, 8385); RANGE (PORT_PROTOCOL_TCP, 8400, 8400); RANGE (PORT_PROTOCOL_TCP, 8402, 8402); RANGE (PORT_PROTOCOL_TCP, 8443, 8443); RANGE (PORT_PROTOCOL_TCP, 8481, 8481); RANGE (PORT_PROTOCOL_TCP, 8500, 8500); RANGE (PORT_PROTOCOL_TCP, 8540, 8540); RANGE (PORT_PROTOCOL_TCP, 8600, 8600); RANGE (PORT_PROTOCOL_TCP, 8648, 8649); RANGE (PORT_PROTOCOL_TCP, 8651, 8652); RANGE (PORT_PROTOCOL_TCP, 8654, 8654); RANGE (PORT_PROTOCOL_TCP, 8675, 8676); RANGE (PORT_PROTOCOL_TCP, 8686, 8686); RANGE (PORT_PROTOCOL_TCP, 8701, 8701); RANGE (PORT_PROTOCOL_TCP, 8765, 8766); RANGE (PORT_PROTOCOL_TCP, 8800, 8800); RANGE (PORT_PROTOCOL_TCP, 8873, 8873); RANGE (PORT_PROTOCOL_TCP, 8877, 8877); RANGE (PORT_PROTOCOL_TCP, 8888, 8889); RANGE (PORT_PROTOCOL_TCP, 8899, 8899); RANGE (PORT_PROTOCOL_TCP, 8987, 8987); RANGE (PORT_PROTOCOL_TCP, 8994, 8994); RANGE (PORT_PROTOCOL_TCP, 8996, 8996); RANGE (PORT_PROTOCOL_TCP, 9000, 9003); RANGE (PORT_PROTOCOL_TCP, 9009, 9011); RANGE (PORT_PROTOCOL_TCP, 9040, 9040); RANGE (PORT_PROTOCOL_TCP, 9050, 9050); RANGE (PORT_PROTOCOL_TCP, 9071, 9071); RANGE (PORT_PROTOCOL_TCP, 9080, 9081); RANGE (PORT_PROTOCOL_TCP, 9090, 9091); RANGE (PORT_PROTOCOL_TCP, 9098, 9103); RANGE (PORT_PROTOCOL_TCP, 9110, 9111); RANGE (PORT_PROTOCOL_TCP, 9152, 9152); RANGE (PORT_PROTOCOL_TCP, 9191, 9191); RANGE (PORT_PROTOCOL_TCP, 9197, 9198); RANGE (PORT_PROTOCOL_TCP, 9200, 9200); RANGE (PORT_PROTOCOL_TCP, 9207, 9207); RANGE (PORT_PROTOCOL_TCP, 9220, 9220); RANGE (PORT_PROTOCOL_TCP, 9290, 9290); RANGE (PORT_PROTOCOL_TCP, 9409, 9409); RANGE (PORT_PROTOCOL_TCP, 9415, 9415); RANGE (PORT_PROTOCOL_TCP, 9418, 9418); RANGE (PORT_PROTOCOL_TCP, 9443, 9444); RANGE (PORT_PROTOCOL_TCP, 9485, 9485); RANGE (PORT_PROTOCOL_TCP, 9500, 9503); RANGE (PORT_PROTOCOL_TCP, 9535, 9535); RANGE (PORT_PROTOCOL_TCP, 9575, 9575); RANGE (PORT_PROTOCOL_TCP, 9593, 9595); RANGE (PORT_PROTOCOL_TCP, 9600, 9600); RANGE (PORT_PROTOCOL_TCP, 9618, 9618); RANGE (PORT_PROTOCOL_TCP, 9621, 9621); RANGE (PORT_PROTOCOL_TCP, 9643, 9643); RANGE (PORT_PROTOCOL_TCP, 9666, 9666); RANGE (PORT_PROTOCOL_TCP, 9673, 9673); RANGE (PORT_PROTOCOL_TCP, 9815, 9815); RANGE (PORT_PROTOCOL_TCP, 9876, 9878); RANGE (PORT_PROTOCOL_TCP, 9898, 9898); RANGE (PORT_PROTOCOL_TCP, 9900, 9900); RANGE (PORT_PROTOCOL_TCP, 9914, 9914); RANGE (PORT_PROTOCOL_TCP, 9917, 9917); RANGE (PORT_PROTOCOL_TCP, 9929, 9929); RANGE (PORT_PROTOCOL_TCP, 9941, 9941); RANGE (PORT_PROTOCOL_TCP, 9943, 9944); RANGE (PORT_PROTOCOL_TCP, 9968, 9968); RANGE (PORT_PROTOCOL_TCP, 9988, 9988); RANGE (PORT_PROTOCOL_TCP, 9992, 9992); RANGE (PORT_PROTOCOL_TCP, 9998, 10005); RANGE (PORT_PROTOCOL_TCP, 10008, 10012); RANGE (PORT_PROTOCOL_TCP, 10022, 10025); RANGE (PORT_PROTOCOL_TCP, 10034, 10034); RANGE (PORT_PROTOCOL_TCP, 10058, 10058); RANGE (PORT_PROTOCOL_TCP, 10082, 10083); RANGE (PORT_PROTOCOL_TCP, 10160, 10160); RANGE (PORT_PROTOCOL_TCP, 10180, 10180); RANGE (PORT_PROTOCOL_TCP, 10215, 10215); RANGE (PORT_PROTOCOL_TCP, 10243, 10243); RANGE (PORT_PROTOCOL_TCP, 10566, 10566); RANGE (PORT_PROTOCOL_TCP, 10616, 10617); RANGE (PORT_PROTOCOL_TCP, 10621, 10621); RANGE (PORT_PROTOCOL_TCP, 10626, 10626); RANGE (PORT_PROTOCOL_TCP, 10628, 10629); RANGE (PORT_PROTOCOL_TCP, 10778, 10778); RANGE (PORT_PROTOCOL_TCP, 10873, 10873); RANGE (PORT_PROTOCOL_TCP, 11110, 11111); RANGE (PORT_PROTOCOL_TCP, 11967, 11967); RANGE (PORT_PROTOCOL_TCP, 12000, 12000); RANGE (PORT_PROTOCOL_TCP, 12006, 12006); RANGE (PORT_PROTOCOL_TCP, 12021, 12021); RANGE (PORT_PROTOCOL_TCP, 12059, 12059); RANGE (PORT_PROTOCOL_TCP, 12174, 12174); RANGE (PORT_PROTOCOL_TCP, 12215, 12215); RANGE (PORT_PROTOCOL_TCP, 12262, 12262); RANGE (PORT_PROTOCOL_TCP, 12265, 12265); RANGE (PORT_PROTOCOL_TCP, 12345, 12346); RANGE (PORT_PROTOCOL_TCP, 12380, 12380); RANGE (PORT_PROTOCOL_TCP, 12452, 12452); RANGE (PORT_PROTOCOL_TCP, 13456, 13456); RANGE (PORT_PROTOCOL_TCP, 13722, 13722); RANGE (PORT_PROTOCOL_TCP, 13724, 13724); RANGE (PORT_PROTOCOL_TCP, 13782, 13783); RANGE (PORT_PROTOCOL_TCP, 14000, 14000); RANGE (PORT_PROTOCOL_TCP, 14238, 14238); RANGE (PORT_PROTOCOL_TCP, 14441, 14442); RANGE (PORT_PROTOCOL_TCP, 15000, 15004); RANGE (PORT_PROTOCOL_TCP, 15402, 15402); RANGE (PORT_PROTOCOL_TCP, 15660, 15660); RANGE (PORT_PROTOCOL_TCP, 15742, 15742); RANGE (PORT_PROTOCOL_TCP, 16000, 16001); RANGE (PORT_PROTOCOL_TCP, 16012, 16012); RANGE (PORT_PROTOCOL_TCP, 16016, 16016); RANGE (PORT_PROTOCOL_TCP, 16018, 16018); RANGE (PORT_PROTOCOL_TCP, 16080, 16080); RANGE (PORT_PROTOCOL_TCP, 16113, 16113); RANGE (PORT_PROTOCOL_TCP, 16705, 16705); RANGE (PORT_PROTOCOL_TCP, 16800, 16800); RANGE (PORT_PROTOCOL_TCP, 16851, 16851); RANGE (PORT_PROTOCOL_TCP, 16992, 16993); RANGE (PORT_PROTOCOL_TCP, 17595, 17595); RANGE (PORT_PROTOCOL_TCP, 17877, 17877); RANGE (PORT_PROTOCOL_TCP, 17988, 17988); RANGE (PORT_PROTOCOL_TCP, 18000, 18000); RANGE (PORT_PROTOCOL_TCP, 18018, 18018); RANGE (PORT_PROTOCOL_TCP, 18040, 18040); RANGE (PORT_PROTOCOL_TCP, 18101, 18101); RANGE (PORT_PROTOCOL_TCP, 18264, 18264); RANGE (PORT_PROTOCOL_TCP, 18988, 18988); RANGE (PORT_PROTOCOL_TCP, 19101, 19101); RANGE (PORT_PROTOCOL_TCP, 19283, 19283); RANGE (PORT_PROTOCOL_TCP, 19315, 19315); RANGE (PORT_PROTOCOL_TCP, 19350, 19350); RANGE (PORT_PROTOCOL_TCP, 19780, 19780); RANGE (PORT_PROTOCOL_TCP, 19801, 19801); RANGE (PORT_PROTOCOL_TCP, 19842, 19842); RANGE (PORT_PROTOCOL_TCP, 19900, 19900); RANGE (PORT_PROTOCOL_TCP, 20000, 20000); RANGE (PORT_PROTOCOL_TCP, 20002, 20002); RANGE (PORT_PROTOCOL_TCP, 20005, 20005); RANGE (PORT_PROTOCOL_TCP, 20031, 20031); RANGE (PORT_PROTOCOL_TCP, 20221, 20222); RANGE (PORT_PROTOCOL_TCP, 20828, 20828); RANGE (PORT_PROTOCOL_TCP, 21571, 21571); RANGE (PORT_PROTOCOL_TCP, 21792, 21792); RANGE (PORT_PROTOCOL_TCP, 22222, 22222); RANGE (PORT_PROTOCOL_TCP, 22939, 22939); RANGE (PORT_PROTOCOL_TCP, 23052, 23052); RANGE (PORT_PROTOCOL_TCP, 23502, 23502); RANGE (PORT_PROTOCOL_TCP, 23796, 23796); RANGE (PORT_PROTOCOL_TCP, 24444, 24444); RANGE (PORT_PROTOCOL_TCP, 24800, 24800); RANGE (PORT_PROTOCOL_TCP, 25734, 25735); RANGE (PORT_PROTOCOL_TCP, 26000, 26000); RANGE (PORT_PROTOCOL_TCP, 26214, 26214); RANGE (PORT_PROTOCOL_TCP, 26470, 26470); RANGE (PORT_PROTOCOL_TCP, 27000, 27000); RANGE (PORT_PROTOCOL_TCP, 27352, 27353); RANGE (PORT_PROTOCOL_TCP, 27355, 27357); RANGE (PORT_PROTOCOL_TCP, 27715, 27715); RANGE (PORT_PROTOCOL_TCP, 28201, 28201); RANGE (PORT_PROTOCOL_TCP, 28211, 28211); RANGE (PORT_PROTOCOL_TCP, 29672, 29672); RANGE (PORT_PROTOCOL_TCP, 29831, 29831); RANGE (PORT_PROTOCOL_TCP, 30000, 30000); RANGE (PORT_PROTOCOL_TCP, 30005, 30005); RANGE (PORT_PROTOCOL_TCP, 30704, 30704); RANGE (PORT_PROTOCOL_TCP, 30718, 30718); RANGE (PORT_PROTOCOL_TCP, 30951, 30951); RANGE (PORT_PROTOCOL_TCP, 31038, 31038); RANGE (PORT_PROTOCOL_TCP, 31337, 31337); RANGE (PORT_PROTOCOL_TCP, 31727, 31727); RANGE (PORT_PROTOCOL_TCP, 32768, 32785); RANGE (PORT_PROTOCOL_TCP, 32791, 32792); RANGE (PORT_PROTOCOL_TCP, 32803, 32803); RANGE (PORT_PROTOCOL_TCP, 32816, 32816); RANGE (PORT_PROTOCOL_TCP, 32822, 32822); RANGE (PORT_PROTOCOL_TCP, 32835, 32835); RANGE (PORT_PROTOCOL_TCP, 33354, 33354); RANGE (PORT_PROTOCOL_TCP, 33453, 33453); RANGE (PORT_PROTOCOL_TCP, 33554, 33554); RANGE (PORT_PROTOCOL_TCP, 33899, 33899); RANGE (PORT_PROTOCOL_TCP, 34571, 34573); RANGE (PORT_PROTOCOL_TCP, 35500, 35500); RANGE (PORT_PROTOCOL_TCP, 35513, 35513); RANGE (PORT_PROTOCOL_TCP, 37839, 37839); RANGE (PORT_PROTOCOL_TCP, 38037, 38037); RANGE (PORT_PROTOCOL_TCP, 38185, 38185); RANGE (PORT_PROTOCOL_TCP, 38188, 38188); RANGE (PORT_PROTOCOL_TCP, 38292, 38292); RANGE (PORT_PROTOCOL_TCP, 39136, 39136); RANGE (PORT_PROTOCOL_TCP, 39376, 39376); RANGE (PORT_PROTOCOL_TCP, 39659, 39659); RANGE (PORT_PROTOCOL_TCP, 40000, 40000); RANGE (PORT_PROTOCOL_TCP, 40193, 40193); RANGE (PORT_PROTOCOL_TCP, 40811, 40811); RANGE (PORT_PROTOCOL_TCP, 40911, 40911); RANGE (PORT_PROTOCOL_TCP, 41064, 41064); RANGE (PORT_PROTOCOL_TCP, 41511, 41511); RANGE (PORT_PROTOCOL_TCP, 41523, 41523); RANGE (PORT_PROTOCOL_TCP, 42510, 42510); RANGE (PORT_PROTOCOL_TCP, 44176, 44176); RANGE (PORT_PROTOCOL_TCP, 44334, 44334); RANGE (PORT_PROTOCOL_TCP, 44442, 44443); RANGE (PORT_PROTOCOL_TCP, 44501, 44501); RANGE (PORT_PROTOCOL_TCP, 44709, 44709); RANGE (PORT_PROTOCOL_TCP, 45100, 45100); RANGE (PORT_PROTOCOL_TCP, 46200, 46200); RANGE (PORT_PROTOCOL_TCP, 46996, 46996); RANGE (PORT_PROTOCOL_TCP, 47544, 47544); RANGE (PORT_PROTOCOL_TCP, 48080, 48080); RANGE (PORT_PROTOCOL_TCP, 49152, 49161); RANGE (PORT_PROTOCOL_TCP, 49163, 49165); RANGE (PORT_PROTOCOL_TCP, 49167, 49168); RANGE (PORT_PROTOCOL_TCP, 49171, 49171); RANGE (PORT_PROTOCOL_TCP, 49175, 49176); RANGE (PORT_PROTOCOL_TCP, 49186, 49186); RANGE (PORT_PROTOCOL_TCP, 49195, 49195); RANGE (PORT_PROTOCOL_TCP, 49236, 49236); RANGE (PORT_PROTOCOL_TCP, 49400, 49401); RANGE (PORT_PROTOCOL_TCP, 49999, 50003); RANGE (PORT_PROTOCOL_TCP, 50006, 50006); RANGE (PORT_PROTOCOL_TCP, 50050, 50050); RANGE (PORT_PROTOCOL_TCP, 50300, 50300); RANGE (PORT_PROTOCOL_TCP, 50389, 50389); RANGE (PORT_PROTOCOL_TCP, 50500, 50500); RANGE (PORT_PROTOCOL_TCP, 50636, 50636); RANGE (PORT_PROTOCOL_TCP, 50800, 50800); RANGE (PORT_PROTOCOL_TCP, 51103, 51103); RANGE (PORT_PROTOCOL_TCP, 51191, 51191); RANGE (PORT_PROTOCOL_TCP, 51413, 51413); RANGE (PORT_PROTOCOL_TCP, 51493, 51493); RANGE (PORT_PROTOCOL_TCP, 52660, 52660); RANGE (PORT_PROTOCOL_TCP, 52673, 52673); RANGE (PORT_PROTOCOL_TCP, 52710, 52710); RANGE (PORT_PROTOCOL_TCP, 52735, 52735); RANGE (PORT_PROTOCOL_TCP, 52822, 52822); RANGE (PORT_PROTOCOL_TCP, 52847, 52851); RANGE (PORT_PROTOCOL_TCP, 52853, 52853); RANGE (PORT_PROTOCOL_TCP, 52869, 52869); RANGE (PORT_PROTOCOL_TCP, 53211, 53211); RANGE (PORT_PROTOCOL_TCP, 53313, 53314); RANGE (PORT_PROTOCOL_TCP, 53535, 53535); RANGE (PORT_PROTOCOL_TCP, 54045, 54045); RANGE (PORT_PROTOCOL_TCP, 54328, 54328); RANGE (PORT_PROTOCOL_TCP, 55020, 55020); RANGE (PORT_PROTOCOL_TCP, 55055, 55056); RANGE (PORT_PROTOCOL_TCP, 55555, 55555); RANGE (PORT_PROTOCOL_TCP, 55576, 55576); RANGE (PORT_PROTOCOL_TCP, 55600, 55600); RANGE (PORT_PROTOCOL_TCP, 56737, 56738); RANGE (PORT_PROTOCOL_TCP, 57294, 57294); RANGE (PORT_PROTOCOL_TCP, 57665, 57665); RANGE (PORT_PROTOCOL_TCP, 57797, 57797); RANGE (PORT_PROTOCOL_TCP, 58001, 58002); RANGE (PORT_PROTOCOL_TCP, 58080, 58080); RANGE (PORT_PROTOCOL_TCP, 58630, 58630); RANGE (PORT_PROTOCOL_TCP, 58632, 58632); RANGE (PORT_PROTOCOL_TCP, 58838, 58838); RANGE (PORT_PROTOCOL_TCP, 59110, 59110); RANGE (PORT_PROTOCOL_TCP, 59200, 59202); RANGE (PORT_PROTOCOL_TCP, 60020, 60020); RANGE (PORT_PROTOCOL_TCP, 60123, 60123); RANGE (PORT_PROTOCOL_TCP, 60146, 60146); RANGE (PORT_PROTOCOL_TCP, 60443, 60443); RANGE (PORT_PROTOCOL_TCP, 60642, 60642); RANGE (PORT_PROTOCOL_TCP, 61532, 61532); RANGE (PORT_PROTOCOL_TCP, 61613, 61613); RANGE (PORT_PROTOCOL_TCP, 61900, 61900); RANGE (PORT_PROTOCOL_TCP, 62078, 62078); RANGE (PORT_PROTOCOL_TCP, 63331, 63331); RANGE (PORT_PROTOCOL_TCP, 64623, 64623); RANGE (PORT_PROTOCOL_TCP, 64680, 64680); RANGE (PORT_PROTOCOL_TCP, 65000, 65000); RANGE (PORT_PROTOCOL_TCP, 65129, 65129); RANGE (PORT_PROTOCOL_TCP, 65310, 65310); RANGE (PORT_PROTOCOL_UDP, 7, 7); RANGE (PORT_PROTOCOL_UDP, 9, 9); RANGE (PORT_PROTOCOL_UDP, 17, 17); RANGE (PORT_PROTOCOL_UDP, 19, 19); RANGE (PORT_PROTOCOL_UDP, 49, 49); RANGE (PORT_PROTOCOL_UDP, 53, 53); RANGE (PORT_PROTOCOL_UDP, 67, 69); RANGE (PORT_PROTOCOL_UDP, 80, 80); RANGE (PORT_PROTOCOL_UDP, 88, 88); RANGE (PORT_PROTOCOL_UDP, 111, 111); RANGE (PORT_PROTOCOL_UDP, 120, 120); RANGE (PORT_PROTOCOL_UDP, 123, 123); RANGE (PORT_PROTOCOL_UDP, 135, 139); RANGE (PORT_PROTOCOL_UDP, 158, 158); RANGE (PORT_PROTOCOL_UDP, 161, 162); RANGE (PORT_PROTOCOL_UDP, 177, 177); RANGE (PORT_PROTOCOL_UDP, 427, 427); RANGE (PORT_PROTOCOL_UDP, 443, 443); RANGE (PORT_PROTOCOL_UDP, 445, 445); RANGE (PORT_PROTOCOL_UDP, 497, 497); RANGE (PORT_PROTOCOL_UDP, 500, 500); RANGE (PORT_PROTOCOL_UDP, 514, 515); RANGE (PORT_PROTOCOL_UDP, 518, 518); RANGE (PORT_PROTOCOL_UDP, 520, 520); RANGE (PORT_PROTOCOL_UDP, 593, 593); RANGE (PORT_PROTOCOL_UDP, 623, 623); RANGE (PORT_PROTOCOL_UDP, 626, 626); RANGE (PORT_PROTOCOL_UDP, 631, 631); RANGE (PORT_PROTOCOL_UDP, 996, 999); RANGE (PORT_PROTOCOL_UDP, 1022, 1023); RANGE (PORT_PROTOCOL_UDP, 1025, 1030); RANGE (PORT_PROTOCOL_UDP, 1433, 1434); RANGE (PORT_PROTOCOL_UDP, 1645, 1646); RANGE (PORT_PROTOCOL_UDP, 1701, 1701); RANGE (PORT_PROTOCOL_UDP, 1718, 1719); RANGE (PORT_PROTOCOL_UDP, 1812, 1813); RANGE (PORT_PROTOCOL_UDP, 1900, 1900); RANGE (PORT_PROTOCOL_UDP, 2000, 2000); RANGE (PORT_PROTOCOL_UDP, 2048, 2049); RANGE (PORT_PROTOCOL_UDP, 2222, 2223); RANGE (PORT_PROTOCOL_UDP, 3283, 3283); RANGE (PORT_PROTOCOL_UDP, 3456, 3456); RANGE (PORT_PROTOCOL_UDP, 3703, 3703); RANGE (PORT_PROTOCOL_UDP, 4444, 4444); RANGE (PORT_PROTOCOL_UDP, 4500, 4500); RANGE (PORT_PROTOCOL_UDP, 5000, 5000); RANGE (PORT_PROTOCOL_UDP, 5060, 5060); RANGE (PORT_PROTOCOL_UDP, 5353, 5353); RANGE (PORT_PROTOCOL_UDP, 5632, 5632); RANGE (PORT_PROTOCOL_UDP, 9200, 9200); RANGE (PORT_PROTOCOL_UDP, 10000, 10000); RANGE (PORT_PROTOCOL_UDP, 17185, 17185); RANGE (PORT_PROTOCOL_UDP, 20031, 20031); RANGE (PORT_PROTOCOL_UDP, 30718, 30718); RANGE (PORT_PROTOCOL_UDP, 31337, 31337); RANGE (PORT_PROTOCOL_UDP, 32768, 32769); RANGE (PORT_PROTOCOL_UDP, 32771, 32771); RANGE (PORT_PROTOCOL_UDP, 32815, 32815); RANGE (PORT_PROTOCOL_UDP, 33281, 33281); RANGE (PORT_PROTOCOL_UDP, 49152, 49154); RANGE (PORT_PROTOCOL_UDP, 49156, 49156); RANGE (PORT_PROTOCOL_UDP, 49181, 49182); RANGE (PORT_PROTOCOL_UDP, 49185, 49186); RANGE (PORT_PROTOCOL_UDP, 49188, 49188); RANGE (PORT_PROTOCOL_UDP, 49190, 49194); RANGE (PORT_PROTOCOL_UDP, 49200, 49201); sql ("END TRANSACTION"); } openvas-manager-6.0.9/src/pwpolicy.conf000644 001751 001751 00000006236 12557600615 021203 0ustar00michaelmichael000000 000000 # pwpolicy.conf -*- coding: utf-8 -*- # # This is an example for a pattern file used to validate passwords. # Passwords matching an entry in this file are considered weak and # will be rejected. # # The file is line based with comment lines beginning on the *first* # position with a '#' and followed by at least one white space. Empty # lines and lines with only white space are ignored. The other lines # may either be verbatim patterns and match as they are (trailing # spaces are ignored) or Perl compatible regular expressions (pcre) # indicated by a '/' in the first column and terminated by another '/' # or end of line. To reverse the meaning of a regular expression # prefix it with an exclamation mark like this: # # !/^.{6,}$/ # # This will reject a passphrase with less than 6 characters. All # comparisons are case insensitive; utf-8 encoding must be used. A # few processing instructions are supported: # # #+desc[:] A string describing the next pattern # # This is used to return meaningful error messages. To end a group of # pattern with the same description either a new "#+desc:" line may be # used or the instruction: # # #+nodesc # # To include a list of simple pattern use: # # #+search[:] FILENAME # # Note that this is a simple linear search and stops at the first # match. Comments are not allowed in that file. A line in the # dictionary may not be longer than 255 characters. # # To perform checks on the username/password combination, you should # use: # # #+username # # Currently this checks whether the password matches or is included in # the password. It may eventually be extended to further tests. ############################ # This is a example file where all lines are explicitely prefixed with # a additional "#" to comment out anything. # On your own decision you may activiate policies and modify them. # Be aware: By default any password is allowed. ############################ ## Let's start with a simple test ##+desc: Too short (at least 8 characters are required) #!/^.{8,}$/ # ## Check that the user name does not match the password. ## (The desc string is not used here.) ##+username # ##+desc: Only digits #/^[[:digit:]]+$/ # ##+desc: Not a mix of letters digits and control characters #!/[[:alpha:]]+/ #!/[[:digit:]]+/ #!/[[:punct:]]+/ # ##+desc: No mixed case #!/(?-i)([[:lower:]]+.*[[:upper:]]+)|([[:upper:]]+.*[[:lower:]]+)/ # ##+desc: Date string ## A limited check for ISO date strings #/^[012][0-9]{3}-?[012][0-9]-?[0123][0-9]$/ # ## Reject the usual metavariables. ##+desc: Meta variable #foo #bar #baz # ##+desc: Common test password #password #passwort #passphrase #mantra #test #abc #egal # ## Arbitrary strings ##+nodesc #12345678 #87654321 #qwerty #qwertyuiop #asdfghjkl #zxcvbnm #qwertzuiop #yxcvbnm #no-password #no password # ##+desc: Test string used by RTTY hams #the quick brown fox jumps over the lazy dogs back # ##+desc: German number plate #/^[A-Z]{1,3}\s*-\s*[A-Z]{1,2}\s*[0-9]+$/ # ##+desc: Dictionary word ##+search: /usr/share/dict/words ## Note that searching a large dictionary may take some time, it might ## be better to use an offline password auditing tool instead. # end of policy file openvas-manager-6.0.9/src/lsc_user.c000644 001751 001751 00000062103 12557600615 020444 0ustar00michaelmichael000000 000000 /* OpenVAS Manager * $Id$ * Description: LSC user credentials package generation. * * Authors: * Matthew Mundell * Michael Wiegand * Felix Wolfsteller * * Copyright: * Copyright (C) 2009 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ #include #include #include #include #include #include #include #include #include #include #ifdef S_SPLINT_S #include "splint.h" #endif #undef G_LOG_DOMAIN /** * @brief GLib log domain. */ #define G_LOG_DOMAIN "md manage" /* Helpers. */ /** @todo Copied check_is_file from administrator. */ /** * @brief Checks whether a file is a directory or not. * * This is a replacement for the g_file_test functionality which is reported * to be unreliable under certain circumstances, for example if this * application and glib are compiled with a different libc. * * @todo Handle symbolic links. * @todo Move to libs? * * @param[in] name File name. * * @return 1 if parameter is directory, 0 if it is not, -1 if it does not * exist or could not be accessed. */ static int check_is_file (const char *name) { struct stat sb; if (stat (name, &sb)) { return -1; } else { return (S_ISREG (sb.st_mode)); } } /* Key creation. */ /** * @brief Create an ssh key for local security checks. * * Forks and creates a key for local checks by calling * 'ssh-keygen -t rsa -f filepath -C "comment" -P "passhprase"'. * A directory will be created if it does not exist. * * @param[in] comment Comment to use. * @param[in] passphrase Passphrase for key, must be longer than 4 characters. * @param[in] filepath Path to file of public key (a .pub will be stripped). * * @return 0 if successful, -1 otherwise. */ static int create_ssh_key (const char *comment, const char *passphrase, const char *privpath) { gchar *astdout = NULL; gchar *astderr = NULL; GError *err = NULL; gint exit_status = 0; gchar *dir; char *command; /* Sanity-check essential parameters. */ if (!comment || comment[0] == '\0') { g_debug ("%s: comment must be set", __FUNCTION__); return -1; } if (!passphrase || strlen (passphrase) < 5) { g_debug ("%s: password must be longer than 4 characters", __FUNCTION__); return -1; } /* Sanity check files. */ dir = g_path_get_dirname (privpath); if (g_mkdir_with_parents (dir, 0755 /* "rwxr-xr-x" */ )) { g_debug ("%s: failed to access %s", __FUNCTION__, dir); g_free (dir); return -1; } g_free (dir); /* Spawn ssh-keygen. */ command = g_strconcat ("ssh-keygen -t rsa -f ", privpath, " -C \"", comment, "\" -P \"", passphrase, "\"", NULL); g_debug ("command: ssh-keygen -t rsa -f %s -C \"%s\" -P \"********\"", privpath, comment); if ((g_spawn_command_line_sync (command, &astdout, &astderr, &exit_status, &err) == FALSE) || (WIFEXITED (exit_status) == 0) || WEXITSTATUS (exit_status)) { if (err) { g_debug ("%s: failed to create private key: %s\n", __FUNCTION__, err->message); g_error_free (err); } else g_debug ("%s: failed to create private key\n", __FUNCTION__); g_debug ("%s: key-gen failed with %d (WIF %i, WEX %i).\n", __FUNCTION__, exit_status, WIFEXITED (exit_status), WEXITSTATUS (exit_status)); g_debug ("%s: stdout: %s", __FUNCTION__, astdout); g_debug ("%s: stderr: %s", __FUNCTION__, astderr); g_free (command); g_free (astdout); g_free (astderr); return -1; } g_free (command); g_free (astdout); g_free (astderr); return 0; } /** * @brief Create local security check (LSC) keys. * * @param[in] password Password. * @param[out] private_key Private key. * * @return 0 success, -1 error. */ int lsc_user_keys_create (const gchar *password, gchar **private_key) { GError *error; gsize length; char key_dir[] = "/tmp/openvas_key_XXXXXX"; gchar *key_path = NULL; int ret = -1; /* Make a directory for the keys. */ if (mkdtemp (key_dir) == NULL) return -1; /* Create private key. */ key_path = g_build_filename (key_dir, "key", NULL); if (create_ssh_key ("Key generated by OpenVAS Manager", password, key_path)) goto free_exit; error = NULL; g_file_get_contents (key_path, private_key, &length, &error); if (error) { g_error_free (error); goto free_exit; } ret = 0; free_exit: g_free (key_path); openvas_file_remove_recurse (key_dir); return ret; } /* RPM package generation. */ /** * @brief Return directory containing rpm generator script. * * The search will be performed just once. * * @return Newly allocated path to directory containing generator if found, * else NULL. */ static const gchar * get_rpm_generator_path () { static gchar *rpm_generator_path = NULL; if (rpm_generator_path == NULL) { gchar *path_exec = g_build_filename (OPENVAS_DATA_DIR, "openvas-lsc-rpm-creator.sh", NULL); if (check_is_file (path_exec) == 0) { g_free (path_exec); return NULL; } g_free (path_exec); rpm_generator_path = g_strdup (OPENVAS_DATA_DIR); } return rpm_generator_path; } /** * @brief Attempts creation of RPM packages to create a user and install a * @brief public key file for it. * * @param[in] username Name of user. * @param[in] public_key_path Location of public key. * @param[in] to_filename Destination filename for RPM. * * @return Path to rpm file if successfull, NULL otherwise. */ static gboolean lsc_user_rpm_create (const gchar *username, const gchar *public_key_path, const gchar *to_filename) { const gchar *generator_path; gchar *rpm_path = NULL; gint exit_status; gchar *new_pubkey_filename = NULL; gchar *pubkey_basename = NULL; gchar **cmd; char tmpdir[] = "/tmp/lsc_user_rpm_create_XXXXXX"; gboolean success = TRUE; gchar *standard_out = NULL; gchar *standard_err = NULL; gchar *rpmfile; generator_path = get_rpm_generator_path (); /* Create a temporary directory. */ g_debug ("%s: create temporary directory", __FUNCTION__); if (mkdtemp (tmpdir) == NULL) return FALSE; g_debug ("%s: temporary directory: %s\n", __FUNCTION__, tmpdir); /* Copy the public key into the temporary directory. */ g_debug ("%s: copy key to temporary directory\n", __FUNCTION__); pubkey_basename = g_strdup_printf ("%s.pub", username); new_pubkey_filename = g_build_filename (tmpdir, pubkey_basename, NULL); if (openvas_file_copy (public_key_path, new_pubkey_filename) == FALSE) { g_debug ("%s: failed to copy key file %s to %s", __FUNCTION__, public_key_path, new_pubkey_filename); g_free (pubkey_basename); g_free (new_pubkey_filename); return FALSE; } /* Execute create-rpm script with the temporary directory as the * target and the public key in the temporary directory as the key. */ g_debug ("%s: Attempting RPM build\n", __FUNCTION__); cmd = (gchar **) g_malloc (5 * sizeof (gchar *)); cmd[0] = g_strdup ("./openvas-lsc-rpm-creator.sh"); cmd[1] = g_strdup ("--target"); cmd[2] = g_strdup (tmpdir); cmd[3] = g_build_filename (tmpdir, pubkey_basename, NULL); cmd[4] = NULL; g_debug ("%s: Spawning in %s: %s %s %s %s\n", __FUNCTION__, generator_path, cmd[0], cmd[1], cmd[2], cmd[3]); if ((g_spawn_sync (generator_path, cmd, NULL, /* Environment. */ G_SPAWN_SEARCH_PATH, NULL, /* Setup function. */ NULL, &standard_out, &standard_err, &exit_status, NULL) == FALSE) || (WIFEXITED (exit_status) == 0) || WEXITSTATUS (exit_status)) { g_debug ("%s: failed to create the rpm: %d (WIF %i, WEX %i)", __FUNCTION__, exit_status, WIFEXITED (exit_status), WEXITSTATUS (exit_status)); g_debug ("%s: stdout: %s\n", __FUNCTION__, standard_out); g_debug ("%s: stderr: %s\n", __FUNCTION__, standard_err); success = FALSE; } g_free (cmd[0]); g_free (cmd[1]); g_free (cmd[2]); g_free (cmd[3]); g_free (cmd[4]); g_free (cmd); g_free (pubkey_basename); g_free (new_pubkey_filename); g_free (standard_out); g_free (standard_err); /* Build the filename that the RPM in the temporary directory has, * for example RPMS/noarch/openvas-lsc-target-example_user-0.5-1.noarch.rpm. */ rpmfile = g_strconcat ("openvas-lsc-target-", username, "-0.5-1.noarch.rpm", NULL); rpm_path = g_build_filename (tmpdir, rpmfile, NULL); g_debug ("%s: new filename (rpm_path): %s\n", __FUNCTION__, rpm_path); /* Move the RPM from the temporary directory to the given destination. */ if (openvas_file_move (rpm_path, to_filename) == FALSE && success == TRUE) { g_debug ("%s: failed to move RPM %s to %s", __FUNCTION__, rpm_path, to_filename); success = FALSE; } /* Remove the copy of the public key and the temporary directory. */ if (openvas_file_remove_recurse (tmpdir) != 0 && success == TRUE) { g_debug ("%s: failed to remove temporary directory %s", __FUNCTION__, tmpdir); success = FALSE; } g_free (rpm_path); g_free (rpmfile); return success; } /** * @brief Returns whether alien could be found in the path. * * The check itself will only be done once. * * @return TRUE if alien could be found in the path, FALSE otherwise. */ static gboolean alien_found () { static gboolean searched = FALSE; static gboolean found = FALSE; if (searched == FALSE) { /* Check if alien is found in path. */ gchar *alien_path = g_find_program_in_path ("alien"); if (alien_path != NULL) { found = TRUE; g_free (alien_path); } searched = TRUE; } return found; } /** * @brief Recreate RPM package. * * @param[in] name User name. * @param[in] public_key Public key. * @param[out] rpm RPM package. * @param[out] rpm_size Size of RPM package, in bytes. * * @return 0 success, -1 error. */ int lsc_user_rpm_recreate (const gchar *name, const char *public_key, void **rpm, gsize *rpm_size) { GError *error; char rpm_dir[] = "/tmp/rpm_XXXXXX"; char key_dir[] = "/tmp/key_XXXXXX"; gchar *rpm_path, *public_key_path; int ret = -1; if (alien_found () == FALSE) return -1; /* Make a directory for the key. */ if (mkdtemp (key_dir) == NULL) return -1; /* Write public key to file. */ error = NULL; public_key_path = g_build_filename (key_dir, "key.pub", NULL); g_file_set_contents (public_key_path, public_key, strlen (public_key), &error); if (error) goto free_exit; /* Create RPM package. */ if (mkdtemp (rpm_dir) == NULL) goto free_exit; rpm_path = g_build_filename (rpm_dir, "p.rpm", NULL); g_debug ("%s: rpm_path: %s", __FUNCTION__, rpm_path); if (lsc_user_rpm_create (name, public_key_path, rpm_path) == FALSE) { g_free (rpm_path); goto rm_exit; } /* Read the package into memory. */ error = NULL; g_file_get_contents (rpm_path, (gchar **) rpm, rpm_size, &error); g_free (rpm_path); if (error) { g_error_free (error); goto rm_exit; } /* Return. */ ret = 0; rm_exit: openvas_file_remove_recurse (rpm_dir); free_exit: g_free (public_key_path); openvas_file_remove_recurse (key_dir); return ret; } /* Deb generation. */ /** * @brief Execute alien to create a deb package from an rpm package. * * @param[in] rpmdir Directory to run the command in. * @param[in] rpmfile .rpm file to transform with alien to a .deb. * * @return 0 success, -1 error. */ static int execute_alien (const gchar *rpmdir, const gchar *rpmfile) { gchar **cmd; gint exit_status; int ret = 0; gchar *standard_out = NULL; gchar *standard_err = NULL; cmd = (gchar **) g_malloc (7 * sizeof (gchar *)); cmd[0] = g_strdup ("fakeroot"); cmd[1] = g_strdup ("--"); cmd[2] = g_strdup ("alien"); cmd[3] = g_strdup ("--scripts"); cmd[4] = g_strdup ("--keep-version"); cmd[5] = g_strdup (rpmfile); cmd[6] = NULL; g_debug ("--- executing alien.\n"); g_debug ("%s: Spawning in %s: %s %s %s %s %s %s\n", __FUNCTION__, rpmdir, cmd[0], cmd[1], cmd[2], cmd[3], cmd[4], cmd[5]); if ((g_spawn_sync (rpmdir, cmd, NULL, /* Environment. */ G_SPAWN_SEARCH_PATH, NULL, /* Setup func. */ NULL, &standard_out, &standard_err, &exit_status, NULL) == FALSE) || (WIFEXITED (exit_status) == 0) || WEXITSTATUS (exit_status)) { g_debug ("%s: failed to create the deb: %d (WIF %i, WEX %i)", __FUNCTION__, exit_status, WIFEXITED (exit_status), WEXITSTATUS (exit_status)); g_debug ("%s: stdout: %s\n", __FUNCTION__, standard_out); g_debug ("%s: stderr: %s\n", __FUNCTION__, standard_err); ret = -1; } g_free (cmd[0]); g_free (cmd[1]); g_free (cmd[2]); g_free (cmd[3]); g_free (cmd[4]); g_free (cmd[5]); g_free (cmd[6]); g_free (cmd); g_free (standard_out); g_free (standard_err); return ret; } /** * @brief Create a Debian package from an LSC user RPM package. * * @param[in] user Name of user. * @param[in] rpm_file Location of the RPM file. * * @return Debian package file name on success, else NULL. */ gchar * lsc_user_deb_create (const gchar *user, const gchar *rpm_file) { gchar *dirname = g_path_get_dirname (rpm_file); gchar *dir = g_strconcat (dirname, "/", NULL); gchar *basename = g_path_get_basename (rpm_file); gchar *down_user = g_ascii_strdown (user ? user : "user", -1); gchar *deb_name = g_strdup_printf ("%s/openvas-lsc-target-%s_0.5-1_all.deb", dirname, down_user); g_free (dirname); g_free (down_user); if (execute_alien (dir, basename)) { g_free (dir); g_free (basename); g_free (deb_name); return NULL; } g_free (dir); g_free (basename); return deb_name; } /** * @brief Recreate Debian package. * * @param[in] name User name. * @param[in] rpm RPM package. * @param[in] rpm_size Size of RPM package, in bytes. * @param[out] deb Debian package. * @param[out] deb_size Size of Debian package, in bytes. * * @return 0 success, -1 error. */ int lsc_user_deb_recreate (const gchar *name, const char *rpm, gsize rpm_size, void **deb, gsize *deb_size) { GError *error; char deb_dir[] = "/tmp/deb_XXXXXX"; char rpm_dir[] = "/tmp/rpm_XXXXXX"; gchar *deb_path, *rpm_path; int ret = -1; if (alien_found () == FALSE) return -1; /* Make a directory for the RPM. */ if (mkdtemp (rpm_dir) == NULL) return -1; /* Write RPM to disk. */ error = NULL; rpm_path = g_build_filename (rpm_dir, "p.rpm", NULL); g_file_set_contents (rpm_path, rpm, rpm_size, &error); if (error) goto free_exit; /* Create Debian package. */ if (mkdtemp (deb_dir) == NULL) goto free_exit; deb_path = lsc_user_deb_create (name, rpm_path); if (deb_path == NULL) goto rm_exit; /* Read the package into memory. */ error = NULL; g_file_get_contents (deb_path, (gchar **) deb, deb_size, &error); g_free (deb_path); if (error) { g_error_free (error); goto rm_exit; } /* Return. */ ret = 0; rm_exit: openvas_file_remove_recurse (deb_dir); free_exit: g_free (rpm_path); openvas_file_remove_recurse (rpm_dir); return ret; } /* Exe generation. */ /** * @brief Write an NSIS installer script to file. * * @param[in] script_name Name of script. * @param[in] package_name Name of package. * @param[in] user_name User name. * @param[in] password User password. * * @return 0 success, -1 error. */ static int create_nsis_script (const gchar *script_name, const gchar *package_name, const gchar *user_name, const gchar *password) { FILE* fd; fd = fopen (script_name, "w"); if (fd == NULL) return -1; // Write part about default section fprintf (fd, "#Installer filename\n"); fprintf (fd, "outfile "); fprintf (fd, "%s", package_name); fprintf (fd, "\n\n"); fprintf (fd, "# Set desktop as install directory\n"); fprintf (fd, "installDir $DESKTOP\n\n"); fprintf (fd, "# Put some text\n"); fprintf (fd, "BrandingText \"OpenVAS Local Security Checks User\"\n\n"); // For ms vista installers we need the UAC plugin and use the following lines: // This requires the user to have the UAC plugin installed and to provide the // the path to it. //fprintf (fd, "# Request application privileges for Windows Vista\n"); //fprintf (fd, "RequestExecutionLevel admin\n\n"); fprintf (fd, "#\n# Default (installer) section.\n#\n"); fprintf (fd, "section\n\n"); fprintf (fd, "# Define output path\n"); fprintf (fd, "setOutPath $INSTDIR\n\n"); fprintf (fd, "# Uninstaller name\n"); fprintf (fd, "writeUninstaller $INSTDIR\\openvas_lsc_remove_%s.exe\n\n", user_name); // Need to find localized Administrators group name, create a // GetAdminGroupName - vb script (Thanks to Thomas Rotter) fprintf (fd, "# Create Thomas Rotters GetAdminGroupName.vb script\n"); fprintf (fd, "ExecWait \"cmd /C Echo Set objWMIService = GetObject($\\\"winmgmts:\\\\.\\root\\cimv2$\\\") > $\\\"%%temp%%\\GetAdminGroupName.vbs$\\\" \"\n"); fprintf (fd, "ExecWait \"cmd /C Echo Set colAccounts = objWMIService.ExecQuery ($\\\"Select * From Win32_Group Where SID = 'S-1-5-32-544'$\\\") >> $\\\"%%temp%%\\GetAdminGroupName.vbs$\\\"\"\n"); fprintf (fd, "ExecWait \"cmd /C Echo For Each objAccount in colAccounts >> $\\\"%%temp%%\\GetAdminGroupName.vbs$\\\"\"\n"); fprintf (fd, "ExecWait \"cmd /C Echo Wscript.Echo objAccount.Name >> $\\\"%%temp%%\\GetAdminGroupName.vbs$\\\"\"\n"); fprintf (fd, "ExecWait \"cmd /C Echo Next >> $\\\"%%temp%%\\GetAdminGroupName.vbs$\\\"\"\n"); fprintf (fd, "ExecWait \"cmd /C cscript //nologo $\\\"%%temp%%\\GetAdminGroupName.vbs$\\\" > $\\\"%%temp%%\\AdminGroupName.txt$\\\"\"\n\n"); /** @todo provide /comment:"OpenVAS User" /fullname:"OpenVAS Testuser" */ fprintf (fd, "# Create batch script that installs the user\n"); fprintf (fd, "ExecWait \"cmd /C Echo Set /P AdminGroupName= ^<$\\\"%%temp%%\\AdminGroupName.txt$\\\" > $\\\"%%temp%%\\AddUser.bat$\\\"\" \n"); fprintf (fd, "ExecWait \"cmd /C Echo net user %s %s /add /active:yes >> $\\\"%%temp%%\\AddUser.bat$\\\"\"\n", user_name, password); fprintf (fd, "ExecWait \"cmd /C Echo net localgroup %%AdminGroupName%% %%COMPUTERNAME%%\\%s /add >> $\\\"%%temp%%\\AddUser.bat$\\\"\"\n\n", user_name); fprintf (fd, "# Execute AddUser script\n"); fprintf (fd, "ExecWait \"cmd /C $\\\"%%temp%%\\AddUser.bat$\\\"\"\n\n"); // Remove up temporary files for localized Administrators group names fprintf (fd, "# Remove temporary files for localized admin group names\n"); fprintf (fd, "ExecWait \"del $\\\"%%temp%%\\AdminGroupName.txt$\\\"\"\n"); fprintf (fd, "ExecWait \"del $\\\"%%temp%%\\GetAdminGroupName.vbs$\\\"\"\n\n"); fprintf (fd, "ExecWait \"del $\\\"%%temp%%\\AddUser.bat$\\\"\"\n\n"); /** @todo Display note about NTLM and SMB signing and encryption, 'Easy Filesharing' in WIN XP */ fprintf (fd, "# Display message that everything seems to be fine\n"); fprintf (fd, "messageBox MB_OK \"A user has been added. An uninstaller is placed on your Desktop.\"\n\n"); fprintf (fd, "# Default (install) section end\n"); fprintf (fd, "sectionEnd\n\n"); // Write part about uninstall section fprintf (fd, "#\n# Uninstaller section.\n#\n"); fprintf (fd, "section \"Uninstall\"\n\n"); fprintf (fd, "# Run cmd to remove user\n"); fprintf (fd, "ExecWait \"net user %s /delete\"\n\n", user_name); /** @todo Uninstaller should remove itself */ fprintf (fd, "# Unistaller should remove itself (from desktop/installdir)\n\n"); fprintf (fd, "# Display message that everything seems to be fine\n"); fprintf (fd, "messageBox MB_OK \"A user has been removed. You can now savely remmove the uninstaller from your Desktop.\"\n\n"); fprintf (fd, "# Uninstaller section end\n"); fprintf (fd, "sectionEnd\n\n"); if (fclose (fd)) return -1; return 0; } /** * @brief Execute makensis to create a package from an NSIS script. * * Run makensis in the directory that nsis_script is in. * * @param[in] nsis_script Name of resulting package. * * @return 0 success, -1 error. */ static int execute_makensis (const gchar *nsis_script) { gchar *dirname = g_path_get_dirname (nsis_script); gchar **cmd; gint exit_status; int ret = 0; gchar *standard_out = NULL; gchar *standard_err = NULL; cmd = (gchar **) g_malloc (3 * sizeof (gchar *)); cmd[0] = g_strdup ("makensis"); cmd[1] = g_strdup (nsis_script); cmd[2] = NULL; g_debug ("--- executing makensis.\n"); g_debug ("%s: Spawning in %s: %s %s\n", __FUNCTION__, dirname, cmd[0], cmd[1]); if ((g_spawn_sync (dirname, cmd, NULL, /* Environment. */ G_SPAWN_SEARCH_PATH, NULL, /* Setup func. */ NULL, &standard_out, &standard_err, &exit_status, NULL) == FALSE) || (WIFEXITED (exit_status) == 0) || WEXITSTATUS (exit_status)) { g_debug ("%s: failed to create the exe: %d (WIF %i, WEX %i)", __FUNCTION__, exit_status, WIFEXITED (exit_status), WEXITSTATUS (exit_status)); g_debug ("%s: stdout: %s\n", __FUNCTION__, standard_out); g_debug ("%s: stderr: %s\n", __FUNCTION__, standard_err); ret = -1; } g_free (cmd[0]); g_free (cmd[1]); g_free (cmd); g_free (dirname); g_free (standard_out); g_free (standard_err); return ret; } /** * @brief Create an NSIS package. * * @param[in] user_name Name of user. * @param[in] password Password of user. * @param[in] to_filename Destination filename for package. * * @return 0 success, -1 error. */ static int lsc_user_exe_create (const gchar *user_name, const gchar *password, const gchar *to_filename) { gchar *dirname = g_path_get_dirname (to_filename); gchar *nsis_script = g_build_filename (dirname, "p.nsis", NULL); g_free (dirname); if (create_nsis_script (nsis_script, to_filename, user_name, password)) { g_free (nsis_script); return -1; } if (execute_makensis (nsis_script)) { g_free (nsis_script); return -1; } g_free (nsis_script); return 0; } /** * @brief Recreate NSIS package. * * @param[in] name User name. * @param[in] password Password. * @param[out] exe NSIS package. * @param[out] exe_size Size of NSIS package, in bytes. * * @return 0 success, -1 error. */ int lsc_user_exe_recreate (const gchar *name, const gchar *password, void **exe, gsize *exe_size) { GError *error; char exe_dir[] = "/tmp/exe_XXXXXX"; gchar *exe_path; int ret = -1; if (alien_found () == FALSE) return -1; /* Create NSIS package. */ if (mkdtemp (exe_dir) == NULL) return -1; exe_path = g_build_filename (exe_dir, "p.nsis", NULL); if (lsc_user_exe_create (name, password, exe_path)) goto rm_exit; /* Read the package into memory. */ error = NULL; g_file_get_contents (exe_path, (gchar **) exe, exe_size, &error); if (error) { g_error_free (error); goto rm_exit; } /* Return. */ ret = 0; rm_exit: openvas_file_remove_recurse (exe_dir); g_free (exe_path); return ret; } openvas-manager-6.0.9/src/report_formats/CSV_Hosts/generate000755 001751 001751 00000001635 12557600616 025066 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: This plugins creates a CSV file. # # Authors: # Henri Doreau # # Copyright: # Copyright (C) 2011 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. xsltproc ./CSV_Hosts.xsl $1 openvas-manager-6.0.9/src/report_formats/CSV_Hosts/CSV_Hosts.xsl000644 001751 001751 00000010762 12631501053 025676 0ustar00michaelmichael000000 000000 IP,Hostname,OS,Scan Start,Scan End,CVSS,Severity,High,Medium,Low,Log,False Positive,Total , , , , , , High Medium Low None , , , , , , openvas-manager-6.0.9/src/report_formats/create_signatures000755 001751 001751 00000007236 12557600616 025173 0ustar00michaelmichael000000 000000 #!/bin/bash # # OpenVAS # $Id$ # Description: Create signatures for predefined reports. # # Call in openvas-manager/src/report_formats. Pass one argument, the name # of the Manager database. Signatures are written into report format subdirs. # # Authors: # Matthew Mundell # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. DB=$1 if [ $# = 0 ]; then DB=/var/lib/openvas/mgr/tasks.db; fi export LC_ALL=C echo -n Faking latex.xsl for PDF ln -s ../LaTeX/latex.xsl PDF/latex.xsl || exit 1 echo . echo Creating signatures from $DB: for uuid in `sqlite3 -noheader -init "" $DB 'SELECT uuid FROM report_formats' 2>/dev/null`; do name=`sqlite3 -noheader -init "" $DB "SELECT replace (name, ' ', '_') FROM report_formats WHERE uuid = '$uuid'" 2>/dev/null` id=`sqlite3 -noheader -init "" $DB "SELECT ROWID FROM report_formats WHERE uuid = '$uuid'" 2>/dev/null` if [ -d "$name" ]; then echo " Format $name with UUID $uuid and ROWID $id" rm -f "${name}/${uuid}.asc" rm -f ${uuid} fore=`sqlite3 -separator '' -noheader -init "" $DB "SELECT uuid, extension, content_type, '1' FROM report_formats WHERE uuid = '$uuid'" 2>/dev/null` echo -n "$fore" > ${uuid} for file in `ls "$name"`; do echo " File $name/$file" case "$file" in *.BAK) ;; *.CKP) ;; *~) ;; *.bak) ;; *) echo -n `basename "$name/$file"` >> ${uuid} base64 -w 0 "$name/$file" >> ${uuid} ;; esac done for param in `sqlite3 -noheader -init "" $DB "SELECT ROWID FROM report_format_params WHERE report_format = $id" 2>/dev/null`; do echo " Param $param" back=`sqlite3 -separator '' -noheader -init "" $DB "SELECT name FROM report_format_params WHERE ROWID = $param" 2>/dev/null` echo -n "$back" >> ${uuid} type=`sqlite3 -noheader -init "" $DB "SELECT type FROM report_format_params WHERE ROWID = $param" 2>/dev/null` case $type in 0) echo -n boolean >> ${uuid} ;; 1) echo -n integer >> ${uuid} ;; 2) echo -n selection >> ${uuid} ;; 3) echo -n string >> ${uuid} ;; 4) echo -n text >> ${uuid} ;; *) echo Error: report format type is $type. exit 1 ;; esac back=`sqlite3 -separator '' -noheader -init "" $DB "SELECT min, max, value FROM report_format_params WHERE ROWID = $param" 2>/dev/null` echo -n "$back" >> ${uuid} for value in `sqlite3 -noheader -init "" $DB "SELECT ROWID FROM report_format_param_options WHERE ROWID = $option" 2>/dev/null`/*; do echo " Param option $value" echo -n "$value" >> ${uuid} done done echo >> ${uuid} gpg --detach-sign --armor ${uuid} rm -f ${uuid} mv ${uuid}.asc "${name}/${uuid}.asc" fi done echo -n Remove fake latex.xsl rm PDF/latex.xsl || exit 1 echo . echo Done. openvas-manager-6.0.9/src/report_formats/LaTeX/generate000755 001751 001751 00000002014 12557600616 024220 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: Report generator script: LaTeX. # # This report generate creates a LaTeX file # using a XML transformation with the tool xsltproc. # # Authors: # Jan-Oliver Wagner # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. xsltproc ./latex.xsl $1 openvas-manager-6.0.9/src/report_formats/LaTeX/latex.xsl000644 001751 001751 00000222266 12557600616 024362 0ustar00michaelmichael000000 000000 \ { } \label{} \section{} \subsection{ } \subsubsection{ } \\ \hline \hyperref[ ]{ } \rowcolor{} \endfirsthead \multicolumn{}{l}{\hfill\ldots (continued) \ldots} \rowcolor{} \endhead \multicolumn{}{l}{\ldots (continues) \ldots} \endfoot \endlastfoot \documentclass{article} \pagestyle{empty} %\usepackage{color} \usepackage{tabularx} \usepackage{geometry} \usepackage{comment} \usepackage{longtable} \usepackage{titlesec} \usepackage{chngpage} \usepackage{calc} \usepackage{url} \usepackage[utf8x]{inputenc} \DeclareUnicodeCharacter {135}{{\textascii ?}} \DeclareUnicodeCharacter {129}{{\textascii ?}} \DeclareUnicodeCharacter {128}{{\textascii ?}} \usepackage{colortbl} % must come last \usepackage{hyperref} \definecolor{linkblue}{rgb}{0.11,0.56,1} \definecolor{inactive}{rgb}{0.56,0.56,0.56} \definecolor{openvas_debug}{rgb}{0.78,0.78,0.78} \definecolor{openvas_false_positive}{rgb}{0.2275,0.2275,0.2275} \definecolor{openvas_log}{rgb}{0.2275,0.2275,0.2275} \definecolor{openvas_hole}{rgb}{0.7960,0.1137,0.0902} \definecolor{openvas_note}{rgb}{0.3255,0.6157,0.7961} \definecolor{openvas_report}{rgb}{0.68,0.74,0.88} \definecolor{openvas_user_note}{rgb}{1.0,1.0,0.5625} \definecolor{openvas_user_override}{rgb}{1.0,1.0,0.5625} \definecolor{openvas_warning}{rgb}{0.9764,0.6235,0.1922} \definecolor{chunk}{rgb}{0.9412,0.8275,1} \definecolor{line_new}{rgb}{0.89,1,0.89} \definecolor{line_gone}{rgb}{1.0,0.89,0.89} \hypersetup{colorlinks=true,linkcolor=linkblue,urlcolor=blue,bookmarks=true,bookmarksopen=true} \usepackage[all]{hypcap} %\geometry{verbose,a4paper,tmargin=24mm,bottom=24mm} \geometry{verbose,a4paper} \setlength{\parskip}{\smallskipamount} \setlength{\parindent}{0pt} \title{Delta Report} \title{Prognostic Report} \title{Scan Report} \pagestyle{headings} \pagenumbering{arabic} white \rowcolor{ }{$\hookrightarrow$\verb= =}\\ \rowcolor{white}{\verb= =}\\ white \rowcolor{ }{\verb= =}\\ white white white chunk line_gone line_new white \renewcommand{\abstractname}{Prognostic Report Summary} \begin{abstract} \end{abstract} \renewcommand{\abstractname}{Delta Report Summary} \begin{abstract} \end{abstract} \renewcommand{\abstractname}{Summary} \begin{abstract} \end{abstract} \renewcommand{\abstractname}{Prognostic Report Summary} \begin{abstract} This document predicts the results of a security scan, based on scan information already gathered for the hosts. All dates are displayed using the timezone `` '', which is abbreviated `` ''. The report first summarises the predicted results. Then, for each host, the report describes every predicted issue. Please consider the advice given in each description, in order to rectify the issue. \end{abstract} \renewcommand{\abstractname}{Delta Report Summary} \begin{abstract} This document compares the results of two security scans. All dates are displayed using the timezone `` '', which is abbreviated `` ''. The task was `` ''. The first scan started at and ended at . The second scan started at and ended at . The report first summarises the hosts found. Then, for each host, the report describes the changes that occurred between the two scans. \end{abstract} \renewcommand{\abstractname}{Summary} \begin{abstract} This document reports on the results of an automatic security scan. All dates are displayed using the timezone `` '', which is abbreviated `` ''. The task was `` ''. The scan started at and ended at . The report first summarises the results found. Then, for each host, the report describes every issue found. Please consider the advice given in each description, in order to rectify the issue. \end{abstract} \tableofcontents & & & & & &&&&& - & SSH & Success & \\ \hline - & SSH & Failure & \\ \hline - & SMB & Success & \\ \hline - & SMB & Failure & \\ \hline - & ESXi & Success & \\ \hline - & ESXi & Failure & \\ \hline Result Overview \begin{longtable}{|l|l|l|l|l|l|} 6 openvas_report Host&High&Medium&Low&Log&False Positive Total: &&&&& \end{longtable} Vendor security updates are trusted, using full CVE matching. Vendor security updates are trusted, using partial CVE matching. Vendor security updates are not trusted. Overrides are on. When a result has an override, this report uses the threat of the override. Overrides are off. Even when a result has an override, this report uses the actual threat of the result. Notes are excluded from the report. Notes are included in the report. This report might not show details of all issues that were found. It only lists hosts that produced issues. It shows issues that contain the search phrase "". Issues with the threat level ``High'' are not shown. Issues with the threat level ``Medium'' are not shown. Issues with the threat level ``Low'' are not shown. Issues with the threat level ``Log'' are not shown. Issues with the threat level ``Debug'' are not shown. Issues with the threat level ``False Positive'' are not shown. This report contains 0 results. This report contains result of the results selected by the filtering above. This report contains all results selected by the filtering described above. This report contains results to of the results selected by the filtering described above. Before filtering there were results. Host Authentications \begin{longtable}{|l|l|l|l|} 4 openvas_report Host&Protocol&Result&Port/User \end{longtable} & \begin{longtable}{|l|l|} 2 openvas_report Service (Port)&Threat Level High Medium Low Log False Positive \end{longtable} \begin{longtable}{|l|l|} 2 openvas_report Closed CVE&NVT & \end{longtable} openvas_hole openvas_warning openvas_note openvas_log openvas_log Low Medium High \hline \textbf{References} 0 \rowcolor{openvas_user_note}{\textbf{Note} (Result ) }\\ \rowcolor{openvas_user_note}{} \rowcolor{openvas_user_note}{Active until: } \rowcolor{openvas_user_note}{Last modified: } 0 \rowcolor{openvas_user_override}{\textbf{Override from Any to } (Result ) }\\ \rowcolor{openvas_user_override}{} \rowcolor{openvas_user_override}{Active until: } \rowcolor{openvas_user_override}{Last modified: } \begin{longtable}{|p{\textwidth * 1}|} \rowcolor{ }{\color{white}{ \vspace{3pt} \hspace{3pt} \begin{LARGE}\sim\end{LARGE} \begin{LARGE}−\end{LARGE} \begin{LARGE}+\end{LARGE} \begin{LARGE}=\end{LARGE} \hspace{3pt} (CVSS: ) (Overridden from ) (CVSS: ) }} \rowcolor{ }{\color{white}{NVT: }} \endfirsthead \hfill\ldots continued from previous page \ldots \endhead \ldots continues on next page \ldots \endfoot \endlastfoot \textbf{Product detection result} \textbf{Summary} \textbf{Result 1} \hline \textbf{Vulnerability Detection Result} Vulnerability was detected according to the Vulnerability Detection Method. \hline \textbf{Impact} \hline \textbf{Solution} \textbf{Solution type:} \hline \textbf{Affected Software/OS} \hline \textbf{Vulnerability Insight} \hline \textbf{Vulnerability Detection Method} \textbf{Log Method} Details: OID: Version used: \hline \textbf{Product Detection Result} Product: Method: OID: ) \textbf{Result 2} \rowcolor{white}{\verb==} \rowcolor{white}{\verb==} OID of test routine: \textbf{Different Lines} 1 0 \end{longtable} \begin{footnotesize} \end{footnotesize} \begin{longtable}{|p{\textwidth * 1}|} \rowcolor{ }{\color{white}{ (CVSS: ) }} \rowcolor{ }{\color{white}{ }} \rowcolor{ }{\color{white}{ }} \endfirsthead \hfill\ldots continued from previous page \ldots \endhead \ldots continues on next page \ldots \endfoot \endlastfoot \end{longtable} \begin{footnotesize} \end{footnotesize} High Medium Low Log Debug False Positive \begin{tabular}{ll} Host scan start& Host scan end& \end{tabular} %\subsection*{Security Issues and Fixes -- } \section{Results per Host} \begin{document} \maketitle \newpage \begin{center} \medskip \rule{\textwidth}{0.1pt} This file was automatically generated. \end{center} \end{document} openvas-manager-6.0.9/src/report_formats/CSV_Results/generate000755 001751 001751 00000001652 12557600616 025426 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: Report generator script: CSV Results. # # Authors: # Matthew Mundell # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. xsltproc ./CSV_Results.xsl $1 openvas-manager-6.0.9/src/report_formats/CSV_Results/CSV_Results.xsl000644 001751 001751 00000032745 12631501053 026605 0ustar00michaelmichael000000 000000 Open Port " "" , , , , , ," "," "," "," Vulnerability was detected according to the Vulnerability Detection Method. ", ," ", ," ", , ," "," "," "," "," Details: ... (OID: ) Version used: "," Product: Method: (OID: ) "," , "," Warning: , "," , " IP,Hostname,Port,Port Protocol,CVSS,Severity,Solution Type,NVT Name,Summary,Specific Result,NVT OID,CVEs,Task ID,Task Name,Timestamp,Result ID,Impact,Solution,Affected Software/OS,Vulnerability Insight,Vulnerability Detection Method,Product Detection Result,BIDs,CERTs,Other References openvas-manager-6.0.9/src/report_formats/Verinice_ITG/classification-helpers.xsl000644 001751 001751 00000036064 12557600616 031171 0ustar00michaelmichael000000 000000 gsm_system_smartphone gsm_system_macos gsm_system_unix gsm_system_unix gsm_system_linux gsm_system_unix gsm_system_linux gsm_system_unix gsm_system_linux gsm_system_unix gsm_system_linux gsm_system_unix gsm_system_linux gsm_system_unix gsm_system_linux gsm_system_unix gsm_system_unix gsm_system_smartphone gsm_system_unix gsm_system_linux gsm_system_unix gsm_system_linux gsm_system_unix gsm_system_linux gsm_system_unix gsm_system_linux gsm_system_dos gsm_system_win9x gsm_system_smartphone gsm_system_smartphone gsm_system_win2k gsm_system_vista gsm_system_winnt gsm_system_winnt gsm_system_win2003 gsm_system_win2003 gsm_system_win7 gsm_system_win2008 gsm_system_win2008 gsm_system_winxp gsm_system_unix gsm_system_bsd gsm_system_smartphone gsm_system_netware3 gsm_system_netware4 gsm_system_unix gsm_system_unix gsm_system_unix gsm_system_smartphone gsm_system_unix gsm_system_unix gsm_system_linux gsm_system_unix gsm_system_unix gsm_system_linux gsm_system_unix gsm_system_unix gsm_system_linux gsm_system_apache gsm_system_wwwserver gsm_system_iis gsm_system_wwwserver gsm_system_exchange gsm_system_outlook gsm_system_notes gsm_system_sap gsm_system_samba openvas-manager-6.0.9/src/report_formats/Verinice_ITG/generate000755 001751 001751 00000002613 12557600616 025517 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS Manager # $Id$ # Description: Report generator script: ISM Verinice interface. # # Authors: # Andre Heinecke # # Copyright: # Copyright (C) 2011 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. #xsltproc --stringparam filename $FILENAME ./Verinice_ISM.xsl $XMLFILE | sed -e "s/\ xmlns=\"\"//g" | xmlstarlet fo > output_ism.xml TMP=`mktemp -d` || exit 1 STARTDIR=`pwd` XMLFILE=`readlink -f $1` FILENAME=`basename $1` REPORT_ID=`xmlstarlet sel -t -v /report/task/@id $XMLFILE` cp $XMLFILE $TMP/$REPORT_ID-report-file\_$FILENAME xsltproc ./Verinice_ITG.xsl $1 | \ sed -e "s/\ xmlns=\"\"//g" | \ xmlstarlet fo > $TMP/verinice.xml && \ cd $TMP && zip - * cd $STARTDIR rm -r $TMP openvas-manager-6.0.9/src/report_formats/Verinice_ITG/Verinice_ITG.xsl000644 001751 001751 00000032444 12557600616 027003 0ustar00michaelmichael000000 000000 mnums_umsetzung_entbehrlich mnums_umsetzung_ja mnums_umsetzung_nein mnums_umsetzung_entbehrlich mnums_umsetzung_entbehrlich mnums_umsetzung_teilweise M . m 0 massnahme gsm_itg_result_massnahme gsm_itg_result_url status gsm_itg_result_status kommentar gsm_itg_result_kommentar GSM: - - ip gsm_itg_siegel - gsm_itg_result gsm_itg_system_ip gsm_itg_system_tags - gsm_itg_system gsm_itg_result_group_name GSM Result --results gsm_itg_result_group itverbund_name IT-Verbund itverbund -server-group gsm_itg_server_group openvas-manager-6.0.9/src/report_formats/Verinice_ITG/README.txt000644 001751 001751 00000000452 12557600616 025474 0ustar00michaelmichael000000 000000 Report Format Plugin "Vernice ITG" This plugin was originally developed for use with Greenbone Security Manager. It is fully compatible with OpenVAS, but some variable names and tag use the abbreviation "gsm". These are required by Verinice, a Open Source ISMS-Tool avaiable from www.verinice.org openvas-manager-6.0.9/src/report_formats/Verinice_ISM/generate000755 001751 001751 00000004433 12557600616 025526 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS Manager # $Id$ # Description: Report generator script: ISM Verinice interface. # # Authors: # Andre Heinecke # # Copyright: # Copyright (C) 2011 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. TMP=`mktemp -d` || exit 1 STARTDIR=`pwd` XMLFILE=`readlink -f $1` DATE=`xmlstarlet sel -t -v /report/scan_start "$XMLFILE" | cut -c 1-10` SCAN_NAME=`xmlstarlet sel -t -v /report/task/name "$XMLFILE"` SCAN_NAME=$(echo $SCAN_NAME | sed 's/ /_/g') # File size above which the attachments should be compressed COMPRESS_SIZE=10485760 mkdir -p $TMP/files FILENAME=${SCAN_NAME}_${DATE}.xml FILELOC=$TMP/files/${FILENAME} HTML_FILELOC=$(echo $FILELOC | sed 's/\.xml/\_HTML.html/') HTML_FILE=$(echo $FILENAME | sed 's/\.xml/\_HTML.html/') HTML_MIMETYPE="html" HTML_REQUESTED=`cat $1 | xmlstarlet sel -t -v "/report/report_format/param[name='Attach HTML report']/value"` if [ -n "$HTML_REQUESTED" ] && [ "$HTML_REQUESTED" -eq 1 ] then xsltproc ./html.xsl $1 > "$HTML_FILELOC" if [ `wc -c < "$HTML_FILELOC"` -ge $COMPRESS_SIZE ] then zip -j -q `echo $HTML_FILELOC | sed 's/\.html/\.zip/'` "$HTML_FILELOC" rm -f "$HTML_FILELOC" HTML_FILELOC=$(echo $FILELOC | sed 's/\.xml/\_HTML.zip/') HTML_FILE=$(echo $FILENAME | sed 's/\.xml/\_HTML.zip/') HTML_MIMETYPE="zip" fi fi xsltproc --stringparam htmlfilename "$HTML_FILE" \ --stringparam htmlmimetype "$HTML_MIMETYPE" \ --stringparam filedate `stat -c %Z $XMLFILE` ./Verinice_ISM.xsl $1 | \ sed -e "s/\ xmlns=\"\"//g" | \ xmlstarlet fo > $TMP/verinice.xml && \ cd $TMP && zip -r - * cd $STARTDIR rm -r $TMP openvas-manager-6.0.9/src/report_formats/Verinice_ISM/classification_generator.sh000755 001751 001751 00000003037 12557600616 031405 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS Manager # $Id$ # Description: Generate classification helpers for verinice # # Authors: # Andre Heinecke # # Copyright: # Copyright (C) 2011 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. cat << EOF EOF for line in $(tail -n +2 "$1" | tr -d '\015') #remove CR do CPE=$(echo $line | sed 's/;/,/g' | awk -F , '{print $1}') TAG=$(echo $line | sed 's/;/,/g' | awk -F , '{print $2}') echo " " echo " ${TAG}" echo " " done cat << EOF gsm_system_unkown EOF openvas-manager-6.0.9/src/report_formats/Verinice_ISM/classification.csv000644 001751 001751 00000004715 12557600616 027521 0ustar00michaelmichael000000 000000 CPE,GSM Tag cpe:/o:3com,gsm_system_3com cpe:/o:alcatel,gsm_system_alcatel cpe:/o:apple,gsm_system_apple cpe:/o:apple:iphone,gsm_system_iphone cpe:/o:apple:mac_os,gsm_system_mac cpe:/o:bluecoat,gsm_system_bloecoat cpe:/o:brocade,gsm_system_brocade cpe:/o:canonical,gsm_system_ubuntu cpe:/o:centos,gsm_system_centos cpe:/o:cisco:ios,gsm_system_cisco_networking cpe:/o:cisco,gsm_system_cisco cpe:/o:compaq,gsm_system_compaq cpe:/o:conectiva,gsm_system_connectiva cpe:/o:corel,gsm_system_corel cpe:/o:cray,gsm_system_cray cpe:/o:debian,gsm_system_debian cpe:/o:engardelinux,gsm_system_engardelinux cpe:/o:extremenetworks,gsm_system_extremenetworks cpe:/o:f5,gsm_system_f5 cpe:/o:fedoraproject,gsm_system_fedora cpe:/o:freebsd,gsm_system_freebsd cpe:/o:freenas,gsm_system_freenas cpe:/o:gentoo,gsm_system_gentoo cpe:/o:google:android,gsm_system_android cpe:/o:greenbone,gsm_system_gsm cpe:/o:hp:jetdirect,gsm_system_printserver cpe:/o:hp,gsm_system_hp cpe:/o:ibm,gsm_system_ibm cpe:/o:juniper,gsm_system_juniper cpe:/o:linux,gsm_system_linux cpe:/o:mandrakesoft,gsm_system_mandrakesoft cpe:/o:mandriva,gsm_system_mandriva cpe:/o:microsoft:ms-dos,gsm_system_dos cpe:/o:microsoft:windows-9x,gsm_system_win9x cpe:/o:microsoft:windows-ce,gsm_system_wince cpe:/o:microsoft:windows_mobile,gsm_system_windows_mobile cpe:/o:microsoft:windows_2000,gsm_system_win2k cpe:/o:microsoft:windows_vista,gsm_system_vista cpe:/o:microsoft:windows-nt,gsm_system_winnt cpe:/o:microsoft:windows_nt,gsm_system_winnt cpe:/o:microsoft:windows_server_2003,gsm_system_win2003 cpe:/o:microsoft:windows_2003,gsm_system_win2003 cpe:/o:microsoft:windows_7,gsm_system_win7 cpe:/o:microsoft:windows_server_2008,gsm_system_win2008 cpe:/o:microsoft:windows_2008,gsm_system_win2008 cpe:/o:microsoft:windows_xp,gsm_system_winxp cpe:/o:microsoft:windows,gsm_system_windows_unknown cpe:/o:microsoft,gsm_system_microsoft cpe:/o:nec,gsm_system_nec cpe:/o:netbsd,gsm_system_netbsd cpe:/o:nokia,gsm_system_nokia cpe:/o:novell:netware,gsm_system_netware cpe:/o:novell,gsm_system_novell cpe:/o:openbsd,gsm_system_openbsd cpe:/o:redhat,gsm_system_redhat cpe:/o:rim:blackberry,gsm_system_blackberry cpe:/o:sgi,gsm_system_sgi cpe:/o:siemens,gsm_system_siemens cpe:/o:slackware,gsm_system_slackware cpe:/o:starnet,gsm_system_starnet cpe:/o:sun,gsm_system_sun cpe:/o:suse,gsm_system_suse cpe:/o:trustix,gsm_system_tustix cpe:/o:univention,gsm_system_univention cpe:/o:vmware,gsm_system_vmware cpe:/o:windriver,gsm_system_windriver cpe:/o:yamaha,gsm_system_yamaha openvas-manager-6.0.9/src/report_formats/Verinice_ISM/classification.xsl000644 001751 001751 00000022113 12557600616 027524 0ustar00michaelmichael000000 000000 gsm_system_3com gsm_system_alcatel gsm_system_iphone gsm_system_mac gsm_system_apple gsm_system_bluecoat gsm_system_brocade gsm_system_ubuntu gsm_system_centos gsm_system_cisco_networking gsm_system_cisco gsm_system_compaq gsm_system_connectiva gsm_system_Linux gsm_system_cray gsm_system_Linux gsm_system_Linux gsm_system_extremenetworks gsm_system_f5 gsm_system_Linux gsm_system_freebsd gsm_system_freenas gsm_system_gentoo gsm_system_android gsm_system_gsm gsm_system_printserver gsm_system_hp gsm_system_ibm gsm_system_juniper gsm_system_linux gsm_system_Linux gsm_system_Linux gsm_system_Windows_Client gsm_system_Windows_Client gsm_system_wince gsm_system_windows_mobile gsm_system_Windows_Server gsm_system_Windows_Client gsm_system_Windows_Client gsm_system_Windows_Client gsm_system_Windows_Server gsm_system_Windows_Server gsm_system_Windows_Client gsm_system_Windows_Server gsm_system_Windows_Server gsm_system_Windows_Client gsm_system_windows_unknown gsm_system_microsoft gsm_system_nec gsm_system_netbsd gsm_system_nokia gsm_system_netware gsm_system_novell gsm_system_Linux gsm_system_Linux gsm_system_blackberry gsm_system_sgi gsm_system_siemens gsm_system_slackware gsm_system_starnet gsm_system_sun gsm_system_Linux gsm_system_Linux gsm_system_univention gsm_system_vmware gsm_system_windriver gsm_system_yamaha gsm_system_unkown openvas-manager-6.0.9/src/report_formats/Verinice_ISM/README.txt000644 001751 001751 00000000452 12557600616 025501 0ustar00michaelmichael000000 000000 Report Format Plugin "Vernice ISM" This plugin was originally developed for use with Greenbone Security Manager. It is fully compatible with OpenVAS, but some variable names and tag use the abbreviation "gsm". These are required by Verinice, a Open Source ISMS-Tool avaiable from www.verinice.org openvas-manager-6.0.9/src/report_formats/Verinice_ISM/Verinice_ISM.xsl000644 001751 001751 00000127730 12655056355 027024 0ustar00michaelmichael000000 000000 gsm_os Not Available gsm_os_cpe Not Available gsm_hostname gsm_scan_started gsm_scan_ended gsm_open_ports Not Available gsm_cpuinfo Not Available gsm_memory Not Available gsm_mac_address Not Available gsm_traceroute Not Available gsm_installed_apps Not Available gsm_ip_address gsm_traceroute gsm_cpuinfo gsm_open_ports asset_description asset_value_availability 0 gsm_asset_description gsm_scan_ended asset_type gsm_memory gsm_ip_address gsm_mac_address gsm_scan_started asset_name IS Coordinator Info gsm_hostname asset_abbr gsm_asset_tag gsm_system_info gsm_os_cpe gsm_installed_apps gsm_os -InfoAsset gsm_ism_asset gsm_ism_vulnerability_name IS Coordinator Info gsm_ism_vulnerability_level gsm_ism_vulnerability_cvss gsm_ism_vulnerability_cve gsm_ism_vulnerability_description -InfoVulnerability gsm_ism_vulnerability control_implemented control_implemented_no gsm_ism_control_description Dear IS Coordinator, A new scan has been carried out and the results are now available in Verinice. If responsible persons are linked to the asset groups, the tasks are already created. Please check the results in a timely manner. Best regards CIS gsm_ism_control_tag gsm_system_info gsm_ism_control_cpe control_name IS Coordinator Info -InfoControl gsm_ism_control gsm_ism_scenario_cve incident_scenario_name IS Coordinator Info gsm_ism_scenario_cvss gsm_ism_scenario_level gsm_ism_scenario_description -InfoScenario gsm_ism_scenario -InfoScenario -InfoAsset rel_incscen_asset -InfoScenario -InfoVulnerability rel_incscen_vulnerability -InfoControl -InfoScenario rel_control_incscen gsm_ism_asset_abbr gsm_ism_asset_hostname gsm_ism_asset_tags gsm_ism_asset_type asset_type_phys gsm_ism_asset_description - gsm_ism_asset gsm_ism_vulnerability_name gsm_ism_vulnerability_description Summary: Result 1: Result 1: Vulnerability Detection Result: Vulnerability was detected according to the Vulnerability Detection Method. Result 1: Impact: Affected Software/OS: Solution: Solution type: Vulnerability Insight: Vulnerability Detection Method: Log Method: Details: ... (OID: ) Version used: Product Detection Result: Product: Method: (OID: ) gsm_ism_vulnerability_cve gsm_ism_vulnerability_level gsm_ism_vulnerability_cvss --vulnerability gsm_ism_vulnerability , , gsm_ism_control_name control_implemented control_implemented_no gsm_ism_control_description gsm_ism_control_cpe Unknown gsm_ism_control_tag --control gsm_ism_control gsm_ism_scenario_name gsm_ism_scenario_cve gsm_ism_scenario_level gsm_ism_scenario_description gsm_ism_scenario_cvss --scenario gsm_ism_scenario --scenario --vulnerability rel_incscen_vulnerability --scenario - rel_incscen_asset --control --scenario rel_control_incscen itverbund_name gsm_tag ap-GSM itverbund gsm_ism_assets_group_name Assets GSM-Scan -ism-assets gsm_ism_assets gsm_ism_vulnerabilities_group_name Vulnerabilities GSM-Scan -ism-vulnerabilities gsm_ism_vulnerabilities gsm_ism_controls_group_name Controls GSM-Scan -ism-controls gsm_ism_controls gsm_ism_scenarios_group_name Scenarios GSM-Scan -ism-scenario gsm_ism_scenarios attachment_file_name attachment_name attachment_date 000 attachment_mime_type files/ openvas-manager-6.0.9/src/report_formats/Anonymous_XML/generate000755 001751 001751 00000001656 12557600616 025766 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: Report generator script: Anonymous XML. # # Authors: # Matthew Mundell # # Copyright: # Copyright (C) 2015 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. xsltproc ./Anonymous_XML.xsl $1 openvas-manager-6.0.9/src/report_formats/Anonymous_XML/Anonymous_XML.xsl000644 001751 001751 00000007704 12757560563 027516 0ustar00michaelmichael000000 000000 openvas-manager-6.0.9/src/report_formats/CPE/generate000755 001751 001751 00000002100 12557600615 023645 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: Report generator script: CPE. # # This report extracts the tables of identified # Common Product Enumerations from the given # XML scan report using a XSL transformation with # the tool xsltproc. # # Authors: # Matthew Mundell # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. xsltproc ./CPE.xsl $1 openvas-manager-6.0.9/src/report_formats/CPE/CPE.xsl000644 001751 001751 00000003174 12557600615 023300 0ustar00michaelmichael000000 000000 | openvas-manager-6.0.9/src/report_formats/ITG/generate000755 001751 001751 00000002054 12557600616 023672 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: Report generator script: ITG. # # This report extracts the tables of IT-Grundschutz # scans from the given XML scan report using a XSL # transformation with the tool xsltproc. # # Authors: # Matthew Mundell # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. xsltproc ./ITG.xsl $1 openvas-manager-6.0.9/src/report_formats/ITG/ITG.xsl000644 001751 001751 00000003141 12557600616 023323 0ustar00michaelmichael000000 000000 openvas-manager-6.0.9/src/report_formats/ARF/generate000755 001751 001751 00000002011 12557600616 023650 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id: generate 12496 2012-01-18 08:41:55Z hdoreau $ # Description: Report generator script: ARF # # This report generates an Asset Reporting Format compliant document. # # Authors: # Henri Doreau # # Copyright: # Copyright (C) 2012 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. xsltproc ./ARF.xsl $1 openvas-manager-6.0.9/src/report_formats/ARF/ARF.xsl000644 001751 001751 00000012211 12557600616 023273 0ustar00michaelmichael000000 000000 openvas-manager-6.0.9/src/report_formats/TXT/generate000755 001751 001751 00000002031 12557600616 023721 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: Report generator script: TXT. # # This report generator creates a single TXT # file from the XML report using a XSL transformation # with the tool xsltproc. # # Authors: # Matthew Mundell # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. xsltproc ./TXT.xsl $1 openvas-manager-6.0.9/src/report_formats/TXT/TXT.xsl000644 001751 001751 00000133450 12557600616 023422 0ustar00michaelmichael000000 000000 = * - ! ! 0 Note (Result ) : Note active until: . Note last modified: . 0 Override from Any to (Result ) : Override active until: . Override last modified: . CVE: , BID: , CERT: Warning: CERT: , Other: ~ Changed Issue - Removed Issue + Added Issue = Equal Issue Issue NVT: OID: Threat: Port: Product detection result: Detected by: (OID: ) Summary: Result 1: Result 1: Vulnerability Detection Result: Vulnerability was detected according to the Vulnerability Detection Method. Impact: Solution: Solution type: Affected Software/OS: Vulnerability Insight: Vulnerability Detection Method: Log Method: Details: ... (OID: ) Version used: Product Detection Result: Product: Method: (OID: ) References: Result 2 Description: Different Lines: 1 0 Issue Threat: CVE: CPE: This document compares the results of two security scans. The report first summarises the hosts found. Then, for each host, the report describes the changes that occurred between the two scans. This document predicts the results of a security scan, based on scan information already gathered for the hosts. The report first summarises the results found. Then, for each host, the report describes every issue found. Please consider the advice given in each description, in order to rectify the issue. This document reports on the results of an automatic security scan. The report first summarises the results found. Then, for each host, the report describes every issue found. Please consider the advice given in each description, in order to rectify the issue. All dates are displayed using the timezone " ", which is abbreviated " ". Vendor security updates are trusted, using full CVE matching. Vendor security updates are trusted, using partial CVE matching. Vendor security updates are not trusted. Overrides are on. When a result has an override, this report uses the threat of the override. Overrides are off. Even when a result has an override, this report uses the actual threat of the result. Notes are excluded from the report. Notes are included in the report. This report might not show details of all issues that were found. It only lists hosts that produced issues. It shows issues that contain the search phrase " ". Issues with the threat level "High" are not shown. Issues with the threat level "Medium" are not shown. Issues with the threat level "Low" are not shown. Issues with the threat level "Log" are not shown. Issues with the threat level "Debug" are not shown. Issues with the threat level "False Positive" are not shown. This report contains 0 results. This report contains result of the results selected by the filtering above. This report contains all results selected by the filtering described above. This report contains results to of the results selected by the filtering described above. Before filtering there were results. Scan started: Scan ended: Task: Host Summary Host High Medium Low Log False Positive II Results per Host Number of results: Security Issues for Host Scanning of this host started at: Number of results: Port Summary for Host Service (Port) Threat Level Closed CVEs for Host CVE NVT Security Issues for Host I Delta Report Summary I Prognostic Report Summary I Summary openvas-manager-6.0.9/src/report_formats/XML/generate000755 001751 001751 00000001773 12557600615 023715 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: Report generator script: XML. # # This report generator is the most trivial # one as it simply passes on the XML report # without any change. # # Authors: # Matthew Mundell # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. cat $1 openvas-manager-6.0.9/src/report_formats/HTML/generate000755 001751 001751 00000002034 12557600615 024010 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: Report generator script: HTML. # # This report generator creates a single HTML # file from the XML report using a XSL transformation # with the tool xsltproc. # # Authors: # Matthew Mundell # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. xsltproc ./HTML.xsl $1 openvas-manager-6.0.9/src/report_formats/HTML/HTML.xsl000644 001751 001751 00000145420 12557600615 023573 0ustar00michaelmichael000000 000000


                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ↵ ↵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ↵
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ↵                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         Scan started: Scan ended: 0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Note (Result )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Active until: .
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Last modified: .
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        0
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Override from Any to (Result )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Active until: .
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Last modified: .
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        CVE: , BID: , CERT: Warning: CERT: , Other: background:#539dcb background:#f99f31 background:#cb1d17 background:#d5d5d5
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        (CVSS: )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ~ − + =
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        (CVSS: ) (Overridden from ) (CVSS: )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        NVT: ... (OID: )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Product detection result: by (OID: )
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Summary
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Result 1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Result 1

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Vulnerability Detection Result

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Vulnerability was detected according to the Vulnerability Detection Method.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Impact
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Solution

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Solution type:

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Affected Software/OS
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Vulnerability Insight
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Vulnerability Detection Method Log Method

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Details:
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ... (OID: )

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Version used:

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Product Detection Result

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Product:
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Method: (OID: )

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        References
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Result 2
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Different Lines

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        1 0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         ( ) SSH Success ( ) SSH Failure ( ) SMB Success ( ) SMB Failure ( ) ESXi Success ( ) ESXi Failure

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Delta Report Summary

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        This document compares the results of two security scans. The report first summarises the hosts found. Then, for each host, the report describes the changes that occurred between the two scans.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Prognostic Report Summary

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        This document predicts the results of a security scan, based on scan information already gathered for the hosts. The report first summarises the results found. Then, for each host, the report describes every issue found. Please consider the advice given in each description, in order to rectify the issue.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Summary

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        This document reports on the results of an automatic security scan. The report first summarises the results found. Then, for each host, the report describes every issue found. Please consider the advice given in each description, in order to rectify the issue.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Vendor security updates are trusted, using full CVE matching. Vendor security updates are trusted, using partial CVE matching. Vendor security updates are not trusted.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Overrides are on. When a result has an override, this report uses the threat of the override. Overrides are off. Even when a result has an override, this report uses the actual threat of the result.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Notes are excluded from the report. Notes are included in the report.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        This report might not show details of all issues that were found. It only lists hosts that produced issues. It shows issues that contain the search phrase "". Issues with the threat level "High" are not shown. Issues with the threat level "Medium" are not shown. Issues with the threat level "Low" are not shown. Issues with the threat level "Log" are not shown. Issues with the threat level "Debug" are not shown. Issues with the threat level "False Positive" are not shown.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        This report contains 0 results. This report contains result of the results selected by the filtering above. This report contains all results selected by the filtering described above. This report contains results to of the results selected by the filtering described above. Before filtering there were results.

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        All dates are displayed using the timezone " ", which is abbreviated " ".

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Scan 1 started:
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Scan 2 started:
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Scan 1 ended:
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Scan 2 ended:
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Task:
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Task:

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Host Summary

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Host Start End High Medium Low Log False Positive
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        (not finished)
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Total:

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Host Authentications

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Host Protocol Result Port/User

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Results per Host

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Host

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Scanning of this host started at:
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Number of results:

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        CVEs closed by vendor security updates for

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        CVE NVT

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Port Summary for Host

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Service (Port) Threat Level

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Security Issues for Host

                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        Scan Report
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        This file was automatically generated.
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        openvas-manager-6.0.9/src/report_formats/NBE/generate000755 001751 001751 00000002224 12557600615 023651 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: Report generator script: NBE. # # This report generator creates the old Nessus NBE # format for reports. The XML report is tranformed # via a XSL script into the line-oriented CSV # format called NBE. # # To run this generator properly, the tool xsltproc # needs to be accesible. # # Authors: # Matthew Mundell # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. xsltproc ./NBE.xsl $1 openvas-manager-6.0.9/src/report_formats/NBE/NBE.xsl000644 001751 001751 00000037332 12557600615 023275 0ustar00michaelmichael000000 000000 timestamps|||scan_start| | timestamps|||scan_end| | Security Note Security Warning Security Hole Log Message \n \n CVE: , \n BID: , \n CERT: Warning: \n CERT: , \n Other: \n \n results | | | | | | Summary: \n \n\n Result 1: \n \n Result 1: \n Vulnerability Detection Result: \n Vulnerability was detected according to the Vulnerability Detection Method. \n Impact: \n \n\n Solution: \n Solution type: \n \n\n Affected Software/OS: \n \n\n Vulnerability Insight: \n \n\n Vulnerability Detection Method: Log Method: \n \n Details: \n \n ... \n (OID: ) \n Version used: \n \n Product Detection Result: \n Product: \n Method: \n (OID: ) \n \n CVSS Base Score: \n(CVSS2#: )\n References: \n timestamps|| |host_start| | timestamps|| |host_end| | openvas-manager-6.0.9/src/report_formats/Topology/generate000755 001751 001751 00000003316 12557600616 025065 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: Report generator script: Topology plot. # # This report generates a SVG image showing the # network topology. In a first step, the OMP report is # transformed via XSL with the tool xsltproc. # Next duplicate lines are removed with awk and finally # twopi of GraphViz creates the SVG file. # # Authors: # Jan-Oliver Wagner # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. TMP=`mktemp -d` || exit 1 xsltproc ./hostvisdot-summary.xsl $1 > ${TMP}/summary-rgb.dot # remove duplicate lines: awk '!($0 in a) {a[$0];print}' ${TMP}/summary-rgb.dot > ${TMP}/summary-rgb-nondup.dot # Generate an SVG graphic using one of the GraphViz modules. TYPE=`cat $1 | xmlstarlet sel -t -v "/report/report_format/param[name='Graph Type']/value"` if [ -z $TYPE ]; then twopi -Tsvg ${TMP}/summary-rgb-nondup.dot -o ${TMP}/summary-rgb-nondup.svg else $TYPE -Tsvg ${TMP}/summary-rgb-nondup.dot -o ${TMP}/summary-rgb-nondup.svg fi cat ${TMP}/summary-rgb-nondup.svg openvas-manager-6.0.9/src/report_formats/Topology/hostvisdot-summary.xsl000644 001751 001751 00000015625 12557600616 030004 0ustar00michaelmichael000000 000000 digraph scan { nodesep = ; nodesep = 8; ranksep = 2; overlap = "true"; fontsize = 8.0; concentrate = "true"; root = "OpenVAS"; "OpenVAS" [label="OpenVAS", style=filled, color=chartreuse3]; "" [label="", style=filled, shape=Mrecord, color=red, fontcolor=white]; "" [label="", style=filled, shape=Mrecord, color=orange, fontcolor=white]; "" [label="", style=filled, shape=Mrecord, color=cornflowerblue, fontcolor=white]; } "OpenVAS" -> ""; "OpenVAS" -> ""; "OpenVAS" -> "127.0.0.1" [style=dashed]; "" -> ""; "" -> ""; ":" [label ="", shape="Mrecord"]; "" -> ":" [len = 0.2, arrowhead="none"]; ":" [label ="", shape="Mrecord"]; "" -> ":" [len = 0.2, arrowhead="none"]; openvas-manager-6.0.9/src/report_formats/PDF/generate000755 001751 001751 00000002664 12557600616 023667 0ustar00michaelmichael000000 000000 #!/bin/sh # # OpenVAS # $Id$ # Description: Report generator script: PDF. # # This report generate initially creates a LaTeX file # using a XML transformation with the tool xsltproc. # In a second step the latex file is processed with # the tool pdflatex and results in the final PDF file. # The intermediate files are stored under /tmp. # # Authors: # Matthew Mundell # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. TMP=`mktemp -d` || exit 1 xsltproc ./latex.xsl $1 > ${TMP}/report.tex pdflatex -interaction batchmode -output-directory ${TMP} ${TMP}/report.tex > /dev/null 2>&1 pdflatex -interaction batchmode -output-directory ${TMP} ${TMP}/report.tex > /dev/null 2>&1 cat ${TMP}/report.pdf && rm -rf ${TMP} openvas-manager-6.0.9/CMakeLists.txt000644 001751 001751 00000063767 12757560562 020463 0ustar00michaelmichael000000 000000 # OpenVAS # $Id$ # Description: Top-level cmake control for the Manager. # # Authors: # Matthew Mundell # Timo Pollmeier # # Copyright: # Copyright (C) 2009-2015 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. message ("-- Configuring the Manager...") project (openvas-manager C) cmake_minimum_required (VERSION 2.6) if (POLICY CMP0005) cmake_policy (SET CMP0005 OLD) endif (POLICY CMP0005) include (FindPkgConfig) if (NOT CMAKE_BUILD_TYPE) set (CMAKE_BUILD_TYPE Debug) endif (NOT CMAKE_BUILD_TYPE) if (NOT BACKEND STREQUAL POSTGRESQL) set (BACKEND SQLITE3) endif (NOT BACKEND STREQUAL POSTGRESQL) ## Retrieve svn revision (at configure time) # Not using Subversion_WC_INFO, as it would have to connect to the repo find_program (SVN_EXECUTABLE svn DOC "subversion command line client") macro (Subversion_GET_REVISION dir variable) execute_process (COMMAND ${SVN_EXECUTABLE} info ${CMAKE_SOURCE_DIR}/${dir} OUTPUT_VARIABLE ${variable} OUTPUT_STRIP_TRAILING_WHITESPACE) string (REGEX REPLACE "^(.*\n)?Revision: ([^\n]+).*" "\\2" ${variable} "${${variable}}") endmacro (Subversion_GET_REVISION) if (NOT CMAKE_BUILD_TYPE MATCHES "Release") if (EXISTS "${CMAKE_SOURCE_DIR}/.svn/") if (SVN_EXECUTABLE) Subversion_GET_REVISION(. ProjectRevision) set (SVN_REVISION ".SVN.r${ProjectRevision}") else (SVN_EXECUTABLE) set (SVN_REVISION ".SVN") endif (SVN_EXECUTABLE) endif (EXISTS "${CMAKE_SOURCE_DIR}/.svn/") endif (NOT CMAKE_BUILD_TYPE MATCHES "Release") ## CPack configuration set (CPACK_CMAKE_GENERATOR "Unix Makefiles") set (CPACK_GENERATOR "TGZ") set (CPACK_INSTALL_CMAKE_PROJECTS ".;openvas-manager;ALL;/") set (CPACK_MODULE_PATH "") set (CPACK_RESOURCE_FILE_LICENSE "${CMAKE_SOURCE_DIR}/COPYING") set (CPACK_RESOURCE_FILE_README "${CMAKE_SOURCE_DIR}/README") set (CPACK_RESOURCE_FILE_WELCOME "${CMAKE_SOURCE_DIR}/README") set (CPACK_SOURCE_GENERATOR "TGZ") set (CPACK_SOURCE_TOPLEVEL_TAG "") set (CPACK_SYSTEM_NAME "") set (CPACK_TOPLEVEL_TAG "") set (CPACK_PACKAGE_VERSION_MAJOR "6") set (CPACK_PACKAGE_VERSION_MINOR "0") # Use this scheme for stable releases: set (CPACK_PACKAGE_VERSION_PATCH "9${SVN_REVISION}") set (CPACK_PACKAGE_VERSION "${CPACK_PACKAGE_VERSION_MAJOR}.${CPACK_PACKAGE_VERSION_MINOR}.${CPACK_PACKAGE_VERSION_PATCH}") # Use this scheme for +betaN and +rcN releases: #set (CPACK_PACKAGE_VERSION_PATCH "+beta1${SVN_REVISION}") #set (CPACK_PACKAGE_VERSION "${CPACK_PACKAGE_VERSION_MAJOR}.${CPACK_PACKAGE_VERSION_MINOR}${CPACK_PACKAGE_VERSION_PATCH}") set (CPACK_PACKAGE_FILE_NAME "${PROJECT_NAME}-${CPACK_PACKAGE_VERSION}") set (CPACK_SOURCE_PACKAGE_FILE_NAME "${PROJECT_NAME}-${CPACK_PACKAGE_VERSION}") set (CPACK_PACKAGE_VENDOR "The OpenVAS Project") set (CPACK_SOURCE_IGNORE_FILES "/.svn/" "/_CPack_Packages/" "/CMakeFiles/" "cmake$" "swp$" "Cache.txt$" ".tar.gz" "install_manifest.txt" "Makefile" "/doc/generated/" "log.conf$" "Doxyfile$" "Doxyfile_full$" "VERSION$" "tools/greenbone-scapdata-sync$" "tools/greenbone-certdata-sync$" "tools/openvas-scapdata-sync$" "tools/openvas-certdata-sync$" "tools/openvas-portnames-update$" "tools/openvas-migrate-to-postgres$" "OMP.xml$" ) include (CPack) ## Variables set (OPENVASMD_DATABASE_VERSION 146) set (OPENVASMD_SCAP_DATABASE_VERSION 15) set (OPENVASMD_CERT_DATABASE_VERSION 6) set (OMP_VERSION "6.0") if (SYSCONF_INSTALL_DIR) set (SYSCONFDIR "${SYSCONF_INSTALL_DIR}") endif (SYSCONF_INSTALL_DIR) if (NOT SYSCONFDIR) set (SYSCONFDIR "${CMAKE_INSTALL_PREFIX}/etc") endif (NOT SYSCONFDIR) if (NOT EXEC_PREFIX) set (EXEC_PREFIX "${CMAKE_INSTALL_PREFIX}") endif (NOT EXEC_PREFIX) if (NOT BINDIR) set (BINDIR "${EXEC_PREFIX}/bin") endif (NOT BINDIR) if (NOT SBINDIR) set (SBINDIR "${EXEC_PREFIX}/sbin") endif (NOT SBINDIR) if (NOT LIBDIR) set (LIBDIR "${EXEC_PREFIX}/lib") endif (NOT LIBDIR) if (NOT LOCALSTATEDIR) set (LOCALSTATEDIR "${CMAKE_INSTALL_PREFIX}/var") endif (NOT LOCALSTATEDIR) if (NOT DATADIR) set (DATADIR "${CMAKE_INSTALL_PREFIX}/share") endif (NOT DATADIR) if (NOT INCLUDEDIR) set (INCLUDEDIR "${CMAKE_INSTALL_PREFIX}/include") endif (NOT INCLUDEDIR) # The maximum number of seconds the SQLite backend will sleep # before retrying an SQL operation that is getting a busy response. # # 0 means to not sleep at all, and let the db/libsqlite do its own thing. # if (NOT DEFINED OPENVAS_SQLITE_SLEEP_MAX) set (OPENVAS_SQLITE_SLEEP_MAX 0) endif (NOT DEFINED OPENVAS_SQLITE_SLEEP_MAX) #if (NOT SYSCONFDIR) # set (SYSCONFDIR "${CMAKE_INSTALL_PREFIX}/etc") #endif (NOT SYSCONFDIR) set (OPENVAS_DATA_DIR "${DATADIR}/openvas") set (OPENVAS_STATE_DIR "${LOCALSTATEDIR}/lib/openvas") set (OPENVAS_LOG_DIR "${LOCALSTATEDIR}/log/openvas") set (OPENVAS_PID_DIR "${LOCALSTATEDIR}/run") set (OPENVAS_SYSCONF_DIR "${SYSCONFDIR}/openvas") set (OPENVAS_SCAP_RES_DIR "${OPENVAS_DATA_DIR}/scap") set (OPENVAS_SCAP_DATA_DIR "${OPENVAS_STATE_DIR}/scap-data") set (OPENVAS_CERT_RES_DIR "${OPENVAS_DATA_DIR}/cert") set (OPENVAS_CERT_DATA_DIR "${OPENVAS_STATE_DIR}/cert-data") set (OPENVAS_CA_DIR "${OPENVAS_STATE_DIR}/openvasmd/trusted_certs") set (OPENVAS_SCANNER_CERTIFICATE "${OPENVAS_STATE_DIR}/CA/servercert.pem") set (OPENVAS_SCANNER_KEY "${OPENVAS_STATE_DIR}/private/CA/serverkey.pem") set (OPENVAS_CLIENT_CERTIFICATE "${OPENVAS_STATE_DIR}/CA/clientcert.pem") set (OPENVAS_CLIENT_KEY "${OPENVAS_STATE_DIR}/private/CA/clientkey.pem") set (OPENVAS_CA_CERTIFICATE "${OPENVAS_STATE_DIR}/CA/cacert.pem") set (OPENVAS_NVT_DIR "${OPENVAS_STATE_DIR}/plugins/") message ("-- Install prefix: ${CMAKE_INSTALL_PREFIX}") ## Dependency checks ## ## TODO Also check for headers where needed. ## Improve for workflow: First collect list of missing libs, then print the ## list and throw an error, otherwise long install-cmake-install-cmake cycles ## might occur. pkg_check_modules (LIBOPENVAS_OMP REQUIRED libopenvas_omp>=8.0.5) pkg_check_modules (LIBOPENVAS_MISC REQUIRED libopenvas_misc>=8.0.5) pkg_check_modules (LIBOPENVAS_BASE REQUIRED libopenvas_base>=8.0.5) pkg_check_modules (GNUTLS REQUIRED gnutls>=2.8) pkg_check_modules (GLIB REQUIRED glib-2.0>=2.16) # Linking against libgthread is only required for GLib versions using the old, # deprecated thread API, i.e. version 2.30 and earlier. if (${GLIB_VERSION} VERSION_LESS "2.32.0") set (GTHREAD_REQUIRED TRUE) endif (${GLIB_VERSION} VERSION_LESS "2.32.0") if (GTHREAD_REQUIRED) pkg_check_modules (GTHREAD REQUIRED gthread-2.0) endif (GTHREAD_REQUIRED) if (BACKEND STREQUAL SQLITE3) pkg_check_modules (SQLITE3 REQUIRED sqlite3) else (BACKEND STREQUAL SQLITE3) message (STATUS "Looking for PostgreSQL...") find_program (PG_CONFIG_EXECUTABLE pg_config DOC "pg_config") execute_process (COMMAND ${PG_CONFIG_EXECUTABLE} --includedir-server OUTPUT_VARIABLE PostgreSQL_SERVER_INCLUDE_DIRS OUTPUT_STRIP_TRAILING_WHITESPACE) set(PostgreSQL_ADDITIONAL_SEARCH_PATHS ${PostgreSQL_SERVER_INCLUDE_DIRS}) find_package (PostgreSQL REQUIRED) if (NOT PostgreSQL_FOUND) message (SEND_ERROR "The PostgreSQL library is required.") endif (NOT PostgreSQL_FOUND) endif (BACKEND STREQUAL SQLITE3) message (STATUS "Looking for libgcrypt...") find_library (LIBGCRYPT gcrypt) if (NOT LIBGCRYPT) message (SEND_ERROR "The libgcrypt library is required.") else (NOT LIBGCRYPT) message (STATUS "Looking for libgcrypt... ${LIBGCRYPT}") execute_process (COMMAND libgcrypt-config --cflags OUTPUT_VARIABLE GCRYPT_CFLAGS OUTPUT_STRIP_TRAILING_WHITESPACE) execute_process (COMMAND libgcrypt-config --libs OUTPUT_VARIABLE GCRYPT_LDFLAGS OUTPUT_STRIP_TRAILING_WHITESPACE) endif (NOT LIBGCRYPT) message (STATUS "Looking for gpgme...") find_library (GPGME gpgme) if (NOT GPGME) message (SEND_ERROR "The gpgme library is required.") else (NOT GPGME) message (STATUS "Looking for gpgme... ${GPGME}") execute_process (COMMAND gpgme-config --cflags OUTPUT_VARIABLE GPGME_CFLAGS OUTPUT_STRIP_TRAILING_WHITESPACE) execute_process (COMMAND gpgme-config --libs OUTPUT_VARIABLE GPGME_LDFLAGS OUTPUT_STRIP_TRAILING_WHITESPACE) endif (NOT GPGME) ## Version string (REPLACE " " "" OPENVASMD_VERSION ${CPACK_PACKAGE_VERSION}) # Configure Doxyfile with version number configure_file (doc/Doxyfile.in doc/Doxyfile) configure_file (doc/Doxyfile_full.in doc/Doxyfile_full) configure_file (VERSION.in VERSION) configure_file (src/openvasmd_log_conf.cmake_in src/openvasmd_log.conf) configure_file (src/schema_formats/XML/OMP.xml.in src/schema_formats/XML/OMP.xml @ONLY) configure_file (tools/greenbone-scapdata-sync.in tools/greenbone-scapdata-sync @ONLY) configure_file (tools/greenbone-certdata-sync.in tools/greenbone-certdata-sync @ONLY) configure_file (tools/openvas-scapdata-sync.in tools/openvas-scapdata-sync @ONLY) configure_file (tools/openvas-portnames-update.in tools/openvas-portnames-update @ONLY) configure_file (tools/openvas-certdata-sync.in tools/openvas-certdata-sync @ONLY) configure_file (tools/openvas-migrate-to-postgres.in tools/openvas-migrate-to-postgres @ONLY) ## Program set (HARDENING_FLAGS "-Wformat -Wformat-security -O2 -D_FORTIFY_SOURCE=2 -fstack-protector -Wl,-z,relro -Wl,-z,now") set (CMAKE_C_FLAGS_DEBUG "${CMAKE_C_FLAGS_DEBUG} -Werror") set (CMAKE_C_FLAGS "${CMAKE_C_FLAGS} ${HARDENING_FLAGS} -Wall -D_BSD_SOURCE -D_ISOC99_SOURCE -D_SVID_SOURCE -D_DEFAULT_SOURCE -D_FILE_OFFSET_BITS=64") add_subdirectory (src) ## Documentation add_subdirectory (doc) ## Install install (CODE "file (MAKE_DIRECTORY \$ENV{DESTDIR}${OPENVAS_STATE_DIR}/openvasmd/report_formats)") install (FILES ${CMAKE_BINARY_DIR}/src/openvasmd_log.conf ${CMAKE_SOURCE_DIR}/src/pwpolicy.conf DESTINATION ${OPENVAS_SYSCONF_DIR}) install (FILES src/report_formats/Anonymous_XML/Anonymous_XML.xsl DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/5057e5cc-b825-11e4-9d0e-28d24461215b PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES src/report_formats/Anonymous_XML/generate DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/5057e5cc-b825-11e4-9d0e-28d24461215b PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/report_formats/ARF/ARF.xsl DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/910200ca-dc05-11e1-954f-406186ea4fc5/ PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES src/report_formats/ARF/generate DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/910200ca-dc05-11e1-954f-406186ea4fc5/ PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/report_formats/CPE/CPE.xsl DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/5ceff8ba-1f62-11e1-ab9f-406186ea4fc5/ PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES src/report_formats/CPE/generate DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/5ceff8ba-1f62-11e1-ab9f-406186ea4fc5/ PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/report_formats/CSV_Results/CSV_Results.xsl DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/c1645568-627a-11e3-a660-406186ea4fc5 PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES src/report_formats/CSV_Results/generate DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/c1645568-627a-11e3-a660-406186ea4fc5 PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/report_formats/CSV_Hosts/CSV_Hosts.xsl DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/9087b18c-626c-11e3-8892-406186ea4fc5 PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES src/report_formats/CSV_Hosts/generate DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/9087b18c-626c-11e3-8892-406186ea4fc5 PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/report_formats/HTML/HTML.xsl DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/6c248850-1f62-11e1-b082-406186ea4fc5 PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES src/report_formats/HTML/generate DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/6c248850-1f62-11e1-b082-406186ea4fc5 PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/report_formats/ITG/ITG.xsl DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/77bd6c4a-1f62-11e1-abf0-406186ea4fc5/ PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES src/report_formats/ITG/generate DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/77bd6c4a-1f62-11e1-abf0-406186ea4fc5/ PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/report_formats/LaTeX/latex.xsl DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/a684c02c-b531-11e1-bdc2-406186ea4fc5/ PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES src/report_formats/LaTeX/generate DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/a684c02c-b531-11e1-bdc2-406186ea4fc5/ PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/report_formats/NBE/NBE.xsl DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/9ca6fe72-1f62-11e1-9e7c-406186ea4fc5/ PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES src/report_formats/NBE/generate DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/9ca6fe72-1f62-11e1-9e7c-406186ea4fc5/ PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/report_formats/LaTeX/latex.xsl DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/c402cc3e-b531-11e1-9163-406186ea4fc5/ PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES src/report_formats/PDF/generate DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/c402cc3e-b531-11e1-9163-406186ea4fc5/ PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/report_formats/Topology/hostvisdot-summary.xsl DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/9e5e5deb-879e-4ecc-8be6-a71cd0875cdd/ PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES src/report_formats/Topology/generate DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/9e5e5deb-879e-4ecc-8be6-a71cd0875cdd/ PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/report_formats/TXT/TXT.xsl DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/a3810a62-1f62-11e1-9219-406186ea4fc5/ PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES src/report_formats/TXT/generate DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/a3810a62-1f62-11e1-9219-406186ea4fc5/ PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/report_formats/XML/generate DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/a994b278-1f62-11e1-96ac-406186ea4fc5/ PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/report_formats/Verinice_ISM/Verinice_ISM.xsl src/report_formats/Verinice_ISM/classification.csv src/report_formats/Verinice_ISM/classification.xsl src/report_formats/Verinice_ISM/classification_generator.sh DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/c15ad349-bd8d-457a-880a-c7056532ee15/ PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES src/report_formats/Verinice_ISM/generate DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/c15ad349-bd8d-457a-880a-c7056532ee15/ PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/report_formats/Verinice_ITG/Verinice_ITG.xsl src/report_formats/Verinice_ITG/classification-helpers.xsl DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/50c9950a-f326-11e4-800c-28d24461215b/ PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES src/report_formats/Verinice_ITG/generate DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_report_formats/50c9950a-f326-11e4-800c-28d24461215b/ PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/schema_formats/RNC/rnc.xsl src/schema_formats/HTML/HTML.xsl DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_schema_formats/02052818-dab6-11df-9be4-002264764cea/ PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES src/schema_formats/HTML/generate DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_schema_formats/02052818-dab6-11df-9be4-002264764cea/ PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/schema_formats/RNC/rnc.xsl src/schema_formats/RNC/RNC.xsl DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_schema_formats/787a4a18-dabc-11df-9486-002264764cea/ PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES src/schema_formats/RNC/generate DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_schema_formats/787a4a18-dabc-11df-9486-002264764cea/ PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES ${CMAKE_BINARY_DIR}/src/schema_formats/XML/OMP.xml DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_schema_formats/18e826fc-dab6-11df-b913-002264764cea/ PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES src/schema_formats/XML/generate DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_schema_formats/18e826fc-dab6-11df-b913-002264764cea/ PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/schema_formats/XML-brief/OMP.xsl DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_schema_formats/d6cf255e-947c-11e1-829a-406186ea4fc5/ PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES src/schema_formats/XML-brief/generate DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_schema_formats/d6cf255e-947c-11e1-829a-406186ea4fc5/ PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/alert_methods/SCP/alert DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_alert_methods/2db07698-ec49-11e5-bcff-28d24461215b/ PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/alert_methods/Send/alert DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_alert_methods/4a398d42-87c0-11e5-a1c0-28d24461215b/ PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/alert_methods/SNMP/alert DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_alert_methods/9d435134-15d3-11e6-bf5c-28d24461215b/ PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/alert_methods/Sourcefire/alert DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_alert_methods/cd1f5a34-6bdc-11e0-9827-002264764cea/ PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES src/alert_methods/verinice/alert DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/global_alert_methods/f9d97653-f89b-41af-9ba1-0f6ee00e9c1a/ PERMISSIONS OWNER_WRITE OWNER_READ OWNER_EXECUTE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (CODE "file (MAKE_DIRECTORY \$ENV{DESTDIR}${OPENVAS_DATA_DIR}/openvasmd/wizards)") install (FILES src/wizards/quick_first_scan.xml src/wizards/get_tasks_deep.xml src/wizards/delete_task_deep.xml src/wizards/quick_auth_scan.xml src/wizards/quick_task.xml src/wizards/reset_task.xml src/wizards/modify_task.xml DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/wizards/ PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES tools/portnames_update.xsl DESTINATION ${OPENVAS_DATA_DIR}/openvasmd/ PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES tools/cpe_youngerthan.xsl tools/cve_youngerthan.xsl tools/cpe_getbyname.xsl tools/cve_getbyname.xsl tools/oval_timestamp.xsl tools/ovaldef_getbyname.xsl tools/oval_verify.xsl tools/ovaldef_list_ids.xsl DESTINATION ${OPENVAS_SCAP_RES_DIR} PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) if (BACKEND STREQUAL SQLITE3) install (FILES tools/scap_db_init.sql tools/cpe_update.xsl tools/cve_update.xsl tools/oval_update.xsl DESTINATION ${OPENVAS_SCAP_RES_DIR} PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) else (BACKEND STREQUAL SQLITE3) install (FILES tools/scap_db_init_pg.sql RENAME scap_db_init.sql DESTINATION ${OPENVAS_SCAP_RES_DIR} PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES tools/cpe_update_pg.xsl RENAME cpe_update.xsl DESTINATION ${OPENVAS_SCAP_RES_DIR} PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES tools/cve_update_pg.xsl RENAME cve_update.xsl DESTINATION ${OPENVAS_SCAP_RES_DIR} PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES tools/oval_update_pg.xsl RENAME oval_update.xsl DESTINATION ${OPENVAS_SCAP_RES_DIR} PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) endif (BACKEND STREQUAL SQLITE3) install (FILES tools/cert_bund_getbyname.xsl tools/dfn_cert_getbyname.xsl DESTINATION ${OPENVAS_CERT_RES_DIR} PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) if (BACKEND STREQUAL SQLITE3) install (FILES tools/cert_db_init.sql tools/cert_bund_update.xsl tools/dfn_cert_update.xsl DESTINATION ${OPENVAS_CERT_RES_DIR} PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) else (BACKEND STREQUAL SQLITE3) install (FILES tools/cert_db_init_pg.sql RENAME cert_db_init.sql DESTINATION ${OPENVAS_CERT_RES_DIR} PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES tools/cert_bund_update_pg.xsl RENAME cert_bund_update.xsl DESTINATION ${OPENVAS_CERT_RES_DIR} PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) install (FILES tools/dfn_cert_update_pg.xsl RENAME dfn_cert_update.xsl DESTINATION ${OPENVAS_CERT_RES_DIR} PERMISSIONS OWNER_WRITE OWNER_READ GROUP_READ WORLD_READ) endif (BACKEND STREQUAL SQLITE3) install (FILES ${CMAKE_BINARY_DIR}/tools/openvas-scapdata-sync DESTINATION ${SBINDIR} PERMISSIONS OWNER_EXECUTE OWNER_READ OWNER_WRITE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES ${CMAKE_BINARY_DIR}/tools/openvas-portnames-update DESTINATION ${SBINDIR} PERMISSIONS OWNER_EXECUTE OWNER_READ OWNER_WRITE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES ${CMAKE_BINARY_DIR}/tools/openvas-certdata-sync DESTINATION ${SBINDIR} PERMISSIONS OWNER_EXECUTE OWNER_READ OWNER_WRITE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES ${CMAKE_BINARY_DIR}/tools/greenbone-scapdata-sync DESTINATION ${SBINDIR} PERMISSIONS OWNER_EXECUTE OWNER_READ OWNER_WRITE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES ${CMAKE_BINARY_DIR}/tools/greenbone-certdata-sync DESTINATION ${SBINDIR} PERMISSIONS OWNER_EXECUTE OWNER_READ OWNER_WRITE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES ${CMAKE_SOURCE_DIR}/tools/openvas-lsc-rpm-creator.sh DESTINATION ${OPENVAS_DATA_DIR} PERMISSIONS OWNER_EXECUTE OWNER_READ OWNER_WRITE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES ${CMAKE_BINARY_DIR}/tools/openvas-migrate-to-postgres DESTINATION ${SBINDIR} PERMISSIONS OWNER_EXECUTE OWNER_READ OWNER_WRITE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) install (FILES ${CMAKE_SOURCE_DIR}/tools/extra/xml_split DESTINATION ${OPENVAS_SCAP_RES_DIR} PERMISSIONS OWNER_EXECUTE OWNER_READ OWNER_WRITE GROUP_READ GROUP_EXECUTE WORLD_READ WORLD_EXECUTE) ## End openvas-manager-6.0.9/ChangeLog000644 001751 001751 00006154270 12761270635 017463 0ustar00michaelmichael000000 000000 2016-08-30 Michael Wiegand Preparing the openvas-manager 6.0.9 release. * CHANGES: Updated. 2016-08-24 Matthew Mundell Backport r24792. * src/manage_sql.c (scanner_task_iterator_readable): Correct offset. * src/omp.c (handle_get_scanners): Use correct accessor function. 2016-08-08 Matthew Mundell Backport r25978. * src/manage.c (slave_setup): Remove stray "if" from last commit. 2016-08-08 Matthew Mundell Backport r25975. * src/manage.c (slave_setup): If the connection succeeds for CREATE_TARGET but the command fails then put the task in Internal Error and giveup. This prevents the master task from hanging in Requested when the slave allows fewer targets than the master. 2016-07-28 Matthew Mundell Backport r25856. * src/openvasmd.c (handle_sigsegv): Remove cleanup so that core is dumped. 2016-07-26 Matthew Mundell Backport r25846. * src/report_formats/Anonymous_XML/Anonymous_XML.xsl: Also skip name in SCAN/TASK/SLAVE. 2016-07-26 Matthew Mundell Backport r25844. * src/report_formats/Anonymous_XML/Anonymous_XML.xsl: Also skip name in REPORT/REPORT/TASK. 2016-07-26 Matthew Mundell Backport r25842. * src/omp.c (handle_get_reports): Skip task name for Anonymous XML. * src/report_formats/Anonymous_XML/Anonymous_XML.xsl: Skip certificate host details and result owner. 2016-07-21 Matthew Mundell Backport r25810. * src/schema_formats/XML/OMP.xml.in (modify_agent, modify_slave) (modify_user): Correct attribute names. * doc/omp.html, doc/omp.rnc: Update from source. 2016-07-16 Matthew Mundell Backport r25786. * src/manage_sql.c (escalate_1): Add sorting by severity to filter. 2016-07-14 Matthew Mundell Backport r25774. * src/manage_sqlite3.c (backup_db): Use SQLite's backup interface instead of mv. Turn off WAL on the backup db to ensure that the db is a single file. 2016-07-07 Matthew Mundell Backport r25748. * src/omp.c (handle_get_configs, handle_get_scanners) (omp_xml_handle_end_element): In the GET commands, do not send dependents if the user may not read the dependent. 2016-07-05 Matthew Mundell Backport r25741. * src/manage_sql.c (copy_target): Copy alive_test too. 2016-06-29 Timo Pollmeier Backport r25646. * src/omp.c (omp_xml_handle_end_element): In case CLIENT_MODIFY_TASK, add missing break statements in set_task_preferences switch case block. 2016-06-07 Matthew Mundell Backport r25165. * src/manage.c (slave_connect, slave_setup, run_slave_task) (fork_osp_scan_handler, run_task): Add a warning everywhere a task is set to Internal Error. * src/manage.c (manage_cleanup_process_error): Add a warning everywhere a task is set to Internal Error. 2016-06-03 Matthew Mundell Backport r25449. * src/manage.c (slave_setup): Use init_target_iterator_one, because the target may belong to someone else. * src/manage_sql.c (init_target_iterator_one): New function. * src/manage.h: Add header accordingly. 2016-06-01 Timo Pollmeier Backport r25445. * src/manage.c (run_task): Send credential preferences with empty value instead of "(null)" value when they are null in the credential. 2016-05-30 Timo Pollmeier Backport r25414. * src/manage_sql.c (init_task_user_iterator): Make the user selection distinct so users are only shown once in the observers list. 2016-05-26 Matthew Mundell Backport r25386. * src/manage.c (run_slave_task): Add an error result to the report if authentication fails with the slave. Free hosts earlier. (run_task): Include new "authentication failure" case when checking run_slave_task return. 2016-05-26 Matthew Mundell Backport r25379. * src/manage_sql.c (create_config): Correct check for NVT selector insertion. config_type can be NULL. 2016-05-24 Matthew Mundell Backport r25358. * src/manage.c (run_task): Set the scheduled flag of the report every time, so that this flag is also set when a scheduled task uses the report from a previous stopped scan that was started manual. * src/manage_sql.c (set_report_scheduled): Export. * src/manage_sql.h: Add header accordingly. 2016-05-23 Matthew Mundell Backport r25352. * src/manage.c (manage_schedule): Try to resume before trying to start, otherwise the task always starts from the beginning. 2016-05-23 Matthew Mundell Backport r25343. * src/manage.c (fork_osp_scan_handler): Adjust proctitle formatting and wording, so it lines up and matches other cases. (run_task): Change proctitle of OTP scan handlers. 2016-05-18 Matthew Mundell Backport r25320. Where possible, always include the resource name in event log messages. * src/manage.h (resource_name): Export. * src/manage_sql.c (resource_name): Ensure that name is always initialised when the return is 0. * src/omp.c (log_event_internal): New function. From log_event. Get name when ID is given. (log_event, log_event_fail): Use log_event_internal. 2016-05-12 Matthew Mundell Backport r25263. * src/manage_sql.c (escalate_2): Add data "snmp_message" for method SNMP, with variable expansion like the email subject. 2016-05-12 Matthew Mundell Backport r25274. Add alert script forgotten with SNMP alert commit. * src/alert_methods/SNMP, src/alert_methods/SNMP/alert: New files. * CMakeLists.txt: Install alert script. 2016-05-12 Matthew Mundell Backport r25207. Add alert method SNMP. * src/manage.c (alert_method_name, alert_method_from_name): Add SNMP. * src/manage.h (alert_method_t): Add SNMP. * src/manage_sql.c (snmp_to_host): New function. (escalate_2): Add SNMP. 2016-05-05 Matthew Mundell Backport r25167. * src/manage.c (PERMISSION_ITERATOR_FILTER_COLUMNS): Add orphan. (PERMISSION_ITERATOR_COLUMNS): Name the orphan column. 2016-05-04 Matthew Mundell Backport r24794. * src/omp.c (handle_get_scanners) (omp_xml_handle_end_element): In the GET commands, do not send dependents of globals if the user may not read the dependent. For example, do not send a task owned by user A in the TASKS of target Localhost when user B does a GET_TARGETS. 2016-05-04 Matthew Mundell Backport r24795. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TARGETS use the correct accessor function. * src/manage.h: Add header accordingly. 2016-04-26 Matthew Mundell Backport r25091. * src/manage.h (alert_method_t): Move SCP after Send, because SEND was introduced first, and the enumeration values are used in the db. This might break alerts created since r24727, but will repair Send alerts created before r24747. 2016-04-07 Matthew Mundell Backport r24881. * INSTALL: Add alert prerequisites. 2016-04-07 Matthew Mundell Backport r24863. (Missed file.) * src/alert_methods/SCP/alert: Quote args. 2016-04-07 Matthew Mundell Backport a little of r24131. * src/manage_sql.c (alert_name): New function. 2016-04-07 Matthew Mundell Backport r24863. * src/manage_sql.c (scp_alert_path_print): New function. (escalate_2): Improve log message. Allow $n for task name to SCP path. * src/alert_methods/SCP/alert: Quote args. 2016-04-07 Matthew Mundell Backport r24760. * src/alert_methods/SCP/alert: Pass password with -f, otherwise it is visible in the process list. Remove temp files afterwards. 2016-03-23 Matthew Mundell Backport r24759. * src/omp.c (omp_xml_handle_end_element): In GET_ALERTS skip SCP password. 2016-04-06 Matthew Mundell Backport r24749. * CMakeLists.txt: Install SCP alert. 2016-03-22 Matthew Mundell Backport r24747. Add new alert method 'SCP'. * src/manage.c (alert_method_name, alert_method_from_name): Add SCP. * src/manage.h (alert_method_t): Add SCP. * src/manage_sql.c (validate_scp_data): New function. (create_alert, modify_alert): Check SCP method data. (run_alert_script): Put outputs on same line, so they're easy to change. (scp_to_host): New function. (escalate_2): Add SCP case. * src/omp.c (omp_xml_handle_end_element): Handle new returns. * src/alert_methods/SCP: New directory. * src/alert_methods/SCP/alert: New file. 2016-03-17 Matthew Mundell Backport r24696. * src/manage_sql.c (run_alert_script): New function. (send_to_host): Use run_alert_script. 2016-04-05 Matthew Mundell Backport r24872. * src/manage_sql.c (copy_report_format): If the report format is predefined, make sure that the cloned report format is trusted. 2016-03-25 Hani Benhabiles Backport r24789. Dynamically allocate and reallocate from_scanner buffer so it adjusts to larger inputs from scanner instead of silently exiting. * src/scanner.c (from_scanner): Define as pointer instead of array. (from_scanner_size, from_scanner_size_max): New variables. (openvas_scanner_read, openvas_scanner_full): Use new variables. (openvas_scanner_realloc): New function. (openvas_scanner_close): Free from_scanner buffer. (openvas_scanner_init): Allocate from_scanner buffer. * src/scanner.h: Add new function prototype. * src/otp.c: Adjust from_scanner declaration. (sync_buffer): Reallocate scanner buffer when it is full. * src/ompd.h: Adjust from_scanner declaration. 2016-03-22 Timo Pollmeier Backport r24727. * src/manage_sql.c (manage_optimize): Add version of query with stricter type handling for PostgreSQL to cleanup-result-severities case. 2016-03-22 Timo Pollmeier Backport r24354. * INSTALL, README, src/openvasmd.c (main): Add new --optimize option cleanup-result-severities. * src/manage_sql.c (manage_optimize): Add cleanup-result-severities case, filling in missing severity scores, e.g. in older OSP reports. 2016-03-22 Timo Pollmeier Backport r23021. * src/manage_sql.c (check_db_settings, credentials_setup): Add new setting "Default Severity". (make_osp_result): If no severity is given, fall back to value of Default Severity if none is found in SecInfo database and do not accept non-CVE results without severity. (setting_default_severity_dbl): New function. (modify_setting): Add new setting "Default Severity". * src/manage.h (setting_default_severity_dbl): New function prototype. 2016-03-16 Timo Pollmeier Backport r24670. * src/manage_sql.c (print_report_xml): Apply ignore_pagination option for "assets" and "prognostic" type reports. 2016-03-09 Hani Benhabiles Backport r24632. * src/manage.c (get_osp_scan_report): Fix memory and file descriptors leak, which caused long osp scans to abort. 2016-03-07 Timo Pollmeier Backport applicable part of r24607. * src/manage_sql.c (filtered_host_count): Add missing closing parenthesis in sql_int query in case with search phrase and no levels. 2016-03-03 Matthew Mundell Backport some of r24577. * src/manage_sql.c (port_order): New function. (result_cmp): Combine the ascending and descending cases. Add a case for sorting by NVT name ("Vulnerability" column in GSA). Compare ports with port_order because OpenVAS-8 orders ports as numbers. (print_report_xml): Restrict the sort columns accepted for delta reports, because the comparison depends on the sorting. 2016-03-01 Matthew Mundell Backport r24558. * src/schema_formats/XML/OMP.xml.in: Change the type of attribute "filter" from "uuid" to "text". * doc/omp.rnc, doc/omp.html: Update from source. 2016-02-26 Michael Wiegand Post release version bump. * CMakeLists.txt: Updated version to 6.0.9. 2016-02-26 Michael Wiegand Preparing the openvas-manager 6.0.8 release. * CHANGES: Updated. 2016-02-23 Matthew Mundell Backport r24455. * src/manage_sql.c (count2): Put parens around clause, because it may be made up of multiple terms. 2016-02-22 Hani Benhabiles Backport r23464. * src/manage.c (handle_osp_scan): Add error result for erroneous scan progress value. (fork_osp_scan_handler): Fix return value check. 2016-02-17 Matthew Mundell Backport r24371. * src/manage_sql.c (auto_delete_reports): Use SQL lib to generate LIMIT term. 2016-02-12 Matthew Mundell * src/manage_sql.c (auto_delete_reports): Use a custom iterator, instead of doing lots of SQL to get the preference values in the loop. 2016-02-12 Matthew Mundell Backport r24365. Add task preference for auto deleting reports. * src/manage_sql.c (auto_delete_reports): New function. (set_task_preferences): Add Auto Delete validation. * src/manage.h: Adjust header accordingly. * src/manage_sql.h: Add header accordingly. * src/manage.c (manage_schedule): Delete reports. * src/omp.c (omp_xml_handle_end_element): Include Auto Delete prefs in GET_TASKS. Handle new set_task_preferences return in CREATE_TASK and MODIFY_TASK. 2016-02-16 Matthew Mundell Backport r24375. Pass report with task when running an alert, instead of assuming that the alert applies to the most recent "Done" report. * src/manage_sql.c (escalate_1): Add report arg. (manage_alert): Add escalate_1 arg. (condition_met): Add report arg. (event): Add report arg. Pass to condition_met and escalate_1. (set_task_run_status): Pass report to event. (make_task_complete, check_for_new_nvts, check_for_new_secinfo) (check_for_updated_nvts, check_for_updated_secinfo): Pass 0 report to event. 2016-02-09 Matthew Mundell Backport r24338. * src/schema_formats/XML/OMP.xml.in (get_reports): Clarify what filter attributes are for. Add report_filter and report_filt_id attributes. * doc/omp.rnc, doc/omp.html: Update from source. 2016-01-26 Matthew Mundell Backport r24225. * src/omp.c (omp_parser_new): Copy the disabled command array, because they will be freed by omp_parser_free, and this may happen multiple times in a process that is forked to handle OMP for the schedular. 2016-01-15 Matthew Mundell Backport r24149. * src/manage_sql.c (WHERE_OWNER): New define. (manage_empty_trashcan): Only remove resources owned by current user. 2016-01-05 Matthew Mundell Backport r24037. * src/report_formats/Verinice_ISM/Verinice_ISM.xsl (info-control): Use new 'ISM Control Description' param. 2016-01-05 Matthew Mundell Backport r24036. Add "ISM Control Description" parameter to "Verinice ISM" report format. * src/manage_sql.c (VERINICE_ISM_CONTROL_DESCRIPTION): New define. (check_db_report_formats): Add parameter to Verinice ISM report format. 2015-12-21 Michael Wiegand Post release version bump. * CMakeLists.txt: Updated version to 6.0.8. 2015-12-21 Michael Wiegand Preparing the openvas-manager 6.0.7 release. * CHANGES: Updated. 2015-12-18 Matthew Mundell Backport r23774. * src/manage_sql.c (delete_filter): Check if the filter is in use by an alert condition. (init_filter_alert_iterator): Include alerts that use the filter in a condition. 2015-11-10 Matthew Mundell Backport r23771. Validate filter condition data for CREATE_ALERT and MODIFY_ALERT. * src/manage_sql.c (validate_alert_condition_data): Add filter cases. (create_alert): Handle new validation returns. * src/omp.c (omp_xml_handle_end_element): Handle new validation returns. Correct commands in log calls. 2015-12-18 Matthew Mundell Backport r23764. Add new alert conditions "Filter count at least" and "Filter count changed". * src/manage.h (alert_condition_t): Add filter conditions. * src/manage.c (alert_condition_name, alert_condition_description) (alert_condition_from_name, alert_condition_t): Add filter conditions. * src/manage_sql.c (init_alert_data_iterator): Align arg. (condition_met): Add filter cases. 2015-12-07 Matthew Mundell Backport r23955. * src/manage_sql.c (create_tables): Add index results_by_task_qod_severity. This speeds up the count of all a task's results for GET_TASKS. 2015-12-07 Matthew Mundell Backport r23952. * src/manage_sql.c (TASK_ITERATOR_COLUMNS_INNER): Remove columns only used for filtering. (TASK_ITERATOR_WHERE_COLUMNS_INNER): Add those columns. (task_iterator_run_status_name, task_iterator_last_report) (task_iterator_finished_reports, task_iterator_hosts_ordering) (task_iterator_scanner): Adjust offset. 2015-12-04 Matthew Mundell Backport r23937. * src/manage_sql.c (REPORT_ITERATOR_WHERE_COLUMNS): Add numeric types, to speed up filtering when the term is known to not be numberic. 2015-12-03 Matthew Mundell Backport r23924. Leave the threat, trend and status clauses out of the SQL filtering clause if they don't make sense for the filter term. * src/manage_sql.c (keyword_applies_to_column): New function. Only checks threat, trend and status so far. (filter_clause): Check if it's possible for the keyword to actually match the column, before adding the clause for the column. 2015-12-02 Matthew Mundell Backport r23920. * src/manage_sql.c (filter_clause): Remove "not" from NOT case, added in last commit. 2015-12-03 Matthew Mundell Backport r23919. When generating SQL filter clauses, skip the SQL WHERE clause for numeric columns when the filter term is known to not be numeric. This helps reduce the number of clauses for GET_TASKS, especially removing the expensive columns like severity, when the filter contains a term that does not have many matches. * src/manage.h (keyword_type_t): Add KEYWORD_TYPE_UNKNOWN. * src/manage_sql.c (column_t): Add type. (columns_select_column_single): Add type arg. Skip numeric columns when the type is not numeric (except when type is unknown). (columns_select_column): Prevent type check. (columns_select_column_with_type, keyword_type_from_string): New functions. (filter_clause): For terms that may match any column, skip the clause if the term is not numeric and the column type is numeric, because they can never match. (TASK_ITERATOR_COLUMNS_INNER, TASK_ITERATOR_WHERE_COLUMNS_INNER): Add types for integer columns. 2015-12-01 Matthew Mundell * ChangeLog: Remove stray entry. 2015-12-01 Matthew Mundell Backport r23902. * src/omp.c (omp_xml_handle_end_element): Pass min_qod to task_result_count. * src/manage_sql.c (task_result_count): Add arg min_qod. * src/manage.h: Update header accordingly. 2015-12-01 Matthew Mundell Backport r23900. * src/omp.c (omp_xml_handle_end_element): Add RESULT_COUNT to GET_TASKS. * src/manage_sql.c (task_result_count): New function. * src/manage.h: Add header accordingly. * src/schema_formats/XML/OMP.xml.in (get_tasks): Add RESULT_COUNT. * doc/omp.rnc, doc/omp.html: Update from source. 2015-11-27 Matthew Mundell Backport r23872. * src/manage_sql.c (init_aggregate_iterator): Also consider WHERE columns when finding the SELECT expressions for columns. 2015-11-27 Matthew Mundell Backport r23871. * src/manage_sql.c (init_aggregate_iterator): Pass where columns to filter_clause, because the select columns may be for reports or tasks. (type_where_columns): New function. 2015-11-27 Matthew Mundell Backport r23870. Add second versions of the GET iterator and count functions, that allow the caller to specify columns that may appear in the WHERE clause for filtering, but that must not appear in the SELECT columns. Specify such columns for the task and report iterators. * src/manage_sql.c (columns_select_column_single): New function. Body from columns_select_column. (columns_select_column): Call through to columns_select_column_single. (filter_clause): Add arg where_columns. Pass through to columns_select_column. (init_get_iterator2, count2): New function. Body from existing version, with where column args. (init_get_iterator, count): Call through to "2" version. (TASK_ITERATOR_COLUMNS, REPORT_ITERATOR_COLUMNS): Reduce to columns that are required as SELECT columns, that is, columns used by the accessor functions. (TASK_ITERATOR_WHERE_COLUMNS, REPORT_ITERATOR_WHERE_COLUMNS): New defines. Rest of columns from TASK_ITERATOR_COLUMNS, the "WHERE columns". (init_task_iterator, init_report_iterator): Use WHERE columns in iterator. (init_aggregate_iterator, setting_count, init_setting_iterator) (total_info_count, init_all_info_iterator): Add NULL arg for WHERE columns. 2015-11-26 Matthew Mundell Backport r23873. * src/manage_sql.c (check_db_settings): Escape % in format string. 2015-11-24 Matthew Mundell Backport r23854. Improve the speed of the GET iterator by doing a "pre-SELECT" with only the ID as a column. * src/manage_sql.c (init_get_iterator): Add inner SELECT when getting multiple rows without DISTINCT. 2015-11-24 Michael Wiegand Backport part of r23850. * src/report_formats/Verinice_ISM/Verinice_ISM.xsl (extract_organization): Use 'Verinice Source ID' tag if available. 2015-11-20 Matthew Mundell Backport r23823. * src/manage_sql.c (check_db_report_formats): Ensure "Verinice ISM" report format has the "Attach HTML report" param. 2015-11-19 Matthew Mundell Backport r23814. * src/manage.c (get_tasks_last_report): New function. (slave_setup): If the task is running or complete on the slave, then use the existing report from the slave's task, instead of starting the task from the beginning again. 2015-11-18 Matthew Mundell Backport r23813. * src/manage.c (slave_setup): Add TYPE to CREATE_CONFIG command, because this is now required. 2015-11-16 Timo Pollmeier Backport r23803. * src/manage.c (slave_setup): Test if credentials on slave are NULL before trying to delete them at the end of a scan. 2015-11-12 Matthew Mundell Backport r23777. Forgotten part of last commit. * CMakeLists.txt: Install Send alert file. * src/alert_methods/Send/, src/alert_methods/Send/alert: New directory and file. 2015-11-11 Matthew Mundell Backport r23775. Add alert method "Send", for sending the report to a TCP listener. * src/manage_sql.c (validate_send_data): New function. (create_alert, modify_alert): Validate data for Send method. (send_to_host): New function. (escalate_2): Add Send method. * src/manage.h (alert_method_t): Add Send. * src/manage.c (alert_method_name, alert_method_from_name): Add Send. * src/omp.c (omp_xml_handle_end_element): Handle new returns from create_alert and modify_alert. 2015-11-05 Matthew Mundell Backport r23750. * src/openvasmd.c (update_or_rebuild_nvt_cache) (rebuild_nvt_cache_retry): Add arg skip_create_tables. (fork_update_nvt_cache): Prevent table creation for SIGHUP rebuild. (main): Request table creation for --rebuild. 2015-11-02 Matthew Mundell Backport r23737. * src/html/XML/OMP.xml (create_report): Correct example. * doc/omp.html: Update from source. 2015-10-29 Matthew Mundell Backport r23723. Keep the task's "schedule periods" value whenever possible, so that the "Once" checkbox stays active even when the schedule is cleared. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_TASK set the schedule periods even if the schedule is not given. In CLIENT_MODIFY_TASK use the given periods value even when the schedule is "0". * src/manage.c (manage_schedule): At the end of the task leave schedule periods on 1 if it was 1. * src/manage_sql.c (set_task_schedule_periods_id): New function. (clear_duration_schedules, update_duration_schedule_periods): Leave schedule periods on 1. It's enough that the schedule is cleared. (copy_task): Copy schedule period too, so that once flag is copied. * src/manage_sql.h (set_task_schedule_periods): Move to manage.h. * src/manage.h: Update headers accordingly. 2015-10-28 Matthew Mundell Backport r23713. * src/html/XML/OMP.xml: Add compatiblity change about risk factor. (note, override, get_reports, get_results): Remove risk factor. * doc/omp.rnc, doc/omp.html: Update from source. 2015-10-28 Matthew Mundell Backport r23598. Remove some leaks found by valgrind. * src/manage.c (send_ifaces_preferences): Free ifaces. (send_hosts_access_preferences): Free hosts. * src/manage_acl.c (where_owned_user): Also free clause in report and result cases. * src/manage_sql.c (filter_clause): Free order when order_return was not given. (count): Free owner_filter. (escalate_2): Free initial g_log args. Don't set alert_subject to NULL, so that it is freed. Free extension and type. (task_observers): Free GString part of observers. (task_schedule_next_time_tz): Init get.id later, and free it after use. (task_preference_value): Always free quoted_name. Remove redundant value check. (init_task_schedule_iterator): Free permissions after first use too. * src/omp.c (init_get): Free user_filter when it was empty. (send_get_end): Store filter_term_value in variable, and free it after. (omp_xml_handle_end_element): Free pw_warning, current_report_id and source_iface. (init_omp_process): Free xml_context with g_markup_parse_context_parse intead of g_free, so that it's freed properly. 2015-10-27 Matthew Mundell Backport r23700. * src/sql_sqlite3.c (sql_prepare_internal, sql_exec_internal): Use sqlite3_prepare_v2 instead of sqlite3_prepare, as it handles schema changes better. 2015-10-26 Matthew Mundell Backport r23694. Avoid SQLITE_SCHEMA errors that happen when a rebuild runs, by preventing the views from being dropped. This only addresses SIGHUP initiated rebuilds, --rebuild will still result in any active database connections getting the SQLITE_SCHEMA return. * src/openvasmd.c (update_or_rebuild_nvt_cache): Pass flag to init_ompd to prevent create_tables from running. (main): Update init_ompd call. * src/manage_sql.c (init_manage_internal): Add arg skip_db_check, which controls whether DB check and cleanup are done. Update callers. (init_manage): Add arg skip_db_check. * src/omp.c (init_omp): Add arg skip_db_check. * src/ompd.c (init_ompd): Add arg skip_db_check. * src/ompd.h, src/omp.h, src/manage.h: Update headers accordingly. 2015-10-22 Matthew Mundell Backport r23680. * src/manage_sql.c (manage_complete_nvt_cache_update): Check config families. This updates the NVT selectors when the family of an NVT changes in the feed. (nvt_selector_set_family, config_update_nvt_family, update_nvt_family) (check_config_families): New functions. 2015-10-20 Matthew Mundell Backport r23639. * src/sql.c (sqlv, sql_quiet): Compare directly to 1 in the sql_exec_internal "while", because sql_exec_internal will return 2 on SQLITE_SCHEMA and we need to return in this case (otherwise the process will hang repeating the SQLITE_SCHEMA). 2015-10-16 Timo Pollmeier Backport r23601. * src/manage_sql.c (delete_lsc_credential): Check if a trash target uses the credential for ESXi when deleting it from trashcan. 2015-10-07 Matthew Mundell Backport r23550. * src/manage_sqlite3.c (create_tables): Lock the db completely around the drop-create view steps, so that other processes do not try to access the views when they have been removed. 2015-10-08 Matthew Mundell Backport r23534, but reuse an existing column in reports instead of adding a new column in a migrator. Record in each report in the db whether the task was started by the scheduler. Use this info to prevent the scheduler from stopping manually started tasks. * src/manage_sql.c (set_report_scheduled, report_scheduled): New functions. (create_current_report): Record whether the report was for a scheduled task. (task_schedule_iterator_stop_due): If the task was started manually, then simply return FALSE. 2015-10-07 Timo Pollmeier Backport r23529. * src/manage_sql.c (config_insert_preferences): Correct NULL check before quoting the default value. 2015-10-06 Matthew Mundell Backport r23511. * src/report_formats/CSV_Results/CSV_Results.xsl (result): Use "severity" instead of "nvt" for CVSS, because "severity" has the overridden value. * src/report_formats/CSV_Hosts/CSV_Hosts.xsl (openvas:max-cvss): Use "severity" instead of "nvt" for CVSS, because "severity" has the overridden value. 2015-10-05 Timo Pollmeier Backport r23507. Make it possible to import OSP scan configs. * src/manage_sql.c (config_insert_preferences, create_config): Add config_type parameter and handle OSP configs and parameters. * src/manage.h (preference_t): Add default_value field. (create_config): Add parameter. * src/omp.c (preference_new): Add default_value parameter. (import_config_data_t, create_config_data_reset): Add fields preference_default and type. (client_state_t, omp_xml_handle_start_element) (omp_xml_handle_end_element, omp_xml_handle_text): Handle preference default and type elements when importing a config. 2015-10-05 Matthew Mundell Backport r22979. * src/manage_sql.c (task_severity): Remove extra FROM clause. 2015-10-02 Matthew Mundell Backport r23498. * src/manage_pg.c (manage_session_init): Skip INSERT if uuid is NULL. * src/manage_sqlite3.c (manage_session_init): Skip INSERT if uuid is NULL. * src/manage_sql.c (reports_build_count_cache): Init session for user change. 2015-09-29 Hani Benhabiles Backport r23438. * src/manage_sql.c (create_config_from_scanner): Adjust handling of osp selection parameter type. 2015-09-28 Matthew Mundell Backport r23456. * src/omp.c (print_report_prognostic_xml): Add the scan and host start and end elements, at least because the NBE report requires them. 2015-09-28 Michael Wiegand Post release version bump. * CMakeLists.txt: Updated version to 6.0.7. 2015-09-28 Michael Wiegand Preparing the openvas-manager 6.0.6 release. * CHANGES: Updated. * CMakeLists.txt: Raise required openvas-libraries version to 8.0.5. * INSTALL: Update required openvas-libraries version. 2015-09-24 Hani Benhabiles Backport r23037. * src/manage.c (get_osp_scan_report): New function. (handle_osp_scan): Adjust to use new function. Only get detailed scan report when scan is finished. 2015-09-22 Timo Pollmeier Backport r23421. * src/omp.c (omp_xml_handle_end_element): In case CLIENT_CREATE_CONFIG make message for failure to get scanner params more verbose. 2015-09-16 Matthew Mundell Backport r23374. * CMakeLists.txt: Make the OPENVAS_SQLITE_SLEEP_MAX default 0, because this showed much much better responsiveness (compared to 5000000) on a heavily loaded machine. 2015-09-16 Matthew Mundell Backport missing case from r23306. * src/sql_sqlite3.c (sql_prepare_internal): Use OPENVAS_SQLITE_SLEEP_MAX. 2015-09-16 Matthew Mundell Backport r23357. * CMakeLists.txt, src/CMakeLists.txt: Use DEFINED for OPENVAS_SQLITE_SLEEP_MAX because 0 is a valid value but it is considered to be FALSE. * src/sql_sqlite3.c (sql_open): Add debug log that include sleep time. (sql_prepare_internal, sql_exec_internal, sql_bind_blob, sql_bind_int64) (sql_bind_double, sql_bind_text, sql_reset): If OPENVAS_SQLITE_SLEEP_MAX is 0 skip the openvas_usleep call entirely. 2015-09-11 Matthew Mundell Backport r23325. * src/manage_sql.c (print_report_xml): Add USER_TAGS to TASK. * src/schema_formats/XML/OMP.xml.in (report): Add missing TASK elements. * doc/omp.rnc, doc/omp.html: Update from source. 2015-09-09 Matthew Mundell Backport r23306. * CMakeLists.txt, src/CMakeLists.txt: Set OPENVAS_SQLITE_SLEEP_MAX. * src/sql_sqlite3.c (sql_prepare_internal, sql_exec_internal) (sql_bind_blob, sql_bind_int64, sql_bind_double, sql_bind_text) (sql_reset): Use OPENVAS_SQLITE_SLEEP_MAX. 2015-08-28 Matthew Mundell Backport r23199. * src/otp.c (process_otp_scanner_input): Check the transaction while parsing, to prevent locking the db for too long. 2015-08-27 Michael Wiegand * CHANGES: Updated in preparation for the upcoming 6.0.6 release. 2015-08-26 Matthew Mundell Backport r23170. * src/manage_sql.c (check_db_configs): Adjust Discovery NVT selector for moved and removed Service Detection NVTs. * src/manage_config_discovery.c (make_config_discovery): Remove NVTs from "Service detection" that were moved to "Product detection" or removed from scanner. 2015-08-26 Hani Benhabiles Backport r23133 and r23164. * src/omp.c (omp_xml_handle_end_element): Log authentication failure. * src/openvasmd.c (accept_and_maybe_fork): Set global variable client_address. 2015-08-25 Matthew Mundell Commit files missed in last commit. 2015-08-25 Matthew Mundell Backport r23151. Give up when doing the nvti cache update check and the database is busy, because this is done in the main omp service loop, so it could delay the service of OMP clients. * src/manage.c (manage_schedule): Handle new giveup return. * src/manage_sql.c (manage_update_nvti_cache): Wrap in a transaction, in order to giveup if the database is busy. * src/manage_sql.h: Adjust header accordingly. * src/sql_pg.c (sql_begin_immediate_giveup): New function. * src/sql_sqlite3.c (sql_begin_immediate_giveup): New function. * src/sql.h: Add header accordingly. 2015-08-24 Matthew Mundell Backport r23138. For slave tasks, add the host details of finished hosts, even if the task is still running. * src/manage.c (update_end_times): Remove add_host_details arg. Only add host details when setting end time. Only set end time when the end time was not set before. (slave_setup): Remove arg from add_host_details, so that the details are added when the task is running too. * src/manage_sql.c (scan_host_end_time): New function. * src/manage.h: Add header accordingly. 2015-08-21 Matthew Mundell Backport r23117. * src/manage_sql.c (struct result_buffer, result_buffer_t) (result_buffer_new, result_buffer_new, result_buffer_free): Move up in file. (compare_port_severity): Rename variable back, was host after all. Use struct instead of messing around with memory. (print_report_port_xml): Remove notes. Host is considered in compare_port_severity. 2015-04-21 Matthew Mundell Backport r23110. * src/manage_sql.c (struct result_buffer, result_buffer_new): Add severity_double. (print_report_port_xml): When buffering results include the severity in the duplicate check, otherwise higher-severity results may be removed when the results are sorted by increasing severity (which happens for alerts that do not have filters). 2015-08-20 Matthew Mundell Backport r23102. * src/manage_sql.c (manage_report_filter_controls): Mark field. (compare_port_severity): Rename variable. (report_filter_term): Mark field. (struct result_buffer, result_buffer_t): New type. (result_buffer_new, result_buffer_free): New functions. (print_report_port_xml): Use a struct instead of messing about with memory directly. 2015-04-21 Matthew Mundell Backport r22176. * src/manage.c (fork_osp_scan_handler): Init manage session, in case the OSP handling ever uses the current_credentials table. 2015-08-20 Michael Wiegand Backport r23096. * src/report_formats/Verinice_ISM/Verinice_ISM.xsl: Ignore results marked as "False Positive" for the verinice export. 2015-08-06 Matthew Mundell Backport r22981. * src/manage.c (run_task, manage_schedule): Init manage session after reinit_manage_process, so that the current_credentials table is created with SQLite. 2015-08-14 Michael Wiegand Backport r23050. * src/manage_sql.c (send_to_sourcefire, send_to_verinice) (manage_report, manage_send_report): Check effective user ID instead of user ID when deciding if privileges need to be dropped. 2015-08-14 Michael Wiegand Port r20857 from openvas-manager-5.0 branch. * tools/greenbone-scapdata-sync.in, tools/greenbone-certdata-sync.in: Check if the current user is indeed the owner of the database and abort before doing any write operations if not. 2015-08-13 Timo Pollmeier * src/manage_sql.c (make_osp_result): Remove a line accidentally left in the backport of r22496 (r22924). 2015-08-07 Timo Pollmeier Backport r22993. * src/omp.c (handle_get_scanners): Add names of OSP params to response. 2015-08-07 Matthew Mundell Backport r22986. * src/manage_pg.c (manage_create_sql_functions): Add current_severity. (create_tables): Use current_severity to get dynamic severity in views, so that special case severities like -3.0 are checked. Use current_severity for functions too, to reduce duplication. * src/manage_sqlite3.c (create_tables): In result_new_severities add check for special case severities to dynamic severity retrieval. 2015-08-06 Matthew Mundell Backport r22982. * src/manage_sql.c (init_port_range_iterator): Use acl_user_has_access_uuid for permission check for single port list case, so that Super check is done. 2015-08-03 Michael Wiegand Post release version bump. * CMakeLists.txt: Updated version to 6.0.6. 2015-08-03 Michael Wiegand Preparing the openvas-manager 6.0.5 release. * CHANGES: Updated. 2015-08-03 Michael Wiegand Backport r22358 by Hani Benhabiles. * src/report_formats/Anonymous_XML/generate, src/report_formats/ARF/generate, src/report_formats/CPE/generate, src/report_formats/CSV_Hosts/generate, src/report_formats/CSV_Results/generate, src/report_formats/HTML/generate, src/report_formats/ITG/generate, src/report_formats/LaTeX/generate, src/report_formats/NBE/generate, src/report_formats/PDF/generate, src/report_formats/TXT/generate, src/report_formats/Topology/generate, src/report_formats/Verinice_ISM/generate, src/report_formats/Verinice_ITG/generate, src/report_formats/XML/generate, src/schema_formats/HTML/generate, src/schema_formats/RNC/generate, src/schema_formats/XML-brief/generate, src/alert_methods/Sourcefire/alert, src/alert_methods/verinice/alert, src/schema_formats/XML/generate: Add WORLD_EXECUTE permission. 2015-07-29 Hani Benhabiles * src/manage_sql.c (make_osp_result): Fix sql statement columns change from last commit. 2015-07-29 Hani Benhabiles Backport r22496. * src/manage.c (parse_osp_report, fork_osp_scan_handler): Adjust make_osp_result() call. Get result port from OSP scan report. (make_osp_result): Insert result port in DB. 2015-07-27 Matthew Mundell Backport r22901. Use an email alert "message" for the defaults when attaching or including a report. Add $i and $t to the message. * src/manage_sql.c (REPORT_NOTICE_FORMAT, REPORT_ATTACH_FORMAT): Remove. (alert_message_print): Add $i to include the report, and $t to include a note when the report is truncated. (escalate_2): When including or attaching in an email, and there is no message, use a default message instead of printing the default email by hand. Also remove handling of the notes and included report, because these are now available with $i and $t in the message. * src/manage.h (ALERT_MESSAGE_INCLUDE, ALERT_MESSAGE_ATTACH): New defines. Default messages. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_ALERTS, when the method is email and a report is being attached/included and there is no message, send the default message. This ensures old alerts get the default message. 2015-07-27 Matthew Mundell Backport r22876. * src/manage_sql.c (escalate_2): Free term and report_zone. 2015-07-27 Matthew Mundell Backport r22869. Add a simple host summary as $H for alert messages. * src/manage_sql.c (alert_message_print): Add Host Summary. (escalate_2): Get host summary from manage_report and pass to alert_message_print. (host_summary_append): New function. (print_report_xml, manage_report): Add host_summary arg. * src/manage.h: Update header accordingly. 2015-07-20 Matthew Mundell Backport r22858. Add "subject" and "message" method data for email alerts, so that the user can set these fields. * src/manage_sql.c (create_alert, modify_alert): Check subject and message length. (email): Add a newline after the body, in case the user supplied message is missing a newline. (alert_subject_print, alert_message_print): New functions. (escalate_2): Use user's subject and message if given. (print_report_xml, manage_report): Add filter term and timezone return args. (manage_send_report): Add dummy args for print_report_xml. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): Handle new error returns from create_alert and modify_alert. 2015-07-24 Timo Pollmeier Backport r22895. * src/manage.c (validate_username): Allow dot (.) in username. 2015-07-23 Timo Pollmeier Backport r22871. * src/manage_sql.c (modify_setting): Save "Chinese" as "zh_CN". 2015-07-23 Timo Pollmeier Backport r22887. * src/manage_sql.c (init_asset_iterator): Remove extra FROM clause. 2015-07-23 Timo Pollmeier Backport r22885. * src/manage_sql.c (task_severity, init_asset_iterator) (report_scan_result_count, report_severity_data, filtered_host_count): If NVT cannot be found for dynamic severity without overrides, use static severity instead. 2015-07-23 Timo Pollmeier Backport r22883. * src/manage_sqlite3.c (create_tables): Drop and recreate views for consistency with PostgreSQL version and to avoid migrators for changes that do not affect the column schema. 2015-07-23 Timo Pollmeier Backport r22877. * src/manage_sql.c (report_severity_data): Get severity values from result_new_severities view. 2015-07-23 Timo Pollmeier Backport r22797 by Matthew Mundell. * src/manage_pg.c (manage_create_sql_functions, create_tables): When getting the severity of a result dynamically from the nvts table, fall back to the static result severity when the nvts table value is NULL, because results of OSP scans do not have an associated NVT in the nvts table. * src/manage_sqlite3.c (create_tables): As above. 2015-07-20 Hani Benhabiles Backport r22861. * src/omp.c (check_scanner_cert): Check certificate activation and expiration times. 2015-07-13 Hani Benhabiles Backport r22801. * src/manage_sql.c (init_report_errors_iterator): Simplify query to not duplicate values in certain cases. 2015-07-13 Timo Pollmeier Backport r22796. * src/manage.c (manage_schedule): Add a sigset_t* parameter to the parameter fork_connection and pass sigmask_current to fork_connection. * src/manage.h (manage_schedule): Add a sigset_t* parameter to the first parameter (fork_connection). * src/openvasmd.c (fork_connection_for_schedular): Add parameter sigmask_current and used it to restore the sigmask in the child of the first fork. 2015-07-10 Matthew Mundell Backport r22772. Adjust iterator call so that credentials are found when a user runs a task that uses someone else's credentials. * src/manage_sql.c (init_user_lsc_credential_iterator): Remove. (init_lsc_credential_iterator_one): New function. * src/manage.h: Add header accordingly. * src/manage.c (slave_setup, get_osp_task_options, run_task): Use init_lsc_credential_iterator_one to get credential details, so that permission checks are done. 2015-07-09 Michael Wiegand Post release version bump. * CMakeLists.txt: Updated version to 6.0.5. 2015-07-09 Michael Wiegand Preparing the openvas-manager 6.0.4 release. * CHANGES: Updated. 2015-07-07 Michael Wiegand Backport r22192. Original patch by Matthew Mundell. * src/manage_sql.c (trash_config_readable_uuid): Init found. 2015-07-06 Timo Pollmeier Backport r22695. * src/manage_sql.c (modify_setting): Also accept colon-separated lists of ISO language or language and country codes for the setting "User Interface Language". Convert old names other than "Browser language" to codes. 2015-07-06 Michael Wiegand Backport r22665. Original patch by Timo Pollmeier. * src/manage_sql.c (event): Use GArray functions for alerts_triggered instead of GPointerArray / array_t ones as pointers can be a different size than alert_t on some systems. 2015-07-06 Michael Wiegand Backport r22691. * src/manage.c: Define _GNU_SOURCE so pthread_sigmask () is correctly declared with glibc < 2.19. 2015-07-01 Timo Pollmeier Backport r22683. * src/manage_sql.c (qod_from_type): Add case for "general_note". 2015-07-01 Timo Pollmeier Backport r22681. Ensure that each task is added only once to the starts and stops list of the scheduling, preferring the owner of the task or schedule as the user starting or stopping the task. * src/manage_sql.c (init_task_schedule_iterator): Sort by Task ID and by whether the user matches the task or schedule owner. * src/manage.c (manage_schedule): Add each task only once to the starts and stops lists. 2015-06-17 Hani Benhabiles Backport r22650. * src/manage_sql.c (init_report_erors_iterator): Don't limit query to results with empty nvt value. 2015-06-16 Matthew Mundell Backport r22642. * src/manage_sql.c (event): Run the alerts outside the iterator, to prevent them from blocking update commands. 2015-06-15 Matthew Mundell Backport r22637. * src/manage.c (manage_schedule): Add sigmask_current arg. Restore this sigmask in forked child, so that it has sensible signal handling. * src/manage.h: Update header accordingly. * src/openvasmd.c (serve_and_schedule): Pass sigmask_current to manage_schedule. 2015-06-09 Timo Pollmeier Backport r22599. * src/manage_sql.c (report_counts_match): Look for search_phrase in the name and the last tag of the NVT. Use strcasestr to compare port, host, NVT OID and description to search_phrase when search_phrase_exact is 0. 2015-06-04 Timo Pollmeier Backport r22580. * src/manage_pg.c (manage_create_sql_functions): Add "log" cases to severity_in_level function and also count severity scores between 0.0 and 4.0 if severity_class is pci-dss. 2015-06-04 Timo Pollmeier Backport r22577. * src/omp.c (omp_xml_handle_start_element): In case CLIENT_CREATE_REPORT_RR_RESULTS_RESULT add branch for DESCRIPTION element. 2015-06-03 Hani Benhabiles Backport r22535. * src/manage_sql.c (check_db_tasks, make_osp_result): Set result owner and date. 2015-06-03 Matthew Mundell Backport r22522. Original patch by Benot Allard. * src/manage_sql.c (modify permission): Fix parameter in function call. 2015-06-03 Matthew Mundell Backport r22556. * src/manage_sql.c (RESULT_ITERATOR_COLUMNS) (RESULT_ITERATOR_FILTER_COLUMNS): Add NVT cve as "cve". 2015-06-03 Matthew Mundell Backport r22550. * src/manage_sql.c (RESULT_ITERATOR_COLUMNS) (RESULT_ITERATOR_FILTER_COLUMNS): Add task_id. 2015-06-01 Matthew Mundell Backport r22519. * src/manage_sql.c (permission_is_predefined): Add resource clause, because it's possible to create permissions on roles now, as long as they have resources. (modify_permission): Similarly, add resource check. 2015-05-27 Matthew Mundell Backport r22480. Deal with issues found by Clang's ccc-analyzer. * src/manage.c (slave_setup): Store done status in a variable, to make it easier for Clang to see that "report" is always initialised before use. (manage_run_wizard): Remove init of ret, as it is initialised later. * src/manage_sql.c (email, send_to_sourcefire, send_to_verinice) (manage_report, manage_send_report, manage_schema): Check system return, now that the /bin/sh call is gone. (print_report_xml): Explicitly check "type", to make it possible for Clang to see that result_count is always initialised before use. (modify_permission): Check correct variable. * src/schema_formats/XML/generate: Ensure that exit code is 0. * src/lsc_crypt.c (lsc_crypt_decrypt): Get the address of nl->name via pointer arithmetic, to help Clang figure out that there's enough room there. * src/omp.c (send_get_common): Remove setting of "writable", as it is not used after that. 2015-05-27 Matthew Mundell Backport r22472. * src/manage_sql.c (report_counts_match): String and SQL quote min_cvss_base for CAST. 2015-05-27 Matthew Mundell Backport r22458. * src/manage_sql.c (check_permission_args): Allow the user to give a predefined role permission on a resource, as long as the user owns the resource. 2015-05-27 Matthew Mundell Backport r22457. * src/manage_sql.c (check_permission_args): Correct subject check. 2015-05-27 Matthew Mundell * src/manage_sql.c (create_permission): Correct function name. 2015-05-27 Matthew Mundell Backport r22207. Use the create_permission arg checks for modify_permission too. This brings modify_permission up to date, including allowing the user to modify a resource permission if the user has GET access to the subject. * src/manage_sql.c (check_permission_args): New function. From create_permission. (create_permission): Call check_permission_args to do arg checks. (permission_subject_id, permission_resource_type) (permission_resource_id): New functions. (modify_permission): Let check_permission_args do the arg checks. 2015-05-25 Matthew Mundell Backport r22445, but do the check every time instead of in a migrator. * src/manage_sql.c (check_generate_scripts): New function. (check_db): Check generate scripts. * src/manage.h: Add header accordingly. 2015-05-25 Matthew Mundell Backport r22443. * src/manage_sql.c (create_report_format): Create the "generate" script with execute permission, now that execute is required to run the script. 2015-05-24 Matthew Mundell Backport r22440. * src/manage_acl.c (acl_where_owned_user): Correct comparison by using g_str_has_prefix. Previous version was comparing the whole string instead of looking for a prefix. This was causing the global resources to be excluded when a GET_XXX permission was requested. 2015-05-23 Matthew Mundell Backport r22378. * src/omp.c (omp_xml_handle_end_element): Replace aborts in GET_TASKS with g_errors. 2015-05-19 Matthew Mundell Backport r22181. * src/manage_sql.c (create_permission): Allow the user to create a resource permission if the user has GET access to the subject, as requiring MODIFY access to the subject is too strict. 2015-05-18 Timo Pollmeier Backport r22381. * src/manage_sql.c (where_levels_auto, where_levels_type): Use the function severity_in_level for log level. * src/manage.c (severity_in_level): Add "log" as alias for "none" and also count results with non-zero severity as log for pci-dss. 2015-05-15 Matthew Mundell Backport r22377. * src/omp.c (results_xml_append_nvt): Add CVE to NVT in "CVE-" case, so that the CVE appears in the References section on the GSA Result Details. 2015-05-15 Matthew Mundell Backport a little of r22124 and r22165. * src/omp.c (results_xml_append_nvt): Add CVE case. Move CVE info into NVT. 2015-05-13 Matthew Mundell Backport r22372. * src/manage.c (severity_in_level): Update PCI-DSS min. * src/manage_pg.c (manage_create_sql_functions): Update PCI-DSS min. * src/manage_sql.c (severity_class_xml): Update PCI-DSS min. * src/manage_utils.c (level_min_severity): Update PCI-DSS min. 2015-05-13 Matthew Mundell Backport r22186. Original patch by Hani Benhabiles. * src/manage_sql.c (find_trash): Add check for function parameter. 2015-05-12 Matthew Mundell Backport r22359. (And cve_cvss_base from r22124.) * src/manage_sql.c (make_osp_result): If the severity is not given and the NVT is a CVE, then get the severity from the SecInfo database. (cve_cvss_base): New function. * src/manage.h: Add header accordingly. 2015-05-12 Timo Pollmeier Backport r22356. * src/manage_sql.c (init_asset_iterator, filtered_host_count): Filter out results with QoD less than MIN_QOD_DEFAULT in the levels check. 2015-05-12 Matthew Mundell Backport r22298. * src/manage_sql.c (trim_partial_report): Compare end_time to 0 because it's an integer now. 2015-05-11 Matthew Mundell Backport r22347. * src/manage_sql.c (send_to_sourcefire, send_to_verinice, manage_report) (manage_send_report, manage_schema): Remove "/bin/sh" from commands, now that all scripts are installed as executable. 2015-05-11 Michael Wiegand Post release version bump. * CMakeLists.txt: Updated version to 6.0.4. 2015-05-11 Michael Wiegand Preparing the openvas-manager 6.0.3 release. * CHANGES: Updated. 2015-05-11 Matthew Mundell Backport r22327. * CMakeLists.txt: Add back prefix removed in last patch. Needed because OMP.xml is generated. 2015-05-11 Matthew Mundell Backport r22325. * report_formats/IVIL/generate, report_formats/simple_bar_chart/generate, report_formats/simple_map_plot/generate, report_formats/simple_pie_chart/generate, report_formats/simple_topo_plot/generate, report_formats/sourcefire/generate, report_formats/tls-map/generate, src/alert_methods/Sourcefire/alert, src/alert_methods/verinice/alert, src/report_formats/ARF/generate, src/report_formats/Anonymous_XML/generate, src/report_formats/CPE/generate, src/report_formats/CSV_Hosts/generate, src/report_formats/CSV_Results/generate, src/report_formats/HTML/generate, src/report_formats/ITG/generate, src/report_formats/LaTeX/generate, src/report_formats/NBE/generate, src/report_formats/PDF/generate, src/report_formats/TXT/generate, src/report_formats/Topology/generate, src/report_formats/Verinice_ISM/generate, src/report_formats/Verinice_ITG/generate, src/report_formats/XML/generate, src/schema_formats/HTML/generate, src/schema_formats/RNC/generate, src/schema_formats/XML-brief/generate, src/schema_formats/XML/generate: Add execute permission. * CMakeLists.txt: Install generate and alert scripts with execute permissions. 2015-05-08 Timo Pollmeier Backport r22205. Add min_qod filter keyword for get_results so the QoD filtering can be consistent with get_tasks and get_reports. * src/manage_sql.c (init_result_get_iterator, result_count): Add parameter min_qod. * src/manage.h (init_result_get_iterator, result_count): Add parameter. * src/omp.c (xml_handle_end_element): In case CLIENT_GET_RESULTS get min_qod filter keyword and pass it to init_result_get_iterator and result_count. 2015-05-08 Timo Pollmeier Backport r22182. Add min_qod filtering for Task and Report lists. * src/manage_pg.c (manage_create_sql_functions): Add min_qod parameter to SQL functions task_trend, report_severity, report_severity_count, task_severity and task_threat_level. * src/manage_sql.c (init_aggregate_iterator): Add min_qod from filter as parameter to type_opts_table call. (condition_met): Add MIN_QOD_DEFAULT as parameter to calls of task_severity_double. (TASK_ITERATOR_COLUMNS): Add min_qod parameter for task_threat_level, task_trend and task_severity SQL functions. (task_iterator_opts_table): Add min_qod parameter and column. (init_user_task_iterator): Add MIN_QOD_DEFAULT as min_qod parameter for task_iterator_opts_table. (init_task_iterator, task_count): Add min_qod from filter as parameter for task_iterator_opts_table. (task_severity, task_severity_double): Add min_qod parameter. (REPORT_ITERATOR_COLUMNS): Add min_qod parameter for report_severity and report_severity_count SQL functions. (report_iterator_opts_table): Add min_qod parameter and column. (report_count): Add MIN_QOD_DEFAULT as min_qod parameter for task_iterator_opts_table. (init_report_iterator): Add min_qod from filter as parameter for report_iterator_opts_table. (report_counts, report_severity, task_trend, type_opts_table): Add min_qod parameter. * src/manage_sqlite3.c (sql_task_trend): Add min_qod parameter. (sql_severity_t, clear_cache): Add min_qod field. (cached_task_severity, sql_task_threat_level, sql_report_severity) (report_severity_count, sql_report_severity_count, sql_task_severity): Add min_qod parameter. (manage_create_sql_functions): Increase parameter counts to account for new min_qod parameter of task_trend, task_threat_level, report_severity report_severity_count and task_severity. * src/manage.h (task_trend, task_severity, task_severity_double) (report_severity, report_counts, type_opts_table): Add parameter. * src/omp.c (send_reports): Add min_qod parameter. (omp_xml_handle_end_element): In CLIENT_GET_REPORTS case, get min_qod from report_filter and add it to the new results filter. In CLIENT_GET_TASKS case use min_qod when getting counts of reports. 2015-05-08 Timo Pollmeier Backport r22164. * src/manage_sql.c (init_get_iterator): Correct insertion order of "_trash" suffix and extra_tables into the SQL string. 2015-05-08 Timo Pollmeier Backport r22156. * src/manage_sql.c (type_columns, type_select_columns) (type_filter_columns, type_trash_columns, type_opts_table) (type_table): Add documentation. 2015-05-08 Timo Pollmeier Backport r22155. * src/manage_sql.c (result_iterator_opts_table): New function. (init_result_get_iterator, result_count): Use the new function to get extra_tables for consistency with Tasks and Reports. 2015-05-08 Timo Pollmeier Backport r22154. Adapt Report iterators to use the new FROM clause options instead of macro parameters. * src/manage_sql.c (REPORT_ITERATOR_COLUMNS): Remove macro parameters and use extra columns added in FROM clause for the options instead. (report_iterator_opts_table): New function. (report_count, init_report_iterator): Adapt to new structure of REPORT_ITERATOR_COLUMNS. 2015-05-08 Timo Pollmeier Backport r22153. Adapt Task and aggregate iterators to use the new FROM clause options instead of macro parameters. * src/manage_sql.c (init_aggregate_iterator): Get SQL for the opts table of the current type and add them to the FROM clause. (TASK_ITERATOR_COLUMNS): Remove macro parameters and use extra columns added in FROM clause for the options instead. (task_iterator_opts_table): New function. (init_user_task_iterator, init_task_iterator, task_count, type_columns) (type_select_columns, type_trash_columns): Adapt to new structure of TASK_ITERATOR_COLUMNS. (type_opts_table): New function. * src/manage.h (type_opts_table): New function prototype. 2015-05-08 Timo Pollmeier Backport r22142. Allow setting options like autofp and overrides in iterator columns via an addition to the FROM clause, which is more flexible than macro parmeters. Use this in init_result_get_iterator. * src/manage_sql.c (init_get_iterator): Add extra_tables parameter for adding to the FROM clause. (init_alert_iterator, init_task_iterator, init_report_iterator): Add NULL extra_tables parameter to init_get_iterator calls. (RESULT_ITERATOR_COLUMNS): Remove macro parameters and use extra columns added in FROM clause for the options instead. (RESULT_ITERATOR_COLUMN_COUNT, RESULT_ITERATOR_COLUMNS_ARRAY): Remove. (init_result_get_iterator, result_count): Use RESULT_ITERATOR_COLUMNS and an addition to the FROM clause via extra_tables instead of the now removed RESULT_ITERATOR_COLUMNS_ARRAY. (init_target_iterator, init_config_iterator, init_nvt_info_iterator) (init_lsc_credential_iterator, init_agent_iterator, init_note_iterator) (init_override_iterator, init_scanner_iterator, init_schedule_iterator) (init_report_format_iterator, init_slave_iterator, init_group_iterator) (init_permission_iterator, init_port_list_iterator, init_role_iterator) (init_filter_iterator, init_cpe_info_iterator, init_cve_info_iterator) (init_ovaldef_info_iterator, init_cert_bund_adv_info_iterator) (init_dfn_cert_adv_info_iterator, init_user_iterator) (init_tag_iterator, init_tag_name_iterator): Add NULL extra_tables parameter to init_get_iterator calls. 2015-05-07 Matthew Mundell Backport r22311. * src/manage_sql.c (TASK_ITERATOR_FILTER_COLUMNS) (TASK_ITERATOR_COLUMNS): Rename first and last to first_report and last_report. Add first and last. This is so that sorting by last sorts by date, to match the Last column on the GSA Tasks page. 2015-05-07 Matthew Mundell Backport r22306. * src/manage.c (slave_sleep_connect): Also stop for TASK_STATUS_STOP_REQUESTED. (run_slave_task): Add stop check to initial connect loop. 2015-05-07 Matthew Mundell Backport r22299. * src/openvasmd.c (accept_and_maybe_fork): Add sigmask_current arg. Restore this sigmask in the forked child so that it has sensible signal handling. (serve_and_schedule): Pass sigmask to restore to accept_and_maybe_fork. 2015-05-05 Matthew Mundell Backport r22288. * src/report_formats/Verinice_ITG/generate: Correct XSL file name. 2015-04-05 Matthew Mundell Backport r22286. Make report format "Verinice ITG" predefined. * src/manage_sql.c (check_db_report_formats) (format_predefined): Add Verinice ITG. * CMakeLists.txt: Install Verinice ITG. 2015-05-05 Matthew Mundell Backport r22284. * src/report_formats/Verinice_ITG/create_report_import: Remove. * src/report_formats/Verinice_ITG/gsm_verinice_itg.xsl: Remove. Now Verinice_ITG.xsl. * src/report_formats/Verinice_ITG/Verinice_ITG.xsl: New file. Was gsm_verinice_itg.xsl. 2015-05-05 Matthew Mundell Backport r22283. * report_formats/verinice-itg: Remove. Now in src/report_formats. * src/report_formats/Verinice_ITG: New directory. Was report_formats/verinice-itg. 2015-05-04 Matthew Mundell Backport r22277. * src/manage_sql.c (move_report_format_dir): New function. Works across devices. (delete_report_format, manage_restore): Use move_report_format_dir so that copying across devices works. 2015-04-30 Michael Wiegand Post release version bump. * CMakeLists.txt: Updated version to 6.0.3. 2015-04-30 Michael Wiegand Preparing the openvas-manager 6.0.2 release. * CHANGES: Updated. 2015-04-28 Hani Benhabiles Backport r22241. * src/openvasmd.c (manager_listen): New function. Add support for IPv6 addresses. (main): Call manager_listen() to create listener sockets, parse address and port values and bind sockets for both possible addresses. (manager_address, manager_address_2): Remove variables. 2015-04-28 Michael Wiegand Backport r22227. Ensure openvas-manager builds with GLib =< 2.32 by making sure the GLib thread API is initialised when using older GLib versions. Based on patch suggested by Miguel Angel Cabrera Moya. * src/openvasmd.c (main): Initialise old GLib thread API when necessary. * CMakeLists.txt: Check for presence of libgthread if necessary and gather flags. * src/CMakeLists.txt: Make sure LDFLAGS set when linking against libgthread is necessary are used in linking. 2015-04-20 Timo Pollmeier Backport r22158. * src/manage_sql.c (where_search_phrase): Filter for search_phrase also using last NVT tag and NVT name. 2015-04-14 Timo Pollmeier Backport r22109. Add new --optimize options rebuild-report-cache and update-report-cache. * INSTALL: Add description of new --optimize options. * src/manage_sql.c (report_severity_data): Add prototype and make static. (cache_report_counts): Add prototype and new make_transaction parameter to make the SQL transaction commands optional, so it can also be run inside another transaction. (reports_build_count_cache): New function. (report_counts_id_filt): Add make_transaction parameter to call of cache_report_counts. (manage_optimize): Add new options rebuild-report-cache and update-report-cache. * src/manage.h (reports_build_count_cache): New function prototype. * src/openvasmd.c (main): Add new --optimize options to help text. 2015-04-14 Timo Pollmeier Backport r22076. * src/manage_sql.c (report_counts_match): Add missing quotes around oid value in search_phrase && search_phrase_exact case. 2015-04-10 Timo Pollmeier Backport r22101. * src/manage_sql.c (report_severity_data): Add QoD clause in case without overrides. 2015-04-10 Sven Haardiek * CMakeLists.txt: Fixed cmake error while compliling with postgresql support. This patch was developed by Ryan Schulze. 2015-04-01 Jan-Oliver Wagner Post-release version bump. * CMakeLists.txt: Updated version number 6.0.2. 2015-04-01 Jan-Oliver Wagner Preparing the openvas-manager 6.0.1 release. * CHANGES: Updated. 2015-03-31 Matthew Mundell * src/manage.c (modify_permission): Find subject with modify permission, as is done in create_permission. 2015-03-31 Matthew Mundell * src/manage.c (parse_tags): Add the cvss_base_vector tag and skip cvss_base, as was done in the past. 2015-03-31 Matthew Mundell * src/manage_sql.c (create_report_format): Prefer the signature from the feed when verifying the report format for CREATE_REPORT_FORMAT, because this is what VERIFY_REPORT_FORMAT does. This ensures the trust state will be right when importing report formats. 2015-03-30 Matthew Mundell * src/schema_formats/XML/OMP.xml.in (get_config, get_filters) (get_lsc_credentials, get_port_lists, get_report_formats, get_scanners) (get_schedules, get_slaves, get_tags, get_targets, get_tasks) (get_users): Add optional empty PERMISSIONS on dependent resources. (get_alerts): Add TASKS and empty PERMISSIONS. * doc/omp.rnc, doc/omp.html: Update from source. 2015-03-30 Matthew Mundell * src/openvasmd.c (main): Handle all manage_delete_user returns. 2015-03-30 Matthew Mundell * src/schema_formats/XML/OMP.xml.in (timezone): New element. (report, authenticate, create_schedule, get_reports, get_schedules) (modify_schedule): Use timezone for timezones. 2015-03-30 Hani Benhabiles * src/manage.c (run_task): Don't send unused ntp_keep_communication_alive preference. 2015-03-26 Matthew Mundell * src/manage_sql.c (where_owned_user): Only include the global resources when a GET permission is requested, instead of always including them. The global resources are read only, so including them when only modify permission is requested does not make sense. 2015-03-26 Matthew Mundell * src/manage_sql.c (create_permission): Allow the user to create the permission if the user has "modify" access to the subject. This allows users to create permissions on roles owned by other users, for example. 2015-03-26 Hani Benhabiles * src/manage.c (run_task): Don't send unused ntp_client_accepts_notes and ntp_opt_show_end preferences. 2015-03-25 Matthew Mundell * src/manage_sql.c (set_task_config): Add space in SQL. 2015-03-25 Matthew Mundell * src/manage_sql.c (modify_user): Do not remove the Super Admin role when setting roles, because giving the user this role is not allowed. This disables the ability to remove the Super Admin role from a user, but that's OK because there's no way to give a user the role either. 2015-03-25 Timo Pollmeier * src/manage_sql.c (task_alterable): Remove permission check. 2015-03-25 Matthew Mundell * src/manage.c (slave_port_list_uuid): New variable. (slave_setup, delete_slave_task): Delete port list on slave too. 2015-03-25 Timo Pollmeier * src/manage_sql.c (task_severity): Consider only results with a minimum QoD of MIN_QOD_DEFAULT. 2015-03-24 Matthew Mundell * src/openvasmd.c (serve_and_schedule): Enable regular signals before raise, otherwise the termination signal will be blocked and pselect will run again with closed file descriptors. 2015-03-24 Matthew Mundell * src/openvasmd.c (log_config_free): New function. (cleanup, update_or_rebuild_nvt_cache, main): Use log_config_free, to prevent log_config from being freed twice. 2015-03-24 Matthew Mundell * src/manage_sql.c (init_task_schedule_iterator): Instead of getting tasks where the owner has permission on the schedule, get tasks where any user has permission on both the task and the schedule. 2015-03-24 Timo Pollmeier * tools/cert_bund_update_pg.xsl, tools/cert_bund_update.xsl: Also add or overwrite advisories if the date is equal to the refdate as it contains useful no time of day information, so they might otherwise be skipped if they were published or updated on the same day. 2015-03-24 Timo Pollmeier * src/manage_acl.c (where_owned_user): Treat missing filter keywords owner and permission as if they had the value "any". The old default behavior can be reproduced by using the keywords with an empty value. 2015-03-23 Matthew Mundell * src/manage_sql.c (report_severity_data): Add missing QOD field, which is used by report_counts_match. 2015-03-23 Michael Wiegand * src/CMakeLists.txt: Make detection of thread library dynamic instead of using hardcoded linker flags. 2015-03-19 Matthew Mundell * src/openvasmd.c (serve_and_schedule): Use pselect to block signals outside the select call, otherwise the select call will sit for SCHEDULE_PERIOD when a signal is received after the termination_signal check but before the select call. * src/CMakeLists.txt: Add -lphtread to openvasmd. 2015-03-19 Matthew Mundell * src/manage.c (run_task): Use correct permission name. Reset task status on failure. 2015-03-19 Matthew Mundell * src/manage_sql.c (set_report_format_param): Correct doc. 2015-03-19 Matthew Mundell * src/manage_sql.c (copy_target, delete_lsc_credential) (lsc_credential_in_use, trash_lsc_credential_in_use) (init_lsc_credential_target_iterator): Add missing ESXI credential cases. 2015-03-19 Matthew Mundell * src/manage_migrators.c (migrate_145_to_146): Add IF EXISTS to DROPs, to avoid warning if db is old. 2015-03-18 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Always send trust as "yes" for predefined report formats. 2015-03-17 Matthew Mundell * src/manage_sql.c (report_filter_term): Quote timezone in case it has multiple words, like "Coordinated Universal Time" does. 2015-03-17 Matthew Mundell * src/manage_sql.c (init_result_iterator): Get severity according to current user, instead of according to result owner, because the two users may have different overrides. 2015-03-17 Benot Allard Post release version bump. * CMakeLists.txt: 6.0.1 2015-03-17 Michael Wiegand Preparing the openvas-manager 6.0.0 release. * CHANGES: Updated. * CMakeLists.txt: Switch version scheme. 2015-03-17 Matthew Mundell Enable mixing of the current user's groups and users, with other people's groups and users, when permissions allow it. * src/manage_sql.c (init_user_group_iterator): Add column indicating whether the group is readable. (user_group_iterator_readable): New function. * src/manage.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): Send empty PERMISSIONS in GROUP in GET_USERS when group is not readable. 2015-03-17 Matthew Mundell * src/manage_pg.c (create_tables): Correct reference in role_users_trash. 2015-03-17 Matthew Mundell * src/manage_sql.c (find_resource_by_name_with_permission): Correct variable access. 2015-03-17 Matthew Mundell * src/manage_sql.c (delete_role, manage_restore) (manage_empty_trashcan): Delete role users, before roles, for Postgres integrity checks. 2015-03-17 Matthew Mundell Enable mixing of the current user's roles and users, with other people's roles and users, when permissions allow it. * src/manage_sql.c (add_users): Find with permission in case the user is owned by someone else. (init_user_role_iterator): Add column indicating whether the role is readable. (user_role_iterator_readable): New function. * src/manage.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): Send empty PERMISSIONS in ROLE in GET_USERS when role is not readable. 2015-03-17 Matthew Mundell * src/manage_sql.c (send_get_common): Add a case for global users/roles/groups because full access to them has been kept for all admins. Remove the special case for retrieving permissions of regular users/roles/groups, because they behave like other resource types these days. 2015-03-16 Matthew Mundell * src/manage_sql.c (tag_iterator_resource_readable): New function. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): Send empty PERMISSIONS in RESOURCE in GET_TAGS when resource is not readable. 2015-03-16 Matthew Mundell * src/manage_sql.c (setting_value_int): Add missing grouping. 2015-03-16 Matthew Mundell * src/manage_sql.c (init_resource_tag_iterator): Add owner clause, otherwise tags of other users are included. 2015-03-16 Matthew Mundell Enable mixing of the current user's filters and alerts, with other people's filters and alerts, when permissions allow it. * src/manage_sql.c (create_alert, modify_alert): Find with permission in case the alert is owned by someone else. (alert_iterator_filter_readable): New function. (escalate_2): Check that the user may access the filter. (escalate_1, manage_alert, manage_send_alert): Add new return. (init_filter_alert_iterator): Add column indicating whether the alert is readable. (filter_alert_iterator_readable): New function. * src/manage.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): Send empty PERMISSIONS in FILTER in GET_REPORT_FORMATS when filter is not readable. Same for ALERT in GET_FILTERS when alert is not readable. Handle new returns from manage_send_report and manage_alert. 2015-03-16 Matthew Mundell Enable mixing of the current user's report formats and alerts, with other people's report formats and alerts, when permissions allow it. * src/manage_sql.c (init_report_format_alert_iterator): Add column indicating whether the alert is readable. (report_format_alert_iterator_readable): New function. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): Send empty PERMISSIONS in ALERT in GET_REPORT_FORMATS when alert is not readable. 2015-03-13 Matthew Mundell Enable mixing of the current user's credentials and targets, with other people's credentials and targets, when permissions allow it. * src/manage.c (run_task): Check if user may access credentials. * src/manage_sql.c (modify_target): Find credentials with permission, in case they are owned by another user. (trash_lsc_credential_readable): New function. (init_lsc_credential_target_iterator): Add column indicating whether the target is readable. (lsc_credential_target_iterator_readable): New function. * src/manage.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): Send empty PERMISSIONS in TARGET in GET_CREDENTIALS when target is not readable. Same for credentials in GET_TARGETS when credentials are not readable. In CREATE_TARGET find credentials with permission in case someone else owns the credential. 2015-03-13 Hani Benhabiles * src/schema_formats/XML/OMP.xml.in (get_aggregates): Use Certificate instead of Public Key in scanner related commands, for accuracy. 2015-03-12 Matthew Mundell * src/manage_sql.c (create_target): Find port list with permission, in case it is owned by another user. 2015-03-12 Matthew Mundell Enable mixing of the current user's port lists and targets, with other people's port lists and targets, when permissions allow it. * src/manage.c (run_task): Check if user may access port list. * src/manage_sql.c (modify_target): Find port list with permission, in case it is owned by another user. (trash_port_list_readable_uuid): New function. (init_port_list_target_iterator): Add column indicating whether the port list is readable. Remove owner constraint on target. Remove unused "all" case. (port_list_target_iterator_readable): New function. * src/manage.h, src/manage_sql.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): Send empty PERMISSIONS in TARGET in GET_PORT_LISTS when target is not readable. Same for port list in GET_TARGETS when port list is not readable. 2015-03-12 Matthew Mundell * src/manage_sql.c (delete_permission): Correct permission name. 2015-03-12 Matthew Mundell * src/manage_sql.c (copy_resource_lock): Add missing "s" to command name. 2015-03-12 Timo Pollmeier * src/manage_sql.c (report_counts): Change permission parameter of find_report_with_permission to "get_reports" so it is a valid command. 2015-03-12 Timo Pollmeier * src/schema_formats/XML/OMP.xml.in (get_aggregates): Add an example. * doc/omp.rnc, doc/omp.html: Update from source. 2015-03-12 Timo Pollmeier * src/omp.c (xml_handle_end_element): In CLIENT_GET_AGGREGATES case, set the length parameter of g_markup_escape_text to -1. 2015-03-11 Hani Benhabiles * src/omp.c (handle_get_scanners, check_scanner_cert) (check_scanner_private, handle_create_scanner, handle_modify_scanner): Add functions documentation. Improve code style, and fix compiler warning. 2015-03-11 Matthew Mundell * src/manage_sql.h: Add header. * src/manage_acl.c (user_has_access_uuid): Validate the name, otherwise any string that starts with "get_" will work. * src/manage.c (run_task): Correct command name. 2015-03-11 Matthew Mundell * src/manage_sql.c (valid_type, type_pretty_name, type_db_name): Add "scanner". * src/manage_util.c (valid_db_resource_type): Add "scanner". 2015-03-11 Matthew Mundell Enable mixing of the current user's scanners and tasks, with other people's scanners and tasks, when permissions allow it. * src/manage.c (run_task): Check if user may access scanner. * src/manage_sql.c (init_scanner_task_iterator): Add column indicating whether the scanner is readable. Remove owner constraint on task. (scanner_task_iterator_readable): New function. * src/manage.h: Add header accordingly. * src/omp.c (handle_get_scanners): Send empty PERMISSIONS in TASK when task is not readable (omp_xml_handle_end_element): Send empty PERMISSIONS in SCANNER in GET_TASKS when scanner is not readable In CLIENT_CREATE_TASK and CLIENT_MODIFY_TASK find the scanner with permission, in case it is owned by another user. 2015-03-11 Hani Benhabiles * src/manage_sql.c (init_aggregator_iterator): Check group_column null pointer dereference. 2015-03-11 Matthew Mundell Enable mixing of the current user's configs and tasks, with other people's configs and tasks, when permissions allow it. * src/manage.c (run_task): Check if user may access config. * src/manage_sql.c (trash_config_readable_uuid): New function. (init_config_task_iterator): Add column indicating whether the config is readable. Remove owner constraint on task. (config_task_iterator_readable): New function. * src/manage.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): Send empty PERMISSIONS in TASK in GET_CONFIGS when task is not readable. Same for config in GET_TASKS when config is not readable. In CLIENT_CREATE_TASK and CLIENT_MODIFY_TASK find the config with permission, in case it is owned by another user. 2015-03-11 Hani Benhabiles * src/sql.c, src/sql.h, src/sql_pg.c, src/sql_sqlite3.c (sql_explain) (sql_explain_internal): Revert removal, as these are still used for debugging purposes. 2015-03-11 Hani Benhabiles * src/manage.c (slave_setup): Fix variable used befored initialization compiler warning. * src/manage_sql.c (find_target), src/sql.c (sql_x_quiet) (sql_string_quiet, sql_explain, src/sql_pg.c (sql_explain_internal), src/sql_sqlite3.c (sql_explain_internal): Remove unused function. * src/manage.h, src/sql.h: Remove unused prototypes. * src/omp.c (handle_create_scanner): Fix duplicate statement in comparison. 2015-03-11 Matthew Mundell Enable mixing of the current user's targets and tasks, with other people's targets and tasks, when permissions allow it. * src/manage.c (run_osp_task, run_task): Check if user may access target. * src/manage_sql.c (trash_target_readable): New function. (init_target_task_iterator): Add column indicating whether the target is readable. Remove owner constraint on task. (target_task_iterator_readable): New function. * src/manage.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): Send empty PERMISSIONS in TASK in GET_TARGETS when task is not readable. Same for target in GET_TASKS when target is not readable. In CLIENT_CREATE_TASK and CLIENT_MODIFY_TASK find the target with permission, in case it is owned by another user. 2015-03-10 Hani Benhabiles * src/omp.c (handle_modify_scanner): Don't check empty certificates and key values. 2015-03-10 Hani Benhabiles * src/omp.c (handle_modify_scanner): New function, check that provided certifications and private key values are valid. (omp_xml_handle_end_element): In CLIENT_MODIFY_SCANNER, use handle_modify_scanner() accordingly. * src/scanner.c, src/openvasmd.c, src/manage_sql.c: Update scanners related documentation. 2015-03-10 Hani Benhabiles * src/omp.c (send_find_error_to_client): Take omp parser as argument instead of client writer and client writer data. (handle_get_scanners, handle_create_scanner) (omp_xml_handle_end_element): Adjust calls to send_find_error_to_client. 2015-03-10 Hani Benhabiles * src/omp.c (check_scanner_cert, check_scanner_private): New functions. (handle_create_scanner): New function, check that provided certs and key are valid. (omp_xml_handle_end_element): Call handle_create_scanner, in CLIENT_CREATE_SCANNER case. 2015-03-10 Michael Wiegand Install xml_split by default since it has proved helpful for low memory environments. * CMakeLists.txt: Install tools/extra/xml_split into SCAP_RES_DIR. * INSTALL: Note that python is required for using xml_split. * tools/extra/README: Remove part about installing xml_split since it is now done automatically. 2015-03-10 Timo Pollmeier * src/omp.c (xml_handle_end_element): In CLIENT_GET_AGGREGATES case, escape the group column values. 2015-03-09 Matthew Mundell * src/manage_sql.c (result_detection_reference): Clarify last SQL statement a little. 2015-03-09 Matthew Mundell * src/manage_sql.c (init_override_iterator): Remove SQL that is now created by where_owned_for_get. 2015-03-09 Matthew Mundell * src/manage_acl.c (where_owned_for_get): Use "" when there are no current credentials. Use correct value for owner check flag. 2015-03-09 Matthew Mundell Apply all overrides for Postgres too. * src/manage_migrators.c (migrate_145_to_146): Drop result_new_severities too, for Postgres dependencies. * src/manage_pg.c (manage_create_sql_functions): Create result_overrides with generated ownership clause that includes overrides owned by other users. * src/manage_sqlite3.c (create_tables): Remove note. 2015-03-09 Matthew Mundell * src/manage_sql.c (init_result_iterator): Put close on the right line. 2015-03-09 Matthew Mundell Apply all overrides that a user may access when calculating severities. Hence increase database version to 146. Add database migration from version 145 to 146. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 146. * src/manage_migrators.c (migrate_145_to_146): New function. (database_migrators): Add migrate_145_to_146. * src/manage_sqlite3.c (create_tables): Create result_overrides with generated ownership clause that includes overrides owned by other users. * src/manage_sql.c (task_severity, report_scan_result_count) (report_severity_data_prepare, report_severity_data_prepare_full): Get overrides with generated ownership clause that includes overrides owned by other users. * src/manage_acl.c (where_owned_for_get): New function. * src/manage_acl.h: Add header accordingly. 2015-03-06 Matthew Mundell * src/omp.c (buffer_result_overrides_xml): Include all overrides the user may access. 2015-03-05 Matthew Mundell * src/manage_sql.c (manage_report_host_add): Make the time values match their format specifier, otherwise the libc print functions may segfault on 32 bit. 2015-03-05 Hani Benhabiles * src/omp.c (SEND_GET_START, SEND_GET_COMMON, SEND_GET_END) (SEND_TO_CLIENT_OR_FAIL, SENDF_TO_CLIENT_OR_FAIL): Adjust macros to use omp_parser variable. (INIT_GET): Return, instead of break. (handle_get_scanners): New function, send scanner info for openvas type too. (omp_xml_handle_end_element): Use handle_get_scanners() in CLIENT_GET_SCANNERS case. 2015-03-04 Matthew Mundell * src/omp.c (buffer_result_notes_xml): Include all notes the user may access. 2015-03-04 Timo Pollmeier * tools/cert_bund_update.xsl (Advisory): Replace space in "Date" element text with "T" so conversions to UNIX time work correctly. * tools/cert_bund_update_pg.xsl (Advisory): Replace space in "Date" as above. 2015-03-03 Hani Benhabiles * src/omp.c, src/manage_sql.c: Adjust includes. 2015-03-03 Jan-Oliver Wagner * src/openvasmd.c (main): Improved --help output. 2015-03-02 Hani Benhabiles * src/manage_sql.c, src/manage.h (find_alert, find_schedule) (task_threat_level): Remove unused functions. 2015-03-02 Michael Wiegand * src/report_formats/LaTeX/latex.xsl (results-overview): Add support for displaying host authentication results in report summary. 2015-03-02 Michael Wiegand * src/report_formats/TXT/TXT.xsl (ref_cert_list): Do not expect CERT references to start with "DFN-CERT" now that other CERT references are supported as well. 2015-03-02 Michael Wiegand * src/report_formats/NBE/NBE.xsl (ref_cert_list): Do not expect CERT references to start with "DFN-CERT" now that other CERT references are supported as well. 2015-03-02 Michael Wiegand * src/report_formats/HTML/HTML.xsl (ref_cert_list): Do not expect CERT references to start with "DFN-CERT" now that other CERT references are supported as well. 2015-03-02 Michael Wiegand * src/report_formats/CSV_Results/CSV_Results.xsl (result): Do not expect CERT references to start with "DFN-CERT" now that other CERT references are supported as well. 2015-03-02 Michael Wiegand * src/report_formats/HTML/HTML.xsl (real-report): Add support for displaying host authentication results in report summary. 2015-02-27 Matthew Mundell * src/report_formats/Anonymous_XML/Anonymous_XML.xsl (host/ip): New template. Convert HOST/IPs to fake values. 2015-02-26 Timo Pollmeier Limit results in report results counting and caching functions to a default minimum QoD of 70. * src/manage_pg.c (manage_create_sql_functions): Add QoD checks to report_severity_count. * src/manage_sqlite3.c (report_severity_count): Add QoD check. * src/manage_sql.c (report_cache_counts): Add min_qod parameter to report_counts_id calls. (report_add_result): Check QoD before counting result in cache. (where_qod): Return clause with default minimum QoD if min_qod is NULL or an empty string. (report_scan_result_count): Use cache if min_qod equals the default. (report_severity_data): Add QoD clause to query. (report_counts): Add min_qod parameter to report_counts_id call. (report_counts_id_filt): Use cache if min_qod equals the default. (report_counts_id): Add min_qod parameter. (report_severity, print_report_assets_xml, print_report_prognostic_xml) (print_report_xml, task_trend): Add min_qod parameter to report_counts_id calls. * src/manage.h (MIN_QOD_DEFAULT): New #define. (report_counts_id): Add parameter. * src/omp.c (omp_xml_handle_end_element): In case CLIENT_GET_TASKS handle min_qod filter keyword or use default min_qod when getting reports. 2015-02-26 Jan-Oliver Wagner * src/openvasmd.c (main): Updated year to 2015. 2015-02-26 Matthew Mundell * src/report_formats/Anonymous_XML/Anonymous_XML.xsl (all-hostnames) (hostnames): Select using for-each, because the results may not be unique using a select attribute when there is whitespace in the host details XML. (openvas:hostname): Add node-set because $hostnames is now a result fragment due to the way it is selected. 2015-02-26 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_INFO reset the parser properly after find errors and improve the message of the NVT find error. 2015-02-25 Timo Pollmeier * src/manage_sql.c (where_levels_auto): Correct order in which the SQL fragments new_severity_sql and auto_type_sql are inserted into the false positive case. 2015-02-25 Timo Pollmeier Update OMP documentation of GET_NVTS. * src/schema_formats/XML/OMP.xml.in (get_nvts): Change "id" attribute in response to "oid". Move "creation_time" and "modification_time" response elements to optional group. Remove missing elements "permissions", "description and "risk_factor". Add "alt" subelement to "preference" elements. Add summary text to describe response elements. Update example. * doc/omp.html, doc/omp.rnc: Update from source. 2015-02-24 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Setup the filter before setting up the type specific functions, so that the filter is initialised for the NVT case. 2015-02-24 Matthew Mundell * src/report_formats/Anonymous_XML/Anonymous_XML.xsl (host/detail): Skip more elements. 2015-02-24 Timo Pollmeier Update OMP documentation of GET_REPORT and the report element. * src/schema_formats/XML/OMP.xml.in (report): Add choice "prognostic" to type attrib in both command and response. Change description of "name" as it contains the creation time. Move "sort", "filters", "severity_class" outside the optional group. Make "hosts" non-optional and make it either attributes or a count element, adjust description. Add elements "closed_cves", "vulns", "os", "apps", "ssl_certs" and "errors". Remove unused "show_closed_cves". Add summary and subelements of target in task subelement. (get_reports): Add command attributes apply_overrides and result_hosts_only. Change pattern in autofp to an alts type. Update example response. * doc/omp.html, doc/omp.rnc: Update from source. 2015-02-24 Timo Pollmeier * ChangeLog: Add missing line for doc/omp.html, doc/omp.rnc in entry of previous change in OMP doc for notes / overrides (SVN r21701). 2015-02-24 Matthew Mundell Add GET_INFO support for the info_id attribute for NVTs. When a single NVT is requested with GET_INFO then send the NVT preferences too. These changes allow GSA to use GET_INFO for NVTs like it does for the other SecInfo types, instead of having to use GET_NVTS. * src/manage.c (get_nvti_xml): Add args for preferences flag and config. Append preferences if flag given. (manage_read_info): If name is NULL then find by ID. Update get_nvti_xml call, in order to include preferences. * src/manage.h: Update header accordingly. * src/omp.c (send_nvt): Add args for preferences flag and config. Send through to get_nvti_xml. (omp_xml_handle_end_element): In CLIENT_GET_INFO also skip the "all" case when an ID is given. Let send_nvts send the preferences. 2015-02-24 Timo Pollmeier Move the definitions of notes and overrides in the OMP doc to new element types to make them more reusable and remove the types result_notes and result_overrides as notes and overrides on results are treated mostly the same as in get_notes / get_overrides. * src/schema_formats/XML/OMP.xml.in (result_notes, result_overrides): Remove. (note, override): New element types. Content from note/override elements in respective get_... commands. (result): Replace result_notes and result_overrides element types with an any number note/override elements using the new note/override types. (get_notes, get_overrides): Replace explicit definition of note/override elements with new element types. * doc/omp.html, doc/omp.rnc: Update from source. 2015-02-24 Timo Pollmeier * src/schema_formats/XML/OMP.xml.in (result): Add elements "name" and "scan_nvt_version". Remove element "risk_factor" that is not part of actual results. Add actual structure of "cert" subelements in "nvt" and of "result" subelements in "detection". (get_results): Use "result" type for the result response elements instead of duplicating the definition. * doc/omp.html, doc/omp.rnc: Update from source. 2015-02-23 Matthew Mundell Add report format Anonymous XML. * CMakeLists.txt: Install predefined Anonymous XML. * src/manage_sql.c (check_db_report_formats): Ensure Anonymous XML exists. (report_format_predefined): Add Anonymous XML. * src/omp.c (omp_xml_handle_end_element): Add Anonymous XML to special cases. * src/report_formats/Anonymous_XML/, src/report_formats/Anonymous_XML/Anonymous_XML.xsl, src/report_formats/Anonymous_XML/generate: New directory and files. 2015-02-20 Timo Pollmeier * src/manage.c (slave_setup): Set task preferences/options alterable, in_assets, source_iface and hosts_ordering. Initialize other fields of opts with NULL. 2015-02-19 Matthew Mundell Remove the requirement that a --rebuild/update must run successfully before the Manager will start. If the database is not present simply do the Manager-side database init and start with an empty db. * src/manage_sql.c (check_db_versions): Warn and continue if the database needs a --rebuild, instead of returning. 2015-02-19 Matthew Mundell * src/manage_acl.c (where_owned_user): Add back owner filter selection accidentally removed in r21535. 2015-02-18 Timo Pollmeier * tools/greenbone-scapdata-sync.in (VERSION): Increase to 20150218. (update_scap_db): Split the CPE dictionary like CVEs if the file is larger than SPLIT_PART_SIZE and splitting is enabled. * tools/openvas-scapdata-sync.in (update_sec_db): Split the CPE dictionary as above. 2015-02-17 Matthew Mundell * src/manage_sql.h: Add missing args. 2015-02-17 Timo Pollmeier * src/manage_sql.c (report_scan_result_count): Use cached count if min_cvss_base and search_phrase are empty strings, not only if they are NULL. Also check min_qod before using cached count. 2015-02-16 Matthew Mundell * src/openvasmd.c (accept_and_maybe_fork, handle_sigabrt) (handle_sigsegv, rebuild_nvt_cache_retry, serve_and_schedule, mail): Use setup_signal_handler instead of signal, for consistency. (setup_signal_handler): Move up in file. 2015-02-16 Matthew Mundell * src/openvasmd.c (setup_signal_handler): New function. (update_or_rebuild_nvt_cache, main): Use setup_signal_handler to register handler. Block all signal during SIGSEGV and SIGABRT handlers. 2015-02-16 Matthew Mundell * src/openvasmd.c (handle_sigabrt, handle_sigsegv): Remove g_critical, do full cleanup, raise signal again so that exit value is correct. (serve_and_schedule): Do full cleanup in termination signal handling. 2015-02-16 Matthew Mundell * src/openvasmd.c (serve_and_schedule): Move the signal flag checks out of the SCHEDULE_PERIOD check, because the signal flags must be checked when the select is interrupted by a signal (when it returns EINTR). 2015-02-16 Matthew Mundell Reduce size of termination signal handlers. Move logging out of SIGHUP handler. Use volatile for global variable used in handler. * src/openvasmd.c (termination_signal): New variable. (sighup_update_nvt_cache): Add volatile, as the variable may change asynchronously. (handle_sigterm, handle_sighup): Remove. No longer used. (handle_termination_signal): New function. (handle_sighup_update): Remove logging. (update_or_rebuild_nvt_cache, main): Use handle_termination_signal for termination signals. (serve_and_schedule): Check termination flag set by termination signals. Add logging removed from handle_sighup_update. 2015-02-16 Matthew Mundell * src/manage.c (parse_tags): Get CVSS base from cvss_base_vector instead of cvss_base. 2015-02-16 Matthew Mundell * src/manage.c (manage_schedule): Remove the check that ensures that a periodic task is started within a short interval at the scheduled start time. This check was meant to prevent the task from starting long after the scheduled start time but I do not see a real problem with this happening, and the check could cause the run to be missed entirely when the machine is heavily loaded. 2015-02-13 Timo Pollmeier * src/manage_sql.c (report_add_result): Set end_time of report_counts entries with overrides to 0 instead of -1 if there are no active overrides that are active only for a limited time. 2015-02-13 Timo Pollmeier * src/manage_pg.c (create_tables): Create new index report_counts_by_report_and_override. * src/manage_sqlite3.c (create_tables): Create new index report_counts_by_report_and_override. 2015-02-12 Timo Pollmeier * src/manage_sql.c (task_severity): Add plus sign to the subquery "SELECT id FROM reports ..." so SQLite can better optimize the final results query. 2015-02-12 Matthew Mundell * src/manage.c (update_end_times): Skip setting the times if the strings are empty or only contain space, otherwise the time parser logs a warning. 2015-02-12 Matthew Mundell * src/manage_sql.c (request_delete_task_uuid): Remove task last, because Postgres checks the references. 2015-02-11 Matthew Mundell Also clear schedules when the scan ends, as this can be an earlier opportunity than the end of the duration. * src/manage.c (manage_schedule): Pass "all tasks" flag to duration functions. * src/manage_sql.c (clear_duration_schedules) (update_duration_schedule_periods): Add task arg. Skip duration expiration check when task is given. * src/manage.c (process_otp_scanner_input): When the task exits clear the schedule if the task had a once off schedule or a limited periodic run, as well as a duration. 2015-02-11 Timo Pollmeier Add Solution type to report formats that include the Solution of results. * src/report_formats/CSV_Results/CSV_Results.xsl (result, /report): Add Solution type column. * src/report_formats/HTML/HTML.xsl (result [issue]): Add Solution type subsection to Solution section. * src/report_formats/LaTeX/latex.xsl (result-details-host-port-threat): Add Solution type subsection to Solution section. * src/report_formats/NBE/NBE.xsl (result): Add Solution type subsection to Solution section. * src/report_formats/TXT/TXT.xsl (result [issue]): Add Solution type subsection to Solution section. * src/report_formats/Verinice_ISM/Verinice_ISM.xsl (vulnerability_details): Add Solution type subsection to Solution section. 2015-02-11 Michael Wiegand Post-release version bump. * CMakeLists.txt: Updated version number. 2015-02-11 Michael Wiegand Preparing the openvas-manager 6.0+beta6 release. * CHANGES: Updated. 2015-02-11 Matthew Mundell * src/schema_formats/XML/OMP.xml.in (get_tasks, create_task) (modify_task): Add SCHEDULE_PERIODS. * doc/omp.html, doc/omp.rnc: Update from source. * doc/db_postgres.sql (tasks): Add schedule_periods. * doc/db.png: Update from source. 2015-02-11 Matthew Mundell * src/omp.c (create_task_data_t, create_task_data_reset) (client_state_t): Add schedule_periods entry. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add SCHEDULE_PERIODS to CREATE_TASK. 2015-02-11 Matthew Mundell * CMakeLists.txt: Remove Jessie hack added in last commit. 2015-02-11 Matthew Mundell Add the option to limit the number of times a task runs with a periodic schedule. When the limit is reached the schedule is removed from the task. Hence increase database version to 145. Add database migration from version 144 to 145. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 145. * src/manage_migrators.c (migrate_144_to_145): New function. (database_migrators): Add migrate_144_to_145. * src/manage_pg.c, src/manage_sqlite3.c (create_tables): Add schedule_periods to tasks. * src/manage.c (manage_schedule): When starting a limited period task, decrement the scheduled periods if there are more runs and remove the period if this is the last run. After stopping tasks update the scheduled period counts of tasks that have durations. * doc/db.png: Update for version change. * src/omp.c (modify_task_data_t, modify_task_data_reset) (client_state_t): Add schedule_periods entry. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add SCHEDULE_PERIODS to MODIFY_TASK and GET_TASKS. * src/manage_sql.c (set_task_schedule, set_task_schedule_uuid): Add periods arg. (set_task_schedule_periods, task_schedule_periods) (task_schedule_periods_uuid, set_task_schedule_next_time_uuid) (update_duration_schedule_periods): New functions. (clear_duration_schedules): Clear task schedule_periods too. * src/manage.h, src/manage_sql.h: Update headers accordingly. 2015-02-10 Timo Pollmeier * src/manage.c (slave_esxi_credential_uuid): New variable. (slave_setup): Add parameter target_esxi_credential. Copy ESXi credentials for the slave target and delete them once the scan has ended. (run_slave_task): Add parameter target_esxi_credential. (run_task): Pass ESXi credentials of target to run_slave_task. 2015-02-10 Timo Pollmeier * src/manage.c (slave_setup): Add options exclude_hosts, alive_test, reverse_lookup_only and reverse_lookup_unify when creating target. Rename fail_credential label to fail_smb_credential. 2015-02-10 Matthew Mundell * src/manage_sql.c (qod_from_type): Neaten formatting. (where_qod): Neaten formatting. Add length check on min_qod, otherwise Postgres complains about casting '' to INTEGER. 2015-02-10 Matthew Mundell * src/manage.c (slave_setup): Use _ext function to send credentials. 2015-02-09 Timo Pollmeier * src/manage_sql.c (filter_clause): Ensure various filter columns are sorted using their numeric values: cves, high, medium, low, log, false_positive, ips, total, tcp, udp. 2015-02-06 Timo Pollmeier Add columns qod and qod_type to NVTs and qod_type to Results. Hence increase database version to 144. Add database migration from version 143 to 144. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 144. * src/manage_migrators.c (migrate_143_to_144): New function. (database_migrators): Add migrate_143_to_144. * doc/db_postgres.sql: Add column qod to table nvts and add column qod_type to tables nvts and results. * doc/db.png: Update for version change. * src/manage_pg.c (create_tables): Add column qod to table nvts and add column qod_type to tables nvts and results. * src/manage_sql.c (make_osp_result): Add empty qod_type to result. (qod_from_type): New function. (make_result): Try to get QoD and QoD type from the NVT tags and set them in the result. Map "qod_type" to a "qod" number using qod_from_type if there is no "qod" tag. (create_report): Copy qod_type from results. (RESULT_ITERATOR_FILTER_COLUMNS, RESULT_ITERATOR_COLUMNS): Add column "qod_type". (RESULT_ITERATOR_COLUMN_COUNT): Increase. (init_result_iterator): Add missing comma in query for result case. Add qod_type column. (result_iterator_qod_type): New function. (make_nvt_from_nvti): Try to get qod and qod_type from tags and add them to the table row, using the qod_from_type fallback if needed. (NVT_INFO_ITERATOR_FILTER_COLUMNS, NVT_ITERATOR_COLUMNS) (NVT_ITERATOR_COLUMNS_NVTS): Add columns "qod" and "qod_type". (nvt_iterator_qod, nvt_iterator_qod_type): New functions. (nvt_iterator_solution_type): Adjust/fix column index. * src/manage_sqlite3.c (create_tables): Add column qod to table nvts and add column qod_type to tables nvts and results. * src/manage.c (get_nvti_xml): Add "qod" element with subelements "value" and "type". * src/manage.h (qod_from_type): New function prototype. (create_report_result_t): Add qod_type field. (result_iterator_qod_type, nvt_iterator_qod, nvt_iterator_qod_type): New function prototypes. * src/omp.c (create_report_data_t): Add field result_qod_type. (create_report_data_reset): Free qod_type of results. (client_state_t): Add CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD_TYPE and CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD_VALUE. (omp_xml_handle_start_element): Add case CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD to handle new TYPE and VALUE subelements of QOD in results. (buffer_results_xml): Move QoD percentage to a "value" subelement of "qod" and add "type" subelement for consistency with the "qod" element in NVTs. (omp_xml_handle_end_element): In case CLIENT_CREATE_REPORT_RR_RESULTS_RESULT copy result_qod_type to result. Add cases for CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD_TYPE and CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD_VALUE. (omp_xml_handle_text): Add case for CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD_TYPE and change CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD to CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD_VALUE. * src/schema_formats/XML/OMP.xml.in (result): Add "qod" element to the "nvt" element. Add new value and type subelements to "qod" element and update summary. (get_notes): Add "qod" element to "result" in the response. (get_nvts): Add "qod" element to the "nvt" element in the response. (get_overrides, get_results): Add "qod" element to "result" in the response. * doc/omp.html, doc/omp.rnc: Update from source. 2015-02-09 Matthew Mundell * src/manage.c (slave_setup): Also specify the SSH port when creating the target. 2015-02-05 Matthew Mundell Remove once-off schedules from tasks after the tasks have been scheduled. * src/manage.c (manage_schedule): Remove schedules after START_TASK succeeds. Remove expired duration schedules at the end. * src/manage_sql.c (set_task_schedule): Correct doc. (set_task_schedule_uuid, task_schedule_uuid, task_schedule_next_time) (clear_duration_schedules, schedule_period, schedule_duration): New functions. * src/manage_sql.h, src/manage.h: Add headers accordingly. 2015-02-05 Matthew Mundell * src/manage.c (manage_schedule): Use the correct case for parent and child, otherwise the parent aborts when it runs SQL because the fork_connection function closes the SQL connection for the child. 2015-02-05 Hani Benhabiles * src/lsc_user.c (create_ssh_key): New function. (ssh_privkey_create, ssh_pubkey_create): Remove functions. (lsc_user_keys_create): Remove useless public_key argument, adjust function to use create_ssh_key() accordingly to create a private key. * src/lsc_user.h: Adjust function header. * src/manage_sql.c (create_lsc_credential): Adjust lsc_user_keys_create() function call. (lsc_credential_iterator_rpm, lsc_credential_iterator_deb): Check openvas_ssh_public_from_private() return value. 2015-02-04 Timo Pollmeier Allow filtering results of GET_REPORTS using new filter keyword or command attribute "min_qod". * src/manage_sql.c (manage_report_filter_controls): Add new output parameter min_qod. (escalate_2): Add new parameter min_qod. (escalate_1): Add new min_qod parameter of escalate_2. (task_upload_progress): Add new parameter of report_scan_result_count. (where_qod): New function. (RESULT_ITERATOR_COLUMNS): Simplify qod column by getting it directly without extra checks. (init_result_iterator): Add new parameter min_qod and filter results according to it. Simplify qod SQL in report if case. Add qod column to result case. (report_scan_result_count, report_counts_match, report_severity_data) (report_counts_id_filt): Add new parameter min_qod. (report_counts_id): Add new parameter for report_counts_id_filt. (report_filter_term, print_report_port_xml): Add new parameter min_qod. (print_report_xml): Add parameter given_min_qod. Filter results by minimum QoD if min_qod filter keyword or parameter is given. Print min_qod to the filters element. (manage_report, manage_send_report): Add new parameter min_qod. * src/manage.h (report_scan_result_count, init_result_iterator) (manage_report, manage_send_report, manage_report_filter_controls): Add parameter. * src/omp.c (get_reports_data_t, get_reports_data_reset): Add new field min_qod. (omp_xml_handle_start_element): In GET_REPORTS case, get min_qod attribute. (buffer_notes_xml, buffer_overrides_xml): Add NULL value for min_qod parameter to init_result_iterator call. (omp_xml_handle_end_element): In GET_REPORTS case, add min_qod parameter to function calls. * src/schema_formats/XML/OMP.xml.in (report): Add min_qod element to filters subelement. (get_reports): Add min_qod command attribute. * doc/omp.html, doc/omp.rnc: Update from source. 2015-02-04 Timo Pollmeier Results with no QoD information are assigned a default value of 75, which is also applied to existing results. Hence increase database version to 143. Add database migration from version 142 to 143. Add support for more values of the qod_type NVT tag. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 143. * src/manage_migrators.c (migrate_142_to_143): New function. (database_migrators): Add migrate_142_to_143. * doc/db.png: Update for version change. * src/manage_sql.c (check_db_tasks, make_osp_result): Set qod of the result to the new default value. (make_result): Set qod of the result to the new default if the qod_type NVT tag is missing or its value cannot be interpreted. Recognize more values of the qod_type tag: exploit, remote_vul, remote_app, package, registry, remote_active, remote_banner, executable_version, remote_analysis, remote_probe and executable_version_unreliable. (create_report): Set qod of results if available or using new default. * src/manage.h (QOD_DEFAULT): New #define. (create_report_result_t): Add qod field. * src/omp.c (create_report_data_t): Add result_qod field. (create_report_data_reset): Free qod of results. (client_state_t): Add CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD. (omp_xml_handle_start_element): Add case for QOD in CLIENT_CREATE_REPORT_RR_RESULTS_RESULT. (omp_xml_handle_end_element): Copy qod field to result in the case of CLIENT_CREATE_REPORT_RR_RESULTS_RESULT. Add case for CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD. (omp_xml_handle_text): Get text of QOD element in case CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_QOD. 2015-02-04 Matthew Mundell * src/manage.c (slave_ssh_credential_uuid, slave_smb_credential_uuid) (slave_target_uuid, slave_config_uuid, slave_task_uuid) (slave_report_uuid, slave_session, slave_socket): New variables. (cleanup_slave): New function. (slave_setup): Use new variables. Register cleanup_slave as atexit function, so that the slave task is stopped if Manager is terminated. 2015-02-04 Matthew Mundell * src/manage_sql.c (trim_partial_report): Remove report_hosts end_time '' checks, because end_time is now an integer. For Postgres. 2015-02-03 Matthew Mundell * src/manage_sql.c (copy_report_format): Build the source dir according to the report format owner, because the report format may not be owned by the current user. 2015-02-03 Matthew Mundell * src/manage_sql.c (copy_resource_lock): Find with permission, to enable cloning of other users' resources. 2015-02-03 Matthew Mundell * src/manage_sql.c (delete_report_internal): Leave the task alterable when deleting the last report of an alterable task. 2015-02-02 Matthew Mundell * src/manage_sql.c (where_search_phrase): Warn about relation to report_counts_match. (report_counts_match): Use the same conditions that are used in the result iterator. This was causing errors in the filtered counts in reports when certain filter terms were given. 2015-02-02 Timo Pollmeier Fix or clarify documentation of various OMP commands, mostly GET_... ones. * src/schema_formats/XML/OMP.xml.in (create_target): Add element "exclude_hosts". (create_task): Add element "hosts_ordering". (get_configs): Remove unused attribute "export". Add summary of attributes "families" and "preferences". Add response elements "type" and "nvt_selectors". Add subelements "default" and "alt" to "preference" elements. (get_alerts): Add elements "filters", "sort", "alerts" and "alert_count" to response. (get_info): Make type-specific response elements like "cert_bund_adv", "cpe", etc. an "or" selection. Remove "deprecated_by" element of CPEs that is not actually in response. Mark cve elements in CPEs as "any" instead of optional. Add CVSS-related elements of CVEs to the pattern. Mark nvt element in CVEs as "any" instead of optional. Fix summary of "warning" element. (get_lsc_credentials): Make elements "public_key" and "package" an "or" selection. (get_notes): Add "id" attribute to note in response. Move element "permission" and make "owner", "creation_time", "modification_time", "writable", "in_use", "active" non-optional. Add summary of "excerpt" attribute in "text" element. (get_overrides): Add "id" attribute to override in response and add elements "permissions", "owner". Move element "active" outside optional group. Add summary of "excerpt" attribute in "text" element. Move nvt element. (get_permissions): Remove unused attribute "resource_id". (get_port_lists): Ungroup elements "port_ranges" and "targets". (get_preferences): Mark subelements "nvt" and "type" of "preference" as non-optional and add subelement "alt". (get_report_formats): Mark "alerts" as optional. Change group of "file" and "signature" as optional instead of "or". Ungroup elements "trust" and "active". (get_results): Add attribute "autofp". (get_schedules): Do not mark "tasks" as group. (get_system_reports): Make type of "format" subelement of "report" a selection between "png" and "txt". (get_tags): Move "owner" to the optional group and add "permissions" element. (get_targets): Add exlude_hosts. (get_tasks): Remove unused attribute "apply_overrides". Add "type" subelement to pattern of "scanner" response element. Add response element "hosts_ordering". Add subelement "scan_end" to "report" and the three "..._report" response subelements as well as "false_positive" to their "result_count". (get_users): Remove unused attribute "trash". Add response element "ifaces". (modify_target): Add hosts_ordering and exclude_hosts elements. * doc/omp.html, doc/omp.rnc: Update from source. 2015-02-02 Matthew Mundell * src/sql_pg.c (sql_column_int, sql_column_int64): Add condition so that booleans are always 1 or 0. 2015-02-02 Hani Benhabiles * src/manage.c (make_osp_result): Don't set the result's QOD to 0. 2015-02-02 Matthew Mundell When scheduling only consider the schedule if the task owner has permission to access the schedule. * src/manage_acl.c (where_owned_user): New function. Was where_owned. Add user args. (where_owned): Call through to where_owned_user. * src/manage_acl.h: Add header accordingly. * src/manage_sql.c (init_task_schedule_iterator): Add owned clause, so that schedules are only included if the user has permission to access them. 2015-01-30 Timo Pollmeier * src/manage_sql.c (filter_clause): Add cases for "qod" to sort by the numeric value of this column. (RESULT_ITERATOR_FILTER_COLUMNS, RESULT_ITERATOR_COLUMNS): Add "qod". (RESULT_ITERATOR_COLUMN_COUNT): Increase. (init_result_iterator): Add cases for "qod" to sort it by numeric value. (result_iterator_qod): New function. * src/manage.h (result_iterator_qod): New function prototype. * src/omp.c (buffer_results_xml): Add new qod element to results. * src/schema_formats/XML/OMP.xml.in (result): Add qod element. * doc/omp.html, doc/omp.rnc: Update from source. 2015-01-30 Matthew Mundell Enable mixing of the current users schedules and tasks, with other people's schedules and tasks, when permissions allow it. * src/manage_sql.c (trash_schedule_readable): New function. (init_task_schedule_iterator): Add TODO. (init_schedule_task_iterator): Add column indicating whether the schedule is readable. Remove owner constraint on task. (schedule_task_iterator_readable): New function. * src/manage.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): Send empty PERMISSIONS in TASK in GET_SCHEDULES when task is not readable. Same for schedule in GET_TASKS when schedule is not readable. In CLIENT_CREATE_TASK and CLIENT_MODIFY_TASK find the schedule with permission, in case it is owned by another user. 2015-01-28 Matthew Mundell Enable mixing of the current users alerts and tasks, with other people's alerts and tasks, when permissions allow it. * src/manage_sql.c (init_task_alert_iterator): Get alerts owned by other users too. (init_alert_task_iterator): Add column indicating whether the alert is readable. Remove owner constraint on task. (alert_task_iterator_readable): New function. (set_task_alerts, manage_send_report): Find with permissions, to include alerts owned by other users. * src/manage.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): Send empty PERMISSIONS in TASK in GET_ALERTS when task is not readable. Same for alert in GET_TASKS when alert is not readable. In CLIENT_CREATE_TASK find the alert with permission, in case it is owned by another user. 2015-01-28 Hani Benhabiles * src/manage.c (launch_osp_task): Don't take options argument. Get the task options in function. (fork_osp_scan_handler): Move function down. Adjust for launch_osp_task() changes. (run_osp_task): Set task as requested. Adjust fork_osp_scan_handler() call. (run_task): adjust run_osp_task() call. * src/omp.c (omp_xml_handle_end_element): In START_TASK, fix use of uninitialized variable in OSP task case. 2015-01-27 Hani Benhabiles * src/manage.c (handle_osp_scan, launch_osp_task): New functions. (run_osp_task): Adjust function to call launch_osp_task() accordingly. (fork_osp_scan_handler): Adjust function to call handle_osp_scan(). 2015-01-27 Timo Pollmeier * README: Add option --optimize to usage message. * INSTALL: Add new section "Optimizing the database". 2015-01-27 Hani Benhabiles * src/manage.c (get_osp_task_options): New function. (run_osp_task): Refactor function to use get_osp_task_options(). 2015-01-27 Hani Benhabiles * src/manage_sql.c (osp_scanner_connect): New function. (get_scanner_params): Refactor code, call new function. * src/manage.h: Add function prototype. * src/manage.c (run_osp_task): Refactor code, call new function. 2015-01-27 Matthew Mundell * src/manage_sql.c (resource_with_name_exists): Finish doc. Neaten SQL. (resource_with_name_exists_global): New function. (create_user): Extend the check for existing users to users owned by anybody, now that users have owners. This prevents two users from having the same name. 2015-01-27 Matthew Mundell * src/manage_sql.c (escalate_1): Change Auto FP default to 0. 2015-01-26 Matthew Mundell * src/manage_sql.c (init_asset_iterator): Remove unused new_severity columns. 2015-01-26 Matthew Mundell * src/manage_sql.c (print_report_xml): Remove stray SVN markers. 2015-01-26 Matthew Mundell * src/manage_sql.c (modify_setting): Limit subqueries to one row, in case there are multiple entries for a global setting. 2015-01-26 Matthew Mundell Allow --modify-scanner options to be omitted, using their existing values when they are. * src/manage_sql.c (manage_modify_scanner): Allow the path args to be NULL. (modify_scanner): If an argument is NULL then use the existing value. 2015-01-26 Matthew Mundell Add --modify-scanner. * src/manage_sql.c (main): Add option. * src/manage_sql.c (manage_modify_scanner): New function. * src/manage.h: Add header accordingly. 2015-01-19 Michael Wiegand Simplify handling of library flags in CMakeLists.txt files, thereby removing the need for clumsy workarounds. * CMakeLists.txt: Simplify detection of PostgreSQL library and the associated flags. Use information retrieved by find_package directly instead of processing and casting to other variables. Change variable name for server include directory location for consistency. Make missing required libraries cause a SEND_ERROR instead of a FATAL_ERROR for consistency. Consequently, only gather flags if library is present. Remove redundant queries of library flags which were already retrieved by CMake. Remove unnecessary aggregation of flags. Remove check for libpcap as openvas-manager as it is not required. * src/CMakeLists.txt: Set include directories with include_directories instead of target properties. Remove quotes in target_link_libraries so that CMake lists get expanded correctly. 2015-01-26 Matthew Mundell * src/manage_sql.c (nvt_selector_family_count): Use a single statement for the static case, so that the DISTINCT can apply across both selections. This catches the case where the config contains NVT selectors that are made redundant by family selections, like in the Greenbone Web Application XML. 2015-01-22 Matthew Mundell * src/manage.c (slave_setup): Send Timeout prefs, as in GET_CONFIGS response. 2015-01-22 Matthew Mundell Handle Timeout NVT preferences when importing configs. * src/omp.c (config_insert_preferences): Add Timeout case. 2015-01-22 Matthew Mundell Include Timeout NVT preferences in GET_CONFIGS responses, but only if the timeout has been explicitly set by the user. * src/omp.c (omp_xml_handle_end_element): Send Timeout preferences in CLIENT_GET_CONFIGS. * src/manage_sql.c (init_config_timeout_iterator) (config_timeout_iterator_oid, config_timeout_iterator_nvt_name) (config_timeout_iterator_value): New functions. * src/manage.h: Add headers accordingly. 2014-01-22 Hani Benhabiles * src/manage_sql.c (osp_get_details_from_iterator): Also get the scanner details. * src/manage.h: Adjust function prototype. * src/omp.c (omp_xml_handle_end_element): In GET_SCANNERS, send the osp scanner's parameters too. 2014-01-22 Hani Benhabiles * src/manage_sql.c (create_report): Adjust function call parameter. (get_scanner_params, osp_get_details_from_iterator): Call osp_get_scanner_details(). 2014-01-21 Hani Benhabiles * src/manage.c (parse_osp_report): Adjust to add single hosts values from the report. * src/manage_sql.c (check_db_tasks, create_report) (set_scan_host_end_time, set_scan_host_end_time_otp) (set_scan_host_start_time, set_scan_host_start_time_otp): Refactor to call manage_report_host_add(). (manage_report_host_add): Add the new report host only if it doesn't exist. 2015-01-21 Matthew Mundell * src/omp.c (send_get_end): Include report in apply_override check, so that the report list also gets a default apply_overrides term when one is not given. 2015-01-20 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): In resource_name rename variable "name" to "execute_name" otherwise it conflicts with column names, and add a special case for tasks because the task trash is in the regular table. 2015-01-20 Matthew Mundell * src/manage_sql.c (setting_severity): Default to "nist" if the class is NULL, so that SQL functions in init_user_task_iterator work when called before authentication, like during --delete-user. 2015-01-20 Matthew Mundell * src/manage_sql.c (find_resource_by_name_with_permission): Remove extra old style args from sql_string call. This was affecting --delete-user and --modify-user. 2015-01-20 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Add the super case to user_owns, using new SQL function user_has_super_on_resource. 2015-01-20 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Use uuid instead of id of current_credentials, because id is the ID of the row, not the user. 2014-01-20 Hani Benhabiles * src/manage.h: Add new function prototype. * src/manage_sql.c (osp_get_details_from_iterator): New function. * src/omp.c (omp_xml_handle_end_element): Send the osp scanner description when appropriate, in GET_SCANNERS case. 2015-01-19 Matthew Mundell * src/manage_pg.c (create_tables): Add missing default_value column. 2015-01-19 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Flesh out "user_owns". 2014-01-19 Hani Benhabiles * src/manage.h: Add new function prototype. * src/manage_sql.c (osp_get_version_from_iterator): New function. (verify_scanner): Use new function. * src/omp.c (omp_xml_handle_end_element): Refactor code to use new function. 2014-01-19 Hani Benhabiles * src/manage_sql.c (find_report_format, ovaldef_description, find_user): Remove unused functions. * src/manage.h: Delete removed functions prototypes. 2015-01-19 Michael Wiegand * CMakeLists.txt: Ensure that the generated OMP.xml schema format is ignored when collecting files for the source package. 2015-01-15 Matthew Mundell * src/manage_acl.c (manage_create_sql_functions): Add basic "user_owns". (create_tables): Remove contraints from esxi_lsc_credential columns, because they can be 0, like the other credentials columns can. 2015-01-15 Matthew Mundell * src/manage_acl.c (where_owned): Use "inside" instead of "inner" as alias, becuase "inner" is a keyword. 2015-01-15 Matthew Mundell * tools/greenbone-scapdata-sync.in, tools/openvas-scapdata-sync.in (db_migrate_15): Correct index names and column. * tools/scap_db_init_pg.sql: Increment version to match SQLite. Correct column. 2015-01-15 Matthew Mundell * src/manage.c (get_nvti_xml): Correct typo. 2014-01-15 Hani Benhabiles * src/manage.h: Add function prototype. * src/omp.c (omp_xml_handle_end_element): In GET_SCANNERS case, send scanner version info when scanner type is OSP. 2014-01-15 Hani Benhabiles * src/manage_sql.c (verify_scanner): Adjust function call. 2014-01-14 Hani Benhabiles * src/manage.c (parse_osp_report): Parse the result's test_id and handle values accordingly. 2015-01-14 Matthew Mundell When the report format for an alert is not found in TEST_ALERT and GET_REPORTS, respond with a dedicated error message, instead of just with Internal Error. * src/manage_sql.c (escalate_2): Add new return for when report format is not found. (escalate_1, manage_alert): Doc new return. (manage_send_report): Separate alert errors. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORTS and CLIENT_TEST_ALERT handle new alert return values. 2015-01-14 Matthew Mundell * src/manage_sql.c (copy_role): Revert final clause in permissions INSERT to use "resource". r21041 changed the clause to use "owner", but the clause is about limiting the statement to command permissions, not about limiting the statement to global permissions. 2015-01-13 Timo Pollmeier Fix or clarify documentation of various OMP commands. * src/schema_formats/XML/OMP.xml.in (authenticate): Add "Super Admin" as option for role. (create_group, create_role): Mark "users" element as optional. Add response. (create_slave): Mark "password" element as optional. (create_target): Mark elements "ssh_lsc_credential" and "port", "smb_lsc_credential", "esxi_lsc_credential", "alive_tests", "reverse_lookup_only" and "reverse_lookup_unify" as optional. (create_user): Add optional "ifaces" element. Add summary for "allow" attribute of "hosts" element. (delete_port_range, delete_user): Remove attribute "ultimate" as it is not used for any actual trashcan functionality. (help): Add attribute "type" to command. Add attributes "format", "extension" and "content_type" to "schema" element in response. (modify_group, modify_role): Add response. (modify_schedule): Note that missing subelements of "first_time" will default to system time and that a missing "timezone" implies using the user's timezone. (modify_user): Mark "new_name" as optional. Add optional "ifaces" element. Add summary for "allow" attribute of "hosts" element. (resume_task, start_task): Add report_id element and update example. * doc/omp.html, doc/omp.rnc: Update from source. 2014-01-12 Hani Benhabiles * src/manage.c (parse_osp_report): Adjust to handle host detail results. * src/manage.h: Add insert_report_host_detail prototype. 2015-01-12 Matthew Mundell * src/manage_sql.c (escalate_2): Find report format with permissions, as it may be owned by someone else. 2014-01-12 Hani Benhabiles * src/manage_sql.c (insert_report_host_detail): New function. (create_report, manage_report_host_details): Refactor code to use insert_report_host_detail(). 2015-01-12 Michael Wiegand Post-release version bump. * CMakeLists.txt: Updated version number. 2015-01-12 Michael Wiegand * CHANGES: Fix typo. 2015-01-12 Benot Allard * CHANGES: Prepare release of openvas-manager 6.0+beta5. 2015-01-09 Matthew Mundell * src/sql.c (openvas_sleep): Add conversion to seconds. 2015-01-09 Matthew Mundell Use unsigned ints for retry variables, to avoid passing negatives to the sleep function. * src/sql.c (openvas_usleep, openvas_sleep): Switch arg to unsigned. * src/sql.h: Update headers accordingly. * src/sql_sqlite3.c (sql_prepare_internal, sql_exec_internal) (sql_bind_blob, sql_bind_int64, sql_bind_double, sql_bind_text) (sql_reset): Use unsigned for retries. 2015-01-09 Timo Pollmeier * src/manage_sql.c (manage_optimize): Rename cleanup-open-ports to remove-open-port-results. * src/openvasmd.c (main): Update optimize choices in option_entries. 2015-01-09 Timo Pollmeier * src/manage_sql.c (manage_optimize): Log success text in addition to writing it to stdout. * src/openvasmd.c (main): Change logging of "Optimizing ..." message from info to message level and also output it in non-verbose mode. 2015-01-09 Timo Pollmeier * src/manage_sql.c (manage_optimize): Add cleanup-port-names to convert ports from the old name format and to remove IANA port names from imported reports. * src/manage_sqlite3.c (sql_strpos): New function. (manage_create_sql_functions): Add new SQL function strpos which behaves the same as the function in PostgreSQL with the same name. * src/openvasmd.c (option_entries): Update list of optimize choices. 2014-01-09 Hani Benhabiles * src/manage_sql.c (manage_restore): Fix sql statements. 2015-01-08 Matthew Mundell Sleep via wrapper functions that handle interrupts. * src/sql.c (openvas_usleep, openvas_sleep): New functions. Sleep with nanosleep. * src/sql.h: Add headers accordingly. * src/manage.c (slave_sleep_connect, slave_setup, run_slave_task) (fork_osp_scan_handler): Use openvas_sleep instead of sleep. * src/openvasmd.c (fork_connection_for_schedular, rebuild_nvt_cache): Use openvas_sleep. * src/scanner.c (openvas_scanner_is_loading): Use openvas_usleep. * src/sql_sqlite.c (sql_prepare_internal, sql_exec_internal) (sql_bind_blob, sql_bind_int64, sql_bind_double, sql_bind_text) (sql_reset): Use openvas_usleep. 2015-01-08 Matthew Mundell * src/sql_sqlite3.c (sql_prepare_internal, sql_bind_blob, sql_bind_int64) (sql_bind_double, sql_bind_text, sql_reset): Sleep before retry, as in sql_exec_internal. 2015-01-08 Michael Wiegand * doc/db.png: Set SVN mime-type property correctly. 2015-01-08 Timo Pollmeier * src/manage_sql.c (manage_optimize): Rename cleanup_config_prefs and cleanup_open_ports to cleanup-config-prefs and cleanup-open-ports. * src/openvasmd.c (option_entries): Update list of optimize choices. 2015-01-08 Timo Pollmeier * src/manage_sql.c (manage_optimize): Add cleanup of duplicate config preferences (cleanup_config_prefs) and removal of superfluous open port results (cleanup_open_ports). * src/openvasmd.c (option_entries): Update list of optimize choices. 2014-01-08 Hani Benhabiles * src/manage_sql.c (make_osp_result): Quote the result's name before insertion. 2015-01-08 Timo Pollmeier * src/sql.c (sqlv, sql_x_internal): Use a copy of the args va_list for the sql_prepare_internal call so the args can be used again in case of a retry. Add comment about va_list not being reusable. 2015-01-06 Timo Pollmeier * src/report_formats/HTML/HTML.xsl (note, override): Hide inactive notes / overrides. Use end_time instead of modification_time in "Active until:" part. * src/report_formats/LaTeX/latex.xsl (notes, overrides): Hide inactive notes / overrides. * src/report_formats/TXT/TXT.xsl (note, override): Hide inactive notes / overrides. 2015-01-06 Timo Pollmeier * src/omp.c (omp_xml_handle_end_element): In case CLIENT_GET_REPORTS add short task and report format info to outer report element. * src/manage_sql.c (escalate_2): Use task and report format name when creating file name for email attachments. * src/schema_formats/XML/OMP.xml.in (report): Add new elements task and report_format. * doc/omp.html, doc/omp.rnc: Update from source. 2015-01-06 Matthew Mundell * src/manage.c (valid_omp_command): Remove special case now that "resume_task" contains two words like the other commands. 2015-01-06 Matthew Mundell * src/manage.c (manage_run_wizard): Correct indent. 2015-01-06 Matthew Mundell OMP RESUME_OR_START_TASK was removed. Hence increase database version to 136. Add database migration from version 135 to 136. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 136. * src/manage_migrators.c (migrate_135_to_136): New function. (database_migrators): Add migrate_135_to_136. * doc/db.png: Update for version change. 2014-01-05 Hani Benhabiles * src/manage_sql.c (init_asset_iterator): Fix sql statements by using WHERE instead correctly. 2014-01-05 Hani Benhabiles * src/manage.c (fork_osp_scan_handler): Handle and set received progress value accordingly. * src/manage_sql.c (report_progress): Adjust to handle OSP scan report case. 2014-12-31 Hani Benhabiles * src/manage.c (parse_osp_report): Use host attribute from results instead of the target string when inserting results. 2014-12-31 Hani Benhabiles * src/manage_sql.c (modify_task_check_config_target): Remove function. * src/manage.h: Remove prototype. * src/omp.c (omp_xml_handle_end_element): Don't limit OSP tasks to single-host targets when creating or modifying them. 2014-12-30 Hani Benhabiles * src/manage_sql.c (init_report_errors_iterator): Use UNION ALL for UNION as it doesn't remove dpulicates and provides better performance. 2014-12-19 Matthew Mundell * src/manage_sql.c (modify_user): Prevent users from modifying their own names. 2014-12-19 Timo Pollmeier * src/manage_sql.c (NOTE_ITERATOR_FILTER_COLUMNS): Add column "active". (NOTE_ITERATOR_COLUMNS, NOTE_ITERATOR_TRASH_COLUMNS): Add filter column names id, uuid, text, hosts, port, results, active and severity. (OVERRIDE_ITERATOR_COLUMNS, OVERRIDE_ITERATOR_TRASH_COLUMNS): Add filter column names id and uuid. 2014-12-19 Matthew Mundell * src/manage_sql.c (modify_user): Exclude user being modified from name check. 2014-12-19 Matthew Mundell Add NEW_NAME to OMP MODIFY_USER, to allow changing of user names. * src/manage_sql.c (modify_user): Add new_name argument. Change name if given. * src/manage.h: Update header accordingly. * src/omp.c (modify_user_data_t, modify_user_data_reset) (client_state_t): Add new field. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add NEW_NAME to MODIFY_USER. * src/schema_formats/XML/OMP.xml.in (modify_user): Add id and NEW_NAME. * doc/omp.html, doc/omp.rnc: Update from source. 2014-12-18 Matthew Mundell * src/manage_sql.c (filtered_host_count): Use user_owns for ownership, so that Super checks are done. 2014-12-17 Matthew Mundell Account for Super permissions in asset reports. * src/manage_acl.c (SUPER_CLAUSE): Add format arg for value SQL. (SUPER_CLAUSE_ARGS): Add missing doc. (user_has_super_on): Add SUPER_CLAUSE format. (user_has_super_on_resource): New function. (user_owns_name): New function. Was user_owns. (user_owns): Convert to a version of user_owns_uuid that takes the resource instead of the UUID. * src/manage_acl.h: Update headers accordingly. * src/manage_sql.c (init_asset_iterator, host_nthlast_report_host): Use user_owns for ownership, so that Super checks are done. (lookup_report_format): Update for name change. * src/manage_sqlite3.c (sql_user_owns): New function. (manage_create_sql_functions): Add user_owns. 2014-12-17 Matthew Mundell * src/manage_acl.c (where_owned): Correct trash condition. 2014-12-17 Matthew Mundell * src/manage_acl.h (USER_MAY): Add missing subject_location test. * src/manage_acl.c (where_owned): Add subject_location tests for the permission part of the query too. 2014-12-17 Matthew Mundell * src/manage_sql.c (delete_user): Make users/groups/roles global if they are owned by the user being deleted. Also make permissions global if they are related to these users/groups/roles. 2014-12-16 Matthew Mundell * src/manage_acl.c (user_owns_uuid, user_owns_trash_uuid) (user_has_access_uuid, where_owned): Quote args for SQL. 2014-12-16 Matthew Mundell * src/manage_acl.c (user_has_super_on): Quote value for SQL. 2014-12-16 Matthew Mundell * src/manage_acl.c (user_has_super_on): New function. (user_owns, user_owns_uuid, user_owns_trash_uuid): Call user_has_super_on instead of using macros. 2014-12-16 Matthew Mundell * src/manage_sql.c (create_permission): Enable creation of permissions on users, roles and groups. 2014-12-16 Matthew Mundell * src/manage_acl.c (where_owned): Skip permissions that apply to user when getting trash permissions. 2014-12-16 Matthew Mundell * src/manage_acl.c (role_can_super_everyone, user_can_super_everyone) (user_can_everything, user_has_super, user_is_user) (user_has_access_uuid, where_owned): Add missing subject_location tests. Without these tests, permissions in the trashcan can randomly affect the rights that are assiged to users. 2014-12-16 Matthew Mundell * src/manage_sql.c (omp_command_takes_resource): Exclude DESCRIBE commands too. (create_permission): If a resource ID is given but the resource type is NULL then return with "failed to find resource" instead of making a command level permission. 2014-12-16 Matthew Mundell * src/manage_sql.c (modify_permission): Remove call that cleared owner. Permissions have owners now. 2014-12-16 Matthew Mundell * src/manage_acl.c (user_can_super_everyone, user_can_everything) (user_has_super): Quote SQL args. 2014-12-16 Matthew Mundell * src/manage_sql.c (copy_user): Use fuller Super Admin check. * src/omp.c (copy_user): Use fuller Super Admin check. * src/manage.h: Add header accordingly. 2014-12-16 Matthew Mundell * src/manage_sql.c (copy_role): Refuse to copy roles that have Super Admin capability. 2014-12-16 Matthew Mundell * src/manage_sql.c (copy_permission): Refuse to copy the permission that gives Super Admin capability. (permission_name): New function. * src/manage.h: Add header accordingly. 2014-12-16 Hani Benhabiles Add default_value column to config_preferences table, hence increase database version to 141. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 141. * src/manage_migrators.c (migrate_140_to_141): New. (database_migrators): Add migrate_140_to_141. * src/manage.h: Add function prototype. * src/manage_sql.c (create_config_from_scanner): In preference of type selection, insert the first value of the list as the current value for the preference. (copy_config, delete_config, init_preference_iterator, manage_restore): Adjust to handle new default_value column properly. (preference_iterator_default): New function * src/manage_sqlite3.c (create_tables): Add default_value column to config_preferences and config_preferences_trash tables. * src/omp.c (omp_xml_handle_end_element): Remove work-around for osp config preferences and get the default value correctly. 2014-12-16 Matthew Mundell * src/manage_sql.c (add_role_permission): Correct doc. 2014-12-16 Matthew Mundell Prevent assignment of roles that have Super Admin capability. * src/manage.h: Remove header now in manage_acl.h. * src/manage_acl.c (role_can_super_everyone): New function. * src/manage_acl.h: Add headers accordingly. * src/manage_sql.c (create_user): Check role for effective Super Admin too. (modify_user): Refuse to give user roles that have Super Admin. 2014-12-16 Matthew Mundell Introduce ownership of permissions. * src/manage_acl.c (user_has_access_uuid): Remove permission super check, as this is covered by the user_owns_uuid call at the top. * src/manage_sql.c (create_permission): Always set the owner to the current user. (copy_permission): Remove call that cleared owner. (copy_role): Set owner of permissions to current user. 2014-12-15 Matthew Mundell * src/manage_sql.c (modify_user): Use "user_can" function to include the case of a Super Admin created via permission instead of role. 2014-12-15 Matthew Mundell * src/manage_acl.c (user_owns, user_owns_trash_uuid): Clarify doc. (user_has_access_uuid): Note where super check is done. 2014-12-15 Matthew Mundell * src/manage_acl.c (SUPER_CLAUSE): Add trash table specifier. (SUPER_CLAUSE_ARGS): Add trash args. (user_owns, user_owns_uuid): Pass trash arg. (user_owns_trash_uuid): Rename "resource" arg to "type". Add super check. This enables users with Super to delete the resources of other users from the trashcan. 2014-12-15 Matthew Mundell * src/manage_acl.c (user_owns): Check for SecInfo types first, because the check is valid for users with Super too. (user_owns_result): Remove. (user_owns_uuid): Check for SecInfo types first, because the check is valid for users with Super too. Inline user_owns_result because this is the only place it is called. * src/manage_acl.h: Remove header accordingly. 2014-12-15 Matthew Mundell * src/manage_acl.c (SUPER_CLAUSE): New define. (SUPER_CLAUSE_ARGS): New macro. (user_owns): Rename "resource" arg to "type". Add Super check. Add check for SecInfo types. (user_owns_uuid): Use define for super clause. 2014-12-15 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Correct command name in find slave permissions. 2014-12-15 Matthew Mundell * src/manage_acl.c (user_owns, user_owns_trash_uuid): New functions. From manage_sql.c. * src/manage_acl.h: Add header accordingly. * src/manage_sql.c (user_owns, user_owns_trash_uuid): Remove. Now in manage_acl.c. 2014-12-15 Jan-Oliver Wagner Remove support for the RESUME_OR_START_TASK OMP command. * src/omp.c (resume_or_start_task_data_t, resume_or_start_task_data_reset, resume_or_start_task_data): Removed. (command_data_t): Remove resume_or_start_task. (omp_xml_handle_start_element): Drop handling of RESUME_OR_START_TASK and CLIENT_RESUME_OR_START_TASK. (client_state_t): Removed CLIENT_RESUME_OR_START_TASK. * src/manage.c (resume_or_start_task): Removed. (manage_schedule): Instead of calling omp_resume_or_start_task, first try omp_start_task_report and if this fails try omp_resume_task_report. * src/manage.h: Remove proto accordingly. * src/manage_sql.c: Update documentation. (omp_command_type): Don't consider the command "resume_or_start_task" any more. (omp_commands): Remove RESUME_OR_START_TASK. * src/schema_formats/XML/OMP.xml.in: Remove RESUME_OR_START_TASK and document this as a protocol change. 2014-12-14 Matthew Mundell Introduce ownership of users, roles and groups. * src/manage_acl.c (user_can_super_everyone, user_is_owner): New functions. * src/manage.h, src/manage_acl.h: Add headers accordingly. * src/manage_sql.c (GET_ITERATOR_COLUMNS_PREFIX): Use alias for nested users query. (find_resource_by_name_with_permission, find_group_with_permission) (find_role_with_permission, find_user_with_permission) (find_user_by_name_with_permission): New functions. (copy_resource_lock): Remove special case for admin types. (create_group, create_user): Set owner. (delete_group, modify_group, delete_role, modify_role) (modify_user): Check permissions, now that there are owners. (create_permission): Only allow creation of super permissions when the user is the direct owner of the resource. This limits users to giving super permission on users/roles/groups that they created. (delete_user): Check permissions, now that there are owners. Make children users shared by everyone, for now. 2014-12-12 Jan-Oliver Wagner Rename the OMP command RESUME_STOPPED_TASK to RESUME_TASK as the first consolidation step to have only a single RESUME function. This includes the name of the permission, hence increase database version to 140 and adjust permissions in the migrator. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 140. * src/manage_migrators.c (migrate_139_to_140): New. (database_migrators): Add migrate_139_to_140. * src/manage_sql.c (omp_commands): Rename RESUME_STOPPED_TASK to RESUME_TASK. (omp_command_type): Adjust string accordingly. * src/omp.c (resume_stopped_task_data_t): Renamed to resume_task_data_t. (client_state_t): Renamed CLIENT_RESUME_STOPPED_TASK to CLIENT_RESUME_TASK. (resume_stopped_task_data_reset): Renamed to resumt_task_data_reset. (command_data_t): Adjusted according to renaming. (resume_stopped_task_data): Renamed to resumt_task_data. (omp_xml_handle_start_element): Adjust according to renaming. * src/manage.c (slave_setup): Adjust for renamed functions in omp module. (resume_stopped_task): Rename to resume_task and adjusted names. * src/manage.h: Adjust proto accordingly. * src/schema_formats/XML/OMP.xml.in: Renamed RESUME_STOP_TASK to RESUME_TASK and document this as a protocol change. 2014-12-12 Jan-Oliver Wagner * src/schema_formats/XML/OMP.xml.in: Replaced any "Get all" by the more precise and less confusing phrase "Get one or many". 2014-12-12 Hani Benhabiles * src/omp.c (omp_xml_handle_end_element): Don't adjust type for definitions_file parameter as it is now separated from normal files. 2014-12-11 Matthew Mundell Make --role apply to --get-users too. * src/manage_sql.c (manage_get_users): Add role_name arg. * src/manage.h: Update header accordingly. * src/openvasmd.c (main): Pass role to manage_get_users too. 2014-12-11 Michael Wiegand * src/report_formats/Verinice_ISM/Verinice_ISM.xsl: Include CVSS score as severity for vulnerabilities as well. 2014-12-10 Timo Pollmeier * src/manage_sql.c (RESULT_ITERATOR_FILTER_COLUMNS) (RESULT_ITERATOR_COLUMNS): Add solution_type column. (RESULT_ITERATOR_COLUMN_COUNT): Increase to 28. (init_result_iterator): Add columns report_id and solution_type and case for sorting by solution_type. 2014-12-10 Matthew Mundell * src/manage_acl.c (where_owned): Apply task trash case on top of the case for the regular tasks, so that permissions are consulted when getting the trash. 2014-12-10 Matthew Mundell * src/manage_acl.c (where_owned): Move general trash table case into the cases for the regular tables, so that permissions are consulted when getting the trash. 2014-12-10 Matthew Mundell * src/manage_acl.c (type_is_shared): Remove. Always 0. (where_owned): Remove "type is shared" cases, which are no longer used. 2014-12-10 Matthew Mundell * src/manage_acl.c (where_owned): In permissions case, add Super clause. 2014-12-10 Matthew Mundell * src/manage_acl.c (where_owned): In permissions case, add comments and use table name directly. 2014-12-10 Timo Pollmeier Add indices for NVTs, CVEs and CPEs and change init_aggregate_iterator to use them. Remove unused features from init_aggregate_iterator for simplicity. * CMakeLists.txt (OPENVASMD_SCAP_DATABASE_VERSION): Increase to 15. * src/manage_pg.c (create_tables): Add indices nvts_by_modification_time, nvts_by_cvss_base, nvts_by_solution_type. * src/manage_sqlite3.c (create_tables): Add indices nvts_by_creation_time, nvts_by_modification_time, nvts_by_cvss_base, nvts_by_solution_type. * src/manage_sql.c (init_aggregate_iterator): Restructure query so indices can be used. Remove ignore_pagination parameter and always ignore the filter keywords "first" and "rows". Remove unused cases for trash and single resources. * src/manage.h (init_aggregate_iterator): Remove ignore_pagination parameter. * tools/greenbone-scapdata-sync.in: Increase version. (db_migrate_15): New function. (check_db_version): Add migration to version 15. * tools/openvas-scapdata-sync.in (db_migrate_15): New function. (check_db_version): Add migration to version 15. * tools/scap_db_init.sql, tools/scap_db_init_pg.sql: Add indices cpes_by_creation_time, cpes_by_modification_time, cpes_by_max_cvss, cves_by_creation_time, cves_by_modification_time, cpes_by_cvss. * src/schema_formats/XML/OMP.xml.in (get_aggregates): Add note about the command ignoring the filter keywords "first" and "rows" and not supporting the trash and id attributes. * doc/omp.html: Update from source. 2014-12-09 Matthew Mundell * src/manage_acl.c (user_has_access_uuid): Remove Super note, as this is now done in user_owns_uuid. (type_has_permissions): Remove. Always 1. (where_owned): Correct doc. Just do the "type has permission" cases, because all types have permissions now. 2014-12-09 Matthew Mundell * src/manage.c (run_task): Correct indenting. 2014-12-09 Matthew Mundell * src/manage_sql.c (create_permission): Check for Super on everything after finding the resource, to prevent this permission from being created by passing in a fake or deleted resource ID. 2014-12-09 Timo Pollmeier * src/schema_formats/XML/OMP.xml.in (get_aggregates): Add missing attributes filter and filt_id to the command. * doc/omp.html, doc/omp.rnc: Update from source. 2014-12-08 Timo Pollmeier * src/manage_sqlite3.c (cached_task_severity): In overrides case return overrides_severity of cache struct after updating it instead of returning the severity component without overrides. 2014-12-05 Timo Pollmeier * src/manage_sql.c (manage_optimize): Make vacuum work for SQLite, which does not allow it inside a transaction. Show file size reduction in messsage after vacuuming. 2014-12-05 Timo Pollmeier * src/manage_sql.c (init_aggregate_iterator): Round time columns down to the beginning of the day to reduce the amount of columns returned. 2014-12-05 Matthew Mundell * src/manage_sql.c (manage_set_config_families): When modifying a family to include all NVTs, and the family does not grow, recalculate the value of the nvts_growing cache column. Using the previous value gives the wrong value when the family being modified was previously the only growing family. 2014-12-05 Matthew Mundell * src/manage_sql.c (manage_set_config_families): When modifying a family to include all NVTs, and the family does not grow, then use the previous value of the nvts_growing cache column. Using 0 is correct for the family being modified, but there may be existing families that grow. 2014-12-04 Matthew Mundell Handle SQLITE_SCHEMA properly, instead of aborting. * src/manage_sql.c (report_severity_data, create_agent): Handle new sql_exec return. * src/sql.c (sqlv, sql_quiet, sql_x_internal, next): Handle new sql_exec_internal return. (sql_exec): Update doc. * src/sql_sqlite3.c (sql_exec_internal): Return if SQLITE_SCHEMA occurs, so that caller can prepare and run the statement again. This can happen after a VACUUM, because the VACUUM may change the schema internally. 2014-12-04 Matthew Mundell * src/omp.c (manage_optimize): Lock database around VACUUM, to minimize chance of SQLITE_SCHEMA in statements that run afterwards. 2014-12-04 Matthew Mundell Add option --optimize, with arguments "analyze" and "vacuum". * src/omp.c (manage_optimize): New function. * src/manage.h: Add header accordingly. * src/openvasmd.c (main): Add --optimize. 2014-12-03 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_TASK find the task with permission, in case the owner has given the user read access. 2014-12-03 Matthew Mundell Enable mixing of the current user's slaves and tasks, with other people's slaves and tasks, when permissions allow it. * src/manage_sql.c (init_slave_task_iterator): Get all tasks that use the slave. Add a column to indicate whether the user has read access to the slave. (slave_task_iterator_readable, trash_slave_readable): New functions. * src/manage.c (run_task): Before forking, if task has slave and user is denied access to the slave, then return 99. * src/manage.h: Add headers accordingly. * src/manage_acl.c (where_owned): Add const to owner_filter arg. * src/manage_acl.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): Send empty PERMISSIONS in TASK in GET_SLAVES when task is not readable. Same for SLAVE in GET_TASKS when slave is not readable. In CLIENT_MODIFY_TASK find the task with permission, in case the owner has given the user read access. And find slave with permission, for same reason. 2014-12-03 Matthew Mundell * src/manage_sql.c (modify_task_check_slave_scanner): Correctly account for the case where slave ID is 0 (caller will clear slave from task). Try make implementation more obvious at the same time. Also free scanner_uuid return. 2014-12-03 Timo Pollmeier * src/sql_sqlite3.c (sql_exec_internal): Retry after resetting the statement in SQLITE_ERROR case, like it is done in SQLITE_BUSY case. 2014-12-03 Timo Pollmeier Add solution_type column to NVTs. Hence increase database version to 139. Add database migration from version 138 to 139. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 139. * src/manage_migrators.c (migrate_138_to_139): New function. (database_migrators): Add migrate_138_to_139. * doc/db_postgres.sql (nvts): Add solution_type column. * doc/db.png: Update for version change. * src/manage_pg.c (create_tables): Add solution_type column to the nvts table. * src/manage_sqlite3.c (create_tables): Add solution_type column to the nvts table. * src/manage_sql.c (make_nvt_from_nvti): Add solution_type tag. (NVT_INFO_ITERATOR_FILTER_COLUMNS, NVT_ITERATOR_COLUMNS) (NVT_ITERATOR_COLUMNS_NVTS): Add solution_type column. (nvt_iterator_solution_type): New function. * src/manage_sql.h (tag_value): New prototype to make the function available in manage_migrators.c. * src/manage.h (nvt_iterator_solution_type): New function prototype. 2014-12-01 Timo Pollmeier * src/manage_sql.c (credentials_setup): Get "Severity Class" and "Dynamic Severity" settings here for consistency with timezone setting. (authenticate): Remove queries for "Severity Class" and "Dynamic Severity" which are now sent by credentials_setup. 2014-12-01 Timo Pollmeier Cache "Severity Class" and "Dynamic Severity" settings in the current_credentials struct to reduce the amount of SQL queries by OMP commands like GET_REPORTS that frequently use these settings. * src/manage_sql.c (authenticate): Get "Severity Class" and "Dynamic Severity" setting for the credentials struct. (report_counts_id_filt, print_report_xml): Add const qualifier to local variables for Dynamic Severity setting and remove free / g_free. (setting_severity): Add const qualifier and get value from current_credentials. (setting_dynamic_severity_int): Get value from current_credentials. (modify_setting): Update current_credentials when setting Severity Class or Dynamic Severity. * src/manage.c (severity_in_level): Add const qualifier to variable "class" and remove g_free calls. * src/manage.h (severity_in_level): Add const qualifier. * src/omp.c (omp_xml_handle_end_element): In case CLIENT_AUTHENTICATE add const qualifier to variable "severity" and remove g_free calls. 2014-11-28 Timo Pollmeier * src/manage_sql.c (create_schedule): Quote the timezone string for insert. 2014-11-28 Michael Wiegand * src/report_formats/LaTeX/latex.xsl: Partially revert r20989 as NVT names may indeed contain characters which LaTeX considers special. 2014-11-27 Matthew Mundell * src/manage_sql.c (task_writable, trash_task_writable): Remove access check to match other such functions. The permissions name was missing the type, causing the WRITABLE element to be wrong. Access is sent to the client in the PERMISSIONS element anyway. 2014-11-27 Matthew Mundell * src/manage_sql.c (delete_user): Include Super permissions in delete. 2014-11-27 Matthew Mundell Account for Super in global permission checks. * src/manage_acl.c (where_owned): Check permission owner instead of permission resource, to see if the permission is global, because Super permissions are global but can have resources. * src/manage_sql.c (create_permission): Set the owner to NULL for Super permissions, because they are global. (copy_role): Use permission owner instead of resource in global check. 2014-11-27 Matthew Mundell * src/manage_sql.c (delete_group, delete_role): Delete permissions according to resource_type too, for Super permissions. When moving item to trash, update the resource locations, because groups and roles can have these with Super. 2014-11-27 Timo Pollmeier * src/manage_sql.c (NOTE_ITERATOR_COLUMNS, NOTE_ITERATOR_TRASH_COLUMNS) (OVERRIDE_ITERATOR_COLUMNS, OVERRIDE_ITERATOR_TRASH_COLUMNS) (ALL_INFO_ITERATOR_COLUMNS): Add missing owner column. 2014-11-27 Timo Pollmeier Allow severity to be null in CERT-Bund and DFN-CERT Advisories, CPEs and OVAL definitions if no severity is available from CVEs. * tools/greenbone-certdata-sync.in (update_cvss) tools/openvas-certdata-sync.in (update_cvss): Remove coalesce to allow null severity values in CERT-Bund and DFN-CERT Advisories. * tools/openvas-scapdata-sync.in (update_cvss) tools/greenbone-scapdata-sync.in (update_cvss): Remove coalesce to allow null severity values in CPEs and OVAL Definitions. 2014-11-26 Timo Pollmeier * src/wizards/quick_first_scan.xml: Support optional params for Port List and Credentials in Target creation as well as Alert, Config, Scanner and Slave in Task creation. Add check for hosts parameter. Add new "init" mode to get settings. * src/wizards/quick_task.xml: Support new optional params for Port List and ESXi Credentials in Target creation, as well as Scanner in Task creation. 2014-11-26 Matthew Mundell Add RESOURCE/TYPE to MODIFY_PERMISSION, so that editing of Super permissions works. * src/manage_sql.c (create_permission): Add resource_type_arg arg. Add checks for Super. * src/manage.h: Update header accordingly. * src/omp.c (modify_permission_data_t, modify_permission_data_reset) (client_state_t): Add RESOURCE/TYPE entry. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add RESOURCE/TYPE to MODIFY_PERMISSION. * src/schema_formats/XML/OMP.xml.in (modify_permission): Add RESOURCE/TYPE. * doc/omp.html, doc/omp.rnc: Update from source. 2014-11-26 Timo Pollmeier * src/manage_sql.c (CVE_INFO_ITERATOR_FILTER_COLUMNS): Use the macro GET_ITERATOR_FILTER_COLUMNS for consistency. (CVE_INFO_ITERATOR_COLUMNS): Use the macro GET_ITERATOR_COLUMNS_PREFIX for consistency and add missing dummy "owner" column. 2014-11-26 Timo Pollmeier * src/manage_sql.c (email): New parameter attachment_name which sets the base name of the attachment. (escalate_2): Generate file name for report attachment. 2014-11-26 Hani Benhabiles * src/manage_sql.c (task_preference_iterator_name) (task_preference_iterator_value, slave_iterator_password) (resource_tag_iterator_active): Remove unused functions. (SLAVE_ITERATOR_COLUMNS, SLAVE_ITERATOR_TRASH_COLUMNS): Remove password column. (init_resource_tag_iterator): Remove active column from iterator. * src/manage.h: Remove functions prototypes. 2014-11-26 Matthew Mundell Add RESOURCE/TYPE to CREATE_PERMISSION, so that Super permissions can be created on Roles, Groups and Users. * src/manage_sql.c (create_permission): Add resource_type_arg arg. Add checks for Super. * src/manage.h: Update header accordingly. * src/omp.c (create_permission_data_t, create_permission_data_reset) (client_state_t): Add RESOURCE/TYPE entry. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add RESOURCE/TYPE to CREATE_PERMISSION. * src/schema_formats/XML/OMP.xml.in (create_permission): Add RESOURCE/TYPE. * doc/omp.html, doc/omp.rnc: Update from source. 2014-11-25 Matthew Mundell * src/manage_acl.c (user_has_super, user_owns_uuid, where_owned): Extend Super permission to apply to groups and roles. 2014-11-25 Timo Pollmeier * src/wizards/quick_task.xml: Use regex from Modify Task wizard for parameter "start_timezone" and use it in the schedule creation. 2014-11-25 Timo Pollmeier * src/wizards/modify_task.xml: Use parameter name "start_timezone" to set timezone of schedule. Remove now unused parameter "timezone". 2014-11-25 Timo Pollmeier Add new "Modify Task" wizard. * CMakeLists.txt: Install new file src/wizards/modify_task.xml. * src/wizards/modify_task.xml: New file. 2014-11-25 Hani Benhabiles * src/lsc_crypt.c (lsc_crypt_encrypt): Set the name variable correctly when looping over the variable arguments list. 2014-11-25 Michael Wiegand * tools/greenbone-certdata-sync.in, tools/greenbone-scapdata-sync.in: Remove redundant directories from last commit. 2014-11-25 Michael Wiegand * tools/greenbone-certdata-sync.in, tools/greenbone-scapdata-sync.in, tools/openvas-migrate-to-postgres.in: Use existing CMake variables directly instead of attempting to derive them from CMAKE_INSTALL_PREFIX. 2014-11-25 Matthew Mundell * src/manage.c (credentials_setup): New function. (authenticate): Also do the credentials setup for authentications from task scheduling. 2014-11-25 Matthew Mundell Retry starting of scheduled tasks when the start OMP fails. * src/manage.c (reschedule_task): New function. (manage_schedule): Do an extra fork and use the extra process to check if the child doing the OMP succeeded, when starting the tasks. If it failed to run the OMP, then reschedule the task. The idea is that the OMP commands may fail due to low memory or socket timeouts when another process is at 100%. So we retry them if they fail, instead of just leaving them, otherwise the task may skip a scheduled run. * src/openvasmd.c (fork_connection_for_schedular): Swap parent and child so that the caller gets the direct child of itself. 2014-11-24 Jan-Oliver Wagner * src/report_formats/LaTeX/latex.xsl (result-details-host-port-threat): Fix formatting of result section "Product Detection Result". 2014-11-24 Jan-Oliver Wagner * src/report_formats/LaTeX/latex.xsl (result-details-host-port-threat): Drop empty lines at the end of the several sections of the result. 2014-11-24 Jan-Oliver Wagner * src/report_formats/LaTeX/latex.xsl (result-details-host-port-threat): Replaced use of text-to-escaped-row by direct application of the text for NVT names and OIDs which do not contain any characters that need escaping or multi-line formatting. 2014-11-24 Jan-Oliver Wagner * src/report_formats/LaTeX/latex.xsl (structured-text): New. A simple approach to format the structured text adequately of LaTeX. Copied from the omp.xsl of GSA. (result-details-host-port-threat): Use structured-text instead of text-to-escaped-row for those elements where it is assured no overlong words or strange characters do appear. This makes the formatting nicer and also reduces size of the document. 2014-11-24 Jan-Oliver Wagner * src/report_formats/LaTeX/latex.xsl (result-details-host-port-threat): Drop line with "OID" in the section "Summary" of results. It is a redundant information because the OID appears also in the section "Log Method"/"Vulnerability Detection Method". This reduces the size of the report. 2014-11-24 Jan-Oliver Wagner * src/report_formats/LaTeX/latex.xsl (result-details-host-port-threat): Removed an empty line before and an empty line after the "OID" line in the section "Summary" of a result. This reduces size of documents by several pages. 2014-11-24 Timo Pollmeier Add settings for default resource selections on the "New Task" and "New Target" pages in GSA and get settings in Advanced Task Wizard. * src/manage_sql.c (modify_setting): Add default resource settings. * src/wizards/quick_task.xml (init): Get settings. 2014-11-21 Michael Wiegand Post-release version bump. * CMakeLists.txt: Updated version number. 2014-11-21 Michael Wiegand Preparing the openvas-manager 6.0+beta4 release. * CHANGES: Updated. 2014-11-21 Matthew Mundell * src/manage.h: Export user_is_super_admin. * src/omp.c (send_get_common): Add special case for listing permissions when the resource is a Super Admin user. 2014-11-21 Matthew Mundell Prevent deletion of users with Super Admin role via OMP. Prevent modification of Super Admin users by everyone except the user themself. * src/manage_sql.c (manage_delete_user): Update delete_user call. (delete_user): Add forbid_super_admin arg. (modify_user): Prevent edit of Super Admin user by other users. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): Update delete_user call. 2014-11-21 Hani Benhabiles * CMakeLists.txt (GPGME_LDFLAGS, GPGME_CFLAGS): New variables. * src/CMakeLists.txt: Properly link against libgpgme. 2014-11-21 Matthew Mundell Prevent creation of users with Super Admin role via OMP. * src/manage_sql.c (manage_create_user): Update create_user call. (create_user): Add forbid_super_admin arg. (copy_user): Prevent cloning users who have the Super Admin role. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): Update create_user call. 2014-11-20 Hani Benhabiles * src/manage_pg.c (create_tables), src/manage_sqlite3.c (create_tables): Remove attack_state column from report_hosts table. * src/manage_sql.c (init_host_iterator): Don't iterate over attack_state column. (host_iterator_attack_state, set_scan_attack_state): Remove function. (host_iterator_current_port, host_iterator_max_port) (host_iterator_report, host_iterator_report_uuid): Adjust column order. * src/otp.c (scanner_state_t): Remove SCANNER_STATUS_ATTACK_STATE and SCANNER_STATUS_PORTS scanner states. (process_otp_scanner_input): In SCANNER_STATUS_HOST case, go next to SCANNER_STATUS_PROGRESS. Don't handle removed scanner states. * doc/db_postgres.sql (report_hosts): Remove attack_state column. * src/manage.h: Remove functions prototypes 2014-11-20 Matthew Mundell * src/manage_sql.c (REPORT_FORMAT_ITERATOR_COLUMNS) (REPORT_FORMAT_ITERATOR_TRASH_COLUMNS): Add owner column, recently added to GET iterators. 2014-11-20 Matthew Mundell * src/manage_sql.c (RESULT_ITERATOR_COLUMNS, init_result_iterator): Add owner column, recently added to GET iterators. (RESULT_ITERATOR_COLUMN_COUNT): Increment for new column. 2014-11-20 Matthew Mundell Add permission type "Super" and predefined role "Super Admin". * src/manage_acl.c (user_has_super, user_is_super_admin): New functions. (user_owns_uuid, where_owned): Add Super checks. * src/manage_acl.h: Add headers accordingly. * src/manage_sql.c (GET_ITERATOR_COLUMNS): Add owner. (GET_ITERATOR_COLUMN_COUNT): Increment. (check_db_permissions): Add Super Admin permissions. (check_db_role): Add Super Admin. (authenticate): Add Super Admin to possible roles in response. (NVT_ITERATOR_COLUMNS, NVT_ITERATOR_COLUMNS_NVTS): Add dummy owner. (get_iterator_owner): New function. (permission_is_predefined): Check for Super. (role_is_predefined, role_is_predefined_id): Check for Super Admin. (CPE_INFO_ITERATOR_COLUMNS, OVALDEF_INFO_ITERATOR_COLUMNS) (CERT_BUND_ADV_INFO_ITERATOR_COLUMNS) (DFN_CERT_ADV_INFO_ITERATOR_COLUMNS): Add dummy owner. * src/manage.h: Add headers accordingly. * src/manage_sql.h (PERMISSION_UUID_SUPER_ADMIN_EVERYTHING) (ROLE_UUID_SUPER_ADMIN): New defines. * src/omp.c (send_get_common): Send Everything in permissions if user has Super on the owner. 2014-11-19 Timo Pollmeier * src/manage_sql.c (modify_setting): Use "else if" instead of "if" when selecting setting_name for chart settings. 2014-11-18 Timo Pollmeier * src/manage_sql.c (print_report_xml): Add the element "omp" to the report, containing the OMP version in a subelement. * src/schema_formats/XML/OMP.xml.in (report): Add the "omp" element and the version subelement. (get_reports): Update XML example response accordingly. * doc/omp.html, doc/omp.rnc: Update from source. 2014-11-18 Timo Pollmeier Make the OMP version a macro defined centrally in the CMake files like the database and daemon versions. * CMakeLists.txt: New OMP_VERSION variable. Configure the file src/schema_formats/XML/OMP.xml.in to insert value of OMP_VERSION here. Install generate src/schema_formats/XML/OMP.xml from binary directory. * doc/CMakeLists.txt: Use OMP.xml generated in binary directory. * src/CMakeLists.txt: New add_definitions to add OMP_VERSION macro. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_VERSION and CLIENT_GET_VERSION_AUTHENTIC cases use OMP_VERSION as version number. * src/schema_formats/XML/OMP.xml: Remove. Renamed to OMP.xml.in. * src/schema_formats/XML/OMP.xml.in: New. Renamed OMP.xml. Use the @OMP_VERSION@ placeholder. 2014-11-17 Timo Pollmeier * src/manage_sql.c (omp_command_type): Handle resume_or_start_task and resume_stopped_task separately to give correct type. 2014-11-17 Hani Benhabiles * CMakeLists.txt: Check for and link against libopenvas_omp, libopenvas_misc, libopenvas_base libraries instead of the whole libopenvas package. 2014-11-14 Matthew Mundell * src/html/XML/OMP.xml (report): Add TIMEZONE and TIMEZONE_ABBREV. * doc/omp.html, doc/omp.rnc: Update from source. 2014-11-13 Matthew Mundell In report formats use abbreviation instead of ISO style for timezone. * src/manage_sql.c (print_report_xml): Add TIMEZONE and TIMEZONE_ABBREV. (setting_timezone): New function. * src/manage.h: Add header accordingly. * src/report_formats/HTML/HTML.xsl (openvas:timezone-abbrev): New function. (date): Use abbreviation instead of ISO style timezone. (real-report): Note report timezone. * src/report_formats/LaTeX/latex.xsl (openvas:timezone-abbrev): New function. (format-date, scan_end): Use abbreviation instead of ISO style timezone. (abstract): Note report timezone. Also correct end time of second scan in delta case. * src/report_formats/TXT/TXT.xsl (openvas:timezone-abbrev): New function. (date): Use abbreviation instead of ISO style timezone. (real-report): Note report timezone. 2014-11-13 Timo Pollmeier * src/manage_sql.c (init_aggregate_iterator): Free strings on errors. Also free columns and trash_columns on normal return. 2014-11-11 Michael Meyer * tools/openvas-certdata-sync.in(chk_system_tools()): Don't check for wget/curl as both are not used by this script. 2014-11-11 Benot Allard * CMakeLists.txt: Remove trailing hash. 2014-11-11 Benot Allard * CMakeLists.txt: Define _DEFAULT_SOURCE to silent a warning with glibc >= 2.20. See https://sourceware.org/glibc/wiki/Release/2.20#Packaging_Changes 2014-11-07 Matthew Mundell * src/manage_sql.c (task_schedule_iterator_start_due): Check whether the "next due time" is 0 before adjusting it for the initial timezone. 2014-11-07 Hani Benhabiles * src/manage_sql.c (send_to_sourcefire, send_to_verinice, manage_report) (manage_send_report): Call setgroups() before setgid(). Adjusted patch from Michal Ambroz. 2014-11-06 Timo Pollmeier Add get_aggregates permission to all predefined roles except Monitor. Hence increase database version to 138. Add database migration from version 137 to 138. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 138. * src/manage_migrators.c (migrate_137_to_138): New function. (database_migrators): Add migrate_137_to_138. * src/manage_sql.c (omp_commands): Add get_aggregates. (check_db_permissions): Explicitly add get_aggregates permission for roles Guest and Info. * doc/db.png: Update for version change. 2014-11-06 Hani Benhabiles Delete permissions for User and Observer roles so that they are recreated along with new ones. Hence increase database version to 137. Add database migration from version 136 to 137. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 137. * src/manage_migrators.c (migrate_136_to_137): New function. (database_migrators): Add migrate_136_to_137. * doc/db.png: Update for version change. 2014-11-06 Matthew Mundell * src/sql_sqlite3.c (sql_exec_internal): Use MIN because an upper limit is required. MAX gives a lower limit. 2014-11-06 Matthew Mundell * src/openvasmd.c (main): Add version to log message. 2014-11-06 Timo Pollmeier * src/manage_sql.c (check_db_settings, modify_setting): Add new settings "Details Export File Name", "List Export File Name" and "Report Export File Name". 2014-11-05 Michael Wiegand * tools/database-statistics-sqlite: New. Shell script to gather information about potentially superfluous data from an OpenVAS Manager SQLite3 database. 2014-11-05 Michael Wiegand * report_formats/verinice-itg/create_report_import: Bump version. 2014-11-05 Hani Benhabiles * src/manage.c (manage_result_type_threat, task_run_status_name): Remove unused functions. * src/manage.h: Delete removed functions headers. 2014-11-04 Matthew Mundell * tools/openvas-migrate-to-postgres.in: New file. Missed in last commit. 2014-11-04 Matthew Mundell * tools/openvas-migrate-to-postgres: Remove. * tools/openvas-migrate-to-postgres.in: New file. Copies of the removed script, which sets PREFIX automatically. * CMakeLists.txt: Generate openvas-migrate-to-postgres. 2014-11-04 Timo Pollmeier Add filter name to "filters" elements in OMP get_... responses and add a "filters" element to the get_aggregates command response. * src/omp.c (buffer_get_filter_xml): New function. (send_get_end): Move output of "filters" element to new function buffer_get_filter_xml. (omp_xml_handle_end_element): Add "filters" element. * src/schema_formats/XML/OMP.xml: Add new "name" subelement of "filters" element in get command responses. Add "filters" element to "get_aggregates" response. * doc/omp.html, doc/omp.rnc: Update from source. 2014-11-03 Jan-Oliver Wagner * doc/postgres-HOWTO: Added section about migration. 2014-11-03 Matthew Mundell * tools/greenbone-certdata-sync.in, tools/greenbone-scapdata-sync.in, tools/openvas-scapdata-sync.in, tools/greenbone-certdata-sync.in: Supply default db to psql_setup. 2014-11-03 Matthew Mundell * tools/openvas-migrate-to-postgres (migrate_rest): Remove stray report host details. 2014-11-03 Timo Pollmeier * src/sql_pg.c (sql_explain_internal): Remove unnecessary semicolon. Correct indentation of while block. * src/sql_sqlite3.c (sql_explain_internal): Remove unnecessary semicolon. Correct indentation of while block. 2014-11-02 Jan-Oliver Wagner * src/manage.c (run_task): Drop setting "ntp_short_status" as this is not supported by OTP anymore. 2014-10-31 Timo Pollmeier Add new functions to write the query plan of SQL queries to the log. * src/sql.c (sql_explain_internal): New function prototype. (sql_explain): New function. * src/sql_pg.c (sql_explain_internal): New function. * src/sql_sqlite3.c (sql_explain_internal): New function. 2014-10-31 Timo Pollmeier * src/manage_sql.c (RESULT_ITERATOR_COLUMNS): Change column alias "report" to "report_id" so it matches RESULT_ITERATOR_FILTER_COLUMNS. 2014-10-30 Matthew Mundell * tools/openvas-migrate-to-postgres (migrate): Add migration to 136. 2014-10-30 Timo Pollmeier * tools/openvas-scapdata-sync.in (sec_db_exists): Correct variable name for SQLite database path. 2014-10-30 Timo Pollmeier Set timestamps of placeholder CPEs created from CVEs to creation date of oldest CVE. * tools/greenbone-scapdata-sync.in (update_placeholders): New function. (update_scap_db): Add call to update_placeholders. * tools/openvas-scapdata-sync.in (update_placeholders): New function. (update_sec_db): Add call to update_placeholders. 2014-10-29 Timo Pollmeier * src/manage_sql.c (NVT_INFO_ITERATOR_FILTER_COLUMNS) (NVT_ITERATOR_COLUMNS, NVT_ITERATOR_COLUMNS_NVTS): Add "script_tags" column, which corresponds to the "tag" column in the database. 2014-10-28 Matthew Mundell * src/sql_sqlite3.c (sql_exec_internal): Add upper limit to retry sleep. 2014-10-28 Matthew Mundell Move retries after SQLITE_ERROR up a level, so that the statement is prepared again before the retry. * src/sql_sqlite3.c (sql_exec_internal): Remove retry after sqlite3_reset, because sqlite3_step should not be called after SQLITE_ERROR, according to the manual. * src/sql.c (sqlv): Clarify 1 return. Add assert. (sql, sql_error): Retry if sqlv returns 1. (sql_quiet, sql_x_internal): Retry if sql_exec_internal returns -2. (next): Rerun sql_x_internal if it returns -2. (sql_exec): Add new return. * src/manage_sql.c (report_severity_data_prepare) (report_severity_data_prepare_full): New functions. (report_severity_data): Prepare statements via new functions. Retry when sql_exec returns -2. (create_agent): Retry when sql_exec returns -2. 2014-10-28 Hani Benhabiles * src/manage.c (openvas_sync_feed, openvas_migrate_secinfo), src/manage_sql.c (send_to_sourcefire, send_to_verinice, escalate_2) (manage_report, manage_send_report), src/pg_sql.c (sqli): Remove break/return/exit/abort duplications. 2014-10-28 Matthew Mundell * src/sql_sqlite3.c (sql_exec_internal): After a certain number of retries, start to sleep between retries. Sleep for longer as more retries happen. Hopefully this reduces load from retries when a single long-running statement is blocking many statements. 2014-10-27 Matthew Mundell Make sure that the delta_states value in reports generated by alerts that are triggered by hand matches the given value. This is purely cosmetic because delta reports cannot be generated by alerts. * src/manage_sql.c (escalate_2): Add delta_states arg. (escalate_1): Add dummy delta_states arg. (manage_report): Add delta_states arg. (manage_send_report): Pass delta_states arg on to escalate_2, so that the same value is used in the filter string of the generated report. * src/manage.h: Update header accordingly. 2014-10-27 Timo Pollmeier * src/manage_sql.c (make_result): Check that nvt param is not an empty string before trying to find the NVT. 2014-10-27 Matthew Mundell * src/manage_sql.c (create_report_format): Add log messages for more internal error cases. 2014-10-27 Matthew Mundell * src/otp.c (process_otp_scanner_input): Set the report and task end times before setting the task run status, so that reports generated in the associated alerts have the end times. 2014-10-23 Matthew Mundell * src/manage_sql.c (init_result_iterator): Remove severity_to_type from auto_type_sql arg, because auto_type_sql evaluates to a severity these days. Similarly, remove the enclosing order_message_type. 2014-10-23 Matthew Mundell * src/manage_sql.c (init_result_iterator): Convert negative values of first_result to 0 for OFFSET, for Postgres. 2014-10-23 Matthew Mundell * tools/openvas-migrate-to-postgres (migrate_rest): Remove scan_run_status constraint from end_time SQL, because the task end_time will be set in all cases, like when the scan is stopped. 2014-10-23 Matthew Mundell Ensure task end_times are correct. Hence increase database version to 136. Add database migration from version 135 to 136. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 136. * src/manage_migrators.c (migrate_135_to_136): New function. (database_migrators): Add migrate_135_to_136. * doc/db.png: Update for version change. 2014-10-23 Matthew Mundell * src/omp.c (buffer_results_xml): Print severity as double with precision limiter, otherwise it includes the small fraction from the approximation in floating point. * src/manage.h: Add header now used in omp.c. 2014-10-23 Matthew Mundell * tools/openvas-migrate-to-postgres: Add 135 migration. 2014-10-23 Matthew Mundell Remove table report_results, which is no longer used. Hence increase database version to 135. Add database migration from version 134 to 135. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 135. * src/manage_migrators.c (migrate_134_to_135): New function. (database_migrators): Add migrate_134_to_135. * src/manage_pg.c (create_tables): Remove report_results. * src/manage_sqlite3.c (create_tables): Remove report_results, report_results_by_report and report_results_by_result. * src/manage_sql.c (report_add_result, delete_report_internal) (trim_report, trim_partial_report, delete_user): Remove SQL that inserted and deleted report_results. * doc/db_postgres.sql (report_results): Remove. * doc/db.png: Update from source. 2014-10-23 Matthew Mundell Remove last uses of table report_results. * src/manage_acl.c (user_owns_result): Link results and reports directly. * src/manage_sql.c (init_result_iterator): Link results and reports directly. 2014-10-23 Matthew Mundell * tools/greenbone-certdata-sync.in, tools/greenbone-scapdata-sync.in: Add --database option, to match Manager --database option. 2014-10-23 Matthew Mundell * tools/openvas-certdata-sync.in, tools/openvas-scapdata-sync.in: Add --database option, to match Manager --database option. 2014-10-22 Jan-Oliver Wagner * tools/greenbone-certdata-sync.in, tools/greenbone-scapdata-sync.in: Set prefix automatically, using CMAKE_INSTALL_PREFIX. 2014-10-22 Matthew Mundell * tools/openvas-migrate-to-postgres (migrate_rest): Wrap the reset SQL in a SELECT with a WHERE clause, to prevent the reset counts from going to stdout. Remove empty lines from the output of the reset SQL too. 2014-10-22 Matthew Mundell * tools/openvas-migrate-to-postgres (migrate_rest): Indent reset SQL. 2014-10-22 Matthew Mundell * src/openvasmd.c (handle_sigabrt_simple): New function. (update_or_rebuild_nvt_cache, rebuild_nvt_cache_retry): Add info messages for clarity. (main): Init simple sigabrt handler before doing any SQL. This ensures that when the process aborts it has an error exit code, otherwise it may appear to have succeeded. This was happening, for example, when aborting due to SQL error in table init, during a --rebuild. 2014-10-22 Matthew Mundell * src/manage_sqlite3.c (sql_threat_level): Remove. Now sql_task_threat_level, which matches the naming convention. (sql_task_threat_level): New function. (sql_severity_to_level): Remove single argument case. This is always called with two arguments. (manage_create_sql_functions): Update task_threat_level call. 2014-10-22 Matthew Mundell Add Postgres handling of --database. * src/manage_pg.c (manage_db_empty, manage_create_sql_functions) (manage_cert_loaded, manage_scap_loaded): Use current db name, instead of assuming 'tasks'. * src/manage_sql.c (manage_encrypt_all_credentials, init_manage_process) (manage_create_scanner, manage_delete_scanner, manage_verify_scanner) (manage_create_user, manage_delete_user, manage_get_users) (manage_get_scanners, manage_set_password): Use function to get default database file/name. * src/manage_sqlite3.c (manage_backup_db): Use sql_default_database. * src/sql_sqlite3.c (sql_database, sql_default_database): New functions. * src/sql_pg.c, src/sql_sqlite3.c (sql_database) (sql_default_database): New functions. (sql_open): Get default database name with function, instead of assuming 'tasks'. * src/sql.h: Add headers accordingly. * src/openvasmd.c (main): Adjust help message for Postgres. 2014-10-22 Matthew Mundell Add Postgres handling of --backup. * src/manage_sql.c (backup_db): Remove. Now in manage_sqlite.c. (manage_backup_db): Remove. Now in backend files. * src/sql_sqlite3.c (backup_db, manage_backup_db): New functions. * src/sql_pg.c (manage_backup_db): New function. 2014-10-21 Matthew Mundell * src/sql_pg.c, src/sql_sqlite3.c (sql_last_insert_rowid): Remove. Now sql_last_insert_id. Update call. (sql_last_insert_id): New function. * src/manage_config_host_discovery.c, src/manage_config_system_discovery.c, src/manage_migrators.c, src/manage_sql.c: Update sql_last_insert_rowid calls. * src/sql.h: Update headers accordingly. 2014-10-21 Henri Doreau * src/otp.c (process_otp_scanner_input): In SCANNER_TIME_SCAN_END, stop the transaction before calling set_scan_end_time_otp, because it also runs a transaction. 2014-10-21 Matthew Mundell * src/manage_sql.c (delete_report_format): Delete trash report formats after their params, otherwise Postgres sees the referential error. (manage_empty_trashcan): Delete report format params and their options too. 2014-10-21 Matthew Mundell * tools/openvas-migrate-to-postgres (PREFIX): Clear. 2014-10-21 Matthew Mundell * tools/openvas-migrate-to-postgres (does_pg_db_exist): Use column instead of *, to avoid escaping issue. (is_db_broken): Drop and replace report_hosts_by_host, to remove reference to old collation function. 2014-10-21 Matthew Mundell * src/manage_pg.c (create_tables): Disable report_hosts_details index, because one of the columns can go out of bounds. Add alternative with fewer columns. 2014-10-20 Matthew Mundell * src/manage_sql.c (prognosis_order_by): Get host manually, because Postgres refuses to accept aliases that are expressions in ORDER BY. 2014-10-20 Matthew Mundell * src/manage_sql.c (make_nvt_from_nvti): Add NVT OID to error messages. 2014-10-20 Matthew Mundell * src/manage_pg.c (create_tables): Remove SecInfo indexes that belong in tools scripts. * tools/cert_db_init_pg.sql, tools/scap_db_init_pg.sql: Add indexes from create_tables. 2014-10-20 Matthew Mundell Add SQLite to Postgres handling for db version 134. * tools/openvas-migrate-to-postgres (migrate_133): Remove. Now migrate_rest. (migrate_rest): New function. Was migrate_133. (migrate): Add 134 case. 2014-10-20 Matthew Mundell * doc/postgres-HOWTO: In script section remove leading spaces and add indexes. 2014-10-20 Matthew Mundell * src/manage_sql.c (init_asset_iterator): Add ORDER expression to columns, as required by Postgres. (delete_trash_tasks): Delete tasks after referential dependencies, because Postgres checks this. 2014-10-17 Matthew Mundell * src/manage_sqlite.c (manage_cert_loaded, manage_scap_loaded): Use a static variable to prevent multiple checks. This has negligible affect on performance, but keeps the logs a little cleaner. 2014-10-17 Matthew Mundell * src/manage_sql.c (init_report_host_details_iterator): Use a join instead of a subquery, to prevent SQLite from iterating over all NVTs. This greatly speeds up the GSA Hosts page. 2014-10-17 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Add create_index. (create_tables): Create some indexes. 2014-10-16 Matthew Mundell * src/manage_sql.c (init_aggregate_iterator): Add alias for subquery, and get LIMIT arg via sql_select_limit, for Postgres. (count): When the args effectively produce a simple count, then just do the simple count, because this is fastest, at least for Postgres. (cpe_highest_cvss): Add exists so that WHEN arg is a boolean. (init_host_prognosis_iterator, init_result_iterator) (init_all_info_iterator): Get LIMIT arg via sql_select_limit. (init_asset_iterator, filtered_host_count): Get LIMIT arg via sql_select_limit. Remove report_results join, as this is much faster in Postgres. (select_config_nvts): Use 3 when "nvts.name" is given explicitly, too. (total_info_count): Just count simply when there is no filtering, as this is much faster. 2014-10-14 Michael Wiegand Post-release version bump. * CMakeLists.txt: Updated version number. 2014-10-14 Michael Wiegand Preparing the openvas-manager 6.0+beta3 release. * CHANGES: Updated. 2014-10-14 Michael Wiegand * CMakeLists.txt: Adjust location of Greenbone synchronization scripts since they are now being generated. 2014-10-14 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Add NULL case to severity_to_type, to match SQLite version. 2014-10-13 Matthew Mundell * tools/greenbone-certdata-sync.in (LOG_CMD): Remove -s. (sql_scap): New function. (sql): Use right database for SQLite case. (update_cvss): Use sql_scap so that SQLite case accesses right database. 2014-10-13 Matthew Mundell Make the Greenbone sync scripts work for Postgres too. * tools/greenbone-certdata-sync, tools/greenbone-scapdata-sync: Remove. * tools/greenbone-certdata-sync.in, tools/greenbone-scapdata-sync.in: New files. Copies of the removed scripts, with Postgres support. * src/CMakeLists.txt: Configure Greenbone scripts too. 2014-10-10 Timo Pollmeier * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_AGGREGATES case add column_info section. * src/schema_formats/XML/OMP.xml (get_aggregates): Add column_info element in response. * doc/omp.html, doc/omp.rnc: Update from source. 2014-10-10 Matthew Mundell Get openvas-portnames-update working with Postgres. * tools/openvas-portnames-update.in: Update SQL for postgres. (POSTGRES, SQL): New variables. (SQLITE): Remove. Now SQL. * tools/portnames_update.xsl: Add missing copyright header. (/, iana:record): DELETE and INSERT so that the SQL works in Postgres. Neaten indenting. 2014-10-09 Matthew Mundell Make the OpenVAS sync scripts work for Postgres too. * tools/openvas-certdata-sync.in (POSTGRES, SCHEMA) (RECURSIVE_TRIGGERS_OFF): New variables. (show_intro): Specify backend. (reinit, check_db_version): Use functions to run SQL. (PSQL): New variable. (sql_pg, sql_scap, sql, scap_db_exists, cert_db_exists) (cert_db_remove): New functions. (update_cvss): Use functions to run SQL. Use substitutions to fit the SQL to the backend. (update_sec_db): Use functions to run SQL. Swap "if" cases. Remove empty lines from SQL output, else psql writes empty lines to stdout. * tools/openvas-scapdata-sync.in (POSTGRES, SCHEMA) (RECURSIVE_TRIGGERS_OFF): New variables. (show_intro): Specify backend. (reinit): Use functions to run SQL. (PSQL): New variable. (sql_pg, sql, sec_db_remove, sec_db_exists): New functions. (reinit): Use functions to run SQL. Skip old migrators with Postgres. (init_sec_db_update, update_cvss, update_sec_db_private) (update_sec_db): Use functions to run SQL. Use substitutions to fit parts of the SQL to the backend. Use 0.0 for float columns instead of ''. Remove empty lines from SQL output. 2014-10-09 Matthew Mundell * tools/cert_bund_update_pg.xsl: Convert to Postgres. * tools/dfn_cert_update_pg.xsl (/): Improve comment. 2014-10-09 Matthew Mundell * tools/dfn_cert_update_pg.xsl (merge_dfn_cert_cve): Just INSERT, because there is no UUID or key. 2014-10-09 Jan-Oliver Wagner * CMakeLists.txt: Adding missing "FILES" to make the cmake work properly. 2014-10-08 Matthew Mundell * tools/cert_bund_update_pg.xsl, tools/cert_db_init_pg.sql, tools/cpe_update_pg.xsl, tools/cve_update_pg.xsl, tools/dfn_cert_update_pg.xsl, tools/oval_update_pg.xsl, tools/scap_db_init_pg.sql: New files. Postgres equivalents of existing SQLite3 files. * CMakeLists.txt: Install SecInfo tools according to SQL backend. 2014-10-08 Matthew Mundell * src/manage_pg.c (manage_attach_databases): Add SCAP and CERT to schema search_path when they are loaded. (manage_cert_loaded): Correct schema name. 2014-10-07 Timo Pollmeier * src/manage_sql.c (result_iterator_type): Use correct column index and fix documentation. 2014-10-06 Timo Pollmeier * src/sql_sqlite3.c (sql_open): Add PRNG reset for SQLite versions older than 3.8.3 as a workaround for SQLite temp file name conflicts between forked processes. 2014-10-02 Matthew Mundell Move SCAP and CERT attaching into backend specific files. * src/manage_sql.c (init_manage_process): Delete NVT CVEs before NVTs when updating, because they refer to NVTs. Call manage_attach_databases to do the attaching. (manage_scap_loaded, manage_cert_loaded): Remove. Now in backend files. * src/manage_pg.c (manage_attach_databases, manage_cert_loaded) (manage_scap_loaded): New functions. * src/manage_sqlite3.c (manage_attach_databases): New function. (manage_cert_loaded, manage_scap_loaded): New functions. Were in manage_sql.c 2014-10-01 Hani Benhabiles * src/manage_sql.c (filter_clause): Remove set but unused variables. 2014-10-01 Hani Benhabiles * src/omp.c (omp_xml_handle_end_element): Remove break before goto in create_task error. 2014-10-01 Hani Benhabiles * src/manage_sql.c (result_detection_reference): Simplify sql queries by using results' report column instead of report_results table. 2014-09-29 Matthew Mundell Add predefined role Monitor. * src/manage_sql.c (check_db_permissions, check_db_roles) (permission_is_predefined, role_is_predefined) (role_is_predefined_id): Add Monitor case. * src/manage_sql.h (ROLE_UUID_MONITOR): New define. 2014-09-29 Matthew Mundell Add timezone keyword to powerfilter for report. * src/omp.c (get_reports_data_t): Add timezone. (omp_xml_handle_start_element): Parse timezone. (omp_xml_handle_end_element): Pass timezone to manage_send_report. * src/manage_sql.c (manage_report_filter_controls, escalate_2) (escalate_1): Add timezone arg. (report_filter_term): Include timezone if given. (tz_revert): New function. (print_report_xml): Add timezone arg. If given then tzset the zone before generating the report. Also add the timezone to the filter elements. (manage_report, manage_send_report): Add timezone arg. * src/manage.h: Update headers accordingly. * src/schema_formats/XML/OMP.xml (get_reports): Add timezone attrib. * doc/omp.html, doc/omp.rnc: Update from source. 2014-09-29 Timo Pollmeier Add support for Tasks in get_aggregates command and chart settings for Tasks. * src/manage_sql.c (type_owned): Also consider info subtypes. (init_aggregate_iterator): Remove parameters which are now determined inside the function: columns, trash_columns, filter_columns, owned. Support apply_overrides filter keyword and special trash handling for Tasks. Document new failure return codes for invalid resource type and trying to get trash for types that don't use the trashcan. (modify_setting): Add cases for the Tasks charts. (type_columns, type_select_columns, type_filter_columns) (type_trash_columns): Add apply_overrides parameter and case for the Task type. (type_table): Fix special case for trash items being in the main table of the resource type. * src/manage.h (init_aggregate_iterator): Remove parameters. (type_columns, type_filter_columns, type_trash_columns): Add parameter. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_AGGREGATES case no longer determine columns, which are now handled by init_aggregate_iterator. Add cases to handle new return codes. 2014-09-26 Matthew Mundell * src/manage_sql.c (TASK_ITERATOR_COLUMNS): For next_due, use the first_time of the schedule if the schedule is in the past, instead of using schedule_next_time which is 0. This ensures that tasks with schedules in the past are sorted by schedule and that they come before tasks that have had their schedules removed. 2014-09-25 Matthew Mundell * src/manage_sql.c (TASK_ITERATOR_FILTER_COLUMNS): Add "next_due". (TASK_ITERATOR_COLUMNS): Add schedule next due time as "next_due". 2014-09-25 Matthew Mundell * src/manage_sql.c (TASK_ITERATOR_FILTER_COLUMNS): Add "schedule". (TASK_ITERATOR_COLUMNS): Add schedule name as "schedule". 2014-09-25 Timo Pollmeier * src/manage_sql.c (CVE_INFO_ITERATOR_FILTER_COLUMNS) (CVE_INFO_ITERATOR_COLUMNS): Allow both "created" and "published" as aliases for the "creation_time" column. 2014-09-25 Timo Pollmeier * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_AGGREGATES case Add new response elements c_count and c_sum for cumulative count and cumulative sum of data column. * src/schema_formats/XML/OMP.xml (get_aggregates): Add new response elements c_count and c_sum. * doc/omp.html, doc/omp.rnc: Update from source. 2014-09-25 Hani Benhabiles * src/manage.c (parse_osp_result): Parse the result's severity if available and adjust make_osp_result() call. * src/manage.h: Modify function prototype. * src/manage_sql.c (make_osp_result): Add severity function parameter. 2014-09-24 Hani Benhabiles * src/omp.c (ELSE_ERROR): Remove static strings comparison. (ELSE_ERROR_CREATE_TASK): New macro. (omp_xml_handle_start_element): Use new macro accordingly. 2014-09-24 Michael Wiegand Bump required minimum version of openvas-libraries. * CMakeLists.txt: Bump required openvas-libraries version to 8.0.0 or later. * INSTALL: Update version of openvas-libraries dependency. 2014-09-23 Michael Wiegand Post-release version bump. * CMakeLists.txt: Updated version number. 2014-09-23 Michael Wiegand Preparing the openvas-manager 6.0+beta2 release. * CHANGES: Updated. * CMakeLists.txt: Ensure openvas-migrate-to-postgres is included in tar ball packages. Use correct prefix when chosing tools to install. 2014-09-22 Matthew Mundell * src/manage_migrators.c (migrate_133_to_134): Remove REFERENCES, because the credential is optional. 2014-09-19 Matthew Mundell * src/manage_sql.c (set_task_schedule): Actually calculate next time, instead of setting it to first time. 2014-09-19 Timo Pollmeier * src/wizards/get_tasks_deep.xml: Add new option "include_scanners". * src/wizards/quick_auth_scan.xml: Add new optional parameter "scanner_id" to select the scanner of the created task. 2014-09-18 Hani Benhabiles * src/manage_sql.c (manage_report_host_add): New function. * src/manage.h: Add new function prototype. * src/manage.c (parse_osp_report): Call new function. 2014-09-18 Timo Pollmeier * src/manage_sql.c (print_report_xml, manage_send_report): Add new ignore_pagination parameter to ignore filter terms and parameters that divide the report into pages. * src/manage.h (manage_send_report): Add new parameter. * src/omp.c (get_reports_data_t): Add new field ignore_pagination. (omp_xml_handle_start_element, omp_xml_handle_end_element): In case for GET_REPORTS handle new ignore_pagination attribute. * src/schema_formats/XML/OMP.xml (get_reports): Add ignore_pagination attribute to command. * doc/omp.rnc, doc/omp.html: Update from source. 2014-09-18 Timo Pollmeier Add ESXi credentials field to targets, which are sent to scanner upon starting a task using the target. Hence increase database version to 134. Add database migration from version 133 to 134. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 134. * src/manage_migrators.c (migrate_133_to_134): New function. (database_migrators): Add migrate_133_to_134. * doc/db_postgres.sql: Add new column esxi_lsc_credential to table targets. Add new columns esxi_lsc_credential and esxi_location to table targets_trash. * src/manage_pg.c (create_tables): Add new columns to targets and targets_trash. * src/manage_sql.c (create_target): Add new esxi_lsc_credential parameter. (delete_target): Set new columns esxi_lsc_credential and esxi_location. (modify_target): Add new esxi_lsc_credential_id parameter and define return code in case ESXi credentials are not found. (TARGET_ITERATOR_FILTER_COLUMNS, TARGET_ITERATOR_COLUMNS): Add new columns for ESXi credentials and the ESXi credentials location. (TARGET_ITERATOR_TRASH_COLUMNS): Add columns reverse_lookup_only, reverse_lookup_unify, alive_test for consistency. Add new columns for ESXi credentials and the ESXi credentials location. (target_iterator_esxi_credential, target_iterator_esxi_trash): New iterator value getter functions. (target_esxi_lsc_credential): New function. (delete_lsc_credential): Set esxi_location for targets in trashcan. (manage_restore): Set esxi_location for targets in trashcan when restoring credentials and set esxi_lsc_credential for restored targets. * src/manage_sql.h (target_esxi_lsc_credential): New function prototype. * src/manage_sqlite3.c (create_tables): Add new columns to targets and targets_trash. * src/manage.c (run_task): Add plugin and preferences containing ESXi credentials and rewrite creation of authentication plugins list to generally make adding new items simpler. * src/manage.h (create_target, modify_target): Add new parameters. (target_iterator_esxi_credential): New function prototype. * src/omp.c (create_target_data_t, create_target_data_reset) (modify_target_data_t, modify_target_data_reset): Add new field esxi_lsc_credential_id. (client_state_t): Add CLIENT_CREATE_TARGET_ESXI_LSC_CREDENTIAL and CLIENT_MODIFY_TARGET_ESXI_LSC_CREDENTIAL (omp_xml_handle_start_element): In cases for CLIENT_MODIFY_TARGET and CLIENT_CREATE_TARGET, handle new ESXI_LSC_CREDENTIAL element. (omp_xml_handle_end_element): In cases for CLIENT_GET_TARGETS, CLIENT_CREATE_TARGET and CLIENT_MODIFY_TARGET add/handle new ESXI_LSC_CREDENTIAL element. * src/schema_formats/XML/OMP.xml (create_target, get_targets) (modify_target): Add new elements for ESXi credentials. * doc/omp.rnc, doc/omp.html: Update from source. 2014-09-18 Jan-Oliver Wagner * INSTALL: Added prerequisite information for vernice report format. 2014-09-17 Hani Benhabiles * src/manage_sql.c (make_osp_result): Set the osp result severity correctly in Error Message case. 2014-09-17 Matthew Mundell * src/manage.c (run_task): Enable static disabled by last commit. 2014-09-17 Matthew Mundell * src/manage.c (run_task): When resuming a task, keep the slave task uuid on the report, because slave_setup (via run_slave_task) needs this uuid to resume the task on the slave. 2014-09-16 Hani Benhabiles * src/manage.h (SCANNER_TYPE_OSP_OVALDI): Rename to SCANNER_TYPE_OSP. * src/manage_sql.c (create_config_from_scanner) (create_task_check_config_scanner, modify_task_check_config_scanner) (verify_scanner): Use new enum member name. * src/openvasmd.c (main): Simplify --scanner-type possible values to OpenVAS and OSP. * src/schema_formats/XML/OMP.xml: Update documentation. 2014-09-16 Matthew Mundell * src/manage.c (update_end_times): New function. Body from slave_setup. (slave_setup): Also set end times while the report its running, because some hosts may finish long before the task is done. 2014-09-16 Matthew Mundell * src/manage_sql.c (check_db_permissions): Allow Guest to get filters. 2014-09-15 Matthew Mundell Get report format dates working when timezone is UTC. * src/report_formats/HTML/HTML.xsl (date): New template. (scan_start, scan_end): Use date. (note, override, real-report): Generate dates with date. * src/report_formats/LaTeX/latex.xsl (scan_start, scan_end): Correct count. * src/report_formats/TXT/TXT.xsl (scan_start, scan_end): Correct count. (note, override): Generate dates with scan_start. (real-report): Apply scan_start now that it is a matched template. Correct location of host start time, and format it like others. 2014-09-12 Hani Benhabiles * src/manage.c (run_osp_task): Don't force lsc credentials presence as not all osp scanners need them. 2014-09-12 Matthew Mundell * src/manage_sql.c (make_report_format_uuids_unique): When the duplicate report formats are in the same directory, then copy the old subdir to the new subdir, so that they both have subdirs. When a subdir is missing just log an warning, instead of also failing. 2014-09-11 Matthew Mundell Add new predefined role Guest. * src/manage_sql.c (check_db_permissions): Add Guest role permissions. (check_db_roles, permission_is_predefined, role_is_predefined) (role_is_predefined_id): Add Guest role. 2014-09-11 Timo Pollmeier Add sections for NVT tag "affected" to report formats. * src/report_formats/CSV_Results/CSV_Results.xsl: Add column "Affected Software/OS". * src/report_formats/HTML/HTML.xsl: Add section "Affected Software/OS". * src/report_formats/LaTeX/latex.xsl: Add section "Affected Software/OS". * src/report_formats/NBE/NBE.xsl: Add section "Affected Software/OS". * src/report_formats/TXT/TXT.xsl: Add section "Affected Software/OS". * src/report_formats/Verinice_ISM/Verinice_ISM.xsl: Add section "Affected Software/OS". 2014-09-10 Timo Pollmeier * src/manage_sql.c (filter_clause): Remove special cases for keyword "status". (TASK_ITERATOR_COLUMNS, REPORT_ITERATOR_COLUMNS): Rename column "status_text" to "status". 2014-09-10 Hani Benhabiles * src/manage_sql.c (manage_set_config_preference): Handle osp config preference case. 2014-09-10 Hani Benhabiles * src/manage_sql.c (manage_set_config_preference): Revert part of 20250. Neither use UPDATE as nvt_prefs entries may not be present nor INSERT OR REPLACE as it is not supported by postgresql. 2014-09-10 Jan-Oliver Wagner * CMakeLists.txt: Fix install source for openvas-migrate-to-postgres. 2014-09-10 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_SCHEDULES handle the case where abbrev is not set by iso_time_tz. 2014-09-09 Matthew Mundell * CMakeLists.txt: Install openvas-migrate-to-postgres. * tools/openvas-migrate-to-postgres (migrate_133): Remove note about binary config preferences. I doubt that anyone has these, and anyway they don't store properly in Manager or display at all in GSA. 2014-09-09 Timo Pollmeier * src/manage_sql.c (check_db_settings, modify_setting): Add new setting "Auto-Refresh". 2014-09-09 Matthew Mundell * tools/migrate-to-postgres: Remove. Now openvas-migrate-to-postgres. * tools/openvas-migrate-to-postgres: New file. Was migrate-to-postgres. 2014-09-09 Matthew Mundell * tools/migrate-to-postgres (sqlite): New function. (is_db_broken, migrate_133, migrate): Call sqlite, for clarity. 2014-09-09 Matthew Mundell * tools/migrate-to-postgres (sql): Remove. Now called pg, for clarity. (pg): New function. Was sql. Update callers. 2014-09-09 Matthew Mundell * tools/migrate-to-postgres (migrate_133): Force a rebuild after the migration. 2014-09-09 Matthew Mundell * src/manage_sql.c (copy_config): Remove comment because it is added automatically, otherwise Postgres complains. 2014-09-08 Matthew Mundell * src/manage_pg.c (create_tables): Use bytea for agent installer, which is binary. * src/sql_pg.c (bind_param): Format return like rest. * tools/migrate-to-postgres (create_tables_133): Use bytea for agent installer. (migrate_133): Remove agents from migration, for simplicity. 2014-09-08 Hani Benhabiles * src/manage_sql.c (create_config_from_scanner): Insert the parameter's default value. 2014-09-08 Matthew Mundell * tools/migrate-to-postgres (migrate_133): Specify columns in COPY. 2014-09-08 Matthew Mundell * src/report_formats/HTML/HTML.xsl (real-report): Add task to delta case. 2014-09-08 Matthew Mundell * src/report_formats/LaTeX/latex.xsl (abstract): Add task to delta case. 2014-09-08 Matthew Mundell * src/report_formats/HTML/HTML.xsl, src/report_formats/TXT/TXT.xsl (real-report): Add task. * src/report_formats/LaTeX/latex.xsl (abstract): Add task. (results-overview): Use standard quote style. 2014-09-08 Timo Pollmeier * src/manage_sql.c (RESULT_ITERATOR_FILTER_COLUMNS) (RESULT_ITERATOR_COLUMNS): Rename column "report" to "report_rowid". Add column "report" / "report_id" with uuid of report. (RESULT_ITERATOR_COLUMN_COUNT): Increase to 26. 2014-09-08 Matthew Mundell * doc/db.png: Set svn:mime-type property to application/octet-stream. 2014-09-08 Matthew Mundell * doc/db_postgres.sql (reports): Correct column type. * doc/db.png: Update from source. 2014-09-05 Hani Benhabiles * src/manage_migrators.c (migrate_128_to_129): Create scanners_trash table if it doesn't exist too. 2014-09-05 Matthew Mundell * tools/migrate-to-postgres (PSQL): New variable. (sql): Move above does_pg_db_exist. (does_pg_db_exist): Use PSQL. Check exit. (is_db_broken, create_tables_133, migrate): Use better log levels. (migrate_133): Use better log levels. Do months update business in one go, so the months table is removed. Remove debug output. Use sql and PSQL instead of using psql directly. Enable directory removal. 2014-09-05 Hani Benhabiles * src/manage_sql.c (check_db_configs): Don't insert "OSP Ovaldi" default config. (config_in_use): Remove check for default osp ovaldi config. (make_config_osp_ovaldi): Remove function. * src/manage_sql.h (CONFIG_UUID_OSP_OVALDI): Remove definition. 2014-09-05 Hani Benhabiles * src/manage_sql.c (TASK_ITERATOR_COLUMNS): Fix run_status_name alias to status_text. 2014-09-05 Matthew Mundell * src/manage_migrators.c (migrate_80_to_81): Add note about leaving column lying around. 2014-09-05 Matthew Mundell * src/manage_pg.c (create_tables): Remove reference constraints where the column could refer to the trashcan. * tools/migrate-to-postgres (create_tables_133): Remove reference constraints where the column could refer to the trashcan. (migrate_133): Remove associated comment. 2014-09-05 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Move pl/pgsql functions up, because they are used by some of the SQL functions. (create_tables): Remove description from tasks, to match SQLite. Correct references in report_format_params_trash and report_format_param_options_trash. 2014-09-05 Michael Wiegand * tools/migrate-to-postgres: Ensure the GPLv2+ license notice uses the paragraph suggested by the Free Software Foundation. 2014-09-04 Hani Benhabiles * src/manage_sql (preference_iterator_type): New function. (init_preference_iterator): Add type column. * src/manage.h: Add new function prototype. * src/omp.c (omp_xml_handle_end_element): In GET_CONFIGS, set the type and prepend osp_ in OSP config case. 2014-09-04 Matthew Mundell * tools/migrate-to-postgres: New file. Functional, but needs some work. 2014-09-04 Hani Benhabiles * src/omp.c (omp_xml_handle_end_element): Fix check for target value in OSP scan case. Remove useless else statements. * src/manage_sql.c (create_config_from_scanner): Fix config owner value inserted in DB. 2014-09-04 Timo Pollmeier * src/omp.c (xml_handle_end_element): In GET_RESULTS case use SEND_GET_END macro and calculate correct counts in cases where the count on the page is different from the maximum or a single result is selected by uuid. 2014-09-04 Timo Pollmeier Update OMP documentation to reflect recent changes to GET_RESULTS. * src/schema_formats/XML/OMP.xml: Add new elements that make get_results more consistent with other GET_... OMP commands. Place results directly inside get_results_response element and change the results element to contain the "max" and "start" attributes instead. Update examples accordingly and add compatibility change note. * doc/omp.rnc, doc/omp.html: Update from source. 2014-09-04 Timo Pollmeier * src/omp.c (xml_handle_start_element): In GET_RESULTS case place results directly inside the get_results_response element to make it more consistent with other GET_... OMP commands. 2014-09-04 Timo Pollmeier Allow apply_overrides attribute of GET_RESULTS command to switch off overrides. * src/omp.c (get_results_data_t): Add apply_overrides_set. (xml_handle_start_element): In GET_RESULTS case set apply_overrides_set depending on whether the apply_overrides attribute was set. (xml_handle_start_element): In GET_RESULTS case check apply_overrides_set to decide whether to use apply_overrides attribute. 2014-09-03 Hani Benhabiles Implement dynamically creating a scan config from an OSP Scanner. * src/manage.c (task_scanner_options): Adjust init_preference_iterator() call. * src/manage.h: Add new function prototype. Adjust modified functions prototypes. * src/manage_sql.c (get_scanner_params, create_config_from_scanner): New functions. (config_uuid): Return uuid pointer for consistency with similar functions. (init_preference_iterator): Remove unused section specifier argument. (manage_set_config_preference): Simplify SQL statements and remove useless type check. * src/omp.c (create_config_data_t): Add scanner element. (create_config_data_reset): Free scanner value. (client_state_t): Add CLIENT_CREATE_CONFIG_SCANNER state. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Handle new scanner element in create_config command. Adjust modified functions calls. 2014-09-03 Timo Pollmeier * src/manage_sql.c (RESULT_ITERATOR_COLUMNS_ARRAY): Make array dimensions and indexes match parameters of RESULT_ITERATOR_COLUMNS. (init_result_get_iterator, result_count): Adjust array dimensions. (init_result_iterator): Fix autofp subquery for selection by id. 2014-09-03 Michael Wiegand * doc/CMakeLists.txt: Use appropriate text for second paragraph of the license notices. 2014-09-03 Michael Wiegand Make license of CMakeLists.txt files consistent. * doc/CMakeLists.txt: Change license from LGPLv2+ to GPLv2+. 2014-09-02 Timo Pollmeier * src/manage_sql.c (filter_clause): Use column definition instead of column name in ORDER BY clause for "severity" and related keywords. Apply this to "original_severity" in addition to already existing severity related keywords. (RESULT_ITERATOR_FILTER_COLUMNS, RESULT_ITERATOR_COLUMNS): Rename column "severity" to "original_severity" and "new_severity" to "severity". 2014-09-01 Michael Wiegand * CMakeLists.txt, doc/openvasmd.8.xml, report_formats/simple_bar_chart/generate, report_formats/simple_bar_chart/plot-plt.xsl, report_formats/simple_bar_chart/plot.xsl, report_formats/simple_map_plot/generate, report_formats/simple_map_plot/join.awk, report_formats/simple_map_plot/report_to_csv_host.xsl, report_formats/simple_map_plot/world_map.map, report_formats/simple_pie_chart/generate, report_formats/simple_pie_chart/pieplot.xsl, report_formats/simple_topo_plot/generate, report_formats/simple_topo_plot/hostvisdot-summary.xsl, report_formats/sourcefire/generate, report_formats/sourcefire/sourcefire.xsl, report_formats/verinice-itg/classification-helpers.xsl, report_formats/verinice-itg/generate, report_formats/verinice-itg/gsm_verinice_itg.xsl, src/CMakeLists.txt, src/logf.h, src/lsc_crypt.c, src/lsc_crypt.h, src/lsc_user.c, src/lsc_user.h, src/manage_acl.c, src/manage_acl.h, src/manage.c, src/manage_config_discovery.c, src/manage_config_host_discovery.c, src/manage_config_system_discovery.c, src/manage.h, src/manage_migrators.c, src/manage_pg.c, src/manage_pg_server.c, src/manage_ranges_all_tcp_nmap_5_51_top_1000.c, src/manage_ranges_all_tcp_nmap_5_51_top_100.c, src/manage_ranges_iana_tcp_2012.c, src/manage_ranges_iana_tcp_udp_2012.c, src/manage_ranges_nmap_5_51_top_2000_top_100.c, src/manage_sql.c, src/manage_sql.h, src/manage_sqlite3.c, src/manage_utils.c, src/manage_utils.h, src/omp.c, src/ompd.c, src/ompd.h, src/omp.h, src/openvasmd.c, src/otp.c, src/otp.h, src/ovas-mngr-comm.c, src/ovas-mngr-comm.h, src/scanner.c, src/scanner.h, src/splint.h, src/sql.c, src/sql.h, src/sql_pg.c, src/sql_sqlite3.c, src/tracef.h, src/types.h, src/alert_methods/Sourcefire/alert, src/alert_methods/verinice/alert, src/report_formats/ARF/ARF.xsl, src/report_formats/ARF/generate, src/report_formats/CPE/CPE.xsl, src/report_formats/CPE/generate, src/report_formats/create_signatures, src/report_formats/CSV_Hosts/CSV_Hosts.xsl, src/report_formats/CSV_Hosts/generate, src/report_formats/CSV_Results/CSV_Results.xsl, src/report_formats/CSV_Results/generate, src/report_formats/HTML/generate, src/report_formats/HTML/HTML.xsl, src/report_formats/ITG/generate, src/report_formats/ITG/ITG.xsl, src/report_formats/LaTeX/generate, src/report_formats/LaTeX/latex.xsl, src/report_formats/NBE/generate, src/report_formats/NBE/NBE.xsl, src/report_formats/PDF/generate, src/report_formats/Topology/generate, src/report_formats/Topology/hostvisdot-summary.xsl, src/report_formats/TXT/generate, src/report_formats/TXT/TXT.xsl, src/report_formats/Verinice_ISM/classification_generator.sh, src/report_formats/Verinice_ISM/generate, src/report_formats/Verinice_ISM/Verinice_ISM.xsl, src/report_formats/XML/generate, src/schema_formats/HTML/generate, src/schema_formats/HTML/HTML.xsl, src/schema_formats/HTML/rnc.xsl, src/schema_formats/RNC/generate, src/schema_formats/RNC/rnc.xsl, src/schema_formats/RNC/RNC.xsl, src/schema_formats/XML-brief/generate, src/schema_formats/XML-brief/OMP.xsl, src/schema_formats/XML/generate, src/schema_formats/XML/OMP.xml, src/wizards/delete_task_deep.xml, src/wizards/get_tasks_deep.xml, src/wizards/quick_auth_scan.xml, src/wizards/quick_first_scan.xml, src/wizards/quick_task.xml, src/wizards/reset_task.xml, tools/cert_bund_getbyname.xsl, tools/cert_bund_update.xsl, tools/cert_db_init.sql, tools/cpe_getbyname.xsl, tools/cpe_update.xsl, tools/cpe_youngerthan.xsl, tools/cve_getbyname.xsl, tools/cve_update.xsl, tools/cve_youngerthan.xsl, tools/dfn_cert_getbyname.xsl, tools/dfn_cert_update.xsl, tools/extra/xml_split, tools/greenbone-certdata-sync, tools/greenbone-scapdata-sync, tools/openvas-certdata-sync.in, tools/openvas-portnames-update.in, tools/openvas-scapdata-sync.in, tools/ovaldef_getbyname.xsl, tools/ovaldef_list_ids.xsl, tools/oval_timestamp.xsl, tools/oval_update.xsl, tools/oval_verify.xsl, tools/scap_db_init.sql: Ensure the GPLv2+ license notice uses the paragraph suggested by the Free Software Foundation. 2014-09-01 Hani Benhabiles * src/manage_sql.c (result_detection_reference): Remove useless assignment. 2014-09-01 Hani Benhabiles * src/manage_sql.c (print_report_prognostic_xml): Remove unused variable. (init_nvt_info_iterator): Apply filtering clause correctly, to fix querying for a specific nvt by name or oid, using get_info command. 2014-09-01 Hani Benhabiles * src/omp.c (results_xml_append_nvt), src/manage_sql.c (verify_scanner): Fix compiler warnings when NDEBUG is set. 2014-08-29 Hani Benhabiles * src/manage_sql.c (verify_scanner): Use certificates values from the scanner object instead of the default paths. * src/manage.c (run_osp_task): Adjust fork_osp_scan_handler() call. Use the scanner's certificates values, instead of file paths. (fork_osp_scan_handler): Remove host and port function arguments. Use certificates values when connecting instead of cert files paths. 2014-08-28 Hani Benhabiles * src/manage_sql.c (modify_task_check_config_target): New function. * src/manage.h: Add new function prototype. * src/omp.c (omp_xml_handle_end_element): In CREATE_TASK and MODIFY_TASK cases, return error when using a multi-host target with an OSP scan config. 2014-08-28 Matthew Mundell * src/manage_sql.c (delete_report_internal): Keep going if the task slave is 0, which can happen if the slave is removed from the task. 2014-08-28 Matthew Mundell * ChangeLog: Remove stray entry. 2014-08-27 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Add a flag that prevents the functions from being created more than once in a process. Children of the main process will be forked with the flag set. Also move the uuid-ossp check up for clarity. 2014-08-27 Hani Benhabiles * src/omp.c (omp_xml_handle_end_element): Refactor code in CREATE_TASK case. 2014-08-27 Matthew Mundell Finish Postgres resource_name SQL function. * src/manage.c (valid_db_resource_type): Remove. Now in manage_utils.c. * src/manage_utils.c (valid_db_resource_type): New function. From manage.c. * src/manage_utils.h: Add header accordingly. * src/manage_pg_server.c (sql_valid_db_resource_type): New function. * src/manage_pg.c (manage_create_sql_functions): Add valid_db_resource_type. Convert resource_name to plpgsql, so that it can handle any resource, and add type check to it. 2014-08-27 Matthew Mundell * src/manage_migrators.c (SQLITE_OR_NULL): New macro. (database_migrators): When building with Postgres, disable migrators that depend on SQL functions resource_exists, clean_hosts and current_offset. * src/manage_pg.c (manage_create_sql_functions): Remove list now that all are implemented. 2014-08-26 Matthew Mundell * src/manage_sql.c (collate_location): Remove. No longer used. 2014-08-26 Matthew Mundell * src/manage_sqlite3.c: Remove stray collation headers. (sql_order_port): Implement. 2014-08-26 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Implement order_port. * src/manage_sql.c: Remove collation references in docs. * src/omp.c (buffer_results_xml): Flush trailing whitespace. 2014-08-26 Timo Pollmeier Add autofp and overrides for lists of results from GET_RESULTS. Create views for getting autofp and overrides applying to results to reduce size of often duplicated SQL fragments. * src/manage_pg.c (create_tables): Add views result_overrides, result_new_severities and results_autofp. * src/manage_sql.c (LSC_FAMILY_LIST): Remove. Moved to manage.h. (RESULT_ITERATOR_COLUMNS): Add autofp, override and dynamic parameters. (RESULT_ITERATOR_COLUMN_COUNT, RESULT_ITERATOR_COLUMNS_ARRAY): New macros. (init_result_get_iterator): Correct documentation. Take autofp, override and dynamic_severity parameters into account when getting iterator columns. (result_count): Correct documentation. Add autofp, override and dynamic_severity parameters. (init_result_iterator): Simplify queries by using views for autofp and overrides. * src/manage_sqlite3.c (manage_session_init): Create temporary table current_credentials as in PostgreSQL version. (create_tables): Add views result_overrides, result_new_severities, results_autofp. * src/manage.h (LSC_FAMILY_LIST): New. Moved here from manage_sql.c. (result_count): Add new parameters. * src/omp.c (xml_handle_end_element): In case CLIENT_GET_RESULTS apply autofp and apply_overrides and get values for them from filter. 2014-08-26 Matthew Mundell Remove collations now that sorting is done via functions. * src/manage_pg.c (manage_create_sql_collations): Remove. * src/manage_sqlite3.c (manage_create_sql_collations): Remove. * src/manage_sql.c (collate_threat, collate_role): Remove. (init_manage_process): Remove collation setup. 2014-08-26 Matthew Mundell * src/manage_sql.c (result_cmp): Remove out of date SQL reference note. 2014-08-26 Matthew Mundell Order by threat using function instead of collation, for Postgres. * src/manage_sql.c (filter_clause): Order threat using function. Also use column instead of alias. * src/manage_pg.c (manage_create_sql_functions): Add order_threat. * src/manage_sqlite3.c (sql_order_threat): New function. (manage_create_sql_functions): Add order_threat. 2014-08-26 Matthew Mundell Order user roles Admin-first, like they were in the past. * src/manage_sql.c (filter_clause): Remove special case for sorting by "role", as this term is now "roles". Add special case for "roles", which sorts Admin first and the rest alphabetically. (USER_ITERATOR_COLUMNS): Adjust the concat SQL statements to use a subselect, because the single select was causing errors in some cases. Also put Admin before the other roles in the list. (init_user_role_iterator): Sort with order_role so Admin comes first. * src/manage_pg.c (manage_create_sql_functions): Add order_role. * src/manage_sqlite3.c (sql_order_role): New function. (manage_create_sql_functions): Add order_role. 2014-08-25 Matthew Mundell * src/manage_sql.c (task_severity): Put report selection in WHERE clause instead of using alias, for Postgres. 2014-08-25 Matthew Mundell Get regexp filtering working with Postgres. * src/manage_sql.c (filter_clause): Get regexp operator from backend. * src/sql_sqlite3.c, src/sql_pg.c (sql_regexp_op): New function. * src/sql.h: Add header accordingly. 2014-08-25 Timo Pollmeier * src/manage_sql.c (filter_clause): Cast severity to string for "CASE" clause to prevent type errors in PostgreSQL. Do not apply "lower" function for the keywords "created", "modified" and "published" when creating ORDER BY clause so the corresponding columns are not sorted as text. 2014-08-23 Jan-Oliver Wagner Post-release version bump. * CMakeLists.txt: Updated version number. 2014-08-23 Jan-Oliver Wagner Preparing the openvas-manager 6.0+beta1 release. * CHANGES: Updated. 2014-08-21 Matthew Mundell * src/manage_migrators.c (migrate_131_to_132): Add Postgres version of CREATE statements. 2014-08-21 Matthew Mundell * src/manage_sql.c (make_result): Set owner to NULL instead of 0, otherwise Postgres sees a constraint error. 2014-08-21 Matthew Mundell * doc/postgres-HOWTO: Add functions and aggregates to drop script. 2014-08-21 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Create task_threat_level after functions it uses. 2014-08-21 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Delay creation of more functions that use tables. (create_tables): Change attack_state in report_hosts to text. 2014-08-21 Timo Pollmeier Handle newly added elements in results when importing reports. * src/manage_sql.c (create_report): Set owner and date for imported results. * src/omp.c (client_state_t): Add states for new elements in results: CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_COMMENT, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_CREATION_TIME, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_MODIFICATION_TIME, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_NAME, CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_OWNER. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add read_over cases for the above new states. 2014-08-20 Timo Pollmeier * src/manage_sql.c (init_result_iterator): Fix aliased columns like name, created, modified. Add date column. 2014-08-20 Timo Pollmeier Add columns owner and date to results table. Hence increase database version to 133. Add database migration from version 132 to 133. Add the new fields to result xml and use powerfilter in GET_RESULTS. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 133. * src/manage_migrators.c (migrate_132_to_133): New function. (database_migrators): Add migrate_132_to_133. * doc/db_postgres.sql: Add new columns owner and date to results table. * src/manage_acl.c (where_owned): Add case for the type "result". * src/manage_pg.c (create_tables): Add new columns to results table. * src/manage_sql.c (resource_count): Add case for "result" type. (RESULT_ITERATOR_FILTER_COLUMNS, RESULT_ITERATOR_COLUMNS): New column definition macros. (init_result_get_iterator, result_count): New functions. (init_result_iterator): Add new columns to results table. (result_iterator_host, result_iterator_port, result_iterator_nvt_oid) (result_iterator_original_type, result_iterator_type) (result_iterator_descr, result_iterator_task, result_iterator_report) (result_iterator_scan_nvt_version, result_iterator_original_severity) (result_iterator_severity, result_iterator_severity_double) (result_iterator_original_level, result_iterator_level): Update column indexes to accommodate newly added columns at positions used by generic get iterator functions. * src/manage_sqlite3.c (create_tables): Add new columns to results table. * src/manage.h (result_count, init_result_get_iterator): New function prototypes. * src/omp.c (get_results_data_t, get_results_data_reset): Add field "get" for generic get data structure. Remove fields result_id and details, which are part of get. (omp_xml_handle_start_element): In GET_RESULTS case, parse generic get attributes and remove separate handling of attributes result_id and details. (buffer_results_xml): Add new fields owner, name, comment, creation_time and modification_time to XML. (omp_xml_handle_end_element): In CLIENT_GET_RESULTS case, replace result_id and details in get_results_data with equivalents in get_results_data.get and use new init_result_get_iterator function to get list of multiple results. 2014-08-20 Matthew Mundell * src/manage.c (slave_setup): When the slave status is Done, update the master progress just before setting the master status, instead of before updating the results, otherwise the progress is -1 while the status is still Running. 2014-08-19 Matthew Mundell Add results from slave inside a transaction, to try reduce load on SQLite3 locking mechanism. * src/manage.c (update_from_slave): Remove. Now in manage_sql.c. * src/manage_sql.c (update_from_slave): New function. From manage.c. Add transaction around loop that adds results. * src/manage_sql.h: Add header accordingly. 2014-08-19 Hani Benhabiles Remove unused rpm, deb and exe lsc_credentials columns. Hence increase database version to 132. Add database migration from version 131 to 132. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 132. * src/manage_migrators.c (migrate_131_to_132): New function. (database_migrators): Add migrate_131_to_132. 2014-08-19 Hani Benhabiles * src/manage_pg.c (create_tables), src/manage_sqlite3.c (create_tables): Don't create rpm, deb and exe columns. * src/manage_sql.c (create_lsc_credential, copy_lsc_credential) (delete_lsc_credential, LSC_CREDENTIAL_ITERATOR_COLUMNS) (LSC_CREDENTIAL_ITERATOR_TRASH_COLUMNS, manage_restore): Adjust for unused columns removal. * doc/db_postgres.sql (lsc_credentials, lsc_credentials_trash): Remove rpm, deb and exe columns. * doc/db.png: Update. 2014-08-19 Hani Benhabiles * src/manage_sql.c (lsc_credential_iterator_rpm) (lsc_credential_iterator_deb, lsc_credential_iterator_exe): Change functions return value from const char to char as it is allocated dynamically. * src/manage.h: Adjust functions prototypes. * src/omp.c (omp_xml_handle_end_element): Free return value from creds packages iterators. 2014-08-18 Matthew Mundell * src/report_formats/HTML/HTML.xsl (scan_start, scan_end): Add timezone to date. * src/report_formats/LaTeX/latex.xsl (scan_start, scan_end): Add case for negative timezones. Print sign for positive timezone. * src/report_formats/TXT/TXT.xsl (scan_start, scan_end): Add case for negative timezones. Print sign for positive timezone. 2014-08-15 Hani Benhabiles * src/manage_sql.c (trim_report, trim_partial_report): Don't start a transaction as this is already done in called function. Fixes a transaction within transaction error when resuming stopped tasks. 2014-08-15 Hani Benhabiles * src/manage_sql.c (create_lsc_credential): Test the provided private key and passphrase combination before creation. * src/omp.c (omp_xml_handle_end_element): Handle new create_lsc_credential() error code. 2014-08-14 Matthew Mundell Correct caching of Postgres counts when overrides are applied. * src/sql_pg.c (sql_stmt_param_add): Duplicate according to param size, because some params are binary. (sql_bind_double): Send param as string, to avoid binary format issues. 2014-08-14 Matthew Mundell Move manage_db_version check out to backend function so that it works in Postgres. This enables --migrate for Postgres. * src/manage_sqlite3.c, src/manage_pg.c (manage_db_empty): New function. * src/manage.h: Add header accordingly. * src/manage_sql.c (manage_db_version): Use manage_db_empty. 2014-08-14 Hani Benhabiles * src/manage.c (parse_osp_report): Use message type in osp report. Call make_osp_result() adequately. * src/manage.h: Add new function prototype. * src/manage_sql.c (ovaldef_cves): Fix function documentation. (make_osp_result): New function. (make_result): Remove oval definition case handling. * src/omp.c (results_xml_append_nvt): Handle oval definition with no CVEs case. Use nvt oid as name when no name is found. 2014-08-14 Hani Benhabiles * src/schema_formats/XML/OMP.xsl, doc/omp.html: Documentation update for pause_task and resume_paused_task OMP commands removal. 2014-08-14 Matthew Mundell Account for recent command removal in permissions. Hence increase database version to 131. Add database migration from version 130 to 131. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 131. * src/manage_migrators.c (migrate_130_to_131): New function. (database_migrators): Add migrate_130_to_131. * doc/db.png: Update for version change. 2014-08-13 Matthew Mundell Remove target locators feature. * src/manage_sql.c (omp_commands): Remove GET_TARGET_LOCATORS. (create_target, modify_target): Remove target locator args. * src/manage.h: Update headers accordingly. * src/omp.c (create_target_data_t, create_target_data_reset) (modify_target_data_t, modify_target_data_reset, client_state_t): Remove target locator elements. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Remove target locators. * src/schema_formats/XML/OMP.xml: Remove target locators from OMP. * doc/omp.rnc, doc/omp.html: Update from source. 2014-08-13 Hani Benhabiles * doc/omp.html, doc/omp.rnc, src/schema_formats/XML/OMP.xml: Update documentation for scan pausing removal. 2014-08-13 Hani Benhabiles Remove task pausing feature. * src/manage.h (task_status_t): Delete TASK_STATUS_PAUSE_REQUESTED, TASK_STATUS_PAUSE_WAITING, TASK_STATUS_PAUSED, TASK_STATUS_RESUME_REQUESTED, TASK_STATUS_RESUME_WAITING statuses. Remove deleted functions prototypes. * src/manage.c (run_status_name, run_status_name_internal, slave_setup) (stop_task_internal, manage_check_current_task): Remove handling of deleted statuses. (pause_task, resume_paused_task): Delete functions. * src/manage_pg.c (manage_create_sql_functions): Remove deleted task statuses handling. * src/manage_sql.c (omp_commands): Remove pause_task and resume_paused_task commands. (task_in_use, stop_active_tasks, set_task_requested, (task_iterator_current_report, set_task_schedule) (delete_report_internal, report_active, delete_user): Remove deleted task statuses handling. * src/omp.c (pause_task_data_t, resume_paused_task_data_t): Remove typedefs. (pause_task_daa_reset, resume_paused_task_data_reset): Delete functions. (command_data_t): Remove pause_task and resume_paused_task commands. (pause_task_data_t, resume_paused_task_data_t): Remove variables. (client_state_t): Remove CLIENT_PAUSE_TASK and CLIENT_RESUME_PAUSED_TASK states. (omp_xml_handle_start_element, omp_xml_handle_end_element): Remove task pausing and resuming handling. * src/otp.c (process_otp_scanner_input): Remove scan pausing and resuming handling. 2014-08-13 Hani Benhabiles * src/omp.c (results_xml_append_nvt): Correctly set the nvt tag's cvss_base in oval definitions case. 2014-08-12 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Add task_last_report and task_second_last_report. Implement task_trend. 2014-08-12 Matthew Mundell * src/manage_sqlite3.c (report_severity_count): Correct arg count doc. 2014-08-12 Matthew Mundell Implement Postgres function report_severity_count. * src/manage_utils.c (level_min_severity, level_max_severity): New functions. From manage.c. * src/manage.c (level_min_severity, level_max_severity): Remove. Now in manage_utils.c. * src/manage_utils.h, src/manage.h: Add and remove headers accordingly. * src/manage_pg.c (manage_create_sql_functions): Move C section up. Add names to report_severity args. Add severity_class. Implement report_severity_count. * src/manage_pg_server.c (sql_level_min_severity) (sql_level_max_severity): New functions. 2014-08-12 Hani Benhabiles * src/manage_sql.c (ovaldef_cves): New function. * src/manage.h: Add new function prototype. * src/omp.c (results_xml_append_nvt): Add the CVEs affecting the oval definition to the nvt tag. 2014-08-12 Hani Benhabiles * src/manage.c (parse_osp_report): Don't append oval definition description as result description. * src/omp.c (results_xml_append_nvt): In oval definition case, adequately add the title and the description of the ovaldef to the nvt tag. 2014-08-11 Matthew Mundell * src/manage_sql.c (cache_report_counts): Escape SQL keyword "user" for Postgres. 2014-08-11 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Implement report_severity. Move report_severity and report_severity_count below OVERRIDES_SQL. 2014-08-08 Hani Benhabiles * src/manage.c (parse_osp_report): Don't append oval definition evaulation to the result description as only confirmed definitions are sent. Adjust and refactor code accordingly. * src/manage_sql.c (make_result): Handle null description value. 2014-08-08 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Implement task_threat_level. Correct severity_to_level check. 2014-08-08 Hani Benhabiles * src/manage.c (fork_osp_scan_handler): Correctly assert osp_get_scan() return value. Remove retry limit to continue until success or failure and act similarly to the current OpenVAS scanner. Add log warning and report error when scan is stopped by the OSP Scanner. 2014-08-08 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Implement task_severity. 2014-08-08 Timo Pollmeier Rebuild CERT database as version 6 to apply fix for problems with CVEs in older DFN-CERT advisories. * CMakeLists.txt (OPENVASMD_CERT_DATABASE_VERSION): Increase to 6. * tools/cert_db_init.sql: Increase database_version to 6. * tools/openvas-certdata-sync.in (db_migrate_4, db_migrate_5): Removed as database is rebuilt for version 6. (check_db_version): Rebuild to migrate to database version 6. * tools/greenbone-certdata-sync (db_migrate_4, db_migrate_5): Removed as database is rebuilt for version 6. (check_db_version): Rebuild to migrate to database version 6. 2014-08-08 Timo Pollmeier * tools/dfn_cert_update.xsl (atom:entry): Split CVE elements in case they contain a list of CVEs, fix or filter out invalid CVE-IDs. 2014-08-07 Matthew Mundell * src/manage_pg.c (create_tables): Change some numeric columns to integers. 2014-08-07 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Add report_active and report_progress_active. Implement report_progress. * src/manage_sql.c (REPORT_ITERATOR_COLUMNS): Change the progress padding so that it also works in Postgres. 2014-08-07 Hani Benhabiles * src/manage.c (fork_osp_scan_handler): Add error message when stopping scan for time-out. Increase retry limit to handle larger files. * src/manage_sql.c (make_result): Handle null host and port function parameters. 2014-08-06 Jan-Oliver Wagner * src/manage_sql.c (create_target, modify_target): Replace calls of request_resource functions by simply NULL in order de-couple this deprecated feature from openvas-libraries. The todo remains to entirely remove the target locators from OpenVAS Manager. * src/omp.c (omp_xml_handle_end_element): Replace call of request_resource function by simply NULL in order de-couple this deprecated feature from openvas-libraries. The todo remains to entirely remove the target locators from OpenVAS Manager. 2014-08-06 Hani Benhabiles * src/manage.c (parse_osp_report): Use transaction when inserting osp report results to improve performance. * src/manage_sql.c (make_result): Set severity to 0.0 when not found in ovaldi definition case too. 2014-08-06 Hani Benhabiles * src/omp.c (results_xml_append_cert, results_xml_append_nvt): New functions. (buffer_results_xml): Refactor code to use new functions and add nvt name in oval definitions result case. 2014-08-06 Matthew Mundell Get the GSA Assets page loading with Postgres. * src/manage_sql.c (prognosis_order_by): Order host with function instead of collation. (where_levels): Add new_severity_sql argument. Use instead of alias. (init_asset_iterator, filtered_host_count): Pass new_severity SQL into where_levels. Move last_report SQL out of the SELECT columns and refer to it directly in the WHERE clauses. Order hosts with function instead of collation. 2014-08-06 Matthew Mundell * src/manage_sql.c (init_asset_iterator, filtered_host_count): Reduce SQL indent to make space for next change. 2014-08-06 Matthew Mundell * src/manage_sql.c (init_asset_iterator, host_nthlast_report_host) (filtered_host_count): Remove report_hosts end_time '' checks, because end_time is now an integer. Add aliases for subqueries. For Postgres. 2014-08-06 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Add common_cve. * src/manage_sqlite3.c (sql_common_cve): Correct doc. 2014-08-05 Hani Benhabiles * src/manage.c (parse_osp_report): Insert the oval definition as the result nvt when available to be able to correctly set the severity for the result. Adjust ovaldef_description() call. * src/manage.h: Add new functions prototypes. * src/manage_sql.c (ovaldef_severity, ovaldef_version): New functions. (make_result): In oval definition case, insert the result severity and version correctly. Cleanup function code. (ovaldef_description): Take ovaldef ID as function argument instead of the definition's name. 2014-08-05 Matthew Mundell * src/omp.c (get_ovaldi_files): Disable SQL, for Postgres. 2014-08-05 Matthew Mundell * src/manage_sql.c (init_result_iterator, column_auto_type): Use = instead of == in SQL. Use EXISTS in SQL to make sure the OR argument is boolean. Both for Postgres. (report_counts_autofp_match): Use = instead of ==, for Postgres. 2014-08-05 Matthew Mundell * src/manage_pg.c (manage_session_init): Clear current_credentials in case the user is authenticating again in the session. 2014-08-05 Timo Pollmeier * tools/cert_bund_getbyname.xsl, tools/cert_bund_update.xsl: New XSL stylesheets. 2014-08-05 Timo Pollmeier Add new SecInfo subtype CERT-Bund Advisory (CERT_BUND_ADV). * CMakeLists.txt: Increase OPENVASMD_CERT_DATABASE_VERSION to 5. Install new CERT-Bund XSL stylesheet files. * src/manage_acl.c (user_owns_uuid): Add case for cert_bund_adv. * src/manage_sql.c (resource_name, trash_id_exists): Add cases for cert_bund_adv. (modify_setting): Add CERT-Bund filters and chart preferences. (CERT_BUND_ADV_INFO_ITERATOR_FILTER_COLUMNS) (CERT_BUND_ADV_INFO_ITERATOR_COLUMNS): New column #defines. (ALL_INFO_UNION_COLUMNS): Add cert_bund_adv. (init_cert_bund_adv_info_iterator, cert_bund_adv_info_count) (cert_bund_adv_info_iterator_title) (cert_bund_adv_info_iterator_summary) (cert_bund_adv_info_iterator_cve_refs) (cert_bund_adv_info_iterator_max_cvss, init_cve_cert_bund_adv_iterator) (init_nvt_cert_bund_adv_iterator): New cert_bund_adv iterator functions. (create_tag, modify_tag, type_columns, type_select_columns) (type_filter_columns): Add cases for cert_bund_adv. * src/manage.c (CERT_BUND_ADV_GETBYNAME_XSL) (CERT_BUND_ADV_FILENAME_FMT): New #define constants. (valid_db_resource_type): Add case for cert_bund_adv. (get_cert_bund_adv_filename): New static function. (get_nvti_xml): Add CERT-Bund to CERT references of NVT. (manage_read_info): Add case for cert_bund_adv. * src/manage.h (init_cert_bund_adv_info_iterator) (cert_bund_adv_info_count, cert_bund_adv_info_iterator_title) (cert_bund_adv_info_iterator_summary) (cert_bund_adv_info_iterator_cve_refs) (cert_bund_adv_info_iterator_max_cvss, init_cve_cert_bund_adv_iterator) (init_nvt_cert_bund_adv_iterator): New function prototypes. * src/omp.c (buffer_results_xml): Add CERT-Bund to CERT references of NVT. (omp_xml_handle_end_element): In CLIENT_GET_INFO case, add info subtype cert_bund_adv. Add CERT-Bund to CERT references of CVE details. * src/schema_formats/XML/OMP.xml (get_info): Add CERT_BUND_ADV as info type in request and response. * doc/omp.rnc, doc/omp.html: Update from source. * tools/cert_db_init.sql: Increase database_version to 5. (cert_bund_advs, cert_bund_cves): New tables. (cert_bund_advs_idx, cert_bund_cves_adv_idx, cert_bund_cves_cve_idx): New indexes. (cert_bund_adv_delete): New deletion trigger. * tools/greenbone-certdata-sync: Increase script version number. (db_migrate_5): New function. (check_db_version): Migrate to database version 5. (update_cvss, update_cert_db): Add Update of CERT-Bund data. * tools/openvas-certdata-sync.in (db_migrate_5): New function. (check_db_version): Migrate to database version 5. (update_cvss, update_sec_db): Add Update of CERT-Bund data. 2014-08-05 Matthew Mundell * src/manage_sql.c (parse_iso_time): When there is a timezone in the time string, then convert the time under that timezone, otherwise it is assumed to be in the current timezone. In particular this ensures that the task "Scan started" time is correct in slave scans when the master and slave users have different timezones. 2014-08-05 Hani Benhabiles * src/manage_sql.c (create_report): Use sql transactions as Debian 5 is not supported anymore. 2014-08-04 Hani Benhabiles * src/manage_sql.c (ovaldef_uuid): New function. * src/manage.h: Add function prototype. * src/manage.c (parse_osp_report): Use the oval definition's id instead of its name as it may not be unique. (get_definitions_file): New function. 2014-08-04 Matthew Mundell Add options --max-email-attachment-size and --max-email-include-size. * src/manage_sql.c (REPORT_NOTICE_FORMAT, REPORT_ATTACH_FORMAT): Remove extra specifiers now that the message is in one argument. (MAX_CONTENT_LENGTH, MAX_ATTACH_LENGTH): Update doc. (max_content_length, max_attach_length): New variables. (escalate_2): Use variables instead of definitions for the max values. (init_manage_internal, init_manage): Add args for email maximums. * src/omp.c (init_omp): Add args for email maximums. * src/ompd.c (init_ompd): Add args for email maximums. * src/ompd.h, src/omp.h: Update headers accordingly. * src/openvasmd.c (main): Add options. Pass to init_ompd. * doc/openvasmd.8.xml: Add max options. * doc/openvasmd.8, doc/openvasmd.html: Update from source. 2014-08-04 Hani Benhabiles * src/manage_sql.c (ovaldef_description): New function. * src/manage.h: Add new function prototype. * src/manage.c (parse_osp_report): Add the oval definition's description to the result's description adequately. Adjust formatting. 2014-08-04 Matthew Mundell * src/manage_sql.c (create_role): Correct return doc. * src/omp.c (omp_xml_handle_end_element): Correct CREATE_ROLE error message. 2014-07-04 Hani Benhabiles * src/manage.c (run_osp_task): Set task run status after connecting and on errors accordingly. (fork_osp_scan_handler): Set task and report run status on fork failure. 2014-08-01 Henri Doreau * src/manage.c (slave_setup): Use openvas_server_sendf instead of openvas_server_send, which is to be removed eventually. 2014-07-31 Matthew Mundell * src/manage_sql.c (create_user): For ldap_connect users, generate the password if it is empty. 2014-07-31 Matthew Mundell * src/manage_sql.c (setup_full_config_prefs): Add unscanned_closed_udp. 2014-07-30 Matthew Mundell Make GET_REPORTS work with shared report formats. * src/manage_sql.c (manage_report, manage_send_report): In the script path, use the UUID of the report format's owner, because the report format might not be owned by the current user. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORTS search in all report formats, so that the user can specify report formats that are owned by someone else. * src/manage.h: Add header accordingly. 2014-07-30 Timo Pollmeier * src/manage_sql.c (init_aggregate_iterator): Use column aliases again in outer SELECT columns and GROUP BY clause. 2014-07-30 Matthew Mundell * ChangeLog: Add entry for r19597 that was overwritten by r19598. 2014-07-30 Hani Benhabiles * src/manage.c (delete_osp_scan): New function. (fork_osp_scan_handler): Delete OSP scan upon successful finish. 2014-07-30 Timo Pollmeier * src/manage_sql.c (modify_setting): Add chart preferences and dashboard filters. Rename filter_name to setting_name. 2014-07-29 Matthew Mundell * src/manage_sql.c (group_users, role_users): Do the group_concat in an outer SELECT, so that it aggregates the selected rows. 2014-07-29 Hani Benhabiles * src/manage.c (task_scanner_options): Adjust the base path of ovaldi definitions file. * src/omp.c (get_ovaldi_files): Get the list from the scap.db xml_files values of ovaldefs table instead of iterating over the directory files in filesystem. 2014-07-28 Matthew Mundell When importing a report format, give the report format a new UUID if its UUID clashes with another report format. Also create a link to the feed signature of the existing report format to keep the trust working. * src/manage_sql.c (find_signature): Add uuid arg. If given then also look for the signature as a link in the private directory. If the link exists return UUID at destination in uuid arg. Update callers. (create_report_format): When verifying use the linked signature if it is present. When a report format or trash report format with the given UUID exists already, create the format with a new UUID and link to the signature of the existing UUID in the feed. (delete_report_format): Remove signature links when ultimately deleting. (verify_report_format_internal): Use the linked signature if it is present. 2014-07-25 Hani Benhabiles * src/manage.c (get_nvti_xml): Remove hardcoded and unused nvt checksum and algorithm values. * src/schema_formats/XML/OMP.xml, doc/omp.html, doc/omp.rnc: Update documentation. 2014-07-25 Hani Benhabiles * src/manage_sql.c (make_result): Handle null nvt case when inserting the result in DB. 2014-07-25 Hani Benhabiles * src/manage.c (task_scanner_options): Fetch the definitions file from disk, as only the name is stored in DB now. 2014-07-25 Hani Benhabiles * src/omp.c (get_ovaldi_files): New function. (omp_xml_handle_end_element): In GET_SCAN_CONFIGS case, send list of xml files under scap-data/defs folder as default value for definitions_file config preference. Change type from osp_file to ovaldi_file. Adjust related code accordingly. 2014-07-25 Hani Benhabiles * src/manage_sql.c (init_scanner_task_iterator) (scanner_task_iterator_uuid, scanner_task_iterator_name): New functions. * src/omp.c (omp_xml_handle_end_element): Include tasks using the scanner object in GET_SCANNERS when the details attribute is set. * src/manage.h: Add new functions prototypes. * src/schema_formats/XML/OMP.xml, doc/omp.html, doc/omp.rnc: Update documentation. 2014-07-25 Timo Pollmeier Allow ALLINFO to be used in the GET_AGGREGATES command. * src/manage.h (type_table): New function prototype. * src/manage_sql.c (init_aggregate_iterator): Get expression for SQL FROM clause with new type_table function. (type_columns, type_select_columns, type_filter_columns): Add case for ALLINFO. (type_table): New function. 2014-07-23 Hani Benhabiles * src/manage.c (run_task): Check if scanner is loading right after the connecting to it. * src/scanner.c (openvas_scanner_is_loading): New function. * src/scanner.h: Add new function prototype. 2014-07-23 Hani Benhabiles * src/manage_sql.c (ALERT_ITERATOR_TRASH_COLUMNS) (TARGET_ITERATOR_TRASH_COLUMNS): Fix tables names. (PORT_LIST_ITERATOR_TRASH_COLUMNS): Fix table columns names. (init_port_list_iterator): Fix trash_columns variable value. (init_port_range_iterator): Fix counting to correctly handle port lists in trashcan case. 2014-07-22 Hani Benhabiles * src/manage.c (run_osp_task): Use LSC Credentials attached to the target as OSP scan options and adjust function accordingly. (parse_osp_report): Adjust make_result() function call. * src/manage_sql.c (make_config_osp_ovaldi, check_db_configs): Remove unused osp ovaldi config preferences and delete left-overs. 2014-07-21 Hani Benhabiles * src/schema_formats/XML/OMP.xml, doc/omp.rnc, doc/omp.html: Update documentation for get tasks OMP command. 2014-07-21 Hani Benhabiles * src/schema_formats/XML/OMP.xml, doc/omp.rnc, doc/omp.html: Update documentation for create_task and modify_task OMP commands. 2014-07-21 Hani Benhabiles * src/schema_formats/XML/OMP.xml, doc/omp.rnc, doc/omp.html: Add documentation for create_scanner, modify_scanner, get_scanners and delete_scanner OMP commands. 2014-07-21 Hani Benhabiles Increase limit of max number of hosts specified in user Host Access Control to 16,777,216. * src/manage.h (MANAGE_USER_MAX_HOSTS): New define. * src/manage_sql.c (manage_set_max_hosts): New function. (create_user, modify_user): Use the new maximum number of specified hosts. 2014-07-21 Hani Benhabiles * src/manage.h: Add new function header. * src/manage_sql.c (modify_task_check_slave_scanner): New function. (modify_task_check_config_scanner): Handle one null parameter case. * src/omp.c (omp_xml_handle_end_element): In CREATE_TASK and MODIFY_TASK cases, improve the handling of erroneous scanner and slave values combinations. 2014-07-18 Hani Benhabiles * src/manage_sql.c (modify_scanner): Do not set certs fields if provided values are empty. 2014-07-18 Hani Benhabiles * src/omp.c (omp_xml_handle_end_element): Send scanner CA public key and public key in GET_SCANNERS case. Adjust modify_scanner() call. (modify_scanner_data_t): Add new elements for scanners certs. (modify_scanner_data_reset): Free data in new elements. (client_state_t): Add new states for MODIFY_SCANNER. (omp_xml_handle_start_element, omp_xml_handle_text): Handle new MODIFY_SCANNER states. * src/manage.h: Add and modify functions prototypes. * src/manage_sql.c (modify_scanner): Enable modifying ca_pub, key_pub and key_priv fields when provided. 2014-07-18 Matthew Mundell * src/manage_sql.c (NOTE_ITERATOR_COLUMNS, NOTE_ITERATOR_TRASH_COLUMNS) (OVERRIDE_ITERATOR_COLUMNS, OVERRIDE_ITERATOR_TRASH_COLUMNS): Cast string literals because Postgres requires this when the SELECT is enclosed in a SELECT DISTINCT, which can happen since yesterday's init_get_iterator commit. 2014-07-18 Hani Benhabiles * src/omp.c (create_scanner_data_t): Add ca_pub, key_pub and key_priv elements. (create_scanner_data_reset): Free new elements memory accordingly. (client_state_t): Add new states for CREATE_SCANNER. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Handle new states and values accordingly. Adjust create_scanner() call. 2014-07-18 Hani Benhabiles Use Scanner certs from DB. * src/manage_sql.c (manage_scanner_set, verify_scanner): Call openvas_scanner_set_certs() accordingly. (scanner_ca_pub, scanner_key_pub, scanner_key_priv): New functions. * src/manage.c (scanner_connect): Set scanner certs values from DB. (stop_task_internal): Remove handling of tasks with no scanner. * src/manage.h: Add functions prototypes. * src/scanner.c (openvas_scanner_connect): Connect with openvas_server_new_mem() and adjust to use certificates global variables accordingly. (openvas_scanner_free): Free certificates memory and reset variables. (openvas_scanner_set_certs): New function. * src/scanner.h: Add new function prototype. 2014-07-18 Matthew Mundell * src/manage_sql.c (columns_build_select): Include column aliases. 2014-07-17 Matthew Mundell * src/manage_sql.c (init_get_iterator): Do the DISTINCT case with an enclosing SELECT DISTINCT, because if a SELECT is DISTINCT then Postgres requires the ORDER BY clause to be in the SELECT columns. Adding an enclosing SELECT is simpler than adding the ORDER BY clause to the SELECT columns. 2014-07-17 Hani Benhabiles * src/manage_sql.c (SCANNER_ITERATOR_COLUMNS): Add ca_pub, key_pub and key_priv columns. (scanner_iterator_ca_pub, scanner_iterator_key_pub) (scanner_iterator_key_priv): New functions. 2014-07-17 Matthew Mundell * src/manage_sql.c (init_result_iterator): Order by port, host and message type using order functions instead of COLLATE, because Postgres COLLATE is limited. 2014-07-17 Matthew Mundell * src/manage_sql.c (make_result): Change double to text in coalesce, because cvss_base is text and Postgres wants them the same. 2014-07-17 Matthew Mundell * src/manage_sql.c (init_report_errors_iterator): Use comma instead of JOIN, for Postgres and general consistency. 2014-07-17 Matthew Mundell Remove alias usage in results SQL, for Postgres. * src/manage_sql.c (where_levels_auto): Add args for new severity and auto type SQL. Use the SQL instead of the aliases. (CVSS_BASE_SQL): New define. For init_result_iterator. (init_result_iterator): Use the CVSS base SQL directly, instead of the alias "cvss_base". Similary use the new severity and auto type SQL directly in the ORDER clause. And pass the new severity and auto type SQL into where_levels_auto so that the WHERE levels clause uses the SQL directly instead of using the aliases. (column_auto_type): Remove commas from SQL. (report_scan_result_count): As above, pass SQL into where_levels_auto and use SQL directly instead of using aliases. 2014-07-17 Matthew Mundell * src/manage_pg.c (create_tables): Make severity a double in the notes tables, to match overrides. 2014-07-17 Matthew Mundell * src/manage_sql.c (resource_name): Expect the end_time to be an integer instead of text. (set_task_end_time): Convert the given string to an integer. 2014-07-17 Hani Benhabiles * src/scanner.c (openvas_scanner_write): Adjust openvas_server_connect() function call. 2014-07-17 Matthew Mundell * src/manage_sql.c (filter_clause, report_scan_result_count): Cast to REAL instead of NUMBER, because Postgres does not support NUMBER. 2014-07-17 Hani Benhabiles * src/otp.h (scanner_init_state_t): Remove SCANNER_INIT_CONNECT_INTR state. * src/otp.c (process_otp_scanner_input): Remove SCANNER_INIT_CONNECT_INTR case. * src/scanner.c (openvas_scanner_write): Remove handling of removed init case. Adjust openvas_server_connect() call and return value handling accordingly. Set socket to be nonblocking only after successful connect. (openvas_scanner_connect): Don't set socket to nonblocking. (openvas_scanner_init): Don't loop over openvas_scanner_write() anymore. Code style update. * src/ompd.c: Remove useless include. (serve_omp): Don't handle removed scanner init state. 2014-07-17 Matthew Mundell * src/manage_sql.c (task_severity, report_add_result) (init_result_iterator, init_asset_iterator, report_scan_result_count) (filtered_host_count): Limit override selection to one row, as Postgres complains if a subselect in an expression returns multiple rows. 2014-07-17 Matthew Mundell Adjust SQL bind functions slightly, for Postgres. * src/manage_sql.c (report_severity_data): Send address instead of value to int64 and double bind functions. * src/sql_pg.c, src/sql_sqlite3.c (sql_bind_int64, sql_bind_double): Make value arg a pointer, for Postgres binding. * src/sql.h: Update headers accordingly. 2014-07-17 Matthew Mundell * src/manage_sqlite3.c (sql_order_message_type, sql_order_port): New functions. (manage_create_sql_functions): Create sorting functions order_message_type and order_port, to match Postgres. 2014-07-17 Hani Benhabiles Add --verify-scanner option. * src/manage_acl.c (user_has_access_uuid): Return true if the user's uuid is empty. * src/manage_sql.c (manage_verify_scanner): New function. (verify_scanner): Fix memory leak on error. * src/manage.h: Add function prototype. * src/openvasmd.c (main): Add --verify-scanner option. 2014-07-16 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Add an integer version of "lower", because the iterator ORDER BY expressions may use lower on integer columns. 2014-07-16 Matthew Mundell * src/sql_pg.c (struct sql_stmt, sql_stmt_init, sql_finalize) (sql_reset): Remove store. No longer used. 2014-07-16 Hani Benhabiles * src/scanner.c (openvas_scanner_write): Remove openvas_server_verify() call. This is done in libraries. 2014-07-16 Matthew Mundell Get results as text instead of as binary in the Postgres SQL layer. This prevents having to worry about byte ordering, especially for doubles. * src/sql_pg.c (sql_stmt_store): Remove. No longer used. (sql_exec_internal): Request text results. (sql_column_double, sql_column_text, sql_column_int) (sql_column_int64): Expect results as text. 2014-07-16 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Switch first arg of severity_in_level to double. Add double-integer version of severity_to_level. Add order_message_type and order_port dummy, for sorting. Add severity_to_type and severity_matches_ov. (create_tables): Switch severity columns in overrides tables to double. 2014-07-16 Hani Benhabiles Add --scanner-ca-pub, --scanner-key-pub and --scanner-key-priv command-line arguments. * src/manage_sql.c (manage_create_scanner): Add ca_pub_path, key_pub_path and key_priv_path function arguments. Read files content and call create_scanner accordingly. (create_scanner): Add ca_pub, key_pub and key_priv function arguments. Insert values in DB accordingly. * src/openvasmd.c (main): Add new cli options and adjust manage_create_scanner() call. * src/omp.c (omp_xml_handle_end_element): Adjust create_scanner call. * src/ompd.c: Remove unused defines. * src/manage.h: Update functions prototypes. * doc/openvasmd.8, doc/openvasmd.8.xml, doc/openvasmd.html: Update documentation. 2014-07-16 Matthew Mundell * src/manage_sql.c (make_nvt_from_nvti): Correct modification time tag name changed in parse_time patch on 2014-06-02. 2014-07-16 Hani Benhabiles * src/manage_sql.c (check_db_scanners): Insert the default certificates when creating the default scanner. Return value for success or error. (check_db): Adjust for check_db_scanners() call change. (copy_scanner, delete_scanner, manage_restore): Add scanners new columns. 2014-07-15 Hani Benhabiles Add scanners columns for ca cert and client key pairs. Hence increase database version to 130. Add database migration from version 129 to 130. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 130. * src/manage_migrators.c (migrate_129_to_130): New function. (database_migrators): Add migrate_129_to_130. * src/manage_pg.c, src/manage_sqlite3.c (create_tables): Add ca_pub, key_pub and key_priv columns to scanners and scanners_trash tables creation. * doc/db_postgres.sql (scanners, scanners_trash): Add new columns. * doc/db.png: Update documentation. 2014-07-14 Hani Benhabiles * src/omp.c (omp_xml_handle_end_element): Use default scanner when none is provided in CREATE_TASK. Fixes issue in run wizard case. 2014-07-14 Hani Benhabiles * src/manage_sql.c (make_nvt_from_nvti): Delete any NVT with the same OID before inserting the new one. 2014-07-14 Matthew Mundell * src/manage_sql.c (init_family_iterator, select_config_nvts): Use numeric position of column in ORDER BY when there is an EXCEPT, for Postgres. 2014-07-11 Matthew Mundell * src/manage_sqlite3.c (sql_severity_matches_ov): Correct doc and error message. Add missing space. 2014-07-11 Matthew Mundell * src/manage_sql.c (init_host_iterator): Convert host into Internet address type in ORDER BY, because using collation for custom sorting in Postgres is not possible. * src/manage_sqlite3.c (sql_inet): New function. (manage_create_sql_functions): Create function "inet" to match Postgres. 2014-07-11 Matthew Mundell * src/manage_sql.c (select_config_nvts): Use = instead of == in SQL, for Postgres. 2014-07-11 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Indent to avoid lone closing paren. * src/manage_sql.c (report_add_result): Move closing paren up. (PORT_LIST_ITERATOR_COLUMNS, PORT_LIST_ITERATOR_TRASH_COLUMNS): Remove stray space. 2014-07-11 Matthew Mundell * src/manage_sql.c (init_aggregate_iterator): Convert column for GROUP BY to the SELECT column. 2014-07-10 Matthew Mundell * src/manage_sql.c (filter_clause): Put the "lower" back into the ORDER BY, now that the ORDER BY expression is the actual SELECT column instead of the alias. 2014-07-10 Matthew Mundell * ChangeLog: Correct last entry. Remove extra entry. 2014-07-09 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Add hosts_contains. 2014-07-09 Matthew Mundell * src/manage_sql.c (columns_select_column): Add check for filter columns that have been prefixed with underscore to differentiate them from columns that have the same name. 2014-07-09 Matthew Mundell * src/manage_sql.c (underscore_sql_quote): Remove. No longer used. (filter_clause): Lookup column from filter column in all cases. (PERMISSION_ITERATOR_COLUMNS, PERMISSION_ITERATOR_TRASH_COLUMNS): Make spacing consistent. 2014-07-09 Matthew Mundell * src/manage_sqlite3.c (sql_report_progress): Correct doc. 2014-07-09 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Add dummy functions for task_trend, task_threat_level and task_severity, so that the Reports page loads. (create_tables): Remove explicit references that are optional in notes and overrides, for now. 2014-07-09 Matthew Mundell Use the column value directly in WHERE clauses generated for filter terms, because Postgres does not allow the WHERE clause to use column aliases. For example, for the filter term "ips=20" use the SQL SELECT name, (SELECT count (*) FROM ...) AS ips, ... FROM targets WHERE (SELECT count (*) FROM ...) = 20; instead of SELECT name, (SELECT count (*) FROM ...) AS ips, ... FROM targets WHERE ips = 20; * src/manage_sql.c (column_t): New type. (columns_select_column, columns_build_select): New functions. (filter_clause): Add select_columns arg. Lookup the actual column expression in select_columns instead of using aliases, for the clause. (GET_ITERATOR_COLUMNS_STRING): New define. (GET_ITERATOR_COLUMNS_PREFIX, GET_ITERATOR_COLUMNS): Switch to structure. (init_get_iterator, count): Add select_columns and trash_select_columns args. Pass to filter_clause, and use to build the SELECT column string for the SQL. (init_aggregate_iterator): Add select_columns and trash_select_columns args. Pass to filter_clause. (ALERT_ITERATOR_COLUMNS, ALERT_ITERATOR_TRASH_COLUMNS) (TASK_ITERATOR_COLUMNS, REPORT_ITERATOR_COLUMNS) (TARGET_ITERATOR_COLUMNS, TARGET_ITERATOR_TRASH_COLUMNS) (CONFIG_ITERATOR_COLUMNS, CONFIG_ITERATOR_TRASH_COLUMNS) (NVT_ITERATOR_COLUMNS, NVT_ITERATOR_COLUMNS_NVTS) (LSC_CREDENTIAL_ITERATOR_COLUMNS, LSC_CREDENTIAL_ITERATOR_TRASH_COLUMNS) (AGENT_ITERATOR_COLUMNS, AGENT_ITERATOR_TRASH_COLUMNS) (NOTE_ITERATOR_COLUMNS, NOTE_ITERATOR_TRASH_COLUMNS) (OVERRIDE_ITERATOR_COLUMNS, OVERRIDE_ITERATOR_TRASH_COLUMNS) (SCANNER_ITERATOR_COLUMNS, SCANNER_ITERATOR_TRASH_COLUMNS) (SCHEDULE_ITERATOR_COLUMNS, SCHEDULE_ITERATOR_TRASH_COLUMNS) (REPORT_FORMAT_ITERATOR_COLUMNS, REPORT_FORMAT_ITERATOR_TRASH_COLUMNS) (SLAVE_ITERATOR_COLUMNS, SLAVE_ITERATOR_TRASH_COLUMNS) (GROUP_ITERATOR_COLUMNS, GROUP_ITERATOR_TRASH_COLUMNS) (PERMISSION_ITERATOR_COLUMNS, PERMISSION_ITERATOR_TRASH_COLUMNS) (PORT_LIST_ITERATOR_COLUMNS, PORT_LIST_ITERATOR_TRASH_COLUMNS) (ROLE_ITERATOR_COLUMNS, ROLE_ITERATOR_TRASH_COLUMNS) (FILTER_ITERATOR_COLUMNS, FILTER_ITERATOR_TRASH_COLUMNS) (CVE_INFO_ITERATOR_COLUMNS, CPE_INFO_ITERATOR_COLUMNS) (OVALDEF_INFO_ITERATOR_COLUMNS, DFN_CERT_ADV_INFO_ITERATOR_COLUMNS) (USER_ITERATOR_COLUMNS, USER_ITERATOR_TRASH_COLUMNS) (TAG_ITERATOR_COLUMNS, TAG_ITERATOR_TRASH_COLUMNS) (TAG_NAME_ITERATOR_COLUMNS): Switch to structure. (alert_count, init_alert_iterator, init_task_iterator, resource_count) (task_count, report_count, init_report_iterator, target_count) (init_target_iterator, config_count, init_config_iterator) (init_nvt_info_iterator, nvt_info_count, init_nvt_info) (lsc_credential_count, init_lsc_credential_iterator) (init_agent_iterator, agent_count, note_count, init_note_iterator) (override_count, init_override_iterator, init_scanner_iterator) (scanner_count, schedule_count, init_schedule_iterator) (report_format_count, init_report_format_iterator, slave_count) (init_slave_iterator, group_count, init_group_iterator) (permission_count, init_permission_iterator, port_list_count) (init_port_list_iterator, role_count, init_role_iterator, filter_count) (init_filter_iterator, setting_count, init_setting_iterator) (cpe_info_count, init_cpe_info_iterator, cve_info_count) (init_cve_info_iterator, init_ovaldef_info_iterator, ovaldef_info_count) (init_dfn_cert_adv_info_iterator, dfn_cert_adv_info_count) (init_cve_dfn_cert_adv_iterator, init_nvt_dfn_cert_adv_iterator) (total_info_count, init_all_info_iterator, user_count) (init_user_iterator, init_tag_iterator, tag_count) (init_tag_name_iterator): Pass column structures instead of strings. (TASK_ITERATOR_TRASH_COLUMNS): Remove. Same as TASK_ITERATOR_COLUMNS. (init_user_task_iterator, init_user_target_iterator) (init_user_config_iterator, update_all_config_caches) (update_config_cache_init, init_user_lsc_credential_iterator) (): Build SELECT string from column structure. (nvt_iterator_columns, nvt_iterator_columns_nvts): New function. (select_config_nvts): Use function fto get SELECT column string. (SETTING_ITERATOR_EXTRA_COLS): Remove. Now SETTING_ITERATOR_FILTER_COLUMNS, to match other. (SETTING_ITERATOR_FILTER_COLUMNS): New define. Renamed. (SETTING_ITERATOR_COLUMNS, ALL_INFO_ITERATOR_COLUMNS): New defines. (ALL_INFO_UNIION_COLUMNS): Use GET_ITERATOR_COLUMNS_STRING. (type_columns, type_trash_columns): Build SELECT column string from column structure. Adjust return accordingly. (type_select_columns): New function. * src/manage.h: Adjust headers accordingly. * src/omp.c (omp_xml_handle_end_element): Free type_columns and type_trash_columns returns, because they are allocated now. 2014-07-07 Matthew Mundell * src/manage_sql.c (escalate_2): Use the value of alert method data 'verinice_server_report_format' to get the report format, if the method data is set. 2014-07-07 Hani Benhabiles * src/make_config_discovery.c (make_config_discovery): Add config type. * src/manage_config_host_discovery.c (make_config_host_discovery): Add config type. * src/manage_config_system_discovery.c (make_config_system_discovery): Add config type. * src/manage_sql.c (check_db_tasks): Add default scanner for the example task. 2014-07-04 Hani Benhabiles * src/omp.c (omp_xml_handle_end_element): In GET_TASKS, adjust scanner element values when task is of type container. 2014-07-03 Hani Benhabiles * src/ompd.c (serve_omp): In NVT cache mode, do not attempt to connect to the default scanner if already connected to another one. * src/openvasmd.c (main): Take into account --scanner-port and --scanner-host options when using --rebuild and --update. * doc/openvasmd.8, doc/openvasmd.html, doc/openvasmd.8.xml: Update documentation. 2014-07-02 Matthew Mundell * src/manage_migrators.c (migrate_128_to_129): Ensure table exists. 2014-07-02 Hani Benhabiles * src/omp.c (omp_xml_handle_end_element): In GET_TASKS, send the scanner type too. * src/manage_sql.c (modify_task_check_config_scanner): Handle unchanging config and scanner case. 2014-07-02 Henri Doreau * CMakeLists.txt, src/CMakeLists.txt: Properly handle libgcrypt compile switches. 2014-07-01 Matthew Mundell * src/manage_sqlite3.c (sql_tag): Correct doc. 2014-07-01 Matthew Mundell For Postgres add actual max_hosts implementation, and get next_time working. * src/manage_pg.c (manage_create_sql_functions): Implement max_hosts, as a C function. Remove STRICT from next_time. * src/manage_pg_server.c (sql_next_time): Correct name in PG_FUNCTION_INFO_V1. (textndup, sql_max_hosts): New function. * src/manage_utils.c (manage_count_hosts_FIX): New function. * src/manage_utils.h: Add header accordingly. 2014-06-30 Jan-Oliver Wagner * doc/postgres-HOWTO: Added item about library path for postgres. 2014-06-30 Hani Benhabiles * src/manage_sql.c (delete_scanner): Don't allow deleting a scanner in use. Update function documentation accordingly. (manage_delete_scanner): Handle new return code. * src/main.c (manage_delete_scanner): Handle new return code. 2014-06-30 Hani Benhabiles * src/manage_migrators.c (migrate_128_to_129): Use current sql instead of calling check_db_scanners() as the function may change in the future. 2014-06-27 Matthew Mundell * src/manage_sql.c (init_get_iterator): Remove extra_tables arg, which was always NULL. Update callers. 2014-06-27 Matthew Mundell * src/CMakeLists.txt: Add "openvasmd" to manage-pg-server destination. 2014-06-27 Matthew Mundell * doc/postgres-HOWTO: Add command to create uuid-ossp extension. 2014-06-27 Hani Benhabiles Set all tasks to have an associated scanner. Hence increase database version to 129. Add database migration from version 128 to 129. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 129. * src/manage_migrators.c (migrate_128_to_129): New function. (database_migrators): Add migrate_128_to_129. * src/manage_sql.c (check_db_scanners): Export function. (run_osp_task, run_task, stop_task_internal, pause_task) (resume_paused_task): Check that the task has an associated scanner. Adjust the functions accordingly. * src/manage.h: Add function prototype. 2014-06-27 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Update iso_time to get the required timezone according to the current user. In SQLite the user's timezone is the current timezone, but the Postgres functions run on the server so they always have the server's timezone. Use pspgsql instead of plain SQL to help with reusing values in the calcuation. 2014-06-27 Hani Benhabiles * src/manage_sql.c (create_task_check_config_scanner): New function. * src/manage.h: Add function prototype. * src/omp.c (omp_xml_handle_end_element): Make scanner mandatory in task creation and modification. 2014-06-26 Hani Benhabiles * src/manage_sql.c (manage_get_scanners): Print both the Scanner's UUID and its name. (manage_delete_scanner): Don't allow deletion of the default scanner. * doc/openvasmd.8, doc/openvasmd.8.xml, doc/openvasmd.html: Update documentation. 2014-06-26 Matthew Mundell * src/omp.c (buffer_notes_xml, buffer_overrides_xml): Send OWNER in both cases, else GSA assumes the note/override is global. 2014-06-25 Matthew Mundell Prevent any changes to the permissions of predefined roles. * src/manage_sql.c (find_permission, permission_subject_type) (permission_subject): New functions. (create_permission, copy_permission): Prevent creation of permissions that have predefined roles as subjects. (permission_is_predefined): Include permissions of predefined roles. (delete_permission, modify_permission): Prevent modification of permissions of predefined roles. (find_permission): Move up in file. (role_is_predefined_id): New function. 2014-06-25 Hani Benhabiles * src/manage.c (scanner_connect): Adequately return value for success or error. (run_task, stop_task_internal, pause_task, resume_paused_task): Use the default scanner when the task has no scanner associated. Check error codes accordingly. * src/openvasmd.c (main): Don't preemptively set the scanner's address and port. 2014-06-25 Timo Pollmeier Check if the last commands most likely failed due to a database lock and retry in this case. Make error messages for failed commands more consistent and replace sqlite3 calls with $SQLITE3 where it makes more sense. * tools/greenbone-certdata-sync (): Add -bail parameter to SQLITE3 variable. Add variables MAX_SQL_RERTRIES and SQL_RETRY_DELAY. (reset_sql_tries): New function. (test_exit_codes, test_sql_exit): Add checks for database lock and make error messages more consistent. (is_db_broken, reinit, db_migrate_4, update_cvss, update_cert_db): Add retry loops. * tools/greenbone-scapdata-sync (): Add -bail parameter to SQLITE3 variable. Add variables MAX_SQL_RERTRIES and SQL_RETRY_DELAY. (reset_sql_tries): New function. (test_exit_codes, test_sql_exit): Add checks for database lock and make error messages more consistent. (is_db_broken, reinit, db_migrate_9, db_migrate_10, db_migrate_11) (db_migrate_12, db_migrate_13, db_migrate_14, init_scap_db_update) (update_cvss, update_scap_db_private, update_scap_db): Add retry loops. Use $SQLITE3 instead of sqlite3 without extra parameters. * tools/openvas-certdata-sync.in (): Add -bail parameter to SQLITE3 variable. Add variables MAX_SQL_RERTRIES and SQL_RETRY_DELAY. (reset_sql_tries): New function. (test_exit_codes, test_sql_exit): Add checks for database lock and make error messages more consistent. (reinit, db_migrate_4, update_cvss, update_sec_db): Add retry loops. * tools/openvas-scapdata-sync.in (): Add -bail parameter to SQLITE3 variable. Add variables MAX_SQL_RERTRIES and SQL_RETRY_DELAY. (reset_sql_tries): New function. (test_exit_codes, test_sql_exit): Add checks for database lock and make error messages more consistent. (reinit, db_migrate_9, db_migrate_10, db_migrate_11, db_migrate_12) (db_migrate_13, db_migrate_14, update_sec_db_private) (update_sec_db): Add retry loops. Use $SQLITE3 instead of sqlite3 without extra parameters. 2014-06-25 Hani Benhabiles * src/manage_sql.c (check_db_scanners): New function. (check_db): Check or add default openvas scanner in db. (manage_scanner_set, manage_scanner_set_default): New functions. (verify_scanner): Verify openvas_scanner_set_address() return value for errors. * src/manage.h: Add functions prototypes. * src/manage_sql.h (SCANNER_UUID_DEFAULT): New define. * src/ompd.c (serve_omp): Connect to the default scanner in nvt cache mode. * src/openvasmd.c (update_or_rebuild_nvt_cache): Do not attempt to connect to the scanner. * src/scanner.c (openvas_scanner_set_address): Resolve the address if provided as a hostname. 2014-06-25 Matthew Mundell * src/manage_sql.c (create_user, modify_user): Validate the hosts arg. This catches errors like forgotten commas in the hosts, for example. * src/omp.c (omp_xml_handle_end_element): Handle new create_user and modify_user returns. 2014-06-24 Hani Benhabiles * src/manage.c (scanner_active): Remove redundant variable. (run_task): Don't set scanner_active value. * src/omp.c (scanner_is_active): Remove function. * src/omp.h: Delete removed functions prototypes. * src/openvasmd.c (serve_omp): Remove check for scanner with scanner_is_active() as connections aren't preemptive anymore. * src/otp.c (process_otp_scanner_input): Don't set scanner_active values. 2014-06-24 Hani Benhabiles * src/ompd.c (serve_omp): Adjust condition to call process_otp_scanner_input() and remove redundant call. Code clean-up and style update. * src/otp.c (process_otp_scanner_input): Remove knowledge about where the function was called from in serve_omp and make it more reentrant. * src/scanner.c (openvas_scanner_write): Return success if there is nothing to do for current init state. 2014-06-24 Matthew Mundell * src/omp.c (utf8_substring): New function. (buffer_notes_xml, buffer_overrides_xml): Use utf8_substring instead of g_utf8_substring, which only appears in Glib 2.30. 2014-06-24 Matthew Mundell * src/schema_formats/XML/OMP.xml (get_schedules): Add TIMEZONE_ABBREV. * doc/omp.html, doc/omp.rnc: Update from source. 2014-06-24 Matthew Mundell * src/report_formats/Verinice_ISM/generate: Correct XSL file name. 2014-06-24 Hani Benhabiles Add --delete-scanner option. * doc/openvasmd.8: Update documentation. * src/manage.h: Add function prototype. * src/manage_sql.c (manage_delete_scanner): New function. * src/openvasmd.c (main): Add --delete-scanner cli option. 2014-06-23 Hani Benhabiles * src/openvasmd.c (main): Add --create-scanner with --scanner-host, --scanner-port and --scanner-type options. * src/manage_sql.c (manage_create_scanner): New function. * src/manage.h: Add function prototype. * doc/openvasmd.8: Update documentation. 2014-06-23 Matthew Mundell Send timezone abbreviation with schedule in GET_SCHEDULES. * src/manage_sql.c (iso_time_internal): New function. Body from iso_time. (iso_time): Call iso_time_internal. (iso_time_tz): Add abbrev arg. * src/manage.h: Adjust header accordingly. * src/omp.c (omp_xml_handle_end_element): Add TIMEZONE_ABBREV to GET_SCHEDULES. 2014-06-23 Hani Benhabiles Remove --slisten and --sport options. Rename --list-users to --get-users. Add --get-scanners. * doc/openvasmd.8: Update documentation. * src/manage.h: Add and rename function prototypes. * src/manage_sql.c (manage_list_users): Rename to manage_get_users. (manage_get_scanners): New function. * src/openvasmd.c (main): Remove --slisten and --sport options. Rename --list-users to --get-users. Add --get-scanners options. (openvassd_port, scanner_address_string): Remove variables. (update_or_rebuild_nvt_cache): Remove scanner address and port arguments. (rebuild_nvt_cache_retry): Adjust update_or_rebuild_nvt_cache() call. 2014-06-23 Jan-Oliver Wagner * doc/postgres-HOWTO: Minor hint to avoid confusion. 2014-06-21 Jan-Oliver Wagner * src/CMakeLists.txt: Install the special library for pg. * doc/postgres-HOWTO: Adjusted so that no manual installation is necessary anymore. 2014-06-21 Jan-Oliver Wagner * CMakeLists.txt: Made variable BACKEND configurable. * doc/postgres-HOWTO: Adjusted so that PostgreSQL can be configured without need to change CMakeLists.txt. 2014-06-20 Hani Benhabiles * src/ompd.c (serve_omp): Never connect to scanner, let caller decide on this. Clean-up code and adjust return values. * src/openvasmd.c (update_or_rebuild_nvt_cache): Try to connect to scanner before serve_omp() call. Free scanner buffers after finish. 2014-06-20 Hani Benhabiles * src/scanner.c (openvas_scanner_full, openvas_scanner_close) (openvas_scanner_fd_isset, openvas_scanner_fd_set, openvas_scanner_peek) (openvas_scanner_get_nfds, openvas_scanner_session_peek) (openvas_scanner_connected, openvas_scanner_init) (openvas_scanner_set_address): Add functions documentation. (openvas_scanner_peek): Always return 1 on success. 2014-06-19 Hani Benhabiles * src/manage_sql.c (lsc_credential_packaged): Adjust to handle encrypted credentials case. Move function up in file. (modify_lsc_credential): Adjust lsc_credential_packaged() call. * src/manage.h: Remove useless prototype. 2014-06-19 Matthew Mundell * doc/postgres-HOWTO: New file. 2014-06-19 Hani Benhabiles * CMakeLists.txt: Check for libgcrypt presence at configure time. 2014-06-19 Hani Benhabiles Add per-task Scanner support. * src/manage.c (scanner_connect): New function. (run_task): Check earlier for config value error. Use task specific scanner if present to run the task. (stop_task_internal, pause_task, resume_paused_task): Use task specific scanner if present for the specified action. (stop_task): Check for task stopping support depending on config type. 2014-06-18 Matthew Mundell * src/manage_sql.c (add_users): Quote "user" for Postgres. 2014-06-18 Matthew Mundell * src/manage_sql.c (delete_group, manage_restore): Use the new group ID when moving the group-user relation to/from the trashcan, otherwise the users could be attached to the wrong group. 2014-06-18 Matthew Mundell * src/manage_sql.c (delete_report_format, delete_group) (delete_port_list, manage_restore, manage_empty_trashcan): Delete dependent resources first, at least to prevent constraint errors. 2014-06-18 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Remove ".so" from library name, because Postgres adds it. 2014-06-18 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): In iso_time use "FM" in strings to prevent leading spaces, add missing "+" before timezone and treat the timezone as minutes instead of hundreds. 2014-06-18 Matthew Mundell * doc/db_postgres.sql: Correct table name in group_users_trash REFERENCES. Add missing columns to targets_trash, report_formats_trash and tags_trash. Change port and type in scanners and scanners_trash to integers, because they're treated as integers. * doc/db.png: Update from source. 2014-06-18 Matthew Mundell * src/manage_pg.c (create_tables): Correct table name in group_users_trash REFERENCES. Add missing columns to targets_trash, report_formats_trash and tags_trash. Change port and type in scanners and scanners_trash to integers, because they're treated as integers. 2014-06-18 Matthew Mundell * src/sql_pg.c (sql_column_int, sql_column_int64): If the column is boolean, convert to int. 2014-06-18 Hani Benhabiles * src/manage_sql.c (scanner_type): New function. (modify_task_check_config_scanner): Adjust to handle openvas non-default scanners. * src/manage.h: Add function prototype. * src/omp.c (omp_xml_handle_end_element): Adjust checking for scanner and config types matching in CREATE_TASK. 2014-06-18 Hani Benhabiles * src/openvasmd.c (main), src/manage_sql.c (verify_scanner): Keep port value in host order. * src/scanner.c (openvas_scanner_set_address): Set port value in network order. 2014-06-18 Hani Benhabiles * src/ompd.c (serve_omp): Only try to initialize scanner connection when in nvt cache mode. * src/scanner.c (openvas_scanner_init): Free internal buffers before returning error. 2014-06-18 Matthew Mundell * src/manage_pg.c (create_tables): Correct column name and add missing ssh_port column to targets_trash. * doc/db_postgres.sql (targets, targets_trash): Correct name, add column. * doc/db.png: Update from source. 2014-06-18 Matthew Mundell * src/manage_sql.c (copy_port_list): Quote an "end" missed earlier, for Postgres. 2014-06-18 Matthew Mundell * src/manage_sql.c (init_setting_iterator): Use sql_select_limit to get the LIMIT arg, for Postgres. 2014-06-18 Matthew Mundell * src/manage_pg.c (create_tables): Remove explicit references that are optional in targets, for now. 2014-06-18 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Update function list. (create_tables): Remove unique constraint from uuid in settings because they are only unique per user at the moment. 2014-06-18 Hani Benhabiles * src/manage.h (scanner_type_t): Add SCANNER_TYPE_OPENVAS. * src/manage_sql.c (verify_scanner): Handle OpenVAS Scanner type verification. 2014-06-18 Hani Benhabiles * src/ompd.c (serve_omp): Fix scanner sessions preemptive connections after scan starting. Fix memory leaks. * src/scanner.c (openvas_scanner_reconnect): Remove function. (openvas_scanner_free): New function. * src/scanner.h: Add and remove function prototypes. 2014-06-18 Hani Benhabiles * src/ompd.c (session_clean): New function. (serve_omp): Free the client session buffers without closing it as it may still be in use by the parent process. 2014-06-17 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Correct schema name in table check. 2014-06-17 Matthew Mundell Add Postgres SQL functions "severity_in_level" and "severity_to_level". * src/manage_pg.c (manage_session_init): New function. Creates temporary table for storing session info. Automatically removed at end of session. (manage_create_sql_functions): Add "severity_in_level" and "severity_to_level". (create_tables): Add current_credentials so that the table exists when functions that refer to it are created. The temporary tables will be used instead. * src/manage_sql.h (manage_session_init): New header. * src/manage_sql.c (authenticate): Call session init to store user uuid. * src/manage_sqlite3.c (manage_session_init): New function. Dummy. 2014-06-17 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Only create function resource_name if the tables exist, because it uses tables. Add pl/pgsql function "uniquify". 2014-06-17 Matthew Mundell * src/manage_sql.c (copy_task): Remove another use of tasks column time. (delete_task): Delete task after resources that refer to task. 2014-06-17 Matthew Mundell * src/manage_sql.c (delete_port_range, port_list_is_predefined): Quote UUIDs with single quote in SQL, for consistency and Postgres. 2014-06-17 Matthew Mundell * src/manage_sql.c (PORT_LIST_ITERATOR_COLUMNS) (PORT_LIST_ITERATOR_TRASH_COLUMNS): Quote end in SQL for Postgres. 2014-06-17 Matthew Mundell Handle integer columns in Postgres sql_column_text. * src/sql_pg.c (struct sql_stmt): Add store. (sql_stmt_store): New function. (sql_finalize, sql_reset): Free store. (sql_column_text): Correct return in doc. If the column is actually an int then convert it to a string, to match SQLite behaviour. Store the return in the sql_stmt_t, so that it is freed with the statement. (sql_column_int, sql_column_int64): Correct return in doc. 2014-06-17 Hani Benhabiles * src/manage_sql.c (make_result): Check for the provided NVT's presence in the DB. Fix function documentation. (report_add_result): Add function parameters values check. 2014-06-17 Matthew Mundell Remove last use of tasks column "time". * src/manage_sql.c (make_task): Remove time argument, column is not used. Update caller. * src/manage.h: Update header accordingly. * src/manage_sqlite3.c (create_tables): Add note about time column. * src/omp.c (omp_xml_handle_start_element): Update make_task call. 2014-06-17 Matthew Mundell * src/manage_sql.c (manage_port_name, setting_severity) (setting_dynamic_severity): Use Postgres friendly syntax for LIMIT. Also consistent with rest of code. 2014-06-17 Matthew Mundell * src/sql_pg.c (sql_column_double, sql_column_text, sql_column_int) (sql_column_int64): Add NULL checks. 2014-06-17 Matthew Mundell Add server side Postgres function "resource_name". Move some functions to new file manage_utils.c to make linking the Postgres shared library easier. * CMakeLists.txt: Improve regex used to hack PostgreSQL_INCLUDE_DIRS. Use pg_config to setup POSTGRESQL_SERVER_CFLAGS. * src/CMakeLists.txt: Add shared library manage-pg-server, for server side functions. Add manage_utils.c. * src/manage_pg.c (manage_create_sql_functions): Create server side "resource_name". * src/manage_pg_server.c: New file. Postgres server side functions. * src/manage_utils.c, src/manage_utils.h: New files. Self-contained manage functions. * src/manage.c (next_time): Remove. Now in manage_utils.c. * src/manage.h: Remove header accordingly. * src/manage_sql.c (MONTHS_WITHIN_YEAR, months_between) (add_months): Remove. Now in manage_utils.c. * src/manage_sql.h: Update headers accordingly. * src/manage_sqlite3.c: Include manage_utils.h. 2014-06-16 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Add resource_name. 2014-06-16 Matthew Mundell * src/manage_acl.h (USER_MAY): Make the column a comparison so that the result is boolean. Use id instead of ROWID. Quote with " instead of `. Quote user too. All for Postgres. * src/manage_sql.c (init_port_range_iterator): Quote end, and cast integer terms to boolean, for Postgres. 2014-06-16 Hani Benhabiles * src/scanner.c (openvas_scanner_write): Don't send CERTIFICATES and GO ON otp commands as they are ignored by the scanner. 2014-06-16 Matthew Mundell * src/sql_pg.c (log_notice): New function. (sql_open): Divert NOTICE messages to log. 2014-06-16 Matthew Mundell * src/manage_pg.c (create_tables): Add qod to results. * doc/db_postgres.sql (results): Add qod. * doc/db.png: Update from source. 2014-06-16 Hani Benhabiles * src/ompd.c (scanner_address): Remove variable. * src/openvasmd.c: Include scanner.h. Use new openvas_scanner_set_address() call instead of directly accessing scanner_address variable. * src/scanner.c (openvas_scanner_address): New variable. (openvas_scanner_write): Use new variable instead of scanner_address. (openvas_scanner_set_address): New function. * src/scanner.h: Add new function prototype. 2014-06-13 Hani Benhabiles Remove preemptive Scanner connecting. Connect only on NVT cache update or task starting, resuming, pausing and stopping. * src/manage.c (run_task, stop_task_internal, pause_task) (resume_paused_task): Try to initialize a connection with the scanner when not connected already. * src/ompd.c (serve_omp): Connect only in nvt cache update. Call openvas_scanner_init() accordingly and adjust loop for scan handler forked process. * src/scanner.c (openvas_scanner_connect): Call init_otp_data(). (openvas_scanner_init): Handle openvas_scanner_write() returning an error value. 2014-06-13 Hani Benhabiles * src/ompd.c (serve_omp): Refactor code. Remove redundant check for scanner being dead. 2014-06-12 Matthew Mundell Add Quality of Detection storage to results. Hence increase database version to 128. Add database migration from version 127 to 128. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 128. * src/manage_migrators.c (migrate_127_to_128): New function. (database_migrators): Add migrate_127_to_128. * src/manage_sql.c (check_db_tasks): Init example result QOD. (make_result): Set QOD of result, according to remote_banner_unreliable tag. (create_report): Init result QODs. * src/manage_sqlite3.c (create_tables): Add qod to results. * doc/db.png: Update for version change. 2014-06-12 Hani Benhabiles * src/ompd.c (FD_CLIENT_READ, FD_CLIENT_WRITE, FD_SCANNER_READ) (FD_SCANNER_READ, FD_SCANNER_WRITE): Remove constants. (serve_omp): Replace redundant constants usage with adequate fd_set checks. 2014-06-11 Matthew Mundell Separate init for command options like --create-user into new function, otherwise these options affect active tasks. * src/manage_sql.c (manage_encrypt_all_credentials): Init with init_manage_helper, to ensure the database is up to date. (init_manage_process): Improve doc slightly. (init_manage_internal): New function. Body from init_manage. Add summary of init cases and stop_tasks arg. (init_manage): Call init_manage_internal. (init_manage_helper): New function. (manage_create_user, manage_delete_user, manage_list_users) (manage_set_password): Call init_manage_helper instead of init_manage, which stops active tasks. * src/manage.h: Update headers accordingly. * src/openvasmd.c (main): Handle new returns from encrypt and decrypt functions. 2014-06-11 Hani Benhabiles * src/manage.c (scanner_up): Remove variable. (run_task, stop_task_internal, pause_task, resume_paused_task): Use openvas_scanner_connected() instead of directly checking scanner_up value. * src/manage.h: Remove variable declaration. * src/omp.c (scanner_is_up): Remove function. * src/ompd.c (serve_omp): Remove scanner_up and scanner_is_up() usage and use openvas_scanner_connected() accordingly. * src/scanner.c (openvas_scanner_read, openvas_scanner_write) (openvas_scanner_wait, openvas_scanner_close, openvas_scanner_fd_isset) (openvas_scanner_fd_set, openvas_scanner_peek) (openvas_scanner_session_peek): Add checks for when the scanner isn't connected. (openvas_scanner_connected, openvas_scanner_init): New functions. * src/scanner.h: Add new functions prototypes. 2014-06-10 Matthew Mundell * doc/proto_postgres.sql: Remove. Old prototype. 2014-06-10 Matthew Mundell * src/schema_formats/XML/OMP.xml (create_config): Remove leftover RCFILE element and example. (create_task): Remove description of RCFILE option. * doc/omp.html, doc/omp.rnc: Update from source. 2014-06-10 Hani Benhabiles * src/otp.h: Fix build on opensuse due to missing argument in process_otp_scanner_input() prototype. 2014-06-10 Hani Benhabiles * src/scanner.h: Fix openvas_scanner_write() prototype. 2014-06-10 Hani Benhabiles * src/scanner.c, src/scanner.h: New files. (openvas_scanner_write): Add argument for nvt cache mode. (openvas_scanner_buf_filled): New function. * src/ompd.c: Move openvas_scanner and related variables to scanner.c. Include scanner.h (serve_omp): Adjust for new and modified functions usage. * src/CMakeLists.txt: Add scanner.c to build process. 2014-06-10 Matthew Mundell Add support for multiple "To" addresses in Alerts. * src/manage_sql.c (validate_email): Make static. (validate_email_list): New function. (create_alert, modify_alert): Validate "to_address" as list. 2014-06-09 Matthew Mundell Make report form "Verinice ISM" predefined. * src/manage_sql.c (check_db_report_formats) (format_predefined): Add Verinice ISM. * CMakeLists.txt: Install Verinice ISM. 2014-06-09 Matthew Mundell * src/report_formats/Verinice_ISM/create_report_import: Remove. * src/report_formats/Verinice_ISM/gsm_verinice_ism.xsl: Remove. Now Verinice_ISM.xsl. * src/report_formats/Verinice_ISM/Verinice_ISM.xsl: New file. Was gsm_verinice_ism.xsl. 2014-06-09 Matthew Mundell * report_formats/verinice-ism: Remove. Now in src/report_formats. * src/report_formats/Verinice_ISM: New directory. Was report_formats/verinice-ism. 2014-06-09 Matthew Mundell Use new resource UUID when copying permissions in copy_task. Hence increase database version to 127. Add database migration from version 126 to 127. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 127. * src/manage_migrators.c (migrate_126_to_127): New function. (database_migrators): Add migrate_126_to_127. * src/manage_sql.c (copy_task): Use UUID of new task instead of old task when copying permissions. * doc/db.png: Update for version change. 2014-06-09 Hani Benhabiles * src/ompd.c (openvas_scanner_wait, serve_omp): Remove handling of unused out-of-band data. 2014-06-09 Hani Benhabiles * src/ompd.c (openvas_scanner_fd_isset, openvas_scanner_fd_set) (openvas_scanner_peek, openvas_scanner_nfds_from_socket) (openvas_scanner_session_peek): New functions. (serve_omp): Use new functions instead of directly accessing the openvas_scanner variables. Don't check scanner socket for out-of-band data as none is sent by the scanner. 2014-06-06 Hani Benhabiles * src/ompd.c (read_from_server): Rename to openvas_scanner_read. Adjust to use shared current scanner connection variables. (recreate_session): Remove function. (openvas_scanner_close): Add return code for success or error. (openvas_scanner_reconnect): New function. (serve_omp): Use openvas_scanner helper functions where possible instead of accessing the connection variables directly. Adjust to call new and renamed functions. 2014-06-06 Hani Benhabiles * src/ompd.c (openvas_scanner_session, openvas_scanner_socket) (openvas_scanner_credentials): New variables for the currently connected to scanner. (write_to_scanner): Rename to openvas_scanner_write. Adjust for using new scanner variables. (wait_for_connection): Rename to openvas_scanner_wait. Adjust for using new scanner variables. (openvas_scanner_close): New function. (openvas_scanner_connect): Use new variables. (serve_omp): Adjust modified functions calls and use new variables accordingly. 2014-06-05 Matthew Mundell * src/manage_pg.c (create_tables): Add missing tags columns. * doc/db_postgres.sql (tags): Add missing tags columns. * doc/db.png: Update from source. 2014-06-05 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Check if permissions table exists before trying to create user_can_everything, which requires the table. 2014-06-05 Matthew Mundell Add group_concat to Postgres. * src/manage_pg.c (manage_create_sql_functions): Add aggregate "group_concat". * src/manage_sql.c (group_users, role_users) (USER_ITERATOR_COLUMNS): Group by name, because Posgres requires a GROUP BY clause for any table column used in an aggregate in the SELECT columns. 2014-06-05 Matthew Mundell * src/manage_sql.c (filter_clause, prognosis_order_by) (init_result_iterator): Remove conversion to lowercase in ORDER BY, for now, because Postgres does not allow named SELECT columns in expressions in ORDER BY. 2014-06-05 Hani Benhabiles * src/ompd.c: Add include. Fixes build on some environments. * src/openvasmd.c: Remove unused include. 2014-06-05 Hani Benhabiles * src/ompd.c (load_cas): New function. Moved from openvasmd.c (openvas_scanner_connect): New function. (serve_omp): Remove scanner_session, scanner_credentials and scanner_socket_addr function parameters. Create scanner session by calling openvas_scanner_connect() and adjust accordingly. * src/openvasmd.c (serve_client, update_or_rebuild_nvt_cache): Update for serve_omp() call change. 2014-06-04 Matthew Mundell * src/manage_acl.c (where_owned): Use "t ()" instead of 1 in SQL, to support both backends. 2014-06-04 Matthew Mundell * src/manage_sql.c (count): Use a subselect to prevent having regular columns alongside the "count" aggregate in the result columns, for Postgres. 2014-06-04 Matthew Mundell Use function for LIMIT arg in SQL, to cater for both backend syntaxes. * src/manage_sql.c (init_get_iterator): Use sql_select_limit to provide LIMIT arg. * src/sql_sqlite3.c, src/sql_pg.c (sql_select_limit): New function. * src/sql.h: Add header accordingly. 2014-06-04 Matthew Mundell * src/manage_sql.c (setting_count, init_setting_iterator): Use = instead of == in SQL, for Postgres. 2014-06-04 Matthew Mundell * src/manage_acl.c, src/manage_sql.c: Quote Postgres reserved words in SQL. 2014-06-04 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Add dummies for task_severity, task_threat_level and task_trend. Add run_status_name and user_can_everything. 2014-06-04 Matthew Mundell Add missing Postgres tables and columns. * src/manage_pg.c (create_tables): Add missing fields to schedules. Add scanners and scanners_trash. Move scanner up in tasks. * doc/db_postgres.sql (tasks): Move scanner up. (schedules, schedules_trash): Add missing fields. * doc/db.png: Update from source. 2014-06-04 Hani Benhabiles * src/manage.h: Add function prototype. * src/omp.c (omp_xml_handle_end_element): Send config type value in CLIENT_GET_TASKS case. 2014-06-02 Matthew Mundell * src/manage_pg.c (create_tables): Use bigint for the type_min and type_max columns, because they may contain LLONG_MAX and LLONG_MIN. 2014-06-02 Matthew Mundell Remove use of the "parse_time" SQL function, except in the SQLite3 migrators. * src/manage_sql.c (tag_value, parse_time): New functions. Bodies from manage_sqlite3.c. (make_nvt_from_nvti): Extract and parse date tags in C instead of via SQL functions. * src/manage_sqlite3.c (sql_parse_time, sql_tag): Call new manage_sql.c functions to do the work. 2014-06-02 Matthew Mundell * src/manage_sql.c (manage_nvt_preferences_enable): Correct name. 2014-06-02 Matthew Mundell Get truth with a dedicated SQL function. * src/manage_sql.c (init_get_iterator): Use "t ()" to get truth value, because SQLite3 uses 1 and Postgres uses "true". * src/manage_sqlite3.c (sql_t): New function. (manage_create_sql_functions): Create "t". * src/manage_pg.c (manage_create_sql_functions): Create "t". 2014-06-02 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Add "tag". 2014-06-02 Matthew Mundell * src/manage_sql.c (set_nvts_feed_version) (manage_nvt_preferences_enable): DELETE then INSERT instead of using INSERT OR REPLACE, for Postgres. 2014-06-02 Matthew Mundell Adjust SQL slightly for Postgres compatibility. * src/manage_sql.c (filter_clause): Use "lower" instead of COLLATE NOCASE. (cleanup_tables, prognosis_order_by): Quote "user" in SQL, for Postgres. (task_severity, init_asset_iterator, report_scan_result_count) (report_severity_data, filtered_host_count, note_count) (init_note_iterator, override_count, init_override_iterator): Use single instead of double quotes in SQL. (report_add_result): Remove "OR IGNORE" because the previous statement checks if the row exists. Quote "user". Use single quotes. (init_result_iterator): Use single quotes. Use "lower" instead of COLLATE NOCASE. 2014-06-02 Hani Benhabiles Fix errors found when building with Clang 3.4 * src/manage_sql.c (alive_test_from_string): Change return value to int as -1 is returned on error. (create_target, modify_target): Adjust variable type for alive_test_from_string() change. * src/omp.c (omp_xml_handle_end_element): Fix variables use before initialization error. 2014-06-02 Matthew Mundell * src/manage_pg.c (create_tables): Correct column name in targets. Remove explicit references that are optional in tasks, for now. 2014-06-02 Matthew Mundell * src/manage_sql.c (manage_user_set_role, report_add_result) (report_add_result, report_scan_result_count, report_counts_cache_exists) (report_counts_from_cache, cache_report_counts, copy_user, delete_user) (delete_user, modify_user, modify_user, trash_user_writable) (init_user_group_iterator, init_user_role_iterator): Quote "user" in SQL because it is reserved in Postgres. 2014-06-02 Hani Benhabiles * src/manage.c (modify_task_check_config_scanner): New function. * src/manage.h: Add function prototypes. * src/omp.c (omp_xml_handle_end_element): In MODIFY_TASK case, check that the specified config's type matches the scanner set for the task. 2014-05-30 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Add make_uuid. 2014-05-30 Matthew Mundell Quote keyword "end" in SQL, for Postgres. * src/manage_migrators.c (MIGRATE_55_TO_56_RANGE) (migrate_55_to_56): Quote keyword "end" in SQL. * src/manage_ranges_all_tcp_nmap_5_51_top_100.c, src/manage_ranges_all_tcp_nmap_5_51_top_1000.c, src/manage_ranges_iana_tcp_2012.c, src/manage_ranges_iana_tcp_udp_2012.c, src/manage_ranges_nmap_5_51_top_2000_top_100.c (RANGE): Quote keyword "end" in SQL. * src/manage_migrators.c (RANGE, check_db_port_lists) (create_port_list_lock, copy_port_list, create_port_range) (delete_port_list, manage_restore): Quote keyword "end" in SQL. 2014-05-30 Hani Benhabiles * src/manage_sql.c (set_task_hosts_ordering, set_task_parameter): Quote strings before insertion. 2014-05-30 Hani Benhabiles * src/manage.c (task_scanner_options): Encode OSP file options before storing them. 2014-05-30 Matthew Mundell * src/manage_sql.c (check_db_port_lists, report_severity) (create_schedule, modify_schedule): Replace "now" with "m_now" in SQL. * src/manage_migrators.c (migrate_104_to_105): Replace "now" with "m_now" in SQL. 2014-05-30 Matthew Mundell Remove explicit control of the IDs of the Full and * configs, because this interferes with the autoincrement of the ID in Postgres. All other configs specify only the UUID anyway. * src/manage_sql.c (check_db_configs): Let database insert IDs. (config_in_use): Check all by UUID. * src/manage_migrators.c (CONFIG_ID_FULL_AND_FAST) (CONFIG_ID_FULL_AND_FAST_ULTIMATE, CONFIG_ID_FULL_AND_VERY_DEEP) (CONFIG_ID_FULL_AND_VERY_DEEP_ULTIMATE): Remove. Now in manage_migrators.c. * src/manage_migrators.c (CONFIG_ID_FULL_AND_FAST) (CONFIG_ID_FULL_AND_FAST_ULTIMATE, CONFIG_ID_FULL_AND_VERY_DEEP) (CONFIG_ID_FULL_AND_VERY_DEEP_ULTIMATE): New defines. From manage_sql.h. Old IDs used only here. 2014-05-30 Jan-Oliver Wagner * tools/greenbone-certdata-sync, tools/greenbone-scapdata-sync: Fix URL of feed home. 2014-05-29 Matthew Mundell * src/manage_sql.c: Neaten line ends in defines. 2014-05-29 Matthew Mundell Rename SQL function "now" to "m_now" to avoid conflict with Postgres "now". Add Postgres "m_now". * src/manage_pg.c (manage_create_sql_functions): Neaten "iso_time". Add "m_now". * src/manage_sqlite3.c (manage_create_sql_functions): Rename "now" to "m_now". * src/manage_config_discovery.c, src/manage_config_host_discovery.c, src/manage_config_system_discovery.c, src/manage_migrators.c, src/manage_sql.c: Use "m_now" instead of "now" in SQL. 2014-05-29 Matthew Mundell * src/manage_pg.c (manage_create_sql_functions): Add iso_time. (create_tables): Switch dates to integers because dates are treated as seconds since the epoch. 2014-05-29 Matthew Mundell * src/manage_sql.c (nvt_selector_family_count): Use "IS NOT NULL" like everywhere else. 2014-05-29 Matthew Mundell Hide a REINDEX from Postgres for now. * src/manage_sql.c (refresh_nvt_cves): Hide REINDEX. * src/sql_pg.c, src/sql_sqlite3.c (sql_is_sqlite3): New function. * src/sql.h: Add header accordingly. 2014-05-29 Matthew Mundell Add new function for inserting and retrieving row ID in one call. * src/sql_pg.c, src/sql_sqlite3.c (sqli): New function. * src/sql.h: Add header accordingly. * src/sql.c (sqlv, sql_x): Remove static as these are now used in the backends. * src/manage_sql.c (check_db_configs): Insert with sqli in order to get ID of inserted row, because sql_last_insert_row seems gets the ID of a previous row. 2014-05-29 Matthew Mundell * src/manage_config_discovery.c, src/manage_config_host_discovery.c, src/manage_config_system_discovery.c, src/manage_migrators.c, src/manage_ranges_all_tcp_nmap_5_51_top_1000.c, src/manage_ranges_all_tcp_nmap_5_51_top_100.c, src/manage_ranges_iana_tcp_2012.c, src/manage_ranges_iana_tcp_udp_2012.c, src/manage_ranges_nmap_5_51_top_2000_top_100.c: Start transactions via SQL interface. 2014-05-29 Hani Benhabiles * src/manage_sql.c (make_config_osp_ovaldi): name definitions preference as definitions_file. (config_in_use): Check OSP Ovaldi config too. * src/omp.c (omp_xml_handle_end_element): Adjust GET_CONFIGS when sending OSP config preferences for osp_file type. 2014-05-29 Matthew Mundell * src/sql_pg.c (bind_param): Correct doc. (sql_column_int, sql_column_int64): Remove breaks for consistency. 2014-05-29 Matthew Mundell Create transactions via SQL interface. * src/sql_sqlite3.c, src/sql_pg.c (sql_begin_exclusive) (sql_begin_exclusive_giveup, sql_begin_immediate): New functions. * src/sql.h: Add headers accordingly. * src/manage_sql.c: Use sql_begin_* instead of calling BEGIN directly. 2014-05-28 Matthew Mundell Add Postgres SQL layer and table creation. * CMakeLists.txt: Add BACKEND variable which controls whether SQLite3 or PostgreSQL is compiled. * src/CMakeLists.txt: Set compile and link options according to BACKEND. * src/sql_sqlite3.c (task_db): Initialise so that sql_is_open always works. (sql_schema): New function. * src/sql.h: Add header accordingly. * src/manage_migrators.c (migrate_75_to_76): Use sql_schema to get main schema. * src/manage_sql.c (create_tables): Remove. Now in manage_sqlite3.c. (set_db_version): DELETE then INSERT to avoid OR REPLACE. Use sql_schema. (manage_db_version, manage_update_nvti_cache, check_db_versions) (check_db_nvts, nvts_feed_version, set_nvts_feed_version) (manage_nvt_preferences_enable): Use sql_schema. (check_db): Add progress call removed from create_tables. * src/manage_sqlite.c (create_tables): New function. From manage_sql.c. Remove progress call. * src/manage_pg.c, src/sql_pg.c: New files. * doc/db_postgres.sql: Format like SQL in C code. Replace booleans with integers. Add missing ID columns. * doc/db.png: Update from source. 2014-05-27 Jan-Oliver Wagner * src/manage_sql.c (modify_setting): Added Chinese as allowed value for interface language. 2014-05-27 Matthew Mundell * src/sql_sqlite3.c (sql_prepare_internal): Set stmt even in sqlite3_prepare error return case, to match previous behaviour. (sql_finalize): Add NULL check before sqlite3_finalize, in case the caller's prepare timed out in sql_prepare_internal. 2014-05-27 Timo Pollmeier Add new OMP command GET_AGGREGATES. * src/manage_sql.c (init_aggregate_iterator, aggregate_iterator_count) (aggregate_iterator_min, aggregate_iterator_max) (aggregate_iterator_mean, aggregate_iterator_sum) (aggregate_iterator_value, type_columns, type_filter_columns) (type_trash_columns): New functions. * src/manage.h (init_aggregate_iterator, aggregate_iterator_count) (aggregate_iterator_min, aggregate_iterator_max) (aggregate_iterator_mean, aggregate_iterator_sum) (aggregate_iterator_value, type_columns, type_filter_columns) (type_trash_columns): New function prototypes. * src/omp.c (get_aggregates_data_t): New typedef. (get_aggregates_data_reset): New function. (command_data_t): Add get_aggregates. (get_aggregates_data): New variable for GET_AGGREGATES callback data. (client_state_t): Add CLIENT_GET_AGGREGATES. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add cases for GET_AGGREGATES command. * src/schema_formats/XML/OMP.xml (get_aggregates): New command. * doc/omp.html, doc/omp.rnc: Update from source. 2014-05-26 Matthew Mundell * src/manage_acl.c, src/manage_config_discovery.c, src/manage_config_host_discovery.c, src/manage_config_system_discovery.c, src/manage_migrators.c, src/manage_sql.c: In SQL use "id" instead of SQLite3 specific "ROWID". 2014-05-26 Hani Benhabiles * src/manage.c (run_task, stop_task, pause_task): Don't try to resume, stop or pause task if using an OSP scanner. (omp_xml_handle_end_element): Handle new return values for run_task(), stop_task() and pause_task(). 2014-05-23 Hani Benhabiles * src/manage.c (parse_osp_report): Parse the OSP scan report's results and insert them accordingly.. (fork_osp_scan_handler): Adjust log message. Set the task and report states adequately. Set retry limits when waiting for scan to finish. 2014-05-22 Hani Benhabiles Further OSP scans handling improvmnets. * src/manage.c (parse_osp_report, fork_osp_scan_handler): New functions. (run_osp_task): (threat_message_type, message_type_threat): Handle Error Message case. * src/manage_sql.c (collate_message_type): Handle Error Message case. (set_scan_start_time_epoch, set_scan_end_time_epoch): New functions. * src/manage.h: Add functions prototypes. 2014-05-22 Matthew Mundell Use numbers instead of names to specify bind locations in SQL. * src/manage_migrators.c (migrate_19_to_20): Use number instead of name in SQL. * src/manage_sql.c (init_prognosis_iterator, report_severity_data) (create_agent): Use numbers instead of names in SQL. 2014-05-22 Matthew Mundell Remove description from tasks table. Hence increase database version to 126. Add database migration from version 125 to 126. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 126. * src/manage_migrators.c (migrate_125_to_126): New function. (database_migrators): Add migrate_125_to_126. * src/manage_sql.c (create_tables): Remove description from tasks. * doc/db.png: Update for version change. 2014-05-21 Hani Benhabiles * src/manage_ql.c (create_port_list): Don't specify port_list value in resource_with_name_exists() call. 2014-05-21 Hani Benhabiles * src/manage.c (severity_matches_type, rc_preference): Remove unused functions. * src/manage_sql.c (tag_iterator_resource): Remove unused function. * src/manage.h: Remove unused functions prototypes. 2014-05-21 Matthew Mundell Remove openvasrc file support from OMP. * src/omp.c (create_config_data_t, create_config_data_reset) (get_tasks_data_t, modify_task_data_t, modify_task_data_reset): Remove rcfile handling. (client_state_t): Remove RCFILE entries. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Remove "rcfile" attribute from GET_TASKS. Remove RCFILE from MODIFY_TASK, CREATE_CONFIG and CREATE_TASK. Remove RCFILE from GET_TASKS response. * src/manage_sql.c (task_description, set_task_description) (make_task_rcfile, add_task_description_line, set_target_hosts) (config_preference, clude, insert_rc_into_config, create_config_rc) (nvt_selector_nvts_growing): Remove. Out of use. (set_task_parameter): Remove "RCFILE" parameter. * src/manage.h: Remove headers accordingly. * src/schema_formats/XML/OMP.xml (create_config, create_task, get_tasks) (modify_task): Remove RC elements and attributes. Add CHANGEs accordingly. * doc/omp.html, doc/omp.rnc: Update from source. 2014-05-21 Hani Benhabiles * src/manage_sql.c (make_task_rcfile): Don't create the rcfile for tasks using a different scanner as it is not used. * src/omp.c (omp_xml_handle_end_element): In CREATE_TASK, check that specified config and scanner types for the task match. * src/manage.h: Add function prototype. 2014-05-21 Matthew Mundell Make sql_stmt_t opaque, to remove last of SQLite from SQL interface. * src/sql.h: Remove SQLite include. (sql_stmt_t): Use opaque type. * src/sql_sqlite3.c (struct sql_stmt): New struct. (sql_prepare_internal): Allocate and setup new struct. (sql_exec_internal, iterator_null, iterator_column_name) (iterator_column_count, sql_bind_blob, sql_bind_int64, sql_bind_double) (sql_bind_text, sql_finalize, sql_reset, sql_column_double) (sql_column_text, sql_column_int, sql_column_int64): Get statement from struct. * src/manage_sqlite3.c: Include sqlite3.h. 2014-05-20 Hani Benhabiles * src/omp.c (omp_xml_handle_end_element): In MODIFY_TASK, set scanner to default value, if provided scanner id value is 0. 2014-05-21 Matthew Mundell * src/manage_sql.c (report_severity_data): Format SQL better. 2014-05-21 Matthew Mundell * ChangeLog: Remove extra entry introduced 2014-03-14 in r18988. 2014-05-21 Matthew Mundell Remove task_db from SQL interface. * src/sql.h (task_db): Remove. No longer used in interface. (sql_is_open, sql_close_fork): New functions. * src/sql.c (sql_is_open, sql_close_fork): New functions. * src/manage_sql.c (init_manage_process, cleanup_manage_process) (manage_cleanup_process_error): Use new interface functions instead of accessing task_db directly. * src/manage_sqlite3.c (task_db): New header. Was in sql.h. 2014-05-20 Matthew Mundell * doc/db_postgres.sql: Make all id columns of type SERIAL. * doc/db.png: Update from source. 2014-05-20 Matthew Mundell Move SQLite specific code in the SQL library to a separate file. * src/sql.c (DB_CHUNK_SIZE, task_db, sql_open, sql_close, sql_changes) (sql_last_insert_rowid, sql_prepare_internal, sql_exec_internal) (iterator_null, iterator_column_name, iterator_column_count) (sql_bind_blob, sql_bind_int64, sql_bind_double, sql_bind_text) (sql_finalize, sql_reset, sql_column_double, sql_column_text) (sql_column_int, sql_column_int64): Remove. Now in sql_sqlite3.c. Add headers for internal functions. * src/sql_sqlite3.c: New file. * src/CMakeLists.txt: Add sql_sqlite3.c. 2014-05-20 Matthew Mundell Isolate SQLite calls in SQL library: sqlite3_column_int and sqlite3_column_int64. * src/sql.c (sql_int, sql_int64, iterator_int, iterator_int64): Use new functions. (sql_column_int, sql_column_int64): New functions. * src/sql.h: Add headers accordingly. 2014-05-20 Hani Benhabiles * src/manage_sql.c (manage_set_config_families): Don't set families for OSP configs as they are not used. 2014-05-20 Hani Benhabiles * src/manage_sql.c (config_type, config_iterator_type): New functions. (copy_config, update_config_cache): Adjust for config type. (CONFIG_ITERATOR_COLUMNS, CONFIG_ITERATOR_TRASH_COLUMNS): Add type column. * src/manage.h: Add function prototype. * src/omp.c (omp_xml_handle_end_element): Adjust GET_CONFIGS case to send config type value. Adjust accordingly. 2014-05-20 Matthew Mundell * src/sql.c (sql, sql_error, sql_giveup): Remove error warning, because the internal functions have the same warning. 2014-05-20 Matthew Mundell Isolate SQLite calls in SQL library: sqlite3_step. * src/sql.c (sql_exec_internal): New function. Based on sql_exec. (sqlv, sql_quiet, sql_x_internal, next, sql_exec): Use sql_exec_internal instead of doing the sqlite3_exec by hand. 2014-05-20 Matthew Mundell * src/manage_sql.c (authenticate): Move comment into block it applies to. * src/sql.c (init_iterator): Use sql_stmt_t instead of sqlite3_stmt. 2014-05-20 Hani Benhabiles * src/manage_sql.c (copy_config): Copy config type column too. 2014-05-20 Hani Benhabiles * src/manage_sql.c (make_config_osp_ovaldi, check_db_configs) (create_config, create_config_rc, delete_config, manage_restore): Insert value for config type column. 2014-05-20 Hani Benhabiles * src/manage.c (task_scanner_options): Get options from the task's config preferences. * src/manage.h: Add function prototypes. * src/manage_sql.c (make_config_osp_ovaldi): New function. (check_db_configs): Check for osp ovaldi default config. (init_preference_iterator, preference_iterator_name) (preference_iterator_value): Export functions. * src/manage_sql.h (CONFIG_UUID_OSP_OVALDI): New config UUID value. 2014-05-19 Matthew Mundell * src/manage_sql.c (create_lsc_credential): Remove extra argument that corresponded to public key before 2014-05-06. 2014-05-19 Matthew Mundell Isolate SQLite calls in SQL library: sqlite3_prepare. * src/sql.c (sql_prepare_internal): New function. Based on sql_prepare. (sqlv, sql_quiet, sql_x_internal, init_iterator, sql_prepare): Use sql_prepare_internal instead of doing the sqlite3_prepare by hand. (sql_x, sql_x_quiet, sql_double, sql_int, sql_string, sql_string_quiet) (sql_int64): Use sql_stmt_t instead of sqlite3_stmt. 2014-05-19 Matthew Mundell Move collation and SQL function creation into new SQLite specific file, because these use many "manage" functions. * src/CMakeLists.txt: Add manage_sqlite3.c. * src/manage_sqlite3.c: New file. Code from sql.c. * src/manage_sql.c (init_manage_process): Adjust name of functions. * src/manage_migrators.c (migrate_51_to_52): Adjust name of function. * src/sql.c: Remove all functions that setup collation and SQL functions. Now in manage_sqlite3.c. Some are generic, but some call functions that are part of manage_sql.c, and it's easier to group them together. * src/sql.h: Update headers accordingly. 2014-05-19 Matthew Mundell * src/sql.c: Use sql_finalize, sql_column_double and sql_column_text in more places. 2014-05-19 Matthew Mundell Use sql_stmt_t in more places. * src/sql.h (sql_stmt_t): Move up in file. (iterator_t): Use sql_stmt_t. * src/sql.c (sql_prepare): Move into Prepared statements section. Change return type to sql_stmt_t. (init_prepared_iterator): Match arg to header. 2014-05-19 Matthew Mundell Move resource_t and iterator_t to SQL library. * src/sql.h: Remove manage.h include because this sould be a plain SQL interface. (resource_t, iterator_t): New type. Were in manage.h. * src/manage.h: Include sql.h for resource_t and iterator_t. Remove sqlite3.h now that all SQLite code is in sql.c. (resource_t, iterator_t): Remove. Now in sql.h because they are part of the SQL interface. * src/sql.c: Include manage.h which was being included in sql.h, because there are still manager calls in here. 2014-05-19 Hani Benhabiles * src/manage.c (task_scanner_options, run_osp_task): New functions. (run_task): Call run_osp_task() if task has a scanner specified. * src/manage_sql.c (scanner_host, scanner_port): New functions. * src/manage.h: Add functions prototypes. * src/omp.c (omp_xml_handle_end_element): Handle run_task() returning -1 value. * src/openvasmd.c (scanner_port): Change variable name to openvassd_port. 2014-05-19 Matthew Mundell * src/sql.h (sql_make_uuid, sql_hosts_contains, sql_clean_hosts) (sql_uniquify, sql_iso_time, sql_parse_time, sql_next_time, sql_now) (sql_tag, sql_max_hosts, sql_common_cve, sql_current_offset) (sql_report_progress, sql_report_severity, sql_report_severity_count) (sql_task_severity, sql_severity_matches_ov, sql_severity_to_level) (sql_severity_to_type, sql_task_trend, sql_threat_level, sql_regexp) (sql_run_status_name, sql_resource_name, sql_resource_exists) (sql_severity_in_level, sql_user_can_everything): Remove. Now used in sql.c only. (sql_prepare): Move to Prepared statements. (init_prepared_iterator): Use sql_stmt_t. 2014-05-19 Matthew Mundell * src/manage_sql.c: Remove SQLite include because all SQLite code is in SQL library now. 2014-05-19 Matthew Mundell Move SQLite calls into SQL library: migrator SQL function creation. * src/sql.c (migrate_51_to_52_sql_convert): New function. From manage_migrators.c. (sql_create_migrate_51_to_52_convert): New function. * src/sql.h: Add header accordingly. * src/manage_migrators.c (migrate_51_to_52_convert): Remove. Now in sql.c. (migrate_51_to_52): Let SQL lib create "convert". 2014-05-19 Matthew Mundell Move SQLite calls into SQL library: sql_column_double and sql_column_text. * src/sql.c (sql_column_double, sql_column_text): New functions. * src/sql.h: Add headers accordingly. * src/manage_sql.c (report_severity_data): Replace sqlite3_column_double and sqlite3_column_text with sql_column_double and sql_column_text. 2014-05-19 Matthew Mundell Move SQLite calls into SQL library: sqlite3_clear_bindings. * src/sql.c (sql_reset): Clear bindings before reset. This was only done before one of the sql_reset callers, but is safe to do always. * src/manage_sql.c (init_prognosis_iterator): Remove sqlite3_clear_bindings. Now done in sql_reset. 2014-05-19 Matthew Mundell Move SQLite calls into SQL library: sqlite3_reset. * src/sql.c (sql_reset): New function. * src/sql.h: Add header accordingly. * src/manage_sql.c: Replace sqlite3_reset with sql_reset. 2014-05-16 Matthew Mundell Move SQLite specifics into SQL library: sqlite3_stmt. * src/sql.c: Use sql_stmt_t instead of sqlite3_stmt in interface functions. * src/sql.h: Update headers accordingly. (sql_stmt_t): New type. * src/manage_sql.c, src/manage_migrators.c: Replace sqlite3_stmt with sql_stmt_t. 2014-05-16 Matthew Mundell Move SQLite calls into SQL library: sqlite3_finalize. * src/sql.c (sql_finalize): New function. * src/sql.h: Add header accordingly. * src/manage_sql.c, src/manage_migrators.c: Replace sqlite3_finalize with sql_finalize. 2014-05-16 Matthew Mundell Move SQLite calls into SQL library: sqlite3_step. * src/sql.c (sql_exec): New function. * src/sql.h: Add header accordingly. * src/manage_sql.c, src/manage_migrators.c: Replace sqlite3_step with sql_exec. 2014-05-16 Matthew Mundell Move SQLite calls into SQL library: sqlite3_bind_*. * src/sql.c (sql_bind_blob, sql_bind_int64, sql_bind_double) (sql_bind_text): New functions. * src/sql.h: Add headers accordingly. * src/manage_sql.c, src/manage_migrators.c: Replace sqlite3_bind_text, sqlite3_bind_int64, sqlite3_bind_double and sqlite3_bind_blob with sql_bind_text, sql_bind_int64, sql_bind_double and sql_bind_blob. 2014-05-16 Timo Pollmeier In SCAP and CERT sync, ensure timestamps are based on the UTC timezone and make the cut-off times for updates more precise by using the UNIX epoch format and use stricter conditions. * tools/cpe_youngerthan.xsl, tools/cve_youngerthan.xsl: Use EXSLT conversion to seconds since UNIX epoch for comparison with refdate. * tools/dfn_cert_update.xsl: Use EXSLT conversion to seconds since UNIX epoch for comparison with refdate and for the SQL inserts. * tools/oval_update.xsl: Use EXSLT conversion to seconds since UNIX epoch for the SQL inserts. * tools/greenbone-certdata-sync (update_cert_db): Use UNIX timestamp format for refdates. Files with dates equal to the reference are now considered old. Account for missing seconds in timestamp file in comparisons. Force UTC timezone when writing last_update. * tools/greenbone-scapdata-sync (init_scap_db_update) (update_scap_db_private, update_scap_db): Same as above sync script. * tools/openvas-certdata-sync.in (update_sec_db): Same as above. * tools/openvas-scapdata-sync.in (init_sec_db_update) (update_sec_db_private, update_sec_db): Same as above. 2014-05-16 Matthew Mundell Move SQLite calls into SQL library: sqlite3_prepare. * src/sql.c (sql_prepare): Return instead of aborting, so that the caller can rollback if required. * src/manage_migrators.c (migrate_19_to_20): Replace sqlite3_prepare call with sql_prepare. * src/manage_sql.c (init_prognosis_iterator): Handle new sql_prepare return. (report_severity_data, clude, create_agent): Replace sqlite3_prepare call with sql_prepare. 2014-05-16 Matthew Mundell * src/manage_sql.c (sql_nquote): Revert r18716 from 2014-02-06 which did not correctly handle the length argument, causing memory access past the end of the existing string in certain cases. 2014-05-15 Matthew Mundell * src/manage_sql.c (next_report): Call "next" instead of doing the same sqlite3 calls manually. 2014-05-15 Matthew Mundell Move SQLite calls into SQL library: sqlite3_column_type. * src/sql.c (iterator_null): New function. * src/sql.h: Add header accordingly. * src/manage_sql.c: Replace sqlite3_column_type calls with iterator_null. 2014-05-15 Hani Benhabiles * src/manage_sql.c (create_target, manage_set_config_name) (manage_set_config_name_comment, create_schedule, create_port_list) (modify_port_list, modify_role, create_filter, modify_filter): Call resource_with_name_exists() accordingly. 2014-05-14 Hani Benhabiles * src/manage_sql.c (create_target, modify_target, modify_lsc_credential) (create_scanner, modify_scanner, modify_schedule, create_report_format) (create_slave, modify_slave, create_group, modify_group) (create_port_list_unique, create_port_list, create_role, create_user): Refactor code. Call resource_with_name_exists() accordingly. 2014-05-14 Matthew Mundell * src/manage_sql.c (reinit_manage_process): Make database comment generic. 2014-05-14 Matthew Mundell Move SQLite calls into SQL library: sqlite3_create_function. * src/sql.c (sql_create_functions): New function. * src/sql.h: Add header accordingly. * src/manage_sql.c: Replace sqlite3_create_function calls with one sql_create_functions. 2014-05-14 Matthew Mundell * src/manage_sql.c (task_iterator_scanner): Use iterator_int64 instead of sqlite3_column_int64. 2014-05-14 Timo Pollmeier Test exit codes of sqlite and xsltproc in SCAP and CERT sync scripts and abort with an error message if it is non-zero and exit the script on interrupt signal instead of just aborting the current command. * tools/greenbone-certdata-sync (set_interrupt_trap, handle_interrupt) (test_exit_codes, test_sql_exit): New functions. (reinit, db_migrate_4, update_cvss, update_cert_db): Add exit code checks and interrupt trap. * tools/greenbone-scapdata-sync (set_interrupt_trap, handle_interrupt) (test_exit_codes, test_sql_exit): New functions. (reinit, db_migrate_9, db_migrate_10, db_migrate_11, db_migrate_12) (db_migrate_13, db_migrate_14, init_scap_db_update, update_cvss) (update_scap_db_private, update_scap_db): Add exit code checks and interrupt traps. * tools/openvas-certdata-sync.in (set_interrupt_trap, handle_interrupt) (test_exit_codes, test_sql_exit): New functions. (reinit, db_migrate_4, update_cvss, update_sec_db): Add exit code checks and interrupt trap. * tools/openvas-scapdata-sync.in (set_interrupt_trap, handle_interrupt) (test_exit_codes, test_sql_exit): New functions. (reinit, db_migrate_9, db_migrate_10, db_migrate_11, db_migrate_12) (db_migrate_13, db_migrate_14, init_sec_db_update, update_cvss) (update_sec_db_private, update_sec_db): Add exit code checks and interrupt traps. 2014-05-14 Hani Benhabiles Add tasks scanner and configs type. Hence increase database version to 125. Add database migration from version 124 to 125. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 125. * src/manage_migrators.c (migrate_124_to_125): New function. (database_migrators): Add migrate_124_to_125. * doc/db_postgres.sql, doc/db.png: Update documentation for new table columns. * src/manage_sql.c (create_tables): Add scanner column for tasks. Add type column for configs and configs_trash. (TASK_ITERATOR_COLUMNS, TASK_ITERATOR_TRASH_COLUMNS): Iterate over scanner column. (task_iterator_scanner, task_scanner, set_task_scanner, find_scanner) (scanner_name): New functions. (copy_task): Adjust for new column. (scanner_in_use): Check if a task is using the scanner. * src/manage.h: Add function prototypes accordingly. * src/omp.c (create_task_data_t, create_task_data_reset) (modify_task_data_t, modify_task_data_reset): Add scanner_id element. (client_state_t): Add CLIENT_CREATE_TASK_SCANNER and CLIENT_MODIFY_TASK_SCANNER states. (omp_xml_handle_start_element, omp_xml_handle_end_element): Adjust GET_TASKS, CREATE_TASK and MODIFY_TASK for adding task scanner element. 2014-05-14 Matthew Mundell * src/manage_sql.c (permission_is_predefined, delete_port_range) (port_list_is_predefined): Remove overlooked sql_int cell arguments. 2014-05-14 Matthew Mundell Move SQLite calls into SQL library: sqlite3_create_collation. * src/sql.c (sql_create_collations): New function. * src/sql.h: Add headers accordingly. * src/manage_sql.c: Replace sqlite3_create_collation calls with one sql_create_collations. 2014-05-14 Matthew Mundell Move SQLite calls into SQL library: sqlite3_open and sqlite3_close. * src/sql.c (DB_CHUNK_SIZE): New define. From manage_sql.c (sql_open, sql_close): New functions. * src/sql.h: Add headers accordingly. * src/manage_sql.c: Replace sqlite3_open and sqlite3_close with sql_open and sql_close. (DB_CHUNK_SIZE): Remove. Now in sql.c. 2014-05-13 Matthew Mundell Move SQLite calls into SQL library: sqlite3_column_int. * src/sql.c (iterator_int): New function. * src/sql.h: Add header accordingly. * src/manage_sql.c: Replace sqlite3_column_int with iterator_int. 2014-05-13 Matthew Mundell * src/manage_sql.c: Replace overlooked cases of sqlite3_column_text with iterator_string. 2014-05-13 Matthew Mundell Move SQLite calls into SQL library: sqlite3_column_double. * src/sql.c (iterator_double): New function. * src/sql.h: Add header accordingly. * src/manage_sql.c: Replace sqlite3_column_double with iterator_double. 2014-05-13 Matthew Mundell Move SQLite calls into SQL library: sqlite3_column_text. * src/manage_migrators.c, src/manage_sql.c: Call iterator_string instead of sqlite3_column_text. 2014-05-13 Matthew Mundell Move SQLite calls into SQL library: sqlite3_column_int64. * src/manage_sql.c: Call iterator_int64 instead of sqlite3_column_int64. 2014-05-13 Matthew Mundell Move SQLite calls into SQL library: sqlite3_changes. * src/sql.c (sql_changes): New function. * src/sql.h: Add header accordingly. * src/manage_migrators.c, src/manage_sql.c: Replace sqlite3_changes with sql_changes. 2014-05-13 Hani Benhabiles Reduce the amount of extra SQL queries when getting tasks. * src/manage_sql.c (TASK_ITERATOR_COLUMNS, TASK_ITERATOR_TRASH_COLUMNS): Select uuid instead of date for last report. Remove unused selected column. Select the number of finished reports and hosts ordering. (task_iterator_run_status_name, task_iterator_last_report) (task_iterator_finished_reports, task_iterator_hosts_ordering): New function. (task_current_report): Rename to task_iterator_current_report. Take iterator as argument. (task_last_report_id): Remove function. (task_iterator_trend_counts): Call new function. * src/omp.c (omp_xml_handle_end_element): Call new functions accordingly in GET_TASKS case. Code style update. * src/manage.h: Add and remove functions prototypes accordingly. 2014-05-13 Matthew Mundell Move SQLite calls into SQL library: sqlite3_last_insert_rowid. * src/sql.c (sql_last_insert_rowid): New function. * src/sql.h: Add header accordingly. * src/manage_config_host_discovery.c, src/manage_sql.c, src/manage_config_system_discovery.c, src/manage_migrators.c: Replace sqlite3_last_insert_rowid with sql_last_insert_rowid. 2014-05-12 Hani Benhabiles Some Task iterator related optimizations. * src/manage_sql.c (TASK_ITERATOR_COLUMNS, TASK_ITERATOR_TRASH_COLUMNS): Count total as all tasks reports. Select uuid instead of date for first column, to be used by task_iterator_first_report(). Remove duplicate selection of last column. (task_iterator_total_reports, task_iterator_first_report): New functions. (task_report_count): Delete function. (task_trend_counts): Rename task_iterator_trend_counts. Take task iterator as argument, instead of task ROWID. * src/manage.h: Add, adjust and remove functions prototypes accordingly. * src/omp.c (omp_xml_handle_end_element): Adjust GET_TASKS case to use new functions accordingly. 2014-05-12 Matthew Mundell Remove cell args from internal SQL functions. * src/sql.c (sql_x_internal, sql_x, sql_x_quiet): Remove col and row args. Update callers. * src/sql.h (sql_x): Remove. Internal to the SQL "library". 2014-05-12 Matthew Mundell Remove cell args from sql_int. * src/sql.c (sql_int): Remove col and row args. Update caller. * src/sql.h: Update headers accordingly. * src/manage.c, src/manage_acl.c, src/manage_config_host_discovery.c, src/manage_migrators.c, src/manage_sql.c: Update callers. 2014-05-12 Matthew Mundell Remove cell args from sql_string. * src/sql.c (sql_string): Remove col and row args. * src/sql.h: Update headers accordingly. * src/manage.c, src/manage_migrators.c, src/manage_sql.c: Update callers. 2014-05-12 Matthew Mundell * src/manage_sql.c (task_second_last_report_id): Use SQL OFFSET to pick row instead of sql_string args. 2014-05-12 Matthew Mundell Remove cell args from sql_int64. * src/sql.c (sql_int64): Remove col and row args. * src/sql.h: Update headers accordingly. * src/manage_migrators.c, src/manage_acl.c, src/manage_sql.c: Update callers. 2014-05-12 Matthew Mundell * src/manage_sql.c (task_second_last_report) (host_nthlast_report_host): Use SQL OFFSET to pick row instead of sql_int64 args. 2014-05-09 Matthew Mundell Remove cell args from sql_double and sql_string_quiet. * src/sql.c (sql_double, sql_string_quiet): Remove col and row args. * src/sql.h: Update headers accordingly. * src/manage_sql.c: Update callers. 2014-05-09 Matthew Mundell * src/manage_sql.c (report_format_content_type, report_format_in_use) (trash_report_format_in_use): Neaten doc comments and SQL. 2014-05-09 Matthew Mundell * src/manage_sql.c (delete_report_format): Check if the report format is in use. (trash_report_format_in_use): Select from the trash table because only trash alerts should refer to trash report formats. Select original_uuid instead of uuid for report format, because that's what the alerts refer to. 2014-05-09 Matthew Mundell * src/manage_sql.c (resource_with_name_exists): Rename resource_id param to resource, because _id params are usually UUIDs. Expect 0 instead of -1 to indicate "no resource", like most other places do. Update callers accordingly. 2014-05-09 Matthew Mundell * src/lsc_user.c, src/manage_sql.c, src/omp.c, src/openvasmd.c, src/otp.c: Use ** to start Doxygen top-level comments. 2014-05-09 Matthew Mundell * src/manage_sql.c (init_manage): Add comment full stop. (manage_restore): Correct order of warning args. * src/manage_migrators.c (migrate_122_to_123): Neaten comment. (migrate_123_to_124): Remove extra space. 2014-05-09 Matthew Mundell Prevent duplicate report format UUIDs. Ensure all are unique at startup. * src/manage_sql.c (make_report_format_uuids_unique): New function. (check_db_report_formats): Call make_report_format_uuids_unique. Adjust return. (check_db): Check for check_db_report_formats return. (create_report_format): Prevent any report formats from having the same UUIDs, regardless of who owns the report format. (manage_restore): Also check if a report format with the candidate UUID exists in the regular table. * src/omp.c (omp_xml_handle_end_element): Handle new manage_restore return. 2014-05-08 Hani Benhabiles * src/manage_sql.c (resource_with_name_exists): Add resource_id, to handle case of ignoring a specific resource. (copy_resource_lock, create_alert, create_config, create_config_rc) (create_lsc_credential, create_agent, modify_agent, modify_alert): Update modified function calls accordingly. 2014-05-08 Hani Benhabiles * src/manage_sql.c (resource_with_name_exists): New function. (copy_resource_lock, create_alert, create_config, create_config_rc) (create_lsc_credential, create_agent, modify_agent, modify_alert): Use new function. Code style update. 2014-05-08 Timo Pollmeier Remove group and role assignments of deleted users at startup and when deleting users. * src/manage_sql.c (cleanup_tables): New function. (init_manage): Remove group and role assignments of deleted users. (delete_user): Delete user from groups and roles. 2014-05-08 Hani Benhabiles * src/manage_sql.c (init_manage_process): Don't create unused sqlite severity_matches_type() function. (check_db_tasks, check_db_targets, check_db_port_lists) (check_db_settings, check_db_nvts, check_db_configs) (check_db_report_formats, check_db_report_formats_trash) (check_db_permissions, check_db_roles): New functions. (check_db): Move data check routines to related new functions. (ensure_predefined_port_lists_exist): Rename to check_db_port_lists. (init_manage_settings): Rename to check_db_settings. * src/sql.c (sql_severity_matches_type): Delete unused function. * src/manage.h, src/sql.h: Remove deleted functions prototypes. 2014-05-07 Matthew Mundell * src/manage_sql.c (check_db): Clean Topology report format indenting. 2014-05-07 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In CLIENT_DELETE_USER include paused tasks in error message. 2014-05-07 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Increase OMP version. 2014-05-07 Matthew Mundell * src/manage_migrators.c (migrate_116_to_117, migrate_120_to_121): Clean comments and indenting. 2014-05-07 Matthew Mundell * src/schema_formats/XML/OMP.xml (version): Increase. (create_lsc_credential): Add compatibility change about removing KEY/PUBLIC. * doc/omp.html, doc/omp.rnc: Update from source. 2014-05-07 Hani Benhabiles * src/manage_migrators.c (migrate_120_to_121, migrate_121_to_122): Remove all permissions for User, Info and Observer roles which means that they will be re-inserted on next startup along with help permisions. * src/manage_sql.c (check_db): Apply same verification for Observer and Info roles' permissions as for User. See revision 19385. 2014-05-07 Hani Benhabiles * src/manage_sql.c (check_db): When checking permissions for User role, verify that there are more than one permission. This covers a path covering migrations from old users on disk case + DB migration to version >=122. 2014-05-06 Hani Benhabiles Finish removal of public_key column from lsc_credentials table. Hence increase database version to 124. Add database migration from version 123 to 124. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 124. * src/manage_migrators.c (migrate_123_to_124): New function. (database_migrators): Add migrate_123_to_124. * src/manage.c (slave_setup): Adjust omp_create_lsc_credential_key() call. * doc/db_postgres.sql, doc/db.png: Update documentation for table column removal. * src/schema_formats/XML/OMP.xml, doc/omp.html, doc/omp.rnc: Update documentation for public_key element removal in create_lsc_credential command. 2014-05-06 Hani Benhabiles Remove Public Key requirement for LSC Credentials. * src/manage.h: Adjust function prototype accordingly. * src/manage_sql.c (create_tables): Remove public_key column from lsc_credentials and lsc_credentials_trash tables. (create_lsc_credential): Don't insert a public key and remove matching function argument. (copy_lsc_credential): Don't copy the public key. (delete_lsc_credential): Don't move the public key to trash. (LSC_CREDENTIAL_ITERATOR_COLUMNS) (LSC_CREDENTIAL_ITERATOR_TRASH_COLUMNS): Don't iterate over public key. (lsc_credential_packaged): Adjust to check for private key presence instead. (lsc_credential_iterator_pass_or_priv): Adjust iterated over column number (manage_restore): Don't restore public_key value. (create_lsc_credential_data, create_lsc_credential_data_reset): Remove key_public element. (client_state_t): Remove CLIENT_CREATE_LSC_CREDENTIAL_KEY_PUBLIC state. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Adjust for create_lsc_credential public element removal. 2014-05-06 Matthew Mundell * INSTALL: Move "Creating an administrator" section below Initialise and Migrate sections, because --create-user needs an initialised db that is at the current version. 2014-05-06 Timo Pollmeier * src/omp.c (): Add #include of openvas/base/pwpolicy.h (omp_xml_handle_end_element): In case CLIENT_AUTHENTICATE check if the password used complies with password policy and add a warning message to the response if not. 2014-05-06 Matthew Mundell * src/manage_sql.c (delete_user): Skip current_credentials check if user is NULL, which is the case with --delete-user. 2014-05-06 Matthew Mundell For the command options, like --create-user, check the db version. * src/manage_sql.c (manage_create_user, manage_delete_user) (manage_list_user, manage_set_password): Do full init, which checks db version. * src/manage.h: Add headers accordingly. * src/openvasmd.c (main): Handle new returns. 2014-05-06 Hani Benhabiles * src/manage.c (slave_setup): Check credential type by checking for private key value. Adjust omp_create_lsc_credential_key call. (run_task): Don't send public key value to scanner. * src/manage.h: Remove deleted function prototype. * src/manage_sql.c (lsc_credential_iterator_public_key): Remove function. (lsc_credential_iterator_rpm, lsc_credential_iterator_deb): Adjust to get public key value from private key. * omp/omp.c (omp_xml_handle_end_element): Get the public key value from the private key in GET_LSC_CREDENTIALS case. 2014-05-05 Matthew Mundell Set the start time of a report once only, the first time the scan is started. This ensures that the start time remains the same, even when the task is resumed, because the start time is what identifies the scan. * src/manage_sql.c (set_task_start_time_epoch) (scan_start_time_epoch): New functions. * src/manage.h: Add headers accordingly. * src/manage.c (run_task): Only do a reset_task when creating a new report. When resuming an old report set the task start time from the report. Move the target_hosts call above the fork, so that it still exits before the reset_task on error. * src/otp.c (process_otp_scanner_input): When receiving a SCAN_START, only set the start start times for new reports, leaving the start times alone when resuming a task. 2014-05-05 Matthew Mundell * src/manage_migrators.c (manage_migrate): Reopen DB before ANALYZE, in case the schema has changed. 2014-04-30 Michael Wiegand * tools/greenbone-scapdata-sync, tools/greenbone-certdata-sync: Do not exit early if synchronization is disabled. Instead, note the fact in the log and behave as if REFRESH_ONLY was requested, thus still remaining useful for local operations. 2014-04-30 Michael Wiegand * tools/greenbone-scapdata-sync, tools/greenbone-certdata-sync: Streamline handling of REFRESH_ONLY to consistently only operate on local data and exclude network communication. 2014-04-30 Matthew Mundell * src/manage_sql.c (init_manage): Init current_credentials with memset, so that all fields are cleared. (authenticate): Set timezone in credentials. 2014-04-30 Hani Benhabiles * src/manage_sql.c (manage_restore): Restore scanner object when found. (manage_empty_trashcan): Empty trash scanners. 2014-04-29 Matthew Mundell * src/ompd.c (wait_for_connection): New function. (serve_omp): When the scanner connection is interrupted, wait for the scanner socket to be writable, instead of immediately calling get_sockopt via write_to_scanner. 2014-04-29 Hani Benhabiles * src/manage.c (severity_matches_type): Fix comparison against static string instead of the actual type variable. 2014-04-29 Hani Benhabiles * src/manage_sql.c (modify_scanner): Allow modifying the host, port and type values. (create_scanner): SQL quote provided host value. * src/omp.c (modify_scanner_data_t): Add host, port and type elements. (modify_scanner_data_reset): Free new elements. (client_state_t): Add new modify scanner states. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Adjust for modify_scanner changes to handle host, port and type value modifying. 2014-04-28 Michael Wiegand Post branch version bump. * CMakeLists.txt: Updated version to 6.0+beta1. 2014-04-28 Hani Benhabiles Cleanup of miscllaneous unused functions and code refactoring. * src/manage.c (slave_setup): Use generic get_iterator_resource function. * src/manage.h: Remove deleted functions prototypes. * src/manage_sql.c (alert_iterator_alert, alert_iterator_uuid, (alert_iterator_name, alert_iterator_comment, target_iterator_target) (target_iterator_uuid, target_iterator_name, target_iterator_comment) (config_iterator_config, config_iterator_uuid, config_iterator_name) (config_iterator_comment) (lsc_credential_iterator_lsc_credential, lsc_credential_iterator_uuid) (lsc_credential_iterator_name, lsc_credential_iterator_comment) (agent_iterator_uuid, agent_iterator_name, agent_iterator_comment) (schedule_iterator_schedule, schedule_iterator_uuid) (schedule_iterator_name, schedule_iterator_comment) (report_format_iterator_report_format, report_format_iterator_uuid) (report_format_iterator_name, slave_iterator_slave, slave_iterator_uuid) (slave_iterator_name, slave_iterator_comment) (port_list_iterator_port_list, port_list_iterator_uuid, (port_list_iterator_name, port_list_iterator_comment): Remove functions. (manage_report, manage_send_report, update_config_cache) (manage_complete_nvt_cache_update, verify_report_format_internal) (omp_xml_handle_end_element): Use generic get_iterator_* functions accordingly. 2014-04-28 Hani Benhabiles Add create_scanner, get_scanners, modify_scanner, delete_scanner and verify_scanner OMP commands. * src/manage.h: Add new functions prototypes. (scanner_type_t): New enum. (scanner_t): New type. * src/manage_sql.c (omp_commands): Add create_scanner, delete_scanner, get_scanners, modify_scanner and verify_scanner commands. (create_tables): Create scanners and scanners_trash tables. (find_scanner_with_permission, create_scanner, copy_scanner) (modify_scanner, delete_scanner, init_scanner_iterator) (scanner_iterator_host, scanner_iterator_port, scanner_iterator_type, (scanner_in_use, trash_scanner_in_use, scanner_writable) (trash_scanner_writable, scanner_uuid, scanner_count, verify_scanner): New functions. (SCANNER_ITERATOR_FILTER_COLUMNS, SCANNER_ITERATOR_COLUMNS) (SCANNER_ITERATOR_TRASH_COLUMNS): New defines. * src/omp.c (create_scanner_data_t, delete_scanner_data_t) (get_scanners_data_t, modify_scanner_data_t, verify_scanner_data_t): New structs. (create_scanner_data_reset, delete_scanner_data_reset) (get_scanners_data_reset, modify_scanner_data_reset) (verify_scanner_data_reset): New functions. (command_data_t): Add elements for new commands. (create_scanner_data, delete_scanner_data, get_scanners_data) (modify_scanner_data, verify_scanner_data): New variables. (client_state_t): Add states for new scanners commands. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Handle new omp commands accordingly. 2014-04-25 Matthew Mundell * src/otp.c (blank_control_chars): New function. (parse_scanner_preference_value): Blank control chars in the OTP messages, as was done before r18496. r18496 was the switch to UTF-8 OTP. Encoded control characters are valid in XML 1.1, but we use 1.0 and libxslt only supports 1.0. 2014-04-23 Jan-Oliver Wagner Post release version bump. * CMakeLists.txt: Updated version number to 5.0.1. 2014-04-23 Jan-Oliver Wagner * CMakeLists.txt: Now really set to 5.0.0. 2014-04-23 Jan-Oliver Wagner Preparing the openvas-manager 5.0.0 release. * CHANGES: Updated. * CMakeLists.txt: Update to 5.0.0. 2014-04-23 Jan-Oliver Wagner * INSTALL: Adjust requirements. * src/openvasmd.c (main): Adjust copyright year. 2014-04-23 Matthew Mundell * TODO: Remove entry about memory leaks, which is ongoing. 2014-04-22 Hani Benhabiles * src/manage.c (scanner): Remove variable. * src/manage.h (scanner_t): Remove struct. (scanner): Remove extern variable. * src/otp.h (plugins_feed_version): New static variable. (init_otp_data, process_otp_scanner_input): Adjust to use new static variable instead of extern scanner struct's element. 2014-04-22 Timo Pollmeier Add alive_test column to targets_trash table which was missing in new databases but not ones migrated from versions before 111. Hence increase database version to 123. Add database migration from version 122 to 123. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 123. * src/manage_migrators.c (migrate_122_to_123): New function. (database_migrators): Add migrate_122_to_123. * src/manage_sql.c (create_tables): Add alive_test to targets_trash table. 2014-04-17 Matthew Mundell Bring database doc up to date. * doc/db_postgres.sql (groups, groups_trash, group_users) (group_users_trash, roles, roles_trash, role_users, role_users_trash) (port_names, nvt_cves, permissions, permissions_trash, tags) (tags_trash): New tables. (task_users): Remove. (users, task_preferences, results, reports, report_counts, notes) (overrides, overrides_trash): Update columns. * doc/db.png: Update from source. 2014-04-17 Matthew Mundell Add HELP permission check. Give User and Info roles HELP permission. Hence increase database version to 122. Add database migration from version 121 to 122. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 122. * src/manage_migrators.c (migrate_121_to_122): New function. (database_migrators): Add migrate_121_to_122. * src/manage_sql.c (check_db): Add HELP permission to User and Info. * src/omp.c (omp_xml_handle_end_element): Add permission check for HELP. * doc/db.png: Update for version change. 2014-04-16 Matthew Mundell Give the Observer role AUTHENTICATE permission. Hence increase database version to 121. Add database migration from version 120 to 121. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 121. * src/manage_migrators.c (migrate_120_to_121): New function. (database_migrators): Add migrate_120_to_121. * src/manage_sql.c (check_db): Give Observer AUTHENTICATE permission. * doc/db.png: Update for version change. 2014-04-16 Matthew Mundell Only allow users to AUTHENTICATE if they have permission. * src/manage_sql.c (authenticate): Add permission check. * src/omp.c (omp_xml_handle_end_element): Add permission return case to CLIENT_AUTHENTICATE. 2014-04-16 Matthew Mundell Add new role Info. * src/manage_sql.h (ROLE_UUID_INFO): New define. * src/manage_sql.c (check_db, role_is_predefined): Add new role and permissions. 2014-04-16 Matthew Mundell * CMakeLists.txt: Raise version in libopenvas dependency, for auth.conf path change. 2014-04-16 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Add openvasmd to auth.conf path. 2014-04-16 Benot Allard * CMakeLists.txt: Install openvas-lsc-rpm-creator.sh * tools/openvas-lsc-rpm-creator.sh: Moved from openvas-libraries here. 2014-04-15 Matthew Mundell * README: Update usage. 2014-04-15 Matthew Mundell * src/lsc_crypt.c, src/manage_acl.c, src/manage.c, src/manage_config_discovery.c, src/manage_config_host_discovery.c, src/manage_config_system_discovery.c, src/manage_sql.c, src/omp.c, src/otp.c: Sort out Doxygen warnings. 2014-04-15 Hani Benhabiles * CMakeLists.txt, src/CMakeLists.txt: Remove useless linking against libuuid. * INSTALL: Remove libuuid dependency. * src/manage.c: Remove uuid include. 2014-04-15 Matthew Mundell * src/schema_formats/XML/OMP.xml: Add compatibility change about renaming filter type "report" to "result". (create_user, modifyuser): Allow multiple roles, identified by UUID. Add compatibility change about UUID. (get_users): Correct ROLE in example. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-14 Matthew Mundell * src/schema_formats/XML/OMP.xml: Replace "number" with "integer" as type, because "integer" is an existing type. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-14 Matthew Mundell Remove all traces of old GET_USERS attributes. * src/omp.c (get_users_data_t, get_users_data_reset): Remove name and sort_order. (omp_xml_handle_start_element): Remove GET_USERS attributes. * src/schema_formats/XML/OMP.xml: Add compatibility change for GET_USERS. (get_users): Remove name attribute. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-14 Matthew Mundell * src/schema_formats/XML/OMP.xml: Ensure all relevant GET commands have filter attributes. (get_users): Add other missing attributes too. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-14 Matthew Mundell * src/schema_formats/XML/OMP.xml: Remove sort_field and sort_order attributes from all relevant GET responses. Add compatibility change for 4.0 about these attributes. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-14 Matthew Mundell * src/schema_formats/XML/OMP.xml: Ensure all relevant GET responses include FILTERS, SORT and the count elements like TARGETS and TARGET_COUNT. Ensure that these FILTERS all include KEYWORDS. (get_info): Remove extra FILTERS. (get_settings): Match to code. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-11 Matthew Mundell * src/schema_formats/XML/OMP.xml: Ensure all relevant GET responses include OWNER. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-11 Matthew Mundell * src/schema_formats/XML/OMP.xml (get_users): Add standard GET elements. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-11 Matthew Mundell * src/schema_formats/XML/OMP.xml (report): Add the standard GET elements. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-11 Matthew Mundell * src/schema_formats/XML/OMP.xml (report, get_agents, get_targets) (get_alerts, get_filters, get_groups, get_infos, get_lsc_credentials) (get_notes, get_nvts, get_overrides, get_permissions, get_port_lists) (get_report_formats, get_results, get_roles, get_schedules, get_slaves) (get_targets, get_tasks, get_users): Add PERMISSIONS. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-11 Matthew Mundell * src/schema_formats/XML/OMP.xml (get_report_formats): Add ALERTS. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-11 Matthew Mundell * src/schema_formats/XML/OMP.xml (create_agent, create_alert) (create_group, create_lsc_credential, create_port_list) (create_port_range, create_report_format, create_role) (create_schedule, create_slave, create_task, create_user): Add COPY. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-11 Matthew Mundell * src/otp.c (process_otp_scanner_input): Use strlen to get ver_str length. 2014-04-11 Hani Benhabiles * src/otp.c (process_otp_scanner_input): Fix hard-coded version string length left from r19226. Improve code style. 2014-04-10 Jan-Oliver Wagner * src/ompd.c (write_to_scanner), src/otp.c (process_otp_scanner_input): Remove "beta" from OTP identifer. 2014-04-10 Matthew Mundell * src/schema_formats/XML/OMP.xml (get_users): Add GROUPS. Update ROLE to new style. Add compatibility change about ROLE. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-10 Matthew Mundell * src/schema_formats/XML/OMP.xml (get_tasks): Add GROUP and ROLE to TASK/OBSERVERS. (get_users): Add ANY now that users can have any number of roles. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-10 Matthew Mundell * src/schema_formats/XML/OMP.xml (report): Add REPORT/TIMESTAMP and REPORT/DELTA/TIMESTAMP. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-10 Matthew Mundell * src/schema_formats/XML/OMP.xml (create_tag): Use TYPE instead of PATTERN for attribute. Add T around "uuid" in PATTERN. (get_tags, modify_tag): Use TYPE instead of PATTERN for attribute. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-10 Matthew Mundell * src/schema_formats/XML/OMP.xml: Remove Ts placed around "text" in PATTERNs. "text" is not a type, but signifies free text. 2014-04-10 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Clean up strings in CLIENT_DESCRIBE_FEED, CLIENT_DESCRIBE_SCAP and CLIENT_DESCRIBE_CERT. 2014-04-10 Matthew Mundell * src/schema_formats/XML/OMP.xml: Remove Ts placed inside TYPEs. T is for the type of a PATTERN. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-10 Matthew Mundell * src/schema_formats/XML/OMP.xml: Remove fullstops from summaries. It's up to the generator to add these to the final format. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-10 Matthew Mundell Add last two missing commands to OMP doc. * src/schema_formats/XML/OMP.xml (get_roles, modify_permission): New commands. (get_groups): Clarify user list. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-10 Matthew Mundell Add last two missing commands to OMP doc. * src/schema_formats/XML/OMP.xml (get_roles, modify_permission): New commands. (get_groups): Clarify user list. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-10 Michael Wiegand Post release version bump. * CMakeLists.txt: Updated version number to 5.0+beta14. 2014-04-10 Michael Wiegand Preparing the openvas-manager 5.0+beta13 release. * CHANGES: Updated. 2014-04-09 Matthew Mundell Add some missing commands to OMP doc. * src/schema_formats/XML/OMP.xml (create_permission, describe_cert) (describe_feed, describe_scap, get_groups, get_permissions, sync_feed) (sync_scap, sync_cert): New commands. (describe_auth): Update slightly. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-08 Matthew Mundell Correct errors in the OTP sent for alive tests. * src/manage.c (send_alive_test_preferences): Get the alive tests as a bitfield, in order to check if only "Consider Alive" was selected. If so, set "Do a TCP ping" to yes. This prevents the "Consider Alive" case from always setting "Do a TCP ping" to yes. In the process add a missing SYN check to the main "Do a TCP ping" case. * src/manage_sql.c (target_alive_tests): New function. (target_alive_test): Remove. * src/manage.h, src/manage_sql.h: Update headers accordingly. 2014-04-08 Matthew Mundell Rename alive test "TCP Service Ping" to "TCP-ACK Service Ping". Add alive test "TCP-SYN Service Ping". * src/manage.c (send_alive_test_preferences): Add TCP SYN Ping. * src/manage.h (alive_test_t): Add ACK to TCP ping. Add TCP SYN Ping. * src/manage_sql.c (alive_test_from_string) (target_iterator_alive_tests): Add ACK to TCP service ping name. Add TCP SYN Ping. 2014-04-07 Matthew Mundell * src/manage_migrators.c (migrate_116_to_117): Ensure tables exist before using them. 2014-04-04 Matthew Mundell * src/sql.c (sqlv): Free formatted in "gave up" case. 2014-04-04 Matthew Mundell Recover from the deficiency in manage_empty_trashcan which was rectified in last commit. Hence increase database version to 120. Add database migration from version 119 to 120. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 120. * src/manage_migrators.c (migrate_119_to_120): New function. (database_migrators): Add migrate_119_to_120. * src/manage_sql.c (resource_exists): New function. (init_manage_process): Increase resource_exists args. * src/sql.c (sql_resource_exists): Add location to SQL args. Take ID instead of UUID as second SQL arg. Use resource_exists to do the check. * doc/db.png: Update for version change. 2014-04-04 Matthew Mundell * src/manage_sql.c (manage_empty_trashcan): Delete permissions of trashcan groups and roles. Update orphan state or permissions resources that were in the trashcan. Remove tags_trash update because tags_trash has just been emptied. 2014-04-04 Matthew Mundell * src/manage_sql.c (PERMISSION_ITERATOR_COLUMNS) (PERMISSION_ITERATOR_TRASH_COLUMNS): Add roles trash cases for subject UUID and name. 2014-04-04 Matthew Mundell Remove "Clean up orphaned results" from startup. Hence increase database version to 119. Add database migration from version 118 to 119. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 119. * src/manage_migrators.c (migrate_118_to_119): New function. (database_migrators): Add migrate_118_to_119. * src/manage_sql.c (check_db): Remove "Clean up orphaned results". * doc/db.png: Update for version change. 2014-04-03 Matthew Mundell Add option --disable-scheduling. * src/manage.c (manage_schedule): Add arg run_tasks. * src/manage.h: Update header accordingly. * src/openvasmd.c (scheduling_enabled): New variable. (serve_and_schedule): Pass scheduling_enabled to manage_schedule. (main): Add --disable-scheduling. 2014-04-03 Matthew Mundell Run ANALYZE after migrate instead of on startup, to speed up startup. * src/manage_migrators.c (manage_migrate): Run ANALYZE if any migration happens. * src/manage_sql.c (check_db, manage_complete_nvt_cache_update): Remove ANALYZE. 2014-04-02 Matthew Mundell * src/manage_sql.c (ALL_INFO_UNIION_COLUMNS): Indent under SELECT consistently. 2014-04-02 Michael Wiegand * src/openvasmd.c (main): Make description consistent with option name. 2014-04-02 Matthew Mundell * src/omp.c: Revert doxygen "@cond STATIC" Hani removed in r19030, at least to keep the @endcond company. 2014-04-02 Timo Pollmeier * src/manage_migrators.c (migrate_116_to_117): Only try to get ROWIDs for SCAP and CERT info if the respective databases are available. Consistently set resource to 0 for undefined types. 2014-04-02 Matthew Mundell * src/schema_formats/XML/OMP.xml (commands): Add modify_report_format. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-02 Matthew Mundell * src/schema_formats/XML/OMP.xml (create_group, delete_group) (modify_group): New commands. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-02 Matthew Mundell * src/manage_sql.c (manage_empty_trashcan): Delete roles. 2014-04-01 Timo Pollmeier * src/wizards/quick_task.xml: Do not try to create alert if email parameter is empty and do not try to get slaves if the get_slaves command is not available. 2014-04-01 Matthew Mundell * src/schema_formats/XML/OMP.xml (create_role, delete_role) (modify_role): New commands. (help): Update example to match actual response. * doc/omp.html, doc/omp.rnc: Update from source. 2014-04-01 Matthew Mundell * src/manage_migrators.c: Make "Set the database" comments all the same. 2014-04-01 Matthew Mundell * src/manage_sql.c (create_role): Expect role, as in create_group. 2014-04-01 Matthew Mundell * src/manage_sql.c (create_group): Correct param doc. * src/omp.c (omp_xml_handle_end_element): Add missing create_group and create_role return cases. Order copy_group and copy_role return cases better. 2014-04-01 Matthew Mundell * src/manage_sql.c (group_add_users, role_add_users): Remove. (add_users): New function. Body from group_add_users. (create_group, modify_group, create_role, modify_role): Call add_users instead of type-specific functions. 2014-04-01 Matthew Mundell * src/manage_sql.c (find_trash): Make doc lines shorter. 2014-04-01 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Correct MODIFY_GROUP and MODIFY_ROLE error responses. 2014-04-01 Matthew Mundell * doc/db.png: Update for version change. 2014-04-01 Matthew Mundell * src/manage.c (valid_db_resource_type): Add role. * src/manage_sql.c (delete_group, delete_role): Set orphans and locations of tags. 2014-04-01 Matthew Mundell * src/manage_sql.c (permissions_set_subjects): Use the type arg, to consider roles as well as groups. 2014-04-01 Timo Pollmeier Rebuild the resource_location column in the tags and tags_trash tables to find correct locations for all resource types. Apply the location of a task to its reports and results as well. Also use defines LOCATION_TABLE and LOCATION_TRASH for the resource_location values. Hence increase database version to 118. Add database migration from version 117 to 118. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 118. * src/manage_migrators.c (RESOURCE_TRASH): Use type parameter correctly and use defines LOCATION_TABLE and LOCATION_TRASH for the values. (migrate_116_to_117): Fix typo in comment, use defines and set location for tags on reports and results. (migrate_117_to_118): New function. Rebuilds resource_location column in the tags and tags_trash tables. (database_migrators): Add migrate_117_to_118. * src/manage_sql.c (copy_resource_lock, delete_report_internal): Use defines LOCATION_TABLE and LOCATION_TRASH to specify location. (delete_task, manage_restore): Update resource_location of tags on associated reports and results. (create_tag, modify_tag, tags_set_orphans): Use defines LOCATION_TABLE and LOCATION_TRASH to specify location. 2014-03-31 Matthew Mundell * src/manage_sql.c: Line up newline escapes nicely. 2014-03-31 Matthew Mundell Add OMP MODIFY_ROLE. * src/manage_sql.c (omp_commands): Add MODIFY_ROLE. (role_add_users): New function. Body from create_role. (create_role): Call role_add_users to add users. (modify_role): New function. * src/manage.h: Add header accordingly. * src/omp.c (modify_role_data_t): New type. (modify_role_data_reset): New function. (command_data_t, client_state_t): Add MODIFY_ROLE entries. (modify_role_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add MODIFY_ROLE. 2014-03-28 Matthew Mundell * src/manage_sql.c (copy_role): Copy command-level permissions too. Don't copy the users, otherwise permissions may accidentally be granted during editing. 2014-03-28 Benot Allard Post release version bump. * CMakeLists.txt, CHANGES: 5.0+beta13 2014-03-28 Benot Allard Prepare release of manager-5.0+beta12 * CHANGES: Update 2014-03-28 Hani Benhabiles * src/openvasmd.c (main): Add --dh-params command-line option. Call set_gnutls_dhparams() accordingly. * doc/openvasmd.8: Update documentation. 2014-03-28 Timo Pollmeier * src/manage_sql.c (copy_resource_lock): Additionally copy tags attached to the resource. 2014-03-28 Jan-Oliver Wagner * src/manage_sql.c (init_manage): Increased the max value for IPs per target that could be specified via --max-ips-per-target to 70000 to at least cover all of 192.168 network, a typical case for host discovery. 2014-03-27 Matthew Mundell * src/manage_sql.c (create_tables): Put one progress back from last commit, because it is still a progress point. 2014-03-27 Matthew Mundell * src/manage_sql.c (create_tables): Remove ANALYZE which is done later in check_db anyway, to save a few seconds on startup. 2014-03-27 Matthew Mundell * doc/db.png: Update for version change. 2014-03-27 Matthew Mundell * src/manage_sql.c (permission_is_predefined): Add doc. 2014-03-27 Matthew Mundell Add OMP DELETE_ROLE. * src/manage_sql.c (omp_commands): Add DELETE_ROLE. (create_tables): Add roles_trash and role_users_trash. (role_is_predefined, delete_role): New functions. (role_writable, trash_role_writable): Make roles writable. (ROLE_ITERATOR_TRASH_COLUMNS): New define. (role_count, init_role_iterator): Pass trash columns. (manage_restore): Add roles. * src/manage.h: Add header accordingly. * src/omp.c (delete_role_data_t): New type. (delete_role_data_reset): New function. (command_data_t, client_state_t): Add DELETE_ROLE entry. (delete_role_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add DELETE_ROLE. 2014-03-27 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Check return of init_report_format_file_iterator in CLIENT_GET_REPORT_FORMATS. 2014-03-26 Benot Allard Post release version bump * CMakeLists.txt: 5.0+beta12 2014-03-26 Benot Allard Prepare the 5.0+beta11 release. * CHANGES: Update 2014-03-26 Timo Pollmeier Get tags for resources by ROWID instead of UUID. Make iterator functions for active and orphan fields return int. * src/manage_sql.c (print_report_xml): Use ROWID of report instead of UUID when getting tags. (tag_iterator_active, tag_iterator_orphan): Change return type to int. (init_resource_tag_iterator, resource_tag_count): Use ROWID of resource instead of UUID when getting tags. * src/manage.c (get_nvti_xml): Use ROWID of NVT instead of UUID when getting tags. * src/manage.h (tag_iterator_active, tag_iterator_orphan): Change return type to int. (init_resource_tag_iterator, resource_tag_count): Change type of resource parameter to resource_t. * src/omp.c (send_get_common, buffer_notes_xml, buffer_overrides_xml) (buffer_results_xml): Use ROWID of resource instead of UUID when getting tags. (xml_handle_end_element): In case CLIENT_GET_TAGS adjust elements to new return type of tag_iterator_active and tag_iterator_orphan. 2014-03-26 Timo Pollmeier Rename "attach_id" to "resource_uuid", "attach_type" to "resource_type" add resource rowid "resource" and "resource_location" to tags tables. Hence increase database version to 117. Add database migration from version 116 to 117. Change tag OMP elements accordingly and make them more consistent with the resource in permissions overall. Allow tags to be attached to resources in trash. Rename "orphaned" in tags to "orphan". * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 117. * src/manage_migrators.c (migrate_116_to_117): New function. Renames and add tags table columns for consistency with permissions. (database_migrators): Add migrate_116_to_117. * src/manage_acl.c (user_owns_uuid): Add special case for SecInfo as they do not have an owner. * src/manage_sql.c (tags_set_locations, tags_set_orphans): New functions and prototypes analogous to permissions_set_... functions. (filter_clause): Rename tag resource columns. (resource_name): Check if type is one without a trash table. (create_tables): Rename tag resource columns. (delete_alert): Call tags_set_locations and tags_set_orphans. (resource_id_exists): Add case for tasks. (trash_id_exists): New function. Trash version of resource_id_exists. (delete_report_internal): Set tag resource_location and resource fields. (request_delete_task_uuid, delete_target, delete_config) (delete_lsc_credential, delete_agent, delete_note, delete_override) (delete_schedule, delete_report_format, delete_slave, delete_permission) (delete_port_list, delete_filter, manage_restore): Call tags_set_locations and tags_set_orphans. (manage_empty_trashcan): Update tag resources and resource locations. (create_tag, delete_tag, modify_tag, TAG_ITERATOR_FILTER_COLUMNS) (TAG_ITERATOR_COLUMNS, TAG_ITERATOR_TRASH_COLUMNS) (TAG_NAME_ITERATOR_FILTER_COLUMNS): Rename and add resource columns, including resource_name for trash columns. (tag_iterator_attach_type): Remove. Replaced with tag_iterator_resource_type. (tag_iterator_resource_type): New function. (tag_iterator_attach_id): Remove. Replaced with tag_iterator_resource and tag_iterator_resource_uuid. (tag_iterator_resource_uuid, tag_iterator_resource) (tag_iterator_resource_location): New functions. (tag_iterator_active, tag_iterator_value): Adjust column number. (tag_iterator_orphaned): Remove. Replaced with tag_iterator_orphan. (tag_iterator_orphan): New function. (tag_iterator_attach_name): Remove. Replaced with tag_iterator_resource_name. (init_resource_tag_iterator, resource_tag_count): Rename resource columns. * src/manage.h (trash_id_exists): New function prototype. (tag_iterator_attach_type): Remove. Replaced with tag_iterator_resource_type. (tag_iterator_resource_type): New function. (tag_iterator_attach_id): Remove. Replaced with tag_iterator_resource and tag_iterator_resource_uuid. (tag_iterator_resource_uuid, tag_iterator_resource) (tag_iterator_resource_location): New functions. (tag_iterator_active, tag_iterator_value): Adjust column number. (tag_iterator_orphaned): Remove. Replaced with tag_iterator_orphan. (tag_iterator_orphan): New function. (tag_iterator_attach_name): Remove. Replaced with tag_iterator_resource_name. * src/omp.c (create_tag_data_t, create_tag_data_reset) (modify_tag_data_t, modify_tag_data_reset): Rename attach_id to resource_id and attach_type to resource_type. (client_state_t): Remove CLIENT_CREATE_TAG_ATTACH_ID and CLIENT_MODIFY_TAG_ATTACH_ID. Rename ATTACH elements to their RESOURCE equivalents. (omp_xml_handle_start_element): In cases for create_tag and modify_tags rename ATTACH elements to RESOURCE and make the resource ID an attribute. (omp_xml_handle_start_element): In cases for get_tags, create_tag and modify_tag rename ATTACH elements to RESOURCE and make the resource ID an attribute. Rename ORPHANED element to ORPHAN. * src/schema_formats/XML/OMP.xml (create_tag, get_tags, modify_tag): Rename "attach" and "orphaned" elements to "resource" and "orphan" and make them more consistent with the ones in permissions. * doc/omp.html, doc/omp.rnc: Update from source. 2014-03-26 Matthew Mundell * src/manage_config_system_discovery.c (make_config_system_discovery): Correct comment. 2014-03-26 Matthew Mundell Add OMP CREATE_ROLE. * src/omp.c (create_role_data_t): New type. (create_role_data_reset): New function. (command_data_t, client_state_t): Add CREATE_ROLE entry. (create_role_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add CREATE_ROLE. * src/manage_sql.c (omp_commands): Add CREATE_ROLE. (copy_role, create_role): New functions. * src/manage.h: Add headers accordingly. 2014-03-25 Hani Benhabiles * src/manage.c (alert_condition_description), src/manage_sql.c (escalate_2, event_applies, delete_user), src/omp.c (omp_xml_handle_start_element, omp_xml_handle_end_element): Remove useless break statements following return statements. 2014-03-24 Matthew Mundell Remove NVTs 810002 "CPE Inventory" and 810003 "Host Summary" from predefined configs. Hence increase database version to 116. Add database migration from version 115 to 116. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 116. * src/manage_migrators.c (migrate_115_to_116): New function. Adds exclude rule to config "Discovery" for "CPE Inventory". (database_migrators): Add migrate_115_to_116. * src/manage_config_discovery.c (make_config_discovery): Remove "CPE Inventory". * src/manage_sql.c (check_db): Ensure the "All" NVT selector excludes "CPE Inventory" and "Host Summary". This covers the Full and * configs. * doc/db.png: Update for version change. 2014-03-24 Hani Benhabiles Drop sign_key_ids column from nvts table. Hence increase database version to 115. Add database migration from version 114 to 115. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 115. * src/manage_migrators.c (migrate_114_to_115): New function. (database_migrators): Add migrate_114_to_115. * src/manage_sql.c (create_tables): Remove sign_key_ids from nvts table creation. * doc/db_postgres.sql (nvts): Remove sign_key_ids column. * doc/db.png, doc/omp.html, doc/omp.rnc: Update from source. * src/schema_formats/XML/OMP.xml: Add compatibility change for GET_NVTS. 2014-03-24 Hani Benhabiles * src/manage.c (get_nvti_xml): Remove fingerprint element. * src/manage_sql.c (make_nvt_from_nvti): Don't store empty sign key id. (NVT_ITERATOR_COLUMNS, NVT_ITERATOR_COLUMNS_NVTS): Don't iterate over unused sign_key_ids column. (nvt_iterator_sign_key_ids): Remove function. (nvt_iterator_category, nvt_iterator_family, nvt_iterator_cvss_base): Adjust accessed column index. * src/schema_formats/XML/OMP.xml: Update documnetation. * src/manage.h: Delete removed function prototype. 2014-03-23 Jan-Oliver Wagner * src/otp.c (process_otp_scanner_input): Don't handle SCANNER_PLUGIN_LIST_FPRS anymore. These are not send anymore by the OTP Server. (scanner_state_t): Remove SCANNER_PLUGIN_LIST_FPRS. 2014-03-21 Matthew Mundell Add alive test "Consider Alive". * src/manage.c (send_alive_test_preferences): Add Consider Alive case. * src/manage.h (alive_test_t): Add ALIVE_TEST_CONSIDER_ALIVE. * src/manage_sql.c (alive_test_from_string) (target_iterator_alive_tests): Add Consider Alive. 2014-03-21 Hani Benhabiles Add --gnutls-priorities option to Manager. * src/openvasmd.c (set_gnutls_priority): New function. (main): Add option to set GnuTLS priority string. Call new function accordingly. * doc/openvasmd.8: Update documentation for new option. 2014-03-21 Matthew Mundell * src/manage_sql.c (alive_test_from_string): Use | instead of & so that the values are combined. 2014-03-20 Timo Pollmeier * src/manage.c (manage_run_wizard): Return successfully with empty response if mode does not exist. * src/omp.c (xml_handle_end_element): In case CLIENT_RUN_WIZARD do not log event messages if wizard is run successfully with read_only option. 2014-03-20 Timo Pollmeier * CMakeLists.txt: Add new wizard quick_task.xml. * src/wizards/quick_task.xml: New wizard for creating new tasks with additional options compared to quick_first_scan. 2014-03-19 Hani Benhabiles Report scanner loading progress to client/GSA. * src/omp.c (SEND_XML_SERVICE_DOWN): New macro. (XML_SERVICE_DOWN): Delete macro. (omp_xml_handle_end_element): Replace usage of XML_SERVICE_DOWN and SEND_TO_CLIENT_OR_FAIL with new macro. * src/otp.h: Export scanner_current_loading and scanner_total_loading. 2014-03-19 Timo Pollmeier * src/schema_formats/XML/OMP.xml (run_wizard): Add mode element to command. * doc/omp.rnc, doc/omp.html: Update from source. 2014-03-19 Timo Pollmeier Added regex-based parameter validation and support of alternative run modes, e.g. an init mode to get resource lists to display in the client, to wizards. * src/manage.c (manage_run_wizard): Add mode parameter to run steps from a "mode" element in the wizard XML instead of the "wizard" root element. Add regex-based validation of parameters defined in the wizard XML. * src/manage.h (manage_run_wizard): Add mode parameter. * src/omp.c (run_wizard_data_t, run_wizard_data_reset): Add mode parameter. (client_state_t): Add CLIENT_RUN_WIZARD_MODE. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Handle new mode element of run_wizard and new return value of manage_run_wizard. 2014-03-19 Hani Benhabiles * src/otp.c (scanner_is_loading, parse_scanner_loading): New functions. (process_otp_scanner_input): Parse SCANNER_LOADING and adjust logging for progress accordingly. 2014-03-18 Matthew Mundell Switch the type check on the filters associated with alerts from "report" to "result". Alerts were migrated from "report" to "result" in db version 92. * src/manage_sql.c (create_alert, modify_alert, modify_filter): Switch filter type check. * src/omp.c (omp_xml_handle_end_element): Change messages accordingly. 2014-03-18 Hani Benhabiles * src/ompd.c (serve_omp): Set scanner_up to 0 if scanner is still loading. This prevents actions such as starting task from mistakenly trying to send commands to the scanner. 2014-03-18 Benot Allard Post release version bump * CMakeLists.txt: Set version to 5.0+beta11 2014-03-18 Benot Allard Preparing the openvas-manager 5.0+beta10 release. * CHANGES: Updated 2014-03-17 Hani Benhabiles * src/otp.c (message_data_t): Remove unused struct. 2014-03-17 Matthew Mundell Make --migrate succeed when the database has not yet been initialised. * src/manage_migrators.c (manage_migrate_needs_timezone): Account for error returns in comparison. (manage_migrate): Skip migrate when the tables are missing. * src/manage_sql.c (manage_db_version): Check if the tables exist. 2014-03-17 Hani Benhabiles * src/ompd.c (serve_omp): Do not return early in scanner loading case when not in nvt cache rebuilding case. * src/otp.c (process_otp_scanner_input): Accept OTP version 2.0 only. 2014-03-17 Hani Benhabiles * src/ompd.c (write_to_scanner): Always initialize with OTP 2.0. Send NVT_INFO client command in nvt cache mode. 2014-03-15 Matthew Mundell * src/schema_formats/XML/OMP.xml: Add compatibility change for GET_DEPENDENCIES. * doc/omp.html: Update from source. 2014-03-15 Matthew Mundell * src/manage.c (run_task): Also set source_iface on report when the preference was left empty. 2014-03-15 Jan-Oliver Wagner * src/otp.c (process_otp_scanner_input): Use keyword "SCANNER_RELOADING" directly instead of including a macro for it. Any other keyword is used directly as well and also this way we can drop the otp.h from libraries. 2014-03-14 Hani Benhabiles Remove handling of PLUGINS_DEPENDENCIES OTP command and get_dependencies OMP command. * doc/omp.html, doc/omp.rnc, src/schema_formats/XML/OMP.xml: Update documentation for removal of get_dependencies. * src/manage.c (scanner): Adjust initialization. * src/manage.h (scanner_t): Remove plugins_dependencies element. * src/manage_sql.c (omp_commands): Delete GET_DEPENDENCIES command. * src/omp.c (get_dependencies_data_t, get_dependencies_data): Remove variables. (command_data_t): Remove get_dependencies element; (omp_xml_handle_start_element): Remove GET_DEPENDENCIES handling. (send_requirement, get_dependencies_data_reset, send_dependency): Remove functions. (client_state_t, omp_xml_handle_end_element): Remove CLIENT_GET_DEPENDENCIES state and its handling case. * src/ompd.c: Remove irrelevant dead code. * src/otp.c (free_g_slist, current_scanner_plugin_dependency_name) (current_scanner_plugin_dependency_dependencies) (make_scanner_plugins_dependencies, add_scanner_plugins_dependency) (make_current_scanner_plugin_dependency) (append_to_current_scanner_plugin_dependency) (finish_current_scanner_plugin_dependency) (parse_scanner_plugin_dependency_dependency) (SCANNER_PLUGIN_DEPENDENCY_NAME, SCANNER_PLUGIN_DEPENDENCY_DEPENDENCY): Remove unused functions, variables and scanner states. (parse_scanner_server, process_otp_scanner_input): Remove handling of PLUGINS_DEPENDENCIES server command and scanner states. 2014-03-14 Matthew Mundell Add scan-time record of slave and source interface to reports. Hence increase database version to 114. Add database migration from version 113 to 114. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 114. * src/manage_migrators.c (migrate_113_to_114): New function. (database_migrators): Add migrate_113_to_114. * src/manage_sql.c (create_tables): Add slave and iface columns to reports. (report_slave_uuid, report_slave_name, report_slave_host) (report_slave_port, report_source_iface, report_set_slave_uuid) (report_set_slave_name, report_set_slave_host, report_set_slave_port) (report_set_source_iface): New functions. (print_report_xml): Add SCAN. * src/manage.c (run_slave_task): Store slave info on report. (run_task): Store source_iface and slave info on report. * src/manage.h: Add headers accordingly. * doc/db_postgres.sql (reports): Add new columns. * doc/db.png: Update from source. * src/schema_formats/XML/OMP.xml (report): Add SCAN. * doc/omp.html, doc/omp.rnc: Update from source. 2014-03-14 Hani Benhabiles * src/openvasmd.c (update_or_rebuild_nvt_cache): Move switch case 1 down as it falls through for cleanup. 2014-03-14 Matthew Mundell Retrieve progress indication lost in last commit. * src/openvasmd.c (rebuild_nvt_cache_retry): Add progress arg. Call while waiting for scanner. (fork_update_nvt_cache, main): Pass progress arg to rebuild_nvt_cache_retry. 2014-03-13 Matthew Mundell Make --rebuild and --update wait for scanner when scanner is busy loading NVTs. This matches the behaviour when rebuild is called via SIGHUP. * src/openvasmd.c (rebuild_nvt_cache_retry): Add args for rebuild type and cleanup. Add return. (fork_update_nvt_cache): Pass rebuild_nvt_cache_retry args. (main): Call the forking retry function to do the rebuild. 2014-03-13 Matthew Mundell * src/manage_sql.c (delete_user): Add missing SQL quote. 2014-03-13 Hani Benhabiles * src/openvasmd.c (spawn_reloader): Rename to rebuild_nvt_cache_retry. 2014-03-13 Hani Benhabiles * src/openvasmd.c (spawn_reloader): New function. (fork_update_nvt_cache): Rebuild nvt cache by calling new functino. 2014-03-13 Matthew Mundell * src/otp.c (process_otp_scanner_input): Advance buffer positions over the OTP_LOADING message after seeing it. 2014-03-13 Hani Benhabiles * src/ompd.c (serve_omp): Return 2 in scanner still loading case. * sr/openvasmd.c (update_or_rebuild_nvt_cache): Set process title accordingly. Handle new serve_omp() return value. (main): Handle update_or_rebuild_nvt_cache() return value. 2014-03-12 Matthew Mundell * src/report_formats/CPE/CPE.xsl (report): Get CPEs from host details. 2014-03-12 Hani Benhabiles * src/manage.h, src/omp.c: Remove useless includes. 2014-03-12 Hani Benhabiles Remove handling of CERTIFICATES otp command. * src/manage.c (scanner): Adjust initialization. * src/manage.h (scanner_t): Remove certificates element. * src/otp.c (init_otp_data): Adjust initialization of scanner. (scanner_state_t): Remove scanner states related to CERTIFICATES command. (current_certificates, current_certificate): Remove variables. (parse_scanner_certificate_public_key): Remove function. (parse_scanner_server, process_otp_scanner_input): Remove handling of CERTIFICATES command. 2014-03-12 Michael Wiegand Post release version bump. * CMakeLists.txt: Updated version number to openvas-manager-5.0+beta10. 2014-03-12 Michael Wiegand Preparing the openvas-manager 5.0+beta9 release. * CHANGES: Updated. 2014-03-11 Matthew Mundell * src/manage_config_host_discovery.c: Correct description. 2014-03-11 Matthew Mundell Add new predefined config System Discovery. * src/manage_sql.c (check_db): Make System Discovery config. (delete_config, config_in_use, delete_user): Add System Discovery config. * src/manage_sql.h (CONFIG_UUID_SYSTEM_DISCOVERY) (MANAGE_NVT_SELECTOR_UUID_SYSTEM_DISCOVERY): New defines. * src/manage_config_system_discovery.c: New file. * src/CMakeLists.txt: Add manage_config_system_discovery.c to manage library. (C_FILES): Add config source files. 2014-03-11 Hani Benhabiles * src/ompd.c (serve_omp): Add check for process_otp_scanner_input() return value. * src/otp.c (process_otp_scanner_input): Check for OTP_LOADING server response. 2014-03-11 Matthew Mundell Increase database version to 113 in order to reset report count cache. Add database migration from version 112 to 113. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 113. * src/manage_migrators.c (migrate_112_to_113): New function. (database_migrators): Add migrate_112_to_113. * doc/db.png: Update for version change. 2014-03-10 Matthew Mundell * src/manage_sql.c (report_severity_data): Move comment. Correct indent. 2014-03-10 Matthew Mundell * src/manage_sql.c (cache_report_counts): Weight max by a small safe value in severity comparison, to prevent floating point errors. 2014-03-10 Matthew Mundell * src/omp.c (buffer_notes_xml, buffer_overrides_xml): Use utf8 function to truncate text, as strndup could truncate in the middle of a character. 2014-03-07 Hani Benhabiles * src/openvasmd.c (main): Set process title before and after initialization. 2014-03-06 Benot Allard * doc/openvasmd.8: Fix typo reported by lintian 2014-03-06 Michael Wiegand Post release version bump. * CMakeLists.txt: Updated version number to openvas-manager-5.0+beta9. 2014-03-06 Michael Wiegand Preparing the openvas-manager 5.0+beta8 release. * CHANGES: Updated. 2014-03-05 Matthew Mundell Let Host Discovery fall back on more Ping Host defaults. Hence increase database version to 112. Add database migration from version 111 to 112. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 112. * src/manage_migrators.c (migrate_111_to_112): New function. (database_migrators): Add migrate_111_to_112. * src/manage_config_host_discovery.c (make_config_host_discovery): Take out some Ping Host preferences so that the NVT defaults are used. * doc/db.png: Update for version change. 2014-03-05 Matthew Mundell * src/manage_sql.c (create_lsc_credential): Prevent backslash in password. 2014-03-05 Hani Benhabiles * src/manage.c, src/manage.h (manage_scap_update_time): Constify returned pointer. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_INFO case, remove repeated call to manage_scap_update_time() for every info entry. 2014-03-04 Hani Benhabiles * src/lsc_user.c (lsc_user_all_create): Remove unused function. * src/manage.c (severity_data_count, request_certificates) (manage_cert_update_time): Remove unused functions. * src/manage_sql.c (task_user_iterator_task, task_user_iterator_user) (task_group_iterator_task, task_group_iterator_group) (task_role_iterator_task, task_role_iterator_role, trash_task_count) (task_start_time, task_end_time, find_result) (prognosis_iterator_cvss_int, result_iterator_nvt_cvss_base_double) (manage_report_host_has_results, clear_task_results_cache, find_report) (task_file_iterator_length, nvts_size, nvt_family, config_family_count) (trash_config_family_count, config_nvt_count, trash_config_nvt_count) (init_task_preferences_iterator, task_preference_iterator_task_value) (find_agent, agent_name, find_note, find_override) (task_schedule_iterator_schedule, set_slave_host) (port_range_iterator_exclude, setting_dynamic_severity) (find_user_with_permission, find_tag, tag_name_count): Remove unused functions. * src/otp.c (print_port, port_protocol_name): Remove unused functions and code. * src/lsc_user.h, src/manage.h: Delete removed functions prototypes. 2014-03-03 Matthew Mundell Remove new style NVT special casing from report formats. All NVTs are expected in the new style now. * src/report_formats/CSV_Results/CSV_Results.xsl, src/report_formats/NBE/NBE.xsl (openvas:newstyle-nvt): Remove. (result): Remove check. * src/report_formats/HTML/HTML.xsl, src/report_formats/TXT/TXT.xsl (openvas:newstyle-nvt): Remove. (result [issue]): Remove check. * src/report_formats/LaTeX/latex.xsl (openvas:newstyle-nvt): Remove. (result-details-host-port-threat): Remove check. 2014-02-27 Benot Allard Post release version Bump. * CMakeLists.txt: Update version to 5.0+beta8 2014-02-27 Benot Allard Preparing the openvas-manager 5.0+beta7 release. * CHANGES: Updated. 2014-02-25 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Add defaults to copy switches, for safety. 2014-02-25 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Skip alerts with ID 0, as a convenience for clients when removing alerts. 2014-02-25 Hani Benhabiles * src/omp.c (omp_xml_handle_end_element): Fix error message. 2014-02-22 Matthew Mundell * src/schema_formats/XML/OMP.xml: Add GET_TARGETS compatibility change. * doc/omp.html: Update from source. 2014-02-22 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Update OMP version to 5.0. * src/schema_formats/XML/OMP.xml (version): Increase to 5.0. * doc/omp.html, doc/omp.rnc: Update from source. 2014-02-20 Matthew Mundell * src/omp.c (send_get_common): Include permission type in special case for PERMISSIONS, because Admin users have full action to permissions that apply to whole commands. 2014-02-19 Matthew Mundell * src/html/XML/OMP.xml (alive_test): New type. (report): Add SEVERITY_CLASS. (create_target, get_targets, modify_target): Add ALIVE_TESTS, REVERSE_LOOKUP_ONLY and REVERSE_LOOKUP_UNIFY. * doc/omp.html, doc/omp.rnc: Update from source. 2014-02-19 Timo Pollmeier * src/wizards/delete_task_deep.xml: Add optional parameter "ultimate". * src/wizards/get_tasks_deep.xml: Add optional "include_report_formats" and "include_configs" parameters. * src/wizards/quick_auth_scan.xml: Add optional "config_id" parameter. 2014-02-18 Matthew Mundell * src/manage.c (send_alive_test_preferences): Remove erroneous trailing colons. 2014-02-15 Matthew Mundell * src/manage_sql.c (modify_target): Actually prevent "in use" targets from being modified. * src/omp.c (omp_xml_handle_end_element): Handle new modify_target return. 2014-02-15 Matthew Mundell Remove need for all elements to be given in MODIFY_TARGET. * src/manage_sql.c (modify_target): Modify each column separately, leaving the column alone if the given value is NULL. This allows the OMP user to modify part of the target in a single command, instead of requiring every field to be given. (target_writable): Allow "in use" targets to be modified. * src/omp.c (omp_xml_handle_start_element): Init MODIFY_TARGET elements, so that they have at least the empty string when empty. (omp_xml_handle_end_element): Handle new style of modify_target call. 2014-02-16 Jan-Oliver Wagner Post release version bump. * CMakeLists.txt: Updated version number to openvas-manager-5.0+beta7. 2014-02-16 Jan-Oliver Wagner Preparing the openvas-manager 5.0+beta6 release. * CHANGES: Updated. 2014-02-15 Matthew Mundell * src/manage_migrators.c (migrate_56_to_57): Add note about missing case. 2014-02-14 Michael Wiegand * tools/greenbone-certdata-sync, tools/openvas-scapdata-sync.in, tools/openvas-certdata-sync.in, tools/greenbone-scapdata-sync: Use the "timestamp" file for the "last_update" value instead of the current system time. Otherwise actions like "--migrate" would incorrectly update the timestamp even though no data was updated. 2014-02-14 Matthew Mundell * src/manage_migrators.c (migrate_110_to_111): Add column to trash table too. * src/manage_sql.c (delete_target, manage_restore): Add alive_test column. 2014-02-14 Matthew Mundell Add modification of target alive tests. * src/omp.c (modify_target_data_t, modify_target_data_reset) (client_state_t): Add alive test elements. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add ALIVE_TESTS to MODIFY_TARGET. * src/manage_sql.c (alive_test_from_string): New function. (create_target): Use alive_test_from_string. (modify_target): Add alive_tests arg. * src/manage.h: Update header accordingly. 2014-02-13 Matthew Mundell Add an Alive Test property to Targets, which can override the config settings. Hence increase database version to 111. Add database migration from version 110 to 111. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 111. * src/manage_migrators.c (migrate_110_to_111): New function. (database_migrators): Add migrate_110_to_111. * src/manage_sql.c (create_tables): Add alive_test to targets tables. (add_role_permission, init_manage, set_task_groups, set_task_observers) (create_target): Add alive_tests arg. (TARGET_ITERATOR_COLUMNS): Add alive_tests column. (target_iterator_alive_tests): New accessor. (target_alive_test): New function. * src/manage.c (send_alive_test_preferences): New function. (run_task): Send alive test preferences after others. * src/manage.h: Update headers accordingly. (alive_test_t): New type. * src/omp.c (create_target_data_t, create_target_data_reset) (client_state_t): Add alive test fields. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add ALIVE_TEST to CREATE_TARGET. * doc/db_postgres.sql (targets): Add alive_test. * doc/db.png: Update from source. 2014-02-12 Matthew Mundell * src/manage_sql.c (init_manage_settings, modify_setting): Add User Interface Language. 2014-02-12 Matthew Mundell * src/manage_sql.c (init_setting_iterator): Group conditions in SQL else precedence is wrong. 2014-02-12 Hani Benhabiles * src/manage_sql.c (manage_count_hosts): Call openvas_hosts_new_with_max with manage_max_hosts return value instead of openvas_hosts_new. 2014-02-10 Matthew Mundell * src/omp.c (omp_xml_handle_start_element) (omp_xml_handle_end_element): Read over TRUST when importing report formats, to handle the new TIME element. 2014-02-10 Matthew Mundell * src/manage_sql.c (send_get_end): Quote keyword value if it was quoted in the filter term. 2014-02-10 Hani Benhabiles Fix various memory leaks and errors. Found using cppchecker. * src/manage_sql.c (escalate_2): Use g_free for port variable to match the way it was allocated. (print_report_xml): Close out stream and free term variable before return on error. Check print_report_errors_xml() return value adequately. (create_override, modify_override): Free quoted_severity before return on error. (modify_schedule): Free period_months_string memory leak. * src/omp.c (omp_xml_handle_end_element): Call SEND_GET_ELEMENT earlier in CLIENT_GET_TASKS to fix memory leaks in case of error. Call g_free() for task_schedule_uuid and task_schedule_name to match allocation method. 2014-02-07 Matthew Mundell * src/report_formats/LaTeX/latex.xsl (highest-severity-for-host): Remove. (results-overview-table-single-host-row): Put the hostname on a second line in the Host cell. (results-overview): Remove "Most Severe Result(s)" column. It's redundant, no other formats have it and there's no special indication of why it was included. Make last column heading singular like others. 2014-02-06 Hani Benhabiles * src/sql.c (sql_nquote): Small changes to string allocation and parsing to improve performance a bit. 2014-02-06 Hani Benhabiles Remove OTP ERROR command handling as it is not used anymore. * src/otp.c (scanner_state_t): Remove SCANNER_ERROR state. (parse_scanner_error): Delete function. (process_otp_scanner_input): Remove SCANNER_ERROR state and ERROR command handling. 2014-02-06 Matthew Mundell * src/manage.c (stop_task_internal): Only check if scanner is up when scanner is required. 2014-02-06 Timo Pollmeier * src/manage_sql.c (find_trash_task_with_permission): New function. * src/manage.h (find_trash_task_with_permission): New prototype. * src/omp.c (xml_handle_end_element): In cases for CLIENT_MODIFY_NOTE and CLIENT_MODIFY_OVERRIDE allow task_id to refer to a task in the trashcan. 2014-02-05 Matthew Mundell * src/manage_sql.c (trim_partial_report): Correct SQL keyword. 2014-02-05 Hani Benhabiles * src/manage_sql.c (create_target): Remove default value of port_range. 2014-02-05 Matthew Mundell Add option --list-users. * src/manage.h: Add header accordingly. * src/manage_sql.c (manage_list_users): New function. * src/openvasmd.c (main): Add --list-users. 2014-02-05 Hani Benhabiles * src/manage.h: Include base/openvas_networking.h (port_protocol_t, struct range): Remove, as they are moved to libraries. * src/manage_sql.c (port_range_ranges): Remove function definition. Remove extra include. 2014-02-04 Hani Benhabiles * src/manage_sql.c: Include base/openvas_networking.h (validate_port_range): Delete function. 2014-02-04 Michael Wiegand * tools/greenbone-certdata-sync: Move declaration of SCRIPT_NAME up to make it available to LOG_CMD. 2014-02-04 Michael Wiegand * tools/greenbone-certdata-sync, tools/greenbone-scapdata-sync: Do not check if feed is current when REFRESH_ONLY is set. 2014-02-03 Hani Benhabiles * src/CMakeLists.txt: Link against math library. Fixes build on some environments. 2014-01-30 Matthew Mundell * src/manage.c (severity_class_xml): New function. (print_report_xml): Include severity class. 2014-01-30 Jan-Oliver Wagner * INSTALL: Add section about static code analysis with CLang. 2014-01-30 Jan-Oliver Wagner * src/omp.c (omp_xml_handle_end_element): Removed unnecessary 0-initialization of variable 'fail'. 2014-01-29 Benot Allard Post release version bump. * CMakeLists.txt: Updated version number to openvas-manager-5.0+beta6. 2014-01-29 Benot Allard * ChangeLog: correct authorship of an old patch * CHANGES: Prepare 5.0+beta5 release 2014-01-28 Jan-Oliver Wagner * tools/extra/README: Fixed typos and added note on how to enable the functionality. 2014-01-28 Timo Pollmeier * src/manage.c (): Add math.h import. (severity_data_index): Round before casting to int to avoid problems with inexact double values. * src/manage_sql.c (print_report_xml): Use result severity level instead of type when counting delta results. 2014-01-28 Benot Allard Add xml_split, a utility to split a huge xml into smaller parts. Its usage is disabled. * tools/openvas-scapdata-sync.ini, tools/greenbone-scapdata-sync: Add possibility to use the xml_split utility. * tools/extra/xml_split, tools/extra/README: Add new utility, and explanation. 2014-01-28 Benot Allard Solve issues raised by clang static analyser * src/openvasmd.c (load_cas): Null pointer passed as an argument to a 'nonnull' parameter (handle_sigabrt): Array access results in a null pointer dereference * src/manage_sql.c (parse_iso_time, current_offset, delete_user, iso_time_tz, parse_otp_time, filter_clause, time_offset): Null pointer passed as an argument to a 'nonnull' parameter (create_group, print_report_xml): Dereference of null pointer * src/manage_migrators.c (migrate_19_to_20): Function call argument is an uninitialized value 2014-01-27 Matthew Mundell * report_formats/verinice-ism/gsm_verinice_ism.xsl (openvas:get-nvt-tag) (openvas:newstyle-nvt): New functions. (newline, prognostic-description): New templates. (vulnerability_details): Add new style NVT sections to description. (/): Flush trailing whitespace. 2014-01-24 Matthew Mundell * src/manage_sql.c (check_db_versions, stop_active_tasks): New functions. Bodies from init_manage. (init_manage): Move more checks out to functions, for clarity. 2014-01-24 Matthew Mundell * src/manage_sql.c (check_db): New function. Body from init_manage. (init_manage): Move all the database checking out to check_db, for clarity. 2014-01-24 Matthew Mundell * src/report_formats/CSV_Results/CSV_Results.xsl (openvas:report): New function. (newline): New template. (openvas:new-style-nvt): Remove. Renamed to newstyle-nvt to match other formats. (openvas:newstyle-nvt): New function. Was new-style-nvt. (result): Add description columns for new style NVTs, as well as new reference columns. (report): Remove spaces for consistency. 2014-01-23 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In the SYNC ops, set current_error to 4 instead of 2 when the child has succeeded, to indicate that the process must exit. * src/ompd.c (serve_omp): Handle new return 4 from process_omp_client_input, by exiting. 2014-01-23 Michael Wiegand * src/omp.c (omp_xml_handle_end_element): Call the correct sync script when asking the script to do a selftest while getting the description for the CERT synchronization script. 2014-01-22 Matthew Mundell * ChangeLog: Cleanup last entry. 2014-01-22 Matthew Mundell * src/report_formats/NBE/NBE.xsl (openvas:get-nvt-tag) (openvas:newstyle-nvt): New functions. (scan_start, scan_end): Use xsl:text. Add newline. (prognostic-description, ref_cve_list, ref_bid_list, ref_cert_list) (ref_xref_list): New templates. (result): Add description sections for new style NVTs. (report): Use xsl:text. 2014-01-21 Matthew Mundell * src/report_formats/NBE/NBE.xsl (result): Use xsl:text to spread the description code out. 2014-01-21 Matthew Mundell * src/report_formats/TXT/TXT.xsl (openvas:get-nvt-tag) (openvas:newstyle-nvt): New functions. (nvt): Remove. (prognostic-description, ref_cve_list, ref_bid_list, ref_cert_list) (ref_xref_list): New templates. (result [issue]): Add description sections for new style NVTs. 2014-01-21 Matthew Mundell * src/manage_sql.c (resource_count): Exclude reports of hidden tasks when counting reports. 2014-01-20 Matthew Mundell * src/manage_acl.c (where_owned): Let the user inherit report permissions from the task, so that observers can see the list of reports on a task like they can see the report details. 2014-01-20 Matthew Mundell * src/manage_sql.c (manage_delete_user): Set the return value. 2014-01-17 Matthew Mundell * src/manage_sql.c (port_range_port_list_uuid): Correct column in SQL. 2014-01-17 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Correct MODIFY_GROUP message. 2014-01-17 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Correct CREATE_GROUP message. 2014-01-17 Timo Pollmeier * CMakeLists.txt: Add installation of new files: src/wizards/get_tasks_deep.xml, src/wizards/delete_task_deep.xml, src/wizards/quick_auth_scan.xml, src/wizards/reset_task.xml. * src/wizards/delete_task_deep.xml: New wizard. * src/wizards/get_tasks_deep.xml: New wizard. * src/wizards/quick_auth_scan.xml: New wizard. * src/wizards/quick_first_scan.xml: Add copyright and usage comments. * src/wizards/reset_task.xml: New wizard. 2014-01-17 Matthew Mundell * src/omp.c (buffer_notes_xml, buffer_overrides_xml): Send permissions too. 2014-01-17 Matthew Mundell * src/openvasmd.c (load_cas): Remove debug messages. 2014-01-16 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Handle new delete_user return. * src/manage_sql.c (delete_user): Refuse to delete current user. 2014-01-16 Matthew Mundell * src/manage_sql.c (update_config_cache_init): New function. * src/manage_sql.h: Add header accordingly. Format headers like others. * src/manage_config_host_discovery.c (check_config_host_discovery): Add config cache updating. 2014-01-16 Matthew Mundell * src/manage_sql.c (init_manage): Clean up alignment. 2014-01-16 Matthew Mundell * src/report_formats/HTML/HTML.xsl (result [issue]): Replace GSA class with explicit style. 2014-01-15 Matthew Mundell * src/report_formats/HTML/HTML.xsl (openvas:get-nvt-tag): Correct alignment. * src/report_formats/LaTeX/latex.xsl (openvas:get-nvt-tag) (openvas:newstyle-nvt): New functions. (prognostic-description): New template. (result-details-host-port-threat): Add description sections for new style NVTs. 2014-01-15 Benot Allard Post release version bump. * CMakeLists.txt: Change version to 5.0+beta5 2014-01-15 Matthew Mundell * src/report_formats/HTML/HTML.xsl (openvas:get-nvt-tag) (openvas:newstyle-nvt): New functions. (structured-text, ref_cve_list, ref_bid_list, ref_cert_list) (ref_xref_list): New templates. (nvt): Remove. (result [issue]): Add description sections for new style NVTs. 2014-01-15 Timo Pollmeier * src/manage_migrators.c (manage_migrate): Change log level of CERT database not found messages to message. Count missing SCAP / CERT databases as current for the purpose of this function. 2014-01-15 Benot Allard * CHANGES: Add mention of the --migrate behavior change, add date 2014-01-15 Timo Pollmeier * tools/greenbone-certdata-sync (check_db_version): Delete newlines from SQLite response. * tools/greenbone-scapdata-sync (check_db_version): Delete newlines from SQLite response. * tools/openvas-certdata-sync.in: If $CERT_DIR is not set, use value of cmake variable OPENVAS_CERT_DATA_DIR. (check_db_version) Delete newlines from SQLite response. * tools/openvas-scapdata-sync.in: If $SCAP_DIR is not set, use value of cmake variable OPENVAS_SCAP_DATA_DIR. (check_db_version) Delete newlines from SQLite response. 2014-01-15 Timo Pollmeier * src/manage_sql.c (init_manage): Remove extra calls of g_free in SCAP / CERT version checks. 2014-01-14 Timo Pollmeier * src/manage.c (openvas_get_sync_script_identification): Skip returning the identification string via the parameter "identification" if the parameter is NULL. (openvas_migrate_secinfo): Remove NVT_FEED option from documentation of feed_type parameter. Do not get identification string. * src/manage_migrators.c (manage_migrate): Add initialization for version_current and scap_version_current. Check old_cert_version if CERT database exists. * src/manage_sql.c (init_manage): Remove extra initialization of cert_db_version. Get version number for correct database in error messages. 2014-01-14 Timo Pollmeier If SCAP and/or CERT database exists, check version on openvasmd startup and migrate them to current version on openvasmd --migrate. * CMakeLists.txt (OPENVASMD_SCAP_DATABASE_VERSION) (OPENVASMD_CERT_DATABASE_VERSION): New variables. * src/CMakeLists.txt (OPENVASMD_SCAP_DATABASE_VERSION) (OPENVASMD_CERT_DATABASE_VERSION): New "add_definitions". * src/manage.c (openvas_migrate_secinfo): New function. * src/manage.h (manage_scap_db_supported_version) (manage_scap_db_version, manage_cert_db_supported_version) (manage_cert_db_version, openvas_migrate_secinfo): New function prototypes. * src/manage_migrators.c (manage_migrate): Add migration of SCAP and CERT databases in case they exist. * src/manage_sql.c (manage_scap_db_supported_version) (manage_scap_db_version, manage_cert_db_supported_version) (manage_cert_db_version): New functions. (init_manage): Check version of SCAP and CERT databases, if they exist. * src/openvasmd.c (main): Handle new SCAP and CERT related return values of manage_migrate. * tools/greenbone-scapdata-sync, tools/greenbone-certdata-sync, tools/openvas-scapdata-sync.in, tools/openvas-certdata-sync.in: New parameter "--migrate" 2014-01-13 Matthew Mundell * CMakeLists.txt (OPENVAS_CA_DIR): Change to trusted_certs for clarity. 2014-01-13 Matthew Mundell Add NVT and "Strictly unauthenticated" preference to Host Discovery config. * src/manage_sql.c (init_manage): Call check_config_host_discovery. * src/manage_config_host_discovery.c (make_config_host_discovery): Align SQL values properly. Correct -PA value, which is redundant anyway. Remove duplicate. (NAME): New define. (check_config_host_discovery): New function. 2014-01-10 Matthew Mundell * src/openvasmd.c (load_cas): Skip "." and "..". 2014-01-10 Matthew Mundell Trust certificates located in var/lib/openvas/openvasmd/CAs. This helps the Scanner use a self-signed certificate. * CMakeLists.txt (OPENVAS_CA_DIR): New variable. * src/CMakeLists.txt: Add CA_DIR definition. * src/openvasmd.c (load_cas): New function. Loads CAs. (serve_client, update_or_rebuild_nvt_cache): Load the CAs. 2014-01-10 Matthew Mundell * src/otp.c (process_otp_scanner_input): In SCANNER_TIME_SCAN_END stop the transaction before calling delete_task_lock, because it also runs a transaction. 2014-01-08 Matthew Mundell * src/openvasmd.c (main): Use ellispes in message to match Scanner better. Print \b separately. 2014-01-08 Matthew Mundell Add --progress option, which displays a progress spinner during --rebuild and --update. * src/openvasmd.c (serve_client): Update serve_omp call. (spin_progress): New function. (update_or_rebuild_nvt_cache): Add progress arg. Pass to OMP functions. (fork_update_nvt_cache): Update update call. (main): Add --progress option. * src/manage_sql.c (progress): New variable. (create_tables, init_manage_process, insert_nvt_from_nvti) (manage_complete_nvt_cache_update): Spin at long ops. (init_manage): Add progress arg. * src/omp.c (init_omp): Add progress arg. * src/otp.c (parse_scanner_preference_value) (process_otp_scanner_input): Add progress arg. * src/ompd.c (init_ompd, serve_omp): Add progress arg. * src/ompd.h, src/omp.h, src/manage.h: Update headers accordingly. 2014-01-07 Matthew Mundell * src/manage_sql.c (report_counts_match): Also check whether the NVT exists, in the SQL, otherwise sql_int aborts if the NVT has been removed from the feed. 2014-01-07 Matthew Mundell * src/manage_migrators.c (migrate_57_to_58, migrate_62_to_63) (migrate_67_to_68, migrate_68_to_69, migrate_71_to_72, migrate_72_to_73) (migrate_74_to_75, migrate_79_to_80): Ensure tables exist before using them. 2014-01-06 Jan-Oliver Wagner Preparing the openvas-manager 5.0+beta4 release. * CHANGES: Updated. No date set yet. 2013-12-27 Michael Wiegand Add support for compressing large attachements. * report_formats/verinice-ism/generate: Add support for compressing the attached report if it is over 10 MB in size, updating file name and MIME type as required. * report_formats/verinice-ism/gsm_verinice_ism.xsl: Handle htmlmimetype parameter now that the MIME type is dynamic. 2013-12-27 Michael Wiegand * report_formats/verinice-ism/generate: Use date of scan start instead of date of report generation in the file names. 2013-12-18 Timo Pollmeier * src/manage.c (severity_in_level): Remove duplicate "high" case for the "classic" severity class (which was never reached) and fix valid CVSS range for first "high" case. 2013-12-17 Matthew Mundell * src/report_formats/CSV_Results/CSV_Results.xsl (result): Skip protocol if port is empty. (report): Rename OID to NVT OID. 2013-12-17 Matthew Mundell * src/report_formats/CSV_Hosts/CSV_Hosts.xsl (openvas:max-cvss) (openvas:ip-pad): New functions. (report): Add Scan End column. Sort hosts by CVSS then IP then Scan Start. 2013-12-17 Jan-Oliver Wagner * src/manage_sql.c (init_manage): Made upper limit of ips allow 40000 instead of 39999. 2013-12-17 Hani Benhabiles * src/otp.c (parse_scanner_certificate_public_key) (parse_scanner_preference_value, parse_scanner_plugin_list_tags): Use message value directly instead of calling messages_value to encode in UTF-8 as scanner does it now. (process_otp_scanner_input): Adjust code to messages being already UTF-8 encoded. (blank_control_chars, messages_value): Remove unused function. 2013-12-17 Matthew Mundell Add new option --max-ips-per-target. * src/manage_sql.c (max_hosts): New variable. (init_manage): Add max_ips_per_target arg. (manage_max_hosts): New function. (create_target, modify_target): Switch to max hosts variable. * src/omp.c (omp_xml_handle_end_element): Switch to max hosts function. (init_omp): Add max_ips_per_target arg. * src/ompd.c (init_ompd): Add max_ips_per_target arg. * src/manage.h, src/omp.h, src/ompd.h: Udpate headers accordingly. * src/openvasmd.c (update_or_rebuild_nvt_cache): Update init_ompd call. (main): Add --max-ips-per-target. Update init_ompd call. 2013-12-16 Matthew Mundell * src/manage_sql.c (init_manage): Rename CSV Summary to CSV Hosts. 2013-12-16 Matthew Mundell * src/report_formats/CSV_Summary: Actually remove dir. 2013-12-16 Matthew Mundell * src/report_formats/CSV_Hosts/CSV_Summary.xsl: Remove. Renamed. * src/report_formats/CSV_Hosts/CSV_Hosts.xsl: New file. Was CSV_Summary.xsl. * src/report_formats/CSV_Hosts/generate: Update file name. 2013-12-16 Matthew Mundell * CMakeLists.txt: Rename CSV_Summary to CSV_Hosts. * src/report_formats/CSV_Summary, src/report_formats/CSV_Summary/CSV_Summary.xsl, src/report_formats/CSV_Summary/generate: Remove. Renamed. * src/report_formats/CSV_Hosts: New dir. Was CSV_Summary. * src/report_formats/CSV_Hosts/CSV_Summary.xsl, src/report_formats/CSV_Hosts/generate: New files. From CSV_Summary. 2013-12-16 Matthew Mundell * src/report_formats/CSV_Results/CSV_Summary.xsl (result): Move NVT Name and IP. Add CVSS. 2013-12-16 Matthew Mundell * src/report_formats/CSV_Results/CSV_Results.xsl (result): Move NVT Name and Summary forward. (report): Rename a few columns. 2013-12-13 Timo Pollmeier * src/schema_formats/XML/OMP.xml (run_wizard): Add read_only attribute to command. * doc/omp.html, doc/omp.rnc: Update from source. 2013-12-12 Matthew Mundell * src/report_formats/CSV_Results/CSV_Results.xsl (openvas:new-style-nvt): New function. From GSA. (result): Move Result ID to the end. Add Detection Result in its place. Do quoting in Task Name. (report): Move Result ID to the end. Add Detection Result in its place. 2013-12-11 Matthew Mundell * src/report_formats/CSV_Results/CSV_Results.xsl (openvas:get-nvt-tag): New template. (quote, two-quotes): New params. (results): Add more fields. Indent normally. Replace " with "" in summary. (/report): Add heading. Indent normally. 2013-12-11 Matthew Mundell Add new predefined report format CSV Results. Based on the Sourcefire report format. * src/manage_sql.c (init_manage): Setup CSV Results. (report_format_predefined): Add CSV Results. * src/report_formats/CSV_Results: New dir. * src/report_formats/CSV_Results/CSV_Results.xsl, src/report_formats/CSV_Results/generate: New files. * CMakeLists.txt: Add CSV Results report format. 2013-12-11 Matthew Mundell Add new predefined report format CSV Summary. Report format written by Henri Doreau. * src/manage_sql.c (init_manage): Setup CSV Summary. (report_format_predefined): Add CSV Summary. * src/report_formats/create_signatures: Replace spaces with underscores in name. * src/report_formats/CSV_Summary: New dir. * src/report_formats/CSV_Summary/CSV_Summary.xsl, src/report_formats/CSV_Summary/generate: New files. * CMakeLists.txt: Add CSV Summary report format. 2013-12-09 Matthew Mundell * src/manage.c (slave_setup): Request passwords from buffer_config_preference_xml. * src/omp.c (buffer_config_preference_xml): Add hide_passwords param. Update callers. 2013-12-09 Michael Wiegand * report_formats/verinice-ism/gsm_verinice_ism.xsl: Improve support for "Info" assets. 2013-12-05 Timo Pollmeier * src/manage.c (manage_run_wizard): Add missing check for read_only parameter. 2013-12-05 Matthew Mundell * src/manage_sql.c (nvt_preference_iterator_real_name): Duplicate to the end of the string, because there's always a trailing zero and the sscanf expression may cut the preference name short if it contains special characters. * src/otp.c (message_value): New function. (parse_scanner_certificate_public_key, parse_scanner_preference_value) (parse_scanner_plugin_list_tags): Use messages_value to get value, so that UTF-8 conversion is done. (parse_scanner_plugin_dependency_dependency): Add note about conversion. 2013-12-05 Michael Wiegand Add parameter to disable or enable attaching of the HTML report to the verinice ISM report. * report_formats/verinice-ism/generate: Generate HTML report only when requested. * report_formats/verinice-ism/gsm_verinice_ism.xsl: Only include HTML report if it was requested. * report_formats/verinice-ism/create_report_import: Add support for parameters, include HTML report parameter. Add support for inline signature. Bump version. 2013-12-05 Timo Pollmeier * src/manage.c (manage_run_wizard): Add read_only parameter and check wizard XML for a read_only element if it is true. * src/manage.h (manage_run_wizard): Add new parameter. * src/omp.c (run_wizard_data_t, run_wizard_data_reset): Add read_only component. (omp_xml_handle_start_element): Add read_only attribute to RUN_WIZARD. (omp_xml_handle_end_element): Add parameter and error message for read_only check in CLIENT_RUN_WIZARD case. 2013-12-03 Matthew Mundell * src/manage_sql.c (PERMISSION_ITERATOR_FILTER_COLUMNS): Add subject_uuid. 2013-12-03 Timo Pollmeier * src/manage.c (manage_run_wizard): Return response of last command via new ret_response parameter. * src/manage.h (manage_run_wizard): Add new parameter. * src/omp.c (omp_xml_handle_end_element): Add response of last command run by wizard to RUN_WIZARD response. * src/schema_formats/XML/OMP.xml (run_wizard): Add response of last command to response. * doc/omp.html, doc/omp.rnc: Update from source. 2013-12-02 Matthew Mundell * src/manage_migrators.c (migrate_79_to_80): Check if users-remote directory exists before trying to remove it. 2013-12-02 Michael Wiegand Add new report format plugin for exporting TLS mapping results into a CSV file. * report_formats/tls-map/, report_formats/tls-map/tls-map.xsl, report_formats/tls-map/create_report_import, report_formats/tls-map/generate: New. 2013-12-02 Matthew Mundell * src/manage_sql.c (REPORT_FORMAT_ITERATOR_TRASH_COLUMNS): Correct table name. 2013-12-02 Matthew Mundell * src/manage_sql.c (REPORT_FORMAT_ITERATOR_COLUMNS): Move the _owner selection in the last field to replace the dummy owner selection in the usual position. This was preventing messing up the permissions in GET_REPORT_FORMAT. (REPORT_FORMAT_ITERATOR_TRASH_COLUMNS): Match to table case. 2013-11-29 Matthew Mundell * src/manage_sql.c (parse_keyword): Only test the number cases when there are actually leading digits, otherwise terms like subject=y are treated as dates. 2013-11-29 Matthew Mundell * INSTALL: Update option name. 2013-11-29 Matthew Mundell * src/openvasmd.c (main): Add option --delete-user. * src/manage_sql.c (manage_delete_user): New function. (delete_user): Correct value in doc. * src/manage.h: Add header accordingly. 2013-11-29 Matthew Mundell * src/openvasmd.c (main): Rename option --first-user to --create-user. Add --role, which allows to set the role with --first-user. * src/manage_sql.c (find_resource_by_name): New function. Body from find_user_by_name. (find_role_by_name, role_uuid): New functions. (manage_first_user): Remove. Now manage_create_user. (manage_create_user): New function. Was manage_create_user. Add role arg. Remove storage of username in meta. (find_user_by_name): Call find_resource_by_name. * src/manage.h: Update headers accordingly. 2013-11-29 Matthew Mundell * src/manage_sql.c (print_report_prognostic_xml): Do the variable inits in one place. Count the hosts being looped over, instead of counting all hosts for each report. Similarly for apps, buffer unique CPE names in the loop and count them at the end, instead of counting all CPEs on the reports associated with the hosts. 2013-11-29 Matthew Mundell * src/manage_sql.c (manage_first_user): Return the value of create_user, so that the exit code is EXIT_FAILURE when there is a problem. 2013-11-28 Matthew Mundell * src/manage_sql.c (init_task_user_iterator): Remove name clause. Add locations. (init_task_group_iterator): Add subject location. 2013-11-28 Matthew Mundell * src/manage_sql.c (permissions_set_locations) (permissions_set_orphans): Add trash cases. 2013-11-28 Matthew Mundell * src/manage_sql.c (PERMISSION_ITERATOR_COLUMNS) (PERMISSION_ITERATOR_TRASH_COLUMNS): Add subject_location checks to subject selection. Add subject_location field. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): Add TRASH to SUBJECT in GET_PERMISSIONS. 2013-11-28 Matthew Mundell Track trash/table location of groups in permissions. Hence increase database version to 110. Add database migration from version 109 to 110. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 110. * src/manage_migrators.c (migrate_109_to_110): New function. (database_migrators): Add migrate_109_to_110. * src/manage_sql.c (create_tables): Add subject_location to permissions tables. (add_role_permission, init_manage, set_task_groups, set_task_observers) (copy_task): Handle subject_location when inserting a permission. (delete_group): Delete permissions assigned to group. When moving to trashcan adjust subject in permissions. (permissions_set_subjects): New function. (create_permission, delete_permission): Handle subject_location when inserting a permission. (copy_permission): Add subject_location to fields. (manage_restore): When restoring group adjust subject in permissions. Add subject_location to group insert. * doc/db.png: Update for version change. 2013-11-28 Matthew Mundell * src/manage_sql.c (delete_group): Use the trash check when in trashcan. (group_in_use): Remove dependence on permission. This is probably more the expected behaviour. (delete_user): Delete user's permissions and permissions assigned to user. Remove trailing paren errors that were hidden by the sql function error. 2013-11-27 Matthew Mundell * src/omp.c (send_get_common): Add special cases for the permissions of the shared types, because their access is determined by the command level permissions. * src/manage.h: Extern user_can_everything for omp.c. 2013-11-27 Matthew Mundell * src/sql.c (sql): Correct return value in conditional. This was hiding SQL errors. * src/manage_sql.c (copy_resource_lock): Add owner value for the admin case. (create_tables): Add "IF NOT EXISTS" to index SQL. 2013-11-27 Matthew Mundell * src/ompd.c (serve_omp): In more places check client_active before closing the client socket. 2013-11-27 Matthew Mundell Mark permissions when the associated resource is deleted. * src/manage_sql.c (delete_alert, delete_report_internal) (delete_target, delete_config, delete_lsc_credential, delete_agent) (delete_note, delete_override, delete_schedule, delete_report_format) (delete_slave, delete_port_list, delete_filter, delete_tag): Set orphan in permission when ultimately removing resource from db. (request_delete_task_uuid): Remove setting of locations. Better done in delete_task. (delete_task): Set orphan and location. (delete_group): Remove setting of location, as resource permissions are prevented on groups. (permissions_set_locations): Add missing location clause. (permissions_set_orphans): New function. (PERMISSION_ITERATOR_COLUMNS, PERMISSION_ITERATOR_TRASH_COLUMNS): Add orphan field. Adjust accessors accordingly. (permission_iterator_resource_orphan): New function. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): In GET_PERMISSION mark resource as deleted if it has been. 2013-11-26 Matthew Mundell Add trash indicator to RESOURCE in GET_PERMISSIONS response. * src/manage_sql.c (resource_name): New function. Body from sql_resource_name, with added location arg for trash case. (init_manage): Add new resource_name arg. (PERMISSION_ITERATOR_COLUMNS, PERMISSION_ITERATOR_TRASH_COLUMNS): Add resource location. Adjust accessors accordingly. (permission_iterator_resource_in_trash): New function. (TAG_ITERATOR_COLUMNS): Pass location to resource_name. Cleanup formatting. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): Add trash indicator to GET_PERMISSIONS response. * src/sql.c (sql_resource_name): Call out to resource_name. (sql_severity_in_level): Correct doc typo. 2013-11-26 Matthew Mundell * src/manage_sql.c (delete_alert, request_delete_task_uuid) (delete_target, delete_config, delete_lsc_credential, delete_agent) (delete_note, delete_override, delete_schedule, delete_report_format) (delete_slave, delete_group, delete_port_list, delete_filter) (delete_tag): Adjust location in permission when moving to trash. (permissions_set_locations): New function. (manage_restore): Adjust location in permission. 2013-11-25 Matthew Mundell * src/manage_config_discovery.c (NVT_SELECTOR): Put the column names in, at least for clarity. Use NVT_SELECTOR_TYPE_ALL instead of 2. (make_config_discovery): Match transaction SQL to rest of Manager. 2013-11-25 Matthew Mundell Add new predefined config Host Discovery. * src/manage_sql.c (init_manage): Make Host Discovery config. (delete_config, config_in_use, delete_user): Add Host Discovery config. * src/manage.h (CONFIG_UUID_HOST_DISCOVERY) (MANAGE_NVT_SELECTOR_UUID_HOST_DISCOVERY): New defines. * src/manage_config_host_discovery.c: New file. * src/CMakeLists.txt: Add manage_config_host_discovery.c to manage library. (C_FILES): Add config source files. 2013-11-22 Matthew Mundell * src/manage_sql.c (copy_resource_lock): Refuse to clone other people's property, because the permissions on the dependant resources may change. 2013-11-22 Matthew Mundell * src/manage_sql.c (modify_setting): Add Permissions Filter. 2013-11-22 Michael Wiegand Post release version bump. * CMakeLists.txt: Updated version number to 5.0+beta4. 2013-11-22 Michael Wiegand Preparing the openvas-manager 5.0+beta3 release. * CHANGES: Updated. 2013-11-22 Matthew Mundell Increase database version to 109 to ensure that permission all use full command names. Add database migration from version 108 to 109. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 109. * src/manage_migrators.c (migrate_108_to_109): New function. (database_migrators): Add migrate_108_to_109. * doc/db.png: Update for version change. 2013-11-21 Matthew Mundell * src/manage_sql.c (modify_permission): Only do the takes_resource check when there is a resource, and return an error instead of clearing the id, otherwise the permission will be upgraded to a command level permission. Use permission instead of resource when getting command name from permission. Free command after use, instead of before. Ensure that the user may grant the permission. Clear the owner if it's a command level permission. * src/omp.c (omp_xml_handle_end_element): Handle new modify_permission return. 2013-11-21 Matthew Mundell * src/manage_sql.c (copy_resource_lock): Use the current owner in all cases. (copy_permission): Clear the owner after if it's a command level permission. (modify_permission): Set resource_type only when there's a resource_id, otherwise the permission permission gets a type. * src/sql.c (sql_resource_name): Include type in error message. 2013-11-21 Timo Pollmeier * src/manage_sql.c (print_report_prognostic_xml): Apply overrides to hosts if apply_overrides is true. * src/omp.c (omp_xml_handle_start_element): Add attribute host_search_phrase to GET_REPORTS. * src/schema_formats/XML/OMP.xml (get_reports): Add host_search_phrase attribute to command. * doc/omp.html, doc/omp.rnc: Update from source. 2013-11-21 Matthew Mundell * src/manage_sql.c (set_task_groups, set_task_observers): Use full permission name. 2013-11-20 Matthew Mundell * src/manage_acl.c (user_is_user): New function. * src/manage.h: Add header accordingly. * src/manage_sql.c (authenticate): Check if user actually has the User role. 2013-11-20 Matthew Mundell * src/manage_sql.c (init_manage): Allow observers to get and modify their settings. 2013-11-20 Timo Pollmeier * src/manage_sql.c (init_prognosis_iterator): Cast CVSS to numeric instead of integer to avoid rounding. (prognosis_order_by): New function. (init_host_prognosis_iterator): Add sorting field and order parameters. (prognostic_report_result_count): Remove ORDER BY clauses not needed for counting. (print_report_prognostic_xml): Add sorting field and order parameters. (print_report_xml): Use sorting field and order also for prognostic reports. 2013-11-20 Matthew Mundell * src/omp.c (send_get_common): Send user's permissions on the resource. 2013-11-19 Matthew Mundell * src/manage_acl.c (type_is_shared): Remove types, as the operation level permissions prevent regular users from even using the associated commands anyway. 2013-11-19 Matthew Mundell * src/manage_sql.c (manage_first_user, manage_set_password): Init openvas_auth. * src/openvasmd.c (main): Check openvas_auth_init_funcs return. 2013-11-19 Matthew Mundell * src/manage_acl.c (USER_MAY): Remove. Duplicate. (user_may): Add more args for USER_MAY update. * src/manage_acl.h (USER_MAY): Correct the implied permission case. * src/manage_sql.c (init_port_range_iterator): Add more args for USER_MAY update. 2013-11-18 Matthew Mundell * src/manage_sql.c (create_permission): Restrict creating upper level permissions to users with admin permissions. 2013-11-18 Matthew Mundell * src/manage_sql.c (create_permission): When creating a higher level permission, where the resource is 0, make the owner NULL so that the permission is shared between the admins, and remains even if the creator user is removed. 2013-11-18 Matthew Mundell Add options --user and --new-password. * src/manage_sql.c (modify_setting): Use set_password. (set_password): New function. Body from modify_setting. (manage_set_password): New function. * src/manage.h: Add header accordingly. * src/openvasmd.c (main): Add new options. 2013-11-16 Hani Benhabiles Set Interfaces and Hosts access "Allow All" to "Deny none". Hence increase database version to 108. Add database migration from version 107 to 108. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 108. * src/manage_migrators.c (migrate_107_to_108): New function. (database_migrators): Add migrate_107_to_108. 2013-11-15 Hani Benhabiles * src/manage_sql.c (create_tables): Update comment for host and interfaces access. (create_user): Don't set hosts_allow value to 2 in "deny none" case. * src/omp.c (omp_xml_handle_start_element): Set hosts_allow and ifaces_allow default value to 0 in CREATE_USER case. (omp_xml_handle_end_element): Don't send hosts_allow and ifaces_allow value as 2 when hosts and ifaces values are empty in CLIENT_GET_USERS. 2013-11-15 Matthew Mundell * src/manage_sql.c (create_permission): Prevent resource linked permission for users, roles and groups. 2013-11-15 Matthew Mundell Isolate the access control code in an Access Control Layer file. * src/manage_sql.c (user_can_everything, user_owns_uuid) (user_has_access_uuid, user_owns_result, user_is_admin) (user_is_observer, user_may, type_has_permissions, type_is_shared) (where_owned): Remove. Moved to manage_acl.c. (USER_MAY): Remove. Moved to manage_acl.h. (credentials_is_admin): Remove. Out of use. * src/omp.c (omp_xml_handle_end_element): Handle new create_permission * src/manage_acl.c, src/manage_acl.h: New files. * src/CMakeLists.txt: Add manage_acl.c to manage library. (C_FILES): Add manage_acl.c. 2013-11-15 Matthew Mundell * src/manage_sql.c (init_manage): Remove GET_VERSION from role permissions. Add HELP to observer permissions. (create_permission): Refuse to create permission on GET_VERSION. It has no permission check now, and is available without authentication anyway. Return an error if a resource is given for a permission that does not take resources, instead of ignoring the resource. * src/omp.c (omp_xml_handle_end_element): Handle new create_permission return. 2013-11-15 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In GET_VERSION remove permission check so that the command is always available. Also use correct state in condition, otherwise the user is always considered authenticated after GET_VERSION. 2013-11-14 Matthew Mundell * src/manage_sql.c (user_can_everything): Move up in file. (user_has_access_uuid): Take full command name into account in the checks for GET permission. Use user_can_everything instead of credentials_is_admin to check for full permissions, because credentials_is_admin just checks the role. (init_get_iterator): Clarify permission used in get->id case. (report_counts): Use full permission name. 2013-11-14 Matthew Mundell * src/manage_sql.c (USER_MAY): New macro. (user_may): Use macro. (init_port_range_iterator): Use USER_MAY, so that the port ranges are still accessible if the port list is owned by someone else. 2013-11-13 Matthew Mundell * src/manage_sql.c (user_can_everything, type_is_shared): New functions. (user_may): Use user_can_everything. (where_owned): Add special cases for users, groups and roles, that use restrict the "global" resources to users with admin permissions. (init_manage_process): Init SQL function user_can_everything. * src/sql.c (sql_user_can_everything): New function. * src/sql.h: Add header accordingly. 2013-11-13 Matthew Mundell Add resource level permission checking to remaining commands. * src/manage.c (run_task): Add permission arg and check. (start_task, stop_task, pause_task, resume_paused_task) (resume_stopped_task, resume_or_start_task): Add permissions to find and run_task calls. (init_report_format_file_iterator): Use the owner of the report format in the path, instead of assuming that the current user is the owner. * src/manage_sql.c (manage_alert): Use permission version of find function. (make_report): Get the report owner from the task, instead of using the current user. (verify_agent): Use permission find. Adjust filter so that iterator actually find the report format. Add warnings. (verify_report_format): Use permission find. (report_format_owner_uuid): New function. * src/manage.h: Add header accordingly. 2013-11-13 Matthew Mundell Add resource level permission checking to MODIFY commands. * src/manage_sql.c (modify_alert, modify_report, modify_target) (modify_lsc_credential, modify_agent, modify_schedule) (modify_report_format, modify_slave, modify_port_list) (modify_filter, modify_tag): Use permission version of find function. (modify_group, modify_user): Add note about permission check. (find_note): Neaten indent. * src/manage.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): Use permission version of find function for MODIFY_NOTE and MODIFY_OVERRIDE. 2013-11-12 Matthew Mundell * src/manage_sql.c (ANON_GET_ITERATOR_COLUMNS): Add _owner. (REPORT_ITERATOR_FILTER_COLUMNS): Adjust line end marker. (REPORT_ITERATOR_COLUMNS, NOTE_ITERATOR_COLUMNS) (OVERRIDE_ITERATOR_COLUMNS, REPORT_FORMAT_ITERATOR_COLUMNS): Select _owner too. (REPORT_FORMAT_ITERATOR_FILTER_COLUMNS): Neaten NULL formatting. 2013-11-12 Hani Benhabiles * src/manage_sql.c (print_report_assets_xml): Send report result count detail for number of log results. 2013-11-12 Matthew Mundell * src/manage_sql.c (valid_type): Add missing "group" check. Order alphabetically. 2013-11-12 Matthew Mundell Add resource level permission checking to CREATE commands. * src/manage_sql.c (type_has_comment): New function. (copy_resource_lock): Add old_resource return arg. Find with the permissions function instead of by hand. Check if the type has comments when generating SQL. (copy_alert, copy_task, copy_config, copy_report_format, copy_group) (copy_port_list, copy_user): Use copy_resource_lock to do most of the work. (copy_target, copy_tag): Use copy_resource to do the work. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_CONFIG adjust for standardised copy_config call. 2013-11-12 Hani Benhabiles * src/manage_sql.c (report_port_count): Do not count results and error messages with no specific port value set as a distinct port. 2013-11-11 Hani Benhabiles * src/ompd.c (serve_omp): Return commented out code removed in previous change. Remove maybe_free_scanner_rules call. 2013-11-11 Hani Benhabiles * src/manage.c (scanner): Initialize accordingly. (run_task): Don't send client rules. * src/manage.h (scanner_t): Remove rules and rules_size elements. Delete unused prototype. * src/manage_sql.c (manage_user_rules): Delete function. (make_task_rcfiles): Don't add client side user rules. * src/openvasmd.c: Delete dead code. * src/otp.c (free_rule, maybe_free_scanner_rules, make_scanner_rules) (add_scanner_rule, parse_scanner_rules): Delete functions. (init_otp_data): Update initialization. (scanner_state_t): Delete SCANNER_RULE state. (process_otp_scanner_input): Don't handle SCANNER_RULE and RULES case. 2013-11-11 Hani Benhabiles * src/manage.c (finished_hosts_str): New function. (send_scanner_preferences): Add finished hosts to exclude_hosts preference appropriately. (send_user_rules_empty): Delete function. (run_task): Remove call to send_user_rules_empty. Adjust call to send_scanner_preferences. 2013-11-11 Hani Benhabiles * src/manage_sql.c (create_tables, user_ensure_in_db, copy_user): Adjust to handle users ifaces and ifaces_allow columns accordingly. Issue reported and tracked by Stefan Schwarz. 2013-11-08 Matthew Mundell Add resource level permission checking to DELETE commands. * src/manage_sql.c (find_alert_with_permission): New function. (delete_alert, delete_report, request_delete_task_uuid): Use permission version of find function. (find_report_with_permission): Correct doc. (find_target_with_permission, find_lsc_credential_with_permission) (find_agent_with_permission, find_note_with_permission) (find_override_with_permission, find_schedule_with_permission) (find_report_format_with_permission, find_slave_with_permission) (find_port_list_with_permission, port_range_port_list_uuid) (find_port_range_with_permission, find_filter_with_permission) (find_user_with_permission, find_tag_with_permission): New functions. (delete_target, delete_config, delete_lsc_credential, delete_agent) (delete_note, delete_override, delete_schedule, delete_report_format) (delete_slave, delete_port_list, delete_port_range, delete_filter) (delete_tag): Use permission version of find function. (find_port_range): Remove. Out of use. (delete_group, delete_user): Add note about permissions. (find_tag): Move up in file. 2013-11-05 Hani Benhabiles * src/manage.c (send_ifaces_preferences): Rename to send_ifaces_access_preferences. (send_hosts_access_preferences): New function used to send users host access as hosts_allow and hosts_deny preferences instead of using old rules format. (send_scanner_preferences): Call new functions. (send_user_rules): Delete unused function. 2013-11-07 Matthew Mundell Increase database version to 107 to ensure that all results have a task. Add database migration from version 106 to 107. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 107. * src/manage_migrators.c (migrate_106_to_107): New function. (database_migrators): Add migrate_106_to_107. * doc/db.png: Update for version change. 2013-11-07 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_RESULTS cleanup iterator on error return. 2013-11-06 Matthew Mundell * src/manage_sql.c (create_report): Set the task of the result to the actual task instead of to 0, for consistency with normal results. 2013-11-06 Matthew Mundell * src/manage_sql.c (find_resource_with_permission): Add safety check. * src/omp.c (omp_xml_handle_end_element): Move GET_RESULTS iterator declaration out of GET_REPORTS. In GET_RESULTS rework the loop so that "next" is called before the task check, because the task check may use the iterator. 2013-11-06 Matthew Mundell Remove remains of "actions" GET command parameters. * src/manage_sql.c (count): Remove actions warning. (init_task_user_iterator, init_task_group_iterator) (init_task_role_iterator): Remove old actions doc. (resource_count): Remove actions. * src/manage.h: Update headers accordingly. * src/omp.c (get_data_reset, get_data_parse_attributes) (get_nvts_data_t, get_nvts_data_reset) (omp_xml_handle_start_element): Remove actions. * src/schema_formats/XML/OMP.xml: Remove all actions attributes. Add CHANGE accordingly. (actions): Remove. * doc/omp.html, doc/omp.rnc: Update from source. 2013-11-06 Matthew Mundell * src/manage_sql.c (credential_is_admin): Correct doc. (user_has_access_uuid): Remove unused actions arg. Update all callers. (find_resource_with_permission): Add trash arg. Update all callers. (find_resource_for_actions): Remove. Out of use. (init_get_iterator): Switch to permissions version of find function. (init_task_iterator): Remove doc ref to actions. 2013-11-05 Matthew Mundell * src/manage_sql.c (find_resource_with_permission): New function. (find_task_with_permission, (find_task_for_actions, find_report_for_actions) (find_target_for_actions, find_config_for_actions) (find_lsc_credential_for_actions): Remove. Replaced with permission versions. (find_report_with_permission, find_config_with_permission): Use find_resource_with_permission. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_end_element): Replace actions find calls with permissions versions. 2013-11-05 Matthew Mundell * src/manage_sql.c (parse_actions): Remove. Out of use. (user_has_access_uuid): Use only the permissions case, removing the type_has_permissions check which has been always true for some time now. 2013-11-05 Matthew Mundell * src/manage_sql.c (user_has_access_uuid): Rename arg resource to type, because it's a type. 2013-11-05 Matthew Mundell * src/manage_sql.c (user_has_access_uuid): Check task if type is result. (find_result_with_permission): New function. (find_result_for_actions): Remove. Replaced with permission version. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_end_element): Replace actions version of result finder with permissions version. 2013-11-05 Matthew Mundell * src/manage_sql.c (init_get_iterator): Skip the ownership clause when there is a resource, because the owner check is done when finding the resource. (find_filter_for_actions): Remove. Out of use. 2013-11-05 Matthew Mundell * src/manage_sql.c (credential_is_admin): New function. (user_has_access_uuid): Allow admins to delete/modify/etc other users' permissions. (where_owned): Use new function. 2013-11-05 Matthew Mundell * src/manage_sql.c (where_owned): Make all permissions visible to admins, except those that refer to resources. 2013-11-05 Hani Benhabiles * src/manage.c (send_ifaces_preferences, send_scanner_preferences): New function. (run_task): Refactor code to send_scanner_preferences, and call it accordingly. 2013-11-05 Matthew Mundell * src/manage_sql.c (create_permission): For simplicity, refuse to make a permission on a permission. * src/omp.c (omp_xml_handle_end_element): Handle new return from create_permission. 2013-11-04 Matthew Mundell * src/manage_sql.c (init_task_group_iterator) (init_task_role_iterator): Make the select distinct in case there are multiple permissions for the subject on the task. Include groups that have any type of permission on the task, because all of them can see the task. (set_task_groups): Remove only the 'get' permissions, because those are the ones that this function adds. 2013-11-04 Hani Benhabiles * manage_sql.c (USER_ITERATOR_FILTER_COLUMNS, USER_ITERATOR_COLUMNS) (USER_ITERATOR_TRASH_COLUMNS): Add ifaces and ifaces_allow columns. (user_iterator_ifaces, user_iterator_ifaces_allow): New functions. * src/manage.h: Add prototypes accordingly. * src/omp.c (omp_xml_handle_end_element): Send ifaces element in get_users case. 2013-11-04 Hani Benhabiles Add Interface Access for users. Hence increase database version to 106. Add database migration from version 105 to 106. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 106. * src/manage_migrators.c (migrate_105_to_106): New function. (database_migrators): Add migrate_105_to_106. * src/manage.h: Adjust prototypes accordingly. * src/manage_sql.c (manage_first_user, omp_xml_handle_end_element): Adjust create_user call. (create_user): Add ifaces and ifaces_allow parameters. (create_user_data_t, modify_user_data_t): Add ifaces and ifaces_allow variables. (create_user_data_reset, modify_user_data_reset): Free new variables accordingly. (client_state_t): Add states for ifaces element in user creation and modification. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Handle ifaces element for create_user and modify_user cases. 2013-10-31 Matthew Mundell * src/manage.c (filter_clause): Cast slave port to integer when sorting so that it sorts as numbers. 2013-10-31 Hani Benhabiles * src/openvasmd.c (main): Don't set the process title. Current implementation is buggy and should be replaced. This reverts revision 15874. 2013-10-31 Matthew Mundell * src/manage.c (manage_schedule): Skip warning correctly. 2013-10-31 Matthew Mundell * src/manage.c (manage_schedule): Skip the iterator init warning if it is just due to locking. * src/manage_sql.c (cleanup_manage_process): Cleanup prognosis iterator. (prognosis_stmt): New global variable. Was in init_prognosis_iterator. (cleanup_prognosis_iterator): New function. (init_prognosis_iterator): Use new variable. 2013-10-31 Matthew Mundell * src/manage_sql.c (report_severity): Cleanup iterator. 2013-10-30 Timo Pollmeier * src/manage_sql.c (init_result_iterator): Make sorting by vulnerability case insensitive. 2013-10-30 Timo Pollmeier * src/manage_sql.c (init_result_iterator): Add sorting of results by host and vulnerability (NVT name). Use a variable and normal ifs for the "ORDER BY" clause instead of nested ternary conditionals to improve readability with the added cases. 2013-10-28 Matthew Mundell * src/ompd.c (write_to_scanner): Verify certificate. 2013-10-28 Timo Pollmeier Add expiration time for report_counts. Hence increase database version to 105. Add database migration from version 104 to 105. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 105. * src/manage_migrators.c (migrate_104_to_105): New function. (database_migrators): Add migrate_104_to_105. * src/manage_sql.c (create_tables): Add column end_time to report_counts table. (report_add_result): Update end_time as new results are added. (report_counts_cache_exists, report_counts_from_cache) (report_severity): Check end_time of cache. (report_cache_counts): Calculate and set end_time of cache. * doc/db_postgres.sql (report_counts): Added the table. * doc/db.png: Update from source. 2013-10-24 Matthew Mundell * src/manage_sql.c (AGENT_ITERATOR_FILTER_COLUMNS) (AGENT_ITERATOR_COLUMNS, AGENT_ITERATOR_TRASH_COLUMNS): Add trust, so that at least the GSA sorting works. 2013-10-24 Matthew Mundell * src/manage_sql.c (omp_command_takes_resource): New function. (create_permission, modify_permission): Check if permission takes a resource using shared function. 2013-10-23 Matthew Mundell * src/manage_sql.c (init_user_get_iterator): Remove. Out of use. (init_user_task_iterator): Init the iterator directly. 2013-10-23 Matthew Mundell * src/manage_sql.c (init_user_get_iterator): Remove resource arg. Always 0. Update caller. (init_user_task_iterator): Make static. Remove task arg. Always 0. Update callers. 2013-10-23 Matthew Mundell * src/manage_sql.c (init_user_target_iterator): Simplify to match single caller, removing use of init_user_get_iterator. * src/manage.h: Update header accordingly. * src/manage.c (slave_setup): Update call. 2013-10-23 Matthew Mundell * src/manage_sql.c (where_owned): Add owner_filter arg. (init_get_iterator, count): Move generation of filtered owner clause into where owned so that it's in one place only. The instance in count was missing a NULL check. 2013-10-23 Matthew Mundell * src/manage_sql.c (parse_keyword): Add column check to special values condition, because it can be NULL for keywords "=value". 2013-10-23 Michael Wiegand * CMakeLists.txt: Revert exclusion of pwpolicy.conf via CPACK_SOURCE_IGNORE_FILES since a later install target requires the presence of this file. 2013-10-22 Matthew Mundell * src/manage_sql.c (user_has_access_uuid): Free uuid if it was allocated. 2013-10-22 Matthew Mundell * src/manage_sql.c (user_has_access_uuid): Combine the two SQL cases for getting permissions. Add missing check to args of other cases. 2013-10-22 Matthew Mundell * src/manage_sql.c (user_has_access_uuid): Free quoted_permission. 2013-10-22 Matthew Mundell * src/manage_sql.c (user_has_access_uuid): Combine two SQL cases. 2013-10-22 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Add CURRENT_REPORT to GET_REPORTS. * src/schema_formats/XML/OMP.xml (get_tasks): Add CURRENT_REPORT. * doc/omp.html, doc/omp.rnc: Update from source. 2013-10-21 Matthew Mundell * src/manage_sql.c (DB_CHUNK_SIZE): New define. (init_manage_process): Set SQLite chunk size, to reduce fragmentation. 2013-10-21 Timo Pollmeier * src/manage_sql.c (where_levels_type): Handle false positive results so counts will be accurate when FPs occur without overrides (e.g. in imported reports). 2013-10-21 Timo Pollmeier * src/manage_sql.c (task_severity, init_result_iterator) (init_asset_iterator, report_scan_result_count, report_severity_data) (filtered_host_count, note_count, init_note_iterator, override_count) (init_override_iterator): Use CVSS of NVT for dynamic severity only if the original severity of a result is above Log level. (report_counts_cache_exists, cache_report_counts): Do not use result counts cache when dynamic severity setting is active. 2013-10-21 Hani Benhabiles * src/manage.c (send_task_preferences): Send source_iface task preference. * src/omp.c (omp_xml_handle_end_element): Output Network Source Interface task preference in GET_TASKS case. 2013-10-21 Matthew Mundell * src/manage_sql.c (init_get_iterator, count): Add "owned" check to the filtering on the owner clause. (resource_count): Send owner args only when the type has owners. 2013-10-21 Timo Pollmeier * src/manage_sql.c (where_levels_type): Get severity field in case all levels are selected. 2013-10-21 Timo Pollmeier * src/schema_formats/XML/OMP.xml (report): Add severity to port element. (get_reports): Add severity to port element in example. * doc/omp.html, doc/omp.rnc: Update from source. 2013-10-18 Matthew Mundell * src/manage_sql.c (init_get_iterator): Add "owner IS NULL" to default case in the owner= filtering, to include global rows. 2013-10-18 Timo Pollmeier * src/manage_sql.c (compare_ports_severity) (compare_ports_severity_desc): Use correct variables for comparison. 2013-10-18 Timo Pollmeier Change sorting and XML output of hosts to use severity instead of threat or cvss_base and output both numeric severity and threat level. * src/manage_sql.c (compare_message_types_desc) (compare_message_types_asc, compare_port_threat): Removed. Renamed to compare_severity_desc, compare_severity_asc, compare_port_severity. (compare_severity_desc, compare_severity_asc, compare_port_severity): New functions. Renamed from compare_message_types_desc, compare_message_types_asc, compare_port_threat and adjusted to sort by severity instead of threat level. (add_port, print_host_port, print_host_ports_desc): Use severity instead of threat level string. (compare_ports_threat, compare_ports_threat_desc) (print_host_ports_by_type, print_host_ports_by_type_desc): Removed. Renamed to compare_ports_severity, compare_ports_severity_desc, print_host_ports_by_severity, print_host_ports_by_severity_desc. (compare_ports_severity, compare_ports_severity_desc) (print_host_ports_by_severity, print_host_ports_by_severity_desc): New functions. Renamed from compare_ports_threat, compare_ports_threat_desc, print_host_ports_by_type, print_host_ports_by_type_desc and adjusted to sort by severity. (print_report_port_xml, print_report_xml): Adjust to sort ports by severity instead of threat and output severity and threat elements for ports. 2013-10-17 Matthew Mundell * src/manage_sql.c (filter_clause): Skip the SQL in the owner case, instead of putting in a placeholder, because the placeholder was acting like an OR term. 2013-10-17 Matthew Mundell * src/manage_sql.c (filter_clause): Add owner_filter arg. For owner= keywords append an SQL placeholder, and return the owner to the callers. Update callers. (init_get_iterator, count): Use the owner= value from filter_clause to filter according to the owner in the "owned" clause. This makes the owner= keyword a special filter that is always ANDed with the others, similar to permissions. (resouce_count): Add owner=any to the filter string, so that the count is the maximum possible. 2013-10-16 Matthew Mundell * src/manage_sql.c (delete_port_range): Match return to standard delete functions. 2013-10-16 Matthew Mundell * src/omp.c (modify_task_data_t, modify_task_data_reset) (client_state_t): Add alterable field. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add ALTERABLE to MODIFY_TASK. 2013-10-16 Matthew Mundell * src/manage_sql.c (set_task_alterable): New function. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): Also respect ALTERABLE in the regular CREATE_TASK case. 2013-10-15 Timo Pollmeier * src/manage_sql.c (filter_clause): Sort NVTs of notes and overrides in descending order in sort-reverse case. (USER_ITERATOR_FILTER_COLUMNS, USER_ITERATOR_COLUMNS): Change column "role" to "roles" and add "groups". Get comma-separated lists of the roles and groups of the user for these. 2013-10-15 Michael Wiegand * src/report_formats/NBE/NBE.xsl: Generate truncated "subnet" element for improved compatibility. Put newline before scan_end for consistency. 2013-10-15 Timo Pollmeier * src/manage.c (next_time): New function containing the functionality of last version schedule_iterator_next_time and additionally uses period_months if applicable. * src/manage.h (next_time): New function prototype. * src/manage_sql.c (init_manage_process): Add SQL function next_time. (SCHEDULE_ITERATOR_FILTER_COLUMNS, SCHEDULE_ITERATOR_COLUMNS): Add column next_run, add first_run as alias for first_time. (schedule_iterator_next_time): Get time from next_run column. Calculation moved to next_time. * src/sql.c (sql_next_time): New function. * src/sql.h (sql_next_time): New function prototype. 2013-10-14 Matthew Mundell * doc/db.png: New file. This vanished for some reason. 2013-10-14 Matthew Mundell * ChangeLog: Add entry for last commit. 2013-10-14 Matthew Mundell * src/schema_formats/XML/OMP.xml (create_task, get_tasks): Add ALTERABLE. * doc/omp.html, doc/omp.rnc: Update from source. 2013-10-14 Matthew Mundell Add Alterable Tasks. Hence increase database version to 104. Add database migration from version 103 to 104. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 104. * src/manage_migrators.c (migrate_103_to_104): New function. (database_migrators): Add migrate_103_to_104. * src/manage_sql.c (create_tables): Add alterable to tasks. (task_alterable): New function. (init_manage): Set alterable column in example task. (delete_report_internal): Clear alterable if it was the last report. (make_task): Set alterable column. (copy_task): Add alterable arg. * src/manage.h: Update headers accordingly. * src/omp.c (create_task_data_t, create_task_data_reset) (client_state_t): Add alterable field. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add ALTERABLE to GET_TASKS and CREATE_TASK. In MODIFY_TASK allow modification of target and config if alterable. * doc/db_postgres.sql (tasks): Add alterable. 2013-10-14 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Add ID to success case of CREATE_USER response. * src/manage_sql.c (create_user): Add new_user arg. Update caller. * src/manage.h: Update header accordingly. 2013-10-14 Timo Pollmeier Add severity values to log, debug and error messages where they are missing like ones without an NVT. Hence increase database version to 103. Add database migration from version 102 to 103. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 103. * src/manage_migrators.c (migrate_102_to_103): New function. (database_migrators): Add migrate_102_to_103. 2013-10-14 Hani Benhabiles Remove nvts description from DB. Hence increase database version to 102. Add database migration from version 101 to 102. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 101. * src/manage_migrators.c (migrate_101_to_102): New function. (database_migrators): Add migrate_101_to_102. * doc/db_postgres.sql (nvts): Remove description column. 2013-10-14 Hani Benhabiles * src/manage_sql.c (create_tables, NVT_ITERATOR_COLUMNS) (NVT_ITERATOR_COLUMNS_NVTS): Remove nvts description column. (nvt_iterator_description): Delete unused function. (nvt_iterator_copyright, nvt_iterator_cve, nvt_iterator_bid) (nvt_iterator_tag, nvt_iterator_xref, nvt_iterator_sign_key_ids) (nvt_iterator_family, nvt_iterator_cvss_base): Adjust column number. 2013-10-14 Hani Benhabiles * src/otp.c (scanner_state_t): Remove PLUGIN_LIST_DESCRIPTION state. (process_otp_scanner_input): Don't handle PLUGIN_LIST_DESCRIPTION state. Set Summary state handling after copyright state. 2013-10-14 Timo Pollmeier * src/manage_sql.c (where_levels, where_levels_auto) (where_levels_type): Exclude error messages if all levels are selected. (report_vuln_count): Exclude error message results. 2013-10-11 Timo Pollmeier * src/manage_sql.c (where_levels, where_levels_auto) (where_levels_type): Exclude error results if levels string is empty or null. (init_result_iterator): Don't apply autofp to error messages. 2013-10-11 Hani Benhabiles * src/manage.c (get_nvti_xml): Don't print nvti xml. * src/manage_sql.c (make_nvt_from_nvti): Don't insert nvti description value in nvts table. 2013-10-11 Timo Pollmeier * src/manage_sql.c (make_result): Set severity value for error messages and other non-Alarm results with no NVT. Do not create results with invalid types or Alarm results with no NVTs and log a warning. Do not allow creation of False Positive results here. 2013-10-10 Timo Pollmeier * src/manage_sql.c (report_scan_result_count): Exclude results with severity lower than false positive (like error messages) from count. 2013-10-09 Timo Pollmeier * src/manage_sql.c (delete_alert): Copy correct rows from data tables (alert_condition_data, alert_event_data, alert_method_data). 2013-10-09 Timo Pollmeier Change level to severity in alert_condition_data. Hence increase database version to 101. Add database migration from version 100 to 101. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 101. * src/manage_migrators.c (migrate_100_to_101): New function. (database_migrators): Add migrate_100_to_101. * src/manage.c (alert_condition_name, alert_condition_description) (alert_condition_from_name): Replace (threat) level with severity. * src/manage.h (alert_condition_t): Replace threat level with severity. (task_severity_double): New function prototype. * src/manage_sql.c (validate_alert_condition_data): New function. (create_alert, modify_alert): Replace threat level with severity and add verification of condition data. (condition_met): Replace threat level with severity. (task_previous_threat_level): Removed. (task_severity_double): New function. * src/omp.c (xml_handle_end_element): In cases for CLIENT_CREATE_ALERT and CLIENT_MODIFY_ALERT handle new error codes of create_alert and modify_alert. * src/schema_formats/XML/OMP.xml (create_alert): Use new condition "Severity at least" in example. (protocol): Add change documentation of new alert conditions. * doc/omp.html: Update from source. 2013-10-07 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Add ID to success case of CREATE_USER response. * src/manage_sql.c (create_user): Add new_user arg. Update caller. * src/manage.h: Update header accordingly. 2013-10-07 Hani Benhabiles * src/report_formats/NBE/NBE.xsl: Duplicate host value in result output in place of subnet to keep the same old format of results. 2013-10-04 Matthew Mundell * src/manage_sql.c (print_report_xml): Clean the filter like the other GET commands do, so that duplicate columns like apply_overrides are removed. 2013-10-04 Matthew Mundell * src/manage_sql.c (manage_report_filter_controls): If the filter has no apply_overrides keyword, set it from the overrides keyword. 2013-10-04 Hani Benhabiles * doc/db_postgres.sql (results): Remove subnet column. * src/openvasmd.c: Update first user option help. * src/schema_formats/XML/OMP.xml, doc/omp.html, doc/db.png, doc/omp.rnc, src/report_formats/NBE/NBE.xsl: Update for results subnet value removal. 2013-10-04 Hani Benhabiles * src/manage_sql.c (create_tables): Add missing columns when creating targets and tasks tables. 2013-10-03 Michael Wiegand * src/manage_sql.c: Fix malformed SQL statement which caused initialisation of new databases either to abort or to cause issues with results inserted later on. 2013-10-03 Hani Benhabiles Remove subnet from report results. Hence increase database version to 100. Add database migration from version 99 to 100. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 100. * src/manage_migrators.c (migrate_99_to_100): New function. (database_migrators): Add migrate_99_to_100. * src/manage.h: Remove result_iterator_subnet prototype. * src/manage_sql.c (create_tables): Adjust results table creation. (init_result_iterator): Don't query subnet column value. (result_iterator_subnet): Delete function. (result_iterator_host, result_iterator_port, result_iterator_nvt_oid) (result_iterator_original_type, result_iterator_type) (result_iterator_descr, result_iterator_task, result_iterator_report) (result_iterator_nvt_cvss_base_double, result_iterator_scan_nvt_version) (result_iterator_original_severity, result_iterator_severity) (result_iterator_severity_double, result_iterator_original_level) (result_iterator_level): Adjust column numbers for subnet removal from iterator. (print_report_prognostic_xml): Remove subnet tag. 2013-10-03 Hani Benhabiles * src/manage.c (update_from_slave): Remove result subnet handling. * src/manage.h: Update make_result prototype. (message_t, create_report_result_t): Remove subnet member. * src/manage_sql.c (init_manage): Don't insert empty result subnet value. (make_result): Remove subnet parameter. Adjust sql insertion query accordingly. (create_report): Remove result subnet value insertion. * src/omp.c (create_report_data_t): Remove subnet member. (create_report_data_reset): Adjust for subnet member removal. (client_state_t, omp_xml_handle_start_element) (omp_xml_handle_end_element, omp_xml_handle_text): Remove result subnet client state in create report and its handling. (buffer_results_xml): Don't print subnet value. * src/otp.c (make_message, free_message): Adjust for result subnet removal. 2013-10-03 Hani Benhabiles * src/manage_sql.c (init_report_errors_iterator): Iterate over error messages that has no associated nvt's too. 2013-10-02 Timo Pollmeier * src/schema_formats/XML/OMP.xml (get_overrides, modify_override): Add missing severity and new_severity elements. * doc/omp.rnc, doc/omp.html: Update from source. 2013-10-02 Hani Benhabiles * doc/omp.html, src/schema_formats/XML/OMP.xml: Update documentation for compatibility changes. 2013-10-01 Matthew Mundell * src/manage_sql.c (TASK_ITERATOR_COLUMNS) (TASK_ITERATOR_TRASH_COLUMNS): Add status_text column, for sorting by status. 2013-10-01 Timo Pollmeier * src/manage.h (report_cache_counts): New function prototype. * src/manage_sql.c (set_task_run_status): Do not clear result counts cache. (report_add_result): Increment cached result counts when adding results. (report_counts_id_filt): Cache results regardless of task run status. (trim_report, trim_partial_report): Clear and rebuild result counts cache for report. 2013-10-01 Andre Heinecke * report_formats/verinice-ism: Bump Version to 1.1.9 2013-10-01 Timo Pollmeier * src/manage_sql.c (trim_report): Skip report_results and do not check for host in SQL. (trim_report): Skip report_results and delete result_host_details using result_hosts in SQL. 2013-09-30 Matthew Mundell * src/manage_sql.c (task_severity, init_result_iterator) (init_asset_iterator, report_scan_result_count, report_severity_data) (filtered_host_count): Cast cvss_base to real for severity SQL, otherwise it is text and the comparison with the result severity fails even if they're the same. 2013-09-30 Michael Wiegand Post release version bump. * CMakeLists.txt: Updated version number to 5.0+beta3. 2013-09-30 Michael Wiegand Preparing the openvas-manager 5.0+beta2 release. * CHANGES: Updated. 2013-09-30 Hani Benhabiles Remove slice_network_addresses and reverse_lookup config preferences. Hence increase database version to 99. Add database migration from version 98 to 99. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 99. * src/manage_migrators.c (migrate_98_to_99): New function. (database_migrators): Add migrate_98_to_99. * src/manage_sql.c (setup_full_config_prefs): Remove reverse_lookup config preference. * doc/db.png: Update for version changes. * doc/db_postgres.sql (tasks, targets, targets_trash): Update for previously added columns. 2013-09-27 Timo Pollmeier Change default "Dynamic Severity" setting to disabled. Hence increase database version to 98. Add database migration from version 97 to 98. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 98. * src/manage_migrators.c (migrate_97_to_98): New function. (database_migrators): Add migrate_97_to_98. * src/manage_sql.c (init_manage_settings): Disable "Dynamic Severity" by default. 2013-09-26 Timo Pollmeier * src/manage_sql.c (report_counts_cache_exists): New function prototype. (report_scan_result_count): Get count from cache if possible. 2013-09-25 Matthew Mundell * src/manage_sql.c (cache_report_counts): Remove extra arg. 2013-09-25 Matthew Mundell * src/manage_sql.c (report_scan_result_count): Skip report_results in SQL. (cache_report_counts): Use a dummy severity. 2013-09-25 Timo Pollmeier * src/manage.h (clear_task_results_cache): New function prototype. * src/manage_sql.c (set_task_run_status): Clear cache of last report. (reports_clear_count_cache): Clarify documentation. (cache_will_insert): Removed. Obsoleted by caching of empty reports. (cache_report_counts): Add cache entries for empty reports. (report_counts_id_filt): Use cache for reports with status "New", "Paused", "Stopped" and "Internal Error" in addition to "Done". (clear_task_results_cache): New function. 2013-09-25 Matthew Mundell * src/ompd.c (serve_omp): Check for retry errors from recv. Check if client is active before trying to free connection. 2013-09-25 Timo Pollmeier * src/manage.c (severity_data_level_counts): Fix count output to logs parameter. 2013-09-24 Matthew Mundell * src/manage_sql.c (cache_will_insert): New function. (report_counts_id_filt): Check if cache_report_counts will do any inserts before calling it, otherwise it runs a transaction just to do the delete, which is costly on large reports. 2013-09-24 Hani Benhabiles * src/omp.c (omp_xml_handle_end_element): In GET_TARGETS, don't send port range value when details attribute is not set. * doc/omp.html: Add entry for GET_TARGETS change in compatibility section. 2013-09-24 Matthew Mundell * src/manage_sql.c (report_severity_data): Skip report_results in results SELECT. (print_report_xml): Only send port summary when details are requested, because the port summary needs to iterate over the results, which can be slow. 2013-09-24 Timo Pollmeier * manage_sql.c (init_manage_process): Add SQL function report_severity_count. (REPORT_ITERATOR_FILTER_COLUMNS, REPORT_ITERATOR_COLUMNS): Add columns false_positive, log, low, medium, high. sql.c (report_severity_count, sql_report_severity_count): New functions. sql.h (report_severity_count_sql): New function prototype. 2013-09-24 Werner Koch * src/manage_sql.c (create_lsc_credential): Encrypt the random password and not the unrelated given_password. 2013-09-24 Michael Wiegand Update NBE report format plugin to improve compatibility with third party tools. * src/report_formats/NBE/NBE.xsl: Put host_start timestamp before the results of a host instead of after. Use integer IDs instead of OIDs. Ensure Risk Factor, CVSS score and references are in the expected places. 2013-09-24 Matthew Mundell * src/manage_sql.c (task_severity): Remove syntax error that was making last commit look much faster than it is. 2013-09-23 Matthew Mundell * src/manage_sql.c (task_severity): Align SQL better. Use max instead of ORDER BY to get max, which brings the Task page back to interactive speed with a big db. 2013-09-23 Matthew Mundell Cache the task severity so that it is shared between the task_threat and task_severity SQL functions when initialising a task iterator. This roughly halves the load time of the Tasks page. * src/sql.c (sql_severity_t): New type. (cached_task_severity): New function. (sql_threat_level): Inline task_threat_level, in order to use cached_task_severity. (sql_task_severity): Use cached_task_severity. 2013-09-23 Matthew Mundell * src/manage_sql.c (task_severity): Remove use of report_results to speed up query slightly, as it is the slowest part of GET_TASKS with a large db. Move the report query to a column, so that the index is used. 2013-09-20 Matthew Mundell * src/ompd.c (serve_omp): Format comments more consistently. Remove redundant test. 2013-09-20 Matthew Mundell * src/ompd.c (serve_omp): Exit if the Scanner goes down when it should be up. 2013-09-19 Matthew Mundell * src/manage_sql.c (init_manage_process): Create SQL function report_progress. (REPORT_ITERATOR_COLUMNS): Append report progress to status_text, so that the reports are sorted by progress. * src/sql.c (sql_report_progress): New function. * src/sql.h: Add header accordingly. 2013-09-19 Matthew Mundell * src/manage_sql.c (report_progress): Check if a report was given. Always init hosts_xml if given. 2013-09-19 Matthew Mundell Combine the two instances of calculating the report progress into one common function, in preparation for having the progress in the report iterator. * src/manage_sql.c (report_active): Move up in file. (report_progress_xml): Remove. (report_progress_active): New function. Mostly does what report_progress_xml did. (report_progress): New function. Does common progress calc. (print_report_xml): Call report_progress to get progress. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_end_element): Call report_progress to get the progress. 2013-09-19 Matthew Mundell * src/manage_sql.c (filter_clause): Order by status_text when sorting by status, because status_text has more detail. (REPORT_ITERATOR_COLUMNS): Add status_text column, with container check. 2013-09-19 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Include progress of hosts, as was the case before using report_progress_xml. 2013-09-19 Hani Benhabiles * src/manage.c (run_task): Send task hosts ordering preference. * ChangeLog: Update style for previous entries containing database migration to match common style. 2013-09-19 Timo Pollmeier * src/manage.h (report_severity): Change return type to double. * src/manage_sql.c (report_cache_counts): Cache overridden counts. (cache_report_counts): Use exclusive transaction. (report_severity): Change return type to double. Get severity from cache or report_counts_id. * src/sql.c (sql_report_severity): Adapt to report_severity returning a double value. 2013-09-19 Timo Pollmeier * src/manage.c (severity_to_level, severity_to_type) (severity_data_index, severity_data_value): Add missing blank lines in documentation before parameters and return. * src/manage_sql.c (report_severity): Correct documentation. 2013-09-19 Hani Benhabiles Add tasks hosts ordering. Hence increase database version to 97. Add database migration from version 96 to 97. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 97. * src/manage_migrators.c (migrate_96_to_97): New function. (database_migrators): Add migrate_96_to_97. * src/manage.h: Add prototypes. * src/manage_sql.c (task_hosts_ordering, set_task_hosts_ordering): New function. (copy_task): Handle hosts_ordering column too. * src/omp.c (create_task_data_t, modify_task_data_t): Add new element hosts_ordering. (create_task_data_reset, modify_task_data_reset): Free hosts_ordering. (client_state_t): Add new create and modify task states for hosts_ordering element. (omp_xml_handle_start_element, omp_xml_handle_text): Handle new states. (omp_xml_handle_end_element): Send hosts ordering for GET_TASKS. 2013-09-19 Hani Benhabiles * src/manage_sql.c (create_target, modify_target): Interpret non-zero reverse lookup options values as 1. * src/manage.c (run_task): Interpret non-zero reverse lookup options values as yes. 2013-09-18 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TARGETS, make XML string symmetrical for consistency. 2013-09-18 Matthew Mundell * src/manage_sql.c (report_count): Add SQL for trash check, to match init_report_iterator. 2013-09-18 Matthew Mundell * src/manage_sql.c (REPORT_ITERATOR_COLUMNS): Use the date column instead of the start_time for filtering by date, because that is what GSA displays. 2013-09-18 Matthew Mundell * src/manage_sql.c (init_report_iterator): Add SQL for the trash check. 2013-09-18 Hani Benhabiles * src/manage_sql.c (manage_count_hosts): Adjust openvas_hosts_exclude call. 2013-09-17 Matthew Mundell * src/manage_sql.c (report_progress_xml): New function. Body from omp.c. (report_active): New function. (print_report_xml): Include progress with task. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In GET_REPORTS call report_progress_xml to get the progress. 2013-09-17 Timo Pollmeier Make reports sortable by task name and severity. * src/manage.h (report_severity): New function prototype. * src/manage_sql.c (init_manage_process): Add SQL function report_severity, rename sql_severity to sql_task_severity. (REPORT_ITERATOR_FILTER_COLUMNS): Add columns task and severity. (REPORT_ITERATOR_COLUMNS) Add overridesparameter. Add columns task and severity. (report_count, init_report_iterator): Add overrides parameter. (report_severity): New function. * src/sql.c (sql_report_severity): New function. (sql_severity): Remove. Renamed to sql_task_severity. (sql_task_severity): New function. Renamed sql_severity to this. Return SEVERITY_MISSING instead of 0.0 in case severity is missing. * src/sql.h (sql_report_severity): New function prototype. (sql_severity): Remove. Renamed to sql_task_severity. (sql_task_severity): New function proto. Renamed sql_severity to this. 2013-09-17 Hani Benhabiles Add targets reverse_lookup_only and reverse_lookup_unify. Hence increase database version to 96. Add database migration from version 95 to 96. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 96. * src/manage_migrators.c (migrate_95_to_96): New function. (database_migrators): Add migrate_95_to_96. * src/manage.h: Add and adjust prototypes. * src/manage_sql.c (create_target, modify_target, copy_target) (delete_target, manage_restore): Handle target reverse lookup options. (TARGET_ITERATOR_FILTER_COLUMNS): Add exclude_hosts column. (TARGET_ITERATOR_COLUMNS): Add target reverse lookup columns. (target_iterator_reverse_lookup_only) (target_iterator_reverse_lookup_unify): New functions. (target_reverse_lookup_only, target_reverse_lookup_unify): New functions. * src/manage.c (run_task): Send reverse_lookup_only and reverse_lookup_unify preferences. * src/omp.c (create_target_data_t, modify_target_data_t): Add target reverse lookup elements. (create_target_data_reset, modify_target_data_reset): Free target reverse lookup elements. (client_state_t): Add target reverse lookup states. (omp_xml_handle_start_element, omp_xml_handle_start_element) (omp_xml_handle_text): Handle new target creation and modification states. 2013-09-17 Timo Pollmeier Change report_counts schema to cache result counts by severity value not per threat level. Hence increase database version to 95. Add database migration from version 94 to 95. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 95. * src/manage_migrators.c (migrate_94_to_95): New function. (database_migrators): Add migrate_94_to_95. * src/manage.c (severity_data_index): Make non-static. Fix param doc. (severity_data_value, severity_data_add_count): New functions. * src/manage.h (severity_data_index, severity_data_value) (severity_data_add_count, reports_clear_count_cache): New function prototypes. * src/manage_sql.c (create_tables): Change report_counts schema to cache result counts by severity value not per threat level. (init_manage): Clear cache with reports_clear_count_cache. (reports_clear_count_cache): Adapt to new cache schema. (report_severity_data): Handle NULL severity_data parameter. (try_init_counts_cache): Remove. Obsolete with new caching. (report_counts_cache_exists, report_counts_from_cache): New functions. (cache_report_counts): Cache using severity_data_t and new schema. (report_counts_id_filt): Adapt to new caching and also use cache when filter parameters are NULL. 2013-09-17 Hani Benhabiles * src/omp.c (omp_xml_handle_end_element): Clean code for CLIENT_GET_TARGETS case. Send empty string when target has no exclude_hosts value. 2013-09-17 Hani Benhabiles * src/manage.c (run_task): Send target exclude_hosts when available as a preference to the scanner. 2013-09-17 Andre Heinecke * report_formats/verinice-ism/gsm_verinice_ism.xsl: Add control implemented property to mark scanned vulnerabilities. 2013-09-16 Hani Benhabiles Add targets exclude_hosts. Hence increase database version to 94. Add database migration from version 93 to 94. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 94. * src/manage_migrators.c (migrate_93_to_94): New function. (database_migrators): Add migrate_93_to_94. * src/manage.h: Add and adjust headers accordingly. * src/manage_sql.c (create_tables): Add exclude_hosts column to targets and targets_trash tables. (init_manage_process): Set max_hosts number of arguments to 2. (manage_max_hosts): Rename to manage_count_hosts. Add 2nd argument for excluded hosts string. (create_target, copy_target, delete_target, modify_target) (manage_restore): Handle targets exclude_hosts value. (TARGET_ITERATOR_COLUMNS, TARGET_ITERATOR_TRASH_COLUMNS): Iterate over exclude_hosts column too. (target_iterator_exclude_hosts, target_exclude_hosts) (trash_target_exclude_hosts): New functions. (create_target_data_reset, modify_target_data_reset): Free exclude_hosts. (create_target_data_t, modify_target_data_t): Add exclude_hosts element. (client_state_t): Add CLIENT_CREATE_TARGET_EXCLUDE_HOSTS and CLIENT_MODIFY_TARGET_EXCLUDE_HOSTS state. (omp_xml_handle_start_element, omp_xml_handle_text): Handle new states. (omp_xml_handle_end_element): Send exclude_hosts in CLIENT_GET_TARGETS case. Adjust total target IPs counting. * src/sql.c (sql_max_hosts): Adjust for manage_max_hosts change. 2013-09-16 Timo Pollmeier * src/manage_sql.c (init_severity_data): Add missing spaces. 2013-09-16 Timo Pollmeier * ChangeLog: Fix function name report_count_filtered. * src/manage.c (severity_data_index): Fix check for SEVERITY_ERROR. (init_severity_data, cleanup_severity_data): Use g_malloc0 and g_free instead of malloc and free. (LEVEL_COUNT): Remove. (severity_data_level_counts): Use severity_data_range_count directly instead of LEVEL_COUNT macro. * src/manage_sql.c (report_severity_data): Add missing parameter documentation. Remove unused nvt variable. Fix indentation. (report_counts_id_filt): Enable results cache again. 2013-09-16 Timo Pollmeier Add severity_data type for internal handling of severity counts and use it for counting results. * src/manage.c (level_min_severity, level_max_severity) (init_severity_data, cleanup_severity_data, severity_data_add) (severity_data_count, severity_data_range_count) (severity_data_level_counts): New functions for handling data in the new severity_data_t struct. (LEVEL_COUNT): New macro to count severities in a given level. * src/manage.h (): Create new section for general severity related definitions. (SEVERITY_MISSING, SEVERITY_UNDEFINED): New severity constants. (SEVERITY_MAX, SEVERITY_SUBDIVISIONS): New constants describing the format of severity scores. (level_min_severity, level_max_severity): New function prototypes. (severity_data_t): New typedef struct for severity counts and maxima. (init_severity_data, cleanup_severity_data, severity_data_add) (severity_data_count, severity_data_range_count) (severity_data_level_counts): New function prototypes. * src/manage_sql.c (where_autofp, report_severity) (report_severity_filtered, report_result_count) (report_count_filtered): Remove. Replaced with report_severity_data. (report_severity_data): New function to gather severity counts and maximum severity. (report_counts_id_filt): Use new severity_data_t functions to count results. 2013-09-13 Matthew Mundell * src/manage_migrators.c (migrate_92_to_93): Remove duplicate SQL. 2013-09-12 Matthew Mundell Remove config preference host_expansion. Hence increase database version to 93. Add database migration from version 92 to 93. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 93. * src/manage_migrators.c (migrate_92_to_93): New function. (database_migrators): Add migrate_92_to_93. * src/manage_sql.c (setup_full_config_prefs): Remove host_expansion. * doc/db.png: Update for version changes. 2013-09-12 Matthew Mundell * src/schema_formats/XML/OMP.xml: Add first CHANGE element, about a compatibility change in GET_REPORTS. * src/schema_formats/HTML/HTML.xsl (change, changes): New templates. (protocol): Add Compatibility Changes section. * doc/omp.html: Update from source. 2013-09-11 Matthew Mundell * src/manage_sql.c (REPORT_ITERATOR_FILTER_COLUMNS) (REPORT_ITERATOR_COLUMNS): Add date. 2013-09-10 Matthew Mundell * src/lsc_crypt.c (lsc_crypt_new, lsc_crypt_create_key): Remove void for consistency. * src/lsc_crypt.h: Update headers accordingly. * src/manage.c (run_task): Remove void cast that was for splint. * src/manage_sql.c (get_sysconf_gpghome, get_trustedkeys_name): Remove void for consistency. * src/omp.c (omp_xml_handle_end_element): Remove void cast that was for splint. * src/otp.c (maybe_free_scanner_rules): Remove void cast that was for splint. * src/splint.h (g_rand_new): Remove void for consistency. 2013-09-10 Matthew Mundell * src/manage_sql.c (manage_clean_filter_remove): Check length of column too, just to be safe. * src/omp.c (omp_xml_handle_end_element): Correct the check to see if a single result was requested. 2013-09-09 Matthew Mundell Add filter_replace param to GET_REPORTS, so that the client can specify the task_id to be used in the filter. * src/omp.c (init_get): Add a keyword from the "filter" param to the filter when the "filter_replace" param is given. Free filter. (get_data_reset, get_data_parse_attributes): Add replace fields. (send_get_end): Use the replacement filter if there is one. * src/manage_sql.c (manage_clean_filter_remove): New function. Based on manage_clean_filter, but also removes a given keyword. (manage_clean_filter): Call manage_clean_filter_remove to do the work. (init_get_iterator): Use replacement filter if there is one. (REPORT_ITERATOR_COLUMNS): Add missing task_id. * src/manage.h: Update headers accordingly. 2013-09-07 Jan-Oliver Wagner * src/manage_sql.c (setup_full_config_prefs): Removed handling of "slice_network_addresses", "kb_dont_replay_scanners", "kb_dont_replay_denials", "kb_dont_replay_info_gathering", "kb_dont_replay_attacks", "kb_max_age", "save_knowledge_base", "kb_restore", "only_test_hosts_whose_kb_we_dont_have" and "only_test_hosts_whose_kb_we_have". All of these settings were removed from the Scanner. 2013-09-06 Matthew Mundell * src/omp.c (omp_xml_handle_start_element): Remove setting of static result filter for GET_REPORTS, now done in end handler. (omp_xml_handle_end_element): In GET_REPORTS set the simple result filter after INIT_GET, making sure to get the override value of the report filter from the filt_id param if it's given. 2013-09-06 Matthew Mundell * src/omp.c (INIT_GET): Doc arg. (omp_xml_handle_end_element): In GET_REPORTS remove the explicit setup of the get_reports_data->get filter because the first INIT_GET case does that already, and expand the INIT_GET in the second case in order to pass in get_reports_data->report_get. 2013-09-05 Matthew Mundell Rename the old report filtering type and setting, as they are for results. Hence increase database version to 92. Add database migration from version 91 to 92. Also make the GET_REPORTS returned filter depend on the context. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 92. * src/manage_migrators.c (migrate_91_to_92): New function. (database_migrators): Add migrate_91_to_92. * src/manage_sql.c (modify_setting): Add Results Filter. * src/omp.c (omp_xml_handle_end_element): In GET_REPORTS, if a specific report was requested, put the result filtering in the response, otherwise put the report filtering. * doc/db.png: Update for version changes. 2013-09-04 Matthew Mundell * src/manage_sql.c (REPORT_ITERATOR_FILTER_COLUMNS) (REPORT_ITERATOR_COLUMNS): Add status. * src/omp.c (send_get_end): Clean "" filter, so that the defaults are applied. 2013-09-04 Hani Benhabiles Use base/openvas_hosts api for hosts strings counting and validation. * manage_sql.c: Include base/openvas_hosts.h (strbchr, contains_alpha, validate_host): Remove unused functions. (manage_max_hosts): Remove old code. Replace with openvas_hosts_new and openvas_hosts_count to return correct hosts count. 2013-09-03 Timo Pollmeier * src/schema_formats/XML/OMP.xml (threat): Reduce backward compatibility to import of old reports only in description. * doc/omp.html: Update from source. 2013-09-03 Timo Pollmeier * src/manage_sql.c (filter_clause): Allow search for empty ..._id (e.g. task_id) and include results with empty ..._id if a ..._id filter term is given. 2013-09-03 Timo Pollmeier * src/schema_formats/XML/OMP.xml (severity, threat): Add info on usage. * doc/omp.html, doc/omp.rnc: Update from source. 2013-08-30 Jan-Oliver Wagner * src/CMakeLists.txt: Remove handling of oxpd.c. 2013-08-30 Matthew Mundell * src/ompd.c (serve_omp): Remove initial process_omp_client_input call, now that read_protocol is gone. 2013-08-30 Matthew Mundell Remove protocol check that was only need for --otp. Merge the rest of oxpd.c back into ompd.c. * src/ompd.c: Remove oxpd.h. (from_client, from_scanner, from_client_start, from_client_end) (from_scanner_end, scanner_address): New variables. From oxpd.c. * src/ompd.h: Update headers accordingly. (READ_PROTOCOL_TIMEOUT, FROM_BUFFER_SIZE): New defines. From oxpd.h. * src/openvasmd.c: Remove oxpd.h. (serve_client): Just serve OMP, instead of doing a protocol check. * src/oxpd.c, src/oxpd.h: Remove. 2013-08-30 Matthew Mundell Remove OTP port forwarding mode, --otp. * src/CMakeLists.txt: Remove otpd.c. * src/openvasmd.c: Remove mention in mainpage doc. Remove header. (otp): Remove. (serve_client): Remove read_protocol OTP case. (main): Remove --otp. * src/otp.h: Remove otpd.c reference. * src/otpd.c, src/otpd.h: Remove. 2013-08-28 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Add back init of get in GET_REPORTS, otherwise the results one is used. 2013-08-28 Matthew Mundell * src/manage_sql.c (backup_db): Silence ls errors, which occur when there is no journal. 2013-08-28 Matthew Mundell * src/manage_sql.c (backup_db): Copy any journal style files, instead of of expecting a single task.db-journal file. 2013-08-28 Timo Pollmeier * src/manage_sql.c (NOTE_ITERATOR_TRASH_COLUMNS): Add missing comma. 2013-08-28 Timo Pollmeier Replace threat in notes with severity. Hence increase database version to 91. Add database migration from version 90 to 91. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 91. * src/manage_migrators.c (migrate_90_to_91): New function. (database_migrators): Add migrate_90_to_91. * src/manage.h (create_note, modify_note): Add parameter. (note_iterator_severity): New function prototype. * src/manage_sql.c (create_tables): Replace threat with severity in notes and notes_trash. (create_note, modify_note): Use severity instead of threat column and convert threat parameter to severity if there is no severity given. (copy_note, delete_note): Use severity instead of threat column. (NOTE_ITERATOR_FILTER_COLUMNS, NOTE_ITERATOR_COLUMNS) (NOTE_ITERATOR_TRASH_COLUMNS): Add severity column and derive threat from that. (note_iterator_severity): New iterator function. (manage_restore): Use severity instead of threat column for notes. * src/omp.c (create_note_data_t, create_note_data_reset): Add severity component. (client_state_t): Add CLIENT_CREATE_NOTE_SEVERITY and CLIENT_MODIFY_NOTE_SEVERITY (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add severity subelement to create_note and modify_note. (buffer_notes_xml): Add severity to detailed get_notes response. * src/schema_formats/XML/OMP.xml (create_note, modify_note): Add severity element to command. (get_notes): Add severity element to note in response and to result in the note subelement. * doc/omp.html, doc/omp.rnc: Update from source. 2013-08-28 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Remove GET_REPORTS init already done by INIT_GET. 2013-08-27 Matthew Mundell * src/manage_sql.c (print_report_xml): Cleanup result iterators on error return. Cleanup delta result iterator before normal return. 2013-08-27 Matthew Mundell * src/omp.c (omp_xml_handle_start_element): For GET_REPORTS use a fixed result filter when there's a report filter. 2013-08-27 Timo Pollmeier * src/manage_sql.c (OVERRIDE_ITERATOR_FILTER_COLUMNS): Add column "active". (OVERRIDE_ITERATOR_COLUMNS): Name the "active" column for filtering. 2013-08-26 Matthew Mundell * src/manage_sql.c (REPORT_ITERATOR_FILTER_COLUMNS): Add name for sorting. * src/omp.c (omp_xml_handle_end_element): In GET_REPORTS use the start and end GET macros, check the init_report_iterator return, and send the common GET XML for each report. 2013-08-26 Hani Benhabiles * manage.h: Remove scanner_plugins_list and insert_plugins_list declarations. (manage_complete_nvt_cache_update): Adjust prototype. * manage_sql.c (insert_nvt_from_nvti): Move up in file. (insert_plugins_list): Rename to insert_nvts_list. Move up in file. (manage_complete_nvt_cache_update): Add nvts_list parameter. Call insert_nvts_list. * src/openvasmd.c (update_or_rebuild_nvt_cache): Remove insert_plugins_list call. * src/otp.c (parse_scanner_plug_list_tags): Update comment. (process_otp_scanner_input): Adjust manage_complete_nvt_cache_update call. 2013-08-23 Hani Benhabiles Make manager rebuilds way faster by grouping NVT inserts in a single transactions instead of one transaction/insertion. * src/manage_sql.c (insert_plugins_list, insert_nvt_from_nvti): New functions. * src/manage.h: Add insert_plugins_list prototype. Add scanner_plugins_list declaration. * src/openvasmd.c (update_or_rebuild_nvt_cache): insert scanner plugins list before successful return. * src/otp.c (scanner_plugins_list): New global variable. (parse_scanner_plugin_list_tags): Don't insert nvti into DB, add to scanner_plugins_list instead. 2013-08-22 Hani Benhabiles * src/lsc_user.c (lsc_user_keys_create): Remove unused login parameter. * src/lsc_user.h, src/manage.h: Adjust headers accordingly. * src/manage.c (slave_setup): Adjust init_user_target_iterator call. (run_slave_task): Remove unused report_id and from parameters. (run_task): Adjust run_slave_task call. * src/manage_sql.c (manage_cleanup_process_error): Use signal parameter for debug logging. (set_task_description): Use length parameter instead of calling strlen. (prognostic_report_results_count): Remove unused logs parameter. (print_report_assets_xml, print_report_prognostic_xml): Remove unused report parameter. (print_report_xml, create_lsc_credential): Adjust function calls. (init_user_target_iterator): Remove unused first and max parameters. (send_get_start, SEND_GET_START): Remove unused get parameter. (omp_xml_handle_end_element): Adjust SEND_GET_START macro call. * src/openvasmd.c (handle_sigabrt, handle_sigterm, handle_sighup) (handle_sighup_update): Use signal parameter for debug logging. 2013-08-22 Timo Pollmeier * src/manage_sql.c (init_result_iterator, result_iterator_severity) (result_iterator_severity_double): Use SEVERITY_FP (-1.0) as severity value for automatic false positives. 2013-08-22 Timo Pollmeier * src/schema_formats/XML/OMP.xml (protocol): Add severity type. (result_overrides, result, create_override, create_override): Add severity and related elements, update text for threat elements. (report, get_info, get_results, get_tasks): Use new severity type instead of text for severity and related elements. * doc/omp.html, doc/omp.rnc: Update from source. 2013-08-20 Matthew Mundell * src/manage_sql.c (manage_report_filter_controls): Add apply_overrides. (print_report_xml): Get the apply_override value from the filter if a filter is given. * src/manage.h: Update headers accordingly. 2013-08-20 Matthew Mundell * src/manage_sql.c (REPORT_ITERATOR_FILTER_COLUMNS): Add task_id. (print_report_xml): Skip bulk of report when details flag is 0. (manage_report): Set details flag now that it is checked. * src/omp.c (omp_xml_handle_start_element): For GET_REPORTS reparse the details flag, to keep the default value backward compatible. 2013-08-20 Matthew Mundell * src/manage_sql.c (print_report_prognostic_xml): New function. (print_report_xml): Move prognostic case out to new function. 2013-08-20 Hani Benhabiles * src/manage_sql.c (ALL_INFO_UNIION_COLUMNS): Query for NVT tag when summary is NOSUMMARY which is used for new nvt style plugins. 2013-08-20 Matthew Mundell * src/omp.c (omp_xml_handle_start_element): Use correct global name. 2013-08-20 Matthew Mundell Switch the report iterator to the new style. * src/omp.c (get_reports_data_t, get_reports_data_reset): Add report_get. (omp_xml_handle_start_element): Parse report_filter and report_filt_id for GET_REPORTS. (send_reports): Update function name. (omp_xml_handle_end_element): Update to new style iterator. * src/manage_sql.c (REPORT_ITERATOR_FILTER_COLUMNS) (REPORT_ITERATOR_COLUMNS): New defines. (report_count): Convert to report counting, to match standard count functions. (init_report_iterator): Switch to new style. (init_report_iterator_task): New function. Old style for internal calls. (report_result_count): New function. Was result_count. Update callers. * src/manage.h: Update headers accordingly. * src/manage.c (delete_reports): Update function name. 2013-08-19 Matthew Mundell * src/manage_sql.c (send_get_end): Append to XML with escaping. 2013-08-19 Matthew Mundell * src/manage_sql.c (parse_keyword): Make the keyword a string when it is empty, instead of making it an integer. This brings back the NULL and empty string checks in the SQL for keywords like "type=". 2013-08-16 Matthew Mundell * doc/db.png: Update for version changes. 2013-08-16 Matthew Mundell Make Groups, Roles and Users shared between all admins. Hence increase database version to 90. Add database migration from version 89 to 90. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 90. * src/manage_migrators.c (migrate_89_to_90): New function. (database_migrators): Add migrate_89_to_90. * src/manage_sql.c (copy_resource_lock): Ensure owner is always NULL for groups, roles and users. (create_group, create_user): Set owner to NULL. 2013-08-14 Jan-Oliver Wagner * INSTALL: Updated reference system from Debian 6 to 7. 2013-08-08 Matthew Mundell * src/omp.c (APPLY_OVERRIDES_DEFAULT): New define. (send_get_end): Ensure the apply_overrides term is always present, similar to first and rows. (omp_xml_handle_end_element): Use APPLY_OVERRIDES_DEFAULT in CLIENT_GET_TASKS, to keep it safe. 2013-08-07 Matthew Mundell * src/omp.c (send_get_end): Also send filter broken down into XML elements. * src/manage_sql.c (keyword_type_t, keyword_relation_t, struct keyword) (keyword_t): Move out to manage.h. (keyword_relation_symbol): New function. (filter_free, split_filter): Export. * src/manage.h: Update headers accordingly. 2013-08-07 Timo Pollmeier * src/manage.c (message_type_threat): Return "Alarm" for "Alarm" type. (severity_to_level): Add mode parameter to return "Alarm" for severity > 0.0. * src/manage.h (severity_to_level): Add parameter and remove parameter names. (severity_to_type): Remove parameter name. * src/manage_sql.c (init_manage_process): Add SQL function severity_to_level with 2 arguments. (task_previous_level, task_previous_threat_level) (result_iterator_original_level, result_iterator_level): Add mode parameter for severity_to_level. (OVERRIDE_ITERATOR_COLUMNS, OVERRIDE_ITERATOR_TRASH_COLUMNS): Use severity_to_level instead of severity_to_type. (override_iterator_threat, override_iterator_new_threat): Get threat level directly from SQL column. * src/sql.c (sql_severity_to_level): Add optional mode parameter. 2013-08-06 Timo Pollmeier * src/manage_sql.c (parse_keyword): Substitute special severity strings with their numeric value. 2013-08-06 Timo Pollmeier * src/manage_sql.c (filter_clause): Cast cvss, cvss_base and max_cvss as REAL when sorting like severity. 2013-08-06 Matthew Mundell Add trash case to permission check when getting a single item, so that GET_* of a single trash item works correctly. * src/manage_sql.c (user_owns_uuid, user_has_access_uuid): Add trash arg. Update callers. (find_resource): Add task special case, because task trash is in the normal table. (find_resource_for_actions): Add trash arg. Update callers. 2013-08-06 Timo Pollmeier * src/manage_sql.c (keyword_type_t): Replace KEYWORD_TYPE_NUMBER with KEYWORD_TYPE_INTEGER and KEYWORD_TYPE_DOUBLE. (keyword): Replace number component with integer_value and double_value. (parse_keyword): Parse filters with no column name, use new integer type for times and dates, add parsing of integers and floating point numbers. (filter_clause): Cast integer and double keywords as NUMERIC in the SQL queries. 2013-08-05 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_REPORT_RR_RESULTS_RESULT remove assertions on result fields because these depend on the user input. There are checks for this in create_report in manage_sql.c, so it is safe. Add NULL check for threat case. 2013-08-05 Matthew Mundell * src/manage_sql.c (copy_task): Fail to find hidden tasks, to match other resource types. 2013-08-05 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Add comment to try make delete clearer. 2013-08-05 Matthew Mundell * src/sql.c (sql_uniquify): Correct arg count in doc. 2013-08-02 Timo Pollmeier * src/manage_sql.c (report_severity_filtered, report_counts_id_filt): Remove leftover COLLATE expressions. (create_override): Add missing comment for severity parameter. Check correct strings for threat and new_threat. (override_iterator_threat): Move > 0.0 term to new line. 2013-08-02 Matthew Mundell * src/manage.h: Remove some arg names. * src/manage_sql.c (do_encrypt_all_credentials): Remove. Now encrypt_all_credentials. "encrypt" is already a verb. (encrypt_all_credentials): New function. Was do_encrypt_all_credentials. 2013-08-02 Timo Pollmeier * src/manage_sql.c (where_levels, where_levels_auto, where_levels_type): Reformat levels_sql g_string_new and gstring_append calls in severity <= 0.0 cases. 2013-08-02 Timo Pollmeier Replace the threat and new_threat columns with severity and new_severity in overrides and overrides_trash tables. Hence increase database version to 89. Add database migration from version 88 to 89. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 89. * src/manage_migrators.c (migrate_88_to_89): New function. (database_migrators): Add migrate_88_to_89. * src/manage.c (severity_matches_ov): New function. * src/manage.h (severity_matches_ov): New function prototype. (create_override, modify_override): Add parameter. (override_iterator_severity): New function prototype. (override_iterator_new_severity): Change return type to const char*. * src/manage_sql.c (create_tables): Replace the threat and new_threat columns with severity and new_severity in overrides and overrides_trash tables. (init_manage_process): Create severity_matches_ov SQLite function. (task_severity, init_result_iterator, init_asset_iterator) (report_scan_result_count, report_count, report_severity) (report_count_filtered, report_severity_filtered, report_counts_id_filt) (filtered_host_count): Match results with overrides' severity and replace threat level based sorting. (create_override, modify_override): Adjust to use severity column as replacement for threat. Use threat / new_threat only as fallback if severity / new_severity is missing. (copy_override, delete_override, OVERRIDE_ITERATOR_FILTER_COLUMNS) (OVERRIDE_ITERATOR_COLUMNS, OVERRIDE_ITERATOR_TRASH_COLUMNS): Use severity column as replacement for threat. (override_count, init_override_iterator): Match results with overrides' severity. (override_iterator_threat): Return "Alarm" for severity > 0.0. (override_iterator_severity): New function. (override_iterator_new_severity): Use DEF_ACCESS to return a string and adjust column number. * src/omp.c (create_override_data_t, create_override_data_reset) (modify_override_data_t, modify_override_data_reset, client_state_t, xml_handle_start_element, xml_handle_end_element, xml_handle_text): Add handling of severity element in create_override, modify_override. component. (buffer_overrides_xml): Add severity to and adjust new_severity output. * src/sql.c (sql_severity_matches_ov): New function. (sql_severity_to_level, sql_severity_to_type): Return NULL if given severity is NULL or an empty string. * src/sql.h (sql_severity_matches_ov): New function prototype. 2013-08-02 Timo Pollmeier * ChangeLog: Replace leading whitespaces with tabs in last own entry. 2013-08-01 Matthew Mundell * src/manage_sql.c (create_note, modify_note): Neaten return doc. (create_override): Check that NVT exists. Match returns to create_note. (modify_override): Neaten return doc. * src/omp.c (omp_xml_handle_end_element): Handle new create_override return. 2013-08-01 Matthew Mundell * src/omp.c (omp_xml_handle_start_element): Init MODIFY_TASK observer groups in the MODIFY_TASK handler instead of in the OBSERVERS handler, to ensure that groups is always initialised. (omp_xml_handle_end_element): Remove the CLIENT_MODIFY_TASK "Too few parameters" check because it is safe to run an empty command and this is easier to maintain. Also check the length of groups instead of groups, otherwise the groups are cleared when they are left out. The client must pass a group with ID 0 to clear them, as with alerts. 2013-08-01 Matthew Mundell * src/omp.c (client_state_t): Order alphabetically. 2013-08-01 Matthew Mundell For sorting by role, make Admin come first, even if it should come later alphabetically. * src/manage_sql.c (filter_clause): Add special sorting case for role. (collate_role): New collator. (init_manage_process): Create collate_role. (USER_ITERATOR_FILTER_COLUMNS, USER_ITERATOR_COLUMNS): Add role. 2013-08-01 Hani Benhabiles * src/omp.c (log_event, log_event_fail): Fix spacing when no resource ID is provided. (omp_xml_handle_end_element): Fix event name for log_event wizard call. Use wizard name as resource id for log_event and log_event_fail calls. 2013-08-01 Timo Pollmeier * src/manage_sql.c (where_levels, where_levels_auto): Test new_severity instead of severity and new_threat. Test for special cases like log messages by comparing only new_severity. (where_levels_type): Test for special cases like log messages by comparing only severity. (init_asset_iterator, report_scan_result_count, filtered_host_count): Adapt by getting new_severity for filtering instead of new_type. 2013-07-31 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Indent user commands cases like rest of module. 2013-07-31 Timo Pollmeier * CMakeLists.txt: Install pwpolicy.conf directly from source directory. 2013-07-31 Matthew Mundell * src/manage_sql.c (request_delete_task_uuid): Add permission check. 2013-07-31 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_PERMISSIONS remove the specific resource and subject elements under RESOURCE and SUBJECT, to keep the response simpler. All the info is available directly under RESOURCE and SUBJECT anyway. 2013-07-30 Matthew Mundell * CMakeLists.txt: Install pwpolicy.conf. Add it to CPACK_SOURCE_IGNORE_FILES too. * src/pwpolicy.conf: New file. 2013-07-30 Matthew Mundell * src/openvasmd.c (main): Warn if the password policy is missing. 2013-07-30 Timo Pollmeier * src/omp.c (buffer_overrides_xml): Output threat element not only when details flag is set. 2013-07-30 Timo Pollmeier * src/manage_sql.c (init_manage): Delete orphaned results and clear report counts cache if needed. (delete_report_internal): Delete results of report from results table. 2013-07-30 Timo Pollmeier * src/manage_sql.c (create_override): Use new_threat only if no new_severity is given and no longer store it in the database. (modify_override): Use new_threat only if no new_severity is given and no longer store it in the database. Return 3 on error in severity. * src/omp.c (xml_handle_end_element): In case CLIENT_CREATE_OVERRIDE do not fail if new_threat is missing but new_severity is available. 2013-07-30 Matthew Mundell * src/omp.c (send_get_end): Move filter check outside the printf, otherwise the clean filter leaks. 2013-07-30 Matthew Mundell * src/manage_sql.c (copy_user): Set password NULL instead of to "changeme". The admin can manually set the password later. 2013-07-29 Matthew Mundell * src/manage_sql.c (valid_type): Add "user". 2013-07-26 Matthew Mundell * src/omp.c (init_get): If the filter_term is NULL use the default filter, because most likely the user has requested a deleted filter. (get_next): Make the default error an internal error instead of an out of space error, because that's more likely the case. (omp_xml_handle_end_element): Correct variable in CLIENT_GET_AGENTS. 2013-07-26 Timo Pollmeier * src/manage_sql.c (set_task_schedule, request_delete_task) (request_delete_task_uuid): handle "scanner down" return from stop_task_internal. * src/omp.c (omp_xml_handle_end_element): In CLIENT_DELETE_TASK handle "scanner down" return from request_delete_task_uuid. 2013-07-26 Timo Pollmeier * src/manage_sql.c (delete_user): Delete user's report_counts rows. 2013-07-25 Matthew Mundell * src/openvasmd.c (serve_and_schedule): Adjust manage_schedule test for new sql_giveup return. Forgotten file from r17111 yesterday. 2013-07-25 Matthew Mundell * src/manage.c (manage_schedule): Add warnings on error. 2013-07-25 Matthew Mundell * src/manage_sql.c (init_task_schedule_iterator): Add error return. (manage_schedule): Add error return. 2013-07-24 Matthew Mundell * INSTALL: Reorder PKG_CONFIG_PATH export, in case another openvas installation is already in existing PKG_CONFIG_PATH. 2013-07-24 Matthew Mundell * src/manage_sql.c (create_tables): Add nvt_cves and nvt_cves_by_oid. (refresh_nvt_cves): New function. (init_manage): Ensure nvt_cves is initialised. Run ANALYSE after. (manage_complete_nvts_cache_update): Update nvt_cves. Run ANALYSE. (init_nvt_dfn_cert_adv_iterator): Use nvt_cves table for speed. 2013-07-24 Matthew Mundell * src/manage_sql.c (init_task_schedule_iterator): Call BEGIN with sql_giveup, in case there is a long operation running. This prevents the scheduling from waiting for long op and blocking the main process. * src/manage.c (manage_schedule): Return if task iterator fails to get lock. * src/sql.c (sql_giveup): Add return so caller can tell when gave up. * src/manage.h, src/sql.h: Update header accordingly. 2013-07-24 Timo Pollmeier * src/manage_sql.c (result_iterator_scan_nvt_version) (result_iterator_original_severity, result_iterator_severity) (result_iterator_severity_double, result_iterator_original_severity) (result_iterator_severity): Move variable declarations to top. Add correct DB column comments. (report_scan_result_count, filtered_host_count, init_asset_iterator): Neaten indentation of SQL in new_type_sql assignment. 2013-07-23 Timo Pollmeier * src/manage_migrators.c (migrate_87_to_88): Remove constraints from report_counts table and neaten comments. * src/manage_sql.c (create_tables): Remove constraints from report_counts table. (try_init_counts_cache): Replace OR IGNORE with explicit check and use == comparison in existence checks. Neaten comments. 2013-07-23 Timo Pollmeier Cache report counts and severity for each user and in a new table and remove them from reports table. Hence increase database version to 88. Add database migration from version 87 to 88. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 88. * src/manage_migrators.c (migrate_87_to_88): New function. (database_migrators): Add migrate_87_to_88. * src/manage_sql.c (create_tables): Remove counts and severity scores from reports table and add new report_counts table. (init_manage): Adjust sample data to new tables. (reports_clear_count_cache, make_report, cache_report_counts) (report_counts_id_filt, delete_report_internal): Do not use reports for result counts and use report_counts instead. (try_init_counts_cache): New function. (task_trend): Get trend only for authenticated users. 2013-07-23 Matthew Mundell * src/manage_sql.c (cache_report_counts): Put severity param in right place. This gets the caching working again, at least for startup. 2013-07-23 Matthew Mundell * src/manage_sql.c (report_count): In SQL of general case use report in result instead of report_results. 2013-07-22 Matthew Mundell * src/manage_sql.c (setting_severity): Use quiet SQL interface, because this is called so often that the logs grow very quickly. * src/sql.c (sql_x_internal): New function. Body from sql_x. (sql_x): Call sql_x_internal. (sql_x_quiet, sql_string_quiet): New functions. * src/sql.h: Add header accordingly. 2013-07-22 Hani Benhabiles * src/omp.c (omp_xml_handle_end_element): Use log_event and log_event_fail instead of g_log. 2013-07-22 Timo Pollmeier * ChangeLog: Replace leading whitespaces with tabs in last two entries. 2013-07-22 Timo Pollmeier * src/manage_sql.c (task_threat_level): Pass overrides parameter to task_severity. 2013-07-22 Timo Pollmeier * src/manage_sql.c (make_result): Use special severity values for False Positives, Log, Debug and Error messages. 2013-07-22 Timo Pollmeier * src/manage.c (severity_to_level, severity_to_type): New functions. * src/manage.h (task_severity): Add parameter. (severity_to_level, severity_to_type, result_iterator_original_level) (result_iterator_level): New function prototypes. * src/manage_sql.c (init_manage_process): Add SQLite functions severity_to_level, severity_to_type, (task_threat_level, task_previous_threat_level): Use task_severity to get threat level based on severity score. (task_severity): Add offset parameter to allow getting severity from next to last report. (init_result_iterator): Get only severity from database and calculate message type. (result_iterator_original_level, result_iterator_level): New iterator functions. (init_asset_iterator, report_scan_result_count, report_count) (report_count_filtered, report_severity_filtered, report_counts_id_filt) (filtered_host_count, OVERRIDE_ITERATOR_COLUMNS) (OVERRIDE_ITERATOR_TRASH_COLUMNS): Calculate message type from severity. * src/omp.c (buffer_results_xml): Use result_iterator_level to get threat level. * src/sql.c (sql_severity): Add parameter for task_severity. (sql_severity_to_level, sql_severity_to_type): New SQLite functions. * src/sql.h (sql_severity_to_level, sql_severity_to_type): New function prototypes. 2013-07-19 Hani Benhabiles * src/omp.c (log_event): Style fix. (log_event_fail): New function. (CASE_DELETE, omp_xml_handle_end_element): Update g_log calls to use log_event_fail and log_event accordingly. 2013-07-18 Matthew Mundell * src/manage.c (severity_matches_type): Space doc. Remove parens from returns and remove redundant else's, for readability. 2013-07-18 Matthew Mundell * src/manage.c (severity_matches_type): Add new threat names. * src/manage_sql.c (report_count, report_count_filtered): Remove special cases for new names, as this is done in severity_matches_type now. 2013-07-18 Matthew Mundell * src/manage_sql.c (report_count): Switch old Alarm types to threat names. In these cases find the results by severity instead of type. (report_count_filtered): Add special case for high, medium and low. (report_counts_id_filt): Replace old Alarm types with threat names. 2013-07-18 Timo Pollmeier * src/manage.c (severity_matches_type): New function. * src/manage.h (SEVERITY_LOG, SEVERITY_FP, SEVERITY_DEBUG) (SEVERITY_ERROR): New constants for special severity values. (severity_matches_type): New function prototype. * src/manage_sql.c (init_manage_process): Add severity_matches_type SQL function. (task_threat_level, task_previous_threat_level, task_severity) (init_result_iterator, init_asset_iterator, report_scan_result_count) (report_count, report_severity, report_count_filtered) (report_severity_filtered, report_counts_id_filt, filtered_host_count) (note_count, init_note_iterator, override_count) (init_override_iterator): Support dynamic severity and apply overrides based on severity. * src/sql.c (sql_severity_matches_type): New SQL wrapper function. * src/sql.h (sql_severity_matches_type): New function prototype. 2013-07-16 Matthew Mundell * src/manage_migrators.c (migrate_86_to_87): Update severity of old results before merging the types, otherwise this information is lost. 2013-07-16 Matthew Mundell Switch to new Scanner type Alarm, which replaces Hole, Warning and Note. Hence increase database version to 87. Add database migration from version 86 to 87. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 87. * src/manage_migrators.c (migrate_86_to_87): New function. (database_migrators): Add migrate_86_to_87. * src/manage_sql.c (init_manage_process): Create severity_in_level. (make_result): Switch to Alarm. (where_levels, where_levels_auto, where_levels_type): Do comparisons according to severity score. (report_counts_id_filt): Switch to Alarm. Use severity to determine type. * src/manage.c (threat_message_type): Switch to Alarm. (message_type_threat): Add Alarm case. (severity_in_level): New function. * src/manage.h: Add header accordingly. * src/otp.c (append_hole_message, append_info_message) (append_note_message): Remove. (append_alarm_messag): New function. (scanner_state_t, process_otp_scanner_input): Remove Hole, Info and Note cases. Add Alarm case. * src/sql.c (sql_severity_in_level): New function. * src/sql.h: Add header accordingly. 2013-07-16 Timo Pollmeier * src/manage_sql.c (create_tables): Add new_severity column to overrides_trash. 2013-07-16 Timo Pollmeier * src/manage_sql.c (init_manage_settings): Fix existence check of "Dynamic Severity" setting. 2013-07-15 Hani Benhabiles * src/omp.c (omp_xml_handle_end_element): Use log_event instead of g_log. 2013-07-12 Timo Pollmeier * src/manage.h (create_report_result_t): Add components "scan_nvt_version" and "severity". * src/manage_sql.c (create_report): Add scan time NVT version and Severity to results. * src/omp.c (create_report_data_t, create_report_data_reset): Add components "scan_nvt_version" and "severity". (client_state_t): Add components "CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_ORIGINAL_SEVERITY", "CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_SCAN_NVT_VERSION", "CLIENT_CREATE_REPORT_RR_RESULTS_RESULT_SEVERITY" (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Handle "original_severity", "scan_nvt_version" and "severity" subelements of report in create_report. 2013-07-12 Hani Benhabiles * src/omp.c (log_event): New function. (CASE_DELETE, omp_xml_handle_end_element): Replace g_log calls for resources creation, modification and deletion with adequate log_event calls. 2013-07-12 Timo Pollmeier * src/manage_sql.c (filter_clause): Cast severity column to REAL to ensure sorting by numerical value. 2013-07-12 Michael Wiegand * tools/greenbone-scapdata-sync, tools/greenbone-certdata-sync: Simplify test and remove unnecessary stat call. 2013-07-12 Timo Pollmeier * src/manage_sql.c (delete_override, manage_restore): Add new_severity column for moving overrides from/to trashcan. 2013-07-11 Matthew Mundell * src/manage_sql.c (collate_location): New function. (init_manage_process): Create collate_location. (init_result_iterator): Collate ports with new collator, so that they sort properly. 2013-07-11 Matthew Mundell * src/manage_sql.c (init_result_iterator): Make "location" an alias for "port" in the sort field. 2013-07-11 Timo Pollmeier * src/manage_sql.c (task_threat_level, task_previous_threat_level) (init_asset_iterator, report_scan_result_count, report_count): Sort overrides also by creation date. (task_severity, init_result_iterator): Use new severity of overrides. Additionally sort overrides by creation date. 2013-07-11 Timo Pollmeier * src/manage.h (modify_override): Add parameter. * src/manage_sql.c (modify_override): Add parameter to set "new_severity". * src/omp.c (modify_override_data_t, modify_override_data_reset): Add "new_severity" component. (client_state_t): Add CLIENT_MODIFY_OVERRIDE_NEW_SEVERITY. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Handle new "new_severity" subelement of modify_override. 2013-07-10 Timo Pollmeier * src/manage_sql.c (OVERRIDE_ITERATOR_TRASH_COLUMNS): Add missing comma. 2013-07-10 Timo Pollmeier * src/manage.h (create_override): Add parameter. * src/manage_sql.c (create_override): Add parameter to set "new_severity". (copy_override): Add "new_severity" column. * src/omp.c (create_override_data_t, create_override_data_reset): Add "new_severity" component. (client_state_t): Add CLIENT_CREATE_OVERRIDE_NEW_SEVERITY. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Handle new "new_severity" subelement of create_override. 2013-07-10 Matthew Mundell * src/manage_sql.c (print_report_port_xml, print_report_xml): Line up indentation. 2013-07-10 Timo Pollmeier Add CVSS-based severity to overrides table and get_overrides. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Change to 86. * src/manage_migrators.c (migrate_85_to_86): New migrator function. (database_migrators): Add migrate_85_to_86. * src/manage.h (override_iterator_new_severity): New function prototype. * src/manage_sql.c (create_tables): Add column "new_severity" to tables "overrides" and "overrides_trash". (OVERRIDE_ITERATOR_FILTER_COLUMNS, OVERRIDE_ITERATOR_COLUMNS) (OVERRIDE_ITERATOR_TRASH_COLUMNS): Add "new_severity" column. (override_iterator_new_severity): New iterator function. * src/omp.c (buffer_overrides_xml): Add "new_severity" element. * src/schema_formats/XML/OMP.xml (get_overrides): Add "new_severity" element to response. * doc/omp.html, doc/omp.rnc: Update from source. 2013-07-10 Timo Pollmeier * src/manage_migrators.c (migrate_84_to_85): Correct version numbers in comments. 2013-07-09 Matthew Mundell * src/manage_sql.c (create_filter, modify_filter): Clean filter term so that default keywords are added to it. 2013-07-09 Timo Pollmeier Add severity to reports. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Change to 85. * src/manage.h (task_trend_counts, report_counts, report_counts_id): Add new parameters. (task_severity): New function prototype. * src/manage_migrators.c (migrate_84_to_85): New migrator function. (database_migrators): Add migrate_84_to_85. * src/manage_sql.c (create_tables): Add columns "severity", "override_severity" to table "reports". (TASK_ITERATOR_FILTER_COLUMNS, TASK_ITERATOR_COLUMNS): Add column "severity". (init_manage_process): Add creation of MySQL function "task_severity". (task_severity): New function to get the maximum severity of a task. (report_cache_counts): Add severity_parameter. (report_severity, report_severity_filtered): New functions to get the maximum severity of a report. (report_counts, cache_report_counts, report_counts_id_filt, report_counts_id): Add severity_parameter(s). (print_report_assets_xml, print_report_port_xml): Adjust calls of report_counts_id, report_counts_id_filt. (print_report_xml): Add severity to response. (task_trend_calc, task_trend_counts, task_trend): Take severity into account when comparing levels. * src/omp.c (send_reports) (omp_xml_handle_end_element [CLIENT_GET_REPORTS]): Output maximum severities of reports. * src/sql.c (sql_severity): New SQLite function to get the severity of a task. * src/sql.h (sql_severity): New function prototype. * src/schema_formats/XML/OMP.xml (get_reports): Add "severity" element to response. * doc/omp.html, doc/omp.rnc: Update from source. 2013-07-08 Matthew Mundell * src/manage_sql.c (print_report_assets_xml): Cleanup iterator in same block it was initialised in. 2013-07-08 Hani Benhabiles * src/manage_sql.c: Remove old migrator documentation. * src/manage_migrators.c: Add updated migrator documentation. 2013-07-05 Timo Pollmeier * src/manage_sql.c (init_result_iterator): Cast severity to REAL in ORDER BY to ensure that it is sorted by its numerical value. 2013-07-05 Timo Pollmeier * src/manage.h (setting_dynamic_severity, setting_dynamic_severity_int): New function prototypes. * src/manage_sql.c (init_manage_settings): Add new setting "Dynamic Severity". (init_result_iterator): Rename current_nvt to dynamic_severity and get value from setting. (setting_dynamic_severity, setting_dynamic_severity_int): New functions for getting the "Dynamic Severity" setting. (modify_setting): Accept UUID of "Dynamic Severity" setting. 2013-07-04 Timo Pollmeier * src/manage_sql.c (init_result_iterator): Always use 0.0 severity for automatic false positives in ORDER BY clause. 2013-07-04 Timo Pollmeier * src/manage_sql.c (result_iterator_scan_nvt_version) (result_iterator_severity, result_iterator_original_severity) (result_cmp): Fix comments. 2013-07-04 Timo Pollmeier * src/manage_sql.c (init_report_iterator): Replace cvss_base in ORDER BY with severity and make it higher priority than message type. (result_iterator_severity_double): New iterator function. (result_cmp): Replace NVT cvss_base with severity and raise priority above message type. 2013-07-04 Timo Pollmeier * src/manage_sql.c (init_report_errors_iterator): Add columns "nvt_version" and "severity". (report_errors_iterator_scan_nvt_version) (report_errors_iterator_severity): New iterator functions. (PRINT_REPORT_ERROR): Add elements "scan_nvt_version" and "severity". 2013-07-04 Michael Wiegand * tools/greenbone-scapdata-sync, tools/greenbone-certdata-sync: Add detection of feed freshness and database integrity to the sync scripts for CERT and SCAP data. 2013-07-04 Timo Pollmeier * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Change to 84. * src/manage.h (result_iterator_scan_nvt_version) (result_iterator_original_severity, result_iterator_severity): New function prototypes. * src/manage_migrators.c (migrate_83_to_84): New migrator that adds columns "nvt_version" and "severity" to results. (database_migrators): Add migrate_83_to_84; * src/manage_sql.c (create_tables): Add columns "nvt_version" and "severity" to results. (make_result): Add nvt_version and severity to results if possible. (result_iterator_scan_nvt_version, result_iterator_original_severity) (result_iterator_severity): New iterator functions. * src/omp.c (buffer_results_xml): Add elements "scan_nvt_version", "severity", "original_severity". * src/schema_formats/XML/OMP.xml (get_results): Add elements "scan_nvt_version", "severity", "original_severity" to response. * doc/omp.html, doc/omp.rnc: Update from source. 2013-07-02 Hani Benhabiles * src/manage_sql.c (print_report_port_xml): Send matching port cvss instead of threat string. 2013-06-28 Matthew Mundell Add regular expression searching to powerfilter columns, using syntax "column:regexp". * src/manage_sql.c (keyword_relation_t): Add regexp element. (split_filter, manage_clean_filter, filter_clause): Handle regexp case. 2013-06-27 Matthew Mundell Add regular expression searching to powerfilter, using new RE or REGEXP keyword. * src/manage_sql.c (filter_clause): Support regexps. (init_manage_process): Create SQL function regexp. * src/sql.c (sql_regexp): New function. * src/sql.h: Add header accordingly. 2013-06-26 Michael Wiegand * CMakeLists.txt: Make SVN revision in version string available again for out-of-source build. 2013-06-25 Michael Wiegand Post release version bump. * CMakeLists.txt: Updated version number to 5.0+beta2. 2013-06-25 Michael Wiegand Preparing the openvas-manager 5.0+beta1 release. * CHANGES: Updated. * INSTALL: Updated, added section on credential encryption key migration. 2013-06-25 Jan-Oliver Wagner * README: Dropped mentioning of special user "om" as it does not exist this way anymore. 2013-06-25 Hani Benhabiles * src/manage_sql.c (validate_results_port): Also try to validate results in old format "foo (123/bar)" 2013-06-24 Timo Pollmeier * src/report_formats/Topology/hostvisdot-summary.xsl (): Update copyright and author data. (report): Get traceroute and ports directly from host detail. (result [trace]): Removed. Replaced by detail [trace]. (detail [trace]): New template, adapted result [trace] to use traceroute from host detail element. 2013-06-24 Hani Benhabiles * src/manage_sql.c (delete_group): Handle move group to trashcan case. Check whether a group is in use by a permission. Move group users too. (group_in_use): Check for permissions using the group. (manage_restore): Handle restoring a group from trashcan. (manage_empty_trashcan): Empty groups_trash and group_users_trash too. 2013-06-24 Hani Benhabiles * src/manage_sql.c (create_tables): Create groups_trash and group_users_trash tables. (GROUP_ITERATOR_TRASH_COLUMNS): New define. (group_count, init_group_iterator): Add trash columns. 2013-06-21 Matthew Mundell * src/manage_sql.c (omp_xml_handle_end_element): Add log for successful creation in CREATE_NOTE and CREATE_OVERRIDE. 2013-06-21 Matthew Mundell * src/manage_sql.c (filter_clause, print_report_xml): Neaten formatting. 2013-06-21 Matthew Mundell * src/manage_sql.c (filter_clause): Always use AND for the special owner=any keyword, because this keyword is for the ownership clause and using OR makes everything match the filter. Also add the NOT case, for completeness. 2013-06-21 Timo Pollmeier * src/manage_sql.c (copy_tag): Remove redundant null pointer check. 2013-06-21 Timo Pollmeier * src/manage_sql.c (info_name_count): Quote name for SQL query. (copy_tag): Free name and ID correctly when failing to find tag. (init_resource_tag_iterator, resource_tag_count): Quote resource ID for SQL query. 2013-06-21 Hani Benhabiles * src/manage_sql.c, src/manage.h: Rename manage_set_setting to modify_setting for consistency with other modify commands. 2013-06-21 Timo Pollmeier * src/manage.h (all_info_iterator_severity): New function prototype. * src/manage_sql.c (ALL_INFO_ITERATOR_FILTER_COLUMNS) (ALL_INFO_UNION_COLUMNS): Add column "severity". (all_info_iterator_severity): New iterator function. * src/omp.c (omp_xml_handle_end_element): In case CLIENT_GET_INFO, add "severity" element for allinfo. * src/schema_formats/XML/OMP.xml (get_info): Add "severity" element to response. * doc/omp.html, doc/omp.rnc: Update from source. 2013-06-21 Hani Benhabiles * src/manage_sql.c (modify_report_format): New function. * src/manage.h: Add modify_report_format header. * src/manage_sql.c (omp_xml_handle_end_element): Convert MODIFY_REPORT_FORMAT case to use modify_report_format and new consistent style for modify commands. 2013-06-21 Hani Benhabiles * src/manage_sql.c, src/manage.h (set_report_parameter): Remove unused function. 2013-06-21 Hani Benhabiles * src/manage_sql.c (modify_report): New function. * src/manage.h: Add modify_report header. * src/manage_sql.c (omp_xml_handle_end_element): Convert MODIFY_REPORT case to use modify_report and new consistent style for modify commands. 2013-06-20 Matthew Mundell * src/manage_sql.c (NVT_ITERATOR_COLUMNS) (NVT_ITERATOR_COLUMNS_NVTS): Add name to dummy owner column, in case it appears in filtering. 2013-06-20 Matthew Mundell * src/manage_sql.c (where_owned): Use defines for locations. 2013-06-20 Matthew Mundell Get trashcan working. * src/manage_sql.c (where_owned): Add check for task, because the trash is in the regular table. (count): Add trash_columns arg for trash case, because the owner column accesses the table by name, so using the normal column causes an error. Update all callers. Also add checks for task, as above. (ALERT_ITERATOR_TRASH_COLUMNS, NOTE_ITERATOR_TRASH_COLUMNS) (OVERRIDE_ITERATOR_TRASH_COLUMNS): Correct table name. (trash_report_format_writable): Use trash specific function to get global state. (trash_report_format_global): New function. (PERMISSION_ITERATOR_TRASH_COLUMNS): New define. (TAG_ITERATOR_COLUMNS): Line up \. (TAG_ITERATOR_TRASH_COLUMNS): Correct table name. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): Call trash specific function to get global state in trash case in GET_REPORT_FORMATS. 2013-06-20 Timo Pollmeier * src/manage_sql.c (CPE_INFO_ITERATOR_FILTER_COLUMNS) (CPE_INFO_ITERATOR_COLUMNS, OVALDEF_INFO_ITERATOR_FILTER_COLUMNS) (OVALDEF_INFO_ITERATOR_COLUMNS) (DFN_CERT_ADV_INFO_ITERATOR_FILTER_COLUMNS) (DFN_CERT_ADV_INFO_ITERATOR_COLUMNS): Add "severity" alias for max_cvss. * tools/greenbone-certdata-sync, tools/greenbone-scapdata-sync, tools/openvas-certdata-sync.in, tools/openvas-scapdata-sync.in (update_cvss): Change max_cvss for no CVEs to empty string. 2013-06-20 Hani Benhabiles * src/manage_sql.c (modify_lsc_credential): Allow setting certain parameters only instead of overwriting with empty string. 2013-06-20 Michael Wiegand Adjust version identification string for protocol version switch. * src/ompd.c (write_to_scanner): Replace 1.x with 2.xbeta1 to match changes in openvas-scanner. * src/otp.c (process_otp_scanner_input): Replace 1.x with 2.xbeta1 to match changes in openvas-scanner. Adjust string lengths. * src/oxpd.c: Adjust OTP initialisation strings. 2013-06-19 Matthew Mundell * src/manage_sql.c (AGENT_ITERATOR_TRASH_COLUMNS): Specify columns explicitly so that agents_trash is used in users check instead of agents. 2013-06-19 Matthew Mundell * src/sql.c (sql_resource_exists, sql_resource_name): Alway finalize stmt, otherwise there are open statements when closing the db. 2013-06-19 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Switch the response on task control ops and RESTORE from Internal Error to Syntax Error. 2013-06-19 Matthew Mundell * src/manage_sql.c (user_has_access_uuid): Enable role check in result case. 2013-06-19 Matthew Mundell * src/manage_sql.c (user_has_access_uuid): Add missing arg. 2013-06-19 Matthew Mundell * src/manage_sql.c (omp_commands): Order alphabetically. 2013-06-19 Hani Benhabiles * doc/db_postgres.sql (nvts): Remove nvt risk_factor. * doc/db.png: Update for version changes. 2013-06-19 Hani Benhabiles Remove NVT risk_factor column. Migrate DB to version 83. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Bump to 83. * src/manage_migrators.c (migrate_82_to_83): New function. (database_migrators): Add migrate_82_to_83. 2013-06-19 Hani Benhabiles * src/manage_sql.c (NVT_ITERATOR_COLUMNS_NVT): Add aliases for cvss_base to match NVT_ITERATOR_COLUMNS. 2013-06-19 Hani Benhabiles Remove NVT risk factor. * src/manage.c (get_nvti_xml): Remove risk_factor element. * src/manage.h: Remove result_iterator_nvt_risk_factor and nvt_iterator_risk_factor headers. * src/manage_sql.c (create_tables): Don't create nvt table with risk_factor column. (result_iterator_risk_factor, report_errors_iterator_nvt_threat) (nvt_iterator_risk_factor): Delete functions. (init_report_errors_iterator): Adjust query for nvt risk_factor removal. (PRINT_REPORT_ERROR): Remove nvt threat. (make_nvt_from_nvti): Adjust for risk_factor column removal. (NVT_INFO_ITERATOR_FILTER_COLUMNS, NVT_ITERATOR_COLUMNS) (NVT_ITERATOR_COLUMNS_NVTS): Remove nvt risk_factor column. * src/omp.c (client_state_t, omp_xml_handle_start_element) (omp_xml_handle_end_element): Remove nvt risk_factor state and its handling. (buffer_results_xml): Don't send nvt risk_factor. 2013-06-18 Hani Benhabiles * src/manage_sql.c (CVE_INFO_ITERATOR_FILTER_COLUMNS) (CVE_ITERATOR_COLUMNS): Add severity alias for cvss column. 2013-06-18 Hani Benhabiles * src/manage_sql.c (NVT_INFO_ITERATOR_FILTER_COLUMNS) (NVT_ITERATOR_COLUMNS): Add cvss alias for cvss_base column. 2013-06-18 Hani Benhabiles * src/manage_sql.c (NVT_INFO_ITERATOR_FILTER_COLUMNS) (NVT_ITERATOR_COLUMNS): Add severity alias for cvss_base column. 2013-06-17 Matthew Mundell * src/manage_sql.c (create_permission): Require a subject. 2013-06-17 Matthew Mundell * src/manage_sql.c (create_permission): Leave resource as 0 if ID is "" or "0". 2013-06-17 Matthew Mundell * src/manage_sql.c (user_has_access_uuid): Add special case for checking the permission on permissions, because a user has read access to permission that mention the user. 2013-06-17 Matthew Mundell * src/manage_sql.c (user_has_access_uuid): Enable role checks. 2013-06-17 Hani Benhabiles * src/manage_sql.c (modify_lsc_credential): New function. * src/manage.h: Add modify_lsc_credential prototype. * src/omp.c (omp_xml_handle_end_element): Adapt MODIFY_LSC_CREDENTIAL to use new modify style. 2013-06-17 Matthew Mundell * src/manage_sql.c (REPORT_FORMAT_ITERATOR_COLUMNS) (REPORT_FORMAT_ITERATOR_TRASH_COLUMNS): Add dummy owner column. 2013-06-17 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In GET_REPORT_FORMATS send TRUST and ACTIVE in details case too. Details cases should always include everything from the simple case. 2013-06-15 Matthew Mundell * src/manage_sql.c (filter_clause): Add support for owner=any, now that there is actually an owner column in the GET selections. 2013-06-15 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Remove OWNER from GET_TASKS, because SEND_GET_COMMON sends it now. 2013-06-15 Matthew Mundell Add OWNER to standard GET response. * src/manage_sql.c (GET_ITERATOR_FILTER_COLUMNS): Add owner to filter columns. (GET_ITERATOR_COLUMNS): Add owner column. Add table arg to support owner column. Add new arg to all callers. (GET_ITERATOR_COLUMN_COUNT): Increment for new column. (NVT_ITERATOR_COLUMNS): Use GET_ITERATOR_COLUMN_PREFIX, and add dummy owner. (NVT_ITERATOR_COLUMNS_NVTS): Add dummy owner. (get_iterator_owner_name): New function. (NOTE_ITERATOR_COLUMNS, NOTE_ITERATOR_TRASH_COLUMNS) (OVERRIDE_ITERATOR_COLUMNS, OVERRIDE_ITERATOR_TRASH_COLUMNS): Add owner column by hand. (CVE_INFO_ITERATOR_COLUMNS): Add dummy owner column. (CPE_INFO_ITERATOR_COLUMNS, OVALDEF_INFO_ITERATOR_COLUMNS) (DFN_CERT_ADV_INFO_ITERATOR_COLUMNS, ALL_INFO_UNION_COLUMNS): Use GET_ITERATOR_COLUMN_PREFIX, and add dummy owner. (init_all_info_iterator): Add owner to SQL. * src/manage.h: Add header accordingly. * src/omp.c (send_get_common): Send owner too. (buffer_notes_xml, buffer_overrides_xml): Send owner by hand. 2013-06-14 Matthew Mundell * src/manage_sql.c (resource_count): Use permission "any" instead of a specific GET command. 2013-06-14 Matthew Mundell * src/manage_sql.c (where_owned): New function. Body init_get_iterator. (init_get_iterator): Call where_owned to get the owner clause. (count): Call where_owned to get the full owner owner clause. (resource_count): Add permission keyword to the filter, so that the count includes observed resources. 2013-06-14 Timo Pollmeier * src/manage_sql.c (CASE_DELETE): Use actual resource type in error in "permission denied" error message. 2013-06-14 Hani Benhabiles * src/manage.h: Remove manage_migrators.h include. Add manage_migrate_needs_timezone header. * src/manage_migrators.c: Remove manage_migrators.h include. Add migrator_t typedef and move down database_migrators array. * src/manage_migrators.h: Remove file. * src/manage_sql.c: Remove manage_migrators.h include. 2013-06-14 Hani Benhabiles * src/manage_sql.c: Remove migrator related functions, types and definitions. * src/manage_migrators.c: Add migrator related functions and definitions from manage_sql.c. Add openvas_logging.h include. * src/manage_migrators.h: Add function prototypes. Add migrator_t struct definition. Add glib include. * src/manage.h: Include manage_migrators.h. Remove redundant manage_migrate_needs_timezone header. 2013-06-13 Matthew Mundell * src/manage_sql.c (init_get_iterator): Explain permission case. (count): Add special case for owner clause of permissions. 2013-06-13 Hani Benhabiles * src/manage_migrators.h: Add missing license and copyright at start of file. 2013-06-13 Hani Benhabiles 3nd patch, move migrators functions. * src/manage.h, src/manage_sql.c: Remove some preprocessor defintions and variables. Moed to manage_sql.h * src/manage_sql.h: Add preprocessor definitions from manage.h and manage_sql.c 2013-06-13 Hani Benhabiles 2nd patch, move migrators functions. * src/manage_migrators.h: New file. Add migrate_x_to_y prototypes. * src/manage_sql.c: Remove migrate_x_to_y prototypes. Include manage_migrators.h * src/manage_migrators.c: Fix documentation. Include header. 2013-06-13 Hani Benhabiles Move migrators functions to manage_migrators.c * src/CMakeLists.txt: Add manage_migrators.c file. * src/manage.h: Add internal types, preprocessor defintions and external variables needed by manage_migrators.c from manage_sql.c. Add set_db_version header. * src/manage_sql.c: Remove internal types, preprocessor definitions and external variables needed by manage_migrators.c (See manage.h) Remove migrator functions, add their headers. * src/manage_migrators.c: New file. Add migrator functions from manage_sql.c 2013-06-13 Hani Benhabiles * src/manage_sql.c (validate_results_port): New function. (create_note, modify_note, create_override, modify_override): Validate port value. * src/omp.c (omp_xml_handle_end_element): Handle invalid port case for create_note, create_override, modify_note, modify_override calls. 2013-06-13 Hani Benhabiles * src/manage_sql.c (where_search_phrase): Apply search on nvt cve value too. 2013-06-13 Matthew Mundell * INSTALL: Update section about creating first user. 2013-06-12 Matthew Mundell * src/manage_sql.c (PERMISSION_ITERATOR_COLUMNS): Replace hardcoded tasks query with call to resource_name. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_PERMISSIONS add id and NAME to RESOURCE, similar to SUBJECT. 2013-06-12 Matthew Mundell * src/manage_sql.c (type_has_permissions): Enable all types, so that the GET iterator uses permissions for all types. 2013-06-12 Matthew Mundell * src/manage_sql.c (migrate_56_to_57): Ensure new tables exist. 2013-06-12 Matthew Mundell * src/manage_sql.c (MIGRATE_55_TO_56_RANGE): New macro. (migrate_55_to_56_ensure_predefined_port_lists_exist): New function. (migrate_55_to_56): Call dedicated port list function, as the normal one has changed. 2013-06-12 Matthew Mundell * src/manage_sql.c (copy_resource_lock): Return with error if the insert ID was 0. (copy_permission): Correct column name. 2013-06-12 Matthew Mundell * src/manage_sql.c (OVERRIDE_ITERATOR_COLUMNS): Shorten overlong lines. 2013-06-12 Matthew Mundell * src/manage_sql.c (ANON_GET_ITERATOR_COLUMNS): Remove for now. The only callers need special casing anyway. (NOTE_ITERATOR_COLUMNS, OVERRIDE_ITERATOR_COLUMNS): Remove ANON_GET_ITERATOR_COLUMNS comment. 2013-06-12 Matthew Mundell Remove OTP PORT handling. * src/manage_sql.c (init_result_iterator, column_auth_type) (report_counts_autofp_match): Adjust open port comment. (append_task_open_port): Remove. * src/otp.c (scanner_state_t): Remove PORT states. (process_otp_scanner_input): Remove PORT handling. 2013-06-12 Timo Pollmeier * src/omp.c (buffer_config_preference_xml): Add default value element "default" to response. (omp_xml_handle_end_element): In case CLIENT_GET_PREFERENCES remove special case for missing config, which is now handled by buffer_config_preference_xml. * src/schema_formats/XML/OMP.xml (get_nvts, get_preferences): Add response element "default" and update examples accordingly. * doc/omp.html, doc/omp.rnc: Update from source. 2013-06-12 Hani Benhabiles * src/manage_sql.c (where_search_phrase): Apply search phrase matching based on nvt tags content too. 2013-06-12 Hani Benhabiles * src/manage_sql.c (init_get, omp_xml_handle_end_element): Apply default filters only when filt_id value is set to -2. This fixes bugs where a command is called from pages other than main page (Filters in settings page, Filters in filter box etc,.) while having a default filter that limits its results. 2013-06-12 Hani Benhabiles * src/manage_sql.c (setting_filter): Make documentation clearer about passed resource value. * src/omp.c (INIT_GET): Append 's' to init_get settings_name parameter. Fixes issue with default filter not applied as the name doesn't match in DB. (omp_xml_handle_element): make INIT_GET call consistent for get_groups case. 2013-06-11 Timo Pollmeier * src/schema_formats/XML/OMP.xml (get_nvts): Remove text about preferences requiring a config and add a paragraph about default preference values instead. * doc/omp.html: Update from source. 2013-06-11 Timo Pollmeier * src/omp.c (omp_xml_handle_end_element): In case CLIENT_GET_NVTS, allow preferences attribute without config_id. 2013-06-11 Matthew Mundell * src/ompd.c (write_to_scanner, serve_omp): Remove user/password scanner init states. Also remove SCANNER_INIT_GOT_VERSION which was needed while waiting for "User:". * src/otp.c (process_otp_scanner_input): After sending version go directly to SCANNER_INIT_DONE. Remove user/password states. In SCANNER_NVT_INFO check for SCANNER_INIT_DONE instead of SCANNER_INIT_SENT_PASSWORD. * src/otp.h: Update header accordingly. 2013-06-11 Hani Benhabiles * src/manage_sql.c, src/omp.c: Revert revision 16518 for Note port value validation. 2013-06-11 Hani Benhabiles * src/manage_sql.c (report_ssl_cert_count): New function (print_report_xml): print report ssl certs total count. 2013-06-10 Matthew Mundell * src/manage_sql.c (note_count, init_note_iterator, override_count) (init_override_iterator): Use the task in the results table, instead of looking up the task via the report. This drastically improves performance of GET_NOTES when given a task, which was making the GSA Task Details page load very slowly for big databases. 2013-06-10 Hani Benhabiles * src/manage_sql.c (print_report_xml): Cleanup report host iterator in prognostic report case. 2013-06-10 Matthew Mundell * src/omp.c (create_permission_data_t, create_permission_data_reset) (client_state_t, omp_xml_handle_start_element) (omp_xml_handle_end_element, omp_xml_handle_text): Remove RESOURCE/TYPE from CREATE_PERMISSION. * src/manage_sql.c (omp_command_type): Allocate the return, in order to remove the trailing S on GET commands. (create_permission): Handle memory returned from omp_command_type. (strdown): New function. (modify_permission): Remove resource_type arg. Get type from command name. * src/manage.h: Update header accordingly. 2013-06-10 Matthew Mundell * src/manage_sql.c (create_permission): Ensure name is store lower case. Invert name check. 2013-06-10 Hani Benhabiles * src/manage_sql.c (print_report_xml): Allocate delta_states dynamically when no value is provided as free'ing the static memory causes glibc to abort. (report_filter_term): Default delta_states value to cgns when none is provided to match report printing behaviour. 2013-06-07 Matthew Mundell * src/omp.c (create_permission_data_t, create_permission_data_reset) (client_state_t, omp_xml_handle_start_element) (omp_xml_handle_end_element, omp_xml_handle_text): Remove RESOURCE/TYPE from CREATE_PERMISSION. * src/manage_sql.c (omp_command_type): New function. (create_permission): Get resource type from command name instead of from an argument. * src/manage.h: Update header accordingly. 2013-06-06 Matthew Mundell * src/manage_sql.c (create_permission): Instead of accepting a list of special names, accept any command name. 2013-06-06 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In the CLIENT_HELP XML brief case send only the commands that the user has permission to run. * src/manage_sql.c (valid_omp_command): New function. (user_may): Lowercase the command name. (modify_permission): Instead of accepting a list of special names, accept any command name. 2013-06-06 Matthew Mundell * src/openvasmd.c (main): Move --disable-password-policy check up so that it affects --first-user too. 2013-06-06 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Add permission checks to all remaining GET commands. * src/manage_sql.c (init_system_report_type_iterator): Add permission check. 2013-06-06 Matthew Mundell * src/manage_sql.c (manage_user_set_rules): Remove. Rules now only available on database side. * src/manage.h: Remove header accordingly. * src/openvasmd.c (main): Remove rules arg from openvas_auth_init_funcs. 2013-06-06 Matthew Mundell * src/manage_sql.c (manage_set_setting): Update user modification time when changing timezone or password. 2013-06-06 Matthew Mundell * src/manage_sql.c (modify_user): Update modification time. 2013-06-06 Matthew Mundell * src/manage_sql.c (user_ensure_in_db, set_task_observers) (group_add_users, create_user): Set times when creating user. 2013-06-04 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Handle new return from delete_user. * src/manage_sql.c (delete_user): Fail if the user has active tasks. This is far easier than trying to stop the tasks. Remove all tasks and related resources when removing user. 2013-06-05 Hani Benhabiles * src/manage_sql.c (print_report_xml): Add prognostic_report_result_total's result to result_total instead of setting it up as there may be multiple report_host values to iterate over. 2013-06-04 Matthew Mundell * src/sql.c (sqlv): Return on error instead of aborting. (sql): Abort accordingly now that sqlv returns. (sql_error): New function. Like sql, but returns error state to caller. * src/sql.h: Add header accordingly. 2013-06-04 Matthew Mundell * src/manage_sql.c (init_manage_process): Keep going if SCAP or CERT db fails to load. (manage_scap_loaded, manage_cert_loaded): Run a test statement first to prevent an abort when there's an problem with the database. 2013-06-04 Hani Benhabiles * src/manage_sql.c (prognostic_report_result_total): Style fix. 2013-06-04 Matthew Mundell * src/manage.c (run_slave_task): Give up if connection succeeds but login fails. 2013-06-04 Matthew Mundell * src/manage_sql.c (copy_task): Copy permissions too. 2013-06-04 Matthew Mundell * src/manage_sql.c (copy_task): Copy alerts too. 2013-06-04 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TASKS use INIT_GET. 2013-06-04 Hani Benhabiles * src/manage_sql.c (prognostic_host_port_count): New function. (host_iterator_report): Fix return type. (print_report_xml): Add port count for each report host in prognostic type case. Add total host count. Fix total app count. (prognostic_app_count): Remove function. 2013-06-03 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TAGS correct symbol names probably left over from copy and paste long ago. 2013-06-03 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Use INIT_GET for GET_TAGS. 2013-06-03 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Rework GET_TAGS to be like all the other GET cases. 2013-06-03 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Correct DESCRIBE command names in permission checks. In GET_REPORTS add permission check and add missing spaces. 2013-06-03 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Correct GET_ROLES INIT_GET type. 2013-06-03 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Use INIT_GET for most of the GET commands that have filters. This brings permission checks to these commands. 2013-06-03 Hani Benhabiles * src/manage_sql.c (prognostic_app_count): New function. (print_report_xml): Print prognostic report apps count. 2013-06-03 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Use INIT_GET for GET_ROLES. 2013-06-03 Matthew Mundell * src/omp.c (INIT_GET): New macro. (omp_xml_handle_end_element): Call init_get via a macro because the return checks make it a bit long and it is always the same. 2013-06-03 Matthew Mundell * src/manage_sql.c (init_manage): Exclude GSA Administration menu items from Observer permissions. 2013-06-03 Matthew Mundell * src/omp.c (init_get): Add permission check. (omp_xml_handle_end_element): Add GET_TARGETS to handle init_get permission return. In GET_USERS replace common setup code with call to init_get. 2013-06-03 Matthew Mundell * src/omp.c (init_get): New function. Collects common setup steps from GET_TARGETS case in omp_xml_handle_end_element. (get_next): Improve comments. Skip the checks when there is a named filter. They were always producing the original empty set anyway. (omp_xml_handle_end_element): Remove comment from GET_PERMISSIONS and GET_TARGETS setup step, to make them the same as the other GET cases. Replace setup steps in GET_TARGETS with call to init_get. 2013-05-31 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Move GET cases together, and into alphabetical order. 2013-05-31 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Add permission result or check to remaining MODIFY commands. * src/manage_sql.c (manage_set_setting, modify_user): Add permission check. 2013-05-31 Hani Benhabiles * src/manage_sql.c (create_note, modify_note, create_override) (modify_override): Validate port before writing in DB. Return adequate error code when validation fails. * src/omp.c (omp_xml_handle_end_element): Adequately Handle new return codes for invalid port in create_note, create_override, modify_note and modify_override. 2013-05-30 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Group MODIFY cases together and alphabetically. 2013-05-30 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Add permission case to RUN_WIZARD. * src/manage.c (manage_run_wizard): Add permission check. 2013-05-30 Matthew Mundell Add permission checks to verify commands, sync commands and TEST_ALERT. * src/manage.c (openvas_sync_feed): Add permission check. * src/manage_sql.c (manage_alert, verify_agent): Switch arguments to UUIDs. Add permission check. (init_manage): Update verify calls. (verify_report_format_internal): New function. Body from verify_report_format. (verify_report_format): Switch to UUID arg. Add permission check. Call through to internal function to do the work. (report_format_verify): New function. Verifies given a ROWID, for init. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_end_element): Switch test_alert and verify_agent arguments to UUID, adding permission case. Add permission case to verify and sync commands. 2013-05-30 Hani Benhabiles * src/manage_sql.c (print_report_port_xml): New function. (print_report_xml): Refactor code for port summary into print_rpeort_port_xml. 2013-05-29 Hani Benhabiles * src/manage_sql.c (prognostic_report_result_total): New function. (print_report_xml): Send correct total result count instead of what was in result_count variable from before. 2013-05-29 Matthew Mundell Add permission checks to describe commands, task control commands and RESTORE. * src/manage_sql.c: Rename stop_task calls to stop_task_internal. (manage_restore): Add permission check. * src/manage.h: Add header accordingly. * src/manage.c (run_task): Switch task argument to task_id. (start_task, pause_task, resume_paused_task, resume_stopped_task) (resume_or_start_task): Switch task argument to task_id. Add permission check. (stop_task_internal): New function. Body from stop_task. (stop_task): Switch task argument to task_id. Add permission check. Call through to stop_task_internal. * src/omp.c (omp_xml_handle_end_element): Add permission checks to the describe commands and RESTORE. In task control commands move task finding into handler function and handle permission denied case. 2013-05-28 Timo Pollmeier * manage_sql.c (migrate_81_to_82): Remove creation of Topology format. 2013-05-28 Timo Pollmeier * CMakeLists.txt: Set OPENVASMD_DATABASE_VERSION to 82. Add installation of new topology report format. * manage_sql.c (migrate_81_to_82, database_migrators): Add migration that adds predefined Topology report format. (init_manage): Add predefined Topology report format. (report_format_predefined): Add new Topology report format. * src/report_formats/Topology/generate, src/report_formats/Topology/hostvisdot-summary.xsl: New report format scripts (copied from report_formats/simple_topo_plot). 2013-05-27 Hani Benhabiles * src/manage_sql.c (print_report_assets_xml): New function. (print_report_xml): Refactor code for assets type into new function. 2013-05-27 Matthew Mundell * src/manage_sql.c (init_manage): Remove automatic user creation. (manage_first_user): New function. * src/manage.h: Add header accordingly. * src/openvasmd.c (main): Add --first-user option. 2013-05-27 Matthew Mundell * src/manage_sql.c (user_may): Allow dummy init_manage user to do anything. (manage_empty_trashcan): Add permission check. * src/omp.c (omp_xml_handle_end_element): Add permission case to EMPTY_TRASHCAN. 2013-05-27 Hani Benhabiles * src/manage_sql.c (PRINT_REPORT_HOST_DETAILS): Print empty extra tag value if none was provided. 2013-05-24 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Correct MODIFY_ALERT event logs. 2013-05-24 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Capitalise MODIFY_AGENT event logs for consistency. 2013-05-24 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Add event logs to all permission denied return cases where the other cases also have logs. Clean up some of the log indenting. Correct the name in the CREATE_CONFIG permission denied message. 2013-05-24 Matthew Mundell * src/manage_sql.c (delete_target, delete_config, delete_lsc_credential) (delete_agent, delete_note, delete_override, delete_schedule) (delete_report_format, delete_slave, delete_group, delete_permission) (delete_port_list, delete_port_range, delete_user, delete_tag): Add permission check. 2013-05-24 Matthew Mundell * src/omp.c (delete_report_data_t): Add dummy ultimate field. (omp_xml_handle_end_element): Move all the delete cases up into alphabetical order. * src/manage_sql.c (delete_report): Update function name. 2013-05-24 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Replace more delete cases with macro call. This adds the permission denied check to these cases. Add the check to DELETE_TASK and DELETE_USER too. * src/manage_sql.c (delete_report_internal): New function. Was delete_report. (manage_delete_report): Remove. Now delete_report. (delete_report): New function. Was delete_report. Adjust to take ID and ultimate flag like other delete functions. * src/manage.c (delete_reports): Update function name. * src/manage_sql.h, src/manage.h: Update header accordingly. 2013-05-24 Matthew Mundell * src/omp.c (delete_port_range_data_t): Add dummy ultimate field. (CASE_DELETE): New macro. (omp_xml_handle_end_element): Replace most delete cases with macro call. This adds the permission denied check to these cases. * src/manage_sql.c (delete_port_range): Add dummy ultimate arg. (delete_filter): Add permission check. (delete_tag): Make return value same as other delete functions. * src/manage.h: Update header accordingly. 2013-05-24 Matthew Mundell * src/manage_sql.c (delete_alert, create_user): Add permission checks. * src/omp.c (omp_xml_handle_end_element): Add permission case to DELETE_ALERT and CREATE_USER switches. 2013-05-24 Matthew Mundell * src/manage_sql.c (init_manage): Set credential UUID because create_user needs that. Delete any old admin meta rows, just to be sure. 2013-05-24 Hani Benhabiles * src/manage_sql.c (setting_severity): New function. * src/manage.h: Add setting_severity prototype. * src/omp.c (omp_xml_handle_end_element): Send user severity class in authenticate response. 2013-05-24 Matthew Mundell * src/manage_sql.c (init_manage): Ensure there is at least one user. 2013-05-24 Timo Pollmeier * tools/openvas-scapdata-sync.in (): Remove command line parameter for setting SCAP dir. (do_help): Remove accordingly in help text. 2013-05-23 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In DELETE_TAG and MODIFY_TAG neaten some indenting. 2013-05-23 Matthew Mundell * src/manage_sql.c (modify_tag): Remove declaration indent. Move name init down or it leaks. Add space before paren. 2013-05-23 Matthew Mundell * src/manage_sql.c (create_port_range): Correct user_may command name. 2013-05-23 Matthew Mundell * src/manage_sql.c (create_tag): Move declarations to top of block. Add transaction. Add space before paren. Move quoted_name definition down otherwise it leaks. Free lc_attach_type on error. 2013-05-23 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_TAG clean up some indenting and correct error message names. 2013-05-23 Matthew Mundell Replace explicit observer checks in XML handler with general permission checks in the command functions. * src/manage_sql.c (modify_alert, modify_target, modify_agent) (modify_schedule, modify_slave, create_permission, modify_permission) (modify_port_list, modify_filter, modify_tag): Add user_may check. * src/omp.c (omp_xml_handle_end_element): Remove all user_is_observer checks, and add "permission denied" return cases in their place. 2013-05-23 Matthew Mundell * src/manage_sql.c (user_is_observer): Correct UUID. 2013-05-23 Matthew Mundell Use predefined permissions to restrict the commands available to Users and Observers. * src/omp.c (command_t, omp_commands): Remove. Now in manage.h and manage_sql.c. * src/manage_sql.c (omp_commands): New variable. (user_may): Replace the explicit observer check with checking based on the permission table. (add_role_permission): New function. (init_manage): Add predefined command-level permissions for User and Observer roles. * src/manage.h (command_t): New type. (omp_commands): New header. 2013-05-23 Jan-Oliver Wagner * INSTALL: Updated section "Certificate Generation" to match the recent changes in OpenVAS Scanner and its helper script openvas-mkcert-client. 2013-05-23 Hani Benhabiles * src/manage_sql.c (init_manage_settings): New function. (init_manage): Refactor settings and severity class setting initialization code into init_manage_settings. (manage_set_settings): Check for severity class uuid too. 2013-05-23 Hani Benhabiles * src/manage_sql.c (print_report_xml, print_report_errors_xml): Send all resources count as count element instead of total attribute. (init_report_errors_iterator): Use full table names. 2013-05-23 Hani Benhabiles * src/manage_sql.c (init_report_errors_iterator): Optimize sql query. Get nvt risk factor too. (report_errors_iterator_nvt_threat): New function. (report_errors_iterator_desc, report_errors_iterator_nvt_name) (report_errors_iterator_nvt_cvss): Readjust ordering. (PRINT_REPORT_ERROR): Send nvt threat too. 2013-05-23 Hani Benhabiles * src/manage_sql.c (report_error_count): New function. (print_report_errors_xml): Use new function for calculating error messages total. 2013-05-22 Jan-Oliver Wagner * INSTALL, CMakeLists.txt: Updated dependencies (openvas-libraries to 7.0.0). 2013-05-22 Jan-Oliver Wagner * CMakeLists.txt, src/CMakeLists.txt: Removed handling of OPENVAS_USERS_DIR. * src/manage_sql.c (migrate_9_to_10_user_uuid, migrate_79_to_80): Replaced OPENVAS_USERS_DIR by path via OPENVAS_STATE_DIR. src/omp.c (omp_xml_handle_end_element): Renamed OPENVAS_USERS_DIR/.auth.conf to OPENVAS_STATE_DIR/auth.conf. 2013-05-22 Matthew Mundell * src/manage_sql.c (empty_trashcan): Delete permissions too. 2013-05-22 Matthew Mundell * src/manage_sql.c (delete_user): Remove some of user's resources too. 2013-05-22 Matthew Mundell * src/manage_sql.c (user_is_admin, user_is_observer): Check user_roles table insead of old roles column. (user_may): Check for Everything permission, instead of for admin role. Admin always has this permission. 2013-05-22 Matthew Mundell * src/manage_sql.c (PERMISSION_UUID_ADMIN_EVERYTHING): New define. (init_manage): Ensure Admin role has the Everything permission. (permission_is_predefined): New function. (permission_writable): Add Admin Everything check. (PERMISSION_ITERATOR_COLUMNS): Add role checks, so new Admin permission show up right in GSA. (delete_permission): Prevent Admin Everything from being deleted. 2013-05-22 Matthew Mundell * src/manage_sql.c (init_manage): Ensure predefined roles exist. 2013-05-22 Timo Pollmeier * tools/greenbone-certdata-sync, tools/openvas-certdata-sync.in (db_migrate_4): Fix version number update. 2013-05-22 Timo Pollmeier * src/manage_sql.c (init_dfn_cert_adv_info_iterator): Remove filter for selection by ID. 2013-05-22 Timo Pollmeier Add max_cvss to DFN-CERT advisories. * doc/omp.html, doc/omp.rnc: Update from source. * src/manage.h (dfn_cert_adv_info_iterator_max_cvss): New function prototype. * src/manage_sql.c (DFN_CERT_ADV_INFO_ITERATOR_FILTER_COLUMNS) (DFN_CERT_ADV_INFO_ITERATOR_FILTER_COLUMNS): Add column max_cvss. (dfn_cert_adv_info_iterator_max_cvss): New iterator column function. * src/omp.c (xml_handle_end_element): In case CLIENT_GET_INFO add max_cvss element to response for dfn_cert_adv. * src/schema_formats/XML/OMP.xml (get_info): Add max_cvss to response for dfn_cert_adv. * tools/cert_db_update (meta): Set DB version to 4. (dfn_cert_advs): Add column "max_cvss". * tools/greenbone-certdata-sync (SCAP_DIR, SCAP_DB): New variables, set to SCAP dir / db file paths. (db_migrate_4, check_db_version): New migrator to version 4. (update_cvss): New function, updates CVSS for DFN-CERT. (update_cert_db): Add updated_dfn and check. Add update_cvss call. * tools/openvas-certdata-sync.in (SCAP_DIR, SCAP_DB): New variables, set to SCAP dir / db file paths. (db_migrate_4, check_db_version): New migrator to version 4. (update_cvss): New function, updates CVSS for DFN-CERT. (update_sec_db): Add updated_dfn and check. Add update_cvss call. 2013-05-21 Matthew Mundell * src/omp.c (modify_permission_data_t): Remove user, because subject has been used instead. 2013-05-21 Matthew Mundell Add OMP CREATE_PERMISSION. * src/omp.c (create_permission_data_t) (create_permission_data_reset): Adjust fields. (client_state_t): Add CREATE_PERMISSION resource and subject states. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add CREATE_PERMISSION. * src/manage_sql.c (create_permission): New function. * src/manage.h: Add header accordingly. 2013-05-21 Hani Benhabiles * src/manage_sql.c (init_report_errors_iterator) (report_errors_iterator_host, report_errors_iterator_port) (report_errors_iterator_nvt_oid, report_errors_iterator_nvt_name) (report_errors_iterator_desc, PRINT_REPORT_ERROR, (print_report_errors_xml): New functions. (print_report_xml): Print report error messages too. (PRINT_REPORT_HOST_DETAILS): Rename to PRINT_REPORT_HOST_DETAILS. * src/manage.h: Add function prototype accordingly. 2013-05-21 Jan-Oliver Wagner * src/omp.c (omp_xml_handle_end_element): Fix call (user_is_observer instead of openvas_is_user_observer). Probaly a remains of old administrator code. 2013-05-21 Timo Pollmeier * tools/greenbone-scapdata-sync, tools/openvas-scapdata-sync.in (list_oval_files_sortable): Add character class brackets to egrep regex. 2013-05-21 Timo Pollmeier * src/manage_sql.c (report_app_count): New function. (print_report_xml): Output count of detected Apps. 2013-05-21 Hani Benhabiles * src/manage_sql.c (print_report_host_details_xml): New function. (PRINT_REPORT_HOST_DETAILS): New macro. (print_report_xml): Clean code. Refactor code into new functions. 2013-05-21 Hani Benhabiles * src/manage_sql.c (init_report_host_details_iterator): Add extra field, send nvt cvss base in closed cve case. (report_host_details_iterator_extra): New function. (print_report_xml): Send host details extra field too. 2013-05-20 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Remove resource and name checks from MODIFY_PERMISSION. * src/manage_sql.c (modify_permission): Modify the fields one at a time. Only modify a field if it is given, otherwise leave the existing value. 2013-05-20 Matthew Mundell * src/manage_sql.c (modify_permission): Leave resource_location alone. 2013-05-20 Hani Benhabiles * src/manage_sql.c (buffer_cve): Remove function (print_report_xml): Remove unused cve buffering code. 2013-05-20 Matthew Mundell Add OMP MODIFY_PERMISSION. * src/omp.c (omp_commands, command_data_t,client_state_t): Add MODIFY_PERMISSION elements. (modify_permission_data_t): New type. (modify_permission_data_reset): New function. (modify_permission_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add MODIFY_PERMISSION. * src/manage_sql.c (modify_permission): New function. * src/manage.h: Add header accordingly. 2013-05-19 Hani Benhabiles * src/manage_sql.c (report_host_count): Optimize sql query. 2013-05-17 Timo Pollmeier Apply new logging method to greenbone-certdata-sync and make logging more consistent for both Greenbone scripts. Fix self test. * tools/greenbone-certdata-sync (): Remove variables LOGDIR, LOGFILE, and associated test. Replace with LOG_CMD (New variable for logger command). Move up variables RSYNC, SQLITE and move tests to do_self_test. Use new log functions. Add do_self_test to check availability of tools. Add SELFTEST_STDERR in case for --selftest arg. (log_write): Removed. Replaced by log_debug, log_info, log_notice, log_warning, log_err. (log_debug, log_info, log_notice, log_warning, log_err): New logging functions using logger. (reinit, update_cert_db, sync_certdata): Use new logging. Make log messages and levels more consistent by removing "Warning:" and "Error:" prefixes. (do_self_test): Add SQLITE, RSYNC and BASE_SYNC_DIR tests. Test if directory BASE_SYNC_DIR exists. Use new logging and print to stderr if SELFTEST_STDERR is set. * tools/greenbone-scapdata-sync (): Remove variables LOGDIR, LOGFILE. Change log_write to new log functions. Move up variables RSYNC, SQLITE and move tests to do_self_test. Add do_self_test to check availability of tools. Add SELFTEST_STDERR in case for --selftest arg. (log_debug): Move to make consistent with greenbone-certdata-sync. (log_write): Removed. Replaced by log_info and log_notice. (log_info, log_notice, log_warning): New logging functions. (reinit, db_migrate_9, db_migrate_10, db_migrate_11, db_migrate_12) (db_migrate_13, init_scap_db_update, update_cvss) (update_scap_db_private, update_scap_db, sync_scapdata): Change log_write to log_info or log_notice as appropriate. Make log messages and levels more consistent by removing "Warning:" and "Error:" prefixes. (do_self_test): Add SQLITE, RSYNC and BASE_SYNC_DIR tests. Test if directory BASE_SYNC_DIR exists. Use new logging and print to stderr if SELFTEST_STDERR is set. 2013-05-17 Hani Benhabiles * src/manage_sql.c (buffer_results_xml): Add default value for cvss when no value is provided and there is no nvt. 2013-05-17 Hani Benhabiles * src/manage_sql.c (report_os_count): Count OS by cpe instead of txt. 2013-05-16 Matthew Mundell * src/manage_sql.c (create_user, modify_user): Convert "Deny none" to "Allow All". * src/omp.c (omp_xml_handle_end_element): Convert "Deny none" to "Allow All". 2013-05-16 Hani Benhabiles * src/manage_sql.c (report_os_count): New function. (print_report_xml): Send report's total number of detected Operating Systems. 2013-05-15 Matthew Mundell * src/manage_sql.c (openvas_admin_add_user): Remove. Now create_user. (openvas_admin_modify_user): Remove. Now modify_user. (create_user, modify_user): New functions. From openvas_admin versions. * src/manage.h: Update headers accordingly. Remove old header. * src/omp.c (omp_xml_handle_start_element) (omp_xml_handle_end_element): Update function names. 2013-05-15 Hani Benhabiles * src/manage_sql.c (report_vuln_count): New function. (print_report_xml): Send report total number of vulnerabilities. 2013-05-15 Matthew Mundell * src/manage_sql.c (user_iterator_role): Remove. Column was removed earlier. (user_iterator_method, user_iterator_hosts) (user_iterator_hosts_allow): Update offsets for removed role column. 2013-05-15 Matthew Mundell * src/manage_sql.c (migrate_79_to_80): Ensure more tables that would be missing in older dbs exist. 2013-05-15 Timo Pollmeier * tools/scap_db_init.sql: Add DROP TABLE statements for ovalfiles, affected_ovaldefs. 2013-05-15 Timo Pollmeier * src/manage_sql.c (filter_clause): Require tags to be active for filtering by tag. 2013-05-15 Timo Pollmeier Add max_cvss and CVE count to OVAL definitions. * doc/omp.html, doc/omp.rnc: Update from source * src/manage.h (ovaldef_info_iterator_max_cvss) (ovaldef_info_iterator_cve_refs): New function prototypes. * src/manage_sql.c (OVALDEF_INFO_ITERATOR_FILTER_COLUMNS) (OVALDEF_INFO_ITERATOR_FILTER_COLUMNS): Add columns max_cvss, cves. (ovaldef_info_iterator_max_cvss, ovaldef_info_iterator_cve_refs): New iterator column functions. * src/omp.c (xml_handle_end_element): In case CLIENT_GET_INFO add max_cvss and cve_refs elements to response for ovaldef. * src/schema_formats/XML/OMP.xml (get_info): Add max_cvss and cve_refs to response for ovaldef. * tools/greenbone-scapdata-sync (db_migrate_14): New migrator function. (check_db_version): Add migration to version 14. (init_scap_db_update): Add initialisation of variables updated_cpes, updated_cves, updated_ovaldefs. (update_cvss): New function to update CVSS data if info was updated. (update_scap_db_private): Set updated_ovaldefs to 1 on OVAL update. (update_scap_db): Set updated_cpes to 1 on CPE update. Change warning for missing CPE dictionary to log_write. Remove initialisation of updated_cves. Remove update of CVSS - replaced by update_cvss call. * tools/openvas-scapdata-sync.in (db_migrate_14): New migrator function. (check_db_version): Add migration to version 14. (init_sec_db_update): Add initialisation of variables updated_cpes, updated_cves, updated_ovaldefs. (update_cvss): New function to update CVSS data if info was updated. (update_sec_db_private): Set updated_ovaldefs to 1 on OVAL update. (update_sec_db): Set updated_cpes to 1 on CPE update. Remove initialisation of updated_cves. Remove update of CVSS - replaced by update_cvss call. (do_refresh_private): Add update_cvss call. * tools/oval_update.xsl (oval_definitions:definition): Add updating of max_cvss and cve_refs columns. Add insert for affected_ovaldefs. * tools/scap_db_init.sql (meta): Set version to 14. (ovaldefs): Add columns max_cvss and cve_refs. (affected_ovaldefs): New table. (aff_ovaldefs_def_idx, aff_ovaldefs_cve_idx): New indexes. (cves_delete): Delete entries from affected_ovaldefs. (affected_ovaldefs_delete): New deletion trigger. 2013-05-14 Matthew Mundell * src/manage_sql.c (manage_set_setting): Remove big redundant comparison. 2013-05-14 Matthew Mundell * src/manage_sql.c (manage_set_setting): Add Roles Filter. 2013-05-14 Matthew Mundell Make MODIFY_USER handle multiple roles too. * src/manage_sql.c (openvas_admin_add_user): Correct return doc. (openvas_admin_modify_user): Replace role arg with array args. Set the roles from the array. * src/manage.h: Update header accordingly. * src/omp.c (modify_user_data_t, modify_user_data_reset): Replace role with roles. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Allow multiple roles in MODIFY_USER. 2013-05-14 Matthew Mundell Add user_id attribute to MODIFY_USER, to match other commands. * src/manage_sql.c (openvas_admin_modify_user): Add user_id arg. Make name arg a pointer. Find user by user_id if given. Return name in name arg in certain cases. Indicate gain and loss of admin in return. * src/manage.h: Update header accordingly. * src/omp.c (modify_user_data_t, modify_user_data_reset): Add user_id. (omp_xml_handle_start_element, omp_xml_handle_end_element): Handle user_id in MODIFY_USER. 2013-05-14 Michael Wiegand * tools/greenbone-scapdata-sync: Switch logging to use "logger" consistently, differentiate between log levels. 2013-05-13 Timo Pollmeier * src/omp.c (omp_xml_handle_end_element): In case CLIENT_MODIFY_TASK allow observers for container tasks. 2013-05-13 Michael Wiegand First step towards consolidation of logging. * tools/greenbone-scapdata-sync, tools/greenbone-certdata-sync: Remove verbose error messages to stdout as the scripts are no longer intended to be called interactively. 2013-05-13 Michael Wiegand * tools/greenbone-scapdata-sync, tools/greenbone-certdata-sync: Add compression to rsync options. 2013-05-13 Michael Wiegand * tools/greenbone-scapdata-sync, tools/greenbone-certdata-sync: Factor out ssh options to simplify rsync call. 2013-05-10 Hani Benhabiles * src/manage_sql.c (init_result_iterator): Order by host/ip after ordering by port and threat. 2013-05-10 Hani Benhabiles * src/manage_sql.c (report_closed_cves_count): Fix counting query. 2013-05-10 Timo Pollmeier * doc/omp.html, doc/omp.rnc: Update from source. * src/manage.h (cpe_info_iterator_nvd_id): New function prototype. * src/manage_sql.c (CPE_INFO_ITERATOR_FILTER_COLUMNS) (CPE_INFO_ITERATOR_COLUMNS): Add column nvd_id. (cpe_info_iterator_nvd_id): New function to get NVD ID. * src/omp.c (xml_handle_end_element): In case CLIENT_GET_INFO add element nvd_id to response for CPEs. * src/schema_formats (get_info): Add element nvd_id to cpe element in response. * tools/cpe_update: Use name as ID, put NVD ID in separate field. * tools/cve_update: Use name as ID for CPEs to avoid null IDs. * tools/greenbone-scapdata-sync (db_migrate_13, check_db_version): Add migration to SCAP database version 13. * tools/openvas-scapdata-sync.in (db_migrate_13, check_db_version): Add migration to SCAP database version 13. * tools/scap_db_init.sql (meta): Set version to 13. (cpes): Add column nvd_id. 2013-05-09 Matthew Mundell Copy groups and roles when cloning users. * src/manage_sql.c (copy_user): Copy groups and roles too. 2013-05-09 Matthew Mundell Enable multiple roles per user. * src/manage_sql.c (find_role): New function. (openvas_admin_add_user): Replace role arg with roles args. Add roles from array instead of single role. (copy_user): Remove role from copy fields. * src/manage.h: Update header accordingly. * src/omp.c (create_user_data_t, create_user_data_reset): Replace role with roles. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Allow multiple roles in CREATE_USER. 2013-05-09 Hani Benhabiles * src/manage_sql.c (print_report_xml): Remove unused duplicate code for closed cves. (compare_strings): Remove declared but unused function causing compiler warning. 2013-05-09 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Add roles to observers in GET_TASKS. * src/manage_sql.c (init_task_role_iterator, task_role_iterator_task) (task_role_iterator_role, task_role_iterator_name) (task_role_iterator_uuid): New functions. * src/manage.h: Add headers accordingly. 2013-05-09 Matthew Mundell * src/manage_sql.c (user_may, init_get_iterator): Enable checks on permissions granted to roles. 2013-05-08 Matthew Mundell * src/manage_sql.c (RULES_HEADER): Remove duplicate definition. 2013-05-08 Matthew Mundell Just list users in GET_ROLES, as with GET_GROUPS. * src/manage_sql.c (role_users): New function. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): Enable sending users in GET_ROLES. 2013-05-08 Matthew Mundell Add OMP GET_ROLES. * src/manage_sql.c (valid_type, type_pretty_name, type_db_name): Add role. (role_writable, trash_role_writable, role_in_use) (trash_role_in_use): New function. (ROLE_ITERATOR_FILTER_COLUMNS, ROLE_ITERATOR_COLUMNS): New defines. (role_count, init_role_iterator): New functions. * src/manage.h: Add headers accordingly. (role_t): New type. * src/omp.c (omp_commands, command_data_t,client_state_t): Add GET_ROLES elements. (get_roles_data_t): New type. (get_roles_data_reset): New functions. (get_roles_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add GET_ROLES. 2013-05-08 Matthew Mundell * src/manage_sql.c (create_filter): Put the type NULL check before the type_db_name too, because it indicates an error from type_db_name. Move the "" check up too, because it's simpler there. 2013-05-08 Hani Benhabiles * src/manage_sql.c (manage_set_setting): Base64 decode filters values. 2013-05-08 Timo Pollmeier * src/manage.h (init_tag_name_iterator, tag_name_iterator_name) (tag_name_count): New function prototypes. * src/manage_sql.c (TAG_NAME_ITERATOR_FILTER_COLUMNS) (TAG_NAME_ITERATOR_COLUMNS): New column #defines. (init_tag_name_iterator, tag_name_iterator_name, tag_name_count): New functions for iterating over distinct tag names. * src/omp.c (get_tags_data_t): Add member names_only. (omp_xml_handle_start_element): In case for GET_TAGS, parse new attribute names_only. (omp_xml_handle_end_element): In case CLIENT_GET_TAGS, handle new parameter names_only which selects only distinct names of tags. * src/schema_formats/XML/OMP.xml (get_tags): Add attribute names_only to command, change tag element in response to either contain just name or all elements of a tag. * doc/omp.html, doc/omp.rnc: Update from source. 2013-05-08 Hani Benhabiles * src/manage_sql.c (escalate_2, escalate_1, print_report_xml, (manage_report, manage_send_report): Remove unused show_closed_cves parameter. * src/omp.c: Adjust function calls accordingly. * src/manage.h: Adjust function prototypes. 2013-05-08 Hani Benhabiles * src/manage_sql.c (print_report_xml): Remove unused duplicate code for closed cves. 2013-05-08 Hani Benhabiles * src/manage_sql.c (report_host_count, report_port_count) (report_closed_cve_count): New functions. (print_report_xml): Send report total number of ports, hosts and closed cves adequately. 2013-05-07 Matthew Mundell Move user roles to a dedicated table. Hence increase database version to 81. Add database migration from version 80 to 81. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 81. * src/manage_sql.c (ROLE_UUID_ADMIN, ROLE_UUID_USER) (ROLE_UUID_OBSERVER): New defines. (create_tables): Add roles and role_users. Remove role from users. (migrate_80_to_81): New function. (database_migrators): Add migrate_80_to_81. (manage_set_user_role, openvas_admin_add_user): Set role in new table. (USER_ITERATOR_FILTER_COLUMNS, USER_ITERATOR_COLUMNS) (USER_ITERATOR_TRASH_COLUMNS): Remove role. (init_user_role_iterator, user_role_iterator_uuid) (user_role_iterator_name): New function. * src/manage.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): In GET_USERS get roles with iterator. * doc/db.png: Update for version changes. 2013-05-07 Matthew Mundell * src/manage_sql.c (migrate_79_to_80): Ensure recently added tables exist. 2013-05-07 Matthew Mundell * CMakeLists.txt: Remove OPENVAS_SYNC_SCRIPT_DIR. * src/CMakeLists.txt: Add SBINDIR instead of OPENVAS_SYNC_SCRIPT_DIR. * src/omp.c (sync_script, scap_script, cert_script): Use SBINDIR instead of OPENVAS_SYNC_SCRIPT_DIR. 2013-05-06 Matthew Mundell * README: Remove reference to tests. 2013-05-06 Matthew Mundell * src/manage_sql.c (manage_set_setting): Always free value. 2013-05-06 Timo Pollmeier * src/manage.h (result_iterator_task, result_iterator_report): New function prototypes. * src/manage_sql.c (init_result_iterator): Add selection of task and report from database. (result_iterator_task): New function to get the task of a result. (result_iterator_report): New function to get the report of a result. (buffer_results_xml): Add details parameter to header (see omp.c). (compare_and_buffer_results, print_report_xml): Add details parameter to buffer_results_xml calls. * src/omp.c (buffer_results_xml): Add details parameter to header. (get_results_data_t): Add "details". (omp_xml_handle_start_element): In case for "GET_RESULTS" add attribute "details". (buffer_notes_xml, buffer_overrides_xml): Add details parameter to buffer_results_xml calls. (buffer_results_xml): Add parameter "include_details". Select task from database if task parameter is NULL and details are included. Add report and task data to response if include_details != 0. (omp_xml_handle_end_element): In case CLIENT_GET_RESULTS, buffer_results_xml call clarify comment on tags parameter, add details parameter. * src/schema_formats/XML/OMP.xml (result): Add report and task elements. (get_results): Add details attribute to command, add report and task elements to response. * doc/omp.html, doc/omp.rnc: Update from source. 2013-05-06 Hani Benhabiles * src/manage.c (get_nvti_xml): Escape xrefs too as characters like ampersand may be included in URLs. 2013-05-03 Timo Pollmeier * src/manage_sql.c (buffer_results_xml): Add two parameters to match changes in omp.c. (compare_and_buffer_results): Add parameters to buffer_results_xml calls: Don't show tags for comparisons. (print_report_xml): Add user tags for report. Add parameters to buffer_results_xml calls: print tags for normal scan reports but not delta reports. * src/omp.c (): Add parameters to buffer_results_xml header. (buffer_notes_xml, buffer_overrides_xml): Add parameters to buffer_results_xml call: Don't add result tags. (buffer_results_xml): Add parameters include_tags, include_tags_details, Write tag count / details of result to buffer if requested. (xml_handle_end_element): In case CLIENT_GET_RESULTS add parameters to buffer_results_xml call (counts, tags list for details). * src/sql.c (sql_resource_name): In else if case "report" add output "N/A" instead of date if end_time is 0. Add else if case for "result". * src/schema_formats/XML/OMP.xml (get_reports, get_results): Add user tags elements to result elements in responses and report element in response. * doc/omp.html, doc/omp.rnc: Update from source. 2013-05-03 Andre Heinecke * report_formats/verinice-ism/create_report_import: Increase Version to 1.1.8 2013-05-02 Matthew Mundell Add DESCRIBE_CERT, DESCRIBE_FEED, DESCRIBE_SCAP, SYNC_CERT, SYNC_FEED and SYNC_SCAP to OMP. These are direct copies from OAP in Administrator with some slight changes to fit in Manager, mostly formatting. * CMakeLists.txt (OPENVAS_SYNC_SCRIPT_DIR): New variable * src/CMakeLists.txt: Add OPENVAS_SYNC_SCRIPT_DIR to definitions. * src/manage.c (openvas_sync_script_perform_selftest) (openvas_get_sync_script_identification) (openvas_get_sync_script_description, openvas_current_sync) (openvas_get_sync_script_feed_version, openvas_sync_feed): New functions. * src/manage.h: Add headers accordingly. (NVT_FEED, SCAP_FEED, CERT_FEED): New defines. * src/omp.c (omp_commands, client_state_t): Add new commands. (sync_script, scap_script, cert_script): New variables. (XML_ERROR_BUSY): New macro. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add handling of new commands. 2013-05-02 Matthew Mundell * src/manage_sql.c (openvas_admin_add_user) (openvas_admin_modify_user): Clean hosts, to ensure that there are spaces between the hosts. 2013-05-02 Matthew Mundell * src/manage.c (send_user_rules): Get rules with new function. * src/manage_sql.c (manage_user_rules): New function. Get rules from db. * src/manage.h: Add header accordingly. 2013-05-01 Matthew Mundell * src/manage_sql.c (user_has_access_uuid): Get the result case working by adding a check on the permission and correcting some names and parens in the SQL. 2013-04-30 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Use get_next to get the next task in GET_TASKS, so that it resets first when off the end of the page. 2013-04-30 Timo Pollmeier * src/omp.c (xml_handle_end_element): In case CLIENT_CREATE_CONFIG check if copy parameter is NULL before calculating its string length. 2013-04-30 Timo Pollmeier * doc/omp.html, doc/omp.rnc, src/manage.h, src/manage_sql.c, src/omp.c, src/schema_formats/XML/OMP.xml: Revert changes adding attach_type and attach_id attributes to get_tags. 2013-04-30 Timo Pollmeier * doc/omp.html, doc/omp.rnc: Update from source. * src/manage.h (init_tag_iterator, tag_count): Add parameters (see manage_sql.c). * src/manage_sql.c (init_tag_iterator, tag_count): Add parameters attach_type, attach_id to only include tags attached to the given resource type / ID in the results. * src/omp.c (get_tags_data_t, get_tags_data_reset): Add elements attach_type, attach_id. (xml_handle_start_element): In case CLIENT_GET_TAGS add append_attribute for attach_type, attach_id. (xml_handle_end_element): In case CLIENT_GET_TAGS add handling of attach_type and attach_id to only include tags attached to the given resource type / ID in the results. * src/schema_formats/XML/OMP.xml (get_tags): Add attributes attach_type and attach_id to command. 2013-04-29 Matthew Mundell * src/manage_sql.c (print_report_xml): Add TIMESTAMP along SCAN_START in REPORT. 2013-04-29 Matthew Mundell * src/manage_sql.c (scan_end_time_uuid): New function. * src/manage.h: Add header accordingly. * src/omp.c (send_reports, omp_xml_handle_end_element): Add SCAN_END alongside TIMESTAMP in OMP REPORT excerpts. 2013-04-29 Timo Pollmeier * src/omp.c (buffer_overrides_xml): Remove extra override xml tag in include results case. 2013-04-29 Hani Benhabiles * src/omp.c (buffer_notes_xml): Remove extra note xml tag in include results case. 2013-04-29 Matthew Mundell * src/manage_sql.c (delete_filter): Delete any personal filter settings 2013-04-29 Matthew Mundell * src/manage_sql.c (delete_filter): Delete any personal filter settings using the filter. 2013-04-29 Timo Pollmeier * src/manage_sql.c (filter_clause): Add tag keyword and criteria. (ALL_INFO_UNION_COLUMNS): Add "AS allinfo". (total_info_count, init_all_info_iterator): Change type parameter value for filter_clause from "nvt" to "allinfo". 2013-04-26 Werner Koch * src/manage_sql.c (get_sysconf_gpghome, get_trustedkeys_name): New. (verify_signature): Change to use gpgv. * src/openvasmd.c (main): Remove setting of GNUPGHOME. 2013-04-26 Matthew Mundell * src/manage_sql.c (migrate_79_to_80): Ensure tables exist. 2013-04-26 Hani Benhabiles * src/omp.c (omp_xml_handle_end_element): Remove set but unused variable user_name in CLIENT_GET_USERS case. 2013-04-26 Matthew Mundell * src/manage_sql.c (migrate_79_to_80): Correct column name. 2013-04-25 Matthew Mundell * src/manage_sql.c (migrate_79_to_80): Remove g_file_get_contents len args. 2013-04-25 Matthew Mundell * src/omp.c (omp_xml_handle_start_element): In CLIENT_GET_USERS pass user instead of username to init_user_group_iterator. * src/manage_sql.c (init_user_group_iterator): Replace username arg with user. * src/manage.h: Update header accordingly. 2013-04-25 Matthew Mundell * ChangeLog: Correct name of database_migrators in previous logs. 2013-04-25 Matthew Mundell * doc/db_postgres.sql (users): Add method. * doc/db.png: Update from source. 2013-04-25 Matthew Mundell * src/omp.c (omp_xml_handle_start_element): In CLIENT_AUTHENTIC_COMMANDS CREATE_USER case, init hosts_allow so that the default is allow all instead of deny. 2013-04-25 Matthew Mundell Allow users called "om", now that Manager and Scanner users are separate. * src/manage_sql.c (authenticate): Allow users named "om" to login. (openvas_admin_add_user): Allow creation of users called "om". 2013-04-25 Matthew Mundell * src/manage.c (strcmp_desc, openvas_admin_list_users): Remove. Out of use. * src/manage_sql.c (init_manage_process): Remove user_uuid SQL init. * src/sql.c (sql_user_uuid): Remove. Out of use. * src/sql.h: Remove header accordingly. 2013-04-25 Matthew Mundell * src/openvasmd.c (handle_sigabrt): Check for recursion before printing backtrace. 2013-04-25 Matthew Mundell Move user management from disk into the database. Hence increase database version to 80. Add database migration from version 79 to 80. Migration will remove all ldap and ads users, and their db resources. All orphaned users in the database will also be removed, with their db resources. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 80. * src/manage.c (openvas_admin_user_access): Remove. Info now in db. * src/manage_sql.c (user_is_admin, user_is_observer): New functions. (user_may): Switch to new role functions. (copy_resource_lock): New function. Body from copy_resource, without locking. (copy_resource): Call through to copy_resource_lock. (create_tables): Add method to users. (migrate_9_to_10_user_uuid): New function. (migrate_9_to_10): Call migrate_9_to_10_user_uuid instead of the library function, because it accesses the disk. (MIGRATE_79_to_80_DELETE): New macro. (migrate_79_to_80_remove_users, migrate_79_to_80_user_access) (migrate_79_to_80): New function. (database_migrators): Add migrate_79_to_80. (copy_user, user_uuid): New functions. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_end_element): Switch to new role functions. Remove directory args that were for disk users. In MODIFY_USER remove duplicate array terminate, add new return case and correct errror message. In CREATE_USER add new return case. In GET_USERS switch to user iterator and standard GET facilities. * src/openvasmd.c (main): Init auth with new funcs function. 2013-04-25 Timo Pollmeier * src/omp.c (xml_handle_end_element): In cases CLIENT_CREATE_TAG, CLIENT_MODIFY_TAG fix preconditions for testing resource ID. 2013-04-25 Timo Pollmeier * ChangeLog: Fix file name typo in last entry. 2013-04-25 Timo Pollmeier * src/manage.h (resource_id_exists): New function prototype. * src/manage_sql.c (resource_id_exists): New function. Tests if a resource with a given ID exists. (create_tag): Add code 99 (permission denied) to comment. Add check if attach_type is valid. Make attach_id optional. (modify_tag): Add check if attach_type is valid. * src/omp.c (xml_handle_end_element): In cases CLIENT_CREATE_TAG, CLIENT_MODIFY_TAG make attach_id optional and check if it refers to an existing resource when it is not empty. * src/schema_formats/XML/OMP.xml (create_tag, modify_tag): Make element attach/id in command optional and change description to require an existing resource id. * doc/omp.html, doc/omp.rnc: Update from source. 2013-04-24 Timo Pollmeier * src/manage_sql.c (migrate_77_to_78): Add check if database version is correct and add comments. 2013-04-24 Timo Pollmeier * src/manage.c (valid_db_resource_type): Return 0 when tested type is NULL. * src/omp.c (xml_handle_end_element): Change CLIENT_CREATE_TAG_ATTACH and CLIENT_MODIFY_TAG_ATTACH to use CLOSE macro. In CLIENT_MODIFY_TAG, add check if resource type is NULL before validating it. 2013-04-24 Timo Pollmeier * src/omp.c (send_get_common): Remove debug output left from testing. 2013-04-23 Timo Pollmeier Add tag data (count and individual tags) to most OMP GET responses. * src/manage.c (get_nvti_xml): Add tag data to returned XML. * src/manage.h (init_resource_tag_iterator, resource_tag_iterator_uuid) (resource_tag_iterator_name, resource_tag_iterator_value) (resource_tag_iterator_comment, resource_tag_iterator_active) (resource_tag_count): New iterator function prototypes for tags attached to a resource. * src/manage_sql.c (tag_count): Fix comment saying "targets" instead of tags. (init_resource_tag_iterator, resource_tag_iterator_uuid) (resource_tag_iterator_name, resource_tag_iterator_value) (resource_tag_iterator_comment, resource_tag_iterator_active): New iterator functions for tags attached to a resource. (resource_tag_count): New function for counting tags attached to a resource. * src/omp.c (): Add buffer_xml_append_printf static header. (send_get_common, buffer_notes_xml, buffer_overrides_xml): Add tag data to returned XML. (xml_handle_end_element): In case CLIENT_GET_USERS, add tag data to returned XML. * src/schema_formats/XML/OMP.xml (get_agents, get_configs, get_alerts) (get_filters, get_info, get_lsc_credentials, get_notes, get_nvts) (get_overrides, get_report_formats, get_schedules, get_slaves) (get_targets, get_tasks, get_users): Add "user_tags" element and subelements to response. Fix incorrectly named element "agent". * doc/omp.html, doc/omp.rnc: Update from source. 2013-04-23 Hani Benhabiles * src/manage_sql.c (migrate_78_to_79): Follow same structure as previous migrators. 2013-04-23 Hani Benhabiles * src/manage_sql.c (manage_report_filter_controls, report_filter_term) (print_report_xml): Remove show_closed_cves parameter. * src/manage.h: Adapt manage_report_filter_controls header. * src/omp.c (get_reports_data_t, omp_xml_handle_start_element) (omp_xml_handle_end_element): Remove show_closed_cves element. Adapt manage_send_report function calls. 2013-04-22 Hani Benhabiles * src/manage_config_discovery.c (make_config_discovery): Add preference for "Services" nvt to test SSL based services. * src/manage_sql.c (migrate_78_to_79): Add preference for "Services" nvt. 2013-04-22 Hani Benhabiles Migrate DB to set some preferences for "Ping Host" nvt and remove "tcp timestamps" nvt for Discovery Scan Config. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Set to 79. * src/manage_sql.c (migrate_78_to_79): New function. (database_migrators): Add migrate_78_to_79. 2013-04-22 Hani Benhabiles * src/manage_config_discovery.c (make_config_discovery): Set ping host nvt preferences "Mark unrechable Hosts as dead (not scanning)" and "Report about unrechable Hosts" to yes. Create the new config within the transaction. * src/manage_sql.c (init_manage): Let the make_config_discovery add the discovery config to the configs table. 2013-04-19 Hani Benhabiles * src/manage_sql.c (port_name_formatted): New function. * src/manage.h: Add port_name_formatted declaration. * src/otp.c (process_otp_scanner_input): Use port_name_formatted for SCANNER_PORT_NUMBER, SCANNER_ERRMSG_NUMBER, SCANNER_HOLE_NUMBER, SCANNER_LOG_NUMBER, SCANNER_INFO_NUMBER, SCANNER_NOTE_NUMBER cases. 2013-04-18 Matthew Mundell * src/manage_sql.c (copy_task): Copy all preferences from existing task. This includes the "Add to Assets" flag and the Scan Intensity settings. 2013-04-17 Timo Pollmeier * src/sql.c (sql_resource_exists, sql_resource_name): Change SQL function to return null when at least one of the parameters is null instead of treating it as an error, which caused problems with empty tables. 2013-04-16 Timo Pollmeier * src/manage.c (parse_tags): Change comment to "Scanner Tags". (valid_db_resource_type): New function to test if a string is a valid resource type. * src/manage.h (tag_iterator_attach_name, tag_iterator_orphaned): New iterator function prototypes. (valid_db_resource_type): New function prototype. * src/manage_sql.c (init_manage_process): Add creation of SQLite functions resource_exists, resource_name. (TAG_ITERATOR_FILTER_COLUMNS, TAG_ITERATOR_COLUMNS): Add columns "orphaned" and "attach_name". (tag_iterator_orphaned, tag_iterator_attach_name): New iterator functions. * src/omp.c (omp_xml_handle_end_element): In case CLIENT_GET_TAGS, add "name" element to "attach", add "orphaned" element to "tag" to response. In case CLIENT_CREATE_TAG, remove a superfluous whitespace. In cases CLIENT_CREATE_TAG, CLIENT_MODIFY_TAG add validation of attach_type using valid_db_resource_type. * src/sql.c (sql_resource_exists): New SQLite function to test if a resource of arbitrary type exists. (sql_resource_name): New SQLite function to get the name of a resource or construct one from various info. * src/sql.h (sql_resource_exists, sql_resource_name): New SQLite function prototypes. * src/schema_formats/XML/OMP.xml (get_tags): Add response elements attach/name and orphaned and update example to include these. * doc/omp.html, doc/omp.rnc: Update from source. 2013-04-15 Timo Pollmeier * src/manage_sql.c (valid_type, type_pretty_name, type_db_name): Add new resource type "Tag" for filters. 2013-04-11 Matthew Mundell * src/omp.c (modify_task_data_t, modify_task_data_reset) (client_state_t): Add target_id and config_id entries. (omp_xml_handle_start_element, omp_xml_handle_end_element): Allow config and target editing in MODIFY_TASK when the task status is New. 2013-04-11 Matthew Mundell * src/schema_formats/XML/OMP.xml (delete_user): Add user_id and ultimate attribs. (get_users): Add user_id attrib. Add USER/@id to response. * doc/omp.html, doc/omp.rnc: Update from source. 2013-04-11 Timo Pollmeier * src/manage.h (copy_tag): New function prototype. * src/manage_sql.c (copy_tag): New function to create copies of existing tags. * src/omp.c (create_tag_data_t, create_tag_data_reset): Add field "copy". (client_state_t): Add new state CLIENT_CREATE_TAG_COPY. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add handling of new create_tag subelement "copy". * src/schema_formats/XML/OMP.xml, doc/omp.html, doc/omp.rnc (create_tag): Add optional subelement "copy" to command. 2013-04-11 Timo Pollmeier * src/manage_sql.c (manage_empty_trashcan): Also clear tags_trash table when trashcan is emptied. 2013-04-11 Matthew Mundell * src/schema_formats/XML/OMP.xml (create_user, delete_user) (describe_auth, get_users, modify_auth, modify_user): New commands. From OAP schema in Administrator. (help): Update to match help text. * doc/omp.html, doc/omp.rnc: Update from source. 2013-04-11 Matthew Mundell * src/schema_formats/XML/OMP.xml (create_user, delete_user) (describe_auth, get_users, modify_auth, modify_user): New commands. From OAP schema in Administrator. (help): Update to match help text. * doc/omp.html, doc/omp.rnc: Update from source. 2013-04-11 Timo Pollmeier * src/manage_sql.c (modify_tag): Fix "value" parameter changing name instead of value. 2013-04-10 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In CLIENT_MODIFY_AUTH align comment and remove FIX that was already covered. 2013-04-10 Matthew Mundell Cleanup the MODIFY_AUTH implementation. * src/omp.c (modify_auth_data_t, modify_auth_data_reset): Remove curr_group_name. (omp_xml_handle_start_element): Remove MODIFY_AUTH doc, this will be in the OMP doc. Remove TODO, this is a general feature that applies to all commands. Reformat CLIENT_MODIFY_AUTH to match others, using ELSE_ERROR. In CLIENT_MODIFY_AUTH allocate the group instead of storing the name separately. Remove FIX on CLIENT_MODIFY_AUTH_GROUP_AUTHCONFSETTING because it's basically what the the others do. (omp_xml_handle_end_element): In CLIENT_MODIFY_AUTH add group name check and move key_file declaration to top of block. In CLIENT_MODIFY_AUTH_GROUP just add the settings, and leave the name checking to the end handler. 2013-04-10 Jan-Oliver Wagner * INSTALL: Adjusted formatting. * tools/openvas-portnames-update.in: Use cmake variable instead of fixed path to allow individual installation prefix. Also added output of number of processed items. 2013-04-10 Timo Pollmeier * src/manage_sql.c (manage_set_setting): Add Tags Filter. * src/omp.c (omp_xml_handle_end_element): In case CLIENT_GET_TAGS, add support for default filter (filt_id = -2) and ensure that generation of normal response is only run if iterator is created correctly. 2013-04-10 Hani Benhabiles * src/manage_sql.c: Remove make_port_names prototype. (init_manage): Don't check and update port_names as it is done externally now. * src/manage_port_names.c: Remove file as it is not needed anymore. * CMakeLists.txt: Remove reference to manage_port_names.c * INSTALL: Update for steps to import port names from IANA service names list. 2013-04-10 Matthew Mundell Add MODIFY_AUTH to OMP. This is a direct copy from OAP in Administrator with some slight changes to fit in Manager, mostly formatting. * src/omp.c (auth_conf_setting_t): New type. (auth_conf_setting_from_xml): New function. (omp_commands): Add MODIFY_AUTH. (auth_group_t, modify_auth_data_t): New types. (modify_auth_data_reset): New function. (command_data_t, client_state_t): Add MODIFY_AUTH entries. (modify_auth_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add MODIFY_AUTH handling. 2013-04-10 Timo Pollmeier * src/manage.h (tag_in_use, trash_tag_in_use, tag_writable) (trash_tag_writable): New function prototypes. * src/manage_sql.c (tag_in_use, trash_tag_in_use): New functions for compatibility with SEND_GET_COMMON macro. (tag_writable, trash_tag_writable): New functions for compatibility with SEND_GET_COMMON macro. * src/omp.c (omp_xml_handle_end_element): In case CLIENT_GET_TAGS, change to use SEND_GET_COMMON macro instead of send_get_common function. 2013-04-10 Timo Pollmeier * src/omp.c (create_tag_data_t, modify_tag_data_t): Add attach_count. Add missing periods in comment. (omp_xml_handle_start_element): In cases CLIENT_MODIFY_TAG, CLIENT_CREATE_TAG add incrementation of attach_count. (omp_xml_handle_end_element): In case CLIENT_GET_TAGS fix indentation, change to use send_get_common for common get elements. In case CLIENT_DELETE_TAG, fix parameters of send_find_error_to_client. In cases CLIENT_MODIFY_TAG, CLIENT_CREATE_TAG add new checks for attach subelement and clarify error messages. In cases CLIENT_MODIFY_TAG_ATTACH, CLIENT_CREATE_TAG_ATTACH remove value checks, now handled by CLIENT_MODIFY_TAG and CLIENT_CREATE_TAG. * src/schema_formats/XML/OMP.xml, doc/omp.html, doc/omp.rnc (get_tags): Add writable and in_use elements in response. 2013-04-10 Hani Benhabiles * src/omp.c (omp_xml_handle_end_element): Order iteration over families descendingly in CLIENT_GET_CONFIGS case. 2013-04-10 Timo Pollmeier * src/manage_sql.c (create_tables, create_tables_version_4): Reformat SQL queries so lines are 80 or less characters long. Move tag-related queries so they fit into the alphabetical order. 2013-04-09 Matthew Mundell * src/manage_sql.c (create_schedule): Neaten formatting. (create_tag, modify_tag): Format overhangs of ternaries like others. 2013-04-09 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_USERS free uuid from openvas_user_uuid. 2013-04-09 Matthew Mundell * src/manage_sql.c (openvas_admin_modify_user): Leave groups alone if groups arg is NULL. If setting groups then clear before, otherwise the old groups may remain. * src/omp.c (omp_xml_handle_start_element): Init the MODIFY_USER groups array only when a GROUPS element is given, so that the client has a way to preserve the existing groups. 2013-04-09 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Use CLOSE for MODIFY_USER states. 2013-04-09 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_USER correct log message, and add logs to all cases. 2013-04-09 Matthew Mundell * src/manage_sql.c (openvas_admin_add_user): Add args for groups. * src/omp.c (modify_user_data_t, client_state_t): Add groups entries. (modify_user_data_reset): Free groups (omp_xml_handle_start_element, omp_xml_handle_end_element): Add GROUPS to MODIFY_USER. * src/manage.h: Update header accordingly. 2013-04-09 Timo Pollmeier * src/manage_sql.c (create_schedule): Clean up spacing and braces/indentation. 2013-04-09 Timo Pollmeier * src/manage_sql.c (create_schedule): Fix timezone default overwriting existing value. Remove superfluous "!= 0" and braces. 2013-04-09 Timo Pollmeier * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Set to 78. * src/manage_sql.c (migrate_77_to_78): New function. Change duration and period of schedules to 0 if they were -1. (database_migrators): Add migrate_77_to_78. * src/omp.c (omp_xml_handle_end_element): In cases CLIENT_CREATE_SCHEDULE and CLIENT_MODIFY_SCHEDULE set period and duration to 0 instead of -1 if they are not specified. 2013-04-09 Timo Pollmeier * src/html/XML/OMP.xml, doc/omp.html, doc/omp.rnc (create_schedule): Add timezone element. Mark all elements other than name as optional to make consistent with actual behavior. 2013-04-09 Timo Pollmeier * src/manage.h, src/manage_sql.c (create_schedule): Add timezone parameter. * src/omp.c (create_schedule_data_t, create_schedule_data_reset): Add timezone. (client_state_t): New state CLIENT_CREATE_SCHEDULE_TIMEZONE. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add timezone element to create_schedule. 2013-04-08 Timo Pollmeier Add tag management OMP commands (create_tag, delete_tag, get_tags, modify_tag). * src/manage.h (tag_t): New typedef. (tag_uuid, create_tag, delete_tag, find_tag, modify_tag) (init_tag_iterator, tag_count, tag_iterator_attach_type) (tag_iterator_attach_id, tag_iterator_active, tag_iterator_active) (tag_iterator_value): New function prototypes. See manage_sql.c. * src/manage_sql.c (create_tables): Add definition of tables "tags" and "tags_trash" as well as indexes. (tag_uuid): New function, gets the UUID of a tag. (manage_restore): Add restore of tags in trashcan. (create_tag, delete_tag, find_tag, modify_tag): New functions for tag management. (TAG_ITERATOR_FILTER_COLUMNS, TAG_ITERATOR_COLUMNS) (TAG_ITERATOR_TRASH_COLUMNS): New #defines for tag iterator columns. (init_tag_iterator, tag_count, tag_iterator_attach_type) (tag_iterator_attach_id, tag_iterator_active, tag_iterator_active) (tag_iterator_value): New iterator functions for tags. * src/omp.c (omp_commands): Add help text for new tag commands. (create_tag_data_t, delete_tag_data_t, get_tags_data_t) (modify_tag_data_t): New structs for command data of tag commands. (create_tag_data_reset, delete_tag_data_reset, get_tags_data_reset) (modify_tag_data_reset): New functions that reset tag command data. (command_data_t): Add new command data types. (create_tag_data, delete_tag_data, get_tags_data, modify_tag_data): New variables for tag command data. (client_state_t): Add new tag command client states. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add handling of tag-related XML elements. * src/schema_formats/XML/OMP.xml, doc/omp.html, doc/omp.rnc: Add documentation of new commands (create_tag, delete_tag, get_tags, modify_tag). 2013-04-08 Hani Benhabiles Add script to update DB port names data from a port names xml file list. Currently supports IANA service names official list. * tools/openvas-portnames-update.in: New script to update * tools/portnames_update.xsl: New template to generate SQL queries for DB port names data creation. * CMakeLists.txt: Install tools/portnames_update.xsl and tools/openvas-portnames-update files. 2013-04-08 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_SCHEDULES use "UTC" when the timezone is NULL, else "(null)" ends up in the response. 2013-04-07 Jan-Oliver Wagner * src/manage_sql.c (setup_full_config_prefs): Remove handling of "silent_dependencies". 2013-04-05 Hani Benhabiles * src/manage_config_discovery.c (make_config_discovery): Remove tcp timestamps from default discovery config scan as it has a cvss > 0.0. 2013-04-04 Matthew Mundell * src/manage_sql.c (set_task_observers, group_add_users): Free openvas_user_uuid return. 2013-04-04 Matthew Mundell * src/manage_sql.c (copy_user): Add NULL check on role for now, to keep it working. 2013-04-04 Hani Benhabiles Add port_names to resolve Network services names and load content from official IANA list. * src/manage_port_names.c: New file. * src/CMakeLists.txt: Add manage_port_names.c. * src/manage_sql.c: Declare make_port_names prototype. (create_tables): Create port_names table. (manage_port_name): Return service name value from port_names table. (init_manage): Call make_port_names if port_names table has few entries. 2013-04-03 Matthew Mundell Add name attribute to DELETE_USER, to be compatible with Administrator. * src/manage_sql.c (delete_user): Add name arg. Delete by name if given user ID is NULL. * src/manage.h: Update header accordingly. * src/omp.c (delete_user_data_t, delete_user_data_reset): Add name. (omp_xml_handle_start_element): Parse DELETE_USER name attribute. (omp_xml_handle_end_element): In CLIENT_DELETE_USER pass name to delete function. 2013-04-03 Matthew Mundell * src/otp.c (process_otp_scanner_input): Get the length for g_convert with strlen, because the strip and compress functions can change the string length. Thanks to Rodolfo Gouveia and Stefan Sperling for spotting this. 2013-04-03 Werner Koch * src/ompd.c (serve_omp): Check for pending TLS records before the main select. 2013-04-03 Matthew Mundell Add MODIFY_USER to OMP. This is a direct copy from OAP in Administrator with some slight changes to fit in Manager, mostly formatting. * src/manage_sql.c (openvas_admin_modify_user): New function. From Administrator. * src/manage.h: Add header accordingly. * src/omp.c (omp_commands, command_data_t, client_state_t): Add MODIFY_USER entries. (modify_user_data_t): New type. (modify_user_data_reset): New function. (modify_user_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Handle MODIFY_USER. 2013-04-03 Hani Benhabiles * src/otp.c (process_otp_scanner_input): In SCANNER_HOLE_NUMBER, SCANNER_INFO_NUMBER, SCANNER_NOTE_NUMBER, SCANNER_LOG_NUMBER, SCANNER_ERRMSG_NUMBER cases, fix port number and protocol extraction format string to match scanner changes and use manage_port_name function to get port number associated name. * src/manage_sql.c (manage_port_name): New function. * src/manage.h: Add manage_port_name header. 2013-04-03 Matthew Mundell Add DELETE_USER. This is the same command as in Administrator, but it takes a uuid parameter instead of a name. Name parameter will follow, for backward compatibility. * src/manage_sql.c (find_user): Switch to finding by UUID like other find functions. (find_user_by_name): New function. Body from old find_user. Update find_user callers to use this. (openvas_admin_remove_user): New function. From Administrator. (delete_user): New function. * src/manage.h: Add header accordingly. * src/omp.c (omp_commands, client_state_t, command_data_t): Add DELETE_USER entries. (delete_user_data_t): New type. (delete_user_data_reset): New function. (delete_user_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Handle DELETE_USER. 2013-04-02 Matthew Mundell Add CREATE_USER/COPY for cloning, including new user columns. Hence increase database version to 77. Add database migration from version 76 to 77. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 77. * src/manage_sql.c (user_t): Remove. Now in manage.h. (copy_resource): Use underscore instead of space in name for users. (create_tables): Add standard columns. Add placeholder columns for info stored on disk. (migrate_76_to_77): New function. (database_migrators): Add migrate_76_to_77. (init_manage): Remove creationg of "om" user. Now only needed on scanner side. (manage_user_hash, manage_user_uuid, user_ensure_in_db) (manage_user_set_role, manage_user_set_rules, manage_user_exists): New functions. (authenticate): Authenticate with the method function, to get the method, and because user UUIDs are in db now. Get UUID from db. Switch to new role functions. Call user_ensure_in_db to ensure user exists in db. (manage_set_settings): Set password in db instead of with library. (openvas_admin_add_user): Remove directory arg. Add user to db instead of disk. (copy_user): Set generic password instead of copying from other user. Remove call to add user on disk. (openvas_admin_remove_user): Remove. Was doing the disk removal. (delete_user): Remove disk part. (openvas_admin_modify_user): Modify in db instead of on disk. (user_in_use, trash_user_in_use, user_writable) (trash_user_writable): New function. (USER_ITERATOR_FILTER_COLUMNS, USER_ITERATOR_COLUMNS) (USER_ITERATOR_TRASH_COLUMNS): New defines. (user_count, init_user_iterator, user_iterator_role) (user_iterator_method, user_iterator_hosts) (user_iterator_hosts_allow): New functions. (init_user_group_iterator): Get user ID by name now that users are in db only. (RULES_HEADER): New define. * src/manage.h: Add headers accordingly. (user_t): New type. From manage_sql.c. * src/omp.c (create_user_data_t, client_state_t): Add copy field. (create_user_data_reset): Free copy. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add COPY to CREATE_USER. * src/sql.c (sql_uniquify): Use underscore instead of space in name for users. * doc/db_postgres.sql (users): Add new columns. * doc/db.png: Update from source. 2013-03-29 Hani Benhabiles * src/manage_ranges_all_tcp_nmap_5_51_top_100.c, src/manage_ranges_all_tcp_nmap_5_51_top_1000.c, src/manage_ranges_iana_tcp_2012.c, src/manage_ranges_iana_tcp_udp_2012.c, src/manage_ranges_nmap_5_51_top_2000_top_100.c: Wrap the insertions bulks in sql transactions. 2013-03-29 Hani Benhabiles * src/manage_sql.c (init_manage, config_in_use): Check empty scan config by uuid instead of by name. 2013-03-28 Matthew Mundell * src/manage_sql.c (escalate_1): Include note and override details, else text element is truncated. 2013-03-28 Matthew Mundell * src/manage.c (openvas_admin_list_users): Add uuid arg. Return matching user if uuid given, as for name. * src/manage.h: Update header accordingly. * src/omp.c (get_users_data_t): Add get field. Doc name. (get_users_data_reset): Reset get. (omp_xml_handle_start_element): Parse GET_USERS GET attributes. (omp_xml_handle_end_element): In CLIENT_GET_USERS find user by ID if given, and add USER/@id. 2013-03-28 Matthew Mundell * src/manage_sql.c (init_manage_process): Add SQL function user_uuid. (init_user_group_iterator): Get the user via the UUID instead of via the name, because the name is ambiguous in the db. * src/sql.c (sql_user_uuid): New function. * src/sql.h: Add header accordingly. 2013-03-28 Matthew Mundell * src/manage_sql.c (print_report_xml): Cleanup report_hosts iterator in assets case, otherwise the db is closed with open statements. 2013-03-28 Hani Benhabiles * src/manage_config_discovery (make_config_discovery): Add uuid function parameter. Use it instead of the fixed 'Discovery' name value. * src/manage_sql.c: Adjust make_config_discovery prototype. (init_manage, config_in_use): Check for default Discovery config with uuid instead of name. 2013-03-28 Hani Benhabiles * src/openvasmd.c: Include misc/proctitle.h (main.c): Set process title when initializing. 2013-03-28 Hani Benhabiles * src/manage_sql.c (delete_config, config_in_use): Check for 'Discovery' predefined scan configuration too. 2013-03-28 Hani Benhabiles Add default "Discovery" scan configuration. * src/manage_sql.c: Add make_config_discovery prototype. (CONFIG_UUID_DISCOVERY, MANAGE_NVT_SELECTOR_DISCOVERY): New defines. (init_manage): Create Discovery scan configuration if not found. (nvt_selector_nvt_count): Remove static qualifier. * src/manage.h: Add nvt_selector_family_count prototype. * src/manage_config_discovery.c: New file. Contains function to create Discovery Scan configuration. * src/CMakeLists.txt: Add manage_config_discovery.c 2013-03-27 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): Use CLOSE for CREATE_USER states. 2013-03-27 Matthew Mundell * src/manage_sql.c (init_user_group_iterator): Order by name. 2013-03-27 Timo Pollmeier * src/manage_sql.c (lsc_credential_iterator_rpm) (lsc_credential_iterator_deb, lsc_credential_iterator_exe): Change creation of packages to use login instead of name, which caused problems, for example when the credential name contained whitespaces. 2013-03-27 Matthew Mundell Add groups to CREATE_USER. * src/manage_sql.c (openvas_admin_add_user): Add groups args. Add user to given groups. Add user to database. * src/manage.h: Update header accordingly. * src/omp.c (client_state_t): Add CREATE_USER group states. (create_user_data_t): Add groups (create_user_data_reset): Free groups. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add CREATE_USER groups. 2013-03-26 Matthew Mundell Add CREATE_USER to OMP. This is a direct copy from OAP in Administrator with some slight changes to fit in Manager, mostly formatting. * src/manage.c (validate_username): New function. * src/manage_sql.c (openvas_admin_add_user): New function. * src/manage.h: Add header accordingly. * src/omp.c (omp_commands, client_state_t): Add new command. (create_user_data_t): New type. (create_user_data_reset): New function. (create_user_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Handle new command. 2013-03-26 Matthew Mundell * src/manage_sql.c (init_user_group_iterator, user_group_iterator_uuid) (user_group_iterator_name): New functions. * src/manage.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): In GET_USERS add GROUPS. 2013-03-26 Matthew Mundell Add DESCRIBE_AUTH and GET_USERS to OMP. These are direct copies from OAP in Administrator with some slight changes to fit in Manager, mostly formatting. * src/manage.c (strcmp_desc, openvas_admin_list_users): New functions. (RULES_HEADER): New define. (openvas_admin_user_access, keyfile_to_auth_conf_settings_xml): New functions. * src/manage.h: Add headers accordingly. * src/omp.c (omp_commands, client_state_t): Add new commands. (get_users_data_t): New type. (get_users_data_reset): New function. (get_users_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Handle new commands. 2013-03-25 Matthew Mundell * src/manage_sql.c (PERMISSION_ITERATOR_FILTER_COLUMNS): Match columns to GSA. (PERMISSION_ITERATOR_COLUMNS): Match columns to GSA, using underscore to shadow existing column names. Remove resource and subject until they are actually needed. Adjust accessor functions accordingly. 2013-03-25 Matthew Mundell * src/manage_sql.c (vector_find_filter, underscore_sql_quote): New functions. (filter_clause): Use vector_find_filter instead of vector_find_string. When a keyword matched a filter column with a leading underscore, then add the underscore in the SQL. This allows a filter column to have a name that is used by some other column in the table. (filter_term_value): Add underscore check. 2013-03-25 Hani Benhabiles * src/manage_sql.c (total_info_count): Code refactor. (ALL_INFO_UNION_COLUMNS): Use UNION ALL instead of UNION as there are no duplicate entries to remove. 2013-03-25 Timo Pollmeier * doc/omp.html, doc/omp.rnc, src/schema_formats/XML/OMP.xml: Rename def_class to class, xml_file to file for OVAL definitions. * src/manage.h (ovaldef_info_iterator_def_class): Removed, renamed to ovaldef_info_iterator_class. (ovaldef_info_iterator_class): New. Renamed ovaldef_info_iterator_def_class. (ovaldef_info_iterator_xml_file): Removed, renamed to ovaldef_info_iterator_file. (ovaldef_info_iterator_file): New. Renamed ovaldef_info_iterator_xml_file. * src/manage_sql.c (OVALDEF_INFO_ITERATOR_FILTER_COLUMNS) (OVALDEF_INFO_ITERATOR_COLUMNS): Rename def_class to class, xml_file to file. (ovaldef_info_iterator_def_class): Removed. Renamed to ovaldef_info_iterator_class. (ovaldef_info_iterator_class): New. Renamed ovaldef_info_iterator_def_class. (ovaldef_info_iterator_xml_file): Removed. Renamed to ovaldef_info_iterator_file. (ovaldef_info_iterator_file): New. Renamed ovaldef_info_iterator_xml_file. * src/omp.c (xml_handle_end_element): In case CLIENT_GET_INFO, rename element def_class to class, xml_file to file. 2013-03-23 Matthew Mundell Add permissions trashcan. * src/manage_sql.c (create_tables): Add permissions_trash. (delete_permission): Add trash case. (manage_restore): Add permission restore. 2013-03-23 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_INFO format ternary conditional like others. 2013-03-22 Matthew Mundell * src/manage_sql.c (init_manage_process, manage_scap_loaded) (manage_cert_loaded): Use access instead of stat to check for SCAP and CERT databases. Just put a warning instead of aborting when the access fails. Remove redundant manage_scap_loaded and manage_cert_loaded calls. 2013-03-21 Timo Pollmeier * tools/greenbone-scapdata-sync, tools/openvas-scapdata-sync.in: Make formatting of log messages more consistent. 2013-03-21 Timo Pollmeier * tools/greenbone-scapdata-sync (db_migrate_12, check_db_version): New migration to SCAP database version 12. (update_scap_db_private): Remove OVAL duplicate checks. * tools/openvas-scapdata-sync.in (db_migrate_12, check_db_version): New migration to SCAP database version 12. (update_sec_db_private): Remove OVAL duplicate checks. * tools/oval_update.xsl: Add file number suffix to uuids. Add xml file name to table "ovalfiles". * tools/scap_db_init.sql (ovaldefs, ovaldefs_idx): Remove UNIQUE constraint for name. (ovalfiles): New table for OVAL file names. (ovalfiles_delete): New deletion trigger on ovalfiles. 2013-03-21 Timo Pollmeier * src/omp.c (omp_xml_handle_end_element): In case CLIENT_GET_INFO, output xml_file for OVALDEF even if details are not requested. * src/schema_formats/XML/OMP.xml, doc/omp.html, doc/omp.rnc (get_info): Move status and xml_file to reflect their real positions in OMP output. Change xml_file to non-optional. 2013-03-21 Timo Pollmeier Handle non-unique "name" and unique selection by "info_id" for get_info. * src/manage.c (get_ovaldef_filename): Rename parameter from oval_id to item_id and change comment to make clear that the OVAL ID with suffix is to be passed as parameter. (manage_read_info): New parameter uid (unique identifier), used to look up files for CVE, OVALDEF, and DFN_CERT_ADV. * src/manage.h (manage_read_info): Change prototype. (info_name_count): New function prototype. * src/manage_sql.c (info_name_count): New function, counts get_info items with a given name by name. (init_cpe_info_iterator, init_cve_info_iterator) (init_ovaldef_info_iterator, init_dfn_cert_adv_info_iterator): Add removal of filter if ID is supplies, as is done for name. (get_ovaldef_short_filename): Rename parameter from oval_id to item_id and change comment to make clear that the OVAL ID with suffix is to be passed as parameter. * src/omp.c (omp_xml_handle_end_element): In case CLIENT_GET_INFO, pass ID to manage_read_info in addition to name. Use info_count instead of assuming 1 when counting info selected by name. 2013-03-20 Jan-Oliver Wagner * INSTALL: Increased dependency note for gnutls to 2.8 and removed notes on openvas-adduser which is going to be removed anyway. 2013-03-20 Matthew Mundell Add OMP MODIFY_GROUP. * src/manage_sql.c (group_add_users): New function. Body from create_group. (create_group): Call group_add_users to add users. (modify_group): New function. * src/manage.h: Add header accordingly. * src/omp.c (omp_commands, command_data_t, client_state_t): Add MODIFY_GROUP entries. (modify_group_data_t): New type. (modify_group_data_reset): New function. (modify_group_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add MODIFY_GROUP. 2013-03-20 Matthew Mundell * src/manage_sql.c (valid_type, type_pretty_name, type_db_name): Add permissions, so that creating permission filters works. 2013-03-20 Matthew Mundell Add the copy part of OMP CREATE_PERMISSION, for cloning. * src/manage_sql.c (copy_resource): Add make_name_unique flag arg. Add to all callers. (copy_permission): New function. * src/omp.c (omp_commands): Add new command. (create_permission_data_t): New type. (create_permission_data_reset): New functions. (command_data_t, client_state_t): Add new permission entries. (create_permission_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add new command. 2013-03-19 Matthew Mundell Add OMP DELETE_PERMISSION and GET_PERMISSIONS. * src/manage_sql.c (permission_uuid, permission_in_use) (trash_permission_in_use, permission_writable) (trash_permission_writable): New functions. (PERMISSION_ITERATOR_FILTER_COLUMNS, PERMISSION_ITERATOR_COLUMNS): New defines. (permission_count, init_permission_iterator) (permission_iterator_resource_type, permission_iterator_resource_uuid) (permission_iterator_resource_name, permission_iterator_subject_type) (permission_iterator_subject_uuid, permission_iterator_subject_name) (find_permission_with_permission, delete_permission) (find_permission): New * src/manage.h: Add headers accordingly. (permission_t): New type. * src/omp.c (omp_commands): Add new commands. (delete_permission_data_t, get_permissions_data_t): New types. (delete_permission_data_reset, get_permissions_data_reset): New functions. (command_data_t, client_state_t): Add new permission entries. (delete_permission_data, get_permissions_data): New variables. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add new commands. 2013-03-19 Matthew Mundell * src/manage_sql.c (init_task_user_iterator) (init_task_group_iterator): Correct doc brief. 2013-03-19 Matthew Mundell * src/manage_sql.c (set_task_observers): Delete only user permissions, so that group permissions can be left the same. * src/omp.c (omp_xml_handle_start_element): Move MODIFY_TASK groups init into observers. (omp_xml_handle_end_element): In MODIFY_TASK check groups existence instead of length, to make it possible to remove all observer groups from the task. Free owner after last use, instead of before. 2013-03-19 Matthew Mundell Add observer groups to CREATE_TASK. * src/omp.c (create_task_data_t, create_task_data_reset): Add groups. (client_state_t): Add observer group state. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add observer groups. 2013-03-18 Matthew Mundell * src/manage_sql.c (user_has_access_uuid, user_may) (init_get_iterator): Enable group permission checks. 2013-03-18 Matthew Mundell Add observer groups to MODIFY_TASK and GET_TASKS. * src/manage_sql.c (init_task_group_iterator, task_group_iterator_task) (task_group_iterator_group, task_group_iterator_name) (task_group_iterator_uuid, set_task_groups): New functions. * src/manage.h: Update headers accordingly. * src/omp.c (modify_task_data_t, modify_task_data_reset): Add groups. (client_state_t): Add observer group state. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add observer groups. 2013-03-18 Jan-Oliver Wagner * CMakeLists.txt: Increased dependency to gnutls from 2.2 to 2.8. 2013-03-14 Hani Benhabiles Migrate DB to version 76 for md5 checksum to feed version changes. * src/manage_sql.c (migrate_75_to_76): New function. delete leftover nvts_checksum value and rename nvts_md5sum to nvts_feed_version. (database_migrators): Add migrate_75_to_76. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 76. 2013-03-14 Timo Pollmeier * tools/greenbone-scapdata-sync, tools/openvas-scapdata-sync.in (do_help): Add help text for --verbose option. 2013-03-14 Matthew Mundell * src/manage_sql.c (init_group_iterator): Name variable more sensibly. 2013-03-14 Timo Pollmeier * tools/greenbone-scapdata-sync (): Add --verbose option. (update_scap_db): Add output of duplicate IDs in verbose mode. * tools/openvas-scapdata-sync.in (): Add --verbose option. (update_sec_db): Add output of duplicate IDs in verbose mode. 2013-03-14 Hani Benhabiles * src/schema_formats/XML/OMP.xml, doc/proto_postgres.sql, doc/omp.html, doc/omp.rnc: Update documentation for get_nvt_feed_version. 2013-03-14 Hani Benhabiles Change Plugins MD5 Checksum to Feed version. * src/manage.c (acknowledge_md5sum_info): Change function to acknowledge_feed_version_info. * src/manage.h: Update function headers accordingly. (scanner_t): Rename plugins_md5 element to plugins_feed_version. * src/manage_sql.c (init_manage_process): Remove unused delete references to nvts_checksum. (init_manage): Rename main.meta value name nvts_md5sum to nvts_feed_version. (nvts_md5sum, set_nvts_md5sum): Rename and update for feed version changes. * src/omp.c (command_t): Rename GET_NVT_FEED_CHECKSUM to GET_NVT_FEED_VERSION. (get_nvt_feed_checksum_data_t, get_nvt_feed_checksum_data_reset) (get_nvt_feed_checksum_data): Remove as unused. (client_state_t): Rename CLIENT_GET_NVT_FEED_CHECKSUM to CLIENT_GET_NVT_FEED_VERSION. (omp_xml_handle_start_element, omp_xml_handle_end_element): Update for feed version changes. * src/ompd.c (write_to_scanner, serve_omp): Update scanner init state names. * src/otp.c (init_otp_data, process_otp_scanner_input): Update function and variables names and documentation accordingly. * src/otp.h (scanner_init_state_t): Rename SCANNER_INIT_GOT_FEED_MD5SUM to SCANNER_INIT_GOT_FEED_VERSION. 2013-03-14 Hani Benhabiles * src/manage_sql.c (init_all_info_iterator): Clean code. Add order clause in no filter clause case. Free allocated gchar's. 2013-03-13 Matthew Mundell * src/ompd.c (serve_omp): In cache update/rebuild mode, exit if connecting to the scanner fails. * src/openvasmd.c (update_or_rebuild_nvt_cache): Log when connecting to scanner fails. 2013-03-13 Matthew Mundell * src/openvasmd.c (handle_sigabrt): Print backtrace when compiled with debugging. 2013-03-12 Matthew Mundell * src/manage_sql.c (init_get_iterator): Remove used_by arg. Recursive access will be handled by explicit permissions. Update callers. 2013-03-12 Matthew Mundell * src/manage_sql.c (migrate_74_to_75): Ensure table exists. 2013-03-12 Matthew Mundell Add permissions table. Manage task observers via permissions instead of via the task_users table. Hence increase database version to 75. Add database migration from version 74 to 75. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 75. * src/manage_sql.c (user_has_access_uuid): Add permission arg. If type has permissions support (currently task and report) then do the check using the new permissions table. Remove special case check for lsc_credential because recursive access via task access will be removed with the new permission system. Update callers. (vector_find_filter, underscore_sql_quote): New functions. Helpers. (user_may): Add #if 0 around already disabled code, for consistency. (filter_clause): Add permissions arg. Return with array of permissions filter terms, if arg given. Update callers. (type_has_users): Remove. (type_has_permissions): New function. (init_get_iterator): Remove task_users based filtering. Add permission based filtering, which affects only tasks and reports. (count): Remove special case based on actions parameter. This was used to control which tasks where visible. Now done via permissions parameter. (create_tables): Add permissions. Remove task_users. (migrate_74_to_75): New function. Converts task_users to permissions. (database_migrators): Add migrate_74_to_75. (init_task_user_iterator): Remove action arg. Iterator over permissions table instead of task_users. (task_user_iterator_actions): Remove. Adjust name position accordingly. (set_task_observer): Use new table. (report_counts): Use permission version of find function. (find_report_with_permission): New function. 2013-03-12 Matthew Mundell * src/manage_sql.c (filter_clause): Correct SQL typo. 2013-03-12 Timo Pollmeier * tools/oval_timestamp.xsl, tools/oval_verify.xsl: Add recognition of OVAL root elements oval_variables, oval_system_charactersistics and oval_results. Variables files are now considered valid. * tools/oval_update.xsl: Add compatibility with oval_variables files. 2013-03-12 Timo Pollmeier * src/schema_formats/XML/OMP.xml, doc/omp.html, doc/omp.rnc: Add OVAL definitions "status" element to get_info documentation. Change documentation of "deprecated" element in OVALDEF to boolean type. 2013-03-12 Hani Benhabiles * src/omp.c (send_get_end): Don't printf filt_id when null. 2013-03-12 Hani Benhabiles * src/schema_formats/XML/OMP.xml, doc/omp.html, doc/omp.rnc: Update get_info documentation. 2013-03-12 Hani Benhabiles * src/manage_sql.c (ALL_INFO_ITERATOR_FILTER_COLUMNS) (ALL_INFO_UNION_COLUMNS, init_all_info_iterator): Add extra column (all_info_iterator_extra): New function. * src/omp.c (omp_xml_handle_end_element): Send allinfo extra element in CLIENT_GET_INFO case. * src/manage.h: Add all_info_iterator_extra header. 2013-03-11 Timo Pollmeier * tools/greenbone-scapdata-sync (update_scap_db_private) (update_scap_db): Fix skipping of OVAL timestamp filter for cases when REBUILD_OVAL is set to 1. Add default value for REBUILD_OVAL. * tools/openvas-scapdata-sync (update_sec_db_private) (update_sec_db): Fixes analogous to Greenbone version. 2013-03-11 Timo Pollmeier * tools/greenbone-certdata-sync (sync_certdata): Remove skipping of rsync with previously nonexistent feed. 2013-03-11 Hani Benhabiles * src/manage_sql.c (manage_set_setting): Add All SecInfo default filter setting. * src/omp.c (omp_xml_handle_end_element): Use All SecInfo as default filter name instead of ALLINFO in CLIENT_GET_INFO case. 2013-03-11 Jan-Oliver Wagner * CMakeLists.txt: Install greenbone-certdata-sync. 2013-03-11 Timo Pollmeier Add "status" column to OVAL definitions in SCAP database. * src/manage.h (ovaldef_info_iterator_status): New prototype. * src/manage_sql.c (OVALDEF_INFO_ITERATOR_FILTER_COLUMNS) (OVALDEF_INFO_ITERATOR_COLUMNS): Add "status" column. (ovaldef_info_iterator_status): New function to get "status" from an OVAL definition iterator. * src/omp.c (omp_xml_handle_end_element): In ovaldef else if section, add "status" to OMP output. * tools/greenbone-scapdata-sync (db_migrate_11): New function to migrate SCAP database to version 11. (check_db_version): Add migration to version 11. (update_scap_db_private, update_scap_db): Add selective rebuild of OVAL data. * tools/openvas-scapdata-sync.in (db_migrate_11, check_db_version): See greenbone-scapdata-sync. (update_sec_db_private, update_sec_db): See update_scap_db_private, update_scap_db in greenbone-scapdata-sync. (do_refresh_private): Set variable REFRESH_PRIVATE_ONLY to 1. * tools/oval_update.xsl: Add insert of "status" data into SCAP database. * tools/scap_db_init.sql (meta): Set version to 11. (ovaldefs): Add column "status". 2013-03-11 Hani Benhabiles * src/sql.c (cleanup_iterator): Check iterator pointer before dereferencing it. 2013-03-11 Hani Benhabiles Add search All SecInfo feature. * src/manage_sql (all_info_count, total_info_count) (init_all_info_iterator, all_info_iterator_type): New functions. (ALL_INFO_ITERATOR_FILTER_COLUMNS, ALL_INFO_UNION_COLUMNS): New define. (omp_xml_handle_end_element): Add allinfo handling in CLIENT_GET_INFO case. * src/manage.h: Add all_info_count, total_info_count, init_all_info_iterator and all_info_iterator_type headers. 2013-03-07 Matthew Mundell Move the observer checks for CREATE operations into the functions that do the operations. This opens the way for controlling these permissions via the database. * src/manage_sql.c (user_may): New function. (copy_resource, create_alert, copy_alert, create_report, copy_task) (create_target, copy_target, create_config, create_config_rc) (copy_config, create_lsc_credential, create_agent, create_note) (create_override, create_report_format, copy_report_format, copy_group) (create_group, create_port_list, copy_port_list, modify_port_list) (create_port_range, create_filter): Add permission check. * src/omp.c (omp_xml_handle_end_element): Handle permission return in all CREATE commands. 2013-03-07 Jan-Oliver Wagner * doc/user-scap-data-HOWTO: Slightly improved. 2013-03-06 Timo Pollmeier * doc/user-scap-data-HOWTO: New file, documentation for user defined SCAP data. 2013-03-06 Timo Pollmeier Add updating of user (OVAL) data to greenbone-scapdata-sync. * tools/greenbone-scapdata-sync (REFRESH_PRIVATE_ONLY): New variable. (list_oval_files_sortable, list_oval_files_sorted): Change to output only files with timestamps and use parameter for directory to search. (do_help): Add help for new --refresh-private option. (init_scap_db_update): New function to initialize database variables. (update_scap_db_private): New function to update user data. (update_scap_db): Change to support updating user data. (): Add command line option --refresh-private. 2013-03-06 Timo Pollmeier * tools/greenbone-scapdata-sync (sync_scapdata), tools/greenbone-certdata-sync (sync_certdata): Add --chmod=D+x option to rsync commands to fix problems with directories being created without +x permissions. 2013-03-06 Hani Benhabiles * src/schema_formats/XML/OMP.xml, doc/omp.html, doc/omp.rnc: Update documentation for various results related commands. 2013-03-06 Hani Benhabiles * src/manage_sql.c (update_nvt_cache): Set nvti tag. (result_iterator_nvt_tag): New function. * src/manage.h: Add result_iterator_nvt_tag header accordingly. * src/omp.c (buffer_results_xml): Send nvt tags. 2013-03-05 Matthew Mundell * src/manage_sql.c (update_all_config_caches): Use definition for columns, so that the accessors will still work when the GET iterator gets more columns. 2013-03-05 Timo Pollmeier Add functions to synchronize SCAP database with user defined OVAL repositories in private subdirectory. * CMakeLists.txt: Add oval_verify.xsl, ovaldef_list_ids.xsl. * tools/openvas-scapdata-sync.in (do_help): Add --refresh-private text. (init_sec_db_update): New function, contains database checks and variable inits from update_sec_db. (list_oval_files_sorted, list_oval_files_sortable): Change to search directory given as parameter instead of fixed directory and skip files without valid OVAL timestamp. (update_sec_db_private): New function to sync scap.db with user defined files. Currently supports validating, adding and removing OVAL definitions. (update_sec_db): Remove database checks and variable inits, call init_sec_db_update instead. Change handling of OVAL files list to new version of list_oval_files_sorted and print warnings for file without valid timestamps. Add call of update_sec_db_private near end. (do_refresh_private): New function to refresh user defined data only. (): New command line option --refresh-private. * tools/ovaldef_list_ids.xsl: New stylesheet to get a list of all IDs in an OVAL repository. * tools/oval_timestamp, tools/oval_update.xsl: Fix selection of timestamps failing when relevant elements contain extra whitespaces. * tools/oval_verify.xsl: New stylesheet for basic verification of OVAL repository files. 2013-03-04 Matthew Mundell Add basic user groups. * src/manage_sql.c (create_tables): Create groups tables. (find_group, copy_group, create_group, delete_group, group_uuid) (group_users, group_writable, trash_group_writable, group_in_use) (trash_group_in_use): New functions. (GROUP_ITERATOR_FILTER_COLUMNS, GROUP_ITERATOR_COLUMNS): New defines. (group_count, init_group_iterator): New functions. * src/manage.h: Add headers accordingly. (group_t): New type. * src/omp.c (omp_commands): Add group commands. (create_group_data_t, delete_group_data_t, get_groups_data_t): New types. (create_group_data_reset, delete_group_data_reset) (get_groups_data_reset: New functions. (command_data_t): Add group commands. (create_group_data, delete_group_data, get_groups_data): New variables. (client_state_t): Add group states. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text_element): Handle group commands. 2013-03-04 Timo Pollmeier * tools/greenbone-scapdata-sync (db_migrate_10): Fix sqlite3 call using an undefined database file name parameter. 2013-03-04 Timo Pollmeier * tools/greenbone-certdata-sync, tools/greenbone-scapdata-sync: Remove bashisms not supported by dash like [[ ... ]] and (( ... )) and change from #!/bin/bash to #!/bin/sh. 2013-03-01 Timo Pollmeier * tools/greenbone-certdata-sync (RSYNC_DELETE): Remove quotes causing exclude of private directory to be ignored. * tools/greenbone-scapdata-sync (RSYNC_DELETE): Remove quotes causing exclude of private directory to be ignored. (update_scap_db): Fix recalculation of max_cvss being performed even if no CVEs were updated. 2013-02-28 Jan-Oliver Wagner * src/otp.c (process_otp_scanner_input): Rename OTP message "PLUGINS_MD5" to "NVT_INFO". Rename internal SCANNER_PLUGINS_MD5 to SCANNER_NVT_INFO. * src/ompd.c (write_to_scanner): Update comment as MD5 does not play a role anymore. 2013-02-28 Andre Heinecke * report_formats/verinice-ism/gsm_verinice_ism.xsl, report_formats/verinice-ism/generate: Do not attach raw xml file of the report anymore 2013-02-28 Jan-Oliver Wagner Post branch version bump. * CMakeLists.txt: Updated version number. 2013-02-27 Jan-Oliver Wagner Remove unused functions. * src/manage.c (acknowledge_md5sum, acknowledge_md5sum_sums): Removed. * src/manage.h: Removed proto accordingly. 2013-02-27 Timo Pollmeier * src/manage.c (slave_setup, delete_slave_task): Delete slave resources (task, config, target, credentials) instead of moving them to trashcan. 2013-02-27 Hani Benhabiles * src/omp.c (convert_to_newlines): Rewrite conversion routine to be more efficient with cleaner code. 2013-02-27 Timo Pollmeier SCAP sync now updates max_cvss and most cve_refs of CPEs after updating CVEs to reduce number of time consuming queries for updating max_cvss. * tools/cve_update.xsl: Remove update of cve_refs and max_cvss. Columns are now updated by recount in sync shell scripts. * tools/greenbone-scapdata-sync (db_migrate_9): Change "sqlite3" to "$SQLITE3". (db_migrate_10, check_db_version): Add migration to version 10. (update_scap_db): Add recalculation of max_cvss and cve_refs after CVEs update. * tools/openvas-scapdata-sync.in (db_migrate_10, check_db_version): Add migration to version 10. (update_scap_db): Add recalculation of max_cvss and cve_refs after CVEs update. * tools/scap_db_init.sql (meta): Change version to 10. (affected_delete): Remove update of max_cvss. Replaced by recount in sync scripts. 2013-02-27 Timo Pollmeier * tools/greenbone-certdata-sync, tools/greenbone-scapdata-sync: Update version number. 2013-02-27 Timo Pollmeier * tools/greenbone-certdata-sync: New script to sync CERT data using the Greenbone feed. 2013-02-27 Timo Pollmeier * tools/greenbone-scapdata-sync: Add PRIVATE_SUBDIR and private directory functionality to RSYNC_DELETE. 2013-02-27 Hani Benhabiles * src/omp.c (omp_xml_handle_end_element): Check return value for send_get_common() call in In CLIENT_GET_INFO case. 2013-02-25 Matthew Mundell * src/report_formats/HTML/HTML.xsl (prognostic-description): New template. (result [issue]): For prognostic results, produce the description with prognostic-description so that the browser does paragraph wrapping. 2013-02-25 Matthew Mundell * src/omp.c (omp_xml_handle_end_element): In GET_REPORTS add checks for -2 filt_id to the asset and prognostic cases. 2013-02-25 Andre Heinecke * report_formats/verinice-ism/create_report_import: Update version number to 1.1.7 2013-02-22 Michael Wiegand Post release version bump. * CMakeLists.txt: Updated version number to 4.0+beta6. 2013-02-22 Timo Pollmeier Replace index on affected_products (cve, cpe) by two separate ones for each column to speed up queries on that table slowing down updates. * tools/greenbone-scapdata-sync (VERSION): Update. (db_migrate_9): New database migration funcion. (check_db_version): Migrate to version 9 from version 8. * tools/openvas-scapdata-sync.in (db_migrate_9): New database migration function. (check_db_version): Migrate to version 9 from version 8. * tools/scap_db_init.sql (afp_idx): Remove. Replaced by afp_cve_idx and afp_cpe_idx. (afp_cve_idx): New index on affected_products (cve). (afp_cpe_idx): New index on affected_products (cpe). 2013-02-22 Michael Wiegand Preparing the openvas-manager 4.0+beta5 release. * CHANGES: Updated. * INSTALL: Updated openvas-libraries dependency. 2013-02-21 Timo Pollmeier * tools/greenbone-scapdata-sync, tools/openvas-scapdata-sync.in (list_oval_files_sortable, update_sec_db): Add quotes to allow syncing when $SCAP_DIR is the current directory. 2013-02-21 Werner Koch * src/manage_sql.c (manage_set_setting): Re-word password diagnostic. 2013-02-20 Werner Koch Check password policy. * src/openvasmd.c: Include openvas/base/pwpolicy.h. (main): Add option --disable-password-policy. * src/manage_sql.c: Include openvas/base/pwpolicy.h. (manage_set_setting): Call openvas_validate_password and add new arg R_ERRDESC. * src/manage.h: Update prototype for this. * src/omp.c (make_xml_error_syntax): New. (omp_xml_handle_end_element) : Send back an error string for an invalid password. 2013-02-20 Timo Pollmeier * tools/openvas-certdata-sync.in: Enable rsync and add --refresh option. (do_help): Add text for --refresh. (do_rsync): Enable previously commented out rsync code, remove now obsolete warning and add $RSYNC_DELETE. (do_refresh): New function. (): Add case for --refresh. 2013-02-20 Timo Pollmeier * tools/openvas-scapdata-sync.in (do_refresh): Move to prevent possible problems with shells not finding update_sec_db. 2013-02-20 Timo Pollmeier * tools/openvas-scapdata-sync.in (): Add command line option --refresh to update database without downloading feed data. (do_help): Add text for new --refresh option. (do_refresh): New function. 2013-02-20 Timo Pollmeier * tools/openvas-scapdata-sync.in: Remove / disable http feed download. (do_help): Remove text for --wget and --curl. (CMD_WGET, CMD_CURL): Remove (chk_system_tools): Remove wget and curl checks (do_wget, do_curl): Change to exit with warning. (do_sync): Change to only try rsync. 2013-02-20 Timo Pollmeier Add private subdirectory functionality in OpenVAS sync scripts. * tools/openvas-certdata-sync.in (PRIVATE_SUBDIR, RSYNC_DELETE): New. (do_help): Add line for PRIVATE_SUBDIR as environment variable. * tools/openvas-scapdata-sync.in (PRIVATE_SUBDIR): New. (RSYNC_DELETE): Add --exclude for private subdirectory. (do_help): Add line for PRIVATE_SUBDIR as environment variable. 2013-02-20 Michael Wiegand Move "-Werror" flag to the "Debug" build type. * CMakeLists.txt: Move "-Werror" from CMAKE_C_FLAGS to CMAKE_C_FLAGS_DEBUG to keep it out of the "Release" build type. 2013-02-20 Matthew Mundell * src/omp.c (omp_parser_new): Clear parser memory on allocation, so that parent_state is 0 initially. This prevents the end handler from setting the client state to some arbitrary number after reading over an element, for example when importing a report. 2013-02-19 Matthew Mundell * src/manage_sql.c (manage_empty_trashcan): Empty notes and overrides too. 2013-02-19 Timo Pollmeier * src/omp.c (client_state_t): Add client states for cert and cert_ref elements in create_report. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add cert and cert_ref elements in create_report. 2013-02-19 Hani Benhabiles * src/manage_sql.c (manage_set_setting): Add Reports Filter setting. * src/omp.c (omp_xml_handle_element): Check for settings default report filter when no filter and filt_id are provided in GET_REPORTS case. 2013-02-19 Matthew Mundell * src/omp.c (omp_xml_handle_start_element) (omp_xml_handle_end_element): Set the importing flag around CREATE_REPORT, to read-over new elements in reports. 2013-02-19 Andre Heinecke * report_formats/verinice-ism/gsm_verinice_ism.xsl (control_details): Add gsm_control_tag that is a comma seperated list of tags based on the notes description. If a line in the description starts with + it will be interpreted as a "Tag" 2013-02-19 Andre Heinecke * report_formats/verinice-ism/gsm_verinice_ism.xsl (scenario_details): Add cvss and fix cve and threat values 2013-02-18 Matthew Mundell * tools/greenbone-scapdata-sync: Run sqlite3 via SQLITE3 variable, to specify -noheader, because the user may have .headers on in .sqliterc. (SCAP_RES_DIR): Skip /usr/ when there's a PREFIX. 2013-02-18 Timo Pollmeier * src/manage.c (get_nvti_xml), src/omp.c (buffer_results_xml) (omp_xml_handle_end_element): Add output of warning message in CERT elements if CERT database is missing to fix errors when NVTs are accessed in this case. * src/schema_formats/XML/OMP.xml, doc/omp.html, doc/omp.rnc: Add warning message elements for CERT reference elements. 2013-02-18 Timo Pollmeier * tools/dfn_cert_update.xsl: Fix XSL select returning empty IDs for dfn_cert_cves insert. 2013-02-18 Andre Heinecke * report_formats/verinice-ism/gsm_verinice_ism.xsl: Add gsm_ism_control_cpe based on result/detection value 2013-02-14 Jan-Oliver Wagner * INSTALL: Added some more details on how to change the encryption key. 2013-02-14 Timo Pollmeier * tools/dfn_cert_getbyname.xsl, tools/dfn_cert_update.xsl: Change to get ID from new element instead of extracting it from . 2013-02-14 Timo Pollmeier <timo.pollmeier@greenbone.net> * doc/about-cert-feed.txt: Change text for short ID elements to consider new <dfncert:refnum> element. 2013-02-14 Timo Pollmeier <timo.pollmeier@greenbone.net> * src/manage.c (DFN_CERT_ADV_FILENAME_FMT, get_dfn_cert_adv_filename): Change file name format back to DFN-CERT-YYYY-n. * src/manage_sql.c (get_dfn_cert_adv_date): Remove. * src/manage_sql.h (get_dfn_cert_adv_date): Remove. 2013-02-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (NOTE_ITERATOR_TRASH_COLUMNS) (OVERRIDE_ITERATOR_TRASH_COLUMNS): Use trash table instead of real table. 2013-02-13 Werner Koch <wk@gnupg.org> * src/openvasmd.c (main): Add options --encrypt-all-credentials and --decrypt-all-credentials. * src/manage_sql.c (do_encrypt_all_credentials) (manage_encrypt_all_credentials): New. * src/manage.h (manage_encrypt_all_credentials): New prototype. * src/lsc_crypt.c: Remove all tracepoint debug output. 2013-02-13 Matthew Mundell <matthew.mundell@greenbone.net> * TODO: Remove completed and out of date items. 2013-02-13 Matthew Mundell <matthew.mundell@greenbone.net> Remove test framework. * CMakeLists.txt: Remove testing. * src/CMakeLists.txt: Remove testing comments. * src/tests/: Remove. 2013-02-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/CMakeLists.txt (C_FILES): Add lsc_crypt.c. 2013-02-13 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * doc/about-cert-feed.txt: New. Most text by Timo Pollmeier. 2013-02-11 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/otp.c (parse_scanner_plugin_list_tags): Replace ';' with '\n' in tags. 2013-02-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (slave_setup): Specify levels and apply_overrides in GET_REPORTS call instead of relying on defaults. 2013-02-07 Timo Pollmeier <timo.pollmeier@greenbone.net> * tools/openvas-scapdata-sync.in (RSYNC_DELETE): New variable. (do_rsync): Add RSYNC_DELETE to rsync call: Files are now deleted locally when they are not part of the rsync feed, analogous to greenbone-scapdata-sync. 2013-02-06 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * tools/greenbone-scapdata-sync: Activated RSYNC_DELETE with --delete --exclude=scap.db so that from now on files are deleted locally when deleted on the feed server. 2013-02-06 Michael Wiegand <michael.wiegand@greenbone.net> * doc/CMakeLists.txt: Prevent superfluous creation of "doc/html/" directory inside the source tree. 2013-02-06 Michael Wiegand <michael.wiegand@greenbone.net> * doc/footer.html: Removed obsolete file. 2013-02-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (NOTE_ITERATOR_FILTER_COLUMNS): Add more filtering fields. (NOTE_ITERATOR_COLUMNS, NOTE_ITERATOR_TRASH_COLUMNS): Add task_name and task_id, for filtering. 2013-02-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (OVERRIDE_ITERATOR_FILTER_COLUMNS): Add task_id. (OVERRIDE_ITERATOR_COLUMNS, OVERRIDE_ITERATOR_TRASH_COLUMNS): Select the task ID. 2013-02-05 Matthew Mundell <matthew.mundell@greenbone.net> Get host details with slave reports. This makes OS detection work with slave tasks. * src/manage.c (slave_setup): Add host details when setting host end times. * src/manage_sql.c (manage_report_host_details): New function. Body from manage_report_host_detail. (manage_report_host_detail): Call manage_report_host_details to add details. * src/manage_sql.h: Add header accordingly. 2013-02-05 Timo Pollmeier <timo.pollmeier@greenbone.net> * tools/openvas-certdata-sync.in (do_sync): Fix warning message saying "curl" where it should be "rsync". 2013-02-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (slave_setup): Get the report with omp_get_report_ext in order to specify result_host_only. Set result_host_only 0 in the Done case so that all the hosts show up with their end times. Move setting the end times back to the Done case. The problem with setting the end times while the task is Running is that the GET_REPORT could happen between the last result and the host end. 2013-02-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (set_scan_host_end_time, set_scan_host_end_time_otp) (set_scan_host_start_time, set_scan_host_start_time_otp): Quote host. 2013-02-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (slave_setup): Set the host end times after adding results when Running and Done, instead of only when Done. This is required because the results for some hosts may only show up during the Running stage, for example when scanning many hosts. 2013-02-01 Hani Benhabiles <hani.benhabiles@greenbone.net> * doc/omp.html, doc/omp.rnc, src/schema_formats/XML/OMP.xml: Add documentation for modify_agent, modify_alert, modify_port_list and modify_slave. 2013-02-01 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (modify_alert): Update alert event, method and condition and their data independently. * src/omp.c (omp_xml_handle_end_element): Allow non provided parameters to permit modifying them separately. 2013-02-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/lsc_crypt.c (get32): Shift the right direction. 2013-02-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (cleanup_manage_process): Add note on how to find open statements. 2013-02-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_count, report_count_filtered) (report_counts_id_filt): Also finalize the full statement. 2013-02-01 Hani Benhabiles <hani.benhabiles@greenbone.net> * doc/omp.html, doc/omp.rnc, src/schema_formats/XML/OMP.xml: Update documentation for get_slaves, get_targets and get_tasks. 2013-02-01 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (send_to_sourcefire, send_to_verinice): Call cleanup_manage_process after forking. 2013-02-01 Timo Pollmeier <timo.pollmeier@greenbone.net> * src/manage_sql.c (manage_cert_loaded): Fix comment saying SCAP instead of CERT. (ovaldef_info_iterator_deprecated): Fix comment typo. (get_ovaldef_short_filename): Fix wrong info in @return comment. * src/manage.c (get_ovaldef_filename): Fix comment typo. 2013-01-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (cleanup_manage_process): In the fork process case, skip the sqlite3_close because that could affect the same handle in the parent. (manage_report, manage_send_report): Call cleanup_manage_process after forking, and remove the "clearing the parent state" because the added cleanup_manage_process will clear task_db. Thanks to Hani for suggesting a change like this. 2013-01-31 Hani Benhabiles <hani.benhabiles@greenbone.net> * doc/omp.html, doc/omp.rnc, src/schema_formats/XML/OMP.xml: Update documentation for get_port_lists, get_report_format and get_schedules. 2013-01-31 Hani Benhabiles <hani.benhabiles@greenbone.net> * doc/omp.html, doc/omp.rnc, src/schema_formats/XML/OMP.xml: Update documentation for get_lsc_credentials, get_notes, get_overrides. 2013-01-31 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Remove duplicate login and pass tags when targets are requested in GET_LSC_CREDENTIALS case. 2013-01-31 Hani Benhabiles <hani.benhabiles@greenbone.net> * doc/omp.html, doc/omp.rnc, src/schema_formats/XML/OMP.xml: Update documentation for get_agents, get_configs and get_alerts commands. 2013-01-31 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (omp_xml_handle_end_element): Remove duplicate in_use tag in GET_AGENTS. 2013-01-31 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (setting_filter): Style fix. 2013-01-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_filter_term): Default levels to hmlgd to match print_report_xml. This keeps GET_REPORTS backward compatible, which is important for example when getting the report from a slave. 2013-01-30 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (setting_filter): Restrict to global filters or current user's filters. 2013-01-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (OVERRIDE_ITERATOR_FILTER_COLUMNS): Add more filtering fields. (OVERRIDE_ITERATOR_COLUMNS, OVERRIDE_ITERATOR_TRASH_COLUMNS): Add task_name, for filtering. 2013-01-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_override, manage_restore): Clear report count cache when deleting or restoring an override. 2013-01-28 Werner Koch <wk@gnupg.org> Support encrypted credentials. * src/lsc_crypt.c, src/lsc_crypt.h: New. * src/CMakeLists.txt: Add lsc_crypt.c to library manage. * src/manage.h: Include "lsc_crypt.h". * src/manage_sql.c (create_lsc_credential): Support encrypted credentials. (set_lsc_credential_password): Ditto. (lsc_credential_iterator_pass_or_priv): New. (lsc_credential_iterator_password): Re-implement using the new function. (lsc_credential_iterator_private_key): Ditto. * src/sql.c (init_prepared_iterator): Clear that field. (init_iterator): Ditto. (cleanup_iterator): Release crypto context. (next): Call lsc_crypt_flush. * src/openvasmd.c (disable_encrypted_credentials): New global variable. (main): Add options --disable-encrypted-credentials and --create-credentials-encryption-key. * doc/db_postgres.sql (lsc_credentials): Add comments. * INSTALL (Encrypted Credentials): New. * README: Update list of command line options. 2013-01-28 Werner Koch <wk@gnupg.org> * doc/CMakeLists.txt: Make db_postgres.sql related rules work with VPATH builds. 2013-01-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (make_nvt_from_nvti): Remove time tags from tags before inserting into db. 2013-01-28 Timo Pollmeier <timo.pollmeier@greenbone.net> * src/manage.c (DFN_CERT_ADV_FILENAME_FMT): Change to YYYY-MM format. (get_dfn_cert_adv_filename): Change to get filename by advisory date. * src/manage_sql.c (get_dfn_cert_adv_date): New function to get creation date of a DFN-CERT advisory. * src/manage_sql.h (get_dfn_cert_adv_date): New function. * tools/dfn_cert_getbyname, dfn_cert_update: Change URL in xmlns:dfncert from "https:" to "http:". Change clipping of entry IDs to use URL from id of the feed instead of a fixed URL. 2013-01-28 Michael Wiegand <michael.wiegand@greenbone.net> * src/schema_formats/XML/OMP.xml: Fix more typos. 2013-01-28 Michael Wiegand <michael.wiegand@greenbone.net> * src/schema_formats/XML/OMP.xml: Fix typo. 2013-01-28 Timo Pollmeier <timo.pollmeier@greenbone.net> * doc/omp.rnc, doc/omp.html, src/schema_formats/XML/OMP.xml (get_info): Add OVAL and DFN-CERT items to get_info type attribute and response, including CERT references in CVEs and NVTs. 2013-01-28 Timo Pollmeier <timo.pollmeier@greenbone.net> * src/schema_formats/XML/OMP.xml (get_info): Fix spelling mistake in summary for response element info and indentation for NVT and CVE. 2013-01-27 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Apply default filter when filter and filt_id are both null in GET_CLIENT cases. 2013-01-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (get_nvti_xml): Set uuid to oid. 2013-01-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/sql.c (sql_parse_time): Use the timezone in the string to adjust the time to UTC. 2013-01-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (get_nvti_xml): Add creation and modification times. 2013-01-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (get_nvti_xml): Move declarations to start of block. Add spaces between function and args. Flush trailing whitespace. * src/manage_sql.c (init_cve_dfn_cert_adv_iterator) (init_nvt_dfn_cert_adv_iterator): Indent the SQL so that the right hand side of an operation is always to the right of the operator, even when on the following line. * src/omp.c (buffer_results_xml): Flush trailing whitespace. 2013-01-25 Timo Pollmeier <timo.pollmeier@greenbone.net> Add references to CERT for NVTs in NVT details and results. * src/manage.c (get_nvti_xml): Add output of CERT references. * src/manage.h (init_nvt_dfn_cert_adv_iterator): Add new iterator for DFN-CERT advisories indirectly referenced by an NVT via CVEs. * src/manage_sql.c (init_nvt_dfn_cert_adv_iterator): Add new iterator as for manage.h. * src/omp.c (buffer_results_xml): Add output of CERT references. 2013-01-24 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Check filt_id value is equal to -2 before applying default filters in CLIENT_GET cases. 2013-01-24 Matthew Mundell <matthew.mundell@greenbone.net> * doc/CMakeLists.txt: Remove omp.rnc from HTML installs from last commit. 2013-01-24 Matthew Mundell <matthew.mundell@greenbone.net> * doc/CMakeLists.txt: Install OMP docs too. (doc-omp): New target. 2013-01-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_HELP add a NULL guard for help_data->type. 2013-01-23 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (setting_value_int): Indentation update. 2013-01-23 Matthew Mundell <matthew.mundell@greenbone.net> Improve IPv6 address validation. * src/manage_sql.c (validate_host): Check ::'s. Check group count. (manage_max_hosts): Fail if IPv6 contains a network address or a hyphen. 2013-01-23 Timo Pollmeier <timo.pollmeier@greenbone.net> * tools/openvas-scapdata-sync.in (update_sec_db): Change counting of OVAL xml files to use find instead of ls. 2013-01-23 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (setting_value_int): Add missing parentheses in sql query which led to erroneous values. 2013-01-23 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (manage_set_setting): Adapt to use fixed uuid values for settings filters instead of names. 2013-01-23 Timo Pollmeier <timo.pollmeier@greenbone.net> * tools/greenbone-scapdata-sync (update_sec_db): Add missing update of last_update in scap.db table meta. 2013-01-22 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (manage_set_setting, setting_filter) (omp_xml_handle_end_element): Adapt to settings filters name change 2013-01-22 Matthew Mundell <matthew.mundell@greenbone.net> When delete of an active task is requested, ensure that the OTP stop request will be sent, so that the task can end and be deleted. * src/manage.h (TASK_STATUS_DELETE_WAITING) (TASK_STATUS_DELETE_ULTIMATE_WAITING): New states. * src/manage.c (run_status_name, run_status_name_internal, slave_setup) (stop_task): Handle new states. (manage_check_current_task): In the delete requested states, send STOP_WHOLE_TEST to the scanner, and switch to the delete waiting states. * src/manage_sql.c (task_in_use, init_manage, set_task_requested) (task_current_report): Handle new states. (request_delete_task): Request delete ultimate in the requested state, to match other case. (request_delete_task_uuid): Match delete states to ultimate flag correctly. * src/otp.c (process_otp_scanner_input): In SCANNER_TIME_SCAN_END handle new delete states and marked the task stopped otherwise it has a delete state in the trashcan. 2013-01-21 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql: Replace tabs with spaces. 2013-01-21 Timo Pollmeier <timo.pollmeier@greenbone.net> * src/manage_sql.c (DFN_CERT_ADV_INFO_ITERATOR_FILTER_COLUMNS) (DFN_CERT_ADV_INFO_ITERATOR_COLUMNS): Change cve_refs to use alias cves. 2013-01-21 Timo Pollmeier <timo.pollmeier@greenbone.net> Add DFN-CERT advisories referencing CVEs to CVE get_info details. * src/manage.h (init_cve_dfn_cert_adv_iterator): Add new iterator for DFN-CERT advisories referencing CVEs. * src/manage_sql.c (init_cve_dfn_cert_adv_iterator): Add new iterator for DFN-CERT advisories referencing CVEs. * src/omp.c (omp_xml_handle_end_element): In case CLIENT_GET_INFO, "cve" info type branch add output of referencing CERT advisories. * tools/cert_db_init.sql: Change version number to 3. (dfn_cert_cves, dfn_cert_cves_adv_idx, dfn_cert_cves_cve_idx): Add table drops and definition as well as indices. (dfn_cert_cert_adv_delete): Add deletion trigger on dfn_cert_adv. * tools/dfn_cert_update: Add INSERT OR REPLACEs of CVEs into dfn_cert_cves. * tools/openvas-cert-sync.in (check_db_version): Add reinit on version 2. 2013-01-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (slave_setup): Add 404 check for remaining OMP calls in poll loop. 2013-01-19 Matthew Mundell <matthew.mundell@greenbone.net> Add a "stop giveup" task state, that allow the user to set slave tasks to "stopped" when they have been isolated in one of the request states due loss of contact with the slave. * src/manage.c (run_status_name, run_status_name_internal): Handle "stop giveup" like "stop requested". (slave_sleep_connect): New function. Loops trying to connect to slave, as before, but also checks for "stop giveup". (slave_setup): Check for "stop giveup" in the poll loop. Call slave_sleep_connect to do the connecting. (run_slave_task): Call slave_sleep_connect to do the connecting. (stop_task): For slave tasks that are in the states that can orphan the task from the user, put the task in the new "stop giveup" state to tell the run_slave_task process. The run_slave_task process will giveup on the slave and set the task to "stopped". (manage_check_current_task): Handle "stop giveup" like "stop requested". * src/manage.h (task_status_t): Add TASK_STATUS_STOP_REQUESTED_GIVEUP. * src/manage_sql.c (task_in_use, init_manage, set_task_requested) (task_current_report, delete_report): Handle "stop giveup" state. 2013-01-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (slave_setup): Check if the first GET_REPORT failed before trying the second. 2013-01-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (slave_setup): Remove trace sleep. If the slave task or report is missing, or if the status is missing from the GET_TASKS response, then stop trying to contact the slave and put the task into Internal Error. 2013-01-18 Timo Pollmeier <timo.pollmeier@greenbone.net> Rename CERT-DB column num_cves to cve_refs for consistency with CPEs. Check CERT database availability for get_info * src/manage.h (dfn_cert_adv_info_iterator_num_cves): Remove, renamed to dfn_cert_adv_info_iterator_cve_refs. (dfn_cert_adv_info_iterator_cve_refs): Add, renamed from dfn_cert_adv_info_iterator_num_cves. * src/manage_sql.c (DFN_CERT_ADV_INFO_ITERATOR_FILTER_COLUMNS) (DFN_CERT_ADV_INFO_ITERATOR_COLUMNS): Rename num_cves to cve_refs. (dfn_cert_adv_info_iterator_num_cves): Remove, renamed as in manage.h. (dfn_cert_adv_info_iterator_cve_refs): New, renamed as in manage.h. * src/omp.c (omp_xml_handle_end_element): In case CLIENT_GET_INFO add test if CERT database is loaded. In "dfn_cert_adv" info type branch change <num_cves> to <cve_refs>. * tools/cert_db_init.sql: Change version number to 2. (dfn_cert_advs) Change num_cves to cve_refs. * tools/dfn_cert_update: Change INSERT to INSERT OR REPLACE. Change num_cves to cve_refs. * tools/openvas-cert-sync.in (check_db_version): Add reinit on version 1. 2013-01-18 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src.omp.c (buffer_notes_xml, buffer_overrides_xml): Increase length of excerpt from 40 to 60 characters. Even overlong words will not harm the GUI considerably at the new size. 2013-01-18 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/lsc_user.c (lsc_user_keys_create, lsc_user_rpm_create) (lsc_user_deb_recreate, lsc_user_exe_recreate, lsc_user_all_create): Call openvas_file_remove_recruse instead of openvas_file_rmdir_rf. * src/manage_sql.c (migrate_21_to_22, migrate_37_to_38) (migrate_54_to_55_format, send_to_sourcefire, send_to_verinice) (update_report_format_uuid, init_manage, manage_report) (manage_send_report, create_report_format, copy_report_format) (delete_report_format, manage_schema, manage_empty_trashcan): Call openvas_file_remove_recurse instead of openvas_file_rmdir_rf. * src/omp.c (strdiff): Call openvas_file_remove_recurse instead of openvas_file_rmdir_rf. 2013-01-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (slave_setup): New function. Body is the setup part of run_slave_task. (run_slave_task): Let slave_setup do the setup on the slave. If slave_setup fail just keep trying the entire setup again from scratch until it works. 2013-01-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (GET_ITERATOR_COLUMNS_PREFIX): New define. (GET_ITERATOR_COLUMNS): Call GET_ITERATOR_COLUMNS_PREFIX. (NVT_ITERATOR_COLUMNS_NVTS): New define. NVT_ITERATOR_COLUMNS with "nvts." prefix. (select_config_nvts): Use NVT_ITERATOR_COLUMNS macros instead of naming the columns explicitly. This makes the SQL compatible with the init_nvt_iterator accessors. 2013-01-17 Timo Pollmeier <timo.pollmeier@greenbone.net> * ChangeLog: Fix date of last entry. 2013-01-17 Timo Pollmeier <timo.pollmeier@greenbone.net> * ChangeLog: Clean up previous own entries for style consistency. 2013-01-17 Hani Benhabiles <hani.benhabiles@greenbone.net> Remove duplicated functions which are now part of base libraries. * src/lsc_user.c (file_utils_rmdir_rf, file_utils_copy_file, file_utils_move_file): Remove functions. (lsc_user_keys_create, lsc_user_rpm_create, lsc_user_deb_create) (lsc_user_exe_create, lsc_user_all_create): Use openvas_file_copy, openvas_file_move, openvas_file_rmdir_rf functions from libraries instead of removed functions * src/manage_sql.c: Include openvas_file.h from base libraries. (file_utils_copy_file, file_utils_rmdir_rf): Remove duplicated functions. (migrate_21_to_22, migrate_37_to_38, migrate_54_to_55_format) (send_to_sourcefire, send_to_verinice, update_report_format_uuid) (init_manage, manage_report, manage_send_report, create_report_format) (create_report_format, copy_report_format, delete_report_format) (manage_schema): Use openvas_file functions from base libraries instead of removed duplicate functions. * src/omp.c: Include openvas_file.h from base libraries. (check_is_dir, file_utils_rmdir_rf): Remove duplicate functions. (strdiff): Use openvas_file_rmdir_rf instead. 2013-01-17 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Get specific settings filter for the info type queried. * src/manage_sql.c (manage_set_setting): Check sepecic secinfo types instead of secinfo. 2013-01-16 Matthew Mundell <matthew.mundell@greenbone.net> * ChangeLog: Put last entry in order. 2013-01-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (RUN_SLAVE_TASK_SLEEP_SECONDS): New define. (slave_connect): New function. (run_slave_task): Connect to slave with slave_connect. If the connection fails, keep trying. If there's an error getting the slave task or report, keep trying. 2013-01-16 Werner Koch <wk@gnupg.org> * src/manage_sql.c (DEF_ACCESS): Remove multiple identical definitions of this macro and the corresponding undefs. Prefix one set of macro uses with "result_iterator_" to accommodate for one slightly different version of that macro. 2013-01-16 Timo Pollmeier <timo.pollmeier@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_INFO fix misspelled opening tag to dfn_cert_adv. 2013-01-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_INFO add missing opening tag to dfn_cert_adv case. 2013-01-16 Matthew Mundell <matthew.mundell@greenbone.net> Add multiple NVT support to GET_INFO. Hence increase database version to 74. Add database migration from version 73 to 74. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 74. * src/manage_sql.c (create_tables): Add standard GET columns to nvts. (migrate_73_to_74): New function. Adds GET columns, including extracting creation and modification times from tags. (database_migrators): Add migrate_73_to_74. (init_manage_process): Create parse_time and tag SQL functions. (NVT_ITERATOR_COLUMNS): Add standard GET columns. (NVT_INFO_ITERATOR_FILTER_COLUMNS): New define. Adjust accessor positions accordingly. (init_nvt_info_iterator, nvt_info_count): New function. * src/manage.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): In GET_INFO add iterator support for NVTs. * src/sql.c (sql_parse_time, sql_tag): New functions. * doc/db_postgres.sql (nvts): Add GET columns. * doc/db.png: Update from source. 2013-01-16 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Enforce check of user_filter size in get default filter from settings cases. * src/manage_sql.c (setting_filter): Update documentation. 2013-01-16 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (setting_filter): Return filter uuid directly instead of term. Update documentation. (manage_set_setting): Add SecInfo filter checking. * src/omp.c (omp_xml_handle_end_element): Add settings default filter support in GET INFO case. Update GET cases to also set the filt_id when setting the filter from settings filters. 2013-01-16 Timo Pollmeier <timo.pollmeier@greenbone.net> Update copyright dates and authors in heading comments of various files. * tools/dfn_cert_getbyname.xsl, tools/dfn_cert_update.xsl: Update heading comment dates, authors and fix description. * src/CMakeLists.txt, src/manage_sql.c, src/manage_sql.h, src/manage.c, src/omp.c, src/manage.h, CMakeLists.txt: Update heading comment dates and authors. 2013-01-16 Timo Pollmeier <timo.pollmeier@greenbone.net> Add basic DFN-CERT advisory support to OMP. * CMakeLists.txt: Add tools/dfn_cert_getbyname.xsl * src/CMakeLists.txt: Add "add_definitions" for CERT directories. * src/manage.c (DFN_CERT_ADV_FILENAME_FMT, DFN_CERT_ADV_GETBYNAME_XSL): Add #defines used by get_dfn_cert_adv_filename and manage_read_info. (get_dfn_cert_adv_filename): Add function to find file name of a DFN-CERT advisory. (manage_cert_update_time): Add function. (manage_read_info): Add else if for dfn_cert_adv. * src/manage.h (manage_read_info): Move to top of SecInfo functions. (manage_cert_loaded, manage_cert_update_time) (init_dfn_cert_adv_info_iterator, dfn_cert_adv_info_count) (dfn_cert_adv_info_title, dfn_cert_adv_info_summary) (dfn_cert_adv_info_num_cves): Add. * src/manage_sql.c (init_manage_process): Add attachment of CERT database. (DFN_CERT_ADV_INFO_ITERATOR_FILTER_COLUMNS) (DFN_CERT_ADV_INFO_ITERATOR_COLUMNS): Add #defines. (manage_cert_loaded, init_dfn_cert_adv_info_iterator) (dfn_cert_adv_info_count, dfn_cert_adv_info_title) (dfn_cert_adv_info_summary, dfn_cert_adv_info_num_cves): Add function to check if CERT database is loaded and DFN-CERT iterator functions. * src/omp.c (omp_xml_handle_end_element): In case CLIENT_GET_INFO add else if branches for dfn_cert_adv. * tools/dfn_cert_getbyname.xsl: Add new stylesheet to select DFN-CERT advisories by their ID. 2013-01-15 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/db_postgres.sql: Update to reflect added creation and modification times in various resource types in DB. * src/db.png: Update to match latest version. 2013-01-15 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (manage_set_setting): Fix comment typo. Add lsc_credentials and slaves filters. Remove reports filter. * src/omp.c (omp_xml_handle_end_element): Use resource filter from settings in case of default or empty filter when getting notes, overrides, port lists, report formats, schedules, agents, configs, alerts, filters, credentials, slaves, targets and tasks. 2013-01-15 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (setting_filter): New function to get a resource settings filter. (manage_set_setting): Handle per-resource filters settings. * src/manage.h: Add setting_filter header. 2013-01-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS remove old variable. 2013-01-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (task_threat_level): Use task_target instead of SQL. (task_trend): Return NULL for container tasks. 2013-01-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (filter_clause): For tasks, when the sort column is threat then collate with collate_threat. (collate_threat): Check for the empty string first, because in some SQL contexts the threat can be NULL, like for container tasks. (init_manage_process): Add collate_threat SQL collator. (task_threat_level): Return NULL for container tasks. 2013-01-14 Timo Pollmeier <timo.pollmeier@greenbone.net> Add CERT advisory database and sync with a local DFN-CERT feed data. * CMakeLists.txt: Add CERT paths and files (see added files here). * tools/cert_db_init.sql: New SQL script to create new CERT database. * tools/dfn_cert_update.xsl: New XSLT Stylesheet to import DFN-CERT advisories into database. * tools/openvas-certdata-sync: New CERT synchronization script. Creates and updates CERT database using local XML files. 2013-01-14 Timo Pollmeier <timo.pollmeier@greenbone.net> * ChangeLog: Fix last entry to reflect real changes. (was an entry for changes not actually committed). 2013-01-14 Timo Pollmeier <timo.pollmeier@greenbone.net> * src/manage.c (manage_read_info): Add line break (line was >80 chars). * src/manage.h: Remove argument names for SCAP iterator initialization functions to make them more consistent. 2013-01-11 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (alert_writable, trash_alert_writable): Make alerts always editable. 2013-01-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_INFO correct the type in init_info_iterator return 2. 2013-01-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_INFO append the raw data with g_string_append_printf instead of xml_string_append because the markup in the raw data is required. 2013-01-10 Matthew Mundell <matthew.mundell@greenbone.net> * ChangeLog: Add parentheses. * src/manage_sql.c (send_to_verinice): Neaten comment. Indent properly. 2013-01-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Remove escaping now handled by xml_string_append. 2013-01-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (get_ovaldef_filename): Cleanup formatting. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_INFO indent if block by 2 instead of 3. 2013-01-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (copy_resource, copy_alert, copy_task, copy_target) (copy_config, copy_report_format, copy_port_list): Find the user inside the transaction, just to be safe. 2013-01-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/LaTeX/latex.xsl (notes, overrides): Format dates nicely. 2013-01-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/NBE/NBE.xsl (ctime): New template. (scan_start, scan_end, report): Generate times with ctime because that is the date format that the original NBE file format used. 2013-01-10 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * tools/greenbone-scapdata-sync: Fixed two bugs so that complex directory structures for oval data will work. 2013-01-10 Hani Benhabiles <hani.benhabiles@greenbone.net> Add support to modify Alerts data and filters. * src/manage_sql.c (modify_alert): Modify alert's event, condition, method and filter. Change interface and documentation accordingly. * src/manage.h: Change modify_alert accordingly. * src/omp.c (modify_alert_t): Add event, event_data, filter_id, condition, condition_data, method, method_data, part_data and part_name elements. (modify_alert_data_reset): Free filter_id, event, event_data, condition, condition_data, method and method_data. (client_state_t): Add client states for alert filter, event, condition and method elements. (omp_xml_handle_start_element): Handle alert event, condition and method data. Fix ELSE_ERROR typos. (omp_xml_handle_end_element): Adapt to modify_alert interface changes. Handle event, condition and method data. (omp_xml_handle_text_element): Append data in alert event, condition and method tags to appropriate elements. 2013-01-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/TXT/TXT.xsl (scan_start): New template. Formats date nicely. (scan_end): Format date nicely. (real-report): Call date templates for start and end dates. 2013-01-10 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * tools/greenbone-scapdata-sync: Added --help. 2013-01-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (create_agent_data_t): Align comment. 2013-01-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_INFO use xml_string_append in more places, because the info can contain special characters. 2013-01-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (OVALDEF_INFO_ITERATOR_COLUMNS): Align separator. (get_ovaldef_short_filename): Add space. * src/manage_sql.h (get_ovaldef_short_filename): Add space. Remove name. 2013-01-10 Timo Pollmeier <timo.pollmeier@greenbone.net> * tools/greenbone-scapdata-sync, tools/openvas-scapdata-sync.in: Change OVAL file listing to include subdirectories of oval directory. 2013-01-10 Matthew Mundell <matthew.mundell@greenbone.net> * ChangeLog: Cleanup entry. 2013-01-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_cpe_info_iterator, init_cve_info_iterator) (init_ovaldef_info_iterator): Remove the filter GET arg when a name is given, because the exact entry is required and the filtering gets in the way. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_end_element): In GET_INFO update declaration accordingly. 2013-01-10 Timo Pollmeier <timo.pollmeier@greenbone.net> Renamed db_init.sql to scap_db_init.sql to avoid confusion with future Cert database. Changed SCAP database version and removed old migration scripts as re-creation of database is recommended to ensure consistency. * CMakeLists.txt: Changed db_init.sql to scap_db_init.sql. Removed migrate_db4.xsl. * tools/db_init.sql: Removed. Renamed to scap_db_init.sql. * tools/greenbone-scapdata-sync, tools/openvas-scapdata-sync.in: Changed db_init.sql to scap_db_init.sql. Changed database version to 8. Removed old migration scripts. * tools/scap_db_init.sql: Added. Renamed from db_init.sql. Change version to 8 and updated DROP TABLE ... queries. * tools/migrate_db4.xsl: Removed. 2013-01-10 Timo Pollmeier <timo.pollmeier@greenbone.net> * tools/db-init.sql: Change version number to 7. * tools/openvas-scapdata-sync.in (update_sec_db): Fix queries for latest CVEs and OVAL-defs still expecting timestamps stored as strings. Change timestamp-based filtering of OVAL definitions to use new oval_timestamp.xsl and evaluate xml-file specific timestamps to a ccomodate possible added repositories with older timestamps. Sort OVAL files by timestamp date before updating so latest definitions are stored in database in case of duplicates. (list_oval_files_sorted, list_oval_files_sortable): New helper functions for sorting OVAL files. * tools/greenbone-scapdata-sync: Updated timestamp filtering. For details see: tools/openvas-scapdata-sync.in (update_sec_db, list_oval_files_sorted, list_oval_files_sortable). * tools/oval_timestamp.xsl: Remove surrounding SQL query to make more reusable. 2013-01-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_alert, delete_target, delete_config) (delete_schedule, delete_slave): Check if any task is using the resource in the "ultimate" case, to catch the case where the resource is in the table and the task is in the trash. 2013-01-09 Andre Heinecke <andre.heinecke@greenbone.net> * src/manage_sql.c (send_to_verinice): Do not log the password in debug output. 2013-01-09 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (port_list_is_predefined): New function. (delete_port_list, port_list_in_use, port_list_writable): Use port_list_is_predefined adequately. * src/manage.h: Add port_list_is_predefined header accordingly. 2013-01-09 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (port_list_name, trash_port_list_name) (trash_port_list_uuid, port_list_ssh_lsc_credential): Remove unused functions. * src/manage.h: Remove headers accordingly. 2013-01-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_user_get_iterator, init_get_iterator): Wrap the filter clause in parentheses because it may have multiple subclauses. 2013-01-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (keyword_applies): Revert from skipping any duplicate column keywords, introduced in r14801, to skipping the special keywords on a special case basis. This is necessary because it is valid to have multiple normal column keywords, for example "name=a or name=b". 2013-01-08 Matthew Mundell <matthew.mundell@greenbone.net> * ChangeLog: Cleanup two entries. 2013-01-08 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (modify_alert): New function. * src/manage.h: add modify_alert header. * src/omp.c (omp_commands): Add modify_alert omp command. (modify_alert_data_t): New data structure. (modify_alert_data_reset): New function to free modify_alert_data_t's data. (command_data_t): Add modify_alert command. (modify_alert_data): Add parser callback for modify_alert command. (client_state_t): Add CLIENT_MODIFY_ALERT, CLIENT_MODIFY_ALERT_NAME and CLIENT_MODIFY_ALERT_COMMENT states. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text_element): Handle modify_alert case. 2013-01-08 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (filter_clause): Make sorting by column case insensitive. 2013-01-07 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * tools/greenbone-scapdata-sync: Fixed missing "fi". 2013-01-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_note): Allow NVT OID to be "0", for open ports. 2013-01-07 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/omp.c (lsc_credential_writabe, trash_lsc_credential_writable): Make credentials always writable, even when in use by a target. 2013-01-07 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/omp.c (omp_xml_handle_element): Send nvt families when details attribute is set. 2013-01-07 Timo Pollmeier <timo.pollmeier@greenbone.net> * tools/db_init.sql: Fix OVAL definition table name mistakenly reverted to old name oval_def instead of correct ovaldefs. * tools/oval_update: Fix misspelled test causing dates of individual definitions not to be recognized. 2013-01-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (slave_writable, trash_slave_writable): Always return 1. Changing the slave should have little effect on the comparability of reports. (slave_in_use): Only consider slave in use if a regular task is using the slave. This allows the user to put the slave in the trashcan when a trashcan task is using the slave. 2013-01-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (alert_iterator_filter_trash): New function. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In GET_ALERTS add missing FILTER/TRASH. 2013-01-07 Matthew Mundell <matthew.mundell@greenbone.net> In GET_ALERTS return the details of the right filter when the filter is in the trashcan. * src/manage_sql.c (ALERT_ITERATOR_COLUMNS) (ALERT_ITERATOR_TRASH_COLUMNS): Add filter location column. (alert_iterator_filter): Return filter_t instead of int. (alert_iterator_filter_uuid, alert_iterator_filter_name) (trash_filter_uuid, trash_filter_name): New functions. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_end_element): In GET_ALERTS get filter UUID and name directly from iterator. 2013-01-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (modify_filter): Use strcasecmp for type check so client can use any case. 2013-01-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (modify_filter): Check that type is valid if filter is in use. * src/omp.c (omp_xml_handle_end_element): In MODIFY_FILTER check for filter type error. 2013-01-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_alert): Check filter type. * src/omp.c (omp_xml_handle_end_element): In CREATE_ALERT check for filter type error. 2013-01-07 Michael Wiegand <michael.wiegand@greenbone.net> * tools/greenbone-scapdata-sync: Add support for proxy authentication. Based on patch submitted by Christian Schmidt. 2013-01-07 Hani Benhabiles <hani.benhabiles@greenbone.net> Add modify port list functionality. * src/omp.c (modify_port_list_data_t): New structure. (modify_port_list_data_reset): New function. (command_data_t): Add modify_port_list element. (omp_commands): Add modify_port_list omp command. (modify_port_list_data): Add parser callback for modify_port_list command. (client_state_t): Add CLIENT_MODIFY_PORT_LIST, CLIENT_MODIFY_PORT_LIST_NAME and CLIENT_MODIFY_PORT_LIST_COMMENT states. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text_element): Handle modify_port_list case. * src/manage_sql.c (modify_port_list): New function. (modify_agent): Fix documentation. * src/manage.h: Add modify_port_list header. 2013-01-07 Timo Pollmeier <timo.pollmeier@greenbone.net> Individual OVAL definitions are now filtered out when older than the latest in the SCAP database. * tools/oval_update.xsl: Add parameter refdate and check of dates in <oval_repository> tag to filter out older definitions. * tools/greenbone-scapdata-sync: Add passing of parameter OVAL_REFDATE to xsltproc for oval_update.xsl. * tools/openvas-scapdata-sync.in: Add passing of parameter OVAL_REFDATE to xsltproc for oval_update.xsl. 2013-01-04 Timo Pollmeier <timo.pollmeier@greenbone.net> Timestamps from tag oval_repository are now used for timestamps of OVAL definitions. Improved escaping of characters in OVAL defintions to avoid XML errors caused by unescaped ampersands (&) in titles and descriptions. * src/omp.c (omp_xml_handle_end_element): In case CLIENT_GET_INFO add escaping of ampersands. Reworked indentation of OVAL code in this section. * tools/oval_update.xsl: Add template to get creation_date and modification_date from tag oval_repository if it exists. Change handling of quotes to replace them with double quotes in generated SQL queries. 2013-01-04 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/omp.c (get_port_lists_data_t): Remove ranges element. (omp_xml_handle_start_element, omp_xml_handle_end_element): Don't use ranges element of get_port_lists_data as it duplicates functionality of details get attribute. 2013-01-04 Hani Benhabiles <hani.benhabiles@greenbone.net> Add modify agent feature. * src/omp.c (modify_agent_data_t): New structure. (omp_commands): Add modify_agent omp command. (modify_agent_data_reset): New function. (command_data_t): Add modify_agent element. (modify_agent_data): Add parser callback for modify_agent command. (client_state_t): Add CLIENT_MODIFY_AGENT, CLIENT_MODIFY_AGENT_NAME and CLIENT_MODIFY_AGENT_COMMENT states. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text_element): Handle modify_agent case. * src/manage_sql.c (modify_agent): New function. * src/manage.h: add modify_agent header. 2013-01-03 Timo Pollmeier <timo.pollmeier@greenbone.net> Cleaned up some trailing whitespaces and lines longer than 80 characters in OVAL sections. * ChangeLog: Remove trailing whitespaces. * src/manage.c: Remove trailing whitespaces. * src/manage.h: Remove trailing whitespaces, insert line breaks. * src/manage-sql.c: Remove trailing whitespaces, insert line breaks. * src/manage-sql.h: Remove trailing whitespaces. * tools/greenbone-scapdata-sync: Remove trailing whitespaces. * tools/openvas-scapdata-sync.in: Remove trailing whitespaces. 2013-01-03 Hani Benhabiles <hani.benhabiles@greenbone.net> Fix non-unique names when cloning global resources. Remove some extra sql. * src/manage_sql.c: Add find_user static header. (copy_resource, copy_task, copy_target, copy_config, copy_alert) (copy_report_format, copy_port_list): uniquify based on user cloning the object rather than the object's owner. (copy_alert, copy_report_format, copy_port_list): Style update. (copy_report_format): Use owner value instead of subquery for user id. 2013-01-03 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (copy_report_format): Remove extra sql rollback. 2013-01-03 Hani Benhabiles <hani.benhabiles@greenbone.net> Add clone ability to Report Formats. * src/manage_sql.c (copy_report_format): New function to copy a Report Format in the DB and on disk. (file_utils_copy_file): New function. Duplicate from lsc_users. * src/manage.h: Add copy_report_format header accordingly. * src/omp.c (create_report_format_data_t): Add copy element. (create_report_format_data_reset): Free copy element. (client_state_t): Add CLIENT_CREATE_REPORT_FORMAT_COPY. (omp_xml_handle_text): Copy Report Format uuid from copy element into create data copy element. (omp_xml_handle_start_element): Add Report Format copy client state. (omp_xml_handle_end_element): Handle Report Format copy case. 2013-01-02 Timo Pollmeier <timo.pollmeier@greenbone.net> Add output of raw data for OVAL definitions. Change SCAP database format to include source file of OVAL definitions. Change namespaces and schemas in OVAL XSL files to use OVAL ones instead of ones left from CPE/CVE. * CMakeLists.txt: Add ovaldef_getbyname.xsl * src/manage.c: Add raw data extraction for OVALDEF. (OVALDEF_GETBYNAME_XSL): Add constant for OVAL selection stylesheet. (get_ovaldef_filename): Add function to get full source filename. (manage_read_info): Add else if branch for OVALDEF. * src/manage.h: Add declaration of ovaldef_info_iterator_xml_file * src/manage_sql.c (get_ovaldef_short_filename): Add new function to get short xml filenames (as stored in SCAP database) of OVALDEFs. Change OVALDEF_INFO_ITERATOR_FILTER_COLUMNS and OVALDEF_INFO_ITERATOR_COLUMNS to include "xml_file" (ovaldef_info_iterator_xml_file): Add function to read xml_file of OVALDEFs. * src/manage_sql.h: Add declaration of get_ovaldef_short_filename. * src/omp.c (omp_xml_handle_end_element): In case CLIENT_GET_INFO add output of "xml_file" to OVALDEF. * tools/db_init.sql: Add column "xml_file" to table "ovaldefs" * tools/greenbone-scapdata-sync: Add migration to database version 7, Remove obsolete migration scripts. Update xsltproc call to pass xml file name as parameter. * tools/migrate_db5to6: Remove file as OVAL data has to be re-imported for new database version. * tools/openvas-scapdata-sync.in: Analogous to greenbone-scapdata-sync. * tools/ovaldef_getbyname.xsl: New stylesheet to select an OVAL definition with a given identifier. * tools/oval_timestamp: Remove unused namespaces, Update schemaLocation to OVAL schemas. * tools/oval_update.xsl: Remove unused namespaces, Update schemaLocation to OVAL schemas. Add xml_file to SQL query. 2013-01-02 Hani Benhabiles <hani.benhabiles@greenbone.net> Add clone ability to Port Lists. * src/manage_sql.c (copy_port_list): New function for Port List cloning. * src/manage.h: Add copy_port_list header. * src/omp.c (create_port_list_data_t): Add copy element. (create_port_list_data_reset): Free copy element. (client_state_t): Add CLIENT_CREATE_PORT_LIST_COPY. (omp_xml_handle_end_element): Handle Port List copy case. (omp_xml_handle_start_element): Add Port List copy client state. (omp_xml_handle_text): Append port list id from copy tag into create_lsc_credential_data copy element. 2013-01-02 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (copy_alert): Return 2 when alert to copy is not found. Use sql_string to check for alert. Fix SQL query style. 2013-01-01 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (copy_alert): New function to clone an alert. * src/manage.h: Add copy_alert header. * src/omp.c (create_alert_data_t): Add copy element. (create_alert_data_reset): Free copy element. (client_state_t): Add CLIENT_CREATE_ALERT_COPY. (omp_xml_handle_start_element): Handle alert copying case. (omp_xml_handle_end_element): Handle case when create_alert_data copy element is set. Close copy tag. (omp_xml_handle_text_element): Append content of copy tag to create_alert_data copy element. 2013-01-01 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (copy_resource): Free quoted_uuid before returning. (copy_schedule): Style fix. 2012-12-31 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (copy_config): Check if config name exists already when provided name is not null or empty. Create unique name and copy comment for clone case when no name is provided. * src/omp.c (omp_xml_handle_end_element): Check copy element also when checking name too to permit blank name sent in clone case. 2012-12-31 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/omp.c (init_user_lsc_credential_iterator): Use LSC_CREDENTIAL_ITERATOR_COLUMNS to follow the same order of columns used by init_lsc_credential_iterator as functions to access columns' values are shared. 2012-12-31 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/omp.c (client_state_t): Add CLIENT_CREATE_LSC_CREDENTIAL_COPY. (create_lsc_credential_data_t): Add copy element. (omp_xml_handle_text): Add uuid from copy tag to create_lsc_credential_data copy element. (omp_xml_handle_end_element): Handle LSC Credential copy case. (omp_xml_handle_start_element): Add LSC Credential copy client state. (create_agent_data_reset, create_lsc_credential_data_reset) (create_schedule_data_reset, create_slave_data_reset) (create_target_data_reset): Free copy element. * src/manage_sql.c (copy_lsc_credential): New function match other resources copy functions style. * src/manage.h: Add copy_lsc_credential header. 2012-12-28 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (copy_agent): New function (agent_uuid): Change interface to take one agent_t as a parameter and match other resources copy functions style. * src/manage.h: Change agent_uuid and add copy_agent header. * src/omp.c (create_agent_data_t): Add copy char pointer. (client_state_t): Add CLIENT_CREATE_AGENT_COPY. (omp_xml_handle_start_element): Add agent copy state check. (omp_xml_handle_end_element): Handle agent copy for CLIENT_CREATE_AGENT case. Adapt agent_uuid call to interface change. Add log entry for Agent creation. (omp_xml_handle_text): Add content of copy tag to create_agent_data copy element. 2012-12-28 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (update_all_config_caches, update_config_cache): Initialize iterator with needed columns only instead of using CONFIG_ITERATOR_COLUMNS. 2012-12-27 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (CONFIG_ITERATOR_FILTER_COLUMNS) (CONFIG_ITERATOR_COLUMNS, CONFIG_ITERATOR_TRASH_COLUMNS): Rename family_count, nvt_count, families_growing and nvts_growing columns to families_total, nvts_total, families_trend and nvts_trend. 2012-12-27 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (init_user_config_iterator) (update_all_configs_caches, manage_complete_nvts_cache_update): Use CONFIG_ITERATOR_COLUMNS instead of CONFIG_ITERATOR_FIELDS. (CONFIG_ITERATOR_FIELDS): Remove unused define. 2012-12-27 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (init_config_iterator): Change interface. Take two parameters: iterator_t and get_data_t. (config_iterator_comment): Define with DEF_ACCESS. (config_iterator_nvt_selector, config_iterator_families_growing) (config_iterator_nvts_growing): Adjust column number. (config_iterator_family_count, config_iterator_nvt_count): New functions. * src/manage.h: Add config_iterator_nvt_count and config_iterator_family_count headers. Modify init_config_iterator header. * src/omp.c (get_configs_data_t): Change data strucutre to contain four elements: families, prefernces, get and tasks. (get_configs_data_reset): Use get_data_reset. (omp_xml_handle_start_element): Use get_data_parse_attributes in GET_CONFIGS case. Check tasks attribute. (omp_xml_handle_end_element): Adapt to new init_configs_iterator interface. Use SEND_GET_START, SEND_GET_COMMON and SEND_GET_END macros. Check details and tasks attributes. 2012-12-27 Timo Pollmeier <timo.pollmeier@greenbone.net> * src/manage_sql.c (init_ovaldef_info_iterator): Fix use of wrong filter columns for OVAL definitions. 2012-12-27 Hani Benhabiles <hani.benhabiles@greenbone.net> Migrate database to version 73, add creation and modification times to scan configs. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Set to 73. * src/manage_sql.c (create_tables): Add creation_time and modification_time columns to configs and configs_trash tables. (migrate_72_to_73): New function. (database_migrators): Add migrate_72_to_73. (init_manage, create_config, create_config_rc, delete_config) (manage_restore): Insert into creation_time and modification_time columns current time value. (insert_rc_into_config, manage_set_config_comment) (manage_set_config_name, manage_set_config_name_comment) (manage_set_config_nvts, manage_set_config_families): Update modification_time column to current time value. * doc/db.png: Update to version 73. 2012-12-27 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (config_count): New function. (CONFIG_ITERATOR_FILTER_COLUMNS, CONFIG_ITERATOR_COLUMNS) (CONFIG_ITERATOR_TRASH_COLUMNS): Add defines. * src/manage.h: Add config_count header. 2012-12-27 Timo Pollmeier <timo.pollmeier@greenbone.net> * CMakeLists.txt: Add SCAP.db migration script migrate_db5to6.sql * src/manage.h (init_ovaldef_info_iterator) (ovaldef_info_count, ovaldef_info_iterator_version) (ovaldef_info_iterator_deprecated, ovaldef_info_iterator_def_class) (ovaldef_info_iterator_title, ovaldef_info_iterator_description): Add iterator function declarations for OVAL definition data (ovaldef). * src/manage_sql.c: Add implementations of new iterator functions declared in src/manage.h * src/omp.c (omp_xml_handle_end_element): In case CLIENT_GET_INFO Add XML output of basic ovaldef data. * tools/db_init.sql: Change database columns to include attributes uuid, name, comment, creation_time, modification_time. Change DB version to 6. * tools/greenbone-scapdata-sync: Add migration to new database format. * migrate_db5to6.sql: Add new SQL file to migrate data from SCAP DB version 5 to 6. * tools/openvas-scapdata-sync.in: Add migration to new database format * tools/oval_update.xsl: Change SQL queries to match new database format 2012-12-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Upgrade FIX to TODO. 2012-12-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_report_format): Make the name unique instead of failing, when a report format with the name exists already. This matches the other importers. 2012-12-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (omp_xml_handle_start_element): In CLIENT_C_C_GCR set the import flag again, because the reset clears it. 2012-12-21 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (delete_report_format): Fix column name. 2012-12-21 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (trash_config_writable): New function. (config_writable): Base results on config_in_use. * src/manage.h: Add header accordingly. 2012-12-21 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (GET_ITERATOR_FILTER_COLUMNS) (PORT_LIST_ITERATOR_COLUMNS,PORT_LIST_ITERATOR_TRASH_COLUMNS): Use total, tcp and udp as names for count columns. 2012-12-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_port_list_lock): Always give the port ranges new UUIDs. 2012-12-21 Matthew Mundell <matthew.mundell@greenbone.net> Read over bogus elements when importing. * src/omp.c (omp_parser_t): Add importing and parent_state. (ELSE_ERROR): When importing go into "read-over mode". (omp_xml_handle_start_element): Set importing flag on omp_parser for import commands. (omp_xml_handle_end_element): In read-over mode when the parent_state is set then switch to that state instead of leaving it to a specific case. Move setting the import_config_data import flag to omp_xml_handle_start_element to match other commands. 2012-12-21 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (init_config_iterator): Correct configs table name. 2012-12-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_get_iterator): Add a 1 to single resource case of owned_and_used_by_clause because used_by_clause starts with OR. 2012-12-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_task_alert_iterator): Specify event as integer because it's an enum. * src/omp.c (omp_xml_handle_end_element): In CREATE_TASK add a fail flag to the alert while, because now that it's a while the breaks will break out of the while instead of the case. 2012-12-20 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/otp.c (parse_scanner_plugin_list_tags): Don't set the risk factor for the nvti anymore. Will be computed from the cvss automatically. * src/manage_sql.c (update_nvti_cache): Don't set the risk factor anymore. (make_nvt_from_nvti): Simplified risk factor retrieval because always a sensible string is return. 2012-12-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.h (get_data_t): Add type and subtype. * src/manage_sql.c (type_owned): New function. (resource_count): Pass the subtype if there is one, and check whether the type is owned. This gets the get_info cases working. * src/omp.c (get_data_reset): Free type and subtype. (get_data_parse_attributes): Set type. (omp_xml_handle_end_element): Set subtype. 2012-12-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (get_alerts_data_t, get_overrides_data_t): Align comment. (omp_xml_handle_end_element): Neaten formatting. 2012-12-20 Matthew Mundell <matthew.mundell@greenbone.net> Add back the full count in GET_TASKS, adding to all other new-style GET ops at the same time. * src/manage_sql.c (vector_find_string): Add vector NULL check. (resource_count): New function. * src/manage.h: Add headers accordingly. * src/omp.c (send_get_end): Add full count arg. (SEND_GET_END): Pass full count to send_get_end. (omp_xml_handle_end_element): Remove old code that added full count in GET_TASKS. 2012-12-20 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (PORT_LIST_ITERATOR_FILTER_COLUMNS): Add count_all, count_tcp and count_udp columns. (PORT_LIST_ITERATOR_TRASH_COLUMNS): Add count ports, tcp ports and udp ports SQL statements. 2012-12-20 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (port_list_iterator_count): Rename function to port_list_iterator_count_all. (PORT_LIST_ITERATOR_COLUMNS): Add SQL statements to count all ports, tcp ports and udp ports of the port_list. (port_list_iterator_count_all, port_list_iterator_count_tcp) (port_list_iterator_count_udp): Use sqlite3_column_int and GET_ITERATOR_COLUMN_COUNT. * src/manage.h: Rename port_list_iterator_count header. * src/omp.c (omp_xml_handle_end_element): Call port_list_iterator_count_all in CLIENT_GET_PORT_LSITS case. 2012-12-20 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/omp.c (get_lsc_credentials_data_t): Add targets boolean. (omp_xml_handle_start_element): Check targets attribute value. (omp_xml_handle_end_element): Refactor sending of login and type elements and repeated lsc_credential_iterator_public_key function call. Check targets boolean as a condition to send targets using the LSC Credential. 2012-12-19 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (init_lsc_credential_iterator): Change interface to use iterator_t and a get_data_t as arguments. Use init_get_iterator. (lsc_credential_iterator_comment): Define with DEF_ACCESS. (lsc_credential_iterator_login, lsc_credential_iterator_password) (lsc_credential_iterator_public_key) (lsc_credential_iterator_private_key): Adjust column. (lsc_credential_iterator_rpm, lsc_credential_iterator_deb): Use lsc_credential_iterator_name and lsc_credential_iterator_public_key instead of querying fields in the iterator. (lsc_credential_iterator_in_use): Remove inused function. * src/manage.h: Change init_lsc_credential_iterator header accordingly. Remove lsc_credential_iterator_in_use header. * src/omp.c (get_lsc_credentials_data_t): Add get_data_t element. Remove sort_field, sort_order, trash, lsc_credential_id and actions. (get_lsc_credentials_data_reset): Use get_data_reset. (omp_xml_handle_start_element): Adapt GET_LSC_CREDENTIALS case to new format. Use get_data_parse_attributes. (omp_xml_handle_end_element): Adapt to new init_lsc_credential_iterator interface. Use SEND_GET_START, SEND_GET_COMMON and SEND_GET_END macros. 2012-12-19 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (lsc_credential_count): New function. (LSC_CREDENTIAL_FILTER_COLUMNS, LSC_CREDENTIAL_ITERATOR_COLUMNS) (LSC_CREDENTIAL_ITERATOR_TRASH_COLUMNS): New defines. * src/manage.h: Add lsc_credential_count header. 2012-12-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (task_writable, trash_task_writable): Check if the user has write access too. 2012-12-19 Hani Benhabiles <hani.benhabiles@greenbone.net> Migrate database to version 72, add creation and modification time to LSC Credentials. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 72. * src/manage_sql.c (create_tables): Add creation_time and modification_time columns in lsc_credentials. (migrate_71_to_72): New function. (database_migrators): Add migrate_71_to_72. (create_lsc_credential, delete_lsc_credential, set_lsc_credential_name) (set_lsc_credential_login, set_lsc_credential_comment) (set_lsc_credential_password, manage_restore): Insert into and update creation_time and modification_time lsc_credentials table columns accordingly. * doc/db.png: Update to version 72. 2012-12-19 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * tools/greenbone-scapdata-sync: Add parameter --refresh to run only the database update, but no downloads. 2012-12-19 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Patch developed by: Timo Pollmeier * tools/greenbone-scapdata-sync: Add sync of OVAL data, database migration to version 5 and checks if xml files for CVE and OVAL exist in SCAP directory. 2012-12-19 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (filter_in_use, trash_filter_in_use, target_in_use) (trash_target_in_use, alert_in_use, trash_alert_in_use, schedule_in_use) (trash_schedule_in_use, report_format_in_use) (trash_report_format_in_use, slave_in_use, trash_slave_in_use) (trash_port_list_in_use, lsc_credential_in_use) (trash_lsc_credential_in_use): Style update. 2012-12-18 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Patch developed by: Timo Pollmeier * tools/openvas-scapdata-sync.in: Add checks if xml files for CVE and OVAL exist in SCAP directory. 2012-12-18 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Patch developed by: Timo Pollmeier * CMakeLists.txt: Add the two new OVAL XSLT stylesheets to be installed in ${OPENVAS_SCAP_RES_DIR} * tools/dbinit.sql: Add creation of table "oval_def" for OVAL definitions. Change database version to 5. * tools/openvas-scapdata-sync.in: Add sync of OVAL data and database migration to version 5. * tools/oval_timestamp.xsl: New XSLT stylesheet for getting generator timestamps from OVAL XML files. * tools/oval_update.xsl: New XSLT stylesheet for creating SQL inserts to add definition data from OVAL XML files. 2012-12-18 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (filter_in_use, trash_filter_in_use, target_in_use) (trash_target_in_use, alert_in_use, trash_alert_in_use, schedule_in_use) (trash_schedule_in_use, report_format_in_use, trash_report_format_in_use) (slave_in_use, trash_slave_in_use, trash_port_list_in_use): Comply with function's description and return 1 for "in use" case. (trash_port_list_in_use): Remove inused code between "#if 0 #endif". 2012-12-18 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (lsc_credential_in_use, trash_lsc_credential_in_use) (lsc_credential_writable, trash_lsc_credential_writable): New functions. * src/manage.h: Add headers accordingly. 2012-12-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_note_iterator, init_override_iterator): Remove the used_by arg, because the user only ever sees his own notes and overrides. 2012-12-18 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Fix alert counts for CLIENT_GET_ALERTS case. 2012-12-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): For the assets report add an scap_loaded flag attribute. 2012-12-17 Andre Heinecke <andre.heinecke@greenbone.net> * report_formats/verinice-itg/gsm_verinice_itg.xsl: Remove redundant gsm_itg_result_ip as requested by verinice developers. 2012-12-17 Matthew Mundell <matthew.mundell@greenbone.net> Check SCAP availability every time instead of on startup. * src/manage_sql.c (scap_loaded): Remove. (init_manage_process, print_report_xml): Use manage_scap_loaded to check SCAP availability. (manage_scap_loaded): Do the actual check instead of checking scap_loaded. 2012-12-17 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Remove get.details check for CLIENT_GET_ALERTS case. 2012-12-17 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Remove superfluous in_use tags in CLIENT_GET_AGENTS case. * src/manage_sql.c (agent_writable, trash_agent_writable): Use agent_in_use and trash_agent_in_use functions. (schedule_writable, trash_schedule_writable): Style fix. 2012-12-17 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (init_target_iterator): Set to NULL used_by parameter which was causing sql syntax error when requesting a single target with target_id and actions parameters set. 2012-12-14 Hani Benhabiles <hani.benhabiles@greenbone.net> Move Alerts to use new GET style. * src/manage_sql.c (init_alert_iterator): Change interface to take an iterator and a get_data_t as parameters. (alert_iterator_filter): New function (alert_iterator_in_use, alert_iterator_filter_id) (alert_iterator_filter_name, alert_iterator_filter_trash): Remove unused function. (alert_iterator_uuid, alert_iterator_name) (alert_iterator_comment): Define with DEF_ACCESS. (alert_iterator_event, alert_iterator_condition) (alert_iterator_method): Adjust column position. * src/manage.h: Add, change and remove headers accordingly. * src/omp.c (get_alerts_data_t): Remove alert_id, sort_field, sort_order and trash. Add get and tasks. (get_alerts_data_reset): Use get_data_reset. (omp_xml_handle_start_element): Adapt GET_ALERTS to get data interfce changes. (omp_xml_handle_end_element): Use new init_alert_iterator interface in CLIENT_GET_ALERTS case. Check details get element when sending alert data. Adjust to follow same style with new get based style. 2012-12-14 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (filter_name): New function. (task_alert_name, task_alert_uuid, task_alert, task_alert_in_trash): Remove unused functions. * src/manage.h: Add and remove headers accordingly. 2012-12-14 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (init_task_alert_iterator, task_alert_iterator_alert) (task_alert_iterator_uuid, task_alert_iterator_name): New functions. (event): Use init_task_alert_iterator instead of init_alert_iterator. * src/manage.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): Use init_task_alert_iterator in GET_TASKS case instead of init_alert_iterator. 2012-12-14 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (alert_uuid): Change interface to match the same style of other objects. * src/manage.h: Change alert_uuid header accordingly. * src/omp.c (omp_xml_handle_end_element): Change alert_uuid call in CLIENT_CREATE_ALERT. 2012-12-13 Matthew Mundell <matthew.mundell@greenbone.net> Follow overrides flag in task iterator. * src/manage_sql.c (TASK_ITERATOR_COLUMNS) (TASK_ITERATOR_TRASH_COLUMNS): Add overrides arg. (init_user_task_iterator): Pass 0 to columns macros, because get->overrides is always 0. (init_task_iterator, task_count): Pass the overrides value from the filter into the columns macros, so that the threat and trend match the overrides flag. (init_manage_process): Add extra arg to task_threat_level. (task_threat_level): Add overrides arg. Update callers. * src/manage.h: Update header accordingly. * src/sql.c (sql_threat_level): Add overrides arg. 2012-12-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_get_iterator): Drop the owner clause when getting a single resource, because the find_resource_for_actions does the owner check. This makes the iterator work again for single observed tasks. 2012-12-13 Hani Benhabiles <hani.benhabiles@greenbone.net> Migrate database to version 71, add creation and modification time support to alerts. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 71. * src/manage_sql.c (create_tables): Add creation_time and modification_time to alerts. (migrate_70_to_71): New function. (database_migrators): Add migrate_70_to_71. (create_alert, delete_alert, manage_restore): Set creation_time and modification_time columns adequately. * doc/db.png: Update to version 71. 2012-12-13 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (alert_count, alert_in_use, trash_alert_in_use) (alert_writable, trash_alert_writable): New functions. (schedule_in_use, trash_schedule_in_use): Style fix. * src/manage.h: Add headers accordingly. 2012-12-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (count): Get the case working where actions are given. 2012-12-12 Matthew Mundell <matthew.mundell@greenbone.net> Support apply_overrides in GET_TASKS filter. * src/manage_sql.c (keyword_applies): Instead of checking only first and max, skip over all duplicate keyword columns. This allows GSA to prepend apply_overrides for the task page. (filter_term_value): Compare with the actual given arg instead of "task_id". * src/omp.c (get_tasks_data_t): Remove apply_overrides. (omp_xml_handle_end_element): For GET_TASKS send APPLY_OVERRIDES, getting the value from the filter. 2012-12-12 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage.h, src/manage_sql.c (port_list_iterator_writable) (port_list_iterator_in_use, schedule_iterator_in_use): Remove unused functions. 2012-12-12 Hani Benhabiles <hani.benhabiles@greenbone.net> Add Alerts for GET_REPORT_FORMATS. Remove unneeded export checks. * src/manage_sql.c (init_report_format_alert_iterator) (report_format_alert_iterator_name) (report_format_alert_iterator_uuid): New functions. * src/manage.h: Add headers accordingly. * src/omp.c (get_report_formats_data_t): Add alerts boolean. Remove export boolean. (omp_xml_handle_start_element): Add alerts attribute handling. Remove export attribute handling. (omp_xml_handle_end_element): Add alerts response for CLIENT_GET_REPORT_FORMATS case. Remove export attribute checking. 2012-12-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (TASK_ITERATOR_COLUMNS) (TASK_ITERATOR_TRASH_COLUMNS): Add last report date as "last", to replace report id as "last". 2012-12-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (TASK_ITERATOR_COLUMNS) (TASK_ITERATOR_TRASH_COLUMNS): Add run status name as status so that status filtering is by name instead of number. (init_manage_process): Create SQL function run_status_name. * src/sql.c (sql_run_status_name): New function. * src/sql.h: Add header accordingly. 2012-12-11 Hani Benhabiles <hani.benhabiles@greenbone.net> Move Port Lists to the new GET object management style. * src/manage_sql.c (init_port_list_iterator): Change interface to use an iterator and a get_data_t parameters. Use init_get_iterator. (trash_port_list_in_use, port_list_writable) (trash_port_list_writable): New functions. * src/omp.c (get_port_lists_data_t): Change structure to contain ranges and targets booleans and get get_data_t element. (get_port_lists_data_reset): Adapt to change in get_port_lists_data_t. (omp_xml_handle_start_element): Add ranges and targets attributes. Use get_data_parse_attributes. (omp_xml_handle_end_element): Adapt to changes in init_port_list_iterator and use SEND_GET_START, SEND_GET_COMMON and SEND_GET_END macros. * src/manage.h: Add and modify headers accrodingly. 2012-12-11 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (REPORT_FORMAT_ITERATOR_FILTER_COLUMNS): Rename flags into active. (REPORT_FORMAT_ITERATOR_COLUMNS): Extract active flag value only from flags and rename it into active. 2012-12-11 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (REPORT_FORMAT_ITERATOR_FILTER_COLUMNS): Add trust, trust_time and flags columns. * src/omp.c (omp_xml_handle_end_element): Fixed counter variables for CLIENT_GET_REPORT_FORMATS and CLIENT_GET_SLAVES cases. Fixed typo in get_next parameter in CLIENT_GET_REPORT_FORMATS case. 2012-12-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (sql_task_trend, sql_threat_level): When passed a 0 task just return "", because this happens for count queries when the result set is empty. 2012-12-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_get_iterator): When current_credentials.uuid is NULL and the resource is owned, then always grant access. This allows the GET iterators to be used by the main process, and before processing the client OMP. (PORT_LIST_ITERATOR_FILTER_COLUMNS) (PORT_LIST_ITERATOR_TRASH_COLUMNS): Flush trailing whitespace. 2012-12-10 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (port_list_count): New function. (PORT_LIST_ITERATOR_FILTER_COLUMNS, PORT_LIST_ITERATOR_COLUMNS) (PORT_LIST_ITERATOR_TRASH_COLUMNS): New defines. * src/manage.h (port_list_iterator_exclude): Correct typo. Rename into port_range_iterator_exclude. 2012-12-10 Hani Benhabiles <hani.benhabiles@greenbone.net> Migrate Database to version 70, add creation and modification time support to Port Lists. * src/manage_sql.c (migrate_69_to_70): New function. (database_migrators): Add migrate_69_to_70. (create_tables): Add creation_time and modification_time to port_lists and port_lists_trash tables. (ensure_predefined_port_lists_exist, create_port_list_lock) (create_port_list, delete_port_list, manage_restore): Insert current time value into creation_time and modification_time. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 70. 2012-12-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_db_version, set_db_version) (init_manage_process, manage_update_nvti_cache, init_manage) (nvts_md5sum, set_nvts_md5sum, manage_nvt_preferences_enable): Specify the database for the meta table because there is a meta table in the SCAP db too. In particular, this is required before the database is created, otherwise the meta in the SCAP makes it look like the tasks database has already been created. 2012-12-09 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/report_formats/HTML/HTML.xsl: Reduced all occurences of xsl:with-param where inly a value-of operation was inside to direct "select" inside with-param. Also reduced all /xsl:param closing tags where content was empty anyway. The gain was minimal. This report is fast anyway compared to the other report format plugins. 2012-12-09 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/report_formats/LaTeX/latex.xsl: Reduced all occurences of xsl:with-param where inly a value-of operation was inside to direct "select" inside with-param. This gained clearly less than 1% performance improvement. 2012-12-09 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/report_formats/TXT/TXT.xsl: Reduced all occurences of xsl:with-param where inly a value-of operation was inside to direct "select" inside with-param. Also reduced all /xsl:param closing tags where content was empty anyway. This made the report plugin 4 times faster, measured for a very big report (2 hours instead of 8 hours, timed twice because I couldn't believe that this little change brings so much improvement). Most effect comes from "wrap-line" that dropped from #0 to #7 in profiling analysis. 2012-12-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_report, manage_send_report): Use a fresh "get" arg to get the required report format, instead of passing in the "get" args from the report iterator. 2012-12-08 Matthew Mundell <matthew.mundell@greenbone.net> Get sorting of task columns via filter working. * src/manage_sql.c (TASK_ITERATOR_FILTER_COLUMNS) (TASK_ITERATOR_COLUMNS, TASK_ITERATOR_TRASH_COLUMNS): Add all columns. (init_manage_process): Init new SQL functions task_trend and task_threat_level. (task_last_report): Make global, so SQL function can use. (task_threat_level): Just return NULL if current_credentials is NULL, because this could happen now that the function is used via SQL in the task iterator. * src/manage.h: Add headers accordingly. * src/sql.c (sql_task_trend, sql_threat_level): New functions. * src/sql.h: Update headers accordingly. 2012-12-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (count): Move up in file. (task_count): Add get arg. Use count function to return filtered count instead of total count. (report_format_count, report_format_iterator_trust_time): Flush trailing whitespace. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): Disable old TASK_COUNT for now. 2012-12-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS use SEND_GET_START and SEND_GET_END. 2012-12-06 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Moved closing tag for CLIENT_GET_CONFIGS within the appropriate else statement, which was causing error responses to append an extra get_configs_response tag. 2012-12-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS move sending the alerts from the detailed case to the common area. This brings multiple alerts to the brief case, which was previously only showing one alert. 2012-12-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS share the creation of PREFERENCES between the brief and detailed cases. Hence remove the brief case, which is now empty. 2012-12-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS share the bulk of the response between the brief and detailed cases. This removes ALERT from the brief case, as there are multiple alerts now. This also brings TRASH to CONFIG, TARGET, SLAVE and SCHEDULE in the detailed case. 2012-12-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS remove variable tsk_uuid, which is out of use. 2012-12-06 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Reduce amount of time spent in wrap_row to 0.15% of what was spent before. This lets wrap_row drop from #1 to #15 in profiling analysis (measureing total time spent in function). The overall performance gain measured for a very big report was 15%. Main reason is that template parameter are expensive, especially when used in recursion. * src/report_formats/LaTeX/latex.xsl (wrap-row): Drop parameter "color" and use white. (wrap-row-color): A copy of the old wrap-row with parameter "color". (break-into-rows-indented, break-into-rows-indented-color): Dito. (break-into-rows, break-into-rows-color): Dito. (text-to-escaped-row, text-to-escaped-row-color): Dito. All over the code: Were other colors than white were used, replace the old call by the -color call. 2012-12-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS share the SEND_GET_COMMON and some variable inits between the brief and detailed cases. This corrects the detailed version when the target, slave or schedule is in the trashcan. 2012-12-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS share the creation of SECOND_LAST_REPORT and LAST_REPORT between the brief and detailed cases. This brings the report count optimisation from the brief case to the detailed case. 2012-12-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS for the big if share the creation of FIRST_REPORT. 2012-12-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS add comments about result counting. 2012-12-06 Michael Wiegand <michael.wiegand@greenbone.net> * src/manage_sql.c (send_to_verinice, send_to_sourcefire): Ensure files have the correct permissions when dropping privileges. 2012-12-06 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/report_formats/LaTeX/latex.xsl (escape_verb_env): Replaced this template by a single call of str:replace and therefore removed the template and replaced 3-line calls by single line direct execution. This improves performance by a few percent. 2012-12-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS for the big if share the creation of RCFILE. 2012-12-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS for the big if share the progress calculation. 2012-12-05 Hani Benhabiles <hani.benhabiles@greenbone.net> Port Report Formats to new GET style. * src/manage_sql.c (init_report_format_iterator): Follow the new GET style. (manage_report, manage_send_report, verify_report_format): Adapt to the new init_report_format_iterator. (verify_report_format): Use report_format_global instead of report_format_iterator_global (report_format_writable, trash_report_format_writable): Base result on return value of report_format_global, too. (report_format_iterator_extension, report_format_iterator_content_type) (report_format_iterator_summary, report_format_iterator_description) (report_format_iterator_signature, report_format_iterator_trust) (report_format_iterator_trust_time, report_format_iterator_active): Use GET_ITERATOR_COLUMN_COUNT as base value. (report_format_iterator_global): Remove unused function. * src/manage.h: Change and remove headers accordingly. * src/omp.c (get_report_formats_data_t): Add get_data_t element. Remove sort_field, sort_order, report_format_id and trash. (get_report_formats_data_reset): Adapt to new get_report_formats_data_t. (omp_xml_handle_start_element): Follow new style for GET_REPORT_FORMATS. (omp_xml_handle_end_element): Adapt GET_REPORT_FORMATS case for new init_report_format_iterator. Send params and file element when details attribute is set. 2012-12-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS for the big if share common variables. 2012-12-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS wrap the big if in a block so that common cases can be shared. 2012-12-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS check the return from init_task_iterator. 2012-12-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS remove the block that was used for the initial param check else case, indenting the contents in the parent block. 2012-12-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS give the initial param check its own return, to remove the need for the else block. 2012-12-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS remove the task find, because the iterator init does that now. 2012-12-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS rename variable "task" to "index" in the detailed case, to match the brief case. 2012-12-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS move iterator init up and check get.id instead of task. 2012-12-05 Michael Wiegand <michael.wiegand@greenbone.net> * src/report_formats/create_signatures: Add quoting in case the RFP name contains a space. 2012-12-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage): Reset 65536 in port ranges to 65535. 2012-12-04 Hani Benhabiles <hani.benhabiles@greenbone.net> Update modification_time value for Report Formats accordingly. * src/manage_sql.c (update_report_format_uuid, set_report_format_name) (set_report_format_active, set_report_format_summary): Update modification_time column to current time. 2012-12-04 Hani Benhabiles <hani.benhabiles@greenbone.net> Add Report Format in_use, writable and count functions and other defines. * src/manage_sql.c (trash_report_format_in_use, report_format_in_use) (report_format_writable, report_format_count) (trash_report_format_writable): New Functions. (REPORT_FORMAT_ITERATOR_FILTER_COLUMNS, REPORT_FORMAT_ITERATOR_COLUMNS) (REPORT_FORMAT_ITERATOR_TRASH_COLUMNS): New defines. * src/manage.h: Add headers accordingly. 2012-12-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (make_task_complete): New function. * src/manage_sql.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): Call make_task_complete on success so that any alert runs for the status change to New. 2012-12-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (modify_schedule): Also use the duration string in the SQL when the duration is 0. * src/omp.c (omp_xml_handle_end_element): In CREATE_SCHEDULE and MODIFY_SCHEDULE adjust the period/duration error checks to be less than -1 because -1 indicates that the period/duration was NULL. 2012-12-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (modify_filter): Lowercase the type so that it is always lowercase in the db and in GET_FILTERS. 2012-12-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (type_db_name): Remove stray semicolon that was causing SecInfo to be the default. 2012-12-04 Andre Heinecke <andre.heinecke@greenbone.net> * report_formats/verinice-ism/classification.xsl: Classify cpe:/o:microsoft:windows as gsm_system_windows_unknown 2012-12-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_SCHEDULES when trying to convert to the simple intervals, drop the assumption that the number of units is smaller than the size of the next higher unit. This caters for values like 36 hours, now that the GSA allows this to be input. 2012-12-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (interval_from_strings): Ensure that value fits in an integer. (omp_xml_handle_end_element): In CREATE_SCHEDULE and EDIT_SCHEDULE add checks for new interval out-of-range returns. 2012-12-02 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (create_tables): Added missing creation and modification columns. 2012-12-02 Hani Benhabiles <hani.benhabiles@greenbone.net> Migrate Database to version 69, adding creation and modification time to Report formats. * src/manage_sql.c (migrate_68_to_69): New function. (database_migrators): Add migrate_68_to_69. (init_manage, create_format_report, delete_format_report) (manage_resotre): Insert and update creation and modification times in report_format and report_formats_trash accordingly. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 69. 2012-11-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (run_status_name_internal): New function. * src/manage_sql.h: Add header accordingly. * src/manage_sql.c (event): Compare with unique run status name, else the waiting states are considered as events. 2012-11-29 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Also send trust state and trust time with installer for get agents case. 2012-11-29 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/omp.c (omp_xml_handle_end_element): for CLIENT_GET_AGENTS case, agent installer is returned too when details attribute is set. Also repeated call to SEND_GET_COMMON in all switch cases has been refactored. 2012-11-29 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (init_schedule_task_iterator) (init_slave_task_iterator): Reverted prior change so that the name of tasks using them are returned ordered by name. Also added check for user credentials. 2012-11-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (cleanup_manage_process): Add a warning on close failure. 2012-11-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (type_pretty_name): Make the default "" instead of NULL because caller prints it directly. 2012-11-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (type_pretty_name): Remove stray semicolon that was causing SecInfo to be the default. 2012-11-28 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c, src/manage.h (slave_in_use): Now checks for tasks using the slave independently of their location. 2012-11-28 Hani Benhabiles <hani.benhabiles@greenbone.net> Migrate Slave object to the new GET style object management. * src/manage_sql.c, src/manage.h (slave_count, slave_writable) (trash_slave_writable): New functions. (init_slave_iterator): Interface changed to take two parameters instead of Three. Code refactored to take advantage of new defines. (init_slave_task_iterator): Interface changed to take Two parameters instead of Five. Code refactored to use new defines. * src/manage_sql.c (SLAVE_ITERATOR_FILTER_COLUMNS) (SLAVE_ITERATOR_COLUMNS, SLAVE_ITERATOR_TRASH_COLUMNS): new defines. (slave_task_iterator_name): Column number value changed to Two. (slave_iterator_host,slave_iterator_port,slave_iterator_login) (slae_iterator_password): Now use GET_ITERATOR_COLUMN_COUNT accordingly. * src/omp.c (get_slaves_data_t): Now has two elements. get and task. (get_slaves_data_reset): Adapted to the modified get_slaves_data_t. (omp_xml_handle_start_element): Refactored CLIENT_GET_SLAVES case to use new GET style and refactored slave iterator. Added count and filter support. 2012-11-27 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (modify_filter, modify_slave): Consistently sql_quote() for quoted variables. 2012-11-27 Hani Benhabiles <hani.benhabiles@greenbone.net> Adding support for slave cloning. * src/omp.c (create_slave_data_t): Added copy member. (client_state_t): Added CLINET_CREATE_SLAVE_COPY state. (omp_xml_handle_start_element): Added slave copy case handling. (omp_xml_handle_end_element): Added handling for slave copying in slave creation case. (omp_xml_handle_text): Added CLIENT_CREATE_SLAVE_COPY value handling. 2012-11-27 Hani Benhabiles <hani.benhabiles@greenbone.net> Adding support for editing a slave. * src/omp.c (omp_command): Added MODIFY_SLAVE command. (modify_slave_data_t): New data structure. (modify_slave_data_reset): New function. (command_data_t): Added modify_slave. (client_state_t): Added states for modify slave. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Added slave modification handling. 2012-11-27 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage.h, src/manage_sql.c (modify_slave): New function. 2012-11-27 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (create_slave, delete_slave): creation_time and modification_time are modified appropriately. 2012-11-27 Hani Benhabiles <hani.benhabiles@greenbone.net> Migrate Database to version 68 to add modification_time and creation_time to slaves. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 68. * src/manage_sql.c (migrate_67_to_68): New function. (database_migrators): Add migrate_67_to_68. (manage_restore): Add slave creation_time and modification_time columns. 2012-11-26 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (find_target, find_schedule, find_slave): Code refactored to use find_resource function. 2012-11-26 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (copy_slave): New function. (copy_schedule): Fixed documentation. 2012-11-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (task_schedule_next_time_tz): Clear the get structure, to ensure that all fields are initialised, especially filt_id, which is used in init_get_iterator via init_schedule_iterator. 2012-11-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (type_db_name): Add NULL check, else filter ops segfault when type is --. 2012-11-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (CVE_INFO_ITERATOR_FILTER_COLUMNS) (CVE_INFO_ITERATOR_COLUMNS, CPE_INFO_ITERATOR_FILTER_COLUMNS) (CPE_INFO_ITERATOR_COLUMNS): Move onto SCAP page. 2012-11-23 Hani Benhabiles <hani.benhabiles@greenbone.net> * ChangeLog: Detailed previous commit. * src/omp.c (omp_xml_handle_end_element): Moved variables declarations to be consistent with the coding style. 2012-11-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_get_iterator): Make the current_credentials assertion more accurate. (init_task_iterator): Use init_get_iterator in both cases, so that the same columns are used. 2012-11-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (task_iterator_task, task_iterator_uuid): Remove, there are GET iterator accessors to do this now. (task_iterator_run_status): Adjust column for GET change. (init_manage, delete_trash_tasks): Use generic accessors for task iterator. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TASKS use generic accessors for task iterator. 2012-11-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_task_iterator): Ensure that hidden tasks are hidden but that it is possible to select the Example Task. 2012-11-22 Matthew Mundell <matthew.mundell@greenbone.net> Get tasks trash working with new style changes. * src/manage_sql.c (type_trash_in_table): New function. (init_user_get_iterator, init_get_iterator): Use the main tasks table for the trash cases too. In the all trash iterator, include the extra WHERE clauses if given. (init_user_task_iterator): Move below column defines. Use GET iterator. Reduce number of args. Adjust caller. (schedule_iterator_first_time, schedule_iterator_period) (schedule_iterator_period_months): Flush trailing whitespace. 2012-11-22 Hani Benhabiles <hani.benhabiles@greenbone.net> Switching Schedules to the New Object Management. * src/manage.h, src/manage_sql.c (init_schedule_iterator): Code refactored. Now takes two parameters (iterator and get) instead of five. Also returns an integer value to reflect the success of the operation. Updated to use init_get_iterator. * src/manage_sql.c (task_schedule_next_by_tz): Updated to use the new init_schedule_iterator. (schedule_iterator_first_time, schedule_iterator_next_time) (schedule_iterator_period, schedule_iterator_period_months) (schedule_iterator_duration, schedule_iterator_timezone) (schedule_iterator_initial_offset): Updated to use GET_ITERATOR_COLUMN_COUNT. (schedule_iterator_next_time): Removed repetitive schedule_iterator_first_time calls. The check for period's value is now applied after the comparaison between the first and current time's values. (modify_schedule): Added check for when period_months equals zero. * src/omp.c (create_schedule_data_t): Added copy element for cloning. (get_schedules_data_t): Now has two elements: get_data_t get and int tasks. (get_schedules_data_reset): Updated for the get_schedules_data_t change. (client_state_t): Added CLIENT_CREATE_SCHEDULE_COPY. (omp_xml_handle_start_element): Updated GET_SCHEDULES and CLIENT_CREATE_SCHEDULE. (buffer_schedules_xml): Function removed. (omp_xml_handle_end_element): Updated CLIENT_GET_SCHEDULES to reflect schedules management changes and new schedule cloning feature. 2012-11-22 Matthew Mundell <matthew.mundell@greenbone.net> Switch much of GET_TASKS to the new GET style. As a requirement move many functions in manage_sql.c to better sections. * src/manage_sql.c (vector_find_string): Move up to General Helpers. (keyword_type_t, keyword_relation_t, struct keyword, keyword_t) (keyword_free, parse_keyword, keyword_applies, filter_free) (split_filter, manage_filter_controls, filter_control_int) (filter_control_str, manage_report_filter_controls, append_relation) (manage_clean_filter, get_join, filter_clause): Move up to new page Filter Utilities. (ANON_GET_ITERATOR_FILTER_COLUMNS, GET_ITERATOR_FILTER_COLUMNS) (ANON_GET_ITERATOR_COLUMNS, GET_ITERATOR_COLUMNS) (GET_ITERATOR_COLUMN_COUNT): Move up to Resources. (type_has_users): New function. (init_user_get_iterator, init_get_iterator): Move up to Resources. (TASK_ITERATOR_FILTER_COLUMNS, TASK_ITERATOR_COLUMNS) (TASK_ITERATOR_TRASH_COLUMNS): New defines. (init_task_iterator): Switch to GET arg and use init_get_iterator. (task_in_use, trash_task_in_use, task_writable) (trash_task_writable): New functions. (init_manage): Pass init_task_iterator args via GET struct. * src/manage.h: Update headers accordingly. * src/omp.c (get_tasks_data_t, get_tasks_data_reset): Switch to GET field. (omp_xml_handle_start_element): Parse GET_TASKS GET field. (omp_xml_handle_end_element): IN CLIENT_GET_TASKS use the GET field and SEND_GET_COMMON. 2012-11-22 Matthew Mundell <matthew.mundell@greenbone.net> Add creation and modification times to tasks. Hence increase database version to 67. Add database migration from version 66 to 67. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 67. * src/manage_sql.c (create_tables): Add time fields to task. (migrate_66_to_67): New function. (database_migrators): Add migrate_66_to_67. (append_to_task_string, init_manage, task_config_in_trash, task_target) (task_slave, set_task_description, task_start_time, set_task_start_time) (set_task_schedule, set_task_parameter, set_task_parameter): Update task modification time. (make_task): Set task modification time. (copy_task): Enable time code. (manage_task_update_file, manage_task_remove_file) (set_task_preferences): Update task preferences. * doc/db.png: Update for version changes. 2012-11-21 Matthew Mundell <matthew.mundell@greenbone.net> Add COPY to OMP CREATE_TASK, for cloning. * src/manage_sql.c (copy_task): New function. * src/manage.h: Update header accordingly. * src/manage_sql.c (create_task_data_t, create_task_data_reset) (client_state_t): Add CREATE_TASK copy. (send_get_end): Remove the task in the create_task case, because it is created early. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add CREATE_TASK/COPY. 2012-11-21 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c (manage_restore): Restore creation_time and modification_time too. 2012-11-21 Hani Benhabiles <hani.benhabiles@greenbone.net> Add modification_time and creation_time to schedules. Fixed indentation from previous commit. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 66, for adding creation_time and modification_time columns to schedules and schedules_trash tables. * src/manage_sql.c (modify_schedule): modification_time is updated too. (create_schedule): creation_time and modification_time are inserted and deleted too. (delete_schedule): creation_time and modification_time are inserted too when moving the schedule to the trash. (schedule_writable, schedule_in_use, SCHEDULE_ITERATOR_FILTER_COLUMNS) (SCHEDULE_ITERATOR_TRASH_COLUMNS): Fixed indentation. 2012-11-21 Hani Benhabiles <hani.benhabiles@greenbone.net> * src/manage_sql.c src/manage.h (schedule_copy, schedule_count) (schedule_writable, schedule_in_use, trash_schedule_writable) (trash_schedule_in_use): New functions. 2012-11-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (modify_filter): Ensure type name is db style. 2012-11-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (type_pretty_name, type_db_name): New functions. (create_filter): Ensure type name is db style. (filter_iterator_type): Return pretty version of type name. 2012-11-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (valid_type): Add report_format. 2012-11-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (client_state_t): Add NVT FAMILY. (omp_xml_handle_start_element, omp_xml_handle_end_element): Parse FAMILY in CREATE_REPORT RESULT/NVT. 2012-11-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (filter_clause): Compare text with = instead of IS in SQL, because Sqlite3 only accepts text as rvalue of IS from 3.6.19. 2012-11-16 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db.png: Update for version change. 2012-11-16 Matthew Mundell <matthew.mundell@greenbone.net> Set the report on the result when adding a result to a report. Add a migrator to set the report in all existing results. Hence increase database version to 65. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 65. * src/manage_sql.c (migrate_64_to_65): New function. (database_migrators): Add migrate_64_to_65. (init_manage, create_report): Use report_add_result to add result. (report_add_result): Set report on result. 2012-11-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (manage_run_wizard): Allocate empty string because it will be freed. 2012-11-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c (CLIENT_TIMEOUT): Remove. (serve_omp): Remove client timeout, because the current implementation causes the client to timeout right at the end of very long operations, like getting big reports. 2012-11-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Remove prefix arg. Update callers. (manage_send_report): Send the prefix by hand instead of passing it to print_report_xml. This is required because the prefix is part of the XML that wraps the formatted report, which may be base64 encoded. 2012-11-14 Matthew Mundell <matthew.mundell@greenbone.net> Mimic the new powerfilter "match entire column" term in the report filter. * src/manage_sql.c (where_search_phrase): Add exact arg. (init_result_iterator, report_scan_result_count, report_counts_match) (report_count_filtered, report_counts_id_filt): Add search_phrase_exact arg. Update callers. (report_filter_term): Quote phrase. Prepend = if exact. Add 1 to first_result for 1 indexing. (print_report_xml): Add search_phrase_exact handling. (split_filter): For quotes, check for the exact case too. (manage_report_filter_controls): Add search_phrase_exact arg. Switch first to 0 indexing. Default max to 100 instead of all. * src/manage.h: Update headers accordingly. * src/omp.c (buffer_notes_xml, omp_xml_handle_end_element): Update init_result_iterator call. 2012-11-14 Andre Heinecke <andre.heinecke@greenbone.net> * report_formats/verinice-ism/classification_generator.sh: Allow semicolon seperated files. * report_formats/verinice-ism/classification.xsl: Use more generic tags * report_formats/verinice-ism/create_report_import: Increase Version number and fix broken filename. 2012-11-13 Matthew Mundell <matthew.mundell@greenbone.net> In a powerfilter if a term begins with =, then match term entirely instead of as a substring. * src/manage_sql.c (struct keyword): Add equal flag. (split_filter): Flag keywords that have leading =. (manage_clean_filter): Add leading equal if flag set. (filter_clause): Add case for exact term match. 2012-11-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (task_threat_level, task_previous_threat_level) (init_result_iterator, init_asset_iterator, report_scan_result_count) (filtered_host_count): Use coalesce instead of CASE, if only to make the resulting SQL more readable. 2012-11-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (where_levels): Use IN instead of multiple comparisons. It's neater, and apparently allows for an index to be used. 2012-11-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (mainpage): Remove ref to test code. 2012-11-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c, src/omp.c, src/sql.c: Clean up doc @params. 2012-11-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (parse_keyword): Add actual months instead of fixed approximations. 2012-11-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (parse_keyword): Add relative dates, like -7d for 7 days ago. 2012-11-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/sql.c (sqlv): Retry a few times before giving up, to prevent the function from giving up every time. 2012-11-13 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * tools/openvas-scapdata-sync.in, tools/greenbone-scapdata-sync: Consistently use variable name SCAP_RES_DIR. 2012-11-13 Andre Heinecke <aheinecke@intevation.de> Add SCAP DB Migration for new CVE info * tools/openvas-scapdata-sync.in, tools/greenbone-scapdata-sync (check_db_version): Migrate to 4 instead of reinitializing. (migrate_3): Readded. (migrate_4): New. Migrate to database version 4 * tools/migrate_db4.xsl: New. Add new CVSS information to CVE table * CMakeLists.txt: Install migrate_db4.xsl 2012-11-13 Andre Heinecke <andre.heinecke@greenbone.net> Add iterable and filterable get_info for CVE * src/manage_sql.c (CVE_INFO_ITERATOR_FILTER_COLUMNS) (CVE_INFO_ITERATOR_COLUMNS): New Defines. (cve_info_count): New. Count cve_info elements. (init_cve_info_iterator): New. Initialize cve_info iterator. (cve_info_iterator_vector, cve_info_iterator_complexity) (cve_info_iterator_authentication) (cve_info_iterator_confidentiality_impact) (cve_info_iterator_integrity_impact) (cve_info_iterator_availability_impact) (cve_info_iterator_products, cve_info_iterator_cvss) (cve_info_iterator_description): New. Accessors to cve_info columns. Updated header accordingly. * src/manage.c (CPE_GETBYNAME_XSL, CPE_DICT_FILENAME): Readded defines for direct CPE access. (get_cpe_filename): Readded. (manage_read_info): Add support for cpe again. Reduce result to only untampered raw data for CVE and CPE. * src/manage.h (manage_scap_update_time): Add prototype to header * src/omp.c (omp_xml_handle_end_element): Iterator based support for CVE. Add raw_data to get_info_result if details are requested. Add update_time elment to get_info responses. * src/schema_formats/XML/OMP.xml: Update documentation of get_info * tools/cve_update.xsl (cve:entry): Add more information to the database. * tools/db_init.sql (meta): Increase scap database version to 4 (cves): Add vector, complexity, authentication, confidentiality_impact, integrity_impact, availability_impact and products column * tools/openvas-scapdata-sync.in, tools/greenbone-scapdata-sync (check_db_version): Reinitialize versions older then 4. (migrate_3): Removed. * doc/omp.html, doc/omp.rnc: Update from source. 2012-11-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (cache_report_counts): New function. Body from report_counts_id_filt. Use sql_giveup to run the SQL because it seems that demanding a lock for the UPDATE can deadlock if another process does a write. (report_counts_id_filt): Call cache_report_counts to cache the counts. * src/sql.c (sqlv): New function. Body from sql. (sql): Call through to sqlv. (sql_giveup): New function. Like sql but gives up if database locked or busy. * src/sql.h: Add header accordingly. 2012-11-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (override_count, init_override_iterator): Rework the SQL of the task case to take advantage of the new results.report column and to select within the statement instead of joining. This greatly improves the performance of GET_OVERRIDES with a task_id when the database is large. 2012-11-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (note_count, init_note_iterator): Rework the SQL of the task case to take advantage of the new results.report column and to select within the statement instead of joining. This greatly improves the performance of GET_NOTES with a task_id when the database is large. 2012-11-09 Matthew Mundell <matthew.mundell@greenbone.net> Account for nvt and task in GET_OVERRIDES count, and handle the GET_OVERRIDES task_id filter term correctly. * src/manage_sql.c (OVERRIDE_ITERATOR_FILTER_COLUMNS): Remove task_id because it is now handled specially. (override_count): Add nvt, result and task args so that the count takes these into account, just like init_override_iterator. Add special handling of task_id in the filter because it's more complex than just a column match. (init_override_iterator): Add special handling of task_id in the filter because it's more complex than just a column match. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): Add nvt and task args to override_count in GET_OVERRIDES. 2012-11-09 Andre Heinecke <aheinecke@intevation.de> Version 1.1.5 of verinice ISM export * report_formats/verinice-ism/classification-helpers.xsl, report_formats/verinice-itg/classification-helpers.xsl: Moved classification helpers file into itg. * report_formats/verinice-itg/create_report_import: Update Path of classification-helpers.xsl file * report_formats/verinice-ism/classification_generator.sh: Remove check for detail name. Fix syntax errors. * report_formats/verinice-ism/gsm_verinice_ism.xsl: Include generated classifcation.xsl (extract_organization): New. Copied from classification-helpers (report/host_start): Only generate tags based on best_os_cpe, set gsm_ism_asset_type (syncMapping): Add gsm_ism_asset_type, change from samt_topic to control (create_links): Change releation from samt_topic_incident_scenario to rel_control_incsen * report_formats/verinice-ism/classification.xsl: New. generated from classification.csv * report_formats/verinice-ism/create_report_import.xsl: Update Version number, include classification.xsl 2012-11-08 Matthew Mundell <matthew.mundell@greenbone.net> Account for nvt and task in GET_NOTES count, and handle the GET_NOTES task_id filter term correctly. * src/manage_sql.c (count): Add args to give caller more control of SQL, as in init_get_iterator. Update callers. (NOTE_ITERATOR_FILTER_COLUMNS): Remove task_id because it is now handled specially. (note_count): Add nvt, result and task args so that the count takes these into account, just like init_note_iterator. Add special handling of task_id in the filter because it's more complex than just a column match. (init_note_iterator): Add special handling of task_id in the filter because it's more complex than just a column match. (filter_term_value): New function. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_end_element): Add nvt and task args to note_count in GET_NOTES. 2012-11-08 Andre Heinecke <andre.heinecke@greenbone.net> * report_formats/verinice-ism/classification_generator.sh: New. Generator to create XSL helper template for verinice system tags from a csv file. * report_formats/verinice-ism/classification.csv: New. CSV File containting CPE's and tags for verinice ism 2012-11-07 Hani Benhabiles <hani.benhabiles@greenbone.net> * tools/openvas-scapdata-sync: Added command-line options --describe and --feedversion as well as needed variables. 2012-11-07 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * tools/greenbone-scapdata-sync: Add command line option --selftest and moved command lin eparsing to bottom. 2012-11-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (create_override, create_target): Add COPY. (delete_note, delete_override): Add attribute ultimate. (get_notes, get_overrides): Add new-style filter attributes and response elements. * doc/omp.html, doc/omp.rnc: Update from source. 2012-11-06 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (results): Add report. (overrides_trash): New table. * doc/db.png: Update from source. 2012-11-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (filter_clause): Add name special case for overrides as for notes. 2012-11-06 Matthew Mundell <matthew.mundell@greenbone.net> Add trashcan feature to overrides. * src/omp.c (delete_override_data_reset): Add ultimate. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add ultimate flag to DELETE_OVERRIDE. * src/manage_sql.c (create_tables): Add overrides_trash. (delete_override): Add ultimate arg and trashcan handling. (OVERRIDE_ITERATOR_TRASH_COLUMNS): Explicitly specify columns. (manage_restore): Add overrides. * src/manage.h: Update header accordingly. 2012-11-06 Matthew Mundell <matthew.mundell@greenbone.net> Add COPY to CREATE_OVERRIDE for cloning. * src/manage_sql.c (copy_override): New function. * src/manage.h: Add header accordingly. * src/omp.c (create_override_data_t, create_override_data_reset): Add copy. (client_state_t): Add CLIENT_CREATE_OVERRIDE_COPY. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add COPY to CREATE_OVERRIDE. 2012-11-06 Matthew Mundell <matthew.mundell@greenbone.net> Add filtering to GET_OVERRIDES. * src/manage_sql.c (OVERRIDE_COLUMNS): Remove. (OVERRIDE_ITERATOR_FILTER_COLUMNS, OVERRIDE_ITERATOR_COLUMNS) (OVERRIDE_ITERATOR_TRASH_COLUMNS): New defines. (override_count): New function. (init_override_iterator): Update to new GET style with filter, leaving certain override-specific "filtering" params. Adjust all accessors accordingly. (override_iterator_creation_time) (override_iterator_modification_time): Remove * src/manage.h: Update headers accordingly. * src/omp.c (get_overrides_data_t): Switch to generic GET arg. (omp_xml_handle_start_element): Parse generic GET data in GET_OVERRIDES. (buffer_overrides_xml): Add standard GET elements. Add count return. (buffer_result_overrides_xml, omp_xml_handle_end_element): Pass generic GET arg to iterator. 2012-11-05 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number to 4.0+beta5. 2012-11-05 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 4.0+beta4 release. * CHANGES: Updated. * doc/CMakeLists.txt: Update forgotten command to work with out-of-source builds. 2012-11-04 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * tools/greenbone-scapdata-sync: Added command line options --identify, --describe and --feedversion. 2012-11-02 Andre Heinecke <andre.heinecke@greenbone.net> * src/manage_sql.c (send_to_verinice, send_to_sourcefire): Do proper quoting. 2012-11-02 Andre Heinecke <aheinecke@intevation.de> * src/manage_sql.c (send_to_verinice): Correct parameter count in command. 2012-11-02 Andre Heinecke <aheinecke@intevation.de> * src/manage_sql.c (escalate_2): Create verinice archive with verinice-ism and send it with send_to_verinice. (send_to_verinice): Change parameters to be an url and an archive file instead of ip port and report. Fix call of the connector. 2012-11-02 Andre Heinecke <aheinecke@intevation.de> * src/manage_sql.c (manage_report): Initialize get structure 2012-11-02 Michael Wiegand <michael.wiegand@greenbone.net> * src/manage_sql.c (send_to_verinice, send_to_sourcefire): Sanitize parameters before they reach the shell. 2012-11-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (buffer_notes_xml): Make in_use 0 so that notes can be moved to the trashcan. 2012-11-02 Michael Wiegand <michael.wiegand@greenbone.net> * src/manage_sql.c (send_to_verinice, send_to_sourcefire): Add quotes to preserve space where appropriate. 2012-11-02 Michael Wiegand <michael.wiegand@greenbone.net> * src/manage_sql.c (send_to_verinice, send_to_sourcefire): Drop privileges when run as root. 2012-11-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (append_relation, manage_clean_filter): Preserve quotation of keywords. 2012-11-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_asset_iterator, filtered_host_count): In the "Text phrase" case, move the phrase filtering out to happen after the host selection, as in the old slower SQL. 2012-11-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_asset_iterator, filtered_host_count): Rework SQL of "Text phrase" case, to take advantage of the new results report column and index. For the count add report status check and in_assets check. 2012-11-02 Matthew Mundell <matthew.mundell@greenbone.net> Improve performance of the simple case of the Assets report. Hence increase database version to 64. Add database migration from version 63 to 64. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 64. * src/manage_sql.c (create_tables): Add report to results. Add index results_by_report_host. (migrate_63_to_64): New function. (database_migrators): Add migrate_63_to_64. (init_asset_iterator, filtered_host_count): Rework SQL of most common case, to take advantage of the new results report column and index. For the count add report status check and in_assets check. 2012-11-02 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/manage_sql.c (filter_clause): Let empty keywords match NULL. This patch was developed by Matthew Mundell. 2012-11-01 Michael Wiegand <michael.wiegand@greenbone.net> * CHANGES: Updated. 2012-11-01 Michael Wiegand <michael.wiegand@greenbone.net> * INSTALL: Update for out-of-source builds, update openvas-libraries dependency, mention verinice .PRO connector, replace "escalator" with "alert". 2012-11-01 Michael Wiegand <michael.wiegand@greenbone.net> Update targets for out-of-source builds. * doc/CMakeLists.txt: Update commands and targets to work with out-of-source builds. * doc/Doxyfile.in: Updated to work with out-of-source builds, harmonized with other modules. * doc/Doxyfile_full.in: Harmonized with Doxyfile.in. * src/CMakeLists.txt: Ensure that the target "splint", "rats", "flawfinder", "etags" and "ctags" work with out-of-source builds. 2012-11-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (modify_schedule): When intervals are -1 retain the existing value, instead of when intervals are 0. This allows setting the value to 0. * src/omp.c (time_from_strings): Return -1 if value was NULL and -2 on error. Adjust callers. 2012-11-01 Michael Wiegand <michael.wiegand@greenbone.net> Add support for sending alerts to a verinice .PRO server. * src/manage.h: Introduce ALERT_METHOD_VERINICE. * src/manage.c (alert_method_name, alert_method_from_name): Add support for ALERT_METHOD_VERINICE. * src/manage_sql.c (send_to_verinice): New function. (escalate_2): Add new case for ALERT_METHOD_VERINICE. * src/alert_methods/verinice/alert: New. * CMakeLists.txt: Ensure alert script is installed. 2012-10-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (modify_schedule): Update task next time too. 2012-10-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (slave_system_report): Request duration too, by using omp_get_system_reports_ext. 2012-10-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (modify_schedule): New command. (get_schedules): Add SIMPLE_PERIOD and SIMPLE_DURATION. * doc/omp.html, doc/omp.rnc: Update from source. 2012-10-30 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP MODIFY_SCHEDULE. * src/manage_sql.c (modify_schedule): New function. * src/manage.h: Add header accordingly. * src/omp.c (time_from_strings): Add timezone arg. Update caller. (omp_commands, command_data_t): Add modify_schedule. (modify_schedule_data_t): New type. (modify_schedule_data_reset): New function. (modify_schedule_data): New variable. (client_state_t): Add MODIFY_SCHEDULE states. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add MODIFY_SCHEDULE. (buffer_schedules_xml): Add SIMPLE_DURATION and SIMPLE_PERIOD to SCHEDULE to make it easier for basic clients to figure out the values and units. 2012-10-29 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * CMakeLists.txt: Increase dependency of openvas-libraries from 5.0.0 to 6.0.0. * INSTALL: Drop Debian 5, updated pre-requisites. 2012-10-29 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * CHANGES: Prepared for the next beta release. 2012-10-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (get_schedule): Add TIMEZONE. * doc/omp.html, doc/omp.rnc: Update from source. 2012-10-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (buffer_schedules_xml): Skip the timezone adjustment when the schedule is over. 2012-10-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (buffer_schedules_xml): Use time_offset instead of current_offset for first_time because first_time may be the other side of a DST changeover. (omp_xml_handle_end_element): For GET_TASKS get schdule next_time with task_schedule_next_time_tz so that it follows the schedule's timezone. * src/manage_sql.c (task_schedule_next_time): Remove. (task_schedule_next_time_tz): New function. (task_schedule_iterator_stop_due): Account for schedule's timezone. * src/manage.h: Update headers accordingly. 2012-10-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (iso_time_tz, time_offset): New functions. (init_schedule_iterator): Add timezone and initial_offset. (schedule_iterator_timezone, schedule_iterator_initial_offset): New functions. (schedule_iterator_in_use): Adjust column number accordingly. * src/manage.h: Add headers accordingly. * src/omp.c (buffer_schedules_xml): Add TIMEZONE to SCHEDULE. Adjust next time for daylight saving. 2012-10-25 Matthew Mundell <matthew.mundell@greenbone.net> Handle daylight saving in schedules. Hence increase database version to 63. Add database migration from version 62 to 63. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 63. * src/manage_sql.c (current_offset): New function. (create_tables): Add timezone and offset columns to schedules. (migrate_62_to_63): New function. (database_migrators): Add migrate_62_to_63. (init_manage_process): Init current_offset. (create_schedule): Init timezone and offset according to user's current timezone. (delete_schedule, manage_restore): Add new schedule columns. (init_task_schedule_iterator): Add owner and new schedule columns. (task_schedule_iterator_owner, task_schedule_iterator_timezone) (task_schedule_iterator_initial_offset): New functions. (task_schedule_iterator_start_due): Account for daylight saving. * src/manage.c (manage_schedule): Adjust times for daylight saving. * src/sql.c (sql_current_offset): New function. * src/manage.h, src/sql.h, src/manage_sql.h: Add headers accordingly. * doc/db_postgres.sql (schedules): Add fields. * doc/db.png: Update from source. 2012-10-25 Andre Heinecke <aheinecke@intevation.de> Use Epoch date instead of ISO date in scap.db * tools/openvas-scapdata-sync.in, tools/greenbone-scapdata-sync (migrate_3): New. (migrate_to_2, reinit): Renamed migrate_to_2 to reinit. (check_db_version): Migrate from 2 to 3. * tools/db_init.sql: Bump Version number to 3 * tools/cve_update.xsl (cve:entry): Call strftime to insert times in epoch format. Consistently use single single quotes in sql statements. * tools/cpe_update.xsl (cpe:cpe-item): Use strftime to insert times in epoch format. * src/manage_sql.c (CPE_INFO_ITERATOR_COLUMNS): Use generic GET_ITERATOR_COLUMNS together with the specific columns. 2012-10-25 Andre Heinecke <aheinecke@intevation.de> * src/omp.c (omp_xml_handle_end_element): Check for manage_scap_loaded and send an error similiar to the one from prognostic reports otherwise. Reset get_info_data and break correctly when errors are detected. 2012-10-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (run_slave_task): Create target with omp_create_target_ext in order to specify port list. 2012-10-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Add prefix arg. Print it just before first part of report. Change filter_term error to 2. Update callers. (manage_send_report): Pass prefix to print_report_xml and check for 2 return. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In GET_REPORTS for the standard scan report when there is a single report let manage_send_report handle the report heading. This allows detection of the filter_term error before anything is sent to the client, and so the connection can stay open when this error occurs. 2012-10-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Allocate levels in fallback case, as it is now allocated in the filter cases. 2012-10-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Correct command name in GET_AGENTS error response. 2012-10-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (filter_clause): Add trash arg. Use notes_trash table if set. Update callers. 2012-10-19 Andre Heinecke <aheinecke@intevation.de> Readd description to the CVE table * src/manage_sql.c (prognosis_where_search_phrase), (init_host_prognosis_iterator): Uncomment cves.description again. * tools/openvas-scapdata-sync.in, tools/greenbone-scapdata-sync (check_db_version): Handle Version 1. Correct column name of database_version. (migrate_to_2): New. Just reinitializes the database. (migrate_0_to_1): Removed. (update_sec_db): Do not delete database if refdate is empty. * tools/greenbone-scapdata-sync: Update script Version. * tools/db_init.sql: Change DB version to 2. (cves): Add description column. * tools/cve_update.xsl (cve:entry): Insert description. 2012-10-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.h (iterator_t): Add prepared flag. * src/sql.c (sql_double, sql_prepare, init_prepared_iterator): New functions. (init_iterator): Clear prepared flag. (cleanup_iterator): Skip finalize if prepared. * src/sql.h: Add headers accordingly. * src/manage_sql.c (cpe_highest_cvss): New function. (init_prognosis_iterator): Prepare the iterator statement once per process instead of every time. (prognosis_where_search_phrase, init_host_prognosis_iterator): Comment out cves.description for now. (print_report_xml): Only print the CVEs of the App when the details flag is given. Get the highest CVSS of a CVE from the SCAP db instead of computing it. These two combine to make the GSA Host Assets Table much faster. Print the host prognosis once instead of for every detail. 2012-10-18 Matthew Mundell <matthew.mundell@greenbone.net> * tools/openvas-scapdata-sync (SQLITE): New variable. Replace all calls to sqlite3 with this, to override the users header config. (update_sec_db): Quotes variables in condition for empty string test. Replace log_write with echo, log_write is for greenbone-scapdata-sync. 2012-10-17 Matthew Mundell <matthew.mundell@greenbone.net> Add simple report count caching. Hence increase database version to 62. Add database migration from version 61 to 62. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 62. * src/manage_sql.c (create_tables): Add cache columns to reports. (migrate_61_to_62): New function. (database_migrators): Add migrate_61_to_62. (init_manage, make_report): Init report cache columns. (reports_clear_count_cache, report_cache_counts): New functions. (set_scan_end_time_otp): Cache report counts. (report_counts_id_filt): In the "all" case try to read the counts from the cache, and store counts in cache after counting. (create_override, modify_override): Clear cached override counts in report. * doc/db_postgres.sql (reports): Add cache fields. * doc/db.png: Update from source. 2012-10-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In the brief GET_TASKS case take into account that the count for the older report will be reused when there are only one or two reports, and correct the name of the task variable passed to task_trend_counts. 2012-10-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (task_trend_calc, task_trend_counts): New functions. (task_trend): Call task_trend_calc. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): For the brief GET_TASKS version call task_trend_counts to get the trend, in order to save some counting. 2012-10-15 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * tools/greenbone-scapdata-sync: Fixed a wrong path. 2012-10-15 Andre Heinecke <aheinecke@intevation.de> Expand get_info for multiple info elements and implement iteratable CPE info * src/manage_sql.c (count, get_target_iterator): Add owned parameter to allow handling types without owner. Update callers. (cpe_info_count): New. Count info elements of type cpe (init_cpe_info_iterator): New. Initialize a get iterator for info of type cpe (cpe_info_iterator_title, cpe_info_iterator_status) (cpe_info_iterator_deprecated_by, cpe_info_iterator_max_cvss) (cpe_info_iterator_cve_refs): New functions to access iterator. (CPE_INFO_ITERATOR_FILTER_COLUMNS, CPE_INFO_ITERATOR_COLUMNS): New defines. (init_cpe_cve_iterator): Update column name for "cve name". (cpe_info_count): New function to count cpe info. (valid_type): Add info type * src/manage.h: Add header accordingly. * src/manage.c (get_cpe_filename): Removed. (manage_read_info): Remove old handling of CPEs. (CPE_GETBYNAME_XSL, CPE_DICT_FILENAME): Removed define. * src/omp.c (get_info_data_t): Add generic GET arg and add details value. (get_info_data_reset): Also reset the generic get_data (send_get_start, send_get_end): Do not send plural form of info (send_get_start): Send empty elements instead of (null) when an element is null. (omp_xml_handle_start_element): Parse generic GET data and details in GET_INFO (omp_xml_handle_end_element): Add iterator based handling for CPEs * src/schema_formats/XML/OMP.xml: Update get_info documentation * doc/omp.html, doc/omp.rnc: Update from source. 2012-10-15 Andre Heinecke <aheinecke@intevation.de> Allow more generic handling of SCAP Data and expand CPE/CVE info * tools/db_init.sql (meta): Add meta table for version information. (cves): Remove description but add generic data fields (cpes): Add generic data fields and additional columns (cves_delete): New. Trigger for cve deletion to correctly adopt affected_products. (affected_delete): New. Trigger to keep cached information about related cves accurate in the cpe table. * tools/greenbone-scapdata-sync, tools/openvas-scapdata-sync (migrate_0_to_1, check_db_version): New. support a versioned Database. * tools/greenbone-scapdata-sync (update_scap_db), tools/openvas-scapdata-sync (update_sec_db): Handle database version and last_updated from database. * tools/cve_update.xsl: Add statements to calculate cpe max_cvss and cve_refs values. Use new columns. * tools/cpe_update.xsl: Use new columns. Escape names and titles. 2012-10-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (manage_read_info): Append XML with xml_string_append, in case it contains special chars. 2012-10-12 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (notes_trash): New table. * doc/db.png: Update from source. 2012-10-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (create_note): Add COPY. * doc/omp.html, doc/omp.rnc: Update from source. 2012-10-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (note_count): Remove comment. Extra SQL only needed when a subset of the notes is required (like notes on a task). 2012-10-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (buffer_notes_xml): Add count arg. Update callers. Match XML to send_get_common. (buffer_result_notes_xml): Add sorting. (omp_xml_handle_end_element): Remove targets reference code. 2012-10-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Add missing return case for copy_filter, copy_note and copy_target. 2012-10-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage_process): Add database to SCAP check otherwise it always fails. 2012-10-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage_process): Check for the cves table when setting scap_loaded, to ensure that the db schema has been created. 2012-10-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (nvt_selector_plugins): Always add all settings NVTs onto plugins preference. * src/manage_sql.c (init_nvt_iterator): Add category case. Update callers. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): Update init_nvt_iterator call. 2012-10-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (split_filter): If there is a filter, make the max_return default to Rows Per Page. (filter_clause): Init max_return for safety. Add a special sorting case for notes to get the rows sorted by text as a second field. (NOTE_ITERATOR_FILTER_COLUMNS, NOTE_ITERATOR_COLUMNS): Add name so there is something to sort by in the default case. 2012-10-08 Andre Heinecke <aheinecke@intevation.de> * report_formats/verinice-itg/gsm_verinice_itg.xsl (get-details): Look for detail named MAC instead of mac_address 2012-10-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_note): Check that NVT exists. * src/omp.c (omp_xml_handle_end_element): Handle new create_note return. 2012-10-05 Andre Heinecke <aheinecke@intevation.de> Only include application Tags in itg report. * report_formats/verinice-ism/classification-helpers.xsl (detail): Rename to generate-tags add parameter to include apps * report_formats/verinice-itg/gsm_verinice_itg.xsl (/): Use extract Organization instead of the task name as general id. (report/host_start): Call generate-tags instead of matching * report_formats/verinice-ism/gsm_verinice_ism.xsl (report/host_start): Call generate-tags without parameter instead of matching the template 2012-10-05 Michael Wiegand <michael.wiegand@greenbone.net> * tools/greenbone-scapdata-sync: Improve handling of present, but empty DB files. 2012-10-04 Matthew Mundell <matthew.mundell@greenbone.net> Add trashcan feature to notes. * src/omp.c (delete_lsc_credential_data_reset): Add ultimate. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add ultimate flag to DELETE_NOTE. * src/manage_sql.c (create_tables): Add notes_trash. (delete_note): Add ultimate arg and trashcan handling. (NOTE_ITERATOR_TRASH_COLUMNS): Explicitly specify columns. (manage_restore): Add notes. * src/manage.h: Add header accordingly. 2012-10-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (NOTE_ITERATOR_COLUMNS): Add missing table to column. 2012-10-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (NOTE_ITERATOR_COLUMNS): Remove duplicates. Update accessors accordingly. * src/omp.c (buffer_notes_xml): Switch to generic accessors for common GET fields. 2012-10-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (NOTE_ITERATOR_COLUMNS): Add fake task_id column so that when the general filter clause is used there is a column to lookup. 2012-10-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (filter_clause): Exclude nvt_id from the _id handling. (ANON_GET_ITERATOR_FILTER_COLUMNS): Add nvt_id. (NOTE_ITERATOR_COLUMNS): Add special column for nvt_id. 2012-10-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (filter_clause): For an equal relation, when the column ends in "_id" then add a clause that does a UUID comparison across tables. (NOTE_ITERATOR_FILTER_COLUMNS): Add task_id to possible filter columns. 2012-10-03 Matthew Mundell <matthew.mundell@greenbone.net> Add COPY to CREATE_NOTE for cloning. * src/manage_sql.c (type_named): New function. (copy_resource): Check if type has name and comment. (copy_note): New function. * src/manage.h: Add header accordingly. * src/omp.c (create_note_data_t, create_note_data_reset): Add copy. (client_state_t): Add CLIENT_CREATE_NOTE_COPY. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add COPY to CREATE_NOTE. 2012-10-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (target_writable, trash_target_writable): Invert test. 2012-10-02 Andre Heinecke <aheinecke@intevation.de> * tools/openvas-scapdata-sync.in (update_sec_db): Correct variable name used in the CPEBASE stat call 2012-10-02 Andre Heinecke <aheinecke@intevation.de> Improve performance of latex text escaping * src/report_formats/LaTeX/latex.xsl (escape_text): Avoid uneccessary copy of the string to escape. (escape_special_chars): New. Use str:replace instead of latex-prepend-backslash (latex-prepend-backslash): Removed 2012-10-01 Matthew Mundell <matthew.mundell@greenbone.net> Add filtering to GET_NOTES. * src/manage_sql.c (ANON_GET_ITERATOR_FILTER_COLUMNS) (ANON_GET_ITERATOR_COLUMNS): New defines. (init_user_get_iterator, init_get_iterator): Give caller more SQL flexibility. Update callers. (NOTE_ITERATOR_FILTER_COLUMNS, NOTE_ITERATOR_COLUMNS) (NOTE_ITERATOR_TRASH_COLUMNS): New defines. (note_count): New function. (init_note_iterator): Update to new GET style with filter, leaving certain note-specific "filtering" params. Adjust all accessors accordingly. * src/manage.h: Update headers accordingly. (get_data_t): Add details. * src/omp.c (get_data_parse_attributes): Add details. (get_notes_data_t): Switch to generic GET arg. (omp_xml_handle_start_element): Parse generic GET data in GET_NOTES. (buffer_result_notes_xml, omp_xml_handle_end_element): Pass generic GET arg to iterator. Use correct command in CLIENT_GET_TARGETS error. 2012-10-01 Michael Wiegand <michael.wiegand@greenbone.net> * tools/openvas-scapdata-sync.in: Do not use the timestamp of $SEC_DB to decide which CPEs/CVEs to add/update. Use the timestamp of the last modified CVE in the DB instead. 2012-09-28 Michael Wiegand <michael.wiegand@greenbone.net> * report_formats/verinice-ism/create_report_import: Bump version number. 2012-09-28 Andre Heinecke <aheinecke@intevation.de> * report_formats/verinice-ism/gsm_verinice_ism.xsl (create_links): Correct relationId's * report_formats/verinice-ism/gsm_verinice_ism.xsl (get-details): Only use the hostname for the asset if available instead of hostname - ip 2012-09-27 Andre Heinecke <aheinecke@intevation.de> * report_formats/verinice-ism/generate: Use _ instead of - as the separator between Scan Name and Date for file attachment names. 2012-09-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (config_writable): Add location and hidden check as in config_in_use. (manage_set_config_preference, manage_set_config_nvts) (manage_set_config_families): Add hidden clause to "config in use" check. Thanks to Sebastien Aucouturier for pointing this out. 2012-09-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (client_state_t, omp_xml_handle_end_element): Remove spurious state. Correct command name in error message. * src/schema_formats/XML/OMP.xml: Add modify_target. * doc/omp.html, doc/omp.rnc: Update from source. 2012-09-25 Michael Wiegand <michael.wiegand@greenbone.net> * report_formats/verinice-ism/create_report_import: Bump version number. 2012-09-25 Andre Heinecke <aheinecke@intevation.de> * report_formats/verinice-ism/gsm_verinice_ism.xsl: Remove scan name from group names. 2012-09-25 Andre Heinecke <aheinecke@intevation.de> * report_formats/verinice-ism/gsm_verinice_ism.xsl: Use filename as ID. * report_formats/verinice-ism/generate: Include task name and current date in filenames for attachments. 2012-09-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_start_element): Move CREATE_AGENT and CREATE_TARGET name init to name element, to match filters. (omp_xml_handle_end_element): Check that NAME exists in CREATE_AGENT and CREATE_TARGET, as in CREATE_FILTER. 2012-09-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (modify_target): Add assertions. * src/omp.c (omp_xml_handle_end_element): In MODIFY_TARGET check for target_id and port_list_id, and add missing return case. 2012-09-21 Michael Wiegand <michael.wiegand@greenbone.net> * report_formats/verinice-ism/create_report_import: Bump version number. 2012-09-20 Matthew Mundell <matthew.mundell@greenbone.net> Serve OMP even when the scanner is down. * src/manage.c (scanner_up): New variable. (run_task, start_task, stop_task, pause_task, resume_paused_task): Check that scanner is up. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): Handle new "scanner down" returns from task commands. (scanner_is_up): New function. * src/omp.h: Add header accordingly. * src/omp.c (serve_omp): Only interact with the scanner when it is up. If the scanner init fails then set the scanner down. Loop while the initial write is interrupted, in order to tell if the connection succeeds. 2012-09-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage): Add WHERE to SQL that ensures that the the Localhost target has the right port list, otherwise all targets are set the Default port list on startup. 2012-09-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (range_compare): Treat args correctly, as pointers to array pointers. Order start ascending instead of descending. 2012-09-20 Andre Heinecke <aheinecke@intevation.de> * report_formats/verinice-ism/classification-helpers.xsl (extract_organization): Fix xpath expressions for looking up the organization name from comments. 2012-09-20 Andre Heinecke <aheinecke@intevation.de> * report_formats/verinice-ism/gsm_verinice_ism.xsl: Add gsm_ip_address field to allow easier parsing of the address in verinice 2012-09-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (create_target_data_reset): Free make_name_unique. 2012-09-19 Michael Wiegand <michael.wiegand@greenbone.net> * tools/greenbone-scapdata-sync: Do not use the timestamp of $SCAP_DB to decide which CPEs/CVEs to add/update. Use the timestamp of the last modified CVE in the DB instead. 2012-09-19 Michael Wiegand <michael.wiegand@greenbone.net> * tools/greenbone-scapdata-sync: Re-add copyright year lost in last commit, spotted by Felix Wolfsteller. 2012-09-19 Michael Wiegand <michael.wiegand@greenbone.net> * tools/greenbone-scapdata-sync: Fix script name in log entries. 2012-09-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (report): Add new filters. (create_filter, delete_filter, get_filters, modify_filter): New commands. (create_alerts, get_alerts, get_agents, get_reports): Add new filters. (get_targets): Add new filters. In examples add missing elements and make UUIDs match. (help): Add new commands. * doc/omp.html, doc/omp.rnc: Update from source. 2012-09-18 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (agents, agents_trash, targets, targets_trash): Add times. (alerts, alerts_trash): Add filters. (filters, filters_trash, settings): New tables. * doc/db.png: Update from source. 2012-09-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (escalate_2): Use associated filter in Sourcefire method. 2012-09-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_filter_term, print_report_xml) (manage_report_filter_controls): Remove apply_overrides from filtering to match the GSA report behaviour. * src/manage.h: Update header accordingly. 2012-09-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Pass the filter instead of the NULL term to manage_report_filter_controls when the filter is given as a string in the GET params. (manage_report_filter_controls): Add default values, to prevent memory errors in the caller. 2012-09-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_filter_term): Add delta_states. (print_report_xml): Pass delta states to filter functions. (manage_report_filter_controls): Add delta_states parsing. * src/manage.h: Update header accordingly. 2012-09-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_alert): Neaten doc. (alert_filter_id): New function. (escalate_2): Get filter from new location in database. (print_report_xml): Set the filter parameters from the filter term if a filter is given. Was previously done in callers. (manage_report): Let print_report_xml do the filter choice, and pass the filter into print_report_xml so that it appears in the report. (manage_send_report): Let print_report_xml do the filter choice. 2012-09-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (escalate_2): Check manage_report return. 2012-09-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_report, manage_send_report): Free filter strings. 2012-09-13 Matthew Mundell <matthew.mundell@greenbone.net> Add ALERTS to GET_FILTERS response, governed by "alerts" attribute. * src/manage_sql.c (init_filter_alert_iterator) (filter_alert_iterator_name, filter_alert_iterator_uuid): New functions. * src/manage.h: Add headers accordingly. * src/omp.c (get_filters_data_t): Rename tasks to alerts. (omp_xml_handle_start_element, omp_xml_handle_end_element): Send Alerts in GET_FILTERS if requested. 2012-09-13 Matthew Mundell <matthew.mundell@greenbone.net> Handle Alert filters explicitly, both at OMP and database level. In the process manage the trashcan dependency between Alert and Filter properly. This makes Alerts more consistent with other resource types. Hence increase database version to 61. Add database migration from version 60 to 61. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 61. * src/manage_sql.c (create_tables): Add filter columns to alerts and alerts_trash. (migrate_60_to_61): New function. (database_migrators): Add migrate_60_to_61. (create_alert): Add filter_id param. (delete_alert): Insert alert filter into trashcan. (init_alert_iterator): Add columns for filter ID, name and trash state. (alert_iterator_filter_id, alert_iterator_filter_name) (alert_iterator_filter_trash, agent_in_use, trash_agent_in_use): New functions. (delete_filter): Add in use checks. Update filter location when moving to trash. (filter_in_use, trash_filter_in_use): New functions. (manage_restore): Add in use check, and restore alert filter info. * src/manage.h: Update headers accordingly. * src/omp.c (create_alert_data_t, create_alert_data_reset): Add filter_id. (send_get_common, SEND_GET_COMMON): Add in_use arg. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add FILTER to OMP CREATE_ALERT. Improve restore error message. Add FILTER to ALERT in OMP GET_ALERTS. Remove IN_USE from CLIENT_GET_TARGETS case because it's now generic in send_get_common. * doc/db.png: Update for version change. 2012-09-11 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * CMakeLists.txt: Fix installation of renamed alert. 2012-09-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (send_to_sourcefire): Change script name "escalator" to "alert". * src/escalator_methods, src/escalator_methods/Sourcefire, src/escalator_methods/Sourcefire/escalate: Remove. Now name with alert. * src/alert_methods, src/alert_methods/Sourcefire, src/alert_methods/Sourcefire/alert: New. Escalator rename. 2012-09-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (get_filters_data_t, get_filters_data_reset) (omp_xml_handle_start_element, omp_xml_handle_end_element): Remove beginnings of implementation of type attribute for GET_FILTERS. The client can control the type via the "filter" attribute. 2012-09-10 Matthew Mundell <matthew.mundell@greenbone.net> Add report filtering to email alerts. * src/manage_sql.c (escalate_2): Pass filt_id to manage_report in email case. (print_report_xml): Add NULL checks on "get". (manage_report): Add filt_id arg. Set filter controls according to this filter if given. Add NULL checks on "get". (count, init_user_get_iterator, init_get_iterator): Add asserts. * src/manage.h: Update header accordingly. 2012-09-07 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Adding new report format plugin that produces XML output for the Open Source ISMS Tool Verinice, specifically handling content of a IT-Grundschutz Scan using the GSHB NVTs. The plugin was implemented by Andre Heinecke and Michael Wiegand. * report_formats/verinice-itg, report_formats/verinice-itg/gsm_verinice_itg.xsl, report_formats/verinice-itg/create_report_import, report_formats/verinice-itg/generate, report_formats/verinice-itg/README.txt: New. 2012-09-06 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Adding new report format plugin that produces XML output for the Open Source ISMS Tool Verinice. The plugin was implemented by Andre Heinecke and Michael Wiegand. * report_formats/verinice-ism, report_formats/verinice-ism/classification-helpers.xsl, report_formats/verinice-ism/gsm_verinice_ism.xsl, report_formats/verinice-ism/create_report_import, report_formats/verinice-ism/generate, report_formats/verinice-ism/README.txt: New. 2012-09-06 Matthew Mundell <matthew.mundell@greenbone.net> Add new-style filtering to the existing GET_REPORTS filtering. * src/manage_sql.c (report_filter_term): New function. (print_report_xml): Add GET op data arg. Set new-style filter from GET args if given, otherwise generate the new-style filter term from the old-style args. (manage_send_report): Add GET op data arg. Generate old-style args from new-style filter if given. (filter_control_int, filter_control_str) (manage_report_filter_controls): New functions. * src/manage.h: Update headers accordingly. * src/omp.c (get_reports_data_t, get_reports_data_reset): Add generic GET arg. (omp_xml_handle_start_element): Parse GET arg for GET_REPORTS and pass on to manage_send_report. 2012-09-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (valid_type): Add filter. (filter_clause): Allow the keyword string to be empty if there's a column specifier, like comment="". (count): Take the GET info as a single param. Use filter from ID if there is one. (target_count, agent_count, filter_count): Pass GET info as single param. (init_user_get_iterator): Use filter given by ID if there is one. (init_get_iterator): Adjust for filter ID returns. Use filter given by ID if there is one. Add used_by param so caller can control what type the resource is used by. (init_user_target_iterator): Clear get so filt_id is NULL. (init_target_iterator, init_agent_iterator, init_filter_iterator): Add used_by to calls. (filter_term): New function. (create_filter, modify_filter): Let type be "" instead of NULL to indicate any type. (filter_iterator_type): Return "" if NULL. * src/manage.h: Update headers accordingly. (get_data_t): Add filt_id. * src/omp.c (get_data_reset, get_data_parse_attributes): Add filt_id. (send_get_end): Remove max which was replaced by filters. Get filter from ID if one was given. Add filter ID to XML. (omp_xml_handle_start_element): Init MODIFY_FILTER type in case it's empty. Handle new returns from GET iterators. Adjust GET op count calls. 2012-08-29 Matthew Mundell <matthew.mundell@greenbone.net> Add filters, including OMP GET_FILTERS, CREATE_FILTER, DELETE_FILTER and MODIFY_FILTER. * src/manage_sql.c (resource_t): Remove. Now in manage.h (find_resource_for_actions): Move to Resources page. (valid_type, find_resource, find_resource_for_actions) (copy_resource, agent_writable, trash_agent_writable, find_filter) (find_filter_for_actions, filter_uuid, create_filter, copy_filter) (delete_filter, filter_writable, trash_filter_writable): New functions. (create_tables): Add filters and filters_trash. (FILTER_ITERATOR_FILTER_COLUMNS, FILTER_ITERATOR_COLUMNS) (FILTER_ITERATOR_TRASH_COLUMNS): New defines. (filter_count, init_filter_iterator, filter_iterator_type) (filter_iterator_term, modify_filter): New functions. (manage_restore, manage_empty_trashcan): Add filters. * src/manage.h: Add headers accordingly. (filter_t): New type. (resource_t): New type. From manage_sql.h. * src/omp.c (omp_commands, command_data_t, client_state_t) (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add filter commands. (create_filter_data_t, delete_filter_data_t, get_filters_data_t) (modify_filter_data_t): New types. (create_filter_data_reset, delete_filter_data_reset) (get_filters_data_reset, modify_filter_data_reset): New functions. (create_filter_data, delete_filter_data, get_filters_data) (modify_filter_data): New variables. (send_get_common): Add writable arg. (SEND_GET_COMMON): Pass writable in generic way. Convert type arg to token. Update callers. * src/sql.c (sql_nquote, sql_quote): Assert string exists. 2012-08-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (omp_xml_handle_end_element): In CLIENT_MODIFY_TASK correct the direction of the alerts comparison and add the missing comment check. 2012-08-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (task_schedule_iterator_stop_due): Consider duration even for once-off tasks, in case people want this. 2012-08-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (validate_host): Skip leading whitespace too. 2012-08-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (end_char): Remove. (contains_alpha): New function. (manage_max_hosts): Check entire part for alphanumeric chars when checking for a hostname. 2012-08-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_set_config_name) (manage_set_config_name_comment): Add missing owner clause. 2012-08-21 Matthew Mundell <matthew.mundell@greenbone.net> Add a flag to OMP CREATE_TARGET which indicates that the Manager must make the target name unique. * src/manage_sql.c (create_target): Add make_name_unique argument. Update all callers. * src/manage: Update header accordingly. * src/omp.c (create_target_data_t, client_state_t) (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add MAKE_UNIQUE to TARGET/NAME. * src/schema_formats/XML/OMP.xml (create_target): Add MAKE_UNIQUE to TARGET/NAME. * doc/omp.html, doc/omp.rnc: Update from source. * src/wizards/quick_first_scan.xml: Add MAKE_UNIQUE to CREATE_TARGET command. 2012-08-17 Matthew Mundell <matthew.mundell@greenbone.net> Add family to NVT in results. Based on patch by Sebastien Aucouturier. * src/manage_sql.c (result_iterator_nvt_family): New function. * src/manage.h: Add header accordingly. * src/omp.c (buffer_results_xml): Add NVT family to response. * src/schema_formats/XML/OMP.xml (result): Add NVT family. * doc/omp.html, doc/omp.rnc: Update from source. 2012-08-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add RUN_WIZARD. * doc/omp.html, doc/omp.rnc: Update from source. 2012-08-16 Matthew Mundell <matthew.mundell@greenbone.net> Move the RUN_WIZARD implementation out of the parser. * src/manage.c (manage_run_wizard): New function. Body from omp_xml_handle_end_element RUN_WIZARD in omp.c * src/omp.c (omp_xml_handle_end_element): Move RUN_WIZARD implementation to manage_run_wizard. (process_omp_write): Add a trace message similar to ompd_send_to_client. (name_value_t): Remove. Now in manage.h. * src/manage.h: Add header accordingly. (name_value_t): New type. From manage_sql.c. * src/manage_sql.c (name_value_t): Remove. Now in manage.h. 2012-08-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In RUN_WIZARD remove temp files after use. 2012-08-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/wizards/quick_first_scan.xml: Remove TODO now that params are escaped. 2012-08-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Escape RUN_WIZARD params for XML file. 2012-08-15 Matthew Mundell <matthew.mundell@greenbone.net> Add setting Wizard Rows. * src/manage_sql.c (init_manage): Ensure setting exists. 2012-08-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In RUN_WIZARD add name check and correct command in error message. 2012-08-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In RUN_WIZARD adjust the fail cases because they break out of the while now, free 'entity' after last use instead of inside the loop, close xml_file, remove testing elements from responses and use a dedicated entity when checking the response. 2012-08-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In RUN_WIZARD free entity properly and exit if the command for any step fails. 2012-08-14 Matthew Mundell <matthew.mundell@greenbone.net> Add new OMP command RUN_WIZARD. Add first wizard quick_first_scan. * src/manage.c (xsl_transform): Export. * src/manage_sql.c (manage_send_report): Add new arg to param types of send function. * src/omp.c (omp_commands, command_data_t, client_state_t): Add RUN_WIZARD. (omp_parser_t, omp_parser_new, send_element_error_to_client) (send_find_error_to_client, send_get_start, send_get_common) (send_get_end, send_requirement, send_dependency, send_nvt) (send_reports, init_omp_process): Add new arg to type of send function. (run_wizard_data_t): New type. (run_wizard_data_reset): New function. (run_wizard_data): New variable. (send_to_client): Simply call through to the send function provided by the caller, which now does all the work. This allows process_omp to use its own send function and have full control of what it does. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add new arg to type of send function. Handle RUN_WIZARD. (omp_xml_handle_text): Handle RUN_WIZARD. (process_omp_write, process_omp): New functions. For processing an OMP command during the processing of an OMP command. * src/manage.h, src/omp.h: Update headers accordingly. * src/ompd.c (ompd_send_to_client): New function. Body from omp.c send_to_client. (serve_omp): Add new arg to type of send function. Pass ompd_send_to_client as this send function. * src/wizards, src/wizards/quick_first_scan.xml: New files. * CMakeLists.txt: Install wizard. 2012-08-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (MAX_CHECKS_DEFAULT, MAX_HOSTS_DEFAULT): New defines. (send_task_preferences): Use new defines. (run_slave_task): Create task with max_checks and max_hosts preferences. 2012-08-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_asset_iterator, filtered_host_count): Quote search phrase for SQL. 2012-08-01 Matthew Mundell <matthew.mundell@greenbone.net> Make the ARF report format predefined. * CMakeLists.txt: Install predefined ARF. * src/manage_sql.c (init_manage): Ensure predefined ARF exists. (report_format_predefined): Add predefined ARF. * src/report_formats/ARF/, src/report_formats/ARF/ARF.xsl, src/report_formats/ARF/generate: New directory and files. * report_formats/arf: Remove. 2012-07-30 Matthew Mundell <matthew.mundell@greenbone.net> Expose the already implemented multiple alert feature in OMP. * src/omp.c (create_task_data_t, create_task_data_reset) (modify_task_data_t, modify_task_data_reset): Replace alert with array of alerts. (omp_xml_handle_start_element, omp_xml_handle_end): In CREATE_TASK, GET_TASKS and MODIFY_TASK handle multiple ALERTs instead of just one. * src/manage_sql.c (init_alert_iterator): Add separate case for when event is 0. (set_task_alert): Remove. Now set_task_alerts. (set_task_alerts): New function. * src/manage.h: Update headers accordingly. * src/schema_formats/XML/OMP.xml (create_task): Add multiple alerts. * doc/omp.html, doc/omp.rnc: Update from source. 2012-07-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_report_iterator): When getting all reports, get only the visible reports for the current user. 2012-07-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (omp_xml_handle_start_element): Clear preference data in case there are multiple preferences. 2012-07-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_otp_pref_iterator): Include the special timeout.OID preferences, so that these user-defined NVT timeouts are sent to the scanner. 2012-07-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (type_name): Use xsd:Name. * doc/omp.html, doc/omp.rnc: Update from source. 2012-07-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (modify_config): Note that value must be base64. Add example of modifying scanner preference. * doc/omp.html: Update from source. 2012-07-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Add COMMENT to TASK. 2012-07-25 Matthew Mundell <matthew.mundell@greenbone.net> Add task preference "in_assets" which controls whether the task is considered by the asset management. Hence increase database version to 60. Add database migration from version 59 to 60. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 60. * src/manage_sql.c (migrate_59_to_60): New function. Ensures each task has an in_assets preference. (database_migrators): Add migrate_59_to_60. (init_asset_iterator, host_nthlast_report_host): Add the condition that the task's in_assets preference must be "yes", to the SQL. (make_task): Add in_assets task preference for the task. * src/omp.c (omp_xml_handle_end_element): Send in_assets preference with task preferences. * doc/db.png: Update for version change. 2012-07-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORTS cleanup the iterator early when a particular report was requested. This allows the main manager process to lock the database for task scheduling during generation of large reports. Also remove two stray cleanup_iterator calls. 2012-07-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c (serve_omp): Correct comment typo. 2012-07-23 Werner Koch <wk@gnupg.org> Documentation update. * src/ompd.c (serve_omp): s/fds/fd_info/. Add a few comments. 2012-07-23 Matthew Mundell <matthew.mundell@greenbone.net> Import host details when importing reports. * src/manage_sql.c (host_detail_free): New function. (create_report): Add details arg. * src/manage.h: Update headers accordingly. (host_detail_t): New type. * src/omp.c (create_report_data_t, create_report_data_reset) (client_state_t): Add host details. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Parse and store host details for CREATE_REPORT, and hand over to create_report function. 2012-07-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (split_filter, manage_filter_controls): When "rows" is left out, include all rows instead of including "Rows Per Page" rows. This keeps OMP backwards compatibility. (append_relation): New function. (manage_clean_filter): Append with append_relation, which converts the "rows" value to "Rows Per Page" if "rows" is -2. This is convenient for client because they can request Rows Per Page and still get the actual value back in the filter. Previous they just left out "rows" and this would happen. 2012-07-19 Matthew Mundell <matthew.mundell@greenbone.net> Add OTP 1.1 handling. * src/ompd.c (write_to_scanner): Send OTP/1.1 for normal mode, OTP/1.0 for NVT cache mode. In normal mode go to DONE state after sending password. * src/otp.c (process_otp_scanner_input): Also check for OTP/1.1. * src/oxpd.c (OTP_INIT_STRING_2): New define. (read_protocol): Also compare OTP 1.1 string. 2012-07-09 Michael Wiegand <michael.wiegand@greenbone.net> * src/manage.c (manage_read_info): Replace g_strcasecmp with g_ascii_strcasecmp. The g_strcasecmp function has been deprecated since glib 2.2 and is no longer available in recent glib versions. 2012-07-09 Michael Wiegand <michael.wiegand@greenbone.net> * src/manage_sql.c (print_report_xml, manage_filter_controls): Remove assigned but unused variables to address compiler warnings. 2012-07-06 Michael Wiegand <michael.wiegand@greenbone.net> * src/tests/CMakeLists.txt: Ensure that linking with modern gccs works by moving linker flags from LINK_FLAGS to target_link_libraries. 2012-06-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_filter_controls): Correct doc brief. 2012-06-27 Matthew Mundell <matthew.mundell@greenbone.net> When the GET filter defines an empty set and "first" is above 1, then respond with "first" equal 1. This prevents the user from jumping into blank space after the rows. * src/omp.c (send_get_start): Just send start tag. (send_get_end): Move fields from send_get_start into here so that they're sent after the iteration. (get_next): New function. Does next check for GET operation iteration, resetting the iteration to the beginning with first=1 in the filter if the result set is empty. (omp_xml_handle_end_element): Use get_next to do next check while sending rows. 2012-06-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage_process): Create common_cve. (where_autofp, init_result_iterator, column_auto_type) (report_counts_autofp_match): Use common_cve to check for the partial CVE match, because both CVEs could be lists and a pattern match fails if they are. * src/sql.c (sql_common_cve): New function. * src/sql.h: Add header accordingly. 2012-06-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (filter_free): New function. (manage_filter_controls, manage_clean_filter, filter_clause): Free split filter with filter_free. 2012-06-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (blank_control_chars): Skip newlines. (process_otp_scanner_input): g_strcompress the field from the scanner before converting it to UTF8, because since r13022 the scanner g_strescapes messages instead of doing simple escaping. 2012-06-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (get_data_parse_attributes): Remove first and max as they are in the filter now. 2012-06-25 Matthew Mundell <matthew.mundell@greenbone.net> Move GET_TARGETS rows and max into the filter, and make it easier for the client to handle the sorting being in the filter. * src/manage_sql.c (keyword_applies, split_filter): Add first and rows. (manage_filter_controls): New function. (filter_clause): Add first and max args. As a result reindent entire function. Update callers. (init_get_iterator, init_user_get_iterator): Get first and max from first= and max= in filter, instead of from params. Update caller. * src/manage.h: Add header accordingly. * src/omp.c (send_get_start): Get the "filter controls" from the filter instead of from params. Add SORT to response. 2012-06-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (split_filter): Silence compiler warning suddenly appearing with this patch. (manage_clean_filter): New function. * src/manage.h: Add header accordingly. * src/omp.c (send_get_start): Send cleaned filter, with redundant terms removed. 2012-06-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (keyword_applies): New function. (split_filter): Check if keyword applies before adding. This skips all sort= keywords after the first. 2012-06-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (filter_clause): Add column checks to the operator checks, otherwise "column=and" is treated as plain "and". 2012-06-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (filter_clause): Clear last_was_not if the column is not found for the equal relation, to match the other relations. 2012-06-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (filter_clause): Rename asc and desc to sort and sort-reverse. 2012-06-19 Matthew Mundell <matthew.mundell@greenbone.net> Move GET_TARGETS sorting into filter. * src/manage.c (run_slave_task): Update init_user_target_iterator call. * src/manage_sql.c (filter_clause): Add order return arg. Update callers. (init_user_get_iterator, init_get_iterator): Get order clause from filter_clause instead of sort params. (init_target_task_iterator): Remove ascending arg. (verify_agent): Move sorting to filter. * src/manage.h: Update headers accordingly. (get_data_t): Remove sort fields. * src/omp.c (get_data_reset, get_data_parse_attributes): Remove sort_field. (omp_xml_handle_end_element): Update init_target_task_iterator call. 2012-06-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (init_task_schedule_iterator): Skip trashcan tasks and example task. 2012-06-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (send_user_rules_empty): New function. (send_user_rules): Skip over empty lines. Also send the rules when the file contained only newlines and/or empty lines. 2012-06-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (modify_setting): Correct description. * doc/omp.html: Update from source. 2012-06-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (commands): Add GET_SETTINGS. Correct MODIFY_SETTING. (get_settings): New command. (help): Add GET_SETTINGS. (modify_settings): Add UUID param. * doc/omp.rnc, doc/omp.html: Update from source. 2012-06-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_DELETE_PORT_LIST add g_log to case 3. 2012-06-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (report): Add REPORT_FORMAT. * doc/omp.rnc, doc/omp.html: Update from source. 2012-06-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Init some vars to prevent warnings from older compilers. 2012-06-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage): Update report format UUIDs before predefined check. 2012-06-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage, report_format_predefined): Update LaTeX report format UUID everywhere. 2012-06-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (result_notes, result_overrides): New elements. (result): Add NOTES and OVERRIDES to RESULT and DELTA. (get_results): Move notes and overrides to new element. * doc/omp.rnc, doc/omp.html: Update from source. 2012-06-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (result): Add ORIGINAL_THREAT and DELTA. Add missing NVT elements. * doc/omp.rnc, doc/omp.html: Update from source. 2012-06-13 Matthew Mundell <matthew.mundell@greenbone.net> * CMakeLists.txt: Update LaTeX based report format UUIDs for 2012-06-01 date format commit. * src/manage_sql.c: Update LaTeX based report format UUIDs in database. 2012-06-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (update_report_format_uuid) (update_report_format_uuids): New functions. Mechanism for updating the report format UUIDs on startup. This first version does that same work as migrate_58_to_59. (init_manage): Call update_report_format_uuids. 2012-06-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_count): Access column by hand to get position right. (report_count_filtered, report_counts_id_filt): Skip the autofp test for Logs and False Positives. 2012-06-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage): Set port list when creating predefined target. Ensure that list is correct if target exists already. 2012-06-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_counts_autofp_match): Remove extra SQL paren. 2012-06-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (report, get_reports): Add GET_REPORTS autofp and show_closed_cves. * doc/omp.rnc, doc/omp.html: Update from source. 2012-06-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/TXT/TXT.xsl (real-report): Note whether vendor updates are trusted. Add Closed CVEs table. 2012-06-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/LaTeX/latex.xsl (results-overview): Note whether vendor updates are trusted. (results-per-host-single-host-closed-cves): New template. (results-per-host-single-host): Add Closed CVEs table. 2012-06-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/HTML/HTML.xsl (real-report): Note whether vendor updates are trusted. Add Closed CVEs table. 2012-06-05 Matthew Mundell <matthew.mundell@greenbone.net> Add show_closed_cves attribute to GET_REPORTS to control the presence of the Closed CVEs host detail. * src/manage_sql.c (escalate_2): Add show_closed_cves arg. (escalate_1): Pass 0 for show_closed_cves. (print_report_xml): Add show_closed_cves arg. Add value to filters. Pass to alert. Only include Closed CVEs host detail when true. (manage_report, manage_send_report): Add show_closed_cves arg. Pass through to print_report_xml. * src/manage.h: Update header accordingly. * src/omp.c (get_reports_data_t): Add show_closed_cves. (omp_xml_handle_start_element): Parse show_closed_cves. (omp_xml_handle_end_element): Pass show_closed_cves to report functions. 2012-06-01 Matthew Mundell <matthew.mundell@greenbone.net> Make the date formats of the LaTeX based reports nicer. * src/report_formats/LaTeX/latex.xsl (scan_start, scan_end): New templates. (abstract, results-per-host-single-host): Call new templates for dates. 2012-05-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (buffer_cve): New function. (print_report_xml): Add the "Closed CVEs" host detail for the case when result_hosts_only is false. 2012-05-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Report extra loop left in earlier today. 2012-05-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (task_debugs_size, task_false_positive_size) (task_holes_size, task_infos_size, task_logs_size) (task_warnings_size): Remove. Old functions. 2012-05-31 Matthew Mundell <matthew.mundell@greenbone.net> Use 1 instead of 'False Positive' to mark autofp false positives in the auto_type column, to work around some SQL complications with using a string. * src/manage_sql.c (where_levels_auto, result_iterator_type): Test auto_type for 1 instead of a string. (init_result_iterator, column_auto_type): Set auto_type to 1 for false positives. 2012-05-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (array_find_string): Move up in file. (compare_strings): New functions. (print_report_xml): Add a "Closed CVEs" host details listing all closed CVEs. 2012-05-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_report_host_details_iterator): Add the NVT name as the description of the Closed CVE details. 2012-05-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_result_iterator): Shorten long lines. 2012-05-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (column_auto_type): New function. (report_count_filtered, report_scan_result_count): Use column_auto_type. 2012-05-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_count_filtered): Fold host case into other cases. (report_counts_id): Doc typo. 2012-05-30 Matthew Mundell <matthew.mundell@greenbone.net> Migrate alert method data to reflect report format UUID changes in database version 55. Hence increase database version to 59. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 59. * src/manage_sql.c (migrate_58_to_59): New function. (database_migrators): Add migrate_58_to_59. (escalate_2): Align args. Update TXT UUID. * doc/db.png: Update for version change. 2012-05-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_scan_result_count): Generate the autofp SQL always, whatever the value of override is. 2012-05-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_scan_result_count) (report_counts_autofp_match, report_count_filtered): Clean up SQL alignment. 2012-05-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (get_results_data_t, omp_xml_handle_start_element) (omp_xml_handle_end_element): Add autofp arg to GET_RESULTS. * src/manage_sql.c (init_result_iterator): Add autofp result case. 2012-05-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_start_element): Correct variable name in GET_REPORTS attribute parsing. 2012-05-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_result_iterator): Remove host case, as host is always NULL. Update callers. * src/manage.h: Update header accordingly. * src/omp.c: Update init_result_iterator callers. 2012-05-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_counts_id_filt): Set filtered_debugs if given. 2012-05-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_scan_result_count): Add missing SQL to auto_type default case. 2012-05-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (where_autofp, init_result_iterator) (report_scan_result_count, report_counts_autofp_match) (report_count_filtered): In the SQL for the partial case put the CVE clause inside the inner NVT SELECT and use an EXISTS, instead of doing a LIKE between a multi-row select and a single value. 2012-05-24 Matthew Mundell <matthew.mundell@greenbone.net> Convert the results closed by autofp into false positives, instead of just excluding them. * src/manage_sql.c (where_levels_auto): New function. (where_autofp): Correct SQL. (init_result_iterator): Treat closed results as false positives by adding an auto_type column to the query (original_type): Doc typo. (result_iterator_type): Take new auto_type column into account. (result_iterator_descr, result_iterator_nvt_cvss_base_double): Increment for new column. (report_scan_result_count): Add auto_type to query, as above. (report_counts_autofp_match): Add special case for open ports. Correct SQL. (report_count_filtered): Add a False Positive special case for autofp. 2012-05-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (validate_host): Only do the length check when the last octet is a number, because hostnames can have any number of parts. 2012-05-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (init_report_host_details_iterator): Add closed CVEs. 2012-05-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS brief case use the correct variable to get the task preferences. 2012-05-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (where_autofp, report_counts_autofp_match): Take the NOCVE case into account. 2012-05-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_counts_id_filt): Add missing column to query. 2012-05-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (where_autofp, report_counts_autofp_match): If autofp is 2 then do partial CVE matching. (report_counts_match): Pass autofp to report_counts_autofp_match. (print_report_xml): Respond with actual value of autofp instead of 1 or 0. 2012-05-16 Matthew Mundell <matthew.mundell@greenbone.net> Add autofp filtering to the counts too. * src/manage_sql.c (create_table): Add indexes report_host_details_by_report_host_and_name_and_value and report_hosts_by_host. (report_scan_result_count, report_counts_match) (report_count_filtered, report_counts, report_counts_id_filt) (report_counts_id): Add autofp arg. Update callers. (report_counts_autofp_match): New function. * src/manage.h: Update headers accordingly. * src/omp.c: Add autofp for updated manage_sql.c functions. 2012-05-15 Matthew Mundell <matthew.mundell@greenbone.net> Add creation and modification times to the powerfilter. * src/manage_sql.c (parse_keyword): Add date format with hour and minute. (GET_ITERATOR_FILTER_COLUMNS, GET_ITERATOR_COLUMNS): Add created and modified. (GET_ITERATOR_COLUMN_COUNT): Increase. 2012-05-14 Matthew Mundell <matthew.mundell@greenbone.net> Add autofp attribute to OMP GET_RESULTS. When given filter out results which have an EXIT_CODE host detail with value EXIT_NOTVULN. Slight modification of patch from Henri Doreau. * src/manage_sql.c (escalate_2): Add autofp arg. Update caller. (LSC_FAMILY_LIST): New define. (where_autofp): New function. (init_result_iterator): Add autofp arg. If given add autofp WHERE clause to SQL. Update callers in omp.c. (print_report_xml): Add autofp arg. Print in XML, pass to iterator. (manage_report_report): Add autofp arg. Pass to printer or escalator. * src/manage.h: Update headers accordingly. * src/omp.c (get_reports_data_t, omp_xml_handle_start_element) (omp_xml_handle_end_element): Add autofp attribute to GET_RESULTS. 2012-05-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (run_task): Set the report run status explicitly, because set_task_run_status only does this when current_scanner_task is set and current_scanner_task is set at the end of the function. 2012-05-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (client_state_t, omp_xml_handle_start_element) (omp_xml_handle_end_element): Add DETECTION and NVT/XREF to RESULT in report import. 2012-05-07 Matthew Mundell <matthew.mundell@greenbone.net> Implement the filtered count for GET_AGENTS. * src/manage_sql.c (TARGET_ITERATOR_COLUMNS) (TARGET_ITERATOR_TRASH_COLUMNS): Move up in file. (count): New function. Body adapted from target_count. (target_count): Call through to count. (agent_count): New function. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_AGENTS enable filtered count. 2012-05-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In MODIFY_TARGET require NAME and HOSTS or TARGET_LOCATOR, instead of asserting this. 2012-05-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Replace ctime with iso_time everywhere. (iso_time): New type. * doc/omp.rnc, doc/omp.html: Update from source. 2012-05-04 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number to 4.0+beta4. 2012-05-04 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 4.0+beta3 release. * CHANGES: Updated. 2012-05-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML-brief, src/schema_formats/XML-brief/OMP.xml, src/schema_formats/XML-brief/generate: New files. For --disabled-cmds commit. 2012-05-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Remove extra arg from manage_schema call, leftover from experiment. 2012-05-03 Matthew Mundell <matthew.mundell@greenbone.net> Add --disabled-cmds to disable a list of OMP commands. Adjust HELP to skip disabled commands. * CMakeLists.txt: Install new schema format. * src/omp.c (command_t): New type. (help_text): Remove. (omp_commands): New variable. (STATUS_SERVICE_UNAVAILABLE, STATUS_SERVICE_UNAVAILABLE_TEXT): New definitions. (omp_parser_t, omp_parser_free): Add disabled_commands. (omp_parser_new): Add disable arg. (command_disabled): New function. (help_data_t, help_data_reset): Add type. (XML_ERROR_UNAVAILABLE): New macro. (omp_xml_handle_start_element): In the authentic states check if the given command is enabled. In the simple HELP case only print those commands that are enabled. Add a HELP flage "type", and print a simple response when the type is "brief". (init_omp_process): Add disable arg. * src/manage.h, src/ompd.h: Update headers accordingly. * src/ompd.c (init_ompd_process, serve_omp): Add disable arg. * src/openvasmd.c (disabled_commands): New variable. (serve_client, fork_connection_for_schedular): Pass disabled_commands to omp handlers. (cleanup): Free disabled_commands too. (update_or_rebuild_nvt_cache): Add dummay serve_omp arg. (main): Add --disable-cmds. 2012-04-30 Matthew Mundell <matthew.mundell@greenbone.net> Add creation and modification times to agents and targets. Hence increase database version to 58. Add database migration from version 57 to 58. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 58. * src/manage_sql.c (create_tables): Add time columns. (migrate_35_to_36_duplicate_target): New function. Was duplicate_target. (migrate_35_to_36): Adjust call for rename. (migrate_57_to_58): New function. Agent and target time migrator. (database_migrators): Add migrate_57_to_58. (init_manage): Add times. (duplicate_target): Remove for rename. Superceded by copy_target, and migrator functions must be specific to the migrator. (create_target, copy_target, delete_target, modify_target, create_agent) (delete_agent): Handle time columns too. (GET_ITERATOR_COLUMNS): Add time columns. (GET_ITERATOR_COLUMN_COUNT): New define. Adjust all target and agent iterator access function offsets to be relative to this. (set_target_hosts): Set modification time too. (get_iterator_creation_time, get_iterator_modification_time): New functions. (manage_restore): Handle agent and target time columns. * src/manage.h: Add headers accordingly. * src/omp.c (send_get_common): Add times. * src/schema_formats/XML/OMP.xml (get_agents, get_targets): Add times to response. * doc/db.png, doc/omp.rnc, doc/omp.html: Update from source. 2012-04-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage_process, duplicate_target): Add arg to uniquify. (copy_target): Append " Clone" to new target name, before unique number. * src/sql.c (sql_uniquify): Take a fourth arg as suffix before unique part of name. 2012-04-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (copy_target): New function. * src/manage.h: Add header accordingly. * src/omp.c (create_target_data_t, client_state_t) (omp_xml_handle_end_element, omp_xml_handle_text): Add CREATE_TARGET/COPY. 2012-04-25 Matthew Mundell <matthew.mundell@greenbone.net> Setup an OMP GET response style where the common part of the response to a GET command is done by support code instead of being done in each command. Convert GET_TARGETS and GET_AGENTS to this style. * src/manage_sql.c (GET_ITERATOR_FILTER_COLUMNS) (GET_ITERATOR_COLUMNS): New defines. Increment agent iterator access functions to match. (TARGET_ITERATOR_COLUMNS, TARGET_ITERATOR_TRASH_COLUMNS) (TARGET_ITERATOR_FILTER_COLUMNS, AGENT_ITERATOR_FILTER_COLUMNS) (AGENT_ITERATOR_COLUMNS): Use GET column definitions. (target_iterator_hosts, target_iterator_comment): Match to positions in GET columns. (get_iterator_resource, get_iterator_uuid, get_iterator_name) (get_iterator_comment): New functions. * src/manage.h: Add headers accordingly. * src/omp.c (send_get_start, send_get_common, send_get_end): New functions. (SEND_GET_START, SEND_GET_COMMON, SEND_GET_END): New macros. (omp_xml_handle_end_element): In GET_AGENTS and GET_TARGETS send the common part of the response with the new send_get functions. 2012-04-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (serve_and_schedule): Check that the second socket is in use before trying to call FD_ISSET on it. 2012-04-25 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number to 4.0+beta3. 2012-04-25 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 4.0+beta2 release. * CHANGES: Updated. 2012-04-19 Matthew Mundell <matthew.mundell@greenbone.net> Switch GET_AGENTS to the GET iterator. * src/manage_sql.c (verify_agent): Pass single arg to init_agent_iterator. (AGENT_ITERATOR_FILTER_COLUMNS, AGENT_ITERATOR_COLUMNS) (AGENT_ITERATOR_TRASH_COLUMNS): New definitions. (init_agent_iterator): Use the generic initialiser. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): Pass single arg to GET_AGENTS iterator init, and handle return. 2012-04-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_user_get_iterator): Add "_trash" to table name in SQL for trash cases. (TARGET_ITERATOR_COLUMNS): Add missing dummy columns. 2012-04-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (find_resource_for_actions): Pass type to user_has_access_uuid instead of static string. (init_get_iterator): Correct order of iterator args. 2012-04-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Update OMP version to 4.0. 2012-04-18 Matthew Mundell <matthew.mundell@greenbone.net> Add a generic iterator for GET commands, and call it in the GET_TARGETS iterator. * src/manage_sql.c (find_resource_for_actions): New function. (TARGET_ITERATOR_COLUMNS): Set to SQL columns. Filter columns now defined by TARGET_ITERATOR_FILTER_COLUMNS. (target_count): Update for rename. (init_user_get_iterator, init_get_iterator): New functions. (TARGET_ITERATOR_FILTER_COLUMNS, TARGET_ITERATOR_TRASH_COLUMNS): New definitions. (init_user_target_iterator, init_target_iterator): Call through to generic counterparts. * src/omp.c (get_data_t): Remove. Now in manage.h. 2012-04-18 Matthew Mundell <matthew.mundell@greenbone.net> * doc/omp.rnc, doc/omp.html: Update from source. 2012-04-18 Matthew Mundell <matthew.mundell@greenbone.net> Simplify the GET_TARGETS iterator init slightly. * src/manage.h (get_data_t): New type. From omp.c. (init_target_iterator): Update header. * src/manage_sql.c (init_target_iterator): Group the generic get args into one. * src/omp.c (get_data_t): Remove. Now in manage.h. (omp_xml_handle_end_element): Pass get_targets_data directly to init_target_iterator. 2012-04-18 Matthew Mundell <matthew.mundell@greenbone.net> Move GET_TARGETS find into the iterator initialiser. * src/manage_sql.c (init_target_iterator): Convert target arg from target_t to uuid string. Add return accordingly. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): Pass the target UUID directly into the iterator init, instead finding the target first. 2012-04-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (get_agents): Make IN_USE 0 in examples because it's always so. (get_port_lists, get_targets): Add WRITABLE. 2012-04-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (port_list_iterator_in_use): Remove consideration of predefined state. (port_list_iterator_writable): New function. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): Add WRITABLE to GET_PORT_LIST. 2012-04-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_port_list): Add missing argument to sql_int. Change associated return so that error message can be more correct. * src/omp.c (omp_xml_handle_end_element): Handle new return from delete_port_list. 2012-04-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Add missing case to create_target switch. 2012-04-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (target_writable, trash_target_writable): New functions. * src/manage.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): Add WRITABLE to GET_TARGETS, to indicate when a target is in_use or predefined. 2012-04-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (get_join): New function. (filter_clause): Add NOT handling. 2012-04-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_target): Prevent removal of predefined target. * src/omp.c (omp_xml_handle_end_element): Handle new return from delete target. 2012-04-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_port_range_iterator) (init_port_list_target_iterator): Add explicit "all" case, otherwise the selection is always empty. 2012-04-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (get_port_lists): Move details attrib from response to request. * doc/omp.rnc, doc/omp.html: Update from source. 2012-04-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (find_attribute, append_attribute): Move up in file. (get_data_t): New struct. (get_data_reset, get_data_parse_attributes): New function. (get_agents_data_t, get_agents_data_reset, get_targets_data_t) (get_targets_data_reset): Use the generic get structure. (omp_xml_handle_start_element, omp_xml_handle_end_element): Use generic get for agents and targets. 2012-04-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_target_iterator): Add AS for port_list. 2012-04-16 Matthew Mundell <matthew.mundell@greenbone.net> Add quotation to the index case of the the powerfilter. This allows spaces in the index filters, like name="Debian Machines". * src/manage_sql.c (parse_keyword): Remove the relation parsing which is now done in split_filter. (split_filter): Parse index quotations. 2012-04-16 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/openvasmd.c (main): Updated Copyright years. 2012-04-16 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number to 4.0+beta2. 2012-04-16 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Preparing the openvas-manager 4.0+beta1 release. * CHANGES: Updated. 2012-04-13 Matthew Mundell <matthew.mundell@greenbone.net> Add integer and date handling to the powerfilter. If an keyword like "ids>2" has the above (>) or below (<) relation and the keyword part is a number or a date of the form 2011-3-23 then compare the column as a number instead of as text. * src/manage_sql.c (keyword_type_t, keyword_relation_t): New enums. (struct term, term_t): Remove. Now keyword. Update callers. (struct keyword, keword_t): New type. (keyword_free, parse_keyword): New function. (split_filter): Setup more info about the keyword, using parse_keyword. Also remove a decrement that was chopping off the last char of phrases. (filter_clause): Remove the parsing that's now done by split_filter. Add casts in the SQL to ensure the column is compared correctly. Add the number cases to to the above and below cases. 2012-04-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (scan_start, scan_end): Format date nicely. * src/report_formats/HTML/HTML.xsl (real-report): Add start and end columns to host summary. 2012-04-13 Michael Wiegand <michael.wiegand@greenbone.net> * tools/greenbone-scapdata-sync: Add switch to disable the sync script. 2012-04-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (modify_target): Only validate port when there's an SSH credential. Add 0 tests for credentials. 2012-04-11 Matthew Mundell <matthew.mundell@greenbone.net> Add IP count to GET_TARGETS filtering. Also better control which database columns are searched. * src/manage_sql.c (init_manage_process): Create max_hosts SQL function. (filter_clause): Remove automatic filtering by all table columns. Instead filter only on given columns. (TARGET_ITERATOR_EXTRA_COLS): Remove. (TARGET_ITERATOR_COLUMNS): New define. TARGET_ITERATOR_EXTRA_COLS with all columns. (target_count, init_user_target_iterator, init_target_iterator): Switch to new filter_clause behaviour. Add ips to SQL so that filters can access value as column. * src/sql.c (sql_max_hosts): New function. * src/sql.h: Add header accordingly. 2012-04-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (filter_clause): Duplicate column names in index filter with g_ascii_strdown so that the user can use any case. 2012-04-11 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP MODIFY_TARGET. * src/manage_sql.c (modify_target): New function. * src/manage.h: Add header accordingly. * src/omp.c (help_text, command_data_t, client_state_t): Add modify_target. (modify_target_data_t): New structure. (modify_target_data_reset): New function. (modify_target_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add MODIFY_TARGET handling. 2012-04-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_set_setting): Add uuid arg. Set Rows Per Page setting if given. (setting_value_int): New function. * src/manage.h: Update header accordingly. * src/omp.c (modify_setting_data_t, modify_setting_data_reset) (omp_xml_handle_start_element, omp_xml_handle_end_element): Add setting_id to MODIFY_SETTING. Pass to manage_set_setting if given. 2012-04-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_target_iterator): If max is -2 then get max from Rows Per Page setting. (setting_value_int): New function. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_start_element): Let GET_TARGETS max be any negative. (omp_xml_handle_end_element): If GET_TARGETS max is -2 then set is from Rows Per Page setting. 2012-04-06 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP GET_SETTINGS. * src/manage_sql.c (create_tables): Add settings. (init_manage): Ensure default settings exist. (target_count): Remove dangling SQL clause. (SETTING_ITERATOR_EXTRA_COLS): New define. (setting_count, init_setting_iterator, setting_iterator_uuid) (setting_iterator_name, setting_iterator_comment) (setting_iterator_value): New function. * src/omp.c (help_text): Add GET_SETTINGS. (get_settings_data_t): New type. (get_settings_data_reset): New function. (command_data_t, client_state_t): Add get_settings. (get_settings_data): New variable. (xml_handle_start_element, xml_handle_end_element): Add GET_SETTINGS. * src/manage.h: Add headers accordingly. (setting_t): New type. 2012-04-04 Matthew Mundell <matthew.mundell@greenbone.net> Add the option to serve OMP on a second address. * src/openvasmd.c (manager_socket_2, manager_address_2): New variables. (serve_client, accept_and_maybe_fork): Add server_socket arg. Update callers. (cleanup, fork_update_nvt_cache): Close manager_socket_2. (serve_and_schedule): Add second listening socket to select. (main): Add --listen2 and --port2, and serve on this address if given. 2012-04-04 Michael Wiegand <michael.wiegand@greenbone.net> * tools/greenbone-scapdata-sync: Add ssh options to disable strict host key checking. Patch suggested by Lukas Grunwald. 2012-04-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_target_iterator): Bring first and max into range if they are out. * src/omp.c (omp_xml_handle_start_element): Bring GET_TARGETS first and max into range if they are out. 2012-04-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (split_filter): Set quoted on end term from in_quote. 2012-04-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (struct term, term_t): New type. (split_filter): Return array of terms, which have quotation flags. (filter_clause): Adjust for new split type. If term is quoted skip the index check. 2012-04-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (TARGET_ITERATOR_EXTRA_COLS, target_count) (init_user_target_iterator, init_target_iterator): Make the names of the extra columns match the names of the columns on the GSA Targets page. 2012-04-03 Matthew Mundell <matthew.mundell@greenbone.net> Add index filtering to the GET_TARGETS. Syntax is like "name~test and port_list_name~iana or hosts=localhost". * src/manage_sql.c (vector_find_string): New function. (filter_clause): Check term for index prefix and adjust SQL accordingly. Also return NULL if the result is the empty string. 2012-04-03 Matthew Mundell <matthew.mundell@greenbone.net> Add quotation to the GET_TARGETS filtering. * src/manage_sql.c (split_filter): New function. (filter_clause): Call split_filter to split the filter term into parts. 2012-04-03 Matthew Mundell <matthew.mundell@greenbone.net> Add the names of the port list and credentials to the filtering in GET_TARGETS. * src/manage_sql.c (filter_clause): Add extra_columns arg. (TARGET_ITERATOR_EXTRA_COLS): New define. (target_count, init_user_target_iterator, init_target_iterator): Pass extra_columns to filter_clause. Add extra columns to name so that the filter clause can access them by name. 2012-03-30 Matthew Mundell <matthew.mundell@greenbone.net> Add pagination to GET_TARGETS. * src/manage_sql.c (target_count): New function. (init_user_target_iterator, init_target_iterator): Add first and max args. * src/manage.h: Update headers accordingly. * src/manage.c (run_slave_task): Update caller. * src/omp.c (get_targets_data_t): Add first and max. (omp_xml_handle_start_element): Parse first and max attribs. (omp_xml_handle_end_element): In GET_TARGETS add TARGETS and TARGET_COUNT and pass first and max through to the iterator. 2012-03-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TARGETS add a NULL check on the filter. 2012-03-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (filter_clause): Add AND and OR, as a test. 2012-03-28 Matthew Mundell <matthew.mundell@greenbone.net> Add simple keyword filtering to GET_TARGETS. * src/manage_sql.c (filter_clause): New function. (init_user_target_iterator, init_target_iterator): Add filter arg. * src/manage.h: Update headers accordingly. * src/manage.c (run_slave_task): Update caller. * src/omp.c (get_targets_data_t, get_targets_data_reset): Add filter. (omp_xml_handle_start_element): Append filter attrib. (omp_xml_handle_end_element): Pass filter to init_target_iterator. 2012-03-28 Matthew Mundell <matthew.mundell@greenbone.net> Rename Escalators to Alerts. Hence increase database version to 57. Add database migration from version 56 to 57. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 57. * src/sql.c (sql_rename_column, iterator_column_count) (iterator_column_name): New functions. * src/sql.h: Add headers accordingly. * src/manage_sql.c: Everywhere replace escalator with alert. (migrate_56_to_57): New function. (database_migrators): Add migrate_56_to_57. * src/manage.c, src/manage.h, src/manage_sql.h, src/omp.c, doc/db_postgres.sql: Everywhere replace escalator with alert. * src/schema_formats/XML/OMP.xml: Everywhere replace escalator with alert. (version): Increment to 4. * doc/db.png, doc/omp.rnc, doc/omp.html: Update from source. 2012-03-28 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Post branch version bump. * CMakeLists.txt: Updated version number. 2012-03-28 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * CMakeLists.txt, INSTALL: Set dependency for glib and gnutls to minimum of what openvas-libraries requires. 2012-03-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (validate_host): Check whether the octets are empty. Jump instead of leaking. (manage_max_hosts): Check whether the octets are empty. Return with error if there is a trailing -. 2012-03-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_max_hosts): Ensure the octets are within numeric range. Require the 127.0.0.1/24 form to have all four octets. 2012-03-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (validate_host): Improve validation significantly. (manage_max_hosts): In the range cases add checks for empty octets. 2012-03-27 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * CMakeLists.txt: Fixed svn revisioning. 2012-03-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (set_task_parameter): Pass quoted value to sql instead of original. 2012-03-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_text): Correct CLIENT_C_C_GCR_CONFIG_COMMENT variable name. The was causing the comment of imported configs to come out empty. 2012-03-26 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * CHANGES: Replaced leftover 2.0 description by 3.0 description. 2012-03-26 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number to 3.0.1. 2012-03-26 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Preparing the openvas-manager 3.0.0 release. * CHANGES: Updated. * INSTALL: Increased dependency for openvas-libraries to ">= 5.0.0". * CMakeLists.txt: Bumped version to 3.0.0. 2012-03-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (run_slave_task): Set SO_KEEPALIVE on slave socket. 2012-03-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CREATE_OVERRIDE and MODIFY_OVERRIDE find the result and task with the for_actions versions of the find functions, so that the owners resource is found when the user is observing the task. 2012-03-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CREATE_NOTE and MODIFY_NOTE find the result and task with the for_actions versions of the find functions, so that the owners resource is found when the user is observing the task. 2012-03-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (run_slave_task): Add the missing case where the credential has a key, now that there is OMP support for this. 2012-03-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (serve_client): Set SO_KEEPALIVE to 1 on the scanner socket, because the connection may be idle for long periods, for example when the task is paused. 2012-03-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (main): Create PID file earlier. 2012-03-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (find_user): Sort backwards to get the most recently added user, because there can be old users in the db. 2012-03-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_scap_loaded): New function. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): Check whether SCAP is available before attempting prognostic report, otherwise the SQL will fault. 2012-03-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (set_task_observers): Allow ',' to separate names too. Skip over empty names. 2012-03-16 Michael Wiegand <michael.wiegand@greenbone.net> Clean up CMake infrastructure and ensure that compilation with modern gccs works. * CMakeLists.txt: Remove setting of OPENVAS_LIB_INSTALL_DIR and OPENVAS_HEADER_INSTALL_DIR as they are retrieved via pkg-config now. * src/CMakeLists.txt: Remove handling of now superfluous OPENVAS_LIB_INSTALL_DIR and OPENVAS_HEADER_INSTALL_DIR. Set link libraries via target_link_libraries and not via LINK_FLAGS since this breaks compilation with more modern gccs. Take libraries from pkg-config output instead of hardcoding them. * INSTALL: Removed reference to now obsolete variables. 2012-03-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_target): Quote name later to simplify early returns. Add missing free. 2012-03-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (user_owns_uuid, user_has_access_uuid): Add special case for results. (find_result_for_actions): New function. * src/manage.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_RESULTS use the action versions of the find functions, in case the user is an observer on the result's task. 2012-03-15 Matthew Mundell <matthew.mundell@greenbone.net> Make the extra report formats work standalone. * report_formats/IVIL/IVIL.xsl (/): Move body to report. Swallow wrapper. (report): New template. * report_formats/arf/arf.xsl (openvas:report): New function. (host-report): Remove absolute ref. (/): New template. * report_formats/simple_bar_chart/plot-plt.xsl (/): Move body to report. Swallow wrapper. (report): New template. Body from /. Add report format param checks so that the format works with exported XML reports. * report_formats/simple_bar_chart/plot.xsl (openvas:report): New function. (/): Remove absolute refs. * report_formats/simple_map_plot/report_to_csv_host.xsl (report): Iterate using host instead of host_start. (/): New template. * report_formats/simple_pie_chart/pieplot.xsl (newline): New template. (/): Move body to report. Swallow wrapper. (report): New template. Body from /. Add report format param checks so that the format works with exported XML reports. * report_formats/simple_topo_plot/generate: Add report format param check so that the format works with exported XML reports. * report_formats/simple_topo_plot/hostvisdot-summary.xsl (newline): New template. (report): Add report format param checks so that the format works with exported XML reports. (/): New template. * report_formats/sourcefire/sourcefire.xsl (/report): Make relative. (/): New template. 2012-03-15 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number to 3.0+rc2. 2012-03-15 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Preparing the openvas-manager 3.0+rc1 release. * CHANGES: Updated. * CMakeLists.txt: Bumped version to 3.0+rc1. 2012-03-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (cvss_threat): Change param to a double. (prognosis_iterator_cvss_double): New function. (print_report_xml): Get the CVSS from the prognosis iterator as a double, to preserve the fraction, otherwise the rounding can give the result the wrong threat level. 2012-03-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/LaTeX/latex.xsl (results-per-host-single-host-port-findings): Select host from ip element, now that the caller interates over hosts instead of host_starts. 2012-03-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/LaTeX/latex.xsl (result-details-host-port-threat): Use \sim for the tilde, because it aligns better. 2012-03-14 Matthew Mundell <matthew.mundell@greenbone.net> Add OID to detection results in predefined report formats. * src/report_formats/HTML/HTML.xsl (result [issue]): Add OID. * src/report_formats/TXT/TXT.xsl (result [issue]): Add OID. * src/report_formats/LaTeX/latex.xsl (result-details-host-port-threat): Add OID. 2012-03-14 Matthew Mundell <matthew.mundell@greenbone.net> In the remaining predefined report formats, handle the wrapper report element present in exported XML reports. * src/report_formats/CPE/CPE.xsl (report): New template. Swallow wrapper report if present, then apply as / did before. (/): Just apply report. * src/report_formats/ITG/ITG.xsl (report): New template. Swallow wrapper report if present, then apply as / did before. (/): Just apply report. * src/report_formats/NBE/NBE.xsl (/): Swallow wrapper report if present. 2012-03-14 Matthew Mundell <matthew.mundell@greenbone.net> In the HTML, TXT and LaTeX report formats, handle the wrapper report element present in exported XML reports. Adjust or remove absolute path references accordingly. * src/report_formats/HTML/HTML.xsl (overide): Remove apply_overrides test. Now in caller. (result [issue]): Replace absolute report refs with report param. (report): Move body to real-report. Swallow wrapper report if present. (real-report): New template. Body from report. Remove absolute refs. * src/report_formats/TXT/TXT.xsl (overide): Remove apply_overrides test. Now in caller. (result [issue]): Add apply_overrides test. (report): Move body to real-report. Swallow wrapper report if present. (real-report): New template. Body from report. Remove absolute refs. (/): Move body to report. * src/report_formats/LaTeX/latex.xsl: Everywhere replace absolute references to /report with a call to openvas:report. (openvas:report): New function. (report): Move body to real-report. Swallow wrapper report if present. (real-report): New template. Body from report. Remove absolute refs. (/): New template. 2012-03-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/TXT/TXT.xsl (report): Restrict the mention of the full count to the normal scan report, because the count is only available there. * src/report_formats/HTML/HTML.xsl (report): Restrict the mention of the full count to the normal scan report, because the count is only available there. * src/report_formats/LaTeX/latex.xsl (results-overview): Restrict the mention of the full count to the normal scan report, because the count is only available there. 2012-03-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/TXT/TXT.xsl (result [prognostic-issue]): New template. (report): Add prognostic summary. Skip overrides, notes, times and ports for prognostic. Iterate over hosts instead of host_starts, because prognostic reports only have hosts. Special case the prognostic result template. (/): Add prognostic heading. 2012-03-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/HTML/HTML.xsl (template): Add prognostic title. (abstract): Add prognostic cases. (results-overview): Skip overrides and notes for prognostic. (prognostic-result, results-per-host-prognostic): New templates. (results-per-host-single-host): Expect current element to be host instead of host_start. Skip times for prognostic. Special case the prognostic result template. (results-per-host): Iterate over hosts instead of host_starts, because prognostic reports only have hosts. 2012-03-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Add type when delta. 2012-03-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/HTML/HTML.xsl (result [issue]): Add a separate prognostic case. (report): Add prognostic summary. Skip notes, overrides, port summary and start time for prognostic. Iterate over hosts instead of host_starts, because prognostic reports only have hosts. 2012-03-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/TXT/TXT.xsl (nvt): Remove lines around References section, so that it matches the other sections. (notes, overrides): Add delta case. (result [issue]): Add delta state marker to heading. Add extra delta sections. Pass delta arg to notes and overrides templates. (report, /): Modify heading and summary in delta case. 2012-03-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/HTML/HTML.xsl (report): Remove typo. * src/report_formats/LaTeX/latex.xsl (header): Add colours chunk, line_new and line_gone. Modify heading for delta. (text-to-escaped-diff-row): New template. (abstract): Add delta versions. (notes, overrides): Add delta case. (result-details-host-port-threat): Add delta state marker and extra sections. Pass delta arg to notes and overrides templates. 2012-03-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/HTML/HTML.xsl (override): Add delta arg. (result [issue]): Add missing override delta case. 2012-03-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/HTML/HTML.xsl (highlight-diff) (highlight-diff-line): New function. (note): Add delta param. (result [issue]): Add delta cases. (report): Add delta version of descriptions, and times. 2012-03-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (CLOSE, CLOSE_READ_OVER): New macros. (omp_xml_handle_end_element): Replace simple element closes with macro calls. 2012-03-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c: Remove prospective GET_CERTIFICATES code. This can be added back if ever really needed. 2012-03-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (ELSE_ERROR): New macro. (omp_xml_handle_start_element): Replace element error else clauses with ELSE_ERROR call. 2012-03-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_start_element): Remove the explicit checks for bogus children of empty elements. Add a generic bogus element error in the default case, as a replacement. 2012-03-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (APPEND): New macro. (handle_text): Use APPEND to neaten things slightly. 2012-03-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/HTML/HTML.xsl (result [issue]): Add product detection block. * src/report_formats/TXT/TXT.xsl (result [issue]): Add product detection block. * src/report_formats/LaTeX/latex.xsl (result-details-host-port-threat): Add product detection block. 2012-03-05 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage_sql.c (delete_config): Prevent deletion of "Full and Fast" Scan Config. Spotted by Matthew Mundell. 2012-03-02 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage_sql.c (delete_config): Removed duplicate condition spotted by cppcheck. 2012-03-02 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage_sql.c (manage_set_setting): Fixed compilation against latest openvas-libraries. 2012-02-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_ranges_all_tcp_nmap_5_51_top_100.c (make_port_ranges_all_tcp_nmap_5_51_top_100): Correct upper TCP bound. * src/manage_ranges_all_tcp_nmap_5_51_top_1000.c (make_port_ranges_all_tcp_nmap_5_51_top_1000): Correct upper TCP bound. 2012-02-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (clean_hosts): Add max arg. Adjust for duplicates. (create_targets): Pass max to clean_hosts, and check max for size after clean_hosts, in case of duplicates. * src/sql.c (sql_clean_hosts): Add clean_hosts arg. 2012-02-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (array_find_string): New function. (clean_hosts): Buffer the cleaned strings in an array temporarily, to prevent textual duplicates. 2012-02-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (append_debug_message): Remove. (append_error_message): New function. Was append_debug_message. (scanner_state_t): Rename states. (process_otp_scanner_input): Convert DEBUG message parsing to ERRMSG parsing. 2012-02-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (validate_host): New function. (manage_max_hosts): Improve validation of hosts. 2012-02-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_max_hosts): Allow newlines to separate hosts. (clean_hosts): Allow newlines to separate hosts. Prevent a leading comma in the hosts string when the first host is empty. (create_target): Also return an error if the host count is zero, in the import case. 2012-02-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_max_hosts): Count over empty elements. (create_target): Also return an error if the host count is zero. This ensures that a target always has at least one host. 2012-02-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (port): New type. (commands): Add port list commands and responses. (create_port_list, create_port_range): New commands. (create_target): Add PORT_LIST. (delete_port_list, delete_port_range, get_port_lists): New commands. (get_targets): Add TARGET/PORT_LIST. (help): Update text response in example. * doc/omp.rnc, doc/omp.html: Update from source. 2012-02-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_port_list_unique): Remove out of use ranges arg. Update caller. Remove note about freeing item, because array_free does it. (create_port_list): Remove note about freeing item, because array_free does it. (create_port_range): Correct return. 2012-02-23 Matthew Mundell <matthew.mundell@greenbone.net> Add details flag to OMP GET_PORT_LISTS. * src/omp.c (help_text): Correct command name. (get_port_lists_data_t): Add details. (omp_xml_handle_start_element): Parse details flag. (omp_xml_handle_end_element): In CLIENT_GET_PORT_LISTS send all info only when details flag is true. 2012-02-23 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (port_lists, port_lists_trash, port_ranges) (port_ranges_trash): New tables. (targets, targets_trash): Switch port ranges to port lists. * doc/db.png: Update from source. 2012-02-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_tables): Add note about overlapping ranges. 2012-02-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_port_range): If the new range overlaps any existing range then return an error instead of trying to deal with the complexity of combining the ranges. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_PORT_RANGE adjust create_port_range return for new meaning. 2012-02-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_port_range): If last precedes first, swap them. 2012-02-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_port_range): Handle overlapping ranges. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_PORT_RANGE add new create_port_range return. 2012-02-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (range_compare, ranges_sort_merge): New functions. (create_port_list_lock): Merge overlapping ranges before inserting them. 2012-02-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (omp_xml_handle_end_element): In CLIENT_GET_PORT_LISTS send start for end if end is NULL. 2012-02-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_port_range_iterator): If sort_field is NULL sort by type then start, instead of by ROWID. This improves sorting of ranges in GET_PORT_LISTS. 2012-02-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (port_range_ranges): Clear range on allocation so that the fields are initialised. (port_list_in_use): Lowercase UUID and add missing arg. 2012-02-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (port_list_iterator_count) (port_list_iterator_count_tcp, port_list_iterator_count_udp): New functions. * src/manage.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): Add port counts to GET_PORT_LISTS response. 2012-02-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_port_list): Add missing SQL statement. 2012-02-21 Matthew Mundell <matthew.mundell@greenbone.net> Add importing of port list to OMP CREATE_PORT_LIST. * src/manage_sql.c (struct range, range_t): Remove. Now exported. (create_port_list_lock): Add ID arg, and handle IDs in ranges. Update callers. (create_port_list): Add import case. * src/manage.h: Add header accordingly. Remove empty page. (struct range, range_t): New type. From manage_sql.c. * src/omp.c (struct create_port_list_range, create_port_list_range_t): New type. (create_port_list_data_t, create_port_list_data_reset): Add import ranges. (client_state_t): Add import states. (xml_handle_start_element, xml_handle_end_element) (omp_xml_handle_text): Add import to CREATE_PORT_LIST. (convert_to_manage_ranges): New function. 2012-02-17 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP DELETE_PORT_RANGE. * src/manage_sql.c (find_port_range, delete_port_range): New functions. (delete_port_range): Tidy doc. * src/omp.c (help_text): Add delete_port_range. (delete_port_range_data_t): New type. (delete_port_range_data_reset): New function. (command_data_t, client_state_t): Add delete_port_range. (delete_port_range_data): New variable. (xml_handle_start_element, xml_handle_end_element): Add DELETE_PORT_RANGE. * src/manage.h: Add headers accordingly. 2012-02-17 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP CREATE_PORT_RANGE. * src/manage_sql.c (create_port_range, port_range_uuid) (port_list_in_use): New functions. * src/omp.c (create_port_range_data_t): New type. (create_port_range_data_reset): New function. (command_data_t, client_state_t): Add create_port_range. (create_port_range_data): New variable. (xml_handle_start_element, xml_handle_end_element, xml_handle_text): Add CREATE_PORT_RANGE. * src/manage.h: Add headers accordingly. 2012-02-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (validate_port_range): Refer to port range by protocol in doc. (otp_port_range_ranges): Remove. Now port_range_ranges. (port_range_ranges): New function. Renamed to better fit purpose. Update callers. 2012-02-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (validate_port_range, otp_port_range_ranges): Allow newlines, empty ranges and space between tokens. 2012-02-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_port_list): Correct condition in last commit. 2012-02-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_port_list): Prevent removal of predefined port lists. (port_list_iterator_in_use): Always consider predefined port lists in use. 2012-02-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/CMakeLists.txt (manage, C_FILES): Add new port range files. 2012-02-15 Matthew Mundell <matthew.mundell@greenbone.net> Add rest of predefined port lists. * src/manage_sql.c (PORT_LIST_UUID_ALL_TCP_NMAP_5_51_TOP_100) (PORT_LIST_UUID_ALL_TCP_NMAP_5_51_TOP_1000) (PORT_LIST_UUID_ALL_IANA_TCP_2012) (PORT_LIST_UUID_ALL_IANA_TCP_UDP_2012): New defines. (ensure_predefined_port_lists_exist): Add new lists. * src/manage_ranges_all_tcp_nmap_5_51_top_100.c, src/manage_ranges_all_tcp_nmap_5_51_top_1000.c, src/manage_ranges_iana_tcp_2012.c, src/manage_ranges_iana_tcp_udp_2012.c, src/manage_ranges_nmap_5_51_top_2000_top_100.c: New files. Port ranges for the new predefined port lists. 2012-02-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/sql.c, src/sql.h: New files. SQL helpers and iterators from manage_sql. * src/manage_sql.c (clean_hosts, clean_hosts): Export for sql.c. (task_db, sql_nquote, sql_quote, sql_insert, sql, sql_quiet, sql_x) (sql_int, sql_string, sql_int64, sql_make_uuid, sql_hosts_contains) (sql_clean_hosts, sql_uniquify, sql_iso_time, sql_now): Move to sql.c. (init_iterator, iterator_int64, iterator_string, cleanup_iterator) (next): Move to sql.c. 2012-02-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (PORT_LIST_UUID_ALL_TCP, PORT_LIST_UUID_ALL_PRIV_TCP) (PORT_LIST_UUID_ALL_PRIV_TCP_UDP): New defines. (ensure_predefined_port_lists_exist): Add more lists. 2012-02-13 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP CREATE_PORT_LIST and add PORT_LIST to OMP CREATE_TARGET. * src/manage_sql.c (make_port_ranges_openvas_default): New function. (ensure_predefined_port_lists_exist): Move range creation out to make_port_ranges_openvas_default. (create_target): Add port_list_id arg. Associate target with this list if given. (create_port_list_lock): Add assertion. Remove redundant free. (create_port_list, port_list_uuid): New functions. * src/omp.c (create_port_list_data_t): New type. (create_port_list_data_reset): New function. (create_target_data_t, create_target_data_reset): Add port_list_id. (command_data_t): Add CREATE_PORT_LIST. (client_state_t): Add CREATE_PORT_LIST states. Add CLIENT_CREATE_TARGET_PORT_LIST. (create_port_list_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_text): Add CREATE_PORT_LIST. (omp_xml_handle_end_element): Add CREATE_PORT_LIST. Add PORT_LIST to CREATE_TARGET. * src/manage.h: Update headers accordingly. 2012-02-10 Matthew Mundell <matthew.mundell@greenbone.net> Add port lists. Switch targets to refer to port lists instead of OTP style port ranges. Hence increase database version to 56. Add database migration from version 55 to 56. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 56. * src/manage_sql.c (PORT_LIST_UUID_DEFAULT): New definition. (create_tables): Add port_lists, port_lists_trash, port_ranges and port_ranges_trash. Add port_list location to targets_trash. (migrate_55_to_56): New function. (database_migrators): Add migrate_55_to_56. (RANGE): New macro. (ensure_predefined_port_lists_exist): New function. (init_manage): Call ensure_predefined_port_lists_exist. (validate_port_range): Align doc param. (create_target): Autogenerate a port list for the target from the OTP port range. (delete_target): Set port_list_location. (init_user_target_iterator, init_target_iterator): Add port list name and UUID. (target_iterator_port_range): Remove. Replaced by target_port_range. (target_iterator_port_list_uuid, target_iterator_port_list_name) (target_iterator_port_list_trash, target_port_list): New functions. (target_port_range): Generate the ranges from the port list. (struct range, range_t): New type. (find_port_list, create_port_list_lock, otp_port_range_ranges) (create_port_list_unique, delete_port_list, init_port_list_iterator) (port_list_iterator_port_list, port_list_iterator_uuid) (port_list_iterator_name, port_list_iterator_comment) (port_list_iterator_in_use, init_port_range_iterator) (port_range_iterator_uuid, port_range_iterator_comment) (port_range_iterator_start, port_range_iterator_end) (port_range_iterator_type, port_range_iterator_type_int) (port_range_iterator_exclude, init_port_list_target_iterator) (port_list_target_iterator_uuid, port_list_target_iterator_name): New functions. (manage_restore, manage_empty_trashcan): Add port lists. * src/manage.h: Add and remove headers accordingly. (port_protocol_t): Prescribe numbers. (port_list_t, port_range_t): New types. * src/omp.c (help_text, command_data_t, client_state_t): Add port list ops. (delete_port_list_data_t, get_port_lists_data_t): New types. (delete_port_list_data_reset, get_port_lists_data_reset): New function. (delete_port_list_data, get_port_lists_data): New variables. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add port list ops. 2012-01-25 Henri Doreau <henri.doreau@greenbone.net> Wrap storage of the scanner security messages into transactions. This improves performances by several order of magnitude against message bursts. * src/otp.c (write_message): Open transaction (if needed) before inserting a new message into the database. (process_otp_scanner_input): Close any pending transaction. * src/manage.c (manage_check_current_task): Close pending and inactive transactions. * src/manage_sql.c (TIMEVAL_SUBTRACT_MS, manage_transaction_start) (manage_transaction_stop): New. * src/manage_sql.h: Update headers accordingly. * src/omp.c (process_omp_client_input): Close pending transactions. 2012-01-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (lookup_report_format): Add current user condition, as many users may have report formats with the given name. 2012-01-24 Michael Wiegand <michael.wiegand@greenbone.net> * tools/greenbone-scapdata-sync: Set RSYNC_DELETE to empty by default to avoid removing scap.db on every run. 2012-01-18 Henri Doreau <henri.doreau@greenbone.net> * report_formats/arf/create_report_import: Leave name, description and summary out of the plugin signature as they can be changed by the user. 2012-01-18 Henri Doreau <henri.doreau@greenbone.net> Added new report format plugin to produce NIST asset identification format 1.1 compliant documents. * report_formats/arf/arf.xsl, report_formats/arf/create_report_import, report_formats/arf/generate: new. 2012-01-17 Henri Doreau <henri.doreau@greenbone.net> * src/manage_sql.c (init_asset_iterator, host_nthlast_report_host) (filtered_host_count): Only wait for host (instead of task) completion to use the gathered host details. 2012-01-17 Henri Doreau <henri.doreau@greenbone.net> * src/manage_sql.c (init_report_host_details_iterator): Added comment about the filtering of internal product detection fields. 2012-01-17 Henri Doreau <henri.doreau@greenbone.net> * src/manage_sql.c (trim_partial_report): Don't delete host details for already-completed hosts when resuming a stopped scan. 2012-01-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_target, manage_restore): Add missing port_range field to target movement. 2012-01-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage): Remove the requirement that the trash directory exists, in the code that syncs the trash directory with the database. 2012-01-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (omp_xml_handle_end_element): In GET_REPORTS add NULL owner checks to the brief case, as in the detailed case. Can be NULL with example task. 2012-01-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage): Ensure that the report formats trash directory matches the database. 2012-01-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_report_format): Use correct variable in message. (manage_empty_trashcan): Remove the report formats on disk too. 2012-01-09 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * INSTALL: Re-arranged text a bit and added some Debian 6 info. 2012-01-04 Henri Doreau <henri.doreau@greenbone.net> * src/report_formats/TXT/TXT.xsl (nvt): Wrap BID lists to 80 columns. (wrapped_cve_list): Renamed into wrapped_list. Changed to handle arbitrary elements per line. 2012-01-03 Henri Doreau <henri.doreau@greenbone.net> * src/report_formats/TXT/TXT.xsl (nvt): New. Added a reference box to report CVE/BID/Xrefs of each result. (wrapped_cve_list): New. Smartly cut long CVE lists into 80 columns-wide lines. 2012-01-03 Henri Doreau <henri.doreau@greenbone.net> * src/report_formats/LaTeX/latex.xsl (references): New. Added a reference box to report CVE/BID/Xrefs of each result. 2012-01-03 Henri Doreau <henri.doreau@greenbone.net> * src/report_formats/HTML/HTML.xsl (nvt): New. Added a reference box to report CVE/BID/Xrefs of each result. 2011-12-22 Henri Doreau <henri.doreau@greenbone.net> * src/manage_sql.c (update_nvti_cache): Add xref to the NVTI cache. 2011-12-22 Henri Doreau <henri.doreau@greenbone.net> * src/manage_sql.c (result_iterator_nvt_xref): New function. Get NVT XREF from a result iterator. * src/manage.h: Update headers accordingly. * src/omp.c (buffer_results_xml): Add xref element to scan results. 2011-12-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (get_reports): Add host filter attribs. Add prognostic report type. Add delta attribs. (modify_config): Add NAME and COMMENT. (report): Add DELTA, FILTERS/HOST and FILTERS/DELTA. (create_report): Add TASK. * doc/omp.rnc, doc/omp.html: Update from source. * ChangeLog: Correct command name. 2011-12-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (version): Update. (authenticate): Add ROLE and TIMEZONE to response. (modify_settings): New command. (help): Add new commands to plain response. Update AUTHENTICATE response in schema example. * doc/omp.rnc, doc/omp.html: Update from source. 2011-12-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (actions): Remove trailing dot. (create_note, create_override, modify_note, modify_override, get_notes) (get_overrides): Add ACTIVE and END_TIME. * doc/omp.rnc, doc/omp.html: Update from source. 2011-12-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (result): New element. From report. Add details and detection. (report): Call through to result. * doc/omp.rnc, doc/omp.html: Update from source. 2011-12-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (parse_iso_time): Also try parse the special %FT%TZ ISO format, because this is what's in the report when the timezone was UTC. 2011-12-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_start_element): In CREATE_TASK remove task if setting observers fails. 2011-12-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_result_iterator): In the result ordering convert NULL CVSS bases to 0.0 before sorting. This ensures that the ordering is the same as the ordering expected by the delta comparison functions. 2011-12-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (migrate_53_to_54, migrate_53_to_54): Ensure that the table exists before altering it. 2011-12-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (run_slave_task): Try the old XML UUID if the new one fails. 2011-12-05 Matthew Mundell <matthew.mundell@greenbone.net> Update the UUIDs of the predefined report formats because the signing technique has changed. Hence increase database version to 55. Add database migration from version 54 to 55. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 55. * src/manage_sql.c (migrate_54_to_55_format, migrate_54_to_55): New functions. (database_migrators): Add migrate_54_to_55. (init_manage, report_format_predefined): Update report format UUIDs. * src/omp.c (omp_xml_handle_start_element) (omp_xml_handle_end_element): Update report format UUIDs. * src/manage.c (run_slave_task): Update report format UUIDs. * doc/db.png: Update for version change. 2011-12-05 Henri Doreau <henri.doreau@greenbone.net> Implemented CR#57 (NVT Feed Product Detection Improvements). * src/manage_sql.c (result_detection_reference): New function. (init_report_host_details_iterator): Filter out product detection host details when generating reports. * src/manage.h: Update header accordingly. * src/omp.c (buffer_results_xml): Add product detection block to the vulnerability detection results. 2011-12-02 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number. 2011-12-02 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 3.0+beta8 release. * CHANGES: Updated. 2011-12-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/HTML/HTML.xsl (note, override): Add "active until". (report): Add hostname in Host Summary. * src/report_formats/LaTeX/latex.xsl (result-overview) (results-overview-table-single-host-row): Add hostname in Host Summary. (notes, overrides): Add "active until". * src/report_formats/TXT/TXT.xsl (note, override): Add "active until". (report): Add hostname in Host Summary. 2011-11-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_counts_id_filt): Account for host in override case. 2011-11-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_count_filtered): Add missing paren in SQL. 2011-11-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_note): Add missing active param. (note_iterator_end_time, note_iterator_active): Correct position. * src/manage.h: Update header accordingly. * src/omp.c (create_note_data_t, create_note_data_reset) (client_state_t): Add active elements. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add ACTIVE to CREATE_NOTE. Missing from last patch. 2011-11-22 Matthew Mundell <matthew.mundell@greenbone.net> Add note end times. Hence increase database version to 54. Add database migration from version 53 to 54. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 54. * src/manage_sql.c (create_tables): Add end_time to notes. (migrate_53_to_54): New functions. (database_migrators): Add migrate_53_to_54. (modify_note): Add active param. (NOTE_COLUMNS): Add active fields. (note_iterator_end_time, note_iterator_active): New functions. * src/manage.h: Update headers accordingly. * src/omp.c (modify_note_data_t, modify_note_data_reset) (client_state_t): Add active. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add ACTIVE to MODIFY_NOTE and CREATE_NOTE. (buffer_notes_xml): Add ACTIVE and END_TIME to NOTE. * doc/db_postgres.sql (notes): Add column end_time. * doc/db.png: Update from source. 2011-11-23 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number. 2011-11-23 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 3.0+beta7 release. * CHANGES: Updated. 2011-11-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage): Check for the predefined report formats by UUID instead of by name. This prevents them from being duplicated when the user changes the name. 2011-11-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/create_signatures: Remove editable values from content for signing. 2011-11-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (compare_files): New function. (create_report_format): Sort the files alphabetically, to match the order used in verify_report_format. * report_formats/simple_bar_chart/create_report_import, report_formats/simple_map_plot/create_report_import, report_formats/simple_pie_chart/create_report_import, report_formats/simple_topo_plot/create_report_import, report_formats/sourcefire/create_report_import: Remove editable values from content for signing, to match Manager. Order files alphabetically. 2011-11-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_report_format, verify_report_format): Remove name, summary, description and parameter values from content for signing. This insures that the trust stays the same, even if the report format is edited. 2011-11-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (iso_time): Make public. * src/manage.h: Update header accordingly. * src/omp.c (ctime_strip_newline): Remove. Out of use. (buffer_notes_xml, buffer_overrides_xml, buffer_overrides_xml) (buffer_schedules_xml, buffer_schedules_xml, omp_xml_handle_end_element) (omp_xml_handle_end_element, omp_xml_handle_end_element) (omp_xml_handle_end_element): Send ISO times instead of ctime. 2011-11-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (parse_ctime): Parse ctime using the current timezone. (parse_iso_time): Call parse_ctime instead of parse_iso_time, so that old reports are imported using the current timezone. 2011-11-21 Matthew Mundell <matthew.mundell@greenbone.net> Switch report times to ISO 8601 format. * src/manage_sql.c (ctime_strip_newline): Remove. Out of use. (sql_ctime): Remove. Rename to sql_iso_time. (sql_iso_time): New function. Was sql_ctime. Switch to ISO format. (parse_iso_time, iso_time): New functions. (init_manage_process): Rename ctime SQL function to iso_time. Rename in all callers too. (set_task_start_time, create_report, set_scan_start_time) (set_scan_end_time, set_scan_host_end_time) (set_scan_host_start_time): Expect ISO time instead of ctime. (set_task_start_time_otp, set_scan_start_time_otp) (set_scan_start_time_otp, set_scan_host_end_time_otp) (set_scan_host_start_time_otp): New function. Copy of old ctime version. (report_timestamp): Switch to ISO format. * src/manage.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): Update version to reflect change. * src/otp.c (process_otp_scanner_input): Call ctime variants of time functions. 2011-11-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_report): Swap host_starts and host_ends args to match documentation and callers. 2011-11-16 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number. 2011-11-16 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 3.0+beta6 release. * CHANGES: Updated. 2011-11-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (init_asset_iterator, filtered_host_count): Add apply_overrides arg. (print_report_xml): Pass apply_overrides flag through to iterator initialisers and counting functions, in the assets and prognostic case. 2011-11-14 Michael Wiegand <michael.wiegand@greenbone.net> * tools/greenbone-scapdata-sync: Fix location of log file. 2011-11-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (migrate_51_to_52): Update comment from previous migrator. 2011-11-10 Michael Wiegand <michael.wiegand@greenbone.net> * CMakeLists.txt: Adjust source locations in install command to enable installation from an out-of-source build. 2011-11-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_start_element): Compare ultimate flag with "0" instead of "ultimate". This is the intended behaviour, clients would only have been affected if they passed "0" explicitly. 2011-11-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_tables): Add index results_by_host. 2011-11-08 Matthew Mundell <matthew.mundell@greenbone.net> Include override active state in MODIFY_OVERRIDE and CREATE_OVERRIDE. * src/manage.c (create_override, modify_override): Add active argument. Set end_time accordingly. * src/manage.h: Update headers accordingly. * src/omp.c (create_note_data_reset, create_override_data_reset) (modify_override_data_t, modify_override_data_reset, client_state_t): Add active. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add ACTIVE to CREATE_OVERRIDE and MODIFY_OVERRIDE. (buffer_overrides_xml): Only generate the end time when there is one. 2011-11-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (manage_scap_update_time): Format time like SCAP times. 2011-11-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (SCAP_TIMESTAMP_FILENAME): New define. (manage_scap_update_time): New function. (manage_read_info): Send SCAP update time with CVE and CPE. 2011-11-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Quote in attributes with single quotes because double quotes breaks the syntax. 2011-11-04 Matthew Mundell <matthew.mundell@greenbone.net> Add override end times. Hence increase database version to 53. Add database migration from version 52 to 53. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 53. * src/manage_sql.c (sql_now, migrate_52_to_53): New functions. (create_tables): Add end_time to overrides. (database_migrators): Add migrate_52_to_53. (init_manage_process): Create SQL now function. (task_threat_level, task_previous_threat_level, init_result_iterator) (report_scan_result_count, report_count, report_count_filtered) (report_counts_id_filt, modify_override): Add end_time to override check. (override_iterator_end_time, override_iterator_active): New functions. * src/manage.h: Add headers accordingly. * src/omp.c (buffer_overrides_xml): Add ACTIVE and END_TIME. * doc/db_postgres.sql (overrides): Add column end_time. * doc/db.png: Update from source. 2011-11-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (buffer_notes_xml, buffer_overrides_xml): Copy ctime return to preserve it across multiple calls. 2011-11-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (cvss_threat, prognosis_where_levels): Match CVSS threat boundaries to update of CR 42. 2011-11-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Correct detail descriptions in assets case. 2011-11-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): In the prognostic case, use the host buffer length instead of filtered_host_count, because the host buffer accounts for first_result and max_results. 2011-11-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): In the prognostic case, calculate the filtered total from the other totals, to include the level filtering. Only skip the host if result_hosts_only is set. Move the host buffering out of the result loop, and add a result_hosts_only check there too. Add missing iterator cleanup. 2011-11-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Buffer the host only if it has results on the current page. 2011-11-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (struct buffer_host): New structure. (buffer_host_t): New type. (free_buffer): New function. (print_report_xml): In the prognostic case, buffer the hosts and print them after the results, so that all results occur in the one RESULTS and all hosts occur in one HOSTS. Also do the first and max filtering by hand instead of passing them to the result iterator, because that only works for single hosts. And count the filtered_result_count by hand too, otherwise it includes all threat levels. 2011-11-01 Henri Doreau <henri.doreau@greenbone.net> * tools/cpe_getbyname.xsl: Return an empty item if nothing was found. 2011-10-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (prognostic_report_result_count): Increment the return counts instead of setting them. (print_report_xml): Skip prognostic hosts that have 0 results. 2011-10-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Neaten prognostic result wording slightly. 2011-10-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (prognostic_report_result_count): New function. (print_report_xml): Count the filtered results with separately, in order to count all the filtered results. 2011-10-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (PRINT_XML): New macro. (print_report_xml): Use PRINT_XML to output strings that already have the XML tags in them. 2011-10-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (PRINT): Print to a string first, for XML escaping. 2011-10-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_TASKS add NULL checks on owner, because owner is NULL for the example task. 2011-10-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In the brief version of GET_REPORTS, move the second last report generation to precede the last report. This allows the counts from the first report to be reused correctly. Also include the second last report in the reuse check of the last report. 2011-10-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In the brief version of GET_REPORTS, move the first_report_id free to follow the last use, and compare the report IDs with strcmp because they're strings. 2011-10-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In the brief version, merge the false positives count variables into a single variable in a broader scope, as is done with the other counts. Do the same for all the counts of second last report case of the brief version. This ensures that these variables are always initialised. 2011-10-24 Matthew Mundell <matthew.mundell@greenbone.net> Add to GET_INFO CPE a list of CVEs to which the CPE is vulnerable. * src/manage.c (manage_read_info): Add CVEs to CPE. * src/manage_sql.c (init_cpe_cve_iterator, cve_iterator_name) (cve_iterator_cvss): New function. * src/manage.h: Add headers accordingly. 2011-10-21 Matthew Mundell <matthew.mundell@greenbone.net> Add NVTs that address the CVE to GET_INFO CVE. * src/manage.c (manage_read_info): Add NVTs to CVE. * src/manage_sql.c (NVT_ITERATOR_COLUMNS): New define. (init_nvt_iterator): Use NVT_ITERATOR_COLUMNS. (init_cve_nvt_iterator): New function. * src/manage.h: Add header accordingly. 2011-10-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (manage_read_info): Wrap SCAP CVE and CPE elements in CVE and CPE tags. * src/schema_formats/XML/OMP.xml (get_info): Update example to match. * doc/omp.html: Update from source. 2011-10-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_report): Set task status to New if it was the last report. 2011-10-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (set_task_schedule): Stop task if it is paused, when changing schedule. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): Handle new set_task_schedule return. 2011-10-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_override_iterator): Remove ORDER BY from single override case. Add NVT name column to ordering cases. 2011-10-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_report): Use correct format specifier for end time. 2011-10-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_note_iterator): Remove ORDER BY from single note case. Add NVT name column to ordering cases. 2011-10-10 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number. 2011-10-10 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 3.0+beta5 release. * CHANGES: Updated. * CMakeLists.txt: Update openvas-libraries dependency. * INSTALL: Document updated openvas-libraries dependency. 2011-10-06 Henri Doreau <henri.doreau@greenbone.net> * src/omp.c (get_nvti_xml, category_name): Move functions to manage.c. * src/manage.c (get_nvti_xml, category_name): Added. * src/manage.h: Update header accordingly. 2011-10-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_set_setting): Add Password case. * src/omp.c (omp_xml_handle_end_element): Add Password to CLIENT_MODIFY_SETTING message. 2011-10-05 Henri Doreau <henri.doreau@greenbone.net> * src/omp.c (get_nvti_xml): New function, from a refactoring of send_nvt(). (send_nvt): Refactored to export the XML generation part. * src/manage.c (manage_read_info): Handle NVT details. 2011-10-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (sql_ctime): Return empty string if epoch_time is 0, as 0 is the initial state. 2011-10-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (migrate_51_to_52_sql_convert): Cater for empty times. 2011-10-05 Henri Doreau <henri.doreau@greenbone.net> * src/schema_formats/XML/OMP.xml (get_nvts): Fix typos. * doc/omp.html: Update from source. 2011-10-04 Matthew Mundell <matthew.mundell@greenbone.net> Migrate the textual times in the db to seconds since the epoch. Hence increase database version to 52. Add database migration from version 51 to 52. The migrator assumes that the times in the database are in the current timezone. This allows the sysadmin to set TZ to whatever the Scanner has been using. From here on the Manager expects the Scanner to send time in UTC, so the sysadmin must either explicity arrange this, or use the upcoming Scanner revision which forces UTC. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 52. * src/manage_sql.c (ctime_strip_newline, sql_ctime, parse_otp_time) (manage_migrate_needs_timezone, migrate_51_to_52_sql_convert) (migrate_51_to_52): New functions. (database_migrators): Add migrate_51_to_52. (init_manage_process): Create SQL ctime function. (init_manage): Use epoch times in SQL. (task_start_time, set_task_start_time, create_report, init_host_iterator) (scan_start_time, set_scan_start_time, scan_end_time, set_scan_end_time) (set_scan_host_end_time, set_scan_host_start_time, reset_task): Switch to epoch times in db. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): Enable use of user's timezone. * src/openvasmd.c (main): Skip setting TZ if required by migrator. * doc/db.png: Update for version change. 2011-09-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Turn off last change because some of the dates in the database are specific to current timezone. 2011-09-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Set the timezone to the user's timezone when authentication succeeds, so that all commands use it. 2011-09-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In the authentication response if the timezone is empty send UTC. 2011-09-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_start_element): Init value in MODIFY_SETTING, in case the value is empty. 2011-09-28 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP MODIFY_SETTING. * src/manage_sql.c (set_setting): New function. * src/manage.h: Add header accordingly. * src/omp.c (help_text, command_data_t, client_state_t): Add MODIFY_SETTING. (modify_setting_data_t): New type. (modify_setting_data_reset): New function. (modify_setting_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add MODIFY_SETTING handling. 2011-09-27 Matthew Mundell <matthew.mundell@greenbone.net> Add support for storing the user's timezone in the db. Hence increase database version to 51. Add database migration from version 50 to 51. Include user timezone and role in the AUTHENTICATE response. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 51. * src/manage_sql.c (create_tables): Add timezone to users. (migrate_50_to_51): New function. (database_migrators): Add migrate_50_to_51. (authenticate): Set credentials role and timezone. * src/omp.c (omp_xml_handle_end_element): Add ROLE and TIMEZONE to AUTHENTICATE response. * doc/db_postgres.sql (users): Add timezone. * doc/db.png: Update from SQL. 2011-09-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (cvss_threat, prognosis_where_levels): Use the CVSS threat mapping from CR 42. 2011-09-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (result_iterator_nvt_cvss_base_double): New function. (result_cmp): Include CVSS base in comparison, as this was recently added to the init_result_iterator sorting. 2011-09-25 Henri Doreau <henri.doreau@greenbone.net> * src/manage.c, src/CMakeLists.txt, CMakeLists.txt: Fix path to the SCAP data directory. 2011-09-23 Henri Doreau <henri.doreau@greenbone.net> * src/omp.c (get_info_data_t, get_info_data_reset, command_data_t) (omp_xml_handle_start_element, omp_xml_handle_end_element): Relocated get_info code. 2011-09-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Correct last commit. 2011-09-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Only send observers when the user owns the task. 2011-09-22 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db.png: Really update from SQL. 2011-09-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In all CREATE commands, if user is observer respond with an error. 2011-09-22 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (task_users): New table. * doc/db.png: Update from SQL. 2011-09-22 Henri Doreau <henri.doreau@greenbone.net> * src/schema_formats/XML/OMP.xml (get_info): Rewrapped lines for readability. 2011-09-22 Henri Doreau <henri.doreau@greenbone.net> * src/schema_formats/XML/OMP.xml (get_info): Relocated get_info documentation to honor alphabetical sorting. Rewrapped lines. * doc/omp.rnc, doc/omp.html: Update from source. 2011-09-22 Henri Doreau <henri.doreau@greenbone.net> * src/schema_formats/XML/OMP.xml (get_info): Document new operation. * doc/omp.rnc, doc/omp.html: Update from source. 2011-09-22 Henri Doreau <henri.doreau@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Removed superfluous check, the variable cannot be NULL there. 2011-09-22 Henri Doreau <henri.doreau@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Removed a bogus ">" in get_info_responses. 2011-09-22 Matthew Mundell <matthew.mundell@greenbone.net> * ChangeLog: Correct dates. 2011-09-22 Henri Doreau <henri.doreau@greenbone.net> Add new get_info command and support to retrieve CPE and CVE details through OMP. * src/omp.c (get_info_data_t, get_info_data_reset, command_data_t) (omp_xml_handle_start_element, omp_xml_handle_end_element): Add get_info command. * src/manage.c (get_cpe_filename, get_cve_filename, xsl_transform) (manage_read_info): New functions. * src/manage.h: Update header accordingly. * tools/cpe_getbyname.xsl, tools/cve_getbyname.xsl: New files. * CMakeLists.txt: Install cpe_getbyname.xsl and cve_getbyname.xsl. * src/CMakeLists.txt: Export path to the SCAP resource directory as a preprocessor define. 2011-09-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (actions, user_list): New types. (create_task, modify_task, get_configs, get_lsc_credentials, get_nvts) (get_targets, get_tasks): Add actions param and OBSERVERS. * doc/omp.rnc, doc/omp.html: Update from source. 2011-09-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (create_task_data_t, create_task_data_reset): Add observers. (client_state_t): Add CLIENT_CREATE_TASK_OBSERVERS. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add OBSERVERS to CREATE_TASK. 2011-09-21 Matthew Mundell <matthew.mundell@greenbone.net> Add task observers. * src/omp.c (get_configs_data_t, get_configs_data_reset) (get_lsc_credentials_data_t, get_lsc_credentials_data_reset) (get_nvts_data_t, get_nvts_data_reset, get_targets_data_t) (get_targets_data_reset, get_tasks_data_t, get_tasks_data_reset): Add actions. (modify_task_data_t, modify_task_data_reset): Add observers. (client_state_t): Add CLIENT_MODIFY_TASK_OBSERVERS. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add OBSERVERS to MODIFY_TASK and GET_TASK. Move CLIENT_GET_CONFIGS cleanup_iterator into right position. Add actions flag to GET_TASKS, GET_TARGETS, GET_CONFIGS, GET_LSC_CREDENTIALS and GET_NVTS. * src/manage_sql.c (user_t): New type. (parse_actions, user_has_access_uuid): New functions. (create_tables): Add table task_users. (DEF_ACCESS): Move up in file. (init_task_user_iterator, task_user_iterator_task) (task_user_iterator_user, task_user_iterator_actions) (task_user_iterator_name, init_user_task_iterator, task_observers) (find_user, set_task_observers, find_task_for_actions) (find_report_for_actions, find_target_for_actions) (init_user_target_iterator, find_config_for_actions) (init_user_config_iterator, find_lsc_credential_for_actions) (init_user_lsc_credential_iterator): New functions. (init_task_iterator, init_task_iterator, init_config_iterator) (init_lsc_credential_iterator): Add actions arg to include other users' tasks to which user has given access. Update callers. (report_counts): Count GET accessible tasks. * src/manage.h: Update headers appropriately. (action_t): New type. * src/manage.c: Update iterator init callers. 2011-09-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Add renaming TODO. 2011-09-19 Michael Wiegand <michael.wiegand@greenbone.net> * CMakeLists.txt: Add -D_FILE_OFFSET_BITS=64 to the default flags to improve support for large files on 32-bit platforms. 2011-09-15 Matthew Mundell <matthew.mundell@greenbone.net> Add host filters to GET_REPORTS for prognostic case. * src/manage_sql.c (print_report_xml): Add host filters for prognostic report. Enable multi-host prognostic case. Update caller. (manage_send_report): Add host filters for prognostic report. * src/manage.h: Add headers accordingly. * src/omp.c (get_reports_data_t, get_reports_data_reset) (omp_xml_handle_start_element, omp_xml_handle_end_element): Add host filters to GET_REPORTS. 2011-09-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Remove SCAP details from prognostic report. 2011-09-15 Matthew Mundell <matthew.mundell@greenbone.net> Add single host prognostic reports. * src/manage_sql.c (init_prognosis_iterator): Add description and CPE name. (prognosis_iterator_description, prognosis_iterator_cpe) (prognosis_where_search_phrase, prognosis_where_levels) (prognosis_where_cvss_base, init_host_prognosis_iterator): New functions. (print_report_xml, manage_send_report): Add type "prognosis". * src/omp.c (omp_xml_handle_start_element): Add missing min_cvss_base attrib for GET_REPORTS. (omp_xml_handle_end_element): Add prognostic type to GET_REPORTS. 2011-09-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (sql): Check for SQLITE_LOCKED after sqlite3_prepare. After sqlite3_step check if the reset return is BUSY or LOCKED. (cleanup_manage_process): Remove DETACH scap. Seems to result in blocking failures in error cases when run in sigabrt. 2011-09-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage_process): Uppercase SQL keyword. (cleanup_manage_process): DETACH scap. 2011-09-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Reluctantly init run_status. 2011-09-13 Matthew Mundell <matthew.mundell@greenbone.net> * INSTALL: Typo. 2011-09-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Add detail for threat of highest CVSS. 2011-09-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (scap_loaded): New variable. (init_manage_process): Set scap_loaded when SCAP db present. (print_report_xml): Only send SCAP data when db present. 2011-09-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (cvss_threat): New function. (init_manage_process): Attach SCAP database. (DEF_ACCESS): New macro. (init_prognosis_iterator, prognosis_iterator_cve) (prognosis_iterator_cvss, prognosis_iterator_cvss_int): New functions. (print_report_xml): Include SCAP info for each App. 2011-09-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_set_config_name, manage_set_config_comment) (manage_set_config_name_comment): New functions. * src/manage.h: Add headers accordingly. * src/omp.c (modify_config_data_t, modify_config_data_reset) (client_state_t): Add comment and name. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add NAME and COMMENT to MODIFY_CONFIG. 2011-09-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (host_report_count): Count only visible finished reports belonging to the user. 2011-09-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (get_reports): Add host and pos args. * doc/omp.rnc, doc/omp.html: Update from source. 2011-09-05 Matthew Mundell <matthew.mundell@greenbone.net> Add host and pos args to GET_REPORTS. * src/manage_sql.c (host_last_report_host): Remove for rename. (host_nthlast_report_host): New function. Was host_last_report_host. Add pos arg. (print_report_xml): Add host and pos host args, for getting single host and for specifying which report to use. Update callers. (manage_send_report): Add host and pos host args. * src/manage.h: Update header accordingly. * src/omp.c (get_reports_data_t, get_reports_data_reset): Add host and pos. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add host and pos to GET_REPORTS. 2011-09-05 Henri Doreau <henri.doreau@greenbone.net> Generate the openvas-scapdata-sync script at compile time, with the correct prefix and destination directories. * CMakeLists.txt: Updated to generate the sync script. * tools/openvas-scapdata-sync.in: (formerly openvas-scapdata-sync). Read helper scripts from the correct directory. 2011-09-02 Michael Wiegand <michael.wiegand@greenbone.net> * src/report_formats/LaTeX/latex.xsl: Correct two typos in the escaping functions which could cause the output to be mangled in case a $ or {} was contained in strings the escape_text template was called upon. Patch suggested by Andre Heinecke. 2011-09-01 Henri Doreau <henri.doreau@greenbone.net> Created a `tools' directory with files required for SCAP data management and synchronization. * tools/cpe_update.xsl (new): Helper script which generates SQL statements to update the SCAP database from CPE entries. * tools/cpe_youngerthan.xsl (new): Helper script which filters CPE entries younger than a given date. * tools/cve_update.xsl (new): Helper script which generates SQL statements to update the SCAP database from CVE entries. * tools/cve_youngerthan.xsl (new): Helper script which filters CVE entries younger than a given date. * tools/db_init.sql (new): SCAP database initialization script. * tools/greenbone-scapdata-sync (new): SCAP data synchronization script for GSF. * tools/openvas-scapdata-sync (new): SCAP data synchronization script for the OpenVAS feed. 2011-08-18 Matthew Mundell <matthew.mundell@greenbone.net> Drop the UNIQUE constraint in task_preferences. The task name pair is what should be unique. This was segfaulting Manager on the second task create. Hence increase database version to 50. Add database migration from version 49 to 50. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 50. * src/manage_sql.c (create_tables): Remove UNIQUE from task_preferences. (migrate_49_to_50): New function. (database_migrators): Add migrate_49_to_50. * doc/db.png: Update for version change. 2011-08-11 Matthew Mundell <matthew.mundell@greenbone.net> Adjust the delta filtered counts during the comparison, as is done for the page results. * src/manage_sql.c (compare_and_buffer_results): Add would_use argument to indicate if full filtered report would have used the result. (print_report_xml): Adjust orig_f_* counts alongside the f_* counts. In the counting after reaching max_results, adjust the orig_f_* counts instead of the f_* counts. 2011-08-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): In the delta case for the grand total also send the total count of filtered results, instead of the page count. 2011-08-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): In the delta case send the total count of filtered results, instead of the page count. 2011-08-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (create_task, modify_task) (get_tasks): Add preferences. * doc/omp.rnc, doc/omp.html: Update from source. 2011-08-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (end_char): New function. (manage_max_hosts): Check last char instead of char following hyphen to see if a host is a hostname. 2011-08-11 Matthew Mundell <matthew.mundell@greenbone.net> Add an error response to CREATE_REPORT for asset reports. Parse over new asset report elements so that the Manager reaches the error. Add type to GET_REPORTS XML REPORT to identify the asset report. * src/omp.c (create_report_data_t, create_report_data_reset): Add type field. (client_state_t): Add asset states for CREATE_REPORT. (omp_xml_handle_start_element, omp_xml_handle_end_element): Parse type for CREATE_REPORT. Parse over HOST_COUNT and HOSTS in CREATE_REPORT. Ensure that CREATE_REPORT type is scan. * src/manage_sql.c (print_report_xml): Add type to asset report. * src/schema_formats/XML/OMP.xml (report): Add type attribs. * doc/omp.rnc, doc/omp.html: Update from source. 2011-08-11 Matthew Mundell <matthew.mundell@greenbone.net> Update with Asset changes. * src/schema_formats/XML/OMP.xml (report): Add host_count and hosts. Add missing any on host. (get_report): Add type attribute. * doc/omp.rnc, doc/omp.html: Update from source. 2011-08-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORTS add check on type. * src/manage_sql.c (filtered_host_count): Add "scan" to doc. (print_report_xml): Add NULL check. (manage_report): Require type to be NULL or "scan". (manage_send_report): Add full type check. 2011-08-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_asset_iterator, print_report_xml): Cleanup indenting after rename. 2011-08-10 Matthew Mundell <matthew.mundell@greenbone.net> Use "assets" in naming instead of "inventory". * src/manage_sql.c (init_inventory_iterator) (inventory_iterator_ip): Rename. Update callers. (init_asset_iterator, asset_iterator_ip): New functions. Renamed from "inventory". (print_report_xml, manage_send_report): Rename "inventory" report type to "assets". * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORTS rename "inventory" report type to "assets". 2011-08-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_inventory_iterator, filtered_host_count) (host_last_report_host): Only consider results of tasks owned by the user making the request. Remove hacks to exclude example task, as it has a null user. 2011-08-10 Matthew Mundell <matthew.mundell@greenbone.net> Switch the host of the example result to an IP. Hence increase database version to 49. Add database migration from version 48 to 49. In the migrator also ensure that the result has the right UUID. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 49. * src/manage_sql.c (migrate_48_to_49): New function. (database_migrators): Add migrate_48_to_49. (init_manage): Replace "localhost" with "127.0.0.1" in example result and result_host. * doc/db.png: Update for version change. 2011-08-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (filtered_host_count): Add the finished report and trashcan checks to the "all hosts" case. 2011-08-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_inventory_iterator, filtered_host_count) (host_last_report_host): Only consider finished scans. 2011-08-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_inventory_iterator, filtered_host_count) (host_last_report_host): Skip reports on tasks that are in the trashcan. 2011-08-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_inventory_iterator, filtered_host_count): Add missing search_phrase length checks. 2011-08-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_inventory_iterator, filtered_host_count): Add CPE and port number to text phrase filtering. 2011-08-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_inventory_iterator, filtered_host_count): Add OS to text phrase filtering. 2011-08-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_tables): Add index report_hosts_by_host. (init_inventory_iterator, filtered_host_count): Add hostname to text phrase filtering. 2011-08-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_inventory_iterator, filtered_host_count): Add search_phrase arg. (print_report_xml): Pass search phrase to init_inventory_iterator and filtered_host_count. 2011-08-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_inventory_iterator): Add levels arg. (filtered_host_count): New function. (print_report_xml): Pass levels to init_inventory_iterator. Do filtered count with filtered_host_count. 2011-08-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_inventory_iterator): Add first_result and max_results args. (host_count): New template. (print_report_xml): Add HOST_COUNT and HOSTS to REPORT. Pass first and max to init_inventory_iterator. 2011-08-03 Matthew Mundell <matthew.mundell@greenbone.net> Add database migrator, from version 47 to 48, in order to change "app" host details to "App". * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 48. * src/manage_sql.c (migrate_47_to_48): New function. (database_migrators): Add migrate_47_to_48. * doc/db.png: Update for version change. 2011-08-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Skip the example task host in the inventory. 2011-08-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (where_search_phrase): Add host. 2011-08-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Count inventory results by host. 2011-08-01 Matthew Mundell <matthew.mundell@greenbone.net> Add a basic host inventory, as a new type of GET_REPORT report. * src/manage_sql.c (report_host_t): Remove. To manage.h. (init_host_iterator): Add report_host arg, to iterate over single report_host. Update callers. (host_iterator_report, host_iterator_report_uuid, init_inventory_iterator) (inventory_iterator_ip, host_last_report_host, host_report_count): New functions. (print_report_xml): Add type arg for type of report. Include entire host inventory when type is inventory, using existing OMP entities. (manage_report, manage_send_report): Add type arg. * src/manage.h: Update headers accordingly. (report_host_t): New type. From manage_sql.c. * src/manage.c (send_user_rules): Update init_host_iterator callers. * src/omp.c (get_reports_data_t, get_reports_data_reset): Add type. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add type to GET_REPORTS. Add case for "inventory" type. 2011-07-21 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number. 2011-07-21 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 3.0+beta4 release. * CHANGES: Updated. 2011-07-19 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (task_preferences): New table. * doc/db.png: Update from SQL. 2011-07-19 Matthew Mundell <matthew.mundell@greenbone.net> Move scan performance parameters max_checks and max_hosts from configs to tasks. Hence increase database version to 47. Add database migration from version 46 to 47. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 47. * src/manage_sql.c (create_tables): Add table task_preferences. (migrate_46_to_47): New function. (database_migrators): Add migrate_46_to_47. (request_delete_task_uuid, delete_task, delete_trash_tasks): Remove task preferences too. (init_otp_pref_iterator, init_nvt_preference_iterator): Skip performance prefs. (init_task_preference_iterator, task_preference_iterator_name) (task_preference_iterator_value, task_preference_iterator_task_value) (task_preference_value, set_task_preferences): New functions. (name_value_t): New type. * src/manage.h: Add headers accordingly. * src/manage.c (send_task_preferences): New function. (run_task): Send task preferences. * src/omp.c (name_value_t): New type. (create_task_data_t, create_task_data_reset, modify_task_data_t) (modify_task_data_reset): Add preferences. (client_state_t): Add preference states. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add preference setting to MODIFY_TASK and CREATE_TASK. Send task preferences in GET_TASKS. 2011-07-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_result_iterator): Add CVSS to sorting. 2011-07-11 Michael Wiegand <michael.wiegand@greenbone.net> * src/manage_sql.c: Change value of MAX_CONTENT_LENGTH from 2000 to 20000. 2011-06-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_report_data_t): Add field "wrapper". (omp_xml_handle_start_element): In CLIENT_CREATE_REPORT if REPORT contains a format_id attribute then treat it as the usual wrapper report, otherwise treat it as the embedded report that should be in the wrapper. (omp_xml_handle_end_element): In CLIENT_CREATE_REPORT_RR set the state depending on the wrapper flag. 2011-06-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (_GNU_SOURCE): New define. For strcasestr. (report_counts_match): Check the search string case sensitively, as done by the iterator which generates the results. Also search for the string in the port and NVT. 2011-06-27 Matthew Mundell <matthew.mundell@greenbone.net> Add report 2 result notes and overrides to GET_RESULTS delta case. * src/manage_sql.c (compare_and_buffer_results): Always pass the delta results to buffer_results_xml, letting the new changed arg indicate a changed result. (print_report_xml): Update buffer_results_xml calls. * src/omp.c (buffer_result_notes_xml, buffer_result_overrides_xml): New functions. (buffer_results_xml): Add changed arg. Include delta DIFF when arg set. Print delta notes and overrides too, if requested. Update callers. 2011-06-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_report): Allow NULL host end times, as this can happen, for example if the task is stopped. * src/omp.c (omp_xml_handle_end_element): Remove host end assertion from CLIENT_CREATE_REPORT_RR_HOST_END case. 2011-06-24 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number. 2011-06-24 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 3.0+beta3 release. * CHANGES: Updated. 2011-06-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_result_iterator): Apply overrides in the result only case, if requested. 2011-06-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (strdiff): Set LANGUAGE and LC_ALL to C around diff call, so that missing line break messages are in English. 2011-06-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (buffer_results_xml): Convert delta description newlines too. 2011-06-20 Matthew Mundell <matthew.mundell@greenbone.net> Include scan start and end times in report import. * src/omp.c (create_report_data_t, create_report_data_reset): Add scan_start and scan_end. (omp_xml_handle_start_element): Pass scan start and end times to create_report. (omp_xml_handle_text): Read scan start and end. * src/manage_sql.c (create_report): Add scan_start and scan_end args. Set times on report. * src/manage.h: Update header accordingly. 2011-06-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (strdiff): New function. Compare texts with the diff command. (buffer_results_xml): Add a "diff" of the result descriptions when there's a delta result. 2011-06-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (buffer_results_xml): Add delta_results arg. If given print delta RESULT inside DELTA. Update callers. * src/manage_sql.c (compare_and_buffer_results): Pass delta_results to buffer_results_xml in "changed" case. 2011-06-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Add run status and times to REPORT/DELTA/REPORT. 2011-06-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_host_ports_desc, print_host_ports_by_type): Free array afterwards. 2011-06-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_host_ports_desc) (print_host_ports_by_type_desc, print_host_ports_by_type_asc): New functions. (print_host_ports_by_type): Add ascending flag. (print_report_xml): Ensure that the port list is sorted in the right order. 2011-06-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (array_add_port, compare_ports_threat) (print_host_ports_by_type): New functions. (print_report_xml): Ensure that the port list is sorted by the right field. 2011-06-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (add_port, print_host_port, print_host_ports) (free_host_ports): New functions. (print_report_xml): For the port list, separate the delta and normal cases, accumulating the delta ports during the result comparisons. 2011-06-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (compare_and_buffer_results): Skip actual buffering if buffer is NULL. (print_report_xml): Skip full counts if delta. Add count decreasing when there are extra results in 'results'. Iterate through the remaining results after hitting the page max, to get the filtered counts right. 2011-06-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (compare_and_buffer_results): Take into account the filter arguments, when setting "used". (print_report_xml): If the result was skipped, then adjust the result counts. Ditto if the delta result was used instead of the report result. 2011-06-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (compare_and_buffer_results): Add used flag. Set when buffering result. (print_report_xml): Only add the result_hosts_only host when the result was actually printed. 2011-06-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (compare_and_buffer_results): Add more tracing. (print_report_xml): When printing the hosts, check the second report if the host is missing from the first report. 2011-06-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (compare_and_buffer_results): Add first_results arg, decrement and skip result if positive. (print_report_xml): In the delta case, always get the first result in the report, and skip output of results up to the requested first_result. 2011-06-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (compare_and_buffer_results): Add max_results arg, decrement when buffering the result. (print_report_xml): Remove done sorting todo. Select all the results in the delta case. Limit to max_results results explicitly, while comparing. This ensures there are always enough results to do the comparison. 2011-06-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (result_cmp): Remove description comparisons. (compare_results): Remove the changed/same comparison and make the changed/same depend entirely on the description. Now results are identified only by their position in the selection, so some changed results may appear to be new-gone pairs, however more results should appear as changed when just the description changes. 2011-06-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (result_cmp): Invert comparison returns with arithmetic instead of logical negation, because the returns are arithmetic. 2011-06-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): In the delta case add the host to result_hosts according to the delta state of the result. 2011-06-08 Matthew Mundell <matthew.mundell@greenbone.net> Improve the delta comparison. * src/manage_sql.c (init_result_iterator): Add sorting by NVT so that delta selections are comparable. Add description sorting to host case. (result_greater): Remove. Rename to result_cmp. (result_cmp): New function. Was result_greater. Improve doc slightly. Add descriptor and NVT to comparison. Add tracing. (compare_results): Add tracing. Correct result_cmp return checks. (print_report_xml): Add delta tracing. 2011-06-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_result_iterator): Add sorting by description so that delta selections are comparable. 2011-06-08 Henri Doreau <henri.doreau@greenbone.net> * src/manage_sql.c (setup_full_config_prefs): Added network_scan to the list of scanner preferences. 2011-06-07 Matthew Mundell <matthew.mundell@greenbone.net> Add container task report imports. * src/omp.c (create_report_data_t, create_report_data_reset): Add task_id. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add attrib task_id to CREATE_REPORT. * src/manage_sql.c (create_report): Add task_id arg, if given import into this task. * src/manage.h: Update header accordingly. 2011-06-02 Matthew Mundell <matthew.mundell@greenbone.net> Add delta state filtering to delta reports. * src/omp.c (get_reports_data_t, get_reports_data_reset): Add delta_states. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add attrib delta_states to GET_REPORTS. * src/manage_sql.c (compare_and_buffer_results): Add delta state args. Only print result if state is selected. (print_report_xml): Filter results according to new delta_states param. Update callers. * src/manage.h: Update header accordingly. 2011-05-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Move the result count printing to follow the result printing. Adjust the result counts for new results during delta result printing. 2011-05-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (result_greater): New function. (compare_results): Add sorting args. Compare new and gone results better. (compare_and_buffer_results): Add sorting args. (print_report_xml): In the delta case store the iteration state in temporary variables, because the "done" field refers to the next iteration. Also print all the extra 'results' results, instead of just the first. Pass sort fields to compare_and_buffer_results. 2011-05-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (escalate_2): Correct doc. (compare_results, compare_and_buffer_results): Add doc. (create_lsc_credential): Doc all args. 2011-05-26 Matthew Mundell <matthew.mundell@greenbone.net> Add very basic delta reporting. * src/manage_sql.c (compare_results_t): New type. (compare_results, compare_and_buffer_results): New functions. (print_report_xml): Add delta arg. If given print delta results. Update callers. (manage_send_report): Add delta_report arg. Pass through to print_report_xml. * src/manage.h: Update header accordingly. * src/omp.c (get_reports_data_t, get_reports_data_reset): Add delta_report_id. (omp_xml_handle_start_element): Parse delta_report_id. (buffer_results_xml): Add delta arg. Append to result if given. (omp_xml_handle_end_element): In GET_REPORTS pass delta report to manage_send_report. 2011-05-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_report): Wait on the child PID, just to be sure. 2011-05-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_send_report): Wait on the child PID, just to be sure. 2011-05-24 Matthew Mundell <matthew.mundell@greenbone.net> Quiet compiler warnings. Thanks to Stephan Kleine for original patch. * src/manage_sql.c (manage_report, manage_send_report): Remove old variable. (months_between): Remove stray variable. * src/omp.c (omp_xml_handle_end_element): In CLIENT_MODIFY_TASK remove variable "first" which is only used by an assertion. 2011-05-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (nvts_size, family_nvt_count, family_nvt_count): Count over the "Credentials" family. (make_nvt_from_nvti): Remove "Credentials" exclusion, because the NVTs need to be in the db for the results they generate. (init_family_iterator): Exclude the "Credentials" family. 2011-05-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (email): Add support for a single attachment. (REPORT_ATTACH_FORMAT, MAX_ATTACH_LENGTH): New defines. (escalate_2): Add a third notice value for attaching the report. 2011-05-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (trim_whitespace): Remove. Rename to trim_hosts. (trim_hosts): New function. Was trim_whitespace. 2011-05-19 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number. 2011-05-19 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 3.0+beta2 release. * CHANGES: Updated. 2011-05-18 Matthew Mundell <matthew.mundell@greenbone.net> Add database migrator from version 45 to new version 46, to ensure that the target hosts fields are clean. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 46. * src/manage_sql.c (sql_clean_hosts, migrate_45_to_46): New functions. (database_migrators): Add migrate_45_to_46. (init_manage_process): Add SQL function clean_hosts. * doc/db.png: Update for version change. 2011-05-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (trim_whitespace, clean_hosts): New functions. (create_target): Clean the hosts string before quoting it. 2011-05-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (omp_xml_handle_end_element): In CLIENT_GET_ESCALATORS correct order of init_escalator_data_iterator args. This was preventing the event data from being sent to clients. 2011-05-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Add full count as text, to preserve compatibility with OMP 1. Some of the report formats use this value. * src/schema_formats/XML/OMP.xml (report): Add result_count text. * doc/omp.rnc, doc/omp.html: Update from source. 2011-05-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_restore): Add owner clauses to name checks, as other users may have resources with the same name. 2011-05-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_lsc_credential): Remove stray punctuation. 2011-05-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_report, manage_send_report): Clear parent state in child. 2011-05-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (escalate_2): In ESCALATOR_METHOD_EMAIL if the escalator is missing a "notice_report_format" method data, then use TXT. This can happen for escalators that predate the notice_report_format. 2011-05-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (test_escalator): Correct attrib name. * doc/omp.rnc, doc/omp.html: Update from source. 2011-05-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_report): Revert single transaction, as this causes problems on Debian 5. 2011-05-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (task_upload_progress): Correct count format specifier. 2011-05-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (get_report_formats): Add SIGNATURE. * doc/omp.rnc, doc/omp.html: Update from source. 2011-05-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_report): Insert results within a single transaction. 2011-05-05 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number. 2011-05-05 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 3.0+beta1 release. * CMakeLists.txt: Updated version number. * CHANGES: Updated. 2011-05-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/escalator_methods/Sourcefire/escalate: Simplify the script call. 2011-05-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (send_to_sourcefire): Add .csv suffix to report. * src/escalator_methods/Sourcefire/escalate: Copy the connector script to the report directory, and call it there. Remove the csvfile param. 2011-05-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (get_reports): Add escalator_id attrib. (create_lsc_credential): Add KEY. * doc/omp.rnc, doc/omp.html: Update from source. 2011-05-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (email): Put the To address in the sendmail command instead of the From address. 2011-05-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (send_to_sourcefire): Expect pkcs12 in base64. 2011-05-03 Matthew Mundell <matthew.mundell@greenbone.net> Add report upload progress to GET_TASKS. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 45. * src/manage_sql.c (create_tables): Add upload_result_count to tasks. (migrate_44_to_45): New function. (database_migrators): Add migrate_44_to_45. (task_upload_progress): New function. (create_report): Init task upload_result_count. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TASKS set progress to upload progress if there's an upload happening. * doc/db_postgres.sql (tasks): Add upload_result_count. * doc/db.png: Update from SQL. 2011-05-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_send_report): Remove transaction from escalator case, as caller does transaction. (manage_restore): Correct escalator SQL, so that escalator data is restored too. 2011-05-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORTS simplify the response in the escalator case. 2011-04-25 Matthew Mundell <matthew.mundell@greenbone.net> Add an escalation option to GET_REPORTS. * src/manage_sql.c (escalate_2): Add report param. Update callers. (manage_send_report): Add escalator_id param. If given escalate report instead of getting it. * src/manage.h: Update header accordingly. * src/omp.c (get_reports_data_t, get_reports_data_reset): Add escalator_id. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add escalator_id attribute to GET_REPORTS. 2011-04-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (escalate_2): New function. Body from escalate_1, with report filtering args. (escalate_1): Call through to escalate_2. 2011-04-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_report): Fork a child to do the upload. 2011-04-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_report): Insert the start times before the results, so that the host list is present in GET_REPORTS with the results during the upload. 2011-04-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (send_to_sourcefire): Remove user change from script call, as script is managed by sysadmin for now. 2011-04-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_report, manage_send_report): Drop privileges directly instead of with su via the shell. 2011-04-22 Matthew Mundell <matthew.mundell@greenbone.net> Remove admission of the "Credentials" family, handling the communication with the Scanner about the credentials automatically according to the task's credentials. * src/manage.c (run_task): Enable auth plugins when credentials are present. * src/manage_sql.c (make_nvt_from_nvti): Skip NVTs in the "Credentials" family. * src/otp.c (parse_scanner_preference_value): Only add the preference when current_scanner_preference is set. (process_otp_scanner_input): In SCANNER_PREFERENCE_NAME prevent adding the preferences of the "Credentials" family NVTs. 2011-04-22 Stephan Kleine * CMakeLists.txt: Fix formatting. 2011-04-22 Stephan Kleine * CMakeLists.txt: Fix installation with DESTDIR. 2011-04-22 Matthew Mundell <matthew.mundell@greenbone.net> Extend CREATE_LSC_CREDENTIAL with a key pair option. * src/manage_sql.c (create_lsc_credential): Add key args. * src/manage.h: Update header accordingly. * src/omp.c (create_lsc_credential_data_t) (create_lsc_credential_data_reset, client_state_t): Add key elements. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add KEY to CREATE_LSC_CREDENTIAL. 2011-04-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/escalator_methods/Sourcefire/escalate: New file from last commit. 2011-04-21 Matthew Mundell <matthew.mundell@greenbone.net> Add a Sourcefire Connector escalator. * CMakeLists.txt: Install escalator script. * src/manage.c (escalator_method_name, escalator_method_from_name): Add Sourcefire method. * src/manage.h (escalator_method_t): Add Sourcefire method. * src/manage_sql.c (send_to_sourcefire): New function. (escalate_1): Add Sourcefire method. * src/escalator_methods/Sourcefire/, src/escalator_methods/Sourcefire/escalate: New dir and file. * INSTALL: Add escalator program to requirements. 2011-04-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (run_tasks): Send target hosts in "network_targets" preferences. * src/manage_sql.c (init_nvt_preference_iterator): Skip "network_targets". 2011-04-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage_process): Check stat return in permission check. 2011-04-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORT_FORMATS use constant for PREDEFINED for trashcan formats. 2011-04-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_report_format): Free format_signature after last use. 2011-04-15 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage_sql.c (manage_report, manage_send_report, copy_config) (manage_set_config_nvts): Closed memleaks reported by cppcheck. 2011-04-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_report, manage_send_report): Allow predefined formats always. * src/omp.c (omp_xml_handle_start_element, omp_xml_handle_end_element) (client_state_t): Add PREDEFINED to REPORT_FORMAT in OMP GET_REPORT_FORMATS and CREATE_REPORT_FORMAT. In OMP GET_REPORT_FORMATS allow predefined formats always. * src/schema_formats/XML/OMP.xml (get_report_formats): Add PREDEFINED. * doc/omp.rnc, doc/omp.html: Update from source. 2011-04-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_report_format): Fail if format is predefined. (report_format_predefined): New function. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORTS remove erroneous case and add predefined case. 2011-04-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_report, manage_send_report): Accept only trusted report formats. (report_format_trust): New function. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORTS check report format trust. 2011-04-14 Matthew Mundell <matthew.mundell@greenbone.net> * CMakeLists.txt: Create the user report_formats directory, so that it's world readable, for nobody. Make the predefined report formats world readable, for nobody. * src/manage_sql.c (manage_report, manage_send_report): Drop to nobody within the spawned command when running as root. This prevents the report formats from having root access. (create_report_format): Ensure that nobody can access the installed report formats. 2011-04-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage_process): Reduce permissions if they are too loose. 2011-04-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage_process): Warn if permissions are loose. 2011-04-14 Matthew Mundell <matthew.mundell@greenbone.net> Add database migrator from version 43 to new version 44, to ensure that the database file permissions are tight. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 44. * src/manage_sql.c (migrate_43_to_44): New function. (database_migrators): Add migrate_43_to_44. * doc/db.png: Update for version change. 2011-04-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (main): Set very restrictive umask. 2011-04-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (append_log_message): Detect special host details messages by port instead of description. 2011-04-12 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (report_formats): Revert the uuid UNIQUE constraint. The Manager refuses to create a report with a duplicate UUID. * doc/db.png: Update from SQL. 2011-04-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (config_writable): Check whether the count is zero. 2011-04-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (report): Add HOST. * doc/omp.rnc, doc/omp.html: Update from source. 2011-04-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (migrate_42_to_43): Ensure that targets_trash exists. 2011-04-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add TARGET to TASK in element REPORT. Add PORT to SSH_LSC_CREDENTIAL in CREATE_TARGET and GET_TARGETS. * doc/omp.rnc, doc/omp.html: Update from source. 2011-04-07 Matthew Mundell <matthew.mundell@greenbone.net> * doc/CMakeLists.txt (omp.rnc, omp.html): Put the generate command directly in the shell command, because passing args to "." is a bashism. * src/schema_formats/XML/OMP.xml: Add GET_CONFIGS "export" attribute. * doc/omp.rnc, doc/omp.html: Update from source. 2011-04-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (report_type_iterator_name) (report_type_iterator_title): Doc return. * src/manage_sql.c: Add missing docs and return docs. 2011-04-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In the CLIENT_GET_TASKS brief case get the target hosts from the right place. 2011-04-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (trash_target_name): New function. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): In the CLIENT_GET_TASKS brief case get the name and UUID or the target from the trashcan when appropriate. 2011-04-07 Matthew Mundell <matthew.mundell@greenbone.net> * ChangeLog: Clear tabs out of text. 2011-04-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Add the target to the task, so that clients can see if the task is a container task. (trash_target_uuid): New function. * src/manage.h: Add header accordingly. 2011-04-07 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * doc/openvasmd.8.xml: Fixed typo. * doc/openvasmd.html, doc/openvasmd.8: Regenerated. 2011-04-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (migrate_42_to_43): Replace ref to missing define with fixed value. 2011-04-07 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (targets): Add ssh_port. (report_host_details): New table. * doc/db.png: Update from SQL. 2011-04-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (validate_port): Ensure port is within range. 2011-04-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_target, manage_restore): Add missing comma in SSH port SQL. 2011-04-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_target): Only set the SSH port when there is a credential. 2011-04-06 Matthew Mundell <matthew.mundell@greenbone.net> Add LSC SSH ports to targets, including sending the new auth_port_ssh Scanner preference. Hence increase database version to 43. Add database migration from version 42 to 43. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 43. * src/manage_sql.c (create_tables): Add ssh_port to target tables. (migrate_42_to_43): New function. (database_migrators): Add migrate_42_to_43. (validate_port): New function. (create_target): Add ssh_port arg. (delete_target): Add ssh_port field. (init_target_iterator): Add ssh_port. (target_iterator_ssh_port): New function. Increment other accessors accordingly. (target_ssh_port): New function. * src/manage.c (run_task): Send SSH port to Scanner. * src/manage.h: Update headers accordingly. * src/omp.c (create_target_data_t, create_target_data_reset) (client_state_t): Add SSH port. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add SSH_LSC_CREDENTIAL/PORT handling to CREATE_TARGET. Add SSH port to target in GET_TARGETS. 2011-04-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (config_writable): New function. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_CONFIGS add WRITABLE flag, like IN_USE but includes trashcan tasks. * src/schema_formats/XML/OMP.xml: Add WRITABLE in GET_CONFIGS response. * doc/omp.rnc, doc/omp.html: Update from source. 2011-04-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_start_element) (omp_xml_handle_end_element): Read over children of OVERRIDES and NOTES in RESULT during a CREATE_REPORT. 2011-03-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_report_host_detail): Correct name in doc. 2011-03-31 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (report_formats): Remove the uuid UNIQUE constraint because multiple users can upload the same report format. * doc/db.png: Update from SQL. 2011-03-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml (report): New element. From get_reports command. (create_report): New command. (get_reports): Use the new report element as a type. * doc/omp.rnc, doc/omp.html: Update from source. 2011-03-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (migrate_37_to_38): Use "mv" to do the move, because "rename" requires the dirs to be on the same file system. 2011-03-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_MODIFY_TASK restrict modification of container tasks, and init task for find_task. 2011-03-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_START_TASK if target is missing return an error, as this can happen for report container tasks. Swap comments at same time. 2011-03-29 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP command CREATE_REPORT. * src/manage_sql.c (create_current_report): New name for create_report. (create_report): New function. Creates report from result list. * src/manage.h: Add header accordingly. (create_report_result_t): New type. * src/manage_sql.h: Update header accordingly. * src/manage.c (run_task): Rename create_report call. * src/omp.c (help_text): Add new command. (omp_parser_t): Add read_over flag. (omp_parser_new): Init read_over. (create_report_data_t): New type. (create_report_data_reset): New function. (command_data_t, client_state_t): Add new command elements. (create_report_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Read over element if parser flag set. Add CREATE_REPORT handling. (buffer_results_xml): Only print notes and overrides if there's a task. 2011-03-28 Michael Wiegand <michael.wiegand@greenbone.net> * report_formats/sourcefire/create_report_import: Create a signature when creating report import. 2011-03-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (find_report_format): Add a user check to the constraint XML because multiple users can import the same report format. 2011-03-18 Matthew Mundell <matthew.mundell@greenbone.net> Add support for Scanner generated report host details. * src/otp.c (append_log_message): If the description starts with '<' then add the host detail in the description. * src/manage_sql.c (report_host_t): New type. (create_tables): Add table report_host_details. (init_host_iterator): Add ROWID. Increment accessors accordingly. (host_iterator_report_host, init_report_host_details_iterator) (report_host_details_iterator_name, report_host_details_iterator_value) (report_host_details_iterator_source_type) (report_host_details_iterator_source_name) (report_host_details_iterator_source_desc): New functions. (delete_report, trim_report, trim_partial_report): Handle details too. (print_report_xml): Add HOST with details to REPORT. (manage_report_host_detail): New function. * src/manage.h: Add header accordingly. 2011-03-16 Michael Wiegand <michael.wiegand@greenbone.net> * src/manage_sql.c (setup_full_config_prefs): Remove setting of the obsolete and unused legacy preferences "ping_hosts" and "language". 2011-03-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TASKS account for trash tasks in counts. 2011-03-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (task_count): Exclude trashcan tasks. (trash_task_count): New function. * src/manage.h: Add header accordingly. 2011-03-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_task_iterator): Correct test in last commit for the all case. 2011-03-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_task_iterator): Include the hidden tasks as before to enable access to the example task. 2011-03-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add new trashcan commands EMPTY_TRASHCAN and RESTORE. Update DELETE and GET commands with trashcan flags. * doc/omp.rnc, doc/omp.html: Update from source. 2011-03-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_config, delete_schedule): Correct arg in doc. (delete_trash_tasks): Remove arg from doc. 2011-03-15 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (targets, targets_trash): Add port_range field that appeared in db version 36. * doc/db.png: Update from SQL. 2011-03-15 Matthew Mundell <matthew.mundell@greenbone.net> Update database diagram for trashcan. * doc/db_postgres.sql (agents_trash, escalator_condition_data_trash) (escalator_event_data_trash, escalator_method_data_trash) (escalators_trash, targets_trash, configs_trash, config_preferences_trash) (report_format_params_trash, report_format_param_options_trash) (report_formats_trash, lsc_credentials_trash, schedules_trash) (slaves_trash): New tables. (tasks, task_escalators): Add location fields. * doc/db.png: Update from SQL. 2011-03-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (trash_config_family_count, trash_config_nvt_count) (trash_slave_uuid, trash_slave_name): New functions. * src/manage.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORT_FORMATS pass the trash flag to init_report_format_param_iterator instead of 0. In CLIENT_GET_CONFIGS get the counts for the trash config if required, and refuse to serve the task list for the trashcan. In CLIENT_GET_SLAVES correct an error message. In CLIENT_GET_TARGETS refuse to serve trash with tasks. In CLIENT_GET_TASKS refuse to serve trash and details, and get the slave info from trash if required. 2011-03-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_lsc_credential): Remove attempt at location check from "in use" test. The credential of a target can only be in the trash when the target is in the trash. 2011-03-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_report_format): Put trash report formats in DATA dir instead of SYSCONF dir. (manage_restore): Restore report formats from DATA dir to DATA or STATE dir. 2011-03-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (task_in_trash): New function. * src/manage.h: Add header accordingly. * src/omp.c (buffer_notes_xml, buffer_overrides_xml): Add TRASH flag to TASK. 2011-03-14 Matthew Mundell <matthew.mundell@greenbone.net> Add a trashcan, including new OMP commands EMPTY_TRASHCAN and RESTORE. Hence increase database version to 42. Add database migration from version 41 to 42. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 42. * src/manage_sql.c (resource_t): New type. (LOCATION_TABLE, LOCATION_TRASH): New defines. (user_owns_trash_uuid, find_trash): New functions. (create_tables): Add trash tables. Add trash location columns to tables task_escalators and tasks. (migrate_41_to_42): New function. (database_migrators): Add migrate_41_to_42. (delete_escalator, delete_task, delete_target, delete_config) (delete_lsc_credential, delete_agent, delete_schedule) (delete_report_format, delete_slave): Add ultimate flag param. Update callers. (init_escalator_iterator, init_escalator_data_iterator) (init_task_iterator, init_target_iterator, init_config_iterator) (init_lsc_credential_iterator, init_agent_iterator, init_schedule_iterator) (init_report_format_iterator, init_report_format_param_iterator) (init_slave_iterator): Add trash flag param. Update callers. (init_manage, set_task_requested, delete_report): Add TASK_STATUS_DELETE_ULTIMATE_REQUESTED cases. (task_config_uuid, task_config_name): Add trash check. (task_config_in_trash, task_target_in_trash, task_slave_in_trash) (task_escalator_in_trash, task_schedule_in_trash): New functions. (add_task_escalator, set_task_escalator): Set location field. (request_delete_task): Call delete_task_lock instead of delete_task. (request_delete_task_uuid): New function. Allows OMP DELETE_TASK to pass UUID. (delete_task_lock): New function. Calls delete_task inside transaction. (delete_trash_tasks, find_trash_task): New functions. (find_task): Exclude trash tasks. (target_iterator_ssh_trash, target_iterator_smb_trash, trash_target_hosts) (trash_target_in_use, trash_config_in_use, trash_lsc_credential_uuid) (trash_lsc_credential_name, report_format_trash_global) (trash_slave_in_use): New functions. (target_in_use, init_schedule_task_iterator, slave_in_use): Take trash resources into account. (manage_restore, manage_empty_trashcan): New functions. Trashcan specific. * src/manage.c: Update iterator calls. (run_status_name, run_slave_task, manage_check_current_task): Add TASK_STATUS_DELETE_ULTIMATE_REQUESTED case. * src/manage.h: Update headers accordingly. (task_status_t): Add TASK_STATUS_DELETE_ULTIMATE_REQUESTED. * src/omp.c (help_text): Add trashcan commands. (delete_agent_data_t, delete_escalator_data_t) (delete_lsc_credential_data_t, delete_report_format_data_t) (delete_schedule_data_t, delete_slave_data_t, delete_target_data_t) (delete_task_data_t): Add ultimate flag. (get_agents_data_t, get_configs_data_t, get_escalators_data_t) (get_lsc_credentials_data_t, get_report_formats_data_t) (get_schedules_data_t, get_targets_data_t, get_tasks_data_t): Add trash flag. (restore_data_t): New types. (restore_data_reset, restore_data_reset): New functions. (command_data_t): Add restore field. (restore_data): New variable. (client_state_t): Add states for trashcan commands. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add trashcan command handling. Add ultimate handling to DELETE commands. Add trash handling to GET commands. * src/otp.c (process_otp_scanner_input): In SCANNER_TIME_SCAN_END add STATUS_DELETE_ULTIMATE_REQUESTED case and call delete_task_lock instead of delete_task. 2011-03-09 Michael Wiegand <michael.wiegand@greenbone.net> Post branch version bump. * CMakeLists.txt: Updated version number. 2011-03-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_lsc_credential) (init_lsc_credential_iterator): Check both credentials in targets. 2011-03-02 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number. 2011-03-02 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 2.0.2 release. * CHANGES: Updated. 2011-02-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (migrate_21_to_22): Keep going if it's a predefined format and the old directory is missing. 2011-02-24 Matthew Mundell <matthew.mundell@greenbone.net> Close some leaks found by Felix Wolfsteller. * src/manage_sql.c (PRINT): Close stream. (print_report_xml): Note about leaks. (create_target, create_agent): Free quoted_name before returning on error. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TASKS free first_report. 2011-02-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/lsc_user.c (create_nsis_script): Compare fopen return to NULL instead of an integer. From Felix Wolfsteller. 2011-02-23 Matthew Mundell <matthew.mundell@greenbone.net> Correct the host counting change from 2011-02-19, which overlooked many cases. Add test manage_max_hosts_0 to test the basic cases. * src/manage_sql.c (manage_max_hosts): Replace the initial hostname check with similar checks on each host, done after the list is split into host. * src/tests/CMakeLists.txt: Add test manage_max_hosts_0. * src/tests/manage_max_hosts_0.c: New file. 2011-02-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c, src/tests/common.h, src/tests/make_report_uuid_0.c: Correct include locations, so that more tests compile. 2011-02-21 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number. 2011-02-21 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 2.0.1 release. * CHANGES: Updated. 2011-02-21 Michael Wiegand <michael.wiegand@greenbone.net> * INSTALL: Add gnupg and wget as optional prerequisites. Add a note regarding the optional prerequisites to the main prerequisites section. Fix typos. 2011-02-21 Matthew Mundell <matthew.mundell@greenbone.net> Prefer the feed to the imported signature when verifying report formats. Hence increase database version to 41. Add database migration from version 40 to 41. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 41. * src/manage_sql.c (migrate_40_to_41): New function. (database_migrators): Add migrate_40_to_41. (verify_report_format): Check the feed signature if there is one, otherwise check the database signature if there is one. Remove storage of signature in database from feed. * doc/db.png: Update for version change. 2011-02-21 Matthew Mundell <matthew.mundell@greenbone.net> * report_formats/simple_topo_plot/create_report_import: In signature source file creation, remove empty param and order params as in the XML. 2011-02-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_max_hosts): Explicitly deal with hostnames first. 2011-02-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (get_report_format_files): Mandate the C locale. * src/report_formats/create_signatures: Correct LC_ALL export. Spotted by Michael Wiegand. List files with ls instead of glob. 2011-02-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/create_signatures: Mandate the locale. 2011-02-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/create_signatures: Setup fake PDF/latex.xsl. Quote $name in if test. Add more verbose output. Include parameters in signed file. 2011-02-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (setup_full_config_prefs): Remove duplicates. 2011-02-16 Matthew Mundell <matthew.mundell@greenbone.net> Set "unscanned_closed" to yes in the predefined configs. Hence increase database version to 40. Add database migration from version 39 to 40. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 40. * src/manage_sql.c (migrate_39_to_40_set_pref, migrate_39_to_40): New functions. (database_migrators): Add migrate_39_to_40. (setup_full_config_prefs): Set "unscanned_closed" to "yes". * doc/db.png: Update for version change. 2011-02-16 Michael Wiegand <michael.wiegand@greenbone.net> Fix the location where openvasmd looks for signatures. * CMakeLists.txt: Ensure OPENVAS_NVT_DIR is set. * src/CMakeLists.txt: Expose OPENVAS_NVT_DIR. * src/manage_sql.c (find_signature): Look for signatures in the subdirs of OPENVAS_NVT_DIR instead of OPENVAS_LIB_INSTALL_DIR/openvas/plugins. 2011-02-11 Matthew Mundell <matthew.mundell@greenbone.net> Make the fallback system report case more like the others. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_SYSTEM_REPORTS let init_system_report_type_iterator and manage_system_report produce the fallback report. Set the format to txt for the fallback report. Return the entire fallback report always, even when brief is true. * src/manage.c (get_system_report_types, manage_system_report): Return the fallback report on openvasmr failure. (init_system_report_type_iterator): Include fallback return in check. (FALLBACK_SYSTEM_REPORT_HEADER): New define. 2011-02-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_SYSTEM_REPORTS add a simple fallback text report to the error response. 2011-02-09 Stephan Kleine * CMakeLists.txt: Fix out of surce builds. 2011-02-08 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number. 2011-02-08 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 2.0.0 release. * CMakeLists.txt: Updated version number. 2011-02-08 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * CHANGES: Updated for 2.0.0. 2011-02-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add MAX_NVT_COUNT and KNOWN_NVT_COUNT to CONFIG in GET_CONFIGS response. * doc/omp.rnc, doc/omp.html: Update from source. 2011-02-08 Michael Wiegand <michael.wiegand@greenbone.net> Consolidation: Move most of configuration and installation handling to top level CMakeLists.txt. * CMakeLists.txt: Move sqlite3 and uuid detection to pkg-config. Set all _CFLAGS and _LDFLAGS properly. Add all defines to CMAKE_C_FLAGS. Handle installation of logging configuration, report formats and schema formats. * src/CMakeLists.txt: Remove most configuration and installation. Use the LINK_FLAGS and COMPILE_FLAGS reported by pkg-config instead of hard coding them. 2011-02-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_counts_id_filt): Doc all params. * doc/db.png: Update for version change. 2011-02-07 Michael Wiegand <michael.wiegand@greenbone.net> * README: Remove inaccurate and redundant information. 2011-02-07 Matthew Mundell <matthew.mundell@greenbone.net> Remove the slow w3af NVT from the predefined configs. Hence increase database version to 39. Add database migration from version 38 to 39. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 39. * src/manage_sql.c (migrate_38_to_39): New function. (database_migrators): Add migrate_38_to_39. (init_manage): Add w3af excluder to the "all" NVT selector. Adjust predefined config comments to match. 2011-02-07 Michael Wiegand <michael.wiegand@greenbone.net> * doc/CMakeLists.txt: Enable man and man-html targets only if the required tools have been found. Enable install target always since we ship pregenerated files as well. 2011-02-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (migrate_37_to_38): Succeed even if one of the old directories is missing. 2011-02-07 Matthew Mundell <matthew.mundell@greenbone.net> Enable logging of key informational messages when --verbose is given. * src/openvasmd_log_conf.cmake_in: Change levels to show all levels below DEBUG. * src/tracef.h (infof): New macro. * src/openvasmd.c, src/ompd.c, src/omp.c, src/manage_sql.c: Change appropriate tracefs to infos. 2011-02-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_config_task_iterator): Select current user's tasks only. 2011-02-04 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number. 2011-02-04 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 2.0+rc4 crelease. * CHANGES: Updated. 2011-02-04 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * doc/db.png: Updated to DB rev 38. 2011-02-04 Matthew Mundell <matthew.mundell@greenbone.net> Place report formats in the directories required by the FHS. Hence increase database version to 38. Add database migration from version 37 to 38. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 38. * src/manage_sql.c (migrate_37_to_38): New function. (database_migrators): Add migrate_37_to_38. (manage_report, manage_send_report, create_report_format) (delete_report_format): User data dir for global report formats, and state dir for user report formats. * src/manage.c (init_report_format_file_iterator): User data dir for global report formats, and state dir for user report formats. * src/CMakeLists.txt: Install global report formats to data dir. 2011-02-04 Michael Wiegand <michael.wiegand@greenbone.net> Place global schema formats into the correct directory to comply with the Filesystem Hierarchy Standard (FHS), version 2.3. * src/CMakeLists.txt: Install global schema formats to OPENVAS_DATA_DIR instead of OPENVAS_SYSCONF_DIR. * src/manage_sql.c (manage_schema): Read global schema formats from OPENVAS_DATA_DIR instead of OPENVAS_SYSCONF_DIR. 2011-02-04 Michael Wiegand <michael.wiegand@greenbone.net> * CMakeLists.txt: Remove obsolete comment. 2011-02-04 Michael Wiegand <michael.wiegand@greenbone.net> * doc/openvasmd.8.xml: Fix typos, add missing option. * doc/openvasmd.html, doc/openvasmd.8: Regenerated. 2011-02-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/HTML/HTML.xsl (report): Include host in port selection. 2011-02-03 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * CMakeLists.txt: Removed check for libopenvas_base as this is already tested via pkgconf. 2011-02-03 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * doc/openvasmd.8.xml: Updated. * doc/openvasmd.html, doc/openvasmd.8: Rebuild. 2011-02-01 Michael Wiegand <michael.wiegand@greenbone.net> Switch openvas-manager to pkg-config. * CMakeLists.txt: Move checks for openvas-libraries, glib and gnutls to pkg-config. * INSTALL: Update requirements and installation instructions. * src/CMakeLists.txt, src/tests/CMakeLists.txt: Replace calls to libopenvas-config with the appropriate pkg-config calls. 2011-01-29 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * INSTALL: Added sections on database initialization and migration. 2011-01-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_NOTE and CLIENT_CREATE_OVERRIDE only count the hosts when hosts where given. 2011-01-28 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * INSTALL: Added section on creating initial admin user. 2011-01-21 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number. 2011-01-21 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 2.0+rc3 crelease. * CHANGES: Updated. * INSTALL: Updated prerequisites. 2011-01-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd_log_conf.cmake_in: Add warning about passwords. 2011-01-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd_log_conf.cmake_in: Reduce max log level to warning in all groups, to prevent loggin of passwords in the standard install. 2011-01-19 Matthew Mundell <matthew.mundell@greenbone.net> Cleanup an error in the 35 to 36 migrator, in a new migrator. Increase database version to 37. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 37. * src/manage_sql.c (migrate_36_to_37): New function. (database_migrators): Add migrate_36_to_37. 2011-01-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (migrate_35_to_36): Set target and config from correct table. 2011-01-19 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/otp.c, src/omp.c: Fix include path for nvt_categories.h. 2011-01-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (run_slave_task): Add SMB credential arg. (run_task): Pass SMB credential to run_slave_task. (delete_slave_task): Remove SMB credential too. 2011-01-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (run_slave_task): Check if the target has a credential, before creating one. 2011-01-15 Matthew Mundell <matthew.mundell@greenbone.net> Validate CREATE_ESCALATOR addresses. * src/manage_sql.c (validate_email): New function. (create_escalator): Validate email method addresses. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_ESCALATOR add validation error. 2011-01-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (email): Pass user supplied data via files instead of directly in the command. 2011-01-11 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * packaging/debian/control, packaging/debian/compat, packaging/debian/openvas-manager.dirs, packaging/debian/changelog, packaging/debian/copyright, packaging/debian/openvas-manager.install, packaging/debian/rules, packaging/debian/, packaging/: Removed. These packaging files are hopeless out of date and better packages are available by third parties already. 2011-01-10 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number. 2011-01-10 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 2.0+rc2 crelease. * CHANGES: Updated. 2011-01-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/lsc_user.c (check_is_dir): Remove. (file_utils_rmdir_rf): Use libraries version of check_is_dir. 2011-01-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_schema): Correct comments. 2011-01-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/lsc_user.c (ssh_privkey_create, ssh_pubkey_create): Restore command logging, masking out passwords. 2011-01-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/lsc_user.c (ssh_privkey_create, ssh_pubkey_create): Remove command logging. * src/manage_sql.c (sql_quiet): New function. (create_lsc_credential): Use sql_quiet instead of sql, to prevent password logging. 2011-01-03 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage.c (send_user_rules): Extended todo comment about another location that deals with the rules file format. 2010-12-30 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/openvasmd.c (main): Added forgotten license note. 2010-12-30 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/openvasmd.c (main): Adapted --version output to comply with GNU Coding Standards (http://www.gnu.org/prep/standards/standards.html#g_t_002d_002dversion) 2010-12-29 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/openvasmd.c (main): Improved description text. 2010-12-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Update version to 2.0. * doc/omp.rnc, doc/omp.html: Update from source. 2010-12-21 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number. 2010-12-21 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 2.0+rc1 release. * CHANGES: Updated. * CMakeLists.txt: Updated version number. 2010-12-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/LaTeX/latex.xsl (results-overview) (results-overview-table-single-host-row): Add Log. 2010-12-20 Matthew Mundell <matthew.mundell@greenbone.net> * doc/omp.rnc, doc/omp.html: Update from source. 2010-12-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Remove GET_TASKS RESULT_COUNT. 2010-12-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Split CREATE_TARGETS and GET_TARGETS LSC credentials into SSH and SMB credentials. 2010-12-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add port range to CREATE_TARGET and GET_TARGETS. 2010-12-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Neaten comment. 2010-12-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Adjust GET_REPORTS result counts for recent filtering additions. 2010-12-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add trust time to GET_AGENTS. 2010-12-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Modify CREATE_TASK, GET_SYSTEM_REPORTS, GET_TASKS and MODIFY_TASK for OMP 2.0 master slave feature. 2010-12-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add CVE and BID to RESULT/NVT in GET_RESULTS, GET_NOTES and GET_OVERRIDES. 2010-12-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Remove tabs. 2010-12-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Update GET_REPORTS for OMP 2.0. 2010-12-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Update help text in help example. * doc/omp.html: Update from source. 2010-12-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add remaining commands new in OMP 2. * doc/omp.rnc, doc/omp.html: Update from source. 2010-12-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TASKS set progress to 1 if 0 and 99 if 100, so it looks like something is going on when it is. 2010-12-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Note report filtering changes. 2010-12-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (validate_port_range): New function. (create_target): Validate port range. * src/omp.c (omp_xml_handle_start_element): Init port range in CREATE_TARGET PORT_RANGE, so that the port range is empty instead of NULL when the port range element is empty. (omp_xml_handle_end_element): In CLIENT_CREATE_TARGET handle port range error. 2010-12-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Only send filtered results for requested threat levels. 2010-12-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_counts_match): Move up in file. (report_counts_filtered, report_counts_id_filt): Make constraints NULL if "". Check constraints properly. 2010-12-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_count_filtered, report_counts_match): New functions. (report_counts_id_filt): New function. Body from report_counts_id. Add filtered result counting. (report_counts_id): Call through to report_counts_id_filt. (print_report_xml): Add filtered counts. 2010-12-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (migrate_35_to_36): Ensure example task references are IDs. Set port range on any leftover targets to "default". 2010-12-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage_process): Correct error message. 2010-12-16 Matthew Mundell <matthew.mundell@greenbone.net> Move port range from config into target. Hence increase database version to 36. Add database migration from version 35 to 36. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 36. * src/manage_sql.c (duplicate_target, sql_uniquify): New functions. (create_tables): Add port_range to table targets. (migrate_35_to_36): New function. (database_migrators): Add migrate_35_to_36. (init_manage_process): Create SQL function uniquify. (create_target): Add port_range arg. (init_target_iterator): Add port_range field. (target_iterator_port_range): New function. (manage_nvt_preference_add): Prevent addition of port range. * src/manage.c (send_config_preferences): Skip over port range, just in case. (run_task): Send port range from target. * src/manage.h, src/manage_sql.h: Update headers accordingly. * src/omp.c (create_target_data_t, create_target_data_reset) (client_state_t): Add CREATE_TARGET port range. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add PORT_RANGE to TARGET. Send port range in GET_TARGETS. 2010-12-16 Michael Wiegand <michael.wiegand@greenbone.net> * CMakeLists.txt: Add a collection of code hardening flags to CMAKE_C_FLAGS, inspired by hardening-wrapper on Debian. Add -Werror to CMAKE_C_FLAGS to make all warnings fatal. 2010-12-16 Michael Wiegand <michael.wiegand@greenbone.net> * doc/CMakeLists.txt: Handle absence of doxygen more gracefully. 2010-12-13 Matthew Mundell <matthew.mundell@greenbone.net> * README: Update gsa-desktop to GSD. 2010-12-13 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (targets): Add smb_lsc_credential. * doc/db.png: Update from SQL. 2010-12-13 Matthew Mundell <matthew.mundell@greenbone.net> Split target credential into SSH credential and SMB credential. Hence increase database version to 35. Add database migration from version 34 to 35. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 35. * src/manage_sql.c (create_tables): Add smb_lsc_credential to table targets. (migrate_34_to_35): New function. (database_migrators): Add migrate_34_to_35. (create_target): Convert single credential arg into two. (init_target_iterator): Add extra credential field. (target_iterator_lsc_credential, target_lsc_credential): Remove. Replace with SSH versions. (target_iterator_smb_credential, target_iterator_ssh_credential) (target_ssh_lsc_credential, target_smb_lsc_credential): New functions. (init_lsc_credential_target_iterator): Select targets used by both credentials. * src/manage.c (run_task): Send SSH and SMB preferences separately. * src/manage.h, src/manage_sql.h: Update headers accordingly. * src/omp.c (create_target_data_t, create_target_data_reset) (client_state_t): Convert single credential field into two. (omp_xml_handle_start_element, omp_xml_handle_end_element): Convert CREATE_TARGET LSC_CREDENTIAL into SSH and SMB entities. Same for TARGET in GET_TARGETS. 2010-12-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add some of the commands new in OMP 2. * doc/omp.rnc, doc/omp.html: Update from source. 2010-12-10 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number. 2010-12-10 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 2.0+beta3 release. * CHANGES: Updated. 2010-12-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/CMakeLists.txt (C_FILES): Add lsc_user.c. 2010-12-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (lsc_credential_iterator_rpm) (lsc_credential_iterator_deb, lsc_credential_iterator_exe): Get login name from right column. 2010-12-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/LaTeX/latex.xsl (result-details-host-port-threat): Add threat to subsubsection name. 2010-12-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/LaTeX/latex.xsl (latex-subsection) (latex-subsubsection, latex-hyperref): Escape name. 2010-12-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/LaTeX/latex.xsl (single-host-overview-table-row): Add threat to hyperref target. (result-details-host-port-threat): Add threat to label. 2010-12-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_max_hosts): Limit range size in octet ranges to 256. 2010-12-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/HTML/HTML.xsl (command): Correct contents number. * doc/omp.html: Update from source. 2010-12-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/HTML/HTML.xsl (structure-line): Add C case. In R case add _response suffix and shorten description. Emit element suffix after "One of" in OR case. * doc/omp.html: Update from source. 2010-12-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add commands to COMMANDS pattern. * doc/omp.rnc, doc/omp.html: Update from source. 2010-12-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/RNC/rnc.xsl, src/schema_formats/HTML/rnc.xsl (ele): Inline the body of the type element, otherwise the ele will have the same name as the type element. * doc/omp.rnc, doc/omp.html: Update from source. 2010-12-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (REPORT_NOTICE_FORMAT, escalate_1): Add note above report if report was truncated. 2010-12-03 Tim Brown <timb@openvas.org> * report_formats/IVIL/IVIL.xml, report_formats/IVIL/generate: New. Preliminary support for IVIL (http://ivil.sourceforge.net/). 2010-12-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (SIMPLE_NOTICE_FORMAT, escalate_1): Add generic event description to sentence about condition. 2010-12-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (REPORT_NOTICE_FORMAT, escalate_1): Add task name and event to first two sentences. 2010-12-02 Matthew Mundell <matthew.mundell@greenbone.net> Increase database version to 33 to ensure change the "NTLMSSP" preference on the "Login Configurations" checkbox. Add database migration from version 33 to 34. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 34. * src/manage_sql.c (migrate_33_to_34, migrate_33_to_34_set_pref): New functions. (database_migrators): Add migrate_33_to_34. (setup_full_config_prefs): Set NTLMSSP to yes. 2010-12-01 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number. 2010-11-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/HTML/HTML.xsl (structure-line): Remove type check from global element case, because the type is the global element type. * doc/omp.html: Update from source. 2010-11-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/HTML/HTML.xsl (structure-line): In the global element case link the tag text to the element details. * doc/omp.html: Update from source. 2010-11-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/HTML/HTML.xsl (structure-line): Handle the global element case separately, so that summaries show up. * doc/omp.html: Update from source. 2010-11-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Remove fullstops from summaries. * doc/omp.rnc, doc/omp.html: Update from source. 2010-11-30 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * CHANGES: Updated for upcoming 2.0 beta2. 2010-11-29 Matthew Mundell <matthew.mundell@greenbone.net> * ChangeLog, TODO, src/lsc_user.c, src/lsc_user.h, src/manage_sql.h, src/schema_formats/HTML/rnc.xsl, src/schema_formats/RNC/rnc.xsl, src/tests/omp_authenticate_0.c, src/tests/omp_commands_0.c, src/tests/omp_create_config_0.c, src/tests/omp_create_config_1.c, src/tests/omp_create_lsc_credential_0.c, src/tests/omp_create_lsc_credential_1.c, src/tests/omp_create_target_0.c, src/tests/omp_create_target_1.c, src/tests/omp_create_task_2.c, src/tests/omp_create_task_3.c, src/tests/omp_create_task_4.c, src/tests/omp_delete_config_0.c, src/tests/omp_delete_config_1.c, src/tests/omp_delete_lsc_credential_0.c, src/tests/omp_delete_target_0.c, src/tests/omp_delete_target_1.c, src/tests/omp_get_configs_0.c, src/tests/omp_get_configs_1.c, src/tests/omp_get_configs_2.c, src/tests/omp_get_configs_3.c, src/tests/omp_get_lsc_credentials_0.c, src/tests/omp_get_lsc_credentials_1.c, src/tests/omp_get_lsc_credentials_2.c, src/tests/omp_get_report_8.c, src/tests/omp_get_targets_0.c, src/tests/omp_get_targets_1.c, src/tests/omp_start_task_3.c, src/tests/omp_start_task_5.c: Replace Intevation addresses with Greenbone ones. 2010-11-29 Matthew Mundell <matthew.mundell@greenbone.net> * CMakeLists.txt, ChangeLog, doc/CMakeLists.txt, doc/openvasmd.8.xml, src/CMakeLists.txt, src/logf.h, src/manage.c, src/manage.h, src/manage_sql.c, src/omp.c, src/omp.h, src/ompd.c, src/ompd.h, src/openvasmd.c, src/otp.c, src/otp.h, src/otpd.c, src/otpd.h, src/ovas-mngr-comm.c, src/oxpd.c, src/oxpd.h, src/splint.h, src/tests/CMakeLists.txt, src/tests/common.c, src/tests/common.h, src/tests/make_report_uuid_0.c, src/tests/omp_abort_task_0.c, src/tests/omp_bogus_0.c, src/tests/omp_bogus_1.c, src/tests/omp_create_task_0.c, src/tests/omp_create_task_1.c, src/tests/omp_delete_report_0.c, src/tests/omp_delete_report_1.c, src/tests/omp_delete_task_0.c, src/tests/omp_delete_task_1.c, src/tests/omp_delete_task_2.c, src/tests/omp_get_certificates_0.c, src/tests/omp_get_certificates_1.c, src/tests/omp_get_dependencies_0.c, src/tests/omp_get_dependencies_1.c, src/tests/omp_get_nvt_all_0.c, src/tests/omp_get_nvt_all_1.c, src/tests/omp_get_nvt_details_0.c, src/tests/omp_get_nvt_details_1.c, src/tests/omp_get_nvt_details_2.c, src/tests/omp_get_nvt_details_3.c, src/tests/omp_get_nvt_details_4.c, src/tests/omp_get_nvt_feed_checksum_0.c, src/tests/omp_get_nvt_feed_checksum_1.c, src/tests/omp_get_nvt_feed_checksum_2.c, src/tests/omp_get_nvt_feed_checksum_3.c, src/tests/omp_get_nvt_feed_checksum_4.c, src/tests/omp_get_nvt_feed_checksum_5.c, src/tests/omp_get_preferences_0.c, src/tests/omp_get_preferences_1.c, src/tests/omp_get_preferences_2.c, src/tests/omp_get_report_0.c, src/tests/omp_get_report_1.c, src/tests/omp_get_report_2.c, src/tests/omp_get_report_3.c, src/tests/omp_get_report_4.c, src/tests/omp_get_report_5.c, src/tests/omp_get_report_6.c, src/tests/omp_get_report_7.c, src/tests/omp_get_rules_0.c, src/tests/omp_get_rules_1.c, src/tests/omp_get_status_0.c, src/tests/omp_get_status_1.c, src/tests/omp_get_status_2.c, src/tests/omp_get_status_3.c, src/tests/omp_get_status_4.c, src/tests/omp_get_status_5.c, src/tests/omp_get_version_0.c, src/tests/omp_help_0.c, src/tests/omp_help_1.c, src/tests/omp_modify_report_0.c, src/tests/omp_modify_task_0.c, src/tests/omp_modify_task_1.c, src/tests/omp_start_task_0.c, src/tests/omp_start_task_1.c, src/tests/omp_start_task_2.c, src/tests/omp_start_task_4.c, src/tests/read_protocol_0.c, src/tests/strip_space_0.c, src/tests/strip_space_1.c, src/tests/strip_space_2.c, src/tests/strip_space_3.c, src/tests/timeout_0.c, src/tracef.h, src/types.h: Use Greenbone address. 2010-11-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (set_nvts_md5sum): Doc arg. * src/manage.h (create_report_format_param_t): Doc fields. 2010-11-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/HTML/HTML.xsl (rnc-preamble): New template. (protocol): Add RNC preamble section. Adjust index numbers accordingly. * src/schema_formats/HTML/rnc.xsl (preamble): New template. From ../RNC/. * src/schema_formats/RNC/rnc.xsl (preamble): New template. From RNC.xsl. * src/schema_formats/RNC/RNC.xsl (preamble): Remove. To rnc.xsl. * doc/omp.html: Update from source. 2010-11-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add COMMAND/EXAMPLE to the schema case of HELP. * doc/omp.rnc, doc/omp.html: Update from source. 2010-11-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add COMMAND/RESPONSE to the schema case of HELP. * doc/omp.rnc, doc/omp.html: Update from source. 2010-11-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (http_get, manage_report, manage_send_report) (manage_schema): Make trace messages g_debug instead of g_message. (init_manage_process): Make failure messages g_warnings. * src/omp.c, src/openvasmd.c: Downgrade messages of possibly interesting events to level info. 2010-11-26 Matthew Mundell <matthew.mundell@greenbone.net> Add the schema parts of the HELP command to the HELP response, including an example. To make it easier to define the recursive parts of the HELP response syntax, add a new PROTOCOL element, ELEMENT, alongside TYPE and COMMAND. * src/schema_formats/XML/OMP.xml: Add schema parts of HELP. * src/schema_formats/HTML/rnc.xsl, src/schema_formats/RNC/rnc.xsl (e): Adjust for new top level ELEMENTs. Update callers accordingly. (ele): Adjust for new TYPE property, which allows ELEs to be defined by refering to ELEMENTs instead of including PATTERNs. * src/schema_formats/RNC/rnc.xsl (elements): New template. (protocol): Add elements section. * src/schema_formats/HTML/HTML.xsl (pretty): Special case p to preserve formatting. (type [details], type-details, command, command-summary) (command-details): Update section numbers. (element [index], element-summary, element): New templates. (protocol): Add element sections. * doc/omp.rnc, doc/omp.html: Update from source. 2010-11-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c, src/manage_sql.c: Include unistd.h, for when tracing is off. 2010-11-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/HTML/HTML.xsl (func:string-left-trim-nl) (func:string-right-trim-nl, func:string-trim-nl): New function. (pretty): Special case help_response to preserve formatting. * src/schema_formats/XML/OMP.xml: Add HELP example. * doc/omp.html: Update from source. 2010-11-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c (serve_omp): Make the second timeout check like the first. Make the second timeout trace message unique. 2010-11-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (sql_x): Remove warning for too few rows, as caller can legitimately provide SQL that will select too few rows, for example when checking for existence. (sql_int): Add row expectation to doc. (sql_string): Note NULL ambiguity in return doc. 2010-11-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (compare_message_types_desc) (compare_message_types_asc, compare_port_threat): Include host in comparison. (print_report_xml): Account for host when removing duplicates. 2010-11-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (compare_message_types_desc) (compare_message_types_asc): Include port in comparison. (compare_port_threat): New function. (print_report_xml): Also do the threat sorting when sort_field is NULL, because init_result_iterator will have sorted by threat. Call compare_port_threat instead of alphasort so that the ports are sorted by port and threat. Remove array index with g_array_remove_index so that order is preserved. 2010-11-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_counts_id): Count false positives too. (task_trend): Request false positive count, as report_counts_id is faster with this count. 2010-11-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/LaTeX/latex.xsl (latex-replace-backslash-dollar): Correct template name. 2010-11-19 Matthew Mundell <matthew.mundell@greenbone.net> Speed up row wrapping in the LaTeX report XSLT. * src/report_formats/LaTeX/latex.xsl (wrap-row-indented): New template. The indented case of wrap-row. (wrap-row): Remove indented test, which is covered by wrap-row-indented. Inline latex-newline. (break-into-rows-indented): New template. The indented case of break-into-rows. (break-into-rows): Remove indented and max params. Call break-into-rows instead of recursing with these params. 2010-11-19 Michael Wiegand <michael.wiegand@greenbone.net> Increased required openvas-libraries version. * CMakeLists.txt: Updated LO_MAJOR_MIN_VER and LO_MINOR_MIN_VER. * INSTALL: Document required version. 2010-11-19 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number. 2010-11-19 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 2.0+beta1 release. * CHANGES: Fixed typos. * CMakeLists.txt: Updated version number. Changed CPACK_PACKAGE_VERSION for use with "+beta" versioning scheme. 2010-11-19 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * CHANGES: Improved. 2010-11-19 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * CHANGES: Updated. 2010-11-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/LaTeX/latex.xsl (wrap-row): Call escape_verb_env directly, instead of as the value of a variable, to increase speed. 2010-11-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (create_config_data_reset) (create_report_format_data_reset): Check item exists, in case array is NULL terminated. * ChangeLog: Restore overwritten entry. 2010-11-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_counts_id): Remove initialisation of debugs from "all" case. (task_trend): Pass logs to report_counts_id, as this is faster. 2010-11-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_counts_id): If all levels are required count them all in one go, using the three part select from report_count. 2010-11-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_count): Put the zero comparisons first in the overrides select. 2010-11-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_count): Convert the complex override select to multiple simpler selects, to increase speed. 2010-11-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_count): Only do the overrides case if the user has overrides. 2010-11-11 Raimund Renkert <raimund.renkert@greenbone.net> * report_formats/simple_map_plot/generate: Generate the symbol for non-georeferenced IPs using twopi. * report_formats/simple_map_plot/non-georeferenced.map: Render png symbol instead of a label on the map. * report_formats/simple_map_plot/create_report_import: Added new files. * report_formats/simple_map_plot/non-georeferenced.dot: New. 2010-11-10 Matthew Mundell <matthew.mundell@greenbone.net> Speed up GET_TASKS. * src/manage_sql.c (create_tables): Add more indexes. (report_count): Select ID fields as integers instead of strings. Reorder the constraints in the standard case. (report_counts_id): Just set debugs and false_positives to 0, to save some time. (delete_agent): Select ID fields as integers instead of strings. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TASKS remove the result counts over all scans for a task, use the report count for the first report for the last and second last reports if they are the same report and turn off the progress tracing. 2010-11-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_tables): Add a task index for table results. 2010-11-09 Matthew Mundell <matthew.mundell@greenbone.net> Create LSC credential packages on every GET_LSC_CREDENTIAL, instead of once in CREATE_LSC_CREDENTIAL. * src/lsc_user.c (lsc_user_keys_create, lsc_user_rpm_recreate) (lsc_user_deb_recreate, lsc_user_exe_recreate): New functions. (alien_found): Move up in file. * src/manage.h: Add headers accordingly. * src/manage_sql.c (create_lsc_credential): Just create the keys, instead of all packages. (lsc_credential_iterator_rpm, lsc_credential_iterator_deb) (lsc_credential_iterator_exe): Create packages instead of returning cached packages. 2010-11-09 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/ompd.c, src/otpd.c, src/lsc_user.h, src/manage.c, src/omp.c, src/openvasmd.c, src/manage.h: Adjusted include patch for header files of libopenvas_misc. 2010-11-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/HTML/HTML.xsl (type [details]): Add RNC heading. Print type RNC as a type instead of as an element. * src/schema_formats/HTML/rnc.xsl, src/schema_formats/RNC/rnc.xsl: Work around RNC restrictions on treating element text as data when element contains other elements. * src/schema_formats/XML/OMP.xml: Remove GET_TASKS elements left over from sample. * doc/omp.html, doc/omp.rnc: Update from source. 2010-11-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/HTML/HTML.xsl (type [details]): Add RNC heading. Print type RNC as a type instead of as an element. * src/schema_formats/HTML/rnc.xsl: Normalise space as in RNC version. Remove rare wrap to match RNC version. * src/schema_formats/RNC/rnc.xsl: Match to HTML version. * src/schema_formats/XML/OMP.xml: Correct typos and GET_REPORTS element name. 2010-11-09 Raimund Renkert <raimund.renkert@greenbone.net> * report_formats/simple_map_plot/generate: Render label for non-georeferenced IPs on the world map. * report_formats/simple_map_plot/world_map.map: Include Layer for non-georeferenced IPs. * report_formats/simple_map_plot/non-georeferenced.map: New. 2010-11-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add remaining GET commands. * src/schema_formats/HTML/HTML.xsl (pretty): Remove extra select. (type [details], command): Make RNC blocks wider. * src/schema_formats/HTML/rnc.xsl (wrap): Only add the final newline when the text contains newlines. (wrap-line): Bring width down to 76. * src/schema_formats/RNC/RNC.xsl (types): Normalise space of pattern. * src/schema_formats/RNC/rnc.xsl (rnc-type, attrib, t, ele): Normalise space. 2010-11-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add more GET commands. * src/schema_formats/HTML/HTML.xsl (print-attributes): Add level arg to print each attribute after first on a new line. Update callers. * src/schema_formats/HTML/rnc.xsl (wrap, wrap-line): New templates. (pattern): Wrap text in patterns. * doc/omp.html, doc/omp.rnc: Update from source. 2010-11-04 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * report_formats/simple_map_plot/README.txt: Added note on required tools. 2010-11-04 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * report_formats/simple_map_plot/, report_formats/simple_map_plot/join.awk, report_formats/simple_map_plot/world_map.map, report_formats/simple_map_plot/FreeSans.ttf, report_formats/simple_map_plot/locations.csv, report_formats/simple_map_plot/fonts.txt, report_formats/simple_map_plot/create_report_import, report_formats/simple_map_plot/hosts.vrt, report_formats/simple_map_plot/report_to_csv_host.xsl, report_formats/simple_map_plot/generate, report_formats/simple_map_plot/README.txt, report_formats/simple_map_plot/world_map.tiff: New. Report Format plugin that rednders host scan results on a world map. Most work done by Raimund Renkert. 2010-11-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/LaTeX/latex.xsl, src/report_formats/HTML/HTML.xsl, src/report_formats/TXT/TXT.xsl: Describe which results are in the report, below the description of which filters are in effect. 2010-11-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add GET_PREFERENCES. * doc/omp.html, doc/omp.rnc: Update from source. 2010-11-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/HTML/HTML.xsl (type): Skip link for type "text". * doc/omp.html: Update from source. 2010-11-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/HTML/HTML.xsl: Remove more bold. 2010-11-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/HTML/HTML.xsl: Rename command "breakdown" to "structure". 2010-11-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/HTML/HTML.xsl: Reduce the amount of bold, so that the headings stand out a bit better. 2010-11-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/HTML/HTML.xsl: Match contents items to real headings. Link command breakdown attribute types to type details. Use @ instead of quotations to mark attribs in command breakdown. * doc/omp.html, doc/omp.rnc: Update from source. 2010-11-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add missing type summaries. 2010-11-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/HTML/HTML.xsl: Add a small contents section. 2010-11-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/HTML/HTML.xsl: Add "Data Types". 2010-11-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/HTML/HTML.xsl, src/schema_formats/RNC/RNC.xsl: Add version. 2010-11-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_schema): Doc param. 2010-11-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add more get commands. (create_escalator): Make data elements "any". (get_version): Add VERSION. * src/schema_formats/HTML/HTML.xsl: Normalize space for summary, in case the closing SUMMARY tag is on a new line. * doc/omp.html, doc/omp.rnc: Update from source. 2010-11-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/LaTeX/latex.xsl (longtable-continue-block): Rename Result Overview columns with threat names. 2010-11-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_host_iterator): Add const to arg. * src/manage.h: Update headers accordingly. * src/report_formats/PDF/generate: Use batch mode, so TeX does its best to produce the document, including dealing with missing Unicode chars or other binary in the doc. 2010-10-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/HTML/HTML.xsl (type): New template. (breakdown-line): Add alts, for types that are a simple choice of strings. Add g, to group elements in patterns. * src/schema_formats/HTML/rnc.xsl, src/schema_formats/RNC/rnc.xsl (rnc-type): New template. (attrib): Call type template instead of matching. (t): Add alts handling. (pattern-part): Add g handling. * doc/omp.html, doc/omp.rnc: Update from source. * src/schema_formats/XML/OMP.xml: Add more get commands. Use alts instead of xsd:token string for file modify_task attach action. 2010-10-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (MANAGE_SEND_REPORT_CHUNK64_SIZE) (MANAGE_SEND_REPORT_CHUNK_SIZE): New defines. (manage_send_report, report_format_content_type) (report_format_extension): New functions. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORTS call manage_send_report instead of using manage_report, so that big reports are sent in chunks. 2010-10-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add create commmands. * src/schema_formats/HTML/HTML.xsl (description): Add lists. (pretty): Explicitly indent element text. (breakdown-line): Add r, to refer to command responses. * src/schema_formats/HTML/rnc.xsl, src/schema_formats/RNC/rnc.xsl: Add r to pattern, to refer to command responses. * doc/omp.html, doc/omp.rnc: Update from source. 2010-10-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/LaTeX/latex.xsl (header): Define another character that seems to be missing from Debian Lenny ucs LaTeX package. 2010-10-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/HTML/rnc.xsl, src/schema_formats/RNC/rnc.xsl: Always print the text content of an element. * doc/omp.html, doc/omp.rnc: Update from source. 2010-10-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add modify commmands. 2010-10-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (strbchr, manage_max_hosts): New functions. From omp.c. (create_target): Count hosts here, to ensure within limit in import case. * src/omp.c (strbchr, max_hosts, MAX_HOSTS): Remove. To manage_sql.c and manage.h. Update callers. (omp_xml_handle_end_element): In CREATE_TARGET move hosts error cases into create_target returns. * src/manage.h: Add header accordingly. (MANAGE_MAX_HOSTS): New define. 2010-10-25 Matthew Mundell <matthew.mundell@greenbone.net> * doc/CMakeLists.txt (doc, doc-full): Add OMP docs. (omp.rnc, omp.html): New targets. * doc/omp.html, doc/omp.rnc: New files. Generated from XML source. 2010-10-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add task control commmands. 2010-10-25 Matthew Mundell <matthew.mundell@greenbone.net> * doc/report-format-HOWTO: Note the extra report element. * report_formats/simple_pie_chart/create_report_import: Add param Height. * report_formats/simple_pie_chart/pieplot.xsl: Read height from new param. * report_formats/simple_topo_plot/create_report_import: Add params "Graph Type" and "Node Distance". * report_formats/simple_topo_plot/generate: Read plot tool from param. * report_formats/simple_topo_plot/hostvisdot-summary.xsl: Read nodesep from param. 2010-10-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Increase GET_VERSION version. 2010-10-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (check_host_netmasks): Remove. (MAX_HOSTS): New define. (omp_xml_handle_end_element): Limit number of hosts in CREATE_NOTE, CREATE_OVERRIDE and CREATE_TARGET to 4095. 2010-10-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add AUTHENTICATE. 2010-10-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/schema_formats/XML/OMP.xml: Add missing delete commands. 2010-10-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (create_config_data_reset) (create_report_format_data_reset): Iterate over array using length, instead of depending on terminator. 2010-10-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/TXT/TXT.xsl (override): Only include override when overrides are in effect, as in other reports. 2010-10-21 Matthew Mundell <matthew.mundell@greenbone.net> Ensure that the TXT report matches the GSA report in terms of note and override information. * src/report_formats/TXT/TXT.xsl (wrap-line): Bring max down to 80. (note, override): Replace HTML with text. (result [issue]): Add space after "Overriden from". Remove arg. Enable notes and overrides selections. (report): Add details of what the report includes. 2010-10-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (modify_override): Add "False Positive" to possible new_threat values. 2010-10-20 Matthew Mundell <matthew.mundell@greenbone.net> Ensure that the LaTeX and HTML reports match the GSA report in terms of note and override information. * src/report_formats/LaTeX/latex.xsl (wrap-row, break-into-rows) (text-to-escaped-row): Add colour param. (results-overview): Say whether notes are included. Match filters by text so they show up. (single-host-overview-table-row): Match threat by text. (threat-to-color): Add False Positive. (notes): New template. (overrides): Add the original threat to the heading. Use text-to-escaped-row for the text, in case there are newlines. (result-details-host-port-threat): Match threat by text. Add original threat to heading. (result-details-host-port-threat): Include notes. (results-per-host-single-host-findings): Correct False Positive select. * src/report_formats/HTML/HTML.xsl (override): Only include when overrides are in effect. (report): Note what the report contains. 2010-10-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage): Set flags to enable report formats when creating them. 2010-10-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (max_hosts): Add counting for IPv6 addresses. 2010-10-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (print_report_xml): Correct param doc. (manage_report): Correct error message. Free params in same order. 2010-10-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (max_hosts): Ensure mask has dots in subnet mask case. 2010-10-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (check_host_netmasks): New function. From GSA validate_hosts_parameter. (omp_xml_handle_end_element): Check host netmasks for CREATE_TARGET, CREATE_NOTE and CREATE_OVERRIDE. 2010-10-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_TARGET only allow creation if max_hosts succeeds on the hosts value. 2010-10-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (strbchr): New function. (max_hosts): Handle addresses with ranges. 2010-10-18 Matthew Mundell <matthew.mundell@greenbone.net> * doc/Doxyfile.in: Remove accidental junk from last commit. 2010-10-18 Matthew Mundell <matthew.mundell@greenbone.net> Extend OMP HELP to return a documented partial OMP schema in various formats. * src/omp (help_data_t): New type. (help_data_reset): New function. (command_data_t): Add help. (help_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add format attribute to OMP HELP. * src/manage_sql.c (manage_schema): New function. Returns schema in given format. * src/manage.h: Add header accordingly. * src/CMakeLists.txt: Install schema formats. * src/schema_formats/, src/schema_formats/HTML/, src/schema_formats/HTML/HTML.xsl, src/schema_formats/HTML/generate, src/schema_formats/HTML/rnc.xsl, src/schema_formats/RNC/, src/schema_formats/RNC/RNC.xsl, src/schema_formats/RNC/generate, src/schema_formats/RNC/rnc.xsl, src/schema_formats/XML/, src/schema_formats/XML/OMP.xml, src/schema_formats/XML/generate: New dirs and files. First schema formats. 2010-10-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp (omp_xml_handle_end_element): Terminate MODIFY_CONFIG arrays at the close of the associated element instead of before handling the request. This ensures that the arrays are always terminated, even in the error response cases. 2010-10-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_lsc_credential): Correct comment on second last commit, which is actually moving the login check so that password-only credentials can have any login. 2010-10-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_param_option_iterator): Correct doc param name. 2010-10-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_lsc_credential): Move password check into package case, so that password-only credentials can have any password. 2010-10-07 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP command MODIFY_LSC_CREDENTIAL. * src/manage_sql.c (set_lsc_credential_name, set_lsc_credential_comment) (set_lsc_credential_login, set_lsc_credential_password) (lsc_credential_packaged): New functions. * src/manage.h: Add headers accordingly. * src/omp.c (help_text): Add new command. (modify_lsc_credential_data_t): New type. (modify_lsc_credential_data_reset): New function. (command_data_t, client_state_t): Add new command elements. (modify_lsc_credential_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add MODIFY_LSC_CREDENTIAL handling. 2010-10-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_report_format): Remove stray variable. 2010-10-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_report_format): Check param type names. * src/omp.c (omp_xml_handle_end_element): In CREATE_REPORT_FORMAT add param type name error case. 2010-10-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_report_format): Check for duplicate param names. * src/omp.c (omp_xml_handle_end_element): In CREATE_REPORT_FORMAT add duplicate param case. 2010-10-06 Matthew Mundell <matthew.mundell@greenbone.net> * report_formats/simple_bar_chart/create_report_import: Cleanup range end examples after second last commit. 2010-10-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_report_format): Always remove format dir on failure. Always free dir. 2010-10-06 Matthew Mundell <matthew.mundell@greenbone.net> * report_formats/simple_bar_chart/create_report_import: Remove + from example range end, to ensure verification succeeds. 2010-10-06 Matthew Mundell <matthew.mundell@greenbone.net> * report_formats/simple_topo_plot/create_report_import: Remove extra FILE. 2010-10-06 Matthew Mundell <matthew.mundell@greenbone.net> Include params in report format verification. * src/manage_sql.c (create_report_format): Get param type and value the right way round for verification. Add type min, type max and fallback to verification. Require params to have a type. Use range ends to indicate when type min and max were left out. Require params to have a fallback. (verify_report_format): Add param type qualifiers. (init_report_format_param_iterator): Add type_regex. (report_format_param_iterator_type_regex) (report_format_param_iterator_fallback): New functions. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_start_element) (omp_xml_handle_end_element): In CREATE_REPORT_FORMAT PARAM require TYPE, require DEFAULT and use range ends to indicate when TYPE MIN and MAX are left out. * report_formats/simple_bar_chart/create_report_import, report_formats/simple_pie_chart/create_report_import: Add params to signature. 2010-10-05 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (report_format_params): Add type, type_min, type_max, type_regex and fallback. (report_format_param_options): New table. * doc/db.png: Update from SQL. 2010-10-05 Matthew Mundell <matthew.mundell@greenbone.net> * report_formats/simple_bar_chart/create_report_import: Add example MINs, MAXes and DEFAULT. * report_formats/simple_bar_chart/plot-plt.xsl: Correct description. 2010-10-05 Matthew Mundell <matthew.mundell@greenbone.net> Add report format param defaults and validation. Hence increase database version to 33. Add database migration from version 32 to 33. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 33. * src/manage_sql.c (create_tables): Add type_min, type_max, type_regex and fallback columns to report_format_params table. (migrate_32_to_33): New function. (database_migrators): Add migrate_32_to_33. (create_report_format): Add min and max param type qualifiers, and param value validation according to type. (report_format_param_type, report_format_param_type_max) (report_format_param_type_max, validate_param_value): New functions. (set_report_format_param): Ensure that the param exists. Validate value according to param type. (init_report_format_param_iterator): Add new columns. (report_format_param_iterator_type_min) (report_format_param_iterator_type_max) (report_format_param_iterator_fallback): New functions. * src/manage.h: Update headers accordingly. (create_report_format_param_t): New type. * src/omp.c (create_report_format_data_t) (create_report_format_data_reset, client_state_t): Add param entries. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add PARAM/DEFAULT, PARAM/TYPE/MIN and PARAM/TYPE/MAX handling to CREATE_REPORT_FORMAT/REPORT_FORMAT. Add same to GET_REPORT_FORMATS response. Expand the set_report_format_param check to include param validation. * src/CMakeLists.txt: Define feature macros for c99, for LLONG_MAX and LLONG_MIN. 2010-10-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_target): Add missing arg list in SQL. (delete_report_format): Remove param options too. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_TARGET make the assertions about the values instead of the addresses. 2010-10-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (migrate_31_to_32): Ensure table report_format_params exists. 2010-09-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (escalate_1): Cast format length specifier to int for 64 bit. 2010-09-30 Matthew Mundell <matthew.mundell@greenbone.net> Add report format param types. Hence increase database version to 32. Add database migration from version 31 to 32. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 32. * src/manage_sql.c (create_tables): Add report_format_param_options table. Add type column to report_format_params table. (migrate_31_to_32): New function. (database_migrators): Add migrate_31_to_32. (create_report_format): Add params_options arg. (set_report_format_param): Add value_64 NULL guard. (init_report_format_param_iterator): Add type. (report_format_param_iterator_param) (report_format_param_iterator_type_name) (report_format_param_iterator_type, init_param_option_iterator) (param_option_iterator_value): New function. * src/manage.c (report_format_param_type_name) (report_format_param_type_from_name): New functions. * src/manage.h: Update headers accordingly. (report_format_param_t, report_format_param_type_t): New types. * src/manage_sql.h (rowid_t): New type. * src/omp.c (create_report_format_data_t) (create_report_format_data_reset, client_state_t): Add param option entries. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add OPTIONS/OPTION handling to CREATE_REPORT_FORMAT/REPORT_FORMAT/PARAM. Add options to GET_REPORT_FORMATS response. * report_formats/simple_bar_chart/create_report_import: Neaten name. Switch to XSL plot file. Add a report param of each types. * report_formats/simple_bar_chart/generate: Generate the plot file too, in order to access the report format params. * report_formats/simple_bar_chart/plot.plt: Remove. Replaced with XSL. * report_formats/simple_bar_chart/plot-plt.xsl: New file. 2010-09-29 Matthew Mundell <matthew.mundell@greenbone.net> Add ACTIVE to OMP MODIFY_REPORT_FORMAT. * src/manage_sql.c (set_report_format_active): New function. * src/manage.h: Add header accordingly. * src/omp.c (modify_report_format_data_t) (modify_report_format_data_reset, client_state_t): Add active name and value. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add MODIFY_REPORT_FORMAT ACTIVE handling. 2010-09-29 Matthew Mundell <matthew.mundell@greenbone.net> Add PARAM to OMP MODIFY_REPORT_FORMAT. * src/manage_sql.c (set_report_format_param): New function. * src/manage.h: Add header accordingly. * src/omp.c (modify_report_format_data_t) (modify_report_format_data_reset, client_state_t): Add param name and value. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add MODIFY_REPORT_FORMAT PARAM handling. 2010-09-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_report_format): Remove params too. 2010-09-29 Matthew Mundell <matthew.mundell@greenbone.net> Add a param to the Pie chart, as an example. * report_formats/simple_pie_chart/create_report_import: Add "Width" param. * report_formats/simple_pie_chart/generate: Pipe error output to files. * report_formats/simple_pie_chart/pieplot.xsl: Respect "Width" param. 2010-09-29 Matthew Mundell <matthew.mundell@greenbone.net> Ensure GET_SYSTEM_REPORTS responds properly when the given type is missing. * src/manage.c (get_system_report_types): Return 1 on failure to find report. Always init types args when getting all reports. (init_system_report_type_iterator): Add fail returns. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_SYSTEM_REPORTS correct error response variable and bring line width in range. 2010-09-28 Matthew Mundell <matthew.mundell@greenbone.net> Extend GET_SYSTEM_REPORTS for getting slave system reports. * src/manage.c (get_slave_system_report_types): New function. (get_system_report_types, init_system_report_type_iterator): Add slave arg. (slave_system_report): New function. (manage_system_report): Add slave arg. * src/manage.h: Update headers accordingly. * src/omp.c (get_system_reports_data_t) (get_system_reports_data_reset): Add slave_id. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add slave_id attribute to GET_SYSTEM_REPORTS. 2010-09-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (set_report_scan_run_status): New function. * src/manage_sql.h: Add header accordingly. * src/manage.c (run_slave_task): Revert last change. (run_task): In the resume case, mark just the report as requested before forking, to match the normal behaviour. 2010-09-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (run_slave_task): Set task to requested after START_TASK. 2010-09-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (trim_report): New function. * src/manage_sql.h: Add header accordingly. * src/manage.c (run_slave_task): When resuming and the task UUID is missing or the resume fails in OMP, then start the task from the beginning. This can happen if someone edits the slave of the task, or messes with the task on the slave. (run_task): Similarly, in the resume case, clear the slave record. 2010-09-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Note contention hole. 2010-09-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TASKS free target UUID. 2010-09-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (run_slave_task): Create slave resources with comments. 2010-09-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (modify_task_data_t, modify_task_data_reset): Add slave_id. (client_state_t): Add slave entry. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add slave handling to MODIFY_TASK. 2010-09-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TASKS add slave to response. 2010-09-24 Matthew Mundell <matthew.mundell@greenbone.net> Add slaves. Use slaves instead of targets to represent slave managers. Hence increase database version to 31. Add database migration from version 30 to 31. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 31. * src/manage_sql.c (create_tables): Add slaves table. (migrate_30_to_31): New function. (database_migrators): Add migrate_30_to_31. (task_slave, set_task_slave): Use slave_t for slave. (target_in_use): Remove slave constraint. (find_slave, create_slave, delete_slave, init_slave_iterator) (slave_iterator_slave, slave_iterator_uuid, slave_iterator_name) (slave_iterator_comment, slave_iterator_host, slave_iterator_port) (slave_iterator_login, slave_iterator_password, slave_uuid) (slave_name, slave_host, slave_login, slave_password, slave_port) (set_slave_host, slave_in_use, init_slave_task_iterator) (slave_task_iterator_name, slave_task_iterator_uuid): New functions. * src/manage.h: Add headers accordingly. (slave_t): New type. * src/manage.c (slave_authenticate): Replace credential param with slave. (run_slave_task, delete_slave_task): Use slave_t interface for slaves. * src/omp.c (help_text): Add slave commands. (create_slave_data_t, delete_slave_data_t, get_slaves_data_t): New slave types. (create_slave_data_reset, delete_slave_data_reset) (get_slaves_data_reset): New slave functions. (command_data_t): Add slave fields. (create_slave_data, delete_slave_data, get_slaves_data): New slave variables. (client_state_t): Add states for slave commands. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add slave command handling. In CLIENT_CREATE_TASK use slave_t interface for slaves. 2010-09-24 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db.png: Update from SQL. 2010-09-24 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (agents): Add installer_trust_time. (tasks): Add slave. (reports): Add slave_progress and slave_task_uuid. (report_formats): Add trust_time and flags. (slaves): New table. 2010-09-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (run_task): Correct typo in comment. 2010-09-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (modify_report_data_t, modify_report_data_reset): Alphabetise. (omp_xml_handle_end_element): Correct command name in CLIENT_MODIFY_CONFIG response. Init report in CLIENT_MODIFY_REPORT. 2010-09-22 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP command MODIFY_REPORT_FORMAT. * src/manage_sql.c (set_report_format_name) (set_report_format_summary): New functions. (init_report_format_iterator): Add installer and installer signature (report_format_iterator_installer): New functions. Adjust other accessors accordingly. * src/manage.h: Add headers accordingly. * src/omp.c (help_text): Add new command. (modify_report_format_data_t): New type. (modify_report_format_data_reset): New function. (command_data_t, client_state_t): Add new command elements. (modify_report_format_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add MODIFY_REPORT_FORMAT handling. 2010-09-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/LaTeX/latex.xsl (header): Define two Greek characters that seem to be missing from Debian Lenny ucs LaTeX package. 2010-09-16 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP command VERIFY_AGENT. * src/manage_sql.c (verify_agent): New function. (init_agent_iterator): Add installer and installer signature (agent_iterator_installer): New functions. Adjust other accessors accordingly. * src/manage.h: Add headers accordingly. * src/omp.c (help_text): Add new command. (verify_agent_data_t): New type. (verify_agent_data_reset): New function. (command_data_t, client_state_t): Add new command elements. (verify_agent_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add VERIFY_AGENT handling. 2010-09-16 Matthew Mundell <matthew.mundell@greenbone.net> Add agent trust time. Hence increase database version to 30. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 30. * src/manage_sql.c (create_tables): Add installer_trust_time to table agents. (migrate_29_to_30): New function. (database_migrators): Add migrate_29_to_30. (create_agent): Set installer_trust_time. (init_agent_iterator): Include installer_trust_time. (agent_iterator_trust_time): New function. Adjust other accessors accordingly. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_AGENTS add trust time to standard response. 2010-09-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (MAX_CONTENT_LENGTH): Set to something sensible. 2010-09-16 Matthew Mundell <matthew.mundell@greenbone.net> Include report in summary version of email escalator. * src/omp.c (buffer_results_xml): Export for manage_sql.c. (result_type_threat): Remove. (compare_message_types_desc, compare_message_types_asc) (array_add_new_string, PRINT, print_report_xml): Remove. Moved to manage_sql.c. (omp_xml_handle_end_element): In CLIENT_GET_REPORTS replace report generation with call to manage_report. * src/manage.c (manage_result_type_threat): New function. Body from result_type_threat from omp.c. Update callers. * src/manage_sql.c (array_add_new_string, PRINT, print_report_xml): New functions. From omp.c. (REPORT_NOTICE_FORMAT, MAX_CONTENT_LENGTH): New defines. (escalate_1): Include report in mail in place of summary message. (compare_message_types_desc, compare_message_types_asc) (print_report_xml): New functions. From omp.c. (PRINT): New macro. From omp.c. (manage_report): New function. Body based on report generation code from omp.c. * src/manage.h: Add headers accordingly. 2010-09-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (run_task): Note how the targets are controlled when resuming a stopped task. 2010-09-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_report): Set the task to the status of the newest report, whatever the report status is. 2010-09-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (scanner): Init. 2010-09-15 Matthew Mundell <matthew.mundell@greenbone.net> Make tasks with slaves run on the slaves. * src/manage.c (update_slave_progress, update_from_slave) (slave_authenticate): New functions. Support for run_slave_task and delete_slave_task. (buffer_config_preference_xml): New header. (run_slave_task): New function. (run_task): Use run_slave_task if the task has a slave. (delete_slave_task): New function. * src/manage_sql.c (delete_slave_task): New header. (delete_report): Remove slave task if the task has a slave. 2010-09-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_report): Before updating the report status check that there was actually a report. 2010-09-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (set_task_parameter): Pass config UUID instead of name to find_config. 2010-09-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_DEPENDENCIES pass data to g_hash_table_find for send_dependency. 2010-09-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/CMakeLists.txt: Turn off building of tests temporarily. 2010-09-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (delete_reports): Handle delete_report return. 2010-09-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (delete_report): If the newest report is stopped after removing the report, then set the task to stopped. (manage_delete_report): Add return value to doc. 2010-09-14 Matthew Mundell <matthew.mundell@greenbone.net> Make report deletion atomic. * src/manage_sql.c (delete_report): Add doc about transaction. (manage_delete_report): New function. (delete_task): Add transaction. * src/manage.h, src/manage_sql.h: Update headers accordingly. * src/manage.c (delete_reports): Remove transaction todo. Add doc about safe context. * src/omp.c (omp_xml_handle_end_element): In CLIENT_DELETE_REPORT call manage_delete_report instead of delete_report. 2010-09-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TASKS use the slave progress when the report is from a slave. 2010-09-14 Matthew Mundell <matthew.mundell@greenbone.net> Store slave task UUID. Hence increase database version to 29. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 29. * src/manage_sql.c (create_tables): Add slave_task_uuid to table reports. (migrate_28_to_29): New function. (database_migrators): Add migrate_28_to_29. (init_manage, make_report): Init slave_task_uuid. (report_slave_task_uuid, set_report_slave_task_uuid): New functions. * src/manage.h, src/manage_sql.h: Add headers accordingly. 2010-09-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (switch_representation): Free selector at end, because it's used in the body. 2010-09-13 Matthew Mundell <matthew.mundell@greenbone.net> Add an active flag to the report formats. Hence increase database version to 28. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 28. * src/manage_sql.c (create_tables): Add flags to table report_formats. (migrate_27_to_28): New function. (database_migrators): Add migrate_27_to_28. (report_format_flag_t): New type. (create_report_format): Init flags column. (report_format_active): New function. (init_report_format_iterator): Add flags. (report_format_iterator_active): New function. * src/manage.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORTS require that the report format be active. In CLIENT_GET_REPORT_FORMATS add the active flag to the response. 2010-09-10 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * report_formats/sourcefire/sourcefire.xsl: Make description a single line. Fix the parsing of port and protocol so that it works also for "general/tcp". 2010-09-09 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * report_formats/sourcefire/sourcefire.xsl: Create "AddHost" entries and avoid empt line with white spaces. 2010-09-09 Matthew Mundell <matthew.mundell@greenbone.net> Add HTTP GET escalator. * src/manage.c (escalator_method_t): Add ESCALATOR_METHOD_HTTP_GET. * src/manage.c (escalator_method_name, escalator_method_from_name): Add HTTP GET escalator. * src/manage_sql.c (http_get): New function. (escalate_1): Add ESCALATOR_METHOD_HTTP_GET case. 2010-09-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/HTML/HTML.xsl (wrap): Replace with line-tokenizing version which calls wrap-line. (wrap-line): New template. Copy of old `wrap' template. (report): Select ports from port summary instead of from results. * src/report_formats/LaTeX/latex.xsl (text-to-escaped-row): Use str:tokenize to split string into lines. * src/report_formats/TXT/TXT.xsl (wrap): Replace with line-tokenizing version which calls wrap-line. (wrap-line): New template. Copy of old `wrap' template from HTML format. (report): Select ports from port summary instead of from results. 2010-09-08 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * CMakeLists.txt: Added check for subversion directory if build type is not release to avoid an incomplete version number. 2010-09-07 Matthew Mundell <matthew.mundell@greenbone.net> Add SLAVE to OMP CREATE_TASK. * src/omp.c (create_task_data_t, create_task_data_reset) (client_state_t): Add slave elements. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add CREATE_TASK SLAVE handling. (buffer_overrides_xml): Export for upcoming slave running patch. 2010-09-07 Matthew Mundell <matthew.mundell@greenbone.net> Add database migration from version 26 to 27. * src/manage_sql.c (migrate_26_to_27): New function. (database_migrators): Add migrate_26_to_27. 2010-09-07 Matthew Mundell <matthew.mundell@greenbone.net> Add slave support to management interface. Hence increase database version to 27. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 27. * src/manage_sql.c (create_tables): Add slave_progress to table reports. Add slave to table tasks. (init_manage): Init slave column in predefined task. (task_slave, set_task_slave, report_slave_progress) (set_report_slave_progress): New functions. (make_task): Init slave column. (target_in_use): Add slave check. * src/manage.h, src/manage_sql.h: Add headers accordingly. 2010-09-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_lsc_credential): Add semicolon to SQL for consistency. 2010-09-07 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * report_formats/simple_pie_chart/, report_formats/simple_pie_chart/pieplot.xsl, report_formats/simple_pie_chart/create_report_import, report_formats/simple_pie_chart/generate: New. A simple report format that produces a pie chart using pychart. 2010-09-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Format comments like rest of file. 2010-09-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (compare_ports_desc, compare_ports_asc): Remove. (compare_message_types_desc, compare_message_types_asc): New functions. Based on compare_ports_desc and compare_ports_asc. (print_report_xml): Get the results for the port summary sorted in the way the caller requested the main results. This ensures that the correct results are considered if a subset of the results are requested using first_result or max_results. As a result add duplicate removal to the threat and ROWID sorting case. 2010-09-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_result_iterator): Add sorting by ROWID. 2010-09-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Align closing brace properly. 2010-09-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (event_description): Add task name arg. Update callers. * src/manage.h: Update headers accordingly. * src/manage_sql.c (SIMPLE_NOTICE_FORMAT): New define. (escalate_1): Flesh out the message body. 2010-09-02 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * report_formats/simple_topo_plot/hostvisdot-summary.xsl: Acticated Ports to be displayed, applied rounded boxes for scanned hosts and ports. Non-arrow between hosts and ports. Applied label everywhere even if identical with node name. * doc/report-format-HOWTO: Added "./" for easier c&p. 2010-09-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.h (set_task_target): Correct arg type. 2010-08-31 Matthew Mundell <matthew.mundell@greenbone.net> * README: Note SIGHUP. * doc/openvasmd.8.xml: Add SIGNALS section. * doc/openvasmd.8, doc/openvasmd.html: Update from source. 2010-08-31 Matthew Mundell <matthew.mundell@greenbone.net> * doc/openvasmd.8.xml: Replace tabs with spaces. 2010-08-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (fork_update_nvt_cache): Call the rebuild version of update_or_rebuild_nvt_cache. 2010-08-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (update_or_rebuild_nvt_cache): Correct doc typo. 2010-08-31 Matthew Mundell <matthew.mundell@greenbone.net> Update the memory NVT cache on receiving SIGHUP. * src/manage_sql.c (update_nvt_cache, manage_update_nvti_cache): New functions. (init_manage): Setup nvti cache flag. Move nvti cache update into update_nvt_cache and call update_nvt_cache. (set_nvts_md5sum): Queue nvti cache update. * src/manage_sql.h: Add header accordingly. * src/manage.c (manage_schedule): Update NVT cache if requested. 2010-08-31 Matthew Mundell <matthew.mundell@greenbone.net> Update the database NVT cache on receiving SIGHUP. * src/openvasmd.c (scanner_port, scanner_address_string): New variables. From main. (sighup_update_nvt_cache): New variable. (handle_sighup_update): New function. (update_or_rebuild_nvt_cache): Add flag for registering atexit handler. Update caller. (fork_update_nvt_cache): New function. (serve_and_schedule): Call fork_update_nvt_cache if flag set. (main): Use update version of SIGHUP handler. 2010-08-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (update_or_rebuild_nvt_cache): Indent comments properly. 2010-08-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (main_loop): Remove. (serve_and_schedule): New function. Rename from main_loop for clarity. Make the @brief doc brief. Move `if' comments about true case inside `if'. Mark stranded location like others. (main): Space comment like others. Mark stranded location like others. 2010-08-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/create_signatures: Only create a signature if the associated directory exists. 2010-08-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_report_format_iterator): Add trust_time. (report_format_iterator_trust_time): New function. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): Add trust time to report format. Skip sending trust when exporting. 2010-08-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (sign, generate_report_format_signature): Remove. (init_manage): Verify the predefined report formats instead of signing them. 2010-08-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (find_signature): Clarify argument allocation. (create_report_format): Free format_signature. 2010-08-26 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP command VERIFY_REPORT_FORMAT. * src/manage_sql.c (verify_report_format): New function. * src/manage.h: Add header accordingly. * src/omp.c (help_text): Add new command. (verify_report_format_data_t): New type. (verify_report_format_data_reset): New function. (command_data_t, client_state_t): Add new command elements. (verify_report_format_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add VERIFY_REPORT_FORMAT handling. 2010-08-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (backup_file_name): New function. (get_report_format_files): Leave out backup files. 2010-08-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/XML/generate: Flush trailing whitespace. 2010-08-26 Matthew Mundell <matthew.mundell@greenbone.net> * doc/report-format-HOWTO, report_formats/simple_bar_chart/create_report_import, report_formats/simple_topo_plot/create_report_import, report_formats/sourcefire/create_report_import: Note file ordering requirement. * src/manage.c (get_report_format_files): Order files alphabetically. * src/report_formats/create_signatures: Quote variable to preserve newlines. Add trailing newline to content, as in Manager. 2010-08-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage): Add trust_time to SQL for last commit. 2010-08-25 Matthew Mundell <matthew.mundell@greenbone.net> Add report format signature verification timestamps. Hence increase database version to 26. Add database migration from version 25 to 26. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 26. * src/manage_sql.c (create_tables): Add signature verification time to table report_formats. (migrate_25_to_26): New function. (database_migrators): Add migrate_25_to_26. (init_manage): Init predefined format verification times. (create_report_format): Set verification time. 2010-08-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (run_task): Terminate array in fail case. 2010-08-24 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * report_formats/sourcefire/sourcefire.xsl (bid_recurse, bids): Removed work-around for parsing BID from description. (result): Direct use of new element "nvt/bid". 2010-08-24 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * report_formats/sourcefire/sourcefire.xsl (collapse_to_sourcefire_cve_id, cves): Removed work-around for parsing CVE from description. (result): Direct use of new element "nvt/cve". 2010-08-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage): Include CVE and BID in NVT cache. (result_iterator_nvt_cve, result_iterator_nvt_bid): New functions. * src/manage.h: Update headers accordingly. * src/omp.c (buffer_results_xml): Add CVE and BID to RESULT. 2010-08-24 Michael Wiegand <michael.wiegand@greenbone.net> * report_formats/simple_topo_plot/hostvisdot-summary.xsl: Improved visualisation for routes without intermediate hosts. 2010-08-24 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * report_formats/sourcefire/, report_formats/sourcefire/create_report_import, report_formats/sourcefire/generate, report_formats/sourcefire/sourcefire.xsl: New. A report format that create Sourcefire Host Input. Most work done by Felix Wolfsteller. 2010-08-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_set_config_preference): Return 2 if value is empty with a radio and -1 if any radio option is empty. * src/omp.c (omp_xml_handle_end_element): In CLIENT_MODIFY_CONFIG add new manage_set_config_preference return case. 2010-08-23 Matthew Mundell <matthew.mundell@greenbone.net> Add database migration from version 24 to 25, to rectify any radio NVT preference value errors caused by missing chunking handling in the GSA. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 25. * src/manage_sql.c (migrate_24_to_25): New function. (database_migrators): Add migrate_24_to_25. 2010-08-23 Matthew Mundell <matthew.mundell@greenbone.net> * doc/report-format-HOWTO: Improve steps slightly. 2010-08-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/report_formats/create_signatures: New file. 2010-08-20 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_LSC_CREDENTIAL added more explanation to error text. 2010-08-19 Matthew Mundell <matthew.mundell@greenbone.net> * report_formats/README: Reorder sections. Rewrite the "Developing a new..." section in terms of the example report formats. 2010-08-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_lsc_credential): Limit name to alphanums. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_LSC_CREDENTIAL remove chars from error response. 2010-08-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (email): Pipe sendmail output to /dev/null instead of to temp file. 2010-08-19 Matthew Mundell <matthew.mundell@greenbone.net> Add database migration from version 23 to 24, to convert task owner values to NULL as they may be 0 due to the 8 to 9 migrator. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 24. * src/manage_sql.c (migrate_23_to_24): New function. (database_migrators): Add migrate_23_to_24. 2010-08-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORTS pipe generator error output to /dev/null instead of a temp file. * src/report_formats/PDF/generate: Pipe pdflatex output to /dev/null instead of temp file. 2010-08-19 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/tests/CMakeLists.txt: Removed a couple of to-be-obsolete tests, re-added report_format tests. 2010-08-19 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * README: Added description of other invocation of tests. * src/tests/CMakeLists.txt: Added new tests regarding lsc credentials installer packages. * src/tests/lsc_user_0.c: New, base for tests. 2010-08-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (migrate_1_to_2): Use generic iterator. (migrate_5_to_6): Define out update_all_config_caches call, as this now conflicts with the version 6 database. 2010-08-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (sign, find_signature): Doc missing args. 2010-08-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (migrate_21_to_22): Ensure that report_formats exists. 2010-08-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_lsc_credential): Allow - in login. * src/omp.c (omp_xml_handle_end_element): Add - to message in CLIENT_CREATE_LSC_CREDENTIAL. 2010-08-17 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (report_format_params, report_formats): New tables. * doc/db.png: Update from SQL. 2010-08-17 Matthew Mundell <matthew.mundell@greenbone.net> * doc/Doxyfile.in, doc/Doxyfile_full.in: Add doc to EXAMPLE_PATH, so that manual page is found. 2010-08-17 Matthew Mundell <matthew.mundell@greenbone.net> * doc/Doxyfile.in, doc/Doxyfile_full.in: Turn off "RECURSIVE", to stop the subdir README files from overriding the root README. 2010-08-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage): Ensure every part of the predefined NVT selector exists, instead of just checking if there is at least one part. 2010-08-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (sign): Return "" on error instead of -1. (init_manage): Set predefined report format trust to "unknown" instead of failing, on signature error. 2010-08-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (nvt_selector_remove): Add parens to SQL to get precedence right. 2010-08-12 Matthew Mundell <matthew.mundell@greenbone.net> * ChangeLog: Add entry for last commit. 2010-08-12 Matthew Mundell <matthew.mundell@greenbone.net> * report_formats/readme.txt: Remove. Rename to README to match .. naming. * report_formats/README: New file. 2010-08-12 Matthew Mundell <matthew.mundell@greenbone.net> * report_formats/readme.txt: Correct typos. Fill paragraphs properly. 2010-08-12 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * report_formats/simple_topo_plot/create_report_import, report_formats/simple_bar_chart/create_report_import: remove temporary uuid file. * report_formats/readme.txt: New. Some words on how to create a import file. 2010-08-12 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/report_formats/TXT/TXT.xsl: In text report, list details for each issue. * src/tests/report_formats/expected_output/report_base.txt: Updated. * src/tests/report_formats/CMakeLists.txt, src/tests/report_formats/expected_output/report_base.html: Added simple test for html report format. 2010-08-12 Matthew Mundell <matthew.mundell@greenbone.net> * report_formats/simple_topo_plot/create_report_import, report_formats/simple_bar_chart/create_report_import: Include signature. 2010-08-11 Matthew Mundell <matthew.mundell@greenbone.net> Add report format signatures. Hence increase database version to 23. Add database migration from version 22 to 23. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 23. * src/manage_sql.c (sign, generate_report_format_signature): New functions. (create_tables): Add signature and trust columns to table report_formats. (migrate_22_to_23): New function. (database_migrators): Add migrate_21_to_22. (init_manage): Init signature and trust of predefined formats. (find_signature): Add a location arg. Update caller. (create_report_format): Add a signature arg. Verify the signature or a signature in the feed. (init_report_format_iterator): Add signature and trust. (report_format_iterator_signature, report_format_iterator_trust): New functions. * src/manage.h: Update headers accordingly. * src/omp.c (create_report_format_data_t): Add signature. (client_state_t): Add signature and trust. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add handling of CREATE_REPORT_FORMAT REPORT_FORMAT SIGNATURE and TRUST. Add trust and signature to GET_REPORT_FORMATS response. 2010-08-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.h: Update header. Missing part of 2010-08-10 CREATE_REPORT_FORMAT commit. 2010-08-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_REPORT_FORMAT add missing word to error message. 2010-08-10 Matthew Mundell <matthew.mundell@greenbone.net> In CREATE_REPORT_FORMAT use the given UUID. * src/manage_sql.c (create_report_format): Require UUID as arg instead of generating it. * src/omp.c (is_uuid): New function. (create_report_format_data_t, create_report_format_data_reset): Add ID field. (omp_xml_handle_start_element): Parse CREATE_REPORT_FORMAT REPORT_FORMAT ID. (omp_xml_handle_end_element): In CLIENT_CREATE_REPORT_FORMAT pass ID to create_report_format. 2010-08-10 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * report_formats/simple_topo_plot/, report_formats/simple_topo_plot/hostvisdot-summary.xsl, report_formats/simple_topo_plot/create_report_import, report_formats/simple_topo_plot/generate: New. A report format demonstrating a simple network topology plot via dot. The report format was developed by Michael Wiegand. 2010-08-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_report_format): Remove premature free. 2010-08-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (where_levels): Remove trailing paren as false positive is now the final case. 2010-08-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (migrate_21_to_22): If the new dir already exists then simply remove the old dir. 2010-08-10 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/tests/report_formats/CMakeLists.txt: Donate unique name to test. * src/tests/report_formats/test_report_format: Do not use tee to keep meaningful exit code, cat instead. Admit bashism. 2010-08-09 Matthew Mundell <matthew.mundell@greenbone.net> Use the UUIDs of report formats for the names of the directories on disk. Reference report formats in GET_REPORTS by UUID instead of name. Hence increase database version to 22. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 22. * src/CMakeLists.txt: Install report formats to UUID directories. * src/manage_sql.c (migrate_21_to_22): New function. (database_migrators): Add migrate_21_to_22. (init_manage): Use predefined UUIDs for the predefined report formats. (create_report_format, delete_report_format): Use UUID for report format dir instead of name. * src/manage.c (get_report_format_files): Add dir name to error message. (init_report_format_file_iterator): Use UUID for report format dir instead of name. * src/omp.c (get_reports_data_t, get_preferences_data_reset) (omp_xml_handle_start_element): Rename format to format_id. (omp_xml_handle_end_element): In CLIENT_GET_REPORTS expect report format as UUID instead of name, and respond with ID instead of name. 2010-08-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_task_iterator): Include example task when a task ID is given. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORTS check chdir return to quiet compiler. 2010-08-09 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * report_formats/, report_formats/simple_bar_chart/, report_formats/simple_bar_chart/plot.xsl, report_formats/simple_bar_chart/plot.plt, report_formats/simple_bar_chart/generate, report_formats/simple_bar_chart/create_report_import: New. A report format demonstrating a simple plot with gnuplot. The report format was developed by Matthew Mundell. Running create_report_import will create a xml file that can be imported as report format. The creation process for this xml file is coarse and need a more generic approach. 2010-08-09 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * doc/openvasmd.8.xml: Fixed typo. * doc/openvasmd.html, doc/openvasmd.8: Updated. 2010-08-09 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * doc/openvasmd.html, doc/openvasmd.8: Updated. 2010-08-08 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * doc/openvasmd.8.xml: Fixed typo and improved general description. 2010-08-07 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/CMakeLists.txt: Install TXT report. * src/manage_sql.c (init_manage): Adding default meta data for "TXT" report format. 2010-08-07 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/report_formats/LaTeX/, src/report_formats/LaTeX/generate: New. * src/report_formats/LaTeX/latex.xsl: New. Moved from PDF directory. * src/report_formats/PDF/latex.xsl: Moved away to LaTeX directory. * src/CMakeLists.txt: Install LaTeX report. Adapt file for PDF installation. * src/manage_sql.c (init_manage): Adding default meta data for "LaTeX" report format. 2010-08-06 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/report_formats/TXT, src/report_formats/TXT/generate, src/report_formats/TXT/TXT.xsl: Added first part of text report generator. 2010-08-06 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/report_formats/NBE/NBE.xsl: Fixed to conform old nbe format. 2010-08-06 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/report_formats/HTML/generate, src/report_formats/CPE/generate, src/report_formats/NBE/generate, src/report_formats/PDF/generate: Remove trailing whitespace, fixed typo. 2010-08-06 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Added test for upcoming text report format. * src/tests/report_formats/CMakeLists.txt: Declare new test. * src/tests/report_formats/expected_output/report_base.txt: New file. 2010-08-06 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Add simple setup to check report format outputs against expected output. Added testing suite consisting of a single, simple test. * src/tests/CMakeLists.txt: Add report_formats testing subdirectory. * src/tests/report_formats, src/tests/report_formats/CMakeLists.txt, src/tests/report_formats/expected_output, src/tests/report_formats/generated_output, src/tests/report_formats/input, src/tests/report_formats/README, src/tests/report_formats/test_report_format: New, test infrastructure. * src/tests/report_formats/input/report_base.xml, src/tests/report_formats/expected_output/report_base.nbe: New, data for test. 2010-08-05 Matthew Mundell <matthew.mundell@greenbone.net> * doc/report-format-HOWTO: Convert tabs to spaces. 2010-08-05 Matthew Mundell <matthew.mundell@greenbone.net> * doc/report-format-HOWTO: New file. 2010-08-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (nvt_preference_iterator_config_value): Add ordering by type to SQL in case a broken GSA filled the database with server preferences with the NVT preference name. 2010-08-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (nvt_preference_iterator_config_value): Remove type constraint from SQL, as the preference may also be a server pref. This reverts r8583. 2010-08-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Remove quotation marks from CLIENT_RESUME_OR_START_TASK error responses. 2010-08-05 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/CMakeLists.txt: Adding install targets for ITG. * src/manage_sql.c (init_manage): Adding default meta data for "ITG" report format. * src/report_formats/ITG/, src/report_formats/ITG/ITG.xsl, src/report_formats/ITG/generate: Report generator for ITG by Matthew Mundell. 2010-08-04 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/CMakeLists.txt: Adding install targets for CPE. * src/manage_sql.c (init_manage): Adding default meta data for "CPE" report format. * src/report_formats/CPE/, src/report_formats/CPE/generate, src/report_formats/CPE/CPE.xsl: Report generator for CPE by Matthew Mundell. 2010-08-04 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/CMakeLists.txt: Adding install targets for PDF. * src/manage_sql.c (init_manage): Adding default meta data for "PDF" report format. * src/report_formats/PDF/, src/report_formats/PDF/latex.xsl, src/report_formats/PDF/generate: Report generator for PDF by Felix Wolfsteller. 2010-08-04 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/CMakeLists.txt: Replace tabs by spaces and thus fix indenting. 2010-08-04 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/report_formats/HTML/HTML.xsl: Removed URLs into gsa service. These do not make sense for a report export. 2010-08-04 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/CMakeLists.txt: Adding install targets for HTML and NBE. 2010-08-04 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/manage_sql.c (init_manage): Adding default meta data for "HTML" report format. * src/report_formats/HTML/, src/report_formats/HTML/HTML.xsl, src/report_formats/HTML/generate: Report generator for HTML by Matthew Mundell. 2010-08-04 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/manage_sql.c (init_manage): Adding default meta data for "NBE" report format. * src/report_formats/NBE/, src/report_formats/NBE/NBE.xsl, src/report_formats/NBE/generate: New. Report generator for NBE by Matthew Mundell. 2010-08-04 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/report_formats/XML/generate: Fixed/improved description and added Author section. 2010-07-29 Matthew Mundell <matthew.mundell@greenbone.net> Make the report framework use loadable report formats. Remove all previous report formats. Add new predefined loadable report format XML. As a result add new OMP commands CREATE_REPORT_FORMAT, DELETE_REPORT_FORMAT and GET_REPORT_FORMATS. * src/CMakeLists.txt: Remove old report XSL installs. Add XML report XSL install. * src/manage.c (get_report_format_files, init_report_format_file_iterator) (cleanup_file_iterator, next_file, file_iterator_name) (file_iterator_content_64): New functions. * src/manage_sql.c (user_owns): New function. (create_tables): Add tables report_formats and report_format_params. (init_manage): Ensure predefined report format XML exists. (find_report_format, lookup_report_format, create_report_format) (delete_report_format, report_format_uuid, report_format_name) (report_format_global) (init_report_format_iterator, report_format_iterator_report_format) (report_format_iterator_uuid, report_format_iterator_name) (report_format_iterator_extension, report_format_iterator_content_type) (report_format_iterator_summary) (report_format_iterator_description, report_format_iterator_global) (init_report_format_param_iterator, report_format_param_iterator_name) (report_format_param_iterator_value): New functions. Interface to report formats. * src/manage.h: Add headers accordingly. (report_format_t, file_iterator_t): New types. * src/omp.c (file_utils_rmdir_rf): Export for manage_sql.c. (help_text): Add report format commands. (create_report_format_data_t, delete_report_format_data_t) (get_report_formats_data_t): New report format types. (create_report_format_data_reset, delete_report_format_data_reset) (get_report_formats_data_reset): New report format functions. (command_data_t): Add report format fields. (create_report_format_data, delete_report_format_data) (get_report_formats_data): New report format variables. (client_state_t): Add states for report format commands. (omp_xml_handle_start_element): Add report format commands handling. (PRINT): New macro. Helper for print_report_xml. (print_report_xml): Switch to fuller XML format previously sent for "xml" format. (next_break, latex_print_verbatim_text, latex_escape_text) (latex_severity_heading, latex_severity_colour, latex_header) (latex_footer, print_report_notes_latex, print_report_overrides_latex) (print_report_latex): Remove. Replaced by Felix's XSL. (omp_xml_handle_end_element): Add report format commands handling. In particular in CLIENT_GET_REPORTS remove previous static report generation cases and add a single generic generator. (omp_xml_handle_text): Add report format commands handling. * src/ITG.xsl, src/CPE.xsl, src/openvasmd_report_html.xsl: Remove. * src/report_formats/, src/report_formats/XML/, src/report_formats/XML/generate: New dir and files. Report generator for XML report format. 2010-07-29 Michael Wiegand <michael.wiegand@greenbone.net> Post branch version bump. * CMakeLists.txt: Updated version number. 2010-07-29 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * CMakeLists.txt: Updated version number. 2010-07-29 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 1.0.0 release. * CHANGES: Updated. * CMakeLists.txt: Updated version number. 2010-07-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (nvt_preference_iterator_config_value): Add type constraint to SQL in case a broken GSA filled the database with server preferences with the NVT preference name. 2010-07-21 Matthew Mundell <matthew.mundell@greenbone.net> * TODO: Remove entry about FIXes in code. * README: Neaten About section. In particular, use either the module name like "openvas-cli" or the proper name "OpenVAS CLI", instead of mixing the two, like in "OpenVAS-CLI". 2010-07-24 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * README: Slightly extended general description of module. 2010-07-24 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * INSTALL: Fixed min. version of openvas-libraries. 2010-07-22 Michael Wiegand <michael.wiegand@greenbone.net> * CMakeLists.txt: Fixed openvas-libraries version detection. 2010-07-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (nvt_selector_plugin): Remove extra semicolon. * src/manage_sql.c (create_agent): Free installer and signature on error. * src/omp.c (print_report_latex): Note memory leak. * src/splint.h (uuid_error, uuid_create, uuid_export): Remove. From previous UUID library. 2010-07-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (report_count, report_counts_id): Add host limiter arg. Update callers. * src/manage.h: Update header accordingly. * src/omp.c (print_report_latex, omp_xml_handle_end_element): Pass host to report_counts_id. 2010-07-21 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage_sql.h: Formatted using indent. * src/lsc_user.c (get_rpm_generator_path), src/omp.c (buffer_results_xml): Tiny improvements of doc. * src/tests/CMakeLists.txt: Lowercased commands. 2010-07-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c: Convert all FIX comments to @todo's. (stop_task, pause_task, resume_paused_task, resume_stopped_task) (manage_check_current_task): Remove FIXes about credential checks, because the argument is a task_t so the credentials will have been checked already. * src/omp.c: Convert all FIX comments to @todo's. (omp_xml_handle_start_element): Remove FIX about checking for a reauthentication, as this would just complicate things. * src/ompd.c: Convert all FIX comments to @todo's. (serve_omp): Remove FIX about time as argument is always NULL. * src/manage.h, src/manage_sql.c, src/omp.h, src/ompd.h, src/openvasmd.c, src/otp.c, src/otp.h, src/ovas-mngr-comm.c, src/oxpd.c, src/splint.h, src/tests/read_protocol_0.c, src/tests/timeout_0.c: Convert all FIX comments to @todo's. 2010-07-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/oxpd.c: Remove FIX about making offset variables pointers, as they are fully entrenched as integers now. 2010-07-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (OPENVASMD_VERSION, OPENVAS_OS_NAME): Set to -1. (serve_client, accept_and_maybe_fork, fork_connection_for_schedular) (main): Remove FIXes about getting the previous socket flags value, as the sockets are all used locally. 2010-07-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (restore_db): Remove. (manage_migrate): Remove outline for backing up database around migration, as the SQL transactions have the same effect. 2010-07-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage_process): Remove FIXes on aborts, as they're consistent with the rest of the function. * src/omp.c (send_nvt): Remove FIX about old spec. (print_report_latex): Correct ordering comment. * src/otp.c (parse_scanner_server, process_otp_scanner_input): Make abort legitimate behaviour for out of memory failures. 2010-07-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (make_task): Abort on memory failure. (append_to_task_comment, append_to_task_name) (add_task_description_line): Remove returns. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_start_element): Remove old assertion. Remove return checks for make_task and add_task_description_line. 2010-07-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c: Format @todo like others. 2010-07-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c, src/ompd.c, src/openvasmd.c, src/ovas-mngr-comm.c: Convert "\todo"s to "@todo"s. Remove \todo about performance. 2010-07-19 Michael Meyer <michael.meyer@greenbone.net> * src/tests/new_task_small_rc, src/tests/new_task_small__many_plugins_yes_rc, src/tests/new_task_medium_rc, src/tests/new_task_small__missing_targets_rc: Removed references to nonexistent OIDs. Changed OID 10180 to 100315. 2010-07-19 Matthew Mundell <matthew.mundell@greenbone.net> * TODO: Update. 2010-07-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (make_task): Quote name and comment for SQL. Add quotation marks around name in SQL. 2010-07-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/lsc_user.c, src/manage_sql.c, src/omp.c, src/otp.c, src/otpd.c, src/oxpd.c: Convert "TODO"s to "@todo"s. Remove TODO about efficiency. 2010-07-16 Stephan Kleine * src/manage_sql.c (escalate_1): Fix some "format not a string literal and no format arguments" error. 2010-07-16 Michael Wiegand <michael.wiegand@greenbone.net> * CMakeLists.txt: Replace check for PREPARE_RELEASE with check for CMAKE_BUILD_TYPE == "Release". 2010-07-16 Michael Wiegand <michael.wiegand@greenbone.net> Post-release version bump. * CMakeLists.txt: Updated version number. 2010-07-16 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 1.0.0.rc1 release. * CHANGES: Updated. * CMakeLists.txt: Updated version number. 2010-07-15 Matthew Mundell <matthew.mundell@greenbone.net> * doc/openvasmd.8, doc/openvasmd.html: Update from source. 2010-07-15 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (agents, nvts): Add new columns. (escalators, targets, configs, lsc_credentials): Add UUID column. (overrides): New table. * doc/db.png: Update from SQL. 2010-07-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c, src/omp.c, src/ompd.c, src/openvasmd.c, src/otp.c: Bring static docs up to date. 2010-07-15 Matthew Mundell <matthew.mundell@greenbone.net> * doc/Doxyfile.in, doc/Doxyfile_full.in: Add expansion of DEF_ACCESS macro. Replace tasks_sql.h with manage_sql.c. * src/manage_sql.c: Bring docs up to date. 2010-07-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (create_note_data_t, create_note_data_reset): Remove note_id. (create_override_data_t, create_override_data_reset): Remove override_id. (modify_note_data_t, modify_note_data_reset, modify_override_data_t) (modify_override_data_reset): Implement directly, instead of shadowing create counterparts. 2010-07-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.h, src/openvasmd.c, src/omp.c: Bring docs up to date. * src/manage_sql.c: Add @file doc. 2010-07-15 Matthew Mundell <matthew.mundell@greenbone.net> Try flush the to_client buffer when it fills up during OMP processing. * src/omp.c (omp_parser_t): New type. (omp_parser_new, omp_parser_free): New functions. (send_to_client): Add write_to_client callback and data args. If the buffer is too full for the message, try write the buffer to the client. Update all callers. (send_element_error_to_client, send_find_error_to_client): Add passthrough args for send_to_client. Update all callers. (omp_xml_handle_start_element, omp_xml_handle_end_element): Expect write_to_client callback and data arg in user_data arg via an omp_parser. (send_requirement, send_dependency): Expect write_to_client callback and data arg in data arg. Update callers. (send_nvt, send_reports): Add write_to_client callback and data arg args. Update callers. (init_omp_process): Add write_to_client callback and data arg args. Set omp_parser as callback user data. (process_omp_client_input): Add note about return. * src/omp.h: Update header accordingly. * src/ompd.c (init_ompd_process, serve_omp): Pass client writer and data to init_omp_process. Extend complications comment. 2010-07-14 Matthew Mundell <matthew.mundell@greenbone.net> Reduce GET_VERSION to single fixed version. Enable GET_VERSION before authentication. * src/omp.c (client_state_t): Add CLIENT_GET_VERSION_AUTHENTIC. (omp_xml_handle_start_element): Add GET_VERSION check to CLIENT_TOP. Improve first command error message. Close a single COMMANDS if in one or more COMMANDS when the first command error occurs. Use new special state for GET_VERSION after authenticate. (omp_xml_handle_end_element): Reduce GET_VERSION response. Check which state to use after GET_VERSION. 2010-07-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd_report_html.xsl (report): Leave sorting to Manager. 2010-07-13 Matthew Mundell <matthew.mundell@greenbone.net> Make GET_SYSTEM_REPORTS more like other commands. * src/manage.c (get_system_report_types): Add required_type and start arguments, to limit to a single type. (init_system_report_type_iterator): Add type argument. * src/manage.h: Add header accordingly. * src/omp.c (get_system_report_data_t): Add brief. (omp_xml_handle_start_element): Parse GET_SYSTEM_REPORTS brief attrib. (omp_xml_handle_end_element): In CLIENT_GET_SYSTEM_REPORTS return all reports if name is NULL and skip the report images if brief is true. 2010-07-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_agent_iterator): Add installer_filename to columns. Adjust accessors accordingly. (agent_iterator_installer_filename): New function. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_AGENTS add FILENAME to PACKAGE for installer. 2010-07-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (find_signature): Change extension to "asc". * INSTALL: Correct xsltproc name. 2010-07-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/CMakeLists.txt: Add OPENVAS_LIB_INSTALL_DIR define to definitions. * src/manage_sql.c (find_signature): New function. (create_agent): Check feed signature if the given signature is empty. 2010-07-09 Matthew Mundell <matthew.mundell@greenbone.net> Move installer_filename addition from database version 20 to new version 21. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 21. * src/manage_sql.c (migrate_19_to_20): Remove addition of installer_filename column. (migrate_20_to_21): New function. (database_migrators): Add migrate_20_to_21. 2010-07-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (task_threat_level, task_previous_threat_level): Take overrides into account, so that condition_met and hence escalation also do. 2010-07-07 Matthew Mundell <matthew.mundell@greenbone.net> Extend agents with installer filenames. Bundle this change into the 19 to 20 migrator. * src/manage_sql.c (create_tables): Add installer_filename to table agents. (migrate_19_to_20): Add installer_filename column. (create_agent): Add installer_filename arg. Store filename in db. * src/manage.h: Update header accordingly. * src/omp.c (create_agent_data_t, create_agent_data_reset) (client_state_t): Add CREATE_AGENT INSTALLER/FILENAME element. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add CREATE_AGENT INSTALLER/FILENAME handling. 2010-07-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (main): Set GNUPGHOME. 2010-07-07 Michael Wiegand <michael.wiegand@greenbone.net> * CMakeLists.txt: Make cmake environment more flexible as discussed on openvas-devel: Set CMAKE_BUILD_TYPE only to "Debug" if it is not already set. Do not set CMAKE_VERBOSE_MAKEFILE, let it default to OFF. Remove redundant flags from CMAKE_C_FLAGS_DEBUG. 2010-07-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_agent): Init sizes. Use known installer size. 2010-07-06 Matthew Mundell <matthew.mundell@greenbone.net> Add database migration from version 19 to 20. * src/manage_sql.c (migrate_19_to_20): New function. (database_migrators): Add migrate_19_to_20. 2010-07-06 Matthew Mundell <matthew.mundell@greenbone.net> Extend agents with signatures. Hence increase database version to 20. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 20. * src/manage_sql.c (TRUST_ERROR, TRUST_YES, TRUST_NO, TRUST_UNKNOWN): New defines. (create_tables): Add installer_64, installer_signature_64 and installer_trust to table agents. (verify_signature): New function. (create_agent): Add installer_signature_64 arg. Rename installer arg to installer_64. Verify the signature if given. Store the result of the verification and store the plain version of the installer alongside the base64 version. (init_agent_iterator): Use new base64 installer column, add installer trust column. Adjust accessors accordingly. (agent_iterator_trust): New function. * src/manage.h: Update headers accordingly. * src/omp.c (create_agent_data_t, create_agent_data_reset) (client_state_t): Add CREATE_AGENT INSTALLER/SIGNATURE element. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add CREATE_AGENT INSTALLER/SIGNATURE handling and add INSTALLER/TRUST to the GET_AGENTS brief response. 2010-07-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (buffer_overrides_xml): Add THREAT to terse case. 2010-07-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (backup_db): Make arg const. (manage_backup_db): Make arg const. Add fallback database name. (manage_migrate): Temporarily turn off backup and restore. * src/manage.h: Update header accordingly. 2010-07-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (escalator_method_name, escalator_method_from_name): Add syslog method. * src/manage.h (escalator_method_t): Add syslog method. * src/manage_sql.c (escalate_1): Add syslog method case. * src/openvasmd_log_conf.cmake_in (event syslog, event snmp): New groups. 2010-07-02 Matthew Mundell <matthew.mundell@greenbone.net> Add a --backup option. * src/manage_sql.c (backup_db): Add args and implementation. Make static. (manage_backup_db): New function. (manage_migrate): Turn off backup temporarily. * src/manage.h: Add header accordingly. * src/openvasmd.c (main): Add --backup option with calls manage_backup_db. 2010-07-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd_report_html.xsl (report): Add False Positive column. 2010-07-02 Matthew Mundell <matthew.mundell@greenbone.net> Add false positive "threat" for overrides. * src/manage.c (threat_message_type, message_type_threat): Add False Positive. * src/manage_sql.c (collate_threat, task_threat_level) (where_levels, task_previous_threat_level): Add False Positive. (init_result_iterator, report_counts, report_counts_id): Add false positive arg. Update callers. (create_override): Check new_threat too. * src/manage.h: Update headers accordingly. * src/omp.c (result_type_threat): Add False Positive. (send_reports, omp_xml_handle_end_element): Send FALSE_POSITIVE in REPORT/RESULT_COUNT. 2010-06-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_NVTS, CLIENT_GET_REPORTS and CLIENT_GET_TASKS cleanup iterator in fail cases. 2010-06-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (create_target_data_t, create_target_data_reset) (client_state_t): Rename target locator elements with target locator prefix. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Adjust handlers for renaming. Change GET_TARGET_LOCATORS/TARGET_LOCATOR/@name to an entity. 2010-06-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (create_note_data_t, create_note_data_reset) (create_override_data_t, create_override_data_reset): Rename task to task_id. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Expect CREATE_NOTE, CREATE_OVERRIDE, MODIFY_NOTE, MODIFY_OVERRIDE TASK ID in attribute instead of text, to match other CREATE and MODIFY commands. 2010-06-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (create_note_data_t, create_note_data_reset) (create_override_data_t, create_override_data_reset): Rename nvt to nvt_oid, result to result_id. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Expect CREATE_NOTE, CREATE_OVERRIDE, MODIFY_NOTE, MODIFY_OVERRIDE NVT and RESULT ids in attribute instead of text, to match other CREATE and MODIFY commands. 2010-06-30 Michael Wiegand <michael.wiegand@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Add event logging to protocol events. 2010-06-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c: Neaten internal doc slightly. 2010-06-29 Matthew Mundell <matthew.mundell@greenbone.net> Move NVT and TASK in GET_NOTES and GET_OVERRIDES to attributes nvt_oid and task_id, to match other GET commands. * src/omp.c (client_state_t): Remove NVT and TASK elements. (omp_xml_handle_start_element): Add nvt_oid and task_id parsing. Remove NVT and TASK handling. (omp_xml_handle_end_element): Remove NVT and TASK handling. 2010-06-29 Matthew Mundell <matthew.mundell@greenbone.net> Rename "oid" attributes to "nvt_oid". * src/omp.c (get_dependencies_data_t, get_dependencies_data_reset) (get_nvts_data_t, get_nvts_data_reset, get_preferences_data_t) (get_preferences_data_reset): Rename oid to nvt_oid. Update caller. (omp_xml_handle_start_element): Rename oid to nvt_oid in GET_DEPENDENCIES, GET_NVTS an GET_PREFERENCES. 2010-06-29 Michael Wiegand <michael.wiegand@greenbone.net> * src/manage_sql.c (set_task_run_status): Add event logging to run status changes. 2010-06-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_DELETE_LSC_CREDENTIAL and CLIENT_DELETE_TARGET correct command name in structure and message. 2010-06-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (help_text, client_state_t, omp_xml_handle_start_element) (omp_xml_handle_end_element): Comment out GET_CERTIFICATES. 2010-06-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (get_targets_data_t): Add tasks. (client_state_t): Move TARGET_LOCATORS into order. (omp_xml_handle_start_element): Parse GET_TARGETS/@tasks. (omp_xml_handle_end_element): Make GET_TARGETS TASKS depend on "tasks" attrib, and only include the enclosing element if the attrib is present. 2010-06-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_system_report): Use 86400 if duration is NULL. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_SYSTEM_REPORTS add a name check and use 86400 if duration is missing. 2010-06-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_result_iterator): Add all results case. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_RESULTS remove the single result restriction. In CLIENT_GET_LSC_CREDENTIALS add NULL checks to the format cases. 2010-06-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (send_reports): Leave TIMESTAMP alone. It's the report creation time, whereas SCAN_START is the start time sent by the Scanner. 2010-06-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (client_state_t, omp_xml_handle_start_element) (omp_xml_handle_end_element): Rename CLIENT_VERSION to CLIENT_GET_VERSION. 2010-06-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (send_reports): Rename MESSAGES to RESULT_COUNT. (omp_xml_handle_end_element): In CLIENT_GET_REPORTS rename SCAN_RESULT_COUNT to RESULT_COUNT, move threat counts into that entity, and rename MESSAGES to RESULT_COUNT. 2010-06-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TASKS correct TASK/CONFIG uuid and name, which were swapped. 2010-06-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORTS always exit on internal error within the loop. 2010-06-26 Matthew Mundell <matthew.mundell@greenbone.net> Remove GET_RULES. * src/omp.c (help_text, client_state_t): Remove GET_RULES element. (omp_xml_handle_start_element, omp_xml_handle_end_element): Remove GET_RULES handling. 2010-06-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_report_iterator): Add report arg. (report_iterator_uuid): New function. * src/manage.h: Update headers accordingly. * src/manage.c (delete_reports): Update init_report_iterator call. * src/omp.c (internal_error_send_to_client): New function. (send_reports): Update init_report_iterator call. (omp_xml_handle_end_element): In CLIENT_GET_REPORTS add the case that responds with all reports. 2010-06-25 Michael Wiegand <michael.wiegand@greenbone.net> * src/manage_sql.c (escalate_1): Added event logging to escalator execution. 2010-06-24 Matthew Mundell <matthew.mundell@greenbone.net> Rename GET_REPORT to GET_REPORTS. * src/omp.c (help_text, client_state_t, command_data_t): Rename GET_REPORT element. (get_report_data_t, get_report_data_reset, get_report_data): Remove. (get_reports_data_t, get_reports_data_reset, get_reports_data): New. Renamed from "get_report" counterparts. (omp_xml_handle_start_element, send_reports, print_report_xml) (print_report_latex, omp_xml_handle_end_element): Rename GET_REPORTS. 2010-06-24 Matthew Mundell <matthew.mundell@greenbone.net> Add oid attribute to GET_DEPENDENCIES. * src/omp.c (get_dependencies_data_t): New type. (get_dependencies_data_reset): New function. (command_data_t): Add get_dependencies. (get_dependencies_data): New variable. (omp_xml_handle_start_element): Parse GET_DEPENDENCIES oid attrib. (omp_xml_handle_end_element): In CLIENT_GET_DEPENDENCIES add single NVT case. 2010-06-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (send_requirement): Replace NEED with NVT. (send_dependency): Replace DEPENDENCY/NEEDER with NVT/REQUIRES and move the requirement into the REQUIRES. 2010-06-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (send_nvt): Leave closing tag to caller. (omp_xml_handle_end_element): In CLIENT_GET_NVTS send prefs inside NVT. 2010-06-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_nvt_iterator): Improve family arg doc. Add assertion. * src/omp.c (get_nvts_data_t): Add new flag attribs. (omp_xml_handle_start_element): Parse new flags attribs. (omp_xml_handle_end_element): In CLIENT_GET_NVTS integrate the single NVT case into the multiple NVTs case, using new details flags. 2010-06-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_NVTS integrate the brief case into the details case. 2010-06-23 Matthew Mundell <matthew.mundell@greenbone.net> Rename GET_NVT_DETAILS to GET_NVTS. * src/omp.c (help_text, client_state_t, command_data_t): Rename GET_NVT_DETAILS element. (get_nvt_details_data_t, get_nvt_details_data_reset) (get_nvt_details_data): Remove. (get_nvts_data_t, get_nvts_data_reset, get_nvts_data): New. Renamed from "nvt_details" counterparts. (omp_xml_handle_start_element, omp_xml_handle_end_element): Rename GET_NVT_DETAILS. 2010-06-23 Matthew Mundell <matthew.mundell@greenbone.net> Merge GET_NVT_ALL into GET_NVT_DETAILS. * src/omp.c (help_text): Remove GET_NVT_ALL. Improve GET_NVT_DETAILS. (get_nvt_details_data_t): Add details. (client_state_t): Remove GET_NVT_ALL state. (omp_xml_handle_start_element, omp_xml_handle_end_element): Move GET_NVT_ALL handling into GET_NVT_DETAILS. 2010-06-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_MODIFY_TASK improve FILE name error message. 2010-06-23 Matthew Mundell <matthew.mundell@greenbone.net> Replace MODIFY_REPORT PARAMETER element with COMMENT, to better match other modifier commands. * src/omp.c (modify_task_data_t, modify_task_data_reset): Remove parameter_id and parameter_value. Add comment. (client_state_t): Remove PARAMETER state. Add COMMENT state. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Remove PARAMETER handling. Add COMMENT handling. * src/manage_sql.c (set_report_parameter): Make value param const. * src/manage.h: Update header accordingly. 2010-06-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_task_update_file): Remove extra doc param. 2010-06-22 Matthew Mundell <matthew.mundell@greenbone.net> Remove redundant MODIFY_TASK PARAMETER element. * src/omp.c (modify_task_data_t, modify_task_data_reset): Remove parameter and value. (client_state_t): Remove PARAMETER state. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Remove PARAMETER handling. 2010-06-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (client_state_t, omp_xml_handle_start_element) (omp_xml_handle_end_element, omp_xml_handle_text): Include AUTHENTICATE in CREDENTIALS state name. 2010-06-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (help_text, command_data_t): Move STOP_TASK entry into alphabetical order. (stop_task_data_t, stop_task_data_reset, stop_task_data): Move into alphabetical order. (client_state_t): Move CLIENT_STOP_TASK into alphabetical order. (omp_xml_handle_start_element, omp_xml_handle_end_element): Move STOP_TASK cases into alphabetical order. 2010-06-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (manage_schedule): Call omp_stop_task instead of omp_abort_task. 2010-06-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (create_agent_data_reset): Correct name in doc. 2010-06-22 Matthew Mundell <matthew.mundell@greenbone.net> Rename OMP ABORT_TASK to STOP_TASK. * src/omp.c (help_text): Rename STOP_TASK. (abort_task_data_t, abort_task_data_reset, abort_task_data): Remove. (stop_task_data_t, stop_task_data_reset, stop_task_data): New. Renamed with "stop" instead of "abort". (command_data_t): Replace abort_task with stop_task. (client_state_t): Replace CLIENT_ABORT_TASK with CLIENT_STOP_TASK. (omp_xml_handle_start_element, omp_xml_handle_end_element): Rename for STOP_TASK. 2010-06-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_lsc_credential): Add '_' to chars allowed in login name. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_LSC_CREDENTIAL correct login char error message. 2010-06-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (task_trend): Add override flag. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TASKS pass apply_overrides to task_trend. 2010-06-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (report_scan_result_count): Add override flag. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORT pass apply_override to report_scan_result_count. 2010-06-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TASKS send APPLY_OVERRIDE alongside SORT in response. 2010-06-19 Matthew Mundell <matthew.mundell@greenbone.net> Add an apply_override attribute to GET_TASKS. * src/omp.c (get_tasks_data_t): Add apply_overrides. (omp_xml_handle_start_element): Parse apply_overrides for GET_TASKS. (send_reports): Add apply_overrides arg. (omp_xml_handle_end_element): In CLIENT_GET_TASKS apply overrides according to apply_overrrides. 2010-06-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (get_report_data_t, get_results_data_t): Add apply_overrides. (omp_xml_handle_start_element): Parse apply_overrides for GET_REPORT and GET_RESULTS. (print_report_xml, print_report_latex, omp_xml_handle_end_element): Apply overrides according to "apply_overrides" instead of "overrides". 2010-06-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (help_text, get_tasks_data_t, get_tasks_data_reset) (get_tasks_data): Move into alphabetical order. (command_data_t): Move get_tasks into alphabetical order. (client_state_t): Move CLIENT_GET_TASKS into alphabetical order. (omp_xml_handle_start_element, omp_xml_handle_end_element): Move GET_TASKS cases into alphabetical order. 2010-06-18 Matthew Mundell <matthew.mundell@greenbone.net> Rename GET_STATUS to GET_TASKS. * src/omp.c (help_text): Rename GET_STATUS. (get_status_data_t, get_status_data_reset, get_status_data): Remove. (get_tasks_data_t, get_tasks_data_reset, get_tasks_data): New. Renamed with "tasks" instead of "status". (command_data_t): Replace get_status with get_tasks. (client_state_t): Replace CLIENT_GET_STATUS with CLIENT_GET_TASKS. (omp_xml_handle_start_element, omp_xml_handle_end_element): Rename for GET_TASKS. 2010-06-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_task_iterator): Add UUID to SQL. (task_iterator_uuid): New function. Adjust other accessors accordingly. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_STATUS add the single task case to the all tasks loop, allowing the all tasks case to respect the details attribute. 2010-06-17 Matthew Mundell <matthew.mundell@greenbone.net> Add a details attribute to GET_STATUS. * src/omp.c (get_status_data_t): Add details field. (omp_xml_handle_start_element): Parse details attribute for GET_STATUS. (omp_xml_handle_end_element): In CLIENT_GET_STATUS for the single task case, only send the detailed format if the details attrib was present, otherwise send the summary format as with the all tasks case. 2010-06-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_task_iterator): Add task arg. Update caller. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_STATUS update init_task_iterator call. 2010-06-17 Matthew Mundell <matthew.mundell@greenbone.net> Replace task_iterator_t with the generic iterator_t. * src/manage_sql.c (migrate_8_to_9): Replace task iteration with single statement. (init_task_iterator): Expect an iterator_t. (cleanup_task_iterator, next_task): Remove. (task_iterator_task, task_iterator_run_status): New functions. (init_manage): Use new task iterator and accessors. * src/manage.h: Update headers accordingly. (task_iterator_t): Remove. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_STATUS use new task iterator. 2010-06-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (print_tasks): Remove. Out of use. 2010-06-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_STATUS leave the empty string case for find_task to find, as in the other GET commands. 2010-06-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (CONFIG_UUID_FULL_AND_VERY_DEEP_ULTIMATE): Indent. 2010-06-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_TASK include ID in response as attribute instead of as entity. 2010-06-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_TARGET include ID in response. 2010-06-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_override): Add override return arg. (override_uuid): New function. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_OVERRIDE and CLIENT_CREATE_SCHEDULE include ID in response. 2010-06-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_note): Add note return arg. (note_uuid): New function. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_NOTE include ID in response. 2010-06-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (XML_OK_CREATED_ID): Drop create prefix. (omp_xml_handle_end_element): In CLIENT_CREATE_AGENT add create prefix. 2010-06-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_lsc_credential): Add credential return arg. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_LSC_CREDENTIAL include ID in response. 2010-06-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_escalator): Add escalator return param. (escalator_uuid): New function. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_ESCALATOR include ID in response. 2010-06-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_config): Create uuid param with config param. (config_uuid): New function. (create_config_rc): Rename uuid to selector_uuid. Add UUID to INSERT. (copy_config): Add config return param. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_CONFIG include ID in response. 2010-06-17 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * doc/openvasmd.8.xml: Updated link. 2010-06-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_result_iterator, report_count): Sort override selection, giving the override constraints a precedence ordering. 2010-06-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_result_iterator, report_count): Also check task constraint when selecting override. 2010-06-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd_report_html.xsl (result [issue]): Skip CVSS if overridden. 2010-06-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (latex_severity_header): Drop prefix. Add Log check. (print_report_latex): Add override to result heading. 2010-06-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd_report_html.xsl (override): New template. (result [issue]): Add override to result heading. Add override boxes. 2010-06-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (print_report_latex): Note override state in report. 2010-06-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (latex_header): Add override colour. (print_report_overrides_latex): Add threat to override heading. 2010-06-16 Matthew Mundell <matthew.mundell@greenbone.net> Add threat overrides. * src/manage_sql.c (create_tables): Add table overrides. (where_levels_type): New function. (init_result_iterator): Add override flag. (result_iterator_original_type): New function. Adjust other accessors accordingly. (report_scan_result_count): Use where_levels_type. (REPORT_COUNT): Remove. Replace with report_count. (report_count): New function. Counts reports with override. (report_counts, report_counts_id): Add override flag. Adjust callers. (find_override, create_override, delete_override, modify_override) (init_override_iterator, override_iterator_uuid, override_iterator_nvt_oid) (override_iterator_creation_time, override_iterator_modification_time) (override_iterator_text, override_iterator_hosts, override_iterator_port) (override_iterator_threat, override_iterator_new_threat) (override_iterator_task, override_iterator_result) (override_iterator_nvt_name): New functions. (OVERRIDE_COLUMNS): New define. * src/manage.h: Update headers accordingly. (override_t): New type. * src/omp.c (buffer_results_xml): Add override args. (help_text): Add overrides commands. (create_override_data_t, delete_override_data_t, get_overrides_data_t) (modify_override_data_t): New type. (create_override_data_reset, delete_override_data_reset) (get_overrides_data_reset, modify_override_data_reset): New functions. (get_report_data_t, get_results_data_t): Add overrides fields. (command_data_t): Add create_override, delete_override and get_overrides. (create_override_data, delete_override_data, get_overrides_data) (modify_override_data): New variable. (client_state_t): Add override command states. (omp_xml_handle_end_element, omp_xml_handle_start_element) (omp_xml_handle_text): Add override command handling. Add override flags to GET_REPORT and GET_RESULTS. (buffer_overrides_xml): New function. (buffer_results_xml): Add overrides flags. 2010-06-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_agent): Add agent return. (agent_uuid): New function. * src/manage.h: Update headers accordingly. * src/omp.c (XML_OK_CREATED_ID): New define. (omp_xml_handle_end_element): Add id attribute to CREATE_AGENT response. 2010-06-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (task_infos_size): Correct severity name in SQL. 2010-06-10 Matthew Mundell <matthew.mundell@greenbone.net> Add database migration from version 18 to 19. This covers UUID modifications made since 2010-06-02. * src/manage_sql.c (migrate_18_to_19): New function. (database_migrators): Add migrate_18_to_19. 2010-06-10 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/omp.c (omp_xml_handle_end_element) [CLIENT_START_TASK]: Improved response when attribute is missing. 2010-06-10 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/lsc_user.c: Lowercased todos. * src/manage_sql.c, src/omp.c: Improved documentation. 2010-06-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (CONFIG_UUID_FULL_AND_FAST) (CONFIG_UUID_FULL_AND_FAST_ULTIMATE, CONFIG_UUID_FULL_AND_VERY_DEEP) (CONFIG_UUID_FULL_AND_VERY_DEEP_ULTIMATE, CONFIG_UUID_EMPTY) (TARGET_UUID_LOCALHOST): New defines. (init_manage): Add UUIDs to predefined configs and target. 2010-06-10 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/CMakeLists.txt: Lowercased commands. 2010-06-10 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage_sql.c (sql_insert): Fixed after parameter renaming. 2010-06-10 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Updated documentation. * doc/Doxyfile.in: Updated file list. * src/manage.c (resume_paused_task, send_file, send_config_rules): Added missing parameter documentation. * src/manage_sql.c, src/ompd.c, src/openvasmd.c: Updated documentation. 2010-06-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_TASK free description if the initial check fails and cleanup properly in the escalator and schedule fail cases. 2010-06-10 Matthew Mundell <matthew.mundell@greenbone.net> Add config UUIDs. * src/manage_sql.c (user_owns): Remove. Everything uses user_owns_uuid. (create_tables): Add column uuid to configs. (task_config_uuid): New function. (find_config): Convert name arg to UUID. (create_config): Add uuid return arg. Init UUID column. (copy_config): Init UUID column. (CONFIG_ITERATOR_FIELDS): Add UUID. (config_iterator_uuid): New function. Adjust other accessors accordingly. * src/manage.h: Update headers accordingly. * src/omp.c (create_task_data_t, create_task_data_reset): Replace config with config_id. (delete_config_data_t, delete_config_data_reset) (get_configs_data_t, get_configs_data_reset) (modify_config_data_t, modify_config_data_reset): Replace name with config_id. (get_nvt_details_data_t, get_nvt_details_data_reset) (get_preferences_data_t, get_preferences_data_reset): Rename config to config_id. (client_state_t): Remove config name states. (omp_xml_handle_start_element): Replace config and name attributes with config_id for commands that take a config. Remove CLIENT_DELETE_CONFIG and CLIENT_MODIFY_CONFIG NAME processing. (omp_xml_handle_end_element): In CLIENT_GET_PREFERENCES, CLIENT_GET_NVT_DETAILS, CLIENT_DELETE_CONFIG, CLIENT_MODIFY_CONFIG, CLIENT_CREATE_TASK and CLIENT_GET_CONFIGS expect UUID instead of name. In CLIENT_CREATE_CONFIG, CLIENT_GET_STATUS and CLIENT_GET_CONFIGS add UUID attribute to CONFIG. Remove CLIENT_MODIFY_CONFIG NAME processing. (omp_xml_handle_text): Remove config name and text processing. 2010-06-09 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/omp.c: Updated documentation. (omp_xml_handle_start_element): Fixed some alignment issues. 2010-06-09 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/omp.c (append_attribute): New function, extracted from omp_xml_handle_start_element. (omp_xml_handle_start_element): Call new function. 2010-06-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (client_state_t): Remove old name states. (omp_xml_handle_start_element): Remove old name element processing. 2010-06-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (create_task_data_t, create_task_data_reset): Replace schedule with schedule_id. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Get schedule ID from attribute instead of text, as in other elements. 2010-06-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_result_iterator): Collate hosts with collate_ip. 2010-06-09 Matthew Mundell <matthew.mundell@greenbone.net> Add target UUIDs. * src/manage_sql.c (create_tables): Add column uuid to targets. (find_target): Convert name arg to UUID. (create_target): Init UUID column. (init_target_iterator, init_lsc_credential_target_iterator): Add UUID. (target_iterator_uuid, lsc_credential_target_iterator_uuid): New function. Adjust other accessors accordingly. (target_uuid): New function. * src/manage.h: Add headers accordingly. * src/omp.c (create_task_data_t, create_task_data_reset): Replace target with target_id. (delete_target_data_t, delete_target_data_reset) (get_targets_data_t, get_targets_data_reset): Replace name with target_id. (client_state_t): Remove CLIENT_DELETE_TARGET_NAME. (omp_xml_handle_start_element): Read target ID attributes for DELETE_TARGET, GET_TARGETS and CREATE_TASK/TARGET. Remove CLIENT_DELETE_TARGET NAME processing. (omp_xml_handle_end_element): In CLIENT_DELETE_TARGET, CLIENT_CREATE_TASK and CLIENT_GET_TARGETS expect UUID instead of name. In CLIENT_GET_TARGETS, CLIENT_GET_LSC_CREDENTIALS and CLIENT_GET_STATUS add UUID attribute to TARGET. (omp_xml_handle_text): Remove target name processing. 2010-06-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (send_config_preferences): Free uuid and value on fail. 2010-06-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (send_config_preferences): Send empty value if file pref is empty. 2010-06-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (collate_ip): Limit the last scanned number of each IP to the digits in the string, as there may be more digits directly after it in memory. 2010-06-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Neaten name of credentials in messages. 2010-06-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_TARGET add missing breaks. 2010-06-07 Matthew Mundell <matthew.mundell@greenbone.net> Add LSC credential UUIDs. * src/manage_sql.c (create_tables): Add column uuid to lsc_credentials. (find_lsc_credential): Convert name arg to UUID. (create_lsc_credential): Init UUID column. (init_lsc_credential_iterator): Add UUID. (lsc_credential_iterator_uuid): New function. Adjust other accessors accordingly. (lsc_credential_uuid): New function. * src/manage.h: Add headers accordingly. * src/omp.c (create_target_data_t, create_target_data_reset): Replace lsc_credential with lsc_credential_id. (delete_lsc_credential_data_t, delete_lsc_credential_data_reset) (get_lsc_credentials_data_t, get_lsc_credentials_data_reset): Replace name with lsc_credential_id. (omp_xml_handle_start_element): Read LSC credential ID attributes for DELETE_LSC_CREDENTIAL and GET_LSC_CREDENTIALS. (omp_xml_handle_end_element): In CLIENT_DELETE_LSC_CREDENTIAL, CLIENT_CREATE_TARGET and CLIENT_GET_LSC_CREDENTIALS expect UUID instead of name. In CLIENT_GET_LSC_CREDENTIALS and CLIENT_GET_TARGETS add UUID to LSC_CREDENTIAL. (omp_xml_handle_text): Remove LSC credential name processing. 2010-06-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_text): Indent case labels properly. 2010-06-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_TARGET cleanup switch formatting. 2010-06-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_target): Correct spelling of "parameters". * src/omp.c: Space out all the reset functions in the same way. (omp_xml_handle_end_element): In CLIENT_GET_TARGET_LOCATORS bring line width within range. In CLIENT_CREATE_TARGET remove extra parens. 2010-06-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (task_second_last_report): Get the second row of the query. (task_trend): Remove accessors for total message counts which were overwriting the report counts. (task_debugs_size, task_holes_size, task_infos_size, task_logs_size) (task_warnings_size): Correct doc. 2010-06-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (condition_met): In the THREAT_LEVEL_CHANGED case also return 1 if there is a threat level and the previous threat level in one. (task_threat_level, task_previous_threat_level): Add NULL checks. 2010-06-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_MODIFY_TASK accept "0" instead of "" to remove the escalator. 2010-06-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_MODIFY_TASK remove the `fail' declarations so that the existing variable is set. 2010-06-06 Matthew Mundell <matthew.mundell@greenbone.net> Add escalator UUIDs. * src/manage_sql.c (create_tables): Add column uuid to escalators. (find_escalator): Convert name arg to UUID. (create_escalator): Init UUID column. (init_escalator_iterator): Add UUID. (escalator_iterator_uuid): New function. Adjust other accessors accordingly. (task_escalator_uuid): New function. * src/manage.h: Add headers accordingly. * src/omp.c (create_task_data_t, create_task_data_reset): Replace escalator with escalator_id. (delete_escalator_data_t, delete_escalator_data_reset) (get_escalators_data_t, get_escalators_data_reset) (test_escalator_data_t, test_escalator_data_reset): Replace name with escalator_id. (omp_xml_handle_start_element): Read escalator ID attributes for DELETE_ESCALATOR, GET_ESCALATORS, TEST_ESCALATOR and CREATE_TASK. (omp_xml_handle_end_element): In CLIENT_DELETE_ESCALATOR, CLIENT_CREATE_TASK, CLIENT_TEST_ESCALATOR, CLIENT_GET_STATUS and CLIENT_GET_ESCALATORS expect UUID instead of name. In CLIENT_GET_ESCALATORS add UUID to ESCALATOR. (omp_xml_handle_text): Remove escalator name processing. 2010-06-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (print_report_latex): Only print NVT name row if there is an NVT name. 2010-06-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (print_report_latex): Escape NVT name. 2010-06-04 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage.h (create_target): Removed names from arguments. 2010-06-04 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Renamed GET_SOURCE to GET_TARGET_LOCATORS. * src/manage_sql.c (create_target): Renamed source to target_locator. * src/omp.c (help_text, create_target_data_t) (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_end_element, omp_xml_handle_text): Renamed source to target_locator. * src/tests/omp_help_0.c: Adjusted to help text. 2010-06-04 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage_sql.c (create_target): When fetching targets from external source, separate them with a comma and a space, to easy breaking long string in display. 2010-06-04 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Mainly formatting changes, pointed out by Matthew Mundell. * src/omp.c (create_target_data_t): Remove newline, sort fields alphabetically. (omp_xml_handle_end_element): Corrected formatting according to style guide, improved wording. Collapsed else- switch code block. * src/manage_sql.c: Corrected wording in comments. 2010-06-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_AGENTS rename AGENT agent_id attrib to id, to match other resources. 2010-06-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (print_report_xml, omp_xml_handle_end_element): Print empty string instead of NULL, when report host end time is NULL. 2010-06-03 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/tests/omp_help_0.c (help_text): Adjusted to current help text. 2010-06-03 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage.c (slist_free): Added todo, as we have a duplicate in openvas-libraries. * src/omp.c (omp_xml_handle_end_element): Use utility function to free list of pointers. 2010-06-03 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Added optional SOURCE, PASSWORD and USERNAME elements to CREATE_TARGET command. This allows to fetch targets from an external source via the CREATE_TARGET command. * src/omp.c (client_state_t): Added new states. (create_target_data_t): Added new fields. (create_target_data_reset): Free new fields. (omp_xml_handle_start_element): Added state transitions. (omp_xml_handle_end_element): Added state transitions, check for malconditions in create_target command handling, updated calls to create_target. (omp_xml_handle_text): Fill new elements. * src/manage_sql.c (create_target): Added parameters needed to query external source to import targets from. * src/manage.h (create_target): Updated proto. 2010-06-03 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Added new GET_SOURCES command that returns a list of external sources from which targets can be imported, if any are configured. * src/omp.c: Include new resource_request module. (help_text): Added new command. (client_state_t): Added new state. (omp_xml_handle_start_element): Added state transition, handle contained elements as error. (omp_xml_handle_end_element): Respond with list of (target-) sources. * CMakeLists.txt: Increased minimum required openvas-libraries version. 2010-06-03 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/omp.c: Add documentation (modified copy of documentation in openvas-administrator/src/oap.c). 2010-06-02 Matthew Mundell <matthew.mundell@greenbone.net> Add agent UUIDs. Hence increase database version to 19. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 19. * src/manage_sql.c (create_tables): Add column uuid to agents. (find_agent): Convert name arg to UUID. (create_agent): Init UUID column. (init_agent_iterator): Add UUID. (agent_iterator_uuid): New function. Adjust other accessors accordingly. * src/manage.h: Add header accordingly. * src/omp.c (delete_agent_data_t, delete_agent_data_reset) (get_agents_data_t, get_agents_data_reset): Rename name to agent_id. (client_state_t): Remove agent name state. (omp_xml_handle_start_element): Get agent ids from attrib for DELETE_AGENT and GET_AGENTS. Remove DELETE_AGENT NAME element. (omp_xml_handle_end_element): In CLIENT_DELETE_AGENT and CLIENT_GET_AGENTS expect UUID instead of name. In CLIENT_GET_AGENTS add UUID to AGENT. (omp_xml_handle_text): Remove agent name processing. 2010-06-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_AGENTS rename var. 2010-06-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (current_array_1, current_array_2, current_array_3) (current_int_1, current_int_2, current_int_3, current_int_4) (current_client_task): Remove. Globals from old callback data mechanism. (omp_xml_handle_end_element): Remove assertion about current_client_task. (omp_xml_handle_text): Remove doc reference to current_client_task. 2010-06-02 Matthew Mundell <matthew.mundell@greenbone.net> Switch GET_STATUS to the new callback data mechanism. * src/omp.c (get_status_data_t): New type. (get_status_data_reset): New function. (command_data_t): Add get_status. (get_status_data): New variable. (current_uuid, current_format): Remove. (omp_xml_handle_start_element, omp_xml_handle_end_element): Make GET_STATUS cases use command_data. 2010-06-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (current_name): Remove. Out of use. (omp_xml_handle_start_element): In CLIENT_AUTHENTIC in the GET_REPORT case, expect the sort field in the command data instead of in current_name. 2010-06-02 Matthew Mundell <matthew.mundell@greenbone.net> Remove TEST_ESCALATOR element NAME, which has been replaced by a "name" attribute. * src/omp.c (modify_task_name): Remove. Out of use. (client_state_t): Remove name state. (omp_xml_handle_start_element): Remove name test. (omp_xml_handle_end_element, omp_xml_handle_text): Remove name cases. 2010-06-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Remove stray free from CLIENT_DELETE_SCHEDULE. 2010-06-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TARGETS and CLIENT_GET_ESCALATORS pass the sort order from the data instead of current_int_2 to the task iterator. 2010-06-02 Matthew Mundell <matthew.mundell@greenbone.net> Switch GET_TARGETS to the new callback data mechanism. * src/omp.c (get_targets_data_t): New type. (get_targets_data_reset): New function. (command_data_t): Add get_targets. (get_targets_data): New variable. (modify_task_value): Remove. (omp_xml_handle_start_element, omp_xml_handle_end_element): Make GET_TARGETS cases use command_data. 2010-06-02 Matthew Mundell <matthew.mundell@greenbone.net> Switch GET_NVT_FAMILIES to the new callback data mechanism. * src/omp.c (get_nvt_families_data_t): New type. (get_nvt_families_data_reset): New function. (command_data_t): Add get_nvt_families. (get_nvt_families_data): New variable. (modify_task_value): Remove. (omp_xml_handle_start_element, omp_xml_handle_end_element): Make GET_NVT_FAMILIES cases use command_data. 2010-06-02 Matthew Mundell <matthew.mundell@greenbone.net> Switch GET_NVT_DETAILS to the new callback data mechanism. * src/omp.c (get_nvt_details_data_t): New type. (get_nvt_details_data_reset): New function. (command_data_t): Add get_nvt_details. (get_nvt_details_data): New variable. (modify_task_value): Remove. (omp_xml_handle_start_element, omp_xml_handle_end_element): Make GET_NVT_DETAILS cases use command_data. 2010-06-02 Matthew Mundell <matthew.mundell@greenbone.net> Switch GET_NVT_FEED_CHECKSUM to the new callback data mechanism. * src/omp.c (get_nvt_feed_checksum_data_t): New type. (get_nvt_feed_checksum_data_reset): New function. (command_data_t): Add get_nvt_feed_checksum. (get_nvt_feed_checksum_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Make GET_NVT_FEED_CHECKSUM cases use command_data. 2010-06-02 Matthew Mundell <matthew.mundell@greenbone.net> Switch GET_LSC_CREDENTIALS to the new callback data mechanism. * src/omp.c (get_lsc_credentials_data_t): New type. (get_lsc_credentials_data_reset): New function. (command_data_t): Add get_lsc_credentials. (get_lsc_credentials_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Make GET_LSC_CREDENTIALS cases use command_data. 2010-06-02 Matthew Mundell <matthew.mundell@greenbone.net> Switch GET_ESCALATORS to the new callback data mechanism. * src/omp.c (get_escalators_data_t): New type. (get_escalators_data_reset): New function. (command_data_t): Add get_escalators. (get_escalators_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Make GET_ESCALATORS cases use command_data. 2010-06-02 Matthew Mundell <matthew.mundell@greenbone.net> Switch GET_CONFIGS to the new callback data mechanism. * src/omp.c (get_configs_data_t): New type. (get_configs_data_reset): New function. (command_data_t): Add get_configs. (get_configs_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Make GET_CONFIGS cases use command_data. 2010-06-01 Matthew Mundell <matthew.mundell@greenbone.net> Switch GET_AGENTS to the new callback data mechanism. * src/omp.c (get_agents_data_t): New type. (get_agents_data_reset): New function. (command_data_t): Add get_agents. (get_agents_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Make GET_AGENTS cases use command_data. 2010-06-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (print_report_xml, omp_xml_handle_end_element): Initialize result_hosts always, to quiet a compiler warning. 2010-05-28 Michael Wiegand <michael.wiegand@greenbone.net> Post-release version bump. * CMakeLists.txt: Updated version number. 2010-05-28 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 1.0.0-beta7 release. * CHANGES: Updated. 2010-05-27 Matthew Mundell <matthew.mundell@greenbone.net> Switch MODIFY_TASK to the new callback data mechanism. * src/omp.c (modify_task_data_t): Add fields for remaining values. (modify_task_data_reset): Free new fields. (modify_task_parameter, modify_task_comment, modify_task_file) (modify_task_rcfile): Remove. Out of use global vars. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Make MODIFY_TASK cases use command_data for all data. 2010-05-27 Matthew Mundell <matthew.mundell@greenbone.net> Switch MODIFY_CONFIG to the new callback data mechanism. * src/omp.c (modify_config_data_t): New type. (modify_config_data_reset): New function. (command_data_t): Add modify_config. (modify_config_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Make MODIFY_CONFIG cases use command_data. 2010-05-26 Matthew Mundell <matthew.mundell@greenbone.net> Switch MODIFY_REPORT to the new callback data mechanism. * src/omp.c (modify_report_data_t): New type. (modify_report_data_reset): New function. (command_data_t): Add modify_report. (modify_report_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Make MODIFY_REPORT cases use command_data. 2010-05-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/CMakeLists.txt: Lowercase commands. 2010-05-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (fork_connection_for_schedular): Add certificates to openvas_server_new call. * src/ompd.c (CACERT, CLIENTCERT, CLIENTKEY): New defines. (recreate_session): Add certificates to openvas_server_new call. 2010-05-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c: Repair indentation put out in revision 7409. 2010-05-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (run_task): Only send the base64 part of the public key. 2010-05-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (run_task): If the credential has a public key, send the passphrase for the "SSH Authorization" NVT. Also send public and private keys as attached files. 2010-05-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (migrate_17_to_18_set_pref): New function. (migrate_17_to_18): Ensure "Mark unrechable Hosts as dead" is set to "yes" for "Ping Host" NVT in predefined configs. 2010-05-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (setup_full_config_prefs): Set "Mark unrechable Hosts as dead" to "yes" for "Ping Host" NVT. 2010-05-24 Matthew Mundell <matthew.mundell@greenbone.net> Increase database version to 18 to ensure "Ping Host" is in the "All" NVT selector. Add database migration from version 17 to 18. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 18. * src/manage_sql.c (migrate_17_to_18): New function. (database_migrators): Add migrate_17_to_18. 2010-05-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage): Add "Ping Host" portscanner to "All" NVT selector. 2010-05-21 Matthew Mundell <matthew.mundell@greenbone.net> Recover speed of report result iteration. * src/manage_sql.c (where_cvss_base): Get the cvss_base with an embedded SELECT. (init_result_iterator, report_scan_result_count): Remove "nvts" from the selected tables, as the WHERE clause now SELECTs on that table. 2010-05-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_complete_nvt_cache_update): Remove prefs from configs where the pref has vanished from the NVT. 2010-05-19 Matthew Mundell <matthew.mundell@greenbone.net> Respect OMP GET_REPORT min_cvss_base for XML based and NBE formats. * src/omp.c (print_report_xml, print_report_latex): Add min_cvss_base arg. Pass through to init_result_iterator. (omp_xml_handle_end_element): In CLIENT_GET_REPORT in the "nbe" and XML based cases, respect the min_cvss_base attribute. 2010-03-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd_report_html.xsl (issue): Add CVSS to header. 2010-05-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (print_report_latex): Add NVT name and CVSS to result headers. 2010-05-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (print_report_latex): Include result_hosts_only in details of report contents. 2010-05-19 Matthew Mundell <matthew.mundell@greenbone.net> Add CVSS constraint to OMP GET_REPORTS. * src/omp.c (get_report_data_t): Add min_cvss_base. (get_report_data_reset): Free min_cvss_base. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add min_cvss_base handle to the XML format of GET_REPORTS. * src/manage_sql.c (where_cvss_base): New function. (init_result_iterator, report_scan_result_count): Add min_cvss_base arg. * src/manage.h: Update headers accordingly. 2010-05-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORT in the "nbe" case, respect the OMP GET_REPORT result_hosts_only attribute. 2010-05-18 Matthew Mundell <matthew.mundell@greenbone.net> Respect the OMP GET_REPORT result_hosts_only attrib for XML based reports. * src/omp.c (array_add_new_string): Move up in file. (print_report_xml): Add result_hosts_only arg. (omp_xml_handle_end_element): In CLIENT_GET_REPORT pass result_hosts_only attrib to print_report_xml. 2010-05-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Repair more CLIENT_GET_REPORT formatting put out in revision 6521. 2010-05-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Repair CLIENT_GET_REPORT arg overhang formatting put out in revision 6521. 2010-05-18 Matthew Mundell <matthew.mundell@greenbone.net> Respect the OMP GET_REPORT result_hosts_only attrib for LaTeX reports. * src/omp.c (print_report_latex): Add result_hosts_only arg. (omp_xml_handle_end_element): In CLIENT_GET_REPORT pass result_hosts_only attrib to print_report_latex. * src/manage_sql.c (manage_report_host_has_results): New function. * src/manage.h: Add header accordingly. 2010-05-18 Matthew Mundell <matthew.mundell@greenbone.net> Add an attrib to OMP GET_REPORT to limit the host info to hosts that have results. * src/omp.c (get_report_data_t): Add result_hosts_only. (omp_xml_handle_start_element): Parse GET_REPORT result_hosts_only attrib. (array_add_new_string): New function. (omp_xml_handle_end_element): In CLIENT_GET_REPORT send host info according to result_hosts_only. * src/manage_sql.c (init_host_iterator): Add host constraint arg. Update all callers. * src/manage.h: Update header accordingly. * src/manage.c: Update init_host_iterator callers. 2010-05-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORT align SEND* args properly. 2010-05-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_TEST_ESCALATOR replace old current_uuid with command_data. 2010-05-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage): Add CVSS base and risk factor to nvti cache. (result_iterator_nvt_cvss_base, result_iterator_nvt_risk_factor): New functions. * src/manage.h: Add headers accordingly. * src/omp.c (buffer_results_xml): Add CVSS_BASE and RISK_FACTOR to RESULT/NVT. 2010-05-14 Matthew Mundell <matthew.mundell@greenbone.net> Switch CREATE_ESCALATOR to the new callback data mechanism. * src/omp.c (create_escalator_data_t): New type. (create_escalator_data_reset): New function. (command_data_t): Add create_escalator. (create_escalator_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Make CREATE_ESCALATOR cases use command_data. 2010-05-14 Matthew Mundell <matthew.mundell@greenbone.net> Switch CREATE_TASK to the new callback data mechanism. * src/omp.c (create_task_data_t): New type. (create_task_data_reset): New function. (command_data_t): Add create_task. (create_task_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Make CREATE_TASK cases use command_data. 2010-05-14 Matthew Mundell <matthew.mundell@greenbone.net> Switch CREATE_AGENT to the new callback data mechanism. * src/omp.c (create_agent_data_t): New type. (create_agent_data_reset): New function. (command_data_t): Add create_agent. (create_agent_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Make CREATE_AGENT cases use command_data. 2010-05-13 Matthew Mundell <matthew.mundell@greenbone.net> Switch CREATE_CONFIG to the new callback data mechanism. * src/omp.c (create_config_data_t): Add remaining elements. (create_config_data_reset): Free new elements. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Make CREATE_CONFIG cases use command_data. 2010-05-13 Matthew Mundell <matthew.mundell@greenbone.net> Switch CREATE_LSC_CREDENTIAL to the new callback data mechanism. * src/omp.c (create_lsc_credential_data_t): New type. (create_lsc_credential_data_reset): New function. (command_data_t): Add create_lsc_credential. (create_lsc_credential_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Make CREATE_LSC_CREDENTIAL cases use command_data. 2010-05-13 Matthew Mundell <matthew.mundell@greenbone.net> Switch TEST_ESCALATOR to the new callback data mechanism. * src/omp.c (test_escalator_data_t): New type. (test_escalator_data_reset): New function. (command_data_t): Add test_escalator. (test_escalator_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Make TEST_ESCALATOR cases use command_data. 2010-05-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (help_text): Sort lines. (omp_xml_handle_start_element): Sort comparisons in CLIENT_AUTHENTIC. 2010-05-13 Matthew Mundell <matthew.mundell@greenbone.net> Switch DELETE_REPORT and DELETE_TASK to the new callback data mechanism. * src/omp.c (delete_report_data_t, delete_task_data_t): New types. (delete_report_data_reset, delete_task_data_reset): New functions. (command_data_t): Add fields for delete commands. (delete_report_data, delete_task_data): New variables. (omp_xml_handle_start_element, omp_xml_handle_end_element): Make delete command cases use command_data. 2010-05-13 Matthew Mundell <matthew.mundell@greenbone.net> Switch DELETE_AGENT, DELETE_CONFIG, DELETE_ESCALATOR, DELETE_LSC_CREDENTIAL and DELETE_TARGET to the new callback data mechanism. * src/omp.c (delete_agent_data_t, delete_config_data_t) (delete_escalator_data_t, delete_lsc_credential_data_t) (delete_target_t): New types. (delete_agent_data_reset, delete_config_data_reset) (delete_escalator_data_reset, delete_lsc_credential_data_reset) (delete_target_data_reset): New functions. (command_data_t): Add fields for delete commands. (delete_agent_data, delete_config_data, delete_escalator_data) (delete_lsc_credential_data, delete_target_data): New variables. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Make delete command cases use command_data. 2010-05-13 Matthew Mundell <matthew.mundell@greenbone.net> Switch START_TASK to the new callback data mechanism. * src/omp.c (start_task_data_t): New type. (start_task_data_reset): New function. (command_data_t): Add start_task. (start_task_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Make START_TASK cases use command_data. 2010-05-13 Matthew Mundell <matthew.mundell@greenbone.net> Switch RESUME_STOPPED_TASK to the new callback data mechanism. * src/omp.c (resume_stopped_task_data_t): New type. (resume_stopped_task_data_reset): New function. (command_data_t): Add resume_stopped_task. (resume_stopped_task_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Make RESUME_STOPPED_TASK cases use command_data. 2010-05-13 Matthew Mundell <matthew.mundell@greenbone.net> Switch RESUME_PAUSED_TASK to the new callback data mechanism. * src/omp.c (resume_paused_task_data_t): New type. (resume_paused_task_data_reset): New function. (command_data_t): Add resume_paused_task. (resume_paused_task_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Make RESUME_PAUSED_TASK cases use command_data. 2010-05-13 Matthew Mundell <matthew.mundell@greenbone.net> Switch RESUME_OR_START_TASK to the new callback data mechanism. * src/omp.c (resume_or_start_task_data_t): New type. (resume_or_start_task_data_reset): New function. (command_data_t): Add resume_or_start_task. (resume_or_start_task_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Make RESUME_OR_START_TASK cases use command_data. 2010-05-13 Matthew Mundell <matthew.mundell@greenbone.net> Switch PAUSE_TASK to the new callback data mechanism. * src/omp.c (pause_task_data_t): New type. (pause_task_data_reset): New function. (command_data_t): Add pause_task. (pause_task_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Make PAUSE_TASK cases use command_data. 2010-05-13 Matthew Mundell <matthew.mundell@greenbone.net> Switch ABORT_TASK to the new callback data mechanism. * src/omp.c (abort_task_data_t): New type. (abort_task_data_reset): New function. (command_data_t): Add abort_task. (abort_task_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Make ABORT_TASK cases use command_data. 2010-05-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (task_current_report): Include reports with end times, as the report gets an end time when the task is stopped. 2010-05-13 Matthew Mundell <matthew.mundell@greenbone.net> Remove code for potential ABORT_TASK extension. * src/omp.c (client_state_t): Remove CLIENT_ABORT_TASK_CRITERION. (omp_xml_handle_start_element, omp_xml_handle_end_element): Remove ABORT_TASK CRITERION handling. 2010-05-13 Matthew Mundell <matthew.mundell@greenbone.net> Switch CREATE_TARGET to the new callback data mechanism. * src/omp.c (create_target_data_t): New type. (create_target_data_reset): New function. (command_data_t): Add create_target. (create_target_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Switch CREATE_TARGET cases to use command_data. 2010-05-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c: Sort command data types and functions alphabetically. 2010-05-13 Matthew Mundell <matthew.mundell@greenbone.net> Remove experimental command data type. * src/omp.c (name_command_data_t, name_command_data_reset): Remove. (command_data_t): Remove name_command. 2010-05-12 Matthew Mundell <matthew.mundell@greenbone.net> Add database migration from version 16 to 17. * src/manage_sql.c (migrate_16_to_17): New function. (database_migrators): Add migrate_16_to_17. * src/otp.c (parse_tags): Remove. To manage.c. * src/manage.c (parse_tags): New function. From otp.c. * src/manage.h: Add header accordingly. 2010-05-12 Matthew Mundell <matthew.mundell@greenbone.net> Add CVSS base and risk factor to NVTs. Hence increase database version to 17. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 17. * src/manage_sql.c (create_tables): Add cvss_base and risk_factor to nvts. (make_nvt_from_nvti): Set CVSS base and risk factor. (init_nvt_iterator, select_config_nvts): Add CVSS base and risk factor to selection. (nvt_iterator_cvss_base, nvt_iterator_risk_factor): New functions. * src/manage.h: Add headers accordingly. * src/omp.c (send_nvt): Add CVSS base and risk factor to detailed response. * src/otp.c (parse_tags): New function. (parse_scanner_plugin_list_tags): Separate out CVSS base and risk factor from other tags. 2010-05-12 Matthew Mundell <matthew.mundell@greenbone.net> Add open ports to report results. * src/manage_sql.c (append_task_open_port): Add host arg. Take port as string. Add port to results as log message. * src/manage.h: Update header accordingly. * src/otp.c (process_otp_scanner_input): Set current_host in SCANNER_PORT_HOST. Adjust SCANNER_PORT_NUMBER to updated append_task_open_port, freeing current_host. 2010-05-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (buffer_config_preference_xml): Neaten formatting. Free data. (omp_xml_handle_end_element): In CLIENT_GET_NVT_DETAILS and CLIENT_GET_CONFIGS, buffer preferences with buffer_config_preference_xml instead of doing the work directly. 2010-05-11 Matthew Mundell <matthew.mundell@greenbone.net> Extend OMP GET_PREFERENCES for getting subsets of all preferences and for getting the values of preferences on a particular config. * src/manage_sql.c (manage_nvt_name): New function. * src/manage.h: Add header accordingly. * src/omp.c (get_preferences_data_t): New type. (get_preferences_data_reset, buffer_config_preference_xml): New functions. (command_data_t): Add get_preferences. (get_preferences_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add "oid", "config" and "preference" attribs to GET_PREFERENCES. 2010-05-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (run_task): Correct var name in comment. 2010-05-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_nvt_preference_iterator): Remove stray semicolon from SQL. 2010-05-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.h: Neaten copyright date. (task_status_t): Improve doc. * src/openvasmd.c: Neaten copyright date. Flush trailing whitespace. (fork_connection_for_schedular): Move arg to separate line for clarity. (update_or_rebuild_nvt_cache): Align two lines properly. * src/manage.c (send_user_rules): Remove resolved todo. Reduce line length. Remove trivial todo. 2010-05-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage): Skip task consistency checks when in cache update mode. 2010-05-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (task_current_report): Correct SQL. 2010-05-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (task_current_report): New function. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_STATUS get the current report instead of the running report, so that the response includes progress info for stopped and paused tasks. 2010-05-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (create_lsc_credential): Bring line within 80 chars. 2010-05-07 Michael Wiegand <michael.wiegand@greenbone.net> * src/manage_sql.c (create_lsc_credential): Allow "." and "@" characters in LSC credentials. 2010-05-06 Matthew Mundell <matthew.mundell@greenbone.net> Add "threat level changed" escalator condition. * src/manage.h (escalator_condition_t): Add THREAT_LEVEL_CHANGED entry. * src/manage.c (escalator_condition_name) (escalator_condition_description, escalator_condition_from_name): Add THREAT_LEVEL_CHANGED cases. * src/manage_sql.c (task_previous_threat_level): New function. (condition_met): Add THREAT_LEVEL_CHANGED check. 2010-05-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (send_config_preferences): Add task files arg. Send the preference value instead of a UUID when there is a task file named by the preference value. (slist_free): New function. (run_task): Pass the task files to send_config_preferences. 2010-05-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (run_task): When sending preference files, if there's a task file with the same name as value of the preference file, then skip sending the preference value as a file. 2010-05-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (send_config_preferences): Add arg for collecting files to send to scanner. (send_file): New function. (run_task): Send files stored in config preferences to scanner. 2010-05-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c: Update free_array calls to array_free. 2010-05-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/CMakeLists.txt: Replace tasks_sql.h with manage_sql.c in tags files. 2010-05-04 Matthew Mundell <matthew.mundell@greenbone.net> * INSTALL: Add spaces after full stops. 2010-05-04 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Moved shared code between openvas-administrator and openvas-manager into openvas-libraries. * src/manage.c (make_array, free_array): Moved to openvas-libraries/base/array module. * src/manage.h: Removed typedef and protos, include array module from openvas-libraries/base . * src/omp.c (array_add, array_terminate, array_reset): Moved to array module in openvas-libraries/base . 2010-04-27 Michael Wiegand <michael.wiegand@greenbone.net> * INSTALL: Updated instructions for certificate generation, added a few headings and moved paragraphs to improve readability. 2010-04-27 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Use new openvas-libraries/base/credentials module, removed duplicate code. * src/manage.h (task_status_t): Include new header, removed protos. * src/manage.c (free_credentials, append_to_credentials_username) (append_to_credentials_password): Moved to new module. 2010-04-27 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage.h (task_status_t): Document, fix numerical values. 2010-04-27 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Reviving formerly reverted changes (penultimate commit). The issue was solved elsewhere, two minor additional changes. * src/manage.h, src/manage.c, src/manage_sql.c, src/openvasmd.c: Reverted to penultimate commit. * src/manage.c (run_task): Added todo about possible code collapse. (manage_schedule): Fixed setting of owner_uuid (second in list). 2010-04-26 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Reverting last commit due to not yet identified bug that leads to crashes with most authentication attempts. * src/manage.h, src/manage.c, src/manage_sql.c, src/openvasmd.c: Reverted last commit. 2010-04-26 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Use openvas libraries to access the correct users rules, even if user is remotely authenticated. Therefore, store users uuid for scheduled tasks. * src/manage.h: Added 2010 to copyright statement. (get_scheduled_user_uuid, set_scheduled_user_uuid): Added protos. (manage_schedule): Adjusted proto. * src/manage.c (send_user_rules): Call openvas_auth_user_uuid_rules and pass current credentials uuid to access the correct rules for remotely authenticated users. (schedule_user_uuid): New variable that holds uuid of user in case of a scheduled task. (get_scheduled_user_uuid): New. Getter for schedule_user_uuid. (set_scheduled_user_uuid): New. Setter for schedule_user_uuid. (manage_schedule): Adjusted signature, get, set, use and free the uuid of a user that scheduled a task. * src/manage_sql.c (authenticate): In case of a scheduled task, set the previously stored uuid. * src/openvasmd.c: Added 2010 to copyright statement. (fork_connection_for_schedular): Added new parameter to signature, set users uuid for scheduled tasks. 2010-04-26 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage.c: Added 2010 to copyright statement. (free_credentials): Removed unneeded conditional, resolves part of todo. 2010-04-26 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage_sql.c: Added 2010 to copyright statement. (sql_x): Removed newline in log messages. 2010-04-26 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage_sql.c (sql_quote, sql_nquote): Added documentation. 2010-04-26 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * CMakeLists.txt: Lower-cased cmake commands as in CMakeLists.txt files of other modules. 2010-04-26 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Improve SQL statement to fetch the ROWID of an report in progress of a running task. This change can prevent issues that occurred when the database was left in an inconsistent state (e.g. due to "malformed disk image" issues). * src/manage_sql.c (task_running_report): Made the SQL statement to fetch the ROWID of the report in progress of a running task more robust. Ensure that the report is in "running" state. If multiple such reports should exist (should occur only if serious errors came up before), select the last one. 2010-04-26 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Ensure that after every fork the database is reopened in the child. This is required by sqlite3 in order to prevent race conditions that lead to "malformed disk image"s of the database. * src/manage_sql.c (task_db_name): New variable to hold the database file name. (reinit_manage_process): New function. (init_manage): Store the database name in new variable. * src/manage_sql.h: Added proto. * src/manage.c (run_task), src/openvasmd.c (accept_and_maybe_fork): Reinit manage process after fork. 2010-04-23 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage_sql.c (init_manage): Improved doc. (authenticate): Added todo wrt remotely authenticated users. 2010-04-23 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Extracted two functions from main to enhance readability. * src/openvasmd.c (update_or_rebuild_nvt_cache): New function containing the nvt cache update and rebuild code. (main_loop): New function containing the main loop code. (main): Extracted code, call respective new functions. 2010-04-23 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/openvasmd.c (cleanup): Made function static. (main): Use multiline comments as in the rest of the module, made comments full sentences. 2010-04-23 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage.c (send_user_rules): Added todo, as function has to be consolidated and moved into libraries to allow proper rules sending of remotely authenticated users. (manage_schedule): Added comments, renamed local uuid variables in task_uuid to make future addition of a user_uuid variable easier to comprehend. 2010-04-23 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/openvasmd.c: Added stub for documentation subsection about forking behaviour of openvasmd. (accept_and_maybe_fork): Made static. (main): Added comments, collapsed unconditioned statement. 2010-04-23 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/openvasmd.c: Removed setting of experimental FORK flag. (accept_and_maybe_fork): Removed pathes that were started to have a non-forking manager. 2010-04-22 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/openvasmd.c (main, cleanup): Moved call to openvas_auth_tear_down to cleanup function as suggested by Matthew Mundell. 2010-04-21 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * doc/Doxyfile.in, doc/Doxyfile_full.in: Added missing file to INPUT file list. 2010-04-16 Stephan Kleine * src/manage.h (cleanup_manage_process): Add gboolean parameter. * src/openvasmd.c (cleanup): Add TRUE to cleanup_manage_process call. 2010-04-16 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage.c (send_config_rules): Extracted code to openvas-libraries/openvas_auth module to allow easier future integration of remote authentication methods. (free_credentials): Added todo about possible memleak and improvability of readability. 2010-04-16 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/openvasmd.c (main): Initialize and tear down authentication system. 2010-04-15 Stephan Kleine * src/CMakeLists.txt, src/tests/CMakeLists.txt: Fix linking issues. 2010-04-15 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * CMakeLists.txt, INSTALL: Raised required version of openvas-libraries to 3.0.6 . 2010-04-15 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Moved code to openvas-libraries/misc/openvas_auth module. * src/manage_sql.c (openvas_user_uuid, openvas_authenticate_uuid): Moved to openvas-libraries/misc/openvas_auth module. (authenticate): Added comment. 2010-04-15 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Moved code to openvas-libraries/misc/openvas_uuid module. * src/manage.c (make_report_uuid): Removed. (make_task_uuid): Removed. * src/manage.h (make_report_uuid, make_task_uuid): Removed headers accordingly. * src/manage_sql.c (sql_make_uuid, openvas_user_uuid, migrate_9_to_10) (migrate_12_to_13, create_report, make_task, create_config) (create_config_rc, copy_config, create_note): Added include, reflect function name change. * src/tests/make_report_uuid_0.c (main): Added include. Reflect function name change in code. 2010-04-15 Michael Wiegand <michael.wiegand@greenbone.net> Post-release version bump. * CMakeLists.txt: Updated version number. 2010-04-15 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 1.0.0-beta6 release. * CHANGES: Updated. * CMakeLists.txt: Added autogenerated files to CPACK_SOURCE_IGNORE_FILES. 2010-04-14 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Cosmetics. * src/otp.c (category_number): Doc string formatting. * src/omp.c (omp_xml_handle_end_element): Added comments. 2010-04-13 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * INSTALL: Added some missing optional runtime dependencies, as suggested by "seph" on the openvas-devel mailinglist. 2010-04-10 Stephan Kleine * src/CMakeLists.txt: Fix build with as-needed * src/tests/CMakeLists.txt: Fix build with as-needed 2010-04-10 Stephan Kleine * CMakeLists.txt: Add support for out-of-source builds. 2010-04-10 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * INSTALL: Improved hint on prerequisites for credentials packages. 2010-03-31 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP commands PAUSE_TASK and RESUME_PAUSED_TASK. * src/omp.c (help_text): Add new commands. (client_state_t): Add new command states. (omp_xml_handle_end_element, omp_xml_handle_start_element): Add RESUME_OR_START_TASK handling. (process_omp_change): New function. * src/omp.h: Add header accordingly. * src/manage.c (run_status_name, stop_task): Add pause and resume states. (pause_task, resume_paused_task): New functions. (manage_check_current_task): Add pausing and resuming. * src/manage.h: Add headers accordingly. * src/ompd.c (serve_omp): Periodically call process_omp_change. * src/otp.c (process_otp_scanner_input): Add OTP pause and resume handling. * src/manage_sql.c (init_manage, set_task_requested, delete_report): Include pause and resume states. 2010-03-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (migrate_15_to_16): Also clear all task comments. 2010-03-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_start_element): In CLIENT_MODIFY_TASK initialise modify_task_comment in case the comment is empty. 2010-03-29 Matthew Mundell <matthew.mundell@greenbone.net> Add ESCALATOR to OMP command MODIFY_TASK. * src/omp.c (modify_task_data_t): Add escalator_id. (modify_task_data_reset): Free escalator_id. (client_state_t): Add CLIENT_MODIFY_TASK_ESCALATOR. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add ESCALATOR to MODIFY_TASK handling. * src/manage_sql.c (task_escalator, set_task_escalator): New functions. * src/manage.h: Add headers accordingly. 2010-03-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (task_escalator): Remove. Renamed to task_escalator_name. (task_escalator_name): New function. Was task_escalator. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): Rename task_escalator calls. 2010-03-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (make_task): Allow comment to be NULL. Add SQL quotes for comment. Init schedule_next_time. 2010-03-28 Matthew Mundell <matthew.mundell@greenbone.net> Add SCHEDULE to OMP command MODIFY_TASK. * src/omp.c (modify_task_data_t): New type. (modify_task_data_reset): New function. (command_data_t): Add modify_task. (modify_task_data): New variable. (client_state_t): Add CLIENT_MODIFY_TASK_SCHEDULE. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add SCHEDULE to MODIFY_TASK handling. Add missing CLIENT_MODIFY_TASK_COMMENT end case. 2010-03-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_STATUS add COMMENT to TASK. 2010-03-28 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (schedules): Add column period_months. * doc/db.png: Update from SQL. 2010-03-28 Matthew Mundell <matthew.mundell@greenbone.net> Add database migration from version 15 to 16. * src/manage_sql.c (migrate_15_to_16): New function. (database_migrators): Add migrate_15_to_16. 2010-03-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Check period and duration last. Ensure that duration is less than period when period is given in months. 2010-03-27 Matthew Mundell <matthew.mundell@greenbone.net> Add calendar month periods to scheduling. Hence increase database version to 16. Extend OMP SCHEDULE command so clients can specify duration and period in months or other calendar units. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 16. * src/manage_sql.c (create_tables): Add period_months to table schedules. (create_schedule): Add period_months arg. (MONTHS_WITHIN_YEAR): New macro. (months_between, add_months, schedule_iterator_period_months) (task_schedule_iterator_period_months): New functions. (init_schedule_iterator, init_task_schedule_iterator): Add period_months to columns. Adjust iterator accessor columns accordingly. (task_schedule_iterator_stop_due): Add calendar month period handling. * src/manage_sql.h, src/manage.h: Update headers accordingly. * src/manage.c (manage_schedule): Remove next time assert from periodic case. Add case for calendar month periods. * src/omp.c (interval_from_strings): New function. (create_schedule_data_t): Add period_unit and duration_unit. (create_schedule_data_reset): Free period_unit and duration_unit. (client_state_t): Add duration and period unit states. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add UNIT to PERIOD and DURATION in OMP SCHEDULE. (buffer_schedules_xml): Add PERIOD_MONTHS to SCHEDULE. * src/openvasmd.c (main): Set timezone to UTC. 2010-03-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_help_0.c (help_text): Bring in line with Manager. 2010-03-25 Matthew Mundell <matthew.mundell@greenbone.net> * doc/CMakeLists.txt: Replace tasks_sql.h with manage_sql.c. * doc/db_postgres.sql (tasks): Add columns schedule and schedule_next_time. (schedules): New table. * doc/db.png: Update from SQL. 2010-03-25 Matthew Mundell <matthew.mundell@greenbone.net> Add IN_USE to the details case of OMP GET_SCHEDULE. * src/manage_sql.c (init_schedule_iterator): Add field for "in use". (schedule_iterator_in_use): New function. * src/manage.h: Add header accordingly. * src/omp.c (buffer_schedules_xml): Add IN_USE in details case. 2010-03-25 Matthew Mundell <matthew.mundell@greenbone.net> Add database migration from version 14 to 15. * src/manage_sql.c (migrate_14_to_15): New function. (database_migrators): Add migrate_14_to_15. 2010-03-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (manage_schedule): Call omp_resume_or_start_task instead of omp_start_task to start tasks. 2010-03-25 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP command RESUME_OR_START_TASK. * src/manage.c (run_task): Convert arg from_stopped to from, and add "resume or start" behaviour if from is 2. Update callers. (resume_or_start_task): New function. Wraps run_task. * src/manage.h: Add header accordingly. * src/omp.c (help_text): Add RESUME_OR_START_TASK. (omp_xml_handle_end_element, omp_xml_handle_start_element): Add RESUME_OR_START_TASK handling. 2010-03-25 Matthew Mundell <matthew.mundell@greenbone.net> In the schedular, stop tasks with durations at the end of their durations. * src/manage.c (manage_schedule): Ensure that start happens within the duration if the schedule has a duration. Correct assert about next and first time in start of periodic task. Collect and stop tasks due for stopping. * src/manage_sql.c (init_task_schedule_iterator): Add duration. Adjust iterator accessor columns accordingly. (task_schedule_iterator_duration): New function. (task_schedule_iterator_stop_due): Implement. * src/manage_sql.h: Add header accordingly. 2010-03-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_SCHEDULE ensure that the period is at least as big as the duration. 2010-03-25 Matthew Mundell <matthew.mundell@greenbone.net> Init forked child in schedular callback with init_manage_process instead of with init_manage, otherwise it resets all the tasks. * src/ompd.c (init_ompd_process): New function. * src/ompd.h: Add header accordingly. * src/openvasmd.c (fork_connection_for_schedular): Init child with init_ompd_process. 2010-03-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (time_from_strings): Remove offsetting of day of month. 2010-03-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (time_from_strings): Turn month into offset for mktime. Match daylight saving value of local time. 2010-03-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (schedule_iterator_next_time): Add calculation for periodic case. * src/omp.c (buffer_schedules_xml): Send schedule times as formatted strings. (omp_xml_handle_end_element): Ditto in CLIENT_GET_STATUS. 2010-03-24 Matthew Mundell <matthew.mundell@greenbone.net> * ChangeLog: Resurrect overwritten entry. 2010-03-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (task_schedule_iterator_first_time): Make external. * src/manage_sql.h: Add header accordingly. * src/manage.c (manage_schedule): Ensure periodic task starts within a short interval at the beginning of the schedule period. 2010-03-24 Matthew Mundell <matthew.mundell@greenbone.net> Account for period in scheduling. * src/manage_sql.c (init_task_schedule_iterator): Add schedule period and first_time. Adjust iterator accessor columns accordingly. (task_schedule_iterator_period, task_schedule_iterator_first_time): New function. * src/manage.c (manage_schedule): Account for period when setting next schedule time of task. * src/manage_sql.h: Add headers accordingly. 2010-03-24 Matthew Mundell <matthew.mundell@greenbone.net> Add SCHEDULE to OMP command CREATE_TASK. * src/manage_sql.c (set_task_schedule): New function. (make_task): Clear schedule. * src/manage.h: Add header accordingly. * src/omp.c (client_state_t): Add CLIENT_CREATE_TASK_SCHEDULE. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add SCHEDULE to CREATE_TASK. 2010-03-23 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP command CREATE_SCHEDULE. * src/manage_sql.c (create_schedule): New function. * src/manage.h: Add header accordingly. * src/omp.c (time_from_strings): New function. (help_text): Add CREATE_SCHEDULE. (create_schedule_data_t): New type. (create_schedule_data_reset): New define. (command_data_t): Add create_schedule. (create_schedule_data): New variable. (client_state_t): Add CREATE_SCHEDULE states. (omp_xml_handle_end_element, omp_xml_handle_start_element) (omp_xml_handle_text): Add CREATE_SCHEDULE handling. 2010-03-22 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP command DELETE_SCHEDULE. * src/manage_sql.c (delete_schedule): New function. * src/manage.h: Add header accordingly. * src/omp.c (help_text): Add DELETE_SCHEDULE. (delete_schedule_data_t): New type. (delete_schedule_data_reset): New define. (command_data_t): Add delete_schedule. (delete_schedule_data): New variable. (client_state_t): Add CLIENT_DELETE_SCHEDULE. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add DELETE_SCHEDULE handling. 2010-03-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (buffer_schedules_xml): Add tasks that use the schedular to response. * src/manage_sql.c (schedule_iterator_schedule) (init_schedule_task_iterator, schedule_task_iterator_uuid) (schedule_task_iterator_name): New functions. * src/manage.h: Add headers accordingly. 2010-03-21 Matthew Mundell <matthew.mundell@greenbone.net> Give the schedular a socket to a forked Manager, instead of having it connect to the main Manager process. * src/manage.c (authenticate_allow_all): New variable. (manage_auth_allow_all): New function. (manage_schedule): Take a callback instead of a host and port. Call the callback to get a child that is already connected to the manager, and start the task from the child. * src/manage_sql.c (authenticate_allow_all): New header. (cleanup_manage_process): Only set the current task if doing all cleanups. (authenticate): Always auth with success if authenticate_allow_all is set. (init_task_schedule_iterator): Add columns for task owner info. (task_schedule_iterator_owner_uuid, task_schedule_iterator_owner_name): New functions. * src/manage_sql.h, src/manage.h: Add headers accordingly. * src/openvasmd.c (SCHEDULE_PERIOD): New define. (fork_connection_for_schedular): New function. (main): Make manage_schedule run only about every SCHEDULE_PERIOD, instead of letting in run after any interrupt. * src/omp.c (omp_xml_handle_start_element): In CLIENT_AUTHENTICATE initialise the password so that it can be empty. 2010-03-20 Stephan Kleine * src/CMakeLists.txt: Install openvasmd into ${SBINDIR} since it is a service. 2010-03-18 Matthew Mundell <matthew.mundell@greenbone.net> Move schedule "next time" from schedule to task. Add the task "next time" to the GET_STATUS response. * src/manage_sql.c (create_tables): Remove column next_time from schedules. Add column schedule_next_time to tasks. (task_schedule_next_time, set_task_schedule_next_time): New functions. (set_schedule_next_time): Remove. (init_schedule_iterator): Remove next_time from SELECT columns. (schedule_iterator_first_time, schedule_iterator_period) (schedule_iterator_duration): Change returns to time_t's. (schedule_iterator_next_time): Calculate the hypothetical next time. (init_task_schedule_iterator): Get next time from tasks instead of schedules. * src/manage_sql.h, src/manage.h: Update headers accordingly. * src/manage.c (manage_schedule): Set next time on task instead of schedule. * src/omp.c (buffer_schedules_xml): Adjust format to new schedule iterator time_t types. (omp_xml_handle_end_element): In CLIENT_GET_STATUS add task NEXT_TIME to SCHEDULE. 2010-03-18 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP command GET_SCHEDULES. * src/manage_sql.c (find_schedule, init_schedule_iterator) (schedule_iterator_uuid, schedule_iterator_name, schedule_iterator_name) (schedule_iterator_first_time, schedule_iterator_next_time) (schedule_iterator_period, schedule_iterator_duration): New functions. * src/manage.h: Add headers accordingly. * src/omp.c (help_text): Add GET_SCHEDULES. (get_schedules_data_t): New type. (get_schedules_data_reset): New define. (command_data_t): Add get_schedules. (get_schedules_data): New variable. (client_state_t): Add CLIENT_GET_SCHEDULES. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add GET_SCHEDULES handling. (buffer_schedules_xml): New function. 2010-03-17 Matthew Mundell <matthew.mundell@greenbone.net> Add basis for task scheduling. Hence increase database version to 15. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 15. * src/openvasmd.c (main): Add periodic manage_schedule call to the listen loop. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_STATUS add SCHEDULE to TASK. * src/manage.c (run_task): Only set report_id if an address. (manage_schedule): New function. Forks processes to start scheduled tasks. * src/manage_sql.c (create_tables): Add table schedules. Add field "schedule" to table tasks. (cleanup_manage_process): Add cleanup arg. Just clear db handle if false, for forked processes. (task_schedule, schedule_uuid, schedule_name, set_schedule_next_time) (init_task_schedule_iterator, cleanup_task_schedule_iterator) (task_schedule_iterator_task, task_schedule_iterator_schedule) (task_schedule_iterator_next_time, task_schedule_iterator_start_due) (task_schedule_iterator_stop_due): New functions. (create_report): Allow report_id to be NULL. * src/manage.h: Add headers accordingly. (schedule_t): New type. * src/manage_sql.h: Add headers accordingly. 2010-03-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Correct command names in CLIENT_GET_TARGETS. Closes #1329 (http://bugs.openvas.org/1329). 2010-03-15 Matthew Mundell <matthew.mundell@greenbone.net> * README: Add testing heading and note about authenticating "om". Thanks to Hartmut Goebel for suggestion. Also add a space and an apostrophe. 2010-03-12 Matthew Mundell <matthew.mundell@greenbone.net> Add resuming of stopped tasks, and hence new OMP command RESUME_STOPPED_TASK. * src/manage_sql.c (task_last_stopped_report, trim_partial_report): New functions. (set_task_end_time, set_scan_end_time): If time is NULL, NULL the field. * src/manage.c (send_user_rules): Add stopped_report arg. If given ensure that already-completed hosts are denied. (run_task): New function. Body from start_task. If from_stopped arg is true, setup task report for resuming task, and pass report to send_user_rules. (start_task): Call through to run_task. (resume_stopped_task): New function. * src/manage.h: Add headers accordingly. * src/omp.c (help_text): Add RESUME_STOPPED_TASK. (client_state_t): Add CLIENT_RESUME_STOPPED_TASK. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add RESUME_STOPPED_TASK handling. 2010-03-11 Matthew Mundell <matthew.mundell@greenbone.net> * CMakeLists.txt: Indent certificate values like others. 2010-03-11 Michael Wiegand <michael.wiegand@greenbone.net> Switched to certificate based authentication. * src/openvasmd.c (serve_client, main): Pass our client certificate to openvas_server_new when establishing a connection. Add fallback defines for CLIENTCERT and CLIENTKEY if the are not defined externally. * CMakeLists.txt: Set OPENVAS_CLIENT_CERTIFICATE and OPENVAS_CLIENT_KEY to the expected certificate and key locations. * src/CMakeLists.txt: Set defines for certificate and key. * src/ompd.c (write_to_scanner): Set the password to a dummy value to stay OTP compatible and explain the reason in a comment. * INSTALL: Document setup for certificate based authentication. * README: Updated. 2010-03-04 Matthew Mundell <matthew.mundell@greenbone.net> Add task trends. * src/manage_sql.c (task_last_report, task_second_last_report) (task_trend): New functions. (REPORT_COUNT): Only set the variable if an address is given. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_STATUS send TREND in TASK. 2010-03-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (manage_set_config_families): When updating the cache when the entire family is selected, increment the family count if the family is being newly selected instead of if the family was already selected. 2010-03-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (select_config_nvts): Remove table qualifier from sort field, now that fallback has such. 2010-03-04 Michael Wiegand <michael.wiegand@greenbone.net> Post-release version bump. * CMakeLists.txt: Updated version number. 2010-03-04 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 1.0.0-beta5 release. * CHANGES: Updated. 2010-03-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORT pipe xsltproc output instead of using -o, so that the file is still created when the transformation result is empty. 2010-03-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (select_config_nvts, init_note_iterator): Ensure fallback sort fields include table when selecting in multiple tables. 2010-03-04 Michael Wiegand <michael.wiegand@greenbone.net> * src/CPE.xsl: New file. * src/CMakeLists.txt: Install CPE.xsl. 2010-03-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd_report_html.xsl: Add copyright header. 2010-03-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_manage): Improve test for example task. Insert config and target of example task as IDs instead of names. 2010-03-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/ITG.xsl: New file. * src/CMakeLists.txt: Install ITG.xsl. 2010-03-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORT try create the report from a configured stylesheet if all the other format cases fail to match the format. 2010-03-02 Matthew Mundell <matthew.mundell@greenbone.net> * README: Update usage. * src/openvasmd.c (otp): New variable. (serve_client): Only serve OTP if OTP is enabled. (main): Add --otp. 2010-03-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd_report_html.xsl (wrap): Select substring correctly after wrap. 2010-02-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (sql, sql_x, sql_int, sql_string, sql_int64): Make static. * src/manage_sql.h (sql): Remove. 2010-02-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (set_task_requested): New function. * src/manage_sql.h: Add header accordingly. * src/manage.c (start_task): Use set_task_requested. 2010-02-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.c (init_nvt_iterator, select_config_nvts): If sort_field is NULL use name instead of ROWID, because name is selected. 2010-02-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage_sql.h: Use work email address. 2010-02-26 Matthew Mundell <matthew.mundell@greenbone.net> Make manage library work now that the SQL portion is a real C file. * src/manage_sql.h: New file. * src/manage.c: Include manage_sql.h instead of tasks_sql.h. (inc_task_report_count, dec_task_report_count, print_tasks): Remove. Old headers. (escalator_data): Move to manage_sql.h. (threat_message_type, message_type_threat, delete_reports): Make external so manage_sql.c can use them. * src/manage_sql.c: Add includes. (threat_message_type, message_type_threat, delete_reports): New declarations. For private functions defined in manage.c. (init_otp_pref_iterator, otp_pref_iterator_name, otp_pref_iterator_value) (escalator_data, create_report, task_file_iterator_name) (target_lsc_credential): Make external so manage.c can use them. * TODO: Remove entry about file system backend. 2010-02-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/CMakeLists.txt: Link manage_sql to manage. 2010-02-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h: Rename to src/manage_sql.c. * src/manage_sql.c: New file. Was src/tasks_sql.h. 2010-02-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/CMakeLists.txt: Remove TASKS_SQL directive. 2010-02-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.h, src/manage.c: Remove file system based task alternatives. 2010-02-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/CMakeLists.txt: Set -lsqlite3 on openvasmd directly. 2010-02-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (select_config_nvts): Add missing "ORDER BY"s. 2010-02-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (buffer_notes_xml): Add ORPHAN entity to indicate if note's task has been removed. 2010-02-25 Matthew Mundell <matthew.mundell@greenbone.net> Add a result attribute to OMP GET_NOTES. * src/omp.c (get_notes_data_t): Add result. (omp_xml_handle_start_element): Parse result attribute. (buffer_notes_xml): Add include_result arg. Update caller. (omp_xml_handle_end_element): Pass result attribute to buffer_notes_xml. 2010-02-25 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP MODIFY_NOTE. * src/tasks_sql.h (modify_note): New function. * src/manage.h: Add header accordingly. * src/omp.c (help_text): Add MODIFY_NOTE. (create_note_data_t): Add note_id. (create_note_data_reset): Free note_id. (modify_note_data_t): New type. (modify_note_data_reset): New define. (modify_note_data): New variable. (client_state_t): Add MODIFY_NOTE states. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add MODIFY_NOTE handling. (print_report_notes_latex, buffer_results_xml): Sort notes by creation time. 2010-02-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (print_report_latex): Correct typo in abstract. 2010-02-23 Matthew Mundell <matthew.mundell@greenbone.net> Improve the HTML report. * src/openvasmd_report_html.xsl (scan_start, scan_end, note): Switch from tables to divs. Add GSA-like style. (result) [list] [table]: Remove. (result) [issue]: Switch to divs. Add GSA-like style. (report): Make summary like LaTeX report. Improve layout a bit. Use new issue names (High, Medium...). Add more headings. Ensure that each port is listed only once in the port summary. (/): Wrap everything in a styled table in a styled div. Add end message. 2010-02-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORT add a "dvi" format with the "pdf" case. 2010-02-19 Matthew Mundell <matthew.mundell@greenbone.net> Get notes into the LaTeX report. * src/omp.c (latex_print_verbatim_text): Add row_colour arg. Update callers. (latex_header): Define colour openvas_user_note. (print_report_notes_latex): New function. (print_report_latex): Add task arg. Update callers. Print notes. (omp_xml_handle_end_element): In CLIENT_GET_REPORT in the "pdf" case, get the task for print_report_latex. 2010-02-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd_report_html.xsl: Convert tabs to spaces. 2010-02-19 Matthew Mundell <matthew.mundell@greenbone.net> Get notes into the HTML report. * src/omp.c (print_report_xml): Add task arg. Call buffer_results_xml to get results to print. (omp_xml_handle_end_element): In CLIENT_GET_REPORT in the "html" and "html-pdf" cases pass task to print_report_xml and output the "html" xsl tranform errors to a file. * src/openvasmd_report_html.xsl (wrap, note): New templates. (result) [issue]: Output notes. 2010-02-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_note_iterator): Remove table specifier from sort columns. 2010-02-18 Matthew Mundell <matthew.mundell@greenbone.net> Add TASK to OMP GET_NOTES. * src/omp.c (get_notes_data_t): Add task_id. (get_notes_data_reset): Free task_id. (client_state_t): Add CLIENT_GET_NOTES_TASK. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add NVT to GET_NOTES. * src/tasks_sql.h (NOTE_COLUMNS): New define. (init_note_iterator): If result is 0 and task is above 0, then select all notes on the task, otherwise select all notes on the result as before. 2010-02-18 Matthew Mundell <matthew.mundell@greenbone.net> * ChangeLog: Restore overwritten entry. 2010-02-18 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (notes): Link to result instead of report. * doc/db.png: New file. 2010-02-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (message_type_threat): New function. * src/tasks_sql.h (note_iterator_threat): Convert message type to threat. 2010-02-17 Matthew Mundell <matthew.mundell@greenbone.net> Add a details flag to OMP GET_NOTES. * src/omp.c (get_results_data_t): Add details. (omp_xml_handle_start_element): Init GET_NOTES details flag. (buffer_notes_xml): New function. Body from buffer_results_xml. (buffer_results_xml): Call buffer_notes_xml. (omp_xml_handle_end_element): In CLIENT_GET_NOTES call buffer_notes_xml to create body of response. 2010-02-17 Matthew Mundell <matthew.mundell@greenbone.net> Add NVT to OMP GET_NOTES. * src/tasks_sql.h (init_note_iterator): Add nvt arg. * src/manage.h: Update header accordingly. * src/omp.c: Update init_note_iterator callers. (get_notes_data_t): Add nvt_oid. (get_notes_data_reset): Free nvt_oid. (client_state_t): Add CLIENT_GET_NOTES_NVT. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add NVT to GET_NOTES. 2010-02-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_NOTES also send the note text. 2010-02-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORT in the XML case include notes in filter details. 2010-02-17 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP GET_RESULTS. * src/tasks_sql.h (init_result_iterator): Add result arg. * src/manage.h: Update header accordingly. * src/omp.c: Add result arg to init_result_iterator calls. (help_text): Add GET_RESULTS. (get_results_data_t): New type. (get_results_data_reset): New function. (command_data_t): Add get_results. (get_results_data): New variable. (client_state_t): Add CLIENT_GET_RESULTS. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add GET_RESULTS handling. 2010-02-17 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/omp.c (omp_xml_handle_end_element): When creating a task, break if malcondition was found. Free modify_task_name in success condition. 2010-02-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (insert_nvt_selectors): Set family when inserting family selector. 2010-02-16 Matthew Mundell <matthew.mundell@greenbone.net> Implement more note constraints. Create results with UUIDs. * src/tasks_sql.h (sql_hosts_contains): New function. (init_manage_process): Add SQL function hosts_contains. (init_manage): Give predefined result a UUID. (make_result): Initialise result UUID. (create_note): Translate the threat to a message type before inserting. (init_note_iterator): Add task param. Limit iteration according to hosts, port, threat and task. * src/manage.h: Update header accordingly. * src/manage.c (threat_message_type): New function. * src/omp.c (buffer_results_xml): Get notes flags from params. Add task param and pass to init_note_iterator. Update caller. (omp_xml_handle_end_element): In CLIENT_GET_NOTES pass task to init_note_iterator. 2010-02-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_NOTE correct message typo. 2010-02-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (buffer_xml_append_printf, buffer_results_xml): New functions. (omp_xml_handle_end_element): In CLIENT_GET_REPORT in the XML case, output the results entity with buffer_results_xml. 2010-02-15 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * INSTALL: List doc-full as possible make target. 2010-02-15 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * INSTALL: Sorted library dependencies alphabetically, added glib, raised required openvas-libraries version. 2010-02-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (print_report_xml): Add id to RESULT. (omp_xml_handle_end_element): In CLIENT_GET_REPORT in the XML case, add id to RESULT. 2010-02-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/ovas-mngr-comm.c (sendn_to_server): Use %zu for size_t's. 2010-02-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_note_iterator): Ensure the note applies to the NVT of the result. (note_iterator_creation_time, note_iterator_modification_time): Switch return to int. * src/manage.h: Update headers accordingly. * src/omp.c (ctime_strip_newline): New function. (omp_xml_handle_end_element): In CLIENT_GET_REPORT send formatted dates instead of integers. 2010-02-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_note_iterator): Include notes applied to all results when the request is for a single result. 2010-02-12 Matthew Mundell <matthew.mundell@greenbone.net> Add a "notes_details" attribute to GET_REPORTS. * src/tasks_sql.h (result_uuid, note_iterator_creation_time) (note_iterator_modification_time, note_iterator_text, note_iterator_hosts) (note_iterator_port, note_iterator_threat, note_iterator_task) (note_iterator_result): New functions. * src/manage.h: Add headers accordingly. * src/omp.c (get_report_data_t): Add notes_details flag. (omp_xml_handle_start_element): Parse GET_REPORT notes_details flag. (omp_xml_handle_end_element): In CLIENT_GET_REPORT in the XML case send all notes info if the notes_details flag is set. 2010-02-11 Matthew Mundell <matthew.mundell@greenbone.net> Add a "notes" attribute to GET_REPORTS. * src/tasks_sql.h (init_result_iterator): Add ROWID. (result_iterator_result): New function. (result_iterator_subnet, result_iterator_host) (result_iterator_port, result_iterator_nvt_oid) (result_iterator_type, result_iterator_descr): Increment positions. (init_note_iterator): Add result arg. * src/manage.h: Update headers accordingly. * src/omp.c (get_report_data_t): Add notes flag. (omp_xml_handle_start_element): Parse GET_REPORT notes flag. (omp_xml_handle_end_element): In CLIENT_GET_REPORT in the XML case send the notes if the notes flag is set. 2010-02-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (create_tables): Rename report to result in table notes. (create_note, init_note_iterator): Use "result" instead of "report" for result column. 2010-02-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (user_owns_result): In SQL specify table for UUID and correct table name. 2010-02-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_NOTE pass &result to find_result instead of passing &task. 2010-02-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (find_note): Remove redundant owner constraint. 2010-02-11 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP GET_NOTES. * src/tasks_sql.h (init_note_iterator, note_iterator_uuid) (note_iterator_nvt_oid, note_iterator_nvt_name): New functions. * src/manage.h: Add headers accordingly. * src/omp.c (help_text): Add GET_NOTES. (get_notes_data_t): New type. (get_notes_data_reset): New function. (command_data_t): Add get_notes. (get_notes_data): New variable. (client_state_t): Add CLIENT_GET_NOTES. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add GET_NOTES handling. 2010-02-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (main): Include --rebuild in error message. 2010-02-11 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP DELETE_NOTE. * src/tasks_sql.h (find_note, delete_note): New functions. * src/manage.h: Add headers accordingly. (note_t): New type. * src/omp.c (help_text): Add DELETE_NOTE. (delete_note_data_t): New type. (delete_note_data_reset): New function. (command_data_t): Add delete_note. (delete_note_data): New variable. (client_state_t): Add CLIENT_DELETE_NOTE. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add DELETE_NOTE handling. * src/tests/omp_help_0.c (help_text): Add DELETE_NOTE. 2010-02-11 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP CREATE_NOTE. * src/tasks_sql.h (user_owns_result, find_result, create_note): New functions. (create_tables): Add notes table. * src/manage.h: Add headers accordingly. * src/omp.c (help_text): Add CREATE_NOTE. (create_note_data_t): New type. (create_note_data_reset): New function. (command_data_t): Add create_note. (create_note_data): New variable. (client_state_t): Add CREATE_NOTE states. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add CREATE_NOTE handling. * doc/db_postgres.sql (notes): New table. (results): Add uuid. * src/tests/omp_help_0.c (help_text): Add CREATE_NOTE. 2010-02-11 Matthew Mundell <matthew.mundell@greenbone.net> * README: Correct typo and grammar. 2010-02-11 Matthew Mundell <matthew.mundell@greenbone.net> Add result UUIDs. Hence increase database version to 14. Add database migration from 13 to 14. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 14. * src/tasks_sql.h (sql_make_uuid, migrate_13_to_14): New functions. (create_tables): Add UUID column to results. (database_migrators): Add migrate_13_to_14. (init_manage_process): Setup SQL function make_uuid. 2010-02-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (print_report_latex): Note in the abstract if the task was still running. Check host end time before printing it. 2010-02-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (find_target, find_lsc_credential, find_agent): Quote name. (find_config): Free quoted_name on error too. 2010-02-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (find_config): Look for the config owned by the current user. (create_config, create_config_rc, copy_config): Limit the "already exists" check to the config owned by the current user. (delete_config): Remove config by ROWID instead of by name. 2010-02-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (find_escalator): Look for the escalator owned by the current user. (create_escalator): Limit the "already exists" check to the escalator owned by the current user. 2010-02-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (add_task_escalator): Take escalator_t instead of name. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_TASK pass escalator_t instead of name to add_task_escalator. 2010-02-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (find_lsc_credential): Look for the LSC credential owned by the current user. (create_lsc_credential): Limit the "already exists" check to the LSC credentials owned by the current user. 2010-02-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (user_owns, user_owns_uuid, find_target) (create_target): Terminate SQL statements. (find_agent): Look for the agent owned by the current user. (create_agent): Limit the "already exists" check to the agents owned by the current user. 2010-02-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/lsc_user.c (file_utils_copy_file): Remove G_GSIZE_MODIFIER from format string. Thanks to Stephan Kleine. 2010-02-09 Matthew Mundell <matthew.mundell@greenbone.net> * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 13. (Missing file from commit yesterday). 2010-02-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (find_target): Look for the target owned by the current user. (create_target): Limit the "already exists" check to the targets owned by the current user. 2010-02-09 Matthew Mundell <matthew.mundell@greenbone.net> Use UUIDs for NVT selector names instead of using the name of the associated config. Hence increase database version to 13. Add database migration from 12 to 13. Preparation for enabling users to name their configs with names used by other users. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 13. * src/tasks_sql.h (MANAGE_NVT_SELECTOR_UUID_ALL): New define. (insert_rc_into_config): Add NVT selector arg. Update callers. (migrate_12_to_13): New function. (database_migrators): Add migrate_12_to_13. (init_manage): Use UUID for predefined "All" NVT selector. (create_config, create_config_rc, copy_config): Set NVT selector name to generated UUID. (clude): Rename arg config_name to nvt_selector. (delete_config): Get NVT selector name from right column. (init_nvt_selector_iterator): Remove completed todo. 2010-02-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/ovas-mngr-comm.c (sendn_to_server, write_string_to_server) (write_to_server_buffer): Cast string format precision modifier to int. Thanks to Stephan Kleine. 2010-02-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.h (manage_complete_nvt_cache_update): Add missing arg. Thanks to Stephan Kleine. 2010-02-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Ensure all parameter lists that are on the line following the function name are indented with a single character. 2010-02-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (blank_control_chars): New function. (process_otp_scanner_input): Blank control chars in iso_field before converting to UTF-8. 2010-02-08 Michael Wiegand <michael.wiegand@greenbone.net> Post-release version bump. * CMakeLists.txt: Updated version number. 2010-02-08 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 1.0.0-beta4 release. * CHANGES: Updated. 2010-02-05 Matthew Mundell <matthew.mundell@greenbone.net> * TODO: Flush tabs from within entries. * doc/openvasmd.8, doc/openvasmd.html: Sync with generated version. 2010-02-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (restore_db): Add missing argument. Thanks to Stephan Kleine for reporting. 2010-02-05 Matthew Mundell <matthew.mundell@greenbone.net> Thanks to Stephan Kleine for reporting these. * src/omp.c (send_to_client, send_certificate): Use %zu for size_t. * src/oxpd.c (read_protocol): Cast precision arg to int. * src/lsc_user.c (file_utils_copy_file): Use the right format specifiers. * src/tasks_sql.h (escalate_1): Return -1 if to_address is NULL. 2010-02-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (latex_escape_text): New function. (print_report_latex): Put close paren on line with code. Pass port in summary table column and subsubsection through latex_escape_text. 2010-02-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (create_target): Take lsc_credential_t instead of name. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_TARGET pass lsc_credential_t instead of credential name to create_target. 2010-02-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (manage_set_config_nvts): Init new_nvt_count. * src/ompd.c (serve_omp): Ensure client_input_stalled in always initialised. 2010-02-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_escalator_task_iterator): Take escalator_t instead of name. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_ESCALATORS pass escalator_t instead of escalator name to init_escalator_task_iterator. 2010-02-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_escalator_iterator): Take escalator_t instead of name. Update caller. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_ESCALATORS pass escalator_t instead of escalator name to init_escalator_iterator. 2010-02-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (find_escalator): Move to top of page like on other pages. (delete_escalator): Take escalator_t instead of name. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_DELETE_ESCALATOR pass escalator_t instead of escalator name to delete_escalator. 2010-02-05 Michael Wiegand <michael.wiegand@greenbone.net> Post-release version bump. * CMakeLists.txt: Updated version number. 2010-02-05 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 1.0.0-beta3 release. * CHANGES: Updated. 2010-02-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (config_insert_preferences): Init quoted_nvt_name from NVT name instead of preference name. 2010-02-04 Matthew Mundell <matthew.mundell@greenbone.net> Remove UNIQUE constraint from name of user resource tables. Hence increase database version to 12. Add database migration from 11 to 12. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 12. * src/tasks_sql.h (create_tables): Remove UNIQUE from name column of tables agents, configs and escalators. (migrate_11_to_12): New function. (database_migrators): Add migrate_11_to_12. * doc/db_postgres.sql (agents, escalators, targets, configs) (lsc_credentials): Remove UNIQUE from name. 2010-02-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_agent_iterator): Take config_t instead of name. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_AGENTS pass agent_t to init_agent_iterator instead of passing name. 2010-02-04 Matthew Mundell <matthew.mundell@greenbone.net> Reference targets and configs by ID in the tasks table, instead of by name. Hence increase database version to 11. Add database migration from 10 to 11. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 11. * src/tasks_sql.h (create_tables): Make config and target in table tasks INTEGERs. (migrate_10_to_11): New function. (database_migrators): Add migrate_10_to_11. (task_config, task_config_name, delete_config, config_in_use) (manage_set_config_preference, manage_set_config_preference) (manage_set_config_nvts, init_config_task_iterator): Treat task config reference as integer. (set_task_config): Change config from name to integer. (task_target, delete_target, target_in_use) (init_target_task_iterator): Treat task target reference as integer. (set_task_target): Change target from name to integer. (append_to_task_config, append_to_task_target): Remove. (create_target): Return created target via arg. (create_config_rc): Return created config via arg. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_CONFIG and CLIENT_CREATE_TARGET add dummy return args to create_target and create_config_rc calls. In CLIENT_CREATE_TASK set the task config and target from the given names. (omp_xml_handle_text): In CLIENT_CREATE_TASK_CONFIG and CLIENT_CREATE_TASK_TARGET append to global instead of appending into task. 2010-02-04 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/task_sql.h (openvas_user_uuid, authenticate): Minor doc. (openvas_authenticate_uuid): Added comments. 2010-02-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (latex_header): Switch encoding to UTF-8. 2010-02-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (insert_nvt_selectors): Move to NVT selectors page. (find_config): Move to top of page like on other pages. (insert_rc_into_config): Doc config_name param. 2010-02-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (config_id_nvt_selector): Remove. Rename config_nvt_selector. Update callers. (config_nvt_selector): New function. Was config_id_nvt_selector. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_TASK update config_id_nvt_selector call name. 2010-02-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (copy_config): Take config_t instead of name. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_CONFIG pass config_t instead of config name to copy_config. 2010-02-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (start_task): Get the config directly, instead of via the config name. 2010-02-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_otp_pref_iterator): Take config_t instead of name. * src/manage.c (send_config_preferences): Take config_t instead of name. Pass config_t to init_otp_pref_iterator. (start_task): Pass config_t to send_config_preferences. 2010-02-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_config_pref_iterator) (config_pref_iterator_name, config_pref_iterator_value): Remove, superceded by newer iterators. * src/manage.h: Remove headers accordingly. 2010-02-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_preference_iterator): Take config_t instead of name. (make_task_rcfile): Pass config_t to init_preference_iterator. 2010-02-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (delete_config): Take config_t instead of name. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_DELETE_CONFIG pass config_t instead of config name to delete_config. 2010-02-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_DELETE_TARGET remove auth case from delete_target return check. 2010-02-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (set_target_hosts, target_hosts) (target_lsc_credential, set_target_hosts): Take target_t instead of name. (task_target): Return target_t instead of name. (make_task_rcfile): Work with target_t instead of name. (target_name): New function. * src/manage.h: Update headers accordingly. * src/manage.c (start_task): Work with target_t instead of name. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_TASK and CLIENT_GET_STATUS work with target_t instead of target name. 2010-02-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (serve_omp): Convert scanner input to UTF-8 before logging. * src/otp.c (process_otp_scanner_input): Turn off tracing of ISO input. 2010-02-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_target_iterator): Add ROWID. (target_iterator_target): New function. (target_iterator_name, target_iterator_hosts, target_iterator_comment) (target_iterator_lsc_credential): Shift column positions. (target_in_use): Take target_t instead of name. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TARGETS pass a target_t to target_in_use instead of passing a name. 2010-02-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_target_task_iterator): Take target_t instead of name. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TARGETS pass a target_t to init_target_task_iterator instead of passing a name. 2010-02-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_target_iterator): Take target_t instead of name. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_TARGETS pass a target_t to init_target_iterator instead of passing a name. 2010-02-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (find_target): New function. (delete_target): Take target_t instead of name. * src/manage.h: Update headers accordingly. (target_t): New type. * src/omp.c (omp_xml_handle_end_element): In CLIENT_DELETE_TARGET pass target_t to delete_target instead of passing a name. 2010-02-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_lsc_credential_iterator): Add ROWID. (lsc_credential_iterator_lsc_credential): New function. (lsc_credential_iterator_name, lsc_credential_iterator_login) (lsc_credential_iterator_password, lsc_credential_iterator_public_key) (lsc_credential_iterator_private_key, lsc_credential_iterator_rpm) (lsc_credential_iterator_deb, lsc_credential_iterator_exe) (lsc_credential_iterator_comment, lsc_credential_iterator_in_use): Adjust column position. (init_lsc_credential_target_iterator): Take lsc_credential_t instead of name. * src/manage.h: Add header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_LSC_CREDENTIALS Pass lsc_credential_t to init_lsc_credential_target_iterator instead of passing name. 2010-02-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (target_lsc_credential_name): Remove. (target_lsc_credential): New function. (init_lsc_credential_iterator): Take lsc_credential_t instead of credential name. * src/manage.h: Update header accordingly. * src/manage.c (start_task): Pass lsc_credential_t to init_lsc_credential_iterator instead of name. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_LSC_CREDENTIALS pass lsc_credential_t to init_lsc_credential_iterator instead of name. 2010-02-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_manage): Put fullstop on empty config description. 2010-02-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (migrate_9_to_10): Correct comment typo. (config_in_use): Also check for empty config. 2010-02-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (manage_set_config_nvts): Update family count when updating cached config info. 2010-02-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (handle_sigabrt): Check if already in handler. * src/tasks_sql.h (manage_set_config_nvts) (manage_set_config_families): Free selector after last use. * src/tracef.h (tracef) [TRACE]: Remove UTF-8 conversion. 2010-01-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/CMakeLists.txt: Make warnings errors. 2010-01-28 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * doc/openvasmd.8.xml: Added some of the new commands. 2010-01-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_start_element): In CLIENT_CREATE_LSC_CREDENTIAL init modify_task_parameter in the password case, to indicate that the element has been received. 2010-01-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (find_lsc_credential): New function. (delete_lsc_credential): Switch name arg to a lsc_credential_t. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_DELETE_LSC_CREDENTIAL pass lsc_credential_t to delete_lsc_credential instead of name. 2010-01-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_manage): Include only the Nmap scanner from "Port scanners" in the "All" NVT selector. 2010-01-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (print_report_latex): Spread headings out like rest of file. Bring line lengths under 80. 2010-01-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (CONFIG_ITERATOR_FIELDS): New define. (init_config_iterator, update_all_config_caches): Use CONFIG_ITERATOR_FIELDS for SELECT fields, so that both functions always use the same fields. (family_count): Always count, otherwise the initial value sticks during an update. 2010-01-26 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Post-release version bump. * CMakeLists.txt: Updated version number. 2010-01-26 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Preparing the openvas-manager 1.0.0-beta2 release. * CMakeLists.txt: Updated version number. * CHANGES: Updated. 2010-01-26 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/ovas-mngr-comm.h (make_session, end_session): Removed prototypes (there is no implementation). 2010-01-26 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/omp.c (latex_header): Define "inactive" (gray) color. (print_report_latex): Print placeholder text about filters, if some shown results are filtered, added respective TODO. 2010-01-26 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/omp.c (omp_xml_handle_end_element): "Early break" if requested report uuid is NULL. 2010-01-26 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/tasks_sql.h (migrate_9_to_10): Create a "dummy" uuid in memory for users that do not have one on disk (e.g. because they were deleted). 2010-01-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (agent_t): Remove. Move to manage.h. (find_agent): New function. (delete_agent): Take an agent instead of agent name. * src/manage.h: Update headers accordingly. (agent_t): New type. From tasks_sql.h. * src/omp.c (omp_xml_handle_end_element): In CLIENT_DELETE_AGENT find agent and pass agent_t to delete_agent. 2010-01-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (migrate_8_to_9): Ensure that tables added since version 8 exist. 2010-01-25 Matthew Mundell <matthew.mundell@greenbone.net> Add user UUIDs. Hence increase database version to 10. Add database migration from 9 to 10. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 10. * src/manage.h (credentials_t): Add uuid. * src/tasks_sql.h (task_owner_uuid, openvas_user_uuid) (openvas_authenticate_uuid, migrate_9_to_10): New functions. (user_owns, user_owns_uuid, create_escalator, init_escalator_iterator) (init_escalator_task_iterator, init_task_iterator, task_count) (make_report, make_task, create_target, init_target_iterator) (init_target_task_iterator, create_config, create_config_rc) (copy_config, init_config_iterator, create_lsc_credential) (init_lsc_credential_iterator, create_agent, init_agent_iterator): Get the user ROWID by UUID instead of by name. (create_tables): Add "uuid" to users. Drop UNIQUE from users "name". (database_migrators): Add migrate_9_to_10. (init_manage): Init current_credentials uuid. Set UUIDs instead of names around calls to task functions. (authenticate): Ensure a user with the UUID of the authenticated user exists in the database. (request_delete_task, delete_task): Check for credential UUID instead of name. * doc/db_postgres.sql (users): Add uuid, remove unique from name. 2010-01-25 Matthew Mundell <matthew.mundell@greenbone.net> * README: Capitalise names. 2010-01-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/otpd.c (serve_otp): Filter logging of input that may contain passwords. 2010-01-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c (serve_omp): Filter logging of input that may contain passwords. * src/oxpd.c (read_protocol): Filter logging of input that may contain passwords. 2010-01-25 Matthew Mundell <matthew.mundell@greenbone.net> Add rest of NSIS package generation. * src/lsc_user.c (ssh_privkey_create, ssh_pubkey_create): Free astdout and astderr. (lsc_user_rpm_create): Init and free standard_out and standard_err. Neaten messages. (execute_alien): Print command output on error. Neaten message. (create_nsis_script, execute_makensis, lsc_user_exe_create): New functions. (lsc_user_all_create): Enable and complete NSIS generation. 2010-01-25 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * README: Added note from INSTALL about special "om" user. 2010-01-22 Matthew Mundell <matthew.mundell@greenbone.net> Clean up the database better on exits from signals. * src/omp.c (cleanup_manage_process): Set any running task to stopped, whatever its state is. (manage_cleanup_process_error): New function. * src/manage.h: Add header accordingly. * src/openvasmd.c (handle_sigabrt, handle_sigsegv): New functions. (handle_sigterm, handle_sighup, handle_sigint): Call cleanup_manage_process before exit. (main): Register SIGABRT and SIGSEGV handlers. 2010-01-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (send_reports): Wrap the reports in a REPORTS. 2010-01-22 Matthew Mundell <matthew.mundell@greenbone.net> When starting a task send the rules from the user's OpenVAS auth directory, instead of from preferences. * CMakeLists.txt: Setup OPENVAS_USERS_DIR. * src/CMakeLists.txt: Pass OPENVAS_USERS_DIR to compiler. * src/manage.c (send_config_rules): Define out. (send_user_rules): New function. (start_task): Send rules with send_user_rules. 2010-01-21 Matthew Mundell <matthew.mundell@greenbone.net> * README: Add --rebuild example. Note when to update cache. 2010-01-20 Matthew Mundell <matthew.mundell@greenbone.net> * INSTALL: Update UUID library. 2010-01-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (create_lsc_credential): Allow \ in login name. Move name quotation to follow login name check. 2010-01-18 Matthew Mundell <matthew.mundell@greenbone.net> Hack ISO-8859-1 to UTF-8 conversion on OTP input. Covers most cases. * src/otp.c (process_otp_scanner_input): In the <|> loop convert field to UTF-8 before processing. As a consequence jump instead of returning to ease freeing the converted string, and use "match" instead of "field" to read past the end of the field. * src/omp.c (send_to_client, send_certificate, DEF, send_nvt): Remove previous UTF-8 hacks. * src/manage.c: Add query about sending ISO-8859-1 to server. 2010-01-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_manage): Setup dummy user around find_task. 2010-01-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (config_nvt_selector): Make static. (task_config): New function. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_TASK use config_id_nvt_selector instead of config_nvt_selector. 2010-01-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (update_config_caches, init_config_iterator): Change config type to config_t. Update callers. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_CONFIGS if the request includes a config then find config and pass the config_t to init_config_iterator instead of the config name. 2010-01-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h: (CONFIG_ID_FULL_AND_FAST) (CONFIG_ID_FULL_AND_FAST_ULTIMATE, CONFIG_ID_FULL_AND_VERY_DEEP) (CONFIG_ID_FULL_AND_VERY_DEEP_ULTIMATE): New defines. (init_manage): Use defines for config IDs. (config_in_use, init_config_task_iterator, init_nvt_selector_iterator) (config_family_count, config_nvt_count): Change config arg from name to config_t. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_CONFIGS within the config iteration pass config_t to config functions instead of the config name. 2010-01-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_config_iterator): Add ROWID to selection. Adjust column numbers in callers. (config_iterator_config): New function. (nvt_preference_iterator_config_value): Change config parameter to a config_t. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_NVT_DETAILS pass config_t to nvt_preference_iterator_config_value. 2010-01-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_manage): Init current user around set_task_run_status, so event check will work. (task_owner_name): New function. * src/manage.h: Update header accordingly. 2010-01-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (config_nvt_timeout): Change config from name to config_t. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_NVT_DETAILS find config if given, and pass config_t to config_nvt_timeout. 2010-01-16 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (agents, escalators, targets, configs, reports) (lsc_credentials): Add owner field. (tasks): Move owner up in definition. 2010-01-16 Matthew Mundell <matthew.mundell@greenbone.net> Add ownership of targets, configs, lsc_credentials, escalators, reports and agents. Hence increase database version to 9. Add database migration from 8 to 9. Check ownership before performing any OMP command that accesses or modifies these resources. Limit resource listing operations to the resources owned by the current user. Allow any user to access the predefined resources as well as any resources defined prior to migration to version 9. * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): Increase to 9. * src/tasks_sql.h: Improve doc on writing a migrator. (create_tables): Add owner column to targets, configs, lsc_credentials, escalators, reports and agents. Make owner in tasks an integer, and move it forward in the definition. (config_t): Remove. Move to manage.h. (find_config): Move declaration to manage.h. Change task_t param to config_t. Quote name. (update_config_caches): Add arg to declaration. (update_all_config_caches, user_owns, user_owns_uuid) (update_config_cache): New static functions. (set_target_hosts): Make static in declaration. (next): Correct param description in doc. (migrate_5_to_6, manage_complete_nvt_cache_update): Use the "all users" config cacher, update_all_config_caches. (migrate_8_to_9, config_id_nvt_selector): New functions. (database_migrators): Add migrate_8_to_9. (create_escalator, make_report, create_target, create_config) (create_config_rc, copy_config, create_lsc_credential, create_agent): Set owner. (delete_escalator, find_escalator, find_task, find_report, delete_target) (target_hosts, target_lsc_credential_name, config_nvt_timeout) (delete_config, config_nvt_selector, delete_lsc_credential) (delete_agent): Check ownership. (init_escalator_iterator, init_escalator_task_iterator) (init_task_iterator, task_count, init_target_iterator) (init_target_task_iterator, init_config_iterator) (init_lsc_credential_iterator, init_agent_iterator): Restrict to resources owned by current user. (inc_task_int, dec_task_int): Remove. (append_to_task_string): Make static. (init_manage): Init owner columns in predefined resources. Improve find_task call for example task. (task_config): Remove. Rename to task_config. Update callers. (init_report_iterator): Remove alternate behaviour for NULL task. (init_result_iterator, init_host_iterator): Remove alternate behaviour for NULL report. (make_task): Match the users SQL to other such statements. (manage_set_config_preference, init_nvt_iterator, config_nvts_growing) (config_families_growing, manage_set_config_families): Change the config parameter from the config name to a config_t. Update callers. (manage_set_config_nvts, switch_representation) (select_config_nvts): Change the config parameter from the config name to a config_t. Use the selector name to refer to the selector instead of the config name; both strings should be the same anyway. Update callers. (update_config_caches): Call update_config_cache. (nvt_preference_iterator_config_value): Add doc. * src/manage.c (nvt_selector_plugins): Change the config parameter from the config name to a config_t. This is required because init_nvt_iterator now takes a config_t. (start_task): Pass config_t to nvt_selector_plugins. (COMMAND): Add doc. * src/manage.h: Update headers accordingly. (config_t): New type. Moved from tasks_sql.h. * src/omp.c (STATUS_ERROR_ACCESS, STATUS_ERROR_ACCESS_TEXT) (STATUS_ERROR_BUSY, STATUS_ERROR_BUSY_TEXT): New defines. The BUSY ones are just to match the Administrator. (command_data_init, command_data, create_config_data, get_report_data) (get_system_reports_data, import_config_data): Add docs. (XML_ERROR_ACCESS): New macro. (omp_xml_handle_end_element): In CLIENT_GET_NVT_DETAILS and CLIENT_MODIFY_CONFIG find the named config first, so that the permission checks are performed. In CLIENT_DELETE_AGENT, CLIENT_DELETE_CONFIG, CLIENT_DELETE_ESCALATOR, CLIENT_DELETE_LSC_CREDENTIAL and CLIENT_DELETE_TARGET handle new permission returns. 2010-01-15 Matthew Mundell <matthew.mundell@greenbone.net> Prevent deleting of active reports. * src/tasks_sql.h (delete_report): Just return 2 if report is active. * src/omp.c (omp_xml_handle_end_element): In CLIENT_DELETE_REPORT handle delete_report active report return. 2010-01-12 Michael Wiegand <michael.wiegand@greenbone.net> Post-release version bump. * CMakeLists.txt: Updated version number. 2010-01-12 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 1.0.0-beta1 release. * CMakeLists.txt: Updated version number. * CHANGES: Updated. 2010-01-11 Matthew Mundell <matthew.mundell@greenbone.net> Add a search_phrase attribute to OMP GET_REPORT and switch GET_REPORT to the new callback data mechanism. * src/tasks_sql.h (where_levels): Make static. Add NULL check. (where_search_phrase): New function. (init_result_iterator, report_scan_result_count): Add param search_phrase. * src/manage.h: Update headers accordingly. * src/omp.c (create_config_data_reset, get_system_reports_data_reset) (command_data_init): Make static. (name_command_data_reset): Define out for now. (get_report_data_t): New type. (get_report_data_reset): New function. (get_report_data): New variable. (omp_xml_handle_start_element, omp_xml_handle_end_element) (print_report_latex, print_report_xml): Switch GET_REPORT to pass data between callbacks via get_report_data. Add GET_REPORT attribute "search_phrase". 2010-01-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_otp_pref_iterator): Correct string in assertion. 2010-01-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_manage): Add NVT names to cache. (result_iterator_nvt): Remove, rename with _oid. (result_iterator_nvt_oid, result_iterator_nvt_name): New functions. * src/manage.h: Update headers accordingly. * src/omp.c: Update result_iterator_nvt callers. (print_report_xml): Add name to NVT element. (omp_xml_handle_end_element): In CLIENT_GET_REPORT XML report, add name to NVT element. 2010-01-11 Matthew Mundell <matthew.mundell@greenbone.net> Send all preferences when starting a task, even those which have the same value on the server, to match the client behaviour. * src/tasks_sql.h (init_otp_pref_iterator, otp_pref_iterator_name) (otp_pref_iterator_value): New functions. * src/manage.c (send_config_preferences): Iterate with otp_pref_iterator functions. 2010-01-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (manage_system_report): If the graph is empty, try get the "blank" graph. * INSTALL: Add note about openvasmr blank type. * README: Add space. 2010-01-07 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP command GET_SYSTEM_REPORTS. * src/manage.c (make_array, free_array): New functions. From omp.c. (get_system_report_types, init_system_report_type_iterator) (cleanup_report_type_iterator, next_report_type) (report_type_iterator_name, report_type_iterator_title) (manage_system_report): New functions. * src/manage.h: Add headers accordingly. (report_type_iterator_t): New type. * src/omp.c (make_array, free_array): Remove. Move to manage.c. (help_text): Add GET_SYSTEM_REPORTS. (name_command_data_t, get_system_report_data_t): New types. (name_command_data_reset, get_system_report_data_reset): New functions. (command_data_t): Add get_system_report and name_command. (get_system_reports_data): New variable. (client_state_t): Add CLIENT_GET_SYSTEM_REPORTS. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add GET_SYSTEM_REPORTS handling. In CLIENT_GET_TARGETS free current_name. * INSTALL: Add run time requirements. * src/tests/omp_help_0.c (help_text): Add GET_SYSTEM_REPORTS. 2010-01-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (insert_nvt_selectors): Set the family column when inserting the NVTs. Improve checking of types of given selectors. 2010-01-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (create_config): Add name return arg. Find a unique name if a config with the same name exists already. * src/manage.h: Update header accordingly. * src/omp.c (omp_xml_handle_end_element): Include config name in CREATE_CONFIG import response. 2010-01-06 Matthew Mundell <matthew.mundell@greenbone.net> * README: Note OPENVAS_TEST_HOST and OPENVAS_TEST_PORT. 2010-01-06 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * CMakeLists.txt: Added clumsy for check for libopenvas version from gsad. 2010-01-05 Matthew Mundell <matthew.mundell@greenbone.net> Convert the GET_CONFIGS "nvt_selector" attribute to an "export" attribute. Add importing of entire configs to CREATE_CONFIG. Use a cleaner style of passing data between the parser callbacks for the import implementation, as a start towards using a cleaner data passing mechanism throughout. * src/tasks_sql.h (insert_nvt_selectors, config_insert_preferences) (create_config_rc): New functions. (create_config): Move body to create_config_rc. Reimplement to expect full config. (update_config_caches): Add config arg. Update caller. * src/manage.h: Adjust headers accordingly. (array_t, preference_t, nvt_selector_t): New types. * src/omp.c (array_add): Convert string arg type to gpointer. (free_array): Add NULL check. (array_reset, preference_new, nvt_selector_new) (create_config_data_reset, command_data_init): New functions. (import_config_data_t, create_config_data_t, command_data_t): New type. (command_data, create_config_data, import_config_data): New variables. (client_state_t): Add GET_CONFIGS import states. (omp_xml_handle_start_element, omp_xml_handle_end_element): Convert GET_CONFIGS "nvt_selectors" to "export", which responds with data suitable for import. Add CREATE_CONFIG import handling. (omp_xml_handle_text): Add CREATE_CONFIG import handling. (init_omp): Initialise command_data. 2010-01-05 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/omp.c (print_report_latex): Fixed size issues in service/port per host overview table by shortening text that is displayed when page breaks within the table occur. 2010-01-04 Matthew Mundell <matthew.mundell@greenbone.net> Add an option to OMP command GET_CONFIGS for getting the NVT selectors of the configs. * src/tasks_sql.h (NVT_SELECTOR_TYPE_ALL, NVT_SELECTOR_TYPE_FAMILY) (NVT_SELECTOR_TYPE_NVT, NVT_SELECTOR_TYPE_ANY): Move to tasks_sql.h. (init_nvt_selector_iterator): Export. Add config argument. (nvt_selector_iterator_include, nvt_selector_iterator_nvt) (nvt_selector_iterator_name): Export. (nvt_selector_iterator_type): New function. * src/manage.h: Update headers accordingly. * src/omp.c (current_int_4): New variable. (omp_xml_handle_start_element): Store GET_CONFIGS nvt_selectors attribute. (omp_xml_handle_end_element): In CLIENT_GET_CONFIGS respond with NVT selectors according to nvt_selectors attribute. 2010-01-04 Felix Wolfsteller <felix.wolfsteller@greenbone.net> In PDF report, enabled page-breaks in service/port per host overview table. Initial commit, size issues still exists (e.g. table header bigger than table). * src/omp.c (print_report_latex): Use longtable environment instead of tabularx environment when printing the service per host overview table. 2010-01-04 Felix Wolfsteller <felix.wolfsteller@greenbone.net> In PDF report, enabled page-breaks in result overview table. * src/omp.c (print_report_latex): Use longtable environment instead of tabularx environment when printing the result overview table. 2010-01-04 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Fixed bug that could result in endless loops in pdf report generation. * src/omp.c (next_break): Corrected position of remembered last space character in input string. (latex_print_verbatim_text): Removed ampersand condition, as we are in verbatim environment. (print_report_latex): Removed done todo, minor style edit. 2009-12-31 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP command TEST_ESCALATOR. * src/manage.h (escalate): New header. (MANAGE_EXAMPLE_TASK_UUID): New definition. * src/tasks_sql.h (escalator_condition, escalator_method, escalate): New functions. (email): Add from_address arg. Rename address to to_address. (escalate_1): New function, renamed from escalate. Pass from address from method data to email. (event): Call escalate_1 instead of escalate. (init_manage): Use MANAGE_EXAMPLE_TASK_UUID to create example task. * src/omp.c (help_text): Add TEST_ESCALATOR. (client_state_t): Add TEST_ESCALATOR states. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Handle TEST_ESCALATOR. * src/tests/omp_help_0.c (help_text): Add TEST_ESCALATOR. 2009-12-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h: Replace SQL END with ROLLBACK. 2009-12-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_help_0.c (help_text): Match to current value. * src/tests/omp_get_configs_0.c, src/tests/omp_get_configs_1.c, src/tests/omp_get_configs_3.c, src/tests/omp_get_configs_2.c: Clear expected NVT growing state for "Full and fast". * src/tests/omp_get_status_5.c: Add config, escalator and target entities to expected response. * src/tests/omp_create_lsc_credential_1.c, src/tests/omp_delete_lsc_credential_0.c, src/tests/omp_create_lsc_credential_0.c, src/tests/omp_get_lsc_credentials_0.c: Add LOGIN to CREATE_LSC_CREDENTIAL. * src/tests/omp_start_task_4.c: Swap success and failure. * src/tests/omp_get_lsc_credentials_1.c, src/tests/omp_get_lsc_credentials_2.c: New files. * src/tests/CMakeLists.txt: Add omp_get_lsc_credentials_1 and omp_get_lsc_credentials_2. 2009-12-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (where_levels): Neaten doc formatting. * src/ompd.c (serve_omp): Just read and log a character on select exception, instead of failing. Recalculate nfds after recreating the scanner session. * src/omp.c (omp_xml_handle_end_element): Correct entity name in error message. In the task start mechanism prevent the child from forking instead of the parent. (process_omp_client_input): Flag start_task children specially. * src/manage.c (start_task): Clear current report in the child on failure and in the parent always. 2009-12-30 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Applied patch from Vladimir Nadvornik to build static libraries only, as shared libs are neither installed nor used. * src/CMakeLists.txt: Declared libraries as static. 2009-12-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_escalator_task_iterator) (init_target_task_iterator, init_config_task_iterator): Leave out hidden tasks. (init_manage): Use %u to insert task status. Correct example task config. Init status of example report. 2009-12-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (make_report): Add status arg. Use as initial status of report. (create_report): Add status arg. Pass to make_report. * src/manage.c (start_task): Create report with requested status, as the fork additions have moved the report task association to the end of the function. 2009-12-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_escalator_iterator): Add name arg. Update caller. (init_escalator_task_iterator, escalator_task_iterator_name) (escalator_task_iterator_uuid): New functions. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_start_element): Get name attrib for GET_ESCALATORS. (omp_xml_handle_end_element): In CLIENT_GET_ESCALATORS return task list if name attribute is present. 2009-12-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (manage_set_config_preference) (manage_set_config_nvts, manage_set_config_families): Return 1 if the config is in use. * src/omp.c (omp_xml_handle_end_element): In CLIENT_MODIFY_CONFIG respond with error if config is in use. 2009-12-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/ovas-mngr-comm.c (sendn_to_server, write_string_to_server) (write_to_server_buffer): Add actual data to tracing. 2009-12-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (lsc_credential_iterator_in_use): Correct column. (init_lsc_credential_target_iterator) (lsc_credential_target_iterator_name): New functions. * src/manage.h: Add headers accordingly. * src/omp.c (omp_xml_handle_end_element): Rename variable targets to credentials. Send targets using the credential with each credential in list version. 2009-12-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (collate_ip_compare, collate_ip): New functions. (init_manage_process): Add SQL collation function collate_ip. (init_host_iterator): Order by hosts with IP collation. 2009-12-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (collate_threat): New function. (condition_met): Call collate_threat to compare threats. 2009-12-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_target_iterator): Add name arg. (init_target_task_iterator, target_task_iterator_name) (target_task_iterator_uuid): New functions. * src/manage.h: Update headers accordingly. * src/omp.c (omp_xml_handle_start_element): Get name attrib for GET_TARGETS. (omp_xml_handle_end_element): In CLIENT_GET_TARGETS return task list if name attribute present. 2009-12-25 Matthew Mundell <matthew.mundell@greenbone.net> * CMakeLists.txt (OPENVASMD_DATABASE_VERSION): New variable. * doc/CMakeLists.txt: Add database version to db PNG and HTML. * src/CMakeLists.txt: Pass OPENVASMD_DATABASE_VERSION to compiler. * src/tasks_sql.h: Replace DATABASE_VERSION with OPENVASMD_DATABASE_VERSION. 2009-12-25 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (nvt_selectors): Add id field. (targets): Add id field. (tasks): Describe description. Refer to config and target by id. 2009-12-25 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (agents, escalator_condition_data) (escalator_event_data, escalator_method_data, escalators) (task_files, task_escalators, nvt_preferences): New tables. (meta): Add field id. Add type to name. (nvt_selectors): Add field family. (targets): Add fields comment and lsc_credential. (config): Add comment and cache fields. (tasks): Add fields hidden, description, run_status, start_time, end_time, Move field comment up. (reports): Add fields hidden and scan_run_status. (report_hosts): Add fields attack_state, current_port and max_port. (lsc_credentials): Add fields login, password, public_key and private_key. Rename dog to exe. 2009-12-25 Matthew Mundell <matthew.mundell@greenbone.net> Add new condition "Threat level at least". * src/manage.c (escalator_data): Declare. (escalator_condition_name, escalator_condition_from_name): Add new condition. (escalator_condition_description): New function. * src/manage.h (escalator_condition_t): Add new condition. (escalator_condition_description): New header. * src/tasks_sql.h (escalate): Use condition description instead of name in email body. (condition_met): Add escalator arg. Add check for new condition. Update caller. (task_last_report_id, task_second_last_report_id): Correct doc. (task_threat_level): New function. 2009-12-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (email): Add simple implementation. (escalate): Add newline to body. 2009-12-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (event_description): New function. * src/manage.h: Add header. * src/tasks_sql.h (escalate): Flesh out email. 2009-12-24 Matthew Mundell <matthew.mundell@greenbone.net> Add escalator support, including OMP commands CREATE_ESCALATOR, DELETE_ESCALATOR and GET_ESCALATORS, and CREATE_TASK element ESCALATOR. * src/manage.c (escalator_condition_name, event_name) (escalator_method_name, escalator_condition_from_name, event_from_name) (escalator_method_from_name): New function. * src/tasks_sql.h (create_tables): Add tables escalator_condition_data, escalator_event_data, escalator_method_data, escalators and task_escalators. (create_escalator, delete_escalator, find_escalator) (init_escalator_iterator, escalator_iterator_escalator) (escalator_iterator_name, escalator_iterator_comment) (escalator_iterator_event, escalator_iterator_condition) (escalator_iterator_method, escalator_iterator_in_use) (init_escalator_data_iterator, escalator_data_iterator_name) (escalator_data_iterator_data, escalator_data, email, escalate) (event_applies, condition_met, event): New functions. (set_task_run_status, task_escalator, add_task_escalator): Add event. (delete_task): Delete escalator. * src/manage.h: Add headers accordingly. (escalator_t, event_t, escalator_method_t, escalator_condition_t): New types. * src/omp.c (help_text): Add escalator commands. (client_state_t): Add escalator states. (omp_xml_handle_start_element, omp_xml_handle_start_element) (omp_xml_handle_text): Handle new commands for escalators. 2009-12-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (create_tables): Sort better. 2009-12-24 Matthew Mundell <matthew.mundell@greenbone.net> Switch the global OMP array variables to GPtrArrays. * src/tasks_sql.h (member): Switch array to GPtrArray. (manage_set_config_nvts): Switch selected_nvts to GPtrArray. (manage_set_config_families): Switch families args to GPtrArray. * src/manage.h: Update headers accordingly. * src/omp.c (make_array, array_add, array_terminate): New functions. (free_array): Switch arg to GPtrArray. (current_array_1, current_array_2, current_array_3): Switch type to GPtrArray. (omp_xml_handle_start_element): Create arrays with make_array. (omp_xml_handle_end_element): Terminate arrays before use. Free arrays with free_array. Append to arrays with array_add. 2009-12-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (help_text): Sort. Correct article. * src/tasks_sql.h (set_task_run_status): Neaten doc. * src/manage.h [!TASKS_SQL] (lsc_credential_t): New type. 2009-12-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_help_0.c (help_text): Add agent commands. 2009-12-21 Matthew Mundell <matthew.mundell@greenbone.net> * doc/openvasmd.html, doc/openvasmd.8: New files. * doc/CMakeLists.txt: Remove groff comments. Prevent "clean" from removing extra documentation. (man, man-html): New targets. 2009-12-21 Michael Wiegand <michael.wiegand@greenbone.net> Post-release version bump. * CMakeLists.txt: Updated version number. 2009-12-21 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 0.9.8 release. * CHANGES: Updated. 2009-12-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_AGENT require an installer. 2009-12-21 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * CMakeLists.txt: Don't ignore necessary files when creating the source tarball. 2009-12-17 Matthew Mundell <matthew.mundell@greenbone.net> Complete support for creating agent with associated files. * src/tasks_sql.h (create_agent): Add installer and howto args. Expect the installer and howtos to be base64 encoded already. (init_agent_iterator): Remove comma from SQL. * src/manage.h: Update header. * src/omp.c (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add installer and howto entities to CREATE_AGENT. 2009-12-18 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Add agent support. * src/tasks_sql.h (agent_t): New type. (create_tables): Added "agents" table. (create_agent, delete_agent, init_agent_iterator, agent_iterator_name) (agent_iterator_comment, agent_iterator_installer) (agent_iterator_howto_install, agent_iterator_howto_use, agent_name): New functions. * src/manage.h: Added protos accordingly. * src/omp.c (help_text, client_state_t): Extended with agent commands/states. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Added handling for agent commands. 2009-12-18 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Changed installation destination for openvasmd_report_html.xsl as proposed by Stephan Kleine. * src/CMakeLists.txt: Install openvasmd_report_html.xsl to datadir instead of sysconfdir. * src/omp.c (omp_xml_handle_end_element): Adjusted to changed location of openvasmd_report_html.xsl 2009-12-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_config_task_iterator, config_task_iterator_name) (config_task_iterator_uuid): New functions. * src/manage.h: Add headers. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_STATUS send config and target with task. In CLIENT_GET_CONFIGS send list of tasks that use the config. 2009-12-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_STATUS send sort information back with task list. 2009-12-17 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Revived VERSION file, as its present in other modules, too. * VERSION.in: Template for the VERSION file. * CMakeLists.txt: Do not add the template files to package, configure the VERSION file. 2009-12-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (process_otp_scanner_input): In SCANNER_SERVER correct scanner state for "DEBUG". 2009-12-16 Matthew Mundell <matthew.mundell@greenbone.net> Add message counts to GET_REPORT XML response. * src/tasks_sql.h (REPORT_COUNT): Take report arg instead of using report UUID variable. (report_counts_id): New function. (report_counts): Call through to report_counts_id. * src/manage.h: Add header. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORT add message counts to XML format response. 2009-12-16 Matthew Mundell <matthew.mundell@greenbone.net> Add filtered count to OMP GET_REPORT XML report. * src/tasks_sql.h (where_levels): New function. (init_result_iterator): Move levels WHERE calc to where_levels. (report_scan_result_count): Add a levels arg. * src/manage.h: Update header. * src/omp.c (omp_xml_handle_end_element): In the XML case of CLIENT_GET_REPORT add a filtered count to SCAN_RESULT_COUNT. 2009-12-16 Matthew Mundell <matthew.mundell@greenbone.net> Add database migration from version 7 to 8. * src/tasks_sql.h (migrate_7_to_8): New function. (database_migrators): Add migrate_7_to_8. 2009-12-16 Matthew Mundell <matthew.mundell@greenbone.net> Separate credential name and login name for LSC credentials. * src/tasks_sql.h (DATABASE_VERSION): Increase to 8, for changes to table lsc_credentials. (create_tables): Add login column to lsc_credentials. (create_lsc_credential): Add login param. (init_lsc_credential_iterator): Include login. (lsc_credential_iterator_login): New function. Adjust positions of other accessors accordingly. * src/manage.h: Add headers. * src/manage.c (start_task): Send login to scanner instead of name. * src/omp.c (client_state_t): Add CLIENT_CREATE_LSC_CREDENTIAL_LOGIN. (omp_xml_handle_start_element, omp_xml_handle_start_element) (omp_xml_handle_text): Add login to LSC credential handling. 2009-12-15 Matthew Mundell <matthew.mundell@greenbone.net> * CMakeLists.txt: Add fullstop to Description. 2009-12-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_NVT_DETAILS all case cleanup iterator afterwards. 2009-12-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h: Put nvt_selectors before nvts when joining these tables in SQL, as suggested by Michael Wiegand. (create_tables): Add indexes on nvt_selectors and nvts. ANALYZE after creating table. 2009-12-15 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Made the openvasmd and doxygen- generated documentation aware of the svn revision in the same way as the package does already. That means, in analogy to the source_package target, only if configured with -DPREPARE_RELEASE=1 no revision number will occur in the version string. Note that this works at configure time, thus you have to execute `cmake [OPTIONS] .` to update revision/version numbers in the documentation and as answer to `openvasmd --version`. * VERSION: Removed, mechanism replaced by cmake-based one. * CMakeLists.txt: Do not read in content of VERSION, use CPACK_PACKAGE_VERSION instead. Configure the two Doxyfiles. Added TODO about missing checks (pkg-config, sqlite3). * doc/Doxyfile, doc/Doxyfile_full: Removed. Are generated in configure step. * doc/Doxyfile.in, doc/Doxyfile_full.in: New. Used to generate doc/Doxyfile and doc/Doxyfile_full during configure step with automatically updated project version number. 2009-12-01 Michael Wiegand <michael.wiegand@greenbone.net> Post-release version bump. * VERSION: Set to 0.9.8.SVN. * CMakeLists.txt: CPACK_PACKAGE_VERSION_PATCH updated. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. 2009-12-01 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 0.9.7 release. * VERSION: Set to 0.9.7. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. * CHANGES: Updated. 2009-12-07 Tim Brown <timb@openvas.org> * src/omp.c: Fixed up some free()s. 2009-12-02 Michael Wiegand <michael.wiegand@greenbone.net> Fixed a bug which caused NVT selections in non-growing families to be wrongly calculated. * src/tasks_sql.h (manage_set_config_nvts): Defer determining the old NVT count until we know whether the family is growing or not, hand the correct growing flag to nvt_selector_nvt_count (). 2009-12-01 Michael Wiegand <michael.wiegand@greenbone.net> Post-release version bump. * VERSION: Set to 0.9.7.SVN. * CMakeLists.txt: CPACK_PACKAGE_VERSION_PATCH updated. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. 2009-12-01 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 0.9.6 release. * VERSION: Set to 0.9.6. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. * CHANGES: Updated. 2009-12-01 Michael Wiegand <michael.wiegand@greenbone.net> Set up an empty scan config as template for new configs. * src/tasks_sql.h (init_manage): Make sure the scan config 'empty' exists, create it if it does not. (delete_config): Refuse to delete 'empty'. (config_in_use): Set 'empty' as in use. 2009-11-30 Michael Wiegand <michael.wiegand@greenbone.net> Post-release version bump. * VERSION: Set to 0.9.6.SVN. * CMakeLists.txt: CPACK_PACKAGE_VERSION_PATCH updated. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. 2009-11-30 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 0.9.5 release. * VERSION: Set to 0.9.5. * CMakeLists.txt: CPACK_PACKAGE_VERSION_PATCH updated. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. * CHANGES: Updated. 2009-11-28 Matthew Mundell <matthew.mundell@greenbone.net> As a quick way around the very long OMP START_TASK response time, fork the manager when starting a task, respond in the parent, and let the child slowly start the task. * src/manage.c (start_task): Set the task status early, so that other processes know that the task is being started. Check and set the task status in an atomic block. Fork a child to do the bulk of the work, so that the current process can return to respond to the client. * src/omp.c (current_error, forked): New variables. (omp_xml_handle_end_element): Use forked to prevent the client-serving process from forking more than once. Use globals to return fork status to process_omp_client_input. (init_omp_process): Init forked. (process_omp_client_input): Use globals to return fork status to caller. * src/ompd.c (recreate_session): If server_socket is zero skip freeing the session. (serve_omp): When process_omp_client_input has forked create a new scanner session in the parent so the child can use the old one, and end the client interaction in the child. Prevent closing and freeing the respective old sessions as this would affect the other branch of the fork because the actual session is forked. 2009-11-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (latex_print_verbatim_text): Print equal signs is separate verb environments that use dash to begin and end the environment. 2009-11-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_help_0.c (help_text): Add new commands. 2009-11-27 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * CMakeLists.txt: Switched method of svn revision extraction to "offline" check. 2009-11-27 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * CMakeLists.txt: Made wording more consistent. 2009-11-27 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/tasks_sql.h: Minor doc improvement. 2009-11-27 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * CMakeLists.txt: At configure time, add svn revision to version number if PREPARE_RELEASE flag is not set. 2009-11-26 Matthew Mundell <matthew.mundell@greenbone.net> Try to stabilise the verbatim LaTeX printing. * src/omp.c (next_break): Remove extra nchars-- from "\r" case. Return one more than the newline when a newline ends the line so that the caller finds the newline before wrapping. Try improve the doc comment. Document the code. Init last_space to -1, as 0 is a valid value for last_space. Move the line_width check into the while loop so that it need only be done once. Do the counter increments inside each case instead of decrementing just to be incremented. Make the prefix operators postfix to match the rest of the module and general convention. Use an else for the '\\' case instead of breaking in the other branches, to make the behaviour more explicit for the reader. (latex_print_verbatim_text): Increment pos before calling next_break on finding a newline, otherwise next_break will just find the same newline. Improve the doc comment. Document the code. Do the counter increments inside each case instead of decrementing just to be incremented. Make the prefix operators postfix to match the rest of the module and general convention. Use an else for the '\\' case instead of breaking in the other branches, to make the behaviour more explicit for the reader. 2009-11-26 Matthew Mundell <matthew.mundell@greenbone.net> * CMakeLists.txt: Make formatting more consistent. Add missing .SVN to version. Streamline TODO. Match the dependency checks to the other check in the module. Turn build verbosity back on. 2009-11-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c: Include string.h, which was previously included via ossp/uuid.h via manage.h via otp.h. 2009-11-26 Matthew Mundell <matthew.mundell@greenbone.net> When updating the cache, remove preferences before inserting them. * src/tasks_sql.h (nvt_selector_family_count): Correct return doc. (manage_nvt_preference_add): Add option to remove preference before inserting it. * src/otp.c (parse_scanner_preference_value): Send remove flag to manage_nvt_preference_add according to cache mode. * src/manage.h: Update header. 2009-11-26 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * CMakeLists.txt: Corrected version string change that was left over from debugging. 2009-11-26 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Fixing certain wrong installation locations that could be set through cmake. This partly fixes bug #1206 (http://bugs.openvas.org/1206). * CMakeLists.txt: Respect SYSCONF_INSTALL_DIR if set. 2009-11-26 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage.c (make_report_uuid): Minor reformatting, and replace incorrect call to isnull with call to uuid_is_null. 2009-11-26 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Changed checks for used libraries, with help of Matthew Mundell. * CMakeLists.txt: Removed explicit PATH specification in find_library calls, removed respective todo. Replaced check for libopenvas by check for libopenvas_base. 2009-11-26 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Changed used library for UUID generation from ossp-uuid to libuuid from e2fsprogs. * src/manage.h: Removed include. src/manage.c, src/splint.h: Changed include. src/manage.c (make_report_uuid): Use functionality from libuuid rather than from ossp-uuid. src/CMakeLists.txt, src/test/CMakeLists.txt: Changed library to link against. 2009-11-25 Matthew Mundell <matthew.mundell@greenbone.net> Make --update update the cache a single item at a time, locking the database only around the modification of each item. Add a new option, --rebuild, which completely rebuilds the cache from scratch, locking the database for the entire duration of the rebuild. * src/openvasmd.c (main): Add --rebuild option. * src/ompd.c (init_ompd): Update param doc. (write_to_scanner): Add update states by refering to ompd_nvt_cache_mode. (serve_omp): Set ompd_nvt_cache_mode directly from client_socket, which determines which update mode to use. Add update states to select setup. * src/omp.c (init_omp_process): Update param doc. * src/tasks_sql.h (init_manage_process): Update param doc. Only remove NVT and preference caches when rebuilding the cache. Move COMMIT to manage_complete_nvt_cache_update. (make_nvt_from_nvti): Add argument to control removal of NVT before inserting. (manage_complete_nvt_cache_update): Add mode argument; COMMIT if rebuild. * src/manage.h: Update headers. * src/otp.h (scanner_init_state_t): Add new states. * src/otp.c (parse_scanner_preference_value): Add update state. (parse_scanner_plugin_list_tags): Pass NVT removal flag. (process_otp_scanner_input): Add update states. In particular, pass mode to manage_complete_nvt_cache_update. * README: Update usage message. 2009-11-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (start_task): Only do the credential iteration if the target has a credential. 2009-11-25 Matthew Mundell <matthew.mundell@greenbone.net> Add support for per-NVT timeout preferences. * src/omp.c (send_nvt): Add timeout arg. Update callers. (omp_xml_handle_end_element): In CLIENT_GET_NVT_DETAILS and CLIENT_GET_NVT_DETAILS send TIMEOUT in PREFERENCES and NVT. In CLIENT_MODIFY_CONFIG_PREFERENCE_VALUE initialise the string that will hold the value, so that it is always some string when the OMP caller sends a VALUE and only NULL if the caller leaves out VALUE entirely. * src/tasks_sql.h (config_nvt_timeout): New function. (manage_set_config_preference): Enable the preference removal section. Remove type decoration in removal section for scanner preferences. 2009-11-25 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Added stubs for dependency checks during configure/build time. Fixes bug #1208 (http://bugs.openvas.org/1208) for certain environments. * CMakeLists.txt: Added stubs for (dependency) checks for glib2, gnutls, openvas-libraries, pcap, gpgme and uuid. 2009-11-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (manage_set_config_preference): Strip type decorations off names of scanner preferences. If nvt is NULL assume the preference is a SERVER_PREF. (nvt_preference_iterator_config_value): Select any type of preference, so that server preferences are selected too. 2009-11-23 Michael Wiegand <michael.wiegand@greenbone.net> Post-release version bump. * VERSION: Set to 0.9.5.SVN. * CMakeLists.txt: CPACK_PACKAGE_VERSION_PATCH updated. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. 2009-11-23 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 0.9.4 release. * VERSION: Set to 0.9.4. * CMakeLists.txt: CPACK_PACKAGE_VERSION_PATCH updated. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. * CHANGES: Updated. 2009-11-23 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/omp.c (latex_header): Added fix to allow special characters like umlauts in latex/pdf reports. 2009-11-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (nvt_selector_plugins): Implement outstanding cases by iterating over NVT's per family. Hence take config instead of selector. (start_task): Pass config to nvt_selector_plugins. 2009-11-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (copy_config): Correct format type in SQL string. 2009-11-20 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage.c (latex_print_verbatim_text): Escape ampersands, as we are in a tabular environment. 2009-11-20 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage.c (start_task): Corrected preference string to send for (SMB) local security checks . 2009-11-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (manage_set_config_nvts): Determine whether to include or exclude by checking if the family is growing in the selector, instead of checking for an "all" or "family include" in the selector. 2009-11-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORT for the "html" and "html-pdf" formats, convert in a directory and remove the directory after sending the report. 2009-11-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (check_is_dir, file_utils_rmdir_rf): New functions. (omp_xml_handle_end_element): In CLIENT_GET_REPORT process the LaTeX in a directory and remove the directory after sending the report. 2009-11-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (create_tables_version_4): New function. (migrate_4_to_5): Call create_tables_version_4 to create the tables. 2009-11-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (migrate_6_to_7): Add fullstop to comment. * src/manage.c (start_task): Remove space from beginning of preference name. 2009-11-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (collate_message_type): Heed lengths in comparisons. Reverse order: Medium is less than High, etc. * src/omp.c (compare_ports_desc, compare_ports_asc): Switch arg order. 2009-11-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (target_lsc_credential_name): Add missing sql_string arg. (init_lsc_credential_iterator): Doc missing arg. * ChangeLog: Format migrator entry like others. 2009-11-19 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage.c (start_task): Corrected preference strings for "credential" preferences to send. 2009-11-19 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Add database migration from version 6 to 7. * src/tasks_sql.h (migrate_6_to_7): Added migrator that adds the new column in targets table. (database_migrators): Added migrator. Declared a section of the documentation as section for doxygen. 2009-11-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_LSC_CREDENTIALS add TYPE to LSC_CREDENTIALS. 2009-11-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (create_target, target_lsc_credential_name): Use lsc_credential_t for credential. (delete_lsc_credential): Enable in use check. 2009-11-19 Matthew Mundell <matthew.mundell@greenbone.net> Add IN_USE to OMP GET_LSC_CREDENTIALS response. Move GET_TARGETS credential name into NAME entity. * src/tasks_sql.h (init_lsc_credential_iterator): Add "in use" field. (lsc_credential_iterator_in_use): New function. * src/manage.h: Add header. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_LSC_CREDENTIALS send IN_USE with credential. In CLIENT_GET_TARGETS move credential name into NAME entity. 2009-11-19 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage.c (send_config_preferences): Renamed parameter and local variable to avoid confusion. (start_task): Made trace message more explicit. 2009-11-19 Matthew Mundell <matthew.mundell@greenbone.net> Add support for creating password-only credentials and for associating credentials with targets. * src/tasks_sql.h (DATABASE_VERSION): Increase to 7, for changes to table targets. (init_manage): Add column lsc_credential to table targets. (create_target): Take credential parameter. (init_target_iterator): Add lsc_credential column. (target_iterator_lsc_credential, target_lsc_credential_name) (lsc_credential_name): New functions. (create_lsc_credential): Add given_password argument. * src/manage.h: Update and add headers. (lsc_credential_t): New type. * src/omp.c (client_state_t): Add new LSC states. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add PASSWORD to CREATE_LSC_CREDENTIAL. Add LSC_CREDENTIAL to CREATE_TARGET. Add LSC_CREDENTIAL to GET_TARGETS response. * src/manage.c (start_task): Send credential preferences if there's a credential linked to the target. 2009-11-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_manage): Set requested and running reports to stopped. 2009-11-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_nvt_preference_iterator): Order by name ascending. 2009-11-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_NVT_DETAILS and CLIENT_GET_CONFIGS send empty PREFERENCE VALUEs when type is password. 2009-11-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h: Format migration procedure like other comments. Add a description of NVT selectors. 2009-11-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (clude): Skip NVT if NVT or NVT family is missing from cache. (nvt_selector_nvt_count): Remove handling of NULL family in the family case. 2009-11-17 Matthew Mundell <matthew.mundell@greenbone.net> Improve migrators. * src/tasks_sql.h: Add comment with procedure for writing a migrator. (migrate_0_to_1, migrate_1_to_2, migrate_3_to_4): Check version inside transaction. (migrate_2_to_3): Check version inside transaction. Ensure table lsc_credentials exists. Add missing public_key and private_key columns. Make exe column text. (migrate_4_to_5): Check version inside transaction. Ensure tables nvt_preferences and task_files exist. (migrate_5_to_6_move_other_config): New function. (migrate_5_to_6): Check version inside transaction. Succeed even if the predefined configs are missing. Move any configs having the predefined ID's. 2009-11-16 Matthew Mundell <matthew.mundell@greenbone.net> Add database migration from version 5 to 6. Remove predefined config "Empty and fast". * src/tasks_sql.h (migrate_5_to_6): New function. (database_migrators): Add migrate_5_to_6. (init_manage): Remove config "Empty and fast". (update_config_caches): New function, body from manage_complete_nvt_cache_update. (manage_complete_nvt_cache_update): Call update_config_caches. 2009-11-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (insert_rc_into_config): Also cache the config counts in the growing case. 2009-11-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (switch_representation): Free selector after last use. Free quoted_selector. 2009-11-15 Matthew Mundell <matthew.mundell@greenbone.net> Implement toggling of whether new families are added. * src/tasks_sql.h (copy_config): Free selector. (switch_representation): Implement. (nvt_selector_family_growing): Neaten formatting. (nvt_selector_remove_selector): Add NVT_SELECTOR_TYPE_ALL case. (nvt_selector_add): Correct comment. (manage_set_config_families): Move BEGIN before representation switch. Proceed with modification after switching. Also set new_nvt_count for the generating growing_all case. 2009-11-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (set_db_version): Remove out of date assertion. (migrate_0_to_1, migrate_1_to_2, migrate_2_to_3, migrate_3_to_4): Enclose update in transaction. (migrate_5_to_6): Move version number update into transaction. 2009-11-14 Matthew Mundell <matthew.mundell@greenbone.net> Update cached config counts after caching the NVT's. * src/tasks_sql.h (manage_complete_nvt_cache_update): New function. (nvt_selector_family_count): Recalculate the count intead of returning the cached value. (config_family_count, config_nvt_count): New functions. Return cached values. (nvt_selector_family_selected_count): Rename to nvt_selector_count. Update callers. (nvt_selector_nvt_count): Rename to config_nvt_count. Now new function renamed from nvt_selector_count. If family is NULL return count for all families. (nvt_selector_families_growing, nvt_selector_nvts_growing): Make static. (nvt_selector_nvts_growing_2): Ensure return is at most 1. (init_family_iterator): Note when param is used in doc. (select_config_nvts): Improve return doc. (manage_set_config_families): Cleanup family iterator before exit. * src/manage.h: Update headers. * src/omp.c (omp_xml_handle_end_element): Call config_family_count, config_nvt_count and nvt_selector_nvt_count instead of nvt_selector_family_count, nvt_selector_nvt_count and nvt_selector_family_selected_count. * src/otp.c (process_otp_scanner_input): In SCANNER_PREFERENCE_NAME cache mode exit, call manage_complete_nvt_cache_update. 2009-11-13 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP commands GET_NVT_FAMILIES and MODIFY_CONFIG. Correct and complete most of the NVT selector implementation. Add a COPY_CONFIG alternative to OMP's CREATE_CONFIG. Extend and improve OMP's CLIENT_GET_NVT_DETAILS and GET_CONFIGS. * src/tasks_sql.h (DATABASE_VERSION): Increase to 6, for predefined config ID's and addition of count caching to growing configs. (NVT_SELECTOR_TYPE_ANY): New define. (member, copy_config, manage_set_config_preference) (manage_set_config_nvts, switch_representation, family_count) (nvt_selector_nvts_growing_2, nvt_selector_remove) (nvt_selector_remove_selector, nvt_selector_add, family_is_selected) (nvt_selector_has, manage_set_config_families): New functions. (init_manage): Set predefined config ID's to fixed values. Add new config "Empty and fast". (init_nvt_iterator): Add iteration of an entire family. Add missing ORDER BY. (nvt_cache_present): Remove. Cache is always present. Remove from callers. (family_nvt_count): Add counting of all NVT's in all families. (nvt_selector_nvts_growing): Call nvt_selector_nvts_growing_2. (nvt_selector_family_count, nvt_selector_nvt_count): Simply read cached value. (init_family_iterator): Add iteration of all families. Correct behaviour. (nvt_selector_family_growing): Correct "all" case. (nvt_selector_family_selected_count): Account for excluded NVT's in growing case. (select_config_nvts): Add missing cases and correct existing ones. (nvt_preference_iterator_real_name): Add example. Include any trailing colon in the name for consistency. * src/manage.h: Add headers for new functions. * src/omp.c (free_array): New function. (help_text): Add GET_NVT_FAMILIES and MODIFY_CONFIG. (current_array_1, current_array_2, current_array_3): New variables. (client_state_t): Add states for new commands. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add GET_NVT_FAMILIES and MODIFY_CONFIG handling. Add a COPY_CONFIG alternative to CREATE_CONFIG. Add NVT name and ID and radio alternatives to CLIENT_GET_NVT_DETAILS when given an NVT. In the CLIENT_GET_NVT_DETAILS all case, also count preferences when just a family is given. In GET_CONFIGS pass family growth to init_family_iterator and nvt_selector_family_growing instead of nvt growth, always call into the library to get the family selected count, and send alternative values for radios in separate entities. * src/manage.c (nvt_selector_plugins): Add temporary notes. 2009-11-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c: Make brief comments single lines. Move todos out of doc comments so the doc is easier to read. Match some formatting to the rest of the module. (latex_print_text, latex_escape_text): Remove. Can be added back if needed. 2009-11-13 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/omp.c (send_to_client): Fixed currently not evaluated code, declared parameter const. (latex_header): Enabled color for log messages in latex/pdf report. 2009-11-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (manage_db_version): Check version instead of number. 2009-11-10 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Improved pdf reports. Text of issues like "security warning" is printed verbatim. To allow for page breaks in issue tables, put one verbatim line into one row of the table. Break lines at 80 characters and do word wrapping. Indicate "artificial" line breaks with a special symbol. Indicate that tables were broken over pages. * src/omp.c (print_report_latex): Use more features of the longtable environment in latex/pdf report. (next_break): New. Used for the line and word wrapping in latex_print_verbatim_text. (latex_print_verbatim_text): New. Prints verbatim text, doing line and word wrapping. 2009-11-09 Michael Wiegand <michael.wiegand@greenbone.net> Post-release version bump. * VERSION: Set to 0.9.4.SVN. * CMakeLists.txt: CPACK_PACKAGE_VERSION_PATCH updated. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. 2009-11-09 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 0.9.3 release. * VERSION: Set to 0.9.3. * CMakeLists.txt: CPACK_PACKAGE_VERSION_PATCH updated. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. * CHANGES: Updated. 2009-11-06 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Improved pdf report generation: Use longtable environment for issues (like security hole, security warning etc.) to allow for tables across multiple pages. For tables to break across pages, text in the tables has to be put in multiple rows. Some issues persist, added respective todos. * src/omp.c (latex_print_text): Replace "\n" by linebreak/ row-termination "\\" instead of two newlines (print_report_latex): Use longtable instead of tabularx environment, added todos. 2009-11-06 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/omp.c (latex_print_text): New, extracted from latex_escape_text. Writes to file directly (bufferless) in contrast to memory. (latex_escape_text): Added todo, function might be obsolete. (print_report_latex): Use (new) latex_print_text. 2009-11-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_result_iterator): Include all levels if levels is NULL. Add level 'd' for type "Debug Message". Simplify the SQL if all levels are requested. * src/omp.c (omp_xml_handle_end_element): Ensure globals used for sort_field and levels attributes are cleared after commands. In CLIENT_GET_REPORT correct attribute name in error response, set levels to all levels if the attribute is NULL, add a 'd' entry in FILTERS and add a NULL check on current_name. 2009-11-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (latex_severity_colour): Replace openvas_text with openvas_report. (latex_header): Remove openvas_text. Match threat colours to GSA. (latex_footer): Correct typo. 2009-11-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_result_iterator): Add sorting and filtering args. * src/manage.h: Update headers. (collate_message_type): New header. * src/omp.c (compare_ports_desc, compare_ports_asc): New functions. (omp_xml_handle_start_element): Add sorting and filtering attributes to GET_REPORTS. (print_report_xml, print_report_latex): Add sorting args. Pass through sorting and filtering attributes to init_result_iterator. Remove LaTeX report hack which was filtering less important messages. (omp_xml_handle_end_element): For the XML report, include the filtering and sorting info in the response, add a port summary section. Pass sorting and filtering attributes to init_result_iterator. (omp_xml_handle_end_element): In CLIENT_GET_CONFIGS send OID with NVT in PREFERENCE. 2009-11-04 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Made the nbe output of manager and openvas-client more similar. * src/omp.c (omp_xml_handle_end_element): Do not put pipe symbol at the end of "result" lines. 2009-11-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (nvt_oid): New function. * src/manage.h: Add header. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_CONFIGS send OID with NVT in PREFERENCE. 2009-11-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_nvt_preference_iterator): Filter out client-specific and server_info preferences. 2009-11-03 Matthew Mundell <matthew.mundell@greenbone.net> Send preference counts with OMP GET_NVT_DETAILS and preferences with OMP GET_CONFIGS. * src/tasks_sql.h (nvt_preference_iterator_real_name): Return name anyway if sscanf fails to match. (nvt_preference_iterator_nvt, nvt_preference_count): New functions. * src/manage.h: Update headers. * src/omp.c (current_int_3): New variable. (omp_xml_handle_start_element): Add "preferences" attribute to GET_CONFIGS. (send_nvt): Send preference count from new arg pref_count. (omp_xml_handle_end_element): In CLIENT_GET_NVT_DETAILS check type exists before strcmp and send preference count with each NVT. In CLIENT_GET_CONFIGS send preferences according to "preferences" attribute. 2009-11-02 Matthew Mundell <matthew.mundell@greenbone.net> Send NVT preferences with OMP GET_NVT_DETAILS. * src/tasks_sql.h (init_config_pref_iterator, config_pref_iterator_name) (config_pref_iterator_value, nvt_preference_iterator_real_name) (nvt_preference_iterator_type, nvt_preference_iterator_config_value): New functions. (init_nvt_preference_iterator): Add name arg for getting prefs for given * src/manage.h: Update headers. * src/omp.c (omp_xml_handle_end_element): Update CLIENT_GET_PREFERENCES init_nvt_preference_iterator call. In CLIENT_GET_NVT_DETAILS send each NVT's prefs with the NVT when the config attribute is present. 2009-11-02 Matthew Mundell <matthew.mundell@greenbone.net> Add sorting parameters to most OMP data retrieval commands, for very basic sorting. * src/tasks_sql.h (init_iterator): Make sql a printf style format string. (select_config_nvts, init_task_iterator, init_target_iterator) (init_config_iterator, init_nvt_iterator, init_family_iterator) (select_config_nvts, init_lsc_credential_iterator): Add args that control sorting. Update all callers. * src/manage.h: Update headers. * src/manage.c: Update calls to init_task_iterator and init_nvt_iterator. * src/omp.c: Update iterator calls with sorting args. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add sort_field and sort_order attributes to GET_CONFIGS, GET_LSC_CREDENTIALS, GET_NVT_DETAILS, GET_TARGETS and GET_STATUS. 2009-10-31 Matthew Mundell <matthew.mundell@greenbone.net> Add config and family attributes to OMP GET_NVT_DETAILS, for getting NVT's in one family for a config. * src/tasks_sql.h (select_config_nvts): New function. (init_nvt_iterator): Add args for requesting from a family in a config only. Update all callers. * src/manage.h: Update header. * src/manage.c: Update call to init_nvt_iterator. * src/omp.c (omp_xml_handle_start_element, omp_xml_handle_end_element): Add config and family attributes to GET_NVT_DETAILS, to limit the list of NVT's. 2009-10-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h: Correct revision number in comment. 2009-10-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h: Update migrator comments about appending columns. 2009-10-31 Matthew Mundell <matthew.mundell@greenbone.net> Name columns explicitly in SELECT statements instead of using wildcards. This makes it safe for a migrator to add a missing column to the end of the table when create_table would have created the column somewhere before the end. * src/tasks_sql.h (init_result_iterator, init_host_iterator) (init_task_file_iterator, init_target_iterator, init_config_iterator) (init_preference_iterator, init_nvt_iterator, init_nvt_selector_iterator) (init_nvt_preference_iterator, init_lsc_credential_iterator): Name columns explicitly in SELECTs. (config_nvt_selector): Break long string. (COL_CONFIG_PREFERENCES__NAME, COL_CONFIG_PREFERENCES__VALUE) (COL_CONFIGS__NAME, COL_CONFIGS__NVT_SELECTOR, COL_CONFIGS__COMMENT) (COL_CONFIGS__FAMILIES_GROWING, COL_CONFIGS__NVTS_GROWING) (COL_LSC_CREDENTIALS__NAME, COL_LSC_CREDENTIALS__PASSWORD) (COL_LSC_CREDENTIALS__COMMENT, COL_LSC_CREDENTIALS__PUBLIC_KEY) (COL_LSC_CREDENTIALS__PRIVATE_KEY, COL_LSC_CREDENTIALS__RPM) (COL_LSC_CREDENTIALS__DEB, COL_LSC_CREDENTIALS__EXE) (COL_NVT_PREFERENCES__NAME, COL_NVT_PREFERENCES__VALUE) (COL_NVT_SELECTORS__NAME, COL_NVT_SELECTORS__NVT, COL_NVTS__OID) (COL_NVTS__VERSION, COL_NVTS__NAME, COL_NVTS__SUMMARY) (COL_NVTS__DESCRIPTION, COL_NVTS__COPYRIGHT, COL_NVTS__CVE, COL_NVTS__BID) (COL_NVTS__XREF, COL_NVTS__TAG, COL_NVTS__SIGN_KEY_IDS) (COL_NVTS__CATEGORY, COL_NVTS__FAMILY, COL_REPORT_HOSTS__HOST) (COL_REPORT_HOSTS__START_TIME, COL_REPORT_HOSTS__END_TIME) (COL_REPORT_HOSTS__ATTACK_STATE, COL_REPORT_HOSTS__CURRENT_PORT) (COL_REPORT_HOSTS__MAX_PORT, COL_TARGETS__NAME, COL_TARGETS__HOSTS) (COL_TARGETS__COMMENT, COL_TASK_FILES__NAME, COL_TASK_FILES__CONTENT): Remove. Revert to integers in all iterator access functions. 2009-10-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_report_iterator, init_result_iterator) (init_host_iterator, init_task_file_iterator, init_target_iterator) (init_config_iterator, init_preference_iterator, init_nvt_iterator) (init_nvt_selector_iterator, init_family_iterator) (init_nvt_preference_iterator, init_lsc_credential_iterator): Use init_iterator. (init_table_iterator): Remove. 2009-10-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/lsc_user.c (file_utils_copy_file): Correct check of g_file_get_contents return. (lsc_user_rpm_create): Rename oltap_path to generator_path. 2009-10-31 Matthew Mundell <matthew.mundell@greenbone.net> Add database migration from version 4 to 5. * src/tasks_sql.h: Move database column definitions up in file. (create_tables): New function, body from init_manage. (sql_insert, init_iterator, iterator_int64, iterator_string) (migrate_4_to_5_copy_data): New functions. (cleanup_iterator, next): Move up in file. (migrate_0_to_1, migrate_1_to_2, migrate_2_to_3, migrate_3_to_4): Make static. Improve comments. (migrate_4_to_5): Enable. Make static. Complete. (database_migrators): Enable 4 to 5 migrator. (init_manage): Move table creation to create_tables. 2009-10-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/splint.h (g_strfreev, g_key_file_free, g_string_free) (g_option_context_free): New headers, as in Administrator. * src/openvasmd.c: Include splint.h. 2009-10-29 Matthew Mundell <matthew.mundell@greenbone.net> Cleanup after static analysis. * src/ovas-mngr-comm.c (sendf_to_server): Declare variables at start of block. * src/tasks_sql.h: Include splint.h. Move variable declarations to block starts. Mark /*@unused@*/ params. Work around cpp string concatenation for splint. (init_manage): Free database_version. (make_task_rcfile): Remove name variable. (clude): Free formatted in same place as other prepare loops. (create_lsc_credential): Free rand and formatted. * src/splint.h: Include gnutls.h and uuid.h. (g_malloc, g_malloc0): Update types. (g_dir_read_name, g_dir_close, g_rand_new, g_rand_free): New headers. * src/oxpd.h (from_buffer_size): Add extern. * src/lsc_user.c: Include splint.h. Move variable declarations to block starts. (file_utils_rmdir_rf): Check error before using it. Free g_build_filename return. (file_utils_copy_file): Change bytes_written to a size_t. Check error before using it. (ssh_privkey_create, ssh_pubkey_create): Free command. (get_rpm_generator_path): Make return const. (lsc_user_rpm_create): Make oltap_path const. * src/lsc_user.h (lsc_user_all_create): Remove param names. * src/manage.c: Move variable declarations to block starts. (delete_reports): Cleanup iterator afterwards. (start_task): Free hosts. * src/manage.h [!TASKS_SQL]: Add dummy declarations for splint. (host_iterator_end_time): Remove duplicate declaration. * src/omp.c: Move variable declarations to block starts. Mark /*@unused@*/ params. (send_nvt): Work around macro for splint. (print_report_xml): Use fputs instead of fprintf for fixed string. (print_report_latex): Add RATS comments about fprintf args. (omp_xml_handle_end_element): Add RATS comments about system args. Remove duplicate free of description. * src/openvasmd.c: Move variable declarations to block starts. Mark /*@unused@*/ params. (accept_and_maybe_fork): Add RATS comment about signal arg. (main): Use char syntax for char literal 0. Free option_context. 2009-10-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (process_otp_scanner_input): Add RATS comments about sscanf field lengths. Put a fullstop on a comment. 2009-10-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (config_preference): Add the config to the query. (init_preference_iterator): Use "is NULL" instead of "= NULL" in query. (nvt_selector_family_count): Add the growing case where there is an "all" selector with only "include" selectors. (nvt_selector_nvt_count): Add naive handling of the growing case where there is an "all" selector with other selectors. (nvt_selector_family_selected_count): Handle NULL family for static selection. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_CONFIGS handle the NULL family, rename FAMILY/SELECTED_COUNT to FAMILY/NVT_COUNT and FAMILY/NVT_COUNT to FAMILY/MAX_NVT_COUNT, and add MAX_NVT_COUNT and KNOWN_NVT_COUNT to the config. 2009-10-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (start_task): Set current_scanner_task before task run status, so that report run status is set with task run status. 2009-10-26 Matthew Mundell <matthew.mundell@greenbone.net> Add an id column to each table to force VACUUM to respect ROWID. This makes it safe to use ROWID as a foreign key. * src/tasks_sql.h (DATABASE_VERSION): Increase to 5, for new id columns. (init_manage): Add an id column to every table with constraints INTEGER PRIMARY KEY. [0] (migrate_4_to_5): Add outline of 4 to 5 migrator. (COL_CONFIG_PREFERENCES__NAME, COL_CONFIG_PREFERENCES__VALUE) (COL_CONFIGS__NAME, COL_CONFIGS__NVT_SELECTOR, COL_CONFIGS__COMMENT) (COL_CONFIGS__FAMILIES_GROWING, COL_CONFIGS__NVTS_GROWING) (COL_LSC_CREDENTIALS__NAME, COL_LSC_CREDENTIALS__PASSWORD) (COL_LSC_CREDENTIALS__COMMENT, COL_LSC_CREDENTIALS__PUBLIC_KEY) (COL_LSC_CREDENTIALS__PRIVATE_KEY, COL_LSC_CREDENTIALS__RPM) (COL_LSC_CREDENTIALS__DEB, COL_LSC_CREDENTIALS__EXE) (COL_NVT_PREFERENCES__NAME, COL_NVT_PREFERENCES__VALUE) (COL_NVT_SELECTORS__NAME, COL_NVT_SELECTORS__NVT, COL_NVTS__OID) (COL_NVTS__VERSION, COL_NVTS__NAME, COL_NVTS__SUMMARY) (COL_NVTS__DESCRIPTION, COL_NVTS__COPYRIGHT, COL_NVTS__CVE, COL_NVTS__BID) (COL_NVTS__XREF, COL_NVTS__TAG, COL_NVTS__SIGN_KEY_IDS) (COL_NVTS__CATEGORY, COL_NVTS__FAMILY, COL_REPORT_HOSTS__HOST) (COL_REPORT_HOSTS__START_TIME, COL_REPORT_HOSTS__END_TIME) (COL_REPORT_HOSTS__ATTACK_STATE, COL_REPORT_HOSTS__CURRENT_PORT) (COL_REPORT_HOSTS__MAX_PORT, COL_TARGETS__NAME, COL_TARGETS__HOSTS) (COL_TARGETS__COMMENT, COL_TASK_FILES__NAME, COL_TASK_FILES__CONTENT): New defines. Use instead of integers in all iterator access functions. 2009-10-26 Matthew Mundell <matthew.mundell@greenbone.net> Add database migration from version 3 to 4. * src/tasks_sql.h (nvt_selector_iterator_name): New header. (migrate_3_to_4, nvt_selector_iterator_name): New functions. (database_migrators): Enable 3 to 4 migration. (init_nvt_selector_iterator): If name is NULL do all selectors. 2009-10-26 Matthew Mundell <matthew.mundell@greenbone.net> Add database migration from version 2 to 3. * src/tasks_sql.h (migrate_2_to_3): New function. (database_migrators): Enable 2 to 3 migration. 2009-10-26 Michael Wiegand <michael.wiegand@greenbone.net> Post-release version bump. * VERSION: Set to 0.9.3.SVN. * CMakeLists.txt: CPACK_PACKAGE_VERSION_PATCH updated. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. 2009-10-26 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 0.9.2 release. * VERSION: Set to 0.9.2. * CMakeLists.txt: CPACK_PACKAGE_VERSION_PATCH updated. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. * CHANGES: Updated. 2009-10-26 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/otp.c (process_otp_scanner_input): In OTP, NVT descriptions do not contain newlines, they are instead replaced by semicolons. Undo this before descriptions enter nvti structures and ultimately the database. 2009-10-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_lsc_credentials_0.c, src/tests/omp_create_lsc_credentials_0.c, src/tests/omp_create_lsc_credentials_1.c, src/tests/omp_delete_lsc_credential_0.c: Remove underscores and spaces from LSC names. 2009-10-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/lsc_user.c (ssh_privkey_create): Quote passwords for openssl. 2009-10-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (create_lsc_credential): Check that name is all alphanumeric. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_LSC_CREDENTIAL handle name error. 2009-10-24 Matthew Mundell <matthew.mundell@greenbone.net> In LSC generator, improve command exit checking and pass args around directly instead of via a structure. * src/lsc_user.c (ssh_privkey_create): Make args const. (ssh_pubkey_create): Make args const. Add function to tracing. (lsc_user_rpm_create): Take user name and public key path directly. Check command exit status properly. (execute_alien): Check command exit status properly. Separate function exit variable from command exit. (lsc_user_deb_create): Take user name directly. Free the lowercased name. (lsc_user_all_create): Pass parameters to functions directly, instead of using a login structure. 2009-10-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/lsc_user.c: Add fullstops to a few comments. Convert printfs to g_debugs. 2009-10-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/lsc_user.c: Make docs and comments consistent. 2009-10-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/lsc_user.c: Tidy. Match formatting to standard. 2009-10-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (collate_message_type): New function. (init_manage_process): Create collate_message_type collation. (init_result_iterator): Order types with collation collate_message_type. 2009-10-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (print_report_latex): Skip Log and Debug messages. 2009-10-23 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/omp.c (latex_severity_heading, print_report_latex): Use High/Medium/Low terms. 2009-10-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/lsc_user.c (ssh_privkey_create, ssh_pubkey_create): Make return int. (ssh_key_create): Remove. (lsc_user_all_create): Call key create functions directly. Access paths with variables. 2009-10-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/lsc_user.c: Remove alternate sections. Add missing __FUNCTION__ args to g_debug's. 2009-10-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/lsc_user.c: Replace show_error with g_debug, remove gettext _. 2009-10-23 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/omp.c (print_report_latex): Better avoidance of overlong pages. 2009-10-23 Matthew Mundell <matthew.mundell@greenbone.net> Cleanup LSC package generation a bit. * src/lsc_user.c: Cleanup some indenting and comments. Add some tracing. (ssh_pubkey_create): Remove existence check. Quote some command args. Free GError. (ssh_key_create_unlink_files): Remove. (get_rpm_generator_path): Use new location and name for RPM generator. Just search in one place. (lsc_user_rpm_create): Create temp dir with mkdtemp. Use new name for RPM generator. Make rmdir failure an error. (lsc_user_all_create): Create temp dir for keys. Free mem and remove dirs on exit. * CMakeLists.txt (DATADIR, OPENVAS_DATA_DIR): New variables. * src/CMakeLists.txt: Define OPENVAS_DATA_DIR if possible. 2009-10-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (accept_and_maybe_fork): Set SIGCHLD handler to SIG_DFL in child. (main): Revert SIGCHLD handler to SIG_IGN. 2009-10-23 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/omp.c (latex_header, latex_footer, print_report_latex): Generalized LaTeX-based PDF Report (not "OpenVAS"-specific). Also added table of contents. 2009-10-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_preferences_2.c: Correct test number. 2009-10-23 Matthew Mundell <matthew.mundell@greenbone.net> Add families to NVT selectors in database when creating selectors from RC file. * src/tasks_sql.h (clude): Add a families arg. Insert the NVT family in families and the database. (insert_rc_into_config): Let clude do the families inserting. (nvt_selector_family_growing): Correct column name in SQL. 2009-10-23 Matthew Mundell <matthew.mundell@greenbone.net> Extend OMP GET_CONFIGS for retrieving a single config with a summary of the selected families. * src/tasks_sql.h (DATABASE_VERSION): Increase to 4, for change to nvt_selectors. (init_manage): Add row family to nvt_selectors. (init_config_iterator): Add name arg. (family_nvt_count, init_family_iterator, family_iterator_name) (nvt_selector_family_growing, nvt_selector_family_selected_count): New functions. * src/manage.h: Update headers. * src/omp.c (omp_xml_handle_start_element, omp_xml_handle_end_element): Add name and families attributes to GET_CONFIGS. 2009-10-22 Matthew Mundell <matthew.mundell@greenbone.net> Add generation of LSC user keys and packages (RPM and Debian). Extend OMP GET_LSC_CREDENTIALS for retrieving packages. * src/lsc_user.c, src/lsc_user.h: New files. Key and package generation. * src/CMakeLists.txt (manage): Add lsc_user.c. * src/openvasmd.c (main): Enable SIGCHLD. Neaten some formatting. (serve_client): Goto fail case if read_protocol failed completely. (cleanup): Neaten some formatting. * src/tasks_sql.h (DATABASE_VERSION): Increase to 3 for changes to lsc_credentials table. (init_manage): Add password column to table lsc_credentials, rename column dog to exe, make the package columns of type text. (clude): Change sqlite3_bind_text free function to SQLITE_TRANSIENT. (create_lsc_credential): Create keys and packages. (init_lsc_credential_iterator): New function. (lsc_credential_iterator_password, lsc_credential_iterator_public_key) (lsc_credential_iterator_private_key, lsc_credential_iterator_rpm) (lsc_credential_iterator_deb, lsc_credential_iterator_exe): New functions. (lsc_credential_iterator_comment): Update column number. * src/manage.h: Update headers. * src/omp.c (omp_xml_handle_start_element, omp_xml_handle_end_element): Add name and format flags to GET_LSC_CREDENTIALS. 2009-10-21 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/openvasmd.c (cleanup, main): Factored out pidfile management. 2009-10-21 Matthew Mundell <matthew.mundell@greenbone.net> Add database migration from version 1 to 2. * src/tasks_sql.h (migrate_0_to_1): Clarify note slightly. (migrate_1_to_2): New function. (database_migrators): Enable 1 to 2 migration. (init_manage): Note that db may still need an update after migration. 2009-10-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_manage): Init current_credentials. 2009-10-20 Matthew Mundell <matthew.mundell@greenbone.net> Add database migration from version 0 to 1. * src/tasks_sql.h (manage_db_version): Correct doc. (set_db_version): New function. (migrate_0_to_1): Enable, and add implementation. (database_migrators): Enable 0 to 1 migration. (init_manage): Use set_db_version. * ChangeLog: Add actual versions at DATABASE_VERSION changes. Replace indent spaces with tabs. 2009-10-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h: Bring docs up to date. Remove docs from DEF_ACCESS invocations so that they're all the same. 2009-10-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_preferences_0.c: Expect success always, now that the manager only loads if the preferences are cached. 2009-10-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_start_task_0.c: Also expect REPORT_ID in response. 2009-10-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_status_5.c: Add FINISHED to REPORT_COUNT in expected response. 2009-10-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (cleanup): Add comment to #endif. 2009-10-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (manage_nvt_preference_add): Make args const. * src/manage.h: Update header. 2009-10-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (parse_scanner_preference_value): Only add the preference when in caching mode. (process_otp_scanner_input): After successfully parsing a preference, free current_scanner_preference and set it NULL. 2009-10-19 Michael Wiegand <michael.wiegand@greenbone.net> Post-release version bump. * VERSION: Set to 0.9.2.SVN. * CMakeLists.txt: CPACK_PACKAGE_VERSION_PATCH updated. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. 2009-10-19 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 0.9.1 release. * VERSION: Set to 0.9.1. * CMakeLists.txt: CPACK_PACKAGE_VERSION_PATCH updated. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. * CHANGES: Updated. 2009-10-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (report_counts): Swap infos and warnings. (task_infos_size): Count Notes instead of Warnings. (task_notes_size): Remove. (task_warnings_size): New function. * src/manage.h: Update header. * src/omp.c (omp_xml_handle_end_element): Call task_warnings_size instead of task_notes_size. 2009-10-19 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/omp.c (convert_to_newlines): Handle backslashes not followed by 'n' or 'r' correctly. 2009-10-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (result_type_threat): New function. (omp_xml_handle_end_element): In CLIENT_GET_REPORT change the XML report TYPE to THREAT. 2009-10-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (send_to_client): Temporarily add conversion of msg from iso_8859-1 to utf-8, to catch iso chars originating from the OTP messages. 2009-10-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (rc_preference): Check whether there is a value to duplicate after an equal sign. 2009-10-16 Matthew Mundell <matthew.mundell@greenbone.net> Include report ID in OMP START_TASK response. * src/tasks_sql.h (create_report): Add report_id output arg. * src/manage.c (start_task): Add report_id output arg. Pass to create_report. * src/manage.h: Update header. * src/omp.c (omp_xml_handle_end_element): In CLIENT_START_TASK add report ID to OK response. 2009-10-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (set_task_parameter): Remove all task files when setting RC file. 2009-10-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (get_files_to_send): Cleanup a little formatting. (start_task): Update LSC comment. 2009-10-15 Felix Wolfsteller <felix.wolfsteller@greenbone.net> Do not do any logic when sending files, just send all we have in the db. * src/manage.c (files_append_lsc): Removed, replaced by get_files_to_send. (get_files_to_send): New, creates a list of files to send. (preference_value, send_config_preferences): Do not modify list of files to send. (start_task): Do not collect list of files to send via calls to preference_value and files_append_lsc, but use new get_files_to_send instead. 2009-10-15 Michael Wiegand <michael.wiegand@greenbone.net> Make sure the parent pidfile is only removed when the parent exits. * src/openvasmd.c: Introduce global is_parent indicator. (accept_and_maybe_fork): Set is_parent to 0 in the child immediately after forking. (cleanup): Check if this process is the parent before removing the pidfile. 2009-10-13 Matthew Mundell <matthew.mundell@greenbone.net> Add parsing of NVT category from OTP. * src/otp.c: Include openvas/nvt_categories.h. (category_number): New function. (process_otp_scanner_input): In SCANNER_PLUGIN_LIST_CATEGORY set the category number according to the OTP field. * src/tasks_sql.h (DATABASE_VERSION): Increase to 2, due to nvts category column type specification. (init_manage): Specify type for category column in table nvts. (make_nvt_from_nvti): Insert category as int. (nvt_iterator_category): Change return to int. * src/manage.h: Update header. * src/omp.c: Include openvas/nvt_categories.h. (category_name): New function. (send_nvt): Convert category number into name. 2009-10-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Free modify_task_file. 2009-10-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (delete_task): Delete task files too. 2009-10-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (manage_task_update_file): Add missing arg to sql call. 2009-10-12 Matthew Mundell <matthew.mundell@greenbone.net> Add a --database option. * src/tasks_sql.h (manage_migrate, init_manage_process, init_manage): Add database arg. Use to init database. Update callers. * src/manage.h: Update headers. * src/omp.c (init_omp, init_omp_process): Add database arg. Update callers. * src/omp.h: Update headers. * src/ompd.c (init_ompd, serve_omp): Add database arg. Update callers. * src/ompd.h: Update headers. * src/openvasmd.c (database): New variable. (main): Add --database. 2009-10-09 Matthew Mundell <matthew.mundell@greenbone.net> Add FILE to OMP MODIFY_TASK, for clients to send files referenced by preferences. Associate files with tasks instead of with configs. * src/otp.c (process_otp_scanner_input): Handle OTP FILE_ACCEPTED. * src/ovas-mngr-comm.c (sendn_to_server): Switch message type to void. * src/ovas-mngr-comm.h: Update header. * src/omp.c (current_name, modify_task_file): New variables. (client_state_t): Add CLIENT_MODIFY_TASK_FILE. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add MODIFY_TASK FILE handling. * src/tasks_sql.h (init_manage): Rename table config_files to task_files, associating the file with a task instead of a config. (manage_task_update_file, manage_task_remove_file) (init_task_file_iterator, task_file_iterator_content) (task_file_iterator_length): New functions. (init_config_file_iterator, config_file_iterator_content) (config_file_iterator_length): Remove. * src/manage.c (send_task_file): New function. Renamed from send_config_file. Adjust for new task-file association. * src/manage.h: Update headers. 2009-10-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (latex_escape_text): Replace $\backslash with $\\backslash in string literals. Adjust the backslash case to move the correct portion of the string forward, and to move the character pointer to the correct final location. 2009-10-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (report_notes, report_warnings): Add missing args to calls. 2009-10-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (report_holes): Add missing arg to call. 2009-10-09 Matthew Mundell <matthew.mundell@greenbone.net> Add support for storing files referenced in preferences, and sending of the files to the scanner. * src/tasks_sql.h (init_manage): Add table config_files. (init_config_file_iterator, config_file_iterator_content) (config_file_iterator_length): New functions. * src/manage.c (preference_value): Add file type parsing, which pushes file onto new arg "files". (send_config_preferences): Pass files list through. (send_config_file): New function. (start_task): Send files gathered with sending preferences. * src/manage.h: Add new headers. 2009-10-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (preference_value): New function. Handles radio preference type parsing. (send_config_preferences): Get actual value of preference with preference_value. 2009-10-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (set_task_parameter): Free rc on fail. Moving setting the task description and targets to precede filling the config, as insert_rc_into_config modifies its rc argument. 2009-10-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (make_task_rcfile): Remove append of name. 2009-10-06 Tim Brown <timb@openvas.org> * src/otp.c: Fixed memory leak. 2009-10-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_manage): Log database versions on version failure. 2009-10-06 Matthew Mundell <matthew.mundell@greenbone.net> Complete database initialisation check started yesterday. * src/tasks_sql.h (init_manage): Add nvt_cache_mode arg. Update caller. Enable and complete database initialisation check. * src/manage.h: Update header. * src/omp.c (init_omp): Add nvt_cache_mode arg. Update caller. * src/omp.h: Update header. * src/ompd.c (init_ompd): Add nvt_cache_mode arg. Update caller. * src/ompd.h: Update header. * src/openvasmd.c (main): Add "must init" failure to init_ompd return checks. 2009-10-05 Matthew Mundell <matthew.mundell@greenbone.net> Move caching of NVT preferences to the database. * src/otp.h (scanner_init_state_t): Add SCANNER_INIT_DONE_CACHE_MODE. * src/ompd.c (init_ompd): In SCANNER_INIT_GOT_PLUGINS set scanner init to special cache done state when in cache mode. Add SCANNER_INIT_DONE_CACHE_MODE to error check. (serve_omp): Add SCANNER_INIT_DONE_CACHE_MODE to select setup. * src/otp.c (current_scanner_preferences, make_scanner_preferences) (add_scanner_preference): Remove. (init_otp_data): Remove scanner.preferences init. (parse_scanner_preference_value): Call manage_nvt_preference_add instead of add_scanner_preference. (process_otp_scanner_input): Add SCANNER_INIT_DONE_CACHE_MODE alongside SCANNER_INIT_DONE. In NVT cache mode, instead of exiting when the NVTs are cached, continue to read the preferences and exit after that. * src/tasks_sql.h (init_manage_process): Also clear NVT prefs. (init_manage): Add outline for database initialisation check. Add table nvt_preferences. (manage_nvt_preference_add, manage_nvt_preferences_enable) (init_nvt_preference_iterator, nvt_preference_iterator_name) (nvt_preference_iterator_value): New functions. * src/manage.h: Add headers. (scanner_t): Remove preferences slot. * src/omp.c (send_preference): Remove. (omp_xml_handle_end_element): In CLIENT_GET_PREFERENCES use new preferences iterator to send preferences. 2009-10-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c (recreate_session): Add openvas_server_free to fnctl fail. (serve_omp): Put the credential args the right way round. 2009-10-03 Matthew Mundell <matthew.mundell@greenbone.net> When parsing the OTP PREFERENCES, read in all the preferences before enabling them, otherwise OMP GET_PREFERENCES might return a partial set of preferences. * src/otp.c (current_scanner_preferences): New variable. (make_scanner_preferences): Return preferences instead of setting scanner. (add_scanner_preference): Set preference on a given preference table instead of on scanner.preferences. Update caller. (process_otp_scanner_input): Initialise current_scanner_preferences with the make_scanner_preferences return. In SCANNER_PREFERENCE_NAME set scanner.preferences to current_scanner_preferences. * src/tests/omp_get_preferences_2.c: New file. Tests that first two successful returns from GET_PREFERENCES are identical. * src/tests/CMakeLists.txt: Add omp_get_preferences_2. 2009-09-30 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Post-release version bump. * VERSION: Set to 0.9.1.SVN. * CMakeLists.txt: CPACK_PACKAGE_VERSION_PATCH updated. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. 2009-09-30 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Preparing the openvas-manager 0.9.0 release. * VERSION: Set to 0.9.0. * CMakeLists.txt: CPACK_PACKAGE_VERSION_PATCH updated. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. * CHANGES: Updated. 2009-09-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (DATABASE_VERSION): Increase to 1, for column added 2009-08-28. 2009-09-28 Matthew Mundell <matthew.mundell@greenbone.net> * CMakeLists.txt: Rename server to scanner in defs, to match code. * src/CMakeLists.txt: Rename server to scanner in defs, to match code. 2009-09-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_manage): Move targets table creation up. (delete_config, config_in_use): Special case predefined configs. 2009-09-28 Matthew Mundell <matthew.mundell@greenbone.net> * INSTALL: Note need for om user. 2009-09-28 Matthew Mundell <matthew.mundell@greenbone.net> * CMakeLists.txt: Set minimum cmake version to 2.6. 2009-09-28 Matthew Mundell <matthew.mundell@greenbone.net> * doc/db_postgres.sql (meta, nvts, lsc_credentials): New tables. (configs): Move up to match manager. 2009-09-28 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * doc/openvasmd.8.xml, README: Renaming openvasd to openvassd. 2009-09-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c, src/otpd.c: Add missing arg docs. 2009-09-25 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP commands CREATE_LSC_CREDENTIAL, DELETE_LSC_CREDENTIAL and GET_LSC_CREDENTIALS. * src/tasks_sql.h (init_manage): Create table lsc_credentials. (create_lsc_credential, delete_lsc_credential) (init_lsc_credential_iterator, lsc_credential_iterator_name) (lsc_credential_iterator_comment): New functions. * src/manage.h: Add headers. * src/omp.c (help_text): Add new commands. (client_state_t): Add new states. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add handling of new commands. * src/tests/omp_help_0.c: Update help text. * src/tests/omp_create_lsc_credential_0, src/tests/omp_create_lsc_credential_1, src/tests/omp_delete_lsc_credential_0, src/tests/omp_get_lsc_credentials_0: New files. * src/tests/CMakeLists.txt: Add omp_create_lsc_credential_0, omp_create_lsc_credential_1, omp_delete_lsc_credential_0 and omp_get_lsc_credentials_0. 2009-09-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd_log_conf.cmake_in (*): Send logs to openvasmd.log instead of openvas.log. 2009-09-25 Matthew Mundell <matthew.mundell@greenbone.net> Switch entirely to the openvas_server library interface for handling the client and scanner sessions. * src/openvasmd.c (client_session, client_credentials): New variables. (serve_client, accept_and_maybe_fork, main): Use openvas_server interface instead of ovas_scanner interface for the client session. Switch to openvas_server_new for the scanner session. Ensure that O_NONBLOCK is set on the scanner socket (as this was previously done in openvas_server_session_new). Remove initialisation of client session in NVT cache updating mode. (cleanup): Remove ovas_scanner_context cleanup. * src/otpd.c (serve_otp): Add credentials arg. Call openvas_server_free instead of close_stream_connection. * src/otpd.h: Add include. (serve_otp): Add args. * src/ompd.c (serve_omp): Add credentials arg. Call openvas_server_free instead of close_stream_connection. (recreate_session): Switch to openvas_server_free and openvas_server_new. Ensure O_NONBLOCK is set on the socket. * src/ompd.h (serve_omp): Add credential arg. * src/CMakeLists.txt (openvasmd): Remove LINK_FLAGS symbol hack for openvas_get_socket_from_connection. 2009-09-25 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/tests/common.h: Adjusted include. 2009-09-25 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/manage.c, src/manage.h, src/omp.c, src/otp.c, src/tests/common.h: Adjusted includes to recent changes in trunk (headers from openvas-libraries/base get installed to openvas/base/). 2009-09-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/rmdir_recursively_0.c, src/tests/rmdir_recursively_1.c: Remove. 2009-09-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_nvt_feed_checksum_1.c, src/tests/omp_get_nvt_details_4.c, src/tests/omp_get_nvt_feed_checksum_5.c, src/tests/omp_modify_report_0.c, src/tests/omp_get_status_2.c, src/tests/omp_get_status_4.c, src/tests/omp_get_nvt_all_1.c, src/tests/omp_get_report_5.c, src/tests/omp_start_task_1.c, src/tests/omp_get_report_7.c, src/tests/omp_start_task_3.c, src/tests/omp_delete_task_1.c, src/tests/omp_get_configs_2.c, src/tests/omp_get_rules_1.c, src/tests/omp_delete_report_0.c, src/tests/omp_get_preferences_1.c, src/tests/omp_get_nvt_details_1.c, src/tests/omp_get_nvt_feed_checksum_4.c, src/tests/omp_get_status_3.c, src/tests/omp_get_dependencies_1.c, src/tests/omp_abort_task_0.c, src/tests/omp_get_certificates_1.c, src/tests/omp_get_report_0.c, src/tests/omp_get_report_4.c, src/tests/omp_get_report_6.c, src/tests/omp_start_task_2.c, src/tests/omp_get_report_8.c, src/tests/omp_delete_task_0.c, src/tests/omp_delete_task_2.c, src/tests/omp_get_configs_3.c: Replace "server" with "scanner" everywhere. 2009-09-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c, src/omp.h, src/otp.c, src/ovas-mngr-comm.c, src/otpd.c, src/otp.h, src/tasks_sql.h, src/oxpd.c, src/oxpd.h, src/manage.c, src/omp.c, src/openvasmd.c, src/manage.h: Replace "server" with "scanner" everywhere. 2009-09-23 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/openvasmd.c: Replaced server by scanner, openvasd by openvassd. Reflect API change (openvas_server_context -> openvas_scanner_context). 2009-09-23 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/CMakeLists.txt: All libraries depend on libopenvas(base), added the 'libopenvas-config --cflag' to the compile flags. * src/ompd.c, src/otpd.c, src/oxpd.c: In comments, replaced 'Server' by 'Scanner', openvasd by openvassd. 2009-09-22 Matthew Mundell <matthew.mundell@greenbone.net> * doc/CMakeLists.txt (DOC_FILES): Remove string.c and file.c. * INSTALL: Update reference system to Lenny. Add space after fullstop. * README, src/tests/common.c: Correct doc typos. * src/omp.c, src/ompd.c, src/ovas-mngr-comm.c, src/otp.c, src/manage.c: In doc comments, put conditionals around macro function definitions and references to static functions. Doc a missing param. Refer to to_server more generically. * src/openvasmd.c (\mainpage): Update. (FORK): Doc. 2009-09-22 Matthew Mundell <matthew.mundell@greenbone.net> Remove the file library, which is out of use. * src/file.c, src/file.h: Remove. 2009-09-22 Matthew Mundell <matthew.mundell@greenbone.net> Remove the file library, which is out of use. * doc/Doxyfile, doc/Doxyfile_full: Remove file.c. * src/tests/CMakeLists.txt: Remove linkage to libfile. (rmdir_recursively_0, rmdir_recursively_1): Remove. * src/manage.c: Remove file.h include. * src/CMakeLists.txt: Remove file and string linkage. (libfile): Remove. (C_FILES): Remove file.c. 2009-09-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Ensure that before every g_base64_encode call there is a check that prevents passing NULL or an empty string to g_base64_encode. 2009-09-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd_log_conf.cmake_in: Match time prepend formats to openvas-libraries. (md string, libopenvas, libnasl, openvasd): Remove. (*): Add %t to prepend, to match other entries. * src/openvasmd.c (main): Remove g_log_set_handler calls, as that's what setup_log_handlers does. Rename NESSUS_ENCAPS_TLSv1 to OPENVAS_ENCAPS_TLSv1. 2009-09-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_create_task_2.c: Update predefined config name. 2009-09-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (setup_test): Set g_log_default_log_handler to openvas_log_func. * src/tests/omp_get_nvt_all_0.c, src/tests/omp_get_nvt_details_0.c, src/tests/omp_get_nvt_feed_checksum_0.c, src/tests/omp_get_nvt_feed_checksum_2.c: Add checks for successful responses. * src/tests/omp_create_task_3.c, src/tests/omp_start_task_3.c, src/tests/omp_delete_target_1.c: Correct predefined config names. * src/tests/omp_get_report_7.c: Correct heading typo. * src/tests/omp_get_rules_0.c: Update expected result. * src/tests/omp_create_task_4.c: Match expected target to RC. * src/tests/new_task_small__many_plugins_yes_rc: New file. Missing RC for omp_create_task_4. 2009-09-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_delete_target_0.c, src/tests/omp_get_targets_1.c, src/tests/omp_modify_task_0.c, src/tests/omp_get_nvt_details_0.c, src/tests/omp_get_nvt_feed_checksum_1.c, src/tests/omp_get_nvt_details_2.c, src/tests/omp_get_nvt_feed_checksum_3.c, src/tests/omp_get_nvt_details_4.c, src/tests/omp_get_nvt_feed_checksum_5.c, src/tests/omp_get_status_0.c, src/tests/omp_modify_report_0.c, src/tests/omp_get_status_2.c, src/tests/omp_get_dependencies_0.c, src/tests/omp_get_status_4.c, src/tests/omp_create_task_1.c, src/tests/omp_delete_config_0.c, src/tests/omp_create_task_3.c, src/tests/omp_get_nvt_all_1.c, src/tests/omp_get_certificates_0.c, src/tests/omp_create_target_0.c, src/tests/omp_get_report_1.c, src/tests/omp_get_report_3.c, src/tests/omp_get_report_5.c, src/tests/omp_start_task_1.c, src/tests/read_protocol_0.c, src/tests/omp_get_report_7.c, src/tests/omp_start_task_3.c, src/tests/omp_start_task_5.c, src/tests/omp_get_version_0.c, src/tests/omp_delete_task_1.c, src/tests/omp_get_configs_0.c, src/tests/omp_create_config_0.c, src/tests/omp_get_configs_2.c, src/tests/omp_get_rules_1.c, src/tests/omp_delete_report_0.c, src/tests/omp_commands_0.c, src/tests/omp_get_preferences_1.c, src/tests/omp_get_targets_0.c, src/tests/omp_delete_target_1.c, src/tests/omp_modify_task_1.c, src/tests/omp_get_nvt_feed_checksum_0.c, src/tests/omp_get_nvt_details_1.c, src/tests/omp_get_nvt_feed_checksum_2.c, src/tests/omp_get_nvt_details_3.c, src/tests/omp_get_nvt_feed_checksum_4.c, src/tests/omp_bogus_1.c, src/tests/omp_get_status_1.c, src/tests/omp_create_task_0.c, src/tests/omp_get_status_3.c, src/tests/omp_get_dependencies_1.c, src/tests/omp_create_task_2.c, src/tests/omp_get_status_5.c, src/tests/omp_delete_config_1.c, src/tests/omp_abort_task_0.c, src/tests/omp_create_task_4.c, src/tests/omp_get_nvt_all_0.c, src/tests/omp_get_certificates_1.c, src/tests/omp_get_report_0.c, src/tests/omp_create_target_1.c, src/tests/timeout_0.c, src/tests/omp_get_report_2.c, src/tests/omp_get_report_4.c, src/tests/omp_start_task_0.c, src/tests/omp_get_report_6.c, src/tests/omp_start_task_2.c, src/tests/omp_get_report_8.c, src/tests/omp_start_task_4.c, src/tests/omp_delete_task_0.c, src/tests/omp_delete_task_2.c, src/tests/omp_help_0.c, src/tests/omp_get_configs_1.c, src/tests/omp_get_rules_0.c, src/tests/omp_create_config_1.c, src/tests/omp_get_configs_3.c, src/tests/omp_delete_report_1.c, src/tests/omp_get_preferences_0.c: Use new openvas-library/omp interface names. 2009-09-18 Matthew Mundell <matthew.mundell@greenbone.net> Switch to openvas-libraries string functions. * src/string.h, src/string.c: Remove. * doc/Doxyfile_full, doc/Doxyfile: Remove string.c. * src/omp.c, src/otp.c, src/manage.c: Switch to openvas-libraries string functions. * src/CMakeLists.txt: Remove string library. * src/tests/CMakeLists.txt: Drop string linkage. * src/tests/common.h: Include openvas_string.h for tests. * src/tests/strip_space_3.c, src/tests/omp_get_targets_1.c, src/tests/omp_get_nvt_feed_checksum_1.c, src/tests/omp_get_nvt_feed_checksum_5.c, src/tests/omp_get_nvt_all_1.c, src/tests/omp_get_report_5.c, src/tests/omp_get_report_7.c, src/tests/omp_get_configs_0.c, src/tests/omp_get_configs_2.c, src/tests/strip_space_0.c, src/tests/strip_space_2.c, src/tests/omp_get_targets_0.c, src/tests/omp_get_nvt_feed_checksum_4.c, src/tests/omp_get_report_0.c, src/tests/omp_get_report_4.c, src/tests/omp_get_report_6.c, src/tests/omp_get_report_8.c, src/tests/omp_get_configs_1.c, src/tests/omp_get_configs_3.c, src/tests/strip_space_1.c: Switch tests to openvas-libraries string functions. 2009-09-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/ovas-mngr-comm.c (make_session, end_session) (connect_to_server): Remove. Replaced in openvas_server library. * src/openvasmd.c, src/otpd.c, src/ompd.c: Replace calls to make_session, end_session and connect_to_server with calls to the new openvas_server equivalents. 2009-09-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (OPENVASD_PORT): Set to 9391. (OPENVASMD_PORT): Set to 9390. (server_context): Remove. Rename to ovas_server_context. (ovas_server_context): New variable. Was server_context. (accept_and_maybe_fork): Note use of save_tasks. (main): Set manager_port instead of manager_address.sin_port when generating the port, otherwise the value is overwritten later. Set SO_REUSEADDR on manager socket. 2009-09-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_CONFIGS and CLIENT_GET_TARGETS add status attributes to responses. * src/tests/omp_get_configs_0.c, src/tests/omp_get_configs_1.c, src/tests/omp_get_configs_2.c, src/tests/omp_get_configs_3.c: Add status attribute checks. Update predefined config name and comment. Remove a family count check from omp_get_configs_3. * src/tests/omp_get_targets_0.c, src/tests/omp_get_targets_1.c: Add status attribute checks. 2009-09-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/CMakeLists.txt (OVAS_LDFLAG): Remove -lopenvas_omp. 2009-09-16 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/openvasmd.c (serve_client): Renamed call of nessus_get_socket_from_connection to openvas_get_socket_from_connection. * src/CMakeLists.txt: Renamed nessus_get_socket_from_connection to openvas_get_socket_from_connection. 2009-09-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (max_hosts): Handle dotted decimal CIDR addresses. Only subtract broadcast from count. * src/tests/omp_get_targets_0.c, src/tests/omp_get_targets_1.c: Adjust expected results. 2009-09-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (max_hosts): Subtract network and broadcast from count. 2009-09-15 Matthew Mundell <matthew.mundell@greenbone.net> Switch to OMP library in openvas-libraries. * src/tests/common.c (BUFFER_SIZE, TRACE, send_to_manager) (sendf_to_manager, context_data_t, make_entity, next_entities) (first_entities, add_entity, add_attribute, free_entity, entity_text) (entity_name, compare_entity_with_name, entity_child, entity_attribute) (buffer_start, buffer_point, buffer_end, add_attribute) (handle_start_element, handle_end_element, handle_text, handle_error) (read_entity_and_text, read_entity, foreach_print_attribute, print_entity) (print_entities, compare_find_attribute, compare_entities, DO_CHILDREN) (task_status, authenticate, env_authenticate, omp_create_task) (create_task, create_task_from_rc_file, start_task, wait_for_task_start) (wait_for_task_end, wait_for_task_stop, wait_for_task_delete, delete_task) (omp_get_status, omp_get_report, omp_delete_report, omp_delete_task) (omp_modify_task, omp_get_preferences, omp_get_certificates, omp_until_up) (omp_create_target, omp_delete_target, omp_create_config) (omp_create_config_from_rc_file, omp_delete_config): Remove. (connect_to_manager_host_port, close_manager_connection): Wrap library functions. * src/tests/common.h: Remove headers. * src/tests/CMakeLists.txt: Link to -lopenvas_omp. * src/tests/omp_abort_task_0.c, src/tests/omp_authenticate_0.c, src/tests/omp_bogus_0.c, src/tests/omp_bogus_1.c, src/tests/omp_commands_0.c, src/tests/omp_create_target_0.c, src/tests/omp_create_target_1.c, src/tests/omp_create_task_0.c, src/tests/omp_create_task_1.c, src/tests/omp_create_task_2.c, src/tests/omp_create_task_3.c, src/tests/omp_create_task_4.c, src/tests/omp_delete_config_1.c, src/tests/omp_delete_report_0.c, src/tests/omp_delete_report_1.c, src/tests/omp_delete_target_0.c, src/tests/omp_delete_target_1.c, src/tests/omp_delete_task_0.c, src/tests/omp_delete_task_1.c, src/tests/omp_delete_task_2.c, src/tests/omp_get_certificates_0.c, src/tests/omp_get_certificates_1.c, src/tests/omp_get_configs_0.c, src/tests/omp_get_configs_1.c, src/tests/omp_get_configs_2.c, src/tests/omp_get_configs_3.c, src/tests/omp_get_dependencies_0.c, src/tests/omp_get_dependencies_1.c, src/tests/omp_get_nvt_all_0.c, src/tests/omp_get_nvt_all_1.c, src/tests/omp_get_nvt_details_0.c, src/tests/omp_get_nvt_details_1.c, src/tests/omp_get_nvt_details_2.c, src/tests/omp_get_nvt_details_3.c, src/tests/omp_get_nvt_details_4.c, src/tests/omp_get_nvt_feed_checksum_0.c, src/tests/omp_get_nvt_feed_checksum_1.c, src/tests/omp_get_nvt_feed_checksum_2.c, src/tests/omp_get_nvt_feed_checksum_3.c, src/tests/omp_get_nvt_feed_checksum_4.c, src/tests/omp_get_nvt_feed_checksum_5.c, src/tests/omp_get_preferences_0.c, src/tests/omp_get_preferences_1.c, src/tests/omp_get_report_0.c, src/tests/omp_get_report_1.c, src/tests/omp_get_report_2.c, src/tests/omp_get_report_3.c, src/tests/omp_get_report_4.c, src/tests/omp_get_report_5.c, src/tests/omp_get_report_6.c, src/tests/omp_get_report_7.c, src/tests/omp_get_report_8.c, src/tests/omp_get_rules_0.c, src/tests/omp_get_rules_1.c, src/tests/omp_get_status_0.c, src/tests/omp_get_status_1.c, src/tests/omp_get_status_2.c, src/tests/omp_get_status_3.c, src/tests/omp_get_status_4.c, src/tests/omp_get_status_5.c, src/tests/omp_get_targets_0.c, src/tests/omp_get_targets_1.c, src/tests/omp_get_version_0.c, src/tests/omp_help_0.c, src/tests/omp_help_1.c, src/tests/omp_modify_report_0.c, src/tests/omp_modify_task_0.c, src/tests/omp_modify_task_1.c, src/tests/omp_start_task_0.c, src/tests/omp_start_task_3.c, src/tests/omp_start_task_4.c, src/tests/omp_start_task_5.c, src/tests/timeout_0.c: Use OMP interface from libraries. 2009-09-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/logf.h (LOG): Set to 0. That is, turn off compilation of communication logging. 2009-09-14 Matthew Mundell <matthew.mundell@greenbone.net> Create RC file in DB when creating a task from config and target. Update config and target when setting a task RC file. * src/tasks_sql.h: Add a static header declaration section. (make_task_rcfile, set_target_hosts, find_config): New function. (set_task_parameter): Update config and target in RCFILE case. (create_config): Add missing doc. * src/manage.h (make_task_rcfile): New export. * src/omp.c (omp_xml_handle_end_element): In the CLIENT_CREATE_TASK config and target case, generate the RC file. 2009-09-14 Matthew Mundell <matthew.mundell@greenbone.net> Keep the NVT cache in memory in each process, in an attempt to speed up family lookups when creating configs from RC files. * src/tasks_sql.h (nvti_cache): New variable. (init_manage): Load NVT cache from DB into memory. (insert_rc_into_config): Do the family lookup with nvti_cache and use the families hash table for counting only. Also only do the family lookup if the plugin is included ("yes"), and use a single SQL statement to cache all the config info. 2009-09-14 Matthew Mundell <matthew.mundell@greenbone.net> Add an rcfile attribute to OMP GET_STATUS, for getting task RC files. * src/omp.c (omp_xml_handle_start_element): Check for attribute. (omp_xml_handle_end_element): In CLIENT_GET_STATUS include rc file if attribute was set. * src/tests/common.c (omp_get_status): Add rcfile flag param. * src/tests/common.h: Update header. 2009-09-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (BUFFER_SIZE): Increase. (connect_to_manager_host_port): Neaten formatting. (create_task, omp_modify_task, omp_create_config): Check string lengths before passing them to g_base64_encode. 2009-09-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (send_nvt): Correct NVT name accessor. 2009-09-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Add missing CLIENT_MODIFY_TASK_NAME case. 2009-09-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In the CLIENT_GET_RULES case response with service down instead of internal error when server.rules is NULL. 2009-09-14 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * VERSION: Set to 0.8.2.SVN. * CMakeLists.txt: CPACK_PACKAGE_VERSION_PATCH updated. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. 2009-09-14 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 0.8.1 relase. * VERSION: Set to 0.8.1. * CMakeLists.txt: CPACK_PACKAGE_VERSION_PATCH updated. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. * CHANGES: Updated. 2009-09-11 Matthew Mundell <matthew.mundell@greenbone.net> * README: Fill paragraphs. Change test command back to the command that runs the test. 2009-09-11 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/types.h, src/tests/omp_get_report_1.c, src/tests/omp_get_report_2.c, src/tests/omp_get_report_3.c: Transferred Copyright from Intevation to Greenbone. * README: Reworked. 2009-09-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (max_hosts): Invert the sense of the mask. Use longs. (omp_xml_handle_end_element): Improve comments a bit. * src/tests/omp_get_targets_0.c: Correct figures. * src/tests/omp_get_targets_1.c: New file. * src/tests/CMakeLists.txt: Add omp_get_targets_1. 2009-09-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (nvt_selector_family_count): Use config name for config. 2009-09-04 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/openvasmd.c (main): Adjust to new API for SSL initialization. 2009-09-02 Matthew Mundell <matthew.mundell@greenbone.net> Add database migration support. * src/openvasmd.c (main): Add a migrate option. Add the supported database version to the version string. * src/tasks_sql.h (backup_db, restore_db, manage_db_supported_version) (manage_db_version, migrate_is_available, manage_migrate): New functions. (migrator_t): New type. (database_migrators): New variable. * src/manage.h: Update headers. 2009-09-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (task_second_last_report_id): Use scan_run_status as "finished" criterion, as task_last_report_id does. 2009-09-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (parse_server_error): Set the task state to Internal Error for E001. (process_otp_server_input): In SERVER_TIME_SCAN_END leave the task state as Internal Error when it is Internal Error. 2009-09-02 Matthew Mundell <matthew.mundell@greenbone.net> Add OTP ERROR handling. * src/otp.c (server_state_t): Add new state. (sync_buffer): Move up in file. (parse_server_error): New function. (process_otp_server_input): Handle OTP ERROR. 2009-09-02 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * VERSION: Set to 0.8.1.SVN. * CMakeLists.txt: CPACK_PACKAGE_VERSION_PATCH updated. 2009-09-02 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 0.8.0 relase. * VERSION: Set to 0.8.0. * CMakeLists.txt: CPACK_PACKAGE_VERSION_PATCH updated. * CHANGES: Updated. 2009-09-01 Matthew Mundell <matthew.mundell@greenbone.net> Switch START_TASK response to an error if the task is active. * src/manage.c (start_task): Return 1 if task is active. * src/omp.c (omp_xml_handle_end_element): In CLIENT_START_TASK respond with error if task is active. * src/tests/omp_start_task_5.c: New file. * src/tests/CMakeLists.txt: Add omp_start_task_5. 2009-09-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (setup_full_config_prefs): Switch to integers for the option args, to work around sending string literals to `sql'. Update callers. 2009-09-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (OPENVASMD_PORT): Change to 9390. 2009-09-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/CMakeLists.txt: Remove "-I .." from all COMPILE_FLAGS. Add libopenvas-config generated flags to OVAS_LDFLAGS and OVAS_CFLAGS. * src/CMakeLists.txt (openvasmd): Replace -lopenvas with OPENVAS_LDFLAGS in LINK_FLAGS. 2009-08-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/oxpd.c: Quote in cpp error message with double quotes. 2009-08-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c, src/tasks_sql.h, src/otp.c, src/manage.c: Refer to the "NULL" task ID with 0 instead of NULL. 2009-08-31 Matthew Mundell <matthew.mundell@greenbone.net> * CMakeLists.txt: Set project language. Add CMP0005 policy check. 2009-08-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (setup_full_config_prefs): Add parameters. (init_manage): Add more predefined configs. 2009-08-28 Matthew Mundell <matthew.mundell@greenbone.net> Add SCAN_RUN_STATUS to REPORTs, as a reliable way of telling if the associated task finished. * src/tasks_sql.h (init_manage): Make run_status in tasks an integer. Add a scan_run_status field to reports. (set_task_run_status): Also set the run_status in the current report. (task_first_report_id, task_last_report_id) (task_finished_report_count): Use scan_run_status to indicate report completion. (report_scan_run_status): New function. * src/omp.c (send_reports): Add SCAN_RUN_STATUS to REPORT for GET_STATUS, so clients can tell which reports completed. (omp_xml_handle_end_element): As above, for REPORT in XML GET_REPORT response. * src/manage.c (run_status_name): New function, body from task_run_status_name. (task_run_status_name): Call run_status_name. * src/manage.h (run_status_name, report_scan_run_status): New headers. (task_status_t): Add internal error state, so user can get name of internal error. 2009-08-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_result_iterator): Correct SQL. * src/tracef.h (ALL_LOG_LEVELS): Use G_LOG_LEVEL_MASK. 2009-08-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/CMakeLists.txt (openvasmd): Remove -lpcap. 2009-08-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_targets_0.c: Add MAX_HOSTS checks. 2009-08-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_delete_target_0.c: Correct comment. 2009-08-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd_report_html.xsl: Note error involving preceding. 2009-08-27 Matthew Mundell <matthew.mundell@greenbone.net> Make the GET_STATUS progress be attack-only and relative to the maximum number of hosts. * src/omp.c (omp_xml_handle_end_element): Base the GET_STATUS progress entirely on the attack progress, and make the attack progress relative to the maximum number of hosts defined by the task target instead of to the total number of hosts acknowledged by the scanner. * src/otp.c (server_state_t): Add SERVER_STATUS_PROGRESS. (process_otp_server_input): Read over portscan STATUS messages, instead of saving them the the database. 2009-08-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (max_hosts): New function. (omp_xml_handle_end_element): Add a MAX_HOSTS to GET_TARGET which is the number of hosts described by the target. 2009-08-27 Matthew Mundell <matthew.mundell@greenbone.net> Add a database version check. * src/tasks_sql.h (DATABASE_VERSION): New define. Version 0. (init_manage): Check database version. Ensure version is set. * src/omp.c (init_omp): Add version return to doc. * src/ompd.c (init_ompd): Add version return to doc. * src/openvasmd.c (main): Check init_ompd return for wrong version. 2009-08-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (task_first_report_id, task_finished_report_count): New functions. (task_last_report_id, task_second_last_report_id): Only consider completed reports. * src/manage.h: Add headers. * src/omp.c (omp_xml_handle_end_element): Use 1 indexing "start" in RESULTS in the GET_REPORT response. Add a FIRST_REPORT to the GET_STATUS response. Include a count of finished reports in the GET_STATUS report count. 2009-08-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Add a "max" attribute to RESULT in the GET_REPORT xml case. 2009-08-27 Matthew Mundell <matthew.mundell@greenbone.net> Add IN_USE element to responses from GET_TARGETS and GET_CONFIGS. * src/omp.c (omp_xml_handle_end_element): Add in_use to CLIENT_GET_TARGETS and CLIENT_GET_CONFIGS. * src/tasks_sql.h (target_in_use, config_in_use): New functions. (delete_target, delete_config): Use quoted target/config in SQL. * src/manage.h: Add headers. 2009-08-27 Matthew Mundell <matthew.mundell@greenbone.net> Make the "first_result" attrib of GET_REPORT index from 1. * src/omp.c (omp_xml_handle_start_element): Adjust current_int_1 for 0 indexing of iterator. * src/tests/omp_get_report_8.c: Increment "first_result". 2009-08-26 Matthew Mundell <matthew.mundell@greenbone.net> Add "first_result" and "max_start" attributes to GET_REPORTS. * src/tasks_sql.h (init_result_iterator): Add first_result and max_results args. Update callers. (report_scan_result_count): New function. * src/manage.h: Update headers. * src/omp.c (current_int_1, current_int_2): New variables. (omp_xml_handle_start_element, omp_xml_handle_end_element): Setup "first_result" and "max_start" for GET_REPORT init_result_iterator. Add a SCAN_RESULT_COUNT to the GET_REPORT REPORT and enclose the results in a RESULTS. * src/tests/omp_get_report_8.c: New file. * src/tests/CMakeLists.txt: Add omp_get_report_8. 2009-08-26 Matthew Mundell <matthew.mundell@greenbone.net> Add a COMMANDS OTP command. * src/omp.c (help_text): Add COMMANDS. (client_state_t): Add states for COMMANDS. (SEND_TO_CLIENT_OR_FAIL, SENDF_TO_CLIENT_OR_FAIL): Move up in file. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add COMMANDS handling. * src/tests/omp_help_0.c (help_text): Add COMMANDS. * src/tests/omp_commands_0.c: New file. * src/tests/CMakeLists.txt: Add omp_commands_0. 2009-08-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_manage): Ensure that the predefined database entries always exists. 2009-08-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (scan_start_time, scan_end_time): Return an empty string if the field is NULL, so that the resulting XML entity is empty. 2009-08-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c: Always free the returns from scan_start_time and scan_end_time. 2009-08-26 Matthew Mundell <matthew.mundell@greenbone.net> Prevent deletion of hidden tasks and reports. * src/tasks_sql.h (init_manage): Add hidden field to reports. (make_report): Init hidden field. (delete_report, delete_task, request_delete_task): Add hidden checks. * src/omp.c (omp_xml_handle_end_element): In CLIENT_DELETE_REPORT and CLIENT_DELETE_TASK respond with syntax error if report/task was hidden. 2009-08-25 Matthew Mundell <matthew.mundell@greenbone.net> Setup a predefined example task and report. * src/tasks_sql.h (init_manage): Add hidden field to task. Setup example task and report. (make_task): Init hidden field. (delete_task): Return error if task is hidden. 2009-08-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Add back progress calculation lost with tracing. 2009-08-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Add progress tracing to CLIENT_GET_STATUS. 2009-08-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/oxpd.c (read_protocol): Check for EINTR from select. * src/openvasmd.c (main): Check for EINTR from select. 2009-08-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (accept_and_maybe_fork): Add FORK define, for compiling to run in single process. 2009-08-24 Matthew Mundell <matthew.mundell@greenbone.net> Cache growing states of selectors in configs. * src/tasks_sql.h (init_manage): Add growing state caches to table configs. (insert_rc_into_config): Cache growing states afterwards. (config_iterator_families_growing, config_iterator_nvts_growing) (config_nvts_growing, config_families_growing): New functions. (nvt_selector_family_count, nvt_selector_nvt_count): Use cached growing states. (nvt_selector_nvts_growing, nvt_selector_families_growing): Try speed up. * src/manage.h: Add headers. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_CONFIGS get cached growing state from config. 2009-08-24 Matthew Mundell <matthew.mundell@greenbone.net> Switch response for creating an existing config to a user error. * src/tasks_sql.h (create_config): Return -1 if config exists. (create_target): Match return to create_config. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_CONFIG handle "config exists" return. 2009-08-24 Matthew Mundell <matthew.mundell@greenbone.net> Speed up creating a config and getting configs. * src/tasks_sql.h (init_manage): Add count caches to configs table. (insert_rc_into_config): Pre-allocate the arrays. Cache the family and NVT counts in the database. (nvt_cache_present, nvt_family, nvt_selector_families_growing) (nvt_selector_nvts_growing): Limit the SQL to one result. (nvt_selector_family_count, nvt_selector_nvt_count): Use cached count. * src/manage.h: Update headers. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_CONFIGS pass config name to NVT count functions. 2009-08-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (nvt_selector_family_count) (nvt_selector_nvt_count): Count static nvts and families in SQL instead of counting through the result of the SQL. 2009-08-21 Matthew Mundell <matthew.mundell@greenbone.net> Prevent deletion of a config/target if a task refers to the config/target. * src/tasks_sql.h (delete_config, delete_target): Fail if a task refers to the config/target. * src/omp.c (omp_xml_handle_end_element): In CLIENT_DELETE_CONFIG and CLIENT_DELETE_TARGET handle new delete_config/delete_target fail return. * src/tests/common.c (omp_create_task): New function. * src/tests/common.h: Add header. * src/tests/omp_delete_config_1.c, src/tests/omp_delete_target_1.c: New files. * src/tests/CMakeLists.txt: Add omp_delete_config_1 and omp_delete_target_1. 2009-08-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (nvt_cache_present): Correct column name in SQL. (nvt_selector_family_count): Add real family count for the All selector. 2009-08-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_start_task_4.c: New file. Tests starting a task when another task is already running on the same connection. * src/tests/CMakeLists.txt: Add omp_start_task_4. 2009-08-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (start_task): Fail if a task is already running. * src/omp.c (omp_xml_handle_end_element): In CLIENT_START_TASK add a response for the above failure and extend the start_task return checking. 2009-08-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (stop_task): Only stop the current task if it's the given task. 2009-08-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/README: Convert tabs to spaces. * src/tests/common.c, src/omp.c, src/manage.c: Add missing docs. * src/oxpd.c: Add missing docs. Add splint guard around #error. 2009-08-21 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * VERSION: Set to 0.7.1.SVN. * CMakeLists.txt: CPACK_PACKAGE_VERSION_PATCH updated. 2009-08-21 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 0.7.0 relase. * VERSION: Set to 0.7.0. * CMakeLists.txt: CPACK_PACKAGE_VERSION_PATCH updated. * CHANGES: Updated. * packaging/debian/control: Updated dependencies. 2009-08-21 Matthew Mundell <matthew.mundell@greenbone.net> When processing the server input perform any task stop requests received in other processes. * src/omp.c (process_omp_client_input): Add note about writing whole commands to to_server. * src/manage.c (manage_check_current_task): New function. * src/manage.h (manage_check_current_task): New header. * src/otp.c (process_otp_server_input): Call manage_check_current_task initially. 2009-08-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (set_scan_attack_state): Remove duplicate argument. * src/manage.h (host_iterator_attack_state): New header. * src/otp.c (process_otp_server_input): In SERVER_STATUS_ATTACK_STATE add check that there is a current report. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_STATUS send the portscan progress as first 50% and test progress as second 50%. 2009-08-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/logf.h (logf): Turn off comm logging and log error if fflush fails, instead of aborting. 2009-08-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (task_run_status_name): Capitalise all words of run statuses. * src/tests/omp_delete_task_2.c, src/tests/omp_delete_task_0.c: Match new run statuses. 2009-08-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (make_result): Quote description for SQL. 2009-08-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (main): Shorten --foreground description. * README: Describe the cache updating option. Update the usage message. * INSTALL: Increase library version. 2009-08-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_nvt_iterator): Add NVT arg. * src/manage.h (init_nvt_iterator): Add NVT arg. * src/manage.c (nvt_selector_plugins): Pass NVT to init_nvt_iterator. * src/omp.c (omp_xml_handle_end_element): Pass NVT to init_nvt_iterator. 2009-08-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (convert_to_newlines): New function. (omp_xml_handle_end_element): In CLIENT_GET_REPORT convert \n's in the XML result decriptions to real newlines. 2009-08-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (report_task): New function. * src/manage.h (report_task): New header. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_REPORT add report ID and task with ID and name to the XML report. 2009-08-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (process_otp_server_input): In SERVER_TIME_SCAN_START only set task properties if the task is in the requested state, as the task may also be in "stop requested" or "delete requested" states. 2009-08-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/ovas-mngr-comm.c (connect_to_server): Get error message from getsockopt return instead of errno. 2009-08-20 Matthew Mundell <matthew.mundell@greenbone.net> Add a permanent NVT cache. * src/tasks_sql.h (sql_quote): Rename to sql_nquote. Update callers. (sql_nquote, sql_quote, manage_has_nvts, nvts_size, nvts_md5sum) (set_nvts_md5sum, find_nvt, make_nvt_from_nvti) (init_nvt_iterator, nvt_iterator_oid, nvt_iterator_version) (nvt_iterator_name, nvt_iterator_summary, nvt_iterator_description) (nvt_iterator_copyright, nvt_iterator_cve, nvt_iterator_bid) (nvt_iterator_xref, nvt_iterator_tag, nvt_iterator_sign_key_ids) (nvt_iterator_category, nvt_iterator_family): New functions. (init_manage_process): Add clearing of NVT cache, controlled by param. (init_manage): Add meta and nvts tables. (nvt_family, nvt_selector_family_count, nvt_selector_nvt_count): Adjust for new NVT cache. * src/manage.h: Add new interfaces defined in tasks_sql.h. (server_t): Remove plugins. (nvt_t): New type. * src/manage.c (nvt_selector_plugins): Always return a list of all the plugins. (start_task): Expect all plugins as a list from nvt_selector_plugins. * src/omp.c (send_plugin): Switch to nvt iterator, rename send_nvt. (send_nvt): New function. (omp_xml_handle_end_element): In CLIENT_GET_NVT_ALL, CLIENT_GET_NVT_FEED_CHECKSUM and CLIENT_GET_NVT_DETAILS switch to new cache interface. (init_omp_process): Pass an update_nvt_cache flag through to init_manage_process. * src/otp.c (current_plugins): Remove. (init_otp_data): Remove server.plugins init. (parse_server_plugin_list_tags): Add nvti to database instead of to server.plugins. (process_otp_server_input): Remove current_plugins and server.plugins handling. On receiving the final plugin from a plugin list, set the md5sum and return as though the server sent BYE. * src/ompd.c (ompd_nvt_cache_mode): New variable. (write_to_server): In "cache mode" request the plugin list, otherwise fall through to the "GO ON". (serve_omp): If the client_socket is -1 initiate "cache mode" and only do the server part of the service. * src/openvasmd.c (main): Add an update program option that causes the manager to run as a single process that simply calls serve_omp in "cache mode" to update the NVT cache. * src/logf.h (logf): Only log if log_stream is set. 2009-08-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (setup_full_config_prefs): New function. (init_manage): Setup SERVER_PREFS of Full config. 2009-08-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (send_config_preferences): Send newline after preference. (start_task): Check nvt_selector_plugins return for NULL. 2009-08-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_configs_3.c: Match config name to test. 2009-08-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h, src/omp.c, src/otp.c: Replace strncmp and strncasecmp with strcmp and strcasecmp in comparisons involving NULL terminated strings. 2009-08-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_start_task_3.c: New file. Tests START_TASK with a task created with a target and a config. * src/tests/CMakeLists.txt: Add omp_start_task_3. 2009-08-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_modify_task_0.c, src/tests/omp_modify_task_1.c: Use a real RC so that CREATE_TASK succeeds. 2009-08-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_start_task_3.c: Remove, replaced by omp_create_task_0. * src/tests/omp_start_task_4.c: Remove, CREATE_TASK now prevents creation of such a task. * src/tests/CMakeLists.txt: Remove omp_start_task_3 and omp_start_task_4. 2009-08-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (wait_for_task_stop): Make the Done return the same as Stopped. Add return -2, in case the task has been deleted. * src/tests/omp_abort_task_0.c: Only fail if wait_for_task_stop returns -1, as the server may do the pending removal during the wait. 2009-08-18 Matthew Mundell <matthew.mundell@greenbone.net> Address errors in last commit. * src/tasks_sql.h (set_task_target, set_task_config): New functions. (init_preference_iterator): Correct column name in SQL. * src/manage.h: Update headers. * src/omp.c (omp_xml_handle_end_element): In CLIENT_CREATE_TASK set the task target and config when creating from an rcfile. 2009-08-18 Matthew Mundell <matthew.mundell@greenbone.net> Add targets and configs to CREATE_TASK. * src/ovas-mngr-comm.c (sendn_to_server, send_to_server): Make params const. * src/ovas-mngr-comm.h: Update headers. * src/tasks_sql.h (init_manage): Add config and target to tasks table. Setup a "Localhost" target. (task_config, task_target, target_hosts, append_to_task_config) (append_to_task_target, init_preference_iterator) (preference_iterator_name, preference_iterator_value) (config_nvt_selector): New functions (create_target, create_config): Add tracing to error cases. Handle NULL comment. (insert_rc_into_config): Add tracing to error cases. (nvt_selector_nvt_count): Only check server.plugins for the growing case. * src/manage.c (task_preference): Remove. Body moved to rc_preference. (task_plugins, send_task_preferences, send_task_rules): Remove. (rc_preference, nvt_selector_plugins, send_config_preferences) (send_config_rules): New functions. (start_task): Rework to send target, plugins, preferences and rules from the task's config and target. * src/manage.h: Update headers. * src/omp.c (client_state_t): Add new states. (omp_xml_handle_start_element, omp_xml_handle_text) (omp_xml_handle_end_element): Handle targets and configs in CREATE_TASK. * src/tests/omp_create_task_0.c, src/tests/omp_create_task_1.c: Adjust expected value. * src/tests/omp_create_task_2.c, src/tests/omp_create_task_3.c, src/tests/omp_create_task_4.c: New files. * src/tests/CMakeLists.txt: Add omp_create_task_2, omp_create_task_3 and omp_create_task_4. * doc/db_postgres.sql (configs): Remove id field, to match manager. (tasks): Add target field. Refer config to name in configs. 2009-08-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_create_target_0.c, src/tests/omp_create_target_1.c, src/tests/omp_get_targets_0.c, src/tests/omp_delete_target_0.c, ChangeLog: Switch to full email address. 2009-08-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (rmdir_recursively): Close pwd after use. 2009-08-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (parse_server_certificate_public_key): Add missing semicolon. 2009-08-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (connect_to_manager): Pass environment variables OPENVAS_TEST_HOST and OPENVAS_TEST_PORT as host and port if set. 2009-08-17 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/otp.c (parse_server_plugin_list_tags): Duplicate string only if needed, closed memleak, free gchar with g_free. Memleak found by cppcheck. 2009-08-17 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/otp.c (parse_server_certificate_public_key): Duplicate string only if needed, closed memleak, free gchar with g_free. Memleak found by cppcheck. * ChangeLog: Minor reformatting. 2009-08-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_modify_task_0.c, src/tests/omp_get_nvt_feed_checksum_1.c, src/tests/omp_get_nvt_details_4.c, src/tests/omp_get_nvt_feed_checksum_5.c, src/tests/omp_get_status_0.c, src/tests/omp_get_status_2.c, src/tests/omp_get_nvt_all_1.c, src/tests/omp_get_rules_1.c, src/tests/omp_get_nvt_details_1.c, src/tests/omp_get_nvt_feed_checksum_4.c, src/tests/omp_get_status_1.c, src/tests/omp_get_dependencies_1.c, src/tests/omp_abort_task_0.c: Either enable or remove the arbitrary mid-session re-authentications. 2009-08-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (cleanup): Add "Exiting" message. 2009-08-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (authenticate): Quote username for INSERT. * src/tests/omp_authenticate_0.c: New file. Test with quote in name. * src/tests/CMakeLists.txt: Add omp_authenticate_0. 2009-08-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (authenticate): SELECT then INSERT instead of using "INSERT OR REPLACE", so that the ROWID stays the same. 2009-08-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_certificates_1.c: Expect the status in an attribute. 2009-08-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_nvt_feed_checksum_5.c: Correct expected status. 2009-08-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_preferences_1.c: Check response parts instead of comparing to an expected entity. 2009-08-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/read_protocol_0.c: Correct typo in heading. 2009-08-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_status_5.c: Add status_text and progress to expectations. * src/tests/omp_create_target_0.c, src/tests/omp_create_target_1.c, src/tests/omp_delete_target_0.c: Add status_text to expectations. Remove the target before starting. * src/tests/omp_get_dependencies_0.c: Add status_text to expectations. Correct return code. * src/tests/omp_start_task_0.c: Add status_text to expectations. Remove second authentication. * src/tests/omp_abort_task_0.c, src/tests/omp_bogus_0.c, src/tests/omp_bogus_1.c, src/tests/omp_create_task_0.c, src/tests/omp_create_task_1.c, src/tests/omp_delete_report_0.c, src/tests/omp_delete_report_1.c, src/tests/omp_delete_task_0.c, src/tests/omp_delete_task_1.c, src/tests/omp_get_certificates_0.c, src/tests/omp_get_nvt_all_0.c, src/tests/omp_get_nvt_details_0.c, src/tests/omp_get_nvt_details_2.c, src/tests/omp_get_nvt_details_3.c, src/tests/omp_get_nvt_feed_checksum_0.c, src/tests/omp_get_nvt_feed_checksum_2.c, src/tests/omp_get_nvt_feed_checksum_3.c, src/tests/omp_get_preferences_0.c, src/tests/omp_get_report_1.c, src/tests/omp_get_report_2.c, src/tests/omp_get_report_3.c, src/tests/omp_get_rules_0.c, src/tests/omp_get_rules_1.c, src/tests/omp_get_version_0.c, src/tests/omp_help_0.c, src/tests/omp_help_1.c, src/tests/omp_modify_report_0.c, src/tests/omp_modify_task_0.c, src/tests/omp_modify_task_1.c, src/tests/omp_start_task_3.c, src/tests/omp_start_task_4.c: Add status_text to expectations. 2009-08-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (STATUS_INTERNAL_ERROR_TEXT): Make case more consistent. (omp_xml_handle_end_element): Remove status_text fullstop in CLIENT_GET_NVT_FEED_CHECKSUM. In CLIENT_CREATE_TARGET improve "name and hosts" status_text and convert the create_target response to a syntax error. In CLIENT_START_TASK manually send the response, as send_find_error_to_client adds quotation marks. 2009-08-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c (write_to_server): In SERVER_INIT_GOT_PLUGINS also request certificates. 2009-08-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_NVT_DETAILS free current_uuid. 2009-08-14 Matthew Mundell <matthew.mundell@greenbone.net> Add more specific status_text attributes for "resource missing" (404) errors. * src/manage.c (start_task): Return -3 if create_report fails. * src/omp.c (send_find_error_to_client): New function. (omp_xml_handle_end_element): Use send_find_error_to_client for resource missing errors. Convert CLIENT_GET_NVT_FEED_CHECKSUM algorithm error to syntax error. Convert report generation and missing XSL file errors to internal errors. Handle new start_task error. 2009-08-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_STATUS rename the per host PROGRESS element to HOST_PROGRESS. 2009-08-14 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * src/openvasmd_log_conf.cmake, src/openvasmd_cong_conf.cmake_in: Renamed file to not create confusion, as its not a file generated by cmake. * CMakeLists.txt: Reverted exclude list, as filename of the critical file was changed. * src/CMakeLists.txt: Updated reference to changed filename. 2009-08-14 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * CMakeLists.txt: Increased Project version number. Changed the CPACK_SOURCE_IGNORE_FILES with the aim to not exclude openvasmd_log_conf.cmake (pre-commit *cmake was excluded) when building a (release) tar-ball. 2009-08-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_manage): Make name in table users UNIQUE. (authenticate): Always fail for user "om". On success ensure that the username is in the users table. 2009-08-14 Matthew Mundell <matthew.mundell@greenbone.net> Adjust OMP behaviour to always respond to the authentication XML. * src/omp.c (omp_xml_handle_end_element): In CLIENT_AUTHENTICATE add responses to the success cases. * src/tests/common.c (authenticate): Read and check response. 2009-08-14 Matthew Mundell <matthew.mundell@greenbone.net> * src/tracef.h (tracef): Add format string to g_log call. 2009-08-13 Matthew Mundell <matthew.mundell@greenbone.net> Add generic description of status code to each response. For "syntax error" (400) add a specific description for each type of error, instead of a generic description. * src/omp.c (STATUS_ERROR_MUST_AUTH_TEXT, STATUS_ERROR_MISSING_TEXT) (STATUS_ERROR_AUTH_FAILED_TEXT, STATUS_OK_TEXT, STATUS_OK_CREATED_TEXT) (STATUS_OK_REQUESTED_TEXT, STATUS_INTERNAL_ERROR_TEXT) (STATUS_SERVICE_DOWN_TEXT): New defines. (send_element_error_to_client): New function. (XML_ERROR_SYNTAX): Add text param for status_text. Pass in all callers. (XML_ERROR_MISSING, XML_ERROR_AUTH_FAILED, XML_OK, XML_OK_CREATED) (XML_OK_REQUESTED, XML_INTERNAL_ERROR, XML_SERVICE_DOWN): Add static status_text attribute. (omp_xml_handle_end_element): In CLIENT_MODIFY_TASK almost always respond with internal error when set_task_parameter fails. * src/tasks_sql.h (set_task_parameter): Cleanup doc. 2009-08-12 Matthew Mundell <matthew.mundell@greenbone.net> Add comments to configs. * src/tasks_sql.h (init_manage): Add comment column to targets configs. Init comment in "Full" config. (create_config): Add comment param. (config_iterator_comment): New function. * src/manage.h: Update headers. * src/omp.c (client_state_t): Add comment state. (omp_xml_handle_start_element, omp_xml_handle_text) (omp_xml_handle_end_element): Handle config comments. * src/tests/common.c (omp_create_config, omp_create_config_from_rc_file): Add comment param. * src/tests/common.h: Update headers. * src/tests/omp_create_config_0.c, src/tests/omp_create_config_1.c, src/tests/omp_get_configs_0.c, src/tests/omp_get_configs_1.c, src/tests/omp_get_configs_2.c, src/tests/omp_get_configs_3.c, src/tests/omp_delete_config_0.c: Add comments and comment checks. 2009-08-12 Matthew Mundell <matthew.mundell@greenbone.net> Add comments to targets. * src/tasks_sql.h (init_manage): Add comment column to targets table. (create_target): Add comment param. (target_iterator_comment): New function. * src/manage.h: Update headers. * src/omp.c (client_state_t): Add comment state. (omp_xml_handle_start_element, omp_xml_handle_text) (omp_xml_handle_end_element): Handle target comments. * src/tests/common.c (omp_create_target): Add comment param. * src/tests/common.h: Update header. * src/tests/omp_get_targets_0.c: Add comment to first target. 2009-08-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/new_task_small_rc: Add 1.3.6.1.4.1.25623.1.0.10330 to scanner set. Add a second host. Set port_range to default. 2009-08-12 Matthew Mundell <matthew.mundell@greenbone.net> Add real OMP GET_CONFIGS family counts for static selectors. * src/tasks_sql.h (NVT_SELECTOR_TYPE_ALL, NVT_SELECTOR_TYPE_FAMILY) (NVT_SELECTOR_TYPE_NVT): New defines. Use instead of numbers in callers. (nvt_selector_iterator_nvt, nvt_family): New functions. (nvt_selector_family_count): Add counting for static selector. * src/tests/omp_get_configs_3.c: Add family count check. 2009-08-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (latex_severity_colour): Add "Debug Message" and "Log Message". Return "{openvas_text}" on fail. (latex_header): Add colours openvas_text, openvas_debug and openvas_log. 2009-08-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (insert_rc_into_config): Leave trailing paren off section name. 2009-08-12 Matthew Mundell <matthew.mundell@greenbone.net> * README: Cleanup and elaborate sample test invocation. * INSTALL: Add sqlfairy dependency. Try improve the configure description. 2009-08-12 Laban Mwangi <lmwangi@penguinlabs.co.ke> * README: Added a sample invocation for tests * INSTALL: Instructions for custom prefix openvas installs 2009-08-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (delete_report): Remove transaction, as delete_reports calls delete_report inside an iterator. 2009-08-11 Matthew Mundell <matthew.mundell@greenbone.net> Add real OMP GET_CONFIGS count figures for static selectors. * src/tasks_sql.h (init_nvt_selector_iterator) (nvt_selector_iterator_include): New functions. (nvt_selector_nvt_count): Add static selector counting. * src/tests/CMakeLists.txt: Add omp_get_configs_3. * src/tests/omp_get_configs_3.c: New file. 2009-08-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/tasks_sql.h (delete_report, create_target, delete_config): Wrap SQL statements in transactions. 2009-08-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_configs_0.c, src/tests/omp_get_configs_1.c: Add checks of growing values. 2009-08-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_start_task_3.c: Correct expected status. 2009-08-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (start_task): Add trace to fail case. 2009-08-11 Matthew Mundell <matthew.mundell@greenbone.net> Convert GET_CONFIGS RC NVTs to an NVT selector. * src/tasks_sql.h (config_preference, clude): New functions. (insert_rc_into_config): Buffer NVT ids in array and convert to selector before returning. (create_config): Drop const restriction on param rc. Wrap the database calls in a transaction. * src/manage.h: Update header. 2009-08-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/tracef.h (tracef): Convert the message to UTF-8 before logging. 2009-08-10 Matthew Mundell <matthew.mundell@greenbone.net> Add real OMP GET_CONFIGS count figures for the all selector case. * src/tasks_sql.h (nvt_selector_families_growing) (nvt_selector_nvts_growing): Add docs. (nvt_selector_family_count, nvt_selector_nvt_count): New functions. * src/manage.c (server_t): Move here from otp.c. * src/otp.c (server): Move to manage.c. * src/otp.h (server_t, server): Move to manage.h. * src/manage.h (nvt_selector_family_count, nvt_selector_nvt_count) (server_t, server): New headers. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_CONFIGS add some real count figures. * src/tests/CMakeLists.txt: Add omp_get_configs_2. (make_report_uuid_0): Pass OpenVAS headers to compiler. * src/tests/omp_get_configs_2.c: New file. 2009-08-10 Matthew Mundell <matthew.mundell@greenbone.net> Add real OMP GET_CONFIGS growing figures. * src/tasks_sql.h (init_manage): Note selector types. (nvt_selector_families_growing, nvt_selector_nvts_growing): New functions. * src/manage.h: Add headers. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_CONFIGS add real growing figures. 2009-08-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_targets_0.c: Compare strcmps to 0. Correct return. 2009-08-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (task_plugins, send_task_preferences) (send_task_rules): Only consider "begin(..." lines that are newline terminated. 2009-08-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (insert_rc_into_config): Include the scanners in the nvt selector list. Remove quotes from an SQL integer value. 2009-08-07 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP CREATE_CONFIG, DELETE_CONFIG and GET_CONFIGS commands. * doc/db_postgres.sql (config_preferences, configs): New tables. (tasks): Replace nvt_selector and rcfile field with config field. (nvt_selectors): Remove rowid and id. Rename details family_or_nvt. * src/tasks_sql.h (config_t): New type. (init_manage): Add nvt_selectors, configs and config_preferences tables. Setup predefined selectors and configs. (init_table_iterator): Add table arg. (init_target_iterator): Pass table name to init_target_iterator. (insert_rc_into_config, create_config, delete_config) (init_config_iterator, config_iterator_name) (config_iterator_nvt_selector): New functions. * src/manage.h: Update headers. * src/omp.c (help_text): Add config commands. (client_state_t): Add config states. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add config command handling. * src/common.c (first_entity): Add NULL guard. (create_config, omp_create_config_from_rc_file, omp_delete_config): New functions. * src/common.h: Update headers. * src/tests/omp_create_config_0.c, src/tests/omp_create_config_1.c, src/tests/omp_delete_config_0.c, src/tests/omp_get_configs_0.c, src/tests/omp_get_configs_1.c: New files. * src/tests/CMakeLists.txt: Add omp_create_config_0, omp_create_config_1, omp_delete_config_0, omp_get_configs_0 and omp_get_configs_1. * src/tests/omp_help_0.c: Add config commands to expected help text. 2009-08-06 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP CREATE_TARGET, DELETE_TARGET and GET_TARGETS. * doc/db_postgres.sql: Add targets table. * src/tasks_sql (init_manage): Add targets table. (DEF_ACCESS): Take the full name of the function. Update callers. (create_target, delete_target, init_table_iterator, init_target_iterator) (target_iterator_name, target_iterator_hosts): New functions. * src/manage.h: Update headers. * src/omp.c (help_text): Add target commands. (client_state_t): Add target states. (XML_OK_CREATED): New macro. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add target command handling. * src/common.c (first_entity): Add NULL guard. (omp_create_target, omp_delete_target): New functions. * src/common.h: Update headers. * src/tests/omp_create_target_0.c, src/tests/omp_create_target_1.c, src/tests/omp_delete_target_0.c, src/tests/omp_get_targets_0.c: New files. * src/tests/CMakeLists.txt: Add omp_create_target_0, omp_create_target_1, omp_delete_target_0 and omp_get_targets_0. * src/tests/omp_help_0.c: Add target commands to expected help text. 2009-08-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_report_5.c: Match task name to test. 2009-08-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (next_entities): Add NULL guard. 2009-08-05 Matthew Mundell <matthew.mundell@greenbone.net> Extend PROGRESS in GET_STATUS to include per-host progress percentages. * src/tasks_sql.h (init_manage): Move attack_state, current_port and max_port from tasks table to report_hosts table (task_running_report, host_iterator_attack_state) (host_iterator_current_port, host_iterator_max_port) (set_scan_attack_state, set_scan_ports): New functions. (task_attack_state, set_task_attack_state, task_current_port) (task_max_port, set_task_ports): Remove. (reset_task): Remove moved fields from SQL. * src/manage.h: Update headers. * src/otp.c (process_otp_server_input): In SERVER_STATUS_ATTACK_STATE set the attack state of the host scan instead of the task. In SERVER_STATUS_HOST set current_host. In SERVER_STATUS_PORTS set scan ports instead of task ports. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_STATUS add per-host progresses to PROGRESS. 2009-07-31 Matthew Mundell <matthew.mundell@greenbone.net> Improve the LaTeX PDF report. * src/tasks_sql.h (report_holes, report_notes, report_warnings): New functions. (init_result_iterator): Add a host argument to limit the results to a particular host. Update callers. * src/manage.h: Update headers. * src/omp.c (latex_escape_text): Replace body with working implementation. (latex_severity_heading, latex_severity_colour): New functions. (latex_header): Define colours. Refine settings. Add title. (latex_footer): Center. Add spacing. (print_report_latex): Move summary to abstract. Use defined colours. Add totals. Fill in the "Most Severe Result(s)" column. Use sections with numbering. Improve links. Init result iterator with host. Add the "[ return to host ]" link. Colour issue headings according to severity. (omp_xml_handle_end_element): In CLIENT_GET_REPORT remove "xml" from latex file name and run pdflatex twice to ensure that references are correct. 2009-07-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (latex_escape_text, print_report_latex): New functions. (latex_header, latex_footer): New variables. (omp_xml_handle_end_element): Add a second rough PDF generator to CLIENT_GET_REPORTS. This one produces the PDF via LaTeX instead of via HTML via XSL via XML. 2009-07-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd_report_html.xsl: Lay the report out more like the client PDF report. 2009-07-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/common.c (read_entity_and_text): New function. Body from read_entity. (read_entity): Replace body with call to read_entity_and_text. * src/common.h (read_entity_and_text): New header. 2009-07-28 Matthew Mundell <matthew.mundell@greenbone.net> Add rough initial HTML and PDF report generation. * src/omp.c (print_report_xml): New function. (omp_xml_handle_end_element): Add HTML and PDF format handling to GET_REPORTS. * src/openvasmd_report_html.xsl: New file. Stylesheet for HTML report. * src/CMakeLists.txt: Install openvasmd_report_html.xsl. * src/tests/omp_get_report_6.c, src/tests/omp_get_report_7.c: New files. * src/tests/CMakeLists.txt: Add omp_get_report_6 and omp_get_report_7. 2009-07-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd_log_conf.cmake: Remove quotes from "prepend" key. 2009-07-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_report_0.c, src/tests/omp_get_report_1.c, src/tests/omp_delete_report_0.c, src/tests/omp_get_report_4.c, src/tests/omp_delete_task_1.c, src/tests/omp_get_report_2.c, src/tests/omp_get_report_3.c: Add format to GET_REPORT XML. 2009-07-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (task_run_status_name): Add TASK_STATUS_STOPPED. * src/tests/common.c (wait_for_task_stop): New function. (wait_for_task_end): Also check for "Stopped". * src/tests/common.h (wait_for_task_stop): New header. * src/tests/omp_abort_task_0.c: Wait for the task to stop after reading the ABORT_TASK response. 2009-07-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (omp_get_report): Add format to GET_REPORT XML. 2009-07-24 Matthew Mundell <matthew.mundell@greenbone.net> Add handling of the GET_REPORT FORMAT attribute. Add a simple XML format. * src/omp.c (current_format): New variable. (omp_xml_handle_start_element): Handle GET_REPORT FORMAT attribute. (SENDF_TO_CLIENT_OR_FAIL): Send with g_markup_printf_escaped. (omp_xml_handle_end_element): In CLIENT_GET_REPORT check which format was requested. Add a simple initial XML format. * src/tests/CMakeLists.txt: Add omp_get_report_5. * src/tests/omp_get_report_5.c: New file. Tests requesting an XML report. 2009-07-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.h (new_report): Rename to current_report. (current_report): New variable, was new_report. * src/tasks_sql.h, src/otp.c, src/manage.c: Rename new_report to current_report. 2009-07-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (process_otp_server_input): In SERVER_TIME_SCAN_END always clear current_server_task when current_server_task is set. 2009-07-24 Matthew Mundell <matthew.mundell@greenbone.net> Add a SECOND_LAST_REPORT element to the GET_STATUS response. * src/tasks_sql.h (task_second_last_report_id): New function. * src/manage.h (task_second_last_report_id): New header. * src/omp.c (omp_xml_handle_end_element): Add SECOND_LAST_REPORT in CLIENT_GET_STATUS. 2009-07-23 Matthew Mundell <matthew.mundell@greenbone.net> * doc/proto_postgres.sql: Use date types for dates. (results): Add subnet and nvt fields. (reports): Add date field. 2009-07-23 Matthew Mundell <matthew.mundell@greenbone.net> Match the db model better to the state of the manager. * doc/db_postgres.sql (nvt_selectors, results, report_hosts) (report_results): New tables. (tasks): Add reference to nvt_selector. (reports): Add date, start_time, end_time. 2009-07-23 Matthew Mundell <matthew.mundell@greenbone.net> Store the reports in the database instead of on the file system. * src/manage.c (create_task_report, delete_task_report) (report_path_task_uuid, report_task, current_report, current_report_name) (create_report_file): Remove. (task_last_report_id, report_counts, report_timestamp, delete_report) (set_report_parameter): Remove, to manage.c. (delete_reports): Drop file system handling. Use iterator to delete reports. (start_task): Call create_report instead of create_report_file. * src/manage.h: Update headers. (result_t, report_t, iterator_t): New types. * src/tasks_sql.h (sql_string): Return NULL on error. (init_manage): Create results, report_hosts and report_results tables. Remove some caching fields from tasks table. Add date, start_time and end_time to reports table. (task_last_report_id, report_counts, report_timestamp, delete_report): New functions, from manage.c. Convert to db equivalents. (cleanup_iterator, next, make_result, make_report, create_report) (report_uuid, report_add_result, init_report_iterator, next_report) (init_result_iterator, result_iterator_subnet, result_iterator_host) (result_iterator_port, result_iterator_nvt, result_iterator_type) (result_iterator_descr, init_host_iterator, host_iterator_host) (host_iterator_start_time, host_iterator_end_time, scan_start_time) (set_scan_start_time, scan_end_time, set_scan_end_time) (set_scan_host_end_time, set_scan_host_start_time, find_report): New functions. (create_task_report, delete_task_report, inc_task_debugs_size) (inc_task_holes_size, inc_task_infos_size, inc_task_logs_size) (inc_task_notes_size, inc_task_report_count) (dec_task_report_count): Remove. (task_report_count, task_debugs_size, task_holes_size, task_infos_size) (task_logs_size, task_notes_size): Use SQL "count" instead of a cache field. (delete_task): Remove file deleting. Also delete from results table. (reset_task): Remove cache fields. * src/omp.c (send_reports): Loop with report iterator. (omp_xml_handle_end_element): Adjust CLIENT_DELETE_REPORT for new delete_report interface. Rework CLIENT_GET_REPORT to reduce indentation, building the nbe from the results table. Adjust CLIENT_MODIFY_REPORT for new set_report_parameter interface. In CLIENT_GET_STATUS pass task to task_last_report_id instead of passing uuid, free timestamp and add missing cleanup_task_iterator calls. * src/otp.c (write_message): Call make_result instead of writing to stream. (write_timestamp, save_report, append_timestamp): Remove. (append_debug_message, append_hole_message, append_info_message) (append_log_message, append_note_message): Drop current report checks and cache incrementing. (process_otp_server_input): Replace append_timestamp calls with calls to libmanage scan time setters. In TASK_STATUS_DELETE_REQUESTED and SERVER_TIME_SCAN_END remove report file handling and initialise new_report. * src/tests/CMakeLists.txt: Remove report_path_task_uuid_0, report_path_task_uuid_1 and report_path_task_uuid_2. * src/tests/report_path_task_uuid_0.c, src/tests/report_path_task_uuid_1.c, src/tests/report_path_task_uuid_2.c: Remove. 2009-07-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/string.c (isbase64): New function. * src/string.h (isbase64): New header. * src/tests/omp_get_report_0.c: Check that the report is all base64 characters instead of all alphanumeric characters. 2009-07-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_fs.h: Remove. 2009-07-22 Matthew Mundell <matthew.mundell@greenbone.net> Retire file system based task storage (-DTASKS_FS). * doc/Doxyfile, doc/Doxyfile_full (INPUT): Remove tasks_fs.h * doc/CMakeLists.txt (DOC_FILES): Remove tasks_fs.h. * src/manage.h: Remove TASKS_FS alternative. * src/manage.c: Remove tasks_fs.h include. * src/tests/CMakeLists.txt: Add -DTASKS_SQL to definitions. * src/openvasmd.c (\mainpage): Remove tasks_fs.h reference. * src/CMakeLists.txt: Remove TASKS_FS comments. (C_FILES): Remove tasks_fs.h. 2009-07-20 Matthew Mundell <matthew.mundell@greenbone.net> * doc/proto_postgres.sql (meta): Type nvts_md5sum. 2009-07-20 Matthew Mundell <matthew.mundell@greenbone.net> * doc/proto_postgres.sql: New file. Broad database prototype. 2009-07-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (main): Set log handlers for comm and otp domains. 2009-07-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd_log_conf.cmake: Add comm section. 2009-07-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (G_LOG_DOMAIN): Correct name. 2009-07-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c, src/otp.c, src/otpd.c, src/oxpd.c: Remove stray full stops from log messages. 2009-07-20 Matthew Mundell <matthew.mundell@greenbone.net> Switch to GLib facilities for all remaining logging. * src/openvasmd_log_conf.cmake: Rename domains. Add domains for libs. Add time formats. * src/tracef.h (G_LOG_DOMAIN, ALL_LOG_LEVELS): New defs. (tracef): Pass G_LOG_DOMAIN as g_log domain. * src/openvasmd.c: Convert perrors and printfs to glib calls. (main): Set log handlers. * src/ompd.c: Convert perrors and printfs to glib calls. (init_ompd): Pass log config through to init_omp. * src/ompd.h: Update header. * src/otpd.c, src/oxpd.c: Convert perrors and printfs to glib calls. * src/omp.c: Convert printfs to glib calls. (G_LOG_DOMAIN): New def. (init_omp): Pass log config through to init_manage. Set log handler. * src/omp.h: Update header. * src/ovas-mngr-comm.c, src/otp.c: Convert perrors and printfs to glib calls. (G_LOG_DOMAIN): New def. * src/string.c (G_LOG_DOMAIN): New def. * src/file.c (G_LOG_DOMAIN): Update. * src/manage.c: Convert printfs to glib calls. (G_LOG_DOMAIN): New def. * src/manage.h: Update header. * src/tasks_sql.h: Convert perrors and printfs to glib calls. (next_task): Reduce tracing. (init_manage): Set log handler. 2009-07-17 Matthew Mundell <matthew.mundell@greenbone.net> Switch trace messages to the openvas_libraries logging facility. * src/openvasmd.c (cleanup): Free log config. (main): Setup logging. * src/tracef.h (tracef): Log with g_log. (log_config): New def. * src/ovas-mngr-comm.c (log_config): New variable. * CMakeLists.txt (OPENVAS_SYSCONF_DIR): New variable. * src/openvasmd_log_conf.cmake: New file. * src/CMakeLists.txt: Setup OPENVAS_SYSCONF_DIR. Configure and install openvasmd_log.conf. 2009-07-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.c (init_manage): Insert the "om" user if the users table is empty. 2009-07-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.c (init_manage): Remove sqlite3_finalize that was for the table-per-user model. 2009-07-16 Matthew Mundell <matthew.mundell@greenbone.net> Add a users table to the database. Share one tasks table and one reports table between all users. * src/tasks_sql.c: Adjust all SQL queries to access the shared task or report table, instead of a per-user table. (init_task_iterator): If the credentials are set then iterate over that user's tasks, otherwise iterate over all tasks. (init_manage): Move table creation here from authenticate. Create users table. Adjust the task consistency check for the new single table. (authenticate): Move table creation to init_manage. 2009-07-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (serve_client): Leave the lowat value alone. 2009-07-15 Matthew Mundell <matthew.mundell@greenbone.net> Add a reports table to the database. * src/tasks_sql.h (init_manage): Only run task checks on tasks tables. (authenticate): Create reports table. (create_task_report, delete_task_report): New functions. * src/manage.c (delete_report): Call the database report deleter. (create_report_file): Call the database report creator. 2009-07-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/read_protocol_0.c: Increase sleep. Remove extra read from fail case. 2009-07-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (delete_report): Remove the last report link. 2009-07-14 Matthew Mundell <matthew.mundell@greenbone.net> Correct the handling of the case where the initial OMP XML elements are shorter than the OTP init string. * src/oxpd.c (read_protocol): Update the comment about how much is read. Convert some direct returns to break out of the main loop instead. Break out of the loop at the first '>'. * src/ompd.c (serve_omp): Add back handling of initial client input, as read_protocol may well read in a full OMP command. * src/tests/omp_help_1.c: New file. Tests HELP before authenticating. * src/tests/CMakeLists.txt: Add omp_help_1. 2009-07-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/ovas-mngr-comm.c (end_session): Remove full stop from perror string. 2009-07-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c (recreate_session): Remove close, which is done in end_session. 2009-07-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (sql, sql_x, init_task_iterator, init_manage): Handle SQLITE_BUSY returns from sqlite3_prepare. 2009-07-13 Matthew Mundell <matthew.mundell@greenbone.net> * TODO: Remove the lazy login entry which is done. Add an entry about atomicity of CREATE_TASK. Correct a typo. 2009-07-10 Matthew Mundell <matthew.mundell@greenbone.net> Add a Manager database model. * src/doc/CMakeLists.txt (db.png, .built-html_db): New rules. (SQLT_EXECUTABLE, SQLT-DIAGRAM_EXECUTABLE): New vars. * src/doc/db_postgres.sql: New file. 2009-07-08 Matthew Mundell <matthew.mundell@greenbone.net> Store the original port strings in messages, and use these strings in the reports. * src/manage.c (port_t): Add string. * src/otp.c (port_t): Add string. (PARSE_PORTS): New conditional define. (make_message): Init port string. (free_message): Free port string. (set_message_port_string): New function. (write_message): Write port from original string. (process_otp_server_input): Set port string on receiving message. 2009-07-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (process_otp_server_input): Move settings of SERVER_DONE in SERVER_PLUGIN_LIST_OID back to precede switch (moved into switch in previous commit today). 2009-07-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_report_3.c, src/tests/omp_get_report_2.c, src/tests/omp_get_report_1.c, src/tests/omp_get_report_0.c: Correct header comments. 2009-07-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (send_task_preferences): Send less of the whitespace around the fields. 2009-07-08 Matthew Mundell <matthew.mundell@greenbone.net> Extend the initialisation mechanism, so that client-driven OTP begins after the server sends the plugin list. * src/otp.h (server_init_state_t): Add new states. * src/ompd.c (write_to_server): Handle SERVER_INIT_GOT_MD5SUM and SERVER_INIT_GOT_PLUGINS, by replying with the next OTP step. (serve_omp): Account for new init states when preparing for select. * src/otp.c (process_otp_server_input): Add SERVER_INIT_SENT_COMPLETE_LIST and SERVER_INIT_SENT_PASSWORD to the done init state case. In SERVER_PLUGIN_LIST_OID and SERVER_PLUGINS_MD5 set a further init state instead of replying to the server directly. 2009-07-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/otpd.c (serve_otp): Add sender to log messages. Remove logging of first input, which is done by read_protocol now. 2009-07-08 Matthew Mundell <matthew.mundell@greenbone.net> Add logging of data sent to server. Include sender in all log messages. * src/ovas-mngr-comm.c: Include logf.h. (write_string_to_server, write_to_server_buffer): Log writes. * src/ompd.c (write_to_client, serve_omp): Add sender to log messages. * src/oxpd.c (read_protocol): Add sender to log messages. * src/tests/report_path_task_uuid_0.c, src/tests/report_path_task_uuid_1.c, src/tests/report_path_task_uuid_2.c, src/tests/make_report_id_0.c, src/tests/common.c (log_stream): New variable. 2009-07-07 Matthew Mundell <matthew.mundell@greenbone.net> Use the actual host name for results in reports. * src/manage.h (message_t): Add subnet and host. * src/otp.c (message_t): Add subnet and host. (make_message): Take host instead of port info. (free_message): Free host and subnet. (set_message_port_number, set_message_port_protocol): New functions. (write_message): Write host and subnet from message structure. (process_otp_server_input): Add message host handling. 2009-07-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (current_host): New variable. (process_otp_server_input): Use the actual host name for host timestamps. 2009-07-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (inc_task_infos_size): Increment infos instead of holes. 2009-07-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (set_task_end_time, set_task_start_time): Free time. 2009-07-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (create_report_file): Initialise cache files. 2009-07-07 Matthew Mundell <matthew.mundell@greenbone.net> Add actual timestamps to GET_STATUS. * src/otp.c (save_report): Save timestamp to a cache file. (process_otp_server_input): Set task start and end times after SCAN_START and SCAN_END instead of HOST_START and HOST_END. * src/manage.c (report_timestamp): New function. * src/manage.h (report_timestamp): New header. * src/omp.c (send_reports, omp_xml_handle_end_element): Add counts to GET_STATUS <timestamp>. 2009-07-07 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (save_report): Correct file name. 2009-07-06 Matthew Mundell <matthew.mundell@greenbone.net> Add actual message counts to GET_STATUS. * src/otp.c (save_report): Save message counts to a cache file. * src/manage.c (report_counts): New function. * src/manage.h (report_counts): New header. * src/omp.c (send_reports, omp_xml_handle_end_element): Add counts to GET_STATUS <messages>. 2009-07-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (send_reports, omp_xml_handle_end_element): Ensure all GET_STATUS cases include <warning> in <messages>. 2009-07-06 Matthew Mundell <matthew.mundell@greenbone.net> Reset task running information before starting the task. * src/tasks_sql.h (reset_task): New function. * src/manage.h (reset_task): New header. * src/manage.c (start_task): Call reset_task before starting the task. 2009-07-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_report_4.c: New file. Tests GET_REPORT with extra elements. * src/tests/CMakeLists.txt (omp_get_report_4): New test. 2009-07-06 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_start_element): In CLIENT_GET_REPORT remove "_response", which is added by XML_ERROR_SYNTAX. 2009-07-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c (serve_omp): Only setup the client in the fd sets when the client is active. As a result move the first timeout check to precede the setup of the client socket in the fd sets, in case the timeout check closes the client socket. Also, only pass select a timeout when the client is active, and only do the second timeout check when the client is active. 2009-07-03 Matthew Mundell <matthew.mundell@greenbone.net> * CMakeLists.txt (CMAKE_BUILD_TYPE): Set to debug. 2009-07-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/oxpd.h (READ_PROTOCOL_TIMEOUT): Increase. 2009-07-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (connect_to_manager_host_port): After connecting, if the environment variable OPENVAS_TEST_WAIT is true, then read a char before continuing. 2009-07-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (sql_quote): Increment start in quote counting loop. * src/tests/new_task_small_rc (SERVER_PREFS): Add some fields with quotes. 2009-07-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_start_task_4.c: New file. Tests START_TASK with missing rcfile. * src/tests/CMakeLists.txt: Add omp_start_task_4. 2009-07-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Check task_description return. * src/manage.c (task_preference, task_plugins, send_task_preferences) (send_task_rules): Check task_description return. 2009-07-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c (serve_omp): Only select on client for exceptions when client is active. 2009-07-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c (serve_omp): Improve the "safe to select" comment a bit. 2009-07-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/oxpd.c (read_protocol): Log what is read. 2009-07-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (send_plugin): Send a dummy checksum. 2009-07-02 Matthew Mundell <matthew.mundell@greenbone.net> Before starting a task, check that the task has targets. * src/manage.c (start_task): Check for targets in the task definition. * src/omp.c (omp_xml_handle_end_element): Send ERROR_MISSING if the task is missing targets. * src/tests/omp_start_task_3.c, src/tests/new_task_small__missing_targets_rc: New files. * src/tests/CMakeLists.txt: Add omp_start_task_3. 2009-07-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/oxpd.c (read_protocol): Read as much as possible at a time up to the length of the OTP protocol string, in case the client presumes that what it has written has been entirely read. 2009-07-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Account for 0 current_port in GET_STATUS progress calculation. 2009-07-01 Matthew Mundell <matthew.mundell@greenbone.net> Add a PROGRESS element to the GET_STATUS response. * src/manage.c (task_last_report_id): Remove old comment. * src/tasks_sql.h (task_current_port, task_max_port): New functions. * src/manage.h: Update headers. * src/omp.c (omp_xml_handle_end_element): Add PROGRESS to GET_STATUS. 2009-07-01 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In GET_STATUS only print a LAST_REPORT if there is a last report. 2009-06-30 Matthew Mundell <matthew.mundell@greenbone.net> Add a LAST_REPORT element to the GET_STATUS response. * src/manage.c (task_last_report_id): New function. (current_report_name): New variable. (create_report_file): Store report name in current_report_name. * src/manage.h: Update headers. * src/otp.c (save_report): Adjust or create symlink to the current report. (process_otp_server_input): Free current_report_name if save_report fails. * src/omp.c (omp_xml_handle_end_element): Add LAST_REPORT to GET_STATUS. 2009-06-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (send_to_client): Trace when out of space. 2009-06-30 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Add report_count to the plural GET_STATUS response. 2009-06-29 Matthew Mundell <matthew.mundell@greenbone.net> (start_task): Use send_to_server instead of sendf_to_server for constant string. 2009-06-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (request_plugin_list): Remove. (acknowledge_md5sum_sums, acknowledge_md5sum_info) (acknowledge_md5sum): New functions. * src/manage.h: Update headers. * src/otp.c (process_otp_server_input): Request the plugin list on getting the feed md5. Acknowledge the md5sum (GO ON) after receiving the plugin list. 2009-06-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Remove attempts at initiating connections in XML_SERVICE_DOWN cases, now that serve_omp connects eagerly. 2009-06-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_MODIFY_TASK respond with XML_OK instead of XML_OK_REQUESTED. 2009-06-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_start_element): In CLIENT_CREATE_TASK initialise the task description. (omp_xml_handle_end_element): In CLIENT_CREATE_TASK_RCFILE check the return from g_base64_decode. 2009-06-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c (serve_omp): Eagerly initiate the OTP server connection. 2009-06-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c (serve_omp): Let the select loop handle the first input, as read_protocol now only reads up to the first '>'. 2009-06-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/oxpd.c (read_protocol): Read at most up to the first '>', so that the caller can select on the socket after the call and be sure that the select will return within the first command. 2009-06-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (serve_client): Remove server socket closing, which is now done in end_session. 2009-06-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (set_task_parameter): Convert rcfile before storing it in database. 2009-06-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_create_task_1.c: New file. Tests OMP CREATE_TASK with empty RC file. * src/tests/CMakeLists.txt: Add omp_create_task_1. 2009-06-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (connect_to_manager_host_port, create_task) (create_task_from_rc_file, start_task, wait_for_task_end) (delete_task): Add const to string parameters. (omp_delete_report, omp_delete_task, omp_modify_task, omp_get_preferences) (omp_get_certificates, omp_until_up): New functions. * src/tests/common.h: Update headers. 2009-06-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/ovas-mngr-comm.c (end_session): Break out of the gnutls_bye loop if the bye succeeds. Enable close code. Move gnutls_deinit and gnutls_certificate_free_credentials after shutdown and close. 2009-06-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/ovas-mngr-comm.c (sendn_to_server): Trace when out of space. 2009-06-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/ovas-mngr-comm.c (TO_SERVER_BUFFER_SIZE): Increase. 2009-06-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_manage_process): Ensure that the OPENVAS_STATE_DIR "mgr/" directory exists. 2009-06-24 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (init_manage): Close the database before returning, so that forked processes open their own connections. 2009-06-23 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * VERSION: Set to 0.6.2.SVN. * CMakeLists.txt: Updated CPACK_PACKAGE_VERSION_PATCH. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. * ChangeLog: Corrected path in last entry. 2009-06-23 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 0.6.1 release. * VERSION: Set to 0.6.1. * CMakeLists.txt: Updated CPACK_PACKAGE_VERSION_PATCH. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. * packaging/debian/control: Updated version requirements for Debian package. * CHANGES: Updated, fixed typos in change notes for the last release. 2009-06-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (omp_get_status): Return statuses of all tasks if ID is NULL. 2009-06-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (foreach_print_attribute): New function. (print_entity): Add attribute printing. * TODO: Remove associated entry. 2009-06-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (omp_get_report): New function. * src/tests/common.h (omp_get_report): New header. 2009-06-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.h: Add multiple-include guard. 2009-06-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (main): Neaten formatting. 2009-06-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (wait_for_task_start, wait_for_task_end): Return if task state becomes "Internal Error". 2009-06-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (parse_server_bad_login): New function. (process_otp_server_input): Check for bad login response from server. * src/ompd.c (serve_omp): Handle "bad login" return from process_otp_server_input. 2009-06-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c (recreate_session): New function. (serve_omp): Move session creation to recreate_session. 2009-06-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c (write_to_server): Change OTP username and password. 2009-06-18 Michael Wiegand <michael.wiegand@greenbone.net> Adding support for creating a process ID file. * CMakeLists.txt: Set OPENVAS_PID_DIR to the appropriate directory. * src/CMakeLists.txt: Expose OPENVAS_PID_DIR. * src/openvasmd.c: Added pidfile handling. (main): Write the PID to the pidfile once the server is running. (cleanup): Remove the pidfile on exit. 2009-06-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (send_reports, omp_xml_handle_end_element): Use OPENVAS_STATE_DIR instead of PREFIX "/var/lib/openvas/". (PREFIX): Remove. * src/otp.c (PREFIX): Remove. * src/manage.c (report_task, delete_report, set_report_parameter) (create_report_file, delete_reports): Use OPENVAS_STATE_DIR instead of PREFIX "/var/lib/openvas/". (PREFIX): Remove. * src/tasks_fs.h (load_tasks, save_tasks, delete_task): Use OPENVAS_STATE_DIR instead of PREFIX "/var/lib/openvas/". 2009-06-17 Michael Wiegand <michael.wiegand@greenbone.net> * src/tasks_sql.h (init_manage_process, delete_task): Use OPENVAS_STATE_DIR instead of PREFIX "/var/lib/openvas/". * src/CMakeLists.txt: Expose OPENVAS_STATE_DIR. 2009-06-17 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * VERSION: Set to 0.6.1.SVN. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. * CMakeLists.txt: Updated version information. 2009-06-17 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 0.6.0 release. * VERSION: Set to 0.6.0. * CHANGES: Updated. * doc/Doxyfile, doc/Doxyfile_full: Updated PROJECT_NUMBER. * CMakeLists.txt: Updated version information. 2009-06-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c, TODO: Move note about communication functions to TODO. 2009-06-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c (serve_omp): Remove lastfds tracing. 2009-06-16 Matthew Mundell <matthew.mundell@greenbone.net> Move read_protocol from the main manager daemon into oxpd. * src/openvasmd.c (READ_PROTOCOL_TIMEOUT, protocol_read_t) (read_protocol): Move to oxpd.h and oxpd.c. * src/oxpd.c (read_protocol): New function, from src/openvasmd.c. * src/oxpd.h (READ_PROTOCOL_TIMEOUT): New define from src/openvasmd.c. (protocol_read_t): New type, from src/openvasmd.c. (read_protocol): New header. 2009-06-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/oxpd.c: Enable FROM_BUFFER_SIZE check. 2009-06-16 Matthew Mundell <matthew.mundell@greenbone.net> * doc/CMakeLists.txt (DOC_FILES): Add oxpd.c. 2009-06-16 Matthew Mundell <matthew.mundell@greenbone.net> Separate the common ompd and otpd globals into a new file. * src/oxpd.c, src/oxpd.h: New files. * src/ompd.c: Include oxpd.h. (server_address): Move to oxpd.c. (from_buffer_size, from_client, from_client_start, from_client_end) (from_server, from_server_start, from_server_end): Remove. * src/ompd.h (server_address): Remove. * src/otpd.c: Include oxpd.h instead of ompd.h. (from_buffer_size, from_client, from_client_start, from_client_end) (from_server, from_server_start, from_server_end): Remove. * src/openvasmd.c: Include oxpd.h. (FROM_BUFFER_SIZE, from_buffer_size, from_client, from_client_start) (from_client_end, from_server, from_server_start, from_server_end): Move to src/oxpd.c. * src/CMakeLists.txt (openvasmd, C_FILES): Add oxpd.c. * doc/Doxyfile, doc/Doxyfile_full (INPUT): Add src/oxpd.c. 2009-06-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/file.c (rmdir_recursively): Add descriptive comments. 2009-06-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (send_task_preferences): Free orig_desc in error cases. 2009-06-16 Michael Wiegand <michael.wiegand@greenbone.net> * CMakeLists.txt: Make source archive filenames consistent with other modules and Debians expectations. 2009-06-16 Matthew Mundell <matthew.mundell@greenbone.net> * CMakeLists.txt: Turn off optimisation for now, as it results in a warning about the uuid_export call in make_report_uuid. 2009-06-16 Matthew Mundell <matthew.mundell@greenbone.net> * TODO: Add missing paren. 2009-06-16 Matthew Mundell <matthew.mundell@greenbone.net> Acknowledge OTP server BYE messages. * src/otp.c (process_otp_server_input): In SERVER_BYE leave setting of the init state to the caller and queue the BYE ACK in to_server. * src/ompd.c (serve_omp): On receiving server BYE flush the to_server buffer and set the server init state. * src/ovas-mngr-comm.c (end_session): Turn off blocking before the gnutls_bye, and limit the number of gnutls_bye attempts. * src/manage.c (acknowledge_bye): New function. * src/manage.h (acknowledge_bye): New header. 2009-06-12 Matthew Mundell <matthew.mundell@greenbone.net> * TODO: New file. 2009-06-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (sql_int, sql_string): Check return from sql_x. 2009-06-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_preferences_1.c: Enable test for expected value. 2009-06-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_preferences_0.c: Correct expected status code. 2009-06-12 Matthew Mundell <matthew.mundell@greenbone.net> Move OID entity of OMP GET_NVT_DETAILS to an attribute. * src/omp.c (client_state_t): Remove CLIENT_GET_NVT_DETAILS_OID. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Move GET_NVT_DETAILS OID to an attribute. * src/tests/omp_get_nvt_details_2.c, src/tests/omp_get_nvt_details_3.c, src/tests/omp_get_nvt_details_4.c: Pass OID in an attribute. 2009-06-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (delete_task): Pass TASK_ID as attribute. 2009-06-11 Matthew Mundell <matthew.mundell@greenbone.net> Move REPORT_ID entities of OMP DELETE_REPORT, GET_REPORT and MODIFY_REPORT commands to attributes. * src/omp.c (client_state_t): Remove CLIENT_GET_REPORT_ID, CLIENT_DELETE_REPORT_ID and CLIENT_MODIFY_REPORT_REPORT_ID. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Move REPORT_ID to an attribute. * src/tests/omp_delete_report_0.c, src/tests/omp_delete_report_1.c, src/tests/omp_delete_task_1.c, src/tests/omp_get_report_0.c, src/tests/omp_get_report_1.c, src/tests/omp_get_report_2.c, src/tests/omp_get_report_3.c, src/tests/omp_modify_report_0.c: Adjust for updated OMP. 2009-06-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_report_0.c: Improve check of expected response. * src/tests/omp_get_report_1.c, src/tests/omp_get_report_2.c, src/tests/omp_get_report_3.c: New files. * src/tests/CMakeLists.txt: Add omp_get_report_1, omp_get_report_2 and omp_get_report_3. 2009-06-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_delete_report_0.c, src/tests/omp_delete_task_0.c, src/tests/omp_delete_task_1.c, src/tests/omp_delete_task_2.c, src/tests/omp_get_dependencies_1.c, src/tests/omp_get_nvt_all_1.c, src/tests/omp_get_nvt_details_1.c, src/tests/omp_get_nvt_details_4.c, src/tests/omp_get_nvt_feed_checksum_1.c, src/tests/omp_get_nvt_feed_checksum_4.c, src/tests/omp_get_nvt_feed_checksum_5.c, src/tests/omp_get_preferences_1.c, src/tests/omp_get_report_0.c, src/tests/omp_get_rules_1.c, src/tests/omp_modify_report_0.c, src/tests/omp_modify_task_1.c: Pass GET_STATUS TASK_ID as an attribute. * src/tests/common.c (wait_for_task_delete, omp_get_status): Pass GET_STATUS TASK_ID as an attribute. 2009-06-11 Matthew Mundell <matthew.mundell@greenbone.net> Move TASK_ID entity of OMP GET_STATUS to an attribute. * src/omp.c (client_state_t): Remove CLIENT_GET_STATUS_TASK_ID. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Move GET_STATUS TASK_ID to an attribute. * src/tests/omp_get_status_1.c, src/tests/omp_get_status_2.c, src/tests/omp_get_status_4.c, src/tests/omp_get_status_5.c: Pass TASK_ID in an attribute. 2009-06-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_status_0.c: Correct expectations. 2009-06-11 Matthew Mundell <matthew.mundell@greenbone.net> Move TASK_ID entity of OMP ABORT_TASK to an attribute. * src/omp.c (client_state_t): Remove CLIENT_ABORT_TASK_TASK_ID. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Move ABORT_TASK TASK_ID to an attribute. * src/tests/omp_abort_task_0.c: Pass TASK_ID in an attribute. * ChangeLog: Correct function names in last three entries. 2009-06-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_abort_task_0.c: Expect that the operation may also succeed completely. 2009-06-11 Matthew Mundell <matthew.mundell@greenbone.net> Move TASK_ID entity of OMP START_TASK to an attribute. * src/omp.c (client_state_t): Remove CLIENT_START_TASK_TASK_ID. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Move START_TASK TASK_ID to an attribute. * src/tests/common.c (start_task): Pass TASK_ID in an attribute. * src/tests/omp_start_task_0.c: Pass TASK_ID in an attribute. * ChangeLog: Correct descriptions in last two entries. 2009-06-11 Matthew Mundell <matthew.mundell@greenbone.net> Move TASK_ID entity of OMP DELETE_TASK to an attribute. * src/omp.c (client_state_t): Remove CLIENT_DELETE_TASK_TASK_ID. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Move DELETE_TASK TASK_ID to an attribute. * src/tests/omp_delete_task_0.c, src/tests/omp_delete_task_1.c, src/tests/omp_delete_task_1.c: Pass TASK_ID in an attribute. 2009-06-11 Matthew Mundell <matthew.mundell@greenbone.net> Move TASK_ID entity of OMP MODIFY_TASK to an attribute. * src/omp.c (client_state_t): Remove CLIENT_MODIFY_TASK_TASK_ID. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Move MODIFY_TASK TASK_ID to an attribute. * src/tests/omp_modify_task_0.c, src/tests/omp_modify_task_1.c: Pass TASK_ID in an attribute. 2009-06-11 Matthew Mundell <matthew.mundell@greenbone.net> Move OID entity of OMP GET_NVT_ALL and GET_NVT_DETAILS to an attribute. * src/omp.c (send_plugin): Move OID to an attribute. * src/tests/omp_get_nvt_details_4.c: Expect OID in an attribute. 2009-06-11 Matthew Mundell <matthew.mundell@greenbone.net> Get the GET_NVT_DETAILS tests passing. * src/tests/omp_get_nvt_details_3.c, src/tests/omp_get_nvt_details_2.c: Keep querying the manager until the feed details are available. * src/tests/omp_get_nvt_details_1.c, src/tests/omp_get_nvt_details_4.c: Expect status in an attribute. 2009-06-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_delete_report_0.c, src/tests/omp_delete_task_1.c src/tests/omp_get_report_0.c, src/tests/omp_modify_report_0.c: Adjust for move of GET_STATUS REPORT ID to an attribute. 2009-06-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (send_reports): Move ID of GET_STATUS REPORT to an attribute. 2009-06-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (task_preference): Free orig_desc after last use, instead of before. 2009-06-10 Matthew Mundell <matthew.mundell@greenbone.net> Account for the move of GET_STATUS TASK_ID to an attribute in all remaining tests. * src/tests/common.c (task_status): Match updated GET_STATUS. (omp_get_status): Improve status param doc slightly. * src/tests/omp_delete_report_0.c, src/tests/omp_delete_task_1.c, src/tests/omp_delete_task_2.c, src/tests/omp_get_report_0.c, src/tests/omp_modify_report_0.c, src/tests/omp_modify_task_1.c: Match updated GET_STATUS. 2009-06-10 Matthew Mundell <matthew.mundell@greenbone.net> Move GET_STATUS response TASK_ID to an attribute of the task. * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_STATUS add the enclosing TASK entity to the ID case and in both cases move the TASK_ID to an attribute. * src/common.c (wait_for_task_start, wait_for_task_end): Expect task ID in attribute. * src/tests/omp_get_status_0.c, src/tests/omp_get_status_1.c, src/tests/omp_get_status_1.c, src/tests/omp_get_status_3.c, src/tests/omp_get_status_4.c, src/tests/omp_get_status_5.c: Improve checks and match updated OMP. 2009-06-10 Matthew Mundell <matthew.mundell@greenbone.net> Merge the OMP MODIFY_REPORT command's VALUE and PARAMETER entities. * src/omp.c (client_state_t): Remove CLIENT_MODIFY_REPORT_VALUE. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Merge MODIFY_REPORT VALUE and PARAMETER. * src/tests/omp_modify_report_0.c: Match updated OMP. 2009-06-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_start_element): Reorder CLIENT_MODIFY_TASK conditions. 2009-06-09 Matthew Mundell <matthew.mundell@greenbone.net> Merge the OMP MODIFY_TASK command's VALUE and PARAMETER entities. * src/omp.c (client_state_t): Remove CLIENT_MODIFY_TASK_VALUE. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Merge MODIFY_TASK VALUE and PARAMETER. * src/tests/omp_modify_task_0.c, src/tests/omp_modify_task_1.c: Match updated OMP. 2009-06-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_status_0.c: Change "identifier" to "name" in expected response. * src/tests/omp_modify_task_1.c: Expect "name" instead of "identifier". Use new response code. * src/tests/omp_modify_task_0.c: Use new response code. 2009-06-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c: Rename task name symbols to use "name" instead of "identifier". 2009-06-09 Matthew Mundell <matthew.mundell@greenbone.net> Add RCFILE, NAME and COMMENT elements to OMP MODIFY_TASK. * src/omp.c (modify_task_comment, modify_task_name) (modify_task_rcfile): New variables. (client_state_t): Add new MODIFY_TASK states. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Handle new MODIFY_TASK elements. 2009-06-09 Matthew Mundell <matthew.mundell@greenbone.net> * ChangeLog: Convert space indentation to tabs. 2009-06-09 Matthew Mundell <matthew.mundell@greenbone.net> Rename TASK_FILE to RCFILE in the OMP command CREATE_TASK. * src/omp.c (client_state_t): Rename CLIENT_CREATE_TASK_TASK_FILE to CLIENT_CREATE_TASK_RCFILE. Ajust all users. (omp_xml_handle_start_element, omp_xml_handle_end_element): Parse RCFILE instead of TASK_FILE. * src/tasks_fs.h (set_task_parameter): Parse RCFILE instead of TASK_FILE. * src/tasks_sql.h (set_task_parameter): Parse RCFILE instead of TASK_FILE. * src/tests/common.c (create_task): Send RCFILE instead of TASK_FILE. * src/tests/omp_create_task_0.c: Send RCFILE instead of TASK_FILE. 2009-06-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (set_task_parameter): Correct doc parameter description. 2009-06-09 Matthew Mundell <matthew.mundell@greenbone.net> Rename task name symbols to use "name" instead of "identifier". * src/omp.c (client_state_t): Rename CLIENT_CREATE_TASK_IDENTIFIER to CLIENT_CREATE_TASK_NAME. Adjust all users. * src/tasks_sql.h (append_to_task_identifier): Rename append_to_task_name. (append_to_task_name): New function, renamed from append_to_task_identifier. * src/tasks_fs.h (append_to_task_identifier): Rename append_to_task_name. (append_to_task_name): New function, renamed from append_to_task_identifier. * src/manage.h: Update header. 2009-06-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_nvt_feed_checksum_1.c: Include ../string.h. 2009-06-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/read_protocol_0.c: Correct task name. 2009-06-09 Matthew Mundell <matthew.mundell@greenbone.net> Rename IDENTIFIER to NAME in OMP commands CREATE_TASK and GET_STATUS. * src/omp.c (omp_xml_handle_start_element): Rename IDENTIFIER to NAME. * src/tests/omp_get_status_5.c: New file, tests GET_STATUS with an ID before running the task. * src/tests/CMakeLists.txt: Add omp_get_status_5. * src/tests/common.c (create_task): Rename IDENTIFIER to NAME. * src/tests/omp_create_task_0.c: Rename IDENTIFIER to NAME. * src/tests/omp_get_status_2.c: Improve expected response. 2009-06-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (serve_client): Improve comment slightly. 2009-06-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/otpd.c (serve_otp): Close client socket on return. 2009-06-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (read_protocol): Check return from time for error. * ChangeLog: Correct entry dates for yesterday. 2009-06-08 Matthew Mundell <matthew.mundell@greenbone.net> Close client connections that are idle for longer than a fixed limit. * src/openvasmd.c (serve_client): Close client socket on return. (accept_and_maybe_fork): Leave it to serve_client to close the client socket. * src/ompd.c (CLIENT_TIMEOUT): New definition. (serve_omp): Close client_socket on return. Timeout if the client connection is idle for CLIENT_TIMEOUT or more seconds. * src/tests/timeout_0.c: New file, tests client timeout. * src/tests/CMakeLists.txt: Add timeout_0. Move timeout tests to end. 2009-06-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (accept_and_maybe_fork): Close client socket in parent process. 2009-06-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (process_otp_server_input): In the cases where the OTP that follows is either a field or "<|> SERVER", check for the '|' in addition to checking if the length of "field" is zero, as "field" may legitimately be an empty field (" <|> field2 ..."). 2009-06-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (stringify): Remove. 2009-06-05 Matthew Mundell <matthew.mundell@greenbone.net> Bring comment docs up to date. * src/string.c (isalnumstr): Doc param. * src/omp.c: Add docs to new defines. Move DEF out of send_plugin. (SENDF_TO_CLIENT_OR_FAIL): Doc params properly. * src/tests/common.c (next_entities, first_entity): New functions. (add_attribute): Correct param name in doc. (add_attributes, setup_test): Add doc. (compare_find_attribute): Doc attributes2 param. (omp_get_status): Doc status param. 2009-06-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_sql.h (make_task): Initialise task run state. 2009-06-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_create_task_0.c: Add check that task run status is initialised correctly. 2009-06-05 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (omp_get_status): New function. * src/tests/common.h (omp_get_status): New header. 2009-06-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (parse_server_plugin_list_tags, process_otp_server_input): Use new nvtis function names. * src/omp.c (omp_xml_handle_end_element): Use new nvtis function names. 2009-06-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (find_attribute): New function. (omp_xml_handle_start_element, omp_xml_handle_end_element): Handle GET_NVT_FEED_CHECKSUM "algorithm" attribute. * src/tests/omp_get_nvt_feed_checksum_2.c, src/tests/omp_get_nvt_feed_checksum_3.c, src/tests/omp_get_nvt_feed_checksum_4.c, src/tests/omp_get_nvt_feed_checksum_5.c: New files which test GET_NVT_FEED_CHECKSUM "algorithm" attribute. * src/tests/CMakeLists.txt: Add omp_get_nvt_feed_checksum_2, omp_get_nvt_feed_checksum_3, omp_get_nvt_feed_checksum_4 and omp_get_nvt_feed_checksum_5. 2009-06-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_NVT_ALL change algorithm entity to a feed_checksum attribute. * src/tests/omp_get_nvt_all_1.c: Match updated GET_NVT_ALL. Add algorithm and checksum checks. * ChangeLog: Add entry for last commit. 2009-06-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/string.h (isalnumstr): New header. * src/string.c (isalnumstr): New function. * src/tests/omp_get_nvt_feed_checksum_1.c (isalnumstr): Remove. 2009-06-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_NVT_FEED_CHECKSUM add checksum entity with algorithm. * src/tests/omp_get_nvt_feed_checksum_1.c: Match updated OMP. 2009-06-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_VERSION move preferred entity to attribute. * src/tests/omp_get_version_0.c: Move expected preferred entity to attribute. 2009-06-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_delete_task_2.c: Correct expected tag name and string comparison. Compare the response status instead of the task status, to the response code. 2009-06-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_delete_task_0.c: Add check of whether delete request succeeded immediately. Correct expected tag name and string comparison. 2009-06-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_delete_task_1.c: Wait for the task to stop before requesting the report. Use one entity at a time and free the entities after use. Pass sendf_to_manager the ID text instead of the ID entity. 2009-06-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (wait_for_task_delete): New function. * src/tests/common.h (wait_for_task_delete): New header. 2009-06-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (task_status): Revert to correct implementation. 2009-06-03 Matthew Mundell <matthew.mundell@greenbone.net> When stopping tasks, account for the case where the task is stopped already. * src/manage.c (stop_task): Return 1 instead of 0 if stop is requested. * src/tasks_sql.h (sql_int64, sql_x): Add return values to indicate when there are fewer rows than requested. (request_delete_task): Return 1 instead of 0 if delete requested. If task is already stopped, then do the delete. (find_task): Return FALSE only on error and return with task 0 to indicate failure to find the task. Update caller. * src/omp.c (omp_xml_handle_end_element): When stopping and deleting a task respond with OK if the operation is already done, instead of always with OK_REQUESTED. Add INTERNAL_ERROR cases to the return checks of all find_task calls. 2009-06-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): In CLIENT_GET_STATUS correct opening tag and add closing tag. 2009-06-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_bogus_0.c, src/tests/omp_bogus_1.c: New files, which test the manager with a bogus command. * src/tests/CMakeLists.txt: Add omp_bogus_0 and omp_bogus_1. 2009-06-02 Matthew Mundell <matthew.mundell@greenbone.net> Move response statuses into attributes, in tests. * src/tests/omp_abort_task_0.c, src/tests/omp_create_task_0.c, src/tests/omp_delete_report_0.c, src/tests/omp_delete_report_1.c, src/tests/omp_delete_task_0.c, src/tests/omp_delete_task_1.c, src/tests/omp_get_certificates_0.c, src/tests/omp_get_dependencies_0.c, src/tests/omp_get_nvt_all_0.c, src/tests/omp_get_nvt_details_0.c, src/tests/omp_get_nvt_details_2.c, src/tests/omp_get_nvt_details_3.c, src/tests/omp_get_nvt_feed_checksum_0.c, src/tests/omp_get_preferences_0.c, src/tests/omp_get_preferences_1.c, src/tests/omp_get_report_0.c, src/tests/omp_get_rules_0.c, src/tests/omp_get_rules_1.c, src/tests/omp_get_status_0.c, src/tests/omp_get_status_1.c, src/tests/omp_get_status_2.c, src/tests/omp_get_status_3.c, src/tests/omp_get_status_4.c, src/tests/omp_get_version_0.c, src/tests/omp_help_0.c, src/tests/omp_modify_report_0.c, src/tests/omp_modify_task_0.c, src/tests/omp_modify_task_1.c, src/tests/omp_start_task_0.c: Adjust for attribute statuses. * src/tests/common.h (entity_t): Add attributes. (add_attribute, entity_child, entity_attribute): New headers. * src/tests/common.c (make_entity): Init attributes. (add_attribute, entity_attribute, add_attributes) (compare_find_attribute): New functions. (free_entity): Free attributes. (entity_child): Make name param const. (handle_start_element): Add attributes. (compare_entities): Compare attributes. Correct NULL check. (task_status, authenticate, start_task, wait_for_task_start) (wait_for_task_end, delete_task): Adjust for attribute statuses. 2009-06-02 Matthew Mundell <matthew.mundell@greenbone.net> Move response statuses into attributes. * src/ompd.c (serve_omp): On process_omp_client_input error, write out the rest of the to_client buffer before exiting. Handle the response from the very first process_omp_client_input. * src/omp.c (XML_ERROR_SYNTAX, XML_ERROR_MISSING, XML_ERROR_AUTH_FAILED) (XML_OK, XML_OK_REQUESTED, XML_INTERNAL_ERROR, XML_SERVICE_DOWN): New macros. (omp_xml_handle_start_element, omp_xml_handle_end_element): Convert all status tags to attributes. (process_omp_client_input): Return -4 on XML syntax error. 2009-05-29 Matthew Mundell <matthew.mundell@greenbone.net> Make the tests compile and run again. * src/tests/report_path_task_uuid_1.c, src/tests/report_path_task_uuid_0.c, src/tests/report_path_task_uuid_2.c: Comment out setup_test and common.h include. * src/tests/strip_space_0.c, src/tests/strip_space_2.c, src/tests/strip_space_3.c, src/tests/strip_space_1.c, src/tests/rmdir_recursively_0.c, src/tests/rmdir_recursively_1.c: Include common.h. * src/tests/omp_start_task_2.c, src/tests/omp_abort_task_0.c, src/tests/omp_delete_task_0.c, src/tests/omp_start_task_1.c, src/tests/omp_delete_task_1.c, src/tests/omp_start_task_0.c: Turn on TRACE. * src/tests/CMakeLists.txt (rmdir_recursively_0, rmdir_recursively_1) strip_space_0, strip_space_1, strip_space_2, strip_space_3): Link to common and requirement of common. 2009-05-29 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_abort_task_0.c, src/tests/omp_create_task_0.c, src/tests/omp_delete_report_0.c, src/tests/omp_delete_report_1.c, src/tests/omp_delete_task_0.c, src/tests/omp_delete_task_1.c, src/tests/omp_delete_task_2.c, src/tests/omp_get_dependencies_0.c, src/tests/omp_get_dependencies_1.c, src/tests/omp_get_nvt_all_0.c, src/tests/omp_get_nvt_all_1.c, src/tests/omp_get_nvt_details_0.c, src/tests/omp_get_nvt_details_2.c, src/tests/omp_get_nvt_details_3.c, src/tests/omp_get_nvt_details_4.c, src/tests/omp_get_nvt_feed_checksum_0.c, src/tests/omp_get_nvt_feed_checksum_1.c, src/tests/omp_get_preferences_0.c, src/tests/omp_get_preferences_1.c, src/tests/omp_get_report_0.c, src/tests/omp_get_rules_0.c, src/tests/omp_get_rules_1.c, src/tests/omp_get_status_0.c, src/tests/omp_get_status_1.c, src/tests/omp_get_status_2.c, src/tests/omp_get_status_3.c, src/tests/omp_get_status_4.c, src/tests/omp_get_version_0.c, src/tests/omp_help_0.c, src/tests/omp_modify_report_0.c, src/tests/omp_modify_task_0.c, src/tests/omp_modify_task_1.c, src/tests/omp_start_task_0.c, src/tests/omp_start_task_1.c, src/tests/omp_start_task_2.c, src/tests/report_path_task_uuid_0.c, src/tests/report_path_task_uuid_1.c, src/tests/report_path_task_uuid_2.c, src/tests/rmdir_recursively_0.c, src/tests/rmdir_recursively_1.c, src/tests/strip_space_0.c, src/tests/strip_space_1.c, src/tests/strip_space_2.c, src/tests/strip_space_3.c: Call setup_test before testing. 2009-05-29 Matthew Mundell <matthew.mundell@greenbone.net> Add OTP CERTIFICATES handling and OMP GET_CERTIFICATES. * src/manage.c (request_certificates): New function. * src/manage.h: Update headers. * src/omp.c (help_text, client_state_t): Add GET_CERTIFICATES entries. (send_certificate): New function. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add GET_CERTIFICATES handling. * src/otp.h (server_t): Add certificates. * src/otp.c (init_otp_data): Init server certificates. (server_state_t): Add CERTIFICATES states. (current_certificates, current_certificate): New variables. (parse_server_certificate_public_key): New function. (parse_server_server, process_otp_server_input): Add CERTIFICATES handling. * src/tests/omp_help_0.c (help_text): Add GET_CERTIFICATES entry. * src/tests/omp_get_certificates_0.c, src/tests/omp_get_certificates_1.c: New files. * src/tests/CMakeLists.txt: Add omp_get_certificates_0 and omp_get_certificates_1. 2009-05-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/CMakeLists.txt: Sort rules. 2009-05-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (help_text, client_state_t): Sort entries. * src/tests/omp_help_0.c (help_text): Sort entries. 2009-05-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (create_task): Rename NEW_TASK call to CREATE_TASK. (wait_for_task_start, wait_for_task_end): Rename STATUS call to GET_STATUS. 2009-05-28 Matthew Mundell <matthew.mundell@greenbone.net> Rename OMP STATUS to GET_STATUS. * src/omp.c (help_text, client_state_t, omp_xml_handle_start_element) (omp_xml_handle_end_element, omp_xml_handle_text): Rename STATUS to GET_STATUS. * src/tests/CMakeLists.txt: Rename tests to match new command name. * src/tests/omp_status_0.c: Remove. Rename to omp_get_status_0.c. * src/tests/omp_get_status_0.c: New file. Was omp_status_0.c. Adjust for new name. * src/tests/omp_status_1.c: Remove. Rename to omp_get_status_0.c. * src/tests/omp_get_status_1.c: New file. Was omp_status_0.c. Adjust for new name. * src/tests/omp_status_2.c: Remove. Rename to omp_get_status_2.c. * src/tests/omp_get_status_2.c: New file. Was omp_status_2.c. Adjust for new name. * src/tests/omp_status_3.c: Remove. Rename to omp_get_status_3.c. * src/tests/omp_get_status_3.c: New file. Was omp_status_3.c. Adjust for new name. * src/tests/omp_status_4.c: Remove. Rename to omp_get_status_4.c. * src/tests/omp_get_status_4.c: New file. Was omp_status_4.c. Adjust for new name. * src/tests/omp_get_report_0.c, src/tests/omp_delete_report_0.c, src/tests/omp_get_preferences_1.c, src/tests/omp_modify_task_1.c, src/tests/omp_delete_task_0.c, src/tests/omp_get_nvt_details_4.c, src/tests/omp_get_rules_1.c, src/tests/omp_delete_task_1.c, src/tests/omp_delete_task_2.c, src/tests/omp_get_dependencies_1.c, src/tests/omp_get_nvt_feed_checksum_1.c, src/tests/omp_get_nvt_details_1.c, src/tests/omp_get_nvt_all_1.c, src/tests/omp_modify_report_0.c: Rename all STATUS calls to GET_STATUS. 2009-05-28 Matthew Mundell <matthew.mundell@greenbone.net> Rename OMP GET_NVT_FEED_DETAILS to GET_NVT_DETAILS. * src/omp.c (help_text, client_state_t, omp_xml_handle_start_element) (omp_xml_handle_end_element, omp_xml_handle_text): Rename GET_NVT_FEED_DETAILS to GET_NVT_DETAILS. * src/tests/CMakeLists.txt: Rename tests to match new command name. * src/tests/omp_get_nvt_feed_details_0.c: Remove. Rename to omp_get_nvt_details_0.c. * src/tests/omp_get_nvt_details_0.c: New file. Was omp_get_nvt_feed_details_0.c. Adjust for new name. * src/tests/omp_get_nvt_feed_details_1.c: Remove. Rename to omp_get_nvt_details_0.c. * src/tests/omp_get_nvt_details_1.c: New file. Was omp_get_nvt_feed_details_0.c. Adjust for new name. * src/tests/omp_get_nvt_feed_details_2.c: Remove. Rename to omp_get_nvt_details_2.c. * src/tests/omp_get_nvt_details_2.c: New file. Was omp_get_nvt_feed_details_2.c. Adjust for new name. * src/tests/omp_get_nvt_feed_details_3.c: Remove. Rename to omp_get_nvt_details_3.c. * src/tests/omp_get_nvt_details_3.c: New file. Was omp_get_nvt_feed_details_3.c. Adjust for new name. * src/tests/omp_get_nvt_feed_details_4.c: Remove. Rename to omp_get_nvt_details_4.c. * src/tests/omp_get_nvt_details_4.c: New file. Was omp_get_nvt_feed_details_4.c. Adjust for new name. 2009-05-28 Matthew Mundell <matthew.mundell@greenbone.net> Rename OMP GET_NVT_FEED_ALL to GET_NVT_ALL. * src/omp.c (help_text, client_state_t, omp_xml_handle_start_element) (omp_xml_handle_end_element): Rename GET_NVT_FEED_ALL to GET_NVT_ALL. * src/tests/CMakeLists.txt: Rename omp_get_nvt_feed_all_0 to omp_get_nvt_all_0 and omp_get_nvt_feed_all_1 to omp_get_nvt_all_1. * src/tests/omp_get_nvt_feed_all_0.c: Remove. Rename to omp_get_nvt_all_0.c. * src/tests/omp_get_nvt_all_0.c: New file. Was omp_get_nvt_feed_all_0.c. Adjust for new name. * src/tests/omp_get_nvt_feed_all_1.c: Remove. Rename to omp_get_nvt_all_1.c. * src/tests/omp_get_nvt_all_1.c: New file. Was omp_get_nvt_feed_all_1.c. Adjust for new name. 2009-05-28 Matthew Mundell <matthew.mundell@greenbone.net> Rename OMP NEW_TASK to CREATE_TASK. * src/omp.c (help_text, client_state_t, omp_xml_handle_start_element) (omp_xml_handle_end_element, omp_xml_handle_text): Rename NEW_TASK to CREATE_TASK. * src/tests/CMakeLists.txt: Rename omp_new_task_0 to omp_create_task_0. * src/tests/omp_new_task_0.c: Remove. Rename to omp_create_task_0.c. * src/tests/omp_create_task_0.c: New file. Was omp_new_task_0.c. Adjust for new name. 2009-05-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (help_text): Remove dummy implementation key. 2009-05-28 Matthew Mundell <matthew.mundell@greenbone.net> Rename OMP OMP_VERSION to GET_VERSION. * src/omp.c (help_text, omp_xml_handle_start_element) (omp_xml_handle_end_element): Rename OMP_VERSION to GET_VERSION. * src/tests/CMakeLists.txt: Rename omp_version_0 to omp_get_version_0. * src/tests/omp_version_0.c: Remove. Rename to omp_get_version_0.c. * src/tests/omp_get_version_0.c: New file. Was omp_version_0.c. Adjust for new name. 2009-05-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.h (TO_CLIENT_BUFFER_SIZE): Increase, for now. 2009-05-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_get_nvt_feed_details_4.c: Get ID via get_nvt_feed_all instead of get_nvt_feed_details. Remove printing. 2009-05-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (read_protocol): Use the right socket. 2009-05-28 Matthew Mundell <matthew.mundell@greenbone.net> Timeout if reading the protocol takes too long. * src/openvasmd.c (READ_PROTOCOL_TIMEOUT): New define. (protocol_read_t): Add PROTOCOL_TIMEOUT. (read_protocol): Timeout if reading takes PROTOCOL_TIMEOUT or longer. (serve_client): Handle read_protocol timeout. * src/tests/common.c (setup_test): New function. * src/tests/common.h (setup_test): New header. * src/tests/CMakeLists.txt: Add read_protocol_0.c. * src/tests/read_protocol_0.c: New file. 2009-05-27 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (send_plugin): Correct g_convert charset names. 2009-05-27 Matthew Mundell <matthew.mundell@greenbone.net> Switch to libopenvas nvtis for plugin information. * src/manage.c (find_plugin, free_plugin_for_hash_table) (make_plugin, free_plugin, make_plugins, free_plugin, make_plugins) (free_plugins, plugin_tags, plugins_size, add_plugin) (plugin_oid, plugin_name, plugin_category, plugin_copyright) (plugin_description, plugin_summary, plugin_family, plugin_version) (plugin_cve_id, plugin_bugtraq_id, plugin_xrefs, plugin_fingerprints) (set_plugin_oid, set_plugin_name, set_plugin_category) (set_plugin_copyright, set_plugin_description, set_plugin_summary) (set_plugin_family, set_plugin_version, set_plugin_cve_id) (set_plugin_bugtraq_id, set_plugin_xrefs, set_plugin_fingerprints) (set_plugin_tags): Remove. * src/manage.h: Update headers. * src/omp.c: Convert plugin-related calls into nvti equivalents. * src/otp.h (server_t): Make plugins an nvtis_t. * src/otp.c: Convert plugin-related calls into nvti equivalents. (current_plugins, current_plugin): Convert types to nvti equivalents. * src/CMakeLists.txt (omp, otp): Add openvas headers dir to compile flags. 2009-05-27 Matthew Mundell <matthew.mundell@greenbone.net> Implement OMP GET_NVT_FEED_DETAILS when called to return a specific NVT. * src/manage.c (find_plugin): New function. * src/manage.h (find_plugin): New header. * src/omp.c (client_state_t): Add CLIENT_GET_NVT_FEED_DETAILS_OID. (omp_xml_handle_start_element, omp_xml_handle_end_element) (omp_xml_handle_text): Add GET_NVT_FEED_DETAILS ID handling. (send_plugin): Convert strings to UTF-8 for g_markup_escape_text. Free the correct strings. Correct XML tag. * src/omp.h (TO_CLIENT_BUFFER_SIZE): Increase. * src/tests/omp_get_nvt_feed_details_2.c, src/tests/omp_get_nvt_feed_details_3.c, src/tests/omp_get_nvt_feed_details_4.c: New files. * src/tests/CMakeLists.txt: Add new tests. 2009-05-26 Matthew Mundell <matthew.mundell@greenbone.net> Implement OMP GET_NVT_FEED_DETAILS when called to return all NVTs. * src/omp.c (send_plugin): Add a details option. (omp_xml_handle_end_element): Add real CLIENT_GET_NVT_FEED_DETAILS handling. * src/tests/omp_get_nvt_feed_details_0.c: Improve comments. Use new status code. * src/tests/omp_get_nvt_feed_details_1.c: Get feed initially. Check response. * src/tests/omp_get_nvt_feed_all_1.c: Also check for response status 503. 2009-05-26 Matthew Mundell <matthew.mundell@greenbone.net> Implement OMP GET_NVT_FEED_ALL. * src/manage.c (plugin_t, plugins_t): New types. (plugins_find): New definition. (make_plugin, free_plugin, make_plugins, free_plugin, make_plugins) (free_plugins, request_plugin_list, plugins_size, add_plugin): New functions. (plugin_oid, plugin_name, plugin_category, plugin_copyright) (plugin_description, plugin_summary, plugin_family, plugin_version) (plugin_cve_id, plugin_bugtraq_id, plugin_xrefs, plugin_fingerprints) (plugin_tags): New access functions. (set_plugin_oid, set_plugin_name, set_plugin_category) (set_plugin_copyright, set_plugin_description, set_plugin_summary) (set_plugin_family, set_plugin_version, set_plugin_cve_id) (set_plugin_bugtraq_id, set_plugin_xrefs, set_plugin_fingerprints) (set_plugin_tags): New set functions. * src/manage.h: Update headers. * src/omp.c (send_plugin): New function (SENDF_TO_CLIENT_OR_FAIL): New macro. (omp_xml_handle_end_element): Add real CLIENT_GET_NVT_FEED_ALL handling. * src/otp.h (server_t): Add plugins. * src/otp.c (current_plugin, current_plugins): New variables. (init_otp_data): Init plugins. (server_state_t): Add PLUGIN_LIST states. (parse_server_plugin_list_tags): New function. (process_otp_server_input): Add PLUGIN_LIST handling. * src/tests/src/tests/omp_get_preferences_0.c, src/tests/omp_get_nvt_feed_checksum_0.c, src/tests/omp_get_dependencies_0.c: Correct test numbers in headings. * src/tests/omp_get_nvt_feed_all_0.c: Match new response code. * src/tests/omp_get_nvt_feed_all_1.c: Get feed initially. Check response. 2009-05-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Enable real CLIENT_GET_NVT_FEED_CHECKSUM implementation. * src/tests/omp_get_nvt_feed_checksum_0.c: Use new status code. * src/tests/omp_get_nvt_feed_checksum_1.c: Add comparison to expected response. 2009-05-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_start_element): Add enclosing tags that were missing from certain responses. Initialise current_uuid in STATUS. * src/tasks_sql.h (make_task): Quote uuid in SQL. (find_task): Quote uuid in SQL. Invert return. * src/tests/common.c (next_entities, first_entity): New functions. (create_task, create_task_from_rc_file, wait_for_task_start) (wait_for_task_end, delete_task): Change task ID param to a string. (id_string): Remove. * src/tests/common.h: Update headers. * src/tests/omp_get_report_0.c, src/tests/omp_delete_report_0.c, src/tests/omp_start_task_2.c, src/tests/omp_get_preferences_1.c, src/tests/omp_modify_task_1.c, src/tests/omp_abort_task_0.c, src/tests/omp_delete_task_0.c, src/tests/omp_get_rules_1.c, src/tests/omp_start_task_1.c, src/tests/omp_delete_task_1.c, src/tests/omp_get_nvt_feed_details_1.c, src/tests/omp_status_2.c, src/tests/omp_delete_task_2.c, src/tests/omp_get_dependencies_1.c, src/tests/omp_get_nvt_feed_checksum_1.c, src/tests/omp_status_4.c, src/tests/omp_start_task_0.c, src/tests/omp_modify_task_0.c, src/tests/omp_status_1.c, src/tests/omp_status_0.c, src/tests/omp_status_3.c, src/tests/omp_delete_report_1.c, src/tests/omp_modify_report_0.c, src/tests/omp_get_nvt_feed_all_1.c: Switch to string task IDs. Match response statuses to manager. 2009-05-25 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (main): Fork into background on start, or stay in foreground if -f switch given. 2009-05-23 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (STATUS_SERVICE_DOWN): New status code. (omp_xml_handle_start_element): Initialise current_uuid in operations that use it. (omp_xml_handle_end_element): Use STATUS_SERVICE_DOWN instead of STATUS_INTERNAL_ERROR in CLIENT_GET_PREFERENCES, CLIENT_GET_DEPENDENCIES and CLIENT_GET_NVT_FEED_CHECKSUM. In CLIENT_STATUS adjust the current_uuid check to account for the new initial value of current_uuid. 2009-05-22 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/make_report_id_0.c: Rename make_report_uuid_0.c. * src/tests/report_path_task_name_0.c: Rename report_path_task_uuid_0.c. * src/tests/report_path_task_name_1.c: Rename report_path_task_uuid_1.c. * src/tests/report_path_task_name_2.c: Rename report_path_task_uuid_2.c. * src/tests/make_report_uuid_0.c, src/tests/report_path_task_uuid_0.c, src/tests/report_path_task_uuid_1.c, src/tests/report_path_task_uuid_2.c: Update function names in header comments. * src/tests/CMakeLists.txt: Update file names. Remove duplicate entries. 2009-05-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (report_task): Correct variable name. Move free to after last use. 2009-05-20 Matthew Mundell <matthew.mundell@greenbone.net> Better match HTTP response codes in response statuses. * src/omp.c (STATUS_ERROR_SYNTAX, STATUS_ERROR_MUST_AUTH) (STATUS_ERROR_MISSING, STATUS_ERROR_AUTH_FAILED, STATUS_OK) (STATUS_OK_CREATED, STATUS_OK_REQUESTED, STATUS_INTERNAL_ERROR): New defines. Use instead of codes in all XML status entities. 2009-05-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (current_task_task_id): Rename current_uuid. Update callers. 2009-05-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/CMakeLists.txt (OVAS_LDFLAG): Add libopenvas. 2009-05-20 Matthew Mundell <matthew.mundell@greenbone.net> Rename make_report_id to make_report_uuid, and report_path_task_name to report_path_task_uuid. * src/manage.c (make_report_id): Rename to make_report_uuid. Update callers. (report_path_task_name): Free task_dir in alternate version. Rename to report_path_task_uuid. Update callers. (make_report_uuid, report_path_task_uuid): New functions. * src/manage.h: Update headers. * src/tests/report_path_task_name_0.c, src/tests/report_path_task_name_1.c, src/tests/report_path_task_name_2.c: Update to report_path_task_uuid. * src/tests/make_report_id_0.c: Update to make_report_uuid. 2009-05-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/CMakeLists.txt: Remove OPENVAS_USERS_DIR definition added too eagerly. 2009-05-20 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (\mainpage): Add License Information section. 2009-05-20 Matthew Mundell <matthew.mundell@greenbone.net> Add task UUIDs. * src/tasks_fs.h (task_uuid): New function. (task_id_string): Remove. (save_tasks, delete_task): Use task_uuid instead of task_id_string. * src/tasks_sql.h (task_uuid): New function. (task_id_string): Switch to UUID alternative. Rename task_uuid. (make_task): Also insert UUID. (save_tasks, delete_task): Use task_uuid instead of task_id_string. (find_task): Switch to UUID alternative. * src/manage.c (make_task_uuid): New function. (create_report_file, delete_reports): Use task_uuid instead of task_id_string. * src/manage.h: Update headers. * src/omp.c: Use task_uuid instead of task_id_string. 2009-05-19 Matthew Mundell <matthew.mundell@greenbone.net> Add real authentication. * src/manage.c: Include openvas/openvas_auth.h. * src/tasks_sql.h (authenticate): Call openvas_authenticate to check credentials. * src/tasks_fs.h (authenticate): Call openvas_authenticate to check credentials. * src/manage.h (authenticate): Ajust parameter type. * src/omp.c (omp_xml_handle_end_element): In CLIENT_AUTHENTICATE respond with error code on error. * src/CMakeLists.txt (TEMP): Split into LIB_TEMP and HEADER_TEMP. (manage): Pass openvas headers. 2009-05-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_delete_task_2.c: Add check of whether removal has been requested. 2009-05-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (create_report_file): Use stored start time. 2009-05-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (process_otp_server_input): In SERVER_TIME_SCAN_END close current report after removing report and check if the current report still exists before writing to it. 2009-05-18 Matthew Mundell <matthew.mundell@greenbone.net> Bring FS based tasks up to date. * src/tasks_sql.h (init_manage_process): New function, was init_manage. (init_manage): Move body to init_manage_process. Replace with placeholder function. (cleanup_manage_process): New function, was cleanup_manage. Turn off task printing. (cleanup_manage): Rename cleanup_manage_process. (request_delete_task): New function. (delete_task): Move some of body to request_delete_task. 2009-05-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_modify_task_1.c: Declare name. Correct init of name. 2009-05-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (init_omp): Doc return. * src/tasks_sql.h (init_manage): Return -1 on error instead of aborting. * ChangeLog: Add heading to last log. 2009-05-18 Matthew Mundell <matthew.mundell@greenbone.net> Ensure that task statuses are consistent on startup. * src/openvasmd.c (main): Call init_ompd. * src/tasks_sql.h (init_manage_process): New function, was init_manage. (init_manage): Move body to init_manage_process. Replace with function that makes database consistent. Adjust callers. (cleanup_manage_process): New function, was cleanup_manage. (cleanup_manage): Rename cleanup_manage_process. Adjust callers. * src/manage.h: Update headers. * src/omp.c (init_omp, init_omp_process): New functions. (init_omp_data): Rename init_omp_process. Adjust callers. * src/omp.h: Update headers. * src/ompd.c (init_ompd): New function. * src/ompd.h: Update headers. 2009-05-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.h (DO_CHILDREN, id_string): Move back to common.c. * src/tests/common.c (DO_CHILDREN, id_string): Move back from common.h. * src/tests/omp_modify_task_1.c: Use new ID STATUS return instead of searching in STATUS return. * ChangeLog: Log last commit. 2009-05-18 Matthew Mundell <matthew.mundell@greenbone.net> * doc/Doxyfile (EXTRACT_ALL): Turn off, to enable warnings about missing function docs. 2009-05-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/logf.h (LOG_FILE): Change extension to comm, as this file is only a log of communication. * src/openvasmd.c (main): Create log directory if required. * src/CMakeLists.txt: Remove making of log directory from install. 2009-05-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/tasks_fs.h, src/tasks_sql.h: Update doc params. * src/manage.c (task_run_status_name): Add missing doc. 2009-05-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (task_status): New function. * src/tests/common.h (task_status): New header. * src/tests/omp_delete_task_0.c: Add check of whether removal has been requested. 2009-05-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Extend the ID version of OMP STATUS to return more task information. 2009-05-15 Matthew Mundell <matthew.mundell@greenbone.net> Add an intermediate "delete requested" task state, and delete the task only after receiving the SCAN_END message from the server. * src/manage.h (task_status_t): Add TASK_STATUS_DELETE_REQUESTED. (request_delete_task): New header. (delete_task): Update header. * src/manage.c (task_run_status_name): Add TASK_STATUS_DELETE_REQUESTED. * src/tasks_sql.c (request_delete_task): New function. (delete_task): Move request parts to request_delete_task. * src/omp.c (omp_xml_handle_end_element): In CLIENT_DELETE_TASK call request_delete_task instead of delete_task. * src/otp.c (process_otp_server_input): In SERVER_TIME_SCAN_END call delete_task if a delete was requested. 2009-05-15 Matthew Mundell <matthew.mundell@greenbone.net> Add an intermediate "stop requested" task state, and set the task to "done" or "stopped" only when receiving the SCAN_END message from the server. * src/manage.h (task_status_t): Add TASK_STATUS_STOP_REQUESTED and TASK_STATUS_STOPPED. (task_run_status_name): New header. * src/manage.c (stop_task): Replace TASK_STATUS_DONE with TASK_STATUS_STOP_REQUESTED. (task_run_status_name): New function. * src/omp.c (omp_xml_handle_end_element): In CLIENT_STATUS use task_run_status_name. * src/otp.c (process_otp_server_input): In SERVER_TIME_SCAN_END set task status to TASK_STATUS_STOPPED if a stop was requested. 2009-05-15 Michael Wiegand <michael.wiegand@greenbone.net> Initial set of changes to make Debian packaging work. * packaging/debian/compat: New. Sets debhelper compatibility level to 5. * packaging/debian/control: Set dependencies for package. * packaging/debian/openvas-manager.dirs: New. Request creation of var/lib/openvas/mgr. * packaging/debian/openvas-manager.install: New. Request installation of the created binary. * packaging/debian/rules: Adjusted calls to cmake and make to make the package build as expected. * src/logf.h: Changed to honour OPENVAS_LOG_DIR because PREFIX might be in a different hierarchy than the appropriate place for the log file. * src/CMakeLists.txt: Define OPENVAS_LOG_DIR when compiling. Temporarily disabled directory creation since it broke Debian packaging; the mkdir should use DESTDIR, not CMAKE_INSTALL_PREFIX directly. Changed install to honour LIBDIR and BINDIR. * CMakeLists.txt: Make it possible to set different prefixes for individual directories; this is expected by Debian. * src/openvasmd.c: (cleanup) Better NULL guard for fclose since it seemed to somehow trigger a segfault in the packaged Debian binary when compiled on Lenny. 2009-05-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/new_task_empty_rc, src/tests/new_task_medium_rc: Remove old XML wrapper tags. 2009-05-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/new_task_small_rc (CLIENTSIDE_USERRULES): Add two rules. * src/manage.c (send_task_rules): New function. (start_task): Move required preferences to follow task preferences. Enable sending of task rules. 2009-05-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_delete_task_2.c: New file. Tests removing a running task. * src/tests/CMakeLists.txt: Add omp_delete_task_2. 2009-05-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (process_otp_server_input): Clear server_active in SERVER_BYE. (Missing file from 2009-05-13 client exit commit.) 2009-05-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/ovas-mngr-comm.c (sendn_to_server): New function. (send_to_server): Use sendn_to_server. * src/ovas-mngr-comm.h (sendn_to_server): New header. * src/manage.c (send_task_preferences): New function. (start_task): Send 0 if plugin set is empty. Send server and plugin preferences. 2009-05-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_status_4.c: Correct test number in comment. 2009-05-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_start_task_2.c: New file. * src/tests/CMakeLists.txt: Add omp_start_task_2. 2009-05-13 Matthew Mundell <matthew.mundell@greenbone.net> Ensure that the manager process continues handling server messages if the client exits before the server has finished a running task. * src/manage.h (server_active): New header. * src/manage.c (server_active): New variable. (start_task): Mark server as active after starting task. * src/omp.h (server_is_active): New header. * src/omp.c (server_is_active): New function. * src/ompd.c (serve_omp): If the server is active when the client connection closes then only exit after the server is done. 2009-05-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_modify_task_1.c: Turn off verbosity. 2009-05-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_modify_task_1.c: New file. * src/tests/CMakeLists.txt: Add omp_modify_task_1. * src/tests/common.h (id_string): New header. 2009-05-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (DO_CHILDREN): Move to header. * src/tests/common.h (DO_CHILDREN): New macro, from common.c. 2009-05-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_status_3.c: Remove tracing. 2009-05-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_modify_task_0.c: Improve task name. * ChangeLog: Correct last log. 2009-05-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_status_4.c: Remove tracing. 2009-05-13 Michael Wiegand <michael.wiegand@greenbone.net> More post release version bumps for documentation and packaging. * doc/Doxyfile, doc/Doxyfile_full, CMakeLists.txt: Set to 0.5.1.SVN. 2009-05-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (cleanup): Check log_stream before closing. 2009-05-12 Michael Wiegand <michael.wiegand@greenbone.net> Post release version bump. * VERSION: Set to 0.5.1.SVN. 2009-05-12 Michael Wiegand <michael.wiegand@greenbone.net> * CMakeLists.txt: Added doc/generated to CPACK_SOURCE_IGNORE_FILES. 2009-05-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (DO_CHILDREN): Add back (accidentally removed yesterday). 2009-05-12 Matthew Mundell <matthew.mundell@greenbone.net> * doc/Doxyfile, doc/Doxyfile_full (INPUT): Revert to explicit file list. * doc/CMakeLists.txt (DOC_FILES): New variable. (.built-html, .built-html_full): Add back dependencies. * src/openvasmd.c (manpage): Adjust include for updated Doxyfile EXAMPLE_PATH. 2009-05-12 Matthew Mundell <matthew.mundell@greenbone.net> * doc/Doxyfile_full: Flush trailing whitespace. 2009-05-12 Michael Wiegand <michael.wiegand@greenbone.net> Made generated source code documentation more consistent with the documentation generated for other modules. * doc/Doxyfile: Adjusted a few settings to be consistent. * doc/Doxyfile_full: New. Provides a more complete documentation with call graphs and the like. * doc/CMakeLists.txt: Adjusted to provide the make doc and doc-full targets consistent with the other modules. 2009-05-11 Matthew Mundell <matthew.mundell@greenbone.net> Add an OMP HELP command. * src/omp.c (help_text): New variable. (client_state_t): Add CLIENT_HELP. (omp_xml_handle_start_element, omp_xml_handle_end_element): Add HELP handling. * src/tests/omp_help_0.c: New file. * src/tests/CMakeLists.txt: Add omp_help_0. 2009-05-11 Matthew Mundell <matthew.mundell@greenbone.net> Add a verbose flag. * src/ovas-mngr-comm.c (verbose): New variable. * src/tests/common.c (verbose): New variable. (TRACE): Enable. * src/openvasmd.c (main): Add verbose flag. * src/tracef.h (verbose): New header. (tracef): Honour verbose variable. * README: Update usage message. 2009-05-11 Matthew Mundell <matthew.mundell@greenbone.net> * doc/Doxyfile (INPUT): Add src/tasks_sql.h and src/tasks_fs.h. * src/openvasmd.c (\mainpage): Note src/tasks_sql.h and src/tasks_fs.h. 2009-05-11 Matthew Mundell <matthew.mundell@greenbone.net> * README: Revert sentence about connecting as though to server. 2009-05-11 Matthew Mundell <matthew.mundell@greenbone.net> Address remaining warnings. * src/tasks_sql.h (sql_string): Return signed char. Cast away signs. (append_to_task_string): Make "current" signed. (free_task): Remove. * src/manage.c (print_tasks): Direct out. 2009-05-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/otpd.c (serve_otp): Connect to server initially. 2009-05-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (task_plugins): Separate plugins with semicolons. 2009-05-11 Matthew Mundell <matthew.mundell@greenbone.net> * doc/Doxyfile (EXTRACT_STATIC): Enable. * src/ompd.c (serve_omp): Doc missing params. * src/file.c (G_LOG_DOMAIN): Add doc. * src/ompd.c (error_send_to_client): Add doc. * src/otp.c, src/manage.c: Add missing docs. 2009-05-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/CMakeLists.txt (install): Create PREFIX/var/lib/openvas/mgr/. 2009-05-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_start_element): Correct lengths in CLIENT_TOP comparisons. 2009-05-08 Matthew Mundell <matthew.mundell@greenbone.net> * README, INSTALL: Update requirements and descriptions. 2009-05-08 Michael Wiegand <michael.wiegand@greenbone.net> Preparing the openvas-manager 0.5.0 release. * CHANGES: New. * VERSION: Set to 0.5.0. * CMakeLists.txt: Adjusted version. 2009-05-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/CMakeLists.txt: Add SQLite linkage. Move tests of support libraries before rest. Order tests alphabetically. 2009-05-08 Matthew Mundell <matthew.mundell@greenbone.net> * CMakeLists.txt: Add check for SQLite3 library. 2009-05-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (start_task): Free task_plugins string after use. 2009-05-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (task_plugins): New function. (start_task): Request plugins listed in RC file instead of always requesting all plugins. (task_preference): Correct parsing. 2009-05-08 Matthew Mundell <matthew.mundell@greenbone.net> Ensure that the memory allocated in sql_string is always freed. * src/manage.h (task_name, task_comment, task_description) (task_start_time, task_end_time, task_attack_state): Drop const from return type. * src/manage.c (task_name, task_comment, task_description) (task_start_time, task_end_time, task_attack_state): Drop const from return type. (print_tasks, create_report_file, task_preference): Free task string elements after use. * src/tasks_fs.h (task_comment): New function. (task_name, task_description, task_start_time, task_end_time) (task_attack_state): Return duplicate of task element. * src/tasks_sql.h (append_to_task_string): Free return from sql_string after use. (task_name, task_comment, task_description, task_start_time) (task_end_time, task_attack_state): Drop const from return type. * src/omp.c (omp_xml_handle_end_element): Free task string elements after use. * src/otp.c (save_report): Free task_start_time return after use. 2009-05-08 Matthew Mundell <matthew.mundell@greenbone.net> * src/ovas-mngr-comm.c (sendf_to_server): New function. * src/ovas-mngr-comm.h (sendf_to_server): New header. * src/manage.c (task_preference): New function. (start_task): Use RC file targets instead of hardcoded target. (stop_task): Send STOP_WHOLE_TEST instead of STOP_ATTACK. 2009-05-07 Michael Wiegand <michael.wiegand@greenbone.net> * CMakeLists.txt: Added initial support for creating source and binary packages with CPack. 2009-05-06 Matthew Mundell <matthew.mundell@greenbone.net> Switch to an embedded database for task storage, keeping file system based storage as an alternative. * src/tasks_fs.h: New file. * src/manage.c: Include tasks file according to TASKS_FS. Move all code specific to the task representation to tasks_fs.h (report_task): Move the return to a parameter and return an error status. Adjust all callers. (print_tasks): Make comment and description const. (create_report_file, start_task, stop_task): Use task functions for accessing and incrementing values, instead of working with the task member. * src/tasks_sql.h: New file which implements database equivalents of the code moved to tasks_fs.h. * src/manage.h (init_manage, cleanup_manage, task_comment): New headers. (task_t, task_iterator_t): Add defininitions for database tasks. (report_task): Update header. (task_name, task_description, task_start_time, task_end_time) (task_attack_state): Make returns const. * src/omp.c: Always cast the NULL task. (init_omp_data): Call init_manage. * src/otp.c: Always cast the NULL task. * src/openvasmd.c (cleanup): Call cleanup_manage. * src/CMakeLists.txt (TASKS_CFLAG, TASKS_LDFLAG): New variables for controlling task backend. Add to targets. (C_FILES): Add task include files. 2009-04-16 Matthew Mundell <matthew.mundell@greenbone.net> Improve the task abstraction by moving parsing of the task ID into find_task. Separate out task code specific to the task representation. * src/manage.c: Reorder code to separate out representation-specific parts. (task_comment): New function. (free_task): Free attack_state. (make_task): Init start_time and end_time. (find_task): Update to take the ID as a string. (set_task_parameter): Replace IDENTIFIER parameter with NAME. * src/manage.h: Reorder headers. (find_task): Adjust header. * src/omp.c: Update find_task callers. 2009-04-14 Matthew Mundell <matthew.mundell@greenbone.net> Improve the task abstraction by accessing all task fields via functions and storing the current report in a global variable instead of in the task. * src/manage.c (current_report): New variable. (task_id, task_name, task_description, set_task_description) (task_run_status, set_task_run_status, task_start_time) (set_task_start_time, task_end_time, set_task_end_time) (task_report_count, task_attack_state, set_task_attack_state) (task_debugs_size, inc_task_debugs_size, task_holes_size) (inc_task_holes_size, task_infos_size, inc_task_infos_size) (task_logs_size, inc_task_logs_size, task_notes_size) (inc_task_notes_size): New functions. (free_task, make_task, create_report_file): Use new current_report variable. * src/manage.h: Add new headers. (fs_task_t): Remove current_report. * src/otp.c, src/omp.c: Use new task access functions and new global current_report. 2009-04-14 Matthew Mundell <matthew.mundell@greenbone.net> Improve task abstraction by changing task_t to a pointer and adding a task iterator. * src/manage.h (fs_task_t): New name for task_t. (task_t): Change to pointer to fs_task_t. Update all users. (task_iterator_t): New struct. (task_count, init_task_iterator, next_task): New headers. (tasks_size, tasks, num_tasks): Remove. * src/manage.c (task_count, init_task_iterator, next_task): New functions. Update all task_t users. * src/otp.c: Update all task_t users. * src/omp.c: Update all task_t users. (omp_xml_handle_end_element): Add tracing and comment to CLIENT_DELETE_TASK case. In CLIENT_STATUS iterate with task iterator. 2009-04-09 Matthew Mundell <matthew.mundell@greenbone.net> Write OTP report messages directly to the report on disk, instead of buffering the messages in memory. * src/manage.h (task_t): Correct run_status type. Add current_report. Remove message arrays. (make_task): Adjust annotation. (make_report_id): Include in exportlocal annotation. * src/manage.c (free_message): Remove. (free_task, make_task): Handle current report. Remove message array handling. (create_report_file): New function. Body from src/otp.c save_report. (start_task): Create report stream before starting * src/otp.c (free_message): Enable. Take only one arg. (write_message): Take stream and type args directly. (write_timestamp): Take host arg. (save_report): Just close the report stream. (append_timestamp): New function. (append_debug_message, append_hole_message, append_info_message) (append_log_message, append_note_message): Write the message to the report stream. (process_otp_server_input): Free current_message after appending it. Append timestamps in time cases. In SERVER_DEBUG_OID and SERVER_HOLE_OID also check that the current_server_task exists. Move report saving from HOST_END to SCAN_END. 2009-04-09 Michael Wiegand <michael.wiegand@greenbone.net> * src/tests/common.c: Added connect_to_manager_host_port, a modification of connect_to_manager which allows connections to arbitrary hosts and ports. Made connect_to_manager a wrapper around connect_to_manager_host_port using OPENVASMD_ADDRESS and OPENVASMD_PORT. 2009-04-08 Matthew Mundell <matthew.mundell@greenbone.net> Cleanup and annotate more, from Splint. * src/types.h: New file. * src/splint.h (g_malloc, g_malloc0, g_ptr_array_add, g_slist_append, g_hash_table_destroy): New headers. (dirent_pointer_pointer): Remove "out" annotation. * src/ompd.h: Turn off exportlocal around server_address. (to_client_start, to_client_end): Change to buffer_size_t. * src/ompd.c (from_buffer_size, from_client_start, from_client_end, from_server_start, from_server_end): Change to buffer_size_t. (read_from_server): Remove tracing. Cast count for += and gnutls_perror. Add count assertion. (serve_omp): Use buffer_size_t format in tracefs. Change lastfds and fds to uint8_t. Make fds checks explicitly boolean. Change initial_start to buffer_size_t. * src/otp.h: Turn off exportlocal around server. * src/otp.c (from_buffer_size): Change to buffer_size_t. (tcp_string, udp_string, other_string, empty_string): New variables. (port_protocol_name): Return refs to variables instead of strings. Add shared annotation. (print_port): Update format specifier for type change. (current_message): Add only annotation. (make_message): Annotate. Cast g_malloc return. (message_data_t): Annotate members temp. (append_debug_message, append_hole_message, append_info_message, append_log_message, append_note_message): Annotate message arg keep. (current_server_preference, current_server_plugin_dependency_name) (current_server_plugin_dependency_dependencies): Annotate only. (add_server_preference, append_to_current_server_plugin_dependency): Annotate args keep. (add_server_plugins_dependency): Annotate args keep. Make assert explicitly boolean. (finish_current_server_plugin_dependency): Make assert explicitly boolean. (free_rule): Annotate rule arg. Check rule before freeing. (add_server_rule): Change arg annotation to keep. (from_server_start, from_server_end): Change to buffer_size_t. (parse_server_preference_value, parse_server_preference_value): Make assert explicitly boolean. Cast char for memchr. (parse_server_plugin_dependency_dependency, parse_server_server): Make from_start and from_end buffer_size_t. Annotate dependent variables. Correct <|> checks. (sync_buffer): Use buffer_size_t format in tracef. (process_otp_server_input): Make from_start and from_end size_t. Annotate dependent variables. Cast char for memchr. Ensure pointer comparisons are explicitly boolean. Use g_malloc0 instead of g_newa. * src/manage.h: Turn off exportlocal around report_path_task_name and report_task. (set_task_parameter): Add null annotation to arg. (port_t): Add unsigned to type of number. * src/manage.c (set_task_parameter): Fail if value is NULL. (start_task): Send ntp_opt_show_end "no". (grow_description): Remove tracing. (append_task_open_port): Check task->open_ports before use. Cast away g_array_append_val return. * src/ovas-mngr-comm.c (end_session): Pass fcntl a long zero. Handle gnutls_bye return. (to_server_buffer_space): Check end and start before use. Cast return. (connect_to_server): Cast socklen_t for fprintf and size_t for gnutls_perror. Use z modifier for size_t tracef. * src/omp.h (to_client_start, to_client_end): Change type to buffer_size_t. * src/omp.c (to_client_start, to_client_end): Change type to buffer_size_t. (current_client_task): Add dependent annotation. (xml_context): Initialise. (SEND_TO_CLIENT): Remove. (send_to_client, error_send_to_client): New functions. (SEND_TO_CLIENT_OR_FAIL): New macro. (omp_xml_handle_start_element, send_requirement, send_dependency, send_preference, send_rule, send_reports): Replace old SEND_TO_CLIENT macro with new functions. (omp_xml_handle_end_element): Use SEND_TO_CLIENT_OR_FAIL and new send functions instead of SEND_TO_CLIENT. Always check current_task_task_id before use. Change pointer comparisons to be explicitly boolean. (from_client_start, from_client_end): Change to buffer_size_t. (init_omp_data): Free xml_context before setting it. (process_omp_client_input): Check xml_context before use. * src/otpd.c (from_buffer_size, from_client_start, from_client_end, from_server_start, from_server_end): Change to buffer_size_t. (serve_otp): Use buffer_size_t format for tracef. Make fds checks explicitly boolean. Change initial_start to buffer_size_t. Cast count for gnutls_perror. * src/openvasmd.c (from_buffer_size, from_client_start, from_client_end, from_server_start, from_server_end): Change to buffer_size_t. (read_protocol): Pass fcntl a long zero. 2009-04-07 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * CMakeLists.txt, doc/CMakeLists.txt, doc/openvasmd.8.xml, src/CMakeLists.txt, src/file.c, src/file.h, src/logf.h, src/manage.c, src/manage.h, src/omp.c, src/omp.h, src/ompd.c, src/ompd.h, src/openvasmd.c, src/otp.c, src/otp.h, src/otpd.c, src/otpd.h, src/ovas-mngr-comm.c, src/ovas-mngr-comm.h, src/splint.h, src/string.c, src/string.h, src/task.h, src/tracef.h, src/tests/CMakeLists.txt, src/tests/common.c, src/tests/common.h, src/tests/make_report_id_0.c, src/tests/omp_abort_task_0.c, src/tests/omp_delete_report_0.c, src/tests/omp_delete_report_1.c, src/tests/omp_delete_task_0.c, src/tests/omp_delete_task_1.c, src/tests/omp_get_dependencies_0.c, src/tests/omp_get_dependencies_1.c, src/tests/omp_get_nvt_feed_all_0.c, src/tests/omp_get_nvt_feed_all_1.c, src/tests/omp_get_nvt_feed_checksum_0.c, src/tests/omp_get_nvt_feed_checksum_1.c, src/tests/omp_get_nvt_feed_details_0.c, src/tests/omp_get_nvt_feed_details_1.c, src/tests/omp_get_preferences_0.c, src/tests/omp_get_preferences_1.c, src/tests/omp_get_report_0.c, src/tests/omp_get_rules_0.c, src/tests/omp_get_rules_1.c, src/tests/omp_modify_report_0.c, src/tests/omp_modify_task_0.c, src/tests/omp_new_task_0.c, src/tests/omp_start_task_0.c, src/tests/omp_start_task_1.c, src/tests/omp_status_0.c, src/tests/omp_status_1.c, src/tests/omp_status_2.c, src/tests/omp_status_3.c, src/tests/omp_status_4.c, src/tests/omp_version_0.c, src/tests/report_path_task_name_0.c, src/tests/report_path_task_name_1.c, src/tests/report_path_task_name_2.c, src/tests/rmdir_recursively_0.c, src/tests/rmdir_recursively_1.c, src/tests/strip_space_0.c, src/tests/strip_space_1.c, src/tests/strip_space_2.c, src/tests/strip_space_3.c, packaging/debian/copyright: Transferred Copyright from Intevation to Greenbone Networks. 2009-04-01 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * packaging/debian/control: Lower dependecy for debhelper from 6 to 5. * packaging/debian/changelog: New. A initial stub. * packaging/debian/copyright: New. * packaging/debian/rules: New. Initial version, not fully functional yet. 2009-04-01 Michael Wiegand <michael.wiegand@greenbone.net> * src/tests/CMakeLists.txt: Added missing GLIB_CFLAGS to target properties. 2009-03-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (env_authenticate): Remove RATS annotation. 2009-03-31 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_delete_task_0.c: Test by checking status instead of counting tasks. 2009-03-31 Matthew Mundell <matthew.mundell@greenbone.net> Cleanup and annotate, from Splint. Comment RATS annotations. * src/CMakeLists.txt (splint): Switch to +unixlib. * src/splint.h: Add page headings. (gerrorpointer): New type. (g_error_free, g_ptr_array_free, g_file_set_contents, g_build_filename): New headers. (g_base64_decode): Correct return type. (strncasecmp, symlink): Remove. (scandir): Annotate filter arg. "allocate" instead of "define" *namelist. * src/ompd.c (serve_omp): Set fds to a char. * src/manage.h (task_t): Annotate open_ports. (delete_task): Change arg type to **. * src/omp.c (omp_xml_handle_end_element): Use new delete_task arg type in CLIENT_DELETE_TASK. * src/ovas-mngr-comm.c: Remove socklen_t typedef. (write_to_server_buffer): Cast size for gnutls_record_send. * src/openvasmd.c (main): Comment RATS annotations. * src/manage.c (make_report_id): Check id before freeing. (grow_tasks): Comment RATS annotation. (free_task): Complete "releases" annotation. Check task->description before freeing. Turn off "branchstate" around free_task. (only_dirent_pointer): New type. (load_tasks_free, save_task_error): New functions. (load_tasks): Check names after scandir. Call a shared cleanup function instead of jumping. Free file_name at the end of each task iteration. (save_task): Call a shared cleanup function instead of jumping. Check task->description before using it. (set_task_parameter): Annotate value arg. Check parameter for tracef. Fail if parameter is NULL. Check values before freeing them. Always free value. (delete_reports): Initialise names. (delete_task): Take a pointer to the task pointer. Set the task pointer NULL before successfully returning. (append_to_task_comment, append_to_task_identifier): Free task member before assigning. strdup to a temp for Splint. (grow_description): Comment RATS annotation. Change tracef specifier. (add_task_description_line): Compare return to integer. 2009-03-30 Matthew Mundell <matthew.mundell@greenbone.net> Cleanup and annotate, from Splint. * src/otp.c: Include unistd.h and splint.h. (set_message_description, set_message_oid, append_to_current_server_plugin_dependency): Annotate. Describe freeing of args. (write_messages): Add whitespace. (save_report): Check make_report_id return. Cast away rmdir and unlink returns in error cases. (maybe_free_server_preferences, maybe_free_server_plugins_dependencies, maybe_free_current_server_plugin_dependency): Remove. (make_server_preferences): Free preferences first. (add_server_preference, make_current_server_plugin_dependency): Annotate args. (make_server_plugin_dependencies): Free dependencies first. (free_rule): Annotate args. Cast away g_ptr_array_free rule. (add_server_rule): Annotate args. (init_otp_data): Clear plugins_md5. (parse_server_plugin_dependency_dependency): Return gboolean instead of int. Annotate args. Cast char for memchr. (parse_server_server): Annotate args and vars. Cast char for memchr. Remove call to make_server_plugins_dependencies. (process_otp_server_input): Annotate vars. Initialise match. Free server.plugins_md5 before setting. Remove call to maybe_free_server_preferences. * src/otpd.c (from_buffer_size): Change int to size_t. (serve_otp): Change fds to a short. * src/openvasmd.c (from_buffer_size, from_client_start, from_server_start, from_server_end): Change types to size_t. 2009-03-30 Matthew Mundell <matthew.mundell@greenbone.net> Cleanup and annotate, from Splint. * src/omp.h: Include sys/types.h. (to_client_start, to_client_end): Change type to size_t. * src/omp.c: Include splint.h. (to_client_start, to_client_end): Change type to size_t. (current_task_task_id, modify_task_parameter, modify_task_value, xml_context, send_requirement, send_preference, omp_xml_handle_error): Annotate. (send_dependency): Annotate. Free msg. (SEND_TO_CLIENT): Cast TO_CLIENT_BUFFER_SIZE to size_t. (omp_xml_handle_start_element): Annotate arguments. Check save_task return. (send_reports): Change return to int. (omp_xml_handle_end_element): Annotate. In CLIENT_GET_REPORT case check for credentials username and check g_file_get_contents return directly. In CLIENT_STATUS cast send_reports return and free reponse. (omp_xml_handle_text): Annotate args. Use append_text instead of append_string. (process_omp_client_input): Check g_markup_parse_context_parse return directly. Check error before using. * src/ovas-mngr-comm.c: Change Splint socklen_t to typedef. Include splint.h. (end_session): Return success if shutdown error is ENOTCONN. (write_string_to_server): Cast gnutls_record_send arg. 2009-03-30 Matthew Mundell <matthew.mundell@greenbone.net> Cleanup and annotate, from Splint. * src/ompd.h: (to_client_start, to_client_end): Change to size_t. * src/ompd.c: Define socket for Splint. (read_from_client, read_from_server): Mark alert_name dependent. (write_to_client): Cast count for tracef. (serve_omp): Note old functions. Use a single ret variable. Check the return from end_session. * src/string.h (string): New type. (append_text): New function. (append_string): Use string. (strip_space): Annotate. * src/string.c (append_text): New function. (append_string): Change chars to gchars. (free_string_var): Chage var type to string. * src/file.c (G_LOG_DOMAIN): New define. (g_propagate_error, g_set_error, g_dir_close): New annotated headers for Splint. (rmdir_recursively): Annotate g_return_val_if_fail call. Check return from g_dir_open directly, and on failure check that temp_error is set. Remove duplicate cleanup calls. 2009-03-30 Matthew Mundell <matthew.mundell@greenbone.net> Cleanup and annotate, from Splint. * src/splint.h: New file. * src/manage.h (credentials_t): Null annotate username and password. (task_t): Change types to gsize. Annotate description. (tasks, task_id_string, make_task, find_task, set_task_parameter, make_report_id, report_task): Annotate. (add_task_description_line): Change int to size_t. * src/manage.c: Include splint.h. (append_to_credentials_username, append_to_credentials_password): Use append_text. (make_report_id): Doc fail return. Init uuid. Check returns. (report_task): Check that username is set. Free link_name afterwards. (delete_report): Check that username is set. Check error before use. Free link_name is fail case. (set_report_parameter): Check that username is set. Check return of g_file_set_contents directly. Check error before use. (tasks): Annotate. (task_id_string): Use snprintf instead of sprintf. (print_tasks): Check index before use. (grow_tasks): Change return to boolean. Turn off checks around realloc and return. Change memset arg to int. Correct tracef directive. (free_message): Annotate args. (free_task): Annotate args. Cast for tracef. Cast away g_ptr_array_free returns. (free_tasks): Check tasks first. (make_tasks): Free name and comment on failure. Add safety check on tasks. Cast for id. Turn off checks around assignments. Correct tracef directive. (load_tasks): Init names and comment. Free names[index] for hidden files. Check g_file_get_contents return directly. Check error before use. Remove freeing of name and comment on failure, as now done in make_task. (save_task): Check g_file_get_contents return directly. Check error before use. Use snprintf instead of sprintf. (save_tasks): Free dir_name. (find_task): Check tasks before using. Compare to NULL explicitly. (set_task_parameter): Check parameter before use. (start_task): Cast away g_array_free return. Cast size for g_array_new. (delete_reports): Anotate var. Free names[index] for hidden files. (delete_task): Check return from rmdir_recursively directly. Check error before use. (append_to_task_comment): Annotate arg. Return integer explicitly. (append_to_task_identifier): Annotate arg. Free task->name. Return integer explicitly. Correct return value. (grow_description): Change new_size to size_t. Cast char for memset. (add_task_description_line): Use return from g_array_append_val. 2009-03-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (env_authenticate): Add "RATS: ignore" for getenv. 2009-03-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/CMakeLists.txt: Add omp_delete_report_1. 2009-03-28 Matthew Mundell <matthew.mundell@greenbone.net> Start implementing splint and RATS cleanups. * src/ovas-mngr-comm.h (end_session): Correct return type. (connect_to_server): Change argument "interrupted" to a gboolean. * src/ovas-mngr-comm.c: Define socklen_t for splint. Include glib. Declare global vars static. Move all local vars to beginnings of blocks. (make_session): Cast some returns to please splint. (send_to_server): Use memmove instead of memcpy, just to be sure. (connect_to_server): Change argument "interrupted" to a gboolean. Cast the sizeof return to match the ret_len type. * src/otp.c: Define PREFIX. Declare functions and vars static. Move all local vars to beginnings of blocks. Annotate most global vars as null. (process_otp_server_input): Add fallthrough to SERVER_INIT_SENT_VERSION case. * src/otpd.c: Move all local vars to beginnings of blocks. (serve_otp): Annotate reach. 2009-03-28 Matthew Mundell <matthew.mundell@greenbone.net> Start implementing splint and RATS cleanups. * src/manage.h (append_to_credentials_username): Change third arg to gsize. (current_server_task): Annotate as null. * src/manage.c: Define g_free with annotation for splint. Include string and strings. Define PREFIX. Declare functions and vars static. Move all local vars to beginnings of blocks. Annotate global vars as null. (append_to_credentials_username, append_to_credentials_password): Append with append_string. (report_path_task_name): Change type of path2_length to size_t. (print_tasks): Use standard ternary format. (grow_tasks): Add "RATS: ignore" to realloc. (grow_description): Add "RATS: ignore" to realloc. Clear new memory. * src/file.c: Declare fchdir for splint. Move all local variable declarations to beginnings of blocks. (rmdir_recursively): Cast variables to quiet splint. * src/string.h (append_string, free_string_var): Drop arg names. (strip_space): Annotate return as shared. 2009-03-28 Matthew Mundell <matthew.mundell@greenbone.net> Start implementing splint and RATS cleanups. * src/openvasmd.c: Conditionalise some includes for splint. Correct the openvas includes. (cleanup): Move the OMP freeing note to src/ompd.c. (handle_signal): Remove. (handle_sigint, handle_sighup, handle_sigterm): New functions. (main): Separate signal handlers. * src/omp.c: Define PREFIX. Declare functions and vars static. Annotate global null vars. Move all local vars to beginnings of blocks. (send_reports): Correct freeing of msg and names. (omp_xml_handle_end_element): Add block for CLIENT_NEW_TASK case. Free response in CLIENT_STATUS case. * src/ompd.c: Declare functions and vars static. Move all local variable declarations to beginnings of blocks. Add missing includes. (read_from_client, read_from_server, write_to_client): Cast variables to quiet splint. Annotate dummy arguments. (write_to_server): Annotate fallthrough cases. (serve_omp): Add OMP freeing note from src/openvasmd.c. Cast variables. 2009-03-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/logf.h: Include stdlib. (logf): Cast getpid return. Check fflush return. * src/tracef.h: Include stdlib. (tracef): Cast getpid return. Check fflush return. 2009-03-28 Matthew Mundell <matthew.mundell@greenbone.net> * src/CMakeLists.txt (splint, rats, flawfinder, check, etags, ctags, tags): New targets. (ovas-mngr-comm): Add Glib C flags. 2009-03-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_delete_task_1.c: Read report ID from response. 2009-03-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Always respond to the client, in CLIENT_DELETE_REPORT. * src/tests/omp_delete_report_1.c: New test. Tests DELETE_REPORT with empty ID. 2009-03-24 Matthew Mundell <matthew.mundell@greenbone.net> Add more tests. * src/tests/make_report_id_0.c, src/tests/omp_delete_task_1.c, src/tests/omp_get_dependencies_0.c, src/tests/omp_get_dependencies_1.c, src/tests/omp_get_nvt_feed_all_0.c, src/tests/omp_get_nvt_feed_all_1.c, src/tests/omp_get_nvt_feed_checksum_0.c, src/tests/omp_get_nvt_feed_checksum_1.c, src/tests/omp_get_nvt_feed_details_0.c, src/tests/omp_get_nvt_feed_details_1.c, src/tests/omp_get_preferences_0.c, src/tests/omp_get_preferences_1.c, src/tests/omp_delete_report_0.c, src/tests/omp_get_report_0.c, src/tests/omp_get_rules_0.c, src/tests/omp_get_rules_1.c, src/tests/omp_modify_report_0.c, src/tests/omp_start_task_1.c, src/tests/omp_status_1.c, src/tests/omp_status_2.c, src/tests/omp_status_3.c, src/tests/omp_status_4.c, src/tests/report_path_task_name_0.c, src/tests/report_path_task_name_1.c, src/tests/report_path_task_name_2.c: New tests. * src/tests/CMakeLists.txt: Add rules for new tests. 2009-03-21 Matthew Mundell <matthew.mundell@greenbone.net> Switch to universal report identifiers. * src/manage.h (make_report_id, report_path_task_name, report_task): New headers. * src/manage.c (make_report_id, report_path_task_name, report_task): New functions. (delete_report, set_report_parameter): Switch to UUIDs. * src/omp.c (send_reports): Switch to UUIDs. Free all names on send fail. (omp_xml_handle_end_element): Switch to UUIDs for reports. Correct response tag in CLIENT_GET_REPORTS. * src/otp.c (save_report): Switch to UUIDs. * src/CMakeLists.txt: Add -lossp-uuid to openvasmd. 2009-03-20 Matthew Mundell <matthew.mundell@greenbone.net> Add a task status enumeration. Rename task_t running slot to run_status. * src/manage.h (task_status_t): New type. (task_t): Rename running to run_state. * src/manage.c (make_task, start_task, stop_task): Use new task status enum. * src/omp.c (omp_xml_handle_end_element): Use new task status enum. * src/otp.c (process_otp_server_input): Use new task status enum. 2009-03-20 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * packaging/: New. * packaging/debian: New. * packaging/debian/control: New. First approaches for Debian packaging. 2009-03-19 Matthew Mundell <matthew.mundell@greenbone.net> Add per-report directories. Add initial OMP MODIFY_REPORT. * src/omp.c (client_state_t): Add MODIFY_REPORT states. (omp_xml_handle_start_element, omp_xml_handle_text): Add MODIFY_REPORT handling. (omp_xml_handle_end_element): In CLIENT_GET_REPORT get the report from the report's directory. Add MODIFY_REPORT handling. * src/otp.c (save_report): Save report to a dedicated directory. * src/manage.h (set_report_parameter): New header. * src/manage.c (set_report_parameter): New function. (delete_report): Account for per-report directory. 2009-03-19 Matthew Mundell <matthew.mundell@greenbone.net> Update OTP BYE handling for reconnecting to the server during an OMP session. * src/openvasmd.c (serve_client): Move session creation and freeing to src/ovas-mngr-comm.c. (serve_client): Pass server_socket pointer to serve_omp. * src/ovas-mngr-comm.c (make_session, end_session): New functions, from src/openvasmd.c. (connect_to_server): Improve message slightly. * src/ovas-mngr-comm.h (make_session, end_session): New headers. * src/ompd.c (serve_omp): Take a pointer to the server socket instead of the server socket. On receiving server BYE recreate the server socket and session. * src/ompd.h (serve_omp): Add arguments. * src/otp.c (process_otp_server_input): Read over whitespace at start of SERVER_INIT_SENT_VERSION. In SERVER_BYE add success case and correct the "need more input" return value. 2009-03-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c (serve_omp): Revert bogus typo correction. 2009-03-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (omp_xml_handle_end_element): Free name in CLIENT_GET_REPORT case. 2009-03-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (send_reports): Use scandir's report_name directly, instead of wrapping it in a g_path_get_basename. 2009-03-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (delete_report): Add @return doc. * ChangeLog: Fixup pathnames for today's entries. 2009-03-13 Matthew Mundell <matthew.mundell@greenbone.net> Reactivate BYE-initiated server socket shutdown. * src/otp.c (process_otp_server_input): Return a unique value on receiving BYE. * src/ompd.c (serve_omp): Shutdown server socket according to process_otp_server_input return. 2009-03-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/ompd.c (serve_omp): Correct typo and formatting. 2009-03-13 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (stop_task, start_task): Correct conditions of running checks. 2009-03-13 Matthew Mundell <matthew.mundell@greenbone.net> Ensure that delete_task also removes the symlinks to the directory of all the user's reports. * src/manage.h (delete_report): Add const to arg. * src/manage.c (delete_report): Add const to arg. (delete_reports): New function. (delete_task): Call delete_reports to delete reports. 2009-03-13 Matthew Mundell <matthew.mundell@greenbone.net> Move report deleting into manage library. * src/manage.c (delete_report): New function. * src/manage.h (delete_report): New header. * src/omp.c (omp_xml_handle_end_element): Use new function delete_report. 2009-03-12 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP DELETE_REPORT. * src/otm.c (client_state_t): Add DELETE_REPORT states. (omp_xml_handle_start_element, omp_xml_handle_end_element, omp_xml_handle_text): Add DELETE_REPORT handling. 2009-03-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (save_report): Move the actual report into the task directory. 2009-03-11 Matthew Mundell <matthew.mundell@greenbone.net> Add per-user reports directories. * src/otp.c (save_report): Save the report to the report directory of the user and link the report to the task directory, instead of saving to the task directory. * src/omp.c (omp_xml_handle_end_element): Get the report from the user report directory instead of the task directory. Ensure the report name has the right format. Free content_error. Free current_task_task_id in the fail case. 2009-03-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (output_reports_xml): Rename to send_reports. (send_reports): Rename from output_reports_xml. Add doc. 2009-03-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (client_state_t): Add GET_REPORT states. (omp_xml_handle_start_element, omp_xml_handle_end_element, omp_xml_handle_text): Add GET_REPORT handling. 2009-03-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c (wait_for_task_end): New function. * src/tests/common.h (wait_for_task_end): New header. 2009-03-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/omp.c (output_reports_xml): New function. (omp_xml_handle_end_element): Add reports to STATUS response in case where STATUS is given a task ID. 2009-03-10 Matthew Mundell <matthew.mundell@greenbone.net> * src/otp.c (process_otp_server_input): Add "done" task state. * src/omp.c (omp_xml_handle_end_element): Add "done" task state. 2009-03-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/manage.c (delete_task): Correct error check. 2009-03-02 Matthew Mundell <matthew.mundell@greenbone.net> Add "Requested" task running state. Correct STATUS_RESPONSE tags and CLIENT_MODIFY_TASK variable usage. * src/otp.c (process_otp_server_input): Update task running state on receiving SCAN_START. * src/omp.c (omp_xml_handle_end_element): Add printing of new running state. Rename TASK_STATUS entity in TASK in STATUS_RESPONSE to STATUS. Correct STATUS_RESPONSE closing tags. In CLIENT_MODIFY_TASK case use local var instead of setting current_client_task. * src/manage.h (task_t): Note new running state. 2009-03-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c: Turn off some tracing. (DO_CHILDREN, id_string, wait_for_task_start, delete_task): New functions. * src/tests/common.h (delete_task, wait_for_task_start): New headers. * src/tests/omp_abort_task_0.c, src/tests/omp_start_task_0.c, src/tests/omp_modify_task_0.c, src/tests/omp_modify_task_0.c: Wait for server with wait_for_task_start. Delete task on exit. 2009-03-01 Matthew Mundell <matthew.mundell@greenbone.net> Reduce number of gotos. * src/ompd.c (read_from_server): Retry with while instead of goto. * src/omp.c (send_dependency): Move SEND_TO_CLIENT destination to end of function. (omp_xml_handle_end_element): Neaten indentation. * src/openvasmd.c (read_protocol): Retry with while instead of goto. * src/otp.c (parse_server_done, parse_server_preference_value, parse_server_rule, parse_server_plugin_dependency_dependency, parse_server_server, sync_buffer): New functions. (process_otp_server_input): Call new parsing and sync functions instead of jumping. Return immediately instead of jumping to fail code. Use g_strdup instead of strdup. Drop make_message return checks. * src/manage.c (load_tasks, save_task): Move fail destinations to ends of functions. 2009-02-28 Matthew Mundell <matthew.mundell@greenbone.net> Add env_authenticate and use it in tests. * src/tests/common.c: Reorder functions. (env_authenticate): New function. * src/tests/common.h: Reorder headers. (env_authenticate): New header. * src/tests/omp_new_task_0.c, src/tests/omp_version_0.c, src/tests/omp_delete_task_0.c, src/tests/omp_abort_task_0.c, src/tests/omp_start_task_0.c, src/tests/omp_modify_task_0.c, src/tests/omp_status_0.c: Use env_authenticate instead of authenticate. 2009-02-28 Matthew Mundell <matthew.mundell@greenbone.net> Start separating the implementation into components. * src/openvasmd.c: Move most functions and variables out to new files. Improve implementation notes in @file. (free_g_ptr_array): Remove old function. (OMP): Remove old directive. (BUFFER_SIZE): Rename FROM_BUFFER_SIZE. (from_buffer_size): New variable. * src/logf.h, src/manage.c, src/manage.h, src/otp.c, src/otp.h, src/omp.c, src/omp.h, src/ompd.c, src/ompd.h, src/otpd.c, src/otpd.h: New files. * src/tracef.h (TRACE, TRACE_TEXT): New directive, previously in openvasmd.c. * src/file.c: Include unistd.h. * src/string.c (free_string_var, append_string): New functions, previously in openvasmd.c. * src/string.h (free_string_var, append_string): New headers. * src/ovas-mngr-comm.c (write_string_to_server, write_to_server_buffer): New functions, previously in openvasmd.c. (to_server_buffer_space): New function. (BUFFER_SIZE): Rename TO_SERVER_BUFFER_SIZE. * src/ovas-mngr-comm.h (write_string_to_server, write_to_server_buffer, to_server_buffer_space): New headers. * src/CMakeLists.txt: Build new libraries. * src/tests/CMakeLists.txt: Add GLIB path to strip_space LDFLAGS. * doc/CMakeLists.txt (.build-html): Add new files. * doc/Doxyfile (INPUT): Add new files. 2009-02-23 Matthew Mundell <matthew.mundell@greenbone.net> Update commands to clear current_task_task_id after use. * src/openvasmd.c (free_string_var, append_string): New functions. (omp_xml_handle_start_element): Leave clearing of current_task_task_id to omp_xml_handle_end_element. (omp_xml_handle_end_element): Free current_task_task_id after use. (omp_xml_handle_text): Append to string variables with append_string. (serve_omp): Note exit behaviour. 2009-02-23 Matthew Mundell <matthew.mundell@greenbone.net> Use shared functions for starting tasks. Authenticate only once per session, for now. * src/tests/common.c (sendf_to_manager, start_task): New functions. * src/tests/common.h (sendf_to_manager, start_task): New headers. * src/tests/omp_abort_task_0.c: Use start_task. Send actual task ID. Authenticate once per session. * src/tests/omp_delete_task_0.c: Improve task name. * src/tests/omp_start_task_0.c: Authenticate once. * src/tests/omp_modify_task_0.c: Improve task name. Authenticate once. Send actual task ID. * src/tests/omp_status_0.c: Use start_task. Authenticate once. 2009-02-22 Matthew Mundell <matthew.mundell@greenbone.net> Cleanup docs. Neaten XML strings. Rename XML_RESPOND to SEND_TO_CLIENT. Update load_tasks to loop through dirs forwards instead of sorting dirs backwards. * src/openvasmd.c: Cleanup docs. Neaten XML strings. (ahplasort): Remove. (load_tasks): Loop through dirs forwards instead of sorting backwards. (set_task_parameter): Add const to parameter argument. (XML_RESPOND): Remove, rename SEND_TO_CLIENT. (SEND_TO_CLIENT): New macro, previously XML_RESPOND. (omp_xml_handle_end_element): Move OMP_VERSION_RESPONSE attribute to entity. * src/ovas-mngr-comm.c: Correct doc typos. * src/tests/common.c: Cleanup docs. Add @file doc. * src/tests/omp_version_0.c: Move expected attribute to entity. * doc/CMakeLists.txt: Run Doxygen in top-level dir to get relative paths. * doc/Doxyfile: Adjust paths for running in top-level dir. 2009-02-21 Matthew Mundell <matthew.mundell@greenbone.net> Add Base64 task file handling. Add new library with function rmdir_recursively. Add tests of rmdir_recursively. Update DELETE_TASK to remove the task directory on disk. Update tests to use shared functions for creating tasks. * src/file.h, src/file.c, src/tests/new_task_empty_rc, src/tests/new_task_medium_rc, src/tests/new_task_small_rc, src/tests/rmdir_recursively_0.c, src/tests/rmdir_recursively_1.c: New files. * src/openvasmd.c: Include new file library. (free_task): Reduce tracing. (save_tasks): Add a comment. (modify_task): Remove, was for old OMP spec. (set_task_parameter): Clarify doc. Add base64 task file handling. (delete_task): Update to remove task directory. (omp_xml_handle_end_element): Add base64 task file handling. (serve_client): Enable cipher and mac. * src/CMakeLists.txt: Add file library. * src/tests/CMakeLists.txt: Add tests rmdir_recursively_0 and rmdir_recursively_1. * src/tests/common.c (create_task_from_rc_file, create_task): New functions. (add_entity): Clarify doc. (compare_entities): Add NULL checks. Correct typo. * src/tests/common.h (create_task_from_rc_file, create_task): New headers. * src/tests/omp_start_task_0.c, src/tests/omp_status_0.c: Use create_task_from_rc_file. Read task description from file instead of var. * src/tests/omp_modify_task_0.c: Use create_task. * src/tests/omp_new_task_0.c: Neaten XML string. Get and use actual task ID. * src/tests/omp_delete_task_0.c: Use create_task_from_rc_file. 2009-02-20 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP AUTHENTICATE. Remove handling of first OMP specification. * src/openvasmd.c (credentials, login, process_omp_old_client_input, RESPOND): Remove. (client_state_t): Add authentication states. (credentials_t): New type. (current_credentials): New variable. (append_to_credentials_password, append_to_credentials_username, authenticate, free_credentials): New functions. (tasks): Clarify doc. (load_tasks): Return if tasks already loaded. Use username from current_credentials. Free tasks on error. (save_tasks): Check if tasks are loaded. Use username from current_credentials. (save_report): Use username from current_credentials. (omp_xml_handle_end_element, omp_xml_handle_start_element, omp_xml_handle_text): Add AUTHENTICATE handling. Set error parameter on error. (omp_xml_handle_error): Remove abort call. (process_omp_client_input): Add some error trace messages. (serve_omp): Note behaviour on process_omp_client_input error. (serve_client): Neaten some formatting. (accept_and_maybe_fork): Remove task loading now done after authentication. (cleanup): Adjust credential freeing. * src/tests/common.c (authenticate): New function. (compare_entity_with_name, entity_child, entity_name, entity_text): Add doc. (read_entity): Check context_data.first has been set before accessing member. * src/tests/common.h (authenticate): New function. * src/tests/omp_new_task_0.c, src/tests/omp_version_0.c, src/tests/omp_abort_task_0.c, src/tests/omp_delete_task_0.c, src/tests/omp_start_task_0.c, src/tests/omp_modify_task_0.c, src/tests/omp_status_0.c: Add authentication. 2009-02-19 Matthew Mundell <matthew.mundell@greenbone.net> Add saving of reports and tasks on disk. Rename "reports" to "messages". Move port code up to a dedicated page. Check for alerts on TLS error. Explicitly set all TLS priorities. * src/openvasmd.c (ahplasort, free_message, load_tasks, print_port, port_protocol_name, save_report, save_task, save_tasks, set_message_oid, task_id_string, write_message, write_messages, write_timestamp): New functions. (report_t): Rename message_t. (message_t): New type previously named report_t. (current_report): Rename current_message. (current_message): New var previously named current_report. (make_report, set_report_description, append_debug_report, append_hole_report, append_info_report, append_log_report, append_note_report): Rename with "message" instead of "report". (make_message, set_message_description, append_debug_message, append_hole_message, append_info_message, append_log_message, append_note_message): New functions previously named with "report". (message_data_t): New type. (task_t): Add report_count. (free_task): Free messages with free_message instead of free_rule. (make_task): Clarify return doc. Init report count. (find_task): Correct while style. (set_task_parameter): Also set description_size when setting description. (append_to_task_comment, append_to_task_identifier, delete_task, grow_description, start_task, stop_task): Add direction to @params. (serve_otp, read_from_client, read_from_server, read_protocol): Check for alerts on TLS error. (omp_xml_handle_end_element): Output actual report count for STATUS. (process_omp_server_input): Set message OIDs with set_message_oid instead of set_message_description. Save report to disk on receiving HOST_END. (serve_client): Explicitly set all TLS priorities instead of using gnutls_set_default_priority, in order to match the server's priorities. (accept_and_maybe_fork): Load tasks at start of child and save tasks at end of child. * Changelog: Replace some space offsets with tabs. 2009-02-09 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (client_state_t, omp_xml_handle_start_element, omp_xml_handle_end_element): Add dummy GET_NVT_FEED_ALL, GET_NVT_FEED_CHECKSUM and GET_NVT_FEED_DETAILS handling. 2009-02-06 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP GET_DEPENDENCIES and GET_RULES. Correct OTP rule parsing. * src/openvasmd.c (free_g_slist, send_dependency, send_preference, send_requirement, send_rule): New functions. (client_state_t, omp_xml_handle_start_element, omp_xml_handle_end_element): Add GET_DEPENDENCIES and GET_RULES handling. (current_server_plugin_dependency_dependencies, make_server_plugins_dependencies, add_server_plugins_dependency, make_current_server_plugin_dependency, maybe_free_current_server_plugin_dependency, finish_current_server_plugin_dependency): Use a list for the requirements instead of an array. (server_t, maybe_free_server_rules, make_server_rules, add_server_rule): Track rules size. (print_preference): Rename to send_preference. (process_omp_server_input): In OTP rule parsing, check for end marker before searching for semicolon. 2009-02-06 Michael Wuegand <michael.wiegand@greenbone.net> * doc/CMakeLists.txt: Fixed syntax error which caused the build process to fail. 2009-02-05 Matthew Mundell <matthew.mundell@greenbone.net> * doc/CMakeLists.txt: Only install manpage if xmltoman is installed. 2009-02-05 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP GET_PREFERENCES. Retry reading from server on error. * src/openvasmd.c (BUFFER_SIZE): Increase. (grow_description): Fix trace message. (client_state_t, omp_xml_handle_start_element, omp_xml_handle_end_element): Add GET_PREFERENCES handling. (print_preference): New function. (read_from_server): Retry the recv on error, up to 5 times. 2009-02-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_delete_task_0.c: New file. * src/tests/omp_delete_task_0: Remove. 2009-02-04 Matthew Mundell <matthew.mundell@greenbone.net> Add test of DELETE_TASK. * src/tests/CMakeLists.txt: Add omp_delete_task_0. * src/tests/omp_delete_task_0.c: New file. 2009-02-04 Matthew Mundell <matthew.mundell@greenbone.net> Add a few entity access functions. * src/tests/common.c (entity_text, entity_name, compare_entity_with_name, entity_child): New functions. * src/tests/common.h: Declare new functions. 2009-02-04 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (free_task, delete_task): New functions. (free_tasks): Move single task freeing to free_task. (make_task): Add a comment. (omp_xml_handle_start_element, omp_xml_handle_end_element, omp_xml_handle_text): Add DELETE_TASK handling. * ChangeLog: Correct function name on 2009-02-03 entry. 2009-02-03 Matthew Mundell <matthew.mundell@greenbone.net> Add test of ABORT_TASK. * src/tests/CMakeLists.txt: Add omp_abort_task_0. * src/tests/omp_abort_task_0.c: New file. 2009-02-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/omp_start_task_0.c: Correct comment. 2009-02-03 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (stop_task): New function. (omp_xml_handle_start_element, omp_xml_handle_end_element, omp_xml_handle_text): Add ABORT_TASK handling. 2009-02-02 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.h (close_manager_connection): New function. * src/tests/common.c (close_manager_connection): New function. (send_to_manager): Add a trace message. (print_entity): Flush stream afterwards. * src/tests/omp_modify_task_0.c, src/tests/omp_new_task_0.c, src/tests/omp_start_task_0.c, src/tests/omp_version_0.c: Use close_manager_connection. * src/tests/omp_status_0.c: Add expected problem counts. Use close_manager_connection. 2009-02-02 Matthew Mundell <matthew.mundell@greenbone.net> Add OTP problem report handling (DEBUG, HOLE, INFO, NOTE). Fix errors in append_task_open_port and omp_xml_handle_end_element. Update the OMP read loop to only try fill the read buffers once per select. * src/openvasmd.c (server_state_t): Add problem report states. (task_t): Add problem report members. (free_tasks): Free problem report arrays. (make_task): Initialise problem report arrays. (start_task): Add required client preferences. (add_task_description_line): Correct comment. (append_task_open_port): Increment open_ports_size instead of open_ports. (report_t): New type. (current_report): New variable. (make_report, set_report_description, append_debug_report, append_hole_report, append_info_report, append_log_report, append_note_report): New functions. (omp_xml_handle_end_element): Free modify_task_value instead of freeing modify_task_parameter twice. Add problem report counts to status response. (process_omp_server_input): Add problem report handling. (serve_omp): Only try fill the read buffers once per select instead of reading and handling as much as possible before selecting again (as introduced on 2008-12-10). This is to ensure that the client or server is read when the other party is writing alot. 2009-01-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c: (omp_xml_handle_end_element): Flush whitespace from task response XML. 2009-01-26 Matthew Mundell <matthew.mundell@greenbone.net> Improve entity reading and comparison. * src/tests/common.h: (add_entity, free_entity, print_entity, print_entities, compare_entities): New functions. (entities_t, entity_t): New types. * src/tests/common.c: (add_entity, compare_entities, foreach_print_entity, free_entity, make_entity, print_entity, print_entities): New functions. (context_data_t): New type. (handle_start_element, handle_end_element handle_text, read_entity): Read the entire element. * src/tests/omp_modify_task_0.c, src/tests/omp_new_task_0.c, src/tests/omp_start_task_0.c, src/tests/omp_status_0.c, src/tests/omp_version_0.c: Use new entity reading and comparison. 2009-01-26 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/common.c: Match comments to style guide. 2009-01-20 Matthew Mundell <matthew.mundell@greenbone.net> Do server connection and initialisation lazily, when the first command is written to the server. Start OMP STATUS TASK_ID handling. Add OTP BYE handling. Ensure that grow_description allocates enough memory. * src/ovas-mngr-comm.c: (connect_to_server): New function. * src/ovas-mngr-comm.h: Match style guide. (connect_to_server): New function. * src/openvasmd.c: (server_initialising): Remove. (client_state_t): Add CLIENT_STATUS_TASK_ID. (server_state_t): Add SERVER_BYE. (server_init_state_t): New type. (server_init_state, server_init_offset): New variables. (set_server_init_state, write_string_to_server): New functions. (start_task): Neaten formatting. (append_to_task_identifier): Correct doc return. (grow_description): Add minimum increment argument. (add_task_description_line): Pass grow_description minimum increment. (omp_xml_handle_start_element, omp_xml_handle_end_element, omp_xml_handle_text): Use NULL instead of 0. Start XML STATUS TASK_ID handling. (omp_xml_handle_error): Describe error in message. (process_omp_server_input): Moving writing of server initialisation messages to write_to_server. Add OTP BYE handling. (write_to_server): Add server connecting and sending of initialisation messages (moved here from process_omp_server_input and serve_client). (process_omp): Account for new initialisation mechanism. (serve_client): Move server connecting to write_to_server (via new function connect_to_server). 2009-01-18 Matthew Mundell <matthew.mundell@greenbone.net> * doc/Doxyfile (INPUT): Add string.c and tracef.h. * doc/CMakeLists.txt: Add string.c and tracef.h to .built-html rule dependencies. Drop dependencies from doc rule that are covered by .built-html. 2009-01-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/ovas-mngr-comm.c: Add TRACE define. Move @file comment to beginning. 2009-01-18 Matthew Mundell <matthew.mundell@greenbone.net> * src/string.h: Add header comment. * src/string.c: Add header and @file comments. Match comment docs to style guide. * src/tracef.h: Add header and @file comments. Match comment docs to style guide. 2009-01-18 Matthew Mundell <matthew.mundell@greenbone.net> Add simple test of XML OMP STATUS. * src/tests/omp_status_0.c: New file. * src/tests/CMakeLists.txt: Add new test. * ChangeLog: Correct file name on previous entry. 2009-01-18 Matthew Mundell <matthew.mundell@greenbone.net> Add initial XML OMP STATUS and improve server initialisation. * src/openvasmd.c: (client_state_t): Add CLIENT_STATUS. (start_task): Add space before parenthesis. (process_omp_old_client_input): Fixup formatting. (omp_xml_handle_start_element, omp_xml_handle_end_element, omp_xml_handle_text): Add STATUS handling. Let default case handle all 0 assertions. (process_omp_server_input): In server init case check for enough input and process all available input. (read_from_client, read_from_server): Improve formatting and trace message. (serve_omp): Only read from client after server has initialised. * ChangeLog: Correct file name on previous entry. 2009-01-17 Matthew Mundell <matthew.mundell@greenbone.net> * doc/Doxyfile: Turn off JAVADOC_AUTOBRIEF. 2009-01-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c: Match comments to coding style. * src/ovas-mngr-comm.c: Match comments to coding style. 2009-01-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (server_context, xml_context, port_protocol_t, port_t): Add comments docs. (append_to_task_comment, append_to_task_identifier): Correct doc for length param. 2009-01-16 Matthew Mundell <matthew.mundell@greenbone.net> * doc/Doxyfile (INPUT): Add ovas-mngr-comm.c. * doc/CMakeLists.txt: Add ovas-mngr-comm.c to doc depends. 2009-01-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/ovas-mngr-comm.c: Fix a few file doc typos. 2009-01-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/ovas-mngr-comm.c (send_to_server): Add space after function name. 2009-01-16 Matthew Mundell <matthew.mundell@greenbone.net> Add simple test of XML OMP START_TASK. * src/tests/omp_start_task_0.c: New file. * src/tests/CMakeLists.txt: Add new test. 2009-01-16 Matthew Mundell <matthew.mundell@greenbone.net> Add initial XML OMP START_TASK. * src/openvasmd.c: (client_state_t): Add START_TASK states. (modify_task_task_id): Rename current_task_task_id. (omp_xml_handle_start_element, omp_xml_handle_end_element, omp_xml_handle_text): Add START_TASK handling. 2009-01-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c: Convert tabs to spaces. * ChangeLog: Correct previous entry. 2009-01-16 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Started to move communication with server to a module of its own. * src/ovas-mngr-comm.c: New. Contains functionality for communication with openvas-server factored out from openvasmd.c. * src/ovas-mngr-comm.h: New. Protos for respective API. * src/openvasmd.c (send_to_server, to_server, to_server_end): Removed. This is now part of the new module ovas-mngr-comm. * src/CMakeLists.txt: Added handling for module ovas-mngr-comm. 2009-01-15 Matthew Mundell <matthew.mundell@greenbone.net> Add simple tests of XML OMP OMP_VERSION, NEW_TASK and MODIFY_TASK. * src/tests/common.c, src/tests/common.h, src/tests/omp_modify_task_0.c, src/tests/omp_new_task_0.c, src/tests/omp_version_0.c: New files. * src/tests/CMakeLists.txt: Add config library and new tests. 2009-01-15 Matthew Mundell <matthew.mundell@greenbone.net> Add initial XML OMP NEW_TASK and MODIFY_TASK. Document functions. * src/openvasmd.c (client_state_t): New type. (client_state, modify_task_parameter, modify_task_task_id, modify_task_variable): New variables. (append_to_task_comment, append_to_task_identifier, set_client_state, set_task_parameter): New functions. (add_task_description_line): Add const qualifer to parameter. (omp_xml_handle_start_element, omp_xml_handle_end_element, omp_xml_handle_text): Add comment docs. Add NEW_TASK and MODIFY_TASK. (omp_xml_handle_error): Add comment doc. 2009-01-15 Matthew Mundell <matthew.mundell@greenbone.net> * src/tests/strip_space_0.c, src/tests/strip_space_1.c, src/tests/strip_space_2.c, src/tests/strip_space_2.c: Add file header comments. 2009-01-15 Matthew Mundell <matthew.mundell@greenbone.net> * INSTALL: Correct Cmake command. 2009-01-15 Matthew Mundell <matthew.mundell@greenbone.net> Start XML OMP handling. * src/openvasmd.c (xml_context): New variable. (process_omp_old_client_input): New function with old process_omp_client_input code. (process_omp_client_input): Start XML parsing. (XML_RESPOND, omp_xml_handle_start_element, omp_xml_handle_end_element, omp_xml_handle_text, omp_xml_handle_error): New functions. (serve_omp): Add XML parser and context initialisation. 2009-01-09 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Turned TO_SERVER into a method and changed all calls. * src/openvasmd.c (TO_SERVER): Transformed this macro into method send_to_server. (send_to_server): New. Functionlity of TO_SERVER, but returns 1 for error instead of goto statement. (start_task, process_omp_server_input): Changed calls from TO_SERVER macro to send_to_server method and did according cleanups. 2008-12-23 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * src/Makefile: Removed. It is overwritten by cmake anyway. 2008-12-23 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> * INSTALL: Added information about the prefix setting for cmake. 2008-12-22 Matthew Mundell <matthew.mundell@greenbone.net> * CMakeLists.txt: Enable testing. * src/CMakeLists.txt: Add string library and a tests subdirectory. * src/string.h, src/string.c, src/tracef.h, tests/, tests/CMakeLists.txt, tests/strip_space_0.c, tests/strip_space_1.c, tests/strip_space_2.c, tests/strip_space_3.c: New. * src/openvasmd.c (tracef): Move to tracef.h. (strip_space): Rework. Move to string.c. (process_omp_server_input): Correct from_start and input updating in <|> field loop. Correct and update call to strip_space. 2008-12-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (process_omp_server_input): Improve open port number parsing. 2008-12-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (serve_otp): Use a flag instead of a goto when writing to the fd. 2008-12-19 Matthew Mundell <matthew.mundell@greenbone.net> Add server PORT command handling. * src/openvasmd.c (append_task_open_port): New function. (free_tasks): Free open_ports. (make_task, start_task): Init open_ports. (port_protocol_t, port_t): New types. (process_omp_server_input): Add PORT handling. 2008-12-19 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c: Convert tabs to spaces. 2008-12-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (write_to_client, write_to_server): New functions. (serve_omp): Describe and simplify the select loop. Move writing code out to new functions write_to_client and write_to_server. 2008-12-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c: Drop the OVAS_SSL directive in favour of always compiling secure transmission. 2008-12-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c: (strip_space): Correct terminating check. (make_task, serve_client): Replace goto loops with structured loops. (process_omp_client_input, process_omp_server_input): Format signatures like rest of file. (process_omp_server_input): Finish TIME HOST_END handling. Move the out of memory destination to be a fail case. 2008-12-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c: (set_server_state): New function. (process_omp_server_input): Always set the server state via set_server_state, to reduce the amount of tracing code. 2008-12-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c: Replace \return with @return in comment docs. 2008-12-16 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (current_server_task): New variable. (set_task_ports): New function. (process_omp_client_input): Turn off messages tracing. Separate some of the response codes. Use a local variable for the task in the START_TASK case. (process_omp_server_input): Turn off messages tracing. Add TIME and STATUS message handling. 2008-12-12 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (read_from_client, read_from_server read_protocol): Improve function docs. 2008-12-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c: Bring code documentation up to date. 2008-12-11 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c (process_omp_client_input): Replace use of asprintf with g_strdup_printf. 2008-12-11 Matthew Mundell <matthew.mundell@greenbone.net> * CMakeLists.txt: Prefix paths in variables with CMAKE_INSTALL_PREFIX. * src/CMakeLists.txt: Drop hard coded include paths. 2008-12-10 Matthew Mundell <matthew.mundell@greenbone.net> * openvasmd.c: Convert tabs to spaces. 2008-12-10 Matthew Mundell <matthew.mundell@greenbone.net> * openvasmd.c (OPENVASMD_ADDRESS): Remove. (main): Bind to INADDR_ANY by default. 2008-12-10 Matthew Mundell <matthew.mundell@greenbone.net> * openvasmd.c (serve_otp, read_protocol, serve_client): Drop EAGAIN and EINTR checks from OVAL_SSL cases. 2008-12-10 Matthew Mundell <matthew.mundell@greenbone.net> After selecting, ensure that all input is read before the fd is selected again. Start handling server input: preferences, plugins dependencies and rules. Improve server input field parsing. * openvasmd.c: Prefix tracing messages with 3 spaces. Improve a few comments. (strip_space): Only strip spaces. (TO_SERVER, start_task): Update fail destination. (serve_otp, read_protocol): Compare GNUTLS_E_REHANDSHAKE to count instead of errno. (RESPOND): Update to revert parsing on fail. Update fail destination. (process_omp_client_input): Update to revert parsing on start_task and RESPOND failure. Update RESPOND fail destination. (process_omp_server_input): Only update from_server_start after TO_SERVER, in case TO_SERVER fails. On successful exit, reset the from_server buffer. In the SERVER_DONE handling only strip spaces, exit if there are too few characters in the message and move messages along on success. Add preference, rule and plugins dependencies handling. Improve the check for <|>. (serve_omp): Compare count to GNUTLS_E_REHANDSHAKE instead of errno. Move reading out to new functions read_from_client and read_from_server. After selecting, ensure that all input is read before the fd is selected again, including the cases where processing of the input must wait for space in one of the output buffers to_server and to_client. Drop the EAGAIN and EINTR check from the OVAL_SSL cases. (current_server_preference, current_server_plugin_dependency_name, current_server_plugin_dependency_dependencies): New variables. (free_g_ptr_array, maybe_free_server_preferences, make_server_preferences, add_server_preference, maybe_free_server_plugins_dependencies, make_server_plugins_dependencies, add_server_plugins_dependency, make_current_server_plugin_dependency, append_to_current_server_plugin_dependency, maybe_free_current_server_plugin_dependency, finish_current_server_plugin_dependency, free_rule, maybe_free_server_rules, make_server_rules, add_server_rule, read_from_client, read_from_server): New functions. 2008-12-03 Matthew Mundell <matthew.mundell@greenbone.net> Add more OMP commands, start adding server communication. * openvasmd.c: Add server records. Add some task allocation tracing. (free_tasks, make_task): Correct looping. (current_task): Rename current_client_task; (tracef, logf): Flush trailing semicolons. (CLIENT_READ, CLIENT_WRITE): Rename FD_CLIENT_*. (SERVER_READ, SERVER_WRITE): Rename FD_SERVER_*. (find_task, modify_task, start_task, strip_space): New functions. (process_omp_input): Rename to process_omp_client_input. (process_omp_client_input): Rename from process_omp_input. Add beginnings of MODIFY_TASK, START_TASK and STATUS. (process_omp_server_input): New function. (TO_SERVER): New macro. (serve_omp): Add server init and process_omp_server_input call. Improve formatting. (accept_and_maybe_fork): Add client socket shutdowns. Move client socket close out of OVAS_SSL case. 2008-11-27 Matthew Mundell <matthew.mundell@greenbone.net> Add OMP commands OTP_VERSION, LOGIN and NEW_TASK. * openvasmd.c (task_t, grow_tasks, free_tasks, make_task): New. (grow_description, add_task_description_line): New. (RESPOND, process_omp_input): New. (serve_omp): Handle OTP_VERSION, LOGIN and NEW_TASK. Convert tabs to spaces. 2008-11-26 Matthew Mundell <matthew.mundell@greenbone.net> Add choosing of protocol based on first message. * openvasmd.c (OMP, serve_otp, serve_client): New. (read_protocol, serve_client): New. (accept_and_maybe_fork): Call serve_client instead of serve_omp. (serve_omp): Move OTP code to serve_otp. 2008-11-21 Matthew Mundell <matthew.mundell@greenbone.net> * README: Update for new build system. 2008-11-21 Matthew Mundell <matthew.mundell@greenbone.net> * doc/CMakeLists.txt: Ensure html/ exists. * doc/Doxyfile: Correct paths. * doc/openvasmd.8.xml: Add header comment. 2008-11-21 Matthew Mundell <matthew.mundell@greenbone.net> Add cmake build support and a manpage. * Makefile: Removed. * footer.html, Doxyfile: Removed (moved to doc/). * CMakeLists.txt, doc/, doc/CMakeLists.txt, INSTALL, src/CMakeLists.txt, doc/openvasmd.8.xml: New. * doc/footer.html, doc/Doxyfile: New (moved from ..). 2008-11-21 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c: Flesh out \mainpage. Add parameters to function docs. Clean up docs a little. (OVM_OS_NAME): rename OPENVAS_OS_NAME. 2008-11-20 Michael Wiegand <michael.wiegand@greenbone.net> * README: Fixed typo. 2008-11-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmc.c: Add Doxygen documentation. * Doxyfile, footer.html: New. 2008-11-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c: Drop the *_PORT_OVERRIDE directives. Turn off tracing. (main): Add option processing. (handle_signal): Add SIGINT handling. * src/Makefile: Add flags for glib. 2008-11-17 Matthew Mundell <matthew.mundell@greenbone.net> * src/openvasmd.c: Rename directives for consistency. 2008-11-11 Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Starting module "openvas-manager". * COPYING, ChangeLog, README, src/Makefile, src/openvasmd.c: New. ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/README������������������������������������������������������������������������000644 �001751 �001751 �00000010311 12757560563 016555� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������About OpenVAS Manager --------------------- The OpenVAS Manager is a layer between the OpenVAS Scanner and various client applications such as the web client GSA (Greenbone Security Assistant), the command line client omp (of openvas-cli) and the classic application GSD (Greenbone Security Desktop). Among other features, it adds server-side storage of scan results and it removes the need for a scan client to keep the connection open until the scan finishes. All communication between OpenVAS Manager and its clients is done via the XML-based OpenVAS Management Protocol (OMP). OpenVAS Manager is licensed under GNU General Public License Version 2 or any later version. Please see file COPYING for details. All parts of OpenVAS Manager are Copyright (C) by Greenbone Networks GmbH (see http://www.greenbone.net). Howto use --------- Note: The Manager connects to the scanner using certificate based authentication. The certificate needs to be created for this communication. Please see the file INSTALL for instructions. Starting OpenVAS Manager: For example, if openvassd is running on port 9391, the following command starts the Manager on port 9390. openvasmd A command like openvasmd --update or openvasmd --rebuild will update the Manager's NVT cache, and then exit. The cache must be updated every time the Scanner syncs with the NVT feed. The --rebuild option is faster as it locks the database the entire time, whereas --update allows clients to access the Manager during the update. A rebuild within a running Manager can also be invoked by sending the main Manager process the SIGHUP signal (signal number 1). The program usage message follows. Usage: openvasmd [OPTION...] - Manager of the Open Vulnerability Assessment System Help Options: -h, --help Show help options Application Options: --backup Backup the database. -d, --database=<file> Use <file> as database. --disable-cmds=<commands> Disable comma-separated <commands>. --disable-encrypted-credentials Do not encrypt or decrypt credentials. --disable-password-policy Do not restrict passwords to the policy. --disable-scheduling Disable task scheduling. --create-user=<username> Create admin user <username> and exit. --delete-user=<username> Delete user <username> and exit. -f, --foreground Run in foreground. --list-users List users and exit. -a, --listen=<address> Listen on <address>. --listen2=<address> Listen also on <address>. --max-ips-per-target=<number> Maximum number of IPs per target. -m, --migrate Migrate the database and exit. --create-credentials-encryption-key Create a key to encrypt credentials. --encrypt-all-credentials (Re-)Encrypt all credentials. --new-password=<password> Modify user's password and exit. --optimize=<name> Run an optimization: vacuum, analyze, cleanup-config-prefs, cleanup-result-severities, remove-open-port-results or cleanup-port-names. -p, --port=<number> Use port number <number>. --port2=<number> Use port number <number> for address 2. --progress Display progress during --rebuild and --update. --rebuild Rebuild the NVT cache and exit. --role=<role> Role for --create-user. -l, --slisten=<address> Scanner (openvassd) address. -s, --sport=<number> Scanner (openvassd) port number. -u, --update Update the NVT cache and exit. --user=<username> User for --new-password. --gnutls-priorities=<priorities-string> Sets the GnuTLS priorities for the Manager socket. --dh-params=<file> Diffie-Hellman parameters file -v, --verbose Print tracing messages. --version Print version and exit. �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/INSTALL�����������������������������������������������������������������������000644 �001751 �001751 �00000032023 12757560562 016731� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������INSTALLATION INSTRUCTIONS FOR OPENVAS-MANAGER ============================================= Please note: The reference system used by most of the developers is Debian Debian GNU/Linux 'Wheezy' 7. The build might fail on any other systems. Also it is necessary to install dependent development packages. Prerequisites for openvas-manager --------------------------------- Prerequisites: * cmake * glib-2.0 >= 2.16 * gnutls >= 2.8 * openvas-libraries >= 8.0.5 * sqlite3 * pkg-config Prerequisites for building documentation: * Doxygen * xmltoman (optional, for building man page) * sqlfairy (optional, for producing database diagram) Please see the section "Prerequisites for Optional Features" below additional optional prerequisites. Compiling openvas-manager ------------------------- If you have installed required libraries to a non-standard location, remember to set the PKG_CONFIG_PATH environment variable to the location of you pkg-config files before configuring: $ export PKG_CONFIG_PATH=/your/location/lib/pkgconfig:$PKG_CONFIG_PATH Create a build directory and change into it with $ mkdir build $ cd build Then configure the build with $ cmake -DCMAKE_INSTALL_PREFIX=/path/to/your/installation .. or (if you want to use the default installation path /usr/local) $ cmake .. This only needs to be done once. Note: It is assumed that the other OpenVAS components are installed to the same path. If not, you need to set some paths separately, see below for details. Thereafter, the following commands are useful. $ make # build the manager $ make doc # build the documentation $ make doc-full # build more developer-oriented documentation $ make install # install the build $ make rebuild_cache # rebuild the cmake cache In case you want to install openvas-manager to a different path from the other OpenVAS modules, you might need to set some paths explicitly before running cmake: Adjust any values in the Variables section of CMakeLists.txt: The certificate and key locations in OPENVAS_SERVER_CERTIFICATE, OPENVAS_SERVER_KEY, OPENVAS_CLIENT_CERTIFICATE, OPENVAS_CLIENT_KEY and OPENVAS_CA_CERTIFICATE may need modifying. Certificate Generation ---------------------- Note that the manager always connects to the scanner via client certificate using certificate based authentication exclusively. This means that you have to generate the certificate and key for this and provide them to the manager. The easiest way to do this is to use the "openvas-mkcert-client" script provided by the openvas-scanner module. You can generate the certificates, register them with the OpenVAS scanner and install the client certificates into the proper location for use with openvas-manager with a single command: $ openvas-mkcert-client -n -i Or you can call the script without parameters if you want to have finer control over the process: $ openvas-mkcert-client If you did not use the "-i" option described above, the script will create the client certificate and key in a temporary directory. In order to have the manager use the certificate and key, you have to copy the files into a specific location. Change into the temporary directory created by openvas-mkcert-client and execute the following commands: $ cp key_om.pem /var/lib/openvas/private/CA/clientkey.pem $ cp cert_om.pem /var/lib/openvas/CA/clientcert.pem Please note that the target directory in the commands above might have to be prefixed with the prefix you have set earlier. Initializing the Database ------------------------- Now you can initialize the OpenVAS Manager database. You need a running OpenVAS Scanner (openvassd) for this as the Manager will retrieve all NVT details from the Scanner. Run this command if you are using the default ports: $ openvasmd --rebuild This command can be repeated anytime to update the database with updated NVT data, regardless of whether openvasmd already runs as a service in the background or not. Migrating the Database ---------------------- If you have used Manager before, you might need to migrate the database to the current data model. Use this command to run the migration: $ openvasmd --migrate Creating an administrator user for OpenVAS ------------------------------------------ You can create an administrator user with the --create-user option of "openvasmd": $ openvasmd --create-user=myuser The new user's password is printed on success. An administrator user can later create further users or administrators via clients like the Greenbone Security Assistant (GSA). Also, the new user can change her password via GSA. Optimizing the database ----------------------- OpenVAS Manager offers the command line option --optimize=<name> to run various optimization of the database. The currently supported values for <name> are: vacuum This option can reduce the file size by freeing some unused storage space in the database. For more information see the documentation for the VACUUM command of the database back-end you are using. analyze This option updates various internal statistics of the database used to optimize queries. For more information see the documentation for the ANALYZE command of the database back-end you are using. cleanup-config-prefs This option removes duplicate preferences from Scan Configs. remove-open-port-results This option removes results which were used in older versions of OpenVAS to indicate an open port. Since open ports are now part of the host details these results are now obsolete in most cases. cleanup-port-names This cleans up the ports of results as stored in the database by removing parts that do not conform to the format <port>/<protocol>. For example the application name will be removed from a port using the old format "telnet (23/tcp)", reducing it to the new format "23/tcp". This makes filtering results and delta reports more consistent. cleanup-result-severities This cleans up results with no severity by assigning the default severity set by the user owning the result. All new results should have a severity assigned but this was not ensured in older versions, so this function can be used to correct missing severity scores in older reports. rebuild-report-cache This clears the cache containing the unfiltered result counts of all reports and fully rebuilds it. update-report-cache This creates the cache containing the unfiltered result counts of all reports that are not cached yet. Import/Update IANA Services Names --------------------------------- If you want the Manager to resolve port names when outputing reports for instance, you need to import the information from a Services Names list. In order to update the database, download the port names list: $ wget http://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xml Then provide it as an argument to openvas-portnames-update script: $ openvas-portnames-update service-names-port-numbers.xml You can safely delete the list after that as it is not needed and all relevant information has been imported into the database. $ rm service-names-port-numbers.xml Note that IANA updates this list frequently. The same steps could be followed to update the information in the database from a newer list. Currently, the helper tool supports only the official IANA Services Names list. Migrating Credentials --------------------- While OpenVAS Manager 4.0 initially place the credential encryption key in <install-prefix>/etc/openvas/gnupg, OpenVAS Manager 5.0 has switched to using <install-prefix>/var/lib/openvas/gnupg for better FHS compliance and to set the key apart from the one used for signature verification. In order to continue using your encrypted credentials, please copy the contents of <install-prefix>/etc/openvas/gnupg to <install-prefix>/var/lib/openvas/gnupg. Make sure the permissions on <install-prefix>/var/lib/openvas/gnupg are suitable for the user OpenVAS Manager is running as. Once your encrypted credentials are working again, feel free to remove the credential encryptions key from the keyring in <install-prefix>/etc/openvas/gnupg and the signature verification key from the one in <install-prefix>/var/lib/openvas/gnupg. Encrypted Credentials --------------------- By default the Manager stores private key and password parts of target credentials encrypted in the database. This voids leaking such keys via backups. To be able to do a proper restore of the data, it is important to also backup the encryption key. The easiest way to do this is to create backup of the entire directory tree <install-prefix>/var/lib/openvas/gnupg and store it at a safe place independent from the database backups. This needs to be done only once after the key has been created or changed. The Manager creates the key on the fly if it does not exists. If needed the key can also be created in advance using: $ openvasmd --create-credentials-encryption-key To check whether the key has been generated you may use the command $ gpg --homedir <install-prefix>/var/lib/openvas/gnupg --list-secret-keys An example output would be sec 2048R/1B55390F 2013-01-18 uid OpenVAS Credential Encryption Your key will have the same user ID ("OpenVAS Credential Encryption") but another keyid (1B55390F) and another creation date (2013-01-18). Older versions of the Manager didn't used encrypted credentials. Thus for old installations the database may hold a mix of cleartext and encrypted credentials. Note, that after changing a cleartext credentials it will be saved encrypted. To encrypt all existing credentials you may use $ openvasmd --encrypt-all-credentials Key change: If you disable the current key (see also the gpg manual) and create a new key, this command will decrypt using the old but disabled key and then re-encrypt using the new key. The command --decrypt-all-credentials may be used to revert to plaintext credentials: $ gpg --homedir /var/lib/openvas/gnupg -K Look for the current key and remember its keyid. Then: $ gpg --homedir /var/lib/openvas/gnupg --edit-key KEYID At the prompt enter "disable" followed by "save" and "quit". Then create a new key and re-encrypt all passwords: $ openvasmd --create-credentials-encryption-key $ openvasmd --encrypt-all-credentials No encryption: If for backward compatibility reasons encrypted credentials are not desired, the manager must _always_ be started with the option --disable-encrypted-credentials. Prerequisites for Optional Features ----------------------------------- Certain features of the Manager also require some programs at run time: Prerequisites for generating PDF reports: * pdflatex Prerequisites for generating HTML reports: * xsltproc Prerequisites for generating verinice reports: * xsltproc, xmlstarlet, zip Prerequisites for generating credentials RPM / DEB packages: * rpm * fakeroot * alien Prerequisites for generating credentials .exe packages: * makensis (usually distributed as part of nsis) Prerequisites for generating system reports: * A program in the PATH, with usage "openvasmr seconds type", where seconds is the number of seconds before now that the report covers, and type is the type of report. When called with type "titles" the script must print a list of possible types, where the name of the type is everything up to the first space and everything else is a title for the report. When called with one of these types openvasmr must print a PNG in base64 encoding. When called with the special type "blank", openvasmr must print a PNG in base64 for the Manager to use when a request for one of the titled types fails. openvasmr may indicate failure by simply refraining from printing. Prerequisites for signature verification: * gnupg Prerequisites for HTTP alerts: * wget Prerequisites for Sourcefire Connector alert: * A program in the PATH called greenbone_sourcefire_connector that takes args IP, port, PKCS12 file and report file in Sourcefire format. Prerequisites for verinice .PRO Connector alert: * A program in the PATH called greenbone_verinice_connector that takes args IP, port, username, password and report file in verinice .PRO format. Prerequisites for SCP alert: * sshpass * scp Prerequisites for Send alert: * socat Prerequisites for splitting large XML files (see tools/extra/README): * python Static code analysis with the Clang Static Analyzer --------------------------------------------------- If you want to use the Clang Static Analyzer (http://clang-analyzer.llvm.org/) to do a static code analysis, you can do so by adding the following parameter when configuring the build: -DCMAKE_C_COMPILER=/usr/share/clang/scan-build/ccc-analyzer Note that the example above uses the default location of ccc-analyzer in Debian GNU/Linux and may be different in other environments. To have the analysis results aggregated into a set of HTML files, use the following command: $ scan-build make The tool will provide a hint on how to launch a web browser with the results. It is recommended to do this analysis in a separate, empty build directory and to empty the build directory before "scan-build" call. �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/cve_update.xsl����������������������������������������������������������000644 �001751 �001751 �00000007322 12557600612 021700� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <!-- OpenVAS $Id: cve_update.xsl 20229 2014-09-01 13:13:29Z mwiegand $ Description: Generate SQL (SQLite compatible) queries to update the CVE database. Authors: Henri Doreau <henri.doreau@greenbone.net> Timo Pollmeier <timo.pollmeier@greenbone.net> Copyright: Copyright (C) 2011, 2013 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:vuln="http://scap.nist.gov/schema/vulnerability/0.4" xmlns:cpe-lang="http://cpe.mitre.org/language/2.0" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/0.1" xmlns:cve="http://scap.nist.gov/schema/feed/vulnerability/2.0" xmlns:cvss="http://scap.nist.gov/schema/cvss-v2/0.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:str="http://exslt.org/strings" xmlns:patch="http://scap.nist.gov/schema/patch/0.1" extension-element-prefixes="str" > <xsl:output method="text"/> <xsl:template match="cve:entry"> INSERT OR REPLACE INTO cves ( uuid, name, creation_time, modification_time, cvss, description, vector, complexity, authentication, confidentiality_impact, integrity_impact, availability_impact, products) VALUES ( '<xsl:value-of select="@id"/>', '<xsl:value-of select="@id"/>', strftime('%s', '<xsl:value-of select="vuln:published-datetime"/>'), strftime('%s', '<xsl:value-of select="vuln:last-modified-datetime"/>'), '<xsl:value-of select="vuln:cvss/cvss:base_metrics/cvss:score"/>', '<xsl:value-of select='str:replace(vuln:summary/text(), "'", "''")'/>', '<xsl:value-of select="vuln:cvss/cvss:base_metrics/cvss:access-vector"/>', '<xsl:value-of select="vuln:cvss/cvss:base_metrics/cvss:access-complexity"/>', '<xsl:value-of select="vuln:cvss/cvss:base_metrics/cvss:authentication"/>', '<xsl:value-of select="vuln:cvss/cvss:base_metrics/cvss:confidentiality-impact"/>', '<xsl:value-of select="vuln:cvss/cvss:base_metrics/cvss:integrity-impact"/>', '<xsl:value-of select="vuln:cvss/cvss:base_metrics/cvss:availability-impact"/>', '<xsl:for-each select="vuln:vulnerable-software-list/vuln:product"> <xsl:value-of select='str:replace(str:replace( str:decode-uri(text()), "%7E", "~"), "'", "''")'/> <xsl:text> </xsl:text> </xsl:for-each>'); <xsl:for-each select="vuln:vulnerable-software-list/vuln:product"> <xsl:variable name="decoded_cpe" select=' str:replace( str:replace( str:decode-uri(text()), "%7E", "~"), "'", "''")'/> INSERT OR IGNORE INTO cpes (uuid, name) VALUES ('<xsl:value-of select="$decoded_cpe"/>', '<xsl:value-of select="$decoded_cpe"/>'); INSERT OR REPLACE INTO affected_products (cve,cpe) VALUES ((SELECT id FROM cves WHERE uuid='<xsl:value-of select="../../@id"/>'), (SELECT id FROM cpes WHERE name='<xsl:value-of select="$decoded_cpe"/>')); </xsl:for-each> </xsl:template> <xsl:template match="/"> <!-- Activate delete triggers for replace --> PRAGMA recursive_triggers='ON'; BEGIN TRANSACTION; <xsl:apply-templates/> COMMIT; </xsl:template> </xsl:stylesheet> ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/dfn_cert_update_pg.xsl��������������������������������������������������000644 �001751 �001751 �00000013130 12557600612 023367� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <!-- OpenVAS $Id$ Description: Generate SQL (Postgres compatible) queries to update the DFN-CERT tables of the CERT database. Authors: Timo Pollmeier <timo.pollmeier@greenbone.net> Copyright: Copyright (C) 2013, 2014 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:dfncert="http://www.dfn-cert.de/dfncert.dtd" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:str="http://exslt.org/strings" xmlns:date="http://exslt.org/dates-and-times" xmlns:func="http://exslt.org/functions" xmlns:openvas="http://openvas.org" extension-element-prefixes="str date func openvas"> <xsl:output method="text"/> <xsl:param name="refdate" select="'0'"/> <func:function name="openvas:sql-quote"> <xsl:param name="sql"/> <xsl:variable name="single">'</xsl:variable> <xsl:variable name="pair">''</xsl:variable> <func:result select="str:replace ($sql, $single, $pair)"/> </func:function> <xsl:template match="/"> SET search_path TO cert; BEGIN TRANSACTION; CREATE FUNCTION merge_dfn_cert_adv (uuid_arg TEXT, name_arg TEXT, comment_arg TEXT, creation_time_arg INTEGER, modification_time_arg INTEGER, title_arg TEXT, summary_arg TEXT, cve_refs_arg INTEGER) RETURNS VOID AS $$ BEGIN LOOP UPDATE dfn_cert_advs SET name = name_arg, comment = comment_arg, creation_time = creation_time_arg, modification_time = modification_time_arg, title = title_arg, summary = summary_arg, cve_refs = cve_refs_arg WHERE uuid = uuid_arg; IF found THEN RETURN; END IF; BEGIN INSERT INTO dfn_cert_advs (uuid, name, comment, creation_time, modification_time, title, summary, cve_refs) VALUES (uuid_arg, name_arg, comment_arg, creation_time_arg, modification_time_arg, title_arg, summary_arg, cve_refs_arg); RETURN; EXCEPTION WHEN unique_violation THEN -- Try again. END; END LOOP; END; $$ LANGUAGE plpgsql; CREATE FUNCTION merge_dfn_cert_cve (adv_id_arg INTEGER, cve_name_arg TEXT) RETURNS VOID AS $$ BEGIN <!-- The SQLite3 version does INSERT OR REPLACE but there is no primary key, so just INSERT. LOOP UPDATE dfn_cert_cves SET adv_id = adv_id_arg, cve_name = cve_name_arg WHERE adv_id = adv_id_arg AND cve_name = cve_name_arg; IF found THEN RETURN; END IF; BEGIN INSERT INTO dfn_cert_cves (adv_id, cve_name) VALUES (adv_id_arg, cve_name_arg); RETURN; EXCEPTION WHEN unique_violation THEN /* Try again. */ END; END LOOP; --> INSERT INTO dfn_cert_cves (adv_id, cve_name) VALUES (adv_id_arg, cve_name_arg); END; $$ LANGUAGE plpgsql; <xsl:apply-templates select="atom:feed/atom:entry"/> DROP FUNCTION merge_dfn_cert_adv (uuid_arg TEXT, name_arg TEXT, comment_arg TEXT, creation_time_arg INTEGER, modification_time_arg INTEGER, title_arg TEXT, summary_arg TEXT, cve_refs_arg INTEGER); DROP FUNCTION merge_dfn_cert_cve (adv_id_arg INTEGER, cve_name_arg TEXT); COMMIT; </xsl:template> <xsl:template match="atom:entry"> <xsl:choose> <xsl:when test="floor (date:seconds (atom:updated)) > number($refdate)"> SELECT merge_dfn_cert_adv ('<xsl:value-of select="dfncert:refnum"/>', '<xsl:value-of select="dfncert:refnum"/>', '', <xsl:value-of select="floor (date:seconds (atom:published/text()))"/>, <xsl:value-of select="floor (date:seconds (atom:updated/text()))"/>, '<xsl:value-of select="openvas:sql-quote (atom:title/text())"/>', '<xsl:value-of select="openvas:sql-quote (atom:summary/text())"/>', <xsl:value-of select="count(dfncert:cve)"/>); <xsl:variable name="refnum" select="dfncert:refnum"/> <xsl:for-each select="dfncert:cve"> <xsl:for-each select="str:tokenize (str:replace (text (), 'CVE ', 'CVE-'), ' ')"> <xsl:if test="starts-with (text (), 'CVE-') and (string-length (text ()) >= 13) and string (number(substring (text (), 4, 4))) != 'NaN'"> SELECT merge_dfn_cert_cve ((SELECT id FROM dfn_cert_advs WHERE name = '<xsl:value-of select="$refnum"/>'), '<xsl:value-of select="."/>'); </xsl:if> </xsl:for-each> </xsl:for-each> </xsl:when> <xsl:otherwise> /* filtered entry dated <xsl:value-of select="atom:updated/text()"/> */ </xsl:otherwise> </xsl:choose> </xsl:template> </xsl:stylesheet> ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/cpe_getbyname.xsl�������������������������������������������������������000644 �001751 �001751 �00000005371 12557600612 022365� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <!-- OpenVAS $Id: cpe_getbyname.xsl 20229 2014-09-01 13:13:29Z mwiegand $ Description: Select a CPE item by name. Authors: Henri Doreau <henri.doreau@greenbone.net> Copyright: Copyright (C) 2011 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/0.3" xmlns:meta="http://scap.nist.gov/schema/cpe-dictionary-metadata/0.2" xmlns:ns6="http://scap.nist.gov/schema/scap-core/0.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:config="http://scap.nist.gov/schema/configuration/0.1" xmlns:cpe="http://cpe.mitre.org/dictionary/2.0" xsi:schemaLocation="http://scap.nist.gov/schema/configuration/0.1 http://nvd.nist.gov/schema/configuration_0.1.xsd http://scap.nist.gov/schema/scap-core/0.3 http://nvd.nist.gov/schema/scap-core_0.3.xsd http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.2.xsd http://scap.nist.gov/schema/scap-core/0.1 http://nvd.nist.gov/schema/scap-core_0.1.xsd http://scap.nist.gov/schema/cpe-dictionary-metadata/0.2 http://nvd.nist.gov/schema/cpe-dictionary-metadata_0.2.xsd"> <xsl:output method="html"/> <xsl:template match="cpe:cpe-list"> <xsl:choose> <xsl:when test="count(cpe:cpe-item[@name = $refname]) > 0"> <xsl:copy-of select="cpe:cpe-item[@name = $refname]"/> </xsl:when> <xsl:otherwise> <!-- Return an empty item if nothing was found. This CPE is probably referenced by a CVE but not in the official dictionary yet. --> <cpe-item xmlns:scap-core="http://scap.nist.gov/schema/scap-core/0.3" xmlns:meta="http://scap.nist.gov/schema/cpe-dictionary-metadata/0.2" xmlns:ns6="http://scap.nist.gov/schema/scap-core/0.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:config="http://scap.nist.gov/schema/configuration/0.1" xmlns="http://cpe.mitre.org/dictionary/2.0" name="{$refname}"/> </xsl:otherwise> </xsl:choose> </xsl:template> </xsl:stylesheet> �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/cert_bund_getbyname.xsl�������������������������������������������������000644 �001751 �001751 �00000002602 12557600612 023555� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <!-- OpenVAS $Id$ Description: Select a DFN-CERT item by name. Authors: Timo Pollmeier <timo.pollmeier@greenbone.net> Copyright: Copyright (C) 2013 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:ns6="http://scap.nist.gov/schema/scap-core/0.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:str="http://exslt.org/strings" xmlns:dfncert="http://www.dfn-cert.de/dfncert.dtd" xmlns:atom="http://www.w3.org/2005/Atom" extension-element-prefixes="str" > <xsl:output method="html"/> <xsl:template match="/"> <xsl:copy-of select="//Advisory[Ref_Num = $refname]"/> </xsl:template> </xsl:stylesheet> ������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/portnames_update.xsl����������������������������������������������������000644 �001751 �001751 �00000003731 12557600612 023133� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<!-- OpenVAS $Id$ Description: Generate SQL queries to update port names. Authors: Hani Benhabiles <hani.benhabiles@greenbone.net> Copyright: Copyright (C) 2013 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:iana="http://www.iana.org/assignments" version="1.0"> <xsl:template match="/"> BEGIN TRANSACTION; DELETE FROM meta WHERE name = 'portnames_timestamp'; INSERT INTO meta (name, value) VALUES ('portnames_timestamp', '<xsl:value-of select="iana:registry/iana:updated"/>'); <xsl:apply-templates select="iana:registry/iana:record"/> END TRANSACTION; </xsl:template> <xsl:template match="iana:record"> <xsl:choose> <xsl:when test="(iana:number >= 0 and iana:number < 65536) and (iana:protocol='udp' or iana:protocol='tcp') and (string-length(iana:name) > 0)"> DELETE FROM port_names WHERE number = <xsl:value-of select="iana:number"/> AND protocol = '<xsl:value-of select="iana:protocol"/>'; INSERT INTO port_names (number, protocol, name) VALUES (<xsl:value-of select="iana:number"/>, '<xsl:value-of select="iana:protocol"/>', '<xsl:value-of select="iana:name"/>'); </xsl:when> </xsl:choose> </xsl:template> </xsl:stylesheet> ���������������������������������������openvas-manager-6.0.9/tools/dfn_cert_getbyname.xsl��������������������������������������������������000644 �001751 �001751 �00000002613 12557600612 023376� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <!-- OpenVAS $Id$ Description: Select a DFN-CERT item by name. Authors: Timo Pollmeier <timo.pollmeier@greenbone.net> Copyright: Copyright (C) 2013 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:ns6="http://scap.nist.gov/schema/scap-core/0.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:str="http://exslt.org/strings" xmlns:dfncert="http://www.dfn-cert.de/dfncert.dtd" xmlns:atom="http://www.w3.org/2005/Atom" extension-element-prefixes="str" > <xsl:output method="html"/> <xsl:template match="/"> <xsl:copy-of select="//atom:entry[dfncert:refnum = $refname]"/> </xsl:template> </xsl:stylesheet> ���������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/openvas-portnames-update.in���������������������������������������������000755 �001751 �001751 �00000004775 12557600612 024336� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/bin/sh # # OpenVAS # $Id$ # Description: Update Port Names data. # # Authors: # Hani Benhabiles <hani.benhabiles@greenbone.net> # # Copyright: # Copyright (C) 2013 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. POSTGRES=0 if [ "@BACKEND@" = "POSTGRESQL" ]; then POSTGRES=1 fi do_help () { echo "Update port names data from a port names XML file.\n"; echo "Currently supports the official IANA Services Names list."; echo "In order to update the DB, download the port names list and"; echo "provide its path as an argument to this script."; echo " $ wget http://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xml"; echo " $ openvas-portnames-update service-names-port-numbers.xml"; echo " $ rm service-names-port-numbers.xml"; exit 0 } if [ ! -n "$1" ]; then do_help fi if [ ! -f "$1" ]; then echo "[e] Port names list $1 not found."; exit 1; else XML="$1" fi # Configure DB_DIR where our DB is located. if [ -z "$DB_DIR" ]; then OPENVASSD=`which openvassd` if [ -z "$OPENVASSD" ] ; then echo "[e] Error: openvassd is not in the path, could not determine the Manager directory." exit 1 else OV_DIR=`openvassd -s | awk -F" = " '/^plugins_folder/ { print $2 }' | sed -s 's/\(^.*\)\/plugins/\1/'` fi DB_DIR="$OV_DIR/mgr" fi if [ $POSTGRES -eq 1 ] then SQL="psql -v ON_ERROR_STOP=1 -q --pset pager=off --no-align -d tasks -t" else TASKS_DB="$DB_DIR/tasks.db" if [ ! -f $TASKS_DB ]; then echo "$TASKS_DB not found. Rebuild DB before updating port names."; exit 1; fi SQL="sqlite3 $TASKS_DB" fi DATA_DIR=@OPENVAS_DATA_DIR@ XSL="$DATA_DIR/openvasmd/portnames_update.xsl" if [ ! -f $XSL ]; then echo "$XSL file not found."; exit 1; fi SED="sed s/^<.*>$//g" COUNT=`xsltproc "$XSL" "$XML" | grep INSERT | wc -l` xsltproc "$XSL" "$XML" | $SED | $SQL echo "Updated $COUNT entries." ���openvas-manager-6.0.9/tools/ovaldef_list_ids.xsl����������������������������������������������������000644 �001751 �001751 �00000003454 12557600612 023075� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <!-- OpenVAS $Id$ Description: Output the OVAL identifiers of OVAL definitions in a file. Authors: Timo Pollmeier <timo.pollmeier@greenbone.net> Copyright: Copyright (C) 2013 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:ns6="http://scap.nist.gov/schema/scap-core/0.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:str="http://exslt.org/strings" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval_definitions="http://oval.mitre.org/XMLSchema/oval-definitions-5" xsi:schemaLocation="http://oval.mitre.org/language/version5.10.1/ovaldefinition/complete/oval-common-schema.xsd http://oval.mitre.org/language/version5.10.1/ovaldefinition/complete/oval-definitions-schema.xsd" extension-element-prefixes="str" > <xsl:output method="text"/> <xsl:template match="/"> <xsl:for-each select="/oval_definitions:oval_definitions/oval_definitions:definitions/oval_definitions:definition"> <xsl:value-of select="@id"/><xsl:text> </xsl:text> </xsl:for-each> </xsl:template> </xsl:stylesheet> ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/oval_verify.xsl���������������������������������������������������������000644 �001751 �001751 �00000005372 12557600612 022111� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <!-- OpenVAS $Id$ Description: Verification that a given XML file contains basic OVAL elements. Authors: Timo Pollmeier <timo.pollmeier@greenbone.net> Copyright: Copyright (C) 2013 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:str="http://exslt.org/strings" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval_definitions="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval_variables="http://oval.mitre.org/XMLSchema/oval-variables-5" xmlns:oval_system_char="http://oval.mitre.org/XMLSchema/oval-system-characteristics-5" xmlns:oval_results="http://oval.mitre.org/XMLSchema/oval-results-5" xsi:schemaLocation="http://oval.mitre.org/language/version5.10.1/ovaldefinition/complete/oval-common-schema.xsd http://oval.mitre.org/language/version5.10.1/ovaldefinition/complete/oval-definitions-schema.xsd" extension-element-prefixes="str" > <xsl:output method="text"/> <xsl:template match="/"> <xsl:choose> <xsl:when test="count(oval_definitions:oval_definitions) = 1"><xsl:if test="count(oval_definitions:oval_definitions/oval_definitions:definitions/oval_definitions:definition) = 0">No OVAL definitions found<xsl:message terminate="yes"/></xsl:if></xsl:when> <xsl:when test="count(oval_variables:oval_variables) = 1"><xsl:if test="count(oval_variables:oval_variables/oval_variables:variables/oval_variables:variable) = 0">No OVAL variables found<xsl:message terminate="yes"/></xsl:if></xsl:when> <xsl:when test="count(oval_system_char:oval_system_characteristics) = 1">File is a OVAL System Characteristics one<xsl:message terminate="yes"/></xsl:when> <xsl:when test="count(oval_system_char:oval_system_characteristics) = 1">File is a OVAL Results one<xsl:message terminate="yes"/></xsl:when> <xsl:otherwise>Root tag neither oval_definitions nor oval_variables<xsl:message terminate="yes"/></xsl:otherwise> </xsl:choose> <xsl:text>file valid</xsl:text> </xsl:template> </xsl:stylesheet> ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/dfn_cert_update.xsl�����������������������������������������������������000644 �001751 �001751 �00000005752 12557600612 022714� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <!-- OpenVAS $Id$ Description: Generate SQL (SQLite compatible) queries to update the DFN-CERT tables of the CERT database. Authors: Timo Pollmeier <timo.pollmeier@greenbone.net> Copyright: Copyright (C) 2013 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:dfncert="http://www.dfn-cert.de/dfncert.dtd" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:str="http://exslt.org/strings" xmlns:date="http://exslt.org/dates-and-times" extension-element-prefixes="str date" > <xsl:output method="text"/> <xsl:param name="refdate" select="'0'"/> <xsl:template match="/"> BEGIN TRANSACTION; <xsl:apply-templates select="atom:feed/atom:entry"/> COMMIT; </xsl:template> <xsl:template match="atom:entry"> <xsl:choose> <xsl:when test="floor (date:seconds (atom:updated)) > number($refdate)"> INSERT OR REPLACE INTO dfn_cert_advs ( uuid, name, comment, creation_time, modification_time, title, summary, cve_refs ) VALUES ( "<xsl:value-of select="dfncert:refnum"/>", "<xsl:value-of select="dfncert:refnum"/>", "", <xsl:value-of select="floor (date:seconds (atom:published/text()))"/>, <xsl:value-of select="floor (date:seconds (atom:updated/text()))"/>, "<xsl:value-of select="str:replace(atom:title/text(), '"', '""')"/>", "<xsl:value-of select="str:replace(atom:summary/text(), '"', '""')"/>", <xsl:value-of select="count(dfncert:cve)"/> ); <xsl:variable name="refnum" select="dfncert:refnum"/> <xsl:for-each select="dfncert:cve"> <xsl:for-each select="str:tokenize (str:replace (text (), 'CVE ', 'CVE-'), ' ')"> <xsl:if test="starts-with (text (), 'CVE-') and (string-length (text ()) >= 13) and string (number(substring (text (), 4, 4))) != 'NaN'"> INSERT OR REPLACE INTO dfn_cert_cves ( adv_id, cve_name ) VALUES ( (SELECT id FROM dfn_cert_advs WHERE name = "<xsl:value-of select="$refnum"/>"), "<xsl:value-of select="."/>" ); </xsl:if> </xsl:for-each> </xsl:for-each> </xsl:when> <xsl:otherwise> /* filtered entry dated <xsl:value-of select="atom:updated/text()"/> */ </xsl:otherwise> </xsl:choose> </xsl:template> </xsl:stylesheet>����������������������openvas-manager-6.0.9/tools/oval_update.xsl���������������������������������������������������������000644 �001751 �001751 �00000015754 12557600612 022074� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <!-- OpenVAS $Id$ Description: Generate SQL (SQLite compatible) queries to update the OVAL database. Authors: Henri Doreau <henri.doreau@greenbone.net> Timo Pollmeier <timo.pollmeier@greenbone.net> Copyright: Copyright (C) 2011 - 2012 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:ns6="http://scap.nist.gov/schema/scap-core/0.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:date="http://exslt.org/dates-and-times" xmlns:str="http://exslt.org/strings" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval_definitions="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval_variables="http://oval.mitre.org/XMLSchema/oval-variables-5" xsi:schemaLocation="http://oval.mitre.org/language/version5.10.1/ovaldefinition/complete/oval-common-schema.xsd http://oval.mitre.org/language/version5.10.1/ovaldefinition/complete/oval-definitions-schema.xsd" extension-element-prefixes="date str" > <xsl:param name="refdate" select="0" /> <xsl:output method="text"/> <xsl:variable name="filetimestamp" select="normalize-space(oval_definitions:oval_definitions/oval_definitions:generator/oval:timestamp)"/> <xsl:template match="oval_definitions:definition"> <xsl:variable name="definitiondate" select="normalize-space((oval_definitions:metadata/oval_definitions:oval_repository/oval_definitions:dates/oval_definitions:submitted/@date | oval_definitions:metadata/oval_definitions:oval_repository/oval_definitions:dates/oval_definitions:status_change/@date | oval_definitions:metadata/oval_definitions:oval_repository/oval_definitions:dates/oval_definitions:modified/@date)[last()])" /> <xsl:choose> <xsl:when test="$definitiondate='' or floor (date:seconds ($definitiondate)) > number($refdate)"> INSERT OR REPLACE INTO ovaldefs ( uuid, name, comment, creation_time, modification_time, version, deprecated, def_class, title, description, xml_file, status, max_cvss, cve_refs ) VALUES ( "<xsl:value-of select="@id"/>_"||(SELECT id FROM ovalfiles WHERE xml_file = "<xsl:value-of select="$filename"/>"), "<xsl:value-of select="@id"/>", "", <xsl:choose> <xsl:when test="$definitiondate != ''"><xsl:apply-templates select="oval_definitions:metadata/oval_definitions:oval_repository/oval_definitions:dates"/> </xsl:when> <xsl:otherwise><xsl:value-of select="floor (date:seconds ($filetimestamp))"/>, <xsl:value-of select="floor (date:seconds ($filetimestamp))"/>, </xsl:otherwise> </xsl:choose> <xsl:value-of select="@version"/>, <xsl:call-template name="boolean_def_false"> <xsl:with-param name="value" select="@deprecated"/> </xsl:call-template>, "<xsl:value-of select="@class"/>", "<xsl:value-of select="str:replace(oval_definitions:metadata/oval_definitions:title/text(), '"', '""')"/>", "<xsl:value-of select="str:replace(oval_definitions:metadata/oval_definitions:description/text(), '"', '""')"/>", "<xsl:copy-of select="$filename"/>", <xsl:choose> <xsl:when test="oval_definitions:metadata/oval_definitions:oval_repository/oval_definitions:status != ''"> "<xsl:value-of select="oval_definitions:metadata/oval_definitions:oval_repository/oval_definitions:status"/>" </xsl:when> <xsl:otherwise> <xsl:choose> <xsl:when test="translate(@deprecated, $smallcase, $uppercase) = 'TRUE'"> <xsl:text>"DEPRECATED"</xsl:text> </xsl:when> <xsl:otherwise> <xsl:text>""</xsl:text> </xsl:otherwise> </xsl:choose> </xsl:otherwise> </xsl:choose>, 0.0, <xsl:value-of select="count(oval_definitions:metadata/oval_definitions:reference[translate(@source, $uppercase, $smallcase) = 'cve'])"/> ); <xsl:for-each select="oval_definitions:metadata/oval_definitions:reference[translate(@source, $uppercase, $smallcase) = 'cve']"> INSERT OR IGNORE INTO affected_ovaldefs (cve, ovaldef) SELECT cves.id, ovaldefs.id FROM cves, ovaldefs WHERE cves.name='<xsl:value-of select="@ref_id"/>' AND ovaldefs.name = '<xsl:value-of select="../../@id"/>'; </xsl:for-each> </xsl:when> <xsl:otherwise> /* Filtered <xsl:value-of select="@id"/> (<xsl:value-of select="$definitiondate"/>) */ </xsl:otherwise> </xsl:choose> </xsl:template> <xsl:template match="oval_definitions:dates"><xsl:choose> <xsl:when test="oval_definitions:submitted/@date | oval_definitions:status_change/@date | oval_definitions:modified/@date != ''"><xsl:value-of select="floor (date:seconds ((oval_definitions:submitted/@date | oval_definitions:status_change/@date | oval_definitions:modified/@date) [1]))"/>, <xsl:value-of select="floor (date:seconds ((oval_definitions:submitted/@date | oval_definitions:status_change/@date | oval_definitions:modified/@date) [last()]))"/>, </xsl:when> <xsl:otherwise><xsl:copy-of select="floor (date:seconds ($timestamp))"/>, <xsl:copy-of select="floor (date:seconds ($timestamp))"/>, </xsl:otherwise> </xsl:choose> </xsl:template> <xsl:template match="oval_definitions:generator" /> <xsl:template match="oval_definitions:tests" /> <xsl:template match="oval_definitions:objects" /> <xsl:template match="oval_definitions:states" /> <xsl:template match="oval_definitions:variables" /> <xsl:template match="oval_variables:variable" /> <xsl:template match="oval_variables:generator" /> <xsl:template match="/"> BEGIN TRANSACTION; INSERT OR IGNORE INTO ovalfiles (xml_file) VALUES ("<xsl:value-of select="$filename"/>"); <xsl:apply-templates /> COMMIT; </xsl:template> <xsl:variable name="smallcase" select="'abcdefghijklmnopqrstuvwxyz'" /> <xsl:variable name="uppercase" select="'ABCDEFGHIJKLMNOPQRSTUVWXYZ'" /> <xsl:template name="boolean_def_false"> <xsl:param name="value"/> <xsl:choose> <xsl:when test="translate($value, $smallcase, $uppercase) = 'TRUE'"> <xsl:text>1</xsl:text> </xsl:when> <xsl:otherwise> <xsl:text>0</xsl:text> </xsl:otherwise> </xsl:choose> </xsl:template> </xsl:stylesheet> ��������������������openvas-manager-6.0.9/tools/openvas-lsc-rpm-creator.sh����������������������������������������������000755 �001751 �001751 �00000522346 12557600612 024063� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/bin/sh # This script was generated using Makeself 2.1.5 CRCsum="989516589" MD5="001440a0272902dbcf1a6e242c26124c" TMPROOT=${TMPDIR:=/tmp} label="OpenVAS LSC RPM creator" script="./create-rpm.sh" scriptargs="" targetdir="blubber" filesizes="163840" keep=y print_cmd_arg="" if type printf > /dev/null; then print_cmd="printf" elif test -x /usr/ucb/echo; then print_cmd="/usr/ucb/echo" else print_cmd="echo" fi unset CDPATH MS_Printf() { $print_cmd $print_cmd_arg "$1" } MS_Progress() { while read a; do MS_Printf . done } MS_diskspace() { ( if test -d /usr/xpg4/bin; then PATH=/usr/xpg4/bin:$PATH fi df -kP "$1" | tail -1 | awk '{print $4}' ) } MS_dd() { blocks=`expr $3 / 1024` bytes=`expr $3 % 1024` dd if="$1" ibs=$2 skip=1 obs=1024 conv=sync 2> /dev/null | \ { test $blocks -gt 0 && dd ibs=1024 obs=1024 count=$blocks ; \ test $bytes -gt 0 && dd ibs=1 obs=1024 count=$bytes ; } 2> /dev/null } MS_Help() { cat << EOH >&2 Makeself version 2.1.5 1) Getting help or info about $0 : $0 --help Print this message $0 --info Print embedded info : title, default target directory, embedded script ... $0 --lsm Print embedded lsm entry (or no LSM) $0 --list Print the list of files in the archive $0 --check Checks integrity of the archive 2) Running $0 : $0 [options] [--] [additional arguments to embedded script] with following options (in that order) --confirm Ask before running embedded script --noexec Do not run embedded script --keep Do not erase target directory after running the embedded script --nox11 Do not spawn an xterm --nochown Do not give the extracted files to the current user --target NewDirectory Extract in NewDirectory --tar arg1 [arg2 ...] Access the contents of the archive through the tar command -- Following arguments will be passed to the embedded script EOH } MS_Check() { OLD_PATH="$PATH" PATH=${GUESS_MD5_PATH:-"$OLD_PATH:/bin:/usr/bin:/sbin:/usr/local/ssl/bin:/usr/local/bin:/opt/openssl/bin"} MD5_ARG="" MD5_PATH=`exec <&- 2>&-; which md5sum || type md5sum` test -x "$MD5_PATH" || MD5_PATH=`exec <&- 2>&-; which md5 || type md5` test -x "$MD5_PATH" || MD5_PATH=`exec <&- 2>&-; which digest || type digest` PATH="$OLD_PATH" MS_Printf "Verifying archive integrity..." offset=`head -n 404 "$1" | wc -c | tr -d " "` verb=$2 i=1 for s in $filesizes do crc=`echo $CRCsum | cut -d" " -f$i` if test -x "$MD5_PATH"; then if test `basename $MD5_PATH` = digest; then MD5_ARG="-a md5" fi md5=`echo $MD5 | cut -d" " -f$i` if test $md5 = "00000000000000000000000000000000"; then test x$verb = xy && echo " $1 does not contain an embedded MD5 checksum." >&2 else md5sum=`MS_dd "$1" $offset $s | eval "$MD5_PATH $MD5_ARG" | cut -b-32`; if test "$md5sum" != "$md5"; then echo "Error in MD5 checksums: $md5sum is different from $md5" >&2 exit 2 else test x$verb = xy && MS_Printf " MD5 checksums are OK." >&2 fi crc="0000000000"; verb=n fi fi if test $crc = "0000000000"; then test x$verb = xy && echo " $1 does not contain a CRC checksum." >&2 else sum1=`MS_dd "$1" $offset $s | CMD_ENV=xpg4 cksum | awk '{print $1}'` if test "$sum1" = "$crc"; then test x$verb = xy && MS_Printf " CRC checksums are OK." >&2 else echo "Error in checksums: $sum1 is different from $crc" exit 2; fi fi i=`expr $i + 1` offset=`expr $offset + $s` done echo " All good." } UnTAR() { tar $1vf - 2>&1 || { echo Extraction failed. > /dev/tty; kill -15 $$; } } finish=true xterm_loop= nox11=y copy=none ownership=y verbose=n initargs="$@" while true do case "$1" in -h | --help) MS_Help exit 0 ;; --info) echo Identification: "$label" echo Target directory: "$targetdir" echo Uncompressed size: 220 KB echo Compression: none echo Date of packaging: Wed Jul 14 09:25:13 CEST 2010 echo Built with Makeself version 2.1.5 on linux-gnu echo Build command was: "./makeself-2.1.5/makeself.sh \\ \"--nox11\" \\ \"--notemp\" \\ \"--nocomp\" \\ \"/tmp/blubber\" \\ \"openvas-lsc-rpm-creator.sh\" \\ \"OpenVAS LSC RPM creator\" \\ \"./create-rpm.sh\"" if test x$script != x; then echo Script run after extraction: echo " " $script $scriptargs fi if test x"" = xcopy; then echo "Archive will copy itself to a temporary location" fi if test x"y" = xy; then echo "directory $targetdir is permanent" else echo "$targetdir will be removed after extraction" fi exit 0 ;; --dumpconf) echo LABEL=\"$label\" echo SCRIPT=\"$script\" echo SCRIPTARGS=\"$scriptargs\" echo archdirname=\"blubber\" echo KEEP=y echo COMPRESS=none echo filesizes=\"$filesizes\" echo CRCsum=\"$CRCsum\" echo MD5sum=\"$MD5\" echo OLDUSIZE=220 echo OLDSKIP=405 exit 0 ;; --lsm) cat << EOLSM No LSM. EOLSM exit 0 ;; --list) echo Target directory: $targetdir offset=`head -n 404 "$0" | wc -c | tr -d " "` for s in $filesizes do MS_dd "$0" $offset $s | eval "cat" | UnTAR t offset=`expr $offset + $s` done exit 0 ;; --tar) offset=`head -n 404 "$0" | wc -c | tr -d " "` arg1="$2" shift 2 for s in $filesizes do MS_dd "$0" $offset $s | eval "cat" | tar "$arg1" - $* offset=`expr $offset + $s` done exit 0 ;; --check) MS_Check "$0" y exit 0 ;; --confirm) verbose=y shift ;; --noexec) script="" shift ;; --keep) keep=y shift ;; --target) keep=y targetdir=${2:-.} shift 2 ;; --nox11) nox11=y shift ;; --nochown) ownership=n shift ;; --xwin) finish="echo Press Return to close this window...; read junk" xterm_loop=1 shift ;; --phase2) copy=phase2 shift ;; --) shift break ;; -*) echo Unrecognized flag : "$1" >&2 MS_Help exit 1 ;; *) break ;; esac done case "$copy" in copy) tmpdir=$TMPROOT/makeself.$RANDOM.`date +"%y%m%d%H%M%S"`.$$ mkdir "$tmpdir" || { echo "Could not create temporary directory $tmpdir" >&2 exit 1 } SCRIPT_COPY="$tmpdir/makeself" echo "Copying to a temporary location..." >&2 cp "$0" "$SCRIPT_COPY" chmod +x "$SCRIPT_COPY" cd "$TMPROOT" exec "$SCRIPT_COPY" --phase2 -- $initargs ;; phase2) finish="$finish ; rm -rf `dirname $0`" ;; esac if test "$nox11" = "n"; then if tty -s; then # Do we have a terminal? : else if test x"$DISPLAY" != x -a x"$xterm_loop" = x; then # No, but do we have X? if xset q > /dev/null 2>&1; then # Check for valid DISPLAY variable GUESS_XTERMS="xterm rxvt dtterm eterm Eterm kvt konsole aterm" for a in $GUESS_XTERMS; do if type $a >/dev/null 2>&1; then XTERM=$a break fi done chmod a+x $0 || echo Please add execution rights on $0 if test `echo "$0" | cut -c1` = "/"; then # Spawn a terminal! exec $XTERM -title "$label" -e "$0" --xwin "$initargs" else exec $XTERM -title "$label" -e "./$0" --xwin "$initargs" fi fi fi fi fi if test "$targetdir" = "."; then tmpdir="." else if test "$keep" = y; then echo "Creating directory $targetdir" >&2 tmpdir="$targetdir" dashp="-p" else tmpdir="$TMPROOT/selfgz$$$RANDOM" dashp="" fi mkdir $dashp $tmpdir || { echo 'Cannot create target directory' $tmpdir >&2 echo 'You should try option --target OtherDirectory' >&2 eval $finish exit 1 } fi location="`pwd`" if test x$SETUP_NOCHECK != x1; then MS_Check "$0" fi offset=`head -n 404 "$0" | wc -c | tr -d " "` if test x"$verbose" = xy; then MS_Printf "About to extract 220 KB in $tmpdir ... Proceed ? [Y/n] " read yn if test x"$yn" = xn; then eval $finish; exit 1 fi fi MS_Printf "Uncompressing $label" res=3 if test "$keep" = n; then trap 'echo Signal caught, cleaning up >&2; cd $TMPROOT; /bin/rm -rf $tmpdir; eval $finish; exit 15' 1 2 3 15 fi leftspace=`MS_diskspace $tmpdir` if test $leftspace -lt 220; then echo echo "Not enough space left in "`dirname $tmpdir`" ($leftspace KB) to decompress $0 (220 KB)" >&2 if test "$keep" = n; then echo "Consider setting TMPDIR to a directory with more free space." fi eval $finish; exit 1 fi for s in $filesizes do if MS_dd "$0" $offset $s | eval "cat" | ( cd "$tmpdir"; UnTAR x ) | MS_Progress; then if test x"$ownership" = xy; then (PATH=/usr/xpg4/bin:$PATH; cd "$tmpdir"; chown -R `id -u` .; chgrp -R `id -g` .) fi else echo echo "Unable to decompress $0" >&2 eval $finish; exit 1 fi offset=`expr $offset + $s` done echo cd "$tmpdir" res=0 if test x"$script" != x; then if test x"$verbose" = xy; then MS_Printf "OK to execute: $script $scriptargs $* ? [Y/n] " read yn if test x"$yn" = x -o x"$yn" = xy -o x"$yn" = xY; then eval $script $scriptargs $*; res=$?; fi else eval $script $scriptargs $*; res=$? fi if test $res -ne 0; then test x"$verbose" = xy && echo "The program '$script' returned an error code ($res)" >&2 fi fi if test "$keep" = n; then cd $TMPROOT /bin/rm -rf $tmpdir fi eval $finish; exit $res ./��������������������������������������������������������������������������������������������������0000775�0023576�0023576�00000000000�11417263131�011026� 5����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./Changelog�����������������������������������������������������������������������������������������0000664�0023576�0023576�00000005040�11416535515�012646� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������2010-09-08 Felix Wolfsteller <felix.wolfsteller@greenbone.net> * openvas-lsc-target.spec.in (%postun): Check /etc/passwd line of user to delete to prevent accidental removal of existing users in alien-converted package. The packages in question run the postun step even if prep or prein steps fail, thus eventually removing users that existed prior to installation-attempt of the package. 2009-10-23 Matthew Mundell <matthew.mundell@intevation.de> * Makefile (self): Rename generated script to openvas-lsc-rpm-creator.sh. * README: Update name. 2009-10-23 Matthew Mundell <matthew.mundell@intevation.de> * Makefile, README: Flush trailing whitespace. 2009-10-02 Matthew Mundell <matthew.mundell@intevation.de> * MANIFEST: Add newline at end of file. 2009-10-02 Felix Wolfsteller <felix.wolfsteller@intevation.de> Fixed a bug. Output of ls differs in ordering depending on the locale. In the Makefile, the diff command compares ls output with MANIFEST, leading to wrong results if these files are sorted differently. Found in cooperation with Matthew Mundell. * MANIFEST: Sorted "traditionally". * Makefile: Set locale to have the ls command sort "traditionally". 2009-09-23 Felix Wolfsteller <felix.wolfsteller@intevation.de> * create-rpm.sh: Fixed bashism. 2009-05-06 Felix Wolfsteller <felix.wolfsteller@intevation.de> * openvas-lsc-target.spec.in: Delete user when package is uninstalled. * TODO: Todos added (what happens if user exists, expire- date?). 2009-04-24 Felix Wolfsteller <felix.wolfsteller@intevation.de> * README: Corrected words about suggested invocation. * create-rpm.sh: Removed three parameter version. If the makeself-generated script is called exactly as described in the README it is not needed, argument count will be 1 and not 3. 2009-04-24 Felix Wolfsteller <felix.wolfsteller@intevation.de> * README: Added words about suggested invocation. * TODO: Need to remove the user when package is uninstalled. 2009-04-24 Felix Wolfsteller <felix.wolfsteller@intevation.de> * create-rpm.sh: Check number of arguments. Condition cleanup and location of created rpm on number of arguments. 2009-02-18 Jan-Oliver Wagner <jan-oliver.wagner@intevation.de> * PUBKEYNAME, lsc-pubkey.pub: reset (removed test content). 2009-02-17 Jan-Oliver Wagner <jan-oliver.wagner@intevation.de> * README: Fixed directives. * MANIFEST: Added missing entry for TODO. 2009-02-17 Jan-Oliver Wagner <jan-oliver.wagner@intevation.de> Started module. Most works so far are developed by Jochen Plumeyer <jochen@plumeyer.org> ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./MANIFEST������������������������������������������������������������������������������������������0000664�0023576�0023576�00000000235�11271247354�012166� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������Changelog MANIFEST Makefile NAME PUBKEYNAME README RPMBASENAME TODO VERSION configure create-rpm.sh lsc-pubkey.pub makeself-2.1.5 openvas-lsc-target.spec.in �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./Makefile������������������������������������������������������������������������������������������0000664�0023576�0023576�00000004227�11271247354�012502� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������VERSION=$(shell cat VERSION) NAME=$(shell cat NAME) RPMBASENAME=$(shell cat RPMBASENAME) PUBKEYNAME=$(shell cat PUBKEYNAME) RPMNAME=$(RPMBASENAME)-$(PUBKEYNAME) FILES=$(shell xargs < MANIFEST) #PACKDIR=$(shell mktemp -d /tmp/thisgoesawayXXXXX ) PACKDIR=/tmp/blubber EXECUTE_DIR=$(shell basename $(PACKDIR)) default: # NOP, no operation # Creating the fundamental directories and contents for the RPM # building, not using the system defaults configure: rpmdist mkdir SOURCES mkdir RPMS mkdir BUILD mv $(RPMNAME)-$(VERSION).tar.gz SOURCES/ install: cp lsc-pubkey.pub $(RPM_BUILD_ROOT)/home/$(PUBKEYNAME)/.ssh/authorized_keys clean: LC_ALL=C ls | egrep -v "\.spec" | diff MANIFEST - | grep "^>" | sed 's/^..//' | xargs rm -rf # The default pubkey is used as an example, to test the building # system locally. An RPM should be generated. test: cp ~/.ssh/id_rsa.pub id_rsa_sshovas.pub sh create-rpm.sh id_rsa_sshovas.pub # "make rpmdist" Packing this same system with the changed name into RPM SOURCES # directory rpmdist: clean echo $(FILES) mkdir $(RPMNAME)-$(VERSION) cp -ar $(FILES) $(RPMNAME)-$(VERSION)/ tar cfzv $(RPMNAME)-$(VERSION).tar.gz $(RPMNAME)-$(VERSION) rm -rf $(RPMNAME)-$(VERSION) # "make dist": Everything, even the *.spec file is cleaned up dist: distclean echo $(FILES) mkdir $(NAME)-$(VERSION) cp -ar $(FILES) $(NAME)-$(VERSION)/ tar cfzv $(NAME)-$(VERSION).tar.gz $(NAME)-$(VERSION) rm -rf $(NAME)-$(VERSION) # "make self" generates the all-containing shellscript. # This is the script to be used on the RPM building machines: # <shellscript.sh> </absolute/path/to/pubkey.pub> self: distclean rm -rf $(PACKDIR) mkdir $(PACKDIR) cp -ar $(FILES) $(PACKDIR)/ ./makeself-2.1.5/makeself.sh --nox11 --notemp --nocomp $(PACKDIR) openvas-lsc-rpm-creator.sh "OpenVAS LSC RPM creator" ./create-rpm.sh rm -rf $(PACKDIR) # If you plan to add files or directories to this system, please do # "make distclean", add the files and then # "make manifest". So everything should go straight. manifest: ls > MANIFEST # distclean: clean rm -f PUBKEYNAME *.spec lsc-pubkey.pub touch PUBKEYNAME lsc-pubkey.pub .PHONY: clean default install test distclean manifest �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./NAME����������������������������������������������������������������������������������������������0000664�0023576�0023576�00000000037�11271247354�011500� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-lsc-target-preparation �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./PUBKEYNAME����������������������������������������������������������������������������������������0000664�0023576�0023576�00000000000�11417263131�012377� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./README��������������������������������������������������������������������������������������������0000664�0023576�0023576�00000002750�11271247354�011721� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-lsc-target-preparation ------------------------------ To prepare a shell script that can be used to create RPMs that make target systems ready for OpenVAS Local Security Checks (LSCs), follow these instructions. The resulting shell script could be used e.g. by OpenVAS-Client's key manager. make self The resulting shell script can be used like this: sh openvas-lsc-rpm-creator.sh --target /abs/path/to/temp/working/dir /absolute/path/to/id_rsa_pubkey.pub After successfull execution, a resulting rpm package will be placed in the directory provided with --target. Be sure to clean up the provided directory afterwards! Ommitting the --target argument might work. Then, contents are extracted into a 'blubber' directory. It is generally suggested to provide the directory and remove it afterwards yourself. To test the functionality inside this directory, please execute ( with the name "John Doe" as an example) sh create-rpm.sh id_rsa_johndoe.pub to create an RPM to install on target machines using this specific public key as secure access requirement via ssh. For further development: If you want to include more files or directories into this shellscript build system, do before make distclean then add the files, and do a make manifest The version number resides in the file "VERSION". BUGS: The system is likely to fail, if its parent directory or included files contain spaces in filenames, or other characters which need to be quoted for being used well in a UNIX shell. ������������������������./RPMBASENAME���������������������������������������������������������������������������������������0000664�0023576�0023576�00000000023�11271247354�012505� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-lsc-target �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./TODO����������������������������������������������������������������������������������������������0000664�0023576�0023576�00000001620�11271247354�011524� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������TODO: - The temporary directory name "blubber" should be replaced by a random dynamic name, similar to the "mktemp" command. - rpmbuild insists to use "./configure". It would be good to change this to eliminate then the dummy "configure" script. - To be able to include the resulting shellscript into a spec file, it might be necessary to modify it, to not disturb the spec parser of rpmbuild. There are two possibilities: sourcing it, or using a (not very neat) "ASCII blob", which will not interfere with the syntax necessities of spec files. Perl has uuencoding built in, without any module dependencies (see "perldoc -f pack"). So the ASCII blob could be de/encoded by piping it through Perl. - Fail installation process if user exists already (useradd returns 9), because when package is removed, the users home directory will be deleted. - Set expire-date for user (configurable).����������������������������������������������������������������������������������������������������������������./VERSION�������������������������������������������������������������������������������������������0000664�0023576�0023576�00000000004�11271247354�012077� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������0.5 ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./configure�����������������������������������������������������������������������������������������0000775�0023576�0023576�00000000060�11271247354�012740� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/bin/sh echo "This is just a dummy, see TODO" ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./create-rpm.sh�������������������������������������������������������������������������������������0000775�0023576�0023576�00000004211�11271247354�013431� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/bin/sh # OpenVAS module "openvas-lsc-target-preparation", create-rpm.sh # $Id$ # Description: shellscript to create a rpm package # # Authors: # Jochen Plumeyer <jochen@plumeyer.de> # Jan-Oliver Wagner <jan-oliver.wagner@intevation.de> # # Copyright: # Copyright (C) 2009 Intevation GmbH # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License version 2, # as published by the Free Software Foundation # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. # #set -x # We expect to be called like # ./create-rpm.sh MyPathToKeyFile.pub PubkeyFile= if [ $# = 1 ]; then PubkeyFile=$1 else echo 'Please provide path to public key file as first argument.' exit 1 fi mkdir -p rpmtmp cp -f $PubkeyFile lsc-pubkey.pub RpmPrefix="openvas-lsc-target" BasenamePubkeyFile=`basename $PubkeyFile .pub` RpmPostfix=`echo $BasenamePubkeyFile | sed 's/id_rsa_//'` Version=`cat VERSION` TopDir=`pwd` echo $RpmPostfix > PUBKEYNAME RpmName=$RpmPrefix-$RpmPostfix sed "s|@RpmName@|$RpmName|g" < openvas-lsc-target.spec.in > openvas-lsc-target.spec sed -i "s|@PubkeyBasename@|$RpmPostfix|g" openvas-lsc-target.spec sed -i "s|@VERSION@|$Version|g" openvas-lsc-target.spec sed -i "s|@TOPDIR@|$TopDir|g" openvas-lsc-target.spec # ... install $PubkeyFile as a file which installs temporarily as # target-user-visible $PubkeyRPMPayload on the target machine make configure RPM_SOURCE_DIR=. rpmbuild -bb --target noarch "$RpmPrefix".spec # Script code for client machine is in %post of openvas-lsc-target.spec.in # We do not clean up. If its required ('blubber'), use: # cp RPMS/noarch/*.rpm .. # pwd=`pwd` # if [ `basename $pwd` = "blubber" ] # then # rm -rf `pwd` cp RPMS/noarch/*.rpm . #vim: set tw=70 ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./lsc-pubkey.pub������������������������������������������������������������������������������������0000664�0023576�0023576�00000000000�11417263131�013602� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/�����������������������������������������������������������������������������������0000775�0023576�0023576�00000000000�11271247354�013265� 5����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/.svn/������������������������������������������������������������������������������0000775�0023576�0023576�00000000000�11417253732�014150� 5����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/.svn/text-base/��������������������������������������������������������������������0000775�0023576�0023576�00000000000�11271247354�016045� 5����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/.svn/text-base/makeself.sh.svn-base������������������������������������������������0000444�0023576�0023576�00000027223�11271247354�021707� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/bin/sh # # Makeself version 2.1.x # by Stephane Peter <megastep@megastep.org> # # $Id: makeself.sh,v 1.64 2008/01/04 23:52:14 megastep Exp $ # # Utility to create self-extracting tar.gz archives. # The resulting archive is a file holding the tar.gz archive with # a small Shell script stub that uncompresses the archive to a temporary # directory and then executes a given script from withing that directory. # # Makeself home page: http://www.megastep.org/makeself/ # # Version 2.0 is a rewrite of version 1.0 to make the code easier to read and maintain. # # Version history : # - 1.0 : Initial public release # - 1.1 : The archive can be passed parameters that will be passed on to # the embedded script, thanks to John C. Quillan # - 1.2 : Package distribution, bzip2 compression, more command line options, # support for non-temporary archives. Ideas thanks to Francois Petitjean # - 1.3 : More patches from Bjarni R. Einarsson and Francois Petitjean: # Support for no compression (--nocomp), script is no longer mandatory, # automatic launch in an xterm, optional verbose output, and -target # archive option to indicate where to extract the files. # - 1.4 : Improved UNIX compatibility (Francois Petitjean) # Automatic integrity checking, support of LSM files (Francois Petitjean) # - 1.5 : Many bugfixes. Optionally disable xterm spawning. # - 1.5.1 : More bugfixes, added archive options -list and -check. # - 1.5.2 : Cosmetic changes to inform the user of what's going on with big # archives (Quake III demo) # - 1.5.3 : Check for validity of the DISPLAY variable before launching an xterm. # More verbosity in xterms and check for embedded command's return value. # Bugfix for Debian 2.0 systems that have a different "print" command. # - 1.5.4 : Many bugfixes. Print out a message if the extraction failed. # - 1.5.5 : More bugfixes. Added support for SETUP_NOCHECK environment variable to # bypass checksum verification of archives. # - 1.6.0 : Compute MD5 checksums with the md5sum command (patch from Ryan Gordon) # - 2.0 : Brand new rewrite, cleaner architecture, separated header and UNIX ports. # - 2.0.1 : Added --copy # - 2.1.0 : Allow multiple tarballs to be stored in one archive, and incremental updates. # Added --nochown for archives # Stopped doing redundant checksums when not necesary # - 2.1.1 : Work around insane behavior from certain Linux distros with no 'uncompress' command # Cleaned up the code to handle error codes from compress. Simplified the extraction code. # - 2.1.2 : Some bug fixes. Use head -n to avoid problems. # - 2.1.3 : Bug fixes with command line when spawning terminals. # Added --tar for archives, allowing to give arbitrary arguments to tar on the contents of the archive. # Added --noexec to prevent execution of embedded scripts. # Added --nomd5 and --nocrc to avoid creating checksums in archives. # Added command used to create the archive in --info output. # Run the embedded script through eval. # - 2.1.4 : Fixed --info output. # Generate random directory name when extracting files to . to avoid problems. (Jason Trent) # Better handling of errors with wrong permissions for the directory containing the files. (Jason Trent) # Avoid some race conditions (Ludwig Nussel) # Unset the $CDPATH variable to avoid problems if it is set. (Debian) # Better handling of dot files in the archive directory. # - 2.1.5 : Made the md5sum detection consistent with the header code. # Check for the presence of the archive directory # Added --encrypt for symmetric encryption through gpg (Eric Windisch) # Added support for the digest command on Solaris 10 for MD5 checksums # Check for available disk space before extracting to the target directory (Andreas Schweitzer) # Allow extraction to run asynchronously (patch by Peter Hatch) # Use file descriptors internally to avoid error messages (patch by Kay Tiong Khoo) # # (C) 1998-2008 by Stphane Peter <megastep@megastep.org> # # This software is released under the terms of the GNU GPL version 2 and above # Please read the license at http://www.gnu.org/copyleft/gpl.html # MS_VERSION=2.1.5 MS_COMMAND="$0" unset CDPATH for f in "${1+"$@"}"; do MS_COMMAND="$MS_COMMAND \\\\ \\\"$f\\\"" done # Procedures MS_Usage() { echo "Usage: $0 [params] archive_dir file_name label [startup_script] [args]" echo "params can be one or more of the following :" echo " --version | -v : Print out Makeself version number and exit" echo " --help | -h : Print out this help message" echo " --gzip : Compress using gzip (default if detected)" echo " --bzip2 : Compress using bzip2 instead of gzip" echo " --compress : Compress using the UNIX 'compress' command" echo " --nocomp : Do not compress the data" echo " --notemp : The archive will create archive_dir in the" echo " current directory and uncompress in ./archive_dir" echo " --copy : Upon extraction, the archive will first copy itself to" echo " a temporary directory" echo " --append : Append more files to an existing Makeself archive" echo " The label and startup scripts will then be ignored" echo " --current : Files will be extracted to the current directory." echo " Implies --notemp." echo " --nomd5 : Don't calculate an MD5 for archive" echo " --nocrc : Don't calculate a CRC for archive" echo " --header file : Specify location of the header script" echo " --follow : Follow the symlinks in the archive" echo " --nox11 : Disable automatic spawn of a xterm" echo " --nowait : Do not wait for user input after executing embedded" echo " program from an xterm" echo " --lsm file : LSM file describing the package" echo echo "Do not forget to give a fully qualified startup script name" echo "(i.e. with a ./ prefix if inside the archive)." exit 1 } # Default settings if type gzip 2>&1 > /dev/null; then COMPRESS=gzip else COMPRESS=Unix fi KEEP=n CURRENT=n NOX11=n APPEND=n COPY=none TAR_ARGS=cvf HEADER=`dirname $0`/makeself-header.sh # LSM file stuff LSM_CMD="echo No LSM. >> \"\$archname\"" while true do case "$1" in --version | -v) echo Makeself version $MS_VERSION exit 0 ;; --bzip2) COMPRESS=bzip2 shift ;; --gzip) COMPRESS=gzip shift ;; --compress) COMPRESS=Unix shift ;; --encrypt) COMPRESS=gpg shift ;; --nocomp) COMPRESS=none shift ;; --notemp) KEEP=y shift ;; --copy) COPY=copy shift ;; --current) CURRENT=y KEEP=y shift ;; --header) HEADER="$2" shift 2 ;; --follow) TAR_ARGS=cvfh shift ;; --nox11) NOX11=y shift ;; --nowait) shift ;; --nomd5) NOMD5=y shift ;; --nocrc) NOCRC=y shift ;; --append) APPEND=y shift ;; --lsm) LSM_CMD="cat \"$2\" >> \"\$archname\"" shift 2 ;; -h | --help) MS_Usage ;; -*) echo Unrecognized flag : "$1" MS_Usage ;; *) break ;; esac done if test $# -lt 1; then MS_Usage else if test -d "$1"; then archdir="$1" else echo "Directory $1 does not exist." exit 1 fi fi archname="$2" if test "$APPEND" = y; then if test $# -lt 2; then MS_Usage fi # Gather the info from the original archive OLDENV=`sh "$archname" --dumpconf` if test $? -ne 0; then echo "Unable to update archive: $archname" >&2 exit 1 else eval "$OLDENV" fi else if test "$KEEP" = n -a $# = 3; then echo "ERROR: Making a temporary archive with no embedded command does not make sense!" >&2 echo MS_Usage fi # We don't really want to create an absolute directory... if test "$CURRENT" = y; then archdirname="." else archdirname=`basename "$1"` fi if test $# -lt 3; then MS_Usage fi LABEL="$3" SCRIPT="$4" test x$SCRIPT = x || shift 1 shift 3 SCRIPTARGS="$*" fi if test "$KEEP" = n -a "$CURRENT" = y; then echo "ERROR: It is A VERY DANGEROUS IDEA to try to combine --notemp and --current." >&2 exit 1 fi case $COMPRESS in gzip) GZIP_CMD="gzip -c9" GUNZIP_CMD="gzip -cd" ;; bzip2) GZIP_CMD="bzip2 -9" GUNZIP_CMD="bzip2 -d" ;; gpg) GZIP_CMD="gpg -ac -z9" GUNZIP_CMD="gpg -d" ;; Unix) GZIP_CMD="compress -cf" GUNZIP_CMD="exec 2>&-; uncompress -c || test \\\$? -eq 2 || gzip -cd" ;; none) GZIP_CMD="cat" GUNZIP_CMD="cat" ;; esac tmpfile="${TMPDIR:=/tmp}/mkself$$" if test -f $HEADER; then oldarchname="$archname" archname="$tmpfile" # Generate a fake header to count its lines SKIP=0 . $HEADER SKIP=`cat "$tmpfile" |wc -l` # Get rid of any spaces SKIP=`expr $SKIP` rm -f "$tmpfile" echo Header is $SKIP lines long >&2 archname="$oldarchname" else echo "Unable to open header file: $HEADER" >&2 exit 1 fi echo if test "$APPEND" = n; then if test -f "$archname"; then echo "WARNING: Overwriting existing file: $archname" >&2 fi fi USIZE=`du -ks $archdir | cut -f1` DATE=`LC_ALL=C date` if test "." = "$archdirname"; then if test "$KEEP" = n; then archdirname="makeself-$$-`date +%Y%m%d%H%M%S`" fi fi test -d "$archdir" || { echo "Error: $archdir does not exist."; rm -f "$tmpfile"; exit 1; } echo About to compress $USIZE KB of data... echo Adding files to archive named \"$archname\"... exec 3<> "$tmpfile" (cd "$archdir" && ( tar $TAR_ARGS - . | eval "$GZIP_CMD" >&3 ) ) || { echo Aborting: Archive directory not found or temporary file: "$tmpfile" could not be created.; exec 3>&-; rm -f "$tmpfile"; exit 1; } exec 3>&- # try to close the archive fsize=`cat "$tmpfile" | wc -c | tr -d " "` # Compute the checksums md5sum=00000000000000000000000000000000 crcsum=0000000000 if test "$NOCRC" = y; then echo "skipping crc at user request" else crcsum=`cat "$tmpfile" | CMD_ENV=xpg4 cksum | sed -e 's/ /Z/' -e 's/ /Z/' | cut -dZ -f1` echo "CRC: $crcsum" fi if test "$NOMD5" = y; then echo "skipping md5sum at user request" else # Try to locate a MD5 binary OLD_PATH=$PATH PATH=${GUESS_MD5_PATH:-"$OLD_PATH:/bin:/usr/bin:/sbin:/usr/local/ssl/bin:/usr/local/bin:/opt/openssl/bin"} MD5_ARG="" MD5_PATH=`exec <&- 2>&-; which md5sum || type md5sum` test -x $MD5_PATH || MD5_PATH=`exec <&- 2>&-; which md5 || type md5` test -x $MD5_PATH || MD5_PATH=`exec <&- 2>&-; which digest || type digest` PATH=$OLD_PATH if test `basename $MD5_PATH` = digest; then MD5_ARG="-a md5" fi if test -x "$MD5_PATH"; then md5sum=`cat "$tmpfile" | eval "$MD5_PATH $MD5_ARG" | cut -b-32`; echo "MD5: $md5sum" else echo "MD5: none, MD5 command not found" fi fi if test "$APPEND" = y; then mv "$archname" "$archname".bak || exit # Prepare entry for new archive filesizes="$filesizes $fsize" CRCsum="$CRCsum $crcsum" MD5sum="$MD5sum $md5sum" USIZE=`expr $USIZE + $OLDUSIZE` # Generate the header . $HEADER # Append the original data tail -n +$OLDSKIP "$archname".bak >> "$archname" # Append the new data cat "$tmpfile" >> "$archname" chmod +x "$archname" rm -f "$archname".bak echo Self-extractible archive \"$archname\" successfully updated. else filesizes="$fsize" CRCsum="$crcsum" MD5sum="$md5sum" # Generate the header . $HEADER # Append the compressed tar data after the stub echo cat "$tmpfile" >> "$archname" chmod +x "$archname" echo Self-extractible archive \"$archname\" successfully created. fi rm -f "$tmpfile" �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/.svn/text-base/makeself.lsm.svn-base�����������������������������������������������0000444�0023576�0023576�00000001477�11271247354�022073� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������Begin3 Title: makeself.sh Version: 2.1 Description: makeself.sh is a shell script that generates a self-extractable tar.gz archive from a directory. The resulting file appears as a shell script, and can be launched as is. The archive will then uncompress itself to a temporary directory and an arbitrary command will be executed (for example an installation script). This is pretty similar to archives generated with WinZip Self-Extractor in the Windows world. Keywords: Installation archive tar winzip Author: Stphane Peter (megastep@megastep.org) Maintained-by: Stphane Peter (megastep@megastep.org) Original-site: http://www.megastep.org/makeself/ Platform: Unix Copying-policy: GPL End �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/.svn/text-base/TODO.svn-base�������������������������������������������������������0000444�0023576�0023576�00000000321�11271247354�020242� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������What needs to be done next : - Generic compression code (thru a user-defined command) - Collect names of directories potentially containing md5 program. GUESS_MD5_PATH Stphane Peter <megastep@megastep.org> ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/.svn/text-base/makeself-header.sh.svn-base�����������������������������������������0000444�0023576�0023576�00000022643�11271247354�023136� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������cat << EOF > "$archname" #!/bin/sh # This script was generated using Makeself $MS_VERSION CRCsum="$CRCsum" MD5="$MD5sum" TMPROOT=\${TMPDIR:=/tmp} label="$LABEL" script="$SCRIPT" scriptargs="$SCRIPTARGS" targetdir="$archdirname" filesizes="$filesizes" keep=$KEEP print_cmd_arg="" if type printf > /dev/null; then print_cmd="printf" elif test -x /usr/ucb/echo; then print_cmd="/usr/ucb/echo" else print_cmd="echo" fi unset CDPATH MS_Printf() { \$print_cmd \$print_cmd_arg "\$1" } MS_Progress() { while read a; do MS_Printf . done } MS_diskspace() { ( if test -d /usr/xpg4/bin; then PATH=/usr/xpg4/bin:\$PATH fi df -kP "\$1" | tail -1 | awk '{print \$4}' ) } MS_dd() { blocks=\`expr \$3 / 1024\` bytes=\`expr \$3 % 1024\` dd if="\$1" ibs=\$2 skip=1 obs=1024 conv=sync 2> /dev/null | \\ { test \$blocks -gt 0 && dd ibs=1024 obs=1024 count=\$blocks ; \\ test \$bytes -gt 0 && dd ibs=1 obs=1024 count=\$bytes ; } 2> /dev/null } MS_Help() { cat << EOH >&2 Makeself version $MS_VERSION 1) Getting help or info about \$0 : \$0 --help Print this message \$0 --info Print embedded info : title, default target directory, embedded script ... \$0 --lsm Print embedded lsm entry (or no LSM) \$0 --list Print the list of files in the archive \$0 --check Checks integrity of the archive 2) Running \$0 : \$0 [options] [--] [additional arguments to embedded script] with following options (in that order) --confirm Ask before running embedded script --noexec Do not run embedded script --keep Do not erase target directory after running the embedded script --nox11 Do not spawn an xterm --nochown Do not give the extracted files to the current user --target NewDirectory Extract in NewDirectory --tar arg1 [arg2 ...] Access the contents of the archive through the tar command -- Following arguments will be passed to the embedded script EOH } MS_Check() { OLD_PATH="\$PATH" PATH=\${GUESS_MD5_PATH:-"\$OLD_PATH:/bin:/usr/bin:/sbin:/usr/local/ssl/bin:/usr/local/bin:/opt/openssl/bin"} MD5_ARG="" MD5_PATH=\`exec <&- 2>&-; which md5sum || type md5sum\` test -x "\$MD5_PATH" || MD5_PATH=\`exec <&- 2>&-; which md5 || type md5\` test -x "\$MD5_PATH" || MD5_PATH=\`exec <&- 2>&-; which digest || type digest\` PATH="\$OLD_PATH" MS_Printf "Verifying archive integrity..." offset=\`head -n $SKIP "\$1" | wc -c | tr -d " "\` verb=\$2 i=1 for s in \$filesizes do crc=\`echo \$CRCsum | cut -d" " -f\$i\` if test -x "\$MD5_PATH"; then if test \`basename \$MD5_PATH\` = digest; then MD5_ARG="-a md5" fi md5=\`echo \$MD5 | cut -d" " -f\$i\` if test \$md5 = "00000000000000000000000000000000"; then test x\$verb = xy && echo " \$1 does not contain an embedded MD5 checksum." >&2 else md5sum=\`MS_dd "\$1" \$offset \$s | eval "\$MD5_PATH \$MD5_ARG" | cut -b-32\`; if test "\$md5sum" != "\$md5"; then echo "Error in MD5 checksums: \$md5sum is different from \$md5" >&2 exit 2 else test x\$verb = xy && MS_Printf " MD5 checksums are OK." >&2 fi crc="0000000000"; verb=n fi fi if test \$crc = "0000000000"; then test x\$verb = xy && echo " \$1 does not contain a CRC checksum." >&2 else sum1=\`MS_dd "\$1" \$offset \$s | CMD_ENV=xpg4 cksum | awk '{print \$1}'\` if test "\$sum1" = "\$crc"; then test x\$verb = xy && MS_Printf " CRC checksums are OK." >&2 else echo "Error in checksums: \$sum1 is different from \$crc" exit 2; fi fi i=\`expr \$i + 1\` offset=\`expr \$offset + \$s\` done echo " All good." } UnTAR() { tar \$1vf - 2>&1 || { echo Extraction failed. > /dev/tty; kill -15 \$$; } } finish=true xterm_loop= nox11=$NOX11 copy=$COPY ownership=y verbose=n initargs="\$@" while true do case "\$1" in -h | --help) MS_Help exit 0 ;; --info) echo Identification: "\$label" echo Target directory: "\$targetdir" echo Uncompressed size: $USIZE KB echo Compression: $COMPRESS echo Date of packaging: $DATE echo Built with Makeself version $MS_VERSION on $OSTYPE echo Build command was: "$MS_COMMAND" if test x\$script != x; then echo Script run after extraction: echo " " \$script \$scriptargs fi if test x"$copy" = xcopy; then echo "Archive will copy itself to a temporary location" fi if test x"$KEEP" = xy; then echo "directory \$targetdir is permanent" else echo "\$targetdir will be removed after extraction" fi exit 0 ;; --dumpconf) echo LABEL=\"\$label\" echo SCRIPT=\"\$script\" echo SCRIPTARGS=\"\$scriptargs\" echo archdirname=\"$archdirname\" echo KEEP=$KEEP echo COMPRESS=$COMPRESS echo filesizes=\"\$filesizes\" echo CRCsum=\"\$CRCsum\" echo MD5sum=\"\$MD5\" echo OLDUSIZE=$USIZE echo OLDSKIP=`expr $SKIP + 1` exit 0 ;; --lsm) cat << EOLSM EOF eval "$LSM_CMD" cat << EOF >> "$archname" EOLSM exit 0 ;; --list) echo Target directory: \$targetdir offset=\`head -n $SKIP "\$0" | wc -c | tr -d " "\` for s in \$filesizes do MS_dd "\$0" \$offset \$s | eval "$GUNZIP_CMD" | UnTAR t offset=\`expr \$offset + \$s\` done exit 0 ;; --tar) offset=\`head -n $SKIP "\$0" | wc -c | tr -d " "\` arg1="\$2" shift 2 for s in \$filesizes do MS_dd "\$0" \$offset \$s | eval "$GUNZIP_CMD" | tar "\$arg1" - \$* offset=\`expr \$offset + \$s\` done exit 0 ;; --check) MS_Check "\$0" y exit 0 ;; --confirm) verbose=y shift ;; --noexec) script="" shift ;; --keep) keep=y shift ;; --target) keep=y targetdir=\${2:-.} shift 2 ;; --nox11) nox11=y shift ;; --nochown) ownership=n shift ;; --xwin) finish="echo Press Return to close this window...; read junk" xterm_loop=1 shift ;; --phase2) copy=phase2 shift ;; --) shift break ;; -*) echo Unrecognized flag : "\$1" >&2 MS_Help exit 1 ;; *) break ;; esac done case "\$copy" in copy) tmpdir=\$TMPROOT/makeself.\$RANDOM.\`date +"%y%m%d%H%M%S"\`.\$\$ mkdir "\$tmpdir" || { echo "Could not create temporary directory \$tmpdir" >&2 exit 1 } SCRIPT_COPY="\$tmpdir/makeself" echo "Copying to a temporary location..." >&2 cp "\$0" "\$SCRIPT_COPY" chmod +x "\$SCRIPT_COPY" cd "\$TMPROOT" exec "\$SCRIPT_COPY" --phase2 -- \$initargs ;; phase2) finish="\$finish ; rm -rf \`dirname \$0\`" ;; esac if test "\$nox11" = "n"; then if tty -s; then # Do we have a terminal? : else if test x"\$DISPLAY" != x -a x"\$xterm_loop" = x; then # No, but do we have X? if xset q > /dev/null 2>&1; then # Check for valid DISPLAY variable GUESS_XTERMS="xterm rxvt dtterm eterm Eterm kvt konsole aterm" for a in \$GUESS_XTERMS; do if type \$a >/dev/null 2>&1; then XTERM=\$a break fi done chmod a+x \$0 || echo Please add execution rights on \$0 if test \`echo "\$0" | cut -c1\` = "/"; then # Spawn a terminal! exec \$XTERM -title "\$label" -e "\$0" --xwin "\$initargs" else exec \$XTERM -title "\$label" -e "./\$0" --xwin "\$initargs" fi fi fi fi fi if test "\$targetdir" = "."; then tmpdir="." else if test "\$keep" = y; then echo "Creating directory \$targetdir" >&2 tmpdir="\$targetdir" dashp="-p" else tmpdir="\$TMPROOT/selfgz\$\$\$RANDOM" dashp="" fi mkdir \$dashp \$tmpdir || { echo 'Cannot create target directory' \$tmpdir >&2 echo 'You should try option --target OtherDirectory' >&2 eval \$finish exit 1 } fi location="\`pwd\`" if test x\$SETUP_NOCHECK != x1; then MS_Check "\$0" fi offset=\`head -n $SKIP "\$0" | wc -c | tr -d " "\` if test x"\$verbose" = xy; then MS_Printf "About to extract $USIZE KB in \$tmpdir ... Proceed ? [Y/n] " read yn if test x"\$yn" = xn; then eval \$finish; exit 1 fi fi MS_Printf "Uncompressing \$label" res=3 if test "\$keep" = n; then trap 'echo Signal caught, cleaning up >&2; cd \$TMPROOT; /bin/rm -rf \$tmpdir; eval \$finish; exit 15' 1 2 3 15 fi leftspace=\`MS_diskspace \$tmpdir\` if test \$leftspace -lt $USIZE; then echo echo "Not enough space left in "\`dirname \$tmpdir\`" (\$leftspace KB) to decompress \$0 ($USIZE KB)" >&2 if test "\$keep" = n; then echo "Consider setting TMPDIR to a directory with more free space." fi eval \$finish; exit 1 fi for s in \$filesizes do if MS_dd "\$0" \$offset \$s | eval "$GUNZIP_CMD" | ( cd "\$tmpdir"; UnTAR x ) | MS_Progress; then if test x"\$ownership" = xy; then (PATH=/usr/xpg4/bin:\$PATH; cd "\$tmpdir"; chown -R \`id -u\` .; chgrp -R \`id -g\` .) fi else echo echo "Unable to decompress \$0" >&2 eval \$finish; exit 1 fi offset=\`expr \$offset + \$s\` done echo cd "\$tmpdir" res=0 if test x"\$script" != x; then if test x"\$verbose" = xy; then MS_Printf "OK to execute: \$script \$scriptargs \$* ? [Y/n] " read yn if test x"\$yn" = x -o x"\$yn" = xy -o x"\$yn" = xY; then eval \$script \$scriptargs \$*; res=\$?; fi else eval \$script \$scriptargs \$*; res=\$? fi if test \$res -ne 0; then test x"\$verbose" = xy && echo "The program '\$script' returned an error code (\$res)" >&2 fi fi if test "\$keep" = n; then cd \$TMPROOT /bin/rm -rf \$tmpdir fi eval \$finish; exit \$res EOF ���������������������������������������������������������������������������������������������./makeself-2.1.5/.svn/text-base/makeself.1.svn-base�������������������������������������������������0000444�0023576�0023576�00000003427�11271247354�021435� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������.TH "makeself" "1" "2.1.4" .SH "NAME" makeself \- An utility to generate self-extractable archives. .SH "SYNTAX" .LP .B makeself [\fIoptions\fP] archive_dir file_name label .B [\fIstartup_script\fP] [\fIargs\fP] .SH "DESCRIPTION" .LP This program is a free (GPL) utility designed to create self-extractable archives from a directory. .br .SH "OPTIONS" .LP The following options are supported. .LP .TP 15 .B -v, --version Prints out the makeself version number and exits. .TP .B -h, --help Print out help information. .TP .B --gzip Compress using gzip (default if detected). .TP .B --bzip2 Compress using bzip2. .TP .B --compress Compress using the UNIX 'compress' command. .TP .B --nocomp Do not compress the data. .TP .B --notemp The archive will create archive_dir in the current directory and uncompress in ./archive_dir. .TP .B --copy Upon extraction, the archive will first copy itself to a temporary directory. .TP .B --append Append more files to an existing makeself archive. The label and startup scripts will then be ignored. .TP .B --current Files will be extracted to the current directory. Implies --notemp. .TP .B --header file Specify location of the header script. .TP .B --follow Follow the symlinks in the archive. .TP .B --nox11 Disable automatic spawn of an xterm if running in X11. .TP .B --nowait Do not wait for user input after executing embedded program from an xterm. .TP .B --nomd5 Do not create a MD5 checksum for the archive. .TP .B --nocrc Do not create a CRC32 checksum for the archive. .TP .B --lsm file LSM file describing the package. .PD .SH "AUTHORS" .LP Makeself has been written by Stphane Peter <megastep@megastep.org>. .BR This man page was originally written by Bartosz Fenski <fenio@o2.pl> for the Debian GNU/Linux distribution (but it may be used by others). �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/.svn/text-base/COPYING.svn-base����������������������������������������������������0000444�0023576�0023576�00000043130�11271247354�020612� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������� GNU GENERAL PUBLIC LICENSE Version 2, June 1991 Copyright (C) 1989, 1991 Free Software Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users. This General Public License applies to most of the Free Software Foundation's software and to any other program whose authors commit to using it. (Some other Free Software Foundation software is covered by the GNU Library General Public License instead.) You can apply it to your programs, too. When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for this service if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs; and that you know you can do these things. To protect your rights, we need to make restrictions that forbid anyone to deny you these rights or to ask you to surrender the rights. These restrictions translate to certain responsibilities for you if you distribute copies of the software, or if you modify it. For example, if you distribute copies of such a program, whether gratis or for a fee, you must give the recipients all the rights that you have. You must make sure that they, too, receive or can get the source code. And you must show them these terms so they know their rights. We protect your rights with two steps: (1) copyright the software, and (2) offer you this license which gives you legal permission to copy, distribute and/or modify the software. Also, for each author's protection and ours, we want to make certain that everyone understands that there is no warranty for this free software. If the software is modified by someone else and passed on, we want its recipients to know that what they have is not the original, so that any problems introduced by others will not reflect on the original authors' reputations. Finally, any free program is threatened constantly by software patents. We wish to avoid the danger that redistributors of a free program will individually obtain patent licenses, in effect making the program proprietary. To prevent this, we have made it clear that any patent must be licensed for everyone's free use or not licensed at all. The precise terms and conditions for copying, distribution and modification follow. GNU GENERAL PUBLIC LICENSE TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION 0. This License applies to any program or other work which contains a notice placed by the copyright holder saying it may be distributed under the terms of this General Public License. The "Program", below, refers to any such program or work, and a "work based on the Program" means either the Program or any derivative work under copyright law: that is to say, a work containing the Program or a portion of it, either verbatim or with modifications and/or translated into another language. (Hereinafter, translation is included without limitation in the term "modification".) Each licensee is addressed as "you". Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the Program (independent of having been made by running the Program). Whether that is true depends on what the Program does. 1. You may copy and distribute verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty; and give any other recipients of the Program a copy of this License along with the Program. You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee. 2. You may modify your copy or copies of the Program or any portion of it, thus forming a work based on the Program, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions: a) You must cause the modified files to carry prominent notices stating that you changed the files and the date of any change. b) You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License. c) If the modified program normally reads commands interactively when run, you must cause it, when started running for such interactive use in the most ordinary way, to print or display an announcement including an appropriate copyright notice and a notice that there is no warranty (or else, saying that you provide a warranty) and that users may redistribute the program under these conditions, and telling the user how to view a copy of this License. (Exception: if the Program itself is interactive but does not normally print such an announcement, your work based on the Program is not required to print an announcement.) These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Program, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works. But when you distribute the same sections as part of a whole which is a work based on the Program, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it. Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the intent is to exercise the right to control the distribution of derivative or collective works based on the Program. In addition, mere aggregation of another work not based on the Program with the Program (or with a work based on the Program) on a volume of a storage or distribution medium does not bring the other work under the scope of this License. 3. You may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following: a) Accompany it with the complete corresponding machine-readable source code, which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, b) Accompany it with a written offer, valid for at least three years, to give any third party, for a charge no more than your cost of physically performing source distribution, a complete machine-readable copy of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, c) Accompany it with the information you received as to the offer to distribute corresponding source code. (This alternative is allowed only for noncommercial distribution and only if you received the program in object code or executable form with such an offer, in accord with Subsection b above.) The source code for a work means the preferred form of the work for making modifications to it. For an executable work, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the executable. However, as a special exception, the source code distributed need not include anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component itself accompanies the executable. If distribution of executable or object code is made by offering access to copy from a designated place, then offering equivalent access to copy the source code from the same place counts as distribution of the source code, even though third parties are not compelled to copy the source along with the object code. 4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance. 5. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Program or its derivative works. These actions are prohibited by law if you do not accept this License. Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it. 6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions. You may not impose any further restrictions on the recipients' exercise of the rights granted herein. You are not responsible for enforcing compliance by third parties to this License. 7. If, as a consequence of a court judgment or allegation of patent infringement or for any other reason (not limited to patent issues), conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not distribute the Program at all. For example, if a patent license would not permit royalty-free redistribution of the Program by all those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Program. If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is intended to apply and the section as a whole is intended to apply in other circumstances. It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system, which is implemented by public license practices. Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system; it is up to the author/donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice. This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License. 8. If the distribution and/or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Program under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded. In such case, this License incorporates the limitation as if written in the body of this License. 9. The Free Software Foundation may publish revised and/or new versions of the General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Program specifies a version number of this License which applies to it and "any later version", you have the option of following the terms and conditions either of that version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of this License, you may choose any version ever published by the Free Software Foundation. 10. If you wish to incorporate parts of the Program into other free programs whose distribution conditions are different, write to the author to ask for permission. For software which is copyrighted by the Free Software Foundation, write to the Free Software Foundation; we sometimes make exceptions for this. Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally. NO WARRANTY 11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. END OF TERMS AND CONDITIONS How to Apply These Terms to Your New Programs If you develop a new program, and you want it to be of the greatest possible use to the public, the best way to achieve this is to make it free software which everyone can redistribute and change under these terms. To do so, attach the following notices to the program. It is safest to attach them to the start of each source file to most effectively convey the exclusion of warranty; and each file should have at least the "copyright" line and a pointer to where the full notice is found. <one line to give the program's name and a brief idea of what it does.> Copyright (C) 19yy <name of author> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA Also add information on how to contact you by electronic and paper mail. If the program is interactive, make it output a short notice like this when it starts in an interactive mode: Gnomovision version 69, Copyright (C) 19yy name of author Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'. This is free software, and you are welcome to redistribute it under certain conditions; type `show c' for details. The hypothetical commands `show w' and `show c' should show the appropriate parts of the General Public License. Of course, the commands you use may be called something other than `show w' and `show c'; they could even be mouse-clicks or menu items--whatever suits your program. You should also get your employer (if you work as a programmer) or your school, if any, to sign a "copyright disclaimer" for the program, if necessary. Here is a sample; alter the names: Yoyodyne, Inc., hereby disclaims all copyright interest in the program `Gnomovision' (which makes passes at compilers) written by James Hacker. <signature of Ty Coon>, 1 April 1989 Ty Coon, President of Vice This General Public License does not permit incorporating your program into proprietary programs. If your program is a subroutine library, you may consider it more useful to permit linking proprietary applications with the library. If this is what you want to do, use the GNU Library General Public License instead of this License. ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/.svn/text-base/README.svn-base�����������������������������������������������������0000444�0023576�0023576�00000040013�11271247354�020434� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������The following was generated from http://www.megastep.org/makeself/ ----------------------- #[1]Mobile/PDA makeself - Make self-extractable archives on Unix [2]makeself.sh is a small shell script that generates a self-extractable tar.gz archive from a directory. The resulting file appears as a shell script (many of those have a .run suffix), and can be launched as is. The archive will then uncompress itself to a temporary directory and an optional arbitrary command will be executed (for example an installation script). This is pretty similar to archives generated with WinZip Self-Extractor in the Windows world. Makeself archives also include checksums for integrity self-validation (CRC and/or MD5 checksums). The makeself.sh script itself is used only to create the archives from a directory of files. The resultant archive is actually a compressed (using gzip, bzip2, or compress) TAR archive, with a small shell script stub at the beginning. This small stub performs all the steps of extracting the files, running the embedded command, and removing the temporary files when it's all over. All what the user has to do to install the software contained in such an archive is to "run" the archive, i.e sh nice-software.run. I recommend using the "run" (which was introduced by some Makeself archives released by Loki Software) or "sh" suffix for such archives not to confuse the users, since they know it's actually shell scripts (with quite a lot of binary data attached to it though!). I am trying to keep the code of this script as portable as possible, i.e it's not relying on any bash-specific features and only calls commands that are installed on any functioning UNIX-compatible system. This script as well as the archives it generates should run on any Unix flavor, with any compatible Bourne shell, provided of course that the compression programs are available. As of version 2.1, Makeself has been rewritten and tested on the following platforms : * Linux (all distributions) * Sun Solaris (8 tested) * HP-UX (tested on 11.0 and 11i on HPPA RISC) * SCO OpenUnix and OpenServer * IBM AIX 5.1L * MacOS X (Darwin) * SGI IRIX 6.5 * FreeBSD * UnicOS / Cray If you successfully run Makeself and/or archives created with it on another system, then [3]let me know! Examples of publicly available archives made using makeself are : * Game patches and installers for [4]Id Software games like Quake 3 for Linux or Return To Castle Wolfenstien ; * All game patches released by [5]Loki Software for the Linux version of popular games ; * The [6]nVidia drivers for Linux * The installer for the Linux version of [7]Google Earth * The [8]Makeself distribution itself ;-) * and countless others... Important note for Apache users: By default, most Web servers will think that Makeself archives are regular text files and thus they may show up as text in a Web browser. The correct way to prevent this is to add a MIME type for this file format, like so (in httpd.conf) : AddType application/x-makeself .run Important note for recent GNU/Linux distributions: Archives created with Makeself prior to v2.1.2 were using an old syntax for the head and tail Unix commands that is being progressively obsoleted in their GNU forms. Therefore you may have problems uncompressing some of these archives. A workaround for this is to set the environment variable $_POSIX2_VERSION to enable the old syntax, i.e. : export _POSIX2_VERSION=199209 Usage The syntax of makeself is the following: makeself.sh [args] archive_dir file_name label startup_script [script_args] * args are optional options for Makeself. The available ones are : + --version : Prints the version number on stdout, then exits immediately + --gzip : Use gzip for compression (is the default on platforms on which gzip is commonly available, like Linux) + --bzip2 : Use bzip2 instead of gzip for better compression. The bzip2 command must be available in the command path. I recommend that you set the prefix to something like '.bz2.run' for the archive, so that potential users know that they'll need bzip2 to extract it. + --compress : Use the UNIX "compress" command to compress the data. This should be the default on all platforms that don't have gzip available. + --nocomp : Do not use any compression for the archive, which will then be an uncompressed TAR. + --notemp : The generated archive will not extract the files to a temporary directory, but in a new directory created in the current directory. This is better to distribute software packages that may extract and compile by themselves (i.e. launch the compilation through the embedded script). + --current : Files will be extracted to the current directory, instead of in a subdirectory. This option implies --notemp above. + --follow : Follow the symbolic links inside of the archive directory, i.e. store the files that are being pointed to instead of the links themselves. + --append (new in 2.1.x): Append data to an existing archive, instead of creating a new one. In this mode, the settings from the original archive are reused (compression type, label, embedded script), and thus don't need to be specified again on the command line. + --header : Makeself 2.0 uses a separate file to store the header stub, called "makeself-header.sh". By default, it is assumed that it is stored in the same location as makeself.sh. This option can be used to specify its actual location if it is stored someplace else. + --copy : Upon extraction, the archive will first extract itself to a temporary directory. The main application of this is to allow self-contained installers stored in a Makeself archive on a CD, when the installer program will later need to unmount the CD and allow a new one to be inserted. This prevents "Filesystem busy" errors for installers that span multiple CDs. + --nox11 : Disable the automatic spawning of a new terminal in X11. + --nowait : When executed from a new X11 terminal, disable the user prompt at the end of the script execution. + --nomd5 and --nocrc : Disable the creation of a MD5 / CRC checksum for the archive. This speeds up the extraction process if integrity checking is not necessary. + --lsm file : Provide and LSM file to makeself, that will be embedded in the generated archive. LSM files are describing a software package in a way that is easily parseable. The LSM entry can then be later retrieved using the '-lsm' argument to the archive. An exemple of a LSM file is provided with Makeself. * archive_dir is the name of the directory that contains the files to be archived * file_name is the name of the archive to be created * label is an arbitrary text string describing the package. It will be displayed while extracting the files. * startup_script is the command to be executed from within the directory of extracted files. Thus, if you wish to execute a program contain in this directory, you must prefix your command with "./". For example, ./program will be fine. The script_args are additionnal arguments for this command. Here is an example, assuming the user has a package image stored in a /home/joe/mysoft, and he wants to generate a self-extracting package named mysoft.sh, which will launch the "setup" script initially stored in /home/joe/mysoft : makeself.sh /home/joe/mysoft mysoft.sh "Joe's Nice Software Package" ./setup Here is also how I created the [9]makeself.run archive which contains the Makeself distribution : makeself.sh --notemp makeself makeself.run "Makeself by Stephane Peter" echo "Makeself has extracted itself" Archives generated with Makeself 2.1 can be passed the following arguments: * --keep : Prevent the files to be extracted in a temporary directory that will be removed after the embedded script's execution. The files will then be extracted in the current working directory and will stay here until you remove them. * --verbose : Will prompt the user before executing the embedded command * --target dir : Allows to extract the archive in an arbitrary place. * --nox11 : Do not spawn a X11 terminal. * --confirm : Prompt the user for confirmation before running the embedded command. * --info : Print out general information about the archive (does not extract). * --lsm : Print out the LSM entry, if it is present. * --list : List the files in the archive. * --check : Check the archive for integrity using the embedded checksums. Does not extract the archive. * --nochown : By default, a "chown -R" command is run on the target directory after extraction, so that all files belong to the current user. This is mostly needed if you are running as root, as tar will then try to recreate the initial user ownerships. You may disable this behavior with this flag. * --tar : Run the tar command on the contents of the archive, using the following arguments as parameter for the command. * --noexec : Do not run the embedded script after extraction. Any subsequent arguments to the archive will be passed as additional arguments to the embedded command. You should explicitly use the -- special command-line construct before any such options to make sure that Makeself will not try to interpret them. License Makeself is covered by the [10]GNU General Public License (GPL) version 2 and above. Archives generated by Makeself don't have to be placed under this license (although I encourage it ;-)), since the archive itself is merely data for Makeself. Download Get the latest official distribution [11]here (version 2.1.5). The latest development version can be grabbed from the Loki Setup CVS module, at [12]cvs.icculus.org. Version history * v1.0: Initial public release * v1.1: The archive can be passed parameters that will be passed on to the embedded script, thanks to John C. Quillan * v1.2: Cosmetic updates, support for bzip2 compression and non-temporary archives. Many ideas thanks to Francois Petitjean. * v1.3: More patches from Bjarni R. Einarsson and Francois Petitjean: Support for no compression (--nocomp), script is no longer mandatory, automatic launch in an xterm, optional verbose output, and -target archive option to indicate where to extract the files. * v1.4: Many patches from Francois Petitjean: improved UNIX compatibility, automatic integrity checking, support of LSM files to get info on the package at run time.. * v1.5.x: A lot of bugfixes, and many other patches, including automatic verification through the usage of checksums. Version 1.5.5 was the stable release for a long time, even though the Web page didn't get updated ;-). Makeself was also officially made a part of the [13]Loki Setup installer, and its source is being maintained as part of this package. * v2.0: Complete internal rewrite of Makeself. The command-line parsing was vastly improved, the overall maintenance of the package was greatly improved by separating the stub from makeself.sh. Also Makeself was ported and tested to a variety of Unix platforms. * v2.0.1: First public release of the new 2.0 branch. Prior versions are officially obsoleted. This release introduced the '--copy' argument that was introduced in response to a need for the [14]UT2K3 Linux installer. * v2.1.0: Big change : Makeself can now support multiple embedded tarballs, each stored separately with their own checksums. An existing archive can be updated with the --append flag. Checksums are also better managed, and the --nochown option for archives appeared. * v2.1.1: Fixes related to the Unix compression (compress command). Some Linux distributions made the insane choice to make it unavailable, even though gzip is capable of uncompressing these files, plus some more bugfixes in the extraction and checksum code. * v2.1.2: Some bug fixes. Use head -n to avoid problems with POSIX conformance. * v2.1.3: Bug fixes with the command line when spawning terminals. Added --tar, --noexec for archives. Added --nomd5 and --nocrc to avoid creating checksums in archives. The embedded script is now run through "eval". The --info output now includes the command used to create the archive. A man page was contributed by Bartosz Fenski. * v2.1.4: Fixed --info output. Generate random directory name when extracting files to . to avoid problems. Better handling of errors with wrong permissions for the directory containing the files. Avoid some race conditions, Unset the $CDPATH variable to avoid problems if it is set. Better handling of dot files in the archive directory. * v2.1.5: Made the md5sum detection consistent with the header code. Check for the presence of the archive directory. Added --encrypt for symmetric encryption through gpg (Eric Windisch). Added support for the digest command on Solaris 10 for MD5 checksums. Check for available disk space before extracting to the target directory (Andreas Schweitzer). Allow extraction to run asynchronously (patch by Peter Hatch). Use file descriptors internally to avoid error messages (patch by Kay Tiong Khoo). Links * Check out the [15]"Loki setup" installer, used to install many Linux games and other applications, and of which I am the co-author. Since the demise of Loki, I am now the official maintainer of the project, and it is now being hosted on [16]icculus.org, as well as a bunch of other ex-Loki projects (and a lot of other good stuff!). * Bjarni R. Einarsson also wrote the setup.sh installer script, inspired by Makeself. [17]Check it out ! Contact This script was written by [18]Stéphane Peter (megastep at megastep.org) I welcome any enhancements and suggestions. Contributions were included from John C. Quillan, Bjarni R. Einarsson, Francois Petitjean, and Ryan C. Gordon, thanks to them! If you think I forgot your name, don't hesitate to contact me. icculus.org also has a [19]Bugzilla server available that allows bug reports to be submitted for Loki setup, and since Makeself is a part of Loki setup, you can submit bug reports from there! _________________________________________________________________ [20]Stéphane Peter Last modified: Fri Jan 4 15:51:05 PST 2008 References 1. http://mowser.com/web/megastep.org/makeself/ 2. http://www.megastep.org/makeself/makeself.run 3. mailto:megastep@REMOVEME.megastep.org 4. http://www.idsoftware.com/ 5. http://www.lokigames.com/products/myth2/updates.php3 6. http://www.nvidia.com/ 7. http://earth.google.com/ 8. http://www.megastep.org/makeself/makeself.run 9. http://www.megastep.org/makeself/makeself.run 10. http://www.gnu.org/copyleft/gpl.html 11. http://www.megastep.org/makeself/makeself-2.1.5.run 12. http://cvs.icculus.org/ 13. http://www.icculus.org/loki_setup/ 14. http://www.unrealtournament2003.com/ 15. http://www.icculus.org/loki_setup/ 16. http://www.icculus.org/ 17. http://www.mmedia.is/~bre/programs/setup.sh/ 18. mailto:megastep@@megastep.org 19. https://bugzilla.icculus.org/ 20. mailto:megastep@@megastep.org ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/.svn/prop-base/��������������������������������������������������������������������0000775�0023576�0023576�00000000000�11271247354�016041� 5����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/.svn/prop-base/makeself.sh.svn-base������������������������������������������������0000444�0023576�0023576�00000000036�11271247354�021674� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������K 14 svn:executable V 1 * END ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/.svn/prop-base/makeself-header.sh.svn-base�����������������������������������������0000444�0023576�0023576�00000000036�11271247354�023122� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������K 14 svn:executable V 1 * END ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/.svn/props/������������������������������������������������������������������������0000775�0023576�0023576�00000000000�11271247354�015314� 5����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/.svn/tmp/��������������������������������������������������������������������������0000775�0023576�0023576�00000000000�11417253732�014750� 5����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/.svn/tmp/text-base/����������������������������������������������������������������0000775�0023576�0023576�00000000000�11271247354�016645� 5����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/.svn/tmp/prop-base/����������������������������������������������������������������0000775�0023576�0023576�00000000000�11271247354�016641� 5����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/.svn/tmp/props/��������������������������������������������������������������������0000775�0023576�0023576�00000000000�11271247354�016114� 5����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/.svn/entries�����������������������������������������������������������������������0000444�0023576�0023576�00000002500�11417253732�015535� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������9 dir 8390 svn+ssh://mwiegand@svn.wald.intevation.org/openvas/trunk/tools/openvas-lsc-target-preparation/makeself-2.1.5 svn+ssh://mwiegand@svn.wald.intevation.org/openvas 2009-02-17T21:22:15.648627Z 2519 jan svn:special svn:externals svn:needs-lock 423fd1db-d629-0410-8442-d21db03e70f4 makeself.sh file 2009-10-26T07:25:32.186571Z fbfa1c23609b3f7f1f7d9d9f96de54cd 2009-02-17T21:22:15.648627Z 2519 jan has-props 11923 makeself.lsm file 2009-10-26T07:25:32.186571Z d561c470b811579fa4e7ecbf6401a7c9 2009-02-17T21:22:15.648627Z 2519 jan 831 TODO file 2009-10-26T07:25:32.190558Z 3789dfb37e9785018a1e6d45cb2c2e3c 2009-02-17T21:22:15.648627Z 2519 jan 209 makeself-header.sh file 2009-10-26T07:25:32.190558Z e9bf3281b312436539e4558614b7b72b 2009-02-17T21:22:15.648627Z 2519 jan has-props 9635 makeself.1 file 2009-10-26T07:25:32.190558Z 35d6f5eec5fea68623e84124b7a45de6 2009-02-17T21:22:15.648627Z 2519 jan 1815 COPYING file 2009-10-26T07:25:32.190558Z ea5bed2f60d357618ca161ad539f7c0a 2009-02-17T21:22:15.648627Z 2519 jan 18008 README file 2009-10-26T07:25:32.206571Z ecff162be39edf6df2fe2fbee6182ba3 2009-02-17T21:22:15.648627Z 2519 jan 16395 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/.svn/format������������������������������������������������������������������������0000444�0023576�0023576�00000000002�11271247354�015350� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������9 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/makeself.sh������������������������������������������������������������������������0000775�0023576�0023576�00000027223�11271247354�015421� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/bin/sh # # Makeself version 2.1.x # by Stephane Peter <megastep@megastep.org> # # $Id: makeself.sh,v 1.64 2008/01/04 23:52:14 megastep Exp $ # # Utility to create self-extracting tar.gz archives. # The resulting archive is a file holding the tar.gz archive with # a small Shell script stub that uncompresses the archive to a temporary # directory and then executes a given script from withing that directory. # # Makeself home page: http://www.megastep.org/makeself/ # # Version 2.0 is a rewrite of version 1.0 to make the code easier to read and maintain. # # Version history : # - 1.0 : Initial public release # - 1.1 : The archive can be passed parameters that will be passed on to # the embedded script, thanks to John C. Quillan # - 1.2 : Package distribution, bzip2 compression, more command line options, # support for non-temporary archives. Ideas thanks to Francois Petitjean # - 1.3 : More patches from Bjarni R. Einarsson and Francois Petitjean: # Support for no compression (--nocomp), script is no longer mandatory, # automatic launch in an xterm, optional verbose output, and -target # archive option to indicate where to extract the files. # - 1.4 : Improved UNIX compatibility (Francois Petitjean) # Automatic integrity checking, support of LSM files (Francois Petitjean) # - 1.5 : Many bugfixes. Optionally disable xterm spawning. # - 1.5.1 : More bugfixes, added archive options -list and -check. # - 1.5.2 : Cosmetic changes to inform the user of what's going on with big # archives (Quake III demo) # - 1.5.3 : Check for validity of the DISPLAY variable before launching an xterm. # More verbosity in xterms and check for embedded command's return value. # Bugfix for Debian 2.0 systems that have a different "print" command. # - 1.5.4 : Many bugfixes. Print out a message if the extraction failed. # - 1.5.5 : More bugfixes. Added support for SETUP_NOCHECK environment variable to # bypass checksum verification of archives. # - 1.6.0 : Compute MD5 checksums with the md5sum command (patch from Ryan Gordon) # - 2.0 : Brand new rewrite, cleaner architecture, separated header and UNIX ports. # - 2.0.1 : Added --copy # - 2.1.0 : Allow multiple tarballs to be stored in one archive, and incremental updates. # Added --nochown for archives # Stopped doing redundant checksums when not necesary # - 2.1.1 : Work around insane behavior from certain Linux distros with no 'uncompress' command # Cleaned up the code to handle error codes from compress. Simplified the extraction code. # - 2.1.2 : Some bug fixes. Use head -n to avoid problems. # - 2.1.3 : Bug fixes with command line when spawning terminals. # Added --tar for archives, allowing to give arbitrary arguments to tar on the contents of the archive. # Added --noexec to prevent execution of embedded scripts. # Added --nomd5 and --nocrc to avoid creating checksums in archives. # Added command used to create the archive in --info output. # Run the embedded script through eval. # - 2.1.4 : Fixed --info output. # Generate random directory name when extracting files to . to avoid problems. (Jason Trent) # Better handling of errors with wrong permissions for the directory containing the files. (Jason Trent) # Avoid some race conditions (Ludwig Nussel) # Unset the $CDPATH variable to avoid problems if it is set. (Debian) # Better handling of dot files in the archive directory. # - 2.1.5 : Made the md5sum detection consistent with the header code. # Check for the presence of the archive directory # Added --encrypt for symmetric encryption through gpg (Eric Windisch) # Added support for the digest command on Solaris 10 for MD5 checksums # Check for available disk space before extracting to the target directory (Andreas Schweitzer) # Allow extraction to run asynchronously (patch by Peter Hatch) # Use file descriptors internally to avoid error messages (patch by Kay Tiong Khoo) # # (C) 1998-2008 by Stphane Peter <megastep@megastep.org> # # This software is released under the terms of the GNU GPL version 2 and above # Please read the license at http://www.gnu.org/copyleft/gpl.html # MS_VERSION=2.1.5 MS_COMMAND="$0" unset CDPATH for f in "${1+"$@"}"; do MS_COMMAND="$MS_COMMAND \\\\ \\\"$f\\\"" done # Procedures MS_Usage() { echo "Usage: $0 [params] archive_dir file_name label [startup_script] [args]" echo "params can be one or more of the following :" echo " --version | -v : Print out Makeself version number and exit" echo " --help | -h : Print out this help message" echo " --gzip : Compress using gzip (default if detected)" echo " --bzip2 : Compress using bzip2 instead of gzip" echo " --compress : Compress using the UNIX 'compress' command" echo " --nocomp : Do not compress the data" echo " --notemp : The archive will create archive_dir in the" echo " current directory and uncompress in ./archive_dir" echo " --copy : Upon extraction, the archive will first copy itself to" echo " a temporary directory" echo " --append : Append more files to an existing Makeself archive" echo " The label and startup scripts will then be ignored" echo " --current : Files will be extracted to the current directory." echo " Implies --notemp." echo " --nomd5 : Don't calculate an MD5 for archive" echo " --nocrc : Don't calculate a CRC for archive" echo " --header file : Specify location of the header script" echo " --follow : Follow the symlinks in the archive" echo " --nox11 : Disable automatic spawn of a xterm" echo " --nowait : Do not wait for user input after executing embedded" echo " program from an xterm" echo " --lsm file : LSM file describing the package" echo echo "Do not forget to give a fully qualified startup script name" echo "(i.e. with a ./ prefix if inside the archive)." exit 1 } # Default settings if type gzip 2>&1 > /dev/null; then COMPRESS=gzip else COMPRESS=Unix fi KEEP=n CURRENT=n NOX11=n APPEND=n COPY=none TAR_ARGS=cvf HEADER=`dirname $0`/makeself-header.sh # LSM file stuff LSM_CMD="echo No LSM. >> \"\$archname\"" while true do case "$1" in --version | -v) echo Makeself version $MS_VERSION exit 0 ;; --bzip2) COMPRESS=bzip2 shift ;; --gzip) COMPRESS=gzip shift ;; --compress) COMPRESS=Unix shift ;; --encrypt) COMPRESS=gpg shift ;; --nocomp) COMPRESS=none shift ;; --notemp) KEEP=y shift ;; --copy) COPY=copy shift ;; --current) CURRENT=y KEEP=y shift ;; --header) HEADER="$2" shift 2 ;; --follow) TAR_ARGS=cvfh shift ;; --nox11) NOX11=y shift ;; --nowait) shift ;; --nomd5) NOMD5=y shift ;; --nocrc) NOCRC=y shift ;; --append) APPEND=y shift ;; --lsm) LSM_CMD="cat \"$2\" >> \"\$archname\"" shift 2 ;; -h | --help) MS_Usage ;; -*) echo Unrecognized flag : "$1" MS_Usage ;; *) break ;; esac done if test $# -lt 1; then MS_Usage else if test -d "$1"; then archdir="$1" else echo "Directory $1 does not exist." exit 1 fi fi archname="$2" if test "$APPEND" = y; then if test $# -lt 2; then MS_Usage fi # Gather the info from the original archive OLDENV=`sh "$archname" --dumpconf` if test $? -ne 0; then echo "Unable to update archive: $archname" >&2 exit 1 else eval "$OLDENV" fi else if test "$KEEP" = n -a $# = 3; then echo "ERROR: Making a temporary archive with no embedded command does not make sense!" >&2 echo MS_Usage fi # We don't really want to create an absolute directory... if test "$CURRENT" = y; then archdirname="." else archdirname=`basename "$1"` fi if test $# -lt 3; then MS_Usage fi LABEL="$3" SCRIPT="$4" test x$SCRIPT = x || shift 1 shift 3 SCRIPTARGS="$*" fi if test "$KEEP" = n -a "$CURRENT" = y; then echo "ERROR: It is A VERY DANGEROUS IDEA to try to combine --notemp and --current." >&2 exit 1 fi case $COMPRESS in gzip) GZIP_CMD="gzip -c9" GUNZIP_CMD="gzip -cd" ;; bzip2) GZIP_CMD="bzip2 -9" GUNZIP_CMD="bzip2 -d" ;; gpg) GZIP_CMD="gpg -ac -z9" GUNZIP_CMD="gpg -d" ;; Unix) GZIP_CMD="compress -cf" GUNZIP_CMD="exec 2>&-; uncompress -c || test \\\$? -eq 2 || gzip -cd" ;; none) GZIP_CMD="cat" GUNZIP_CMD="cat" ;; esac tmpfile="${TMPDIR:=/tmp}/mkself$$" if test -f $HEADER; then oldarchname="$archname" archname="$tmpfile" # Generate a fake header to count its lines SKIP=0 . $HEADER SKIP=`cat "$tmpfile" |wc -l` # Get rid of any spaces SKIP=`expr $SKIP` rm -f "$tmpfile" echo Header is $SKIP lines long >&2 archname="$oldarchname" else echo "Unable to open header file: $HEADER" >&2 exit 1 fi echo if test "$APPEND" = n; then if test -f "$archname"; then echo "WARNING: Overwriting existing file: $archname" >&2 fi fi USIZE=`du -ks $archdir | cut -f1` DATE=`LC_ALL=C date` if test "." = "$archdirname"; then if test "$KEEP" = n; then archdirname="makeself-$$-`date +%Y%m%d%H%M%S`" fi fi test -d "$archdir" || { echo "Error: $archdir does not exist."; rm -f "$tmpfile"; exit 1; } echo About to compress $USIZE KB of data... echo Adding files to archive named \"$archname\"... exec 3<> "$tmpfile" (cd "$archdir" && ( tar $TAR_ARGS - . | eval "$GZIP_CMD" >&3 ) ) || { echo Aborting: Archive directory not found or temporary file: "$tmpfile" could not be created.; exec 3>&-; rm -f "$tmpfile"; exit 1; } exec 3>&- # try to close the archive fsize=`cat "$tmpfile" | wc -c | tr -d " "` # Compute the checksums md5sum=00000000000000000000000000000000 crcsum=0000000000 if test "$NOCRC" = y; then echo "skipping crc at user request" else crcsum=`cat "$tmpfile" | CMD_ENV=xpg4 cksum | sed -e 's/ /Z/' -e 's/ /Z/' | cut -dZ -f1` echo "CRC: $crcsum" fi if test "$NOMD5" = y; then echo "skipping md5sum at user request" else # Try to locate a MD5 binary OLD_PATH=$PATH PATH=${GUESS_MD5_PATH:-"$OLD_PATH:/bin:/usr/bin:/sbin:/usr/local/ssl/bin:/usr/local/bin:/opt/openssl/bin"} MD5_ARG="" MD5_PATH=`exec <&- 2>&-; which md5sum || type md5sum` test -x $MD5_PATH || MD5_PATH=`exec <&- 2>&-; which md5 || type md5` test -x $MD5_PATH || MD5_PATH=`exec <&- 2>&-; which digest || type digest` PATH=$OLD_PATH if test `basename $MD5_PATH` = digest; then MD5_ARG="-a md5" fi if test -x "$MD5_PATH"; then md5sum=`cat "$tmpfile" | eval "$MD5_PATH $MD5_ARG" | cut -b-32`; echo "MD5: $md5sum" else echo "MD5: none, MD5 command not found" fi fi if test "$APPEND" = y; then mv "$archname" "$archname".bak || exit # Prepare entry for new archive filesizes="$filesizes $fsize" CRCsum="$CRCsum $crcsum" MD5sum="$MD5sum $md5sum" USIZE=`expr $USIZE + $OLDUSIZE` # Generate the header . $HEADER # Append the original data tail -n +$OLDSKIP "$archname".bak >> "$archname" # Append the new data cat "$tmpfile" >> "$archname" chmod +x "$archname" rm -f "$archname".bak echo Self-extractible archive \"$archname\" successfully updated. else filesizes="$fsize" CRCsum="$crcsum" MD5sum="$md5sum" # Generate the header . $HEADER # Append the compressed tar data after the stub echo cat "$tmpfile" >> "$archname" chmod +x "$archname" echo Self-extractible archive \"$archname\" successfully created. fi rm -f "$tmpfile" �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/makeself.lsm�����������������������������������������������������������������������0000664�0023576�0023576�00000001477�11271247354�015602� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������Begin3 Title: makeself.sh Version: 2.1 Description: makeself.sh is a shell script that generates a self-extractable tar.gz archive from a directory. The resulting file appears as a shell script, and can be launched as is. The archive will then uncompress itself to a temporary directory and an arbitrary command will be executed (for example an installation script). This is pretty similar to archives generated with WinZip Self-Extractor in the Windows world. Keywords: Installation archive tar winzip Author: Stphane Peter (megastep@megastep.org) Maintained-by: Stphane Peter (megastep@megastep.org) Original-site: http://www.megastep.org/makeself/ Platform: Unix Copying-policy: GPL End �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/TODO�������������������������������������������������������������������������������0000664�0023576�0023576�00000000321�11271247354�013751� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������What needs to be done next : - Generic compression code (thru a user-defined command) - Collect names of directories potentially containing md5 program. GUESS_MD5_PATH Stphane Peter <megastep@megastep.org> ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/makeself-header.sh�����������������������������������������������������������������0000775�0023576�0023576�00000022643�11271247354�016650� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������cat << EOF > "$archname" #!/bin/sh # This script was generated using Makeself $MS_VERSION CRCsum="$CRCsum" MD5="$MD5sum" TMPROOT=\${TMPDIR:=/tmp} label="$LABEL" script="$SCRIPT" scriptargs="$SCRIPTARGS" targetdir="$archdirname" filesizes="$filesizes" keep=$KEEP print_cmd_arg="" if type printf > /dev/null; then print_cmd="printf" elif test -x /usr/ucb/echo; then print_cmd="/usr/ucb/echo" else print_cmd="echo" fi unset CDPATH MS_Printf() { \$print_cmd \$print_cmd_arg "\$1" } MS_Progress() { while read a; do MS_Printf . done } MS_diskspace() { ( if test -d /usr/xpg4/bin; then PATH=/usr/xpg4/bin:\$PATH fi df -kP "\$1" | tail -1 | awk '{print \$4}' ) } MS_dd() { blocks=\`expr \$3 / 1024\` bytes=\`expr \$3 % 1024\` dd if="\$1" ibs=\$2 skip=1 obs=1024 conv=sync 2> /dev/null | \\ { test \$blocks -gt 0 && dd ibs=1024 obs=1024 count=\$blocks ; \\ test \$bytes -gt 0 && dd ibs=1 obs=1024 count=\$bytes ; } 2> /dev/null } MS_Help() { cat << EOH >&2 Makeself version $MS_VERSION 1) Getting help or info about \$0 : \$0 --help Print this message \$0 --info Print embedded info : title, default target directory, embedded script ... \$0 --lsm Print embedded lsm entry (or no LSM) \$0 --list Print the list of files in the archive \$0 --check Checks integrity of the archive 2) Running \$0 : \$0 [options] [--] [additional arguments to embedded script] with following options (in that order) --confirm Ask before running embedded script --noexec Do not run embedded script --keep Do not erase target directory after running the embedded script --nox11 Do not spawn an xterm --nochown Do not give the extracted files to the current user --target NewDirectory Extract in NewDirectory --tar arg1 [arg2 ...] Access the contents of the archive through the tar command -- Following arguments will be passed to the embedded script EOH } MS_Check() { OLD_PATH="\$PATH" PATH=\${GUESS_MD5_PATH:-"\$OLD_PATH:/bin:/usr/bin:/sbin:/usr/local/ssl/bin:/usr/local/bin:/opt/openssl/bin"} MD5_ARG="" MD5_PATH=\`exec <&- 2>&-; which md5sum || type md5sum\` test -x "\$MD5_PATH" || MD5_PATH=\`exec <&- 2>&-; which md5 || type md5\` test -x "\$MD5_PATH" || MD5_PATH=\`exec <&- 2>&-; which digest || type digest\` PATH="\$OLD_PATH" MS_Printf "Verifying archive integrity..." offset=\`head -n $SKIP "\$1" | wc -c | tr -d " "\` verb=\$2 i=1 for s in \$filesizes do crc=\`echo \$CRCsum | cut -d" " -f\$i\` if test -x "\$MD5_PATH"; then if test \`basename \$MD5_PATH\` = digest; then MD5_ARG="-a md5" fi md5=\`echo \$MD5 | cut -d" " -f\$i\` if test \$md5 = "00000000000000000000000000000000"; then test x\$verb = xy && echo " \$1 does not contain an embedded MD5 checksum." >&2 else md5sum=\`MS_dd "\$1" \$offset \$s | eval "\$MD5_PATH \$MD5_ARG" | cut -b-32\`; if test "\$md5sum" != "\$md5"; then echo "Error in MD5 checksums: \$md5sum is different from \$md5" >&2 exit 2 else test x\$verb = xy && MS_Printf " MD5 checksums are OK." >&2 fi crc="0000000000"; verb=n fi fi if test \$crc = "0000000000"; then test x\$verb = xy && echo " \$1 does not contain a CRC checksum." >&2 else sum1=\`MS_dd "\$1" \$offset \$s | CMD_ENV=xpg4 cksum | awk '{print \$1}'\` if test "\$sum1" = "\$crc"; then test x\$verb = xy && MS_Printf " CRC checksums are OK." >&2 else echo "Error in checksums: \$sum1 is different from \$crc" exit 2; fi fi i=\`expr \$i + 1\` offset=\`expr \$offset + \$s\` done echo " All good." } UnTAR() { tar \$1vf - 2>&1 || { echo Extraction failed. > /dev/tty; kill -15 \$$; } } finish=true xterm_loop= nox11=$NOX11 copy=$COPY ownership=y verbose=n initargs="\$@" while true do case "\$1" in -h | --help) MS_Help exit 0 ;; --info) echo Identification: "\$label" echo Target directory: "\$targetdir" echo Uncompressed size: $USIZE KB echo Compression: $COMPRESS echo Date of packaging: $DATE echo Built with Makeself version $MS_VERSION on $OSTYPE echo Build command was: "$MS_COMMAND" if test x\$script != x; then echo Script run after extraction: echo " " \$script \$scriptargs fi if test x"$copy" = xcopy; then echo "Archive will copy itself to a temporary location" fi if test x"$KEEP" = xy; then echo "directory \$targetdir is permanent" else echo "\$targetdir will be removed after extraction" fi exit 0 ;; --dumpconf) echo LABEL=\"\$label\" echo SCRIPT=\"\$script\" echo SCRIPTARGS=\"\$scriptargs\" echo archdirname=\"$archdirname\" echo KEEP=$KEEP echo COMPRESS=$COMPRESS echo filesizes=\"\$filesizes\" echo CRCsum=\"\$CRCsum\" echo MD5sum=\"\$MD5\" echo OLDUSIZE=$USIZE echo OLDSKIP=`expr $SKIP + 1` exit 0 ;; --lsm) cat << EOLSM EOF eval "$LSM_CMD" cat << EOF >> "$archname" EOLSM exit 0 ;; --list) echo Target directory: \$targetdir offset=\`head -n $SKIP "\$0" | wc -c | tr -d " "\` for s in \$filesizes do MS_dd "\$0" \$offset \$s | eval "$GUNZIP_CMD" | UnTAR t offset=\`expr \$offset + \$s\` done exit 0 ;; --tar) offset=\`head -n $SKIP "\$0" | wc -c | tr -d " "\` arg1="\$2" shift 2 for s in \$filesizes do MS_dd "\$0" \$offset \$s | eval "$GUNZIP_CMD" | tar "\$arg1" - \$* offset=\`expr \$offset + \$s\` done exit 0 ;; --check) MS_Check "\$0" y exit 0 ;; --confirm) verbose=y shift ;; --noexec) script="" shift ;; --keep) keep=y shift ;; --target) keep=y targetdir=\${2:-.} shift 2 ;; --nox11) nox11=y shift ;; --nochown) ownership=n shift ;; --xwin) finish="echo Press Return to close this window...; read junk" xterm_loop=1 shift ;; --phase2) copy=phase2 shift ;; --) shift break ;; -*) echo Unrecognized flag : "\$1" >&2 MS_Help exit 1 ;; *) break ;; esac done case "\$copy" in copy) tmpdir=\$TMPROOT/makeself.\$RANDOM.\`date +"%y%m%d%H%M%S"\`.\$\$ mkdir "\$tmpdir" || { echo "Could not create temporary directory \$tmpdir" >&2 exit 1 } SCRIPT_COPY="\$tmpdir/makeself" echo "Copying to a temporary location..." >&2 cp "\$0" "\$SCRIPT_COPY" chmod +x "\$SCRIPT_COPY" cd "\$TMPROOT" exec "\$SCRIPT_COPY" --phase2 -- \$initargs ;; phase2) finish="\$finish ; rm -rf \`dirname \$0\`" ;; esac if test "\$nox11" = "n"; then if tty -s; then # Do we have a terminal? : else if test x"\$DISPLAY" != x -a x"\$xterm_loop" = x; then # No, but do we have X? if xset q > /dev/null 2>&1; then # Check for valid DISPLAY variable GUESS_XTERMS="xterm rxvt dtterm eterm Eterm kvt konsole aterm" for a in \$GUESS_XTERMS; do if type \$a >/dev/null 2>&1; then XTERM=\$a break fi done chmod a+x \$0 || echo Please add execution rights on \$0 if test \`echo "\$0" | cut -c1\` = "/"; then # Spawn a terminal! exec \$XTERM -title "\$label" -e "\$0" --xwin "\$initargs" else exec \$XTERM -title "\$label" -e "./\$0" --xwin "\$initargs" fi fi fi fi fi if test "\$targetdir" = "."; then tmpdir="." else if test "\$keep" = y; then echo "Creating directory \$targetdir" >&2 tmpdir="\$targetdir" dashp="-p" else tmpdir="\$TMPROOT/selfgz\$\$\$RANDOM" dashp="" fi mkdir \$dashp \$tmpdir || { echo 'Cannot create target directory' \$tmpdir >&2 echo 'You should try option --target OtherDirectory' >&2 eval \$finish exit 1 } fi location="\`pwd\`" if test x\$SETUP_NOCHECK != x1; then MS_Check "\$0" fi offset=\`head -n $SKIP "\$0" | wc -c | tr -d " "\` if test x"\$verbose" = xy; then MS_Printf "About to extract $USIZE KB in \$tmpdir ... Proceed ? [Y/n] " read yn if test x"\$yn" = xn; then eval \$finish; exit 1 fi fi MS_Printf "Uncompressing \$label" res=3 if test "\$keep" = n; then trap 'echo Signal caught, cleaning up >&2; cd \$TMPROOT; /bin/rm -rf \$tmpdir; eval \$finish; exit 15' 1 2 3 15 fi leftspace=\`MS_diskspace \$tmpdir\` if test \$leftspace -lt $USIZE; then echo echo "Not enough space left in "\`dirname \$tmpdir\`" (\$leftspace KB) to decompress \$0 ($USIZE KB)" >&2 if test "\$keep" = n; then echo "Consider setting TMPDIR to a directory with more free space." fi eval \$finish; exit 1 fi for s in \$filesizes do if MS_dd "\$0" \$offset \$s | eval "$GUNZIP_CMD" | ( cd "\$tmpdir"; UnTAR x ) | MS_Progress; then if test x"\$ownership" = xy; then (PATH=/usr/xpg4/bin:\$PATH; cd "\$tmpdir"; chown -R \`id -u\` .; chgrp -R \`id -g\` .) fi else echo echo "Unable to decompress \$0" >&2 eval \$finish; exit 1 fi offset=\`expr \$offset + \$s\` done echo cd "\$tmpdir" res=0 if test x"\$script" != x; then if test x"\$verbose" = xy; then MS_Printf "OK to execute: \$script \$scriptargs \$* ? [Y/n] " read yn if test x"\$yn" = x -o x"\$yn" = xy -o x"\$yn" = xY; then eval \$script \$scriptargs \$*; res=\$?; fi else eval \$script \$scriptargs \$*; res=\$? fi if test \$res -ne 0; then test x"\$verbose" = xy && echo "The program '\$script' returned an error code (\$res)" >&2 fi fi if test "\$keep" = n; then cd \$TMPROOT /bin/rm -rf \$tmpdir fi eval \$finish; exit \$res EOF ���������������������������������������������������������������������������������������������./makeself-2.1.5/makeself.1�������������������������������������������������������������������������0000664�0023576�0023576�00000003427�11271247354�015144� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������.TH "makeself" "1" "2.1.4" .SH "NAME" makeself \- An utility to generate self-extractable archives. .SH "SYNTAX" .LP .B makeself [\fIoptions\fP] archive_dir file_name label .B [\fIstartup_script\fP] [\fIargs\fP] .SH "DESCRIPTION" .LP This program is a free (GPL) utility designed to create self-extractable archives from a directory. .br .SH "OPTIONS" .LP The following options are supported. .LP .TP 15 .B -v, --version Prints out the makeself version number and exits. .TP .B -h, --help Print out help information. .TP .B --gzip Compress using gzip (default if detected). .TP .B --bzip2 Compress using bzip2. .TP .B --compress Compress using the UNIX 'compress' command. .TP .B --nocomp Do not compress the data. .TP .B --notemp The archive will create archive_dir in the current directory and uncompress in ./archive_dir. .TP .B --copy Upon extraction, the archive will first copy itself to a temporary directory. .TP .B --append Append more files to an existing makeself archive. The label and startup scripts will then be ignored. .TP .B --current Files will be extracted to the current directory. Implies --notemp. .TP .B --header file Specify location of the header script. .TP .B --follow Follow the symlinks in the archive. .TP .B --nox11 Disable automatic spawn of an xterm if running in X11. .TP .B --nowait Do not wait for user input after executing embedded program from an xterm. .TP .B --nomd5 Do not create a MD5 checksum for the archive. .TP .B --nocrc Do not create a CRC32 checksum for the archive. .TP .B --lsm file LSM file describing the package. .PD .SH "AUTHORS" .LP Makeself has been written by Stphane Peter <megastep@megastep.org>. .BR This man page was originally written by Bartosz Fenski <fenio@o2.pl> for the Debian GNU/Linux distribution (but it may be used by others). �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/COPYING����������������������������������������������������������������������������0000664�0023576�0023576�00000043130�11271247354�014321� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������� GNU GENERAL PUBLIC LICENSE Version 2, June 1991 Copyright (C) 1989, 1991 Free Software Foundation, Inc. 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users. This General Public License applies to most of the Free Software Foundation's software and to any other program whose authors commit to using it. (Some other Free Software Foundation software is covered by the GNU Library General Public License instead.) You can apply it to your programs, too. When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for this service if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs; and that you know you can do these things. To protect your rights, we need to make restrictions that forbid anyone to deny you these rights or to ask you to surrender the rights. These restrictions translate to certain responsibilities for you if you distribute copies of the software, or if you modify it. For example, if you distribute copies of such a program, whether gratis or for a fee, you must give the recipients all the rights that you have. You must make sure that they, too, receive or can get the source code. And you must show them these terms so they know their rights. We protect your rights with two steps: (1) copyright the software, and (2) offer you this license which gives you legal permission to copy, distribute and/or modify the software. Also, for each author's protection and ours, we want to make certain that everyone understands that there is no warranty for this free software. If the software is modified by someone else and passed on, we want its recipients to know that what they have is not the original, so that any problems introduced by others will not reflect on the original authors' reputations. Finally, any free program is threatened constantly by software patents. We wish to avoid the danger that redistributors of a free program will individually obtain patent licenses, in effect making the program proprietary. To prevent this, we have made it clear that any patent must be licensed for everyone's free use or not licensed at all. The precise terms and conditions for copying, distribution and modification follow. GNU GENERAL PUBLIC LICENSE TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION 0. This License applies to any program or other work which contains a notice placed by the copyright holder saying it may be distributed under the terms of this General Public License. The "Program", below, refers to any such program or work, and a "work based on the Program" means either the Program or any derivative work under copyright law: that is to say, a work containing the Program or a portion of it, either verbatim or with modifications and/or translated into another language. (Hereinafter, translation is included without limitation in the term "modification".) Each licensee is addressed as "you". Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the Program (independent of having been made by running the Program). Whether that is true depends on what the Program does. 1. You may copy and distribute verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty; and give any other recipients of the Program a copy of this License along with the Program. You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee. 2. You may modify your copy or copies of the Program or any portion of it, thus forming a work based on the Program, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions: a) You must cause the modified files to carry prominent notices stating that you changed the files and the date of any change. b) You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License. c) If the modified program normally reads commands interactively when run, you must cause it, when started running for such interactive use in the most ordinary way, to print or display an announcement including an appropriate copyright notice and a notice that there is no warranty (or else, saying that you provide a warranty) and that users may redistribute the program under these conditions, and telling the user how to view a copy of this License. (Exception: if the Program itself is interactive but does not normally print such an announcement, your work based on the Program is not required to print an announcement.) These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Program, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works. But when you distribute the same sections as part of a whole which is a work based on the Program, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it. Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the intent is to exercise the right to control the distribution of derivative or collective works based on the Program. In addition, mere aggregation of another work not based on the Program with the Program (or with a work based on the Program) on a volume of a storage or distribution medium does not bring the other work under the scope of this License. 3. You may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following: a) Accompany it with the complete corresponding machine-readable source code, which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, b) Accompany it with a written offer, valid for at least three years, to give any third party, for a charge no more than your cost of physically performing source distribution, a complete machine-readable copy of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, c) Accompany it with the information you received as to the offer to distribute corresponding source code. (This alternative is allowed only for noncommercial distribution and only if you received the program in object code or executable form with such an offer, in accord with Subsection b above.) The source code for a work means the preferred form of the work for making modifications to it. For an executable work, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the executable. However, as a special exception, the source code distributed need not include anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component itself accompanies the executable. If distribution of executable or object code is made by offering access to copy from a designated place, then offering equivalent access to copy the source code from the same place counts as distribution of the source code, even though third parties are not compelled to copy the source along with the object code. 4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance. 5. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Program or its derivative works. These actions are prohibited by law if you do not accept this License. Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it. 6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions. You may not impose any further restrictions on the recipients' exercise of the rights granted herein. You are not responsible for enforcing compliance by third parties to this License. 7. If, as a consequence of a court judgment or allegation of patent infringement or for any other reason (not limited to patent issues), conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not distribute the Program at all. For example, if a patent license would not permit royalty-free redistribution of the Program by all those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Program. If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is intended to apply and the section as a whole is intended to apply in other circumstances. It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system, which is implemented by public license practices. Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system; it is up to the author/donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice. This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License. 8. If the distribution and/or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Program under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded. In such case, this License incorporates the limitation as if written in the body of this License. 9. The Free Software Foundation may publish revised and/or new versions of the General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Program specifies a version number of this License which applies to it and "any later version", you have the option of following the terms and conditions either of that version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of this License, you may choose any version ever published by the Free Software Foundation. 10. If you wish to incorporate parts of the Program into other free programs whose distribution conditions are different, write to the author to ask for permission. For software which is copyrighted by the Free Software Foundation, write to the Free Software Foundation; we sometimes make exceptions for this. Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally. NO WARRANTY 11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. END OF TERMS AND CONDITIONS How to Apply These Terms to Your New Programs If you develop a new program, and you want it to be of the greatest possible use to the public, the best way to achieve this is to make it free software which everyone can redistribute and change under these terms. To do so, attach the following notices to the program. It is safest to attach them to the start of each source file to most effectively convey the exclusion of warranty; and each file should have at least the "copyright" line and a pointer to where the full notice is found. <one line to give the program's name and a brief idea of what it does.> Copyright (C) 19yy <name of author> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA Also add information on how to contact you by electronic and paper mail. If the program is interactive, make it output a short notice like this when it starts in an interactive mode: Gnomovision version 69, Copyright (C) 19yy name of author Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'. This is free software, and you are welcome to redistribute it under certain conditions; type `show c' for details. The hypothetical commands `show w' and `show c' should show the appropriate parts of the General Public License. Of course, the commands you use may be called something other than `show w' and `show c'; they could even be mouse-clicks or menu items--whatever suits your program. You should also get your employer (if you work as a programmer) or your school, if any, to sign a "copyright disclaimer" for the program, if necessary. Here is a sample; alter the names: Yoyodyne, Inc., hereby disclaims all copyright interest in the program `Gnomovision' (which makes passes at compilers) written by James Hacker. <signature of Ty Coon>, 1 April 1989 Ty Coon, President of Vice This General Public License does not permit incorporating your program into proprietary programs. If your program is a subroutine library, you may consider it more useful to permit linking proprietary applications with the library. If this is what you want to do, use the GNU Library General Public License instead of this License. ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./makeself-2.1.5/README�����������������������������������������������������������������������������0000664�0023576�0023576�00000040013�11271247354�014143� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������The following was generated from http://www.megastep.org/makeself/ ----------------------- #[1]Mobile/PDA makeself - Make self-extractable archives on Unix [2]makeself.sh is a small shell script that generates a self-extractable tar.gz archive from a directory. The resulting file appears as a shell script (many of those have a .run suffix), and can be launched as is. The archive will then uncompress itself to a temporary directory and an optional arbitrary command will be executed (for example an installation script). This is pretty similar to archives generated with WinZip Self-Extractor in the Windows world. Makeself archives also include checksums for integrity self-validation (CRC and/or MD5 checksums). The makeself.sh script itself is used only to create the archives from a directory of files. The resultant archive is actually a compressed (using gzip, bzip2, or compress) TAR archive, with a small shell script stub at the beginning. This small stub performs all the steps of extracting the files, running the embedded command, and removing the temporary files when it's all over. All what the user has to do to install the software contained in such an archive is to "run" the archive, i.e sh nice-software.run. I recommend using the "run" (which was introduced by some Makeself archives released by Loki Software) or "sh" suffix for such archives not to confuse the users, since they know it's actually shell scripts (with quite a lot of binary data attached to it though!). I am trying to keep the code of this script as portable as possible, i.e it's not relying on any bash-specific features and only calls commands that are installed on any functioning UNIX-compatible system. This script as well as the archives it generates should run on any Unix flavor, with any compatible Bourne shell, provided of course that the compression programs are available. As of version 2.1, Makeself has been rewritten and tested on the following platforms : * Linux (all distributions) * Sun Solaris (8 tested) * HP-UX (tested on 11.0 and 11i on HPPA RISC) * SCO OpenUnix and OpenServer * IBM AIX 5.1L * MacOS X (Darwin) * SGI IRIX 6.5 * FreeBSD * UnicOS / Cray If you successfully run Makeself and/or archives created with it on another system, then [3]let me know! Examples of publicly available archives made using makeself are : * Game patches and installers for [4]Id Software games like Quake 3 for Linux or Return To Castle Wolfenstien ; * All game patches released by [5]Loki Software for the Linux version of popular games ; * The [6]nVidia drivers for Linux * The installer for the Linux version of [7]Google Earth * The [8]Makeself distribution itself ;-) * and countless others... Important note for Apache users: By default, most Web servers will think that Makeself archives are regular text files and thus they may show up as text in a Web browser. The correct way to prevent this is to add a MIME type for this file format, like so (in httpd.conf) : AddType application/x-makeself .run Important note for recent GNU/Linux distributions: Archives created with Makeself prior to v2.1.2 were using an old syntax for the head and tail Unix commands that is being progressively obsoleted in their GNU forms. Therefore you may have problems uncompressing some of these archives. A workaround for this is to set the environment variable $_POSIX2_VERSION to enable the old syntax, i.e. : export _POSIX2_VERSION=199209 Usage The syntax of makeself is the following: makeself.sh [args] archive_dir file_name label startup_script [script_args] * args are optional options for Makeself. The available ones are : + --version : Prints the version number on stdout, then exits immediately + --gzip : Use gzip for compression (is the default on platforms on which gzip is commonly available, like Linux) + --bzip2 : Use bzip2 instead of gzip for better compression. The bzip2 command must be available in the command path. I recommend that you set the prefix to something like '.bz2.run' for the archive, so that potential users know that they'll need bzip2 to extract it. + --compress : Use the UNIX "compress" command to compress the data. This should be the default on all platforms that don't have gzip available. + --nocomp : Do not use any compression for the archive, which will then be an uncompressed TAR. + --notemp : The generated archive will not extract the files to a temporary directory, but in a new directory created in the current directory. This is better to distribute software packages that may extract and compile by themselves (i.e. launch the compilation through the embedded script). + --current : Files will be extracted to the current directory, instead of in a subdirectory. This option implies --notemp above. + --follow : Follow the symbolic links inside of the archive directory, i.e. store the files that are being pointed to instead of the links themselves. + --append (new in 2.1.x): Append data to an existing archive, instead of creating a new one. In this mode, the settings from the original archive are reused (compression type, label, embedded script), and thus don't need to be specified again on the command line. + --header : Makeself 2.0 uses a separate file to store the header stub, called "makeself-header.sh". By default, it is assumed that it is stored in the same location as makeself.sh. This option can be used to specify its actual location if it is stored someplace else. + --copy : Upon extraction, the archive will first extract itself to a temporary directory. The main application of this is to allow self-contained installers stored in a Makeself archive on a CD, when the installer program will later need to unmount the CD and allow a new one to be inserted. This prevents "Filesystem busy" errors for installers that span multiple CDs. + --nox11 : Disable the automatic spawning of a new terminal in X11. + --nowait : When executed from a new X11 terminal, disable the user prompt at the end of the script execution. + --nomd5 and --nocrc : Disable the creation of a MD5 / CRC checksum for the archive. This speeds up the extraction process if integrity checking is not necessary. + --lsm file : Provide and LSM file to makeself, that will be embedded in the generated archive. LSM files are describing a software package in a way that is easily parseable. The LSM entry can then be later retrieved using the '-lsm' argument to the archive. An exemple of a LSM file is provided with Makeself. * archive_dir is the name of the directory that contains the files to be archived * file_name is the name of the archive to be created * label is an arbitrary text string describing the package. It will be displayed while extracting the files. * startup_script is the command to be executed from within the directory of extracted files. Thus, if you wish to execute a program contain in this directory, you must prefix your command with "./". For example, ./program will be fine. The script_args are additionnal arguments for this command. Here is an example, assuming the user has a package image stored in a /home/joe/mysoft, and he wants to generate a self-extracting package named mysoft.sh, which will launch the "setup" script initially stored in /home/joe/mysoft : makeself.sh /home/joe/mysoft mysoft.sh "Joe's Nice Software Package" ./setup Here is also how I created the [9]makeself.run archive which contains the Makeself distribution : makeself.sh --notemp makeself makeself.run "Makeself by Stephane Peter" echo "Makeself has extracted itself" Archives generated with Makeself 2.1 can be passed the following arguments: * --keep : Prevent the files to be extracted in a temporary directory that will be removed after the embedded script's execution. The files will then be extracted in the current working directory and will stay here until you remove them. * --verbose : Will prompt the user before executing the embedded command * --target dir : Allows to extract the archive in an arbitrary place. * --nox11 : Do not spawn a X11 terminal. * --confirm : Prompt the user for confirmation before running the embedded command. * --info : Print out general information about the archive (does not extract). * --lsm : Print out the LSM entry, if it is present. * --list : List the files in the archive. * --check : Check the archive for integrity using the embedded checksums. Does not extract the archive. * --nochown : By default, a "chown -R" command is run on the target directory after extraction, so that all files belong to the current user. This is mostly needed if you are running as root, as tar will then try to recreate the initial user ownerships. You may disable this behavior with this flag. * --tar : Run the tar command on the contents of the archive, using the following arguments as parameter for the command. * --noexec : Do not run the embedded script after extraction. Any subsequent arguments to the archive will be passed as additional arguments to the embedded command. You should explicitly use the -- special command-line construct before any such options to make sure that Makeself will not try to interpret them. License Makeself is covered by the [10]GNU General Public License (GPL) version 2 and above. Archives generated by Makeself don't have to be placed under this license (although I encourage it ;-)), since the archive itself is merely data for Makeself. Download Get the latest official distribution [11]here (version 2.1.5). The latest development version can be grabbed from the Loki Setup CVS module, at [12]cvs.icculus.org. Version history * v1.0: Initial public release * v1.1: The archive can be passed parameters that will be passed on to the embedded script, thanks to John C. Quillan * v1.2: Cosmetic updates, support for bzip2 compression and non-temporary archives. Many ideas thanks to Francois Petitjean. * v1.3: More patches from Bjarni R. Einarsson and Francois Petitjean: Support for no compression (--nocomp), script is no longer mandatory, automatic launch in an xterm, optional verbose output, and -target archive option to indicate where to extract the files. * v1.4: Many patches from Francois Petitjean: improved UNIX compatibility, automatic integrity checking, support of LSM files to get info on the package at run time.. * v1.5.x: A lot of bugfixes, and many other patches, including automatic verification through the usage of checksums. Version 1.5.5 was the stable release for a long time, even though the Web page didn't get updated ;-). Makeself was also officially made a part of the [13]Loki Setup installer, and its source is being maintained as part of this package. * v2.0: Complete internal rewrite of Makeself. The command-line parsing was vastly improved, the overall maintenance of the package was greatly improved by separating the stub from makeself.sh. Also Makeself was ported and tested to a variety of Unix platforms. * v2.0.1: First public release of the new 2.0 branch. Prior versions are officially obsoleted. This release introduced the '--copy' argument that was introduced in response to a need for the [14]UT2K3 Linux installer. * v2.1.0: Big change : Makeself can now support multiple embedded tarballs, each stored separately with their own checksums. An existing archive can be updated with the --append flag. Checksums are also better managed, and the --nochown option for archives appeared. * v2.1.1: Fixes related to the Unix compression (compress command). Some Linux distributions made the insane choice to make it unavailable, even though gzip is capable of uncompressing these files, plus some more bugfixes in the extraction and checksum code. * v2.1.2: Some bug fixes. Use head -n to avoid problems with POSIX conformance. * v2.1.3: Bug fixes with the command line when spawning terminals. Added --tar, --noexec for archives. Added --nomd5 and --nocrc to avoid creating checksums in archives. The embedded script is now run through "eval". The --info output now includes the command used to create the archive. A man page was contributed by Bartosz Fenski. * v2.1.4: Fixed --info output. Generate random directory name when extracting files to . to avoid problems. Better handling of errors with wrong permissions for the directory containing the files. Avoid some race conditions, Unset the $CDPATH variable to avoid problems if it is set. Better handling of dot files in the archive directory. * v2.1.5: Made the md5sum detection consistent with the header code. Check for the presence of the archive directory. Added --encrypt for symmetric encryption through gpg (Eric Windisch). Added support for the digest command on Solaris 10 for MD5 checksums. Check for available disk space before extracting to the target directory (Andreas Schweitzer). Allow extraction to run asynchronously (patch by Peter Hatch). Use file descriptors internally to avoid error messages (patch by Kay Tiong Khoo). Links * Check out the [15]"Loki setup" installer, used to install many Linux games and other applications, and of which I am the co-author. Since the demise of Loki, I am now the official maintainer of the project, and it is now being hosted on [16]icculus.org, as well as a bunch of other ex-Loki projects (and a lot of other good stuff!). * Bjarni R. Einarsson also wrote the setup.sh installer script, inspired by Makeself. [17]Check it out ! Contact This script was written by [18]Stéphane Peter (megastep at megastep.org) I welcome any enhancements and suggestions. Contributions were included from John C. Quillan, Bjarni R. Einarsson, Francois Petitjean, and Ryan C. Gordon, thanks to them! If you think I forgot your name, don't hesitate to contact me. icculus.org also has a [19]Bugzilla server available that allows bug reports to be submitted for Loki setup, and since Makeself is a part of Loki setup, you can submit bug reports from there! _________________________________________________________________ [20]Stéphane Peter Last modified: Fri Jan 4 15:51:05 PST 2008 References 1. http://mowser.com/web/megastep.org/makeself/ 2. http://www.megastep.org/makeself/makeself.run 3. mailto:megastep@REMOVEME.megastep.org 4. http://www.idsoftware.com/ 5. http://www.lokigames.com/products/myth2/updates.php3 6. http://www.nvidia.com/ 7. http://earth.google.com/ 8. http://www.megastep.org/makeself/makeself.run 9. http://www.megastep.org/makeself/makeself.run 10. http://www.gnu.org/copyleft/gpl.html 11. http://www.megastep.org/makeself/makeself-2.1.5.run 12. http://cvs.icculus.org/ 13. http://www.icculus.org/loki_setup/ 14. http://www.unrealtournament2003.com/ 15. http://www.icculus.org/loki_setup/ 16. http://www.icculus.org/ 17. http://www.mmedia.is/~bre/programs/setup.sh/ 18. mailto:megastep@@megastep.org 19. https://bugzilla.icculus.org/ 20. mailto:megastep@@megastep.org ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������./openvas-lsc-target.spec.in������������������������������������������������������������������������0000664�0023576�0023576�00000004217�11416535515�016040� 0����������������������������������������������������������������������������������������������������ustar �michael�������������������������michael����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������%define name @RpmName@ %define PubkeyBasename @PubkeyBasename@ %define version @VERSION@ %define release 1 %define _topdir @TOPDIR@ %define _tmppath @TOPDIR@/rpmtmp %define manifest %{_builddir}/%{name}-%{version}-%{release}.manifest # required items Name: %{name} Version: %{version} Release: %{release} License: GPL Group: Application/Misc Source: %{name}-%{version}.tar.gz #Prefix: /usr BuildRoot: /var/tmp/%{name}-%{version} Summary: OpenVAS local security check preparation %description This package prepares a system for OpenVAS local security checks. A user is created with a specific SSH authorized key. The corresponding private key is located at the respective OpenVAS installation. %prep %setup -q #%patch0 -p1 %build make %install rm -rf $RPM_BUILD_ROOT mkdir -p $RPM_BUILD_ROOT/home/%{PubkeyBasename}/.ssh/ %makeinstall # __os_install_post is implicitly expanded after the # %install section... do it now, and then disable it, # so all work is done before building manifest. %{?__os_install_post} %define __os_install_post %{nil} # build the file list automagically into %{manifest} cd $RPM_BUILD_ROOT rm -f %{manifest} find . -type d \ | sed '1,2d;s,^\.,\%attr(-\,root\,root) \%dir ,' >> %{manifest} find . -type f \ | sed 's,^\.,\%attr(-\,root\,root) ,' >> %{manifest} find . -type l \ | sed 's,^\.,\%attr(-\,root\,root) ,' >> %{manifest} %pre useradd -c "OpenVAS Local Security Checks" -d /home/%{PubkeyBasename} -m -s /bin/bash %{PubkeyBasename} %post chown -R %{PubkeyBasename} /home/%{PubkeyBasename}/.ssh chmod 500 /home/%{PubkeyBasename}/.ssh chmod 400 /home/%{PubkeyBasename}/.ssh/authorized_keys #%preun %postun # Remove user only if it was created by this package. # The alien-converted debian package will run the postun script in case of # errors (e.g. user already existed). Delete the user only if /etc/passwd lists # content that suggests that the user was created by this package. grep "%{PubkeyBasename}.*OpenVAS\ Local\ Security\ Checks" /etc/passwd && userdel -f %{PubkeyBasename} %clean rm -f %{manifest} rm -rf $RPM_BUILD_ROOT %files -f %{manifest} %defattr(-,root,root) #%doc README #%docdir #%config %changelog �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/oval_timestamp.xsl������������������������������������������������������000644 �001751 �001751 �00000004250 12557600612 022602� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <!-- OpenVAS $Id$ Description: Select OVAL definitions which have been updated after a certain date. Authors: Henri Doreau <henri.doreau@greenbone.net> Timo Pollmeier <timo.pollmeier@greenbone.net> Copyright: Copyright (C) 2011 - 2012 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:str="http://exslt.org/strings" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval_definitions="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval_variables="http://oval.mitre.org/XMLSchema/oval-variables-5" xmlns:oval_system_char="http://oval.mitre.org/XMLSchema/oval-system-characteristics-5" xmlns:oval_results="http://oval.mitre.org/XMLSchema/oval-results-5" xsi:schemaLocation="http://oval.mitre.org/language/version5.10.1/ovaldefinition/complete/oval-common-schema.xsd http://oval.mitre.org/language/version5.10.1/ovaldefinition/complete/oval-definitions-schema.xsd" extension-element-prefixes="str" > <xsl:output method="text"/> <xsl:template match="/"><xsl:value-of select="normalize-space(oval_definitions:oval_definitions/oval_definitions:generator/oval:timestamp|oval_variables:oval_variables/oval_variables:generator/oval:timestamp|oval_system_char:oval_system_characteristics/oval_system_char:generator/oval:timestamp|oval_results:oval_results/oval_results:generator/oval:timestamp)"/> </xsl:template> </xsl:stylesheet> ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/oval_update_pg.xsl������������������������������������������������������000644 �001751 �001751 �00000023501 12557600612 022547� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <!-- OpenVAS $Id$ Description: Generate SQL (Postgres compatible) queries to update the OVAL database. Authors: Henri Doreau <henri.doreau@greenbone.net> Timo Pollmeier <timo.pollmeier@greenbone.net> Copyright: Copyright (C) 2011 - 2014 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:ns6="http://scap.nist.gov/schema/scap-core/0.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:date="http://exslt.org/dates-and-times" xmlns:str="http://exslt.org/strings" xmlns:func="http://exslt.org/functions" xmlns:openvas="http://openvas.org" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval_definitions="http://oval.mitre.org/XMLSchema/oval-definitions-5" xmlns:oval_variables="http://oval.mitre.org/XMLSchema/oval-variables-5" xsi:schemaLocation="http://oval.mitre.org/language/version5.10.1/ovaldefinition/complete/oval-common-schema.xsd http://oval.mitre.org/language/version5.10.1/ovaldefinition/complete/oval-definitions-schema.xsd" extension-element-prefixes="date str func openvas"> <xsl:param name="refdate" select="0" /> <xsl:output method="text"/> <xsl:variable name="filetimestamp" select="normalize-space(oval_definitions:oval_definitions/oval_definitions:generator/oval:timestamp)"/> <func:function name="openvas:sql-quote"> <xsl:param name="sql"/> <xsl:variable name="single">'</xsl:variable> <xsl:variable name="pair">''</xsl:variable> <func:result select="str:replace ($sql, $single, $pair)"/> </func:function> <xsl:template match="oval_definitions:definition"> <xsl:variable name="definitiondate" select="normalize-space((oval_definitions:metadata/oval_definitions:oval_repository/oval_definitions:dates/oval_definitions:submitted/@date | oval_definitions:metadata/oval_definitions:oval_repository/oval_definitions:dates/oval_definitions:status_change/@date | oval_definitions:metadata/oval_definitions:oval_repository/oval_definitions:dates/oval_definitions:modified/@date)[last()])" /> <xsl:choose> <xsl:when test="$definitiondate='' or floor (date:seconds ($definitiondate)) > number($refdate)"> SELECT merge_ovaldef ('<xsl:value-of select="@id"/>_'||(SELECT id FROM ovalfiles WHERE xml_file = '<xsl:value-of select="$filename"/>'), '<xsl:value-of select="@id"/>', '', <xsl:choose> <xsl:when test="$definitiondate != ''"><xsl:apply-templates select="oval_definitions:metadata/oval_definitions:oval_repository/oval_definitions:dates"/> </xsl:when> <xsl:otherwise><xsl:value-of select="floor (date:seconds ($filetimestamp))"/>, <xsl:value-of select="floor (date:seconds ($filetimestamp))"/>, </xsl:otherwise> </xsl:choose> <xsl:value-of select="@version"/>, <xsl:call-template name="boolean_def_false"> <xsl:with-param name="value" select="@deprecated"/> </xsl:call-template>, '<xsl:value-of select="@class"/>', '<xsl:value-of select="openvas:sql-quote (oval_definitions:metadata/oval_definitions:title/text())"/>', '<xsl:value-of select="openvas:sql-quote (oval_definitions:metadata/oval_definitions:description/text())"/>', '<xsl:copy-of select="$filename"/>', <xsl:choose> <xsl:when test="oval_definitions:metadata/oval_definitions:oval_repository/oval_definitions:status != ''"> '<xsl:value-of select="oval_definitions:metadata/oval_definitions:oval_repository/oval_definitions:status"/>' </xsl:when> <xsl:otherwise> <xsl:choose> <xsl:when test="translate(@deprecated, $smallcase, $uppercase) = 'TRUE'"> <xsl:text>'DEPRECATED'</xsl:text> </xsl:when> <xsl:otherwise> <xsl:text>''</xsl:text> </xsl:otherwise> </xsl:choose> </xsl:otherwise> </xsl:choose>, 0.0, <xsl:value-of select="count(oval_definitions:metadata/oval_definitions:reference[translate(@source, $uppercase, $smallcase) = 'cve'])"/>); <xsl:for-each select="oval_definitions:metadata/oval_definitions:reference[translate(@source, $uppercase, $smallcase) = 'cve']"> INSERT INTO affected_ovaldefs (cve, ovaldef) SELECT cves.id, ovaldefs.id FROM cves, ovaldefs WHERE cves.name='<xsl:value-of select="@ref_id"/>' AND ovaldefs.name = '<xsl:value-of select="../../@id"/>' AND NOT EXISTS (SELECT * FROM affected_ovaldefs WHERE cve = cves.id AND ovaldef = ovaldefs.id); </xsl:for-each> </xsl:when> <xsl:otherwise> /* Filtered <xsl:value-of select="@id"/> (<xsl:value-of select="$definitiondate"/>) */ </xsl:otherwise> </xsl:choose> </xsl:template> <xsl:template match="oval_definitions:dates"><xsl:choose> <xsl:when test="oval_definitions:submitted/@date | oval_definitions:status_change/@date | oval_definitions:modified/@date != ''"><xsl:value-of select="floor (date:seconds ((oval_definitions:submitted/@date | oval_definitions:status_change/@date | oval_definitions:modified/@date) [1]))"/>, <xsl:value-of select="floor (date:seconds ((oval_definitions:submitted/@date | oval_definitions:status_change/@date | oval_definitions:modified/@date) [last()]))"/>, </xsl:when> <xsl:otherwise><xsl:copy-of select="floor (date:seconds ($timestamp))"/>, <xsl:copy-of select="floor (date:seconds ($timestamp))"/>, </xsl:otherwise> </xsl:choose> </xsl:template> <xsl:template match="oval_definitions:generator" /> <xsl:template match="oval_definitions:tests" /> <xsl:template match="oval_definitions:objects" /> <xsl:template match="oval_definitions:states" /> <xsl:template match="oval_definitions:variables" /> <xsl:template match="oval_variables:variable" /> <xsl:template match="oval_variables:generator" /> <xsl:template match="/"> SET search_path TO scap; BEGIN TRANSACTION; CREATE FUNCTION merge_ovaldef (uuid_arg TEXT, name_arg TEXT, comment_arg TEXT, creation_time_arg INTEGER, modification_time_arg INTEGER, version_arg INTEGER, deprecated_arg INTEGER, def_class_arg TEXT, title_arg TEXT, description_arg TEXT, xml_file_arg TEXT, status_arg TEXT, max_cvss_arg FLOAT, cve_refs_arg INTEGER) RETURNS VOID AS $$ BEGIN LOOP UPDATE ovaldefs SET name = name_arg, comment = comment_arg, creation_time = creation_time_arg, modification_time = modification_time_arg, version = version_arg, deprecated = deprecated_arg, def_class = def_class_arg, title = title_arg, description = description_arg, xml_file = xml_file_arg, status = status_arg, max_cvss = max_cvss_arg, cve_refs = cve_refs_arg WHERE uuid = uuid_arg; IF found THEN RETURN; END IF; BEGIN INSERT INTO ovaldefs (uuid, name, comment, creation_time, modification_time, version, deprecated, def_class, title, description, xml_file, status, max_cvss, cve_refs) VALUES (uuid_arg, name_arg, comment_arg, creation_time_arg, modification_time_arg, version_arg, deprecated_arg, def_class_arg, title_arg, description_arg, xml_file_arg, status_arg, max_cvss_arg, cve_refs_arg); RETURN; EXCEPTION WHEN unique_violation THEN -- Try again. END; END LOOP; END; $$ LANGUAGE plpgsql; INSERT INTO ovalfiles (xml_file) SELECT '<xsl:value-of select="$filename"/>' WHERE NOT EXISTS (SELECT * FROM ovalfiles WHERE xml_file = '<xsl:value-of select="$filename"/>'); <xsl:apply-templates /> DROP FUNCTION merge_ovaldef (uuid_arg TEXT, name_arg TEXT, comment_arg TEXT, creation_time_arg INTEGER, modification_time_arg INTEGER, version_arg INTEGER, deprecated_arg INTEGER, def_class_arg TEXT, title_arg TEXT, description_arg TEXT, xml_file_arg TEXT, status_arg TEXT, max_cvss_arg FLOAT, cve_refs_arg INTEGER); COMMIT; </xsl:template> <xsl:variable name="smallcase" select="'abcdefghijklmnopqrstuvwxyz'" /> <xsl:variable name="uppercase" select="'ABCDEFGHIJKLMNOPQRSTUVWXYZ'" /> <xsl:template name="boolean_def_false"> <xsl:param name="value"/> <xsl:choose> <xsl:when test="translate($value, $smallcase, $uppercase) = 'TRUE'"> <xsl:text>1</xsl:text> </xsl:when> <xsl:otherwise> <xsl:text>0</xsl:text> </xsl:otherwise> </xsl:choose> </xsl:template> </xsl:stylesheet> �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/openvas-migrate-to-postgres.in������������������������������������������000755 �001751 �001751 �00000112176 12557600612 024755� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/bin/sh # # migrate-to-postgres # This script migrates an OpenVAS installation from SQLite to Postgres. # # Authors: # Timo Pollmeier <timo.pollmeier@greenbone.net> # Matthew Mundell <matthew.mundell@greenbone.net> # # Copyright: # Copyright (C) 2014 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. VERSION=20140904 # SETTINGS # ======== # SCRIPT_NAME is the name the script will use to identify itself and to mark # log messages. SCRIPT_NAME="openvas-migrate-to-postgres" # LOG_CMD defines the command to use for logging. To have logger log to stderr # as well as syslog, add "-s" here. LOG_CMD="logger -s -t $SCRIPT_NAME" SQLITE3="sqlite3 -noheader -bail" PSQL="psql -v ON_ERROR_STOP=1 -q --pset pager=off -d tasks -t" # Maximum number of retries if database is locked if [ -z "$MAX_SQL_RETRIES" ]; then MAX_SQL_RETRIES="1" # 0 : try only once fi # Delay between retries if [ -z "$SQL_RETRY_DELAY" ]; then SQL_RETRY_DELAY="10m" # allowed unit suffixes: see sleep command fi [ -r @OPENVAS_SYSCONF_DIR@/migrate-to-postgres.conf ] && . @OPENVAS_SYSCONF_DIR@/migrate-to-postgres.conf SQLITE_DB_DIR="@OPENVAS_STATE_DIR@/mgr" SQLITE_DB="$SQLITE_DB_DIR/tasks.db" SQLITE=`command -v sqlite3` log_debug () { $LOG_CMD -p daemon.debug $1 } log_info () { $LOG_CMD -p daemon.info $1 } log_notice () { $LOG_CMD -p daemon.notice $1 } log_warning () { $LOG_CMD -p daemon.warning $1 } log_err () { $LOG_CMD -p daemon.err $1 } reset_sql_tries () { try_sql=1 sql_retries=0 } test_sql_exit () { exit_code=$? try_sql=0 if [ 0 -ne "$exit_code" ] then log_err "$1: sql command exited with code $exit_code." exit 1 fi } sqlite () { $SQLITE3 $SQLITE_DB "$1" } pg () { log_debug "SQL: $1" $PSQL -c "$1" exit_code=$? if [ 0 -ne "$exit_code" ] then log_err "$1: psql exited with code $exit_code for sql: $1." exit 1 fi } does_pg_db_exist () { PG_DB_EXISTS=`pg "SELECT EXISTS (SELECT table_name FROM information_schema.tables WHERE table_catalog = 'tasks' AND table_schema = 'public' AND table_name = 'meta') ::integer;"` return $PG_DB_EXISTS } is_db_broken () { log_info "Checking SQLite3 database." DB_BROKEN=0 if [ ! -e $SQLITE_DB ] then return fi # Index report_hosts_by_host may have been created with COLLATE collate_ip. # collate_ip has been removed. So just recreate the index. reset_sql_tries until [ "$try_sql" -eq 0 ] do sqlite "DROP INDEX report_hosts_by_host;" test_sql_exit "Could not drop index report_hosts_by_host" done reset_sql_tries until [ "$try_sql" -eq 0 ] do sqlite "CREATE INDEX report_hosts_by_host ON report_hosts (host);" test_sql_exit "Could not create index report_hosts_by_host" done reset_sql_tries until [ "$try_sql" -eq 0 ] do DB_INTEGRITY=`sqlite "PRAGMA integrity_check;"` test_sql_exit "Could not check CERT database integrity" done if [ "$DB_INTEGRITY" != "ok" ] then DB_BROKEN=1 log_warning "Database integrity check failed." fi } do_help () { echo "$0: Migrate Manager database from SQLite3 to Postgres" echo " --help display this help" echo " --selftest perform self-test" echo " --version display version" echo "" exit 0 } create_tables_133() { log_info "Creating tables." pg "CREATE TABLE IF NOT EXISTS current_credentials (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL);"; pg "CREATE TABLE IF NOT EXISTS meta (id SERIAL PRIMARY KEY, name text UNIQUE NOT NULL, value text);"; pg "CREATE TABLE IF NOT EXISTS users (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, password text, timezone text, hosts text, hosts_allow integer, ifaces text, ifaces_allow integer, method text, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS agents (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, installer bytea, installer_64 text, installer_filename text, installer_signature_64 text, installer_trust integer, installer_trust_time integer, howto_install text, howto_use text, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS agents_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, installer bytea, installer_64 text, installer_filename text, installer_signature_64 text, installer_trust integer, installer_trust_time integer, howto_install text, howto_use text, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS alerts (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, event integer, condition integer, method integer, filter integer, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS alerts_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, event integer, condition integer, method integer, filter integer, filter_location integer, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS alert_condition_data (id SERIAL PRIMARY KEY, alert integer REFERENCES alerts (id) ON DELETE RESTRICT, name text, data text);"; pg "CREATE TABLE IF NOT EXISTS alert_condition_data_trash (id SERIAL PRIMARY KEY, alert integer REFERENCES alerts_trash (id) ON DELETE RESTRICT, name text, data text);"; pg "CREATE TABLE IF NOT EXISTS alert_event_data (id SERIAL PRIMARY KEY, alert integer REFERENCES alerts (id) ON DELETE RESTRICT, name text, data text);"; pg "CREATE TABLE IF NOT EXISTS alert_event_data_trash (id SERIAL PRIMARY KEY, alert integer REFERENCES alerts_trash (id) ON DELETE RESTRICT, name text, data text);"; pg "CREATE TABLE IF NOT EXISTS alert_method_data (id SERIAL PRIMARY KEY, alert integer REFERENCES alerts (id) ON DELETE RESTRICT, name text, data text);"; pg "CREATE TABLE IF NOT EXISTS alert_method_data_trash (id SERIAL PRIMARY KEY, alert integer REFERENCES alerts_trash (id) ON DELETE RESTRICT, name text, data text);"; pg "CREATE TABLE IF NOT EXISTS filters (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, type text, term text, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS filters_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, type text, term text, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS groups (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS groups_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS group_users (id SERIAL PRIMARY KEY, \"group\" integer REFERENCES groups (id) ON DELETE RESTRICT, \"user\" integer REFERENCES users (id) ON DELETE RESTRICT);"; pg "CREATE TABLE IF NOT EXISTS group_users_trash (id SERIAL PRIMARY KEY, \"group\" integer REFERENCES groups_trash (id) ON DELETE RESTRICT, \"user\" integer REFERENCES users (id) ON DELETE RESTRICT);"; pg "CREATE TABLE IF NOT EXISTS roles (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS roles_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS role_users (id SERIAL PRIMARY KEY, role integer REFERENCES roles (id) ON DELETE RESTRICT, \"user\" integer REFERENCES users (id) ON DELETE RESTRICT);"; pg "CREATE TABLE IF NOT EXISTS role_users_trash (id SERIAL PRIMARY KEY, role integer REFERENCES roles (id) ON DELETE RESTRICT, \"user\" integer REFERENCES users (id) ON DELETE RESTRICT);"; pg "CREATE TABLE IF NOT EXISTS nvt_selectors (id SERIAL PRIMARY KEY, name text, exclude integer, type integer, family_or_nvt text, family text);"; pg "CREATE TABLE IF NOT EXISTS port_lists (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS port_lists_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS port_ranges (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, port_list integer REFERENCES port_lists (id) ON DELETE RESTRICT, type integer, start integer, \"end\" integer, comment text, exclude integer);"; pg "CREATE TABLE IF NOT EXISTS port_ranges_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, port_list integer REFERENCES port_lists_trash (id) ON DELETE RESTRICT, type integer, start integer, \"end\" integer, comment text, exclude integer);"; pg "CREATE TABLE IF NOT EXISTS port_names (id SERIAL PRIMARY KEY, number integer, protocol text, name text, UNIQUE (number, protocol));"; pg "CREATE TABLE IF NOT EXISTS lsc_credentials (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, login text, password text, comment text, private_key text, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS lsc_credentials_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, login text, password text, comment text, private_key text, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS targets (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, hosts text, exclude_hosts text, reverse_lookup_only integer, reverse_lookup_unify integer, comment text, lsc_credential integer, ssh_port text, smb_lsc_credential integer, port_range integer REFERENCES port_lists (id) ON DELETE RESTRICT, alive_test integer, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS targets_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, hosts text, exclude_hosts text, reverse_lookup_only integer, reverse_lookup_unify integer, comment text, lsc_credential integer, ssh_port text, smb_lsc_credential integer, port_range integer, ssh_location integer, smb_location integer, port_list_location integer, alive_test integer, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS configs (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, nvt_selector text, comment text, family_count integer, nvt_count integer, families_growing integer, nvts_growing integer, type integer, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS configs_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, nvt_selector text, comment text, family_count integer, nvt_count integer, families_growing integer, nvts_growing integer, type integer, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS config_preferences (id SERIAL PRIMARY KEY, config integer REFERENCES configs (id) ON DELETE RESTRICT, type text, name text, value text);"; pg "CREATE TABLE IF NOT EXISTS config_preferences_trash (id SERIAL PRIMARY KEY, config integer REFERENCES configs_trash (id) ON DELETE RESTRICT, type text, name text, value text);"; pg "CREATE TABLE IF NOT EXISTS schedules (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, first_time integer, period integer, period_months integer, duration integer, timezone text, initial_offset integer, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS schedules_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, first_time integer, period integer, period_months integer, duration integer, timezone text, initial_offset integer, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS slaves (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, host text, port text, login text, password text, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS slaves_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, host text, port text, login text, password text, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS scanners (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text, comment text, host text, port integer, type integer, ca_pub text, key_pub text, key_priv text, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS scanners_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text, comment text, host text, port integer, type integer, ca_pub text, key_pub text, key_priv text, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS tasks (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text, hidden integer, comment text, run_status integer, start_time integer, end_time integer, config integer, target integer, schedule integer, schedule_next_time integer, slave integer, scanner integer, config_location integer, target_location integer, schedule_location integer, slave_location integer, upload_result_count integer, hosts_ordering text, alterable integer, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS task_files (id SERIAL PRIMARY KEY, task integer REFERENCES tasks (id) ON DELETE RESTRICT, name text, content text);"; pg "CREATE TABLE IF NOT EXISTS task_alerts (id SERIAL PRIMARY KEY, task integer REFERENCES tasks (id) ON DELETE RESTRICT, alert integer, alert_location integer);"; pg "CREATE TABLE IF NOT EXISTS task_preferences (id SERIAL PRIMARY KEY, task integer REFERENCES tasks (id) ON DELETE RESTRICT, name text, value text);"; pg "CREATE TABLE IF NOT EXISTS reports (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, hidden integer, task integer REFERENCES tasks (id) ON DELETE RESTRICT, date integer, start_time integer, end_time integer, nbefile text, comment text, scan_run_status integer, slave_progress integer, slave_task_uuid text, slave_uuid text, slave_name text, slave_host text, slave_port integer, source_iface text);"; pg "CREATE TABLE IF NOT EXISTS report_counts (id SERIAL PRIMARY KEY, report integer REFERENCES reports (id) ON DELETE RESTRICT, \"user\" integer REFERENCES users (id) ON DELETE RESTRICT, severity decimal, count integer, override integer, end_time integer);"; pg "CREATE TABLE IF NOT EXISTS results (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, task integer REFERENCES tasks (id) ON DELETE RESTRICT, host text, port text, nvt text, type text, description text, report integer REFERENCES reports (id) ON DELETE RESTRICT, nvt_version text, severity real, qod integer, owner integer REFERENCES users (id) ON DELETE RESTRICT, date integer);"; pg "CREATE TABLE IF NOT EXISTS report_formats (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, extension text, content_type text, summary text, description text, signature text, trust integer, trust_time integer, flags integer, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS report_formats_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, extension text, content_type text, summary text, description text, signature text, trust integer, trust_time integer, flags integer, original_uuid text, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS report_format_params (id SERIAL PRIMARY KEY, report_format integer REFERENCES report_formats (id) ON DELETE RESTRICT, name text, type integer, value text, type_min bigint, type_max bigint, type_regex text, fallback text);"; pg "CREATE TABLE IF NOT EXISTS report_format_params_trash (id SERIAL PRIMARY KEY, report_format integer REFERENCES report_formats_trash (id) ON DELETE RESTRICT, name text, type integer, value text, type_min bigint, type_max bigint, type_regex text, fallback text);"; pg "CREATE TABLE IF NOT EXISTS report_format_param_options (id SERIAL PRIMARY KEY, report_format_param integer REFERENCES report_format_params (id) ON DELETE RESTRICT, value text);"; pg "CREATE TABLE IF NOT EXISTS report_format_param_options_trash (id SERIAL PRIMARY KEY, report_format_param integer REFERENCES report_format_params_trash (id) ON DELETE RESTRICT, value text);"; pg "CREATE TABLE IF NOT EXISTS report_hosts (id SERIAL PRIMARY KEY, report integer REFERENCES reports (id) ON DELETE RESTRICT, host text, start_time integer, end_time integer, attack_state text, current_port integer, max_port integer);"; pg "CREATE TABLE IF NOT EXISTS report_host_details (id SERIAL PRIMARY KEY, report_host integer REFERENCES report_hosts (id) ON DELETE RESTRICT, source_type text, source_name text, source_description text, name text, value text);"; pg "CREATE TABLE IF NOT EXISTS report_results (id SERIAL PRIMARY KEY, report integer REFERENCES reports (id) ON DELETE RESTRICT, result integer REFERENCES results (id) ON DELETE RESTRICT);"; pg "CREATE TABLE IF NOT EXISTS nvt_preferences (id SERIAL PRIMARY KEY, name text UNIQUE NOT NULL, value text);"; pg "CREATE TABLE IF NOT EXISTS nvts (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, oid text UNIQUE NOT NULL, version text, name text, comment text, summary text, copyright text, cve text, bid text, xref text, tag text, category text, family text, cvss_base text, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS nvt_cves (id SERIAL PRIMARY KEY, nvt integer REFERENCES nvts (id) ON DELETE RESTRICT, oid text, cve_name text);"; pg "CREATE TABLE IF NOT EXISTS notes (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, nvt text NOT NULL, creation_time integer, modification_time integer, text text, hosts text, port text, severity double precision, task integer, result integer, end_time integer);"; pg "CREATE TABLE IF NOT EXISTS notes_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, nvt text NOT NULL, creation_time integer, modification_time integer, text text, hosts text, port text, severity double precision, task integer, result integer, end_time integer);"; pg "CREATE TABLE IF NOT EXISTS overrides (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, nvt text NOT NULL, creation_time integer, modification_time integer, text text, hosts text, new_severity double precision, port text, severity double precision, task integer, result integer, end_time integer);"; pg "CREATE TABLE IF NOT EXISTS overrides_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, nvt text NOT NULL, creation_time integer, modification_time integer, text text, hosts text, new_severity double precision, port text, severity double precision, task integer, result integer, end_time integer);"; pg "CREATE TABLE IF NOT EXISTS permissions (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, resource_type text, resource integer, resource_uuid text, resource_location integer, subject_type text, subject integer, subject_location integer, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS permissions_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, resource_type text, resource integer, resource_uuid text, resource_location integer, subject_type text, subject integer, subject_location integer, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS settings (id SERIAL PRIMARY KEY, uuid text NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, value text);"; pg "CREATE TABLE IF NOT EXISTS tags (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, resource_type text, resource integer, resource_uuid text, resource_location integer, active integer, value text, creation_time integer, modification_time integer);"; pg "CREATE TABLE IF NOT EXISTS tags_trash (id SERIAL PRIMARY KEY, uuid text UNIQUE NOT NULL, owner integer REFERENCES users (id) ON DELETE RESTRICT, name text NOT NULL, comment text, resource_type text, resource integer, resource_uuid text, resource_location integer, active integer, value text, creation_time integer, modification_time integer);"; } migrate_rest () { # Remove stray task_alerts. sqlite "DELETE FROM task_alerts WHERE alert_location = 0 AND alert NOT IN (SELECT id FROM alerts);" test_sql_exit "Failed to clean up task_alerts" sqlite "DELETE FROM task_alerts WHERE alert_location = 1 AND alert NOT IN (SELECT id FROM alerts_trash);" test_sql_exit "Failed to clean up task_alerts (trash alerts)" # Remove stray report_format_params_trash. sqlite "DELETE FROM report_format_params_trash WHERE report_format NOT IN (SELECT id FROM report_formats_trash);" test_sql_exit "Failed to clean up report_format_params_trash" # Remove stray report_format_param_options_trash. sqlite "DELETE FROM report_format_param_options_trash WHERE report_format_param NOT IN (SELECT id FROM report_format_params_trash);" test_sql_exit "Failed to clean up report_format_param_options_trash" # Remove stray report_hosts. Not sure where these came from. sqlite "DELETE FROM report_hosts WHERE report NOT IN (SELECT id FROM reports);" test_sql_exit "Failed to clean up report_hosts" # Remove stray report_host_details. Not sure where these came from. sqlite "DELETE FROM report_host_details WHERE report_host NOT IN (SELECT id FROM report_hosts);" test_sql_exit "Failed to clean up report_host_details" # Make end_time in tasks consistent. # # Manager --migrate only does this in migrate_135_to_136, but Postgres needs # the end_times to be a single type for import. sqlite "UPDATE tasks SET end_time = (SELECT reports.end_time FROM reports WHERE task = tasks.id ORDER BY id DESC LIMIT 1) WHERE EXISTS (SELECT id FROM reports WHERE task = tasks.id);" test_sql_exit "Failed to make end_time in tasks consistent" # Make end_time in report_hosts consistent. # 2011-11-03T12:41:34+02:00, 2011-11-08T19:57:06Z sqlite "UPDATE report_hosts SET end_time = strftime ('%s', end_time) WHERE end_time GLOB '*-*-*T*:*:*[+-]*:*' OR end_time GLOB '*-*-*T*:*:*Z';" test_sql_exit "Failed to make end_time in report_hosts consistent" # Fri Sep 3 05:12:34 2010 # # Assume that this time matches the current timezone, may change the # time, but it seems these are only from very old reports anyway. echo "BEGIN EXCLUSIVE; CREATE TEMPORARY TABLE months (number, name); INSERT INTO months (number, name) VALUES ('01', 'Jan'); INSERT INTO months (number, name) VALUES ('02', 'Feb'); INSERT INTO months (number, name) VALUES ('03', 'Mar'); INSERT INTO months (number, name) VALUES ('04', 'Apr'); INSERT INTO months (number, name) VALUES ('05', 'May'); INSERT INTO months (number, name) VALUES ('06', 'Jun'); INSERT INTO months (number, name) VALUES ('07', 'Jul'); INSERT INTO months (number, name) VALUES ('08', 'Aug'); INSERT INTO months (number, name) VALUES ('09', 'Sep'); INSERT INTO months (number, name) VALUES ('10', 'Oct'); INSERT INTO months (number, name) VALUES ('11', 'Nov'); INSERT INTO months (number, name) VALUES ('12', 'Dec'); UPDATE report_hosts SET end_time = strftime ('%s', substr (end_time, 21) || '-' || (select number from months where name = substr (end_time, 5, 3)) || '-' || replace (substr (end_time, 9, 2), ' ', '0') || 'T' || substr (end_time, 12, 9)) WHERE end_time GLOB '??? ??? ?? ??:??:?? ????'; COMMIT;" | $SQLITE3 -batch $SQLITE_DB test_sql_exit "Failed to make end_time in report_hosts consistent" log_info "Dumping SQLite3 data:" TEMP_DIR=`mktemp -d` log_debug "TEMP_DIR: $TEMP_DIR" # These must be ordered to respect foreign keys. # # To get all tables use ".tables" or # SELECT tbl_name FROM sqlite_master WHERE type='table' and tbl_name not like 'sqlite_%' # # These table are left out: report_counts nvts nvt_cves # TABLES="users configs config_preferences meta nvt_preferences nvt_selectors lsc_credentials lsc_credentials_trash port_lists port_ranges targets schedules slaves tasks reports report_hosts report_formats report_format_params report_format_param_options results report_results task_files configs_trash config_preferences_trash report_formats_trash report_format_params_trash report_format_param_options_trash schedules_trash slaves_trash targets_trash report_host_details task_preferences port_lists_trash port_ranges_trash alerts_trash alert_event_data_trash alert_method_data_trash alerts alert_condition_data alert_event_data alert_method_data task_alerts alert_condition_data_trash groups group_users filters filters_trash port_names settings roles role_users overrides overrides_trash notes notes_trash groups_trash roles_trash tags_trash group_users_trash role_users_trash scanners scanners_trash permissions_trash permissions tags" log_debug "TABLES: $TABLES" for TABLE in $TABLES; do # Get the Postgres columns because the import CSV must be in that order. # # This also works around extra columns that were hanging around in old # database. # COLS=`pg "SELECT string_agg ('\"' || column_name || '\"', ',') from (select column_name from information_schema.columns where table_schema = 'public' and table_name = '$TABLE' order by ordinal_position) as sub;"` log_debug "COLS: $COLS" # Pipe SQLite CSV output into Postgres COPY FROM. $SQLITE3 -csv $SQLITE_DB "SELECT $COLS FROM $TABLE;" | pg "COPY $TABLE ($COLS) FROM STDIN DELIMITER ',' CSV"; test_sql_exit "Could not generate CSV for $TABLE" done # Force a --rebuild. pg "DELETE FROM meta WHERE name = 'nvts_feed_version';" log_info "Resetting Postgres sequences" # Reset ID sequences, because the COPY specified the ID values explicitly. pg "SELECT 'SELECT 1' || ' WHERE' || ' SETVAL' || ' (' || quote_literal (quote_ident (PGT.schemaname) || '.' || quote_ident (S.relname)) || ',' || ' COALESCE' || ' ((SELECT MAX (' || quote_ident (C.attname) || ')' || ' FROM ' || quote_ident (PGT.schemaname) || '.' || quote_ident (T.relname) || '),' || ' 1))' || ' < 0;' FROM pg_class AS S, pg_depend AS D, pg_class AS T, pg_attribute AS C, pg_tables AS PGT WHERE S.relkind = 'S' AND S.oid = D.objid AND D.refobjid = T.oid AND D.refobjid = C.attrelid AND D.refobjsubid = C.attnum AND T.relname = PGT.tablename ORDER BY S.relname;" > $TEMP_DIR/reset.sql; test_sql_exit "Could not generate reset SQL" $PSQL -f $TEMP_DIR/reset.sql | sed '/^\s*$/d' test_sql_exit "Could not run reset SQL" rm -rf $TEMP_DIR } migrate () { DB_VERSION=`sqlite "select value from meta where name = 'database_version';" 2>/dev/null | tr -d '\n\r' || echo 0` case "$DB_VERSION" in 133) log_info "Migrating database (version 133)." create_tables_133; migrate_rest;; 134) log_info "Migrating database (version 134)." create_tables_133; pg "ALTER TABLE targets ADD COLUMN esxi_lsc_credential integer;" pg "ALTER TABLE targets_trash ADD COLUMN esxi_lsc_credential integer;" pg "ALTER TABLE targets_trash ADD COLUMN esxi_location integer;" migrate_rest;; 135) log_info "Migrating database (version 135)." create_tables_133; pg "ALTER TABLE targets ADD COLUMN esxi_lsc_credential integer;" pg "ALTER TABLE targets_trash ADD COLUMN esxi_lsc_credential integer;" pg "ALTER TABLE targets_trash ADD COLUMN esxi_location integer;" migrate_rest pg "DROP TABLE report_results;";; 136) log_info "Migrating database (version 136)." create_tables_133; pg "ALTER TABLE targets ADD COLUMN esxi_lsc_credential integer;" pg "ALTER TABLE targets_trash ADD COLUMN esxi_lsc_credential integer;" pg "ALTER TABLE targets_trash ADD COLUMN esxi_location integer;" pg "UPDATE tasks SET end_time = (SELECT reports.end_time FROM reports WHERE task = tasks.id ORDER BY id DESC LIMIT 1) WHERE EXISTS (SELECT id FROM reports WHERE task = tasks.id);" pg "UPDATE tasks SET end_time = NULL WHERE NOT EXISTS (SELECT id FROM reports WHERE task = tasks.id);" migrate_rest pg "DROP TABLE report_results;";; *) log_notice "Database version not supported." exit 1 esac } do_self_test () { if [ -z "$SELFTEST_STDERR" ] then SELFTEST_STDERR=0 fi if [ -z "$SQLITE" ]; then if [ 0 -ne $SELFTEST_STDERR ] then echo "sqlite3 not found (required)." 1>&2 fi log_err "sqlite3 not found (required)." SELFTEST_FAIL=1 fi if [ ! -f $SQLITE_DB ] then if [ 0 -ne $SELFTEST_STDERR ] then echo "SQLITE_DB ($SQLITE_DB) not found." 1>&2 fi log_err "SQLITE_DB ($SQLITE_DB) not found." SELFTEST_FAIL=1 fi } while test $# -gt 0; do case "$1" in --version) echo $VERSION exit 0 ;; --help) do_help exit 0 ;; --selftest) SELFTEST_FAIL=0 SELFTEST_STDERR=1 do_self_test exit $SELFTEST_FAIL ;; esac shift done SELFTEST_FAIL=0 do_self_test if [ $SELFTEST_FAIL -ne 0 ] then exit 1 fi is_db_broken if [ $DB_BROKEN -eq 1 ] then log_notice "Corrupt database, skipping migration." exit 1 else does_pg_db_exist if [ $PG_DB_EXISTS -eq 1 ] then log_notice "Postgres database exists already, skipping migration." exit 0 fi fi migrate log_info "Done." exit 0 ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/cpe_update.xsl����������������������������������������������������������000644 �001751 �001751 �00000006765 12557600612 021704� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <!-- OpenVAS $Id: cpe_update.xsl 20229 2014-09-01 13:13:29Z mwiegand $ Description: Generate SQL (SQLite compatible) queries to update the CPE database. Authors: Henri Doreau <henri.doreau@greenbone.net> Copyright: Copyright (C) 2011 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/0.3" xmlns:meta="http://scap.nist.gov/schema/cpe-dictionary-metadata/0.2" xmlns:ns6="http://scap.nist.gov/schema/scap-core/0.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:config="http://scap.nist.gov/schema/configuration/0.1" xmlns:cpe="http://cpe.mitre.org/dictionary/2.0" xmlns:str="http://exslt.org/strings" xsi:schemaLocation="http://scap.nist.gov/schema/configuration/0.1 http://nvd.nist.gov/schema/configuration_0.1.xsd http://scap.nist.gov/schema/scap-core/0.3 http://nvd.nist.gov/schema/scap-core_0.3.xsd http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.2.xsd http://scap.nist.gov/schema/scap-core/0.1 http://nvd.nist.gov/schema/scap-core_0.1.xsd http://scap.nist.gov/schema/cpe-dictionary-metadata/0.2 http://nvd.nist.gov/schema/cpe-dictionary-metadata_0.2.xsd" extension-element-prefixes="str" > <xsl:output method="text"/> <xsl:template match="cpe:cpe-item"> <xsl:variable name="decoded_name" select='str:replace( str:replace( str:decode-uri(@name), "%7E", "~"), "'", "''")'/> INSERT OR REPLACE INTO cpes (uuid, name, title, creation_time, modification_time, status, deprecated_by_id, nvd_id) VALUES ('<xsl:value-of select="$decoded_name"/>', '<xsl:value-of select="$decoded_name"/>', '<xsl:value-of select='str:replace(cpe:title[@xml:lang = "en-US"], "'", "''")'/>', strftime('%s', '<xsl:value-of select="meta:item-metadata/@modification-date"/>'), strftime('%s', '<xsl:value-of select="meta:item-metadata/@modification-date"/>'), '<xsl:value-of select="meta:item-metadata/@status"/>', <xsl:call-template name="value_or_null"> <xsl:with-param name="value" select="meta:item-metadata/@deprecated-by-nvd-id"/> </xsl:call-template>, '<xsl:value-of select="meta:item-metadata/@nvd-id"/>' ); </xsl:template> <xsl:template match="cpe:generator"/> <xsl:template match="/"> BEGIN TRANSACTION; <xsl:apply-templates/> COMMIT; </xsl:template> <xsl:template name="value_or_null"> <xsl:param name="value"/> <xsl:choose> <xsl:when test="$value"> <xsl:value-of select="$value"/> </xsl:when> <xsl:otherwise> <xsl:text>NULL</xsl:text> </xsl:otherwise> </xsl:choose> </xsl:template> </xsl:stylesheet> �����������openvas-manager-6.0.9/tools/cert_db_init.sql��������������������������������������������������������000644 �001751 �001751 �00000005256 12557600612 022203� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������ /* * OpenVAS * $Id: cert_db_init.sql 15096 2013-01-10 10:16:01Z timopollmeier $ * Description: CERT database initialization script * * Authors: * Timo Pollmeier <timo.pollmeier@greenbone.net> * * Copyright: * Copyright (C) 2013 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ /* --- TABLES CREATION --- */ /* delete old tables */ DROP TABLE IF EXISTS meta; DROP TABLE IF EXISTS cert_bund_advs; DROP TABLE IF EXISTS cert_bund_cves; DROP TABLE IF EXISTS dfn_cert_advs; DROP TABLE IF EXISTS dfn_cert_cves; /* create new tables and indices */ CREATE TABLE meta (id INTEGER PRIMARY KEY AUTOINCREMENT, name UNIQUE, value); INSERT INTO meta (name, value) VALUES ("database_version", "6"); INSERT INTO meta (name, value) VALUES ("last_update", "0"); CREATE TABLE cert_bund_advs ( id INTEGER PRIMARY KEY AUTOINCREMENT, uuid UNIQUE, name UNIQUE, comment TEXT, creation_time DATE, modification_time DATE, title TEXT, summary TEXT, cve_refs INTEGER, max_cvss FLOAT ); CREATE UNIQUE INDEX cert_bund_advs_idx ON cert_bund_advs (name); CREATE TABLE cert_bund_cves ( adv_id INTEGER, cve_name VARCHAR(20) ); CREATE INDEX cert_bund_cves_adv_idx ON cert_bund_cves (adv_id); CREATE INDEX cert_bund_cves_cve_idx ON cert_bund_cves (cve_name); CREATE TABLE dfn_cert_advs ( id INTEGER PRIMARY KEY AUTOINCREMENT, uuid UNIQUE, name UNIQUE, comment TEXT, creation_time DATE, modification_time DATE, title TEXT, summary TEXT, cve_refs INTEGER, max_cvss FLOAT ); CREATE UNIQUE INDEX dfn_cert_advs_idx ON dfn_cert_advs (name); CREATE TABLE dfn_cert_cves ( adv_id INTEGER, cve_name VARCHAR(20) ); CREATE INDEX dfn_cert_cves_adv_idx ON dfn_cert_cves (adv_id); CREATE INDEX dfn_cert_cves_cve_idx ON dfn_cert_cves (cve_name); /* deletion triggers */ CREATE TRIGGER cert_bund_adv_delete AFTER DELETE ON cert_bund_advs BEGIN DELETE FROM cert_bund_cves where adv_id = old.id; END; CREATE TRIGGER dfn_cert_adv_delete AFTER DELETE ON dfn_cert_advs BEGIN DELETE FROM dfn_cert_cves where adv_id = old.id; END;��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/scap_db_init.sql��������������������������������������������������������000644 �001751 �001751 �00000010432 12557600612 022164� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* * OpenVAS * $Id: scap_db_init.sql 21146 2014-12-10 08:30:31Z timopollmeier $ * Description: SCAP database initialization script * * Authors: * Henri Doreau <henri.doreau@greenbone.net> * Timo Pollmeier <timo.pollmeier@greenbone.net> * * Copyright: * Copyright (C) 2011-2012 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ /* --- TABLES CREATION --- */ /* delete old tables */ DROP TABLE IF EXISTS cves; DROP TABLE IF EXISTS cpes; DROP TABLE IF EXISTS affected_products; DROP TABLE IF EXISTS meta; DROP TABLE IF EXISTS oval_def; DROP TABLE IF EXISTS ovaldefs; DROP TABLE IF EXISTS ovalfiles; DROP TABLE IF EXISTS affected_ovaldefs; /* create new tables and indices */ CREATE TABLE meta (id INTEGER PRIMARY KEY AUTOINCREMENT, name UNIQUE, value); INSERT INTO meta (name, value) VALUES ("database_version", "15"); INSERT INTO meta (name, value) VALUES ("last_update", "0"); CREATE TABLE cves ( id INTEGER PRIMARY KEY AUTOINCREMENT, uuid UNIQUE, name, comment, description, creation_time DATE, modification_time DATE, vector, complexity, authentication, confidentiality_impact, integrity_impact, availability_impact, products, cvss FLOAT DEFAULT 0 ); CREATE UNIQUE INDEX cve_idx ON cves (name); CREATE INDEX cves_by_creation_time_idx ON cves (creation_time); CREATE INDEX cves_by_modification_time_idx ON cves (modification_time); CREATE INDEX cves_by_cvss ON cves (cvss); CREATE TABLE cpes ( id INTEGER PRIMARY KEY AUTOINCREMENT, uuid UNIQUE, name, comment, creation_time DATE, modification_time DATE, title, status, deprecated_by_id INTEGER, max_cvss FLOAT DEFAULT 0, cve_refs INTEGER DEFAULT 0, nvd_id ); CREATE UNIQUE INDEX cpe_idx ON cpes (name); CREATE INDEX cpes_by_creation_time_idx ON cpes (creation_time); CREATE INDEX cpes_by_modification_time_idx ON cpes (modification_time); CREATE INDEX cpes_by_cvss ON cpes (max_cvss); CREATE TABLE affected_products ( cve INTEGER NOT NULL, cpe INTEGER NOT NULL, FOREIGN KEY(cve) REFERENCES cves(id), FOREIGN KEY(cpe) REFERENCES cpes(id) ); CREATE INDEX afp_cpe_idx ON affected_products (cpe); CREATE INDEX afp_cve_idx ON affected_products (cve); CREATE TABLE ovaldefs ( id INTEGER PRIMARY KEY AUTOINCREMENT, uuid UNIQUE, name, /* OVAL identifier */ comment, creation_time DATE, modification_time DATE, version INTEGER, deprecated BOOLEAN, def_class TEXT, /* enum */ title TEXT, description TEXT, xml_file TEXT, status TEXT, max_cvss FLOAT, cve_refs INTEGER ); CREATE INDEX ovaldefs_idx ON ovaldefs (name); CREATE TABLE ovalfiles ( id INTEGER PRIMARY KEY AUTOINCREMENT, xml_file TEXT UNIQUE ); CREATE UNIQUE INDEX ovalfiles_idx ON ovalfiles (xml_file); CREATE TABLE affected_ovaldefs ( cve INTEGER NOT NULL, ovaldef INTEGER NOT NULL, FOREIGN KEY(cve) REFERENCES cves(id), FOREIGN KEY(ovaldef) REFERENCES ovaldefs(id) ); CREATE INDEX aff_ovaldefs_def_idx ON affected_ovaldefs (ovaldef); CREATE INDEX aff_ovaldefs_cve_idx ON affected_ovaldefs (cve); /* deletion triggers */ CREATE TRIGGER cves_delete AFTER DELETE ON cves BEGIN DELETE FROM affected_products where cve = old.id; DELETE FROM affected_ovaldefs where cve = old.id; END; CREATE TRIGGER affected_delete AFTER DELETE ON affected_products BEGIN UPDATE cpes set max_cvss = 0.0 WHERE id = old.cpe; UPDATE cpes set cve_refs = cve_refs -1 WHERE id = old.cpe; END; CREATE TRIGGER ovalfiles_delete AFTER DELETE ON ovalfiles BEGIN DELETE FROM ovaldefs WHERE ovaldefs.xml_file = old.xml_file; END; CREATE TRIGGER affected_ovaldefs_delete AFTER DELETE ON affected_ovaldefs BEGIN UPDATE ovaldefs SET max_cvss = 0.0 WHERE id = old.ovaldef; END; ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/cve_update_pg.xsl�������������������������������������������������������000644 �001751 �001751 �00000016520 12557600612 022366� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <!-- OpenVAS $Id: cve_update.xsl 20229 2014-09-01 13:13:29Z mwiegand $ Description: Generate SQL (Postgres compatible) queries to update the CVE database. Authors: Henri Doreau <henri.doreau@greenbone.net> Timo Pollmeier <timo.pollmeier@greenbone.net> Copyright: Copyright (C) 2011, 2013, 2014 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:vuln="http://scap.nist.gov/schema/vulnerability/0.4" xmlns:cpe-lang="http://cpe.mitre.org/language/2.0" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/0.1" xmlns:cve="http://scap.nist.gov/schema/feed/vulnerability/2.0" xmlns:cvss="http://scap.nist.gov/schema/cvss-v2/0.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:str="http://exslt.org/strings" xmlns:patch="http://scap.nist.gov/schema/patch/0.1" extension-element-prefixes="str" > <xsl:output method="text"/> <xsl:template match="cve:entry"> SELECT merge_cve ('<xsl:value-of select="@id"/>', '<xsl:value-of select="@id"/>', extract (epoch from '<xsl:value-of select="vuln:published-datetime"/>'::timestamptz)::integer, extract (epoch from '<xsl:value-of select="vuln:last-modified-datetime"/>'::timestamptz)::integer, <xsl:choose> <xsl:when test="string-length (vuln:cvss/cvss:base_metrics/cvss:score)"> <xsl:value-of select="vuln:cvss/cvss:base_metrics/cvss:score"/> </xsl:when> <xsl:otherwise> <xsl:text>0.0</xsl:text> </xsl:otherwise> </xsl:choose>, '<xsl:value-of select='str:replace(vuln:summary/text(), "'", "''")'/>', '<xsl:value-of select="vuln:cvss/cvss:base_metrics/cvss:access-vector"/>', '<xsl:value-of select="vuln:cvss/cvss:base_metrics/cvss:access-complexity"/>', '<xsl:value-of select="vuln:cvss/cvss:base_metrics/cvss:authentication"/>', '<xsl:value-of select="vuln:cvss/cvss:base_metrics/cvss:confidentiality-impact"/>', '<xsl:value-of select="vuln:cvss/cvss:base_metrics/cvss:integrity-impact"/>', '<xsl:value-of select="vuln:cvss/cvss:base_metrics/cvss:availability-impact"/>', '<xsl:for-each select="vuln:vulnerable-software-list/vuln:product"> <xsl:value-of select='str:replace(str:replace( str:decode-uri(text()), "%7E", "~"), "'", "''")'/> <xsl:text> </xsl:text> </xsl:for-each>'); <xsl:for-each select="vuln:vulnerable-software-list/vuln:product"> <xsl:variable name="decoded_cpe" select=' str:replace( str:replace( str:decode-uri(text()), "%7E", "~"), "'", "''")'/> SELECT merge_cpe ('<xsl:value-of select="$decoded_cpe"/>', '<xsl:value-of select="$decoded_cpe"/>'); SELECT merge_affected_product ((SELECT id FROM cves WHERE uuid='<xsl:value-of select="../../@id"/>'), (SELECT id FROM cpes WHERE name='<xsl:value-of select="$decoded_cpe"/>')); </xsl:for-each> </xsl:template> <xsl:template match="/"> <!-- Activate delete triggers for replace --> <!-- FIX PRAGMA recursive_triggers='ON'; --> SET search_path TO scap; BEGIN TRANSACTION; CREATE FUNCTION merge_cve (uuid_arg TEXT, name_arg TEXT, creation_time_arg INTEGER, modification_time_arg INTEGER, cvss_arg FLOAT, description_arg TEXT, vector_arg TEXT, complexity_arg TEXT, authentication_arg TEXT, confidentiality_impact_arg TEXT, integrity_impact_arg TEXT, availability_impact_arg TEXT, products_arg TEXT) RETURNS VOID AS $$ BEGIN LOOP UPDATE cves SET name = name_arg, creation_time = creation_time_arg, modification_time = modification_time_arg, cvss = cvss_arg, description = description_arg, vector = vector_arg, complexity = complexity_arg, authentication = authentication_arg, confidentiality_impact = confidentiality_impact_arg, integrity_impact = integrity_impact_arg, availability_impact = availability_impact_arg, products = products_arg WHERE uuid = uuid_arg; IF found THEN RETURN; END IF; BEGIN INSERT INTO cves (uuid, name, creation_time, modification_time, cvss, description, vector, complexity, authentication, confidentiality_impact, integrity_impact, availability_impact, products) VALUES (uuid_arg, name_arg, creation_time_arg, modification_time_arg, cvss_arg, description_arg, vector_arg, complexity_arg, authentication_arg, confidentiality_impact_arg, integrity_impact_arg, availability_impact_arg, products_arg); RETURN; EXCEPTION WHEN unique_violation THEN -- Try again. END; END LOOP; END; $$ LANGUAGE plpgsql; CREATE FUNCTION merge_cpe (uuid_arg TEXT, name_arg TEXT) RETURNS VOID AS $$ BEGIN LOOP UPDATE cpes SET name = name_arg WHERE uuid = uuid_arg; IF found THEN RETURN; END IF; BEGIN INSERT INTO cpes (uuid, name) VALUES (uuid_arg, name_arg); RETURN; EXCEPTION WHEN unique_violation THEN -- Try again. END; END LOOP; END; $$ LANGUAGE plpgsql; CREATE FUNCTION merge_affected_product (cve_arg INTEGER, cpe_arg INTEGER) RETURNS VOID AS $$ BEGIN LOOP UPDATE affected_products SET cve = cve_arg, cpe = cpe_arg WHERE cve = cve_arg AND cpe = cpe_arg; IF found THEN RETURN; END IF; BEGIN INSERT INTO affected_products (cve, cpe) VALUES (cve_arg, cpe_arg); RETURN; EXCEPTION WHEN unique_violation THEN -- Try again. END; END LOOP; END; $$ LANGUAGE plpgsql; <xsl:apply-templates/> DROP FUNCTION merge_cve (uuid_arg TEXT, name_arg TEXT, creation_time_arg INTEGER, modification_time_arg INTEGER, cvss_arg FLOAT, description_arg TEXT, vector_arg TEXT, complexity_arg TEXT, authentication_arg TEXT, confidentiality_impact_arg TEXT, integrity_impact_arg TEXT, availability_impact_arg TEXT, products_arg TEXT); DROP FUNCTION merge_affected_product (cve_arg INTEGER, cpe_arg INTEGER); DROP FUNCTION merge_cpe (uuid_arg TEXT, name_arg TEXT); COMMIT; </xsl:template> </xsl:stylesheet> ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/openvas-certdata-sync.in������������������������������������������������000644 �001751 �001751 �00000043236 12557600612 023577� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/bin/sh # # OpenVAS # $Id: $ # Description: Synchronize with CERT data feed. # # Authors: # Timo Pollmeier <timo.pollmeier@greenbone.net> # # Copyright: # Copyright (C) 2013 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. POSTGRES=0 SCHEMA_CERT="" SCHEMA_SCAP="" RECURSIVE_TRIGGERS_OFF="PRAGMA recursive_triggers = OFF;" ATTACH_SCAP="" if [ "@BACKEND@" = "POSTGRESQL" ]; then POSTGRES=1 SCHEMA_CERT="cert." SCHEMA_SCAP="scap." RECURSIVE_TRIGGERS_OFF="" fi # configure CERT_DIR where we will sync CERT data if [ -z "$CERT_DIR" ]; then CERT_DIR=@OPENVAS_CERT_DATA_DIR@ fi CERT_DB="$CERT_DIR/cert.db" # configure SCAP_DIR where we will get CVE data if [ -z "$SCAP_DIR" ]; then OPENVASSD=`which openvassd` if [ -z "$OPENVASSD" ] ; then echo "[e] Error: openvassd is not in the path, could not determine SCAP directory." exit 1 else # get the parent directory of the plugins SCAP_DIR=`openvassd -s | awk -F" = " '/^plugins_folder/ { print $2 }' | sed -s 's/\(^.*\)\/plugins/\1/'` # suffix it with "scap-data" which is our target (destination) directory SCAP_DIR="$SCAP_DIR/scap-data" fi fi SCAP_DB="$SCAP_DIR/scap.db" if [ ! $POSTGRES -eq 1 ] ; then ATTACH_SCAP="ATTACH DATABASE '$SCAP_DB' AS scap;" fi # private directory if [ -z "$PRIVATE_SUBDIR" ] then PRIVATE_SUBDIR="private" fi # delete options for rsync RSYNC_DELETE="--delete --exclude \"/cert.db\" --exclude \"$PRIVATE_SUBDIR/\"" # Script and feed information which will be made available to user through # command line options and automated tools. SCRIPT_NAME="openvas-certdata-sync" VERSION=@OPENVASMD_VERSION@ CERT_RES_DIR=@OPENVAS_CERT_RES_DIR@ RESTRICTED=0 # Maximum number of retries if database is locked if [ -z "$MAX_SQL_RETRIES" ]; then MAX_SQL_RETRIES="1" # 0 : try only once fi # Delay between retries if [ -z "$SQL_RETRY_DELAY" ]; then SQL_RETRY_DELAY="10m" # allowed unit suffixes: see sleep command fi TIMESTAMP="$CERT_DIR/timestamp" if [ -z "$FEED_NAME" ] ; then FEED_NAME="OpenVAS CERT Feed" fi if [ -z "$FEED_VENDOR" ] ; then FEED_VENDOR="The OpenVAS Project" fi if [ -z "$FEED_HOME" ] ; then FEED_HOME="http://www.openvas.org/" fi if [ -z "$OV_CERT_RSYNC_FEED" ]; then OV_CERT_RSYNC_FEED=rsync://feed.openvas.org:/cert-data # An alternative syntax which might work if the above doesn't: # OV_RSYNC_FEED=rsync@feed.openvas.org::cert-data fi if [ -z "$TMPDIR" ]; then SYNC_TMP_DIR=/tmp # If we have mktemp, create a temporary dir (safer) if [ -n "`which mktemp`" ]; then SYNC_TMP_DIR=`mktemp -t -d openvas-cert-data-sync.XXXXXXXXXX` || { echo "ERROR: Cannot create temporary directory for file download" >&2; exit 1 ; } trap "rm -rf $SYNC_TMP_DIR" EXIT HUP INT TRAP TERM fi else SYNC_TMP_DIR="$TMPDIR" fi do_help () { echo "$0: Sync CERT advisory data" echo "OpenVAS administrator functions:" echo " --migrate migrate database without downloading feed data" echo " --refresh refresh database without downloading feed data" echo " --selftest perform self-test" echo " --identify display information" echo " --version display version" echo " --describe display current CERT feed info" echo " --feedversion display current CERT feed version" echo "Options:" if [ $POSTGRES -eq 1 ]; then echo " --database database name" fi echo "" echo "Environment variables:" echo "CERT_DIR where to place CERT advisories" echo "OV_CERT_RSYNC_FEED URL of rsync feed" echo "TMPDIR temporary directory used to download the files" echo "PRIVATE_SUBDIR subdirectory to exclude from deletion by rsync" echo "" exit 0 } CMD_RSYNC=`which rsync` CMD_SQLITE=`which sqlite3` SQLITE="sqlite3 -noheader -bail" TMP_CERT="$SYNC_TMP_DIR/openvas-feed-`date +%F`-$$.tar.bz2" chk_system_tools () { echo "[i] Searching for required system tools (look for warnings/errors)..." if [ -z "$CMD_RSYNC" ]; then echo "[w] Warning: RSYNC not found"; fi if [ -z "$CMD_SQLITE" ]; then echo "[e] Error: sqlite3 not found (required)"; exit 1 fi if [ -z "$CMD_RSYNC" ]; then SELFTEST_FAIL=1 fi echo "[i] If you did not get any warnings, that means you have all tools required" } do_rsync () { if [ -z "$CMD_RSYNC" ]; then echo "[w] rsync not found!" else echo "[i] Using rsync: $CMD_RSYNC" echo "[i] Configured CERT data rsync feed: $OV_CERT_RSYNC_FEED" mkdir -p "$CERT_DIR" eval "$CMD_RSYNC -ltvrP $RSYNC_DELETE \"$OV_CERT_RSYNC_FEED\" \"$CERT_DIR\"" if [ $? -ne 0 ] ; then echo "Error: rsync failed. Your CERT data might be broken now." exit 1 fi fi } do_self_test () { chk_system_tools } do_describe () { echo "This script synchronizes a CERT advisory collection with the '$FEED_NAME'." echo "The '$FEED_NAME' is provided by '$FEED_VENDOR'." echo "Online information about this feed: '$FEED_HOME'." } do_feedversion () { if [ -r $TIMESTAMP ] ; then echo `cat $TIMESTAMP` fi } show_intro () { echo "[i] This script synchronizes a CERT advisory directory with the OpenVAS one." if [ $POSTGRES -eq 1 ] ; then echo "[i] This script is for the PostgreSQL backend." else echo "[i] This script is for the SQLite3 backend." fi echo "[i] CERT dir: $CERT_DIR" } do_sync () { if [ -z "$CMD_RSYNC" ] ; then echo "[w] rsync not found!" echo -n "[e] no utility available in PATH environment variable to download CERT data" exit 1 else echo "[i] Will use rsync" do_rsync fi } set_interrupt_trap () { trap "handle_interrupt X" 2 } handle_interrupt () { echo "$1:X" >&3 } reset_sql_tries () { try_sql=1 sql_retries=0 } test_exit_codes () { try_sql=0 if [ -n "$exit_codes" ] then for item in $exit_codes do command=`echo "$item" | cut -d':' -f1` code=`echo "$item" | cut -d':' -f2` if [ "X" = "$code" ] then echo "[e] $1: Sync script was interrupted" exit 1 elif [ "sqlite3" = "$command" ] \ && ( [ "5" = "$code" ] || [ "1" = "$code" ] ) then if [ "5" = "$code" ] then echo "[w] CERT database is locked" else echo "[w] Could not access CERT database, file may be locked." fi if [ "$MAX_SQL_RETRIES" -gt "$sql_retries" ] then sql_retries=$((sql_retries + 1)) echo "[i] Will try to access database again later in $SQL_RETRY_DELAY. (Retry $sql_retries of $MAX_SQL_RETRIES)" try_sql=1 sleep "$SQL_RETRY_DELAY" else echo "[e] $1: Gave up trying to access CERT database." exit 1 fi else echo "[e] $1: $command exited with code $code" exit 1 fi done fi } test_sql_exit () { exit_code=$? try_sql=0 if ( [ "5" = "$exit_code" ] || [ "1" = "$exit_code" ] ) then if [ "5" = "$exit_code" ] then echo "[w] CERT database is locked." else echo "[w] Could not access CERT database, file may be locked." fi if [ "$MAX_SQL_RETRIES" -gt "$sql_retries" ] then sql_retries=$((sql_retries + 1)) echo "[i] Will try to access database again later in $SQL_RETRY_DELAY. (Retry $sql_retries of $MAX_SQL_RETRIES)" try_sql=1 sleep "$SQL_RETRY_DELAY" else echo "[e] $1: Gave up trying to access CERT database." exit 1 fi elif [ 0 -ne "$exit_code" ] then echo "[e] $1: sqlite3 exited with code $exit_code." exit 1 fi } reinit () { echo "[i] Major change in internal CERT data structures." echo "[i] Reinitialization of database necessary." echo "[i] This update might take a while.." reset_sql_tries until [ "$try_sql" -eq 0 ] do sql < $CERT_RES_DIR/cert_db_init.sql test_sql_exit "Could not reinitialize CERT database" done } PSQL="" psql_setup () { PSQL="psql -v ON_ERROR_STOP=1 -q --pset pager=off --no-align -d $1 -t" } sql_pg () { if [ "$#" -gt 0 ] then $PSQL -c "$1" else $PSQL -f - fi exit_code=$? if [ 0 -ne "$exit_code" ] then echo "[e] psql exited with code $exit_code for sql: $1." exit 1 fi } sql_scap () { if [ $POSTGRES -eq 1 ] then if [ "$#" -gt 0 ] then sql_pg "$1" else sql_pg $* fi else if [ "$#" -gt 0 ] then $SQLITE $SCAP_DB "$1" else $SQLITE $SCAP_DB $* fi fi } sql () { if [ $POSTGRES -eq 1 ] then if [ "$#" -gt 0 ] then sql_pg "$1" else sql_pg $* fi else if [ "$#" -gt 0 ] then $SQLITE $CERT_DB "$1" else $SQLITE $CERT_DB $* fi fi } check_db_version () { DB_VERSION=`sql "select value from ${SCHEMA_CERT}meta where name = 'database_version';" 2>/dev/null | tr -d '\n\r' || echo 0` case "$DB_VERSION" in 0) reinit;; 1) reinit;; 2) reinit;; 3) reinit;; 4) reinit;; 5) reinit;; esac } scap_db_exists () { if [ $POSTGRES -eq 1 ] ; then EXISTS=`sql_pg "SELECT exists (SELECT schema_name FROM information_schema.schemata WHERE schema_name = 'scap');" 2>/tmp/ERR | tr -d '\n\r' || echo 0` if [ "$EXISTS" = "f" ] ; then return 1; fi return 0; elif [ -f $SCAP_DB ] then return 0; fi return 1; } cert_db_exists () { if [ $POSTGRES -eq 1 ] ; then EXISTS=`sql_pg "SELECT exists (SELECT schema_name FROM information_schema.schemata WHERE schema_name = 'cert');" 2>/tmp/ERR | tr -d '\n\r' || echo 0` if [ "$EXISTS" = "f" ] ; then return 1; fi return 0; elif [ -f $CERT_DB ] then return 0; fi return 1; } cert_db_remove () { if [ $POSTGRES -eq 1 ] ; then sql_pg "DROP SCHEMA IF EXISTS cert CASCADE;" else rm -f $CERT_DB fi } update_cvss () { if ! scap_db_exists; then echo "[w] SCAP database not found. Cannot update max_cvss." else reset_sql_tries until [ "$try_sql" -eq 0 ] do SCAP_DB_LASTUPDATE=`sql_scap "SELECT value FROM ${SCHEMA_SCAP}meta WHERE name = 'last_update';"` test_sql_exit "Could not get last_update timestamp from SCAP database" done if [ 0 -ne "$updated_cb" ] || [ $SCAP_DB_LASTUPDATE -gt $DB_LASTUPDATE ] then echo "[i] Updating Max CVSS for CERT-Bund" reset_sql_tries until [ "$try_sql" -eq 0 ] do sql "${ATTACH_SCAP} ${RECURSIVE_TRIGGERS_OFF} UPDATE ${SCHEMA_CERT}cert_bund_advs SET max_cvss = ( SELECT max(cvss) FROM scap.cves WHERE name IN ( SELECT cve_name FROM ${SCHEMA_CERT}cert_bund_cves WHERE adv_id=cert_bund_advs.id ) AND cvss != 0.0 );" test_sql_exit "Could not update CVSS scores for CERT-Bund Advisories" done else echo "[i] No CERT-Bund advisories updated and CERT DB newer than SCAP DB. Skipping CVSS recalculation." fi if [ 0 -ne "$updated_dfn" ] || [ $SCAP_DB_LASTUPDATE -gt $DB_LASTUPDATE ] then echo "[i] Updating Max CVSS for DFN-CERT" reset_sql_tries until [ "$try_sql" -eq 0 ] do sql "${ATTACH_SCAP} ${RECURSIVE_TRIGGERS_OFF} UPDATE ${SCHEMA_CERT}dfn_cert_advs SET max_cvss = ( SELECT max(cvss) FROM scap.cves WHERE name IN ( SELECT cve_name FROM ${SCHEMA_CERT}dfn_cert_cves WHERE adv_id=dfn_cert_advs.id ) AND cvss != 0.0 );" test_sql_exit "Could not update CVSS scores for DFN-CERT Advisories" done else echo "[i] No DFN-CERT advisories updated and CERT DB newer than SCAP DB. Skipping CVSS recalculation." fi fi } update_sec_db () { if [ -z "$updated_cb" ] then updated_cb=0 fi if [ -z "$updated_dfn" ] then updated_dfn=0 fi if cert_db_exists then check_db_version reset_sql_tries until [ "$try_sql" -eq 0 ] do CB_REFDATE=`sql "SELECT max(modification_time) from ${SCHEMA_CERT}cert_bund_advs;"` test_sql_exit "Could not get CERT-Bund reference date from database" done reset_sql_tries until [ "$try_sql" -eq 0 ] do DFN_REFDATE=`sql "SELECT max(modification_time) from ${SCHEMA_CERT}dfn_cert_advs;"` test_sql_exit "Could not get DFN-CERT reference date from database" done else echo "[i] Initializing CERT advisory database" reset_sql_tries until [ "$try_sql" -eq 0 ] do sql < $CERT_RES_DIR/cert_db_init.sql test_sql_exit "Could not initialize CERT database" done DB_LASTUPDATE=0 fi if [ -z "$CB_REFDATE" ] then CB_REFDATE=0 fi if [ -z "$DFN_REFDATE" ] then DFN_REFDATE=0 fi reset_sql_tries until [ "$try_sql" -eq 0 ] do DB_LASTUPDATE=`sql "SELECT value FROM ${SCHEMA_CERT}meta WHERE name = 'last_update';"` test_sql_exit "Could not get last_update timestamp from CERT database" done if [ -z "$DB_LASTUPDATE" ] then # Happens when initial sync was aborted echo "Error: Inconsistent data. Resetting CERT database." cert_db_remove reset_sql_tries until [ "$try_sql" -eq 0 ] do sql < $CERT_RES_DIR/cert_db_init.sql test_sql_exit "Could not reinitialize CERT database" done CB_REFDATE=0 DFN_REFDATE=0 DB_LASTUPDATE=0 fi # Update CERT-Bund xmlcount=$(ls $CERT_DIR/CB-K*.xml 2> /dev/null | wc -l) if [ $xmlcount -ne 0 ] then for certfile in `ls $CERT_DIR/CB-K*.xml` do filedate=`stat -c "%Y" $certfile | cut -d " " -f 1 | tr -d "-"` filedate=$(( $filedate - ( $filedate % 60 ) )) if [ $filedate -gt $DB_LASTUPDATE ] then echo "[i] Updating $certfile" reset_sql_tries until [ "$try_sql" -eq 0 ] do exec 4>&1 exit_codes=$( ( set_interrupt_trap (xsltproc --stringparam refdate "$CB_REFDATE" $CERT_RES_DIR/cert_bund_update.xsl $certfile || echo "xsltproc:$?" >&3) | \ (sql | sed '/^\s*$/d' || echo "sqlite3:$?" >&3) ) 3>&1 >&4 ) exec 4>&- test_exit_codes "Update of CERT-Bund Advisories failed at file '$certfile'" done updated_cb=1 else echo "[i] Skipping $certfile, file is older than last revision" fi done else echo "[w] No CERT-Bund advisories found in $CERT_DIR" fi # Update DFN-CERT xmlcount=$(ls $CERT_DIR/dfn-cert-*.xml 2> /dev/null | wc -l) if [ $xmlcount -ne 0 ] then for certfile in `ls $CERT_DIR/dfn-cert-*.xml` do filedate=`stat -c "%Y" $certfile | cut -d " " -f 1 | tr -d "-"` filedate=$(( $filedate - ( $filedate % 60 ) )) if [ $filedate -gt $DB_LASTUPDATE ] then echo "[i] Updating $certfile" reset_sql_tries until [ "$try_sql" -eq 0 ] do exec 4>&1 exit_codes=$( ( set_interrupt_trap (xsltproc --stringparam refdate "$DFN_REFDATE" $CERT_RES_DIR/dfn_cert_update.xsl $certfile || echo "xsltproc:$?" >&3) | \ (sql | sed '/^\s*$/d' || echo "sqlite3:$?" >&3) ) 3>&1 >&4 ) exec 4>&- test_exit_codes "Update of DFN-CERT Advisories failed at file '$certfile'" done updated_dfn=1 else echo "[i] Skipping $certfile, file is older than last revision" fi done else echo "[w] No DFN-CERT advisories found in $CERT_DIR" fi update_cvss LAST_UPDATE_TIMESTAMP=`sed 's/^\(.\{8\}\)/\1 /' $TIMESTAMP | env TZ="UTC" date +%s -f -` reset_sql_tries until [ "$try_sql" -eq 0 ] do sql "UPDATE ${SCHEMA_CERT}meta SET value ='$LAST_UPDATE_TIMESTAMP' WHERE name = 'last_update';" test_sql_exit "Could not update last_update timestamp in CERT database" done } do_refresh () { echo "[i] Refreshing database without feed sync." update_sec_db } psql_setup "tasks" if [ -n "$1" ]; then while test $# -gt 0; do case "$1" in --help) do_help exit 0 ;; --refresh) do_refresh exit 0 ;; --migrate) do_refresh exit 0 ;; --check) exit 0 ;; --version) echo $VERSION exit 0 ;; --identify) echo "CERTSYNC|$SCRIPT_NAME|$VERSION|$FEED_NAME|$RESTRICTED|CERTSYNC" exit 0 ;; --selftest) SELFTEST_FAIL=0 do_self_test exit $SELFTEST_FAIL ;; --describe) do_describe exit 0 ;; --feedversion) do_feedversion exit 0 ;; --database) if [ $POSTGRES -eq 1 ] ; then shift if [ $# -gt 0 ]; then psql_setup $1 else echo "[e] --database argument missing" exit 1 fi else echo "[e] --database option available only for Postgres" exit 1 fi ;; esac shift done fi show_intro do_sync update_sec_db exit 0 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/cpe_youngerthan.xsl�����������������������������������������������������000644 �001751 �001751 �00000004313 12557600612 022750� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <!-- OpenVAS $Id: cpe_youngerthan.xsl 20229 2014-09-01 13:13:29Z mwiegand $ Description: Select CPEs which have been updated after a certain date. Authors: Henri Doreau <henri.doreau@greenbone.net> Copyright: Copyright (C) 2011 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/0.3" xmlns:meta="http://scap.nist.gov/schema/cpe-dictionary-metadata/0.2" xmlns:ns6="http://scap.nist.gov/schema/scap-core/0.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:config="http://scap.nist.gov/schema/configuration/0.1" xmlns:cpe="http://cpe.mitre.org/dictionary/2.0" xsi:schemaLocation="http://scap.nist.gov/schema/configuration/0.1 http://nvd.nist.gov/schema/configuration_0.1.xsd http://scap.nist.gov/schema/scap-core/0.3 http://nvd.nist.gov/schema/scap-core_0.3.xsd http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.2.xsd http://scap.nist.gov/schema/scap-core/0.1 http://nvd.nist.gov/schema/scap-core_0.1.xsd http://scap.nist.gov/schema/cpe-dictionary-metadata/0.2 http://nvd.nist.gov/schema/cpe-dictionary-metadata_0.2.xsd" xmlns:date="http://exslt.org/dates-and-times" extension-element-prefixes="date"> <xsl:template match="cpe:cpe-list"> <xsl:copy> <xsl:for-each select="cpe:cpe-item[floor (date:seconds (meta:item-metadata/@modification-date)) > number($refdate)]"> <xsl:copy-of select="."/> </xsl:for-each> </xsl:copy> </xsl:template> </xsl:stylesheet> ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/database-statistics-sqlite����������������������������������������������000755 �001751 �001751 �00000005401 12557600612 024206� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/bin/sh # # database-statistics-sqlite # Collects statistics for an OpenVAS Manager SQLite database # # Copyright (C) 2014 Greenbone Networks GmbH # # Authors: # Michael Wiegand <michael.wiegand@greenbone.net> # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License along # with this program; if not, write to the Free Software Foundation, Inc., # 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. # SCRIPT_NAME is the name the scripts will use to identify itself and to mark # log messages. SCRIPT_NAME="database-statistics-sqlite" # LOG_CMD defines the command to use for logging. To have logger log to stderr # as well as syslog, add "-s" here. LOG_CMD="logger -t $SCRIPT_NAME" log_write () { $LOG_CMD -p daemon.notice $1 } if [ $# -ne 1 ] then echo "Please provide the filename of the SQLite database to check:" echo " $0 tasks.db" exit 1 fi SQLITE3="sqlite3 -noheader -bail" DATABASE="$1" UNUSED_PAGES_COUNT=$($SQLITE3 "$DATABASE" "PRAGMA freelist_count;") SUPERFLUOUS_ITG_RESULT_COUNT=$($SQLITE3 "$DATABASE" "SELECT COUNT() FROM results WHERE nvt = '1.3.6.1.4.1.25623.1.0.94000' AND port = 'general/IT-Grundschutz' AND ROWID NOT IN (SELECT ROWID FROM results AS outer_results WHERE length (description) = (SELECT max (length (description)) FROM results WHERE report = outer_results.report AND host = outer_results.host AND nvt = '1.3.6.1.4.1.25623.1.0.94000' AND port = 'general/IT-Grundschutz') AND nvt = '1.3.6.1.4.1.25623.1.0.94000' AND port = 'general/IT-Grundschutz' GROUP BY report, host);") SUPERFLUOUS_OPEN_PORT_RESULT_COUNT=$($SQLITE3 "$DATABASE" "SELECT COUNT() FROM results WHERE nvt = '0';"); OLD_STYLE_RESULT_LOCATION_COUNT=$($SQLITE3 "$DATABASE" "SELECT COUNT() FROM results WHERE port LIKE '%)';"); DUPLICATE_CONFIG_PREFERENCES_COUNT=$($SQLITE3 "$DATABASE" "SELECT COUNT () FROM (SELECT config, type, name, value FROM config_preferences GROUP BY config, type, name, value HAVING COUNT() > 1);"); log_write "Unused pages: $UNUSED_PAGES_COUNT" log_write "Superfluous ITG results: $SUPERFLUOUS_ITG_RESULT_COUNT" log_write "Superfluous 'Open Port' results: $SUPERFLUOUS_OPEN_PORT_RESULT_COUNT" log_write "Old style result locations: $OLD_STYLE_RESULT_LOCATION_COUNT" log_write "Duplicate config preferences: $DUPLICATE_CONFIG_PREFERENCES_COUNT" exit 0 ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/extra/README������������������������������������������������������������000644 �001751 �001751 �00000001045 12557600612 021030� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager/tools/extra This directory is for tools that are not necessary for openvas-manager, but could be useful in some particular cases. xml_split: This utility is able to split a huge XML file in a memory efficient way, while keeping the exact structure and content of the original file. This can be used for instance during scap-update on machines that are low on RAM to reduce the amount of necessary RAM to perform the update. How to enable: In the *scap-data-sync script use a value greater than 0 for variable "SPLIT_PART_SIZE". �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/extra/xml_split���������������������������������������������������������000755 �001751 �001751 �00000015552 12557600612 022121� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/usr/bin/env python # OpenVAS Manager # $Id$ # Description: Script to split an xml file in a memory efficient way # # Authors: # Benoit Allard <benoit.allard@greenbone.net> # # Copyright: # Copyright (C) 2014 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. import os import xml.parsers.expat from xml.sax.saxutils import escape from optparse import OptionParser from math import log10 # How much data we process at a time CHUNK_SIZE = 1024 * 1024 # The sequence of element leading us to the current one path = [] # How far we are in the current file cur_size = 0 # From how much should we start another file MAX_SIZE = 1024*1024 # 1Mb # The current index cur_idx = 0 # The current file handle we are writing to cur_file = None # The format string used to introduce the index in the file to be written FMT = ".%d" # The filename we are playing with out_dir = None root = None ext = None # The xml declaration of the file. xml_declaration = None # What was the signature of the last start element start = None # if we are currently in the process of changing file ending = False def attrs_s(attrs): """ This generate the XML attributes from an element attribute list """ l = [''] for i in range(0,len(attrs), 2): l.append('%s="%s"' % (attrs[i], escape(attrs[i+1]))) return ' '.join(l) def next_file(): """ This makes the decision to cut the current file and starta new one """ # We only want to split the files between <entry> if len(path) != 1: return global cur_size, ending if (not ending) and (cur_size > MAX_SIZE): # size above threshold, and not already ending global cur_file, cur_idx print "part %d Done" % cur_idx ending = True # Close the current elements for elem in reversed(path): end_element(elem[0]) # Close the file cur_file.close() # reset the size cur_size = 0 # Open another file cur_idx += 1 cur_file = open(os.path.join(out_dir, root + FMT % cur_idx + ext), 'wt') if xml_declaration is not None: cur_file.write('<?xml%s?>\n' % attrs_s(xml_declaration)) # Start again where we stopped for elem in path: start_element(*elem) # We are done 'ending' ending = False def xml_decl(version, encoding, standalone): global xml_declaration l = ['version', version, 'encoding', encoding] if standalone != -1: l.extend(['standalone', 'yes' if standalone else 'no']) xml_declaration = l cur_file.write('<?xml%s?>\n' % attrs_s(xml_declaration)) def start_element(name, attrs): """ Called by the parser when he meet a start element """ global cur_size, start if start is not None: # Chaining starts after each others cur_file.write('<%s%s>' % (start[0], attrs_s(start[1]))) start = (name, attrs) if ending: return cur_size += len(name) + sum(len(k) for k in attrs) path.append((name, attrs)) def end_element(name): """ Caled by the parser when he meet an end element """ global cur_size global start if start is not None: # Empty element, good, we did not wrote the start part cur_file.write('<%s%s/>' % (start[0],attrs_s(start[1]))) else: # There was some data, close it normaly cur_file.write('</%s>' % name) start = None if ending: return elem = path.pop() assert elem[0] == name cur_size += len(name) next_file() def char_data(data): """ Called by the parser when he meet data """ global cur_size, start wroteStart = False if start is not None: # The data belong to an element, we should write the start part first cur_file.write('<%s%s>' % (start[0], attrs_s(start[1]))) start = None wroteStart = True # ``escape`` is too much for us, only & and < ned to be escaped there ... data = data.replace('&', '&') data = data.replace('<', '<') if data == '>': data = '>' cur_file.write(data.encode('utf-8')) cur_size += len(data) if not wroteStart: # The data was outside of an element, it could be the right moment to # make the split next_file() def main(filepath, output_dir): # Create a parser p = xml.parsers.expat.ParserCreate() # We want to reproduce the input, so we are interested in the order of the # attributess p.ordered_attributes = 1 # Set our callbacks (we are stripping comments out by not defining # callbacks for them) p.XmlDeclHandler = xml_decl p.StartElementHandler = start_element p.EndElementHandler = end_element p.CharacterDataHandler = char_data global cur_file, cur_idx global out_dir, root, ext global FMT FMT = ".%%0%dd" % (int(log10(float(os.path.getsize(filepath)) / MAX_SIZE)) + 1) out_dir, filename = os.path.split(filepath) if output_dir is not None: out_dir = output_dir root, ext = os.path.splitext(filename) cur_file = open(os.path.join(out_dir, root + FMT % cur_idx + ext), 'wt') with open(filepath, 'rt') as xml_file: while True: # Read a chunk chunk = xml_file.read(CHUNK_SIZE) if len(chunk) < CHUNK_SIZE: # End of file # tell the parser we're done p.Parse(chunk, 1) # exit the loop break # process the chunk p.Parse(chunk) # Don't forget to close our handle cur_file.close() print "part %d Done" % cur_idx if __name__ == "__main__": parser = OptionParser(usage="usage: %prog [options] XML_FILE") parser.add_option("-o", "--output-dir", help="Specify the directory where the xml files will be written" \ "(default to the same directory where the original file is)") parser.add_option("-M", "--max_size", type="int", help="Specify the size at which the files should be split (in Kb)") (options, args) = parser.parse_args() if len(args) != 1: parser.error("incorrect number of arguments") if options.max_size is not None: MAX_SIZE = options.max_size * 1024 main(args[0], options.output_dir) ������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/cert_bund_update_pg.xsl�������������������������������������������������000644 �001751 �001751 �00000012341 12557600612 023553� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <!-- OpenVAS $Id$ Description: Generate SQL (Postgres compatible) queries to update the CERT-Bund tables of the CERT database. Authors: Timo Pollmeier <timo.pollmeier@greenbone.net> Copyright: Copyright (C) 2014 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cb="http://www.cert-bund.de" xmlns:str="http://exslt.org/strings" xmlns:date="http://exslt.org/dates-and-times" xmlns:func="http://exslt.org/functions" xmlns:openvas="http://openvas.org" extension-element-prefixes="str date func openvas"> <xsl:output method="text"/> <xsl:param name="refdate" select="'0'"/> <func:function name="openvas:sql-quote"> <xsl:param name="sql"/> <xsl:variable name="single">'</xsl:variable> <xsl:variable name="pair">''</xsl:variable> <func:result select="str:replace ($sql, $single, $pair)"/> </func:function> <xsl:template match="/"> SET search_path TO cert; BEGIN TRANSACTION; CREATE FUNCTION merge_bund_adv (uuid_arg TEXT, name_arg TEXT, comment_arg TEXT, creation_time_arg INTEGER, modification_time_arg INTEGER, title_arg TEXT, summary_arg TEXT, cve_refs_arg INTEGER) RETURNS VOID AS $$ BEGIN LOOP UPDATE cert_bund_advs SET name = name_arg, comment = comment_arg, creation_time = creation_time_arg, modification_time = modification_time_arg, title = title_arg, summary = summary_arg, cve_refs = cve_refs_arg WHERE uuid = uuid_arg; IF found THEN RETURN; END IF; BEGIN INSERT INTO cert_bund_advs (uuid, name, comment, creation_time, modification_time, title, summary, cve_refs) VALUES (uuid_arg, name_arg, comment_arg, creation_time_arg, modification_time_arg, title_arg, summary_arg, cve_refs_arg); RETURN; EXCEPTION WHEN unique_violation THEN -- Try again. END; END LOOP; END; $$ LANGUAGE plpgsql; CREATE FUNCTION merge_bund_cve (adv_id_arg INTEGER, cve_name_arg TEXT) RETURNS VOID AS $$ BEGIN <!-- The SQLite3 version does INSERT OR REPLACE but there is no primary key, so just INSERT. LOOP UPDATE cert_bund_cves SET cve_name = cve_name_arg WHERE adv_id = adv_id_arg; IF found THEN RETURN; END IF; BEGIN INSERT INTO cert_bund_cves (adv_id, cve_name) VALUES (adv_id_arg, cve_name_arg); RETURN; EXCEPTION WHEN unique_violation THEN /* Try again. */ END; END LOOP; --> INSERT INTO cert_bund_cves (adv_id, cve_name) VALUES (adv_id_arg, cve_name_arg); END; $$ LANGUAGE plpgsql; <xsl:apply-templates select="Advisories"/> DROP FUNCTION merge_bund_adv (uuid_arg TEXT, name_arg TEXT, comment_arg TEXT, creation_time_arg INTEGER, modification_time_arg INTEGER, title_arg TEXT, summary_arg TEXT, cve_refs_arg INTEGER); DROP FUNCTION merge_bund_cve (adv_id_arg INTEGER, cve_name_arg TEXT); COMMIT; </xsl:template> <xsl:template match="Advisory"> <xsl:choose> <xsl:when test="floor (date:seconds (str:replace (Date, ' ', 'T'))) >= number($refdate)"> SELECT merge_bund_adv ('<xsl:value-of select="Ref_Num"/>', '<xsl:value-of select="Ref_Num"/>', '', <xsl:value-of select="floor (date:seconds (str:replace (Date, ' ', 'T')))"/>, <xsl:value-of select="floor (date:seconds (str:replace (Date, ' ', 'T')))"/>, '<xsl:value-of select="openvas:sql-quote (Title/text())"/>', '<xsl:for-each select="Description/Element/TextBlock"> <xsl:value-of select="openvas:sql-quote (text())"/> <xsl:if test="position() != last()"><xsl:text> </xsl:text></xsl:if> </xsl:for-each>', <xsl:value-of select="count(CVEList/CVE)"/>); <xsl:for-each select="CVEList/CVE"> SELECT merge_bund_cve ((SELECT id FROM cert_bund_advs WHERE name = '<xsl:value-of select="../../Ref_Num"/>'), '<xsl:value-of select="."/>'::text); </xsl:for-each> </xsl:when> <xsl:otherwise> /* filtered entry dated <xsl:value-of select="Date"/> */ </xsl:otherwise> </xsl:choose> </xsl:template> </xsl:stylesheet> �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/openvas-scapdata-sync.in������������������������������������������������000755 �001751 �001751 �00000112766 12557600612 023600� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/bin/sh # # OpenVAS # $Id: openvas-scapdata-sync.in 21677 2015-02-18 15:01:24Z timopollmeier $ # Description: Synchronize with SCAP data feed. # # Authors: # Henri Doreau <henri.doreau@greenbone.net> # Timo Pollmeier <timo.pollmeier@greenbone.net> # # Copyright: # Copyright (C) 2011-2013 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. POSTGRES=0 SCHEMA="" RECURSIVE_TRIGGERS_OFF="PRAGMA recursive_triggers = OFF;" if [ "@BACKEND@" = "POSTGRESQL" ]; then POSTGRES=1 SCHEMA="scap." RECURSIVE_TRIGGERS_OFF="" fi # configure SCAP_DIR where we will sync SCAP data if [ -z "$SCAP_DIR" ]; then SCAP_DIR=@OPENVAS_SCAP_DATA_DIR@ fi SEC_DB="$SCAP_DIR/scap.db" # private directory if [ -z "$PRIVATE_SUBDIR" ] then PRIVATE_SUBDIR="private" fi # delete options for rsync RSYNC_DELETE="--delete --exclude \"/scap.db\" --exclude \"$PRIVATE_SUBDIR/\"" # Script and feed information which will be made available to user through # command line options and automated tools. SCRIPT_NAME="openvas-scapdata-sync" VERSION=@OPENVASMD_VERSION@ SCAP_RES_DIR=@OPENVAS_SCAP_RES_DIR@ RESTRICTED=0 # Maximum number of retries if database is locked if [ -z "$MAX_SQL_RETRIES" ]; then MAX_SQL_RETRIES="1" # 0 : try only once fi # Delay between retries if [ -z "$SQL_RETRY_DELAY" ]; then SQL_RETRY_DELAY="10m" # allowed unit suffixes: see sleep command fi TIMESTAMP="$SCAP_DIR/timestamp" if [ -z "$FEED_NAME" ] ; then FEED_NAME="OpenVAS SCAP Feed" fi if [ -z "$FEED_VENDOR" ] ; then FEED_VENDOR="The OpenVAS Project" fi if [ -z "$FEED_HOME" ] ; then FEED_HOME="http://www.openvas.org/" fi # The URL of the plugin feed if [ -z "$OV_RSYNC_FEED" ]; then OV_RSYNC_FEED=rsync://feed.openvas.org:/scap-data # An alternative syntax which might work if the above doesn't: # OV_RSYNC_FEED=rsync@feed.openvas.org::scap-data fi if [ -z "$OV_HTTP_FEED" ]; then OV_HTTP_FEED=http://www.openvas.org/openvas-scap-data-current.tar.bz2 fi if [ -z "$TMPDIR" ]; then SYNC_TMP_DIR=/tmp # If we have mktemp, create a temporary dir (safer) if [ -n "`which mktemp`" ]; then SYNC_TMP_DIR=`mktemp -t -d openvas-scap-data-sync.XXXXXXXXXX` || { echo "[e] Error: Cannot create temporary directory for file download" >&2; exit 1 ; } trap "rm -rf $SYNC_TMP_DIR" EXIT HUP INT TRAP TERM fi else SYNC_TMP_DIR="$TMPDIR" fi # When set to 1, all OVAL definitions will be updated, not just new ones. # This is usually done by database migrations. REBUILD_OVAL=0 # Whether to output extra data VERBOSE=0 # Split CVE data files into parts of this size in kB. 0 = no splitting SPLIT_PART_SIZE=0 do_help () { echo "$0: Sync SCAP data using different protocols" echo " --rsync sync with rsync (default)" echo " --migrate migrate database without downloading feed data" echo " --refresh update database without downloading feed data" echo " --refresh-private update database only using private data" echo " --check just checksum check" echo "OpenVAS administrator functions:" echo " --selftest perform self-test" echo " --identify display information" echo " --version display version" echo " --describe display current scap feed info" echo " --feedversion display current scap feed version" echo "Options:" echo " --verbose enable verbose log messages" if [ $POSTGRES -eq 1 ]; then echo " --database database name" fi echo "" echo "Environment variables:" echo "SCAP_DIR where to extract plugins (absolute path)" echo "OV_RSYNC_FEED URL of rsync feed" echo "OV_HTTP_FEED URL of http feed" echo "TMPDIR temporary directory used to download the files" echo "PRIVATE_SUBDIR subdirectory to exclude from deletion by rsync" echo "Note that you can use standard ones as well (e.g. http_proxy) for wget/curl" echo "" exit 0 } CMD_RSYNC=`which rsync` CMD_SQLITE=`which sqlite3` SQLITE="sqlite3 -noheader -bail" TMP_SCAP="$SYNC_TMP_DIR/openvas-feed-`date +%F`-$$.tar.bz2" chk_system_tools () { echo "[i] Searching for required system tools (look for warnings/errors)..." if [ -z "$CMD_RSYNC" ]; then echo "[w] Warning: RSYNC not found"; fi if [ -z "$CMD_SQLITE" ]; then echo "[e] Error: sqlite3 not found (required)"; exit 1 fi # if [ -z "$CMD_RSYNC" -a -z "$CMD_WGET" -a -z "$CMD_CURL" ]; then if [ -z "$CMD_RSYNC" ]; then SELFTEST_FAIL=1 fi echo "[i] If you did not get any warnings, that means you have all tools required" } do_rsync () { if [ -z "$CMD_RSYNC" ]; then echo "[w] rsync not found!" else echo "[i] Using rsync: $CMD_RSYNC" echo "[i] Configured SCAP data rsync feed: $OV_RSYNC_FEED" mkdir -p "$SCAP_DIR" eval "$CMD_RSYNC -ltvrP $RSYNC_DELETE \"$OV_RSYNC_FEED\" \"$SCAP_DIR\"" if [ $? -ne 0 ] ; then echo "[e] Error: rsync failed. Your SCAP data might be broken now." exit 1 fi fi } do_wget () { echo "[w] Download of SCAP data via HTTP is currently not supported!" exit 1 } do_curl () { echo "[w] Download of SCAP data via HTTP is currently not supported!" exit 1 } do_self_test () { chk_system_tools } do_describe () { echo "This script synchronizes a SCAP collection with the '$FEED_NAME'." echo "The '$FEED_NAME' is provided by '$FEED_VENDOR'." echo "Online information about this feed: '$FEED_HOME'." } do_feedversion () { if [ -r $TIMESTAMP ] ; then echo `cat $TIMESTAMP` fi } show_intro () { echo "[i] This script synchronizes a SCAP data directory with the OpenVAS one." if [ $POSTGRES -eq 1 ] ; then echo "[i] This script is for the PostgreSQL backend." else echo "[i] This script is for the SQLite3 backend." fi echo "[i] SCAP dir: $SCAP_DIR" } do_sync () { if [ -z "$CMD_RSYNC" ] ; then echo -n "[e] no utility available in PATH environment variable to download plugins" exit 1 else echo "[i] Will use rsync" do_rsync fi } set_interrupt_trap () { trap "handle_interrupt $1" 2 } handle_interrupt () { echo "$1:X" >&3 } reset_sql_tries () { try_sql=1 sql_retries=0 } test_exit_codes () { try_sql=0 if [ -n "$exit_codes" ] then for item in $exit_codes do command=`echo "$item" | cut -d':' -f1` code=`echo "$item" | cut -d':' -f2` if [ "X" = "$code" ] then echo "[e] $1: Sync script was interrupted" exit 1 elif [ "sqlite3" = "$command" ] \ && ( [ "5" = "$code" ] || [ "1" = "$code" ] ) then if [ "5" = "$code" ] then echo "[w] SCAP database is locked" else echo "[w] Could not access SCAP database, file may be locked." fi if [ "$MAX_SQL_RETRIES" -gt "$sql_retries" ] then sql_retries=$((sql_retries + 1)) echo "[i] Will try to access database again later in $SQL_RETRY_DELAY. (Retry $sql_retries of $MAX_SQL_RETRIES)" try_sql=1 sleep "$SQL_RETRY_DELAY" else echo "[e] $1: Gave up trying to access SCAP database." exit 1 fi else echo "[e] $1: $command exited with code $code" exit 1 fi done fi } test_sql_exit () { exit_code=$? try_sql=0 if ( [ "5" = "$exit_code" ] || [ "1" = "$exit_code" ] ) then if [ "5" = "$exit_code" ] then echo "[w] SCAP database is locked." else echo "[w] Could not access SCAP database, file may be locked." fi if [ "$MAX_SQL_RETRIES" -gt "$sql_retries" ] then sql_retries=$((sql_retries + 1)) echo "[i] Will try to access database again later in $SQL_RETRY_DELAY. (Retry $sql_retries of $MAX_SQL_RETRIES)" try_sql=1 sleep "$SQL_RETRY_DELAY" else echo "[e] $1: Gave up trying to access SCAP database." exit 1 fi elif [ 0 -ne "$exit_code" ] then echo "[e] $1: sqlite3 exited with code $exit_code." exit 1 fi } reinit () { echo "[i] Major change in internal SCAP data structures." echo "[i] Reinitialization of database necessary." echo "[i] This update might take a while.." reset_sql_tries until [ "$try_sql" -eq 0 ] do sql < $SCAP_RES_DIR/scap_db_init.sql test_sql_exit "Could not reinitialize SCAP database" done } db_migrate_9 () { echo "[i] Migrating database to version 9." reset_sql_tries until [ "$try_sql" -eq 0 ] do $SQLITE "$SEC_DB" "DROP INDEX IF EXISTS afp_idx; CREATE INDEX afp_cpe_idx ON affected_products (cpe); CREATE INDEX afp_cve_idx ON affected_products (cve); UPDATE meta SET value = '9' WHERE name = 'database_version';" test_sql_exit "Could not migrate SCAP database" echo "[i] Migration done." done } db_migrate_10 () { echo "[i] Migrating database to version 10." reset_sql_tries until [ "$try_sql" -eq 0 ] do $SQLITE "$SEC_DB" "DROP TRIGGER affected_delete; CREATE TRIGGER affected_delete AFTER DELETE ON affected_products BEGIN UPDATE cpes set max_cvss = 0.0 WHERE id = old.cpe; UPDATE cpes set cve_refs = cve_refs -1 WHERE id = old.cpe; END; UPDATE meta SET value = '10' WHERE name = 'database_version';" test_sql_exit "Could not migrate SCAP database" done echo "[i] Migration done." } db_migrate_11 () { echo "[i] Migrating database to version 11." if [ 1 != "$REFRESH_PRIVATE_ONLY" ] then reset_sql_tries until [ "$try_sql" -eq 0 ] do $SQLITE "$SEC_DB" "ALTER TABLE ovaldefs ADD COLUMN status TEXT; UPDATE meta SET value = '11' WHERE name = 'database_version'; " test_sql_exit "Could not migrate SCAP database" done REBUILD_OVAL=1 echo "[i] Migration done." else echo "[w] Migration to version 11 requires refresh of all SCAP data. Aborting." exit 1 fi } db_migrate_12 () { echo "[i] Migrating database to version 12." if [ 1 != "$REFRESH_PRIVATE_ONLY" ] then reset_sql_tries until [ "$try_sql" -eq 0 ] do $SQLITE "$SEC_DB" "DROP TABLE ovaldefs; DROP INDEX IF EXISTS ovaldefs_idx; CREATE TABLE ovaldefs ( id INTEGER PRIMARY KEY AUTOINCREMENT, uuid UNIQUE, name, comment, creation_time DATE, modification_time DATE, version INTEGER, deprecated BOOLEAN, def_class TEXT, title TEXT, description TEXT, xml_file TEXT, status TEXT ); CREATE INDEX ovaldefs_idx ON ovaldefs (name); CREATE TABLE ovalfiles ( id INTEGER PRIMARY KEY AUTOINCREMENT, xml_file TEXT UNIQUE ); CREATE UNIQUE INDEX ovalfiles_idx ON ovalfiles (xml_file); CREATE TRIGGER ovalfiles_delete AFTER DELETE ON ovalfiles BEGIN DELETE FROM ovaldefs WHERE ovaldefs.xml_file = old.xml_file; END; UPDATE meta SET value = '12' WHERE name = 'database_version'; " test_sql_exit "Could not migrate SCAP database" done REBUILD_OVAL=1 echo "[i] Migration done." else echo "[i] Migration to version 12 requires refresh of all SCAP data. Aborting." exit 1 fi } db_migrate_13 () { echo "[i] Migrating database to version 13." reset_sql_tries until [ "$try_sql" -eq 0 ] do $SQLITE "$SEC_DB" "ALTER TABLE cpes ADD COLUMN nvd_id; UPDATE cpes SET nvd_id = uuid, uuid = name; UPDATE meta SET value = '13' WHERE name = 'database_version'; " test_sql_exit "Could not migrate SCAP database" done echo "[i] Migration done." } db_migrate_14 () { echo "[i] Migrating database to version 14." reset_sql_tries until [ "$try_sql" -eq 0 ] do $SQLITE "$SEC_DB" "ALTER TABLE ovaldefs ADD COLUMN max_cvss FLOAT; ALTER TABLE ovaldefs ADD COLUMN cve_refs INTEGER; CREATE TABLE affected_ovaldefs ( cve INTEGER NOT NULL, ovaldef INTEGER NOT NULL, FOREIGN KEY(cve) REFERENCES cves(id), FOREIGN KEY(ovaldef) REFERENCES ovaldefs(id) ); CREATE INDEX aff_ovaldefs_def_idx ON affected_ovaldefs (ovaldef); CREATE INDEX aff_ovaldefs_cve_idx ON affected_ovaldefs (cve); DROP TRIGGER IF EXISTS cves_delete; CREATE TRIGGER cves_delete AFTER DELETE ON cves BEGIN DELETE FROM affected_products where cve = old.id; DELETE FROM affected_ovaldefs where cve = old.id; END; CREATE TRIGGER affected_ovaldefs_delete AFTER DELETE ON affected_ovaldefs BEGIN UPDATE ovaldefs SET max_cvss = 0.0 WHERE id = old.ovaldef; END; UPDATE meta SET value = '14' WHERE name = 'database_version'; " test_sql_exit "Could not migrate SCAP database" done echo "[i] Migration done." REBUILD_OVAL=1 } db_migrate_15 () { echo "[i] Migrating database to version 15." reset_sql_tries until [ "$try_sql" -eq 0 ] do $SQLITE "$SEC_DB" "CREATE INDEX IF NOT EXISTS cpes_by_creation_time_idx ON cpes (creation_time); CREATE INDEX IF NOT EXISTS cpes_by_modification_time_idx ON cpes (modification_time); CREATE INDEX IF NOT EXISTS cpes_by_cvss ON cpes (max_cvss); CREATE INDEX IF NOT EXISTS cves_by_creation_time_idx ON cves (creation_time); CREATE INDEX IF NOT EXISTS cves_by_modification_time_idx ON cves (modification_time); CREATE INDEX IF NOT EXISTS cves_by_cvss ON cves (cvss); UPDATE meta SET value = '15' WHERE name = 'database_version'; " test_sql_exit "Could not migrate SCAP database" done echo "[i] Migration done." } PSQL="" psql_setup () { PSQL="psql -v ON_ERROR_STOP=1 -q --pset pager=off --no-align -d $1 -t" } sql_pg () { if [ "$#" -gt 0 ] then $PSQL -c "$1" else $PSQL -f - fi exit_code=$? if [ 0 -ne "$exit_code" ] then echo "[e] psql exited with code $exit_code for sql: $1." exit 1 fi } sql () { if [ $POSTGRES -eq 1 ] then if [ "$#" -gt 0 ] then sql_pg "$1" else sql_pg $* fi else if [ "$#" -gt 0 ] then $SQLITE $SEC_DB "$1" else $SQLITE $SEC_DB $* fi fi } check_db_version () { DB_VERSION=`sql "select value from ${SCHEMA}meta where name = 'database_version';" 2>/dev/null | tr -d '\n\r' || echo 0` case "$DB_VERSION" in 0) reinit;; 1) reinit;; 2) reinit;; 3) reinit;; 4) reinit;; 5) reinit;; 6) reinit;; 7) reinit;; 8) if [ $POSTGRES -eq 1 ] then reinit else db_migrate_9 db_migrate_10 db_migrate_11 db_migrate_12 db_migrate_13 db_migrate_14 db_migrate_15 fi;; 9) if [ $POSTGRES -eq 1 ] then reinit else db_migrate_10 db_migrate_11 db_migrate_12 db_migrate_13 db_migrate_14 db_migrate_15 fi;; 10) if [ $POSTGRES -eq 1 ] then reinit else db_migrate_11 db_migrate_12 db_migrate_13 db_migrate_14 db_migrate_15 fi;; 11) if [ $POSTGRES -eq 1 ] then reinit else db_migrate_12 db_migrate_13 db_migrate_14 db_migrate_15 fi;; 12) if [ $POSTGRES -eq 1 ] then reinit else db_migrate_13 db_migrate_14 db_migrate_14 fi;; 13) if [ $POSTGRES -eq 1 ] then reinit else db_migrate_14 db_migrate_15 fi;; 14) if [ $POSTGRES -eq 1 ] then reinit else db_migrate_15 fi;; esac } sec_db_remove () { if [ $POSTGRES -eq 1 ] ; then sql_pg "DROP SCHEMA IF EXISTS scap CASCADE;" else rm -f $SEC_DB fi } sec_db_exists () { if [ $POSTGRES -eq 1 ] ; then EXISTS=`sql_pg "SELECT exists (SELECT schema_name FROM information_schema.schemata WHERE schema_name = 'scap');" 2>/tmp/ERR | tr -d '\n\r' || echo 0` if [ "$EXISTS" = "f" ] ; then return 1; fi return 0; elif [ -f "$SEC_DB" ] then return 0; fi return 1; } init_sec_db_update () { if sec_db_exists; then check_db_version reset_sql_tries until [ "$try_sql" -eq 0 ] do CVE_REFDATE=`sql "SELECT max(modification_time) from ${SCHEMA}cves;"` test_sql_exit "Could not get reference date for CVEs and CPEs" done else echo "[i] Initializing scap database" reset_sql_tries until [ "$try_sql" -eq 0 ] do sql < $SCAP_RES_DIR/scap_db_init.sql test_sql_exit "Could not initialize SCAP database" done DB_LASTUPDATE=0 CVE_REFDATE=0 OVAL_REFDATE=0 fi reset_sql_tries until [ "$try_sql" -eq 0 ] do DB_LASTUPDATE=`sql "select value from ${SCHEMA}meta where name = 'last_update';"` test_sql_exit "Could not get last_update timestamp from database" done if [ -z "$CVE_REFDATE" ] then CVE_REFDATE=0 fi if [ -z "$DB_LASTUPDATE" ] then # Happens when initial sync was aborted echo "[e] Error: Inconsistent data. Resetting SCAP database." sec_db_remove reset_sql_tries until [ "$try_sql" -eq 0 ] do sql < $SCAP_RES_DIR/scap_db_init.sql test_sql_exit "Could not reinitialize SCAP database" done CVE_REFDATE=0 OVAL_REFDATE=0 DB_LASTUPDATE=0 fi updated_cpes=0 updated_cves=0 updated_ovaldefs=0 } list_oval_files_sorted () { for line in `list_oval_files_sortable "$1" | sort` do echo ${line#????????} done } list_oval_files_sortable () { for ovalfile in `find "$1" -name "*.xml" -type f` do timestamp_raw="" timestamp_raw=`xsltproc "$SCAP_RES_DIR/oval_timestamp.xsl" "$ovalfile" 2>/dev/null` if [ -n "$timestamp_raw" ] \ && [ -n `echo "$timestamp_raw" | egrep -x "[0-9]{4}\-(0[0-9]|1[012])\-([0-2][0-9]|3[01])[[:alnum:]]*"` ] then timestamp="`echo "$timestamp_raw" | sed -e 's/T.*//' | tr -d "-"`" echo "$timestamp$ovalfile" fi done } update_cvss () { if [ 0 -ne $updated_cves ] || [ 0 -ne $updated_cpes ] then echo "[i] Updating CVSS scores and CVE counts for CPEs" reset_sql_tries until [ "$try_sql" -eq 0 ] do sql " ${RECURSIVE_TRIGGERS_OFF} UPDATE ${SCHEMA}cpes SET max_cvss = ( SELECT max(cvss) FROM ${SCHEMA}cves WHERE id IN ( SELECT cve FROM ${SCHEMA}affected_products WHERE cpe=cpes.id ) ), cve_refs = ( SELECT count(cve) FROM ${SCHEMA}affected_products WHERE cpe=cpes.id ); " test_sql_exit "Could not update CVSS scores for CPEs" done else echo "[i] No CPEs or CVEs updated, skipping CVSS and CVE recount for CPEs." fi if [ 0 -ne $updated_cves ] || [ 0 -ne $updated_ovaldefs ] then echo "[i] Updating CVSS scores for OVAL definitions" reset_sql_tries until [ "$try_sql" -eq 0 ] do sql " ${RECURSIVE_TRIGGERS_OFF} UPDATE ${SCHEMA}ovaldefs SET max_cvss = ( SELECT max(cvss) FROM ${SCHEMA}cves WHERE id IN ( SELECT cve FROM ${SCHEMA}affected_ovaldefs WHERE ovaldef=ovaldefs.id ) AND cvss != 0.0 ); " test_sql_exit "Could not update CVSS scores for OVAL definitions" done else echo "[i] No OVAL definitions or CVEs updated, skipping CVSS recount for OVAL definitions." fi } update_placeholders () { if [ 0 -ne $updated_cves ] then echo "[i] Updating placeholder CPEs" reset_sql_tries until [ "$try_sql" -eq 0 ] do sql " UPDATE ${SCHEMA}cpes SET creation_time = ( SELECT min(creation_time) FROM ${SCHEMA}cves WHERE id IN ( SELECT cve FROM ${SCHEMA}affected_products WHERE cpe=cpes.id ) ), modification_time = ( SELECT min(creation_time) FROM ${SCHEMA}cves WHERE id IN ( SELECT cve FROM ${SCHEMA}affected_products WHERE cpe=cpes.id ) ) WHERE cpes.title IS NULL AND (cpes.creation_time IS NULL OR cpes.modification_time IS NULL); " test_sql_exit "Could not update placeholder CPEs" done else echo "[i] No CVEs updated, skipping placeholder CPE update." fi } update_sec_db_private () { SCAP_PRIVATE_DIR="$SCAP_DIR/$PRIVATE_SUBDIR" if [ -d "$SCAP_PRIVATE_DIR" ] then echo "[i] Updating user defined data" echo "[i] Updating user OVAL definitions" xmlcount=0 xmlcount=$(find "$SCAP_PRIVATE_DIR/oval/" -name "*.xml" -type f 2> /dev/null | wc -l) if [ -n "$xmlcount" ] && [ $xmlcount -ne 0 ] then if [ -z "$oval_files_sorted" ] then oval_files_sorted=`list_oval_files_sorted "$SCAP_DIR/oval/"` ovaldir_xml_files=`find "$SCAP_DIR/oval/" -name "*.xml" -type f 2> /dev/null` for xml_file in $ovaldir_xml_files do if [ -z `echo "$oval_files_sorted" | grep -x "$xml_file"` ] then echo "[w] Cannot find valid OVAL timestamp in '$xml_file'." fi done fi oval_files_sorted_private=`list_oval_files_sorted "$SCAP_PRIVATE_DIR/oval/"` ovaldir_xml_files=`find "$SCAP_PRIVATE_DIR/oval/" -name "*.xml" -type f 2> /dev/null` for xml_file in $ovaldir_xml_files do if [ -z `echo "$oval_files_sorted_private" | grep -x "$xml_file"` ] then echo "[w] Cannot find valid OVAL timestamp in '$xml_file'." fi done for non_xml_file in `find "$SCAP_PRIVATE_DIR/oval/" -type f -and -not -name "*.xml" 2> /dev/null` do if [ "${non_xml_file%%.asc}" = "${non_xml_file}" ] || ! [ -f "${non_xml_file%%.asc}" ] then echo "[w] Found non-XML and non-signature file '$non_xml_file'." fi done if [ -n "$oval_files_sorted" ] then for ovalfile in $oval_files_sorted_private do filedate=`stat -c "%Y" "$ovalfile" | cut -d " " -f 1 | tr -d "-"` filedate=$(( $filedate - ( $filedate % 60 ) )) if [ $filedate -gt $DB_LASTUPDATE ] || [ 1 = "$REBUILD_OVAL" ] then oval_timestamp=`xsltproc "$SCAP_RES_DIR/oval_timestamp.xsl" "$ovalfile" | date "+%s" -f -` if [ 1 = "$REBUILD_OVAL" ] then OVAL_REFDATE=0 else reset_sql_tries until [ "$try_sql" -eq 0 ] do OVAL_REFDATE=`sql "SELECT max(modification_time) FROM ${SCHEMA}ovaldefs WHERE xml_file = '${ovalfile##$SCAP_DIR/}';"` test_sql_exit "Could not get OVAL reference date" done if [ -z "$OVAL_REFDATE" ] then OVAL_REFDATE=0 fi fi if [ $oval_timestamp -gt $OVAL_REFDATE ] then validation_message=`xsltproc "$SCAP_RES_DIR/oval_verify.xsl" "$ovalfile" 2>/dev/null` validation_return="$?" if [ 0 -ne $validation_return ] && [ -n "$validation_message" ] then if [ 10 -eq $validation_return ] then echo "[w] Validation of file '$ovalfile' failed: $validation_message" else echo "[w] Error parsing '$ovalfile'." fi else if ! [ "$validation_message" = "file valid" ] then echo "[w] Validation of file '$ovalfile' failed: $validation_message" else echo "[i] Updating $ovalfile" reset_sql_tries until [ "$try_sql" -eq 0 ] do exec 4>&1 exit_codes=$( ( set_interrupt_trap (xsltproc --stringparam filename "${ovalfile##$SCAP_DIR/}" --stringparam refdate "$OVAL_REFDATE" "$SCAP_RES_DIR/oval_update.xsl" "$ovalfile" || echo "xsltproc:$?" >&3) | \ (sql | sed '/^\s*$/d' || echo "sqlite3:$?" >&3) ) 3>&1 >&4 ) exec 4>&- test_exit_codes "Update of OVAL definitions failed at file '$ovalfile'" done updated_ovaldefs=1 fi fi else echo "[i] Skipping $ovalfile, file has older timestamp than latest OVAL definition in database." fi else echo "[i] Skipping $ovalfile, file is older than last revision." fi done fi else echo "[i] No user defined OVAL files found" fi echo "[i] Cleaning up user OVAL data" DIR_STR_LENGTH=$((`echo "$SCAP_DIR" | wc -c` + 1)) oval_files_shortened="" if [ 0 != "$xmlcount" ] then for ovalfile in $oval_files_sorted_private do oval_files_shortened=$oval_files_shortened"', '"`echo $ovalfile | cut -c ${DIR_STR_LENGTH}- ` done oval_files_shortened=${oval_files_shortened##"', "}"'" fi oval_files_clause="" if [ ! -z "$oval_files_shortened" ] then oval_files_clause="AND (xml_file NOT IN ($oval_files_shortened))" fi reset_sql_tries until [ "$try_sql" -eq 0 ] do deleted=`sql "SELECT DISTINCT xml_file FROM ${SCHEMA}ovaldefs WHERE (xml_file NOT LIKE 'oval/%') $oval_files_clause;"` test_sql_exit "Could not get list of deleted OVAL XML files" done if [ -n "$deleted" ] then echo "[i] Removing definitions formerly inserted from:" echo "$deleted" reset_sql_tries until [ "$try_sql" -eq 0 ] do sql "DELETE FROM ${SCHEMA}ovaldefs WHERE (xml_file NOT LIKE 'oval/%') $oval_files_clause;" test_sql_exit "Could not remove deleted OVAL definitions from database" done fi # TODO: This is not quite accurate as it uses the timestamp of the non-private data. LAST_UPDATE_TIMESTAMP=`sed 's/^\(.\{8\}\)/\1 /' $TIMESTAMP | date +%s -f -` reset_sql_tries until [ "$try_sql" -eq 0 ] do sql "UPDATE ${SCHEMA}meta SET value ='$LAST_UPDATE_TIMESTAMP' WHERE name = 'last_update';" test_sql_exit "Could not update last_update timestamp in database" done else echo "[i] No user data directory '$SCAP_PRIVATE_DIR' found." fi } update_sec_db () { init_sec_db_update CPEBASE="$SCAP_DIR/official-cpe-dictionary_v2.2.xml" if [ -e $CPEBASE ] then filedate=`stat -c "%Y" "$CPEBASE" | cut -d " " -f 1 | tr -d "-"` filedate=$(( $filedate - ( $filedate % 60 ) )) if [ $filedate -gt $DB_LASTUPDATE ] then echo "[i] Updating CPEs" filesize=`stat -c "%s" "$CPEBASE"` if [ "0" -ne "$SPLIT_PART_SIZE" ] && [ "$filesize" -gt $(($SPLIT_PART_SIZE * 1024)) ] then echo "[i] File is larger than ${SPLIT_PART_SIZE}k. Splitting into multiple parts" "$SCAP_RES_DIR/xml_split" "$CPEBASE" -M "$SPLIT_PART_SIZE" -o "$SYNC_TMP_DIR" cpefile_nodir=${CPEBASE##*/} for cpepart in `find "$SYNC_TMP_DIR" -path "$SYNC_TMP_DIR/${cpefile_nodir%%.xml}.*.xml" 2> /dev/null | sort` do echo "[i] Updating part $cpepart" reset_sql_tries until [ "$try_sql" -eq 0 ] do exec 4>&1 exit_codes=$( ( set_interrupt_trap (sed 's/&/&/g' $cpepart || echo "sed:$?" >&3 ) | \ (xsltproc --stringparam refdate $CVE_REFDATE $SCAP_RES_DIR/cpe_youngerthan.xsl - || echo "xsltproc:$?" >&3) | \ (xsltproc $SCAP_RES_DIR/cpe_update.xsl - || echo "xsltproc:$?" >&3) | \ (sql | sed '/^\s*$/d' || echo "sqlite3:$?" >&3) \ ) 3>&1 >&4 ) exec 4>&- test_exit_codes "Update of CPEs failed" done done else reset_sql_tries until [ "$try_sql" -eq 0 ] do exec 4>&1 exit_codes=$( ( set_interrupt_trap (sed 's/&/&/g' $CPEBASE || echo "sed:$?" >&3 ) | \ (xsltproc --stringparam refdate $CVE_REFDATE $SCAP_RES_DIR/cpe_youngerthan.xsl - || echo "xsltproc:$?" >&3) | \ (xsltproc $SCAP_RES_DIR/cpe_update.xsl - || echo "xsltproc:$?" >&3) | \ (sql | sed '/^\s*$/d' || echo "sqlite3:$?" >&3) \ ) 3>&1 >&4 ) exec 4>&- test_exit_codes "Update of CPEs failed" done fi updated_cpes=1 else echo "[i] Skipping CPEs, file is older than last revision" fi else echo "[w] No CPE dictionary found in $SCAP_DIR" fi xmlcount=$(ls $SCAP_DIR/nvdcve-2.0-*.xml 2> /dev/null | wc -l) if [ $xmlcount -ne 0 ] then for cvefile in `ls $SCAP_DIR/nvdcve-2.0-*.xml` do filedate=`stat -c "%Y" "$cvefile" | cut -d " " -f 1 | tr -d "-"` filedate=$(( $filedate - ( $filedate % 60 ) )) if [ $filedate -gt $DB_LASTUPDATE ] then echo "[i] Updating $cvefile" filesize=`stat -c "%s" "$cvefile"` if [ "0" -ne "$SPLIT_PART_SIZE" ] && [ "$filesize" -gt $(($SPLIT_PART_SIZE * 1024)) ] then echo "[i] File is larger than ${SPLIT_PART_SIZE}k. Splitting into multiple parts" "$SCAP_RES_DIR/xml_split" "$cvefile" -M "$SPLIT_PART_SIZE" -o "$SYNC_TMP_DIR" cvefile_nodir=${cvefile##*/} for cvepart in `find "$SYNC_TMP_DIR" -path "$SYNC_TMP_DIR/${cvefile_nodir%%.xml}.*.xml" 2> /dev/null | sort` do echo "[i] Updating part $cvepart" reset_sql_tries until [ "$try_sql" -eq 0 ] do exec 4>&1 exit_codes=$( ( set_interrupt_trap (xsltproc --stringparam refdate $CVE_REFDATE $SCAP_RES_DIR/cve_youngerthan.xsl $cvepart || echo "xsltproc:$?" >&3) | \ (xsltproc $SCAP_RES_DIR/cve_update.xsl - || echo "xsltproc:$?" >&3) | \ (sql | sed '/^\s*$/d' || echo "sqlite3:$?" >&3) ) 3>&1 >&4 ) exec 4>&- rm "$cvepart" test_exit_codes "Update of CVEs failed at part '$cvepart'" done done else reset_sql_tries until [ "$try_sql" -eq 0 ] do exec 4>&1 exit_codes=$( ( set_interrupt_trap (xsltproc --stringparam refdate $CVE_REFDATE $SCAP_RES_DIR/cve_youngerthan.xsl $cvefile || echo "xsltproc:$?" >&3) | \ (xsltproc $SCAP_RES_DIR/cve_update.xsl - || echo "xsltproc:$?" >&3) | \ (sql | sed '/^\s*$/d' || echo "sqlite3:$?" >&3) ) 3>&1 >&4 ) exec 4>&- test_exit_codes "Update of CVEs failed at file '$cvefile'" done fi updated_cves=1 else echo "[i] Skipping $cvefile, file is older than last revision" fi done else echo "[w] No CVEs found in $SCAP_DIR" fi echo "[i] Updating OVAL data" xmlcount=$(find "$SCAP_DIR/oval/" -name "*.xml" -type f 2> /dev/null | wc -l) if [ $xmlcount -ne 0 ] then oval_files_sorted=`list_oval_files_sorted "$SCAP_DIR/oval/"` ovaldir_xml_files=`find "$SCAP_DIR/oval/" -name "*.xml" -type f 2> /dev/null` for xml_file in $ovaldir_xml_files do if [ -z `echo "$oval_files_sorted" | grep -x "$xml_file"` ] then echo "[w] Cannot find valid OVAL timestamp in '$xml_file'." fi done for ovalfile in $oval_files_sorted do filedate=`stat -c "%Y" "$ovalfile" | cut -d " " -f 1 | tr -d "-"` filedate=$(( $filedate - ( $filedate % 60 ) )) if [ $filedate -gt $DB_LASTUPDATE ] || [ 1 = "$REBUILD_OVAL" ] then oval_timestamp=`xsltproc "$SCAP_RES_DIR/oval_timestamp.xsl" "$ovalfile" | date "+%s" -f -` if [ 1 = "$REBUILD_OVAL" ] then OVAL_REFDATE=0 else reset_sql_tries until [ "$try_sql" -eq 0 ] do OVAL_REFDATE=`sql "SELECT max(modification_time) FROM ${SCHEMA}ovaldefs WHERE xml_file = '${ovalfile##$SCAP_DIR/}';"` test_sql_exit "Could not get OVAL reference date from database" done if [ -z "$OVAL_REFDATE" ] then OVAL_REFDATE=0 fi fi if [ $oval_timestamp -gt $OVAL_REFDATE ] then echo "[i] Updating $ovalfile" reset_sql_tries until [ "$try_sql" -eq 0 ] do exec 4>&1 exit_codes=$( ( set_interrupt_trap (xsltproc --stringparam filename "${ovalfile##$SCAP_DIR/}" --stringparam refdate "$OVAL_REFDATE" "$SCAP_RES_DIR/oval_update.xsl" "$ovalfile" || echo "xsltproc:$?" >&3) | \ (sql | sed '/^\s*$/d' || echo "sqlite3:$?" >&3) ) 3>&1 >&4 ) exec 4>&- test_exit_codes "Update of OVAL definitions failed at file '$ovalfile'" done updated_ovaldefs=1 else echo "[i] Skipping $ovalfile, file has older timestamp than latest OVAL definition in database." fi else echo "[i] Skipping $ovalfile, file is older than last revision." fi done else echo "[w] No XML files found in $SCAP_DIR/oval/." fi update_sec_db_private update_cvss update_placeholders LAST_UPDATE_TIMESTAMP=`sed 's/^\(.\{8\}\)/\1 /' $TIMESTAMP | env TZ="UTC" date +%s -f -` reset_sql_tries until [ "$try_sql" -eq 0 ] do sql "UPDATE ${SCHEMA}meta SET value ='$LAST_UPDATE_TIMESTAMP' WHERE name = 'last_update';" test_sql_exit "Could not update last_update timestamp in database" done } do_refresh () { echo "[i] Refreshing database without feed sync." update_sec_db } do_refresh_private () { REFRESH_PRIVATE_ONLY=1 init_sec_db_update update_sec_db_private update_cvss } psql_setup "tasks" if [ -n "$1" ]; then while test $# -gt 0; do case "$1" in --help) do_help exit 0 ;; --rsync) do_rsync exit 0 ;; --wget) do_wget exit 0 ;; --curl) do_curl exit 0 ;; --database) if [ $POSTGRES -eq 1 ] ; then shift if [ $# -gt 0 ]; then psql_setup $1 else echo "[e] --database argument missing" exit 1 fi else echo "[e] --database option available only for Postgres" exit 1 fi ;; --verbose) VERBOSE=1 ;; --refresh) do_refresh exit 0 ;; --migrate) do_refresh exit 0 ;; --refresh-private) do_refresh_private exit 0 ;; --check) exit 0 ;; --version) echo $VERSION exit 0 ;; --identify) echo "SCAPSYNC|$SCRIPT_NAME|$VERSION|$FEED_NAME|$RESTRICTED|SCAPSYNC" exit 0 ;; --selftest) SELFTEST_FAIL=0 do_self_test exit $SELFTEST_FAIL ;; --describe) do_describe exit 0 ;; --feedversion) do_feedversion exit 0 ;; esac shift done fi show_intro do_sync update_sec_db exit 0 ����������openvas-manager-6.0.9/tools/cpe_update_pg.xsl�������������������������������������������������������000644 �001751 �001751 �00000011642 12557600612 022360� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <!-- OpenVAS $Id: cpe_update.xsl 20229 2014-09-01 13:13:29Z mwiegand $ Description: Generate SQL (Postgres compatible) queries to update the CPE database. Authors: Henri Doreau <henri.doreau@greenbone.net> Copyright: Copyright (C) 2011, 2014 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/0.3" xmlns:meta="http://scap.nist.gov/schema/cpe-dictionary-metadata/0.2" xmlns:ns6="http://scap.nist.gov/schema/scap-core/0.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:config="http://scap.nist.gov/schema/configuration/0.1" xmlns:cpe="http://cpe.mitre.org/dictionary/2.0" xmlns:str="http://exslt.org/strings" xsi:schemaLocation="http://scap.nist.gov/schema/configuration/0.1 http://nvd.nist.gov/schema/configuration_0.1.xsd http://scap.nist.gov/schema/scap-core/0.3 http://nvd.nist.gov/schema/scap-core_0.3.xsd http://cpe.mitre.org/dictionary/2.0 http://cpe.mitre.org/files/cpe-dictionary_2.2.xsd http://scap.nist.gov/schema/scap-core/0.1 http://nvd.nist.gov/schema/scap-core_0.1.xsd http://scap.nist.gov/schema/cpe-dictionary-metadata/0.2 http://nvd.nist.gov/schema/cpe-dictionary-metadata_0.2.xsd" extension-element-prefixes="str" > <xsl:output method="text"/> <xsl:template match="cpe:cpe-item"> <xsl:variable name="decoded_name" select='str:replace( str:replace( str:decode-uri(@name), "%7E", "~"), "'", "''")'/> SELECT merge_cpe ('<xsl:value-of select="$decoded_name"/>', '<xsl:value-of select="$decoded_name"/>', '<xsl:value-of select='str:replace(cpe:title[@xml:lang = "en-US"], "'", "''")'/>', extract (epoch from '<xsl:value-of select="meta:item-metadata/@modification-date"/>'::timestamptz)::integer, extract (epoch from '<xsl:value-of select="meta:item-metadata/@modification-date"/>'::timestamptz)::integer, '<xsl:value-of select="meta:item-metadata/@status"/>', <xsl:call-template name="value_or_null"> <xsl:with-param name="value" select="meta:item-metadata/@deprecated-by-nvd-id"/> </xsl:call-template>, '<xsl:value-of select="meta:item-metadata/@nvd-id"/>' ); </xsl:template> <xsl:template match="cpe:generator"/> <xsl:template match="/"> SET search_path TO scap; BEGIN TRANSACTION; CREATE FUNCTION merge_cpe (uuid_arg TEXT, name_arg TEXT, title_arg TEXT, creation_time_arg INTEGER, modification_time_arg INTEGER, status_arg TEXT, deprecated_by_id_arg INTEGER, nvd_id_arg TEXT) RETURNS VOID AS $$ BEGIN LOOP UPDATE cpes SET name = name_arg, title = title_arg, creation_time = creation_time_arg, modification_time = modification_time_arg, status = status_arg, deprecated_by_id = deprecated_by_id_arg, nvd_id = nvd_id_arg WHERE uuid = uuid_arg; IF found THEN RETURN; END IF; BEGIN INSERT INTO cpes (uuid, name, title, creation_time, modification_time, status, deprecated_by_id, nvd_id) VALUES (uuid_arg, name_arg, title_arg, creation_time_arg, modification_time_arg, status_arg, deprecated_by_id_arg, nvd_id_arg); RETURN; EXCEPTION WHEN unique_violation THEN -- Try again. END; END LOOP; END; $$ LANGUAGE plpgsql; <xsl:apply-templates/> DROP FUNCTION merge_cpe (uuid_arg TEXT, name_arg TEXT, title_arg TEXT, creation_time_arg INTEGER, modification_time_arg INTEGER, status_arg TEXT, deprecated_by_id_arg INTEGER, nvd_id_arg TEXT); COMMIT; </xsl:template> <xsl:template name="value_or_null"> <xsl:param name="value"/> <xsl:choose> <xsl:when test="$value"> <xsl:value-of select="$value"/> </xsl:when> <xsl:otherwise> <xsl:text>NULL</xsl:text> </xsl:otherwise> </xsl:choose> </xsl:template> </xsl:stylesheet> ����������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/scap_db_init_pg.sql�����������������������������������������������������000644 �001751 �001751 �00000011700 12557600612 022651� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������/* * OpenVAS * $Id: scap_db_init.sql 20229 2014-09-01 13:13:29Z mwiegand $ * Description: Postgres SCAP database initialization script * * Authors: * Henri Doreau <henri.doreau@greenbone.net> * Timo Pollmeier <timo.pollmeier@greenbone.net> * * Copyright: * Copyright (C) 2011-2014 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ DROP SCHEMA IF EXISTS scap CASCADE; CREATE SCHEMA scap; SET search_path TO scap; /* Create new tables and indices. */ CREATE TABLE meta (id SERIAL PRIMARY KEY, name text UNIQUE, value text); INSERT INTO meta (name, value) VALUES ('database_version', '15'); INSERT INTO meta (name, value) VALUES ('last_update', '0'); CREATE TABLE cves ( id SERIAL PRIMARY KEY, uuid text UNIQUE, name text, comment text, description text, creation_time integer, modification_time integer, vector text, complexity text, authentication text, confidentiality_impact text, integrity_impact text, availability_impact text, products text, cvss FLOAT DEFAULT 0 ); CREATE UNIQUE INDEX cve_idx ON cves (name); CREATE INDEX cves_by_creation_time ON cves (creation_time); CREATE INDEX cves_by_creation_time_idx ON cves (creation_time); CREATE INDEX cves_by_modification_time_idx ON cves (modification_time); CREATE INDEX cves_by_cvss ON cves (cvss); CREATE TABLE cpes ( id SERIAL PRIMARY KEY, uuid text UNIQUE, name text, comment text, creation_time integer, modification_time integer, title text, status text, deprecated_by_id INTEGER, max_cvss FLOAT DEFAULT 0, cve_refs INTEGER DEFAULT 0, nvd_id text ); CREATE UNIQUE INDEX cpe_idx ON cpes (name); CREATE INDEX cpes_by_creation_time ON cpes (creation_time); CREATE INDEX cpes_by_creation_time_idx ON cpes (creation_time); CREATE INDEX cpes_by_modification_time_idx ON cpes (modification_time); CREATE INDEX cpes_by_cvss ON cpes (max_cvss); CREATE TABLE affected_products ( cve INTEGER NOT NULL, cpe INTEGER NOT NULL, FOREIGN KEY(cve) REFERENCES cves(id), FOREIGN KEY(cpe) REFERENCES cpes(id) ); CREATE INDEX afp_cpe_idx ON affected_products (cpe); CREATE INDEX afp_cve_idx ON affected_products (cve); CREATE TABLE ovaldefs ( id SERIAL PRIMARY KEY, uuid text UNIQUE, name text, /* OVAL identifier */ comment text, creation_time integer, modification_time integer, version INTEGER, deprecated INTEGER, def_class TEXT, /* enum */ title TEXT, description TEXT, xml_file TEXT, status TEXT, max_cvss FLOAT DEFAULT 0, cve_refs INTEGER DEFAULT 0 ); CREATE INDEX ovaldefs_idx ON ovaldefs (name); CREATE INDEX ovaldefs_by_creation_time ON ovaldefs (creation_time); CREATE TABLE ovalfiles ( id SERIAL PRIMARY KEY, xml_file TEXT UNIQUE ); CREATE UNIQUE INDEX ovalfiles_idx ON ovalfiles (xml_file); CREATE TABLE affected_ovaldefs ( cve INTEGER NOT NULL, ovaldef INTEGER NOT NULL, FOREIGN KEY(cve) REFERENCES cves(id), FOREIGN KEY(ovaldef) REFERENCES ovaldefs(id) ); CREATE INDEX aff_ovaldefs_def_idx ON affected_ovaldefs (ovaldef); CREATE INDEX aff_ovaldefs_cve_idx ON affected_ovaldefs (cve); /* Create deletion triggers. */ CREATE OR REPLACE FUNCTION scap_delete_affected () RETURNS TRIGGER AS $$ BEGIN DELETE FROM affected_products where cve = old.id; DELETE FROM affected_ovaldefs where cve = old.id; RETURN old; END; $$ LANGUAGE plpgsql; CREATE TRIGGER cves_delete AFTER DELETE ON cves FOR EACH ROW EXECUTE PROCEDURE scap_delete_affected (); CREATE OR REPLACE FUNCTION scap_update_cpes () RETURNS TRIGGER AS $$ BEGIN UPDATE cpes SET max_cvss = 0.0 WHERE id = old.cpe; UPDATE cpes SET cve_refs = cve_refs -1 WHERE id = old.cpe; RETURN old; END; $$ LANGUAGE plpgsql; CREATE TRIGGER affected_delete AFTER DELETE ON affected_products FOR EACH ROW EXECUTE PROCEDURE scap_update_cpes (); CREATE OR REPLACE FUNCTION scap_delete_oval () RETURNS TRIGGER AS $$ BEGIN DELETE FROM ovaldefs WHERE ovaldefs.xml_file = old.xml_file; RETURN old; END; $$ LANGUAGE plpgsql; CREATE TRIGGER ovalfiles_delete AFTER DELETE ON ovalfiles FOR EACH ROW EXECUTE PROCEDURE scap_delete_oval (); CREATE OR REPLACE FUNCTION scap_update_oval () RETURNS TRIGGER AS $$ BEGIN UPDATE ovaldefs SET max_cvss = 0.0 WHERE id = old.ovaldef; RETURN old; END; $$ LANGUAGE plpgsql; CREATE TRIGGER affected_ovaldefs_delete AFTER DELETE ON affected_ovaldefs FOR EACH ROW EXECUTE PROCEDURE scap_update_oval (); ����������������������������������������������������������������openvas-manager-6.0.9/tools/ovaldef_getbyname.xsl���������������������������������������������������000644 �001751 �001751 �00000003276 12557600612 023240� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <!-- OpenVAS $Id: cve_getbyname.xsl 11660 2011-09-22 14:22:40Z hdoreau $ Description: Select a CVE item by name. Authors: Henri Doreau <henri.doreau@greenbone.net> Copyright: Copyright (C) 2011 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:ns6="http://scap.nist.gov/schema/scap-core/0.1" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:str="http://exslt.org/strings" xmlns:oval="http://oval.mitre.org/XMLSchema/oval-common-5" xmlns:oval_definitions="http://oval.mitre.org/XMLSchema/oval-definitions-5" xsi:schemaLocation="http://oval.mitre.org/language/version5.10.1/ovaldefinition/complete/oval-common-schema.xsd http://oval.mitre.org/language/version5.10.1/ovaldefinition/complete/oval-definitions-schema.xsd" extension-element-prefixes="str" > <xsl:output method="html"/> <xsl:template match="/"> <xsl:copy-of select="//oval_definitions:definition[@id = $refname]"/> </xsl:template> </xsl:stylesheet> ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/greenbone-scapdata-sync.in����������������������������������������������000755 �001751 �001751 �00000127367 12631501053 024064� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/bin/sh # # greenbone-scap-sync # This script synchronizes an OpenVAS installation with the Greenbone SCAP # data directory. # # Authors: # Henri Doreau <henri.doreau@greenbone.net> # Michael Wiegand <michael.wiegand@greenbone.net> # Timo Pollmeier <timo.pollmeier@greenbone.net> # # Copyright: # Copyright (C) 2011-2014 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. VERSION=20150218 RESTRICTED=1 # SETTINGS # ======== POSTGRES=0 SCHEMA="" RECURSIVE_TRIGGERS_OFF="PRAGMA recursive_triggers = OFF;" if [ "@BACKEND@" = "POSTGRESQL" ]; then POSTGRES=1 SCHEMA="scap." RECURSIVE_TRIGGERS_OFF="" fi # PRIVATE_SUBDIR defines a subdirectory of the CERT data directory # where files not part of the feed or database will not be deleted by rsync. if [ -z "$PRIVATE_SUBDIR" ] then PRIVATE_SUBDIR="private" fi # RSYNC_DELETE controls whether files which are not part of the repository will # be removed from the local directory after synchronization. The default value # for this setting is # "--delete --exclude scap.db --exclude $PRIVATE_SUBDIR/", # which means that files which are not part of the feed, database or private # directory will be deleted. RSYNC_DELETE="--delete --exclude scap.db --exclude $PRIVATE_SUBDIR/" # RSYNC_SSH_OPTS contains options which should be passed to ssh for the rsync # connection to the repository. RSYNC_SSH_OPTS="-o \"UserKnownHostsFile=/dev/null\" -o \"StrictHostKeyChecking=no\"" # RSYNC_COMPRESS specifies the compression level to use for the rsync connection. RSYNC_COMPRESS="--compress-level=9" # PORT controls the outgoing TCP port for updates. If PAT/Port-Translation is # not used, this should be "24". For some application layer firewalls or gates # the value 22 (Standard SSH) is useful. Only change if you know what you are # doing. PORT=24 # If ENABLED is set to 0, the sync script will not perform a synchronization. ENABLED=1 # If REFRESH_ONLY is set to 1, the sync script will only update the OpenVAS # Manager database. This can be controlled via the --refresh parameter. REFRESH_ONLY=0 # If REFRESH_PRIVATE_ONLY is set to 1, the sync script will only update # private data in the OpenVAS Manager database. # This can be controlled via the --refresh-private parameter. REFRESH_PRIVATE_ONLY=0 # When set to 1, all OVAL definitions will be updated, not just new ones. # This is usually done by database migrations. REBUILD_OVAL=0 # Setting this to 1 enables verbose mode, which outputs additional data. # This is usually done with the option --verbose VERBOSE=0 # Split CVE data files into parts of this size in kB. 0 = no splitting SPLIT_PART_SIZE=0 # SQLITE3 defines the name of the sqlite binary to call, along with additional # parameters. SQLITE3="sqlite3 -noheader -bail" # PSQL defines the name of the Postgres binary to call, along with additional # parameters. PSQL="" psql_setup () { PSQL="psql -v ON_ERROR_STOP=1 -q --pset pager=off --no-align -d $1 -t" } # Maximum number of retries if database is locked if [ -z "$MAX_SQL_RETRIES" ]; then MAX_SQL_RETRIES="1" # 0 : try only once fi # Delay between retries if [ -z "$SQL_RETRY_DELAY" ]; then SQL_RETRY_DELAY="10m" # allowed unit suffixes: see sleep command fi # SCRIPT_NAME is the name the scripts will use to identify itself and to mark # log messages. SCRIPT_NAME="greenbone-scapdata-sync" # LOG_CMD defines the command to use for logging. To have logger log to stderr # as well as syslog, add "-s" here. LOG_CMD="logger -t $SCRIPT_NAME" [ -r @OPENVAS_SYSCONF_DIR@/greenbone-scapdata-sync.conf ] && . @OPENVAS_SYSCONF_DIR@/greenbone-scapdata-sync.conf BASE_SYNC_DIR="@OPENVAS_STATE_DIR@" SCAP_DIR="@OPENVAS_SCAP_DATA_DIR@" SCAP_RES_DIR="@OPENVAS_SCAP_RES_DIR@" SCAP_DB="$SCAP_DIR/scap.db" ACCESSKEY="@OPENVAS_SYSCONF_DIR@/gsf-access-key" TIMESTAMP="$SCAP_DIR/timestamp" if [ -z "$FEED_NAME" ] ; then FEED_NAME="Greenbone SCAP Feed" fi if [ -z "$FEED_VENDOR" ] ; then FEED_VENDOR="Greenbone Networks GmbH" fi if [ -z "$FEED_HOME" ] ; then FEED_HOME="http://www.greenbone.net/technology/gsf.html" fi RSYNC=`command -v rsync` if [ -z "$TMPDIR" ]; then SYNC_TMP_DIR=/tmp # If we have mktemp, create a temporary dir (safer) if [ -n "`which mktemp`" ]; then SYNC_TMP_DIR=`mktemp -t -d greenbone-scap-data-sync.XXXXXXXXXX` || { echo "[e] Error: Cannot create temporary directory for file download" >&2; exit 1 ; } trap "rm -rf $SYNC_TMP_DIR" EXIT HUP INT TRAP TERM fi else SYNC_TMP_DIR="$TMPDIR" fi do_describe () { echo "This script synchronizes a SCAP collection with the '$FEED_NAME'." echo "The '$FEED_NAME' is provided by '$FEED_VENDOR'." echo "Online information about this feed: '$FEED_HOME'." } do_feedversion () { if [ -r $TIMESTAMP ] ; then echo `cat $TIMESTAMP` fi } log_debug () { $LOG_CMD -p daemon.debug $1 } log_info () { $LOG_CMD -p daemon.info $1 } log_notice () { $LOG_CMD -p daemon.notice $1 } log_warning () { $LOG_CMD -p daemon.warning $1 } log_err () { $LOG_CMD -p daemon.err $1 } set_interrupt_trap () { trap "handle_interrupt $1" 2 } handle_interrupt () { echo "$1:X" >&3 } reset_sql_tries () { try_sql=1 sql_retries=0 } test_exit_codes () { try_sql=0 if [ -n "$exit_codes" ] then for item in $exit_codes do command=`echo "$item" | cut -d':' -f1` code=`echo "$item" | cut -d':' -f2` if [ "X" = "$code" ] then log_err "$1: Sync script was interrupted" exit 1 elif [ "sqlite3" = "$command" ] \ && ( [ "5" = "$code" ] || [ "1" = "$code" ] ) then if [ "5" = "$code" ] then log_warning "SCAP database is locked" else log_warning "Could not access SCAP database, file may be locked." fi if [ "$MAX_SQL_RETRIES" -gt "$sql_retries" ] then sql_retries=$((sql_retries + 1)) log_notice "Will try to access database again later in $SQL_RETRY_DELAY. (Retry $sql_retries of $MAX_SQL_RETRIES)" try_sql=1 sleep "$SQL_RETRY_DELAY" else log_err "$1: Gave up trying to access SCAP database." exit 1 fi else log_err "$1: $command exited with code $code" exit 1 fi done exit 1 fi } test_sql_exit () { # TODO For Postgres the exit check is done before this, in sql_pg. exit_code=$? try_sql=0 if ( [ "5" = "$exit_code" ] || [ "1" = "$exit_code" ] ) then if [ "5" = "$exit_code" ] then log_warning "SCAP database is locked." else log_warning "Could not access SCAP database, file may be locked." fi if [ "$MAX_SQL_RETRIES" -gt "$sql_retries" ] then sql_retries=$((sql_retries + 1)) log_notice "Will try to access database again later in $SQL_RETRY_DELAY. (Retry $sql_retries of $MAX_SQL_RETRIES)" try_sql=1 sleep "$SQL_RETRY_DELAY" else log_err "$1: Gave up trying to access SCAP database." exit 1 fi elif [ 0 -ne "$exit_code" ] then log_err "$1: sqlite3 exited with code $exit_code." exit 1 fi } is_feed_current () { if [ $REFRESH_ONLY -eq 0 ] then if [ -r $TIMESTAMP ] then FEED_VERSION=`cat $TIMESTAMP` fi if [ -z "$FEED_VERSION" ] then log_warning "Could not determine feed version." FEED_CURRENT=0 return $FEED_CURRENT fi FEED_INFO_TEMP_DIR=`mktemp -d` if [ -e $ACCESSKEY ] then read feeduser < $ACCESSKEY custid=`head -1 $ACCESSKEY | cut -d @ -f 1` if [ -z $feeduser ] || [ -z $custid ] then log_err "Could not determine credentials, aborting synchronization." rm -rf $FEED_INFO_TEMP_DIR exit -1 fi # --protocol=29 is a workaround for a known bug in rsync 3.0.3 if [ -e /admin/ezcli.state ] then gsmproxy=`grep proxy_feed /admin/ezcli.state | sed -e 's/^.*\/\///' -e 's/:/ /' -e 's/[\t ]*$//'` PORT=`grep ^syncport /admin/ezcli.state | sed -e "s/^syncport\t//g"` fi if [ -z "$gsmproxy" ] || [ "$gsmproxy" = "proxy_feed" ] then RSYNC_SSH_PROXY_CMD="" else if [ -r /admin/proxyauth ] && [ -s /admin/proxyauth ]; then RSYNC_SSH_PROXY_CMD="-o \"ProxyCommand corkscrew $gsmproxy %h %p /admin/proxyauth\"" else RSYNC_SSH_PROXY_CMD="-o \"ProxyCommand corkscrew $gsmproxy %h %p\"" fi fi rsync -e "ssh $RSYNC_SSH_OPTS $RSYNC_SSH_PROXY_CMD -p $PORT -i $ACCESSKEY" -ltvrP --protocol=29 --chmod=D+x $RSYNC_DELETE $RSYNC_COMPRESS $custid@feed.greenbone.net:/scap-data/timestamp $FEED_INFO_TEMP_DIR if [ $? -ne 0 ] then log_err "rsync failed, aborting synchronization." rm -rf $FEED_INFO_TEMP_DIR exit -1 fi else log_err "Could not find access key, aborting synchronization." rm -rf $FEED_INFO_TEMP_DIR exit -1 fi FEED_VERSION_SERVER=`cat $FEED_INFO_TEMP_DIR/timestamp` if [ -z "$FEED_VERSION_SERVER" ] then log_err "Could not determine server feed version." rm -rf $FEED_INFO_TEMP_DIR exit -1 fi # Check against FEED_VERSION if [ $FEED_VERSION -lt $FEED_VERSION_SERVER ] ; then FEED_CURRENT=0 else FEED_CURRENT=1 fi # Cleanup rm -rf $FEED_INFO_TEMP_DIR else FEED_CURRENT=0 fi return $FEED_CURRENT } is_db_broken () { DB_BROKEN=0 if [ $POSTGRES -eq 1 ] ; then return fi if [ ! -e $SCAP_DB ] then return fi reset_sql_tries until [ "$try_sql" -eq 0 ] do DB_INTEGRITY=`$SQLITE3 $SCAP_DB "PRAGMA integrity_check;"` test_sql_exit "Could not check SCAP database integrity" done if [ "$DB_INTEGRITY" != "ok" ] then DB_BROKEN=1 log_warning "Database integrity check failed." fi } sql_pg () { if [ "$#" -gt 0 ] then $PSQL -c "$1" else $PSQL -f - fi exit_code=$? if [ 0 -ne "$exit_code" ] then echo "[e] psql exited with code $exit_code for sql: $1." exit 1 fi } sql () { if [ $POSTGRES -eq 1 ] then if [ "$#" -gt 0 ] then sql_pg "$1" else sql_pg $* fi else if [ "$#" -gt 0 ] then $SQLITE $SCAP_DB "$1" else $SQLITE $SCAP_DB $* fi fi } scap_db_remove () { if [ $POSTGRES -eq 1 ] ; then sql_pg "DROP SCHEMA IF EXISTS scap CASCADE;" else rm -f $SCAP_DB fi } reinit () { log_notice "Reinitialization of the database necessary." scap_db_remove reset_sql_tries until [ "$try_sql" -eq 0 ] do sql < $SCAP_RES_DIR/scap_db_init.sql test_sql_exit "Could not reinitialize SCAP database" done } db_migrate_9 () { log_notice "Migrating database to version 9." reset_sql_tries until [ "$try_sql" -eq 0 ] do $SQLITE3 "$SCAP_DB" "DROP INDEX IF EXISTS afp_idx; CREATE INDEX afp_cpe_idx ON affected_products (cpe); CREATE INDEX afp_cve_idx ON affected_products (cve); UPDATE meta SET value = '9' WHERE name = 'database_version';" test_sql_exit "Could not migrate SCAP database" done log_notice "Migration done." } db_migrate_10 () { log_notice "Migrating database to version 10." reset_sql_tries until [ "$try_sql" -eq 0 ] do $SQLITE3 "$SCAP_DB" "DROP TRIGGER affected_delete; CREATE TRIGGER affected_delete AFTER DELETE ON affected_products BEGIN UPDATE cpes set max_cvss = 0.0 WHERE id = old.cpe; UPDATE cpes set cve_refs = cve_refs -1 WHERE id = old.cpe; END; UPDATE meta SET value = '10' WHERE name = 'database_version';" test_sql_exit "Could not migrate SCAP database" done log_notice "Migration done." } db_migrate_11 () { log_notice "Migrating database to version 11." if [ 1 != "$REFRESH_PRIVATE_ONLY" ] then reset_sql_tries until [ "$try_sql" -eq 0 ] do $SQLITE3 "$SCAP_DB" "ALTER TABLE ovaldefs ADD COLUMN status TEXT; UPDATE meta SET value = '11' WHERE name = 'database_version'; " test_sql_exit "Could not migrate SCAP database" done REBUILD_OVAL=1 log_notice "Migration done." else log_err "Migration to version 11 requires refresh of all SCAP data. Aborting." exit 1 fi } db_migrate_12 () { log_notice "Migrating database to version 12." if [ 1 != "$REFRESH_PRIVATE_ONLY" ] then reset_sql_tries until [ "$try_sql" -eq 0 ] do $SQLITE3 "$SCAP_DB" "DROP TABLE ovaldefs; DROP INDEX IF EXISTS ovaldefs_idx; CREATE TABLE ovaldefs ( id INTEGER PRIMARY KEY AUTOINCREMENT, uuid UNIQUE, name, comment, creation_time DATE, modification_time DATE, version INTEGER, deprecated BOOLEAN, def_class TEXT, title TEXT, description TEXT, xml_file TEXT, status TEXT ); CREATE INDEX ovaldefs_idx ON ovaldefs (name); CREATE TABLE ovalfiles ( id INTEGER PRIMARY KEY AUTOINCREMENT, xml_file TEXT UNIQUE ); CREATE UNIQUE INDEX ovalfiles_idx ON ovalfiles (xml_file); CREATE TRIGGER ovalfiles_delete AFTER DELETE ON ovalfiles BEGIN DELETE FROM ovaldefs WHERE ovaldefs.xml_file = old.xml_file; END; UPDATE meta SET value = '12' WHERE name = 'database_version'; " test_sql_exit "Could not migrate SCAP database" done REBUILD_OVAL=1 log_notice "Migration done." else log_err "Migration to version 12 requires refresh of all SCAP data. Aborting." exit 1 fi } db_migrate_13 () { log_notice "Migrating database to version 13." reset_sql_tries until [ "$try_sql" -eq 0 ] do $SQLITE3 "$SCAP_DB" "ALTER TABLE cpes ADD COLUMN nvd_id; UPDATE cpes SET nvd_id = uuid, uuid = name; UPDATE meta SET value = '13' WHERE name = 'database_version'; " test_sql_exit "Could not migrate SCAP database" done log_notice "Migration done." } db_migrate_14 () { log_notice "Migrating database to version 14." reset_sql_tries until [ "$try_sql" -eq 0 ] do $SQLITE3 "$SCAP_DB" "ALTER TABLE ovaldefs ADD COLUMN max_cvss FLOAT; ALTER TABLE ovaldefs ADD COLUMN cve_refs INTEGER; CREATE TABLE affected_ovaldefs ( cve INTEGER NOT NULL, ovaldef INTEGER NOT NULL, FOREIGN KEY(cve) REFERENCES cves(id), FOREIGN KEY(ovaldef) REFERENCES ovaldefs(id) ); CREATE INDEX aff_ovaldefs_def_idx ON affected_ovaldefs (ovaldef); CREATE INDEX aff_ovaldefs_cve_idx ON affected_ovaldefs (cve); DROP TRIGGER IF EXISTS cves_delete; CREATE TRIGGER cves_delete AFTER DELETE ON cves BEGIN DELETE FROM affected_products where cve = old.id; DELETE FROM affected_ovaldefs where cve = old.id; END; CREATE TRIGGER affected_ovaldefs_delete AFTER DELETE ON affected_ovaldefs BEGIN UPDATE ovaldefs SET max_cvss = 0.0 WHERE id = old.ovaldef; END; UPDATE meta SET value = '14' WHERE name = 'database_version'; " test_sql_exit "Could not migrate SCAP database" done log_notice "Migration done." REBUILD_OVAL=1 } db_migrate_15 () { log_notice "Migrating database to version 15." reset_sql_tries until [ "$try_sql" -eq 0 ] do $SQLITE3 "$SCAP_DB" "CREATE INDEX IF NOT EXISTS cpes_by_creation_time_idx ON cpes (creation_time); CREATE INDEX IF NOT EXISTS cpes_by_modification_time_idx ON cpes (modification_time); CREATE INDEX IF NOT EXISTS cpes_by_cvss ON cpes (max_cvss); CREATE INDEX IF NOT EXISTS cves_by_creation_time_idx ON cves (creation_time); CREATE INDEX IF NOT EXISTS cves_by_modification_time_idx ON cves (modification_time); CREATE INDEX IF NOT EXISTS cves_by_cvss ON cves (cvss); UPDATE meta SET value = '15' WHERE name = 'database_version'; " test_sql_exit "Could not migrate SCAP database" done log_notice "Migration done." } check_db_version () { DB_VERSION=`sql "select value from ${SCHEMA}meta where name = 'database_version';" 2>/dev/null | tr -d '\n\r' || echo 0` case "$DB_VERSION" in 0) reinit;; 1) reinit;; 2) reinit;; 3) reinit;; 4) reinit;; 5) reinit;; 6) reinit;; 7) reinit;; 8) if [ $POSTGRES -eq 1 ] then reinit else db_migrate_9 db_migrate_10 db_migrate_11 db_migrate_12 db_migrate_13 db_migrate_14 db_migrate_15 fi;; 9) if [ $POSTGRES -eq 1 ] then reinit else db_migrate_10 db_migrate_11 db_migrate_12 db_migrate_13 db_migrate_14 db_migrate_15 fi;; 10) if [ $POSTGRES -eq 1 ] then reinit else db_migrate_11 db_migrate_12 db_migrate_13 db_migrate_14 db_migrate_15 fi;; 11) if [ $POSTGRES -eq 1 ] then reinit else db_migrate_12 db_migrate_13 db_migrate_14 db_migrate_15 fi;; 12) if [ $POSTGRES -eq 1 ] then reinit else db_migrate_13 db_migrate_14 db_migrate_15 fi;; 13) if [ $POSTGRES -eq 1 ] then reinit else db_migrate_14 db_migrate_15 fi;; 14) if [ $POSTGRES -eq 1 ] then reinit else db_migrate_15 fi;; esac } list_oval_files_sorted () { for line in `list_oval_files_sortable "$1" | sort` do echo ${line#????????} done } list_oval_files_sortable () { for ovalfile in `find "$1" -name "*.xml" -type f` do timestamp_raw="" timestamp_raw=`xsltproc "$SCAP_RES_DIR/oval_timestamp.xsl" "$ovalfile" 2>/dev/null` if [ -n "$timestamp_raw" ] \ && [ -n `echo "$timestamp_raw" | egrep -x "[0-9]{4}\-(0[0-9]|1[012])\-([0-2][0-9]|3[01])[[:alnum:]]*"` ] then timestamp="`echo "$timestamp_raw" | sed -e 's/T.*//' | tr -d "-"`" echo "$timestamp$ovalfile" fi done } do_help () { echo "$0: Sync SCAP data" if [ $POSTGRES -eq 1 ]; then echo " --database database name" fi echo " --describe display current feed info" echo " --feedversion display version of this feed" echo " --help display this help" echo " --identify display information" echo " --migrate migrate database without downloading new state" echo " --refresh update database without downloading new state" echo " --refresh-private update database using only user data" echo " --selftest perform self-test" echo " --version display version" echo " --verbose enable verbose log messages" echo "" exit 0 } scap_db_exists () { if [ $POSTGRES -eq 1 ] ; then EXISTS=`sql_pg "SELECT exists (SELECT schema_name FROM information_schema.schemata WHERE schema_name = 'scap');" 2>/tmp/ERR | tr -d '\n\r' || echo 0` if [ "$EXISTS" = "f" ] ; then return 1; fi return 0; elif [ -f "$SCAP_DB" ] then return 0; fi return 1; } init_scap_db_update () { if scap_db_exists then check_db_version reset_sql_tries until [ "$try_sql" -eq 0 ] do CVE_REFDATE=`sql "select max(modification_time) from ${SCHEMA}cves;"` test_sql_exit "Could not get reference date for CVEs and CPEs" done else log_notice "Initializing SCAP database." reset_sql_tries until [ "$try_sql" -eq 0 ] do sql < $SCAP_RES_DIR/scap_db_init.sql test_sql_exit "Could not initialize SCAP database" done CVE_REFDATE=0 fi reset_sql_tries until [ "$try_sql" -eq 0 ] do DB_LASTUPDATE=`sql "select value from ${SCHEMA}meta where name = 'last_update';"` test_sql_exit "Could not get last_update timestamp from database" done if [ -z "$CVE_REFDATE" ] then CVE_REFDATE=0 fi if [ -z "$DB_LASTUPDATE" ]; then # Happens when initial sync was aborted log_warning "Inconsistent data. Resetting SCAP database." scap_db_remove reset_sql_tries until [ "$try_sql" -eq 0 ] do sql < $SCAP_RES_DIR/scap_db_init.sql test_sql_exit "Could not reinitialize SCAP database" done CVE_REFDATE=0 DB_LASTUPDATE=0 fi updated_cpes=0 updated_cves=0 updated_ovaldefs=0 } update_cvss () { if [ 0 -ne $updated_cves ] || [ 0 -ne $updated_cpes ] then log_info "Updating CVSS scores and CVE counts for CPEs" reset_sql_tries until [ "$try_sql" -eq 0 ] do sql " ${RECURSIVE_TRIGGERS_OFF} UPDATE ${SCHEMA}cpes SET max_cvss = ( SELECT max(cvss) FROM ${SCHEMA}cves WHERE id IN ( SELECT cve FROM ${SCHEMA}affected_products WHERE cpe=cpes.id ) ), cve_refs = ( SELECT count(cve) FROM ${SCHEMA}affected_products WHERE cpe=cpes.id ); " test_sql_exit "Could not update CVSS scores for CPEs" done else log_info "No CPEs or CVEs updated, skipping CVSS and CVE recount for CPEs." fi if [ 0 -ne $updated_cves ] || [ 0 -ne $updated_ovaldefs ] then log_info "Updating CVSS scores and for OVAL definitions" reset_sql_tries until [ "$try_sql" -eq 0 ] do sql " ${RECURSIVE_TRIGGERS_OFF} UPDATE ${SCHEMA}ovaldefs SET max_cvss = ( SELECT max(cvss) FROM ${SCHEMA}cves WHERE id IN ( SELECT cve FROM ${SCHEMA}affected_ovaldefs WHERE ovaldef=ovaldefs.id ) AND cvss != 0.0 ); " test_sql_exit "Could not update CVSS scores for OVAL definitions" done else log_notice "No OVAL definitions or CVEs updated, skipping CVSS recount for OVAL definitions." fi } update_placeholders () { if [ 0 -ne $updated_cves ] then log_info "Updating placeholder CPEs" reset_sql_tries until [ "$try_sql" -eq 0 ] do sql " UPDATE ${SCHEMA}cpes SET creation_time = ( SELECT min(creation_time) FROM ${SCHEMA}cves WHERE id IN ( SELECT cve FROM ${SCHEMA}affected_products WHERE cpe=cpes.id ) ), modification_time = ( SELECT min(creation_time) FROM ${SCHEMA}cves WHERE id IN ( SELECT cve FROM ${SCHEMA}affected_products WHERE cpe=cpes.id ) ) WHERE cpes.title IS NULL AND (cpes.creation_time IS NULL OR cpes.modification_time IS NULL); " test_sql_exit "Could not update placeholder CPEs" done else log_notice "No CVEs updated, skipping placeholder CPE update." fi } update_scap_db_private () { SCAP_PRIVATE_DIR="$SCAP_DIR/$PRIVATE_SUBDIR" if [ -d "$SCAP_PRIVATE_DIR" ] then log_notice "Updating user defined data" log_info "Updating user OVAL definitions" xmlcount=0 xmlcount=$(find "$SCAP_PRIVATE_DIR/oval/" -name "*.xml" -type f 2> /dev/null | wc -l) if [ -n "$xmlcount" ] && [ $xmlcount -ne 0 ] then if [ -z "$oval_files_sorted" ] then oval_files_sorted=`list_oval_files_sorted "$SCAP_DIR/oval/"` ovaldir_xml_files=`find "$SCAP_DIR/oval/" -name "*.xml" -type f 2> /dev/null` for xml_file in $ovaldir_xml_files do if [ -z `echo "$oval_files_sorted" | grep -x "$xml_file"` ] then log_warning "Cannot find valid OVAL timestamp in '$xml_file'." fi done fi oval_files_sorted_private=`list_oval_files_sorted "$SCAP_PRIVATE_DIR/oval/"` ovaldir_xml_files=`find "$SCAP_PRIVATE_DIR/oval/" -name "*.xml" -type f 2> /dev/null` for xml_file in $ovaldir_xml_files do if [ -z `echo "$oval_files_sorted_private" | grep -x "$xml_file"` ] then log_warning "Cannot find valid OVAL timestamp in '$xml_file'." fi done for non_xml_file in `find "$SCAP_PRIVATE_DIR/oval/" -type f -and -not -name "*.xml" 2> /dev/null` do if [ "${non_xml_file%%.asc}" = "${non_xml_file}" ] || ! [ -f "${non_xml_file%%.asc}" ] then log_warning "Found non-XML and non-signature file '$non_xml_file'." fi done if [ -n "$oval_files_sorted" ] then for ovalfile in $oval_files_sorted_private do filedate=`stat -c "%Y" "$ovalfile" | cut -d " " -f 1 | tr -d "-"` filedate=$(( $filedate - ( $filedate % 60 ) )) if [ $filedate -gt $DB_LASTUPDATE ] || [ 1 = "$REBUILD_OVAL" ] then oval_timestamp=`xsltproc "$SCAP_RES_DIR/oval_timestamp.xsl" "$ovalfile" | date "+%s" -f -` if [ 1 = "$REBUILD_OVAL" ] then OVAL_REFDATE=0 else reset_sql_tries until [ "$try_sql" -eq 0 ] do OVAL_REFDATE=`sql "SELECT max(modification_time) FROM ${SCHEMA}ovaldefs WHERE xml_file = '${ovalfile##$SCAP_DIR/}';"` test_sql_exit "Could not get OVAL reference date" done if [ -z "$OVAL_REFDATE" ] then OVAL_REFDATE=0 fi fi if [ $oval_timestamp -gt $OVAL_REFDATE ] then validation_message=`xsltproc "$SCAP_RES_DIR/oval_verify.xsl" "$ovalfile" 2>/dev/null` validation_return="$?" if [ 0 -ne $validation_return ] && [ -n "$validation_message" ] then if [ 10 -eq $validation_return ] then log_warning "Validation of file '$ovalfile' failed: $validation_message" else log_warning "Error parsing '$ovalfile'." fi else if ! [ "$validation_message" = "file valid" ] then log_warning "Validation of file '$ovalfile' failed: $validation_message" else log_info "Updating $ovalfile" reset_sql_tries until [ "$try_sql" -eq 0 ] do exec 4>&1 exit_codes=$( ( set_interrupt_trap (xsltproc --stringparam filename "${ovalfile##$SCAP_DIR/}" --stringparam refdate "$OVAL_REFDATE" "$SCAP_RES_DIR/oval_update.xsl" "$ovalfile" || echo "xsltproc:$?" >&3) | \ (sql | sed '/^\s*$/d' || echo "sqlite3:$?" >&3) ) 3>&1 >&4 ) exec 4>&- test_exit_codes "Update of OVAL definitions failed at file '$ovalfile'" done updated_ovaldefs=1 fi fi else log_info "Skipping $ovalfile, file has older timestamp than latest OVAL definition in database. (This is not an error)" fi else log_info "Skipping $ovalfile, file is older than last revision. (This is not an error)" fi done fi else log_info "No user defined OVAL files found" fi log_info "Cleaning up user OVAL data" DIR_STR_LENGTH=$((`echo "$SCAP_DIR" | wc -c` + 1)) oval_files_shortened="" if [ 0 != "$xmlcount" ] then for ovalfile in $oval_files_sorted_private do oval_files_shortened=$oval_files_shortened"', '"`echo $ovalfile | cut -c ${DIR_STR_LENGTH}- ` done oval_files_shortened=${oval_files_shortened##"', "}"'" fi oval_files_clause="" if [ ! -z "$oval_files_shortened" ] then oval_files_clause="AND (xml_file NOT IN ($oval_files_shortened))" fi reset_sql_tries until [ "$try_sql" -eq 0 ] do deleted=`sql "SELECT DISTINCT xml_file FROM ${SCHEMA}ovaldefs WHERE (xml_file NOT LIKE 'oval/%') $oval_files_clause;"` test_sql_exit "Could not get list of deleted OVAL XML files" done if [ -n "$deleted" ] then log_notice "Removing definitions formerly inserted from: $deleted" reset_sql_tries until [ "$try_sql" -eq 0 ] do sql "DELETE FROM ${SCHEMA}ovaldefs WHERE (xml_file NOT LIKE 'oval/%') $oval_files_clause;" test_sql_exit "Could not remove deleted OVAL definitions from database" done fi # TODO: This is not quite accurate as it uses the timestamp of the non-private data. LAST_UPDATE_TIMESTAMP=`sed 's/^\(.\{8\}\)/\1 /' $TIMESTAMP | date +%s -f -` reset_sql_tries until [ "$try_sql" -eq 0 ] do sql "UPDATE ${SCHEMA}meta SET value ='$LAST_UPDATE_TIMESTAMP' WHERE name = 'last_update';" test_sql_exit "Could not update last_update timestamp in database" done else log_notice "No user data directory '$SCAP_PRIVATE_DIR' found." fi } update_scap_db() { init_scap_db_update if [ 0 = "$REFRESH_PRIVATE_ONLY" ] then log_notice "Updating data from feed" CPEBASE="$SCAP_DIR/official-cpe-dictionary_v2.2.xml" if [ -e $CPEBASE ] then filedate=`stat -c "%Y" "$CPEBASE" | cut -d " " -f 1 | tr -d "-"` filedate=$(( $filedate - ( $filedate % 60 ) )) if [ $filedate -gt $DB_LASTUPDATE ] then log_info "Updating CPEs" filesize=`stat -c "%s" "$CPEBASE"` if [ "0" -ne "$SPLIT_PART_SIZE" ] && [ "$filesize" -gt $(($SPLIT_PART_SIZE * 1024)) ] then log_info "File is larger than ${SPLIT_PART_SIZE}k. Splitting into multiple parts" "$SCAP_RES_DIR/xml_split" "$CPEBASE" -M "$SPLIT_PART_SIZE" -o "$SYNC_TMP_DIR" cpefile_nodir=${CPEBASE##*/} for cpepart in `find "$SYNC_TMP_DIR" -path "$SYNC_TMP_DIR/${cpefile_nodir%%.xml}.*.xml" 2> /dev/null | sort` do log_info "Updating part $cpepart" reset_sql_tries until [ "$try_sql" -eq 0 ] do exec 4>&1 exit_codes=$( ( set_interrupt_trap (sed 's/&/&/g' $cpepart || echo "sed:$?" >&3 ) | \ (xsltproc --stringparam refdate $CVE_REFDATE $SCAP_RES_DIR/cpe_youngerthan.xsl - || echo "xsltproc:$?" >&3) | \ (xsltproc $SCAP_RES_DIR/cpe_update.xsl - || echo "xsltproc:$?" >&3) | \ (sql | sed '/^\s*$/d' || echo "sqlite3:$?" >&3) \ ) 3>&1 >&4 ) exec 4>&- test_exit_codes "Update of CPEs failed" done done else reset_sql_tries until [ "$try_sql" -eq 0 ] do exec 4>&1 exit_codes=$( ( set_interrupt_trap (sed 's/&/&/g' $CPEBASE || echo "sed:$?" >&3 ) | \ (xsltproc --stringparam refdate $CVE_REFDATE $SCAP_RES_DIR/cpe_youngerthan.xsl - || echo "xsltproc:$?" >&3) | \ (xsltproc $SCAP_RES_DIR/cpe_update.xsl - || echo "xsltproc:$?" >&3) | \ (sql | sed '/^\s*$/d' || echo "sqlite3:$?" >&3) \ ) 3>&1 >&4 ) exec 4>&- test_exit_codes "Update of CPEs failed" done fi updated_cpes=1 else log_info "Skipping CPEs, file is older than last revision (this is not an error)." fi else log_warning "No CPE dictionary found in $SCAP_DIR" fi xmlcount=$(ls $SCAP_DIR/nvdcve-2.0-*.xml 2> /dev/null | wc -l) if [ $xmlcount -ne 0 ] then for cvefile in `ls $SCAP_DIR/nvdcve-2.0-*.xml` do filedate=`stat -c "%Y" "$cvefile" | cut -d " " -f 1 | tr -d "-"` filedate=$(( $filedate - ( $filedate % 60 ) )) if [ $filedate -gt $DB_LASTUPDATE ] then log_info "Updating $cvefile" filesize=`stat -c "%s" "$cvefile"` if [ "0" -ne "$SPLIT_PART_SIZE" ] && [ "$filesize" -gt $(($SPLIT_PART_SIZE * 1024)) ] then log_info "File is larger than ${SPLIT_PART_SIZE}k. Splitting into multiple parts" "$SCAP_RES_DIR/xml_split" "$cvefile" -M "$SPLIT_PART_SIZE" -o "$SYNC_TMP_DIR" cvefile_nodir="${cvefile##*/}" for cvepart in `find "$SYNC_TMP_DIR" -path "$SYNC_TMP_DIR/${cvefile_nodir%%.xml}.*.xml" 2> /dev/null | sort` do log_info "Updating part $cvepart" reset_sql_tries until [ "$try_sql" -eq 0 ] do exec 4>&1 exit_codes=$( ( set_interrupt_trap (xsltproc --stringparam refdate $CVE_REFDATE $SCAP_RES_DIR/cve_youngerthan.xsl $cvepart || echo "xsltproc:$?" >&3) | \ (xsltproc $SCAP_RES_DIR/cve_update.xsl - || echo "xsltproc:$?" >&3) | \ (sql | sed '/^\s*$/d' || echo "sqlite3:$?" >&3) \ ) 3>&1 >&4 ) exec 4>&- rm "$cvepart" test_exit_codes "Update of CVEs failed in part '$cvepart'" done done else reset_sql_tries until [ "$try_sql" -eq 0 ] do exec 4>&1 exit_codes=$( ( set_interrupt_trap (xsltproc --stringparam refdate $CVE_REFDATE $SCAP_RES_DIR/cve_youngerthan.xsl $cvefile || echo "xsltproc:$?" >&3) | \ (xsltproc $SCAP_RES_DIR/cve_update.xsl - || echo "xsltproc:$?" >&3) | \ (sql | sed '/^\s*$/d' || echo "sqlite3:$?" >&3) \ ) 3>&1 >&4 ) exec 4>&- test_exit_codes "Update of CVEs failed in file '$cvefile'" done updated_cves=1 fi else log_info "Skipping $cvefile, file is older than last revision (this is not an error)." fi done else log_warning "No CVEs found in $SCAP_DIR." fi log_info "Updating OVAL data" xmlcount=$(find "$SCAP_DIR/oval/" -name "*.xml" -type f 2> /dev/null | wc -l) if [ $xmlcount -ne 0 ] then oval_files_sorted=`list_oval_files_sorted "$SCAP_DIR/oval/"` ovaldir_xml_files=`find "$SCAP_DIR/oval/" -name "*.xml" -type f 2> /dev/null` for xml_file in $ovaldir_xml_files do if [ -z `echo "$oval_files_sorted" | grep -x "$xml_file"` ] then log_warning "Cannot find valid OVAL timestamp in '$xml_file'." fi done for ovalfile in $oval_files_sorted do filedate=`stat -c "%Y" "$ovalfile" | cut -d " " -f 1 | tr -d "-"` filedate=$(( $filedate - ( $filedate % 60 ) )) if [ $filedate -gt $DB_LASTUPDATE ] || [ 1 = "$REBUILD_OVAL" ] then oval_timestamp=`xsltproc "$SCAP_RES_DIR/oval_timestamp.xsl" "$ovalfile" | date "+%s" -f -` if [ 1 = "$REBUILD_OVAL" ] then OVAL_REFDATE=0 else reset_sql_tries until [ "$try_sql" -eq 0 ] do OVAL_REFDATE=`sql "SELECT max(modification_time) FROM ${SCHEMA}ovaldefs WHERE xml_file = '${ovalfile##$SCAP_DIR/}';"` test_sql_exit "Could not get OVAL reference date from database" done if [ -z "$OVAL_REFDATE" ] then OVAL_REFDATE=0 fi fi if [ $oval_timestamp -gt $OVAL_REFDATE ] then log_info "Updating $ovalfile" reset_sql_tries until [ "$try_sql" -eq 0 ] do exec 4>&1 exit_codes=$( ( set_interrupt_trap (xsltproc --stringparam filename "${ovalfile##$SCAP_DIR/}" --stringparam refdate "$OVAL_REFDATE" "$SCAP_RES_DIR/oval_update.xsl" "$ovalfile" || echo "xsltproc:$?" >&3) | \ (sql | sed '/^\s*$/d' || echo "sqlite3:$?" >&3) ) 3>&1 >&4 ) exec 4>&- test_exit_codes "Update of OVAL definitions failed at file '$ovalfile'" done updated_ovaldefs=1 else log_info "Skipping $ovalfile, file has older timestamp than latest OVAL definition in database. (This is not an error)" fi else log_info "Skipping $ovalfile, file is older than last revision (this is not an error)." fi done else log_warning "No XML files found in $SCAP_DIR/oval/." fi fi update_scap_db_private update_cvss update_placeholders LAST_UPDATE_TIMESTAMP=`sed 's/^\(.\{8\}\)/\1 /' $TIMESTAMP | env TZ="UTC" date +%s -f -` reset_sql_tries until [ "$try_sql" -eq 0 ] do sql "UPDATE ${SCHEMA}meta SET value ='$LAST_UPDATE_TIMESTAMP' WHERE name = 'last_update';" test_sql_exit "Could not update last_update timestamp in database" done } sync_scapdata(){ if [ $REFRESH_ONLY -eq 0 ] then if [ -e $ACCESSKEY ] then log_notice "Found Greenbone Security Feed subscription file, trying to synchronize with Greenbone SCAP data Repository ..." notsynced=1 retried=0 mkdir -p "$BASE_SYNC_DIR" read feeduser < $ACCESSKEY custid=`head -1 $ACCESSKEY | cut -d @ -f 1` if [ -z $feeduser ] || [ -z $custid ] then log_err "Could not determine credentials, aborting synchronization." exit 1 fi while [ 0 -ne "$notsynced" ] do # --protocol=29 is a workaround for a known bug in rsync 3.0.3 if [ -e /admin/ezcli.state ] then gsmproxy=`grep proxy_feed /admin/ezcli.state | sed -e 's/^.*\/\///' -e 's/:/ /' -e 's/[\t ]*$//'` PORT=`grep ^syncport /admin/ezcli.state | sed -e "s/^syncport\t//g"` fi if [ -z "$gsmproxy" ] || [ "$gsmproxy" = "proxy_feed" ] then RSYNC_SSH_PROXY_CMD="" else if [ -r /admin/proxyauth ] && [ -s /admin/proxyauth ]; then RSYNC_SSH_PROXY_CMD="-o \"ProxyCommand corkscrew $gsmproxy %h %p /admin/proxyauth\"" else RSYNC_SSH_PROXY_CMD="-o \"ProxyCommand corkscrew $gsmproxy %h %p\"" fi fi rsync -e "ssh $RSYNC_SSH_OPTS $RSYNC_SSH_PROXY_CMD -p $PORT -i $ACCESSKEY" -ltvrP --protocol=29 --chmod=D+x $RSYNC_DELETE $RSYNC_COMPRESS $custid@feed.greenbone.net:/scap-data $BASE_SYNC_DIR if [ 0 != "$?" ] ; then log_err "rsync failed, aborting synchronization." exit 1 fi notsynced=0 done log_notice "Synchronization with the Greenbone SCAP data Repository successful." else log_err "gsf-access-key not found, aborting synchronization." exit 1 fi fi update_scap_db } do_self_test () { if [ -z "$SELFTEST_STDERR" ] then SELFTEST_STDERR=0 fi if [ $POSTGRES -eq 1 ] ; then POSTGRESQL=`command -v psql` if [ -z "$POSTGRESQL" ]; then if [ 0 -ne $SELFTEST_STDERR ] then echo "psql not found (required)." 1>&2 fi log_err "psql not found (required)." SELFTEST_FAIL=1 fi else SQLITE=`command -v sqlite3` if [ -z "$SQLITE" ]; then if [ 0 -ne $SELFTEST_STDERR ] then echo "sqlite3 not found (required)." 1>&2 fi log_err "sqlite3 not found (required)." SELFTEST_FAIL=1 fi fi if [ -z "$RSYNC" ] then if [ 0 -ne $SELFTEST_STDERR ] then echo "rsync not found (required)." 1>&2 fi log_err "rsync not found (required)." SELFTEST_FAIL=1 fi if [ ! -d $BASE_SYNC_DIR ] then if [ 0 -ne $SELFTEST_STDERR ] then echo "BASE_SYNC_DIR ($BASE_SYNC_DIR) not found." 1>&2 fi log_err "BASE_SYNC_DIR ($BASE_SYNC_DIR) not found." SELFTEST_FAIL=1 fi } psql_setup "tasks" while test $# -gt 0; do case "$1" in --version) echo $VERSION exit 0 ;; --identify) echo "SCAPSYNC|$SCRIPT_NAME|$VERSION|$FEED_NAME|$RESTRICTED|SCAPSYNC" exit 0 ;; --describe) do_describe exit 0 ;; --feedversion) do_feedversion exit 0 ;; --help) do_help exit 0 ;; --database) if [ $POSTGRES -eq 1 ] ; then shift if [ $# -gt 0 ]; then psql_setup $1 else echo "[e] --database argument missing" exit 1 fi else echo "[e] --database option available only for Postgres" exit 1 fi ;; --verbose) VERBOSE=1 ;; --refresh) REFRESH_ONLY=1 ;; --migrate) REFRESH_ONLY=1 ;; --refresh-private) REFRESH_ONLY=1 REFRESH_PRIVATE_ONLY=1 ;; --selftest) SELFTEST_FAIL=0 SELFTEST_STDERR=1 do_self_test exit $SELFTEST_FAIL ;; --feedcurrent) is_feed_current exit $? ;; esac shift done SELFTEST_FAIL=0 do_self_test if [ $SELFTEST_FAIL -ne 0 ] then exit 1 fi if [ $(id -u) -ne $(stat -c %u $SCAP_DB) ] then log_err "Not synchronizing or updating the database since the current user is not the owner of the database." echo "Not synchronizing or updating the database since the current user is not the owner of the database." exit 1 fi if [ $ENABLED -ne 1 ] then log_notice "Synchronization of SCAP data with network is disabled, will only perform local operations." REFRESH_ONLY=1 fi is_db_broken if [ $DB_BROKEN -eq 1 ] then log_notice "Purging corrupted database." scap_db_remove else is_feed_current if [ $FEED_CURRENT -eq 1 ] then log_notice "Feed is already current, skipping synchronization." exit 0 fi fi sync_scapdata exit 0 �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/cve_getbyname.xsl�������������������������������������������������������000644 �001751 �001751 �00000003050 12557600612 022363� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <!-- OpenVAS $Id: cve_getbyname.xsl 20229 2014-09-01 13:13:29Z mwiegand $ Description: Select a CVE item by name. Authors: Henri Doreau <henri.doreau@greenbone.net> Copyright: Copyright (C) 2011 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:vuln="http://scap.nist.gov/schema/vulnerability/0.4" xmlns:cpe-lang="http://cpe.mitre.org/language/2.0" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/0.1" xmlns:cve="http://scap.nist.gov/schema/feed/vulnerability/2.0" xmlns:cvss="http://scap.nist.gov/schema/cvss-v2/0.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:patch="http://scap.nist.gov/schema/patch/0.1"> <xsl:output method="html"/> <xsl:template match="cve:nvd"> <xsl:copy-of select="cve:entry[@id = $refname]"/> </xsl:template> </xsl:stylesheet> ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/greenbone-certdata-sync.in����������������������������������������������000644 �001751 �001751 �00000054666 12631501053 024071� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/bin/sh # # greenbone-certdata-sync # This script synchronizes an OpenVAS installation with the Greenbone CERT # data directory. # # Authors: # Timo Pollmeier <timo.pollmeier@greenbone.net> # # Copyright: # Copyright (C) 2011-2014 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. VERSION=20140808 RESTRICTED=1 # SETTINGS # ======== POSTGRES=0 SCHEMA_CERT="" SCHEMA_SCAP="" RECURSIVE_TRIGGERS_OFF="PRAGMA recursive_triggers = OFF;" ATTACH_SCAP="" if [ "@BACKEND@" = "POSTGRESQL" ]; then POSTGRES=1 SCHEMA_CERT="cert." SCHEMA_SCAP="scap." RECURSIVE_TRIGGERS_OFF="" fi # PRIVATE_SUBDIR defines a subdirectory of the CERT data directory # where files not part of the feed or database will not be deleted by rsync. if [ -z "$PRIVATE_SUBDIR" ] then PRIVATE_SUBDIR="private" fi # RSYNC_DELETE controls whether files which are not part of the repository will # be removed from the local directory after synchronization. The default value # for this setting is # "--delete --exclude cert.db --exclude $PRIVATE_SUBDIR/", # which means that files which are not part of the feed, database or private # directory will be deleted. RSYNC_DELETE="--delete --exclude cert.db --exclude $PRIVATE_SUBDIR/" # RSYNC_SSH_OPTS contains options which should be passed to ssh for the rsync # connection to the repository. RSYNC_SSH_OPTS="-o \"UserKnownHostsFile=/dev/null\" -o \"StrictHostKeyChecking=no\"" # RSYNC_COMPRESS specifies the compression level to use for the rsync connection. RSYNC_COMPRESS="--compress-level=9" # PORT controls the outgoing TCP port for updates. If PAT/Port-Translation is # not used, this should be "24". For some application layer firewalls or gates # the value 22 (Standard SSH) is useful. Only change if you know what you are # doing. PORT=24 # SCRIPT_NAME is the name the scripts will use to identify itself and to mark # log messages. SCRIPT_NAME="greenbone-certdata-sync" # LOG_CMD defines the command to use for logging. To have logger log to stderr # as well as syslog, add "-s" here. LOG_CMD="logger -t $SCRIPT_NAME" # If ENABLED is set to 0, the sync script will not perform a synchronization. ENABLED=1 # If REFRESH_ONLY is set to 1, the sync script will only update the OpenVAS # Manager database. This can be controlled via the --refresh parameter. REFRESH_ONLY=0 SQLITE3="sqlite3 -noheader -bail" # PSQL defines the name of the Postgres binary to call, along with additional # parameters. PSQL="" psql_setup () { PSQL="psql -v ON_ERROR_STOP=1 -q --pset pager=off --no-align -d $1 -t" } # Maximum number of retries if database is locked if [ -z "$MAX_SQL_RETRIES" ]; then MAX_SQL_RETRIES="1" # 0 : try only once fi # Delay between retries if [ -z "$SQL_RETRY_DELAY" ]; then SQL_RETRY_DELAY="10m" # allowed unit suffixes: see sleep command fi [ -r @OPENVAS_SYSCONF_DIR@/greenbone-certdata-sync.conf ] && . @OPENVAS_SYSCONF_DIR@/greenbone-certdata-sync.conf BASE_SYNC_DIR="@OPENVAS_STATE_DIR@" CERT_DIR="@OPENVAS_CERT_DATA_DIR@" SCAP_DIR="@OPENVAS_SCAP_DATA_DIR@" CERT_RES_DIR="@OPENVAS_CERT_RES_DIR@" CERT_DB="$CERT_DIR/cert.db" SCAP_DB="$SCAP_DIR/scap.db" if [ ! $POSTGRES -eq 1 ] ; then ATTACH_SCAP="ATTACH DATABASE '$SCAP_DB' AS scap;" fi ACCESSKEY="@OPENVAS_SYSCONF_DIR@/gsf-access-key" TIMESTAMP="$CERT_DIR/timestamp" if [ -z "$FEED_NAME" ] ; then FEED_NAME="Greenbone CERT Feed" fi if [ -z "$FEED_VENDOR" ] ; then FEED_VENDOR="Greenbone Networks GmbH" fi if [ -z "$FEED_HOME" ] ; then FEED_HOME="http://www.greenbone.net/technology/gsf.html" fi RSYNC=`command -v rsync` do_describe () { echo "This script synchronizes a CERT collection with the '$FEED_NAME'." echo "The '$FEED_NAME' is provided by '$FEED_VENDOR'." echo "Online information about this feed: '$FEED_HOME'." } do_feedversion () { if [ -r $TIMESTAMP ] ; then echo `cat $TIMESTAMP` fi } log_debug () { $LOG_CMD -p daemon.debug $1 } log_info () { $LOG_CMD -p daemon.info $1 } log_notice () { $LOG_CMD -p daemon.notice $1 } log_warning () { $LOG_CMD -p daemon.warning $1 } log_err () { $LOG_CMD -p daemon.err $1 } set_interrupt_trap () { trap "handle_interrupt $1" 2 } handle_interrupt () { echo "$1:X" >&3 } reset_sql_tries () { try_sql=1 sql_retries=0 } test_exit_codes () { try_sql=0 if [ -n "$exit_codes" ] then for item in $exit_codes do command=`echo "$item" | cut -d':' -f1` code=`echo "$item" | cut -d':' -f2` if [ "X" = "$code" ] then log_err "$1: Sync script was interrupted" exit 1 elif [ "sqlite3" = "$command" ] \ && ( [ "5" = "$code" ] || [ "1" = "$code" ] ) then if [ "5" = "$code" ] then log_warning "CERT database is locked" else log_warning "Could not access CERT database, file may be locked." fi if [ "$MAX_SQL_RETRIES" -gt "$sql_retries" ] then sql_retries=$((sql_retries + 1)) log_notice "Will try to access database again later in $SQL_RETRY_DELAY. (Retry $sql_retries of $MAX_SQL_RETRIES)" try_sql=1 sleep "$SQL_RETRY_DELAY" else log_err "$1: Gave up trying to access SCAP database." exit 1 fi else log_err "$1: $command exited with code $code" exit 1 fi done fi } test_sql_exit () { # TODO For Postgres the exit check is done before this, in sql_pg. exit_code=$? try_sql=0 if ( [ "5" = "$exit_code" ] || [ "1" = "$exit_code" ] ) then if [ "5" = "$exit_code" ] then log_warning "CERT database is locked." else log_warning "Could not access CERT database, file may be locked." fi if [ "$MAX_SQL_RETRIES" -gt "$sql_retries" ] then sql_retries=$((sql_retries + 1)) log_notice "Will try to access database again later in $SQL_RETRY_DELAY. (Retry $sql_retries of $MAX_SQL_RETRIES)" try_sql=1 sleep "$SQL_RETRY_DELAY" else log_err "$1: Gave up trying to access CERT database." exit 1 fi elif [ 0 -ne "$exit_code" ] then log_err "$1: sqlite3 exited with code $exit_code." exit 1 fi } is_feed_current () { if [ $REFRESH_ONLY -eq 0 ] then if [ -r $TIMESTAMP ] then FEED_VERSION=`cat $TIMESTAMP` fi if [ -z "$FEED_VERSION" ] then log_warning "Could not determine feed version." FEED_CURRENT=0 return $FEED_CURRENT fi FEED_INFO_TEMP_DIR=`mktemp -d` if [ -e $ACCESSKEY ] then read feeduser < $ACCESSKEY custid=`head -1 $ACCESSKEY | cut -d @ -f 1` if [ -z $feeduser ] || [ -z $custid ] then log_err "CERT synchronization: Could not determine credentials, aborting synchronization." rm -rf $FEED_INFO_TEMP_DIR exit -1 fi # --protocol=29 is a workaround for a known bug in rsync 3.0.3 if [ -e /admin/ezcli.state ] then gsmproxy=`grep proxy_feed /admin/ezcli.state | sed -e 's/^.*\/\///' -e 's/:/ /' -e 's/[\t ]*$//'` PORT=`grep ^syncport /admin/ezcli.state | sed -e "s/^syncport\t//g"` fi if [ -z "$gsmproxy" ] || [ "$gsmproxy" = "proxy_feed" ] then RSYNC_SSH_PROXY_CMD="" else if [ -r /admin/proxyauth ] && [ -s /admin/proxyauth ]; then RSYNC_SSH_PROXY_CMD="-o \"ProxyCommand corkscrew $gsmproxy %h %p /admin/proxyauth\"" else RSYNC_SSH_PROXY_CMD="-o \"ProxyCommand corkscrew $gsmproxy %h %p\"" fi fi rsync -e "ssh $RSYNC_SSH_OPTS $RSYNC_SSH_PROXY_CMD -p $PORT -i $ACCESSKEY" -ltvrP --protocol=29 --chmod=D+x $RSYNC_DELETE $RSYNC_COMPRESS $custid@feed.greenbone.net:/cert-data/timestamp $FEED_INFO_TEMP_DIR if [ $? -ne 0 ] then log_err "rsync failed, aborting synchronization." rm -rf $FEED_INFO_TEMP_DIR exit -1 fi else log_err "Could not find access key, aborting synchronization." rm -rf $FEED_INFO_TEMP_DIR exit -1 fi FEED_VERSION_SERVER=`cat $FEED_INFO_TEMP_DIR/timestamp` if [ -z "$FEED_VERSION_SERVER" ] then log_err "Could not determine server feed version." rm -rf $FEED_INFO_TEMP_DIR exit -1 fi # Check against FEED_VERSION if [ $FEED_VERSION -lt $FEED_VERSION_SERVER ] ; then FEED_CURRENT=0 else FEED_CURRENT=1 fi # Cleanup rm -rf $FEED_INFO_TEMP_DIR else FEED_CURRENT=0 fi return $FEED_CURRENT } is_db_broken () { DB_BROKEN=0 if [ $POSTGRES -eq 1 ] ; then return fi if [ ! -e $CERT_DB ] then return fi reset_sql_tries until [ "$try_sql" -eq 0 ] do DB_INTEGRITY=`$SQLITE3 $CERT_DB "PRAGMA integrity_check;"` test_sql_exit "Could not check CERT database integrity" done if [ "$DB_INTEGRITY" != "ok" ] then DB_BROKEN=1 log_warning "Database integrity check failed." fi } sql_pg () { if [ "$#" -gt 0 ] then $PSQL -c "$1" else $PSQL -f - fi exit_code=$? if [ 0 -ne "$exit_code" ] then echo "[e] psql exited with code $exit_code for sql: $1." exit 1 fi } sql_scap () { if [ $POSTGRES -eq 1 ] then if [ "$#" -gt 0 ] then sql_pg "$1" else sql_pg $* fi else if [ "$#" -gt 0 ] then $SQLITE $SCAP_DB "$1" else $SQLITE $SCAP_DB $* fi fi } sql () { if [ $POSTGRES -eq 1 ] then if [ "$#" -gt 0 ] then sql_pg "$1" else sql_pg $* fi else if [ "$#" -gt 0 ] then $SQLITE $CERT_DB "$1" else $SQLITE $CERT_DB $* fi fi } cert_db_remove () { if [ $POSTGRES -eq 1 ] ; then sql_pg "DROP SCHEMA IF EXISTS cert CASCADE;" else rm -f $CERT_DB fi } reinit () { log_notice "Reinitialization of the database necessary." cert_db_remove reset_sql_tries until [ "$try_sql" -eq 0 ] do sql < $CERT_RES_DIR/cert_db_init.sql test_sql_exit "Could not reinitialize CERT database" done } check_db_version () { DB_VERSION=`sql "select value from ${SCHEMA_CERT}meta where name = 'database_version';" 2>/dev/null | tr -d '\n\r' || echo 0` case "$DB_VERSION" in 0) reinit;; 1) reinit;; 2) reinit;; 3) reinit;; 4) reinit;; 5) reinit;; esac } do_help () { echo "$0: Sync CERT data" if [ $POSTGRES -eq 1 ]; then echo " --database database name" fi echo " --describe display current feed info" echo " --feedversion display version of this feed" echo " --help display this help" echo " --identify display information" echo " --migrate update database without downloading new state" echo " --refresh update database without downloading new state" echo " --selftest perform self-test" echo " --version display version" echo "" exit 0 } cert_db_exists () { if [ $POSTGRES -eq 1 ] ; then EXISTS=`sql_pg "SELECT exists (SELECT schema_name FROM information_schema.schemata WHERE schema_name = 'cert');" 2>/tmp/ERR | tr -d '\n\r' || echo 0` if [ "$EXISTS" = "f" ] ; then return 1; fi return 0; elif [ -f "$CERT_DB" ] then return 0; fi return 1; } scap_db_exists () { if [ $POSTGRES -eq 1 ] ; then EXISTS=`sql_pg "SELECT exists (SELECT schema_name FROM information_schema.schemata WHERE schema_name = 'scap');" 2>/tmp/ERR | tr -d '\n\r' || echo 0` if [ "$EXISTS" = "f" ] ; then return 1; fi return 0; elif [ -f "$SCAP_DB" ] then return 0; fi return 1; } update_cvss () { if ! scap_db_exists then log_warning "SCAP database not found. Cannot update max_cvss." else reset_sql_tries until [ "$try_sql" -eq 0 ] do SCAP_DB_LASTUPDATE=`sql_scap "SELECT value FROM ${SCHEMA_SCAP}meta WHERE name = 'last_update';"` test_sql_exit "Could not get last_update timestamp from SCAP database" done if [ 0 -ne "$updated_cb" ] || [ $SCAP_DB_LASTUPDATE -gt $DB_LASTUPDATE ] then log_info "Updating Max CVSS for CERT-Bund" reset_sql_tries until [ "$try_sql" -eq 0 ] do sql "${ATTACH_SCAP} ${RECURSIVE_TRIGGERS_OFF} UPDATE ${SCHEMA_CERT}cert_bund_advs SET max_cvss = ( SELECT max(cvss) FROM scap.cves WHERE name IN ( SELECT cve_name FROM ${SCHEMA_CERT}cert_bund_cves WHERE adv_id=cert_bund_advs.id ) AND cvss != 0.0 );" test_sql_exit "Could not update CVSS scores for CERT-Bund Advisories" done else log_info "No CERT-Bund advisories updated and CERT DB newer than SCAP DB. Skipping CVSS recalculation." fi if [ 0 -ne "$updated_dfn" ] || [ $SCAP_DB_LASTUPDATE -gt $DB_LASTUPDATE ] then log_info "Updating Max CVSS for DFN-CERT" reset_sql_tries until [ "$try_sql" -eq 0 ] do sql "${ATTACH_SCAP} ${RECURSIVE_TRIGGERS_OFF} UPDATE ${SCHEMA_CERT}dfn_cert_advs SET max_cvss = ( SELECT max(cvss) FROM scap.cves WHERE name IN ( SELECT cve_name FROM ${SCHEMA_CERT}dfn_cert_cves WHERE adv_id=dfn_cert_advs.id ) AND cvss != 0.0 );" test_sql_exit "Could not update CVSS scores for DFN-CERT Advisories" done else log_info "No DFN-CERT advisories updated and CERT DB newer than SCAP DB. Skipping CVSS recalculation." fi fi } update_cert_db() { if [ -z "$updated_cb" ] then updated_cb=0 fi if [ -z "$updated_dfn" ] then updated_dfn=0 fi if cert_db_exists then check_db_version reset_sql_tries until [ "$try_sql" -eq 0 ] do CB_REFDATE=`sql "SELECT max(modification_time) from ${SCHEMA_CERT}cert_bund_advs;"` test_sql_exit "Could not get CERT-Bund reference date from database" done reset_sql_tries until [ "$try_sql" -eq 0 ] do DFN_REFDATE=`sql "SELECT max(modification_time) from ${SCHEMA_CERT}dfn_cert_advs;"` test_sql_exit "Could not get DFN-CERT reference date from database" done else log_notice "Initializing CERT database." reset_sql_tries until [ "$try_sql" -eq 0 ] do sql < $CERT_RES_DIR/cert_db_init.sql test_sql_exit "Could not initialize CERT database" done DB_LASTUPDATE=0 fi reset_sql_tries until [ "$try_sql" -eq 0 ] do DB_LASTUPDATE=`sql "select value from ${SCHEMA_CERT}meta where name = 'last_update';"` test_sql_exit "Could not get last_update timestamp from CERT database" done if [ -z "$CB_REFDATE" ] then CB_REFDATE=0 fi if [ -z "$DFN_REFDATE" ] then DFN_REFDATE=0 fi if [ -z "$DB_LASTUPDATE" ] then # Happens when initial sync was aborted log_warning "Inconsistent data. Resetting CERT database." cert_db_remove reset_sql_tries until [ "$try_sql" -eq 0 ] do sql < $CERT_RES_DIR/cert_db_init.sql test_sql_exit "Could not reinitialize CERT database" done CB_REFDATE=0 DFN_REFDATE=0 DB_LASTUPDATE=0 fi log_notice "Updating data from feed" # Update CERT-Bund xmlcount=$(ls $CERT_DIR/CB-K*.xml 2> /dev/null | wc -l) if [ $xmlcount -ne 0 ] then for certfile in `ls $CERT_DIR/CB-K*.xml` do filedate=`stat -c "%Y" $certfile | cut -d " " -f 1 | tr -d "-"` filedate=$(( $filedate - ( $filedate % 60 ) )) if [ $filedate -gt $DB_LASTUPDATE ] then log_info "Updating $certfile" reset_sql_tries until [ "$try_sql" -eq 0 ] do exec 4>&1 exit_codes=$( ( set_interrupt_trap (xsltproc --stringparam refdate "$CB_REFDATE" $CERT_RES_DIR/cert_bund_update.xsl $certfile || echo "xsltproc:$?" >&3) | \ (sql | sed '/^\s*$/d' || echo "sqlite3:$?" >&3) ) 3>&1 >&4 ) exec 4>&- test_exit_codes "Update of CERT-Bund Advisories failed at file '$certfile'" done updated_cb=1 else log_info "Skipping $certfile, file is older than last revision" fi done else log_warning "No CERT-Bund advisories found in $CERT_DIR" fi # Update DFN-CERT xmlcount=$(ls $CERT_DIR/dfn-cert-*.xml 2> /dev/null | wc -l) if [ $xmlcount -ne 0 ] then for certfile in `ls $CERT_DIR/dfn-cert-*.xml` do filedate=`stat -c "%Y" $certfile | cut -d " " -f 1 | tr -d "-"` filedate=$(( $filedate - ( $filedate % 60 ) )) if [ $filedate -gt $DB_LASTUPDATE ] then log_info "Updating $certfile" reset_sql_tries until [ "$try_sql" -eq 0 ] do exec 4>&1 exit_codes=$( ( set_interrupt_trap (xsltproc --stringparam refdate "$DFN_REFDATE" $CERT_RES_DIR/dfn_cert_update.xsl $certfile || echo "xsltproc:$?" >&3) | \ (sql | sed '/^\s*$/d' || echo "sqlite3:$?" >&3) ) 3>&1 >&4 ) exec 4>&- test_exit_codes "Update of DFN-CERT Advisories failed at file '$certfile'" done updated_dfn=1 else log_info "Skipping $certfile, file is older than last revision" fi done else log_warning "No DFN-CERT advisories found in $CERT_DIR" fi update_cvss LAST_UPDATE_TIMESTAMP=`sed 's/^\(.\{8\}\)/\1 /' $TIMESTAMP | env TZ="UTC" date +%s -f -` reset_sql_tries until [ "$try_sql" -eq 0 ] do sql "UPDATE ${SCHEMA_CERT}meta SET value ='$LAST_UPDATE_TIMESTAMP' WHERE name = 'last_update';" test_sql_exit "Could not update last_update timestamp in CERT database" done } sync_certdata(){ if [ $REFRESH_ONLY -eq 0 ] then if [ -e $ACCESSKEY ] then log_notice "Found Greenbone Security Feed subscription file, trying to synchronize with Greenbone CERT data Repository ..." notsynced=1 retried=0 mkdir -p "$BASE_SYNC_DIR" read feeduser < $ACCESSKEY custid=`head -1 $ACCESSKEY | cut -d @ -f 1` if [ -z $feeduser ] || [ -z $custid ] then log_err "Could not determine credentials, aborting synchronization." exit 1 fi while [ 1 -eq $notsynced ] do # --protocol=29 is a workaround for a known bug in rsync 3.0.3 if [ -e /admin/ezcli.state ] then gsmproxy=`grep proxy_feed /admin/ezcli.state | sed -e 's/^.*\/\///' -e 's/:/ /' -e 's/[\t ]*$//'` PORT=`grep ^syncport /admin/ezcli.state | sed -e "s/^syncport\t//g"` fi if [ -z "$gsmproxy" ] || [ "$gsmproxy" = "proxy_feed" ] then RSYNC_SSH_PROXY_CMD="" else if [ -r /admin/proxyauth ] && [ -s /admin/proxyauth ]; then RSYNC_SSH_PROXY_CMD="-o \"ProxyCommand corkscrew $gsmproxy %h %p /admin/proxyauth\"" else RSYNC_SSH_PROXY_CMD="-o \"ProxyCommand corkscrew $gsmproxy %h %p\"" fi fi rsync -e "ssh $RSYNC_SSH_OPTS $RSYNC_SSH_PROXY_CMD -p $PORT -i $ACCESSKEY" -ltvrP --protocol=29 --chmod=D+x $RSYNC_DELETE $RSYNC_COMPRESS $custid@feed.greenbone.net:/cert-data $BASE_SYNC_DIR if [ 0 -ne "$?" ] ; then log_err "rsync failed, aborting synchronization." exit 1 fi notsynced=0 done log_notice "Synchronization with the Greenbone CERT data Repository successful." echo else log_err "gsf-access-key not found, aborting synchronization." exit 1 fi fi update_cert_db } do_self_test () { if [ -z "$SELFTEST_STDERR" ] then SELFTEST_STDERR=0 fi if [ $POSTGRES -eq 1 ] ; then POSTGRESQL=`command -v psql` if [ -z "$POSTGRESQL" ]; then if [ 0 -ne $SELFTEST_STDERR ] then echo "psql not found (required)." 1>&2 fi log_err "psql not found (required)." SELFTEST_FAIL=1 fi else SQLITE=`command -v sqlite3` if [ -z "$SQLITE" ]; then if [ 0 -ne $SELFTEST_STDERR ] then echo "sqlite3 not found (required)." 1>&2 fi log_err "sqlite3 not found (required)." SELFTEST_FAIL=1 fi fi if [ -z "$RSYNC" ] then if [ 0 -ne $SELFTEST_STDERR ] then echo "rsync not found (required)." 1>&2 fi log_err "rsync not found (required)." SELFTEST_FAIL=1 fi if [ ! -d $BASE_SYNC_DIR ] then if [ 0 -ne $SELFTEST_STDERR ] then echo "BASE_SYNC_DIR ($BASE_SYNC_DIR) not found." 1>&2 fi log_err "BASE_SYNC_DIR ($BASE_SYNC_DIR) not found." SELFTEST_FAIL=1 fi } psql_setup "tasks" while test $# -gt 0; do case "$1" in --database) if [ $POSTGRES -eq 1 ] ; then shift if [ $# -gt 0 ]; then psql_setup $1 else echo "[e] --database argument missing" exit 1 fi else echo "[e] --database option available only for Postgres" exit 1 fi ;; --version) echo $VERSION exit 0 ;; --identify) echo "CERTSYNC|$SCRIPT_NAME|$VERSION|$FEED_NAME|$RESTRICTED|CERTSYNC" exit 0 ;; --describe) do_describe exit 0 ;; --feedversion) do_feedversion exit 0 ;; --help) do_help exit 0 ;; --refresh) REFRESH_ONLY=1 ;; --migrate) REFRESH_ONLY=1 ;; --selftest) SELFTEST_FAIL=0 SELFTEST_STDERR=1 do_self_test exit $SELFTEST_FAIL ;; --feedcurrent) is_feed_current exit $? ;; esac shift done SELFTEST_FAIL=0 do_self_test if [ $SELFTEST_FAIL -ne 0 ] then exit 1 fi if [ $(id -u) -ne $(stat -c %u $CERT_DB) ] then log_err "Not synchronizing or updating the database since the current user is not the owner of the database." echo "Not synchronizing or updating the database since the current user is not the owner of the database." exit 1 fi if [ $ENABLED -ne 1 ] then log_notice "Synchronization of CERT data with network is disabled, will only perform local operations." REFRESH_ONLY=1 fi is_db_broken if [ $DB_BROKEN -eq 1 ] then log_notice "Purging corrupted database." cert_db_remove else is_feed_current if [ $FEED_CURRENT -eq 1 ] then log_notice "Feed is already current, skipping synchronization." exit 0 fi fi sync_certdata exit 0 ��������������������������������������������������������������������������openvas-manager-6.0.9/tools/cve_youngerthan.xsl�����������������������������������������������������000644 �001751 �001751 �00000003400 12557600612 022752� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <!-- OpenVAS $Id: cve_youngerthan.xsl 20229 2014-09-01 13:13:29Z mwiegand $ Description: Select CVEs which have been updated after a certain date. Authors: Henri Doreau <henri.doreau@greenbone.net> Copyright: Copyright (C) 2011 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:vuln="http://scap.nist.gov/schema/vulnerability/0.4" xmlns:cpe-lang="http://cpe.mitre.org/language/2.0" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/0.1" xmlns:cve="http://scap.nist.gov/schema/feed/vulnerability/2.0" xmlns:cvss="http://scap.nist.gov/schema/cvss-v2/0.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:patch="http://scap.nist.gov/schema/patch/0.1" xmlns:date="http://exslt.org/dates-and-times" extension-element-prefixes="date"> <xsl:template match="cve:nvd"> <xsl:copy> <xsl:for-each select="cve:entry[floor (date:seconds (vuln:last-modified-datetime/text())) > number($refdate)]"> <xsl:copy-of select="."/> </xsl:for-each> </xsl:copy> </xsl:template> </xsl:stylesheet> ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/tools/cert_db_init_pg.sql�����������������������������������������������������000644 �001751 �001751 �00000005763 12557600612 022674� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������ /* * OpenVAS * $Id: cert_db_init.sql 15096 2013-01-10 10:16:01Z timopollmeier $ * Description: Postgres CERT database initialization script * * Authors: * Timo Pollmeier <timo.pollmeier@greenbone.net> * * Copyright: * Copyright (C) 2014 Greenbone Networks GmbH * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. */ DROP SCHEMA IF EXISTS cert CASCADE; CREATE SCHEMA cert; SET search_path TO cert; /* Create new tables and indices. */ CREATE TABLE meta (id SERIAL PRIMARY KEY, name text UNIQUE, value text); INSERT INTO meta (name, value) VALUES ('database_version', '6'); INSERT INTO meta (name, value) VALUES ('last_update', '0'); CREATE TABLE cert_bund_advs ( id SERIAL PRIMARY KEY, uuid text UNIQUE, name text UNIQUE, comment TEXT, creation_time integer, modification_time integer, title TEXT, summary TEXT, cve_refs INTEGER, max_cvss FLOAT ); CREATE UNIQUE INDEX cert_bund_advs_idx ON cert_bund_advs (name); CREATE INDEX cert_bund_advs_by_creation_time ON cert_bund_advs (creation_time); CREATE TABLE cert_bund_cves ( adv_id INTEGER, cve_name VARCHAR(20) ); CREATE INDEX cert_bund_cves_adv_idx ON cert_bund_cves (adv_id); CREATE INDEX cert_bund_cves_cve_idx ON cert_bund_cves (cve_name); CREATE TABLE dfn_cert_advs ( id SERIAL PRIMARY KEY, uuid text UNIQUE, name text UNIQUE, comment TEXT, creation_time integer, modification_time integer, title TEXT, summary TEXT, cve_refs INTEGER, max_cvss FLOAT ); CREATE UNIQUE INDEX dfn_cert_advs_idx ON dfn_cert_advs (name); CREATE INDEX dfn_cert_advs_by_creation_time ON dfn_cert_advs (creation_time); CREATE TABLE dfn_cert_cves ( adv_id INTEGER, cve_name text ); CREATE INDEX dfn_cert_cves_adv_idx ON dfn_cert_cves (adv_id); CREATE INDEX dfn_cert_cves_cve_idx ON dfn_cert_cves (cve_name); /* Create deletion triggers. */ CREATE OR REPLACE FUNCTION cert_delete_bund_adv () RETURNS TRIGGER AS $$ BEGIN DELETE FROM cert_bund_cves where adv_id = old.id; RETURN old; END; $$ LANGUAGE plpgsql; CREATE TRIGGER bund_delete AFTER DELETE ON cert_bund_advs FOR EACH ROW EXECUTE PROCEDURE cert_delete_bund_adv (); CREATE OR REPLACE FUNCTION cert_delete_cve () RETURNS TRIGGER AS $$ BEGIN DELETE FROM dfn_cert_cves where adv_id = old.id; RETURN old; END; $$ LANGUAGE plpgsql; CREATE TRIGGER cve_delete AFTER DELETE ON dfn_cert_advs FOR EACH ROW EXECUTE PROCEDURE cert_delete_cve (); �������������openvas-manager-6.0.9/tools/cert_bund_update.xsl����������������������������������������������������000644 �001751 �001751 �00000005401 12557600612 023064� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <!-- OpenVAS $Id$ Description: Generate SQL (SQLite compatible) queries to update the CERT-Bund tables of the CERT database. Authors: Timo Pollmeier <timo.pollmeier@greenbone.net> Copyright: Copyright (C) 2014 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cb="http://www.cert-bund.de" xmlns:str="http://exslt.org/strings" xmlns:date="http://exslt.org/dates-and-times" extension-element-prefixes="str date" > <xsl:output method="text"/> <xsl:param name="refdate" select="'0'"/> <xsl:template match="/"> BEGIN TRANSACTION; <xsl:apply-templates select="Advisories"/> COMMIT; </xsl:template> <xsl:template match="Advisory"> <xsl:choose> <xsl:when test="floor (date:seconds (str:replace (Date, ' ', 'T'))) >= number($refdate)"> INSERT OR REPLACE INTO cert_bund_advs ( uuid, name, comment, creation_time, modification_time, title, summary, cve_refs ) VALUES ( "<xsl:value-of select="Ref_Num"/>", "<xsl:value-of select="Ref_Num"/>", "", <xsl:value-of select="floor (date:seconds (str:replace (Date, ' ', 'T')))"/>, <xsl:value-of select="floor (date:seconds (str:replace (Date, ' ', 'T')))"/>, "<xsl:value-of select="str:replace(Title/text(), '"', '""')"/>", "<xsl:for-each select="Description/Element/TextBlock"> <xsl:value-of select="str:replace(text(), '"', '""')"/> <xsl:if test="position() != last()"><xsl:text> </xsl:text></xsl:if> </xsl:for-each>", <xsl:value-of select="count(CVEList/CVE)"/> ); <xsl:for-each select="CVEList/CVE"> INSERT OR REPLACE INTO cert_bund_cves ( adv_id, cve_name ) VALUES ( (SELECT id FROM cert_bund_advs WHERE name = "<xsl:value-of select="../../Ref_Num"/>"), "<xsl:value-of select="."/>" ); </xsl:for-each> </xsl:when> <xsl:otherwise> /* filtered entry dated <xsl:value-of select="Date"/> */ </xsl:otherwise> </xsl:choose> </xsl:template> </xsl:stylesheet>���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/COPYING�����������������������������������������������������������������������000644 �001751 �001751 �00000043122 12557600617 016727� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������ GNU GENERAL PUBLIC LICENSE Version 2, June 1991 Copyright (C) 1989, 1991 Free Software Foundation, Inc. 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users. This General Public License applies to most of the Free Software Foundation's software and to any other program whose authors commit to using it. (Some other Free Software Foundation software is covered by the GNU Library General Public License instead.) You can apply it to your programs, too. When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for this service if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs; and that you know you can do these things. To protect your rights, we need to make restrictions that forbid anyone to deny you these rights or to ask you to surrender the rights. These restrictions translate to certain responsibilities for you if you distribute copies of the software, or if you modify it. For example, if you distribute copies of such a program, whether gratis or for a fee, you must give the recipients all the rights that you have. You must make sure that they, too, receive or can get the source code. And you must show them these terms so they know their rights. We protect your rights with two steps: (1) copyright the software, and (2) offer you this license which gives you legal permission to copy, distribute and/or modify the software. Also, for each author's protection and ours, we want to make certain that everyone understands that there is no warranty for this free software. If the software is modified by someone else and passed on, we want its recipients to know that what they have is not the original, so that any problems introduced by others will not reflect on the original authors' reputations. Finally, any free program is threatened constantly by software patents. We wish to avoid the danger that redistributors of a free program will individually obtain patent licenses, in effect making the program proprietary. To prevent this, we have made it clear that any patent must be licensed for everyone's free use or not licensed at all. The precise terms and conditions for copying, distribution and modification follow. GNU GENERAL PUBLIC LICENSE TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION 0. This License applies to any program or other work which contains a notice placed by the copyright holder saying it may be distributed under the terms of this General Public License. The "Program", below, refers to any such program or work, and a "work based on the Program" means either the Program or any derivative work under copyright law: that is to say, a work containing the Program or a portion of it, either verbatim or with modifications and/or translated into another language. (Hereinafter, translation is included without limitation in the term "modification".) Each licensee is addressed as "you". Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the Program (independent of having been made by running the Program). Whether that is true depends on what the Program does. 1. You may copy and distribute verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty; and give any other recipients of the Program a copy of this License along with the Program. You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee. 2. You may modify your copy or copies of the Program or any portion of it, thus forming a work based on the Program, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions: a) You must cause the modified files to carry prominent notices stating that you changed the files and the date of any change. b) You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License. c) If the modified program normally reads commands interactively when run, you must cause it, when started running for such interactive use in the most ordinary way, to print or display an announcement including an appropriate copyright notice and a notice that there is no warranty (or else, saying that you provide a warranty) and that users may redistribute the program under these conditions, and telling the user how to view a copy of this License. (Exception: if the Program itself is interactive but does not normally print such an announcement, your work based on the Program is not required to print an announcement.) These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Program, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works. But when you distribute the same sections as part of a whole which is a work based on the Program, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it. Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the intent is to exercise the right to control the distribution of derivative or collective works based on the Program. In addition, mere aggregation of another work not based on the Program with the Program (or with a work based on the Program) on a volume of a storage or distribution medium does not bring the other work under the scope of this License. 3. You may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following: a) Accompany it with the complete corresponding machine-readable source code, which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, b) Accompany it with a written offer, valid for at least three years, to give any third party, for a charge no more than your cost of physically performing source distribution, a complete machine-readable copy of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, c) Accompany it with the information you received as to the offer to distribute corresponding source code. (This alternative is allowed only for noncommercial distribution and only if you received the program in object code or executable form with such an offer, in accord with Subsection b above.) The source code for a work means the preferred form of the work for making modifications to it. For an executable work, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the executable. However, as a special exception, the source code distributed need not include anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component itself accompanies the executable. If distribution of executable or object code is made by offering access to copy from a designated place, then offering equivalent access to copy the source code from the same place counts as distribution of the source code, even though third parties are not compelled to copy the source along with the object code. 4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance. 5. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Program or its derivative works. These actions are prohibited by law if you do not accept this License. Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it. 6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions. You may not impose any further restrictions on the recipients' exercise of the rights granted herein. You are not responsible for enforcing compliance by third parties to this License. 7. If, as a consequence of a court judgment or allegation of patent infringement or for any other reason (not limited to patent issues), conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not distribute the Program at all. For example, if a patent license would not permit royalty-free redistribution of the Program by all those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Program. If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is intended to apply and the section as a whole is intended to apply in other circumstances. It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system, which is implemented by public license practices. Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system; it is up to the author/donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice. This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License. 8. If the distribution and/or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Program under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded. In such case, this License incorporates the limitation as if written in the body of this License. 9. The Free Software Foundation may publish revised and/or new versions of the General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Program specifies a version number of this License which applies to it and "any later version", you have the option of following the terms and conditions either of that version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of this License, you may choose any version ever published by the Free Software Foundation. 10. If you wish to incorporate parts of the Program into other free programs whose distribution conditions are different, write to the author to ask for permission. For software which is copyrighted by the Free Software Foundation, write to the Free Software Foundation; we sometimes make exceptions for this. Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally. NO WARRANTY 11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. END OF TERMS AND CONDITIONS How to Apply These Terms to Your New Programs If you develop a new program, and you want it to be of the greatest possible use to the public, the best way to achieve this is to make it free software which everyone can redistribute and change under these terms. To do so, attach the following notices to the program. It is safest to attach them to the start of each source file to most effectively convey the exclusion of warranty; and each file should have at least the "copyright" line and a pointer to where the full notice is found. <one line to give the program's name and a brief idea of what it does.> Copyright (C) <year> <name of author> This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA Also add information on how to contact you by electronic and paper mail. If the program is interactive, make it output a short notice like this when it starts in an interactive mode: Gnomovision version 69, Copyright (C) year name of author Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'. This is free software, and you are welcome to redistribute it under certain conditions; type `show c' for details. The hypothetical commands `show w' and `show c' should show the appropriate parts of the General Public License. Of course, the commands you use may be called something other than `show w' and `show c'; they could even be mouse-clicks or menu items--whatever suits your program. You should also get your employer (if you work as a programmer) or your school, if any, to sign a "copyright disclaimer" for the program, if necessary. Here is a sample; alter the names: Yoyodyne, Inc., hereby disclaims all copyright interest in the program `Gnomovision' (which makes passes at compilers) written by James Hacker. <signature of Ty Coon>, 1 April 1989 Ty Coon, President of Vice This General Public License does not permit incorporating your program into proprietary programs. If your program is a subroutine library, you may consider it more useful to permit linking proprietary applications with the library. If this is what you want to do, use the GNU Library General Public License instead of this License. ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/CHANGES�����������������������������������������������������������������������000644 �001751 �001751 �00000322067 12761270652 016676� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager 6.0.9 (2016-08-30) This is the ninth maintenance release of the openvas-manager 6.0 module for the Open Vulnerability Assessment System release 8 (OpenVAS-8). This release adds the new 'SCP' and 'SNMP' alert methods and addresses a number of issues discovered after the release of OpenVAS Manager 6.0.8. It also incorporates several improvements from the development branch of OpenVAS. Please see below for a comprehensive list of changes. Many thanks to everyone who contributed to this release: Hani Benhabiles, Matthew Mundell and Timo Pollmeier. Main changes compared to 6.0.8: * Support for the new 'SCP' alert method has been added. * Support for the new 'SNMP' alert method has been added. * The documentation of the OMP protocol has been updated. * Handling of report deltas has been improved. * Handling of filtered host counts has been improved. * An issue which caused long OSP scans to terminate prematurely has been fixed. * Pagination handling has been improved. * Handling of unknown severities has been improved. * Handling of long inputs from the scanner has been improved. * Clones of predefined report formats are now implicitly trusted. * Handling of dependant resources in GET command responses has been improved. * Support for filtering for orphaned permissions has been added. * Log messages have been improved to include the resource name wherever possible. * Log messages for internal error cases have been improved. * The process title of processes handling scans will now contain the report UUID. * An issue which cause an unfinished task with a schedule to be restarted on the second period instead of being resumed has been fixed. * Resuming of scheduled slave scans has been improved. * An issue which cause the NVT selection of an imported scan config to be empty under certain circumstances has been fixed. * Handling of failed slave connections has been improved. * An issue which caused users to appear multiple times in an observer list under certain circumstances has been fixed. * Handling of empty credentials has been improved. * Handling of targets belonging to another user has been improved. * An issue which caused unrelated error messages to be shown when creating new tasks under certain circumstances has been fixed. * An issue which cause the alive check setting to revert to its default value when cloning targets has been fixed. * Handling of internal database backups has been improved. * Results used in alerts are now sorted by severity. * The 'Anonymous_XML' report format now strips even more potentially sensitive information. * Signal handling has been improved. openvas-manager 6.0.8 (2016-02-26) This is the eighth maintenance release of the openvas-manager 6.0 module for the Open Vulnerability Assessment System release 8 (OpenVAS-8). This release addresses a number of issues discovered after the release of OpenVAS Manager 6.0.7 and incorporates several improvements from the development branch of OpenVAS. Please see below for a comprehensive list of changes. Many thanks to everyone who contributed to this release: Hani Benhabiles and Matthew Mundell. Main changes compared to 6.0.7: * An issue which caused the trashcans of other users to be emptied as well when one user emptied their trashcan has been fixed. * An issue which caused some scheduled tasks to sometimes not be executed when the Manager was started with disabled commands has been addressed. * An issue which caused incorrect task counts under certain conditions has been addressed. * The Verinice_ISM report format now support setting an "ISM Control Description" parameter. * Support for automatically deleting older reports has been added. * Handling of OSP errors has been improved. * Documentation has been updated. openvas-manager 6.0.7 (2015-12-21) This is the seventh maintenance release of the openvas-manager 6.0 module for the Open Vulnerability Assessment System release 8 (OpenVAS-8). This release addresses a number of issues discovered after the release of OpenVAS Manager 6.0.6 and incorporates several improvements from the development branch of OpenVAS. Please see below for a comprehensive list of changes. Many thanks to everyone who contributed to this release: Hani Benhabiles, Matthew Mundell, Timo Pollmeier and Michael Wiegand. Main changes compared to 6.0.6: * A new alert method "Send" has been added, for sending the report to a TCP listener. * Support for using the 'Verinice Source ID' tag in the Verinice_ISM report format has been added. * Support for triggering and alert when a powerfilter matches a certain number of results has been added. * Support for importing OSP scan configs has been added. * OSP support has been improved. * An issue which caused a master to attempt to clean up non-existent credentials on its slave has been fixed. * An issue which caused prognostic reports to be unavailable in the NBE report format has been fixed. * An issue which caused a database migration to fail under certain circumstances has been fixed. * An issue which caused overrides to not be applied in the CSV report format has been fixed. * An issue which caused the internal scheduler to stop manually started tasks under certain circumstances has been fixed. * An issue which made it possible to delete ESXi credentials while they were still be used by a task has been addressed. * An issue which caused rebuild processes to hang under certain circumstances has been fixed. * An issue which caused incorrect NVT counts under certain circumstances has been fixed. * An issue which caused the "Attach HTML report" parameter to be absent from the Verinice_ISM report format has been fixed. * The handling of slave task after a connection loss between master and slave has been improved. * The handling of the "once" schedule has been improved. * Database locking when rebuilding has been improved to prevent processes from accessing the database in an inconsistent state. * Improved handling of signals during an active rebuild. * A number of memory leaks have been removed. * Documentation has been updated. * Several performance improvements. openvas-manager 6.0.6 (2015-09-28) This is the sixth maintenance release of the openvas-manager 6.0 module for the Open Vulnerability Assessment System release 8 (OpenVAS-8). This release addresses a number of issues discovered after the release of OpenVAS Manager 6.0.5 and incorporates several improvements from the development branch of OpenVAS. It raises the required minimum OpenVAS Libraries version to 8.0.5. Please see below for a comprehensive list of changes. Many thanks to everyone who contributed to this release: Hani Benhabiles, Matthew Mundell, Timo Pollmeier and Michael Wiegand. Main changes compared to 6.0.5: * The required minimum OpenVAS Libraries version has increased to 8.0.5. * An issue which caused different permission when sharing objects in a group has been fixed. * An issue with displaying error results when using dynamic severity has been fixed. * Support for OSP parameter names has been improved. * Conditions triggering a privilege drop are checked more precisely. * An issue which cause the current_credentials table to be missing under certain circumstances has been fixed. * The Verinice_ISM report format plugin has been updated. * An issue which caused inconsistent severity values under certain circumstances has been fixed. * The responsiveness under heavy load has been improved. * Host details for slave tasks are now available during running tasks. * Task user tags are now available in the report XML export. * OSP scan details are now only requested once the scan has finished. * NVTi cache update handling has been improved. * Authentication failures are now logged. * An issue which caused incorrect NVT counts in scan configurations has been addressed. openvas-manager 6.0.5 (2015-08-03) This is the fifth maintenance release of the openvas-manager 6.0 module for the Open Vulnerability Assessment System release 8 (OpenVAS-8). This release addresses a number of issues discovered after the release of OpenVAS Manager 6.0.4 and incorporates several improvements from the development branch of OpenVAS. Please see below for a comprehensive list of changes. Many thanks to everyone who contributed to this release: Hani Benhabiles, Matthew Mundell, Timo Pollmeier and Michael Wiegand. Main changes compared to 6.0.4: * An issue which caused reports to appear empty due to report generation scripts being installed with insufficient permissions has been fixed. * An issue which caused processes spawned by OpenVAS Manager when executing schedules to miss signals when executing scheduled task due to an overly restrictive signal mask has been fixed. * An issue which caused credentials to not be used when a user ran a task for which the target credentials were owned by another user has been addressed. * The activation and expiration time of certificates used for OSP scanners is now properly verified. * The handling of dynamic severities for OSP results has been improved. * Usernames are now allowed to contain dot (".") characters. * Manager now uses "zh_CN" instead of "zh" when referring to the Chinese language. * Support for configurable subjects and messages in email alerts has been added. * Support for ports in OSP results has been added. openvas-manager 6.0.4 (2015-07-09) This is the fourth maintenance release of the openvas-manager 6.0 module for the Open Vulnerability Assessment System release 8 (OpenVAS-8). This release addresses a number of issues discovered after the release of OpenVAS Manager 6.0.3 and incorporates several improvements from the development branch of OpenVAS. Please see below for a comprehensive list of changes. Many thanks to everyone who contributed to this release: Benot Allard, Hani Benhabiles, Matthew Mundell, Timo Pollmeier and Michael Wiegand. Main changes compared to 6.0.3: * An issue which caused duplicate scan results under certain circumstances has been fixed. * An issue which caused a segmentation fault when deleting tasks referring to nonexistent targets from the trash can has been fixed. * An issue which caused scheduled tasks to be executed multiple times when multiple users had the correct permissions has been fixed. * An issue which caused processes spawned by OpenVAS Manager to miss signals when executing scheduled task due to an overly restrictive signal mask has been fixed. * An issue which caused results not in the critical range to be not displayed when using the PCI-DSS severity class type has been addressed. * An issue which cause global users to be missing from selection when creating new permissions has been addressed. * An issue which caused the result description to not be imported correctly when importing reports has been fixed. * An issue which caused results with the "Log" level to be missing from reports when using the PostgreSQL back end has been fixed. * An issue which caused an internal error when using invalid minimum CVSS base values has been addressed. * An issue with incorrect result counting has been addressed. * Performance of database access when a report is created from an alert has been improved. * CVE results from OSP scanners with known CVEs now automatically use the CVE severity. * The critical range for the PCI-DSS severity class type now correctly starts at 4.0 instead of 4.3. * Handling of CVEs associated with results has been improved. * Users are now allowed to create a resource permission if they have GET access to the subject instead of MODIFY access. * Several support scripts are now executed directly instead of via an additional shell. * The RFP "generate" scripts are now installed with executable permissions. * A number of issues found with static code analysis have been addressed. * The QoD value for "general_note" results is now set correctly. * Support for filtering reports by CVE has been added. * Timestamp support has been added for OSP scan results. openvas-manager 6.0.3 (2015-05-11) This is the third maintenance release of the openvas-manager 6.0 module for the Open Vulnerability Assessment System release 8 (OpenVAS-8). This release adds the "Verinice ITG" report format to the list of predefined report formats and improves the handling of QoD information in report lists. It also fixes an issue with signal handling and improves cross device support. Many thanks to everyone who contributed to this release: Matthew Mundell and Timo Pollmeier. Main changes compared to 6.0.2: * Cross device support when deleting RFPs has been improved. * The "Verinice ITG" report format is now a predefined report format. * An issue which caused processes spawned by OpenVAS Manager to miss signals due to an overly restrictive signal mask has been fixed. * The handling of QoD information in report lists has been improved. openvas-manager 6.0.2 (2015-04-30) This is the second maintenance release of the openvas-manager 6.0 module for the Open Vulnerability Assessment System release 8 (OpenVAS-8). This release adds support for listening on IPv6 addresses, fixes inconsistencies in the reported severity level and improves the handling of search phrases. Many thanks to everyone who contributed to this release: Hani Benhabiles, Miguel Angel Cabrera Moya, Sven Haardiek, Timo Pollmeier, Ryan Schulze and Michael Wiegand. Main changes compared to 6.0.1: * Support for listening on IPv6 addresses has been added. * An issue which caused inconsistencies in the reported severity level when removing overrides in some circumstances has been addressed. * Improved handling of exact search phrases in powerfilter. * An issue which cause the search phrase to not be applied properly when filtering NVTs has been addressed. * Two new "--optimize" options have been added. * The detection of the PostgreSQL include directories has been made more robust. * An issue which prevented openvas-manager from building with GLib =< 2.32 has been addressed. openvas-manager 6.0.1 (2015-04-01) This is the first maintenance release of the openvas-manager 6.0 module for the Open Vulnerability Assessment System release 8 (OpenVAS-8). This release addresses various improvements and bug fixes of which none is particularly outstanding, but not all just minor either. Many thanks to everyone who contributed to this release: Matthew Mundell, Timo Pollmeier and Michael Wiegand. Main changes compared to 6.0.0: * Treat missing filter keywords owner and permission as if they had the value "any". The old default behavior can be reproduced by using the keywords with an empty value. * Task severity: Consider based on QoD default (70%) instead of 0%. This way the task severity matches the results severity when using defaults. * Allow the user to create a permission if the user has "modify" access to the subject. This allows users to create permissions on roles owned by other users, for example. * Bugfix to enable autoamtic update of CERT-Bund. * Bugfix to re-add the cvss base vector of NVTs. * Bugfixes/improvements about object managment for objects with dependencies dependencies (for example: target has credentials). * Always set trust as "yes" for predefined report formats. * Bugfix: Quote timezones as these can have multiple words. * Bugfix: Get results severity based on user, not based on owner. * Improved package config and build routine. * Various minor bugfixes. openvas-manager 6.0.0 (2015-03-17) This is the first release of the openvas-manager 6.0 module for the Open Vulnerability Assessment System release 8 (OpenVAS-8). The OpenVAS Manager is the central management service between the actual security scanner and various user clients. OpenVAS Manager 6.0 introduces a large number of new and improved features, for example scanner management, the alternative use of PostgreSQL as database back end and Quality of Detection (QoD) information. It also introduces the new roles "Guest", "Monitor" and "Super Admin". Please see the comprehensive list below for more details. Please make sure to read the INSTALL file for important installation and migration information, even and especially if you have used OpenVAS Manager before. Many thanks to everyone who has contributed to this release: Benot Allard, Michal Ambroz, Hani Benhabiles, Henri Doreau, Michael Meyer, Matthew Mundell, Timo Pollmeier, Jan-Oliver Wagner and Michael Wiegand. Main changes compared to the 5.0 series: * OpenVAS Manager now supports the alternative use of PostgreSQL as database back end instead of SQLite3. * Support for Scanner Management has been added. This includes the configuration part for scanners accompanied with a new set of OMP commands (create_scanner, get_scanners, modify_scanner, delete_scanner and verity_scanner). Next, it covers the extensions of tasks with the selected scanner type and the extension of Scan Configurations to reflect different scanner types. * Support for the new SecInfo subtype CERT-Bund Advisory (CERT_BUND_ADV) has been added. * Support for QoD (Quality of Detection) information has been added. * Support for mixing objects owned by different users has been extended. * Support for a "Guest" role has been added. * Support for a "Monitor" role has been added. * Support for a "Super Admin" role has been added. * Support for associating ESXi credentials with targets has been added. * The new OMP command "GET_AGGREGATES" has been added in order to deliver data tables for use in diagrams. * Support for task charts has been added. * Support for filtering NVTs based on their script_tags has been added. * A new "Modify Task" wizard has been added. * Support for displaying solution type information has been added. * Support for internal database optimization has been added. * Support for ownership of users, roles, groups and permissions has been introduced. * Support for the changing of user names has been added. * Support for Once-off schedules has been added. * Support for limiting the number of times a task runs with a periodic schedule has been added. * Support for splitting the CPE dictionary has been added to the SCAP data synchronization script. * The "xml_split" helper script for splitting SCAP data is now installed by default. * Report powerfilters now support the "timezone" keyword. * The OMP version is now included in reports. * Tasks on slaves are now stopped when the controlling master is terminated. * Alterable task now stay alterable even when their last report has been removed. * Solution type information is now included in report formats. * OpenVAS Manager will no longer abort if previous attempts to the rebuild or update the database have failed. * The results table and the OMP results objects have been extended. * The "Anonymous XML" report format has been added. * Support for displaying host authentication results has been added to the LaTeX, PDF and HTML reports. * The GET_INFO command can now be used for NVTs as well. * Support for "openvasrc" files has been removed from OMP. * For SSH credentials, the certificate is now extracted from private key when needed. * Preemptive Scanner connecting has been removed. Manager now only connects on NVT cache update or task starting, resuming and stopping. This improves response time. * Support for the task pausing feature has been removed. This includes the removal of OMP commands "pause_task" and "resume_paused_task". * Support for the target locators feature has been removed. This includes the removal of the OMP command "get_target_locators". * The "--slisten" and "--sport" command line options have been removed as they are now part of the scanner properties. * An issue which caused individual NVT timeout values to not be transferred to slaves has been fixed. * The "--list-users" command line option has been renamed to "--get-users". * The "--role" command line option now applies to "--get-users" as well. * The "get_results" OMP command now behaves more consistent with other get_... OMP commands. * The task name is now included in more report formats. * The value of the NVT tag "affected" is now included in more report formats. * The performance has been improved in a number of places. * The strategy of SQL retries in high-load situation has been improved. * The handling of user groups when dropping privileges has been improved. * The manager will now retry starting of scheduled tasks when the start OMP fails. * Sorting of numerical values has been improved. * Library checks during package configuration have been improved and are now more comprehensive and consistent. * Signal handling has been improved. * The OMP protocol documentation has been updated. * Code cleanups. Main changes compared to 6.0+beta6: * Solution type information is now included in report formats. * An issue with empty scan end times has been fixed. * Performance of report result counting has been improved. * A check which resulted in scheduled tasks not starting at all if they could not start within a short interval has been removed. * Signal handling has been improved. * Support for splitting the CPE dictionary has been added to the SCAP data synchronization script. * OpenVAS Manager will no longer abort if previous attempts to the rebuild or update the database have failed. * The "Anonymous XML" report format has been added. * The OMP protocol documentation has been updated. * The GET_INFO command can now be used for NVTs as well. * Result in report results counting and caching functions now use a default minimum QoD of 70 for consistency. * Support for displaying host authentication results has been added to the LaTeX, PDF and HTML reports. * Support for CERT-Bund advisories has been improved. * An issues which caused a segmentation fault when rebuilding the database of 32 bit installations under certain circumstances has been fixed. * The "xml_split" helper script for splitting SCAP data is now installed by default. * Support for mixing of the current user's targets and tasks, with other people's targets and tasks has been added. * Support for mixing of the current user's configs and tasks, with other people's configs and tasks has been added. * Support for mixing of the current user's scanners and tasks, with other people's scanners and tasks has been added. * Support for mixing of the current user's port lists and targets, with other people's port lists and targets has been added. * Support for mixing of the current user's credentials and targets, with other people's credentials and targets has been added. * Support for mixing of the current user's report formats and alerts, with other people's report formats and alerts has been added. * Support for mixing of the current user's filters and alerts, with other people's filters and alerts has been added. * Code cleanups. openvas-manager 6.0+beta6 (2015-02-11) This is the sixth beta version of the upcoming 6.0 release of the OpenVAS Manager. It is the central management service between the actual security scanners and various user clients. This release improves support for OSP scanner and introduces support for Quality of Detection (QoD) information. It also adds support for once-off schedules, for limiting the number of times a task runs with a periodic schedule and for more resource mixing between users. It also contains a number of bug fixes and various other improvements. Many thanks to everyone who has contributed to this release: Hani Benhabiles, Matthew Mundell, Timo Pollmeier and Michael Wiegand. Main changes since 6.0+beta5: * Support for OSP host details has been added. * Support for modifying an existing scanner has been added. * Support for Once-off schedules has been added. * Support for limiting the number of times a task runs with a periodic schedule has been added. * Enable mixing of the current user's alerts, schedules and tasks, with other people's alerts, schedules and tasks, when permissions allow it. * Support for Quality of Detection (QoD) information has been introduced. * A segmentation fault which occurred when deleting users using the "--delete-user" parameter has been fixed. * An issue which caused individual NVT timeout values to not be transferred to slaves has been fixed. * An issue with NVT counting in scan configs has been fixed. * Incorrect column name in the SCAP database have been fixed. * An issue with result counting when using certain filters has been fixed. * An issue which prevented the Super Admin from cloning certain objects has been fixed. * An issue with running scheduled tasks with durations has been fixed. * Tasks on slaves are now stopped when the controlling master is terminated. * Alterable task now stay alterable even when their last report has been removed. * The default value for the "autofp" setting used for alerts has been changed to 0 for consistency with other views. * Report lists now ensure that a apply_overrides value is set. * Sorting of numerical values has been improved. * Handling of missing report format plugins for alerts has been made more consistent. * Library checks during package configuration have been improved and are now more comprehensive and consistent. * OSP support has been improved. * PostgreSQL support has been improved. * The OMP documentation has been updated. * Documentation of database optimization has been improved. * Code cleanups. openvas-manager 6.0+beta5 (2015-01-12) This is the fifth beta version of the upcoming 6.0 release of the OpenVAS Manager. It is the central management service between the actual security scanners and various user clients. This release improves support for the "Super Admin" permission, introduce ownership for users, roles and groups, allow sharing of sensors and task between users, adds a `--optimize` command line option, start work on consolidation of the different RESUME_* OMP commands as well as fixes various smaller issues. Many thanks to everyone who has contributed to this release: Timo Pollmeier, Jan-Oliver Wagner, Matthew Mundell, Michael Wiegand and Hani Benhabiles. Main changes since 6.0+beta4: * Add settings for default resource selections on the "New Task" and "New Target" pages in GSA and get settings in Advanced Task Wizard. * LaTeX report format improvement * Retry starting of scheduled tasks when the start OMP fails. * Add new "Modify Task" wizard. * Add RESOURCE/TYPE to CREATE_PERMISSION, so that Super permissions can be created on Roles, Groups and Users. * Add RESOURCE/TYPE to MODIFY_PERMISSION, so that editing of Super permissions works. * Allow severity to be null in CERT-Bund and DFN-CERT Advisories, CPEs and OVAL definitions if no severity is available from CVEs. * Performance improvement for GET_REPORTS. * Add solution_type column to NVTs. * Enable mixing of the current user's slaves and tasks, with other people's slaves and tasks, when permissions allow it. * Add command line option --optimize, with arguments "analyze" and "vacuum". * Add indices for NVTs, CVEs and CPEs and change init_aggregate_iterator to use them. Remove unused features from init_aggregate_iterator for simplicity. * Make --role apply to --get-users too. * Introduce ownership of users, roles and groups. * Major rewrite of the RESUME_* OMP commands. * Introduce ownership of permissions. * Account for Super permissions in asset reports. * Add NEW_NAME to OMP MODIFY_USER, to allow changing of user names. openvas-manager 6.0+beta4 (2014-11-21) This is the fourth beta version of the upcoming 6.0 release of the OpenVAS Manager. It is the central management service between the actual security scanners and various user clients. This release establishes support for PostgreSQL as an alternative database backend. It also adds support for a "Super Admin" role and contains a number of smaller improvements. Many thanks to everyone who has contributed to this release: Benot Allard, Michal Ambroz, Hani Benhabiles, Henri Doreau, Michael Meyer, Matthew Mundell, Timo Pollmeier, Jan-Oliver Wagner and Michael Wiegand. Main changes since 6.0+beta3: * OpenVAS Manager now supports the alternative use of PostgreSQL as database backend instead of SQLite3. * Support for a "Super Admin" role has been added. * Performance for iterating over host details has been improved. * The handling of SIGABRT signals has been improved, ensuring an appropriate exit code if such a signal occurs. * The handling of task end times has been improved. * The strategy of SQL retries in high-load situation has been improved. * Support for filtering NVTs based on their script_tags has been added. * Logging has been improved. * The handling of user groups when dropping privileges has been improved. * Timezone usage has been improved. * The build process has been adjusted for changes in OpenVAS Libraries. * The OMP version is now included in reports. * Code cleanups. openvas-manager 6.0+beta3 (2014-10-14) This is the third beta version of the upcoming 6.0 release of the OpenVAS Manager. It is the central management service between the actual security scanners and various user clients. This release continues the efforts towards PostgreSQL support and support of multiple scanners. It also introduces support for a "Monitor" role and for the "timezone" keyword in report powerfilters and harmonizes the handling of the creation time for the different SecInfo object types. A workaround for an issue with SQLite versions before 3.8.3 is included as is support for task charts. Many thanks to everyone who has contributed to this release: Hani Benhabiles, Matthew Mundell, Timo Pollmeier and Michael Wiegand. Main changes since 6.0+beta2: * Further steps towards alternative use of PostgreSQL as database backend instead of SQLite3. The PostgreSQL support does not yet cover all of the OpenVAS Manager functionalities. * Further steps for Scanner Management. * Support for task charts has been added. * Report powerfilters now support the "timezone" keyword. * Handling of different SecInfo object creation times has been harmonized. * Support for a "Monitor" role has been added. * A workaround for an issue with concurrent SQLite processes when using SQLite versions older than 3.8.3 has been added. * PostgreSQL support has been added to the various support scripts. * Code cleanups. openvas-manager 6.0+beta2 (2014-09-23) This is the second beta version of the upcoming 6.0 release of the OpenVAS Manager. It is the central management service between the actual security scanners and various user clients. This release continues the efforts towards PostgreSQL support and support of multiple scanners. It also introduces support for a "Guest" role and for associating ESXi credentials with targets, along with a number of smaller improvements and code cleanup. Many thanks to everyone who has contributed to this release: Hani Benhabiles, Matthew Mundell, Timo Pollmeier, Jan-Oliver Wagner and Michael Wiegand. Main changes since 6.0+beta1 series: * Further steps towards alternative use of PostgreSQL as database backend instead of SQLite3. The PostgreSQL support does not yet cover all of the OpenVAS Manager functionalities. * Further steps for Scanner Management. * Support for a "Guest" role has been added. * Support for associating ESXi credentials with targets has been added. * The get_results command now behaves more consistent with other get_... OMP commands. * The task name is now included in more report formats. * The value of the NVT tag "affected" is now included in more report formats. * GPLv2+ licence notices now contain the exact wording suggested by the Free Software Foundation. * Code cleanups. openvas-manager 6.0+beta1 (2014-08-23) This is the first beta version of the upcoming 6.0 release of the OpenVAS Manager. It is the central management service between the actual security scanners and various user clients. This release introduces first steps towards multi-scanner support, adds support for SecInfo type "CERT-Bund" and extends the results object. Apart from this the alternative support for PostgreSQL works to some extend but is not complete yet. Please make sure to read the INSTALL file for important installation and migration information, even and especially if you have used OpenVAS Manager before. Many thanks to everyone who has contributed to this release: Hani Benhabiles, Matthew Mundell, Timo Pollmeier, Michael Wiegand Main changes since 5.0 series: * Added first steps for Scanner Management. This includes the configration part for scanners accompanied with a new set of OMP commands (create_scanner, get_scanners, modify_scanner, delete_scanner and verity_scanner). Next, it covers the extensions of tasks with the selected scanner type and the extension of Scan Configurations to reflect different scanner types. * First steps towards alternative use of PostgreSQL as database backend instead of SQLite3. The PostgreSQL support does not yet cover all of the OpenVAS Manager functionalities. * Added new SecInfo subtype CERT-Bund Advisory (CERT_BUND_ADV). * Added new OMP command GET_AGGREGATES in order to deliver data tables for use in diagrams. * Extended results table and OMP results objects. * Removed openvasrc file support from OMP. * For SSH credentials, the public part is now extracted from private key when needed. * Removed preemptive Scanner connecting. Connect only on NVT cache update or task starting, resuming and stopping. This improves response time. * Removed task pausing feature. This includes the removal of OMP commands pause_task and resume_paused_task. * Removed target locators feature. This includes the removal of the OMP command get_target_locators. * First steps towards a QoD (Quality of Detection) concept as an attribute of the results. * Rebuild CERT database as version 6 to apply fix for problems with CVEs in older DFN-CERT advisories. * Increased limit of max number of hosts specified in user Host Access Control to 16,777,216. * Removed --slisten and --sport options. * Renamed --list-users to --get-users. * Added --get-scanners. * Added --create-scanner with --scanner-host, --scanner-port and --scanner-type options. * Added --delete-scanner option. * Added --verify-scanner option. * Added --scanner-ca-pub, --scanner-key-pub and --scanner-key-priv command-line arguments. * Added options --max-email-attachment-size and --max-email-include-size. * Various minor improvements. * Code cleanups. openvas-manager 5.0.0 (2014-04-23) This is the first release of the openvas-manager 5.0 module for the Open Vulnerability Assessment System release 7 (OpenVAS-7). The OpenVAS Manager is the central management service between the actual security scanner and various user clients. OpenVAS Manager 5.0 introduces a large number of new and improved features, for example the entire user management is now done in OpenVAS Manager, tagging of objects, "Severity" concept to replace "Threat" concept, Alive-Test property of Targets, a number of new command line parameter, extended access control with groups, roles and permissions. For a complete list of changes, please refer to the list below. The whole functionality is available via the extended protocol OMP 5.0. Please make sure to read the INSTALL file for important installation and migration information, even and especially if you have used OpenVAS Manager before. Many thanks to everyone who has contributed to this release: Benot Allard, Hani Benhabiles, Henri Doreau, Rodolfo Gouveia, Andre Heinecke, Werner Koch, Matthew Mundell, Timo Pollmeier, Stefan Schwarz, Stefan Sperling, Jan-Oliver Wagner and Michael Wiegand. Main changes since 4.0.x: * User management has been consolidated in OpenVAS Manager. It was moved from OpenVAS Scanner and OpenVAS Administrator into OpenVAS Manager. * New: Groups, Roles and Permissions. * New: Tags. * New: Default scan configurations "Discovery", "Host Discovery" and "System Discovery". * New: Support for searching in the complete SecInfo data. * New: Support for regular expression searching in the powerfilter. * New: New "Severity" concept to replace "Threat" concept. * Removed: OTP port forwarding. * Removed: Support for obsolete scanner preferences. * Improved: Support for the new host management offered by Scanner has been added. * Improved: Schedule handling during long running operations. * Changed: Simplified host access conrol replaces old rules-based concept. * New: Support for Alterable Tasks. * New: Support for Source Interface access control has been added. * New: Alive Test property to Targets, which can override the scan config settings. * Remove NVTs 810002 "CPE Inventory" and 810003 "Host Summary" from predefined configs. * Orphaned results are now removed from the database when starting. * The speed of retrieving a task details overview has been improved. * Database rebuild performance has been improved. * Performance with large databases has been improved. * Updated: Verinice ISM report format plugin. * Updated: The NBE report format plugin. * New: Predefined report format CSV Hosts. * New: Predefined report format CSV Results. * New: Report format plugin for exporting TLS mapping results into a CSV file. * New: User setting for preferred interface language. * Logging has been improved and made more consistent. * OpenVAS Manager will now attempt to reduce database fragmentation. * Use UTF-8 for OTP. * Report scanner loading progress to client/GSA. * New: Support for user defined OVAL repositories in private subdirectories. * The scripts for SCAP and CERT data synchronization have been improved. * Handling of NVT risk factors has been removed as this is handled via CVSS scores now. * The handling of the obsolete "subnet" element in the results has been removed. * NVT descriptions are no longer stored separately in the database and thus no longer duplicate information already present in the NVT tags. * The credential encryption keyring is now placed in var/lib/openvas/gnupg instead of etc/openvas/gnupg. * Support for changing a user password on the command line has been added. * New option --max-ips-per-target. * New option --delete-user. * New option --create-user. * Add option --role, which allows to set the role with --create-user. * The --migrate option now also migrates SCAP and CERT databases. * New option "--list-users". * Made --migrate succeed when the database has not yet been initialised. * Add --gnutls-priorities option. * Add --dh-params command-line option. * The command line parameter "--disable-scheduling" has been added. * The required minimum GnuTLS version has increased to 2.8. * The required minimum OpenVAS Libraries version has increased to 7.0.0. * Signature verification now uses the "gpgv" command. * Make --rebuild and --update wait for scanner when scanner is busy loading NVTs. This matches the behaviour when rebuild is called via SIGHUP. * Startup speed has been improved. * Add a utility to split huge xml files in a memory efficient way * The handling of missing, inaccessible or corrupt database files has been improved. * Moved some functions to openvas-libraries. * Large number of small fixes and speed improvements. * Code cleanup. And additionally changes compared to 5.0+beta13: * Added HELP permission check. * New: Role "Info". * Clean up of OMP and OMP documentation. openvas-manager 5.0+beta13 (2014-04-10) This is the thirteenth beta version of the upcoming 5.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and its various user clients. This release further improves role management and adds the MODIFY_ROLE OMP command. It also features an improved startup speed and an updated OMP documentation as well as improvements to the alive test and wizard functionalities. Many thanks to everyone who contributed to this release: Matthew Mundell, Timo Pollmeier and Michael Wiegand. Main changes since 5.0+beta12: * The OMP command MODIFY_ROLE has been added. * Role management has been improved. * The OMP documentation has been updated. * The handling of unavailable commands in the quick_task wizard has been improved. * The command line parameter "--disable-scheduling" has been added. * Startup speed has been improved. * The alive test "TCP Service Ping" has been renamed to "TCP-ACK Service Ping". * The alive test "TCP-SYN Service Ping" has been added. openvas-manager 5.0+beta12 (2014-03-28) This is the twelfth beta version of the upcoming 5.0 release of the OpenVAS Manager. it is the central management service between the actual security scanner and its various user clients. This release add an OMP DELETE_ROLE commands and a --dh-params command-line option to specify Diffie-Hellman ciphers parameters. Many thanks to everyone who contributed to this release: Hani Benhabiles, Matthew Mundell, Timo Pollmeier and Jan-Oliver Wagner Main changes since 5.0+beta11: * Add OMP DELETE_ROLE. * Add --dh-params command-line option. * code cleanup openvas-manager 5.0+beta11 (2014-03-26) This is the eleventh beta version of the upcoming 5.0 release of the OpenVAS Manager. it is the central management service between the actual security scanner and its various user clients. This release adds a --gnutls-priorities option to specify the cipher priority as well as adds a CREATE_ROLE OMP command and solve a number of small issues. Many thanks to everyone who contributed to this release: Hani Benhabiles, Matthew Mundell, Timo Pollmeier and Jan-Oliver Wagner Main changes since 5.0+beta10: * Get tags for resources by ROWID instead of UUID. Make iterator functions for active and orphan fields return int. * Rename "attach_id" to "resource_uuid", "attach_type" to "resource_type" add resource rowid "resource" and "resource_location" to tags tables. Hence increase database version to 117. Add database migration from version 116 to 117. * Change tag OMP elements accordingly and make them more consistent with the resource in permissions overall. Allow tags to be attached to resources in trash. Rename "orphaned" in tags to "orphan". * Add OMP CREATE_ROLE. * Remove NVTs 810002 "CPE Inventory" and 810003 "Host Summary" from predefined configs. Hence increase database version to 116. Add database migration from version 115 to 116. * Drop sign_key_ids column from nvts table. Hence increase database version to 115. Add database migration from version 114 to 115. * Add alive test "Consider Alive". * Add --gnutls-priorities option to Manager. * Report scanner loading progress to client/GSA. * Added regex-based parameter validation and support of alternative run modes, e.g. an init mode to get resource lists to display in the client, to wizards. * Switch the type check on the filters associated with alerts from "report" to "result". Alerts were migrated from "report" to "result" in db version 92. * Code cleanup. openvas-manager 5.0+beta10 (2014-03-18) This is the tenth beta version of the upcoming 5.0 release of the OpenVAS Manager. it is the central management service between the actual security scanner and its various user clients. This release Correct the behavior of the manager when called with --rebuild, --update or --migrate in order to produce a more consistent experience, as well as solve a number of small issues. Many thanks to everyone who has contributed to this release: Hani Benhabiles, Matthew Mundell and Jan-Oliver Wagner. Main changes since 5.0+beta9: * Remove handling of CERTIFICATES otp command. * Make --rebuild and --update wait for scanner when scanner is busy loading NVTs. This matches the behaviour when rebuild is called via SIGHUP. * Add scan-time record of slave and source interface to reports. * Remove handling of PLUGINS_DEPENDENCIES OTP command and get_dependencies OMP command. * Make --migrate succeed when the database has not yet been initialised. * Code cleanup. openvas-manager 5.0+beta9 (2014-03-12) This is the ninth beta version of the upcoming 5.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and its various user clients. This release introduces the new "System Discovery" config, improves handling of the OpenVAS Scanner connection and fixes two issues related to UTF-8 encoded text in overrides and notes and to result counts. Many thanks to everyone who has contributed to this release: Hani Benhabiles, Matthew Mundell and Michael Wiegand. Main changes since 5.0+beta8: * A new predefined "System Discovery" config has been added. * The handling of the connection to the OpenVAS Scanner has been improved. * An issue which caused a segmentation fault due to incorrect truncation of UTF-8 encoded text in overrides and notes has been fixed. * An issue which caused incorrect result counts has been fixed. openvas-manager 5.0+beta8 (2014-03-06) This is the eighth beta version of the upcoming 5.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and its various user clients. This release adjusts the built-in Report Format Plugins (RFPs) to expect NVT information to be in the new style. It also removes sections of unused code, improves Host Discovery handling and fixes a password generation issue. Many thanks to everyone who has contributed to this release: Hani Benhabiles, Matthew Mundell and Michael Wiegand. Main changes since 5.0+beta7: * NVTs are expected to be in the new style by the built-in RFPs. * Host Discovery will now fall back on more Ping Host defaults. * An issue which resulted in unusable passwords for LSC credentials being generated in rare circumstances has been fixed. openvas-manager 5.0+beta7 (2014-02-27) This is the seventh beta version of the upcoming 5.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and its various user clients. This release fixes a large number of small issues. Many thanks to everyone who has contributed to this release: Matthew Mundell, Timo Pollmeier and Hani Benhabiles. Main changes since 5.0+beta6: * Update documentation about the alive tests property. * Increase the OMP version to 5.0. * Prevent targets curently used to be modified. * Remove need for all elements to be given in MODIFY_TARGET. * Large number of small fixes and improvements. openvas-manager 5.0+beta6 (2014-02-16) This is the sixth beta version of the upcoming 5.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. This release adds user language setting, Alive Test property for Targets and fixes a large number of small bugs. Many thanks to everyone who has contributed to this release: Hani Benhabiles, Matthew Mundell, Timo Pollmeier, Michael Wiegand and Jan-Oliver Wagner Main changes since 5.0+beta5: * Add an Alive Test property to Targets, which can override the scan config settings. * Added user setting for preferred interface language. * Removed column "Most Severe Result(s)" from LaTeX/PDF report format plugin. * New option "--list-users". * Moved some functions to openvas-libraries. * Severity classes added to report XML. * Large number of small fixes and improvements. openvas-manager 5.0+beta5 (2014-01-28) This is the fifth beta version of the upcoming 5.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. This release improves the reports to include a new results section. Many thanks to everyone who has contributed to this release: Matthew Mundell, Timo Pollmeier, Michael Wiegand, Benot Allard, and Jan-Oliver Wagner Main changes since 5.0+beta4: * Update reports to use the new results sections. * Add a utility to split huge xml files in a memory efficient way * Large number of small fixes and improvements openvas-manager 5.0+beta4 (2014-01-15) This is the fourth beta version of the upcoming 5.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. This release adds a couple of new command line options and report format plugins. Many thanks to everyone who has contributed to this release: Hani Benhabiles, Henri Doreau, Matthew Mundell Timo Pollmeier, Jan-Oliver Wagner and Michael Wiegand. Main changes since 5.0+beta3: * Use UTF-8 for OTP. * New option --max-ips-per-target. * New predefined report format CSV Hosts. * New predefined report format CSV Results. * Extended report format plugin for verinice. * New report format plugin for exporting TLS mapping results into a CSV file. * Add option --delete-user. * Rename option --first-user to --create-user. * Add option --role, which allows to set the role with --create-user. * New predefined config Host Discovery. * Large number of small fixes and improvements, especially regarding permissions. * The --migrate option now also migrates SCAP and CERT databases. openvas-manager 5.0+beta3 (2013-11-22) This is the third beta version of the upcoming 5.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. This release adds support for Alterable Tasks and Source Interface access control and features a reworked host access control concept replacing the old rules based concept. It also features further integration of the new concepts for severity and permission checks as well as numerous small improvements. Many thanks to everyone who has contributed to this release: Hani Benhabiles, Andre Heinecke, Matthew Mundell, Timo Pollmeier, Stefan Schwarz and Michael Wiegand. Main changes since 5.0+beta2: * Support for Alterable Tasks has been added. * Support for Source Interface access control has been added. * The host access control concept has been reworked, resulting in a removal of the old rules based concept. * Support for the new "Severity" concept has been added in more places. * Resource level permission checking has been improved. * An issue which caused new databases to be initialised improperly has been fixed. * NVT descriptions are no longer stored separately in the database and thus no longer duplicate information already present in the NVT tags. * OpenVAS Manager will now attempt to reduce database fragmentation. * The handling of the obsolete "subnet" element in the results has been removed. * The NBE report format plugin has been updated. * The verinice ISM report format plugin has been updated. * Support for changing a user password on the command line has been added. * Large number of small fixes and speed improvements. * Code cleanup. * Documentation has been updated. openvas-manager 5.0+beta2 (2013-09-30) This is the second beta version of the upcoming 5.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. This release fixes an issue with autogenerated credentials being unable to login. It adds support for new functionality added to OpenVAS Scanner since the last OpenVAS Manager release and features a number of internal improvements regarding performance, logging and scheduling. Many thanks to everyone who has contributed to this release: Hani Benhabiles, Andre Heinecke, Werner Koch, Matthew Mundell, Timo Pollmeier, Jan-Oliver Wagner and Michael Wiegand. Main changes since 5.0+beta1: * An issue which caused autogenerated credentials to fail to login has been fixed. * Support for regular expression searching has been added to the powerfilter. * Support for the new "Severity" concept has been added in a number of places. * The greenbone-scapdata-sync and greenbone-certdata-sync scripts have been updated. * Support for the new Scanner message type "Alarm" has been added. * Support for OTP port forwarding has been removed. * Support for obsolete scanner preferences has been removed. * Support for the new host management offered by Scanner has been added. * Logging has been improved and made more consistent. * Schedule handling during long running operations has been improved. * Orphaned results are now removed from the database when starting. * Database rebuild performance has been improved. * Performance with large databases has been improved. * The NBE report format plugin has been updated. * The verinice ISM report format plugin has been updated. * Code cleanup. * Documentation has been updated. openvas-manager 5.0+beta1 (2013-06-25) This is the first beta version of the upcoming 5.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. This release moves user management to OpenVAS Manager from OpenVAS Scanner and OpenVAS Administrator, introduces group and permissions management and tag management among other new features. Please note that this release changes the location of the credential encryption key. Please make sure to read the INSTALL file for important installation and migration information, even and especially if you have used OpenVAS Manager before. Many thanks to everyone who has contributed to this release: Hani Benhabiles, Rodolfo Gouveia, Andre Heinecke, Werner Koch, Matthew Mundell, Timo Pollmeier, Stefan Sperling, Jan-Oliver Wagner and Michael Wiegand. Main changes since 4.0 series: * The credential encryption keyring is now placed in var/lib/openvas/gnupg instead of etc/openvas/gnupg. * The required minimum GnuTLS version has increased to 2.8. * The required minimum OpenVAS Libraries version has increased to 7.0.0. * User management has been moved to OpenVAS Manager from OpenVAS Scanner and OpenVAS Administrator. * Support for group and permission management has been added. * Support for managing network service port names has been added. * Tag management has been added. * Handling of NVT risk factors has been removed as this is handled via CVSS scores now. * Handling of the OTP protocol has been updated to match the changes in OpenVAS Libraries and OpenVAS Scanner. * Support for user defined OVAL repositories in private subdirectories has been added. * The scripts for SCAP and CERT data synchronization have been improved. * Support for searching in the complete SecInfo data has been added. * The speed of retrieving a task details overview has been improved. * The handling of missing, inaccessible or corrupt database files has been improved. * A default "Discovery" scan configuration hase been added. * Signature verification now uses the "gpgv" command. * The verinice ISM report format plugin has been updated. * Code cleanup. * Documentation has been updated. openvas-manager 4.0+beta5 (2013-02-22) This is the fifth beta version of the upcoming 4.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. This release adds support for accessing OVAL and DFN-CERT SecInfo data, for encrypting credentials and for checking user passwords against a policy. It also features improvements to the report performance, Master-Slave communication and numerous smaller improvements. Many thanks to everyone who has contributed to this release: Hani Benhabiles, Andre Heinecke, Werner Koch, Matthew Mundell, Timo Pollmeier, Jan-Oliver Wagner and Michael Wiegand. Main changes since 4.0+beta4: * New: Support for accessing OVAL SecInfo data. * New: Support for accessing DFN-CERT SecInfo data. * New: The risk factor of an NVT is now calculated from the CVSS score. * New: Support for encrypted credentials has been added. * New: Support for checking user passwords against a policy has been added. * Extended: New object management now supports for schedules, tasks, * slaves, report formats, port lists and scan configs. * Improved: Override management now supports Powerfilter and Trashcan. * Improved: Additional parameters in SCAP synchronization script. * Improved: Handling of the SCAP database. * Improved: Classification in the report format plugin for ISMS tool "verinice". * Improved: Performance with large database. * Improved: Handling of client timeouts during very long operations. * Improved: Faster report format plugins LaTeX, TXT, HTML and PDF. * Improved: Master-Slave communication. * Improved: IPv6 address validation. * Some functionality has been moved to the openvas-libraries module. This means that openvas-manager 4.0.+beta5 requires openvas-libraries 6.0+beta5 or newer to build. openvas-manager 4.0+beta4 (2012-11-05) This is the fourth beta version of the upcoming 4.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. This release reveals a large number of new and improved features. Noteworthy are the new features Auto-FP, Wizard-Framework, Multiple Alerts and the extended Powerfilter that also was connected to more object classes. Many thanks to everyone who has contributed to this release: Sebastien Aucouturier, Andre Heinecke, Matthew Mundell, Jan-Oliver Wagner and Michael Wiegand. Main changes since 4.0+beta3: * New: Auto-FP feature to filter out likely false positives in a report. * New: Manage closed CVEs, as reported by the Scanner (trusted vendor updates). * New: Multiple alerts can now be attached to a task. * New: Wizard framework with first wizard "quick_first_scan" and user setting for wizard appearance. * New: Management for Filter objects. * New: Report format plugins for ISMS tool "verinice". * New: Alert for sending results to a verinice .PRO server. * Extended: Management for information such as CPE, including a extended SCAP data synchronization. * Extended: Powerfilter now available for Reports. * Extended: Powerfilters can now be attached to Alerts. * Improved: Task overview now faster via extra caching methods. * Improved: Handle daylight saving in schedules. * Improved: Extended features of Powerfilter such as sorting and result ranges. * Improved: When importing a report, now the host details are also imported. * Improved: Reduced database locking times during some operations so that less blocking happens. * Improved: Manager serves OMP even when the scanner is down. * Improved: Notes management now supports Powerfilter and Trashcan. * Improved: Added switch to control whether a task should contribute to asset management. * Improved: Report exports now also contain the comment of the respective task. * Improved: Report exports now also contain the family of NVTs. * Improved: Faster report format plugins LaTeX and PDF. * The ARF report format plugin is now a pre-defined format. * Added creation and modification times to the powerfilter. * Added handling of OTP 1.1. * Improved: Hostname validation. * Simplified Report Format Plugin handling for pre-defined plugins. * Various bug fixes and small improvements. openvas-manager 4.0+beta3 (2012-05-04) This is the third beta version of the upcoming 4.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. This release adds support for disabling OMP commands and extends object management. Many thanks to everyone who has contributed to this release: Matthew Mundell, Michael Wiegand. Main changes since 4.0+beta2: * Object management has been extended to support creation and modification times. * Support for disabling OMP commands via the command line has been added. openvas-manager 4.0+beta2 (2012-04-25) This is the second beta version of the upcoming 4.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. This release contains an improved powerfilter feature, updated protocol documentation and an improved target object management. It also fixes an issue with the port list selection. Many thanks to everyone who has contributed to this release: Matthew Mundell, Michael Wiegand. Main changes since 4.0+beta1: * Improvements to the target object management; targets can now be edited when they are associated with a task and the task has not yet run. * A bug which caused the port list selection to be empty has been fixed. * The protocol documentation has been updated. * The powerfilter now handles spaces in index filters. openvas-manager 4.0+beta1 (2012-04-16) This is the first beta version of the upcoming 4.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. This release introduces name change from Escalator to Alert and extended handling of Target object lists. Many thanks to everyone who has contributed to this release: Matthew Mundell, Michael Wiegand. Main changes since 3.0 series: * Renamed Escalator to Alert. * Added keyword filter, pagination and edit to Targets. * New command line options --listen2 and --port2 for a second OMP address. openvas-manager 3.0.0 (2012-03-26) This is the first release of the openvas-manager 3.0 module for the Open Vulnerability Assessment System release 5 (OpenVAS-5). The OpenVAS Manager is the central management service between the actual security scanner and various user clients. OpenVAS Manager 3.0 represents a significantly advanced feature set. Most notable is Asset Management, Port Lists, SecInfo Management with SCAP data, delta reports and prognostic reports. The whole functionality is available via the extended protocol: OMP 3.0. Many thanks to everyone who has contributed to this release: Henri Doreau, Stephan Kleine, Matthew Mundell, Jan-Oliver Wagner, Michael Wiegand and Felix Wolfsteller. Main changes since 2.0.x: * New: Configuration object 'Port Lists'. * New: Integrated Asset Management. * New: Security Information Database: Integrated SCAP data (CPE, CVE) including update method via feed service. * New: Delta reports to analyse differences between two scans. * New: Prognostic scans based on asset data and current SCAP data. * New: Support for individual time zones for users. * New: Tasks can be assigned "observes" for read-only access. * New: Role "Observer" for read-only access. * New: Support for notes/overrides lifetimes. * New: Trashcan. It is now possible to place some objects in a trashcan instead of deleting them directly. * New: Container tasks for importing reports. * New: SSH port for Local Security Checks configurable. * New: Product detections as reported by Scanner are handled to allow detailed cross-referenced detection information. * Updated builtin Report Format Plugins HTML, Text and LaTeX/PDF to reflect various new features that are already present in GSA, including delta and prognostic reports. * Improved product detection information in results XML. * Improved performance for massiv scanner results by using transaction groups. * Improved Import of Target lists to allow comma-separated, line-by-line lists. * Doubled entries in Target lists are now eliminated. * New optional Report Format Plugin for ARF. * OMP 3.0: All new functionalities form the new version 3.0 of the OpenVAS Management Protocol (OMP) * Changed: Report format signatures no longer contain user editable fields. * Support for large database files on 32-bit platforms has been improved. * A bug which caused the filter result count to be calculated incorrectly when searching for text phrases has been fixed. * Support for sorting results by CVSS score has been added. * Support for importing results sent through the XML escalator has been added. * The max_host and max_checks scan performance parameters have been moved from scan configs to tasks. * An issue which caused meta data for NVTs in the "Credentials" family to be not present in the database has been fixed. * A number of compiler warnings discovered by Stephan Kleine have been addressed. * Scan start and end times are now set for imported reports. * An issue which caused the import of very large reports to fail under certain circumstances has been fixed. * The handling of long host lists has been improved. * Security: Enforces strict permissions on sensitive OpenVAS Manager files. * Security: Drop privileges before executing report format plugins if running with elevated privileges. * Security: Ensures report formats are trusted before executing them. * Support for escalating result to a Sourcefire Defense Center has been added. * Support for using an SSH key pair for SSH authentication has been added. And additionally changes compared to last release candidate 3.0+rc1: * Extra report formats work standalone. * Observer lists now may also use ',' as separator. * Observers may now also create notes and overrides for observed tasks. * Opservers with with Role observer are now allowed to see single results of the observed tasks. * Added handling of ssh keys for authenticated tests for Master-Slave mode. * The PID file is created earlier to avoid daemon handling believe there is an error. * Build improvements for modern gcc. openvas-manager 3.0+rc1 (2012-03-15) This is the first release candidate of the upcoming 3.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. This release adds the Port Lists feature and updates the built-in reports to cover delta and prognostic results. Many thanks to everyone who has contributed to this release: Henri Doreau, Matthew Mundell and Michael Wiegand. Main changes since 3.0+beta8: * Support for Port Lists has been added. * Updated builtin Report Format Plugins HTML, Text and LaTeX/PDF to reflect various new features that are already present in GSA, including delta and prognostic reports. * Changed signing of Report Format Plugins to exclude comment. * Improved product detection information in results XML. * Improved performance for massiv scanner results by using transaction groups. * Improved Import of Target lists to allow comma-separated, line-by-line lists. * Doubled entries in Target lists are now eliminated. * New optional Report Format Plugin for ARF. * Updated OMP documentation. * Various little bugs fixed. openvas-manager 3.0+beta8 (2011-12-02) This is the eigth beta version of the upcoming 3.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. This release adds support for note lifetimes and for displaying additional information in the HTML, LaTeX and TXT report formats. It also fixes an incorrect result count for Asset Management results. Many thanks to everyone who has contributed to this release: Matthew Mundell and Michael Wiegand. Main changes since 3.0+beta7: * Support for note lifetimes has been added. * A bug which caused an incorrect result count in the Asset Management view has been fixed. * Support for displaying the hostname and the note and override lifetimes has been added to the following report formats: HTML, LaTeX and TXT. openvas-manager 3.0+beta7 (2011-11-23) This is the seventh beta version of the upcoming 3.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. This release improves the handling of timestamps in reports and uses report format signatures without the user editable fields, ensure the trust level stays correct if these fields have been changed. Many thanks to everyone who has contributed to this release: Matthew Mundell and Michael Wiegand. Main changes since 3.0+beta6: * The handling of timestamps in reports has been improved. * Report format signatures no longer contain user editable fields. openvas-manager 3.0+beta6 (2011-11-16) This is the sixth beta version of the upcoming 3.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. This release adds support for listing NVTs addressing a certain CVE and for override lifetimes. It fixes a bug in the threat level display and improves the handling of SCAP data. Many thanks to everyone who has contributed to this release: Henri Doreau, Matthew Mundell and Michael Wiegand. Main changes since 3.0+beta5: * Support for listing NVTs addressing a certain CVE has been added. * A bug which cause the wrong threat level to be displayed for tasks with multiple reports under rare circumstances has been fixed. * Support for override lifetimes has been added. * Support for displaying the SCAP update timestamp has been added. openvas-manager 3.0+beta5 (2011-10-10) This is the fifth beta version of the upcoming 3.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. This release adds support for a number of new features, including asset management, direct use of SCAP data, prognostic scans, task observers and individual time zones for users. It also improves support for large database files on 32-bit platforms. NOTE: The Manager now expects the OpenVAS Scanner to send timestamps based on the UTC time zone. Care must be take to use UTC for the Scanner or upgrade to OpenVAS Scanner >= 3.3+beta2, which enforces the use of UTC internally. Many thanks to everyone who has contributed to this release: Henri Doreau, Matthew Mundell and Michael Wiegand. Main changes since 3.0+beta4: * Support for asset management been added. * Support for using SCAP data directly has been added. * A support script for retrieving SCAP data has been added. * Support for prognostic scans has been added. * Support for large database files on 32-bit platforms has been improved. * Support for task observers has been added. * Support for individual time zones for users has been added. openvas-manager 3.0+beta4 (2011-07-21) This is the fourth beta version of the upcoming 3.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. This release resolves a minor issue discovered after the release of OpenVAS Manager 3.0+beta3 and adds support for sorting results by CVSS. For details, please refer to the list of changes below. Many thanks to everyone who has contributed to this release: Matthew Mundell and Michael Wiegand. Main changes since 3.0+beta3: * A bug which caused the filter result count to be calculated incorrectly when searching for text phrases has been fixed. * Support for sorting results by CVSS score has been added. * Support for importing results sent through the XML escalator has been added. * The max_host and max_checks scan performance parameters have been moved from scan configs to tasks. openvas-manager 3.0+beta3 (2011-06-24) This is the third beta version of the upcoming 3.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. This release resolves several minor issues discovered after the release of OpenVAS Manager 3.0+beta2 and adds support for delta reports. For details, please refer to the list of changes below. Many thanks to everyone who has contributed to this release: Henri Doreau, Stephan Kleine, Matthew Mundell and Michael Wiegand. Main changes since 3.0+beta2: * Support for delta reports has been added. * An issue which caused meta data for NVTs in the "Credentials" family to be not present in the database has been fixed. * A number of compiler warnings discovered by Stephan Kleine have been addressed. * A race condition which caused empty reports from the slave when running in master-slave mode under certain conditions has been fixed. * Scan start and end times are now set for imported reports. openvas-manager 3.0+beta2 (2011-05-19) This is the second beta version of the upcoming 3.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. This release resolves several minor issues discovered after the release of OpenVAS Manager 3.0+beta1. For details, please refer to the list of changes below. Many thanks to everyone who has contributed to this release: Matthew Mundell and Michael Wiegand. Main changes since 3.0+beta1: * An issue which caused the import of very large reports to fail under certain circumstances has been fixed. * An issue which caused the date of the scan end to be missing from scans if they were associated with an escalator created with an early Manager version has been fixed. * The handling of long host lists has been improved. openvas-manager 3.0+beta1 (2011-03-02) This is the first beta version of the upcoming 3.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. This release introduces a number of new features. For details, please refer to the list of changes below. Many thanks to everyone who has contributed to this release: Stephan, Kleine, Matthew Mundell, Michael Wiegand and Felix Wolfsteller. Main changes since 2.0 series: * New feature: Trashcan. It is now possible to place objects in a trashcan instead of deleting them directly. * Support for Host Details reported by OpenVAS Scanner has been added. * Support for container task (imported reports) has been added. * Support for specifying an SSH port for Local Security Checks has been added. * Security: Enforces strict permissions on sensitive OpenVAS Manager files. * Security: Drop privileges before executing report format plugins if running with elevated privileges. * Security: Ensures report formats are trusted before executing them. * Support for escalating result to a Sourcefire Defense Center has been added. * Support for using an SSH key pair for SSH authentication has been added. * The mail addresses supplied for an email escalator are now used in the correct order. openvas-manager 2.0.2 (2011-03-02) This is the second maintenance release of the openvas-manager 2.0 module for the Open Vulnerability Assessment System release 4 (OpenVAS-4). The OpenVAS Manager is the central management service between the actual security scanner and various user clients. This release closes a number of memory and resource leaks discovered after the release of OpenVAS Manager 2.0.1, fixes the host count calculation and fixes an issue which occurred when upgrading very old installations. Many thanks to everyone who has contributed to this release: Matthew Mundell, Michael Wiegand and Felix Wolfsteller. Main changes since 2.0.1: * The test infrastructure has been updated. * A bug which caused the host count to be calculated incorrectly under certain circumstances has been fixed. * A number of memory and resource leaks discovered by Felix Wolfsteller have been closed. * A bug which caused database migration to fail when upgrading very old installations has been fixed. openvas-manager 2.0.1 (2011-02-18) This is the first maintenance release of the openvas-manager 2.0 module for the Open Vulnerability Assessment System release 4 (OpenVAS-4). The OpenVAS Manager is the central management service between the actual security scanner and various user clients. This release adds support for fallback system reports, changes the default value of the "unscanned_closed" preference to "yes" for predefined configurations and fixes an issue with signature verification in the manager. It also contains improvements to report format signature infrastructure and fixes an issue with the host name validation. Many thanks to everyone who has contributed to this release: Stephan Kleine, Matthew Mundell and Michael Wiegand. Main changes since 2.0.0: * Support for fallback system reports has been added in case where a full system report is unavailable. * The expected location for signatures has been updated to match the FHS related changes in OpenVAS Scanner. * The "unscanned_closed" preference now defaults to "yes" for predefined configs. * The report format signature infrastructure has been improved. * A bug which caused valid host names to be reject under certain circumstances has been fixed. openvas-manager 2.0.0 (2011-02-08) This is the first release of the openvas-manager 2.0 module for the Open Vulnerability Assessment System release 4 (OpenVAS-4). The OpenVAS Manager is the central management service between the actual security scanner and various user clients. OpenVAS Manager 2.0 represents a significantly advanced feature set. Most notable is the new plugin-based report format framework which allows to produce arbitrary scan reports (text, graphs, maps, connectors etc.). The new master-slave mode allow to network multiple Manager instances. The whole functionality is available via the extended protocol: OMP 2.0. Many thanks to everyone who has contributed to this release: Matthew Mundell, Jan-Oliver Wagner, Michael Wiegand and Felix Wolfsteller. Main changes since 1.0.x: * Report Format plugin framework. All previous reporting features were converted to plugins. The XML representation of a report is now the base for any plugin and thus consistency of reports is improved. Report Format Plugins can be set active so that they appear in the selection lists. Selections can consider content types so that for example only the plugins with content type "text" are offered as email body. It is possible to use parameters for the plugins so the user can adjust the behaviour of the Report Format to the individual preferences or needs. A verification method allows to distribute signatures for valid plugins via the NVT Feed. * New default Report Format: TXT for simple text. * New default Report Format: LaTeX for LaTeX source. * New sample Report Format: Simple Bar Chart. Demonstrates how to use Gnuplot for graphical reports. * New sample Report Format: Simple Topo Plot. Demonstrates how to use Graphviz for graphical reports. * New sample Report Format: Simple Pie Chart. Demonstrates how to use PyChart for graphical reports. * New sample Report Format: Simple Map Plot. Demonstrates how to use MapServer and GDAL for graphical reports. * New sample Report Format: Sourcefire Host Input. Demonstrates that Report Formats can be used to build connectors. * Master-Slave feature. Any OpenVAS Manager can use one or many other OpenVAS Manager as slave to run scans. The whole scan task is transferred to the slave, results are continuously reported to the Master during scan process. After the scan is finished all data are removed from the slave. The master can also retrieve system reports from the slave and thus can collect the performance overview for all configured slaves. * New Escalator: HTTP GET. This allows for example to access text message (SMS) gateways or ticket management systems. * Extended Escalator: For email escalation it is now possible to select from configured Report Formats to be included in the email body. * Agents: A verification method was added. This allows to distribute signatures for valid agents via the NVT Feed. * Credentials: Can now be edited. This allows to change the login name or password without the need to create a new scan configuration. * Credentials: Auto-generated installer packages are now created on the fly. If the generators are improved, it is now easy to create an updated package for already existing credentials. * Credentials: Credentials for SMB and SSH are now separated. * OMP self-documentation: Part of the Managers' XML-based communication protocol OMP 2.0 is to deliver the full specification and documentation of the protocol itself (command "HELP"). It can be retrieved as XML-, RNC- or HTML representation. * Targets: Various opportunities have been added to specify and combine IP ranges and ports. * Tasks: The task overview is delivered much faster now. * Reports: The report filtering is much faster now. * Hardening flags are now enabled during compile time to increase code quality. * Compliance with the GNU Coding Standards and the Filesystem Hierarchy Standard has been improved. * A security-relevant bug has been fixed regarding email escalation methods. Configured OpenVAS users were able to damage installation and/or gain higher privileges. Main changes since 2.0+rc4: * The logging behaviour when started with --verbose has been improved. * The w3af NVT is no longer part of the Full and fast default scan config. * The build environment has been cleaned up. openvas-manager 2.0+rc4 (2011-02-04) This is the fourth release candidate for the upcoming 2.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. Release 2.0 is part of OpenVAS 4, the next generation of the Open Vulnerability Assessment System. It fixes an issue in override creation and feature an improved documentation and build environment and is now compliant to the Filesystem Hierarchy Standard (FHS), version 2.3. Many thanks to everyone who has contributed to this release: Matthew Mundell, Jan-Oliver Wagner and Michael Wiegand. Main changes since 2.0+rc2: * Documentation has been updated. * OpenVAS Manager now uses pkg-config to find required libraries. * An issue which caused the creation of overrides to fail under some circumstances has been fixed. * The installation is now compliant with Filesystem Hierarchy Standard (FHS 2.3). openvas-manager 2.0+rc3 (2011-01-21) This is the third release candidate for the upcoming 2.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. Release 2.0 is part of OpenVAS 4, the next generation of the Open Vulnerability Assessment System. It fixes a serious security bug and it is highly recommended to update any installation of OpenVAS Manager 2.0 with this release. It also fixes a database migration issue and introduces a better setting for the default logging. Many thanks to everyone who has contributed to this release: Matthew Mundell, Jan-Oliver Wagner and Michael Wiegand. Main changes since 2.0+rc2: * A security-relevant bug has been fixed regarding email escalation methods. Configured OpenVAS users were able to damage installation and/or gain higher privileges. * An issue which caused database migration to fail under certain circumstances has been fixed. * The default log level has been reduced to warning to prevent the logging of potentially sensitive information in the default configuration. openvas-manager 2.0+rc2 (2011-01-10) This is the second release candidate for the upcoming 2.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. Release 2.0 is part of OpenVAS 4, the next generation of the Open Vulnerability Assessment System. This release features updated protocol documentation, masks passwords when LSC package creation commands are logged and makes the output of --version compliant with the GNU Coding Standards. Many thanks to everyone who has contributed to this release: Matthew Mundell, Jan-Oliver Wagner, Michael Wiegand and Felix Wolfsteller. Main changes since 2.0+rc1: * The protocol documentation has been brought up to date. * The output of --version now complies with the GNU Coding Standards. * Passwords are now masked when loggings LSC package creation commands. openvas-manager 2.0+rc1 (2010-12-21) This is the first release candidate for the upcoming 2.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. Release 2.0 is part of OpenVAS 4, the next generation of the Open Vulnerability Assessment System. This release adds support for separate SMB and SSH credentials, for setting per-target port ranges and for retrieving the total number of results matching an applied filter. Many thanks to everyone who has contributed to this release: Matthew Mundell and Michael Wiegand. Main changes since 2.0+beta3: * The protocol documentation has been improved. * Target credentials for SMB and SSH are now separated. * Support for setting the port range for a target has been added. * Hardening flags are now enabled during compile time to increase code quality. * Support for retrieving the total number of results matching an applied filter has been added. openvas-manager 2.0+beta3 (2010-12-10) This is the third beta version of the upcoming 2.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. Release 2.0 is part of OpenVAS 4, the next generation of the Open Vulnerability Assessment System. This release includes further improvements to the protocol self-documentation and fixes two issues regarding internal links in PDF reports and downloads of LSC credential packages. It also enables NTLMSSP support for NVTs by default to improve LSC behaviour for Microsoft Windows, makes escalator messages more informational and LaTeX and PDF reports more consistent with other report formats. Many thanks to everyone who has contributed to this release: Matthew Mundell and Michael Wiegand. Main changes since 2.0+beta2: * The protocol self-documentation has been improved. * NTLMSSP is now enabled by default. * Escalator message now include more information. * The LaTeX and PDF reports have been made more consistent with the other report formats. * An issue which caused internal links in the PDF report to link to wrong results under certain circumstances has been fixed. * An issue which caused some existing LSC credential packages to be empty on subsequent downloads under certain circumstances has been fixed. openvas-manager 2.0+beta2 (2010-12-01) This is the second beta version of the upcoming 2.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. Release 2.0 is part of OpenVAS 4, the next generation of the Open Vulnerability Assessment System. This release includes a fix for incorrect counting in the ports overview and features an improved protocol self-documentation, an improved logging infrastructure and a speed up for LaTeX and PDF report generation. Many thanks to everyone who has contributed to this release: Matthew Mundell and Michael Wiegand. Main changes since 2.0+beta2: * The protocol self-documentation has been improved. * A number of superfluous log messages has been downgraded or removed. * A bug which caused issues to be counted incorrectly in the ports overview has been fixed. * The generation of PDF and LaTeX reports is now faster. openvas-manager 2.0+beta1 (2010-11-19) This is the first beta version of the upcoming 2.0 release of the OpenVAS Manager. It is the central management service between the actual security scanner and various user clients. Release 2.0 is part of OpenVAS 4, the next generation of the Open Vulnerability Assessment System. OpenVAS Manager 2.0 represents a significantly advanced feature set. Most notable is the new plugin-based report format framework which allows to produce arbitrary scan reports (text, graphs, maps, connectors etc). The new master-slave mode allow to network multiple Manager instances. The whole functionality is available via the extended protocol: OMP 2.0. Many thanks to everyone who has contributed to this release: Matthew Mundell, Jan-Oliver Wagner, Michael Wiegand and Felix Wolfsteller. Central new features of OpenVAS Manager 2.0: * Report Format plugin framework. All previous reporting features were converted to plugins. The XML representation of a report is now the base for any plugin and thus consistency of reports is improved. Report Format Plugins can be set active so that they appear in the selection lists. Selections can consider content types so that for example only the plugins with content type "text" are offered as Email body. It is possible to use parameters for the plugins so the user can adjust the behaviour of the Report Format to the individual preferences or needs. A verification method allows to distribute signatures for valid plugins via the NVT Feed. * New default Report Format: TXT for simple text. * New default Report Format: LaTeX for LaTeX source. * New sample Report Format: Simple Bar Chart. Demonstrates how to use Gnuplot for graphical reports. * New sample Report Format: Simple Topo Plot. Demonstrates how to use Graphviz for graphical reports. * New sample Report Format: Simple Pie Chart. Demonstrates how to use PyChart for graphical reports. * New sample Report Format: Simple Map Plot. Demonstrates how to use MapServer and GDAL for graphical reports. * New sample Report Format: Sourcefire Host Input. Demonstrates that Report Formats can be used to build connectors. * Master-Slave feature. Any OpenVAS Manager can use one or many other OpenVAS Manager as slave to run scans. The whole scan task is transferred to the slave, results are continuously reported to the Master during scan process. After the scan is finished all data are removed from the slave. The master can also retrieve system reports from the slave and thus can collect the performance overview for all configured slaves. * New Escalator: HTTP GET. This allows for example to access text message (SMS) gateways or ticket management systems. * Extended Escalator: For EMail escalation it is now possible to select from configured Report Formats to be included in the Email body. * Agents: A verification method was added. This allows to distribute signatures for valid agents via the NVT Feed. * Credentials: Can now be edited. This allows to change the login name or password without the need to create a new scan configuration. * Credentials: Auto-generated installer packages are now created on the fly. If the generators are improved, it is now easy to create an updated package for already existing credentials. * OMP self-documentation: Part of the Managers' XML-based communication protocol OMP 2.0 is to deliver the full specification and documentation of the protocol itself (command "HELP"). It can be retrieved as XML-, RNC- or HTML representation. * Targets: Various opportunities have been added to specify and combine IP ranges. * Tasks: The task overview is delivered much faster now. * Reports: The report filtering is much faster now. openvas-manager 1.0.0 (2010-07-29) This is the 1.0.0 release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS). OpenVAS Manager 1.0 represents almost 2 years of intensive work. The mission of OpenVAS Manager is to offer powerful and comfortable vulnerability management on top of the actual vulnerability scanner, OpenVAS Scanner 3.1. The OpenVAS Manager is a layer between the OpenVAS Scanner and various client applications. The upcoming clients cover web, desktop and command line technology and will replace the classic OpenVAS Client. Central features of OpenVAS Manager are: * New XML-based protocol OMP (OpenVAS Management Protocol) which client tools use to control scans, results, etc. * SQL database where configurations, scan results etc. are stored. Thus, clients do not need to keep local storage anymore. * Full control of scan processes. This includes multiple concurrent scans as well as stopping, pausing, resuming and not at least the scheduling of scans. * Management of scan notes, false positives and result escalators (notification on finished scans). OpenVAS Manager is Free Software (Open Source), licensed under GNU General Public License Version 2 or any later version. The first compatible client application to be released will be the web client GSA (Greenbone Security Assistant), approximately next week. Beta- and alpha versions of various clients are already available for download. The OpenVAS development team offers support for any efforts to create binary packages for the various Linux distributions in order have this new server readily available for users as soon as possible. Please use our openvas-distro mailing list for this purpose. Many thanks to everyone who has contributed to this release since 1.0.0.rc1: Stephan Kleine, Matthew Mundell, Jan-Oliver Wagner, Michael Wiegand and Felix Wolfsteller. Main changes since 1.0.0.rc1: * A number of build issues has been addressed. * The code documentation has been updated. * Code cleanup: Internal error handling has been made more consistent. * A potential ressource leak identified by static analysis has been fixed. * A bug which caused NVT preferences to be displayed incorrectly has been fixed. openvas-manager 1.0.0.rc1 (2010-07-15) This is the first release candidate of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS) leading up to the upcoming openvas-manager 1.0. Many thanks to everyone who has contributed to this release: Matthew Mundell, Michael Wiegand and Felix Wolfsteller. Main changes since 1.0.0-beta7: * Code cleanup: Internal resource management has been improved to use UUIDs in more places. * Support for agents has been improved. * Support for external target sources has been added. * A bug which caused PDF exports to fail if the NVT description contained certain characters has been fixed. * A bug which caused hosts in the scan result to be sorted incorrectly under certain circumstances has been fixed. * Support for defining threat overrides has been added. * Some OMP commands have been renamed and adjusted to make the protocol more concise and useful. * Support for event logging has been added. * Support for syslog escalators has been added. * The documentation has been updated. openvas-manager 1.0.0-beta7 (2010-05-28) This is the seventh beta release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS) leading up to the upcoming openvas-manager 1.0. IMPORTANT: Since version 1.0.0-beta6, the manager uses certificate based authentication to authenticate against an openvas-scanner. Please do read the INSTALL file provided with openvas-manager and make sure you have openvas-scanner 3.0.2 or higher before installing this manager version! Many thanks to everyone who has contributed to this release: Stephan Kleine, Matthew Mundell, Michael Wiegand and Felix Wolfsteller. Main changes since 1.0.0-beta6: * A large amount of code which was present in both openvas-manager and openvas-administrator has been moved to openvas-libraries. * An issue that caused started tasks to remain in the "Requested" stage indefinitely has been fixed. * An issue that caused incorrect values of the scan progress under certain conditions has been fixed. * A new escalator condition has been add: Threat Level Changed. * Open ports are now included in scan reports even if no vulnerability was detected on that port. * Support for CVSS scores and Risk Factors has been improved. * Support for excluding host without any results from the report has been added. openvas-manager 1.0.0-beta6 (2010-04-15) This is the sixth beta release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS) leading up to the upcoming openvas-manager 1.0. IMPORTANT: The manager now uses certificate based authentication to authenticate against an openvas-scanner. Please do read the INSTALL file provided with openvas-manager and make sure you have openvas-scanner 3.0.2 or higher before installing this manager version! Many thanks to everyone who has contributed to this release: Hartmut Goebel, Stephan Kleine, Matthew Mundell, Joseph Sokol-Margolis, Jan-Oliver Wagner, Michael Wiegand and Felix Wolfsteller. Main changes since 1.0.0-beta5: * A bug which caused incorrect NVT counts in the scan config under certain circumstances has been fixed. * The manager now uses certificate based authentication. * Support for resuming stopped tasks has been added. * Support for task scheduling has been added. * The openvasmd binary will now install into /usr/sbin instead of /usr/bin. openvas-manager 1.0.0-beta5 (2010-03-04) This is the fifth beta release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS) leading up to the upcoming openvas-manager 1.0. Many thanks to everyone who has contributed to this release: Stephan Kleine, Matthew Mundell and Felix Wolfsteller. Main changes since 1.0.0-beta4: * More internal data structures are now identified by UUID and not by name. * Several build issues have been fixed. * Note management has been introduced. * Support for handling ITG and CPE reports has been added. * OTP forwarding is now disabled by default. openvas-manager 1.0.0-beta4 (2010-02-08) This is the fourth beta release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS) leading up to the upcoming openvas-manager 1.0. Many thanks to everyone who has contributed to this release: Stephan Kleine and Matthew Mundell. Main changes since 1.0.0-beta3: * More internal data structures are now identified by UUID and not by name. * A bug which prevented PDF reports to be generated from certain results due to unescaped LaTeX characters has been fixed. * A number of formatting and casting issues found by Stephan Kleine have been fixed. * The man page has been updated. openvas-manager 1.0.0-beta3 (2010-02-05) This is the third beta release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS) leading up to the upcoming openvas-manager 1.0. Many thanks to everyone who has contributed to this release: Matthew Mundell and Felix Wolfsteller. Main changes since 1.0.0-beta2: * Nmap is now the default port scanner for predefined configurations. * The man page has been updated. * LSC credential management has been improved. * A number of internal data structures are now identified by UUID and not by name. * The manager now converts all input from the scanner to UTF-8. * The encoding of the LaTeX report has been switch to UTF-8. * A bug that caused some settings to be ignored during scan configuration import has been fixed. openvas-manager 1.0.0-beta2 (2010-01-26) This is the second beta release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS) leading up to the upcoming openvas-manager 1.0. Many thanks to everyone who has contributed to this release: Matthew Mundell and Felix Wolfsteller. Main changes since 1.0.0-beta1: * Deleting of active reports is prevented. * Introduced ownership for all objects. This makes objects (like a "target") not appear for other users anymore. * Improved ISO-8859-1 to UTF-8 conversion hacks. * Allowed "\" for login names (important for windows) * Send users host restrictions ("rules") via OTP when starting a scan. * Activated NSIS package generator for credentials management. * Filter out potentials passwords from logging. * Introduced UUIDs for users. * Improved PDF report generator. openvas-manager 1.0.0-beta1 (2010-01-12) This is the first beta release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS) leading up to the upcoming openvas-manager 1.0. Many thanks to everyone who has contributed to this release: Matthew Mundell, Felix Wolfsteller and Michael Wiegand. Main changes since 0.9.8: * Agent support has been improved. * Escalation support has been added. * A bug in PDF generation which could cause the manager to stay in an infinite loop under certain conditions has been fixed. * Support for exporting scan configurations has been added. * Support for performance monitoring has been added. * An issue which could cause some preferences not to be sent to the scanner has been fixed. * Initial searching support has been added. openvas-manager 0.9.8 (2009-12-21) This is the fourteenth development release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS). Many thanks to everyone who has contributed to this release: Matthew Mundell, Jan-Oliver Wagner, Felix Wolfsteller and Michael Wiegand. Main changes since 0.9.7: * Database performance has been improved. * Credential management has been improved. * Initial agent support has been added. * Support for cross-referencing in tasks, configs and targets has been added. openvas-manager 0.9.7 (2009-12-08) This is the thirteenth development release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS). Many thanks to everyone who has contributed to this release: Michael Wiegand and Tim Brown. Main changes since 0.9.6: * A bug which caused the number of selected NVTs within a family to be wrongly calculated under certain circumstances has been fixed. openvas-manager 0.9.6 (2009-12-01) This is the twelfth development release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS). Many thanks to everyone who has contributed to this release: Matthew Mundell and Felix Wolfsteller. Main changes since 0.9.5: * Support for empty scan config templates has been added. openvas-manager 0.9.5 (2009-11-30) This is the eleventh development release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS). Many thanks to everyone who has contributed to this release: Matthew Mundell and Felix Wolfsteller. Main changes since 0.9.4: * Server preference handling has been improved. * The build environment has been made more robust. * Support for per-NVT timeouts has been added. * The database upgrade has been made more flexible. * The library used for UUID generation has been changed to a more widely available library. * Updating of the internal cache has been improved. * The layout of the PDF reports has been improved. * An issue with long task start times has been fixed. * Cache management has been improved. openvas-manager 0.9.4 (2009-11-23) This is the tenth development release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS). Many thanks to everyone who has contributed to this release: Matthew Mundell and Felix Wolfsteller. Main changes since 0.9.3: * The layout of the PDF reports has been improved. * A bug which broke DB migration under certain circumstances has been fixed. * Support for NVT family retrieval and configuration management has been introduced. * Cache management has been improved. openvas-manager 0.9.3 (2009-11-09) This is the ninth development release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS). Many thanks to everyone who has contributed to this release: Matthew Mundell, Felix Wolfsteller and Michael Wiegand. Main changes since 0.9.2: * Database handling and migration has been improved. * Code cleanup. * NVT selection based on the family attributed has been introduced. * Sorting parameters have been added to most data retrieval commands. * Support for retrieving NVT preferences has been introduced. * The NBE output has been harmonized with the NBE output of openvas-client. * Support for filtering results has been added. * The layout of the LaTeX reports has been improved. * The layout of the PDF reports has been improved. openvas-manager 0.9.2 (2009-10-26) This is the eigth development release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS). Many thanks to everyone who has contributed to this release: Tim Brown, Matthew Mundell, Felix Wolfsteller, Jan-Oliver Wagner and Michael Wiegand. Main changes since 0.9.1: * Improved preference caching. * Support for migrating old openvas-manager databases has been added. * Pidfile management has been refactored. * LSC support has been improved. * The layout of the LaTeX reports has been improved. * Many more fixes and improvements. openvas-manager 0.9.1 (2009-10-19) This is the seventh development release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS). Many thanks to everyone who has contributed to this release: Tim Brown, Matthew Mundell, Felix Wolfsteller, Jan-Oliver Wagner and Michael Wiegand. Main changes since 0.9.0: * NVT preferences are now cached in the database. * Support for storing and sending files has been added. * Parsing of the NVT category has been fixed. * Premature pidfile deletion has been fixed. * The START_TASK response now contains the id of the report for this scan. * Many more fixes and improvements. openvas-manager 0.9.0 (2009-09-30) This is the sixth development release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS). Many thanks to everyone who has contributed to this release: Mattew Mundell, Felix Wolfsteller and Jan-Oliver Wagner. Main changes since 0.8.1: * Moved OMP library to openvas-libraries * openvas-libraries >= 3.0 now required * Add support of OMP commands CREATE_LSC_CREDENTIAL, DELETE_LSC_CREDENTIAL and GET_LSC_CREDENTIALS. * Many fixes and improvements openvas-manager 0.8.1 (2009-09-14) This is a maintenance release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS). It contains a number of small improvements and bugfixes. openvas-manager 0.7.0 (2009-08-21) This is a maintenance release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS). It contains considerable changes and vastly improved functionality. openvas-manager 0.6.1 (2009-06-22) This is a maintenance release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS). It contains a few minor changes to improve compatibility with the Debian packaging system and other OpenVAS modules. openvas-manager 0.6.0 (2009-06-18) This is the second public release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS). It offers improved support for the new OpenVAS Management Protocol (OMP) and new and improved functionality. The following areas have been added or significantly improved: - User authentication - Task ID assignment (UUIDs) - Retrieving checksums of the NVT collection - NVT information retrieval - Certificate handling In addition, the protocol implementation has been updated to match the specification more closely. openvas-manager 0.5.0 (2009-05-08) This is the first public release of the openvas-manager module for the Open Vulnerability Assessment System (OpenVAS). The OpenVAS Manager aims to be a layer between OpenVAS-Client and the actual OpenVAS Server. Basically it should be responsible for any tasks where no high system privileges are required. This module is in an early development stage and not yet intended for production use. It is not mandatory to have OpenVAS Manager for using OpenVAS 1.0 or 2.0. Usage example: If openvasd is running on port 7772, the following command starts the manager on port 1241. The client can then connect to port 1241 as though it was connecting to openvasd. # openvasmd --port 1241 --sport 7772 More information about the command line arguments can be obtained using: # openvasmd --help �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/simple_topo_plot/generate��������������������������������������000755 �001751 �001751 �00000003316 12557600613 026047� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/bin/sh # # OpenVAS # $Id$ # Description: Report generator script: Topology plot. # # This report generates a SVG image showing the # network topology. In a first step, the OMP report is # transformed via XSL with the tool xsltproc. # Next duplicate lines are removed with awk and finally # twopi of GraphViz creates the SVG file. # # Authors: # Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. TMP=`mktemp -d` || exit 1 xsltproc ./hostvisdot-summary.xsl $1 > ${TMP}/summary-rgb.dot # remove duplicate lines: awk '!($0 in a) {a[$0];print}' ${TMP}/summary-rgb.dot > ${TMP}/summary-rgb-nondup.dot # Generate an SVG graphic using one of the GraphViz modules. TYPE=`cat $1 | xmlstarlet sel -t -v "/report/report_format/param[name='Graph Type']/value"` if [ -z $TYPE ]; then twopi -Tsvg ${TMP}/summary-rgb-nondup.dot -o ${TMP}/summary-rgb-nondup.svg else $TYPE -Tsvg ${TMP}/summary-rgb-nondup.dot -o ${TMP}/summary-rgb-nondup.svg fi cat ${TMP}/summary-rgb-nondup.svg ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/simple_topo_plot/create_report_import��������������������������000644 �001751 �001751 �00000003534 12557600613 030504� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������NAME="Simple Topology" UUID=`uuid` EXTENSION=svg CONTENT_TYPE="image/svg+xml" SUMMARY="Network topology SVG image." DESCRIPTION="Scan results in topologic structure as scalable vector graphics." # Names must be in alphabetical order. FNAME1=generate FILE1=`base64 -w 0 generate` FNAME2=hostvisdot-summary.xsl FILE2=`base64 -w 0 hostvisdot-summary.xsl` # # PARAMS # PARAM1_NAME="Graph Type" PARAM1_TYPE=selection PARAM1_OPTION1="circo" PARAM1_OPTION2="dot" PARAM1_OPTION3="twopi" PARAM1_VALUE=$PARAM1_OPTION3 # PARAM2_NAME="Node Distance" PARAM2_VALUE="8" PARAM2_TYPE=integer PARAM2_TYPE_MIN=1 PARAM2_TYPE_MAX=20 echo ${UUID}${EXTENSION}${CONTENT_TYPE}0${FNAME1}${FILE1}${FNAME2}${FILE2}${PARAM1_NAME}${PARAM1_TYPE}${PARAM1_VALUE}${PARAM1_OPTION1}${PARAM1_OPTION2}${PARAM1_OPTION3}${PARAM2_NAME}${PARAM2_TYPE}${PARAM2_TYPE_MIN}${PARAM2_TYPE_MAX}${PARAM2_VALUE} > ${UUID} gpg --detach-sign --armor ${UUID} rm ${UUID} echo -n '<get_report_formats_response status="200" status_text="OK"><report_format id="'$UUID'"><name>'$NAME'</name><extension>'$EXTENSION'</extension><content_type>'$CONTENT_TYPE'</content_type><summary>'$SUMMARY'</summary><description>'$DESCRIPTION'</description><global>0</global><file name="'$FNAME1'">'$FILE1'</file><file name="'$FNAME2'">'$FILE2'</file><signature>' > simple_topology.xml cat ${UUID}.asc >> simple_topology.xml echo '</signature><param><name>'$PARAM1_NAME'</name><value>'$PARAM1_VALUE'</value><type>'$PARAM1_TYPE'</type><options><option>'$PARAM1_OPTION1'</option><option>'$PARAM1_OPTION2'</option><option>'$PARAM1_OPTION3'</option></options><default>'$PARAM1_VALUE'</default></param><param><name>'$PARAM2_NAME'</name><value>'$PARAM2_VALUE'</value><type>'$PARAM2_TYPE'<min>'$PARAM2_TYPE_MIN'</min><max>'$PARAM2_TYPE_MAX'</max></type><default>'$PARAM2_VALUE'</default></param></report_format></get_report_formats_response>' >> simple_topology.xml ��������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/simple_topo_plot/hostvisdot-summary.xsl������������������������000644 �001751 �001751 �00000016263 12557600613 030765� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method = "text" indent = "no" /> <!-- OpenVAS Manager $Id$ Description: Stylesheet for generating results as dot file. Authors: Michael Wiegand <michael.wiegand@greenbone.net> Copyright: Copyright (C) 2010 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:template name="newline"> <xsl:text> </xsl:text> </xsl:template> <xsl:template match="report"> digraph scan { <xsl:choose> <xsl:when test="report_format/param[name = 'Node Distance']"> <xsl:text> nodesep = </xsl:text> <xsl:value-of select="report_format/param[name = 'Node Distance']/value"/> <xsl:text>;</xsl:text> </xsl:when> <xsl:otherwise> <xsl:text> nodesep = 8;</xsl:text> </xsl:otherwise> </xsl:choose> <xsl:call-template name="newline"/> ranksep = 2; overlap = "true"; fontsize = 8.0; concentrate = "true"; root = "OpenVAS"; "OpenVAS" [label="OpenVAS", style=filled, color=chartreuse3]; <xsl:for-each select="host" > <xsl:variable name="current_host" select="ip"/> <xsl:choose> <xsl:when test="count(../results/result[host/text() = $current_host][threat/text() = 'High']) > 0"> "<xsl:value-of select="$current_host"/>" [label="<xsl:value-of select="$current_host"/>", style=filled, shape=Mrecord, color=red, fontcolor=white]; </xsl:when> <xsl:otherwise> <xsl:choose> <xsl:when test="count(../results/result[host/text() = $current_host][threat/text() = 'Medium']) > 0"> "<xsl:value-of select="$current_host"/>" [label="<xsl:value-of select="$current_host"/>", style=filled, shape=Mrecord, color=orange, fontcolor=white]; </xsl:when> <xsl:otherwise> <xsl:choose> <xsl:when test="count(../results/result[host/text() = $current_host][threat/text() = 'Low']) > 0"> "<xsl:value-of select="$current_host"/>" [label="<xsl:value-of select="$current_host"/>", style=filled, shape=Mrecord, color=cornflowerblue, fontcolor=white]; </xsl:when> </xsl:choose> </xsl:otherwise> </xsl:choose> </xsl:otherwise> </xsl:choose> <xsl:apply-templates select="../results/result[host/text() = $current_host][port/text() = 'general/HOST-T']" mode="trace"> <xsl:with-param name="host" select="$current_host" /> </xsl:apply-templates> </xsl:for-each> } </xsl:template> <xsl:template match="result" mode="trace"> <xsl:param name="host"/> <xsl:variable name="space"><xsl:text> </xsl:text> </xsl:variable> <xsl:variable name="fullroute" select="substring-before(substring-after(description/text(), 'traceroute:'), $space)" /> <xsl:variable name="ports" select="substring-before(substring-after(description/text(), 'ports:'), $space)" /> <xsl:variable name="gsm" select="substring-before($fullroute, ',')" /> <xsl:variable name="route" select="substring-after($fullroute, ',')" /> <xsl:variable name="nexthop" select="substring-before($route, ',')" /> <xsl:choose> <xsl:when test="contains($route, ',')"> "OpenVAS" -> "<xsl:value-of select="$nexthop"/>"; <xsl:call-template name="trace_recurse"> <xsl:with-param name="trace_list" select="$route"/> </xsl:call-template> </xsl:when> <xsl:otherwise> <xsl:choose> <xsl:when test="$route"> "OpenVAS" -> "<xsl:value-of select="$route"/>"; </xsl:when> <xsl:otherwise> "OpenVAS" -> "127.0.0.1" [style=dashed]; </xsl:otherwise> </xsl:choose> </xsl:otherwise> </xsl:choose> <!-- Enable the following block for port visualisation --> <xsl:call-template name="port_recurse"> <xsl:with-param name="port_list" select="$ports"/> <xsl:with-param name="port_host" select="$host"/> </xsl:call-template> </xsl:template> <xsl:template name="trace_recurse"> <xsl:param name="trace_list"/> <xsl:choose> <xsl:when test="contains($trace_list, ',')"> <xsl:variable name="head" select="substring-before($trace_list, ',')" /> <xsl:variable name="tail" select="substring-after($trace_list, ',')"/> <xsl:variable name="next" select="substring-before($tail, ',')"/> <xsl:choose> <xsl:when test="($next) and not ($head = $next) and not (contains ($head, '*')) and not (contains ($next, '*'))"> "<xsl:value-of select="$head"/>" -> "<xsl:value-of select="$next"/>"; </xsl:when> <xsl:when test="not ($next) and ($tail) and not ($head = $tail) and not (contains ($head, '*')) and not (contains ($tail, '*'))"> "<xsl:value-of select="$head"/>" -> "<xsl:value-of select="$tail"/>"; </xsl:when> </xsl:choose> <xsl:call-template name="trace_recurse"> <xsl:with-param name="trace_list" select="$tail"/> </xsl:call-template> </xsl:when> </xsl:choose> </xsl:template> <xsl:template name="port_recurse"> <xsl:param name="port_list"/> <xsl:param name="port_host"/> <xsl:choose> <xsl:when test="contains($port_list, ',')"> <xsl:variable name="head" select="substring-before($port_list, ',')" /> <xsl:variable name="tail" select="substring-after($port_list, ',')"/> "<xsl:value-of select="$port_host"/>:<xsl:value-of select="$head"/>" [label ="<xsl:value-of select="$head"/>", shape="Mrecord"]; "<xsl:value-of select="$port_host"/>" -> "<xsl:value-of select="$port_host"/>:<xsl:value-of select="$head"/>" [len = 0.2, arrowhead="none"]; <xsl:call-template name="port_recurse"> <xsl:with-param name="port_list" select="$tail"/> <xsl:with-param name="port_host" select="$port_host"/> </xsl:call-template> </xsl:when> <xsl:when test="$port_list and not (contains($port_list, ','))"> "<xsl:value-of select="$port_host"/>:<xsl:value-of select="$port_list"/>" [label ="<xsl:value-of select="$port_list"/>", shape="Mrecord"]; "<xsl:value-of select="$port_host"/>" -> "<xsl:value-of select="$port_host"/>:<xsl:value-of select="$port_list"/>" [len = 0.2, arrowhead="none"]; </xsl:when> </xsl:choose> </xsl:template> <xsl:template match="/"> <xsl:choose> <xsl:when test="report/@extension='xml'"> <xsl:apply-templates select="report/report"/> </xsl:when> <xsl:otherwise> <xsl:apply-templates select="report"/> </xsl:otherwise> </xsl:choose> </xsl:template> </xsl:stylesheet> ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/sourcefire/generate��������������������������������������������000755 �001751 �001751 �00000002072 12557600613 024623� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/bin/sh # # OpenVAS # $Id$ # Description: Report generator script: Sourcefire. # # This report generates a import file for Sourcefire # products. # This CSV text is created via a XSL transformation # with the tool xsltproc. # # Authors: # Matthew Mundell <matthew.mundell@greenbone.net> # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. xsltproc ./sourcefire.xsl $1 ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/sourcefire/create_report_import��������������������������������000644 �001751 �001751 �00000001553 12557600613 027261� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������NAME="Sourcefire" UUID=`uuid` EXTENSION=csv CONTENT_TYPE="text/csv" SUMMARY="Sourcefire Host Input Import." DESCRIPTION="Scan results in Host Input Import format for Sourcefire DC." # Names must be in alphabetical order. FNAME1=generate FILE1=`base64 -w 0 generate` FNAME2=sourcefire.xsl FILE2=`base64 -w 0 sourcefire.xsl` echo ${UUID}${EXTENSION}${CONTENT_TYPE}0${FNAME1}${FILE1}${FNAME2}${FILE2}> ${UUID} gpg --detach-sign --armor ${UUID} rm ${UUID} echo '<get_report_formats_response status="200" status_text="OK"><report_format id="'$UUID'"><name>'$NAME'</name><extension>'$EXTENSION'</extension><content_type>'$CONTENT_TYPE'</content_type><summary>'$SUMMARY'</summary><description>'$DESCRIPTION'</description><global>0</global><file name="'$FNAME1'">'$FILE1'</file><file name="'$FNAME2'">'$FILE2'</file></report_format></get_report_formats_response>' > sourcefire.xml �����������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/sourcefire/sourcefire.xsl��������������������������������������000644 �001751 �001751 �00000011324 12557600613 026001� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0"?> <!-- $Id$ Description: Sourcefire Export Stylesheet Authors: Felix Wolfsteller <felix.wolfsteller@greenbone.net> Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Copyright: Copyright (C) 2010 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method="text" encoding="string"/> <!-- PORT FROM PORT ELEMENT Example inputs are: https (443/tcp) nfs (2049/udp) general/tcp Note however that these formats are conventions only and not enforced by OpenVAS. --> <xsl:template name="portport"> <xsl:variable name="before_slash" select="substring-before(port, '/')" /> <xsl:variable name="port_nr" select="substring-after($before_slash, '(')" /> <xsl:choose> <xsl:when test="string-length($port_nr) > 0"> <xsl:value-of select="$port_nr"/> </xsl:when> <xsl:otherwise> <xsl:value-of select="$before_slash"/> </xsl:otherwise> </xsl:choose> </xsl:template> <!-- PROTOCOL FROM PORT ELEMENT Example inputs are: https (443/tcp) nfs (2049/udp) general/tcp Note however that these formats are conventions only and not enforced by OpenVAS. --> <xsl:template name="portproto"> <xsl:variable name="after_slash" select="substring-after(port, '/')" /> <xsl:variable name="port_proto" select="substring-before($after_slash, ')')" /> <xsl:choose> <xsl:when test="string-length($port_proto) > 0"> <xsl:value-of select="$port_proto"/> </xsl:when> <xsl:otherwise> <xsl:value-of select="$after_slash"/> </xsl:otherwise> </xsl:choose> </xsl:template> <!-- DESCRIPTION TEXT, DOUBLE QUOTES REPLACED BY SINGLE QUOTES <xsl:template name="quote_replace_recurse"> <xsl:param name="string_to_quote"/> <xsl:when test="contains($string_to_quote, '\"')"> </xsl:when> </xsl:template>--> <!-- MATCH RESULT --> <!-- Create AddScanResults entries. The syntax is: AddScanResult, ipaddr, 'scanner_id', vuln_id, port, protocol, 'name', 'description', cve_ids, bugtraq_ids where vuln_id: Valid RNA vulnerability IDs, or mapped third-party vulnerability IDs. proto: tcp|udp !--> <xsl:template match="result"> AddScanResult,<xsl:value-of select="host"/>,"OpenVAS",<xsl:value-of select="nvt/@oid"/>,<xsl:call-template name="portport" select="port"/>,<xsl:call-template name="portproto" select="port"/>,"<xsl:value-of select="nvt/name"/>","<xsl:value-of select="translate(description, '" ', "' ")"/>","cve_ids: <xsl:value-of select="translate(nvt/cve, ',', '')"/>","bugtraq_ids: <xsl:value-of select="translate(nvt/bid, ',', '')"/>"</xsl:template> <!-- MATCH HOST_START --> <xsl:template match="host_start"> AddHost,<xsl:value-of select="host"/> </xsl:template> <!-- MATCH HOST_END --> <xsl:template match="host_end"> </xsl:template> <!-- MATCH SCAN_START --> <xsl:template match="scan_start"> </xsl:template> <!-- MATCH SCAN_END --> <xsl:template match="scan_end"> </xsl:template> <!-- MATCH RESULT_COUNT --> <xsl:template match="result_count"> </xsl:template> <!-- MATCH PORTS --> <xsl:template match="ports"> </xsl:template> <!-- MATCH TASK --> <xsl:template match="task"> </xsl:template> <!-- MATCH SCAN_RUN_STATUS --> <xsl:template match="scan_run_status"> </xsl:template> <!-- MATCH FILTER --> <xsl:template match="filters"> </xsl:template> <!-- MATCH SORT --> <xsl:template match="sort"> </xsl:template> <!-- MATCH RESULTS --> <xsl:template match="results"> <xsl:apply-templates/> </xsl:template> <!-- MATCH REPORT --> <!-- the following lines are intentionally not indented because empty lines with spaces will trouble the Sourcefire host input importer. --> <xsl:template match="report"># Sourcefire Host Input File SetSource,OpenVAS <xsl:apply-templates select="host_start"/> <xsl:apply-templates select="results"/> </xsl:template> <xsl:template match="/"> <xsl:choose> <xsl:when test="report/@extension='xml'"> <xsl:apply-templates select="report/report"/> </xsl:when> <xsl:otherwise> <xsl:apply-templates select="report"/> </xsl:otherwise> </xsl:choose> </xsl:template> </xsl:stylesheet> ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/simple_bar_chart/generate��������������������������������������000755 �001751 �001751 �00000002502 12557600613 025751� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/bin/sh # # OpenVAS # $Id$ # Description: Report generator script: results per threat plot. # # This report generates a PNG graphics file # with a plot of the numbers of threat counts. # After the XML transformation via XSL with # xsltproc, gnuplot is executed with a predefined # plot file. # # Authors: # Matthew Mundell <matthew.mundell@greenbone.net> # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. SRC=`pwd` TMP=`mktemp -d` || exit 1 xsltproc ./plot.xsl $1 > ${TMP}/plot.dat 2>xsltproc1.err \ && xsltproc ./plot-plt.xsl $1 > ${TMP}/plot.plt 2>xsltproc2.err \ && cd ${TMP} 2>/dev/null \ && gnuplot plot.plt 2>gnuplot.err ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/simple_bar_chart/plot-plt.xsl����������������������������������000644 �001751 �001751 �00000007720 12557600613 026543� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:str="http://exslt.org/strings" exclude-result-prefixes="str"> <xsl:output method="text" encoding="string" indent="no" /> <xsl:strip-space elements="*"/> <!-- OpenVAS Manager $Id$ Description: Stylesheet for generating results per threat code for Gnuplot. Authors: Matthew Mundell <matthew.mundell@greenbone.net> Copyright: Copyright (C) 2010 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:template name="newline"> <xsl:text> </xsl:text> </xsl:template> <xsl:template match="report"> <xsl:text>unset title</xsl:text> <xsl:call-template name="newline"/> <xsl:choose> <xsl:when test="report/report_format/param[name='Key'] and report/report_format/param[name='Key']/value = '0'"> <xsl:text>unset key</xsl:text> </xsl:when> <xsl:otherwise> <xsl:text>set key on outside below</xsl:text> </xsl:otherwise> </xsl:choose> <xsl:call-template name="newline"/> <xsl:text>set terminal png size </xsl:text> <xsl:choose> <xsl:when test="report/report_format/param[name='Width']"> <xsl:value-of select="report/report_format/param[name='Width']/value"/> </xsl:when> <xsl:otherwise> <xsl:text>400</xsl:text> </xsl:otherwise> </xsl:choose> <xsl:text>,</xsl:text> <xsl:choose> <xsl:when test="report/report_format/param[name='Height']"> <xsl:value-of select="report/report_format/param[name='Height']/value"/> </xsl:when> <xsl:otherwise> <xsl:text>400</xsl:text> </xsl:otherwise> </xsl:choose> <xsl:call-template name="newline"/> set boxwidth 0.9 relative <xsl:choose> <xsl:when test="report/report_format/param[name='Fill Style']/value = 'pattern'"> <xsl:text>set style fill pattern 2</xsl:text> </xsl:when> <xsl:when test="report/report_format/param[name='Fill Style']/value = 'solid'"> <xsl:text>set style fill solid</xsl:text> </xsl:when> <xsl:when test="report/report_format/param[name='Fill Style']/value = 'empty'"> <xsl:text>set style fill empty</xsl:text> </xsl:when> <xsl:otherwise> <xsl:text>set style fill empty</xsl:text> </xsl:otherwise> </xsl:choose> set xlabel "Threat" set ylabel "Results" <xsl:choose> <xsl:when test="report/report_format/param[name='Height']"> <xsl:text>set title "</xsl:text> <xsl:value-of select="report/report_format/param[name='Title']/value"/> <xsl:text>"</xsl:text> </xsl:when> <xsl:otherwise> <xsl:text>set title "Results per Threat"</xsl:text> </xsl:otherwise> </xsl:choose> <xsl:call-template name="newline"/> show title set border 11 set xtics nomirror <xsl:if test="string-length (report/report_format/param[name='Blurb']/value) > 0"> set label "<xsl:value-of select="str:replace (report/report_format/param[name='Blurb']/value, ' ', '\n')"/>" at graph 0.5,0.5 center front </xsl:if> show label plot [-0.5:3.5] [0:] 'plot.dat' using 2:xticlabels(1) with boxes linetype 3 fs exit </xsl:template> <xsl:template match="/"> <xsl:choose> <xsl:when test="report/@extension='xml'"> <xsl:apply-templates select="report/report"/> </xsl:when> <xsl:otherwise> <xsl:apply-templates select="report"/> </xsl:otherwise> </xsl:choose> </xsl:template> </xsl:stylesheet> ������������������������������������������������openvas-manager-6.0.9/report_formats/simple_bar_chart/create_report_import��������������������������000644 �001751 �001751 �00000006505 12557600613 030413� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������NAME="Threat Count Bar Chart" UUID=`uuid` EXTENSION=png CONTENT_TYPE="image/png" SUMMARY="Summary threat counts as bar chart PNG image." DESCRIPTION="Simple example for a summary of threat counts as bar chart PNG image." # Names must be in alphabetical order. FNAME1=generate FILE1=`base64 -w 0 generate` FNAME2=plot-plt.xsl FILE2=`base64 -w 0 plot-plt.xsl` FNAME3=plot.xsl FILE3=`base64 -w 0 plot.xsl` # # PARAMS # PARAM1_NAME="Title" PARAM1_VALUE="Threat counts" PARAM1_TYPE=string PARAM1_TYPE_MIN=0 PARAM1_TYPE_MAX=60 # PARAM2_NAME="Key" PARAM2_VALUE="0" PARAM2_TYPE=boolean # PARAM3_NAME="Fill Style" PARAM3_VALUE="pattern" PARAM3_TYPE=selection PARAM3_OPTION1="pattern" PARAM3_OPTION2="solid" PARAM3_OPTION3="empty" PARAM3_DEFAULT="solid" # PARAM4_NAME="Width" PARAM4_VALUE="640" PARAM4_TYPE=integer PARAM4_TYPE_MIN=200 PARAM4_TYPE_MAX=800 # PARAM5_NAME="Height" PARAM5_VALUE="480" PARAM5_TYPE=integer PARAM5_TYPE_MAX=600 # PARAM6_NAME="Blurb" PARAM6_VALUE="" PARAM6_TYPE=text # Minimum min. #PARAM6_TYPE_MIN=-9223372036854775807 PARAM6_TYPE_MIN=0 # Maximum max. #PARAM6_TYPE_MAX=9223372036854775806 PARAM6_TYPE_MAX=50 echo ${UUID}${EXTENSION}${CONTENT_TYPE}0${FNAME1}${FILE1}${FNAME2}${FILE2}${FNAME3}${FILE3}${PARAM1_NAME}${PARAM1_TYPE}${PARAM1_TYPE_MIN}${PARAM1_TYPE_MAX}${PARAM1_VALUE}${PARAM2_NAME}${PARAM2_TYPE}${PARAM2_VALUE}${PARAM3_NAME}${PARAM3_TYPE}${PARAM3_DEFAULT}${PARAM3_OPTION1}${PARAM3_OPTION2}${PARAM3_OPTION3}${PARAM4_NAME}${PARAM4_TYPE}${PARAM4_TYPE_MIN}${PARAM4_TYPE_MAX}${PARAM4_VALUE}${PARAM5_NAME}${PARAM5_TYPE}${PARAM5_TYPE_MAX}${PARAM5_VALUE}${PARAM6_NAME}${PARAM6_TYPE}${PARAM6_TYPE_MIN}${PARAM6_TYPE_MAX}${PARAM6_VALUE} > ${UUID} gpg --detach-sign --armor ${UUID} rm ${UUID} echo -n '<get_report_formats_response status="200" status_text="OK"><report_format id="'$UUID'"><name>'$NAME'</name><extension>'$EXTENSION'</extension><content_type>'$CONTENT_TYPE'</content_type><summary>'$SUMMARY'</summary><description>'$DESCRIPTION'</description><global>0</global><file name="'$FNAME1'">'$FILE1'</file><file name="'$FNAME2'">'$FILE2'</file><file name="'$FNAME3'">'$FILE3'</file><signature>' > simple_bar_chart.xml cat ${UUID}.asc >> simple_bar_chart.xml echo '</signature><param><name>'$PARAM1_NAME'</name><value>'$PARAM1_VALUE'</value><type>'$PARAM1_TYPE'<min>'$PARAM1_TYPE_MIN'</min><max>'$PARAM1_TYPE_MAX'</max></type><default>'$PARAM1_VALUE'</default></param><param><name>'$PARAM2_NAME'</name><value>'$PARAM2_VALUE'</value><type>'$PARAM2_TYPE'</type><default>'$PARAM2_VALUE'</default></param><param><name>'$PARAM3_NAME'</name><value>'$PARAM3_VALUE'</value><type>'$PARAM3_TYPE'</type><options><option>'$PARAM3_OPTION1'</option><option>'$PARAM3_OPTION2'</option><option>'$PARAM3_OPTION3'</option></options><default>'$PARAM3_DEFAULT'</default></param><param><name>'$PARAM4_NAME'</name><value>'$PARAM4_VALUE'</value><type>'$PARAM4_TYPE'<min>'$PARAM4_TYPE_MIN'</min><max>'$PARAM4_TYPE_MAX'</max></type><default>'$PARAM4_VALUE'</default></param><param><name>'$PARAM5_NAME'</name><value>'$PARAM5_VALUE'</value><type>'$PARAM5_TYPE'<max>'$PARAM5_TYPE_MAX'</max></type><default>'$PARAM5_VALUE'</default></param><param><name>'$PARAM6_NAME'</name><value>'$PARAM6_VALUE'</value><type>'$PARAM6_TYPE'<min>'$PARAM6_TYPE_MIN'</min><max>'$PARAM6_TYPE_MAX'</max></type><default>'$PARAM6_VALUE'</default></param></report_format></get_report_formats_response>' >> simple_bar_chart.xml �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/simple_bar_chart/plot.xsl��������������������������������������000644 �001751 �001751 �00000003547 12557600613 025751� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:func = "http://exslt.org/functions" xmlns:openvas="http://openvas.org" extension-element-prefixes="func"> <xsl:output method="text" encoding="UTF-8" /> <!-- OpenVAS Manager $Id$ Description: Stylesheet for generating results per threat data for Gnuplot. Authors: Matthew Mundell <matthew.mundell@greenbone.net> Copyright: Copyright (C) 2010 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <func:function name="openvas:report"> <xsl:choose> <xsl:when test="count(/report/report) > 0"> <func:result select="/report/report"/> </xsl:when> <xsl:otherwise> <func:result select="/report"/> </xsl:otherwise> </xsl:choose> </func:function> <xsl:template match="/"> High <xsl:value-of select="count (openvas:report()/results/result[threat='High'])"/> Medium <xsl:value-of select="count (openvas:report()/results/result[threat='Medium'])"/> Low <xsl:value-of select="count (openvas:report()/results/result[threat='Low'])"/> Log <xsl:value-of select="count (openvas:report()/results/result[threat='Log'])"/> </xsl:template> </xsl:stylesheet> ���������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/simple_pie_chart/generate��������������������������������������000755 �001751 �001751 �00000002511 12557600613 025762� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/bin/sh # # OpenVAS # $Id$ # Description: Report generator script: results per threat pie plot. # # This report generates a PNG graphics file # with a pie plot of the numbers of threat counts. # The XML transformation via XSL with xsltproc # creates a little Python program which uses the pychart # module to create the pie chart PNG graphics. # # Authors: # Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. SRC=`pwd` TMP=`mktemp -d` || exit 1 xsltproc ./pieplot.xsl $1 > ${TMP}/pieplot.py 2>${TMP}/xlstproc.err \ && cd ${TMP} 2>/dev/null \ && python pieplot.py 2>${TMP}/python.err ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/simple_pie_chart/create_report_import��������������������������000644 �001751 �001751 �00000002722 12557600613 030421� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������NAME="Simple Pie Plot" UUID=`uuid` EXTENSION=png CONTENT_TYPE="image/png" SUMMARY="Summary threat counts as pie chart PNG image." DESCRIPTION="Simple example for a summary of threat counts as pie chart PNG image." # Names must be in alphabetical order. FNAME1=generate FILE1=`base64 -w 0 generate` FNAME2=pieplot.xsl FILE2=`base64 -w 0 pieplot.xsl` # # PARAMS # PARAM1_NAME="Width" PARAM1_VALUE="600" PARAM1_TYPE=string # PARAM2_NAME="Height" PARAM2_VALUE="400" PARAM2_TYPE=string echo ${UUID}${EXTENSION}${CONTENT_TYPE}0${FNAME1}${FILE1}${FNAME2}${FILE2}${PARAM1_NAME}${PARAM1_TYPE}${PARAM1_VALUE}${PARAM2_NAME}${PARAM2_TYPE}${PARAM2_VALUE} > ${UUID} gpg --detach-sign --armor ${UUID} rm ${UUID} echo -n '<get_report_formats_response status="200" status_text="OK"><report_format id="'$UUID'"><name>'$NAME'</name><extension>'$EXTENSION'</extension><content_type>'$CONTENT_TYPE'</content_type><summary>'$SUMMARY'</summary><description>'$DESCRIPTION'</description><global>0</global><file name="'$FNAME1'">'$FILE1'</file><file name="'$FNAME2'">'$FILE2'</file><signature>' > simple_pie_chart.xml cat ${UUID}.asc >> simple_pie_chart.xml echo '</signature><param><name>'$PARAM1_NAME'</name><value>'$PARAM1_VALUE'</value><type>'$PARAM1_TYPE'</type><default>'$PARAM1_VALUE'</default></param><param><name>'$PARAM2_NAME'</name><value>'$PARAM2_VALUE'</value><type>'$PARAM2_TYPE'</type><default>'$PARAM2_VALUE'</default></param></report_format></get_report_formats_response>' >> simple_pie_chart.xml ����������������������������������������������openvas-manager-6.0.9/report_formats/simple_pie_chart/pieplot.xsl�����������������������������������000644 �001751 �001751 �00000006242 12557600613 026453� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method="text" encoding="UTF-8" indent="no" /> <xsl:strip-space elements="*"/> <!-- OpenVAS Manager $Id$ Description: Stylesheet for generating python code that creates a pie plot. Authors: Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> Copyright: Copyright (C) 2010 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:template name="newline"> <xsl:text> </xsl:text> </xsl:template> <xsl:template match="report"> from pychart import * theme.use_color = True theme.output_format="png" theme.reinitialize() data = [("High (<xsl:value-of select="count (results/result[threat='High'])"/>)", <xsl:value-of select="count (results/result[threat='High'])"/>), ("Medium (<xsl:value-of select="count (results/result[threat='Medium'])"/>)", <xsl:value-of select="count (results/result[threat='Medium'])"/>), ("Low (<xsl:value-of select="count (results/result[threat='Low'])"/>)", <xsl:value-of select="count (results/result[threat='Low'])"/><xsl:text>)]</xsl:text> <xsl:call-template name="newline"/> <xsl:call-template name="newline"/> <xsl:text>ar = area.T(size=(</xsl:text> <xsl:choose> <xsl:when test="report_format/param[name='Width']"> <xsl:value-of select="report_format/param[name='Width']/value"/> </xsl:when> <xsl:otherwise> <xsl:text>400</xsl:text> </xsl:otherwise> </xsl:choose> <xsl:text>,</xsl:text> <xsl:choose> <xsl:when test="report_format/param[name='Height']"> <xsl:value-of select="report_format/param[name='Height']/value"/> </xsl:when> <xsl:otherwise> <xsl:text>400</xsl:text> </xsl:otherwise> </xsl:choose> <xsl:text>), legend=None,</xsl:text> x_grid_style = None, y_grid_style = None) # The "High" element is pulled out of the pie with offset=10 plot = pie_plot.T(data=data, arc_offsets=[10,0,0], shadow = None, label_offset = 25, fill_styles = [ fill_style.red, fill_style.yellow, fill_style.blue ], arrow_style = arrow.a3) ar.add_plot(plot) ar.draw() </xsl:template> <xsl:template match="/"> <xsl:choose> <xsl:when test="report/@extension='xml'"> <xsl:apply-templates select="report/report"/> </xsl:when> <xsl:otherwise> <xsl:apply-templates select="report"/> </xsl:otherwise> </xsl:choose> </xsl:template> </xsl:stylesheet> ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/README���������������������������������������������������������000644 �001751 �001751 �00000001176 12557600613 021621� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager/report_formats ============================== This directory contains a number of report formats that are not installed by default. They might be incomplete or in other ways in the works. Running . create_report_import in a subdirectory will create a .xml import file for uploading it into OpenVAS Manager as a personal report format. The script tries to create a signature for the report with your default GnuPG signature key. You can ignore this if you don't have one or don't want this to be done. This processing is implemented quite coarsely at the moment. Eventually it should be driven by a CMakeLists.txt ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/IVIL/generate��������������������������������������������������000755 �001751 �001751 �00000001743 12557600613 023224� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/bin/sh # # OpenVAS # $Id$ # Description: Report generator script: IVIL. # # This report generator creates a single IVIL # file from the XML report using a XSL transformation # with the tool xsltproc. # # Authors: # Tim Brown <timb@openvas.org> # # Copyright: # Copyright (C) 2010 Tim Brown # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License version 2, # or, at your option, any later version as published by the Free # Software Foundation # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. xsltproc ./IVIL.xsl $1 �����������������������������openvas-manager-6.0.9/report_formats/IVIL/IVIL.xsl��������������������������������������������������000644 �001751 �001751 �00000010525 12557600613 022775� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" xmlns:str="http://exslt.org/strings" extension-element-prefixes="str"> <xsl:output method="xml" doctype-system="" doctype-public="" encoding="UTF-8" /> <!-- OpenVAS Manager $Id$ Description: Report stylesheet for IVIL format. Authors: Tim Brown <timb@openvas.org> Copyright: Copyright (C) 2010 Tim Brown This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License version 2, or, at your option, any later version as published by the Free Software Foundation This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:template match="report/@id"> <xsl:apply-templates /> </xsl:template> <xsl:template match="report/scan_end"> <xsl:value-of select="substring(., 21, 4)"/> <xsl:choose> <xsl:when test="contains(., 'Jan')">01</xsl:when> <xsl:when test="contains(., 'Feb')">02</xsl:when> <xsl:when test="contains(., 'Mar')">03</xsl:when> <xsl:when test="contains(., 'Apr')">04</xsl:when> <xsl:when test="contains(., 'May')">05</xsl:when> <xsl:when test="contains(., 'Jun')">06</xsl:when> <xsl:when test="contains(., 'Jul')">07</xsl:when> <xsl:when test="contains(., 'Aug')">08</xsl:when> <xsl:when test="contains(., 'Sep')">09</xsl:when> <xsl:when test="contains(., 'Oct')">10</xsl:when> <xsl:when test="contains(., 'Nov')">11</xsl:when> <xsl:when test="contains(., 'Dec')">12</xsl:when> </xsl:choose> <xsl:choose> <xsl:when test="substring(., 9, 2)=' 1'">01</xsl:when> <xsl:when test="substring(., 9, 2)=' 2'">02</xsl:when> <xsl:when test="substring(., 9, 2)=' 3'">03</xsl:when> <xsl:when test="substring(., 9, 2)=' 4'">04</xsl:when> <xsl:when test="substring(., 9, 2)=' 5'">05</xsl:when> <xsl:when test="substring(., 9, 2)=' 6'">06</xsl:when> <xsl:when test="substring(., 9, 2)=' 7'">07</xsl:when> <xsl:when test="substring(., 9, 2)=' 8'">08</xsl:when> <xsl:when test="substring(., 9, 2)=' 9'">09</xsl:when> <xsl:otherwise><xsl:value-of select="substring(., 9, 2)"/></xsl:otherwise> </xsl:choose> <xsl:value-of select="substring(., 12, 2)"/> <xsl:value-of select="substring(., 15, 2)"/> <xsl:value-of select="substring(., 18, 2)"/> </xsl:template> <xsl:template match="report/results" mode="version"> <xsl:for-each select="result"> <xsl:if test="nvt/name='Information about the scan'"> <xsl:value-of select="substring-before(substring-after(description, 'OpenVAS version : '), '. ')" /> </xsl:if> </xsl:for-each> </xsl:template> <xsl:template match="report/results" mode="findings"> <xsl:for-each select="result"> <finding> <ip><xsl:value-of select="host" /></ip> <port><xsl:value-of select="port" /></port> <id><xsl:value-of select="nvt/@oid" /></id> <severity> <xsl:choose> <xsl:when test="threat='Low'">Low</xsl:when> <xsl:when test="threat='Medium'">Medium</xsl:when> <xsl:when test="threat='High'">High</xsl:when> </xsl:choose> </severity> <finding_txt><xsl:value-of select="description" /></finding_txt> <references> <cve /> <bid /> <osvdb /> <url /> <msf /> </references> </finding> </xsl:for-each> </xsl:template> <xsl:template match="report"> <ivil version="0.2"> <addressee> <program>Seccubus</program> <programSpecificData> <xsl:apply-templates select="@id" /> </programSpecificData> </addressee> <sender> <scanner_type>OpenVAS</scanner_type> <version><xsl:apply-templates select="results" mode="version" /></version> <timestamp><xsl:apply-templates select="scan_end" /></timestamp> </sender> <findings> <xsl:apply-templates select="results" mode="findings" /> </findings> </ivil> </xsl:template> <xsl:template match="/"> <xsl:choose> <xsl:when test = "report/@extension = 'xml'"> <xsl:apply-templates select="report/report"/> </xsl:when> <xsl:otherwise> <xsl:apply-templates select="report"/> </xsl:otherwise> </xsl:choose> </xsl:template> </xsl:stylesheet> ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/simple_map_plot/generate���������������������������������������000755 �001751 �001751 �00000006100 12557600613 025635� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/bin/sh # # OpenVAS # $Id$ # Description: Mapgenerator for geographically located target systems # # This mapgenerator creates a PNG image showing hosts on a worldmap. # The first step is to create a CSV file from the OMP report using xsltproc. # Then the file is merged with the file contianing the location information. # To generate the map, the resulting CSV file is converted into the shape format # used by MapServer and then drawn to the image file using shp2img. # # Authors: # Raimund Renkert <raimund.renkert@greenbone.net> # Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. TMP=`mktemp -d` || exit 1 RWD=`pwd | sed -e "s/\//\\\\\\\\\//g"` # Create csv file from report using xslt. xsltproc ./report_to_csv_host.xsl $1 | grep -v "^ *$" > ${TMP}/hosts.csv # Remove leading whitespaces from file. sed -e 's/^[ \t]*//' ${TMP}/hosts.csv > ${TMP}/hosts_clean.csv # Merge locations file and host file cat locations.csv ${TMP}/hosts_clean.csv | awk -f ./join.awk > \ ${TMP}/host_locations.csv # We need the .vrt file where the shapefile is cp hosts.vrt ${TMP} # Set the paths echo "sed -e \"s/__RWD__/"${RWD}"/g\"" > ${TMP}/do_sed . ${TMP}/do_sed < world_map.map > ${TMP}/world_map.map # Create shape file using ogr2ogr. ( cd ${TMP} ; ogr2ogr -f "ESRI Shapefile" . host_locations.csv ) ( cd ${TMP} ; ogr2ogr -f "ESRI Shapefile" . hosts.vrt ) # Get host count (all hosts) HIGH_COUNTER_1=`grep ", red" ${TMP}/hosts_clean.csv | wc -l` MED_COUNTER_1=`grep ", orange" ${TMP}/hosts_clean.csv | wc -l` LOW_COUNTER_1=`grep ", blue" ${TMP}/hosts_clean.csv | wc -l` # Get host count (referenced hosts) HIGH_COUNTER_2=`grep ", red" ${TMP}/host_locations.csv | wc -l` MED_COUNTER_2=`grep ", orange" ${TMP}/host_locations.csv | wc -l` LOW_COUNTER_2=`grep ", blue" ${TMP}/host_locations.csv | wc -l` # Calculate none referenced hosts HIGH_COUNT=$((HIGH_COUNTER_1-HIGH_COUNTER_2)) MED_COUNT=$((MED_COUNTER_1-MED_COUNTER_2)) LOW_COUNT=$((LOW_COUNTER_1-LOW_COUNTER_2)) sed -e "s/target_count_high/$HIGH_COUNT/g; \ s/target_count_med/$MED_COUNT/g; \ s/target_count_low/$LOW_COUNT/g" \ non-georeferenced.dot > ${TMP}/non-georeferenced.dot cp non-georeferenced.map ${TMP} twopi -Tpng ${TMP}/non-georeferenced.dot > ${TMP}/non-georeferenced.png # Render image ( cd "${TMP}" ; shp2img -m world_map.map -o "${TMP}/out.png" ) cat "${TMP}/out.png" && rm -rf "${TMP}" ����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/simple_map_plot/hosts.vrt��������������������������������������000644 �001751 �001751 �00000000607 12557600613 026020� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<OGRVRTDataSource> <!--Layer definition and name--> <OGRVRTLayer name="ip_layer"> <!--Source/target settings--> <SrcDataSource relativeToVRT="1">.</SrcDataSource> <SrcLayer>host_locations</SrcLayer> <GeometryType>wkbPoint</GeometryType> <LayerSRS>WGS84</LayerSRS> <GeometryField encoding="PointFromColumns" x="lon" y="lat"/> </OGRVRTLayer> </OGRVRTDataSource> �������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/simple_map_plot/create_report_import���������������������������000644 �001751 �001751 �00000003653 12557600613 030302� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������NAME="Simple Map" UUID=`uuid` EXTENSION=png CONTENT_TYPE="image/png" SUMMARY="Geographic Map" DESCRIPTION="Targets located on a worldmap as static png image." # Names must be in alphabetical order. FNAME1=FreeSans.ttf FILE1=`base64 -w 0 FreeSans.ttf` FNAME2=fonts.txt FILE2=`base64 -w 0 fonts.txt` FNAME3=generate FILE3=`base64 -w 0 generate` FNAME4=hosts.vrt FILE4=`base64 -w 0 hosts.vrt` FNAME5=join.awk FILE5=`base64 -w 0 join.awk` FNAME6=locations.csv FILE6=`base64 -w 0 locations.csv` FNAME7=non-georeferenced.dot FILE7=`base64 -w 0 non-georeferenced.dot` FNAME8=non-georeferenced.map FILE8=`base64 -w 0 non-georeferenced.map` FNAME9=report_to_csv_host.xsl FILE9=`base64 -w 0 report_to_csv_host.xsl` FNAME10=world_map.map FILE10=`base64 -w 0 world_map.map` FNAME11=world_map.tiff FILE11=`base64 -w 0 world_map.tiff` echo ${UUID}${EXTENSION}${CONTENT_TYPE}0${FNAME1}${FILE1}${FNAME2}${FILE2}${FNAME3}${FILE3}${FNAME4}${FILE4}${FNAME5}${FILE5}${FNAME6}${FILE6}${FNAME7}${FILE7}${FNAME8}${FILE8}${FNAME9}${FILE9}${FNAME10}${FILE10}${FNAME11}${FILE11}> ${UUID} gpg --detach-sign --armor ${UUID} rm ${UUID} echo -n '<get_report_formats_response status="200" status_text="OK"><report_format id="'$UUID'"><name>'$NAME'</name><extension>'$EXTENSION'</extension><content_type>'$CONTENT_TYPE'</content_type><summary>'$SUMMARY'</summary><description>'$DESCRIPTION'</description><global>0</global><file name="'$FNAME1'">'$FILE1'</file><file name="'$FNAME2'">'$FILE2'</file><file name="'$FNAME3'">'$FILE3'</file><file name="'$FNAME4'">'$FILE4'</file><file name="'$FNAME5'">'$FILE5'</file><file name="'$FNAME6'">'$FILE6'</file><file name="'$FNAME7'">'$FILE7'</file><file name="'$FNAME8'">'$FILE8'</file><file name="'$FNAME9'">'$FILE9'</file><file name="'$FNAME10'">'$FILE10'</file><file name="'$FNAME11'">'$FILE11'</file><signature>' > simple_map.xml cat ${UUID}.asc >> simple_map.xml echo '</signature></report_format></get_report_formats_response>' >> simple_map.xml �������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/simple_map_plot/non-georeferenced.map��������������������������000644 �001751 �001751 �00000000451 12557600613 030204� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������LAYER # non-georeferenced IPs NAME "non-georeferenced" STATUS DEFAULT TYPE POINT PROJECTION "init=epsg:4326" END FEATURE POINTS -130 -50 END END CLASS NAME "non-georeferenced" MINSIZE 150 MAXSIZE 150 SYMBOL "non-georeferenced.png" END END �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/simple_map_plot/FreeSans.ttf�����������������������������������000644 �001751 �001751 �00001003610 12557600613 026346� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������pGDEFU]������rGPOSx��p��$GSUB����OS/2K@W�����Vcmap���� cvt �!y��x���gasp���|���glyf3f���Lheadۻ�k���6hhea �k���$hmtx>�k��!loca ���"�maxpZ���� nameO� ��NpostZ�\��Q+���� ���j�����������m�nn�o����� �!H�IO�P|�}}�~~������������� �0�>�DFLT�latn������������������kern������������������V�����2�@�f�t��� F`$�H� �$�7�9�:�<�����H� �$�7�9�:�<{������$�7�:� �<��������$�G�R�U�V�W�Y�Z��\����� �$�7� �9��:��<������ �$�7� �9��:��<�������$��7�9�:�<��� �$�7�9�:�<�����@CH�@CH�@CH�@�CH�@�CH�@�CH� ���>?@ABCDH�@�CH�@CH� ��=>?@ABCDEH������}=>?@ABCDEH�����L�<Xd6d Jdnx      � j 8 f N T b x �*8FTbp~�&������&�*�2�4�7�8�9�:�<�D�E��F�G�H�J�R�T�W�X�Y�Z�\�m�����������$�2�9�:�<������������ �$�+�.�2������� �$�-�7�9�:�;�<�����������$�-�2�D�H�L�M�R�U�X���������������� �$�7�9�:�<���������$������&�*�2�6�7��D�H�R�X�\�����������$��&�*�2�6�7�8�9�:�<�X�\�����������������"ks����$�&�*�D�R������������������ �$�7�9�:�;�<������y��y�$�-�D�H�R���������������&�*�2�7�8�9�:�<�D�H�R�X�\�������������� �$�7�9�:�<�W�����/����{��$�&�*�-�2�6�9� �:��<��D�F�H�J�L�M�R�U�V�X�Y�Z�\�m���������������"#� ���$�P�Q�S��U�������&������$�&�*�2�6�7��D�H�J�L�R�U�X�\�m����������������"�$������$�&�*�2�6�7��D�H�J�L�R�U�X�\�m���������������� ��&�2�4�D�H�R�X�\��$������$�&�*�2�6�7��D�H�J�L��R�S�X�Y�m�����������������Y�\��M�Y�Z�\��Y�Z�\��K��N���W�Y�Z�[�\��D�H�I��L�M�O�R�W�����������D���������\��7�M���D�H�J�R�V�X�����������\��S��Y�Z�\��7�S��Y�Z�\��7�W�Y�Z�[�\��W�\��F��X��+������D�F�G�H�I��J�L��N��O��R�S��T�V��W��X��Y��Z��[��\��]� �������������������W����6�D�H�K�R����������������D�F�H�J�R�V����������������������D�F�H�J�R�V����������������D�F�H�R�T��������D�F�H�J�O�R�V��������������� �����&�*�2�4�7�8�9�:�<�������&�*�2�4�7�8�9�:�<�D�E��F�G�H�J�R�T�W�X�Y�Z�\�m� �����&�*�2�4�7�8�9�:�<� �����&�*�2�4�7�8�9�:�<�������&�*�2�4�7�8�9�:�<�D�E��F�G�J�R�T�W�X�Y�Z�\�m�������&�*�2�4�7�8�9�:�<�D�E��F�G�H�J�R�T�W�X�Y�Z�\�m��$��7�9�<��$�7�9�:�<��7�9�<��7�9�<��$�7�9�:�;�<��$��$����$�P�Q�S��U��$����$�E��P�Q�S��U��Y�Z�\��Y�Z�\��Y�Z�\��Y�Z�\��Y�Z�\��Y�Z�\��Y�Z�\��Y�Z�\��Y�Z�\��W��W�Y�Z�[�\��$�+�.�2��K��N���$�7�9�W��Y�\���$�'���)�*��-�/��1�3� �5�=� �D�F��H�L��N�\����,���2���3���8���=���?���B���D���G���H""�J??�K���� �T�n�DFLT�armn�&hebr�2latn�>������������������������������frac�liga������������ ���"���� �������N���^�����&�P�f����������� ���"�������������������� ���"������������� �� ������������z����J�T�^�h�����-�� ���"�(M��I�OL��I�LK��OJ��LI��I�����M��O��W��N��W��� M��OL��L���,�I�L�VAI������n�i��L������}��������������������1�� _P`������PfEd�@� u5�Zuˀ������������������|������`������ �~3TY\ajmsu (uz~_V^ ,J   3 9 C E I M Q p  ( 0 3 6 9 < B H M \ ^ p t        ! + 0 3 9 C G ` o EMWY[]}   # & 7 = D I K q y ! !!!!"!(!-!3!!!!"�"" """"" "."4"<">"C"I"`"e""#�%&j00000000A6<>ADO��� � �&PV[`emouy� &tz~�1Za�0     5 < E G K P f    * 2 5 8 < > G K Y ^ f r         * / 2 6 > G ` f � HPY[]_    & 0 9 D G K p t ! !!!!"!&!*!0!S!!!"�""""""" "'"4"<">"A"I"`"d""#�%&j00000A0009�8>@CFponkhfeda_^\[PON)'X,*(%#~|{wujibaUSJIHGDA?<' �&%" �{ysVUTyNMLGDB@?94-,*% vxwvtIDC>l I 3 2 1 0 / .���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������~{utho��  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`a��rdei�xpk�vj��s��gw�����l|�cn����m}�b�����������������y�������q���z������!y������!��n���.�/<�2<�2��/<�2<�23!%!!!M f!X��|����� ��#'#5'STRhh��41�� ��3#'73#'4]']'ooo�������3#3##7##7#537#537337#3$]jiu'L&|'L&erly$L$}#0| }DDDD�� �3�:�C��3#&'&'&##5&'&7453&'&54767567654'&;~/O9dUD 1K;+O#G]!G`=*/6 ]&/M" 0jh= gg u'0 J0 3_* LZ(<=���[��!�%�5�F��2#"'&5476"327654'&%3#2#"'&5476"327654/&T3?/<Q4&?/<6 -60|BuBU3#?/<Q4&@/;6/60B%*O3'?0<Q4&F.5-9^'VB.<O3'?0<Q3&F-7-9 ���4}�)�8�E��3#'#"'&54767&'&547632654'67654'&#"'3276P:zm>18Lt8!4$JF A.<Z. 76Q-<^6#*CDN^YN0$R1DQ5$+X0 M/!B E16<c3%4 2!#<2A&A��0����3#'0^(o��I,#���3#&'&54767| z7q% ] D?=���&,����#67654'&'3]7| z7q% ] D?=��(W���37''7'7?jlF3>?2Eljp&;Y$]]$Y;&���2� ��##5#5353FF FF���Wm��h� ��73#5676=#Wii+ <hx&'��.�8���#58HH���W����h���7#5hhhh�����3#77��+����2#"'&547672"32765 *4+ E6_vEBT]GN.9��f��[� ��#56767673#f:X? G;��"���#��2!!676?654'&#"#676y@d[ u(2*d\`<#-K(X#<P,6R651WC7947UH'9 Dd6\��� �1��"'&'3327654##567654'&#"#67632 Xih % q"FN#X4c]^<O#K5U 5 <^+:l' L#{<&������ � ��%!533##5GBAiiXު]4O6��#�$��!632#"'&'&'3327654'&#"#;Hx@-W@\pAXre&L"-@- Q5W+W=XH5C !OwQ$/m*+ ���+��.��"4767632#&'&#"632"327654'&@8ds7XI o" :io>,R>TU(=$/L(GZdT](4X6GOS;SwD4B$/V.?(3f%��.��� ��#6767!5B ^2]7]J/1ګeW��%��,�<��#"'&547&'&547632'"327654'&"327654'&zV?Y|C/yHQ7Mt;&- P =#P A!Y'B".['C#u:wp=.R:Pv:-0c5%L0AD):F 9K @!*R&A!*R&��&��0��2#"'&'332765"'&5476"327654'&A5as7XI o" F\p>,R>WL(G&S)=%dQ](4X6GMS;SwD4M@# f%A$0W.��n��� ����7#5#5hhhhhhhh���nm� ����#53#5676=#hii+ < hh\x&'���-���75% -vEOO���2�oa����!5!5aFFFF���2���5-5v EOO���M���%�)��%#5476767674/&#"#47632#5JZ#J=RU~83? Z72%!BBF :"@S$+F;:hh��"r�F�Y��3327654'&'"#"327#"'&'&5476767632#"'#"'&547672'"3276767'&'&SZ  @53acq"cilOrprz_#l%%{tVLn`BLR/"OMeT&B2-/:,! /# HGWxY\f"qad C*kd'be^yfYMHE1AmTSWG?PC"A0T0������� ��%!#3# Mcx�hepx')L���O��o���'��3!2#32764'&+4'&+3276O(g7:ei89fH"(("HfG"A "34Rp/)PX;=vHW #$��0���#&'&'"32767673!"'&547632_&6Z=(_;Sm3 `!RjfRK#,sKpO1M *GUmo[���Y��� ���3!2#'327654'&+YO!tIl% ل+Ql_=R-8 ��Z��e� ��!!!!!dLRRR��Z��C� ��#!!!]t\LRR���,�)��#'#"'&54767632#&'&#"276=#5;h^WfUQ! __*5G5=HprB1{atrhn Fv1Bb$hNs~T HP<TR���S��� ��!#3!3#'^]w]]L;'��d������#^'�����3#"'&=332765M]Z1C|4_Q :|5V.=@/o-"R��O��� ��#33 #]]kx,n�qPv��P�����!!h;yR��K��� ��!##33#bXԁXc{'c���L��� ��##3iXe}'OT���&��"��2#"'&5476"327654'&a8R[bWo_H8_CaH:bB{&`iMuhk[RfPvS;dOuS8���[��i� ���#!2#'327654/&+]-/?:Sf O"5v)7a94RJZ���&��%��'#"'&547632'654'&#"327'/iVibWo`bXgYO^DaH8_C`<<J:W3uhk[thqIYS;fPvS:>���]����(��#!2#&574'&#'327654'&+]P) H> qPy& I:x!*b3 (%V` 0GAmRVB ���0m�6��#&'&#"#"'&'332767654/&547632TXm (h) 6)x: IL*X3uY-,nh@[?o>8 1!aT? 8h9^&)!=8L#0%|8"o1����Q���##5!b]<yRR��U���3#"'&5332765(]hHiI)]n"*|-�A-e:Q��u P",�������!#33ddci����� ��!# #333ffhdhWPP������ �� # #33sqqov0vc��� �����#33]soc����G� ��!!5!5ELfTRR5R��@,����#3#ggHH����#/7��,����53#53ggHHS���,I���3# #IEzyE,�PB���!5B~22���P����#'`<䔔��*�-�>��%#"'&'"'&5476767676=4'&#"#6763232'53276#G W[n+\$^I QgT!7w- R jCH4 1? ?LK#-f&   @ K H%=t )v^ 6 A/���6 �� ��3632#"'#"327654'&6S9i;%[9Pk;KS'E!,T*H%VlDcM1ZCT2E}4O3F5���� ��#&/"3273#"'&547632T T^#O'kT h+8>)\;Rj:\ad.?-~.iFeM1D+����$��#5#"'&547632"327654'&J:V <&Y9Ol5U)F$/S'H!'ESpGgK/QR&3z6R2E3���(��$��%!3273#"'&547632!654'&#"~+Sf#Th,6?'^<VsA &;&0U)H(Diy+nDdM1R7,P-K$�������###53547632&#"WSFFJ : D8DYXE5R���&�'�7��3#"'&'33276="'&'&547632'"327654'&M)0m 2U$;Q#;IS=BU9Qb>X%N'Y#R J@ <X''1)fR @MO6[Z0B/\.?+���F�����367632#4'&#"#FS6Bn'S" *T%SF J'tk7M*:���B�������#7#5SST  ii��&�����3"#"'532765#5FS 4 SS gG %ii��:��� ��73##kgQSU޵P���D������#T'��F���*��36763267632#4'&#"#4'&#"#FM6JY+6?zT?=%TG >%T JL AA bwiQ6%.iW8$-��F�����367632#4'&#"#FM6Li*S;T%T XUF )tkF M*:��$����2#"'&5476"327654'&9f8O<!i7M]&N)Z'RA[G'wC_F%M\0@0X/B.��6& ��"��3632#"'"327654'&6M;l<&Y'4a@S'E!,T*G#O^oGhK! NT2E}4Q2E5���&�� ��##"'&54763253"327654'&S9i;%[9Pk<JT*F$/R(G!SlDcM1UF?Q3Gz6Q2E3��E��A���367632#EM::  H;T _]U+n��"�0��#&#"#"'&53327654/&'&547632XfRBPvZ4JX!GT 6NwT1D# zT1-F`, /#/.3+]*e�������#327#"'&5#5353V 'Y GGS D&FC D��A ���!#5#"'&53327653K8Jk)S;U&SIO F )F N*9)��� �� ���!#33[^^ W����� � ��!# #333*_je^\kdfgh^e hh����� � ��#'#373$a__~~^ ���& ���3#"'53276?3Z#",- Y 9 K(Sh���� � ��!!5!5EV9 JIKxI��+,�)��#";#"'&=4'&'5676=4763/ ) R .R#6 GAb#&x2 AP] E ,6f��d,����3#d<<S���,�&��53276=47&=4'&+532#0 RR /S$4 IAx%&x2 AQ^ E .5g���K ���3#"/&#"#6763232759'*b5T u,U ?# E1�������������y3� �� ��7353z'TTRqhh���4t��%��673#5&'&5476753#&'&8`T]+7*8!b3E** T E:Ug t|4ab p@XL'ZY m!(Uj- ����?��#632327#"'&'&#"'67654'#53&'&547632#&#"n:%;?#/7(+*9J,S !!580fnQ.PB\q> XY$ x7+7E%'B8 %BX?&(7L! c?4J .W?$&*'��C�'��,��%'#"''7&547'76327'"327654'&:5(<5)380 687,5:(;979 /!7 065391+;9-7575:7)42//7-:��� ��!���#3##5#535#5333着XUUb3M33M3cB���d,�����3#3#d<<<<oo��++�B�P��#54'&#"#"'&'&53327654/&'&54767&547632654/T76 +Rm0G2Bd4 U7@ 7TO ,D2Cc0II>  G+ $^58!s)70U1"E!56,/2&u:Q T333O1%J+<{'?=3m(* ) ��d(����#5!#5h hgggg��� �8�H��327673#"'&547632#&'&#"2#"'&'&547676"27654'&6(RG1We6'P1Dx'G2 K wnl jg mkgf\\[_|\[\[f_0rO%FU=U@(M L)Igenl fenl >]]^^_]^]��%/M��+�7��!5%#"'4'#"'&54767676=4'"#6723232'5276@", 18J9 D+C/ ;szT>? 04 b33_,%+8>  + g^G3  +#��b�j�� ��757757bjj5jjYzSSSSyYzSSSS��(�V w���!#5!(FNw���.�8���#58HH����!�9�I��#32#&574/3674/#72#"'&'&547676"27654'&F΍ ! O.G4anl jg mkgf\\[_|\[\[E~3+=#*(;? ::genl fenl >]]^^_]^]��w.���!5.FF������2#"'&5476"327654'&/J- <)4H. <(44,7,;)3L-;)4J.9,3.4��2o� ���##5#5353!5FFFFFF��F�!��!676?654'&#"#67232C&;:;+3 >W' `?1V:U* /- '+;R/ "���B�-��527654/"#632#"'&53327654'&'&U25 ?` 9GG$0q >? H( 3 4 #%B;LR"VN 8 .��\P-���3#q<���A$  ���%#"'&5#"'#332765332 !O;h6$SS:U&S-1? ISF N*9)L)���0O ���####&'&'&54763 9@R@M0IM>U@J(=i pG9��W.����#5|}}��'*�����;632#"'&'72765&'"'& FB ,?  9 & ' 87?( "���=�� ��#5767673#c= +>D.)W��(/D���$��!52#"'&5476"327654'&:lO#e T ;7;: b33j%w% _"+~" 4C&]Ca���b�j�� ��57'557'5llall=YzSSSSyYzSSSS��=Q� �����#5767673#3#%#533##=c= +>:<:.CC>D.)W'x; 5d��=L� ��1��#5767673#3#%!676?654'&#"#67232c= +>:<:&;:;+3 >W' `?1D.)W'N:U* /- '+;R/ " ���Q�-�1�<�?��527654/"#632#"'&53327654'&'&%3#%#533##=U25 ?` 9GG$0q >? H( :<:.CC>3 4 #%B;LR"VN 8 .'x; 5d���_' �#�'��3327653#"'&54767676=3Z) J=&RU71? ZE72%$ BBF:"@U->F:9hh������� ���%!#3# #'Mcx�hepxX`<')L������� ���%!#3# 3#Mcx�hepxq<')L������ ���%!#3# 3#'#Mcx�hepxH_`?QO@')L``������ � ��%!#3# 3#"'&#"#6763232Mcx�hepx:J@# :;*'')Lkh %] ������ ����%!#3# #5!#5Mcx�hepxZh h')Ligggg������ ��+��%!#3# 2#"'&5476"327654'&Mcx�hepxw2 +0 *   ')L+ 1 */ ,  ��� ������%!#!!!!!!#Ug+n`dRRR(_���0*�B��632#"'&'732765&'"'7&'&'&'&54767632#&'&'"32767673{ FB .D 9 & ' U- maR+_&7X=(`;Rm3 `!!7?( "E N+/o[K#+sKpO0M +G��Z��e� ���!!!!!#'d`<LRRR_���Z��e� ���!!!!!3#dq<LRRR_���Z��e� ���!!!!!3#'#d_`?QO@LRRR```��Z��e� ����!!!!!#5!#5dh hLRRRFgggg���������#7#']`<'Ҕ���G������#73#]Cq<'Ҕ����� ��#'3#'#]_`?QO@'Ӗ``�� ����� ��#7#5!#5] h h'ٲgggg��������#53!2#!327654'&+3YEEN!uIj]"SCC+Ql_;S*2%C���L��� ���##3'3#"'&#"#6763232iXe}[:J@# :;*''OTh %] ���&��"�&��2#"'&5476"327654'&#'a8R[bWo_H8_CaH:bB~`<{&`iMuhk[RfPvS;dOuS8���&��"�&��2#"'&5476"327654'&3#a8R[bWo_H8_CaH:bBCq<{&`iMuhk[RfPvS;dOuS8��&��"�)��2#"'&5476"327654'&3#'#a8R[bWo_H8_CaH:bB_`?QO@{&`iMuhk[RfPvS;dOuS8``��&��"�8��2#"'&5476"327654'&3#"'&#"#6763232a8R[bWo_H8_CaH:bB:J@# :;*'{&`iMuhk[RfPvS;dOuS8h %] ��&��"�&�*��2#"'&5476"327654'&#5!#5a8R[bWo_H8_CaH:bB|h h{&`iMuhk[RfPvS;dOuS8�gggg��_�"� ��''7'712212211�����'��?&5476327#"'7&#" 327654QLp_]W(YTp_aMiIbH7}JkH7Yjj[Q_$ajj[ZT@gOuh*[JgOur��U����3#"'&5332765#'(]hHiI)]n"*|-`<�A-e:Q��u P",Ҕ��U����3#"'&53327653#(]hHiI)]n"*|-q<�A-e:Q��u P",Ҕ���U����3#"'&53327653#'#(]hHiI)]n"*|-_`?QO@�A-e:Q��u P",Ӗ``���U�����3#"'&5332765#5!#5(]hHiI)]n"*|-h h�A-e:Q��u P",gggg��� ���� ��#33%3#]soq<cҔ���[��h����7#332#'327654'&+]]Ћ8N5Hd N"½x_1Dn:(RK[ ���C;�1��674/&#"#47632"#"'5327454'"+&K&sX]8R=O@"1=!  hJ V(q4S)8_3J'$4K���*�-�>�B��%#"'&'"'&5476767676=4'&#"#6763232'53276#'#G W[n+\$^I QgT!7w- R jCH4 `<1? ?LK#-f&   @ K H%=t )v^ 6 A/f���*�-�>�B��%#"'&'"'&5476767676=4'&#"#6763232'532763##G W[n+\$^I QgT!7w- R jCH4 Uq<1? ?LK#-f&   @ K H%=t )v^ 6 A/f��*�-�>�E��%#"'&'"'&5476767676=4'&#"#6763232'532763#'##G W[n+\$^I QgT!7w- R jCH4 _`?QO@1? ?LK#-f&   @ K H%=t )v^ 6 A/g``��*�-�>�T��%#"'&'"'&5476767676=4'&#"#6763232'532763#"'&#"#6763232#G W[n+\$^I QgT!7w- R jCH4 :J@# :;*'1? ?LK#-f&   @ K H%=t )v^ 6 A/Oh %] ��*�-�>�B�F��%#"'&'"'&5476767676=4'&#"#6763232'53276#5!#5#G W[n+\$^I QgT!7w- R jCH4 h h1? ?LK#-f&   @ K H%=t )v^ 6 A/Mgggg��*�-�>�O�_��%#"'&'"'&5476767676=4'&#"#6763232'532762#"'&5476"327654'&#G W[n+\$^I QgT!7w- R jCH4 q2 +0 *   1? ?LK#-f&   @ K H%=t )v^ 6 A/t+ 1 */ ,  ���"M�;�L�U��%3"'&'&'#"'&54767676=4#"#6763267632!32%5"32767!4'&#"Td32k; ][g+d6jF vgT!7u/1^oB ~+Se![g<=21P&A"-U)v,Ca H$/i%  NM H%=RE P 7pH(Dge0=&&],K$��*�?��632#"'&'732765&'"'7&'&'&547632#&/"3273 C B ,<  7"& ' 9$Z \;Rj:T T^#O'kT[2!2 ?) "G @M1D+Fad.@-z5��(��$�(��%!3273#"'&547632!654'&#"#'~+Sf#Th,6?'^<VsA &;&0U)w`<H(Diy+nDdM1R7,P-K$��(��$�(��%!3273#"'&547632!654'&#"3#~+Sf#Th,6?'^<VsA &;&0U)q<H(Diy+nDdM1R7,P-K$���(��$�+��%!3273#"'&547632!654'&#"3#'#~+Sf#Th,6?'^<VsA &;&0U)j_`?QO@H(Diy+nDdM1R7,P-K$``���(��$�(�,��%!3273#"'&547632!654'&#"#5!#5~+Sf#Th,6?'^<VsA &;&0U)|h hH(Diy+nDdM1R7,P-K$lgggg���������#7#'S`<  ؔ���A������#73#SCq<  ؔ����� ��#'3#'#S_`?QO@  ٖ``���� ��� ��#7#5!#5S h h  gggg��$�!�1��'7&'77#"'&547632&"327654'&a$U4,%Ja(ZY/ Cy2B8h4>'']&M )Z'Re-'(,/-%)DAfq ?>WB# (f\0@1X/B.���F����-��367632#4'&#"#3#"'&#"#6763232FM6Li*S;T%T4:J@# :;*' XUF )tkF M*:h %] ��$���#��2#"'&5476"327654'&#'9f8O<!i7M]&N)Z'RB`<A[G'wC_F%M\0@0X/B.��$���#��2#"'&5476"327654'&3#9f8O<!i7M]&N)Z'R q<A[G'wC_F%M\0@0X/B.���$���&��2#"'&5476"327654'&3#'#9f8O<!i7M]&N)Z'RU_`?QO@A[G'wC_F%M\0@0X/B.``���$���5��2#"'&5476"327654'&3#"'&#"#67632329f8O<!i7M]&N)Z'R@:J@# :;*'A[G'wC_F%M\0@0X/B.�h %] ���$���#�'��2#"'&5476"327654'&'#5!#59f8O<!i7M]&N)Z'RCh hA[G'wC_F%M\0@0X/B.gggg��2����� ��!5#5#5&hhhFFhhphh�����'��#"''7&5476327327654&#"?,j7Kg<= B0j7LeA:\+?]&)E]&GImF#>EJGsF$AA0\0@B 4\0@D���A����!#5#"'&53327653'#'K8Jk)S;U&S`<IO F )F N*9)ؔ��A����!#5#"'&53327653'3#K8Jk)S;U&Sq<IO F )F N*9)ؔ���A����!#5#"'&53327653'3#'#K8Jk)S;U&S_`?QO@IO F )F N*9)ٖ``���A�����!#5#"'&53327653'#5!#5K8Jk)S;U&Sh hIO F )F N*9)gggg���&����3#"'53276?33#Z#",- Yq< 9 K(Shp���6& ��"��3672#"'"327654'&6S<ex=+Y'4a@S'E!,T*G#NiIlK! NT2E}4Q2E5��&�����3#"'53276?3#5!#5Z#",- Yh h 9 K(ShWgggg������� ���%!#3# !5Mcx�hepx�')L[FF���*�-�>�B��%#"'&'"'&5476767676=4'&#"#6763232'53276!5#G W[n+\$^I QgT!7w- R jCH4 1? ?LK#-f&   @ K H%=t )v^ 6 A/?FF������ ���%!#3# 3327653#"'&Mcx�hepx;TM ; V*')LzB99��*�-�>�L��%#"'&'"'&5476767676=4'&#"#6763232'532763327653#"'&#G W[n+\$^I QgT!7w- R jCH4 ;TM ; V*1? ?LK#-f&   @ K H%=t )v^ 6 A/^B99��3����%!#3327#"'&54767# Mcx�`H%0!$?F$epx'.;7 - 9:&)L���+3T�8�I��%327#"'&'4767&'#"'&5476767676=4'"#6763232'53276HH&*+=/ 9Qan+]#]F uhT 8v- R jCH4 1?#87 - <. CMK#-e'   MM G&=t )v^ 6 A/���0��#��#&'&'"32767673!"'&547632'3#_&6Z=(_;Sm3 `!RjfRq<K#,sKpO1M *GUmo[Ɣ���� �$��#&/"3273#"'&5476323#T T^#O'kT h+8>)\;Rj:q<\ad.?-~.iFeM1D+B��0'���&���'��F���0i'���&���&\�F����0��&��#&'&'"32767673!"'&547632'#'373_&6Z=(_;Sm3 `!RjfR_`?QO@K#,sKpO1M *GUmo[1``���� �'��#&/"3273#"'&547632'#'373T T^#O'kT h+8>)\;Rj:_`?QO@\ad.?-~.iFeM1D+``��Y��� ����3!2#'327654'&+7#'373YO!tIl% _`?QO@ل+Ql_=R-8 ``����$�2��#5#"'&547632"327654'&3+52545#J:V <&Y9Ol5U)F$/S'H!d077'ESpGgK/QR&3z6R2E3 gL &N���������#53!2#!327654'&+3YEEN!uIj]"SCC+Ql_;S*2%C���-��(��3##5#"'&5476325#5353"327654'&??JFbv>.Y8Oa@SU)D$0T'H 5;ReKoK/N5LQ1Ev5R1B2��Z��e� ���!!!!!!5dbLRRR8FF���(��$�(��%!3273#"'&547632!654'&#"!5~+Sf#Th,6?'^<VsA &;&0U)!H(Diy+nDdM1R7,P-K$^FF�Z��e'���(���(&r�H����Z��e� ���!!!!!#5dhLRRRGhh��(��$�(��%!3273#"'&547632!654'&#"#5~+Sf#Th,6?'^<VsA &;&0U)hH(Diy+nDdM1R7,P-K$mhh��Z3���!327#"'&54767!!!!`H%.!%?L 9dLR-=6 - 9=&RR��(4�0�:��%!3273327#"'&54767#"'&547632'54'&#"~-Qe%TC?1 &)`  (=$_<UqAY;&0U)F*DiMCA) ) - 3% rC`M1O"6c=P-K$1��Z��e� ���!!!!!#'373d_`?QO@LRRRʖ``���(��$�+��%!3273#"'&547632!654'&#"7#'373~+Sf#Th,6?'^<VsA &;&0U)_`?QO@H(Diy+nDdM1R7,P-K$``�,g�@�7 �*���&&X�J����,�)�7��#'#"'&54767632#&'&#"276=#53327653#"'&;h^WfUQ! __*5G5=HprB1ޜ;TM ; V*{atrhn Fv1Bb$hNs~T HP<TR"B99���&�'�7�E��3#"'&'33276="'&'&547632'"327654'&3327653#"'&M)0m 2U$;Q#;IS=BU9Qb>X%N'Y#R;UM ; V* J@ <X''1)fR @MO6[Z0B/\.?+B99��,i'���*���&&X�J����,�)�6��#'#"'&54767632#&'&#"276=#53#52545#;h^WfUQ! __*5G5=HprB1Dd;77{atrhn Fv1Bb$hNs~T HP<TRCgX&N���&1�'�7�E��3#"'&'33276="'&'&547632'"327654'&7#547633M)0m 2U$;Q#;IS=BU9Qb>X%N'Y#R%d;57 J@ <X''1)fR @MO6[Z0B/\.?+gX&K�S��'���+����'��K����'������!5%53!533##!##5w,]w],,]^,ZZHFLF��������3#67632#4'&#"##53536Bn'S" *T%S??S5F J'tk7M*:X5L���0i'��,����%&�����������#7#5^'٫FF���������#7#5S  FF���*'��,����&�����B4����327#"'&54767#8"  I 3 +'38(  - 14, ��4�����327#"'&54767#7#5* " F -  ST &1 *  - /0+  ii���`�������#7#5^ch'ٺhh���^��� ���#T  �dr'�-����,���B&1'�M����L��� '���-���&�����3"#"'5327653#'#FS 4 _`?QO@ gG ]``���O� ���#33 #3#52545#]]kx,nd;77�qPvNgX&N��:� ���73##3#52545#kgQSd;77U޵PgX&N���:�� � ��73 #%#k0gS  ��F���� ��!!73#h;Vq<yRҔ��?������#73#T[q<'Ҕ��P����!!3#52545#h;d;77yRgX&N��?�����#3#52545#Td;77'gX&N��P������!!;+52545#h;d077yRgL &N��D��1����#;+52545#Td077'gL &N�P��'�y����/���D��'�y����O�������(� ��7!!573{(PP]yLzR9M8u������� ��7#573BBS??S3@392@2`���L��� � ��##3'3#iXe}q<'OTҔ���F������367632#4'&#"#3#FM6Li*S;T%Tq< XUF )tkF M*:���L� ���##33#52545#iXe}d;77'OTgX&N��F��$��367632#4'&#"#3#52545#FM6Li*S;T%Td;77 XUF )tkF M*:<gX&N���L��� ���##3'#'373iXe}_`?QO@'OT=``���F������367632#4'&#"##'373FM6Li*S;T%T�_`?QO@ XUF )tkF M*:O``��F�����367632#4'&#"#FM6Li*S;T%T XUF )tkF M*:��L&����%3#"'532765##3.Xc 4 XiXe}WG %'OT���F&�#��"#"'5327654'&#"#367632 4 ;T%TM6Li*gG F M*: XUF ���&��"�&��2#"'&5476"327654'&7!5a8R[bWo_H8_CaH:bB*{&`iMuhk[RfPvS;dOuS8FF���$���#��2#"'&5476"327654'&7!59f8O<!i7M]&N)Z'RcA[G'wC_F%M\0@0X/B.FF�&'���2���$&l�R����&��"�&�*��2#"'&5476"327654'&3#%3#a8R[bWo_H8_CaH:bByq<q<{&`iMuhk[RfPvS;dOuS8���$���#�'��2#"'&5476"327654'&3#%3#9f8O<!i7M]&N)Z'RHq<q<A[G'wC_F%M\0@0X/B.��+��'��!!5"'&547676325!!!&#"32jUNFrPWgEi y>H[;|e6336d}GRJ\\deEXLRRexNMLN���(�%�9�B��%3#"'&'#"'&54763267632!32"327654'&'&!4'&#"$Tf,7|@?8z1B=6gsA ~+Sf]&O(['Q&A"-U)x+]g>W?jXR7pH(D]'5 /Y0A. ],K$���]����(�,��#!2#&574'&#'327654'&+3#]P) H> qPy& Iq<:x!*b3 (%V` 0GAmRVB $��E��K����367632#3#EM::  H;Tq< _]U+n���]��(�5��#!2#&574'&#'327654'&+3#52545#]P) H> qPy& Id;77:x!*b3 (%V` 0GAmRVB =gX&N���AA����367632#3#52545#EM::  H;Td;77 _]U+n<gX&N���]����(�/��#!2#&574'&#'327654'&+7#'373]P) H> qPy& I_`?QO@:x!*b3 (%V` 0GAmRVB ``���0��O����367632##'373EM::  H;T_`?QO@ _]U+nO``���0m�6�:��#&'&#"#"'&'332767654/&5476323#TXm (h) 6)x: IL*X3uY-,nh@[?q<o>8 1!aT? 8h9^&)!=8L#0%|8"o1f���"�0�4��#&#"#"'&53327654/&'&5476323#XfRBPvZ4JX!GT 6NwT1D# q<zT1-F`, /#/.3+]*eI�0m'���6���"&V�V����/*m�W��632#"/732765&'"'7&#'&'&545332767654/&547632#&'&#"OFB -B 9 & '  ,u1X3uY-,nh@[?Xm (h) 6)xG#8 7?( "Eb4>&)!=8L#0%|8"o1Bo>8 1!a^@���"*�M��632#"'&'732765&'"'7&'3327654/&'&547632#&#"FB -B 9 & ' X!GT 6NwT1D# XfRBPvA& 7?( "G/#/.3+]*e!T1-FO/ ��0m�6�=��#&'&#"#"'&'332767654/&547632'#'373TXm (h) 6)x: IL*X3uY-,nh@[?_`?QO@o>8 1!aT? 8h9^&)!=8L#0%|8"o1і``��"�0�7��#&#"#"'&53327654/&'&547632'#'373XfRBPvZ4JX!GT 6NwT1D# _`?QO@zT1-F`, /#/.3+]*e``��*Q'�z����7���%&�z�W������Q����##5!'#'373b]<_`?QO@yRR``��A ��%��#327#"'&5#53533+52545#V 'Y GGS5d077 D&FC DgL &N����Q���##5!b]<yRR������#327#"'&5#5353V 'Y GGS D&FC D�Ui'���8���A&p�X����U����3#"'&5332765!5(]hHiI)]n"*|-2�A-e:Q��u P",FF���A����!#5#"'&53327653'!5K8Jk)S;U&SGIO F )F N*9)FF��U'���8���A&l�X����U��&�6��3#"'&53327652#"'&5476"327654'&(]hHiI)]n"*|-2 +0 *   �A-e:Q��u P",+ 1 */ ,  ��A��(�8��!#5#"'&53327653'2#"'&5476"327654'&K8Jk)S;U&S2 +0 *   IO F )F N*9)+ 1 */ ,  ��U�����3#"'&53327653#%3#(]hHiI)]n"*|-q<q<�A-e:Q��u P",Җ��A�����!#5#"'&53327653'3#%3#K8Jk)S;U&Sq<q<IO F )F N*9)ؖ��U3�(��#"'&54767#"'&5332765332Z0!%?;9,I(]n"*|-]20AH%- 84) f9Q��u P",��TC.>,6���A4  �*��327#"'&547#5#"'&5332765;- 3` `8Jk)S;U& "4 (  - 6=2IO F )F N*9)���'8��:�����'��Z��� ��'���<���&&V�\���� ���� ���#33%#5!#5]soh hcgggg�����G� � ��!!5!5%3#ELf#q<TRR5RҔ������ � ��!!5!573#EV9q< JIKxIؔ����G� � ��!!5!5%#5ELf;hTRR5Rhh����� � ��!!5!57#5EV9h JIKxIhh�����G� ���!!5!5%#'373ELf6_`?QO@TRR5R=``������ ���!!5!57#'373EV9_`?QO@ JIKxIC``�������3##53547632&#"SFFJ :DYXE5��-G�G���@��O��pi����6 ��"��"327654'&!!632#"'S'E!,T*H%9i;%[9Pk;T2E}4O3F54IVlDcM1ZC������p� ���7327654'&+532#!57537Q)A#.ԥ T=UOO]R>#.T'XrA/4M4qqL� ��(��"327654'&'632#"'#57537S'E!,T*H%9i;%[9Pk;K??SBT2E}4O3F5VlDcM1ZC2@2zN3@�0�&���0��/��547632&#"1#&'&'"32767673!"'&547632?I 3_&6Z=(_;Sm3 `!RjfRY\ O(RK#,sKpO1M *GUmo[��.,�(��632&#"#&/"3273#"'&547632R 3T T^#O'kT h+8>)\;RT>E(Rad.?-~.iFeM1��������N��pGi���@��6 GDA���@��Z��eG�(���@���&��'��67632#"'&547!&'&#"!3276/{Rla8R[bWa e?VH �e;MH,ĠM4{&`iMuh I-f-<A&d<��0m�9��#"32765453#"'&'&54767&547632#&'&#";lQ3+-Yu3&X*LI@ m ih@[?Xm (h) 01=XA;#$8&=->^9h83Tr3-l|8"o1Bo>/--��&C� ���73#"'5325#!!!Z]X$ D]]t\OQ;RR��� ,�!��#"'732767#53767632&#"~K.:M$ENq}-3@#, G Fsg/7 TaFhP,0O~F��,��9��547632&#"#'#"'&54767632#&'&#"276=#5dI 3 ;h^WfUQ! __*5G5=HprB1Y\ O(R{{atrhn Fv1Bb$hNs~T HP<TR��:�����347632&#"73#:J :kgQeXE5޵P��&���33##"'532Le}Xic BL%T'ODWL���F8���367632#4'&#"#FM6Li*S;T%T XUF )3F M*:��&���$��2#"'&5476&'&#"!3276a8R[bWo_ e?VH2c>QI.{&`iMuhk[I-eGfFE*dA���6&HP��"�2��547632&#"3632#"'"327654'&V 3EM;l<&Y'4a@S'E!,T*G#YdE(RO^oGhK! NT2E}4Q2E5�0mG�6���@��"G�V���@�����G� ��5!!!!5 fmTRRR��&��!��&'#53533#327#"'532765PGGSVV r 4 CDD&` G ����!��3#327#"'&5#53547632&#"VV 'Y GGJ :^RD&FC DYXE��&Q� ���%327#"'&5##5!bD v]]<;QFMyRR��Y��'?���'���Y��'@���'���'@,���G���P'�-,���/���P&'�M,���/���D&w'�M����O���Ln'�-���1���L&k'�M���1���F&'�M,���Q�����'���$���*&p�D�����"'��,����&����&'���2���$&n�R���U'���8���A&o�X���U�'�q�C����A9&�qm|����UN'�v�j����A'�v������UP'�k����A'�p�����UN'�C�j����A'�C�I�����(�H)�����'�q�C����*9&�ql|������'�q�&'���$���*&�qn\&l�D��� ��S'�q�����"M'�q����,'���*���&&Z�J���O��'���.����'��N���&#'��2���$#&T�R���&#S'�q��'��2���$#&�qk&T�R��&�&F���Y��'�=���'���Y��'�]���'���'�],���G���,'�v��*���&'�v��J���L��'�C���1���F��&�CN�Q�����u'�v�����*'�v������ ��'�v�����"M'�v=����'�v �����'�v������'�j��$��&,�D��n��/���$��0/�l��D�����e'�p��(��&1�H��s��e/���(��4/�p��H��<���'��,��1���&������/��,�����/����.'���2��&)�R��/���2��,/�h��R����'���5��l��A&�U��"��/�^��5����A/���U��'���8��&*�X��/���8��./�j��X����0m�6�C��#&'&#"#"'&'332767654/&5476323#52545#TXm (h) 6)x: IL*X3uY-,nh@[?d;77o>8 1!aT? 8h9^&)!=8L#0%|8"o1gX&N���"�0�=��#&#"#"'&53327654/&'&5476323#52545#XfRBPvZ4JX!GT 6NwT1D# d;77zT1-F`, /#/.3+]*e)gX&N���Q����##5!3#52545#b]<d;77yRR=gX&N������$��#327#"'&5#53533#52545#V 'Y GGS9d;77 D&FC DgX&N�S��'���+���F��'�t��K�����u'���$���*&l�D���Z1e'�z���(���(&�z^�H���&�'�q�C����$9&�ql|����&'�q�E����$;&�qr~����&u'���2���$&i�R���&'�q�&'���2���$&�qk\&i�R��� ��S'�q���<���&&�qT�\���*�DA�����#��4763253#5"#"'&%4'&#"3276V6PZBSS9=1U><s:&5J&7)8Q"J/PB96 VTko;&Y7B`<-`0��D) ���6 � ��.��547632&#"#3632#"'#"327654'&6J :SS9i;%[9Pk;KS'E!,T*H% YXE5RGVlDcM1ZCT2E}4O3F5��F���&L��.��"327654'&#"'&5476323327#"5 U)F$/S'H!r:V <&Y9Ol5S*  R&3z6R2E3xSpGgK/Q8 Gm���F��.��"327654'&7#5#"'&547632547632&#" U)F$/S'H!J:V <&Y9Ol5J :R&3z6R2E3ESpGgK/QXE��(G�H)���@��(�H)��"G���@��"����&@��7�G��547632&#"'3#"'&'33276="'&'&547632'"327654'&V 3MM)0m 2U$;Q#;IS=BU9Qb>X%N'Y#RYdE(RRJ@ <X''1)fR @MO6[Z0B/\.?+�&�J���F3 �K, ���F��� �%��547632&#"#367632#4'&#"#FJ :SS6Bn'S" *T%S YXE5RHF J'tk7M*:��F&�-��4'&#"#47632&#"67632"#"'53276" *T%SJ :6Bn' 4 L7M*:eXE5F J'gG ��������#5533##5#5TSPPSKii_HH��B� ���327#"'&5 'Y  U&FC �^��� �����D&����3327#"'&DT  mF5 G`��F �P@ ���F8 �(��#"'&'"'&53327653327653M6J!Y+6?,zT?>%TG >%TL AA bQ8$-IW8$-I���F&��:��%3#"'53276536763267632#4'&#"#4'&#"#Tr 4 M6JY+6?zT?=%TG >%T` G XJL AA bwiQ6%.iW8$-�&��'��73#"'532765367632#4'&#"#FTr 4 M6Li*S;T%T` G XXUF )tkF M*:���F&@��'��%327#"'&5367632#4'&#"#  M6Li*S;T%T5 G`M,XUF )tkF M*:���$���!��2#"'&5476&'&#"!32769f8O<!i7 W\&) P[&A[G'wC_F% [#.Fw# Y!�EA �U ���EA���!#5#"'56767653AM::  H;T_]U+n���E& � ���!327#"=3#5#"'56767653A  MM::  H;TL5 Gmm_]U+n���E8A���367632#EM::  H;T _]U+n(��E&A���367632327#"'&EM::  H;  my_]U+n5 G`��T������3#47632&#"Tr 4 ` G  ��T���GT���@��(�=��7#"'53276=3327654/&'&547632#&#"#"vr 4 X!GT 6NwT1D# XfRBPvZ4JMm` G /#/.3+]*e!T1-F`,����&��%��73#"'532765###53547632&#"XTr 4 WSFFJ :` G XD8DYXE5R���&��%��73#"'532765###53547632&#"XTr 4 WSFFJ :` G XD8DYXE5R���&���4#"5632327#&'W: [  ^5EGO5 Gf����W ���&����#327#"'&5#5353V 'Y GGS D&FC OD�A �X��� �� �Y ���� �Z �����\ ���(! ���)5!5!!327#"'&5u9E  KxIJ5 G`���$��� ��%!#3!53#}TSSS�:���N0���&F��,��"327654'&547632&#"##"'&547632 T*F$/R(G!nV 3S9i;%[9PhQ3Gz6Q2E3IdE(SlDcM1���O3���3#'#t_`?QO@``���O2���#'373_`?QO@O``��\P-�v���P��C����U<� ��3327653#"'&;TM ; V*B99��sd����#5hhh��OC��� ��2#"'&5476"327654'&2 +0 *   + 1 */ ,  ��93 �����;327#"'&5476FIH%0!$?J )6 - 9@%���e?���3#"'&#"#6763232:J@# :;*'h %] �N\����3#%3#=q<q<䖖P�C��P�v��O��e��w�q��U��&d��d�j��C��N���O���N�����#'##'Q`<=`<䖖U1�GM+��6G� ��3#52765#QQ)EX* GGM���@��� ��3#52545#d;77<gX&N�*���z��3������'D� ���'7j B̈@���>�����7j B@�����"#"=336? JL/ Ocj �nm� �����I����#'�)Ї��KCUK&{�j-���&�����Y��0���2#"'&5476    / " " ��f'&������q' ��!�����'��#��'B��)��'��.��'L��2��_'�&�jB����������!#'!#3&'jTNffHh = Z%VD&���J��g��#�,��%#!!2'4'&'&+32764'&+32g> < ; U%M3 #F?Hm*^; 0P$`0 5E b���R��6���!#!6|`x��� ����!%#3&'&'f   &AI\��P��f� ��)!!!!!fXtTT��#��Y� ��)567!5!!Yp+p�DX7TT���A��q� ��!#!#3!3q^^^t^R&��-��$�(��#"'&'&547632327654/&#"!5!j]ZKP01lZ`hV@^BY6H9P]fY$%OM}fUV\L7>YN!AkR���E������3#3^^���J��� ��!##33~r^^bxjrb���� ��!#0#3j %ffsMWh��@�����!###373\V\&XbE%r���8��l� ��!##33l`\bxZ22��Ad��� ��!5!!5!!5!S9gI"iRRpR���2��#��47632#"'&7327654'&'&#"2oZXNM21j^^C`V@^Bf7R:RcR%&PNzcW|[I6=WK&@���P���!#!#!^^0i��Np����"+#!24'&+3276p^4CbR> :d[V��(^���!5'5!!!^�p%t V#RR&&���'_���###5!_^8ijR��� �� #367\p>n*.'g�����)��##5"'&547635324'&'676RR|S|RR]QsQSG[\.;p5 o6[.XzKMGGMJ{QEPP[Mjp8c T2 P#+u;���$�����!#1#36767673tpm  x f$gH ���4�#��+#5#"'&'&5;3327657((@ J^i0 FZC#<VqZdX25  9qVg%; 8H��*�)��476323!567654'&#"!53&'&/W[nMo \./SAa{A.s_cg0H)+[ IM$JMZL<hG_TMIU���'�j�#���'�j��.���0G&V�:���'&?�>���J&[�@���8&�B���(_'�0�&�j`N����0G�"�2��"'&=&5#"'&5476763533274'&#"32763 )'2!a#*o3H +t)"Iz t ) 5Ch FN[ ECB7~!��2:��2��%#"'&'#476763227654'&+5327654'&#"Q4IV1 V# 5V-`i'/L2*^ "!0;)w:%( p4/b'3z"\G#JL 8)jS��: ���#5&#"'472 V  */vF4~��%��*��%#"'&547632'5!!'";2767654'&x5QiDA& 8LZ*_/6 R!5DC{7 HH)M5T+7"(\z)��'�-��%#"547&5476732#&'&#";#"32767j*<ffw'8 -Lc =#..\h e$ m _`oN(< UB;0J -���&>�$��'654'&#"'&54767#5!&L" W\M/:dOH.+4K*7aE!. =2q3%H<IyouJ(" ��J���'4'&#"#4#"'632632X IX 1Ca5:%H 7d|,��-�����2#"'&'&5"!4'&!3276 d1I2 ؉:P!b!F"&HhlB�lLH-wA���8���7;67#"'&53.,kX  Ql��B��� ��!##373l>XXr <���,�(��%#"/5'&'#&'&'&#"7632327,0!2 X [ `   !5   0@6W0$E R  'Yf ��N8���"'&'#3327676=3#5 A' XX = #!!VP': * x#= 7j>= ������ ��#367R\s r4,Y <���>�;��'67654'&+"'&5456767&'&54767#5!#";#"32'J 9;25=K 4 dt2"[1Rn`5M&/JE'=^Q  N(8U// ?$F. FF8%'L@D+M" P���"����"'&54762'27654'&#"="DCCD]=Xe$I!.e$*( uAZDCCDI0Jd*8/g*5b13���5i���%#"'&5##'!#32767i07^F(@  <P>FF' ��98��$��#"'#476324'&#"3276"+Gc5XGGbA'Z,,BC),++BA-,b.: G֊>>jAa`222/ed1105���J�.��#4'&#"'67654'&#&'&/&'&547672[S W+Q"ZW0ZHZ0N"Lx>)DbN(Bh.  0,n 48 5hS:uQ6���"N��"��"'&547632!#'27654'&#"="DCk@]=Xe$I!.e$*( uAZDCRRfI0Jd*8/g*5b13��*���#327#"'&'&5#5!   #!P / O .>2D���(���%#"'&'&5332767453 /#Y_#/ X $=<# Xa31c@b [ ��.8 �$�/��7;32+#5#"'&'&547674'&+3276E0BXN=l7M XI b!*^E+<_.[6&]IkM$d"4.XD<[e2L,��,=� ��+"/#&'&##5723327=B1ah  8:!`à YhN1  ���*8l���%##5"'&533327653l(1V& ZD!7Vq Z֩% Ƒ '0y!TN#9���$�7��%27654'7#"'#"'&5476767367676=3ZlP3$c "0`0.bu03PE H) T ?zu)jJ@<ZZr;Mce0E^(0  $$&�jB���(&�j`N���"&@�H���(&5�N���$'���R���Z��e'�C���(����O��Z� ����!!!!!#5!#5dh hLRRRFgggg��l� ��!+536754'###5!#32& #?Qc4B]c,G" B 8 A5PPK%,���Z��C�� ��3#!!3#]tq<R��0�$��32767673!"'&547632#&'&'"!b8Jm3 `!RjfR+_&6Z~= lLG'M *GUmo[K#,p'2R�0m�6���d����,�����'�j��,����-����S����#��!##5276'5!3#74'&+3276R >89fzG"A "6)^[X;=W #$���S������!!#3!33#74'&+3276^]1]>89fzG"A "L;X;=W #$��������32#4'###5!#Ac,]B]K%,;5PP��O��� ���3#33 #3#]]kxdnq<;DQ���L��� � ��33###'LX}eXi&`<T'O����k����3#733%3327653#"'&qqoA;UM ; V*{B99���Sy� ��!#5#3!3P^v^y'����$����O��p����%#!!!3 327674'&+o/9ft =A " AX;=R#&>?&#��O��o�%����O��8���3#!!]tR���"y ����%!!676'5!3#5!#5KU[PPR5k'Vqч��O��Z� ��!!!!!dLRRR��?����� # 333 ##nEt]tEv]Dwb44D��0m�9��5327654'&#"#67632#"'&'332767654'&#XI4!H'4Xz<TBis: IL*X3uY-,30@AR<(%I b6^!)l-+j T? 8h9^&)!=81*'���O��� ��33##OX}eXi['V���O��� ���33##3327653#"'&OX}eXi;TM ; V*['VB99���O��m� ��3#33 #]]1oz|2M��!R���!#5276'5!#S ^6$^['��O��� ��!##33#bXԁXc{'c���O��� ��!#3!3#"^]v^^L;'�&�2����O�����!#!#"^1^y'��O��]� ���#!2#'327654/&+]-/?:Sf O"5v)7a94RJZ��0�&�����Q�7������k���3#733qqo{���@��=��!�*��##5"'&54763235327654'&#"G'_N\6D_~?.+0_~?.+|#) ^^:C0 ]A/M& zA/M& �����;����Oy� ��%33#5!3"^CP^Rqчy���O��9���#"'&5333#c,] B]]K%-)5t'���O��� ��%33!333^b^^R'y��Oy0���)333333#o^^^CPyyq��Q��Y����!#5!32#'327654'&+8D T=UQ)A#.RrA/R>#.T'���O��� ����%#!332327654'&+#oT=U] =Q)A#.m^rA/>#.T'h'��O��p� ���%#!332327654'&+oT=U] =Q)A#.rA/>#.T'���0�#��!5!&'&#"#632# 33276Hlf/<[2&_+RfjR!` )f @'LR;+#K[omU!G*R oB���S��+��##3367632#"'&"327654/&'v^]yLhW;ROXZ=D=$f8Q>&m ,LT2biCZ|IgM*xHhJ��� ��o���� #"'&'4763!##";n3 89fI]A "" A::!(X;=':M#$76$#�*�D����$� �0��632#"'&576?67653"327654'&u,o9f8O<!~$JF: ]&N)Z'RFA[G'wC_NO   <!G%\0@0X/B.���F�� ���+��%+32%32767654'&'&+327654/&+A&4I'(ES b34b. &U) $%;Q" D  " ���F��| ���!##F6T L@��< ����7665!3#5!#573#WKS@FnFݬ@o'.4xx t�(�H����,�� ���#'#373537#SkjSjk ���"�0��75327654'&#"#67632#"'&53327654'&#>E<fXo",z59SZ4JX!GU'#L75Tw I%2G$,P`, /#2%���F�� � ��33##FTlSm cc���F��� ���33##3327653#"'&FTlSm?;TM ; V* ccB99���F�� � ��73#'#`jS  ���F � ��!###5276ST<  PI��F��$ � ��33###FhhT2T FkC���F�� � ��3353#5##FTTTT ��$�R����F�� ���!###FTT @��F&��"��3632#"'"327654'&FM;l<&Y'4a@S'E!,T*G#O^oGhK! NT2E}4Q2E5���F����<�� ���!###<tT L@��& �\����=&R�"�2�B��632#"'&'##"'&54763253"327654/%"327654'&-d0`%.E.S*1 ' h,<^1S_ T^ Wfa^ ^^=TD+>3@A^t&1$ h*6%~"+p'1���� �[����F$ � ��33333#5FTT=F @4x��F�� ���3;53#5#"'&5FT+TTN* )2*���F��n � ��%33!333TTTL @��F ���)333333#dTTT<F @@4��9�� ����3#5!3#'327654'&+ q8E*8|iS|L[/LG X ��F��l � ����3+327654'&+#q8E*8T|iS|S [/ @G X  ���F�� � ���3+327654'&+q8E*8T|iS| [/ @G X ���%��753&'&#"#6767632#"'&'332767T^T4f |@-_/<6Tk`#MyY F+GgJmIg+9~`$.��F��'��47632#"'&5##3%"327654/&$?9f8O9^TTJ]&N)Z'R5:>nA[G':? י\0@0X/B. ���� ����7&'&5476;#5###";n )(JTEgw. & V!>,+" ��(&�Ct��H���(&�j{�H����\�*��"##53533#67632'5676754'&FX$STTS5Co'kD;/4I" R)5T@EE@EJ'S6(0Ec7���F��m�� ��!##3#F'Tq< L@Ȕ����#��%#3273#"'&547632#&/"3XR kT h+8>)\;Rj:T T^# % ~.iFeM1D+Fac�"�V���B����L����� &�j���&��M����F��0 ��-��32+##5276=3276?4/&+q-6+7%f< S|U)" | 7  H+f;PP@" 7��F��1 ��)��32+5##33533276?4/&+q-6+7TTT|U)" |67  H+ @" 7�����!��"##53533#67632#4'&FX$STTS5Co'R" R)5T@EE@EJ'\7���:��� ���73 #%#73#k0gSq<  ��F��� � ��33###'FTbSc`< ccȔ��&&S�\����F � ��!#5#333:FTTxx @���O��o� ���%#!334'&+3276o89f]>GG"A "X;=W #$��F�� � ���2#!327654/&+x ))IT. &  L%>,, @*��[��i�3���6& �S����Z��C9���3#!53!]]t`���F��mu���353##FTT i@���Z��C���3#!!]tR���F��m ���!##F'T L@��Z��C���3#!!]tR���F��m ���!##F'T L@��?����� # 333 ##nEx]xEn]Dwb44D����3 ���%# 35373 #%#wg0kSk0gS��0m�9��5327654'&#"#67632#"'&'332767654'&#XI4!H'4Xz<TBis: IL*X3uY-,30@AR<(%I b6^!)l-+j T? 8h9^&)!=81*'���"�0��75327654'&#"#67632#"'&53327654'&#>E<fXo",z59SZ4JX!GU'#L75Tw I%2G$,P`, /#2%���O��� ��3#33 #]]kxdn;D��:�� � ��73 #%#k0gS  ��O��� ��3#33 #]]kxdn;D��:�� � ��73 #%#k0gS  ��O��� ��3#33 #]]kxdn;D��:�� � ��73 #%#k0gS  ��O��� ��3#33 #]]kxdn;D��:�� � ��73 #%#k0gS  ��S��� ��!#3!3#&^]v^^L;'��F�� � ��3353#5##FTTTT ���S��� ��!#!#3!!!^^]vL;R��F�� � ��!#5##335!#TTT' L���S�����!#!#&^1^y'��F�� ���!###FTT @�0�&����F���0�&����F�����Q�7����<�� ���!###<tT L@�� ���<���� �� ���!#33[^^ W�� ���<���� �� ���!#33[^^ W�����;����� �[����Sy� ��%33#5!3&^\P^Rqчy���F8 � ��33333#5FTTQF @4x��S��*� ��!"'&53!3#N ]]].= ZY'���E�� � ��3353#5#"'&5ETTT@ !���S��*� ��!"'&53!3#N ]]].= ZY'���E�� � ��3353#5#"'&5ETTT@ !���S��*� ��!2#!#3N ]]]= Y��E�� � ��!#5##332TTT@ !�&N ��(�H���'F�HTM�(�H���d����,���?��'T�n���,��'�����O��� ��3#33 #]]kxdn;D��:�� � ��73 #%#k0gS  ��S��� ��!#3!3#&^]v^^L;'��F�� � ��3353#5##FTTTT ���S��*� ��!"'&53!3#N ]]].= ZY'���E�� � ��3353#5#"'&5ETTT@ !����'���$���*&g�D�����h'�j���$���*&�jj�D��� ������"M����O��Z'��m���('��H���&N���(�H)��&'�j��N���(&�jv�H)��?��h'�jV�n���,��'�j����0mh'�j��o���"&�jP����0m�9��5327654'&#"#67632#"'&'332767654'&#XI4!H'4Xz<TBis: IL*X3uY-,30@AR<(%I b6^!)l-+j T? 8h9^&)!=81*'���"�0��75327654'&#"#67632#"'&53327654'&#>E<fXo",z59SZ4JX!GU'#L75Tw I%2G$,P`, /#2%��O��G'�q��p���F��z&�qr���O��h'�j��p���F��&�jt���&h'�j���2���$&�jn�R���&�2���$�R���&h'�j���2���$&�jn�R���0h'�j�����&�j1�����kG'�q��{���&z&�qT�\�����kh'�j��{���&&�jV�\�����k'��{���&&\�\���O��9h'�j�����F��&�jX���O��h'�j����F��l'�j�����O���%#"'&'&5327653CE<<= ^!+<f-._W;<t(9-8cu,/.]D��O� ��#54'&'"!!#4767632_-,hv)/^9%@eh?? JQ/.P .]E#'(@/7=��S��2��%##5#"'&/47676323%37554'54'&'"k_F:L .*Ag< n  Y%~u3#4eZA#(Q$8Gn X=*��R����4'&'"#547676323##&g--_/)@h< RR_30.QRB!)9*;^��O����"'&53!!3276=32'=j9^/"+<g,._@D!'Br]s+/.Q����I��4'&'&'&+7!567676732232'4'!#5332767676762,=5p! G% 0'#8 T"'{F'SEYZZ0Q^$G +g(QC_;c  560..|V#.!:767,3S ���T��� ��%#33#N`OOM��J�����#54'&'"%4767632}_--gl+ 9%@ei>M0/D)aWE#(0X)*7��?��A��%275#"476;54'&'#"'#"#47676;23#+"'"'"'&'&T!,F]4/l,*> z_ 0B,66h5Q   YN 1"1,BT ('p P4IKNx9 L)��C~��)��"'&=47672;533##/"2767670@(5\c`h2; +'%.IH  R3H~3.dK�r<Wk<. =���?��q�!��"#367632#54'&'&'&_+ ^b b&eC> ^ +DB& D9*<GGv. ���]��u���33]_]���B�)��%7=3#"'&'&57#32767674_\09 l__ +<1  AH %)0Vr@u, A ��"��&�6��&'&#'2#"'&5476767'"/73!24'&#"276�A ~ &eb``g) Qr SB]%DHggLKIGbeMK?! S[[aceE)-mMPRRj`IGJG���J�}���%#5#"'&'&5327676=3|a :76dD_^")>k4 _ %4(3�t,4-)KL��7���2'&'"#&'&'%6, && 7t,g.-"8���3P�A�O��2&'"'&/47672676=4'&'&#"'5476762767&'&#"LG.))+(/I/I-A "R +B0"g  7&_^0>'`>X?]LJ(%: "(&&e 1*bAV,z* 8 2=BiF   " ���O�����!#4'&'"#547676323+(;D! _*l!=aS ;2/QY /4@��/��q��"��)476767&'7672/&'"qi- /<; =Bz@0o# X=u&/%/۵("=G7?C7-BHEy5CKcj��-�����#"'&'&53327653j9 @eh?@_--g|'|E "'(@Ibb0/[,^���1*�A��%#"'"'&'&'&5327654'&+5327674'&#"#4767632*eBYIC];<('<<4502)(u F`22Ow<5  v;&4), HMF\((('95MO!!  +(��� �����33276=3#"'&'&'' !+<g--_5 @h9 as+/.E($+(=A��(,�2��'&/""276753"#"'&'&=476767'\r  0'&(" .87`@Hm{M+)+(aS ::g[D*( " \@FNIHT#('vfAA ��J�}���%#4'&'"#4767632}_--gl+ ^9%@ei>M0/D)acE#(0X)*7���BG�*��%56767676=4'&'&'"547632n 660)&)AN2_@KsG#&7)0iU%87ZUC%/ 9"C@HSDK*%tN9<# (��J�}�$��%#"#54767632#4'&'_^9%@ei>M_,F2)a*+E#(0X)*7b1p��*��P��32674'&'&'&#'4'!#533276='&'&#'"'"'547676;2232IX0 dL)#,=5pSEYZZZ4! \FgP I 0'#8 T"'{s 2"8"1%CVGJ; d767*& 4YD#:h 560..|V#l��J����%34'&'"#4767632}KO]--gl+ ^9%@ei>MP0/D)acE#(0X)*7���O���3#"'&'&532765#_2'>i= ^!+<f-.bE (t(9-8cu,/.���J����%5#"'&'&=327676=33 :76dD_^")>k4 _Z %4(3edt,4-)K^���-g�7��"#"'&5727654/&'&'&'47632&Hx" rt+= /j')8 Y c1TX%e@WC [ @'--64J $3)G:2!9l6#`#& ��J�}���#54'&'"#4767632}_--gl+ ^9%@ei>M&x0/D)acE#(0X)*7���<9�;�Q��2#"'&'32767654'&/"'6767&'&'4767627654'&'&#"82 1$/p #xE=]#!&"%% !$" h#j"46`a ## -!!$!ظL(  D %;;4S?7a8 !A="" 5,G$*) !<. 0# ���L��_���33##L__Pu���*��#�*�5��4767675332#5&'&'&'&76767674'&'*CAF<)^"ADCBBDA$^KB 2C_z9,2 ")j|FC77 FF~GE// !%D) d1g#76 ��$��V��-��"'&'!!#5#534767632'3254'&'"sA'& }]WWE5P5 t.A)00-.?.NyyND/@'(#6>$R+7��0��"��"'&'4767232654'&#"aQ`^a),4o@EGhks:FdJH wcfdp$SnkVh.gJKI%EE���'� ��A��#3276=4'&%375#'"&'&547676;32#"'&'&'&533'"'&..F+)m"f & )`_.9 O3R.:7%  ] (%G-"4"A7E#8H&%@ /ن)#VeC( #) p��5�� ��53'65=^.5mfPA$"N���L����73X)hL��I.���"'67676;27+t,  "),0$(N$/  0-&���+G����#'3GqvG���S,�"��4'&'"#56767632#"53276�!$D/ $&?J?Z, %+'&5I 0DZ& ��A��(��"'332765332767453#5#"'X6$%XH "!8XO!Gt= dE $$Q-i %k  I9[[��J-���%#54'&'&#"!!#3632X 7G' JXO<hN5!bI76F`MX/,h���#/1��(��2533#'"'&'&54764'&#"3276T0 PMMW2V:9Sg2++87*))*;9)(7 DHO?"4x!$F"e4412bg22//���I/7���23##4'"#367676AY& ddVPnVSEA>,[rP ��<���!#5#"'&'&'&'7!3276=3O:k\. YQ "6+)WJU4*8\M #$da���*/B��,��747632533##"'&'&'&27674'&#"*M7S>"" Rc)U l9 H#>(a 7L76p:A l ##Y/72t&.i6���^e� ��%/#33#>KVJwM��?0� ��#4'&'&#"!%3632X 5B'H_O<iI4   L50!Dw\MX* *(*��D#*�*�8��7476735&'"3676763723#"'&276=#";&3S}2QN , t-010!&K^'B _5,~N+Ap#0/A 0?6P<?B+6B !G@>-���0F��)��476;533#+'"'"'&'&'&%#"2767650B8UYbbi0C& V^zI<# xI=D>  8վZ753&0R��B3���3632#4'&#"BX>]XX D(G!"Ip 4 $<��<0����#3W}S|���B.�!��##3327653#5"'&'&'&50UU $8))XO8mW0wL $"eJT1%6W���+ �+�@��"'&5476?67637&'&'473#'2767674'&'&#" B 0.AU3;)f G9QT#x s ~AQ:(' (=64( @T!sE7FeV@ ^*$��G-���'"'&'&'332767653X=_s*XnG&XEN)L ~7 %;��B�����33632#4'&#"BX>]XX D(G!"Ip 4 $<���(�2�I��#5#"'&'&547676767674'&'&'47322765474'&'&+"La*M" >>23  #DS*$)H8C*Z"%/  '&&l= e6C?!">EL $ 02;*1  1x8 \.,  67��'/���#4'"#3676323Q[%VR))DK#$d,[S S3 )'2���+����'��1!&'476767'767&'&'&'&# ='&E@1>fh$1 6(#8\u\\1@2zUkX %NfZK��I�0��476;2'"#5"#"'&53276754'&'&'&d@ T( 1, T8#CT/V Gz$%J D 1.b8$B"Tp !�.����27653#"'7 ,X60*3(!݀# K��I�-��!#5"/&/47676;"2727673P (&(0 -HAf! . %(WS"  .!A> *='  9Z3���5/�/��4'&#"'672;67#"/"'&'&'&'47676?6=) 3.+;VO3'("f\ F<   #m"% B4#8:I@0<@;*0&&? ;/!8���E���#4'&'&#"#3632X 3E( XO<iK5 ! I24"CMX-,h��#/e �2��#"'"'&'&'4?674'&'&'4767;7373ekJ# '>,) VG)=&EB W c '$4 )D:*U56  ^[ ���A+��(��"'332765332767453##"'X6$%XH "!8XO!Gt= dE $$Q-i %k  #9[[���&/�7�V��6763237373#"'&'476767654/&'&574747"6?6767654'4'&'&'&-T.+!X !u7#p \HG (%*'$ \ N !.&N(.m)wg,!#?>-'(&#L HS$#:Z !49; 7��P�)��654'&'"#36323'5276.(H'XO<hJ5    pt]4>"7 "CMX, *!+%rQM a���@���!5#"'&'&'&5332767653=hF6  X 8H&XLX* )-%BM66 "C��G-D���"'&'&'3327676533=_s*XnG&XXEN)LD~7 %;K���I@�5��#4'&'&#"#5#"'&'&'&5332767653632@X 7H' T=hG6  X 8F'U<hL5 ! I77 FLX+ )-%BM65 #BMX-,h��E-���#4'&'&#"#3632X 3E( XO<iK5 ! I24"CMX-,h�� .�#�3��4763253#"'&'&5276767#"'&7327654'&#" O:X\;Q%k#0 U nh9W;#Z((><))*+;:*(K7J??w3QJ - OM UDo@^g.///c_010+��L�����3#~E>��+2"�5��2#4'&/#"##"'&'&53327676736qM5  X 5E' U=gG6 "X :I& T<.)(* L55 "CX+ ,hBJ97 FX��/7��/��%"'!!#5#5336763274/"#"27276UP25VddQ#">>8-Hf\$? !8)U "A:UU:;At;Pc;5 0/Q`1`#��2��!��47632"'&7327654'&'"2(1jDEP7FmCCZ,*CA+,,*BA,*9GE{C FDe0112f_2120���*/o�&�/�7��47672732##5'"/&'&533"'&327654#'35"Y}r=*d2=-W8 -'(N;87%_ HbDnߗ@  !;Jn#$Fi&0E >��F!���7275335"'&'&53VP%'-(4VCDR/%9`U��Z�������5353Zdddee^dd�� �&� ��%"'727&AU*Z.&!'0"L �����G����3#53#GGGGFG���O��� ����3#73#3#73#53#GGGG@FFFFFF<GGG5FFFG����I��� ��3#3#53#FFFF<G5FG���I�����3#53+#5#53FFFFF;FGuuGG���}�G���3#GG<G���}�����3#73#GGGG<GGG�������� ��3#73#3#GGGG@FF<GGG5F���}����3#<G�������#5#53F;uuGG�����G���3#GGG����I��� ��3#'3#'3#FFGGGGFFG����GU���3#GGUG�����G���#5GG<���& X���!5!u L��������3#G���>����3>Wd �����3#GGG���F����3#FGGG�n��� �������G���3#GGG���:��FX�%��#57676767'367676753#0 W <&f/ W :&fE > %-AN =$+>I��:��6X���%&'&'&'&'#533!5 "j^1 () JL'6 'L  4= LL�����X���%#73'&'&'&'&'&'4#BuQ > RWF"2X˧. L*R "���&��X���#!5!W  LL���?��:X����#&'&'&/&'"'#5!3:W  &9 S2#! Wzt7 L 2Bw��>���X���33>WX��'��(X���##5!WW  LL���?��;X���#&'&'&/&'"'##!2;W  &9 W@? Qzt7 X!)��=��:X�D��"5632#"'&'&'&'336767674767475&'&'&/&'&: -*&HL$"  #MHIM!$ W  2 +#    3  R+1AG,!++!4@z8 "18��:�X���3:WWX#��&8X���#&'&'&/&'"'#53W  &9 S2#! z<7 L 2B��9��X�,��3#53676767676?5&'&'&'&'#53㪤N    "j_7 ()  "5L   .6 'L  4= E/E��%��!���%#47676767675!53!W.[W.*aEx1+$%)V+ᕙ<9 $$���?��<X� ���)32&'&'&'#;UT'3W) 9GX*?5+3' @���0��:X���##532!534'&/&#:X:NM5U-#$8  L!A-;L+&%��>8�X���3>W ���3��FX���)53&'&'&/&'4F  4 IMUL(7L+.��=��9X��B��!"'&'&'4'!2'6767674767475&'&'&/&'"'#;IM!(@B $"  #MH+#    &9  2 +!:9z"1AG,!+L "18 8���$X���73767676?37xYs?  W %AC� .#XJ) LO���98 X�)��32#&'&'&/&'"'#3/&'&'&'9@? #! W  &9 yB"(G$+X!2B<7 4 L$7 ���?��X�9��3#53276767675&'&'&'"+3/&'&'4'53287 , ,;5 XB"(G%+LB / $ #aL<9* 4 L$: 5?&= !*�� 8X���676767670753#3.  W !"&,WcT *70"/6��3��X���67676767670753!5!3<.   W !"&FdU *70" L ���>8&X����%#53676?!5!#,>7h o 0W!L*!2 LG( Iur���%��X���#&'&'&/&'"'#53W  &9 T2#! zt7 L 2B��;��X�<��7;7676767453#&'&'&'&545336767676=3#"# =$/R"&6!W[@GRG?C-#Wc' W (2O52  4&(R'\G #?99R  $1"2���#��{X�-��+532767676=#5!#&'&'&'&'&/  %AT2)<0! W  &;  ?+L,)LH2@t8 �� �8�7���/�?�O�_�o�������%2#"'&547632#"'&54763"327654'&'2#"'&547632#"'&54763"327654'&%2"'&547632"'&54763"327654'&'2#"'&547632#"'&54763"327654'&@"! "! $! $" " ! " ! $! $" #  #  " #! $! $! $! %! q " " " "" #! %" "" "" #! %" !" !! # $ " " " "" #! %��4�c�����72#"'&5476k" !  " "���2����2#"'&5476i" !  " "���3�d����/�?�O�_��72#"'&547632#"'&54763"327654'&'2#"'&547632#"'&54763"327654'&j$ ! $ ! $! %! " ! " ! $! $" " " " "" #! %" "" "" #! %��,��p���/�?�O�_��2#"'&547632#"'&54763"327654'&'2#"'&547632#"'&54763"327654'&d" ! " ! $! $" " " " " # $"  " " " "" #! % " " " " "! %��j��q���/�?�O�_��%2#"'&547632#"'&54763"327654'&'2#"'&547632#"'&54763"327654'&R"! "! $! $" " ! " ! $! $" p " " " "" #! % " " " "" #! %���j�q���/�?�O�_��%2#"'&547632#"'&54763"327654'&'2#"'&547632#"'&54763"327654'&R"! "! $! $" " ! " ! $! $"  " " " "" #! %p " " " "" #! %���j�p���/�?�O�_��%2#"'&547632#"'&54763"327654'&2#"'&547632#"'&54763"327654'&R"! "! $! $" " ! " ! $! $" p " " " "" #! %n " " " "" #! %���T�a5���/�?�O�_��72#"'&547632#"'&54763"327654'&'2#"'&547632#"'&54763"327654'&"" "" # $! $ ! $ ! $ $!  # " # " " % " " " "" "! %��W9�p���/�?�O�_��2#"'&547632#"'&54763"327654'&'2#"'&547632#"'&54763"327654'&"# "# $ $" $ ! $ ! " %!  " " " "" $! % " " " " "! %�� ��$���/�?�O�_�o��������2"'&547632"'&54763"327654'&2#"'&547632#"'&54763"327654'&2#"'&547632#"'&54763"327654'&'2#"'&547632#"'&54763"327654'&7!5y#  #  " #! " ! " ! $! $" K"! "! $! $" "! "! $! $" " !" !! # $" "" "" #! % " " " "" #! %" "" "" #! %\\����$ ���/�3��2#"'&547632#"'&54763"327654'&7!5 $! $! $! $! d " " " "" #! %\\����m���7'7702M~Y-���$���/�?�O�_�c�g�w�����������2"'&547632"'&54763"327654'&2#"'&5476%2#"'&54762#"'&5476#3!52#"'&5476%2#"'&54762#"'&5476#3!5"327654'&%"327654'&"327654'&#!!#  #  " #! " " " ! " ! ee" " " ! " ! ee# $! $! $" $! $" e3 " !" !! # $" " "." "4\\" " "." "4\\! #" $" #! %." #! %4(\��#wz���!##67676=474'&/&'33!,S9.U N;OA8-*K.Z2%)DL7O��9t2���##6?676'4'&'&'33  S!U #)%#@&6/"%@# �������)5!5!5!ZX��a�"��"'&547'!5!73#""'&5'73( tmM  d'f #! Z-=Z# $} ��a�%��"'&547'!537373#""'&5'73( tmb(M  d'f #! Z-=Z# $} ��kq����#537!5!754'4yy('(;=S<ZxSZS���k�����)5!754'4('(;=ZxSZS��m��&��###"'&'&5476327654'&#"Y 'K E5 B.Dd/& +"/E,EX!V;"&,v@-6%E+9'$K$���d������747632#"'&7"327654'&dL<Tg>5M;Rh>6<(6$+?&5%f?1G>Qh=0G=3!&<'4&9(��V\s���2'6767&'&5476; 0 : $Gss1^*{5-4D����O"���!#'#'!53547O$JzppssZ\r��_� � ��'!5!73#_J.DZ,>Z_��_� ��'!5!73_JZ,>�������%'!5!5jieO`Z��pS����/�?�A�Q�o��2#"'&54762#"'&547632#"'&5476'2#"'&5476727654'&#"%35'###"'&'&54763" ! U" ! "! U" ! /& +"/j[ 'K E6 B.Dd> " "" "" "" "�O5 %E+9'$K$?ObD,EX!V<"$-v@-���a(%���#654#"%632Z\@DtaE\I[ؕWHO]qZU;Rn���p���)5!7pHfUJZC��kv�� ��)##5!5#=SO^X���k���?ks'<e$7���0�A��2#'+"'!5!&'476763264'&#";76'54'&#"676/S G$@F '"=8- )5w%'""U*(M+oe-5r&UUZ+aY7 :#6'2_  "&"*N* 0N ���2�%�7�H��2#'+"''7&'&'&'&5476763264'&#";76'54'&#"676/S G$@F  (dH47% "=8- )5w%'""U*(M+oe-5r& ?2,(".Y7 :#6'2_  "&"*N* 0N �������%#"'&'!5%27732767kFP4$&8,A*&*:KK>R D1Z)m+B#B����@����)5!'#"'&'&54?'0132 >%C8/ -w< FZJc*3 $7 ����@����##"'!327654'&'H?) 8C%>  )FG @3*cN& Z31 $ ���+��!5!"'&'&'&547;635'#"'&'i) I]  +D< i 8"7<IZT| +_A[ >O] !7W ' ����&����)"'&'&'#53!5#& "F AdG��k��`����#53!5!754'4{{('(;=RZxSZS������!#"'!5!'#5!3/\  ;;ZZY��ck���%32767&'"#"'&54767kn*1? #2((46U15[GJ* B9& OIhg^l�����������''7'77''7' &%Y(,$"5'=d+jA!5 ���������77''7'77m &$Y(+#"5(>j+jA!5���O��� ��3#3#,####s��������� ��/'K7K{�������� ��//K7Kq����������!��2#"'&5476'2#"'&5476$! ""  " "\# "������ � ��'7''7'78!8 8KK7R^_`]_g����� � ��77'7'!9 8 8KK7^_`]_�������� ��3#'3#'r####K�������� ��//|KiK}@K������[� � ��535#53#3HHIIL"< <"���D�� � ��535#53#3% HHII."< <"����Ov�����2#"'&5476%>"! B " "C������{�����2#"'&5476/537    /++    U y!;9=����������2"'&54767#'7%y  s.++-     w";8�����v����2#"'&5476>"! " "(����fq�����#53%qbb]>������v����2#"'&5476>"! " "(����Ov�����2#"'&5476%>"! B " "C������x����!��2#"'&547672#"'&5476@$! "! V " "" "���w����!��2#"'&547672#"'&5476%?"# ""  " " # "7���������/�1��2#"'&547632#"'&5476'2#"'&5476" ! "! U"! t" "" "" "��������/�1��47632#"'&747632#"'&2#"'&5476% $" " $"","! n! &  ! &  N " "����� ����%N,`���H�����%' RHfS��7!�#��7777''7''7''7''7'$"$$#"  ; ; ;> ? ? @ @ ( D C C C B @ B A ������� ��#�.�9�G�Q�\�j�t������533##'#7472"'&5472"'&274&#""'4632'#"'&547632'43#""'4632'#"'&547632'43#"4'"276'4'"27654'&#"36V'SR'U    r  * r  *  PO%QQQ   z  cz  cd  |,��0����'7#"'&'&5432327671///:%57  .E%--.d#6 F#�p���'7*333O333���)�F��23275#53#'5#"'&'#"'&'&54323254'&#"'676367654#"'6D7+&/01G-,#>&+R[>0._"<#23,!v/&%('.((Y.  9!d 8* Z  = "���)5�J��23275#5!#'#'5#"'&'#"'&'&54323254'&#"'676367654#"'6D7+&/01E--,#>&+R[>0._"<#23,!v/&%('.((Y.yY.  9!d 8* Z  = "�����:��7"'&5476;5#5!##"327632'#&'&5432327654'&0%7cd%  <)'Qm"v 8)) .$$)/A((g6 ;' al* ", �����N��7"'&5476;5#53&'47632&#"3##"327632'#&'&5432327654'&0%7c2--( !* &nd%  <)'Qm"v 8)) .$$)/A(A78 1$E& 12(g6 ;' al* ", ���� �1��4'&+5!##"'&'&5432327654'&#"'67636?4#˞A)G=&+Q]=/.B <#12/-H2(()4*&G:$e  8)!4����� �F��4'&'&+5!!632'654#"#"'&'&5432327654'&#"'67636C6 D*3?;$ 8?9:, >&,R]=0.B =#226.H3 ((,1)-1$': F98):$e  7*!4����>��!65432327#"'&54767&'&''5'75&#"'6325!5!T!5 mT"%)F/7`-G]? EDL '-    /1'& * 0.h v5*! (����"��'654/&=#5!##/32=#0F*D+  3K"67J&  }$(($ '  ����,��3##/32=#'654/&=#5!&+'32\MD+  3K"67 0F*6T.8%23+G($ '  &  }$(M0P��)5p��_��#"'&'&54323276723275#5!#'#'5#"'&'#"'&'&54323254'&#"'676367654#"'6*:%57  .E%D7+&/01E--,#>&+R[>0._"<#23,!v/&%M#6 F#('.((Y.yY.  9!d 8* Z  = "��)5�T��23275#5!&+'323#'#'5#"'&'#"'&'&54323254'&#"'676367654#"'6D7+&/011Q/8%22,B2ME--,#>&+R[>0._"<#23,!v/&%('.(M0IZ(Y.yY.  9!d 8* Z  = "��)5�j��23275#5!&'&#'&547632&'&/"54323#'#'5#"'&'#"'&'&54323254'&#"'676367654#"'6D7+&/01-2#$ Ac! !((LE--,#>&+R[>0._"<#23,!v/&%('.(5 *fH 542(Y.yY.  9!d 8* Z  = "����[�-�:��!67632'67654'&#"'5#"'&5476325!5!5&#"32[1/$* # ! !>-0D<(:R-[4@* ) P+ ;)&5+  & '%8.q/%: ?(H"- ���t��"�>��#'5#"#&'&'7632676=#5!5&#"325#"'&'7676325!32t=-iXT_S tj2Dba9>.=U- CG.! =*)qY.:YMD &  (#5?E65'5&,!y7!:$�������#'##"/&54;5#5!F-63yY.y(8 (�����2��#'5#"'&547&'&547#5!5!"&#"3276F-AY/0=2, 2s�A"C:&?FJ Y.8":%% ( 6 58���������4��'74'&#"'&5476;5!5!##"32#"'&54323276-..;5Da$1�k&1&G87K(u e~D�&&$- >2A((g>$"O  {(���� ���#'5#"'&547#5!#3275!5! F-AKD1%Xf-9CUg Y.z22%,((%;8(�����G�<�I��##"547&'&547632&#"3273#"32767&'&547675!5!"654'G5_UX%0 :)#.:8 6 KC()aT 401?|G)&*-Y;TA:^&%/  >(7' J %'6T( 17����)�$��#'5##"'&'76323254'&'7!5!5!)D-T14AF 9,(9%)>H)Y.K,1 8<G  C/$<%) ](����2�F��7"'&5476;5#5!#'5+'#&'&5432327654'&75##"327632320%7cF-6Qm!w 8)) -%%f% ! 1)/A((Y.;' al* ", Fg6 ��� �)��#'5##"'&5432327654'&#"'63235!5! F-I?YX HDO 8.LD" ES Y.5 d O- +.6(��������732767#"'&5476;5!5!##"P5#\"4Mf>+.%&b}G u "(2$25.$((?������&�4��##"'&'&5476767654'&#!5!4#"3276%H*5?H: df  sn]0+0?]+.L'9/, J( 2(Y 6#'-A����� �0��%4'&#"'&5476;5!5!##"32#"'&543232765Dc$1 s%(.I88J )u f~> p- >1A((g>#!M  {%������$�2��##"&547632#"'&5476;5!5!4'&#"3276rW= :E#B dGJ%Kk% Q KZ<6 )J-K DA^%"_(+G%*��������#'##"'&=#5!5#32E-}0.0%)- CY.y, $( �������#'5#"#&'&'7676;5!5!F-@}-PHY.?R}X2($7 ](��+$�&�2��#'5#"'&'67&'&5476323275#534#"3276$F->auF E92(+DO$^%#H P\`KI? Y.2<E2!:3  A(eE<'�����*��7476;5!5!##"327&547'#"'&*Q!bcyT 6/5, DI TLS?U((|/-! , ps26���+�0�>��#'5#"'&547&'7676323&#"3275#534'&#"3276E-,R</.7f 6 6A&6% *`FgAl 0  Y.l ""!1$D) "!# & 3' @(K + ������#'5##"/&54;5!5!F- ,,Y.3 0 (�������7'7#'5##"/&54;5!5!3330F- ,,2333@Y.3 0 (�������#'5#"'&=#5!5#32E-/I1.$)r(WY./*"!(Ш���R�%�.��!632'67654'&#"'5#"'&=#5!5#32R=/,%) #  9-/I1.$)R(W9=.(9.  **( 3./*"!(Ш�������(��#'5#"'&5476325!5!5&'&+6'32F-.B D0$E'*_/s%!-];_6<Y.{& 2%,7A(. &=��+�#�.��#'5##"/&54;5&'&54763235#5354'&#"F- ;5S++," <>Y.0 / 5 )$ "(E ( ��������#'5##"/&54;5#5!5#F-/ (psY.// (߷�����$��#'5#"'&5654/#5!5#3276F-.F[8&! s+(*+'_+Y.(3$00 (%/ !  ����?���#'&54323276=#5!?pJ"8 ?K C)(����?����7'7'4323276=#5!#'&333& ?pJ"82333)((K C����+�/��#'5&#"'67&'&#"#"'&5476326325!5!+F-% 9)+: ^+ 7C<+; H+Y./0!*9N  reF ?.z(�����0� �.�9��7"'&547632675!5!#'&'%4/#"3276'&#"327J,H$,]&QN) ?,M ) <"[B Tl,B0='2@86r((s1!Q'  DQ5 'c<+6i+ 3�����%��#'5#"'&5476325!5!5&'&#"32F-.B D0$E'*`.s& -8!<DY.{& 2%,7@(- !=����Q��4��4#"3276%!#'#/&'&543276767&'&547#3e-:+.QE-10/G$#7/%[A"e?f 4(Y.y"C:86(5 %03�������"��#'5#"'&=#5!5#54/3276F-A 1.$)s (> Y.*"!(ʢ5 �������%��7276=#5!#'5#"''&5432%5#32 �F-6H,0"9  4C) ((Y. +" B)*����8��##"632#"4327654#"&'&547&'&5476;5!5!Y!/J-$ bG+1tqMA  :h()#& "$ -- 2!% 6.:(& $-A(��sT���'7333Z333��-�0p�'��#"#"'&'&54323254'&'&5476;p-T-"$:O2  ( ]-F-+%E,$1"'<  P)0;'$�����#'#53E-DY.y(��b���47632&'&#"3#'#53& ?!%w0]**INF-EC 2 zB &(Y.y(�?�~���#'#53&'&#"#&5476323E-DE 3$(Q!!$:Y: OY.y(A,4 75@P,5��}O������#"'7327654'&#"'632arpm7#  .6/,(a;lY  "$!��)E������47632#'&#"326;'&'&-,/0#)' $ 5 "P/ 'x"   ��~�&���#"'&54763"327 (<--C!0V ) 0r(/ %  ��0p���#"'&'&5432327670:%57  .E%M#6 F#�� ��#&+'32F&T.8%23+G͆M0P����#&'&''&547632&'&'&#"5432>*2.$ Ac!!()7 *fH 543��p����#"'&'&543232767#'#53:%57  .E%E-DM#6 F#Y.y(�`����#'#53&+'323E-DBQ/8%22,B2MY.y(M0IZ�p��(��#'#53&'&#"'&547632&'&'&#"54323E-D>2$ Ac!!((LY.y(5 *fH 542��hO�� ��#&'&+'3$-=;+#QKc4,*&d��(�DW(���k�y��'7#"'&'&5432327672#"'&'#"'#"'&'&5432327654'&#"'676367654#"'632332?64#"327670---.%89  4'p8" +>/ CT2@&+R\>1/E">#112!y+"&%ND8 &I)8-H+r4+$ )0%%'W!5 1%Z4$&3 L :!c7*"5  = "'.)1\1yQ2% . ��s���#7 ;&>d���bk����%#"'&547632'"327654'&1+2W$8(-]#D 7A!>-(=&=, <.2< /K �����*��#"'254/7&'&54763274'&#"67+.`D(;7&iV I4  )`1 "= 7&(9i#67���$��2'#"'&=47632327654'&#"'6*M,v{ (  7/ G<G@)5`:"201%!!����+��%'&'&547632767654+'3254'&+'32Z N!S:$5,H'-=, BH-] f @ +B'E,(1#(+*��/�&����#"'&54?'774/3276O&D !5()%5 T#:7U98++  "2 ,4+ ��q� ��'#"'&'5673254'&547632X#3^.$EK- $H *);I*BSD 6���c�6��'1"'&'&547&'&5476;#";#"3254'&5432!S;A 1!2""' 9s0"$,uD '18(G'.Q & ���N�&�!�+��%#"'&543232767#"'&547632#4#"32G(8qND3=lH!?%*R$.R"FCr4v##vd|E# +3 H#D! 5��f�����7327#"'&547P"W<""E&$T82 ?\81*3" ����)��#"5254/&5476324/#"3276#* 8D+)O$(!N+q8.15.6$4"((L7 [(��(�DW(���k�y��'7#"'&'&5432327672#"'&'#"'#"'&'&5432327654'&#"'676367654#"'632332?64#"327670---.%89  4'p8" +>/ CT2@&+R\>1/E">#112!y+"&%ND8 &I)8-H+r4+$ )0%%'W!5 1%Z4$&3 L :!c7*"5  = "'.)1\1yQ2% . ���2 � ���4?&'&'6767#"'&'&Z#! #"F&@8) @; ' &  4f!5]'����h���(��327654'&#"032760'&#"0'&'3&E"3&E"2*4*44vnf("hz/,/,$4$4 6%����d���-�=��"'&547632'"27654'&"'&547632'"327654'&Q 2)Q $!42 53-Q 2)Q 2)2$3J424)'''  !4242' &'  !����X�,��#'#&'&'327654'#"'&'67632!'l(PxLa`H=Cy$$G.&. '-F# 0 (X<䥘 LK=Q?<= :& F0J7DL<��� X�5��!''#'#&'&'327654'#'&'&547632!'!53#<')vMb`G>Ay&&G.&. -+J#1 ((d(PJ<䨜 NI<PB??6 ! G/H8EL<<<<�����=��4/&'32!!'&'&1'3767654'&'&'&54763|>Zj(G}S>((d+(p)('7DG$.,SD9_{[2 GXf0[ 9<<hG)|c< ,L!3 -!C#������G��!!'#4/&'32'&547#"'32767'&'&'#"'&57676326767>(((|>Zj(G}S $5F('$:8@'10  .GC<2?X<<f0[ CAZKc CYE H, ?+)n\d^u^���&�3��367#"'&'&/767654'5!'#4/&'3!FiA M+381m|;K%Y8/%d*"((@[l)J|d 4F'G4t: 'V|;VJ^QSI/<g +[1���:�?��3!6767#&'&'&'&54732767'5#'!4'&#"'&52((k0 #8=Z%jBA D.9X  Y$)A0( >4F(Z1'\8+X<.D TPiLS vwqML>D_%SFhDF<9 $7.* �����vX�%�+��!3'#'#'&/67675&'&1&P(d<<(n# *' /9'PY<R< FdxT 2 " 5 2$1ZErH;j8��|X�4��7'32767'&'#"'&54736765'&'&'&5#&2"3 .27&c  LZ^adG"-#6<" 1?0$)i (;E U[4H`M?i@ �����X�0��3#"'&5476761&#"#"'&532?6320" .. <<:=%.; }  * #<8+;[)'Z6F@!u *����D �H��4'&'&'&55'067654'&'&#"6761&#"#"'&/27632276D!bFI[% PB ,,  +8$? #- 0<-BF-'#A9)?4Q0(F6X- (   9>* 93"=m+%���6[�C��656'&'&#"327654'ɸ&'32767#"'&/327654'61Q47B' 710' !KTZb8K27W?4 L+"Y( +*7'(%  # iqe H<E3& ���� �_��'&'&54763265'&'&##'&'&54763267654/&5##"'&'&'327676$    (B#   ' "QSA&\;MH Lq0j8#!>=OW*DzJBL+ * $''<"   ( # e 7.7(Y7&(9A:)> &2M?=$hqD ����X��&��02'&/67&/4'&'&/%5!'!!^>;<5;F *! Gd^ ^((=Sr.7G> .4HNu6(<<�����X�.��673'#&/7654'�&'32) ,8 1kP(dM;9/A '$( S n6rS<*f; P"9:' 2#' 5�����X�)��53#'&#67'67/#'&547632rd(P<RO:' +9.m(o  R-?HF<@PR0 .GZ(b @#x����X��#��!7#4'&/7&'&54767#'!^`82(qFPlo&% (* /DSk<n <����Y�7�A��6767#"'&'&52767654''5&'&'34763527'&'5L % U/32-w"  n5? MAiF $>5 K2 +BSQ0-i2IN^e1"^,3 G'F /(? / <  ����X� � ��6765'&'&'&'"'#'!!neX[=~7 5]n/fl%()okFHA6=I bG3<<�'X��/��6761&'&'#'!!&'&1'327654nIR'<%K %()G, P,>hlF(n./-w5Ě@!OE53 <<49:!P+fDyJ< 7$��X�?��#376767#"'&376765#"/5#'!!03767&'&5670'&@Z)$ -H&+N:Y ^#(="a"(v(-32@,* +Z2_\1m4W\"P>OQ<<+d^|aUP<9CP`/���bX����!3'#'!!5&'&1P(d<R(JT<3< F<(>}G;UI �����xX��c��'&'767265'&#3254'&7#"'&'&'#"'&532?63203#"'&54767616734   +%6 $+7%::8 }  * #94+6S .. 9</A, T# .9A."# "507K?"u *-)'Z6FZU ,.����7��3!6767'&5#'&'&547673'#'!4'&#"'&52()[R[e%  1Bah%(Sy,$T4(X</R]K +  NqU3<9 $7.* �%��B��#3767654'&7"'&/76?654'#'3'&'5632&'3(!+&*->(" x N26(#/ 2/'<9 B( =iFL**SAIM<+[,,n>) $31D+'(D5O<K8+<   -)<��X�$��!6767#"'&376765'5#'(\# (R6=eF] o2;"N, (Q F(X<("UR0o='ec,Q<L, F<���X�&��!6767'&5#'&'&5476?'#')[R[e% 1F|`m%(X</R]K +  OzoV 3<�����X�'��&'&54763153#'&#"67#"xD 5(99qf(P<gFB -" ?  M!Z8,fn<@s^L$N +$��0X��,��'!654'&#"376765#"'&'&/32760((U0 . -A!&sD )q8?PE<<H:!?6 ?A/b.<!#ˀ@c&�����X�+��203#'&'&'&/767'&#&'&5476]*-A4d(P<- b  &+PXD $:P>Q< 2|?n&/' % W���X���!'!307677&567'n})*(<F]2.,?2Vs <<GUjcKiR#U^u^d�����X��$��0753#4'&/70'&'76763rE0ssd(P]2Z!& 0# AK0Bd<JkGz"5  "%����X���&/327654'3'!JU}=00PURP(>(:. $ <<�����EX�!�1��?654'&#"#'&54763253#''7&'&#"70x 0  Ae(P=6'$a. &   <<T* ���X�0��&%&1'7&'&54767#'!!032'&/67&'Wo&% ((7g[8<5;F *! GdH^ n <<En?:1r.7G> .4���X����0!'!#4'&/%^?:((P]^=S<<JkI��bX��4��'!"'&'&'327654''&'&5476776767(N(N_qL,N()R6.;X2%.3) <<Vp%oLK?R0-z + %*" * M& h<p����X�$�6��&/'&'56?07654'&'&'&'76767#'!0!L+"''!) MP)(0 J;/0A {@ ! 55    << >+&' "- ���X� �!��!04'&'&/7&'&54767#'!^7F*<To&% ((EnBKGz=n <<����X� �� ��74?&'&0!'!#4'&/%#! #"A:((P_^2' &  ?O<<LkD���X�3��767'&'0'&57676326325!'!#'&#"&#"I& / 1 )<,')  ((P<$ ))31%G '* @S5 dd <<@$6ZZ.(����X�3��'&54767&''07636753#'&'#"'&''/"06-d(P<6' = rJ "- Y ' - rU<@ZI*9$����X�� � ��'05!%4'&/7&'&54767#'!^[@:NKo&% ((n]>Q0<AzGn <<���X� �0��32761&'&5&767#'!#'&''&76325!Gi-&((P< ;J/ "c0, g<<<2, <K )  &���X��.��!!&'&1'3767654'&'&'&54763(xd+(p)('7DG$.,SD9_{[2 GX<hG)|c< ,L!3 -!C#���x�� ��4?&'&#! #"2' &  �����X� ��53#''(d(P<PX<<<<x���!���'3'632#'&#"3#'(P^at S2/'04((P<<T>LB<<� ���!�&��#'#'3'&'&#"#4/&5476323P<((P XQs6 ^<`ybMd`I(<<@$!"  ?!80D4Q���j��� �!��'7676'&/6?73&'&"B .09'< 2< !F' %.B & ���L �����&'367&/'&'56?73%;<I!!*7 N (+ ���#j������7#sRRKK44������ ��7?2tRR sRRK44K44��hX���!#632#"'&5&76761#T(2P M# %vX<Sh#F$D" 6{��h�0��4'&#"'&52#30767'&'#&5476?3'F;2 7 4- (,s! nc(Xr f<7w6!!$ 3w"l<���X� �(��53#'')#632#"'&5&76761#D(d(P<PT(2P M# %vX<<<<<Sh#F$D" 6{�����8��'#3'#4/&1&'2!#632#"'&5&76761#l((P<P(FF#>)7 4- T(2P M# %vX<<x\<<r -f<Sh#F$D" 6{���xG"� ��0'&'x?>+17#N6 '@�������'#3'#4'&#"'&52<((P<P(FF;2 7 4- X<<x\<<r f�j0X� �6��4?&'&!6767#"'&'&532767654''5#'#! #"@(9M% U/32-w"  n5?K"AiF(d' &  <"-<SQ0-i2IN^e1 X1; G'F<�jX� �4��4?&'&76767'&5'&'&5476?'#'!!d#! #" R[e %  .C`h%()[d' &  R]K * OrT3<<����X� ��-��74?&'&!04'&/7&'&54767#'!#! #"7D1<bo&% ((2' &  EnALNmAn <<�����vX��+�1��?!3'#'#'&/67675&'&1AsRRrP(d<<(n# *' /9'PY<RKK44< FdxT 2 " 5 2$1ZErH;j8��n|X�%�Z��'3767'&'&543674'&'#"/32767'&'#"'&54736765'&'&'&5#&  &&( \"3 .27&c  LZ^adG"-#6   ! " % <" 1?0$)i (;E U[4H`M?i@ ��dn����%��'3767'&'&543674'&'#"l  &&(    ! " % ���dn*�2�%�K��'3767'&'&543674'&''"'3767'&'&543674'&'#"  &&(p  &&( Z   ! " % 1   ! " % �����X��#��3"'&547632'27654'&'&#"i7&A5Pj6%@5PT* LU) GtOiWFtNgXHP^9H2+d_7E,)f�����|X���"'&54763227654/&'(_ie! $=  h" IohD,FeR=B1>!]"+/<V^]����X���&'&1'7674'&%0'0(t<x?S%2t ud'  9RP%cWa��[�'��%7&'&#32767#"'&&/3276W2.:)4oM.s9>)(C]80 5 ,CLyM7 3HUJ"9�����gX��-�?��&54767632#"'&547"32767'&'&'2765'&'&#"I4? M4( 3<)0H5,e0$0K& ++b7 J'W + E#$M#K9?"!G&O/ I<AE;3"6% >:2 69���_X��*��&'567&'&77#&'&'&54767 #9$ T%F( )q=<C`z5LJ|!#6-#,D(W392:* 6gD 5gcph-+�����Y�,��&'76326767#"'&'&532767654''$9M% U/32-w"  n5?K"AiF 1"-<SQ0-i2IN^e1 X1; G'F���^V�� ��#"'&54767632/5&'32!-'*:"^Y4 57#E. X%M#57 85 6�����W��$��'&'7634?66767,oVt& X_6[mZ"#cTB2 % E|%#  �����}X�-��'654'&'&#"76?4'27654'&/&(m5W 9.% !5: lID`_i/%~7 #< ,3(n.0 LPd8���X� ����0'&'70!'!#4'&/%?>+17?:((P]^N6 '@V=S<<JkI����X�����0!'!#4'&/%0'&'e?:((P]^?>+17=S<<JkIN6 '@����h[���63'0'&'&#(M (5n&,T@52'���#�4��672#367674'&'327!'!54';(d%816$  ! Z7);79><35.N%Q '  E<nB����]h���73767670#(M (5n&,d>52'����]h�)��732767065'&'&#"327654'P(N ( "h 1 %   <IC1'!.-  '����bh�*��727654'#&'&54763237676?"'&'P( !" & 5.?5/(UBB$. #/ 6?!PHHdN3������PX���<X<�����Y���07677&567'&')<F]2.,?2Vs1( GUjcKiR#U^u^dA ;����|��#��7"'&5767632'"327654'&'&o/I&1p/='1F -G< C$AE$B'4)42 ����|�� ��4763#"'&'32767"'&'&, ,, -n5WN<S+5M#030$W* 3DT, rE�������5��74'&'#53676733##5##"547674'&'#"54~/ 2U#$ =+4&r2@ "1;4 .1 V(@l&9'h'/ A#L 9#Q@B9HJ -N A+%:A����t&������&�������&������aD&��0���� D&��0����&�������� &�������D�!�*�4��3#"!##"'&'&'&'#53627654'!!1!676 `69$Q!hQ$ +: >$ C>&9^T.Bb( `,2L(9Y+*!7H0>3����&��*��������"�2��7476326765!5!##&'#"'&732767&'&#"#H+8FQ! @*@B&_1$c.E4"9@;4 C M(( {99vf'Rg)%; .2 #,����������##5#"'&'654'#53!535!322@-CZ^6'' V*rrTbP#\*A&':][+9T]}53T����Z� �!��%5#"32!5!####"'&5476;(//+$LZ2@zZ=9?!a+ //+99#}f=9LU ������.��##5#"'#"'&'654'#533654'332732@7`4(]R'>*>gA(N*.2D.;9r#D*<!;`O-9Cu[= .pfrK- 1w����'�1��!!2#&'#"'&547632654'&#!5#5!&'&#"32N,IL"FIWO/P"(s9@6 FPSVtCb7- !=0 )G F.30 9L( 85�������##"'&5#4763!5!5!!3254d)7]9,8HbX):2^I[E89).-E����@�'�0�;��#!"3!2#"'&'&547&54763!5!5!4+3276%;5#"@2 -@) ,nh<2  7*2@h^-1@0/-: ݕ  +@E$  :/#0D \9]@& (!��������##5##67#&543235!5!2@@8` #G :\89������.��9��!3276#/&'&547632327654'&'&#"#"/7&'#5!#%e&!F8 Bv +++0+F  "I*3: :z'3>. )C݋5G% <& 0! +  +@99MA"�����!�&��#!"3!#371#"5"'&547&'&5#5!5! ) =@GK$?>`&ݚ0' 9k93"D > 9a,5�����!��#&# 327676;#"'&'676;5!5!-+g;4,%" 86<:LKI!ZJ XU^/""<.044ZZ9�����&��#2#"'&547635#5!327654'&#">GMDBllBDMG>LA74<88H/5M6){9?HL0220LH?9{9+&%&%C'0%����� �4��%&'&#"325!##"547632654'&#"##"54312765S4\@qF22D7ceD 0LG;999'UF% XX= ' $%#&-.M)/������*��%#"'&5#476335!5!#!6324'&#"3276P&< 8@r�2.aT,?7ML8R? {B[K899h%=,#" /(���.�*��"'&'676327&'!5!#&/&#"327GjE-70)6&". Z2(35S;F  N99zTS4t#N+3Z990<" G)f$1 @'|d3 �����/��5!##"'&'373767654'&#"##"54312765/ ON!4vD Qq/O0LG;;;e> 7KP4K#L ? 5-.L).������� ���%5!32'!5!'#5!##5#"'&'654TbP_ 2@-CZ^6'i(,T2299#\*A&':][�������#!3276;#"'&'#5476;35!5!*24 >0:- 8%$n10F0$$*G G9������� ���7327!'#5!##5#"'&'64jTbP$$i 2@-CZ^6'T?IFA99#z*A&':��� �,��##5027654'&'371"'&547675#5! b)?W,7,&L1-=961c6#A%f g<)ALQ#;#@?) ;72$;5"/LA%@g9��������73273##5#"'&'64'#53jTbP$r2@-CZ^6'' V.T?I9#z*A&':+9ReD����"�0��#!"67632#"'&'&5476;5!5!4#"3276T=N!S'K%,]&| lDV< DBݯF:>? 0 Dl 5@r v9P0 & ! ������"���"��##5#"'67&'&'#5!5!5#"32"2@9=nS6&(,"rht^- 'K 9#@V&@ Z9јl,ȏ/; ���� �?��&#"3276327654'#"'&547632654'!5!##"'&'&76H.D>)@*(`6#C*We" Q!)^7~2.U.:zR6  #,#!") ;J /N 99f>!L?Y(R�������3##5##&5476?&'#53r2@ '75 H  9#z#:?EH(B9E"����������!&'&'654'#5!##5#%535wj$'46 2@-%d1Q+8_cI99#SZPF &���� ��!��##"'&5476;5!5!5#"3276 2='2SUQ6h rC;76@L*IEVG 9}~888+8����:�C��"'&54767&'#5!##'15327654'&'&'&'327!676Y8+1K#Ɔ#J1?7D671&C"956 3%;*'4D#"82';.=;12j99j11;N/)9*!$34 0  50!0%9PN)N<���J�S��72#"'&5476"'&54767&'#5!##'15327654'&'&'&'327!676Y8+1K#Ɔ#J1?7D671&C"956 3%;*'4D#"82'< >;.=;12j99j11;N/)9*!$34 0  50!0%9PN)N<�������'��#!"3!#371#"'&'&'&5476;5!5!  & Fi"@2D)T$8"nݚ ( 9W9C(<1>a9�������*��!32#"'&5476##5##&5476?&'#5~2@ '75 HR 9#z#:?EH(B9�������!3##5##&5476?&'#5r2@ '75 HR 9#z#:?EH(B9�������7325!5!##"'&'&5476;#"a9/<~}2K*1*':#484F4+199=:6I!9���T����r���7#5nrrr���������##53|@<99�����*���#54'&#"3###53547632*@% )<<@225!&>&(-' ,9#9.<%3 &��������###5354'&#"#54763232@<<% )@5!&>&2#9,-' =%2 %.�aa� ��#"'5327j`;:``:;`;��b � ���#"'537#"'537l_?=W,h_?=W,hR88e88��~$� ��&#"'&547*s& G&ga$k p�x  ���&#1"5432&'&#"#'&54?0gmP$Fa]9Mi Q_d @%8(*6 FI�d<� ��#&+"'3;2D4_0J<@F<��7 ���5"'&54733712#5254'&#"3d:5 \@   R(#4I)o$ #�4H�2� ��&##"543532SW"H@WM -$������.��##5#"'&'654'#53!535!322#"'&54762@-CZ^6'' V*rrTbP#\*A&':][+9T]}53T4 ��Z� �!�1��%5#"32!5!####"'&5476;2#"'&5476(//+$LZ2@zZ=9?!a+ //+99#}f=9LU  �����)��##5##67#&543235!5!2#"'&54762@@8`  #G :\89& �������6��7&5432767654'&#"#"543236765!5!##'#"'#0(>;)M2*7]m)>%  1 OIHH2!LD@Z%  2 0 /9 %,.99P8 0JI1L: $T�����"�0�@��#!"67632#"'&'&5476;5!5!4#"32762#"'&5476T=N!S'K%,]&| lDV< DBݯF:>? 0 Dl 5@r v9P0 & !  ����8"� ���47632#"'&%4'&#"3276ZNrvvRHJ?SbC7J?SbC7 QGvvYOpbC:L@SbC:L@������$��)��!#"'&=#"'&5476324'&#"3276BB 4I]8(L2?]8(/?"K" ?"K")Sl'>,=W0 >,=@#{E 4E 4��%�%��%'#"'&543267654'&#"7632u3[C'LvOA>LWofyhJ]Yx )R9D$5)+5 F:/<ng7 �����9��47632327654'&#"5632#/#"'&5432654'&#"#"#"R2( 9 )/Zk;Bd1$:Td(\p2j8 n W$* ###EW'98++?1F$"*?-������+�;��327654/4+"'&547&54763327654'&#"@A%,B+%> _-P8C+6,N2$8PL'3HBM DK ~4!#A9@$0N2)CM,9)4C)2NY'95> /5'�������727653#5#"'&'654'3A/@@&Y}I "B3$E`;HMDVFG:����B��2#'1"3!!"'&547&'&54767&547632'1"2#"&#"37R5O-3O$93 !' & 6r8@ &f(H,&; (% 298%G 0`$>-Y;F5&"$&#0������ �!��&547632#52767654'&#"r O/=h9% &yrr < )N "!!^-E.?!K99A>fF$;! ��� ���!;#"'&5#4763 @H..\LPY9FP;hVYX���(��!3#"'&5#47633&547632&#"ij!:Q.SAH"KWf(3 I=VA 46+"9bMTHIeh"92��>e���#654'&#"#&547632( " 2 &:B >" 0 & 0& �����"�)��%#"/4767&'#5!##&#"32763'5!?09`GgC N ,3'%t,O0$<?N 4F/$2SBH 799D$E00S7 ���D��(�2�;��##"'&'&'&'#53673#&'&#"!1!67627654'!D9$Q!hQ$ *78`J6<b5z$ : >^T.Bb( `,2L(9\&0<(?%C7H0>3+*!�����3�J�T�]�m��#54#"&#"!##"'&'&'&'#5367632632"'&547632#"'&=%!36764'#3276%4'&#"3276@9uC+2>+7  I!*D=@ @+3(3 Yi6$ I. ?)/S+`BB &@ # +6n7 -0 +0 O(c:J #9SG )7W"57[%<G19i9%N$s1"+@&6)l )Sf);,H %*( "' "��X� ���2#"'&56#"'&'3327v  6vw7\ eX '9'CC%PP�H}���2#"'&5476y)" &% }% &" ,��'���/��%276=3353#5##"'#'327654+732'.:"Ye_^dU4B/) ;oDF*!Z-!cE8R*H( 8DCRG��'��}��3��!#3276=3353#5##"'#'327654+732'}]]:"Ye_^dU4B/) ;oDF*!-!cE8R*H( 8DCRG���(�0��#"#"'47&5476;#";#"3276=476;" T-8;9$J/5H@ 7'DSuJ"3)I+#E.9I,T��(f�2��#"#"'4?&5476;#";3236765476;# W)31$J 3H@A3/S*)|O!*!E+#E! 4;:0 "{1��(v�=��4'&+532'&54767&'&#"#3674/+'3276f% S66l-7[>:><j.T:4(;5 k!KL(E$ E0Z9V! 2-<\:: D9#+ @,H$ ���(zk�;��"'&547632#4'&#"32767'&+'325&+532#n<)nIb{]a^@ETx/#4O .IJ<:S8#Pd0 :'8m7$9:U],+-?(, 'F>3E39 TS"��0�@��#5'74'&#"'47632?37&5432#"'7327654'&s_A#$ 4'1=P2  6_p8C $4-VJ)/# 0(5Bݸ@TBS 'R,:m'1 ==759M G)*%$$/���''�+��2&#"3!##"'73274'&#'7&56766I -4S#Rm(2p\H -1f' KUE)! 8R] FEI)8J@@���'��G�!��53#5##"'&=&+73232=3]]X"(DE,(1^9 38Z9E)")'"3u F831V���'��'��$��!#3%2#"'&'732767'&'&#"56']].F4 H'H2.!' T"-0+ $D I ��&���.��%03#5#"'&547&'&5767632&#"#;#"76]](Tr<&G! (,CW$"&m>ji>p9?, EZ!6#17#%& G -6C43!���(��<��2#"'&54762765'&/&'&'&57672&#"#"'&'7# $  G #X)30.'7SV f f,8UI/L"2n   #& . ZL2=h%.5'��'�#�'��%#"'&'#732767'&+732#"'36767':2g2 /0  3H5&4 a+4/`M7G&  F> C"V! ���('�8�G��;#"327#"'4767#"'&54567"'&5476;#"27654'&#" < qr4 7' > DKs%H+(s=2%  3 J# I 6izU+J,$_FMb7%63!E, /I% ���(T�6��7"'&5476327#&'&547676'&#"3276'E($#;`W@ 8 B<A%%% :&1B')q)D )UA 0 GM+/ I ��' �B��727654'&#"7636?653#'&'&573767654'&#"#"'&'5gF 3%6x6 b28J *11I*$AV#)4*?Jq <9% .X4oJ$:E  .P=@I!��(��/�%��632353#5##"'&'7327'&'&#"N14[<$ Z]]Z-s &5)"/n 6>C(4E 't  K ~: ���(�&��72767#"'&54767&'&#"76397 0*a1h+*7%@" %WW86M<L$2P*$$S C0;1��(�!�5��74767&567672&#"#"'&2765'&'&'(=.b!'5&":H Z[ ]-<!0  8"( ( #C'"S  K8 ?e(m<%"  *���(�,��%2765'&/&'&'&57672&#"#"'&'7�I #Y(3//'7SV f f,8UI0K#1<' . ZL2=h%.5'���'�+��%2'&'767654#"76332767676TeF:A{jZ+6%A' '$UU0 :K/C!#*U @269  ?��'/���2��!#3#"'5367'&/"#76322767&'&53/]]V!B ( ">)':3!Y`:5`4p BR+ E*(=L=8LJ"���'���53##"327'&'&54763t]]F k#x ?/9aZE;HIe#N2$��'���7��&#7676753#5#"'&547637654'&#"#&547632ZX/%(-6]]%8@l:&! 30P! ,&Q*; %D&'L_" Ep;&7  <,,$7#!��(�)��;#"767#"'&547"'&547632&#"' wr,)417Lki9'A  O*43J3$oE B(" 8GI<(9<)(DG��$���6��732767'3#7"#'&'&547&'&'&547654';#"?/C7]]fM1b# Q6kL7(ji?'% Ec5>7#*  @  + E��'��� �#��%&'&#"7676#"'&54763!53##MA$IE!)f(A!) ]]  />7  > <%J#^E��'���#��%3#5&'&=/&+7323767276^]] AE- K( +   Eo1!( F&%���(�7��3%2#"'#'&'&'73276767'&''7&567632&  )2a)2sY/#H)2 $O C[L6DQD !K%/T in 7 &,.T9D> ��&�X� ��7276=33#'&547632&'"8 \a`./G3F *")/<2GG$3"$k) ?fs��(�.�-��23##"#&'&5456354'&'&'&5476G0#ZY+*F1 " D*Y51#,1I1&M3(!,AA8'%/DA=$���(�l6���7"'&54354'&#"56323#@R 0jZY1l5 Q07 I `WH'����9��#"'&1"323673#'#"'&5476;27654'&#"767U:$%1^:^] "54WDK V( ARH1 \PNF(=6?C EU 38R  )V'!���'�7�3��&#76767#"'&547637654'&#"#&547632ZX/%(-6%8@l:&! 30P! ,&Q*; %D&'L_" R;&7  <,,$7#!���'����$��7"'&54767&#"3276753#5#5Z<3E4D4[ T.]] K?Sc@/C N't I �EE���(��R�)��&##&'&547632&#6765476;#.= T_6'=&4, W5 A)]a ?rV>O4@YE:&E��'�����%#"'&547676&#"3276753#mHH'S#-()-l'*]]r3d$.^&B4Z E���'����7��!#3#&'&'&+'32767'&'27+&'&547632]])- kD1'A" D(  !F T"i4{*._G6"7 # 6 0KA&��'��� ���%'3276753#5&'&57'&+73~, 3( ]]%B#D2%&mΘ. 5E /$* F���'���(��53#5##0;#"/#732765&'&+532]]s{& ;" & {A" -E ^ F)F"*F4 %��&�>��%4'&#"3767#"'&'767&54&'#"'&=76KX/,A7C0BhrBDkC#?% %5V" A)*8,/BB*) !L!9:_&X%FB  5LD ���(�(��%#"'&'7327'&'&'&'76763232#"΂!'UI.@+73rKd/ *\I'sP+4t1@#/>%7"E,,���F������3#3]]���E��.���"#476323'&$R!^X,<V0 PALH )E6D'$#K��M������3#4'&'#&545632^'' IwOFDU:* +$-nXUW�P���27654#"#'?632#"#&'7@ 3/!"'F S!(R7%("/9 921.�O���476324'&'#32365'&'&O[!)jO-@)7F&>38 M(KM O++-5E$(4  7 �����476;#"327#"'&5 'b/ b)4&7RJ12C&CL%C$()����#'3@P|��u���'7#'7aVMC ;��f�������#'3#3P|]]g�K����� ��'7#'7#3!aVMC]] ;u���C�� �N���2#"'&5476'&'&'332367#"'&'7327654'&#"#"/1532?632%"'6323#"'&'7327'&'&+7327'&/&   47u&\'UcB*=H/ $% * !#,L  % B#?0&.4 P-8g$,^I/ Q 9FR "SR1  9 ]OPM~}?*H ,0L+"-)X0Cw3 +8X DlZ-_ C+/W>&H< ���'�!�� ��74763#"'&27654'&#'B3GY6(54NO670% X9,E3CM7776 <-$+ 7���(��1��2767#"'&='&'&547676"37676=4'&W*$ ,#"("('(I, "1$S 7z &=>+*F, M���&�#��2327#"'&5&'632654'&#"'6g>.,"0:+X$oG;-S6"26E8)>##KD"$HDLC1B��'�1��%#"'736765'&#"76765'&#"'6323M.:ZY-B;Oe  1T WP,k+SM':?/7 /G)( C:"!����(��"'&567&'&/77'&'&#32R-g5.,:(#A#:$@78#1MK"^!r?o*5,H*:-���'�'��!#'&=#"#&'&57'&+73232753;Q!0#K&B( ' ,\!^3$p F&#  ���'j�7��2&'327'##"#'2765&/&'&56767&'&5476WH#/\%/q L:9L.'I}B )DR $ (B]? $.6. ^ ��'�&�4��7323676'"'7676323#&'&'7677'&'36t0b$AU&r&7% A  4&:!/ A%) E#.3^ ;'.j* </ ���(���"'&54?327a6#8>225>7=(8K,B(/DR���'����%#5347632&#"327#"'&PBX&!B. =''(fC7D$eA6 I 6&0#H!NL@�O�R����#"'&5476324'&#"3276R+4 ,'%  #1,4 '# ! ���#��+�:��7#"'&54767&'&5476324'&#"64/3276="I"(! *6 (MM&.*1 * L&& &1 4wR!:%/:3,6,D&>$FM1>: .'. ?-4)*8$=0����G��727653#5#"'&5476767654/"#5&'&#""'&547632632Q;/..&T%"d:)b+3$" - & A /+06 .-F*(1'2`Q2 ;*:R2 )0GB& $ )1959(S 57 ����5��K��!#327653#5#"'&5476767654/"#5&'&#""'&5476326324+-Q;/..&T%"d:)b+3$" - & A /+06 .-F*1'2`Q2 ;*:R2 )0GB& $ )1959(S 57 ��;�K�[��#'7654'&#"76327632'&/#"'&=7&5476324'&#"3276'4'&#"3276+K8K%R=RX51(<3 *UOGPjOZ  " } !  " _;usE0*m@/84I."#M^ 8!$:bdB8@I= <.A ,"B>> ��(�B��"'&567&547632#'67654'&#"73276=4'&''7Y03TLXmLZ+K8L% T;RS>>B1 4$E!B"",22@(45TbB:@KNFtw%Hw?,56E"A2%@"2 C  %5C*,���<�L��%#'3254'&'654'&#"632#"'&547&54763227654'&#"2 47F O$ +::KL46 &4A(: (@( PRCY_FH + %- '8'v?+%OK1177D(#7#*J&6#+&0QgC8?>_#+p+- *4 ������!#3#"'&547676767??C3  *J3 5z  #" !:���E��%#"'&5473327654'&#"'76327654'&'&#"&547632M.;- P:" g3#$#$&K $ /1";"LV+5BzpNEDDB *%9/  !8!8!'*"& $����<�L��%"#5#"'&=7'&547632'674'&'&#"7632632#5&27654'&#"(-" GQBXhIN+I3A N98,,5. ' *# ! 5K %-'gB7FIo ^>+33A0)44A +4���8�H��!##"'&5477632#"'&547&547632232767534'&#"3276.86K6 V!$G$1!(G(USBX- '( .,1 .> B743`,:(A+9#,[kB5L 1 '?q5*;; ���,�<��!#4'&#"67632#"'&547&547632534/#"3276-I6HR4&,G$1!(H% PA@^;5>--- (4t$1$A1=-:(A+<!+$\e>=Kq:)6 3�����B��!#5#"'&'#"'&54?&54763253276=332?&'&#"367-"' 9%U_;QU]/0#" =Ga7%+$a$ "-!+) mt9#IB! QP$%%$" +@*:(#%BQ(� �-�=��'674'&#"67632#"'&5&'&5476324'&#"3276  0)2?kL>A8?C%8 '@',A[PUqMO', '- +$:/GG>N44DP- <6 (D%3 '<[`E;MK. ', '���K��747632#5&#"#"'&547'&'&547632'674'&#"63'"32767&8:%.$, H># *PCYo 1 I>SY8*#0 '&%'= " (<<%+*-fC9l0 "\>5A1@* #.19%��?�C�S��4'#"'&=7"7632'#"'&547&547632"32764'&#"3276!R 6!)O$ !$C'uv#%G(U^=S',4 +/ ,7&*D A(@!) j% ,7")2.19#,\q9& (0 -6)95��&�6��253#54'&#"672#"'&547&54764'&#"3276sE..I0>Z9)d=A&6 'L"tUD'- &/ A?]I)4%4I27 (C%>' -:e]4*k- )- (�������#"'&547632327654'&#"DCfkE9@DenE:Y?2H]8)?4K^5& jUT^OflOS\LfmC6V?QgD9W>�����8��7"'&547&'&547632'7654'&#"67676732753#5E!F M@TwK=- 99[H71 `':!--%;$D dB8SD_H)&T==;3A# .D* AC%������8��253#5#"'&54747&'&54763276754'&#"6323#oU-/5DT73E X>:#*=7+ D7GT71$%""% YRL %0,9 =h:(:"." %/%2.?5 ""���s�'�7�S��25367632#"'#5#"'&547&'&5476"327654'&3276754'&#"63#oU.# 2*-0;N T73 F V>!  Q:#*=7-D7FT72$%(!YR( 2 5"*LC0,9?f:*0& ,%:".&%/%2-@5 "���&�%�B��253#5#"'&547"'&5476?&54763276754'&#"6;#4kY.05DT73\($ $f:X>:#*=7+ D7GU34$%!% YRL %0,98 ' +<Vh:(:"." %/%0.A5 ""����+�;��"632#"'&=7&547632#'654'&27654'&#"S8- &4A(9!)@( QQDXhIUDI8LN^3j+ (- %?3@(#7#*G'6#+&0QfC9?IFWqvVE9?+2 *1 ���4�B��#'67654'&#"7632672#5&#"#5&'&'&#"#5"'&'&54763247I9?f )(83  3  0#jC\L@ s /(%ZBJ!  )   ;=&`Ro'-+����@��"67632672#54'&#"#5&/&#"#5&547632'654'&f6$! '%83  3   1Y[?ZjON.?>O6I/$ )  ;dC/GFi,0 2P==��8�H��!#&#"/"3632#"'&5?&5476;47632534'&#"3276-Qe+ *AB $)8B'8!)F' dO4!,MG-'. '. sw"&!%:3) &8#*F&7")RXK)?Va0 +1 -���� �,�9��253#5#"'&54767&547654'&#"'32732?'oU.. FON0!WOBG7C7_$&>!N=-s#YRS +4#.!$!NdC7%/% /3% ~1 03L������"��!#%7&'&54763253&#"32?/nJ@TN4//6nK437 #SeX`d81, !T90275 :!���@��"6767;2753#5#"#%7&'&'&=&5&'&547632'654'&S.0>+,+%0Gx! *N:JjE>, F29&3  !-#7'p@4+&5_  :[9+F@XF4V4%����A���7#3@+-��&A���&'&#"'67632G =PN: !LVeB`7* "B- ��������3#'7.]>"k�5�#��*��#"'&'#"'&547632532767&'&#"32')<*;@ ,!3+F(:3%912Ki-  1�,=��%��476353'"3276532?#"'#"'&0!+*%& 4(A-;& -(#@"3<"!4':<.�L�8�!��3674/"?2#"'&54767"v)J! 7MC"*%&(%#''?-#2#).��R��*��%#"'&547632&#"7324'&#3276R0#-l=/P4MF&'@E+/>`CD1==?1 ?,!gNfG./ &K6>@87D6'( 4���H�X��2##'327654'67654'&'"7654'&#"632#"'&=7&547627654'&#"lF= !# 54X#! 93I5BL46 &4A(9!)@( QQD2+ (- %G=X**%1P# * T4%77D(#7#*G'6#+&0QfC9+2 *1 ������#"'&5476324'&#"3276>>XU><<>UV??"56HE3421II55sPPQPrpNMMNp[AA?@^_CDDC��e/��.��47632#"'&'&'&'&'&%4'&#"3276H*7P1"<)7<1(5]"?< G  4 ? 2";"e0<)6T2#,&<P< ##6 Sr,5? 3";"3���i/��/��'676767#"'&5476324'&#"3276i[ MHH- $%U3$E-8d,/5%D#5 &=$w !6 (2;U?,:O.N*)A$7%>%4 ���/�4��!#4'&#"#&'&#"3274'7#"'&547632632.,-- ,;!0%% F%TC'6?-.CT' (!D "E(-v%(51 rw7 /7=-���3�"�2��#"'&5476?&'&'76767674'&'3276-m)8//EW/: "? 4M[C Ie'84!C ^S/>>L,-C+9B< U] A,hkEG #87A 8���� -�/�;�G��%&/#"'&54767&'&'7'&547632'4'&#"64'3276 11! ="+N'-WS #Bd:%.H(0 &`+ 14 >u3Cu-J"3.N&<",20J  U!%&H*:$,=, "# <.H.$A44E8 @���8�9��#52767654'&#"#"'&'7327654'&'&547632޸Jx9+6(/8 68 $:/ '#)+ 7 !B$,c6$wu. 1NOoE0#$ 5) %C#K2��05�1�@��476325276767654'&#"7632#"'&4/"32760F?QfC6 <eUCZ/k$C.=I1,?< .N2$# # iT?9PAV\$.:B.:^5#4/;"=04B0&  ���8��5���!#!.n 5���/{8���'3"'&'&5476753{=/0/f%f-=P9Er!&So//J ���S>�� ��27654'&#"72#"'&54767 /: 4D/9+2E/#9+F0= 2B:!"E.#:*2E0#��T�� �/�>�O�_��327654'&#"327654'&#""'&5476322#"'&54647632#"'&4'&#"3276T68 *<6</ApD/#-.;=\0.<,..-;<..\9*4D/.-;;../= 2: BD1+3 ID5? 88*4=-/\=:..//-=;-..-;=\G/":!#;-..-< 4@ 1�� `� ��G��"327654'&!32764763233#5##"'&543!654/&#"#"'&<# '" kMThP5CmD555<WanoNm;*12 >Q{B*& ,G+aQ.YF^20Tn6#2=d1-:S> 5OQ��s� ��d��327654#"!3276"'&54;#3254/&#"#5##"'&543!654/&#"#"'&54763233632  &6   kMTf2< +7<WanoNm;*193#G F;FmD57!D"3 & >$G+]?7771 n6#2=d1-:S> 5C"@#K-&YF^20TR<'�[��Z�d�q�~��4'&#"3276676767&547632#4'&#"67632654'&##"'&547632#"'#"'&&#"676327654327&"1/ 2#( ?Cb60Swml8R<VBN972S39$8&'S4AxG9"jJ5BlhtG'`0=w<[lZ ;[m LLH&)-'*RvVi'/0( 8*  -vwtVkP,hh{f,66IGA/>F!*(3T,_Ki??AT2$>[9"LX?:{}T&!9b+&+*LA������)��2#"'&5476!2#"'&5476###!#  D  p=<u  #   # X<��� �0�<��"5476;27654'&#"2#"'&547632+"3!"327654s940'K",6)55@ I=Td<.C=Ns66`& /# T9*"'\$6=1Y+%E5GK417k# /! 0���-�^�j�t��676;####54'&#"632"'&547632!"5476;27654'&#"2#"'&547632+"3'27654#"3254#"6 27%Y7;&!(.?9 5%15P\-ks9:.#K",6)55@ I=U_=1J<Gt66$ .& ' 3;287)eD"-1 D <*+T@GA 7T9+!'\$6=1Y+%D5HO6+# 0" 0( /8�����,��!###"632#"'&54764'&#"3276 <Y;.,_]'2+3f<-UG'3!2B =^A3BAC",E/(T@SrH>'#+7 .���=��.��%#7#"632#"'&54763!#4'&#"3276CY;.,_]'2+3f<-UGb'3!2B A3BAC",E/(T@SrH>='#+7 .��� �i�y��%4'&#"#54'&#"632#"'&547632632#!"3276=3327654/4763#"'&'#"'&54763!276%"327654'&3)6J(7<-9C)J&>$+@("Q=R33o`;.T5L_*<%*L9079&,A(+L5B^8 8s7!g5DRR.8/1*N:.B)3N4() >#,E%9.5m?/bbUBV@(0 :"4+7)=(/%! 58Q0"=]D(9a)I/0 :- 7�� �a�q��2#"'&547;#"#"'&547632#&#"32767"'&547632327654'&#"632#"5476"327654'&}V'<(8O  12 (BB!./N|;;< \C!15-+?*) I ;LZE0(N 2 '{gJ0 *1">Wc8&7:B'6,D ,UC' K4L G*-?345+1h 1E4NA">'ǍNB",& $ ��� ���w��727654'&#"27654'&#"2#"'&547;#"#"547632676767"'&547632327654'&#"632#"5476;)3"r;!1V'<(8O  12 (BB!./N5!@ #.15-+?*) I ;LZE0(N 2 '{g;) *& $ <..>Wc8&7:B'6,D ,1/4 &L G*-?345+1h 1E4NA">'ǍNB�� �-�7����%676;####4'&#"632"'&5476323254#"2#"'&547;#"#"'&547632#&#"32767"'&547632327654'&#"632#"5476"327654'&b 27%Y7;&!(.?9 5%15P\-' 3;2*V'<(8O  12 (BB!./N|;;< \C!15-+?*) I ;LZE0(N 2 '{gJ0 *1"87se D"-1 D <*+T@GA ( /8>Wc8&7:B'6,D ,UC' K4L G*-?345+1h 1E4NA">'ǍNB",& $ ���y���7��35"32="'&5476;5!#32#"'5327654+<,+ww_>2&n@&>'0 $#C`VP)&1&sB?2E7"6='.E)=+[[W&����#��!#63233!536765&'&#"###",G/!765:/,7665&.[*7@. "\)R���s��!�%��"'&5476;5!#3#75#"32#3_>2'P)C$ <,+w?2E; 67[W&B+ 1&w�� �����327654'&#"4'&#"3276"'&547632632!"32?632#"'&'47#"'&54763!27654'&#"#54'&#"632T- 2(.,701P^ Q=R33o`;.h#)!_*?#)%PPYI'9=!L;U;1g5DRR.3)6J(7<-9C)J&>$7 $ -# ^3- 3(nS )m?/bbUBV70 >!3`49!*?" 7!"1:/?a)I/=N:.B)3N4() >#,E%����P��%327654'&#"%632#"'&54?2327654'&#"##"632#"'&54763!#�2? '2!(8b+zN &Ch|+#.&=Z;.2Z]'8'2e<.LLh7 -'#*,!X/=XJw~amqk@L5)1A3BAD!,K0!S@TiHG=�����3!!6AS7���"�I�X�d�p��26763!###"#"'&547&#"#"'&547&#"632#"'&547632676"3254'&327654''327654tA<@:<b4&d9&6N,`BC<0d9 &L,^5>J' *0R+P'T.(ka]LAR ,"0_+.'!.`a`)*!)#6RRb8'L0<RRb8K1<NG%2@'3c! B7HVN+##;`01H,?)(yAOOKoK+>+'z��g�9�=�I��"'&5476;5!#32+"1#4'476;27654'&'"+35##"325_>2'+`1q%.B4:0/E+P)_$ ?'-w?2E; 6O1A<& 1Z a$/h [W&#+ :#s��+��!#632#"#'7676;27654'&#"###'!R(W<F^6 O|! /"- 776W3>=$R .*I f (Q('R����3�?�N��#"'&547&#"632#"'&5476326763!###"327654254'&#"6d9 &L,^5>J' *0R+P'T.(ldYK2O ;<`6\`)*!M_+,"0Rb8K1<NG%2@'3c! B7HVO* 6R3KoK+>+'z`0#;���'���3!3!67S�������3347632#!%4'&#"32766Y `D=D*B50EC 4 S._cXf~/bID"&D �����327673!3!5#"56%7&457`?U.5@S7'K��� 1� ��!#57## ǐ66XBR�8�;��#"#'7676;27654#"#4'&#"#47632676325H7 Un;*,7+# 67)D)1-<F$"-*L jLe-L70RQ*5 + >Q^p�� 4�=�M��"632#"'&5476321327654#52#"'&5457'&'&"327654'&F?=3JU,C)3S1/HGm^KJ B `+G7Oa).9?5B (=<C9A'2N)C>TnQPHIX!(L S-;6wF5A,87$71;1: /3!��� @�/�?��!###"#4'&#"632#"'&5476326764'&#"3276<7C3 7</3]</5L]&?'1p.JJpM@ =+,3; 6R;!<0%E6G8I#-J(c3CpMN?= 4 +6 ,���� �C��%4'&#"3276;#"#"'&5476;#"32763&5!3347632#P50EC 4 ",83Q01Z #smN#S)"76Y `D=D*bID"&D 9 1$C$B) 7=R'NS._cXf~/���0�)�9��"632#"'&547632!3!567654'&"327654'&'N?--'Q+B%/d-PQvdOQN8?SG8: 1< 08(1C)4S(U.>wVVFJb;1Q$)Z:.2? 1= �� 1>���(�m��%327654+%"327654'&%"37674/&!"632#"'&54763237"'&54763232+#7!567654'&*bst: 1< 0.,? ),#N?--'Q+B%/e-OOydOQN@K0 +*<K' #kP 9a=aSG85% C<2? 1= 4 * ^ '8(1C)4S(U/=zUTFJb;3#,>242%P<"M 1Q$)Z:.�� ��L�\��2327654'52#"54767'&'&#"#4'&#"632#"'&547632676327654'&#"\c&M@+ `8*C3L @ A 7P+4F?=3JU,C)3S1/HGmlC :"5B (?Q#-*HQ<@7\EWL:F &K ;/J"=<C9A'2N)C>TnQP0. : /3!1���_�o��"632#"'&54763234763267632#!"#'76763!27654#"#4/&#"!567654'&"327654'&'N?--'Q+B%/d-PQvdOQN7)U$ 3.<FR 7 U6n>-+7+ # wSG8: 1< 08(1C)4S(U.>wVVFJb;Q*H3?R^p4%-*L hLg-L6 /1Q$)Z:.2? 1= �� � ��!#### 766RR��L���4'&#"#&547632X#.P1!%CZ9L1 7/7%144</b3!,#)����'��#&'&547632#"'&5477"3254'&I(G/;\# 29  A# 61 CM,A>1! NW$ 82(������ ��!!5#!35ۤ�� ' �%�5��47632#4'&#"67632#"'&%"327654'& ZM|5 7X,=w@50 F!)b A$-C, 9 : *'{n^,$* ~2vathS"V (O&a5H,<��� a��<�L��"327654'&&547632#"'&547632#"'&547"7"327654'&-7> .|8?*4A4)^>PnlhhiA1L!L+9UPOV4 2B -+<., 8DN-8,2e5"uupq=.B\& >'1E/le^e1 9 2-#����8�F�R��"632#"'&547632632'67654'&#"#"'&547&"3254'&327654'cJ-(1Q,P']/lb_GIFpJF`7GCBW'$d:'6L+`7? 0a-). b_@'7A'2c! O1AVO,)YSs}H<\V9;Rd8%K2;R4; `21M*?)(sGQ��  � �/�?��!####47632#4'&#"67632#"'&%"327654'&*76ZM|5 7X,=w@50 F!)b A$-C, 9 : *'6RR}n^,$* ~2vathS"V (O&a5H,<��� ��<�L�V��"327654'&&547632#"'&547632#"'&547"7"327654'&%!####-7> .|8?*4A4)^>PnlhhiA1L!L+9UPOV4 2B -O76+<., 8DN-8,2e5"uupq=.B\& >'1E/le^e1 9 2-#6RR��� ` �0�@�f�v��!###"#4'&#"632#"'&5476326764'&#"327647632#4'&#"67632#"'&%"327654'&\7C3 7</3]</5L]&Ap.JJpM@ =+,3; ZM|5 7X,=w@50 F!)b A$-C, 9 : *'6R;!<0%E6G8I#-K( c3CpMN?= 4 +6 ,n^,$* ~2vathS"V (O&a5H,<��v�� ��#"547632 / /1 �� @�/�?��!###"#4'&#"632#"'&5476326764'&#"3276<7C3 7</3]</5L]&?'1p.JJpM@ =+,3; 6R;!<0%E6G8I#-J(c3CpMN?= 4 +6 ,���� ��'��%5#"32#3"'&5476;5!#!53!V$ <,+ww_>2'�<P)B+ 1&w?2E; 6[W&��4�5�?��%4'&/&#"567632#"'&/767676323276####, C)5b.{qzzE; ieydoZ75/O7 KC$c8I]Vjl @T  >t4/WTDM&6RR���;����)�-��%3#'3#"'&5476;5!#!!'32=#"%#3<<<<_>2(QN):,-w$  ?2E)!#67[V&1&sB+ ���k��,��!###"632#"'&547627654'&#" _T<Y;.,_]'2+3f<-UG)A %3!2=^A3BAC",E/(T@SrH>[.&"*8 ������25!####&'&#"#476OC3nNP')N * B9\\V4 q-��'� ��!�/��%#"547632'3254+"";254#2#"'&5476'I$F$\! g&&g ''g4]! D)GbB dA 4-)*,*++*;6d)!B ��Y�7��"3#53&547632#"'&547632'654#"327654$6"Q#hNkQR..<B 4!]=<fg@A/"::.'N#j6Du@0B@c]DC1L0012N��6�;�E��%4'&+53&'&547632#"'&547632'654'&#""327674'&#"36' 2D"D%mOV,%9>= Gb.=u*! *2- :"."#9'0A)=Bfo>7+ e', +O ��5�<�I��47632632#4'#"'&54763267654#"#54'&#"&'&32767&';$+Y/:PQ$0;U_^4+#*+>5! T6 CO E3=* 92= r0Gc322U,8*?J 61"&UGq #8) # 4 ������L�U��"!4'&27654#"72#654'##"'&'#534767#5!27654'73&54762765!C, 3+K!E4;Y(2V RZG4C1 = g684 xX8!<>#BA"7) )88HW#)$+L \1c9+s%/:/G 8;#7J[#@P'.E}6!*S ���P�M��47632327654'&'7#"'&5474#"#"'&547632'654#"327654'&`)5 pp %G7 u+z~ Q2CrIH6#1 ;H.24Ye !o'hwR(A!::#`&%Z(6&#V)$d1OOra5#V! (;Z=@Q" ����w��%27654'47632#"'&54763"327'&'&#"#"547654'"#"'&547632'654"3254'&5476323UZl8KyD2c (` F% 6- \ )2Ec' |V  ]>@+&9B+4 96N$ DE$&}2WA\+ ?M 3" ! '5$,=&(3 f9 )*PMs\1,*! /dn$)C,+b ? x���#�,��72765327654'&'&'7#&'#"54767"2 C!".,+4$;#oE?/D+ 4?9AJI ?^"B/A!@ H���&�>��"'&53327#"'&'#"'&547&#"327653327654'&'M D4,'k,="G,*^M&y 12 CX/ ()0 qI(5+H14 c%$F=#.Q"G &1kH+CE��#�>��"#4'&#"&547632632#"'#"54763"32765332=4- 40E;C!&L<"XH'A i!1WJ*V2 CXC## +*3 @@<$.c @@P9 H1ftVq��/�;��"'&54767654#"&5476323253327654'7#"'_ (I(3H45 #^ (K(/XC: 4##C7$i!1L%,(<;- *,77%7%0 VI ! 98U&@@�1�K��"&547674'&5473253327654'7"#"'#"'&5476767414$N(K((E(1XC85  #5Bi!(`P&&A '  *,* 2;+A$(7(41VB$8Eb @@?"-)&4 ;��kp�#�\��+53254+5!2#"53254+"'&'#"'&54?654#"&54763232533254'7* / @zF*NP (`U$(L&3N/5 #^ (K(VXC8FD&%$+!1H-Zp7gk& @B!+*%; ;$%,77%7%HVB9%1JD$&����3��%4'&#"23676'4'&+5!#3##"'&54767#5323-2 BAe(4pF"+QE+'" ~-/ 'R/ ?<89(I0+:-)0K 9����<�D��23254'&'#53#"'#"'&547632654/&#"&57676327&#"W-*s(CO6<^)6yL/\H,'-+CFE 'AE"&WF13DWK.>Z4:UQ1EMi.F/"&+!JF' )%++*������%#654'&#"#&547#5!#E#<3>>1<$E#ffDSJY58VrC::Cr2\2\f=[R��q� ���M��2#"'&54#73!5!#"'&'#"'#"'&54767"32765332765'573275"! TE#Z[2$'D 6'5V$?IM'SN22 EV,r7 BV   (r=8) 5\9(99=#.E":F(1f=i26�r�N�\��2#'&/&#"3276533254'7#"'#"'&54?654'&#"&54763262#"'476V+ N #!2(/O(`KK4K0>(g4AWh%-S-( W7@).W/<7 $ = (()="!Q>0 ?!"?<X&77Q",/'=$)5 1 /1JJ 3�S�E��732533254+535#533##"'#"'&5454?654#"&547632`1XCVEM=WW>]VL"/i$.W7)+(L&3M 25 #^ (K(1VVHW:r9$:,F+ @@'(:0$8!;)  ',74(9��� ?�K��27653#"'3253327654'7#"'#"'&54?654#"&547632qN G=&%-%;&A!XVE4- #*8$n3V[!&F%*A><$'4, *q&4+,&7 8V> F4M#FFI'1#6#1  +,& ��C� ��w��%2767&'&2#"'&54764'&#"#4'&'#"'&547632654/"#5&#"#&5476326763247632'6 -#Ci? S$8$D4E HeT2-#*!-64+6 CIG"3EC 'g! <>) 1'*T- &*3> (,9C7,Y[*:  9"&U-UF  +*)(K< .$;+#;(355B<���Dr�`��476;#&#"32'654'&#"327653327654#5327654/&+532"'"'&'#"'&547&)#P 1%C : )< @+1 b"$)  H%FL C. 5MJ+PA.E+&2# ,3QL!(% +5,;E:"+;1+9hy # 6J2AD8������(��"327654'&%3#"#&547#47632#"P'M#d 7#uC=:XM`))*Q")p# ]$O/K;L`j>=TX' h�� �#�<��2#"'#"'&54767#5!4'ᒆ#"325332 < w D?*;nEg -'g5WDWD)@8T 9( =+4fX#;;+ +0_a-9! VV��� o ��!�@��%4/ᒆ'&'&#"325332737#"'#"'&547#5!'^_6#WDWD#3w D?*nnEg# )%  +2 0P4C$VVrr3 9( =+4_;;%KA���J��"#4'&#"3"3273#"'&547&'&547632632#"'&54767327654'&3D* V>"(qNWW\E]*1@,D. W)4jQ4xw=#66O]! I1L2 40)7FV9+A0G (!_+W"^^\5I _:<6@ 9">).H40���,��4'&#!5!#"'767327654'&+5327696^ &DHEa F"3U2->!!F G' ;; 22B;&$92-N2:0 ��� o ��'�+�A��74767#5!#"'#"'&%#"'&547632#73727654'&'&#"253 ?v,]N / )v0W3!"/    D#h286AN;,5WDh^';;Ci,+E+==(&   Vrc3X69L9B'GVV��  ��,��73253327654'&#"%#"'#"'&547#5K) WDW' A5IO96 IO4% \0W3!"vvAVV/cA6ID;?x%'D->=(&@N;�� o ��,�0��7253327674'&'&#"%#"'#"'&547#5!3#WDW $4MV9'/ )v0W3!"llT?Q#DDVV*:(9O5C]HE+==(&@H;;Ls"r��� �-��7476323254'&'#5!#"'&'&'&#"& 8,4. -M+-C%U-B%2?, "> = 6)!L(t9>D;Y/I%l2I5?%):����!��#"'&54767#5"3254'&k, 99ZZ9:+]M'++;9"'4O"f?@B@c+06;KC'2I..V,�� '��,�H�V��%'&'#&'&7476323&5432'27654'&#"4'!5&'&'767676%3254'&#"&(H@!(WQ' >SS[{$   !# ) /&/;(M;(#A ?  97.U^qj>MY<Ay y%#   4HT.? ;/SA3)cu92$4��� S�*��4'&'3#"'&54763'654#"3276M2^OwoU_01A@ #4/CX9Oc@<�d36QAE:AJvS;:&8Q*h6#;7��� ?a�T�`��327#"/676323#"'&54767"'&547632#"'53254/"3254'&#"3254'&'y5 *?W" h%.6#@#b04&.Y>   4 !%- <>=  <>" 2\)K *.'#H+<?+ 7= 3*[dJ?9& ��@ �� ��%27654'&#"2#"'&5476/T3%K*7I4/C18xE! gfEDJF75&3R'/,4A,!XG",Ur99UU<9���O���"&'&547632'654'&/L0 &3# =@caB<CFF>-D/98EL:8"Q_@ELGQ[XrZ2���@ ���3&5432#!5!254'&#"8 xm+~*6'CT 9Osr8J+FB11��O �)�4��7"'&5432654'&#"'6323653#"'&5'"3254'&E"x4=-)$F|E4M? ;&(+,) %X'X-V465= TcJ2 I 2 $$��� !��:��%274#""'&54767&'&5432#7&5#"367654'&'3.34*8"  Z7(yH(UO:<)CD/38831& 6&.k  . 5%A&7?4"C ���@� �F�P��72765"2#654''&'&547674'&#"#47630767'476"6767&4> + EKDU#'-&H-::A"4)", D6(#-)  "''12:4T8!. 4 5-#&6--,FO.6H2 +##���@��+��73!!"'&547'72#"'&'74'&#"3276=_/gE u0 >9"2K4$! 3FB&4m@rx7#/E ��` ���"#4323!!"54?654( H|C":j83%ۛ;l;d,!;0E&& 9p;*;!%3��@�/��476;#"#"'&547632'4'&#"327654'&b+U-L44CA[8"!3F= 3 I+'+,q0 8 A>(L68f5JA&'8 !B("0!63��P��/��%4#"32'2#"'327"'&547&54763!!"6B=O*K4A 3:@ @!(e<>##M=A@4o,+ %89-,C8)JI8<!��<�h�� ��2#"'&547627654/&#"U3$10FR4&=.;A%33%&2@-;F24?/=Q3%5 )?# #"3A%����2� ���0�@��72#"/4764'&#"3276#"'&'45476324'&#"3276i:(* +j((% +.+<4),.)H6b+ +$"7 9.3- (�� {l�F�V�g��#"/27"'5#"'&54763224/"#"'&5476726767327&#%27654'&5747{,%?&8 [xXavLl :*'$" A!'*0f 6C7G "T-s! /4 *"(;@kA+&$$ 8( N/* &Z<0I0." 2/,<$��$c����#&/"3767654'&'&/&'&'53237676767654/&'&/"32?"'&547632#"'&5476767633#"'&'&5476324'&#"3276  2  ?l- Xc)1C N !%R.h.$B'?#Z!L 3.$-Z"a*BGd!I '3"V(>%&9:%-4 G )    '5")\@A# e5  4"-O E'L1 2E  %:H2D"A ,J'0'% HF0!,���j�� �W�z����47632#"'&74'&#"3276476?676?676?2322#'"'&'&'&7276767676754'&'&+"#"'&5476724'&#"3276[&1'+    # By EQ#  .DxX  $A*)(  3a:JL<.b&G3V@>;(3;k^;'  '+ 1   # / ) , ' $  T [-O$ &1!0 9  o1*>l!& C05.? F03  ,:5*h, ')  $  ��� [�P��"'&/6732#'"3276767674'7#"'$476767676374'&/"+ c3'(4[0< -,X.3-!AT a1<hR(MG�%:)7Q.%.*9 !I'9 82}Wa) & $,Da:LUj)XND:P(  /��%'�R�_��47&/#"'&54767#"54763!4'&/"#"'&/47632'"327654'&'#"'&'&327&'&'0UF0G=Nar_B !4" =LH75 c6W='>Q* L*,),8 )E6@ :&_6D1B>Hm<  # '*'C[Y?`=$'"Y -&T , #+.�� ��:�����"32?4'&4'&#";27676765276767#"'&'&'#"'&5476?2327654'&'#"'&547632#"'&5476654='4'&'&'&'&'&""'6;2'" 8 44E="  "'D #+ ( 5" . 1km;*W#". n" !<3H5+J-8h7# (!S:,1 A3vx&S6#6E !)(  ! +  J3RC./Fa- %&! ArRo> 2 &> P !"*4 3*4G&7"1"\". U!"+  A< =T\T0PB��#��Y� ���%27654'&/0;6767657"/#"'&'&#"#'&'6767674'&'&#"#"'&5'4763267632+"/3276767654'&#"2Cu:/7H*76E1 5 B#5V. ,*#  HX*:  '=#33D 8 2(?9k ,-,' #7! NMoA6IPXE"*N3 /5E`, . -F&r3#2"3\,,5^/  B46 #&$S4A\6A"!C )IpTS(-.3�����:��\���%4'&#"32767#"'&5476323767676767#"#"''?67654'&#"6767632%654='4'&'&'&'&'&""'6;2'�&&2# (\,BBf@) &#,+70 ', ( `*(Y@K A  2}a5  '  (!S:,1 A3vx&S6#6E !)( e+ .%3d;MgQPS6M.12$  / )Jl_:@AC ))U5 ,/m"\". U!"+  A< =T\T0PB��?�\�o��47632&'#;676765&'&'476767632#"/72372767674'&'&'&#"672#"#'&'&'&'&?]Fk& (I4< *(&S-I& "4G9wNE*68M(!/ %9 Q!4]2I) 0Gz fB6 ,R>  `)7P3  'J  (*)%ZPp4 +#G&$  @iM'K, C- < #*?1BH6���:��"�b���"327654'&76367674/"27"32?67673276767#"'"#"'&'454767#"'&54763654='4'&'&'&'&'&""'6;2'_  #  < |Dk["H),9'W(+ "#(B#$) ( 2/hkJ2dT804 $gk(g (!S:,1 A3vx&S6#6E !)(    +!   I%%9P  $!%  F`Y_ZG@O T5 %I "\". U!"+  A< =T\T0PB��#� :�T�~��3276?67676731#"'&'&'&/47676767'&5474'&#"1"'&547672#"%&'4'&'&'&'&'&""'6;2^#1D &C / 'hFd8.390,. !Y(3 !  /"6)GI(B"r (!S:,1 A3vx&S6#6E +"Fq-  &F! (5UD+ 211>#  * %!*)V& U!"+  A< *W!_��� ��g%���%���"32?4'&2674'"322'476727"'&5476?634'&'"#'&'47632&+" 54/&'"#"'&'#47676767476n8+= * ]5 '% W$ $=y;: bTUuU"8Y2 /! @$&0!(  ]2%?bi>A# FD=|, " C !0/ !!W' #9 !@-)KqG3KT[, 6  #% .'2+k"yP @80-85 1* ��� ��K"� ���274'&#672#"'&'&54732#"'&5476?63&'"#'&'47632&+"27654'&/476?6?672n0 5 )E/1#  A;!!B{puU"8YP/! @$&0! ]2%?bn.';? :D,+4",  "  %( ) 1+,+~NFKT[, K  #% %5 2+k"y1']3~ ���0a�!����%27654'&'&#"67227676767267672672&#"72?#"'&5476763?&/&#"#"'&'&5&#"2#"'&5#"'&'&#'67674'&'#"'&547667677276?"'&'&5476B#]4*!tW  = @#- O\.GSVOa?33+-dJ64 6I^;# M<ISjEEZ%_*:"'3$*R QX30_# !3 09.#:a1K   ":-Tm# H<  >;" -!Y:  ['% =&% F !"< >*#(*)  8Eaj96 B <J9pdA& $$0!-% h4;   7 %%P6*`D.  (*3 (' ���&0a�����4'&/"4?6767676%2&#"72?#"'&5476763672&/&#"#"'&#"#"'&547632;27654'&#"47632667677276?"'&'&5476I!G,/ I .WI +)*( U*< 6I^;# M<ISjCDZ&d%2:3$*R0#^KDEmcRlXZ28WzB  7*O]@4-%ICdN>4cm# H<  >;" A>W:)1/, "<   :*#(*)  8Eao78  B <* <:O GjB7Z\{p[eP.!E/6/&5" WO $WD.  (*3 (' ��+��:�1�a��!276767673"#"'&=747676;&#"%654'4'&'&'&/&'&'&""'6;2\ Q:&0'# / ' shj .^(/;0!s  $*:,1 A3vx&S6#5G $ : $/3-$D@s8CcBk   !%) /.   A= !;H@(�����*�X�i��7"'&/476767"3276765327676=&'#"'&'&547&'&/#"'&'3276767&'&'lA [(2&#*!2AR,B;  $!#S1 5*#)$."' "x30K-, 7$6*%(6a8"$D| m5C*yH  1<IT1> *@ $ :!*9!$VA 81;B*DRR_P$43 FMHV>�����:�M���%#"'&54767#5!4'&'&'&#"#"'&547632'"2765;7276767#"'&%654='4'&'&'&'&'&""'6;2'@+0S9:0HF !$  H3 | 5 8B#$) (88,<G0$D (!S:,1 A3vx&S6#6E !)( s7$HI_;%""/%$ 9%<'W 2Fvj "+ "\". U!"+  A< =T\T0PB�����*�q���%276?65276=&'#"'&'&547&'&/#"'&'#"/&5476?#"543!4'&#""'&'47672"3276767&'&'C   # !#  5*#)$."' "x30K-, 1%$(]% +*J7(n U6)2' 97D .7 \(8"$D|  ( < $VA 81;B*DRR_P%6( =+0$$ AU% ! C $3 #,W!HV>��2�~������%#"'&57#"'&/&'"'#"&'676?'4747632%67632632#"'&5732765'54'&'&/"4'&'&#"6324'&#"3276%47632#'&'&'&'232767654'&'&'&74'&'&#"32767&'"0 ;"!!5BZE:'?3"  G[F?^:?C.[~68;&`/ $D;(*2!H  =  96 1+ $->$,**" 4#71-#2G61L7 3E#." #!"?2\p08,# b&!((J; , 61O60!) 70 &T #;.q@ O&6l ;Z! F !"*)2!1"- - - 39#/OF2*;%%%E  $ %! ?!.)��!��R�f�}��"#"'&5476763267672322+"/3276767654'&'&'&#"2#"'&/&''676?674'&2327654'&/"!3"+Q+ /59A,!% 4OA #:$'V%&(0B)Bs)$9EpeN:?T > !!*!3q-, GT. D 071<0>$*{B;9._9A-  !2*@TN`; 2* jIY#0\, Av+��%'�:�G��47'&'#"'&54767632&'"327654'&'#"'&'&327&'&'0 UF0G=Nar.80(r)Y]W='>Q* L*,),8 )E6@ :&_6D1B>Ho4?g-<D)Y?`=$'"Y -&T , #+.���0M_�F�h��72?#"'&5476;72&'&'&#"#"'&'&56?2&'&#'&67677276?"'&'&5476m# 6I^;# M<ISjBV/P3*R (*2@25(E  6m# H<  >;"  / (*)  8Eam9G B< !;*  D.  (*3 (' ��� ��:�5�g��727673276767#"'&/#"'&547637#"%654='4'&'&'&'&'&""'6;2'k? ""$B#$) ) /e%!"'$W88P5]"-$ :( (!S:,1 A3vx&S6#6E !)( I .F 0^2Y $3JJ`@)y$,O0!d"\". U!"+  A< =T\T0PB����W�t���7676?6765'&#"#"/4767676;6767672"'7;6767674'&#"72#"'&'&'&'327676765&'&'x7   +# -0 1  * $A"J_]x2  L - 4QU$I"@I$  ? M G8" / 5*^6#J ]/F Q~@-39L%8   -17'21 -<s=7yA  0 !.7~QU $17 &2' 1jn' ("]"���Fl�-�N�v��2&'"3?#&'&/&'&54767676"'&'&'676332654'&'&'"67673276?274?"'&'&7476WYD0 ;</)8`(ZV9;KQS (\D  9*#ds'+&F L& !k5 #V $  DD( l//  0XJ0G   084\S= K-! C7;t.J/  0 % -, �� ��:i�R�a��476?634'&'"#'&'47632&+"27654'&/47676;2#"'&"?2?4'&'& U"8Y2 /! @$&0!(  ]2%?bn.';:[ '/b{puNK4 d`,  %([, 6  #% .'2+k"y1' $R (-#~~NFKTI ��%'�O�\��47&/#"'&547676724'&/"#"'&/47632'"327654'&'#"'&'&327&'&'0UF0G=Ndr % !4" =LH75 c6W='>Q* L*,),8 )E6@ :&_6D1BCKz3  # '*'C[Y?`=$'"Y -&T , #+.��� :��d���%4'&#"32767+'3767676767#"'&'&'&'57727654'&#"47632#"'&'&'456767632654='4'&'&'&'&'&""'6;2' #"#M .,2:.- ( " GbD%%' 7?(RC@B'8 .'2/ B^mIA (!S:,1 A3vx&S6#6E !)( a$ # !_ =W(: X ,' 80 #"G1 +4 !?It??C;m"\". U!"+  A< =T\T0PB�����s^�b��#"'7127654'&'&/"#"'&547#"'47!4'0'&'&##"'&547632"327654#47632s!'%G"#N/"-#.!V1!..o)3hNPbP 2  " .?'---/GDdb6"\4?k3#, " K6EN6- 3"/ %\j-NObx;  %.499F3$%+&=kUh9�����6�����4'&#"37676"'&'47632#"'&5676?4'&#"327676?671"#"'&'&'4767632327654'34'4'&'&'&'&'&""'6;2( " (K9I#%K  3(B]?/  _SSQ:&0' 3 ' sWpx 4("R#*o0G  (!S:,1 A3vx&S6#6E +"32( ' X7d ;))+%,  ,5, ?-( $B! D@sCHS8DjN'  ? <(+> )*[ U!"+  A< *W!D0����:�����4'&#"327637676767"#"'&54?674##"#"'&54763232765&/#"'&547632#"'&/67654'&'&#"327654'&5476?227654='4'&'&'&'&'&""'6;2'! * %?!- ( 5)() 0'($8'./7s9&D/G0&UN)+7 O8)G,61/0  a ?.'"# - 1% (!S:,1 A3vx&S6#6E !)( " 0'# Ga)$$4  4"$yPnN7)9 T(2 4 +<!2%+I(%&5  6DT(   #   r"\". U!"+  A< =T\T0PB��,�=a�b�n��261&";6127676?33676?4'&'&/&'&+567632"'&/&''"'&5476%"32674'&5- -l9?16K! 1 .-5Z!) # B7;\#&.E/21) "87=m"B � $37G518 *;# +C)*  #4("63  E=3%F'%$(1eFL<a &<��i�3�W��7&'&'4?676?676?2322#'&'72767676574/&'&'#"H  EQ#  .DxX  8TC2 -A )DC`6^,H'p, (&?%*-&- "JJ"&"W[-O$ &1!0()T*+hF6 a *'7l4 6&%!��bT�^��#&'&'&547'"'672'254'&#"3276767674'&'7#'&'&'&'&567676767632GL x>,&=;vI816D./26+* (5  1R,&!_,<-P $N*&6H:;} &   $# [X!"s 7fV,.JA *)#> OG-*7!/R:<La">5 )'��*��:�O�|��32767676731"#"'&=676767676374'&#"1"'&547672#"%&547'4'&'&'&'&'&""'6;2\ Q:== / ' shj 21&z3 !  /"6)GI(=x (!S:,1 A3vx&S6#6E !):2$@! D@s8CcG5* %!* .2  U!"+  A< =T\��mX��z��%67&#732"2+&'&/&'&547676?632&'"32?4'&/47632&'&#"&'&54767632674'&'&�#5 =0(%4@>P? %5151*B<3J, >P/Q'' "(?Hi? R '% = .'(98'=50  S3I)+  /44DI344 # <PZ8"P#^Ze;Q%AD (=, '  !"C3/��5�Oh��$���"3727654'&'򻚺/&#"32%2#"136167654'#"'&5476;7&#'4767632# '&547634#""'&547676EC.")=& 7))r (6c/c7&[$ 8@b*LJװ !E"$_& % " RqJ^@X`e7"=[(   i , !&>#1 E% H#L,# --/9-)6 H $?#:4Dj7&W$ '���/��Bh�h�z��4'&#'47676322#"'&/#"'&54767#&547!4#""'&54767632#";276767653276'67674/&#"32;#-F"#_& ( !"I<Xo+Q"p?.(I =e7"=X3$'(334V%! ")& G*=& 7))r (!R*-)7 H '9C2rH<V"J\C]b. W$ '7&3 %-D3-+) . $  R!, !&��|]�v��%"'&'&'476763&'&+"&'&547632&+327654'&'0567676?2"/7232767674'&##E E<=$(9 )  7((d' 1 `%7\$- B7;- AKG@ P)B764( Y77O7 \6$REl"$ @5(# $ @8  &c  %>_)#; E"'5<  %*$$? _# 3gkSQL1)3M4,���0f�]�u��2/"#32767/47#'"'&'4'327654'&/473#"'&5476?676"'&'767324/&#"Ę4 i$!o3 HJXWA? H]hFW    (eOvu I`, O"df[+'  f> )1 A ' P00GEg b 7/oSg=I  0/  2'kkB -Ee L /��(��{R�J��2+/527676754'&##4/&'&#"767"/&'&547632676r> D)4-44!#./<4&'&/3O> "(7$(,I7 CIm=0jOz.9+-M,   &/EM>? ,\ $3> #1: @xX^{e���$�-��45&'&#'&5476332632#"'&1367&'"z   '>(  !&(`  ;4 /23����P]�:��47632'&'&'&'&'5327676?4'4'&'&#"3#, s  *F%    8% >'qB+6&    '21*���~�"��!37#&'&'&54?67#'&7076# 9T 7*#D&U)W&/-#%J:xAL49 ���6��"'&'&'&5476767#57'&'&'4?732?3.X(S J!B\_^+5$ ) E  48$+*(K#* h t'219a+  ! ��,��4'&/&#'""/&54767632#"#'7276 !|~3" 2 6)$WoI*`<"-2 ?&  4# "+ 0(Q""#/ ���;��"767654'&#"'&547&/#""/&5476723322$)   F- "#V2E0.2 6):/: W-%Mu*  !$<0 ".  # "+N'2�(�#��;27632;7!"'&54763/"E)T*!C!"9!=% : 7")%H9#)E  % (��+��3276327&'&#"#"'&547632&#" 6BNQ@';/' VW&37+N. ;++' 0%u8 %$  B %1"/) ��� oZ�4�E��2674'&'&#"'6767632'&#"&'&54767667&'&#6720G&D1 7*+(3 4)*-! <|3TA)P+.A-W 6@ t7t <$505Wn>'0*#��!��in�A�R��47632#"'&'&547632'&#"327654/&'&##&'&74'&#"3276D*4d61XSs~Y'a`Y:B3)qSR[CZj>, $ %0_ /$00 [I)&4MiEA\)23A^`"  RTj_8):*:W!1:D&0 4/���*BY�O��27654'&'47632#"/&'72767654/&#"#"'&5476372#'"9)D ]XXBDZF+ !, E!* .K-0$   *\'\ RRmbb<  3 5/  P+<'3D&   @"�G&h:���0g��@�:��G'�C��&:���0G'�C��g9��@�:��G'�v��&:���0G'�v��g9��@�:��G'�r�&m:���0'�r�g��@�:����&�����gK��@���!��&�C'�����&�Cf �@���?��&�v' ������&�vfV�@�����&'q����&g�q�@���&V>���'wg��@�>�� '�C��&>���''�C��g&��@�>�� &�v~&>���''�v��g&��@�>��v��f'@����P��fg���@���s��f'�C-�'=���C��f'�C-�f�@���s��f'�v�'=���C��f'�v�f�@���J&r @���Jg��@�@��J'�C�� & @���J'�C�� g1� �@�@��J'�v�� & @���J'�v��g.��@�@��J'�j�&e @���J'�|�g� �@�@��g��q'1�!���A��qg���@�!��d��q'�C�'.�!��4��q'�C�g{��@�!��d��q'�v�'.�!��4��q'�v�g{��@�!����q'�'q!����q'�g�q�@�!��&B���8g��@�B��m&�C''7�B���8S&�C,g���@�B��m&�v'7�B���8S&�vg���@�B��'�&B��'�g ��@�B��k���'5�#���E��Vg���@�#��h���'�C"�'2�#��8���'�C"�g��@�#��h���'�v�'2�#��8���'�v�g��@�#�����'�'q#�����'�g�q�@�#��&hH���"g��@�H��'�C��&H���"'�C��g9��@�H��'�v��&H���"'�v��g9��@�H��'g�)���2g���@�)��'�Ci'y)��s'�C]f�@�)��'�v_')��'�vJ�f�@�)��&WN���(yg��@�N�� '�C��&N���('�C��g(��@�N�� '�v��&N���('�v��g(��@�N��'�a�&\N���(t'�a�g��@�N���fU�@�.��'�C�gH��@�.��'�v�gH��@�.��'�gq�@�.��'��R���$g��@�R��{'�C5�&ER���$'�C:�g��@�R��{'�v��&ER���$'�v��g��@�R���'��'��R���$'��g��@�R��'h2���*g���@�2��'�C[�'k�2��q'�C[�f�@�2��'�vl'2��'�vNf�@�2��C'�'q2��'�!g�`z�@�2���0G'�C��:���0G&�vO:���''�C��>���'&�v=>���J'�C��@���J&�vb@��&�CB��&�vB���"'�C��H���"&�vOH���('�C��N���(&�v>N���$'�C��R���$'�v��R��G&r&h:���0&rg��@�:��G&r'�C��&:���0G&r'�C��g9��@�:��G&r'�v��&:���0G&r'�v��g9��@�:��G&r'�r�&m:���0&r'�r�g��@�:��Y'<�&���Y'<�gK��@���!Y'<�&�C'���Y'<�&�Cf �@���?Y'<�&�v' ����Y'<�&�vfV�@���Y'<�&'q��Y'<�&g�q�@���&&r @���&g��@�@��&'�C�� & @���&'�C�� g1� �@�@��&'�v�� & @���&'�v��g.��@�@��&'�j�&e @���&'�|�g� �@�@��gA'$�'1�!���AA'$�g���@�!��dA'$�'�C�'.�!��4A'$�'�C�g{��@�!��dA'$�'�v�'.�!��4A'$�'�v�g{��@�!��A'$�'�'q!��A'$�'�g�q�@�!�� '��'��R���$ '��g��@�R��{ '��'�C5�&ER���$ '��'�C:�g��@�R��{ '��'�v��&ER���$ '��'�v��g��@�R��� '��'��'��R���$ '��'��g��@�R��'{�'h2���*'{�g���@�2��'{�'�C[�'k�2��q'{�'�C[�f�@�2��'{�'�vl'2��'{�'�vNf�@�2��C'{�'�'q2��'{�'�!g�`z�@�2���0G&n:���0G&�qo:���0G&i'�C��:���0G&i:���0G&�vO&:��i�0G&r:���0G&i&r:�����'�������g'�q�������&�C�����&�v���Y'<���X�5S�u������6G��cl�^��d@o'���j���&'�C��@���&@���&�vb&@���J&m@���\h'KY&m@��C��f'�C-���C��f'�v���4��q'�C�!��4��q'�v�!���AA'$�!��6G'�C�����6G'�v�����6GDt'����&B��&�qB��z'�C�&�jB��h'�v�&�jB��&B��t'�&�jB���� '�#�����g'�q�#��8���'�C"�#��8���'�v�#��G'�C���GM���@�G'�v���GM���@�� Gt'��GM���@��(&]N���(&�q^N���(z'�C��&�j`N���(k'�v�R�&�jLN��8&}J���98g��@�J���(&aN���(v'�c�&�j`N���'��.���g'�q��.��'�C�.��'�v�.���Npg���@�+���d('�C�$��j���d3z'�v���j���P��C���$ '��'�C��R���$ '��R���$ '�v��&R�����$'�R���$ '��'�R��y'�Cc)��'�v\)��w'�Ca2��'�vB2���*'{�2���\P-�v��GGM���@���.�8���#58HH���18���!518HH��8���!58HH��A�� ��#547673]L 00en&M��@�� ��35675#@]Q-0er&B���@��h� ��73#56745#A]T00het&F���@�� ��#&'&=0&R h(-&d e��0+� ���#547673#547673]L 00]L 00en&Mhen&M���1.� ���35675#735675#1]Q-0]Q-0er&Bher&B���/,�h� ���735675#735675#/]Q-0]Q-0her&Bher&B��1.� ���#&'&=3#&'&=0&R 0&R h(-&d eh(-&d e��&O� ��###5353XXRUR���&O���#3##5#53#5353XXRRR3R���2�,���2#"'&5476B%5!'@&4!6 )?%4!(@&��F�,���0F}|���s��u�h��� ��7#5!#5!#5hhhhhhhhhh��� ���#�3�C�S�c��2#"'&5476"327654'&%3#2#"'&5476"327654'&%2#"'&5476"327654'&L,;(2K-;(21+1,4BuBL,;(2K-;(21+2,NL,;(2K-;(21+2,<)3H.<(3J-<*2*4 F +<)3H.<(3J-<*2+4 <<)3H.<(3J-<*2+4 �� � I���/�@�P�`�d�t���2#"'&5476"327654'&%2#"'&5476"327654/&2#"'&5476"327654'&%3#2#"'&5476"327654'&KL,;(2K-;(21+2,NL,;(2K-;(21+2, L,;(2K-;(21+1,4BuBL,;(2K-;(21+2,<)3H.<(3J-<*2+4 <<)3H.<(3J-<*2+4 <)3H.<(3J-<*2*4 F +<)3H.<(3J-<*2+4 ���1����'7U8U$$(vx���1�� ��'7%'7U8U$$ U8U$$(vxw(vx��1�� ���'7''7%'7`U8U$$U8U$$U8U$$(vxw(vxw(vx���1����/7%%U7wxv���1�� ��//Y7%%U7~7%%U7wxv(wxv���1�� ���/%/%/Y8$$U8(8$$U88$$U8wxv(wxv(wxv��[�j����757[jjYzSSSS��U�j����57'5ll=YzSSSS���b�D ���.�<�H��47632#"'&72#"'&576#&'&547632"/4763'7'77'b        ݼ        ���|���� ����#'#5#'#5'STj'STRhhqRhh���M���� �(��%#5#47632#547'7674'&JZ= U~83? Z ZJ> hhh'F1 S$+F;:/7!S BBG�RP���3#:<:'�M��)'�",���"����M���� �/�3��#'#5%#5476767674/&#"#47632#5'STZ#J=RU~83? ZRhh_72%!BBF :"@S$+F;:hh���|���� �.�2��#'#5%#5476767674'&#"#47632#5'STZ#J=%RU~83? ZRhh_72%!BBF:"@S$+F;:hh���0O ���32####0gB7F 0M@R@9QC\kD (LJJ��E� ���2#"'&5476"327654o,&C[ZR ߸w6//���8������735##5>>>>I:j��Q� � ��#533##=м.CC>; 5d�� F�"��#632#"'&'3327654'&#"#7.&.W( D&3R* 8JI:.!4"4w@V*3/G<H#���?��*��"547672#&'"632'"327654'&*/KV 8:R&CQ&?&.?-8 7p;;H<o/= *O)18 /D��G� ��#6767#5G&=#K/,v1?4���I��*�:��#"'&547&'&547632'"327654'&"327654'&NB%2Z*N4<"+S%#f<.91@3D2"HJ$=(G"" @ 7 -, /) 2/716��F��-��2"#"'&'32765#"'&5476"327654'&*&IU!9:O)?R&?&/85< /n=7F<i/=!)O).0 C/: ��*E����=8���{���8F��t���*B��u���8Q����)F����*?����8G����*I����*F�����[|�0�H�U�a��#&#"#"'&53327654/&'&547632%#327#"'&5#5353#!2#'327654/&+gXfRBPvZ4JX!GT 6NwT1D# 2V 'Y GGSu]-/?:Sf O"zT1-F`, /#/.3+]*eqD&FC Dv)7a94RJZ��]�0�N�Y��#&#"#"'&53327654/&'&547632#!2#&574'&#'327654'&+XfRBPvZ4JX!GT 6NwT1D# 2]P) H> qPy& IzT1-F`, /#/.3+]*eax!*b3 (%V` 0GAmRVB ��<��X��$��%3336767676#&/!#!2W^#)W1  W2Wl< +:V'w L'W!���/��547#7367632&/"!!3#32767#"'&'&'#7OO?3Fb^ U9k, &6FMYkB ,S9;_KeCP?;;& ]/GHf;��!����%#"'&54?#"#"'&547672#"'32767+"576?#"'&547654#"+"5476323276?632367632327676;2"6767654JHh L@<.yLoUD\ &!  Pd+HJ VJ3.9  %;  R=:  A?䀦~73G1UIc9>W QR 0g U TkYlC4.&" 1 >YiyW"P  v(  /=@6FyfE3t] D+-���P���#&#&36767632#"'76=4'&'3767#"'&/476767676767454'&'&'"'&'7632?67654'&'&'&54767676767236[&" "%8&!# Z* W,7 *( $&,  O.  -B!$$( 3.9 C  %%%  )/  @(;o!$!!MY,7 "2)7 :2 , $o+J%((9-N0+ NG -3<3 /. ���:� �W��76767%4732#"'&547672#"'23276?&'454767676763267654>~K{6<K$+Q B~bR` &!  c Vp/%W5?I1\+Q9/U< iS31MTU  <3<"gC4-%" 4o-5NALY.) a*b)E9@���u�5���#"'&/&'&#"&/5&'&/67676?2767/7&547636767654'&'&'&547676?#4'&#"#"'&'&'&##' &2))  00;  Y+/"   O ,++ <8-  =2 , F-. %\1 4';@'G & [/ / ' +'' B 6I<-(3;' C* VY&'���  �V�b�j��2#"3277632327676;2"'&'+"547672;26?#"'&54767627&#"2"6765&;!EN'%T(3n!Q.bd=dnGEL$ 7\-'Sj fR !\ EWP:V 8(5]2:H@>DL&U/;#3+B ;A6B#U=8N.,2& .:Rz=$/9L)F-$%xC.0��L�����$�.��#52#"'&5476"327654'&'##3uJ- <#H. <(43,7,iXe}HHX;)3L-;)4J.9+3.4'OT�w� ����267654'327676;2#"'&'&54?6765##"'&547672#"'3276?4767&#"3276?6=472#"'&'&5476763276321#6dQ6+jf! ")4* 9Q#4Q.""JGuZI_ #!  SXv[ <{mrs?7B%#OG 'C,&G8@}qJ/$!((S "K7"m F86'R $*=O2 & q?neA2*""  . !% f,<<YO4 62d(2e7$6  ?NZCA/$/387) +0i(��o����376?5&'&'&'&=4767676326767676321176761&'&5'&/#'&/&#"'&'47654'36767327676?&'&'&#"#&'&5%765/&'&#"',1  8 *  ,'2  02  c6    K&-=     '-  % C"*>9.#7- Wa  #  D4 $  @ O* 1% 7+   J  <y=Q@#  "#8&2u?;-A&' #)>;n8 G  9��?$����##5!##33#Dw6FyC^[C~77UjKU��*2����*���(��%27654'&'5!##"'&54767#5!pD./.\%%n[Q)%[" L?LjIc^PL&PLM',[NQfsf\JD8LP;+0QD���t���1&'&5476767'"/&#"654'&'&'"3"'&5476763233767367654'&/&#"#4767675&/6733276767654'&#"E  T.6*_= !M G GA    $ "5 ,; K &#-=J *#9R)#E73FS;(  !"[- H%.*#I# 0U/'= )&!7 - S3.$,W*6C-  2AA1,6%0 �O���.����������"�����32767676=472#"'&'&547676327632#"'&54767632#"32767654'#"'#"'&547672#"'327676767&#"267654'60327&#"K(.' H  8(O2,K7@xoI45m8VOW?! M *++.)3*.3%D5FHvZIb &!  ] WtPRU?yjsr<6'-)%M  $/dA.f*  MN8"9 <NZ@;*!,9VX ">STN/ (/. * '%?G6+%bfB3-""  2#)XY?':9VL" #;5-(O��X�{���7&'&'47327675&'&5&767632361677'#"'?654'7276767#"/&#"#"'&'&5476??6545&'&'&5476767&'&'"  ) '# ] ^"&0%  hs!$ >!.&&, V&LM  88. )'#  " ; `]    &k9?/  60!v   H/ C>, Y'( -'( "'")V'"*  8~<\���-�x���47632#"32767654'"#"632#"'32767654'"#"#"567632#"'&5476767&54767632#"'&274'&#"3*& &&-$*r+0()85(?%8&>\584$T,+  7-+g -[>8,37j]T\ a! 6113 R"/.&3" 0 &"F!;P-   "9Y<L!5$4:+/ E9-4 "?'H'CGK'#XRI 5 984$ y �,�!�+��#"'732767#53767632&#"#!!!~K.:M$ENq}-3@#, G G^u2[Fsg/7 TaFhP,0O~FRR��Z��C� ��3!5!5!5]L'RR���~��73676767676767631326?63327676;2#"'4'&5476767#"=676767#"'&54763632#"'| KVfJ< u4 C v)a9,6 #78* +A@,: -$zuG--1!,Bw] =" ^}%S}|6H8 @O:b>M7 )*;>./8 @?3iW9JG/9)xC ! $ �=['�u'm���{���['�u&�t�m���=_'&�{��m���_'&�t��m���_'&�u��m���_'&��m���=X'&�{��m���X'&��m���=b'&�{��m���b'&�u��m���b'&��m���b&��'m���=&�{��m���d����,���d��'�,���,���d��'�,,��'�,���,���d��'�9���,������9�����]'�,���9�����s'�,��'�,���9�����'�,��'�,��'�,���9���d��'�;���,������;�����]'�,���;�����s'�,��'�,���;���P���/���0�&���Y���'���K���0���B����L���B��t'�L����L���B��R'�L��'�L����L���B��'�Y����L��� �� �Y��� ��'�L���Y��� ��h'�L��'�L���Y��� ��F'�L��'�L��'�L���Y���B��'�[����L����� �[�����'�L���[�����h'�L��'�L���[���D����O����F����G���F���P���� � ��!&'672y#dd#y281#ww#1��-��;� ��!#'67&'P81#ww#12y#dd#y2��1� ��75!&'7'6712y#dd#y281#ww#1��-;x� ��367&'781#ww#1x2y#dd#y2����#��!&'&'7'6767!&'&'6767X.%pD %li$%E:X.%%pD %li%E:\> A!`}* `?\>3 A!`}$ `?���$��%'6767&'&'6767&'&'7\>3 A!`}$ `?\> A!`}$ `?]X.%%pD %li%E:BX.%pD %li%E:��Zu���3!'7!#7[nuTpoT�����!!!&'&'6767QQHM)\^&E)M~5PP5b!rZ$zP$!b��'�7���'6767'#'#H!rZ$zP$!b5PP5m)\^&E)MHQQ���-���'7!5!7'!5!'7)MHQQM)\^&E!b5PP5b!rZ$zP���,<z���&'&'7373!rZ$zP$!b5PP5)\^&E)MQQH������!'7'7!&'&'6767!7'!8L(nD*oR&(LL(nD*oR&(xTToT}_"A'e`-"__"A'e`-"VVV���G�$��@����$��#�3��#4'&'&'&#"'632#"'&5476"327654'&%P(;P.<EuA9f8O<!i7M]&N)Z'R=Zwn?$_36M4A[G'wC_F%M\0@0X/B.���Z��T� ��!5!5!5!!5!cdLRR'R��+�����3#2#"'&547672"32765u;; *4+ E6_vEBT]GN.9��� ������33 ! &d)'h� ��GR��@����-�����!;#"'&476;#"l(1@qJ$$Jq@1(6F%.6j22j6.%F��,+��&�*��#;#"''7&'&547676;73#7#"37#P!)-,,62at1.#DcW]:4*]@ 6 6MN3*-48*aW>6;/1qG���i=���!#!#idvvd7��i=GV��@����)=� ��!! !!5 8o%Mug`_Jm��(�  ���!5  FF��2o� ���%##5#53533!5!FFFF���@�(�r��7&'567654'#'&54?67'&'&'&'&'&547632?&'&'&5471676767632'"/&/   -&  `#-)  $  $ & >0 `  +  '$0     ,  ! 3"    1&,������� '7$^P.!It����{�7�J��&#"32?#"'&/#"'&'47676326767632&#32767'&z&%- 7 * %7.-,'.B I*0%/!&(/O# *, +/E0t& ,$"$&8! ;#*<' #)E ?  20B*���|�'�<�P��6767632#"'&/'&'&54767632&'&'&#"32767676767'&'&#"eG! .%43"(VP0?I@":#).5 M$/ /& g<3 +&G)@ %=>%P.5 >!$B% . 3@ 3  ! $: *0;�������!!) Z%7�����G���!# #GAA^����B���7,,w@���(�����!#54'&#"#547676327[WqqW[7]_ famOLLOm}`c_[{ ���(���3#"'&'&=3327657]AZ02fa7[WqqW[}`D_[{ mOLLOm���d ���47632&#"#"'732'4Q! D%%D ^!SO7GS  h88V��d ��7��47632&#"#"'732'47632&#"#"'732'4Q! D%%D ^'4Q! D%%D ^!SO7GS  h88VSO7GS  h88V���d V��7�S��47632&#"#"'732'47632&#"#"'732'47632&#"#"'732v'4Q! D%%D ^'4Q! D%%D ^'4Q! D%%D ^!SO7GS  h88VSO7GS  h88VSO7GS  h88V���d ���47632&#"#"'732'4Q! D%%D ^!SO7GS  h88V�������/��747632#"'&%47632#"'&47632#"'&$ ($ ($ ($ '$ ($ (A($ ($ ($ ("l($ ($ ����3� ��#"/&#"'676727676%"%,K B)")&B%O ( 3  %!%  !��K ���3#"/&#"#6763232759'*b5T u,U ?# E1��� �$��#"/&#"'676727676''%"%,K B)")&B%O ( {233  %!%  !��_�"� ��''7'712212211��2����� ��!5#5#5&hhhFFhhphh��5G6�/��%#"'#7&#"'6327'&#"'63273327#"'327G4MG6RF%()|!%?F%()|.FG6Q G(#%CGߔ3P ](P,b]*b��� ���7#537#5!73#3!'}9L2;9L3oFfFiFfF��-�� ��%!55% v8CC3EOO��-�� ��%!55-5v8CCxEOO��+� ��5��33##5#53327654/&#"4767232"#"'&'4i66XUw{VSXM`{V95aaddaaddA66{VSXUw{V9XM`ddaaddaa��+���-��!5!327654/&#"4767232"#"'&'4~XUw{VSXM`{V95aaddaadd/6{VSXUw{V9XM`ddaaddaa��+� �#�5��77''7!4767232"#"'&'47327654/&#"''''aaddaadd5XUw{VSXM`{V9'&&'ddaaddaa{VSXUw{V9XM��������%!5!3#7777k��' ���,�� 327654 &#"#"''7&54767632JVt\[Wq\?$[\ed fa%aYed h*FJ\[uI\ Siq#[gkh[b%bfkhY������� ��# > ttT88��7�����#"'&5476323#54'&8@ 86 T&\2 '2 -7mC88m��f�WX/� ��#&/&fC!$D&/MM .U,��P�e6����2#"'&5476"327654'&6.7/- (- (6/ 8/9(. )0 ����@^��<��67632'&54767676%6?2#'&4767676 % !P M *H$Y V! .W#5 2R*:w* J>R,2 0N!=y.  M;F���a#�*��%67#'7676737#&/&' YVO~m>G  7!noJ !"B$)Z~s:] <*+  sH" 2b0*:���c�|l��/��%676765&'&'&#"&'&'&5476763yjc^]xzjdbmzvoea#"4kj ec'YSkl]]WSj)kUZ4b[x |mjffz zmj ��X��� 672 #"'&545&567   /  je   ���M���� &547632##'&54767  ?  WS��X���� ��3#3#22222  ������� ��3#3#^2222  �����!2#!#"'&5&547632Z)!   )! g  ��/���%47632#"'#"'&54763   + X^+ "    ��2�� ��%335#'3##2dKR2d���2��,�� ��73##533K2dKdRJ���� ��3#]X r]``Zf��2��,���3#6767654'&'&2T \OZ``]s��&��&54?632#"/#"'&5'67    5  ����+��%'&547632632"'"'&'&5767    ) ! ! ����BE ���\��67&'376"#?2307676327'6767654'&'#"'&'&'&54767674 5?7:2H ,-A 1ly9A;27&.@&j9r#*+]O6NB:U$2EB>\ eE3L A X+?4)N#:>`?1@"?$ ,L) T& K5 ZS0����Zu���_��67#&'376#?2767676327'6767654'&'"5#"'&'&'&54767674HJ9+f" Q 3:' @Dx" IH;7/7&I  +tF|* 26zQ ?XJ= X(=�RZTn{S<U # A:t j5 ?"P']#I%Fm*&G&?"% #6X1S/ S9 b[-���� � �!��7'5&'&%67&'&'76x3DA >?,$9-!E: 'V3 :V9^2#2M M`L/KpM>F����I��"��7/&'&'&%67&'&'563NA MF?//*9-.E?~(d< Ak;p:'9eS*XRILO%"BS����>�"�/��'6762'67676?&'&'"#'7327"'&vK1*C7q6ph4H  0BB%M$)"7c,"1=' ;1MgN$$? "/B/)9'A ���V:�$�2��'67632'67676767654'&#"7327#"'&]70M=w Cw6U% (8IT U0"1#CN!4):>+ D5YoW,(>%"7L:$1 :- A ���1#�0�:��73276763227#'&'&=45"'#"'7&'& SSg|!28' *  ;2t 1-@ -A+DMXJ-4>+A=/" "+= A .2P&|1 ;% A ���P�0b�.�8��73236767632327#"'&57&''#"7&'& GR C) / (3 8t 3 J+W_g]/@G7r@=( $ 1<% @B;[ ,1 :+ A ���(e���m��7&'7676?&'76767632#"'&'&54?376767674'&'&'&#"#"'&'&54767674<130Iq ,-3y h>A2t |:{[2+`' HC` O ?  )'"7 ?(T B6 6rQ9;)C'7S,,(Ac=@]?)V, JX?;,"'  ? 5 0w)8 !"K35���U�<n� ��o��7&'&7676?'&'73767632#"'&'&5&776767654'&'&'&#"#"'&'&5476?6F $-2-P% 4" 6E ?@F Lk:2i.LMo Y$? 1,+!>  H#0y H"<+<:%:)8@X 3*d@5@f85 P`GH0&;-  G =&  7+ <  $1;U<���w�y��K��7'7&'&%#"'7327677&/73236767654'&'&/#'676s-Z" *.4 \$#&h%089C*3'A.j4  ?&$#= !;' 719p+7^//Y.C7#@p9=@ ZKO %QT%8#G|O/*C"El���Y�]� ��(�k��7&'7&/7'7&'&'&#"'732767632&'&'7276767674'&'&'&#"'676Y< ; w: = .d).04(&'i07>4B38-@Q(  >*#&A"@( <6 &u37d"59!:%" /`= I8'?|??eL@ TRG"'V\)7&JU41Q#Lw����h�M��'7727&'7676767&#"32767#&'&'&54767632&'#"'7367&_z9 >$6lF&PA0^Q<5K6.28I39_[D0,W?NMCTBI;@*&[wcsRXF-A9v;" >* =33>/3S;&(!!%& 0?0 ,6>>90 )- @  J��z���e��7&'7&'&'7727&'7676767&"32767&'&'&576767632&'#"'7327&)=< x8 < kCq? %?!F M+_W/nZA:P<41:R8>g _H94^CS BE]FNCM8'dj{[dM39 "!:""A<}P,>. E96?/3b<*,&#%)3?2 /8C3/17. @ T���;�&��&'&/&'&547476767676-8f=Y TM/EO! >" Fk Mc C >.9@+?# O����t� ��9��7&'7&'&/&'&5476767676< ; w: = 8h:*` OS/ST% D$ Gm9!:%")!J3k @C.DD! -E% Q��u�5b�"�0��#&'73275367'676767&'76/7R A6.A)_d8 1N1 '@"-@0]@õ >! 2/# D/>0&8z h lx\X��Y���4�E��7&''"'73275&'&'67'676767&'&5768=< 4;Z K;3A) < +kfD 5A5 +A&0@/d9 "!@ #" X "=#6B,I2=4)> z t na^����y2F��%��327#"'&'&54767327#"'&=~'#47Ryk[ [ ~MWz>!FC! +@!5#Ls@A ���]���-�:��7&'7&'327#"'&'&5476767#"'&8=< x8 < <)'8;bt` "_ Ef1lB$CP9 "!:""M /A%7(QAA ���>�=��'"'7327&'767&'&#"327#"'&'&'76767632&,/e ] @FD$^:'L!I73 -9K*-CM31WCRl33.1FG4@Fh u9 *>* ]lA6G 21"!( !?# .9D S@ G��r����Q��7&'7&''"'7327&'767&'&"367'&'&'&'76767632&^> ; v;= 03q K,'A[J$]L'S $!M?8=@P.1IK@bDWn;;03QVH9 !!:#"@Ey vI+?.blV5L73.**+ #@#0<IUF& ^���'ib�'��37276767#"'&'&54767654#A R&*:3<P 5N-#&CLsM# bKC<#B !l!%p*"#G!)9R' h������;��7&'7&'%73276767#"'&'&54767654<> ; v;= A !W)+@9CV5R.(+GPwT) 9 !!:#"VK#?&I$v %u-(&J$.<Z* q ����6r��D��&'7676'&'7327'7167'"'736767#"'&547632'a; B%" |oj  A Z jW 6QH@!B#< 1?X5&,4TD7>'  @@ !#'<A!_ 7*;@,2"m��b����$�`��7&'7&'&'7676&'7327'767#'"'73276767#"'&'&5476324<< v: < lA  E'& yy"! @S k ] 9VVC%I'@#5C,&))/8ZM:9"! :!"^E + "3@K"@"$%)BA#`",?E/5(���_�p]U�F��'616763&532'"##"'&'727654'"327&'&'&'&'4'&54 AA6j *FO=+Q/'4% 7AEAF|8A7%&D <P*/-!?1A '"QQo#���?�Tr���]��7&'7&'"#'76763&5472&##/&'7327654'327'&'&'&'&5&54L=< x8 < A@XWp8 +""F_&hq(<ci^8( #9 "!:""@MKk@G@C''H  <*U*= =,E& @ 1'VM{)���R�)wa�0��732367632&'&'&567676?'%'#'& IG.WYR '.n'* GW3@?A53:AI?+*B!'("J7 1?��1�|� ��H��7&'7&'%7323676!2&'&'&54767'##'/&< ; w: =  IZ \`_++5w+ :.$1U;-9!:%"SA?A"*B (I>@)-J)2:2V1 ,> ���(�Lfr��#�>��732367/&'&''632&/"%&'7676767'676?WF GB."(e V5@88T1_f/ A 3jwI (l7q,(# TA "S @)>( YAA>#z]v)#tj����+���)�6�S��7&'7&'732367'&'&'&''632&'#%&'736767#'67676<< v: < ?"`L LGI)*j j-J=?[GX! A Of~D"*s8r) ?9"! :!"! WA %X"A->, `@]uhc>$f~2#a$"Y��~�6f�B��&'7676?#632#"'&'76767675&'&'&#"'76G> {KAbI'&OfN@L7-(-"#p W>_;,<1?c+P+@1eq%.?)z8!F;8 c- > ==  . #6D5S���`���W��7&'&'7676?&'&'#632#"'&'732767675&'&'&#"'676<< L FAj: <D3/N oTES72,2$&y#_! bA'-E6EG`Cs,P'b9"!u@5om7,"!)v?%GB< e2B =A  0!$':*6#P����eSc�,��76?632'67676767'&'&'&#"#}>1| (#S2$v[*JS" 9 fBVA  Q;=iL +A '?>3 ����-��76?632"'67676767'&'&'&#"#"P?%.'[9-~!f-L& a(@!" #6qMb'QA " XFItU0 A .I G; ���j�g���B��7&'7&'76?632'67676767'&'&'&##3=< x8 < ZWD(!0)`=1 %n,V'"e-C&(#4 {Sk}9 "!:""A%#]JOz[4 A 0L%$!L@& ����UZ� ��5$%&'&'&5476767; ^O!  */8G%, EeA@<4+82B'!<' ?!6>T+)#s.��a�6���0��7&'7&'%5$%&'&'&54767<< v: < gN e_%!","8;O).*I9"! :!"@@?52?8GI0A) ? $:CZWI|8���O�%��67327"'&'&'&54767&5457F fZ#%<X<S=:*7!AE-?91*6-5&:AM+7EAS7 ����0���9��7&'7&'67327"'&'&'&54767&5453> ; v;= P pd'!)B_AY@?-=$A9 !!:#"h1@<4.<1:*@AO-<KD\9 ���:�U��@�Y��%&'&#"67&'7&'#"'&'&747676324/476%"'73676767'6766B* )3T lYq73N ^[?o o%4)9a 6"09S%j^9 @ 3`W&zB8g<  BA !A0CtA8?D87+ n@A)&_ A <t l6#=2q!2{����gUY���+��7327#"'&'&'&7367#"%&5456L:.! ,^K ?F2:0MGChl prH@)A;\@ #]@ @ {mW.q��a�fX���'�i��%&"32766767&'3276&'76?7&'#"'&/5676?654'&#"'#"'&'&5476Y0!".# 5<1U O"U$ 3L@ Uk$? DD+%F)9 5K)&N E%EZ"3#(*281$8E "5 :  ! }GU%b\>IL8 6x o**?.oHmhX82+3";>=AV_5TB*)t'"V,,'$k���M�Y��c��%&'&#"67676776767632&'#"'&'&/6767632654'&/&##5'6?5#"'?6( 8$  ":2A&)R$dtW Z'":$D-I# ? 5!?n ; KcUaA.d6 CZg5 # 6: ?L t?H]Q&6,C8 C">BM0*\?7h 6~$C\ A���U�m�,�;��'&'&'4767676763'6767654'&'&#"676 0f/3?5.-wZh$%q;!'9=a:(,0sFGH|]3$&_C WLZ63{T@R+9EShPU4>.' =VC3S*d7<-/H<0*��{�l^b��D�Q��%&#"327676#"'77276767&'&'&'4767673&54&5476xH/ ,H:;DRU^IC9AU H:f#M U8Y=Id /K[@&A@  @ }<8u? W_ A70 . )3= E.yd' tuVg*&v���_�N� ��$�\�i��7&'&#"32767667&/#"'73276777&'#"'&54767673&54&5476;< ; P 4 "0N?>: 'C:HHwvFG;@:  Z5 $O ![`BOp0Pi@)A<9!F$!  6h @ CF#9% @ e_T71/-4C J4jo/L fi*'���_�N���2�b�o��"327654'&'2#"'&5476&#"327676#"'73276767&'#"'&54767673&54&5476J    ) %) %P 4 "0N?:HHwvFG;@`Z5 $O ![`BOp0Pi@)AN    $)$+zF$!  @ C@ e_T71/-4C J4jo/L fi*'���r�/;�0��'67276767654'7&'#"'&'&54767;%6#d7?,c*!@Xd8F:"1=K!!u6'?DaA=Q34hR2/({%K !u{}7D1G\y ���U� k��H��7&'&'"'&'&5476767#'273276767654'77&'B=< TCg9\3%5GQR )DF|>/:$jF2j/#@ 8 < 29 "!3!uȈ;B4LbA=S>>qX73+ 0M '" ��U� S��R��"327654'&&'"'&'&5476767#'273276767654'77672#"h   C,h9\3%5GQR )DF|>/:$jF2j/#@, 7)%%    Tu!uȈ;B4LbA=S>>qX73+ 0M t/$) ��@�Ys� ��6�>��7&'&%'6767#"'&'73276767'&'&7&'&*J(L7M!&8:&(\T!&0,J9+5+T%M*) 5+t0^z$X&.1A.x"w&( f(&09, $�,@iQ L*<57 (8K?v+nJ7; (���;����*�L�T��7&'7&'7&'&%'6767#"/&'732767675&'&7&'&<< v: < +O-P6N*#9>%)a\$)04O ;*6'b%U,, ! ;/}0e$[-&9"! :!"1F!4#{0'"!j)'390#&,IrV R,C6< + =UC+vQ7<& ����;�� �*�7�Y�a��"327654'&'2#"'&54767&'&%'6767#"/&'732767675&'&7&'&    *$*$+O-P6N*#9>%)a\$)04O ;*6'b%U,, ! ;/}0e$[-&   %)%)1F!4#{0'"!j)'390#&,IrV R,C6< + =UC+vQ7<& ���L����'767632&'&/&/"{/b:9<HV`R*HxC$<,lE.hx` 1NI G��+�>� ��8��7&'7&''676767632&'&/&'&#"< ; w: = 0_ =14K[kX *LI( !"C$9!:%",gE mg1QP O*���+����B��"327654'&'2#"'&5476'676767632&'&/&'&#"    ) %) %0_ =14K[kX *LI( !"C$    $)$+,gE mg1QP O*���{�lh��K�X��%&#"327676#"'73236767&'&'&'476?&'/73276%&5476sI 1 ,H:'+Ouv@ O V5r:@"l4 U8Y=Iu1JZUrXA'!@&A6 2@? >$ |-="P7B. )3= K (0A  tuVg*&v��_�N� ��c�p��7&'&#"327676#"'73236767&/767&'#"'&576?'45&'7367274%&5476E< ; }Q 5 #0N> -4S{ KO 0J./ ):  K :".![`BN|1QfXK@+%@)A9! < #!cA @ G :&?% n]7N!0-4BO. @F fi*'��_�N�� �h�u��"327654'&#"327676#"'73236767&'47637&'#"'&576?'45&'7367274%&5476\   }Q 5 #0N> -4S{ KO 0J8#&#  K :".![`BN|1QfXK@+%@)A    < #!cA @ G'+ &?% n]7N!0-4BO. @F fi*'��X�;#��X��%&#"37676772'67&'#&'&'&54767632'5&'&5773567'6RUB3 ,A$/ A%J'#] E\"X"\ Q?; 0<PST^'@^8$K   wngAli @y%&p8`(=)&3 %:4#3 @���m�=G��G��306367676767#"'76767&''6767&'#"'&'47676tj<  R0"'BVd! HZo3J&eA `991|& kSh1#/<$# I FO"M^A"5] 25s4 $=5(NH 8??`8f 1"��N�5� ��l��7&'&&'&'6"'73274'7677276767'&'7##"'&'4747"'&'&'&547676326"=$;  (?TFI,A:xF %$_$358@ $dO`7E+ /7#H>$ =AUl^^ &>* \-R ) :- Lh#/Q >&'<$%��`�X���S��6767&'3276&'76?'6767675&'&'&#"'#"'&'&5476J<0T L&T# 3M @Yi$?AE !CA>:1 -}#& 5'81$8E!!5 H#TLT(\e?KL7 $ b3,qm>NvSF A4c20!ScB*)t'$T,*iV*����?O�J��676727#"#7276765&'&'7#"'&'&'&547&'7767&'&'7hA5c v4!E B H )0<-9 L3CN >M=7^+  Cko18U SZ^Y\@ @5W2#E9c (T-+)(\> ',e$+ *<' ( :*���e�DM�?��'7'7767&'7632'"/737676767&'&/&#"&'&!W;Vm7-F6-!_.Z##!$;[j3&3."= ;VC3m= S7X92/?( B$(K6 ! =( .$ +' 3,&&uU��)�Y~e�=��'7'767&'7632#"/77676767&'&'&#"&'&!g;eP^J,R"@4&#F8>a,+&)Hz w=) =4*E$"$+;PjCw< c8h,+E0L. 27C P> /=.5+)3. #*/#!;����y� �I��%76765&'&''&74767676767&'7#"''67&'&'&'7654]-h-G$0FP=6 A(?2%?XAC1QKAQ6}!h-?1 ;)!? T,7y4o'cK*Q&"\ęnOi$8U3l$'sJ%:H7?(%a TS-���`�s��Q��%36767654'&'&'&''&5476767676767'7#"''67&'&'7654e4@+O6%;GgF< B-@31HX&,@ N:X Q I\&#:!1U@ :."0L.b]IC;W{W!:W*&\ȅaZn/ gi#7x-.~T*>O7P-([)e5���1$��;��%&#"32767654'&547327#"'&'#"'&54767632LA2 #&6!"  A/,J_ bZ,*R)CO+3J;Li>  ( !Qajx^?o*s 3j'Z*-9AC��V�F3��E��&#"32767654'&'&567327#"'&'&'#"'&'74767632[M: '.@2%   A 94\iuc72c(C V2>TDQv I' +!%% U5UjgT@ eJq13y(f22>HJ��z�4W�.�8��676323#"'736767654'&'&''67&'&A v:nhmF(O U(]R-}C?D,/+f:^9>_}>:pc;5wZ =C&1bW ;A.,P# 5" `)P$AA5;0 �� �.+�5��6767632'6767676'4'&''&5476Q>9 rt)" .YI7:(Krh;C  pUcB4HSՄN& ? S44aK% M.x {>;2c���Aqf�M��732767632#"'&54767632&/3276767'&/&#"'#"5:7l [_G:/S% q8@-*\6267 >*$@!%VA*7"-=TY'>IA@;  %M(* fJ% 84;& T"_  '$ C-(;*f6 ���M�Y��N��75776763276767#"'&/47654'&'&#"#'?5#"'?6 A&)RjD:H#  @ !' 3 6"(gA62CZg5 0:3|7#E#?2 k [! E))T+9 5&V\ A���"wf�/��7327672'6767676545&'&'&#"'#"5:7l ǁh.+_4 xO%;L:"&t%5(>IA@;< J)/$dU8) ?& 6B1- z4 ���EV��@��76767632'6767654'&'&#"&5'6?5#"'?62A )E8i@9K2B  ##i8$  3 %UeA7?79HZ*yJ#;s +*+8`,#Z8"=7+ 5/ "cbL=M% HA���M�Y�:��7767632'67676'4'&'&#"#'6?5#"'?6A&)RXiHBT8I'-|C/ + &>5;ayA%m6 CZg5:%G*0?k/+&d?(><1")#R; !'v($C\ A��8�Oi�� �f��%&#"327667676?'67632#"'&'&/4767673654/&'&"#"#&'&'&5476\>&#"F=I/  V!?X+]/,WCh,X NQ(#I])Cb6E4M>D26= )$ ?a=  )i0J4;)5I|" A 28(b18r[3 !7C?EHX:  ay8"0'1%%YFj���k�� ��/���%7&'&%67'&/6767654'&#"7''67'&'732767632#"'63236767#"'&'&'&'&#"'67&'&5&$G#:$W;   f4cB3 J[/G+%J'm9Lz:+{ns-#a(DWy465 /$* ,>+H.# %' 4g#X6.""HF6   !0'>9.#0&5A ?w0:"0T4> 2   .71<** 18pP6���+w�T��&'76736763'676267/&'2&'&'&'&5676767&#"'676>3d n:!@!X< \Q)-9U-"8# \Q ApE mCQ+'"X .{+ALF@^B  (?(6W2k"&9 (@5 #,*GC i0X���L�K�4��3676767#"'&/&'"'7673367632B ((5Q1O1 D3P !:O3[;h;Q?, h''"_*]& +`G"2C(f7  !I�����7&'7&'L<< v: < {9"! :!"�����,���67"#'%3''676765457w>;6C1._ &$d%)b" !A*CAAJ"#!PIP3M.D���?H�$��6767#52%''6767654'7OxN,5m,*r(i%'A51VAAV$(/^T\ 3T,P"5����M���'67676767#RFOo 5i8 A>N;M3 A '9 }���v�bG���'67676767#]QZx 5q>AHW ;V8I&B?����*���53!'67676767!#A4>C<>$< A` KQ9 =6)H ���z�#U���53!'67676767!#Ad CJsJ+GA9QY@(>=2!W'(���N� ��#5!#!!5!P>1_AAAA��S� � ��!5!!!!5!ZgAA@AA���N4�9��"#'%23&'7723#"#/73276767654'&''67676D  A  =*56  V?;'6>ABrAo="6 ? -dIEg 3f;H���M�hf�6��"5%'7%23"##"'73276767654'&''67676tA  H!LB 'fII (DEzAAeF&>? "6uUUu3vLQ���w�1��4654'723/73276767'"#'676DEA$   #6%.2 ",{+/o*UiAAX (Mm, ) =wiqSn,.r<z��m�Z���A��7&'7&'"'53654'723'&'73276767&#'676t=< x8 < /JA: "  '8#38 X %1?.t-bF9 "!:""@=V B0Su.+=#n{ZwB.x>���o4���'7'77%'%v\:_S:uK<IQ<Ou;t$z<y���Q� ��)��7&'7&''7'77%'%< ; w: = xe;g],מ:6s9!:%"S=PX<V;>;���k�9V�%��'67676767%3'67676767 1s(s, .,? >,R?%)d!?O>+YW >1HY3X8 E <@^7+e^;V5(-\��M����9��7&'7&''67676767%'67676767[<< v: < K$4v (u-2/? p,WA*/g#U\>,c_ N9"! :!"EC7L]3Z4K H@d@1ia&<\?*.g��i�Jz�"��!'67676765!#'6767676M(n 1v(@&" .q1&o*0oH~ +H > {DA\#QU$5Q0R��K�*� ��7��7&'7&'!'676767!!'6767676T< ; w: = .x 1,!@X"2z#&v-6Z9!:%"P *R F IAa*#W\ 4W4^�������5!!5!9AA���������7&'7&'5!!5!J> ; v;= d+]9 !!:#"NAA����3\^���#53533673#'676767##KAA5/v,,p--ASAA!Apcm(0e@ ]��}����3��7&'7&'#5353!673#'676767!#3<< v: < 2A@81{&,t02AX9"! :!"AH{aAwgt#1gC&'i���Q.���%��%'676767677&'&7&'&V/$_j9d<36d]).F)G@$+&E>84 Q>C2P8 NA.SHeA ;2> /52!!a"U"���m�2i���%�1�;��7&'7&''676767677&'&7&'&<< v: < ZT@/fp$9h<:?mb+1L)E)$'M%>87$09"! :!"P=F-"(V#BQM4[L @ ?3:M59 (e!Z'��R�^^�$��'67676767'%23&'&'&`0#Qb&zP?5C?4he| 6yIhA@bR+5I<F))���1�?���9��7&'7&''67676767"#5%63&'&'&=< x8 < t$Z iH&PF:FP 99 "!:""| 7PoAAf Z.8K;L9-��_�P'�+��'767%'6767327#"'&'&'&54A4()P0H!24VJF[=N% *?/KBv4G3[,P3:ap<*A  A +#HI���?�0p� ��A��7&'7&''767%'6767327#"'&'&'&546< ; w: = ֘A5/)!V1Q"$h67[QMaAT' 79!:%"->4UM4H9`,X69t{;(F A0$NQ����E2&����'6767676%7&'&?:'#,KH%A'L? -C".;,%[S=hq26kA'(j"/?)0ea)%��n�$���$�.��7&'7&''6767676%7&'&O> ; v;=  ?>,%/NV%E/"SD v,G!"4;39 !!:#"fXBmv=6pC./t(/A/.sm(!��s�=�)��'67676767%'6767&'&'767k. +a&/2?',`F#%ZG!?W6H."SW)0P;Mw{2S3 I  @m5*gn+7f2FN2?7`���V� ��D��7&'7&''676767676%'6767&'&'767O< ; w: = 2.j*d& 15>",cG*.]@"TP5soa*4X?Wp9!:%"|4.IZ2W1L U<?pC5lr&7oGDMS@=e ��q�Vf�#��!5!'&''6767!!'67676W[ agM \ &,u*&o)A$)"@ N<AB ArNYY4R.#$?���R�6���7��7&'7&'!5!'&''6767!!'67676B=< x8 < ub ik[ { */{/'{1#9 "!:""Av,@&A!V<DGA~S__"5Y9"#F����0-�����'6767676%7&%7&?;*!(F!<IA =& A /U%;(WD3WW 7T;\6Y}s-V][��l�DY4�����'6767676%7&%7&?B-(1LE"C"TI =. A 0^-:.`W>`_)8\=!i'Jk ,]pg���N�#���$�,�4��7&'7&''6767676%7&%7&'&^= ; v;= >D,.:OS"E,!XM< A 0e1:(8 !!:#"GbiIce28`;')o,]J#)t ,fwQ���Z�3xD����!5!!'67676545!c 1g AA_K8Uu +vB8Y!AA��9����(�,��7&'7&'!5!!'67676545!`<< v: < o_tg 2m# N9"! :!"AAeR>Zz $*}E=^;AA�y�d���#37&'&'&AAy;?f.c03/5)$'f.a  �r�D4���%��7&'7&'#37&'&'&z=< x8 < AA@Al .h609 "!:"" ^,')j /h$��v�7jj� ��#527654'7%23"#'67676rsAB 'l 0e& A?V0c.'AuMdy ,p?!"E���c�����75!5!c(E2AAAA��l�6-���67!5!&''6767"'&/7-?S%i@Fy 1}F.!b>!m/&GUAAV9+87 ar%8|f-/-->0��2�`� �%��7&'&'676767!5!&'&'#uD !;2HR ;sejh+Y@Cw*lF<uA9%F*Z-1Ne;^>BAAp"&&(e2]+$1����P���'6767676h?"!$FH#C0@)P XF6hn/7l?,.a��N�~����7&%'6767635]:jC@&e/f#!& A Lk-k=A��.�p� ���/��7&'7&'7&'&%'6767674'< ; w: = 6j;C13T@#(i/n'$79!:%"L&TW LNq-tEF���.�1�� �(�:��"327654'&'2#"'&54767&'&%'6767674c    )%)%6j;C13T@#(i/n'$    $) %*&TW LNq-tEF����?���327#"'&'&=36767'#?qf]wMX"AS]]_֖>9 @=*VN<P��m�x���5��7&'7&'327#"'&'&54536767<< v: < EF{ocRa"@N_ie?9"! :!"t1[+@ ?,O ]V<U���m�W���A��"327654'&'2#"'&5476327#"'&'&54536767;    ) %) %EF{ocRa"@N_ie?    $)$+t1[+@ ?,O ]V<U����j8���5!'676767675(,!IB@0E-AA]5*\R:N1$'V"���a�L� ��)��7&'7&'5!'67676767;< ; w: = I6+-%MjH3"K19!:%"pAAb?/bW4;S6'*_&��a�L���2��"327654/2#"'&54765!'67676767f   )$+& 6+-%MjH3"K1    $) %+AAb?/bW4;S6'*_&���j���'6767632�/&'"4n2("!nr(w0k'4*  'Y46 3���L�<���,��7&'7&''6767632$'&'&#"> ; v;= 4u7."$w*u'}'09 !!:#"&;.  )![3E 1���L�@�� �9��"327654'&'2#"'&5476'6767632$'&'&#"    *$*$4u7."$w*u'}'0(   %)%)"&;.  )![3E 1���I�^b� ��$��7&'&%'676767!5!53!!#S;3"#X-[($s? !V,X,A1At02T/W92y47O 0O.-AA��(�l��� �+�7��7&'7&'7&'&'&%'676!5!53!!#> ; v;= };4("`,c+'9> '"Y,a# HALAl9 !!:#"x91^.]=6 @:Q1V86 AA���(�ly�� �-�8�D��"327654'&'2#"'&54767&'&'&%'676!5!53!!#     *$*$;4("`,c+'9> '"Y,a# HALAx   %)%)Wx91^.]=6 @:Q1V86 AA����I$���6767!5!&'&'7|92<(K;9|5L0t;.t&dRA9tAAEAU4S,~4(U5G����P26���'��7'632&'&'&#"7&'&7&'&y@92m U.61GNn@E|rD6DE~xA@A P;K2A 7;4A;;9���$���7'67676767&'7''q(*3?4,)[0E0m5UZah] 7:L,'sG)A����^���&'767&''676@@ADn-b::'C))`(A<?'in 1g0\,!52i*a��Z�Kx[�&��#5!!!!327#"'&'&54765!5!4k`8+B9u{<F3R=AAHA<D  @ 0 41;AH����>( ���'7'7%'6767X`;d|1$#"T/c* ;0?-i5g85V-bWY_��d�RU���'7'7%'6767Bq;v2-&+]/p1 z:C9?6{5}<C]-me!$l���@z� ��%!5!3!5ahKAtAA���t�s� ��!5!3!5w`A7AA���_� ��5!5!!5!5!5CqAAA����{;� ��5!5!!5!!5J- A@A A���1uV����5!'67676767%5!([@"$T0E"V^ .AAR+!KD=@-LAA��$����7'676764%3#A b @!7n[AAY͏G: <9+{D]9��Q�u#� ���36767'7'6767654A>5P2P@IAA- U*N*#;.'a)c05C,7\BK1E+ W&���O6���3676767'A[a +L('kA6+/2026,3����3�� ��!#!#5 AuAIpAB4>����3(���#!'67676767Aq 7B}H+5 GKZA.=B2!H���HR���#!'67676767A =I*rPA"=(.ScJ)=G2)/S)���]�W����#3#5!533#!!#!53JHA3A@AAAA���o�z����%3!!55!'67A{mh =AAAAvH8F@����GJ���67!5!'6767!5G3.+%PhDv04rAAZ;.aW1;N0TyA����g����7'676767677&'&^B-\U <L18Dlӣ^(*F.D$#gA!C*KLW2Na>F.D���_�����,��7&'7&'53!'67676767!#L<< v: < A "IO}O4 L!{A{9"! :!"]9Z`C,=@4!'\&5=����] �1��H7&5723/&'7327676767'#'6768ru:A 2!( +  *s(/b"H A ?`%$ = eG_Hcy*-e1g����5L�!��#'676767!#'6767676<#d1i ?  (c*'h' ,<t+y< 4z g9AOEL5K2K���H&��-���]�W&��.���o�&��/����G&��0���W.��y��������P���%&'&'&'&'7h%$@:#@D*H( Y3'^m&7f8;?mA���eP&݊;���+����"������ ����������#����+����.������%����&����&� ���3"#"'532765FS 4  gG ��t�� ��3#52545#td;77<gX&N��f��[���������+��###53547632&#"!###53547632&#"WSFFJ :gWSFFJ : D8DYXE5RD8DYXE5R�� �������###53547632&#"!#7#5WSFFJ :SSS D8DYXE5R ii��������###53547632&#"%#WSFFJ :S D8DYXE5R'�������+�/�3��###53547632&#"!###53547632&#"!#7#5WSFFJ :gWSFFJ :SSS D8DYXE5RD8DYXE5R ii������+�/��###53547632&#"!###53547632&#"%#WSFFJ :lWSFFJ :S D8DYXE5RD8DYXE5R'����)��#327#"'&5#5353##53547632&#"V 'Y GGSSFFJ : D&FC DDYXE5���"��H��#327#"'&5#5353#&#"#"'&53327654/&'&547632V 'Y GGSXfRBPvZ4JX!GT 6NwT1D#  D&FC DT1-F`, /#/.3+]*e��:��X����33#:WWGGX#BG����2-���#03276767#0"'&GG '++'GH-0 5"���:�YX��� ��333#WWWW2X#:#BG��%��X���%676767653#"#533"(( W"D?@䥋ZN %v9.8!!L ��:��@X�%��#57676767'367676753#5<0 W D AzA/ W <N}p '> %.IP')'!=$+@I4��&��X���#!5!W  LL���?��4X����#&'&'&/&'"'!5!34W  &9 S2#!  Wzt7 L 2Bw���9��X�,��)5!676767676?5&'&'&'&'!5!\N    "jb_7 ()  "5L   .6 'L  4= E/E���%�����%#4767676767475!53!W %q. aW8N:(VVr72@ 9HᕙE3."-���?��6X� ���)!2&'&'&'!5 UT'3W) 9GX*?5+3' @���%��X���#&'&'&/&'"'!5!W  &9 >T2#! zt7 L 2B��#��uX�-��+532767676=#5!#&'&'&'&'&/  %AT2)<0! W  &;  ?+L,)LH2@t8 ���2����!5353F FF��;���<�@��7;7676767453#&'&'&'&545336767676=3#"#3# =$/R"&6!W[@GRG?C-#Wc' W (2OGG52  4&(R'\G #?99R  $1"2G��;���<�@��7;7676767453#&'&'&'&545336767676=3#"#3# =$/R"&6!W[@GRG?C-#Wc' W (2OGG52  4&(R'\G #?99R  $1"2G���;���<�@�D��7;7676767453#&'&'&'&545336767676=3#"#73#3# =$/R"&6!W[@GRG?C-#Wc' W (2OGGGG52  4&(R'\G #?99R  $1"2GG��;���<�@�D��7;7676767453#&'&'&'&545336767676=3#"#73#3# =$/R"&6!W[@GRG?C-#Wc' W (2OGGGG52  4&(R'\G #?99R  $1"2GG���:}FX�%�)��#57676767'367676753#3#0 W <&f/ W :&fE > %-AN =$+>I<G���:FX�%�-��#57676767'367676753##5#530 W <&f/ W :&fF;E > %-AN =$+>I҃uuGG���:��FX�%�)��#57676767'367676753#%3#0 W <&f/ W :&fGGE > %-AN =$+>IG��:��6X����%&'&'&'&'#533!53# "j^1 () JGGL'6 'L  4= LL G�����X����%#73'&'&'&'&'&'4#3#BuQ > RWF"2XGG˧. L*R "UG���&��X�� ��#!5!3#WGG  LLG���?��:X���"��#&'&'&/&'"'#5!33#:W  &9 S2#! WGGzt7 L 2BwUG�����X����333#pWGGXUG����(X�� ��##5!3#WWGG  LLG���=��:X�D�H��"5632#"'&'&'&'336767674767475&'&'&/&'&3#: -*&HL$"  #MHIM!$ W  2 +#    3 2GG R+1AG,!++!4@z8 "18G��� �X����3'3#WWtGGX#wG���&8X����#&'&'&/&'"'#533#W  &9 S2#! GGz<7 L 2B,G���9��X�,�0��3#53676767676?5&'&'&'&'#533#㪤N    "j_7 ()  "5GGL   .6 'L  4= E/EUG��%��!����3##47676767675!53!GGW.[W.G*aEx1+$%)V+ᕙ<9 $$��0��:X����##532!534'&/&#3#:X:NM5U-#$8GG  L!A-;L+&%G���3��FX����)53&'&'&/&'43#F  4 IMUGGL(7L+.%G���=��9X��B�F��!"'&'&'4'!2'6767674767475&'&'&/&'"'#3#;IM!(@B $"  #MH+#    &9  2 GG+!:9z"1AG,!+L "18 8 G���98 X�)�-��32#&'&'&/&'"'#3/&'&'&'%3#9@? #! W  &9 yB"(G$+�GGX!2B<7 4 L$7 G���?��X�9�=��3#53276767675&'&'&'"+3/&'&'4'5323#87 , ,;5 XB"(G%+LB / $ #a GGL<9* 4 L$: 5?&= !*G��3��X�� ��67676767670753!5!33#<.   W !"&FdGGU *70" L G���>8&X�����%#53676?!5!#3#,>7h o 0WGG!L*!2 LG( IurUG��%��X����#&'&'&/&'"'#533#W  &9 T2#! GGzt7 L 2B,G��;��X�<�@��7;7676767453#&'&'&'&545336767676=3#"#73# =$/R"&6!W[@GRG?C-#Wc' W (2OGG52  4&(R'\G #?99R  $1"2G��#��{X�-�1��+532767676=#5!#&'&'&'&'&/3#  %AT2)<0! W  &; GG ?+L,)LH2@t8 G��>�������333#>WOGGXG��:��6����%&'&'&'&'#533!53# "j^1 () JnL'6 'L  4= LLG���9���,�0��3#53676767676?5&'&'&'&'#533#㪤N    "j_7 ()  "5VL   .6 'L  4= E/EG��?���9�=��3#53276767675&'&'&'"+3/&'&'4'5323#87 , ,;5 XB"(G%+LB / $ #aL<9* 4 L$: 5?&= !*G��H��F���5367676753#HW/ W :&fD =$+>I��#�!�%�)��%5476767654'&'&#347632#3  7C5 39/% 888hg 3* N ($+ ))" #;A{hg����E(_<��������5`u�������������u5�Z:`����������������!����M�����|c�4,�,� y��4��0M�IM�&�(H�2�WM�.�W,�+,�f,�",� ,�,�#,�+,�.,�%,�&�n�nH�-H�2H�2,�M�"��O�0�Y�Zc�Z �,�S�d��O,�PA�K�L �&�[ �&�]�0c��U���� c��@��,,M�,�*,�6�,�,�(�,�,�F��B��:��DA�F,�F,�$,�6,�M�E�"�,�A� ����N�+�dN�H�K��M�y,�4,�,�C,� �d,�+M�r�%,�bH�(M�.M�^�H�2_�_�M�\,�A�0�WM�'_�=m�(,�be�=e�=e�c�_������� �0�Z�Z�Z�Z��G� ��L �& �& �& �& �&H�_ ��U�U�U�U� �[c�C,�*,�*,�*,�*,�*,�*y�"�,�(,�(,�(,�(�A�,�$,�F,�$,�$,�$,�$,�$H�2c�,�A,�A,�A,�A�+�6��,�*�,�*�,�+�0��0��0��0��Y{��,��Z,�(�Z,�(�Z,�(�Z,�(�Z,�( �,,� �,,� �,,� �,,��S,�',����B���`�^�dv�B���O�:�:,�F��?,�P��?,�P$�D,�P�D,������L,�F�L,�F�L,�F,�F�L,�F �&,�$ �&,�$ �&,�$�+�(�]M�E�]M�A�]M�0�0�"�0�"�/�"�0�"c��c�4�c���U,�A�U,�A�U,�A�U,�A�U,�A�U,�A��� �� c��c��c���,��O,�6��,�0�0���N,�6�Z �&�0c�,�  �,�:,�F �&,�6�0�"c���c��Y�Y � �P �P�D�L�L �F�,�*� �&,�$�U,�A�U,�A�U,�A�U,�A�U,�A,�(�,�*�,�*� y�" �,,��O �&,�$ �&,�$�5�Y�Y � �,,��L,�F�,�*� y�" �c�,n,0�,s,4<1 ., ,,Ml"M,,.�0�"c���S,�F�,�*�Z,�( �&,�$ �&,�$ �&,�$ �&,�$� �,�*,�,�D,�6�,�,�,�(,�(�"�",�,�,�F,�F,�F���B�^��DA�FA�FA�F,,�F,�$M�EM�EM�EM�EM�E�T�T��������,�A� ����$�:,�M�M�M�\M�M�M�sM�OM�9M�M��������������&����������������6����������'��L��n��K��Y��t�JF�R� �Pt�#�A�-��E�J� �@�8v�A�2�P~�Nt�(t�'���$�4�*��`�0�'#�3�8�(T�0�2�0�%�'�&��-�8�B0�>�N��&�"�56�9�h�"�*�(�.<��*�$�()�"�(�$�Z�O�c�Z�0�0�d��8�S�S��O�L��S��O�Oc�O,�"�O�?�0�O�O�O�!L�O�O �&�O�O�0c���@��O�O<�OR�O�Qh�O�O�0�S� ,�*,�$ �F�FZ�,�(E�,�"7�F7�F�F-�Fj�F.�F,�$-�F@�F��<��=�B�F�F�F�F�9�F(�F��F�,�(,�(8��F��"��B��H�FR�F8��:,�F�,�F�O(�F�[,�6c�Z�Fc�Z�Fc�Z�F�?E��0�"�O�:�O�:�O�:�O�:�S,�F$�S�F�S,�F�0��0�c��<� � � � ���S`�F�S�E�S�E�S�E �&,�(�',�(�d�?E�,�O�:�S,�F�S�E�,�*�,�*� y�"�O,�( �&,�( �&,�(�?E�,�0�"�0�"�O7�F�O7�F �&,�$ �&,�$ �&,�$�0��������O�Fh�O�F�O�O�S�R�O��T�J�?�C�?�]U�B�"�JL��3�O�/�-o�1� [�(�J�B�J�*�J�O�J�-�Jo�<�L�*~�$ �0�'��5��E�M�+X�A�A,�J<�#E�I&�<L�*�^,�?8�DF�0!�B-�<�B,�+*�G�B$�((�'(�+ �I� �I�5,�E�#A�A�&#�P�@b�Gw�I,�E!� `�LU�+L�C�2�*!�F�Zo� �F��O��I��I���F���������������F��I���F���F���&�����>�����F�n�F���:O�:�V�&n�?��>_�'o�?`�=��:�&&�9X�%o�?m�0��>z�3_�=K�$?�98�?� N�3^�>#�%�;�#X�8��4��2��3��,�j�j�jr�Tr�W>�>��>��#�9>�k�k�mI�d�spX�a�k�k�>>~�I�k�c����������������������������������������������������������������������������������p�)0�)��������������0�)0�)0�)��n����������G��%�������������������+���+�����������+����?��?��%������M����������-���?�}�)������`�p�h�(�H�H�H�H�H�/H�qH�cH�NH�fH��(,��,� &l���l�l�����vN����0�L������� @�I���#TT�x�d����dh�d������0���������x������������T��T������T����&����j����"����P����>�����,�� ����>����������������2����"����������"��"�����T��������a�b�~�x�d�8�4��j������h����0����<��0����T�����!�!H�'�'�(�(�(�(u��'d�'k�'9�&�(f�'l�(^�(Z�'w�(�(�(�(�'f�'&�'X�'�(Y�$c�'��'B�(�&�(��(FX�'.�'�(�'P�'8�'X�' �&�(��F��E�N�!P�!O�!�!�!u�f�K��'�(�&�'��'�'�'�(�'�.0����xv)\<:D5�D4?55� <�l��055! ����&���,�L3����XX��XX��X�0�8�/�S}�� ��D� ���P� -� -� -� ���P� � �:�1�_���� ie� [� �e�y� (� $�� �}T�T� � �� � � M�v[�  �q�l���V�l�O�X��r��>�:�D�MUq��5�F�\�c� K�b��=� H� #�=�H� `� `� =� ��m� l� l� �@&�O=�@7�O2� -�@2�@7�`-�@-�P�<>�� �$'�>�F�%\� ���#\��?�F�#v� v� ��&F�+\�\�\�{��!F�%�\� ��v� F�%\� �F�\�v�,'�>�F�*�v�5v�/�>��(���|����������� �!�*TT�0TT�0TT�0TT�0�!?��' �' �'v�PsCsC����g�Ad4d4�8m�8m�8�k��E�h�8�h�8��&&�"&&�"&&�"�2s�( �( �(�(��${�${�$��$�*qDT�0T�0�'�'��&�"&�"�(�(�$�$TT�0TT�0TT�0TT�0rr�r!rr?r�rr����YgY�AYdY4YdY4YY�${�${�$��$�*qDT�0T�0T�0T�0T�0T�0T�0����r���M6cM������CC44Y�AF6F6M68���8�8FFM� �(�(�(�(66�9�(�(��~�NM��M��$�$�$�$�$yw�*M�\MM�.,��A��@��@��@M�0M�1M�/M�1,�&,�&^�2^�F�s� P� �1�1�1�1�1�1M�[M�Un�b,�|,�M�RX�MB�MB�|�0_�_�_�_�_�_�_�_�_�_�=_�_�_�a�_�_�_�_��[�]e�<,��!g�)�:�j� �LR��?�*�*���O��"o�2�-cc�Z8�e�=e�e�=e�e�e�e�=e�e�=e�e�e�e�=�d,�dB�d�d�����d���,�P�0�YA�K��B�B�B�B� � � � �B�����D�,�A�F� [�-�1[�-���[�'�-[�,��,�$�Z,�+� � �-�,7�i7�i$�)H�(H�2�@�����[�[���(��(,�d�d�d,�d_�%�H�KH�H�_H�2|�5$� H�-H�-��+��+��+�7�'�+�7�f�P��c�MX���2�2���������P��U�w�Y��z���u�Y����r���b�_�?�R�1�(��~�`���j��a���:��a�M�U�{�_�_�r�U�U�@���L�+�+�{�_�_�X�m�N�`��e�)��`��V�z ��M���M�8�k��L����v��z��S��M��m���k�M�i�K����}��m�R�1�_�?��n�s�V�q�R��l�N�Z�9yr�v�c�l�2��N�.�.��m�m��a�a�j�L�L�I�(�(�����Z��d��t����Q�����]�o���_����]�o��W��,�+,�",� ,�,�#,�+,�.,�%,�&�M�t,�f,�� � � �,� �"��:1���:K�%z�:P�&h�? �9R�%i�?�%�#H�2�;�;�;�;�:�:�:O�:�V�&n�?�_�`�=� �&&�9X�%m�0z�3_�=?�98�?N�3^�>#�%�;�#��>O�:&�98�?�H�#�������V���V���V���V��������������~��������V������������R����������0�������� 6�� Z�� �� �� �� �� �� �� �� 0�� �� �� �� 8�� �� �����F��|���������n����4����T��x��������V������������4��N��h�� ������`�������� ��2��t������>������Z���������� ��D��|������&������&��~������4����t������ �� ��!��"f��"��"��"��#��#��$,��$b��$��%R��%l��%��& ��&$��&��&��'"��'X��'��(X��)��)��)��*��*Z��*��+��+��+��,��,��-.��-r��-��-��.��.4��.d��.��/.��/��0$��0��1N��1��2��2��2��32��3��3��4*��4z��5��5��6��7^��8P��9��:0��;*��;��<f��<��=r��=��>&��>L��>z��>��?B��?��@<��@��A(��A��BB��Bt��B��CL��C��D��Df��D��E(��E��E��F��F��G��H(��H��In��I��I��J��J*��J@��J��K4��K��L(��L��L��M:��M��M��M��N$��N��N��O��O��Pr��P��P��QH��R��R,��RB��R��S��S��S��T$��T��T��T��T��T��U��U*��Ut��U��U��V��V(��V@��VX��V��V��WL��W|��W��W��X��XH��X��X��X��X��Y&��YV��Y��Y��Z<��Z��Z��[N��[��[��\`��\��]J��]b��]x��^���^~��^��_��`H��`��a2��a��b"��bv��c&��c��c��c��d��e��fz��g��g6��gL��g��g��h��hZ��hr��h��h��i6��iN��id��j��j��k ��kp��k��lf��l~��l��l��l��m��mD��m~��m��m��n6��nx��n��n��n��oD��o��p��p.��p��q2��qB��qX��qn��q��r��r��r��s`��t��tN��t��t��u\��u��v ��v ��vR��v��w��w\��wt��w��w��w��w��w��x��x��x4��xL��xb��xz��x��x��x��x��x��y��y��y2��yJ��yb��yz��y��y��y��y��y��z ��z(��z@��zX��zp��z��z��z��z��z��{��{ ��{6��{N��{f��{~��{��{��{��{��{��| ��|$��|<��|T��|l��|��|��|��|��|��|��}��}0��}H��}^��}x��}��}��}��}��}��~ ��~"��~<��~V��~n��~��~��~��|��,��r������ ��"��8��P��f��~��������������,��D��Z��n������v����������������������P������>��N����������6���� ��4��r������l������d����<��������������0��������D��f������������X����������*��<��N��`��r������������������B��X��������������*��F��\��r���������� ��"��:��X����$��F������������������R��~����&��J��������4������t������ ��6��L��b��x����,��������������N������8������n����$����(������@����8����2��H��^��t�����������b��������� ��8��H������\������$��P��`��������4��b����X������ ��J��~��������6��F��V��|�������>��x������.������N����2��B����\��z��������������J��|����������|����������������$��Z���� ��\����D��������L��x����������,����0������ ��"��N�����������2��T��r����������`����������(��X��Š��º������L��v��ê������"��2��B��R��b��r��Ė��Ħ������������L��v��Ŭ������B��v��Ƥ��Ƹ������������,��^��ǎ��Ǿ������N��f��|��Ȕ��Ȫ��Ⱥ�������� ����6��P��h��ɀ��ɘ��ɮ��V��������(��>��V��l��|��ˌ��ˤ��˺�����������.��D��\��r��̊��̠��̸����.��͖��*��΄����Ͼ����H�����~������҆��.��ӌ������&��՜�����ּ�� ��׶����ؘ�� ����^��ں������"����8����j����ߜ������0��J����,������d����P��|������ ��\��|��������J��&��t��������L����4����H��F����&��|����p�� ��(����T����b��������.��p����������4��J��j��������������.��H��`��p������`������N��f����������(������\����������:����j����&��z�������&�^�������� � � � �,������<�p��L����2�X����4�X���J������ �B���R����T����,�^���0����4�v��P�� ~� � �!D�"�#>�#Z�$�$�%�&d�&�'�(p�(�)R�*\�+D�,h�-�-�. �.�/8�/�0`�0�1�2 �2h�3�3�4�4t�4�5Z�5�6�6�7�7h�7�8p�8�9@�9�9�:T�:�;�;�<�= �=|�>�>4�>�>�?"�?x�?�@*�@p�@�@�AB�A�A�BT�B�C�C�DX�D�EH�E�F0�F�G,�G�G�Hp�I�J.�J�Kd�K�L�MP�N&�N�O�P�P�QB�R�R�S�Tv�U�U�V�V�W<�W�X�X�Z�Z�[z�[�\p�\�]x�^��^X�^�_6�_�`d�`�aV�b�bv�b�c�d"�d�e*�e�e�f"�fz�f�gd�g�g�h"�h�i�i�j<�jf�j�kd�l �l�m>�nF�n�o�p �ph�p�qJ�r �r�s�s�t�t�t�u^�u�v8�vp�v�wt�w�w�x^�x�yd�y|�y�y�y�y�y�z �z�z�{`�{�|&�|�}>�}�~N�~�J��"��*��,���t��H��(��R�� �t�<�0��(�����l���,�^���<�h�����X��2��D��>��Z���\����$�\��r���>���(����8��~���T��t���"�x���0��������0�� �|�&����4�L���@�����$�J�|��N��R��l���$�n��4�����F��|�@����N����`��h� ��Ǽ�h�"��ʦ�V��~�̘���x��R���0��V��Ҏ�b� ���6�՜�ִ�ׄ�ؖ��ڂ�(�`��p�޶��,����`������8��>��� ���V������F�� �6����R�H���x���0����,�������F���F����f��� � J� � f� h� ��L���\��p��^�\���L�����8�"�����|�8�d�.� �!�"�$�$�&�(�)Z�+�,t�. �/�1�3�5 �6D�7�9&�;�<�=�?�@0�A�C(�DB�ER�G��H�I�L<�Mz�N�O�Q��R`�S�U(�Vx�W�X�Y2�Y�ZX�[��[�\8�\�],�^��^�_�_�`�` �`D�`b�`�`�`�`�`�a�a8�aV�av�a�a�a�a�b�b*�bF�bj�b�b�b�b�c��c"�c8�cT�cr�c�c�c�c�d�d2�dN�dn�d�d�d�d�e�e0�eL�ej�e�e�e�e�f�f&�fB�fb�f�f�f�f�g�g$�g@�g^�g�g�g�g�g�h�h:�hZ�h|�h�h�h�h�i�i2�iP�it�i�i�i�i�j�j.�jL�jp�j�j�j�j�k�k*�kJ�kl�k�k�k�k�l �l �l8�lN�lf�l|�l�l�l�l�l�m�m�m4�mP�mr�m�m�m�n�n2�n\�nz�n�n�n�o�o:�o`�o�o�o�o�p�p:�pd�p�p�p�p�q�qJ�qr�q�q�q�r�r6�r\�r�r�r�s�s.�sN�sr�s�s�s�t�t>�tj�t�t�t�t�t�t�u�u0�uH�u^�ut�u�u�u�u�u�u�v�v�v:�vP�vn�v�v�v�v�v�v�w�w.�wD�wZ�wx�w�w�w�w�w�x�x*�xH�xf�x�x�x�x�x�y�y�y4�yR�yj�y�y�y�y�y�y�z�z.�zF�zf�z~�z�z�z�z�z�{�{&�{<�{V�{p�{�{�{�|�|B�|�|�},�}z�}�}�~�~6�~d���&�\�����L�l��j��6�R�j����.�P���l��J������,�>�P�b�t������*���`��$���.�>��6�F�V���<���X�x������8�X�x��������8�P�`�x������� �0�@�P�`�p�������0�H�X�p�������:�n�� ����Z���`�v��D����<����4�N������� �F���@���0��.���8�j��8�h��4��d���R���@���&���4�n���J�x���^����"�˜��ì�L��Ŷ��Z�F�ʖ�˂�̾�>��Θ�t��Ь�j�n��Ӱ�Ԃ�ծ�~�ך�8�$������n���F��f� �6�� �8���@��(� �����z�8���p����� ����l�f�����L�6�&���@�v����� � j� � 2� ~� � .� \� � >� � �T��@������F��L���$��v�N��V���D��n������P���P�� � l�!�!�"6�"�#�#�$�%(�%�&�&�'R�(�(�):�)�*�*|�*�+D�+�+�+�,�,J�,�,�-f�-�-�.&�.v�.�/�/T�/�0R�0�1b�1x�1�1�1�1�1�2"�28�2H�2X�2h�2x�2�2�2�2�2�2�3*�3:�3�4 �4^�4�5t�5�6�6�7.�7b�7�80�8V�8�9V�9�:�:b�:�;�;�<�=^�>*�>�?>�?�@.�@�@�A@�Ad�A�Br�B�C��C�C�DZ�D�E�F�F�GB�G�H�H�I`�I�I�J�K<�K�L������M���������@�.�����"��������Z����������\������� �n�������D�|���������������4�������� ������ ��������H�������X��������-P�������~��������������"������� �������������������� �F�������$&�������,K�� ���Z���� ���\�� �� �n�� ��D�|�� ����� ��4��� �� �� � ��� ��H�� ��X��$��x��$� ���$��H��$��TZ�C�o�p�y�l�e�f�t� �2�0�0�2�,� �2�0�0�3� �F�r�e�e� �S�o�f�t�w�a�r�e� �F�o�u�n�d�a�t�i�o�n�.���F�r�e�e�S�a�n�s���M�e�d�i�u�m���P�f�a�E�d�i�t� �1�.�0� �:� �F�r�e�e� �S�a�n�s� �:� �8�-�9�-�2�0�0�3���F�r�e�e� �S�a�n�s���V�e�r�s�i�o�n� �$�R�e�v�i�s�i�o�n�:� �1�.�2�7� �$� ���F�r�e�e�S�a�n�s���T�h�e� �u�s�e� �o�f� �t�h�i�s� �f�o�n�t� �i�s� �g�r�a�n�t�e�d� �s�u�b�j�e�c�t� �t�o� �G�N�U� �G�e�n�e�r�a�l� �P�u�b�l�i�c� �L�i�c�e�n�s�e�.���h�t�t�p�:�/�/�w�w�w�.�g�n�u�.�o�r�g�/�c�o�p�y�l�e�f�t�/�g�p�l�.�h�t�m�l���T�h�e� �q�u�i�c�k� �b�r�o�w�n� �f�o�x� �j�u�m�p�s� �o�v�e�r� �t�h�e� �l�a�z�y� �d�o�g�.��Copyleft 2002, 2003 Free Software Foundation.�FreeSans�Medium�PfaEdit 1.0 : Free Sans : 8-9-2003�Free Sans�Version $Revision: 1.27 $ �FreeSans�The use of this font is granted subject to GNU General Public License.�http://www.gnu.org/copyleft/gpl.html�The quick brown fox jumps over the lazy dog.��n�a�v�a�d�n�o���D�o�v�o�l�j�e�n�a� �j�e� �u�p�o�r�a�b�a� �v� �s�k�l�a�d�u� �z� �l�i�c�e�n�c�o� �G�N�U� �G�e�n�e�r�a�l� �P�u�b�l�i�c� �L�i�c�e�n�s�e�.���h�t�t�p�:�/�/�w�w�w�.�g�n�u�.�o�r�g�/�c�o�p�y�l�e�f�t�/�g�p�l�.�h�t�m�l��`�e�r�i�f� �b�o� �z�a� �v�a�j�o� �s�p�e�t� �k�u�h�a�l� �d�o�m�a �e� ~�g�a�n�c�e�.�����������i�2������������������������      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`�������������a�����������������������b�c��d��e��������f�����g������h����j�i�k�m�l�n��o�q�p�r�s�u�t�v�w��x�z�y�{�}�|����~�����bcdefg��hijk��lmnopqrstuvwxyz��{|}~���������������      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxy��z{������|}~��      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~�      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~�      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~�      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~�      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJK�����L���M���N��OPQRSTU��VWX�YZ[\]^_`abcdefghijklmnopqrstuvwxyz�{|}~�������������      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~��spaceexclamquotedbl numbersigndollarpercent ampersand quotesingle parenleft parenrightasteriskpluscommahyphenperiodslashzeroonetwothreefourfivesixseveneightninecolon semicolonlessequalgreaterquestionatABCDEFGHIJKLMNOPQRSTUVWXYZ bracketleft backslash bracketright asciicircum underscoregraveabcdefghijklmnopqrstuvwxyz braceleftbar braceright asciitilde softhyphenAmacronamacronAbreveabreveAogonekaogonek Ccircumflex ccircumflex Cdotaccent cdotaccentDcarondcaronDcroatEmacronemacronEbreveebreve Edotaccent edotaccentEogonekeogonekEcaronecaron Gcircumflex gcircumflex Gdotaccent gdotaccent Gcommaaccent gcommaaccent Hcircumflex hcircumflexHbarhbarItildeitildeImacronimacronIbreveibreveIogonekiogonekIJij Jcircumflex jcircumflex Kcommaaccent kcommaaccent kgreenlandicLacutelacute Lcommaaccent lcommaaccentLcaronlcaronLdotldotNacutenacute Ncommaaccent ncommaaccentNcaronncaron napostropheEngengOmacronomacronObreveobreve Ohungarumlaut ohungarumlautRacuteracute Rcommaaccent rcommaaccentRcaronrcaronSacutesacute Scircumflex scircumflexuni0162uni0163TcarontcaronTbartbarUtildeutildeUmacronumacronUbreveubreveUringuring Uhungarumlaut uhungarumlautUogonekuogonek Wcircumflex wcircumflex Ycircumflex ycircumflexZacutezacute Zdotaccent zdotaccentlongsuni0180uni0182uni0183uni0184uni0185uni0186uni0187uni0188uni0189uni018Buni018Cuni018Euni018Funi0190uni0191uni0193uni0199uni019Duni019Euni019Funi01A5uni01A7uni01A8uni01A9uni01ABuni01ADuni01AEuni01C4uni01C5uni01C6uni01C7uni01C8uni01C9uni01CAuni01CBuni01CCuni01CDuni01CEuni01CFuni01D0uni01D1uni01D2uni01D3uni01D4uni01D5uni01D6uni01D7uni01D8uni01D9uni01DAuni01DBuni01DCuni01DDuni01DEuni01DFuni01E0uni01E1uni01E2uni01E3Gcarongcaronuni01E8uni01E9uni01EAuni01EBuni01ECuni01EDuni01F0uni01F1uni01F2uni01F3uni01F4uni01F5uni01F8uni01F9 Aringacute aringacuteAEacuteaeacute Oslashacute oslashacuteuni0200uni0201uni0202uni0203uni0204uni0205uni0206uni0207uni0208uni0209uni020Auni020Buni020Cuni020Duni020Euni020Funi0210uni0211uni0212uni0213uni0214uni0215uni0216uni0217 Scommaaccent scommaaccent Tcommaaccent tcommaaccentuni021Euni021Funi0226uni0227uni0228uni0229uni022Auni022Buni022Cuni022Duni022Euni022Funi0230uni0231uni0232uni0233uni0250uni0251uni0252uni0253uni0254uni0256uni0257uni0258uni0259uni025Buni025Cuni0260uni0261uni0265uni0266uni0267uni0268uni0269uni026Auni026Duni026Funi0270uni0271uni0272uni0273uni0275uni0279uni027Auni027Buni027Cuni027Duni027Euni027Funi0282uni0283uni0284uni0285uni0287uni0288uni0289uni028Cuni028Duni028Euni0290uni029Cuni029Euni02A0uni02CAuni02CB gravecomb acutecombuni0302 tildecombuni0304uni0306uni0307uni0308uni030Auni030Buni030Cuni030Funi0311uni0312uni0313uni0314uni0326uni0327uni0328uni0374uni0375uni037Auni037Etonos dieresistonos Alphatonos anoteleia EpsilontonosEtatonos Iotatonos Omicrontonos Upsilontonos OmegatonosiotadieresistonosAlphaBetaGammauni0394EpsilonZetaEtaThetaIotaKappaLambdaMuNuXiOmicronPiRhoSigmaTauUpsilonPhiChiPsiuni03A9 IotadieresisUpsilondieresis alphatonos epsilontonosetatonos iotatonosupsilondieresistonosalphabetagammadeltaepsilonzetaetathetaiotakappalambdauni03BCnuxiomicronrhosigma1sigmatauupsilonphichipsiomega iotadieresisupsilondieresis omicrontonos upsilontonos omegatonosuni0400 afii10023 afii10051 afii10052 afii10053 afii10054 afii10055 afii10056 afii10057 afii10058 afii10059 afii10060 afii10061uni040D afii10062 afii10145 afii10017 afii10018 afii10019 afii10020 afii10021 afii10022 afii10024 afii10025 afii10026 afii10027 afii10028 afii10029 afii10030 afii10031 afii10032 afii10033 afii10034 afii10035 afii10036 afii10037 afii10038 afii10039 afii10040 afii10041 afii10042 afii10043 afii10044 afii10045 afii10046 afii10047 afii10048 afii10049 afii10065 afii10066 afii10067 afii10068 afii10069 afii10070 afii10072 afii10073 afii10074 afii10075 afii10076 afii10077 afii10078 afii10079 afii10080 afii10081 afii10082 afii10083 afii10084 afii10085 afii10086 afii10087 afii10088 afii10089 afii10090 afii10091 afii10092 afii10093 afii10094 afii10095 afii10096 afii10097uni0450 afii10071 afii10099 afii10100 afii10101 afii10102 afii10103 afii10104 afii10105 afii10106 afii10107 afii10108 afii10109uni045D afii10110 afii10193uni048Cuni048Duni048Euni048F afii10050 afii10098uni0492uni0493uni0494uni0495uni0496uni0497uni0498uni0499uni049Auni049Buni049Cuni049Duni049Euni049Funi04A0uni04A1uni04A2uni04A3uni04A4uni04A5uni04A6uni04A7uni04A8uni04A9uni04AAuni04ABuni04ACuni04ADuni04AEuni04AFuni04B0uni04B1uni04B2uni04B3uni04B4uni04B5uni04B6uni04B7uni04B8uni04B9uni04BAuni04BBuni04BCuni04BDuni04BEuni04BFuni04C0uni04C1uni04C2uni04C3uni04C4uni04C7uni04C8uni04CBuni04CCuni04D0uni04D1uni04D2uni04D3uni04D4uni04D5uni04D6uni04D7uni04D8 afii10846uni04DAuni04DBuni04DCuni04DDuni04DEuni04DFuni04E0uni04E1uni04E2uni04E3uni04E4uni04E5uni04E6uni04E7uni04E8uni04E9uni04EAuni04EBuni04ECuni04EDuni04EEuni04EFuni04F0uni04F1uni04F2uni04F3uni04F4uni04F5uni04F8uni04F9uni0531uni0532uni0533uni0534uni0535uni0536uni0537uni0538uni0539uni053Auni053Buni053Cuni053Duni053Euni053Funi0540uni0541uni0542uni0543uni0544uni0545uni0546uni0547uni0548uni0549uni054Auni054Buni054Cuni054Duni054Euni054Funi0550uni0551uni0552uni0553uni0554uni0555uni0556uni055Auni055Buni055Cuni055Duni055Euni0561uni0562uni0563uni0564uni0565uni0566uni0567uni0568uni0569uni056Auni056Buni056Cuni056Duni056Euni056Funi0570uni0571uni0572uni0573uni0574uni0575uni0576uni0577uni0578uni0579uni057Auni057Buni057Cuni057Duni057Euni057Funi0580uni0581uni0582uni0583uni0584uni0585uni0586uni0587uni0589uni058A afii57799 afii57801 afii57800 afii57802 afii57793 afii57794 afii57795 afii57798 afii57797 afii57806 afii57796 afii57807 afii57839 afii57645 afii57841 afii57842 afii57804 afii57803 afii57658uni05C4 afii57664 afii57665 afii57666 afii57667 afii57668 afii57669 afii57670 afii57671 afii57672 afii57673 afii57674 afii57675 afii57676 afii57677 afii57678 afii57679 afii57680 afii57681 afii57682 afii57683 afii57684 afii57685 afii57686 afii57687 afii57688 afii57689 afii57690uni0700uni0701uni0702uni0703uni0704uni0705uni0706uni0707uni0708uni0709uni070Auni070Buni070Cuni070Duni0710uni0711uni0712uni0713uni0714uni0715uni0716uni0717uni0718uni0719uni071Auni071Buni071Cuni071Duni071Euni071Funi0720uni0721uni0722uni0723uni0724uni0725uni0726uni0727uni0728uni0729uni072Auni072Buni072Cuni0730uni0731uni0732uni0733uni0734uni0735uni0736uni0737uni0738uni0739uni073Auni073Buni073Cuni073Duni073Euni073Funi0740uni0741uni0742uni0743uni0744uni0745uni0746uni0747uni0748uni0749uni074Auni0901uni0902uni0905uni0906uni0907uni0908uni0909uni090Auni090Buni090Duni0910uni0911uni0913uni0914uni0915uni0916uni0917uni0918uni0919uni091Auni091Buni091Cuni091Duni091Euni091Funi0920uni0921uni0922uni0923uni0924uni0925uni0926uni0927uni0928uni0929uni092Auni092Buni092Cuni092Duni092Euni092Funi0930uni0931uni0932uni0933uni0935uni0936uni0937uni0938uni0939uni093Cuni093Duni093Euni093Funi0940uni0941uni0942uni0943uni0945uni0947uni0948uni0949uni094Buni094Cuni094Duni0950uni0951uni0966uni0967uni0968uni0969uni096Auni096Buni096Cuni096Duni096Euni096Funi0970uni0981uni0982uni0983uni0985uni0986uni0987uni0988uni0989uni098Auni098Buni098Cuni098Funi0990uni0993uni0994uni0995uni0996uni0997uni0998uni0999uni099Auni099Buni099Cuni099Duni099Euni099Funi09A0uni09A1uni09A2uni00C1uni09A4uni09A5uni00C4uni09A7uni00C6uni00C8uni09ABuni09ACuni09ADuni09AEuni09AFuni09B0uni09B2uni00B6uni09B7uni09B8uni09B9uni09BCuni00DAuni09BFuni09C0uni09C1uni09C2uni09C3uni09C4uni09C7uni09C8uni09CBuni09CCuni09CDuni09D7uni09DCuni09DDuni09DFuni09E0uni09E1uni09E2uni09E3uni00F1uni00F2uni00F3uni00F4uni00F5uni00F6uni00F7uni00F8uni00F9uni00FAuni09F0uni09F1uni09F2uni09F3uni09F4uni09F5uni09F6uni09F7uni09F8uni09F9uni09FAuni0A05uni0A06uni0A07uni0A08uni0A09uni0A0Auni0A0Funi0A10uni0A13uni0A14uni0A15uni0A16uni0A17uni0A18uni0A19uni0A1Auni0A1Buni0A1Cuni0A1Duni0A1Euni0A1Funi0A20uni0A21uni0A22uni0A23uni0A24uni0A25uni0A26uni0A27uni0A28uni0A2Auni0A2Buni0A2Cuni0A2Duni0A2Euni0A2Funi0A30uni0A32uni0A33uni0A35uni0A36uni0A38uni0A39uni0A3Cuni0A3Euni0A3Funi0A40uni0A41uni0A42uni0A47uni0A48uni0A4Buni0A4Cuni0A4Duni0A59uni0A5Auni0A5Buni0A5Cuni0A5Euni0A66uni0A67uni0A68uni0A69uni0A6Auni0A6Buni0A6Cuni0A6Duni0A6Euni0A6Funi0A70uni0A72uni0A73uni0A74uni0A81uni0A82uni0A85uni0A86uni0A87uni0A88uni0A89uni0A8Auni0A8Buni0A95uni0A96uni0A97uni0A98uni0A99uni0A9Auni0A9Buni0A9Cuni0A9Duni0A9Euni0A9Funi0AA0uni0AA1uni0AA2uni0AA3uni0AA4uni0AA5uni0AA6uni0AA7uni0AA8uni0AAAuni0AABuni0AACuni0AADuni0AAEuni0AAFuni0AB0uni0AB2uni0AB3uni0AB5uni0AB6uni0AB7uni0AB8uni0AB9uni0ABDuni0ABEuni0ABFuni0AC0uni0AC1uni0AC2uni0AC3uni0AC7uni0AC8uni0ACBuni0ACCuni0AD0uni0AE6uni0AE7uni0AE8uni0AE9uni0AEAuni0AEBuni0AECuni0AEDuni0AEEuni0AEFuni0B02uni0B03uni0B05uni0B06uni0B07uni0B09uni0B0Buni0B0Funi0B13uni0B15uni0B16uni0B17uni0B18uni0B1Auni0B1Cuni0B1Duni0B1Funi0B20uni0B21uni0B2Auni0B2Buni0B2Funi0B30uni0B32uni0B33uni0B36uni0B37uni0B38uni0B39uni0B3Euni0B3Funi0B40uni0B41uni0B42uni0B43uni0B47uni0B60uni0B66uni0B67uni0B68uni0B69uni0B6Auni0B6Buni0B6Cuni0B6Duni0B6Euni0B6Funi0B82uni0B83uni0B85uni0B86uni0B87uni0B88uni0B89uni0B8Auni0B8Euni0B8Funi0B90uni0B92uni0B93uni0B94uni0B95uni0B99uni0B9Auni0B9Cuni0B9Euni0B9Funi0BA3uni0BA4uni0BA8uni0BA9uni0BAAuni0BAEuni0BAFuni0BB0uni0BB1uni0BB2uni0BB3uni0BB4uni0BB5uni0BB7uni0BB8uni0BB9uni0BBEuni0BBFuni0BC0uni0BC1uni0BC6uni0BC7uni0BC8uni0BCAuni0BCBuni0BCCuni0BCDuni0BD7uni0BDAuni0BDBuni0BDCuni0BDDuni0BE1uni0C83uni0C85uni0C86uni0C87uni0C88uni0C89uni0C8Auni0C8Euni0C8Funi0C90uni0C92uni0C93uni0C94uni0C95uni0C96uni0C97uni0C98uni0C99uni0C9Auni0C9Cuni0C9Euni0C9Funi0CA0uni0CA1uni0CA2uni0CA3uni0CA4uni0CA5uni0CA6uni0CA7uni0CA8uni0CB0uni0CB1uni0CB2uni0CB3uni0CE6uni0CE7uni0CE8uni0CE9uni0CEAuni0CEBuni0CECuni0CEDuni0CEEuni0CEFuni0D82uni0D83uni0D85uni0D89uni0D8Auni0D8Buni0D91uni0D94uni0D99uni0D9Auni0D9Buni0D9Cuni0D9Euni0DA0uni0DA1uni0DA2uni0DA4uni0DA5uni0DA7uni0DA8uni0DA9uni0DAAuni0DABuni0DADuni0DAEuni0DAFuni0DB0uni0DB1uni0DB3uni0DB4uni0DB5uni0DB6uni0DB7uni0DB8uni0DB9uni0DBAuni0DBBuni0DBDuni0DC0uni0DC1uni0DC2uni0DC3uni0DC4uni0DC5uni0DC6uni0DCAuni0DCFuni0DD0uni0DD1uni0DD2uni0DD3uni0DD4uni0DD6uni0DD8uni0DD9uni0DDFuni1F00uni1F01uni1F02uni1F03uni1F04uni1F05uni1F06uni1F07uni1F08uni1F09uni1F0Auni1F0Buni1F0Cuni1F0Duni1F0Euni1F0Funi1F10uni1F11uni1F12uni1F13uni1F14uni1F15uni1F18uni1F19uni1F1Auni1F1Buni1F1Cuni1F1Duni1F20uni1F21uni1F22uni1F23uni1F24uni1F25uni1F26uni1F27uni1F28uni1F29uni1F2Auni1F2Buni1F2Cuni1F2Duni1F2Euni1F2Funi1F30uni1F31uni1F32uni1F33uni1F34uni1F35uni1F36uni1F37uni1F38uni1F39uni1F3Auni1F3Buni1F3Cuni1F3Duni1F3Euni1F3Funi1F40uni1F41uni1F42uni1F43uni1F44uni1F45uni1F48uni1F49uni1F4Auni1F4Buni1F4Cuni1F4Duni1F50uni1F51uni1F52uni1F53uni1F54uni1F55uni1F56uni1F57uni1F59uni1F5Buni1F5Duni1F5Funi1F60uni1F61uni1F62uni1F63uni1F64uni1F65uni1F66uni1F67uni1F68uni1F69uni1F6Auni1F6Buni1F6Cuni1F6Duni1F6Euni1F6Funi1F70uni1F71uni1F72uni1F73uni1F74uni1F75uni1F76uni1F77uni1F78uni1F79uni1F7Auni1F7Buni1F7Cuni1F7Duni1F80uni1F81uni1F82uni1F83uni1F84uni1F85uni1F86uni1F87uni1F88uni1F89uni1F8Auni1F8Buni1F8Cuni1F8Duni1F8Euni1F8Funi1F90uni1F91uni1F92uni1F93uni1F94uni1F95uni1F96uni1F97uni1F98uni1F99uni1F9Auni1F9Buni1F9Cuni1F9Duni1F9Euni1F9Funi1FA0uni1FA1uni1FA2uni1FA3uni1FA4uni1FA5uni1FA6uni1FA7uni1FA8uni1FA9uni1FAAuni1FABuni1FACuni1FADuni1FAEuni1FAFuni1FB0uni1FB1uni1FB2uni1FB3uni1FB4uni1FB6uni1FB7uni1FB8uni1FB9uni1FBAuni1FBBuni1FBCuni1FBDuni1FBEuni1FBFuni1FC0uni1FC1uni1FC2uni1FC3uni1FC4uni1FC6uni1FC7uni1FC8uni1FC9uni1FCAuni1FCBuni1FCCuni1FCDuni1FCEuni1FCFuni1FD0uni1FD1uni1FD2uni1FD3uni1FD6uni1FD7uni1FD8uni1FD9uni1FDAuni1FDBuni1FDDuni1FDEuni1FDFuni1FE0uni1FE1uni1FE2uni1FE3uni1FE4uni1FE5uni1FE6uni1FE7uni1FE8uni1FE9uni1FEAuni1FEBuni1FECuni1FEDuni1FEEuni1FEFuni1FF2uni1FF3uni1FF4uni1FF6uni1FF7uni1FF8uni1FF9uni1FFAuni1FFBuni1FFCuni1FFDuni1FFEuni2010 quotereverseduni201Funi2023uni2031minuteseconduni2034uni2035uni2036uni2037uni203B exclamdbluni203Duni2047uni2048uni2049uni204B zerosuperioruni2071 foursuperior fivesuperior sixsuperior sevensuperior eightsuperior ninesuperior zeroinferior oneinferior twoinferior threeinferior fourinferior fiveinferior sixinferior seveninferior eightinferior nineinferiorpesetauni20A8 afii57636Eurouni210Buni210Cuni2110Ifrakturuni2112 afii61352uni211BRfrakturuni2126uni2127uni2128uni212Auni212Buni212Cuni212Duni2130uni2131uni2132uni2133onethird twothirdsuni2155uni2156uni2157uni2158uni2159uni215A oneeighth threeeighths fiveeighths seveneighthsuni215Funi2160uni2161uni2162uni2163uni2164uni2165uni2166uni2167uni2168uni2169uni216Auni216Buni216Cuni216Duni216Euni216Funi2170uni2171uni2172uni2173uni2174uni2175uni2176uni2177uni2178uni2179uni217Auni217Buni217Cuni217Duni217Euni217F arrowleftarrowup arrowright arrowdown arrowboth arrowupdncarriagereturn arrowdblleft arrowdblup arrowdblright arrowdbldown arrowdblboth universal existentialemptysetgradientelement notelementuni2210uni2213 asteriskmath proportionalangle logicaland logicalor intersectionunionuni222Cuni222Duni222E thereforesimilaruni223Euni2241uni2242uni2243uni2249 circleplusuni2296circlemultiply perpendicularuni2300 musicalnoteuni3001uni3002uni3003uni3005uni3007uni3008uni3009uni300Auni300Buni300Cuni300Duni300Euni300Funi3010uni3011uni3014uni3015uni3041uni3042uni3043uni3044uni3045uni3046uni3047uni3048uni3049uni304Auni304Buni304Cuni304Duni304Euni304Funi3050uni3051uni3052uni3053uni3054uni3055uni3056uni3057uni3058uni3059uni305Auni305Buni305Cuni305Duni305Euni305Funi3060uni3061uni3062uni3063uni3064uni3065uni3066uni3067uni3068uni3069uni306Auni306Buni306Cuni306Duni306Euni306Funi3070uni3071uni3072uni3073uni3074uni3075uni3076uni3077uni3078uni3079uni307Auni307Buni307Cuni307Duni307Euni307Funi3080uni3081uni3082uni3083uni3084uni3085uni3086uni3087uni3088uni3089uni308Auni308Buni308Cuni308Duni308Euni308Funi3090uni3091uni3092uni3093uni3099uni309Buni30A1uni30A2uni30A3uni30A4uni30A5uni30A6uni30A7uni30A8uni30A9uni30AAuni30ABuni30ACuni30ADuni30AEuni30AFuni30B0uni30B1uni30B2uni30B3uni30B4uni30B5uni30B6uni30B7uni30B8uni30B9uni30BAuni30BBuni30BCuni30BDuni30BEuni30BFuni30C0uni30C1uni30C2uni30C3uni30C4uni30C5uni30C6uni30C7uni30C8uni30C9uni30CAuni30CBuni30CCuni30CDuni30CEuni30CFuni30D0uni30D1uni30D2uni30D3uni30D4uni30D5uni30D6uni30D7uni30D8uni30D9uni30DAuni30DBuni30DCuni30DDuni30DEuni30DFuni30E0uni30E1uni30E2uni30E3uni30E4uni30E5uni30E6uni30E7uni30E8uni30E9uni30EAuni30EBuni30ECuni30EDuni30EEuni30EFuni30F0uni30F1uni30F2uni30F3uni30F4uni30F5uni30F6uni30F7uni30F8uni30F9uni30FAuni30FBuni30FCuni30FDuni30FEuniF639uniF63AuniF63BuniF63CuniF63DuniF63EuniF63FuniF640uniF641dotlessj commaaccent onefittedffffiffluniFB05uniFB06uniFB1DuniFB1E afii57705uniFB20uniFB21uniFB22uniFB23uniFB24uniFB25uniFB26uniFB27uniFB28uniFB29 afii57694 afii57695uniFB2CuniFB2DuniFB2EuniFB2FuniFB30uniFB31uniFB32uniFB33uniFB34 afii57723uniFB36uniFB38uniFB39uniFB3AuniFB3BuniFB3CuniFB3EuniFB40uniFB41uniFB43uniFB44uniFB46uniFB47uniFB48uniFB49uniFB4A afii57700uniFB4CuniFB4DuniFB4EuniFB4FuniFFFD�������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/simple_map_plot/report_to_csv_host.xsl�������������������������000644 �001751 �001751 �00000006131 12557600613 030576� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method = "text" indent = "no" /> <xsl:strip-space elements="*"/> <!-- OpenVAS Manager $Id$ Description: Stylesheet for generating a list of IPs with threat summary Authors: Michael Wiegand <michael.wiegand@greenbone.net> Raimund Renkert <raimund.renkert@greenbone.net> Copyright: Copyright (C) 2010 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:template match="report"> IP, high, medium, low, color 127.0.0.1, 0, 0, 0, white <xsl:for-each select="host" > <xsl:variable name="current_host" select="ip"/> <xsl:variable name="high_count" select="count (../results/result[host/text() = $current_host][threat/text() = 'High'])"/> <xsl:variable name="med_count" select="count (../results/result[host/text() = $current_host][threat/text() = 'Medium'])"/> <xsl:variable name="low_count" select="count (../results/result[host/text() = $current_host][threat/text() = 'Low'])"/> <xsl:choose> <xsl:when test="count(../results/result[host/text() = $current_host][threat/text() = 'High']) > 0"> <xsl:value-of select="$current_host"/>, <xsl:value-of select="$high_count"/>, <xsl:value-of select="$med_count"/>, <xsl:value-of select="$low_count"/>, red </xsl:when> <xsl:otherwise> <xsl:choose> <xsl:when test="count(../results/result[host/text() = $current_host][threat/text() = 'Medium']) > 0"> <xsl:value-of select="normalize-space($current_host)"/>, <xsl:value-of select="$high_count"/>, <xsl:value-of select="$med_count"/>, <xsl:value-of select="$low_count"/>, orange </xsl:when> <xsl:otherwise> <xsl:choose> <xsl:when test="count(../results/result[host/text() = $current_host][threat/text() = 'Low']) > 0"> <xsl:value-of select="$current_host"/>, <xsl:value-of select="$high_count"/>, <xsl:value-of select="$med_count"/>, <xsl:value-of select="$low_count"/>, blue </xsl:when> </xsl:choose> </xsl:otherwise> </xsl:choose> </xsl:otherwise> </xsl:choose> </xsl:for-each> </xsl:template> <xsl:template match="/"> <xsl:choose> <xsl:when test="report/@extension='xml'"> <xsl:apply-templates select="report/report"/> </xsl:when> <xsl:otherwise> <xsl:apply-templates select="report"/> </xsl:otherwise> </xsl:choose> </xsl:template> </xsl:stylesheet> ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/simple_map_plot/join.awk���������������������������������������000644 �001751 �001751 �00000004713 12557600613 025570� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������# OpenVAS # $Id$ # Description: joins threat data to coordinatesbased on IP as key. # # Authors: # Jan-Oliver Wagner <jan-oliver.wagner@greenbone.net> # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. BEGIN { FS="," countLocations = 0 countHosts = 0 } NF == 4 { # hits locations.csv locations[$1, "lon"] = $2 locations[$1, "lat"] = $3 locations[$1, "comment"] = $4 countLocations ++ } NF == 5 { # hits hosts.csv hosts[countHosts, "IP"] = $1 hosts[countHosts, "high"] = $2 hosts[countHosts, "medium"] = $3 hosts[countHosts, "low"] = $4 hosts[countHosts, "color"] = $5 countHosts ++ } END { for (i = 0;i < countHosts;i ++) { if (locations[hosts[i, "IP"], "lon"] != "") printf("%s,%s,%s,%s,%s,%s,%s,%s\n", hosts[i, "IP"], locations[hosts[i, "IP"], "lon"], locations[hosts[i, "IP"], "lat"], locations[hosts[i, "IP"], "comment"], hosts[i, "high"], hosts[i, "medium"], hosts[i, "low"], hosts[i, "color"]) if (locations[hosts[i, "IP"]] == "127.0.0.1") printf ("%s,%s,%s,%s,%s,%s,%s,%s\n", hosts[i, "IP"], locations[hosts[i, "IP"], "lon"], locations[hosts[i, "IP"], "lat"], locations[hosts[i, "IP"], "comment"], "0", "0", "0", "white") } } �����������������������������������������������������openvas-manager-6.0.9/report_formats/simple_map_plot/fonts.txt��������������������������������������000644 �001751 �001751 �00000000041 12557600613 026005� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������FreeSans FreeSans.ttf �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/simple_map_plot/world_map.tiff���������������������������������000644 �001751 �001751 �00001466303 12557600613 026773� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������II*�����������������������������������������������������������������������=�������R�������S����" �� ����* �� ����B ������r ������ ���������� ��!��"��$��%��;&��X'��u(��)��*��+��,��.��#/��@0��]1��z2��3��4��5��6�� 8��(9��E:��b;��<��=��>��?��@��B��-C��JD��gE��F��G��H��?J��K��M��N�� P��Q��S��T��=V��W��iY��Z��\��5^��_��a��-c��d��f��3h��i��xk��m��n��]p���r��s��Pu��v��x��Fz��{��}��6��ր��v����ƅ����6������e����Ǒ��w��%��Җ��s������W������S�� ����r��'��ת����@������]����̶����=����½��w��=��������m��>�� ��������Y��.��������4������=������C������`�� ����j������q������n��������'���<�� �: � ��T���r�)���K���!�X#�%�&�(�m*�:,�.�/�1�X3�5�6�8�J:�<�=�?�ZA�C�D�F�ZH�#J�K�M�O�>Q�S�T�V�X�kZ�E\�.^�`�a�c�e�`g�0i�k�l�n�`p�-r�t�u�w�y�{�}�c�Q�E�,����Ȍ�����[�7���ٝ�ß���w�S�<�%����ֲ���|�f�R�K�-�����c�G�5����������{�e�V�T�B�����{�Q�$�����S� �����Y�/ � � ����}�a�)����\�#!�"�$�&�c(�@*�,�-�/�s1�<3��5�6�8�`:�,<�>�?�A�C�LE�'G�H�J�L�N�ZP�(R�S�U�W�wY�M[�-]�_�`�b�d�ef�:h�j�k�m�o�q�Ys�&u�v�x�z�u|�K~���ƃ��T� ��Ɍ��\�)��ە��h�5� �ݞ���p�F���Ы���\�%���v�8��ǽ��Y� ���m�,����h�6����P����z�C����y�D����\�,����c�8�����w�J� � � ��g�0�����k�B�!� �"�$�`&�'(�)�+�-�P/�!1�2�4�6�\8�(:�;�=�?�HA�C�D�F�\H�J�K�M�9O�P�R�T�YV�$X�Y�[�]�W_�%a�b�d�Mf�h�i�tk�6m�o�p�r�ct�$v�w�y�}{�6}�~��P���l�%���\��ԑ��M��Ø��[��ݟ��\��ަ��T� �έ��R� ��k��͹�|�E���7���<���N���a����G����`���k���c� ��f����B���U���R����M���G�� �P � ��I���A���L����i �"�#�%�/'�(�*�\,�$.�/�1�>3�4�6�08�9�;�4=�>�@�:B�C�E�?G�H�J�EL�M�O�DQ�R�T�sV�+X�Y�[�8]�^�`�4b�c�e�3g�h�j�1l�m�o�3q�r�t�Av�w�y�M{�|�~�G���O���2�ы�p� ��P���-�̘�f���?�����O��}���8�ʰ�W��w�����5��F��X��Y��Q��7�����t��V��4�����h��E�����F���f��#�}��6����c��"���@����b��$�� �F � � �U�� �d��)���4���:�� �<"�#�$�5&�'�(�-*�}+�,� .�s/�0�2�k3�4�6�e7�8� :�V;�<�=�8?�@�A�!C�qD�E�G�kH�I� K�sL�M�N�EP�Q�R�!T�gU�V�W�EY�Z�[�3]�^�_�a�@b�uc�d�e�f�h� i�=j�Zk�wl�m�n�o�p�r�%s�Bt�du�v�w�x�y�z�|�/}�L~�i���ʂ���;�f���NJ��%�R�����J����<��ƛ��L��Ƞ��L��ڥ�=��8�Ϋ�b�����L��~���N���,��r���i���w�+���1���&��{�&��~�0���F���8���5�����N��}���C��n� � �< � �b��}���.��O��o��� �&"�#�O%�&�t(�*�+�(-�.�@0�1�N3�4�M6�7�@9�:�.<�=�?�@�A�fC�D�;F�G�I�fJ�K�$M�N�O�P� R�(S�ET�bU�V�W�X�Y�Z�\�-]�J^�g_�`�a�b�c�d�f�2g�Oh�li�j�k�����������������������������������������������������������������������F��X��^��q����|��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������~��}��{��x��n��r��v��r��t��o��s��o��o��o��o��o��q��r��s��o��n��o��i��h��b��_��^��`��b��`��]��Z��Z��_��c��g��c��`��_��^��b��^��d��^��`��`��b��c��b��]��Z��]��X��X��^��Y��c��b��Z��X��Y��V��V��Z��V��V��V��U��T��P��S��Q��T��P��S��P��S��S��P��U��S��V��Q��T��Q��L��N��J��J��Q��O��I��P��Q��S��V��_��V��S��A��J��G��L��J��F��F��I��I��L��N��P��P��O��F��=��;��5��.��&����������������������������"������������������������'��)����+��+������'��0��.��-��2��.��.��2��8��<��;��;��@��E��E��J��<��;��A��?��E��D��J��c��s��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������~��{��x��w��w��x��q��q��o��o��l��i��h��e��^��^��`��^��O���������������������������������������������������������� ףp= ? ףp= ?�������������������������������������f�����V@��������������������������������#WGS 84|�* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|bw; Gumf]jvZݎgwm}ns|<wq8Os:]CtWw<^'xO{>_|� A0,d%-/ A(* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9y)&M!}Yv=~]m;ux=}q<'3ts],W7v:}gw|z<~7{~~>?O�P,DLAPl!P# ' =CPAQ,CđBԀ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'_gs7糙ƏCjt]j5-inv{}n7.rx|//r9M6cw3^'s=W_??/�@PlA0|%d' B1 P/C0EĐGDQQlO * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rO-dsY\939FMV mN}7-q</r<ΗW=onvחz|g{~?~,@0L Tl! % B0) Ð1 A,ED1LIőTQlaeF1iǑҦ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0QG863bXܞ?-es9L_5Miu:MfUntb\&ZxW'usKvzsw|^u/_|� A0,d%-/ C0; EđMOE1,[deƑmoG1{ Ȓ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_*ogsb0\^'cX7-2<g9gY&wM4=^YkZm6 0<-cu'z>Wu=s|>x~/q>^ϟ~~߯@o �L A\<%Bp|+- C=EDpKđLME\]<eFq|kƑmG}Hq * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}= 8|V"#dq<fWe9s5t<=i:&Uv=~]m; sT[cw>Wvzkw?z|^ۑ|q?/~~@/ L@\D B0d) ' B=?D0ILGD\]D_F1digF}!H1#L%H\f* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}= 8|V#c2X#39k;gZ&{Kju[[knw{Ip72V[[8tx\'3v;].sx|>y^/O8K}?@P, 4@p\T#BP) 3 Bp=CDQ,I4SDq\]TcFQisFq}ԃHR,#4$Hr\&T" * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{w; lf#dr<NWf2|g;ht<֗?j4}f[lv=V_n6}{ptVurx\^^qty-<#u\S?yX$j>o?�, pLTA) p% ;C=,IqLET[E]iqe{G} ,#rL%T&I(* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{w?FpؼF3cX;+ټs5gY&{KڽFUkZk۽uo[}Dx<NW-9}Ou\W{.a|O?jrMU^?_ko�?$pLl Pt#A% p1 -PCC$EqLQlMQtcEeqqmQ G$"rL%l'Rt(I*r̰ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7yS߰, a1Xf#b,7+e3Yc=f-wKi5Zf]j-km7[}nG ܾG3s\;ݾsw]'{o4)|9/^@/ $D\ B0l+ Ф5 Ð= >B04UYь[_QuFy {!$#R,$HL%Ҍ)+R,J* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7x߰, a1Xf#b,7+e3Yc=f-wKi5Zf]j-km7[}a/8Vy+];v{k^'{z}o*F=ľ~o@0$@Ld|%B0'B1 °/@8N+QD=lYqUєkFmyr u!"HD$l'r)Ҕ*Jĭ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.VvhgsI|`/2<4`p3bX܎S'slo=ftYGumf]jvZݎgwm}_8Vsy<7/r<ΗW=ov=>l{^ Ļ_?,@<A\#% B5 Ð<=+jDp?C<;őD]TegƑmǑ}ԅ, Ȓ<$ɒD%T&(ʒ,* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvfgs|`/ aXlfr8WYo==;:f]=[;}9\'ty>Su{]gx{?y}^#_z0? ,Pl 0 AЌ- 1 P+>l3 C|OÑDYEt[ƑFO{2 y!G$!,#Rl'Ҍ)IҤ)+R/* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.VvҞs}߯,bp&7m+3w/Z&sG5VO[g7oB7;'8_'s\7:>gw]'w<?_{}_o@/<ALB\ 0|% 0 Q0U CLYE\cQ#FmG{Hq ȒL"\&d'rt(ʒ̯*ܵ.h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.VvΞs}߯,bp&7Xģ#2o==;:<#Uv=~Yn6Mya[&x_+s>Wvzkw?z|_{y~@0$@Ld|%B0'Bh5̚м>DM į)D + F|eF#1g Gj$YG|{!R,y#G2<$ɒ$'ID)R+J2,˒/K1S, * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvʞs}߯,bp&7Y,Oxrټ24Z sKjtڭFO?kvZ}k۽uR21p7?+9Wz]kx;|^7|=~n@@ Z&ˡPBl+C- 04 >os0|Y"C=Ƒ”1;FD{!I qԙ'Ҍ(Jr**Kr/ 0Ls2<2Mi"* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvžs}߯,bp&7Y,O#frFbe4Z&k(zmSkZkl۽u\d&8g'tz>WWv:~gx|>חz<g|~?Vx}W �@p<Ai_l!A) p B>|B@4' ;lF4Pe Ɛk FmudDs#LɒD'IT'R*)˒/K/S2$Ԍ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vv=~7 a1X<fr8C-e3XF_7gz;ENUk6Zmnv]ƋK =x~g+sz>Wz~kw|>|g{~uo@0$*/ӂιpBL-CD3 p47pAN4%ŌL#|=FmkqoGcA# ɒ$ɲ%r)K+K,˳-s 1M<3I* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.VFw;yޮKXf8܆W%eYO=ӍE4pVO4;m6-y7۝W7=Ow>'W8 ?@ >O5%hn1CT; m#EČB0E piGuG}Dz~E1܇$ɒ\!JT&r|+ʒĭ,˒ܽ*.r3̓D4͓Z* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vw;yp&$Xf'b<?%eYlg;f<#IVO[g7ocZ6rw_+}s>Wvzkw?z|_kc ?@ 2u B n1P 8ҐDŊ1L_EGsQy wB+#!Gd!l'R+̧-J-/S,3L5Ld5h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vw;yp&TXf'b<?%eYlg;fƏCiڝfrlv=V[[7\nywܾ7+t9Wz]kx;|^7|=\Ӈ}_@+S׾,Jӥ|t"B , = DC#KEċILG]iqeQ+ Qy#G<u$ɒD%T&(ʒ,˒Ľ-.,0̏* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vw;|p7aXf8܆W%eYO=9EiZf]:݆emW*l\&s</3z>Wu=s|>y>'#{s~_? 1;Apk@- C5 07 ADME UYSƈS�80T]Ʊ!R,e#2D%HL%l)R+2ĩ-J̽- * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.VvΞs}߯,bp&7Y,O#frw1Z-Cjt&Q[-cnn7+omx[N&y<~W#s:\?{=~cw<]'}>~{|}-|>D9 D3[Ќ!  BP5 p9 1ñ$ADQ*Q<[ьa�hDXA$u5DlG|Hq#RL%Hd%l'R+̧-J-ꦀ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{UmXsuݮ`o;obmxF 2<)ٜc=YG4m&]j6Z͞knre{J6ۭm\N_ty.Os]N_x{/w^O_|wt}~߽?@=ϓ[R3NH2< PCC$EqLQlMQtcEeqqBT1!2-ǑG\&Il)+J2̩+˒Ա-1,3L3Lf* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{UmXsuݮ`o;ua׻}kR1Y</ slo=ftYGs}VYlu{-vaiqgxn'py\^O3zOt{]^s|'x}^_Or[]{7߿0? APk'N -B) =CPAQ,CđDGL]EQlaQcps ug!Ѥ"Ȓ<#IL$J\)2|*ʒ+K̻,Lܼ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{UmXsuݮ`o;X%ُa/+fsfw/h3%'VE5-vmn9-;i7=q\g>Su][?y^gۮ^i{}?@P+v'O{AL03 20D'C5p= Ñ ?E$Uq4]ő_eAk:G[ӷQo#FLs#ɒT%l)+J2̩+˒Ա-1,b* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Tw?v]嶵uʰ% x`Nc06&K#fqڞ[5t<ƋKFSlu=Vi;}5Rwoy\nO3zOt{]^s|'x}^_O~#A8w@/<?k$CZ(Ld3A1?đM DQQlKEtSƑmFqQkGs Đ0&"I*Jr+R/˓1 2LS,3Sj* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6xۮ+s]/Ww^, ja1W3dr<nSeY,o)糹Ij4zf]5i6{:ox;'W7=Ow>'WˌU2~?P,H1/cAp@ @1 B=?D0ILGD\]D_F1digF}PGċH$ɒD#\)J2l)Ҥ,˒Ľ+ܿ1L2* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm577 uuo_8 h`X\^ dp,nO-sesY s7Jܦ{Mi"<NUk:en6۝-n>{܎_+ty=>oSu{]~gx{>y}^_7j?� �@ֽ pAT7PL C3 P9 7C$A,SQlYьWEѤasQyD .2H1ܓIr'ɒ(ʒ&*r/˓0̓. * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm575Kp.+{m_1W^'do<nٔf2Y\g;~h,{MfVW:]ml;]up7\kw3sz\Gvzsw|]z|/{~^N4RNFKS� A,A<[إC>MDED1$GLQıdO|eF1gFqƱoH2$?r,}�?Dz|#R+̗-Ի.K0,3sL5T6M8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fdgsl\-۝r\W{u^, gZ1Q&.ga8<6; eY<[=b(y+IftNo[k6[ml={7x\7+t9Wz]kx;|^7|;Sn>ߟ?P? +,?0{BT-CL3 p5Ñ=đMSq<Uő]Ƒmsy@|!Ȳ<$ɒD%T&(ʒ,˒Ľ-R* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fdgsl\-۝r]!`.; 1V.:qFGZfylOr֖ѡu [6[mX֮դn&sqy?7yKu{w{'y}?}ӽ4?7 p<Ap4Њ>,p4l=0Eđ<UEL[F\]1|eƑuG{H}! !H2<"Il$ɒ|(ʒ)*,˒0̓1&* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~flgsl\-%to~X ja/,=񘌥UdsY 7is\?hqFOlu;=vkh7XkI#w<-n9<NW7=_Ot=Nw>ߏx>OW?#%i9o P+@PD nbp>LB T5A03CpEq ILAıdQEQleqia7wHB2H%d&|$ʒt(-.,̒h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~f=n6h]_8 xeX<fY<fs5#igrSG3]v=Ytp61qy\^ۛty.Os]N_x{/w^O_|}/?p ?$,O BcC A7ð=ME,SE<Uű\]l1eQiG +H2y%HR\'Ҍ)ɒ*J-Kܳ/ 1˓,2+* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~w;Uinr\oW[pYcW%XpT<- ~8NQ9?=jB%Kju[[·%A6Fw8lN\g/>W=o?>g?mr?@L =AlB+B- 5E ĐKMdU|eƑs6FsC.GԋHL%rl'IR'ʒ)̱-R/KS/H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~Fw;Uinr\oW[wέl /ػ#a<}dp^ygY&cMhN[k6Z)Y;_< y?7s=gS{ww>}?{?.q~?$0<�4#p|% - Ð= CpEđDMő\]Tc,i@oo-Hw"$#Il$ɒ|(ʒ)震*/˓0̈* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~w;Uinr\oW[wƯ<cbl8|f+Y-ь%YG=hr<ދKi:VYuyF՟q}l7.ˋq9\g#r.7u;]cv/wy=^gz-ud?_  0< Ќ ! BP5 p9 1ñ$A.lKdED|[ фm>QEolxQ ȑe#r4$Hd&r)+R,J.* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U$w?]n[;w^n~_1L6e1Y^7$YIV[=: _hڝf]Z݆gmۜO}cZF덼rw|?3sz<Wvz}sw|=z|~7{~>[8?P+0D @L# @/ CEĐGDQQlOA1|mdoG1y7q { >lfԟ:\ Gr -Ի.K0̒s40MsL7ӌ8Ni* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U$!w?]n[;w^mz`/EcaWfab1xӉpYm͚:&Mi:.UZkl۽ulKc7tw>wKv:ݞw{^>z<ޟ?}_?we\@$0$@D\BT#pzB5 9 CE ,Gđ<MőD]TeO1gǑ}ԅq 6-uF :FҌ)nI!2$- 1$3Q2͓D4l9;9* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,UG65mn;}w]71{_mt Y:oxV[rs%t; S=tZQµmVkm[ _kpu )rqsWv:}gw|z<~7{~~>wk߹L9p,@<A\#% B5 ÐTCCqKCDMlYqUђH>˩Fk Ȓ Alt2)IhHL!.s 1,3S44Ld6s92* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,TG65mn;}w]7ޑ{0 bo-nɈq;m~Xc2Fg%fY&~ϖgWMsvCm6ҭspx= o;fg>W:g|?<7~?/v8P,L ApT A| P# ) Cp-C;Q,CLIEj>bƏ\MFluǑd{G ~Hzqde&r)r!r/S4K\/L3LT5<8Γ7B* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,SG65mn;}rۯW]/S {aXfXkw~/esY[!hsz 1w|~IipZKkV&{ow#cg2γ:ZNq=^w>ߏx>OW?_|?On 8<4AЌ! p+ A5 Ð; C AqKC<Uő4[Er?F۟1}G{:G!Iu%\'2q)Ҍ*IR,-K #ܽ1rG3 2LNg6Ms9S;3 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,UG4K]h-֫}g]W[U{`n<aqX|^'_q<cU&W3z-C,1LC;lt<]cZMՎ1n7n'1#Hl6.˫u;]cv/wy=^gz/}?Yo @P,Pl Ќ- BP1 P3Ñ7 MDQ,QkFU1OF֔4Wl\ȑ_!,%l'I2 *G2̭-KSI{L2.JL5sl7St8M䉠 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U$!w?Nj\-6s.+v^0Wqle4qY<NW,9 K-t<5#i>qi8;6޶[ }Yw<;ܞg#·ϭoSx{~.x<O|}/ovW?� �@Pl At-B1 P+C3đMDoEDSqqtYHl ȲD!rKJo)1*JH@IR/I,13,3K<4͓$7M* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~w;UinEs\W~p7 a1X<fr8C!uYyF1r<ރI诙Qlt-Nml6Ya7>q\ngqm:;W:}o;<~g=b9߯/?P+@0<$AD! P B05 Ð7CAK#K9,[őI$mDiFIOQUGQ!$"<Fls'Fr|(ʑf9\ l! ZPr(L,5Sl6Mr* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~f=n6u]/W;~p7 a1X<fr8qZ3SW=2Ьk;tt=>?kvZinv図l.rx'7o[ާGv{wx;'z}|=1sܯ@@ �DpLB|%Bl-°/ p9 DEDS/|Kq;ő][Q;QS y Hr}#H<Gg'ɲe(ʒLײL$K[ZIQJt)LҴ5l7K"* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~f=n6u]/W;~p7 a1X<fr8#!lS=V3 %i&]v=Y-k{gpx<qPssz]wGvzsw|^z|GF5nr?@ PDd%|' B3 P=s9E ŐWE cDa$OQ4}ȑ#H ƒlg't(FRIRD,ǭ.KT)J,3sL4MsT̍ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fʞsmۭ+w^m 0X%߰N.)b2X̞ ё5L;;s-&SMh[k6[mlNk}Z8Yrxܬ~stz=Su].sx|>y^/O|~iGs?<# P+@PD LЌ! P BP) Ð; @olJUq[YѣGuq4}ǒ " daIq&)J++jpJ/&K$123b0* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~flgsl\-۝r]Wky/ hZ6|V7Y<&S s9lW=hsEi5Z}^]k1ysd݇cqy\Ngz<Cu;]>_|=y=]Fsyo~_}?0 ,lA0! ; <k1 +Dq-:(#\ñ|7FQiqmFq MER$!L%I0~% IZI;r*˒d"˳-o* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U#٭M_-evWx`p;u aq|V7$Z1+RͲhr(փGj4Z>S;=nd[wpx=9rv[^g+sz>Wz~kw|>|g{~. _ ?4P+@0<#At\% °- = DBo|LpEÑlUE*C3Ő|N+Qyr }!G,!4Fk&)+2-JR-0̓/* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]Tse٬Eo\m;etݮWZr[R/8;p6]d1ӫL |²,nw9q}%Kq6?s _mhOqܞg#\އWuݞc]yޟgݥn>[}ߟ,8P \Bl#B|% °- O{0E Cq,GE4II*=\=mGsGuDZ} Zq"/1c7ɑLY'ɱl(IҌ)̫-/R0K * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]Tse٬Eo\m;etݮW`o;ֿ\VX|]dq,jg .c=etYGumf]jvZݎ 7X-wx'py\^O3zOt{]^s|'x}V~۶{[_~~?@o LApT |%1 'B90CCqM =/,S QD]deƑ|gFsqK!R,I#DЪ"APԑ&I2|#ʒ(K-2* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W"ogsdZ,[]j[V륶q.;z_W% _VX]dq,Ꙝ giū)rzQ[-cnvGt\=?\G/ty>gW]ox{>^Euo>?|?O�?p APlt#Ap- oL4°%BEĐF۴TRÑ;de 1g sQy Z9V9MRl]'ɒ;s*R-K̽(ܿ1L21* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W$ogsdZ,[]j[V륶q.;z_W% jثxN2ÎcrX E39'c0,>M5Y]NI6YinvqoxS=viy<^_t9Ot=^_x;'x>__p;~߯P pL @ltP) i=T<C±,1D4E6ڧtbƐeƱm}HrQ EqL$<Y'rD3q"CҴ-K/K1S,3I* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W$ogsdZ,[]j[V륶q.;z_W% Uf+:N1|S Rys a &wMt SWYc|miZrx.ooz]?;w^'s=W½>Ǖr9 ? A0$Ќ A- / C09 ďcECq;ő\]ES4hkoQ G r<ʱ[}J>R 01lRIΔ1s,2L44MsT7ӊ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W$ogsdZ,[]j[V륶q.;z_W% ګ*7b.ҌWY[gY?=iZNfT:-*uYf,_q\ngɱ7p;]^s|'x}^_O~sa_P, L@dl#P) ' B1 CQ,HlY$WlRT dTE1Dz H"$#r3Fԛ$ɒ*I<\K}r1Ҝ̓i5Sl739Mӌ9h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W"ogsdZ,[]j[V륶q.;z_W% 0;~[cxXF+-,9Vg'hs;6KEh5:|JqjZ\Um{k|,9y?7[nvxkw]{z|>_{]gӝo@0$,A\BL%0'1 C= Dñ K :/SE2=msGQy GrlH%Rk-$ʋd+d(ԪKܵ13$2<1M3d39* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]Tse٬Eo\m;etݮW`o;X-~q9<^S㪗#-gEt:^6D:۬gn6[}asCx73H==:ݞw{^>z<ޟ?4׾?~~?@L lAt B# + 1C$>-*EőZEr&٫ LZ>|IGqGK!H#L%Ȓl&It)J 1FM-/oD3 1T33D5LL5l9S* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]Tse٬Eo\m;etݮW`o;X,NF)e3Y&Z4<3Mε}.]{j<;*w;mm7s[qy6_t9Wupwx{yW|}és]/ @ Ap< B- |5 Cp; Ñ =?/DUő,bE#}C-[DD}4Hq ȒL%I\&<&Jr|(ʒ̭-JWK/L1M 23d3l7NR* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]Pse٬Eo\m;etݮW`oHF|a8,^c28xOeY,R[첍;m3V[Z=~mlv{w-Ag5g\gx{>y}^_|}>K?]?@/<ALB\ 0|% 5 C; D<>0ElJ>+klsGQyw ȒHD!IRl'2(ʒFY-o۱-KT0Lr0̓L5M\6 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]Pse٬Eo\m;etݮW0% ߱X\F7cW!$e9 2-CJ4*_A5mm{o</s_#tyݗyv:ݞw{^>z<ޟ?}_?u �@p@< PlBp B+ P3 9*CSQ#>;3/v5sǑ}, Ȓ<$ɒD%T&(ʒwˑtR˳Y3̳D5LL5l9h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]Hse٬Eo\m;etݮWZ b08lN7cC-yY\\tYG^}.?[k6ZFUw[ 58M_ǰ9W's\8w;.}W7\/?_ $@P,pLЌ ! BP5 p9 1è#$ADQ,]DcE-qDeG{Ȓ !L%Rl'IR'ʒ)̰Eq|[.ԥ1/5Ld5l7R* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]Dse٬Eo\m;etݮW^ b08lN7cC-d,V\YWGgN]Z4ggnv[#iw9nO/s:\Wv{'wx;'z}|5=_eףs_O @ Ap< B- |5 Cp; Ñ =*oDUő`ъ{jDeGq<{ y!G$!,#Rl'Ҍ)IҤ)$[E3+ʲ/Er4Ks\6T6NP* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]Ase٬Eo\m;etݮWy_;a8&3r<~Wud٬.\I-0)3]aiznw{w.ca+|W79(q;<>_y}>Og/;>ߟ@oD \T#p|% - Ð= &ď\?ECE1+mp6l9QsQoG_ Ȓ H%Rl&It(ʒ(0<Y-P[1QW.LS4MsT7M|9* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]Ase٬Eo\m;etݮWi_;a8&3r<~Wd٬\Q3<wKi3vo]i{=cvmomoï<G/tfvzkw?z|_k:ߧ3?_?� �@lA|%\-B3 5:o{PMDTď\1|FQ|Z1uF ȑ#H%Rl'I2|(ʒdt5rEqLJ0̏|M</l6Mt9>h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W gsdZ,[]j[V륶q.;ݚz_07 px63cr8W)fryڿba&wKuilt<Ū15{uo[d+{k:^s\}x=kw]{z|>_{;g7} ? A0$Ќ A- / C09 @ PQPHD:iDiFoQwǑH I%2<&ɒ|'J(=1fKQk)1.LMr7͓8Ύ= 0xT" Aik'Ţn3Hc8A$ɤRDS/Le9da4ͦSs?Pg9DѨTE.OTi:eVTժUn_Xk:d٬VEoZˤ.so7[p%7 {aXlf1G)eYlW=v[4V~f\w1J=vMFvݾyw6fU>Vwq]cv/wy=^gz/_S?P+@0<$AD! P B05 Ð7CAOUq XE)13XєOqsGu Ȓ H%Rl&It(ʒ(J3I,ʬu0L-MĹ5tM6Ns9,= 0xT" C"P"1r5d8='I2$U-f9|]7M3u=h9}GQ4%2Uiu:VVVjzj[Wl:fl{ek[n;}b7rƯȞ }aq8LfO-es9L^ nA!H3.!i3[=fWmw[ypw>t\/ty>dÑƅj\^_x|>Ǘz<g|~?W~>/@@ �DpLB|%Bl-°/ p9 DE@ IőSOEF FQkG<wǴ!R,#H2<$ɒ$'ID)R+J-L\J/ʒ0Kq[5M3D7ӌ9EMZ= 0xT" C"P"1r5d8='I2$U-f9|]7M3u=h9}GQ4%25"(D U*NV; ~eYVkehZ;u]UF#S^n:U~aXle<S%eY[;^4WWiڼGCvZVinvoox\ Rt>W3sz<zݮ?ww|ޯ/ם:_ ?O� A 0dl!$-2) Ð=?D0KRPOđL=q[+pǑY1ԁG܉#L%H\&D)J2d+̧-Jܽ(BrĿ1K,3˓D.FslQ7t8FS:oր= 0xT" C"OE[F"Xf9GQ$vM!$9\Y*KR餶m1&9y:OS$A(9>'Nj8JPL+v_)V:dYm{Uo\-w;ut]o{~pW{ZWaXlf1G)eYlW=p7ş3FMlu;-^mj[M{pw.7iy:Nf\ܭx7]yޟgݪzQ>ק?~@@ �DpLBz¯Ϛ{! A0CC$Ej3 [F<e(tm FOGl{ G !2$"<!I2d#IҌ)ɲ*)K2E+K,3sL5Lάg4Mn#i=\* w;T2  N-ģv+ǣ2$M ȥTK,˥3m0̧k<ϡ8LR te"KҪTڅVQU՚b9l:}fYmV{]o\m;mv]oW{`o;킵جf#r<WYS7atX &f59.g9ݞim[m}7B'Ztzg+MrGȈu{\^ =y^gZ=~ץ}?z? #P,@LЌ(;뼐X콯,,C,%D4EEZHFlmF;B|uGr !R"G<$ɒ4$IҌ)r*I,˒,K 1s2K<4͓44MЪsY;3k<OsnB* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6bgs<P'BQTjeI)FRUUjVIBXgV)eNm6KUoۮ7 ]u\7Jn`n  :q5^6cY3'3w/֏Mg3WOvZVk;}n;_7y8}o?>gEz(K} �@p@< Pl 6У7Añ?đMET&BS<U qsG}Hԃq#ȒD$ɒ\"T&r|+ʒĭ,˒ܽ*.r3̓CMMӌ91* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6ʞsw=ϧ*GRh%6LөU*NWVjv\׫V+8Lg3{Uom+ms]{,5 _qX M((͗lk;h3?)rx֓]hzc}uo8[rx^FYy-?CA9|Gos<]z|ޯGy*Bׅ{?W@o LApT |%Bpt) ̊&=C 9 B1BLQılOEQL#- _1RG0A#H2<%Rl'(Jr+J-R/ 0Ls3L<5Sl78Ns,Gє<ϑOԀ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg{;{<P'GhT5*LT)}VWjUj\X+gYomn;}w]7}v5+_Wfʰ,O-h2s7gY&zbr3=]0ڭN/[m[޿{pw.dm:X?Uq;<~'x;'x>__z>}_$<�4'"HS .[p) E$Uq4\7LY8Clay q!Dz$#HR,#rL'Ҍ)ɲ+JR+r̹/ 1˳$3LS,31leƓ|7N * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rfw;w9h%BPiTZM2GjNRTkUZrWl%bXmVYg[S3okzB-M^p *)&"Ӗfsfw/h3&KV hZz'D;Mw+8,L771z=Souxܝyz<ޟgz>ߟ}]o�? L dPl%As0n Od?p # EQLYq]EaFm=/#L%d'IRl'r+̡-ʲ/KR/s 3L5̳d7MSl71y;G{<C${?ϔ f* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rw;w9h%BPiTZM2GjNRTkUZrWl%bXmV[MgfYgs]o7{[W cm^{7c9 -\sX_7t9MdX vtJ#[`2LdݶN{m9<7bwO{]^ϙϬz>y^g>?ϻ?$,PlЌ AФ! <O<&dIDSQBFT>n<-05QqGs Ȓ>*%HoĒ+Ṛ-Ի.K0,3sL5T6M8;s=>O@ꄝCTC6ʴ%4Rz&* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rw?q>O:GRh]*NS:VWVjj^W;gZl]n[k1ok*-;ㇸbo%kW)p,kg=Cഔg뢛 ^o[u4j5zk_}7sz.zoI:Lۧz|?g>}?Zs0$,A\BL%0'1 CBkADD,[Ec#+Q3ñ{Cr }!H"TDkgR6F*\)K2+/L1M 23d3l7N9O:3;/ALlPTmr* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rw?q>O:GRh]*NS:VWVjj^W;gZl]n[vC"ww-n凸oyaY*-~~w'Z&sG1Ԍ]d0kkwY#e7{sa86s=~zsފt99W^gz/r{< +@PD LЌ! P BP) .DDJ Nj˴BC0kq5G{ $qKU"ќ=T'ʒt$*/K0̒0L2l7M|8Γ\8N:?O@Β = * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&R!w?q>O:GRh]*NS:VWVjj^W;gZl]n[vC"we;y`n88 `8|V#c2VVc$8o=3(寙xƏCkZmj{M6oLl{rv|~g*w.Op:#9xywy=^_|}S~~?�, pLTAFɮ:?oTF<=D\BQ- Ƒ)ƮKG1yMKȍ쀂HPC% ɲ,)J2+̧-Jܽ.Ŀ1L23L5L\6D9N3d;=N>c<O#} * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rͧ{;O(T%?PMKS*UBOTV[W,V%_XMk['vC"w\gp^/X bpF3ciɦR13k;g%-1h:ghKf+B6:]csav>{o9:]3}>W]F׹|\'3޿G{^o}_? p ?<4AЌ! p+;1+)A <Fqq$]7 ƑmG^1{q,!.9" J\#r|+ʒĭ,˒ܽ*.r3̓D4͓\2T6s|;Γ<ϓ(T=N0="042 b8|VE1r5d8='I2$U-f9|QNw>h:FTeN*:VVUR^,;fVenٚEp]H`o8  V7 O-dsX̆r͓L39%/f3=dOsy]VݯMPn}Z˯-֋];/x[vz]kw]~oy^g?>?׉w? @P,Pl Ќ- BPk>ϋDG+1*U|_F|j11yCR4I i%Ñ 5.)ɲ*K0̓/M2s<7͓8Γ6:s?ϔ@Д >PUB= 0xQ"â(>+E#Qb=F) vK#I%Rd]'J)k3M"*{ BSARhZE.MS*T:QVjZn]W,UzaZl[Em[vC"oۯWy_& X\F7cꓩ6;#\uC-BgYȶNs4y]KUk/;7hi{Lη?eu:yAA7̠x-u;]cv/wmyޮz}/t|O,P+@4\AT! P B# Ðۄq>."DP\K,rE/3> uǍ= Gԁ!R+u! 2H?/$l* į$,2<.K 132LD4l7s9Ӕ:N<?t A BPE DmGl= 0xT VJ!Eⱸv3Hc =&I䲹TS/Le ]6M氉6} BS ?ije.JRjTڍROkjnZVlU _mkejPEm.z_W% 0<^'_&\;-Ir4hg1CFh9eSe1</fݾ p,\,_ogM]=^ŵf^=y^g>sO�?$pLl Pt#A% /20D,Q?DS\Q4E9  ǐ|C $HQ ܏ȼuc J2$Jˌ,R/0J22MSl7t8Ms::OS?@Ot BBQTk6= 0xT" C 4F"Xf9GQ$vM!$9\Y*KR餶m1&9ܖg(CQi4zU6OTiu*uRSUk5zv_Xkv*cYm6{Uo?Ev^.{{`p;b0|f'UgXUF5CfeL3[IghFO#`g~W[Z}j5{^n8m3w~O:.wyއ;y=^?g~>}]? #<A0dAЌ!  ,> DCjP\Id/1 fo(% 1H0G!FSg&2R򴲛+*R/20J22MSl7t8Ms::OS?@Ot BBQTj= 0xT" C"P"ţ^;G$R$MHL[+K&Sm/L)'BQTjeI)FRUUjVY+bYVkebk]iokz^pWqlf/Tdg(#)=вs9rz9ޓ1eqZnOk1+5>wR]m=Giuq{/nq:<^u;]>_<^';xOTO�?$pLl Pt#A$=dl8 OTD$S>1V°lE-qdț#D$Ɏcm"R(IR*%˒,ܽ1$2<0͓44\9:8ϓ< = 0xT" C"P>'9Un;H#I'dR4[,L%|i7emvC"e?N4 Z+je.JRjTڍROkjnZVlU _mkejZnViq`o;XF/^y9ex̯!T,+GHs[]S#" ~/n8[nrh|՛;nz:r<nw<]&zx~g{~?֭լo<}߇?P,L ApT A| P# ) Cp-<ϋLGD,TE1q<dѤ[ϴsGL$; Tĕɒ<'IL)J|-R/31K 1,5Sl739Mӌ9=S?4AO = 0xT" C"P>'_47ǣ)C'Jd$Q,˥S)c7Nd vC!<N9֍DFb6OiU:uJTV*՚v_kV:dZ,֛=omW;tt^.W[/x& ~0,V7)9:=K94c; &3iY]kz]mS6[]KYjw.ig?7αx>W]Swy=^^]}ߟ,�< DT%=J잧 |O4LďlK1KTe7p"llllsF ȑ HLŽT!<%r+2̩,Krԭ/K1S,3L4MsT7M|9S;<Os?"h= 0xT" C"P>'c13EZ2E%e<M/K3 de5fvC!<N9FReъdjTj8VVV*zf[Xl:ՖfZ,{ek\n;Uu.W{p<06'r8+(<w)Z=9i4Z\o-#u:~։Oo.n7|W7uyKq~#x{~>gzg{~?~,@0L Tl! 0 0<4ĉ9qLC-0#4ФYFmF\qQjsQ#rL%Hl%t'R+r̭-J-/S 3sL5Ll5*= 0xT" C"P>'c1xQ"Ǥ) ~K#I%Rd]'J)k3M'Rf!s$ލCiTYb*QFPTպ^]WU%`XֻMm[V)A/W;y_& X\F7cC-Y\w7g:FAjq.]RiY}5moܾOs[^W8}o:<'tO{>_|� A0,2 *;0C4ÐC1LMODađ_+G1{Gԃ!,#R4$Hd&r)+R,J.s 1,3S44L= 0xT" C"P>'c1x VA&I䲹TS/Le ]6MV!s$8PL1Oc8VTժUn_Xk:d٬VEo\m;e1A\7K}p;a8&3r<~We9s5t.?jtW.WU):-6Hv8}u-[7yJ{ww> [z}{^~@0$@Ld|%9;# |CE pQK )4| Ƒ$UYGssȑ HDIL%Ҍ)R+JRĩ+˒̻- 1S,3LSD3͓L5ӌ = 0xT" C"P>'c1x VA&I䲹TS/Le ]6MV!s$8PM7OTc8VTժUn_Xk:d٬VEo\m;e)A]/7k}p;a8&3r<~WbLs3gY&KhڽNUli*^m!GݮyH5>ћm7f:?v{7wx8NCy^og=}_op A<A, *C:Ci3DoMPYđOFqQFp@QuƲ s!G$!,#Rl'Ҍ)IҤ)+R/ 1K$1,3Mr= 0xT" C"P>'c1x VnMH$RĖS$IfSm+2!S%5(e&KJ#8VOTժUn_Xk:d٬VEo\m;eX+`/& }`8\^d1O-d9\_5h3&Mh:]^UNT6T?k۽uk<=w.o[fr>pxc].?zz_{^ϟ~~?@o LApT |$"k <0B2HT:q AKBNC(q,QEQ4kѤuǑ%o!q!H<$ɒD%T&(ʒ,˒Ľ-.,0̓<4͓D5z= 0xT" C"P>'c1x`VĖ;'JcqIA.fRi7HZCw=(T$FhM.MKҪWU5n]V5g٭6mZ6˔yu^m}_W bp8\"$p,fO-bS9hsz,Mh4N鏧6T͞invqMpu=_[n3s[u{<nws>?~G|}?g_ ,@4A\.Ÿn% ) Ì6C-DPÒA4KđlG1tcEeK!G}H2$,#I\%JL&2'+Kܽ-L.3$/, = 0xT" C"P>'c1x`VĖ;'JcrA.fRi7 y5Ph9 DRhԪE.YGS%iURWVJ*V_Xkv*eX,Mo\mw+m}s]oW t`p;aX*}KA᱙NO-es9L_5Miu:MfUfj4?k[{ku|'ܽ3s[#{]~g߹tG|ޯ/{~߯P pL @l읧% >= 3IhSʏAQE1e EcFquwǒ !,#HRD#ɒL%Ҍ)R+JRĩ+˒̻- 1S,3LSD3͓L= 0xT" C"P>'c1xb=G$Q$~G9UL[,L%|d?}3LS ?Y 2 FR*4m._KUkRz:YXkeY-V{]i\mDr]Wx7^teq,>W!e|g9s,Ai}TOlh,namw;}yWu:' [Ǽܽ3}sz\r;wz>Gz|_˴{^ϟ߿o?P LPlAP*jBﴰqC15'1 Lq<5XEQYƐkqQGQQ#rL%Hl%t'R+r̭-J-/S 3sL5Ll5= 0xT" C"P>'c1xb=G$Q$~G&*Y.2ƻ!_=OS:$2Rd2XUA=.Lkv_W6 em=oJ'6˅u]Wkx^< nSU Dq<ReY,s7ht<?i:gq<^a[sku\.'o[f=o8~gxo?'Wz}cuޯǻ ? A0$Ќ AX#KCþCp* ?O|;8P,W ő$eƑkm1t yG"$#r4$ɒ&*+r,˓ .2$3s44͉= 0xT" C"P>'c1xb=G$Q$~G&_4W- _.N&y?eҊ$'Rds2)Tj:=RUUU*rVXl:풿eYS)n[W+p\.a}i):aq8|V7dpY,W!e|g9s,Aujp U6Xm/k۽ui4n tf睾9Kq4}w>E:'u}}Qv<7o� DAPl0-BViؚ?q+CJmb)-$NC0]P]Qqr} Ȓ"r<'ɒ(ʒ&*r/˓0̓.2s<7͓8Γ6 = sH_T2 0H4N-D1Hv9Ǥ2܎M%H2ITY/ˢs]ͧH=OQXtc0RfTE.MQTʝ>QVjժn]UU~aZlY՞jZWv/~ϡ,4[6d0~W)rYk;h30Vlu=fa[EhQ- qw<3{sz]wGI8Gw:>gxnϗ{n~}_oP, L@d3l&0B5PA  ,C[F|eqticGqkHq#L$IrT&|&Jrt+̣,Krԫ..Lr3L4Mkr= sH_T2 0H4N-D1Hv9Ǥ2܎M%H2ITY/CQ 6ikkB\]FQiTz]&OTi:mRVUkUzf_Xk:fYmUykw^.wsf`0wcX̞;)fr9k+grAD4x>Yl5ml;]ui\ix~>tz>oSp9]=gz~^ޟ-y?Y?� �@LpT@|% j <9<j7D)EpıaQsFur !,}#R4$Hd&r)+R,J.s 1,3S44Ld6n= 4 á8TREPZ9Hc2 ;%IRI\? L"39 d2cKRe-QԚe"KҪTڅVQU՚b[֬UaGkMo\,n.+}4`bVJ /xf/1W)2yo g;]`'VQ;m7h]xܾW79>CvyoD.}.Sz|ޯ/{+M}{>/@p LdAPl%p. \0p p-q*s?AEDqeƑLmƱoqyHH ȲD!rL%J|'Jl(ʲį)r̹-L/L0̳D1sL5J(= 4 áDVQ8v9dR$M2,AL$qɤBkNg{<et:UFRhze*KSj:}VVjzj[Wl:fl{;]ȴZWv^n{{_pZ!ϱ,^1<~G-es|w3h3t4CfXI]P63eCqA8s9>?n:.ox{>zzG{~_w<}@P pL @ltP(r <O:Л?k5D7 Ő]F$cE1gFQiǑq!,#H2L#ɒT%l)+J2̩+˒Ա-1,3L3L3͓T5l= *L. D!|V)bQj+@) I'Jdr,]-Hɜvigm?B&d_FQ贺U6OTi JVU굺v_Xk fY춻Uo5 ul^.[/x& ~O'X%c O-dsY\s7t&M['Q>oW@k[gu;yl77y<tz<~7k;s|=0 ?$,Pl朗. pe@400? 3)\= E[Eьaq_FQiǑ{ !R,#HRD#ɒL%Ҍ)R+JRĩ+˒̻- 1S,3LSD3͓J̀= sH_T2 bN-DcQXr  $M ȥTK,ˤq^76go>Jf4:aFQTeN*:VVUR^,;fVekmw^m}^/, bpx./b1,3)fryo=f3*mGgVy FO;}v\-q~W'.}ww>}w_v=?}?gp +P3,K>/$AP#h ˂ MU 9L4*qő WEQ[ƑaѬquG2 yȒ!,%l'I2'ʒ)Ҭ-/K3 /̓1** 0xT" C"P>'_gs7ǣ)C'Jd$Q,ǣ8/5MQy?J)GR(te.F)VW*unV+g,veekkmj^o}_W~bq.3cXS'fss/gY[ӚW=lbyNin4y~wTv[' aܞG/m==Sy]w;.|}g[^}>Oz__�@ S޸.Gp <Ž5l$iMC*$,CSılAEQYƑkqQoGRyȒ !L%Rl'IR'ʒ)̱-R/KS/̓ 1Kx * 0xT" C"P>'c0G2E%e<M/KqjkNgo>L%)cDQTjeHR*M6SU+UbWV+ vcY-VegQEv7{}_0W%q8|V#c2X?'s9|c=g4Y&G/t-SA64Mwgl;N&ύ\^G7s;n}3;^z|DjB;=~co{^?$<�3 > t4B<B C Qıl?EtIƑmFqQkGs Ȓ H%Rl&It(ʒ(J-R.K0̓0L,6h* 0xT" C"P>'c1xb0w; G!eid]"GfQɤnm1&9[*JhSARhI"Hj:=VVV*zf[Xl:ՖfZ,{ek\lvC"w.Wox+aq8|V7dqy,vS!es9|w9hsz,APi6SUg]}gpv|=kr8N_'s[筽5wwx:]yޟg=W??� �@LLA# [ > CM ELQñT[D|eƑtkFqq{F ȑ HL%rT&H|(ʒt(J̱-rԻ.J0̒08:* 0xT" C"P>'c1xb0w; G!eid]"GfQɤnm1&9y:OQ94"[0(e./)FSVkv^X+%cZmn\-Dd2.׻pX  bpF3crY vG)frs/gtZ IjtF AA5==a=mSͦ*?oui<W'y.oW5vx'w'x>__|=oޢ?P? ,P+ ?AL) Ìl$E <1+ðM\]FlcF|eƱm}HH#Ȳ$\%Jl&J|+ʲ,ܽ-L.L3̭z4* 0xT" C"P>'c1xb=AtnMJd\Q-KRɜi7Nf34K>(RJ ?Ri-2MSTRNVkr]WU ^Zm-m[UF!q^-כz_p7%؜F/cr8̦?%ٜo=gt9&EڝF>k;k6Z"SOo 8S[q[=7='Ot;g/i{ח;~?}_?v/~|^ ڈ@,@<A\"<nb2o M;Ed]F<gFqQoG1 ȑ#H%Rl'I2|(ʒd+J-R/K20̒3L5Sl7M3|8Α$* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6=y>3EQ)T:eNj4BUU+U:^^l5eY-V;enkvC"o\/Ww^, a1Xf#b,7+e3Yc=f-wKi5Zq_ <c¨smv=fDžbpy<7].Oq<~z>[<O_]o{^?P $ﴋBC?o/ Cd+M DOEq [YƑmFoGQy2w ȒHD!IRl'2(ʒ'Jį)KR/30̓/LD1MSlب=H* 0xT" C"P>'c1xb=G$Q#ɥI.He)i7Nfs}*2FQTeH4څVVUUNX5fYVeh5ֻ!s\/W+ݶy`o, _XL^dq,O-cYL_;hs-MgZIq%j&n7Zy[&mx7y}.w'8ݞz/w^O_w{/~=?P+, sˮn%6p:u0A B1' 1$G<UE4[\]euǑ{}!$"< ɒ4$\)*(˒,ܽ1$2 k* 0xT" C"P>'c1xb=G$Q#ɥL[+K&S?#'3 {<OT$a6ϨY}6NSUV*zf[Xl:ՖfZ,{ek\n;Td[~07 a1X<fr8C-e3Y<_7t9Mi5Z<eB4{m Lbݺn8V㍂ju{7s\;g/wWcz}Ϸ|=Kx ?$,Pl9+.2A7 D±" ESqUő]Ƒmsquǒ} Ȓ"r<'ɒ(ʒ&*r/˓0̓.2s<7͊{* 0xT" C"P>'c1xb=G$Q#ɥL[+K&Sm$3 u=h9oFi*LU:PVkj\V%z`ZmlZEw^n}{_ pج.7cG)r٬w1gIUOSf[Dz*ѵ1qqom'Hq9Upy.7u;\>7kzz7|=>*Ϝ�? L dHӈ溹p4Éd 7 ê.$UDYь[_QuFy {!$#R,$HL%Ҍ)+R,J̹- 1$3S,4LL5ӌ9(* 0xT" C"P>'c1xb=G$Q$!w?\-J%S)i7Ne8C;ObY[BQ)S-6FSBSԫUZvYW%cحV[Ei[ƻ!s^o_8 q>7 c9 fS%sw-g: ER'D~iwTmn=T7z>wK>棽+ϗy^g>?_?P+@0<.+85 Cp8'C,+C<UŐQEq[ƑkqQoGRyȒ !L%Rl'IR'ʒ)̱-R/KS/̓ 1L5Sl* 0xT" C"P>'c1xb=G$Q$~G&=Y.3)m!&x}4K3Gѩ4.MR4ʕVWի5n]V5g٭6mZmvC"r]Vqp& `qX\N3rO-dsY\s7t&MgVS[=fkn6׭uw1=.Wqq[3txKk9]>N{>_{?~~?P,Jz.ЄQ9l5 Bp6BP=DQ,I‘LGDdQlcQigFqR,#L%Hd%l'R+̧-J-/S,3L-%* 0xT" C"P>'c1xb=G$Q$~G&žsW-Ld2<e5ܶu?P'%=P4Z]OT)NMT5Z^_X+%]X6[]o\-ƻ!m\7{ްWa؜f#X܆W'eٜc=YGM暽Vmk6(&6g\Γmq y>wSLZ曍<]_'_z}_~>� �=NۼKAp BP)CP! 0EđMq<SDdUqa]QsFur !,}#R4$Hd&r)+R,J.s 1,3S2 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K"ogs4N&Yy:OS$A(:]&JST6Q*:fZWU%va,;]j[vC"wۯW|_p;p|f+cr<~W%r|k1gt<%KRf[19Vl7}Z$SmpK{y>Su]'h|Vns>߳~?}?p +P4pb.Ѓ0t5 p<P-DMıDOqLYF|eFlmƱoqyHH ȲD!rL%J|'Jl(ʲį)r̹-L/L0̳D1¨* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K gs4B'ym;Oh3GRht52KSj4VWVjur[Wl5gZlv5k[n6!n\7+{`p;b0|f'dr<VW³Lw%gIe)^W5Mi;Rw:o8Q_u[e~ds[#zouz}}/{_O @ Ap<L".+ <Лp<G1LED1lQtYQiqmFqyR #rL%Hl%t'R+r̭-J-/S 3sL&5D7̳ɣ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-Dsg5ͦs?Pg9DѨTE.OTi:eVTժUn_Xk:d٬VEoZEpn}_W& `ؼN`G+cY|[=hs嚹^U5kED9<I&#+|X&s:<Wvz}kxtov<Os|}/o|> Z? Arp-2PTP; D 0EESQlYtcEqmsGQy Gr""IRl't(Ir**KR/0Ks2 3SL6)6(* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-Asg5ͦs?Pg9DѨTE.OTi:eVTժUn_Xk:d٬VEo\fvC"w[oWy`p;aX,N3dm27!9eټ~s%gtYIRrf]15ͦklۼ7upteǑ8tN6ߑzOt{]^וx9x_yW|}}L@$Al𮋴k51BP7ODlStYQiqmFqyR #rL%Hl%t'R+r̭-J-/S 3sKW3M3d1B;* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-Asg5ͦs?Pg9DѨTE.OTi:eVTժUn_Xk:d٬VEo\fvC"w[oWy`p;aX,N3dr|Id~s%gtYIe&2fW[lv9f_n6xsptwm3/x>OC=~p<9{7|=~_? #� @KPl.Al�9P&P8B0>ӡ 5 QLQT[Dq]iqe{G} ,#rL%T&I(+r̥-Ի.K0,3q#W1M4!B󋮀* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-=i63y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{UmTEo^n}_W bp8^+ cfVWd9vs1gYGje:[Y:mjoHƛ}޷>&߇Ƙ7>tz>oWv:Kb^>^g>?_'O@P, njn$@c51|3D q$?1<UEL[F\]1|eƑuG{H}!1"Ȓ<#IL$J\)2|*ʒ+K̻,Lܽ1hD 5̍+̲* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-=i63y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{UmXEo^n}_W bp8^+ N!|-+cX;9hr: ;_^al5͞im[hcy*t-5+Ϋs=>Wvz뉩x>g???워+@<񨋚 B=Cµ BM<<Cő\]ű_F1guG{}!$"< ɒ4$\)*(˒,ܽ1$2:P@c03NsL 0* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-=i63y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{UmXEo^n}_W bp8^+ N%̤Sf1ٜo=3Ierrf]5i6{4|m[ +s\':9W Mjky=]_|}/{_O)@ N.kmD  PuCУİ+T[d]1|eƑuG{H}!1"Ȓ<#IL$J\)2|*ʒ+K̻,Lܽ12@o<@(74耀* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-=i63y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{UmPEo^n}_W bp8^+ K9&?-w!49uSY:mm7[=OMosaT77ty=>Su{\w;}[z|~/z=/~~@/AkApTB' PBD0ELKQT[E]iqe{G} ,#rL%T&I(+r̥-Ի.K0P!L/ɳ4"* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-Asg5ͦs?Pg9DѨTE.OTi:eVTժUn_XkH`-V]i\m*]ȷn~_X% 8\F7cXI|-+bY O;gY&{KW[lv<k[{jn'Yܾ7wOw(xu>;Os^g|~?__? p ?n;ȵ."pl,K |8Bq C.L;+,=]AlaQcƑg}GQR,#ȒD%L&IRl'R+ʒħ-̽.KR/S,3̓DDD6sL5ӄ5;O* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K"ogs4N&Yy:OS$A(:]&JST6Q*:fZW瑋 z]Ym6+=ln!q[W|_pb0x6'crHFG-fr<k1gt<Ep̥zNckvZinvUt<>g{o\_'s\7:/wMĦt}ky=^?g~>}?_??T@P ;< *+{ Ap2;:5ĐİQE1\UdeqtmƑouq ȒL"\&d'rt(ʒ̯*ܵ./qˆ## M$/N$+9 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K"ogs4N&Yy:OS$A(:]&JST6Q*:fZS!gU:i[*S]ȹ߰8 q>7 c9 fS%sw-g: EZzVc[ inv;q u=?My+s];v{q4nsy]O|~?o}_/? ?+plA@U ,Bp#Ð4İ;qlSEtUƑmFqQkGs Ȓ H%Rl&It(ʒ(J-R.K0̓0L56NM953|6NZ(* 0xT" C"P>'c1xb=DsG%%Qd[!9eɤ,};h:yG(5&Kj:VW*f[gr reR"bY;d2.W[v_p7%؜F/cr8̦?%ٜo=gt9&E:^ku ]msl\=FSŲVWzkwN' x=^?/~~?@04B|$ &B,0/Ь@Ch$?L=DqdQlcQigFqR,#L%Hd%l'R+̧-J-/S,3,01ӋMS * 0xT" C"P>'c1xb=DsG%ɤ,~9/e) a3gRܢy+9e{FR(ze&KTj:UVVV*zf[VgjeXEa\l ʎd2*~^_M酺q>7 c9 fS%sw-g: Eu>Mk9i6m[m}7q\fÛlөB}/w{'y}?:O}߯ ? A0$Ќ <D! kC Đ@></+ >/\mFlqQY2y!G !,%Rl'2)IҌ)-R/31K 1,5Sl739Mӌ9ФW=“FA3 B* 0xT" C"P>'c1xb=G$Q$~G&e2yTw?a6M泹c(O'49FR(ze&KTj:UVVV*zf[Reg5]-ZnVKEҮd2y߰X >sb.7qY<vK+f2ٜw9sZ<Kj4ڝ>Yu[=v,J[}soxܮ/6Gt6[^m}ӵ<^'oz}3}_?,@<A\#kL! OC<Я?>JxCPK&;aQWuq}ǒ "$#r4$ɒ&*+r,˓ .2$3s44͓6$] 9(- QE Ps ; * 0xT" C"P>'c1xb=G$Q$~G&e2yTw; g1gi}2F$C4ZE6NSU.P5Zv^R0KneWT mYoZl7;=t rp;aX,N3dr<nSeY,s7ht<?iZ,mWlm mspwVYru5nĸd9>Su][9W*x=gz~^ߏo@0$)N<AZ/"BPV+\CLp;CL/ [Ed]euǑ{}!$"< ɒ4$\)*(˒,ܽ1$2<0$7ˌÍl;8sנ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]{;k4N&әG7O(S$Wi4j]6LөUNPԫv\Ϭz3J+VmY?-{fZC}`l:-|8+d1~W)rYk;h3ItZ6[l5mnn6=yo[&{Kpdfӝj<>Ey]oq{/szfW{^|߿@ �A  zP) 04.6BP0cîQlUE1YƑaѬquG2 yȒ!,%l'I2'ʒ)Ҭ-/K3 /̓1,5l(B4E9)r)S-q,Ns?P* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-=i/NesĒm5&%CRi6NT)FSVkvM+:zaNLk[.Vj_k\/X+ ]a87dqK!esw5s&Aiu>Uuams }s7'ry+tv=Ss`GJy/w=>OW?_|?O�?p APlt"μ+ K:ë'n3w AŐ]TegƑmǑ}ԅ, Ȓ<$ɒD%T&(ʒ,˒Ľ-.,0̓<4͓D#.\ޮĐJͪdN>O * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg{;{<P'GhT5*LT)}VWjUm5Wk~1M{Uo\-+d?j{^07%?}߰V7dq Kew3hs =i0FKlu;=vkn+W}n7.8|dko6+:V^_ww^'g>_G{_?_?� �@l7P  Ž5 ,\=%807EUq]ő_euq}ǒ "$#r4$ɒ&*+r,˓ .2$3ɮ6:s{ΐd<OS?H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg{;{<P'GhT5*LT)}VWjUb6UV*]1,{Uo-wbJkOX b,xf/1W)2yo=3IKGkZmgnuW+u7=qy~Vks[~z_s{yW|}} �@p@;lӜpP˫ Bd!D- , LĐSQlYQWEѤasQy w!G$!,#Rl'Ҍ)IҤ)+R/ 1K$1,3j7+IW80Pr3FӴ@{@АM =* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg{;{<P'GhT5*LT)}VWjU|kV9~oeYVkehZEd?xoL%cᰵ]cX7-2<g9gY&wM49ƫ]vcn6{}qܸr8|7&Qnz[·W"n|]'x޿O{^|߿@ �A R0<:-1.ꔯC . |I[F1dkѤuǑ}!H1!$$ɒD#\)J2l)Ҥ,˒Ľ+ܿ1L21$4͓D3\9L,$NVOs LΎ@PSE4eG"* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg({;{<P'GhT5*LT)}VWjUm5&glV5l\ []ݯKb~ޯbpx.3crXG)frs1gtY#GjuOl5Kqwvox\ 3ܾW7eSgBq{\>s|'x}^_O~|__�$l0L9΋*.ŠTC,/đD=L]EQlaQcƑg}GQR,#ȒD%L&IRl'R+ʒħ-̽.KR/S, sL)ħ5SS1TN3=S * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg{;{<P'QE):dRBSTJ6Vk5zb5&eY-V;enn1ַwݯ5!5% xXf8܆W%eYO=9&itZ&]ju-i\߾w' É6{ng/z?7׮u8kw|>|g{~?~+ �B 4 m(An&C.B0pMU EqLYьQűaFQuqy q!Dz$#HR,#rL'Ҍ)ɲ+JR+r̹/ 1˳$365SjUCDt=Ns?2* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg{;{<P'm5QhBRu:JOVkcQUgZi-mZ-vW^od?b/|f'dr<VWf2|g;ht<֗?j4}f[lv=V_\m-wpw=m6'doBN]'x{~.x<O|}/o|> ?LDR -/PC<đMOE1,[deƑmoG1{ Ȓ%I2,%d(ʒ'-K2-0̓G M\MSl7i(8\;S* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g274 )CQi4*U6OT)uNEF**^M4jdm{U i*wEyn  aXL^dq9 KeYL[9hs: ;iZM^Ylu; om{qoxV=grxEƵqW~v{ww>}?{?gt-NcR>+(@$0[ ڮ./k7Q Dq%đDMő\]Tcq|eƑmǑ}ԃq#ȒD$ɒ\"T&r|+ʒĭ,˒ܽ* $2sL5r2ުs45L6N* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3yw? FQ贺U6OTi N+<UfY춻To\+W:֪d2q]/< aXlf'b<?%eYlg;f=EiZmf[j:ݶӷnmmoݦcry/3ex|.tWw<^'xO{>_|&|  :.TA.s\ !� |1ÐED KEM1<Uő|eFkGm1uǑH I%2<&ɒ|'J(K-2 L<p0̉<6|4:* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3yw? FQ贺U6OTi ҫWT<NU _mkeXVnwk{_8 q>7 c9 fS%sw-g: Eu>MkVӷn-mwo-fËq9\g#=>Wvz~kw|>|g{~?z{7/@(,j A"/+2p4qIıLQlMQtcEeqqmQ G$"rL%l'Rt(I*ṟ-/R0K#U 4͐4>(56sF* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3yw? FQ贺U6OTgeBQs;V+ vcY-VdN\-kw xX%1V7Y3'3w/Z&sG5VO[ZhY[}ݷ{pw.kl<~W#s:\&p\^_|=y=^?g~>}?_?0> "||�<(ܣK2CpKA<Uő4[EьaqkEuǑ{G !r"G<$ɒ4$IҌ)r*I,˒,K 1s A3L5l-7MN*L76Os * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3yԡw? FQ贺U6OTgʅRVSS;N,U _mkeGY֮{w _pX  bpF3crY vG)frs/gtZ IQڝ.QummnvwZj$keg'rN/}vxsw|]z|/{~^~~.p.@@ O{/O0Q@p'QL9EQdWElaFmGu1wH!I "2d#l'J)K*2+/L1M1?S\͓L3ʭͳ9OS?ϊ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3yaw? FQ贺U6O) "USyv{_Xj5`mke#+TXEƷr]vC"}]W<%q8|V#c2X?'s9|c=g4Y&Gu:{Wlu[-fa[m[Nu7$m/n9.Sp]v?y^ogz?}_o>+nO�?p\' @e / * ϯBDq+:LQT[CtcFQigFqR,#L%Hd%l'R+̧-J-/S,3LA6ΐ57S?Oz* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3ySϨ* CQ)Te";R*=VW'ry_WlV cZlDbS՘Ed2.w vo  aV7dq Kew3hs =[.Ok[ lV{o4NѴl</r<͗p=ww>}?{?gFڣNJAA)Cb< m4 Ll @JDq ; 4SE<Uű\]mGsGuDZ} !I,"I<'ɲ\()K*K/˲ܽ01G0pl7ӌL}6s8O39%* 0xT" C"P>'c1xb=G$Q$~G&,['J&Sm/L{;J)LCQ)Te"GO*TmBOը:v_X'%^,+U$j*|"vkf!Zp;aqX|^'dq<nS!esY|g9hs<AiuZ}]5lv=fSV}߾Z6r"Mtz=S{\'|?<7~?>:Γ޿L@k\B< 륋 #CPKC 1 4SEq<Uő]Ƒmsquǒ} Ȓ"r<'ɒ(ʒ&*r/˓0̓?t95sl7M3]1K6M8O>H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3xϨ* CQ)Te";F)tDVgUv[Wgl֪VUSj+Rw5 }]p7b0؜f/b8ܞ?%f2ٜo=f9Ej(NMu[-m[-}ϷvG/n9.w ];'z}|=~-3X{A ӢT@AP*Bp`/)MCLO\UdeqtmƑouq ȒL"\&d'rt(ʒ̯*ܵ./P <͓4ڝLrMӬ7s;K:* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g274 Ei=6wOF)TFuVUB^,;f:5o[7 Ůd?`o;XF/dq<fW!Yo3hs<AZFSlu=famKU}im;g/r<op;]cv/wy=^gz/}?_n{? C�*)@n5BT! C2K5#C1 M,QQlI1YEьmqQi2y!G !,%Rl'2)IҌ)-R°<L\/.t29N * 0xT" C"P>'c1xb=G$Q$~G&ƞtO!Le9_7MgSW-49e DQTe[jS"WTJ_Xk:d٬VE#\iuʛvSZC}pW% w8\F7cY/-9\w5gZ&oM:]FUk[m;]zۿpm'qa[tw}>wKr{\.Ww?z|_{?~~?ì.p�@ P lμ=C ,I4SD1\]TcFQisFq}ԃHR,#4$Hr\&T&JR+,Jrܽ..Cp,3M[2N%4Γl;γt;%* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6bgs<P'BQTjes7N!mRWTkU b^l5eY-V9ZK[ Dk|]x<뇻1Nc2YC-dW;g4Z&MhN[k6[mlg76y<ng/r<ޞ8}ox;.}W=/wk0:P+�?C0$ {i�d 4k9 .G,"YыűaFQuqy q!Dz$#HR,#rL'Ҍ)ɲ+JR+r̹/ 1˳$3LS,3m/7s9ӌ:+d4; APT* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6ʞsw=ϧ*GRh$o1Tg:RWUkUf[Xk;gNQJE2Mmw+uΆd2vo+ `0Ndqy,nO-d2S9hsz,Mh4NYlu{-nml6kMyd{gW7i]4"{kw^'{z}_~<c@<:AЋT(p,,-48(1 C 6Q$qcEtaQ[1iF}!R,y#2D%HL%l)R+2ĩ-J̽-1S,33D5:7@ӌ93 M=Γ|? AO* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6ƞsw=ϧ*GRh$o1Tg:RWUkUf[Xk;gYgTm"n.;֘d2o_WLa؜f#X܆W'eٜc=YGiڝf]Z݆gmkMyo[grv܎_+ut9{vx=kx;'x>__|=|?_:ns?P, *U:Jbkd kC { /0%/ H* OqYCф[ƑkqQoGRyȒ !L%Rl'IR'ʒ)̱-R/KS/̓ 1L&C4?9N3S3|:OA0:* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg{;{<P'GhT5*m5"tڕVW&nV+g,ve~\i˝ʕv]mvC"`n;XF/dq<fW!Yo3hs<AZFSlu=fa5{kI5&uny\g#r&][=y^g>߇}_0?#?s. q0lA 541Dq=ʤL[qCq9sQy w!G$!,#Rl'Ҍ)IҤ)+R/ 1K$1,3Sl0<18ΐ;γ7L<AT,CH* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rfw;w9h%BE(cN)u 6Okv\׫6%`حTonW Mq^o}_W~bq.3cXS'fss/gYGju.OkZEi76ڤqmZ׉rv|_+p7-Wz}sw|=z|~7{~>X0Ў>o{J.0[@,@|*A0;CQ6+,4Q[-Fq]FkQs y Hr}#H<%Rl'(Jr+J-R/ 0Ls3L<53l Nt'7S5O$=Γ?A#H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&RFw;w9h%BI(cNjTFWVjr^WlUgZlE.o\h ʓv]`o  aV7dq Kew3hs =iVSlu ]eZ76Uk=x~g*nOt{]^s|'x}^_O~Xo#Ͼ0뚷ANr�4 A-dA C= pMOE1$YьWEmnDQsG !r$"<!I2d#IҌ@+I,˒/KYL M3p7d3NL;Nl * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rw;w9h%BPiTYk1:RUUUZY;eYVdK)6s^o~`/& bq7d1G+fsw/h3&KjuOl5_m6g\&ˍ<^G6:VWu~g{.yW}/owqC3O9+夎B0湐dAL2; Q,Q4SDlUE|eƑ\mFs ? C ,1GdIܥ&(ʒ,˒Ľ-T-L3̳4\PNs;&MS=N@O CJf* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&R!w?q>O:_NfZ *=f5)FSkv_+*cmUoh:Mҙv]oW{`o;aqX|^'dq<nS!esY|g9hs<AiuZ}^Ylu=namw[}Oi[+rwܾ7+t9^Wַv8=w{^>z<ޟ?}_?w~>ߚG .@ A ./@p|  )d/ n|=pE CQ$A3:Ql>tYQiqmFqxQ,VȰ"rlR|(ʒ)*,ˍ5/L3,3̓D4͓\32 BS;s'=N8M𨺓CME-* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&QG4?ys=OSot%5ITFWVfuj]WUzgZl6]mN)k2HݯW~p7 a1X<fr8C-e3Y<_7t9Mi5Z=fWv:mm7[=w[Wt7ܞ?7y]>wKTp{Vǻx{/w^O_|}/{_O!dꋪ:B|$.< A?C 0s M D,-qL/Adbѓ3qGQr #L%Ȯ] DW(ɲ+R,I.s 1,31Ms$7M|9SŒ HO CAOU:N1BP<CPIQ܀* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&O4N&Yy:OWGNe:]OT)NN**v_+v%^,LAJKmuOW{y`oa1X|^dq܆O%e3Y|[=hsEi5Z}^]lu݆em7[}޺jow;&ۍ\^G7s-Vֵ];'z}|=~}+]d(� )A\8,p BSpj5.nABM1C; Dd]QcƑg}GQR,I@DK$T "Jr'-R/31K LL1s,7ӌ8L}N=ó>C6l@ؾmGOڀ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K"ogs4N&Yy:OS鴾e+Q3]OT)NMT5Z^_X+%]X,jknVDݯW{`o<aqX6'dq<SesYg9hs=?iuZ6Ylu=_mn6unxr8|7'Zl+>u;]cv/wy=^gz/cZCkp'HBޥ:.A\-ۦέK-B K5 DDq,QđL]EQlaQcƑg̈́ @ u<%ls'ǒt(I*ṟ-F /Ls3L<5Sl,@ΐl;N=d+T 0A=>!H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K"ogs4N&Y_2SƋ@RhԪE.MQTʝ>QVjժn]UU~aNsm[TuvoW{`o;aqX|^'dq<nS!esY|g9hs<AiuZ}^Ylu=namrMux>q87'Y=Nw>ߏx>OW?_Fb.C7oA(# @Z9h�Ï%A IDlM@1D\FTeƑ|gFsQ}䄠ũI"qC̬O m%ʒ+J,˒/K10$/SL5l6Mt9-M >|0t>8Nm4S?t Gє* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-=i6s|}<O GhԪ-6KSFWjժv[WZqgZ&e9ڮ;tݮ7xް<8f/<W9o==;:f]=[XRoo\'pO8zVNGaݾsw]'{޿G{^#k &C%9K>ϻK g?8C ;#CK<FSQiQsF1ur !,|i[EqD'D4)@dI<뜓"KS1S,33D5LL56;͓=N0 BD!Dє]OԋsFKR5LӔz* 0xT" C"P>'c1xb=G$Q$~G&e2yT] {;kfSIbo/Pet:[GQiT5&KTi:RWUkUf[Xk;gNӻToX;etݮ7`o8;aqX|^'dq<nS!esY|g9hs<AiuZ}^Ylu=namw[{5nx;&ܞG/fl;Fu{~wx;~>y}W|=?wCR,˞>!r9 p�#O CLCıD] cFq|eƑmǑ|IJ Y!$M"<{ɑԛ%D4$RJ)I/s0̓.2nT6T6Ns<8Γ=OB`3\! 2CL#EPȜѴ]%HҔE'KRe0 * 0xT" C"P>'c1xb=G$Q$~G&e2yT0w; g1git},JS ?ije.JRjTڍROkjnZVlU 6NSdVn6tݮWxް<8f/<W9o==;:f]=[Vm#ux\'pOlS{ww>}?{?gs./_ A kAA<$?| A= ) Л_ $Uő[ьaqkE'PG̅Hq1II?IrsG Ȓ+R,+Krĵ/˓0̋_2˳L5M\66NmQ-?<P,>@MCϴEDє]A:* 0xT" C"P>'c1xb=G$Q$~G&e2yT0w; g1git},JS ?ije.JRjTڍROkjnZVlU 6NSdn6tݮWxް<8f/<W9o==;4>QkZm55}Gs7\>87'OB7Wyֲ]=y^g>߇\9ܿ> {pjkD )8% 9DGD1ñlYqUєkFK DQo lGl{:e%GdHr)*I,˒}K0̒3L3SD0M˜ 2S;O<=<l9<4 AP B䀀* 0xT" C"P>'c1xb=G$Q$~G&e2xS˦)W5ͦIDU>Pf BRhZE.MS*T:QVjZn]W,UzQέSdn6tݮWxް<8f/<W9o==;4>QkZm.M/s7\>87'oRvlkw]{z|>_{^ϟ7~z3Ϗ1h#8(CAZhkD' 7%B=60D;<U Eq4YьSFmE1sE}OBR"#G?$G1H2'JR+2ħ,ˉ-J-̓'&H4s7ӌ8LSO:F3A3 BPT=D* 0xT" C"P>'c1xb=G$Q$~G&e2xS˦)k3M'S}*(R%@PԺMMSTFPTպ^]WU%`PsdfZ+uݮw`o;XF/dq<fW!Yo3hs<Am1MFMv=n_n6}Urn[wq\>O3tz>nϾ;=ww>}?{?gi.f>+X@PK�ARkDМ 3P% B+ 9B,=4Iő\]ETaDq[F1dG1|{#ǒL$IrT&It)K*Ị-J,7KѼ1, 3 -͒*˓!= 7NAOBQ=CQB* 0xT" C"P>'c1xb=G$Q$~G&e173 te5TO=OR$AԺE2MST:Qպr]WU%zX-S{ei&;tݮ7xް<8f/<W9o==;B4>Ik6Zmnv5{=q\g]M=ov=>z>ϗ:??o:m<m4fd:P A |5Eq) SClWEQYƑa1GQ} H t{"$!I2d!Ҍ)ɲ>JҔ-KG$ L,01sl7QU @s;> <Sd=P>P @дE * 0xT" C"P>'c1xb=G$Q$~G&e0G3 tm(J2yy?Ϩ4 EP4JU6OӪ5 ]NUT5Jv_׬6 kfMkukDo\m;=tݮW`o;XF/dq<fW!Yo3hs<A}4}6[k6[ml Ex;q9\>gz7 M`][=y^g>߇t[C?- dl\?p*sg CP= DPM1LOEQDWő|eFjDspHm!1"IJ4"Hl"ɒ|(ʒ)O)K/1.q)10Ms"^@9;I*I<N@Г5AδM� * 0xT" C"P>'c1xb=G$Q$~G&=,*J&R霞i7Ne}=N'* GRht-.MR)*2WVjun]%bV,=f\n;etWx`p; Xfdr<^K+Y[;ht<ދK3}f]6:݆emSx=8N_'sWMV֮u]<?^g>?tmGo+fkD@cAP�A C% B=L5D?DSQD]deƑ|Gđkquǒ 2 H!IrL'Ҍ)*l*Jĥ+ȑ+ 4S,-3<% 79>5/3=γ> M?ГԀ* 0xT" C"P>'c1xb=G$Q$~Fw;TK!9e5MS{9:EQTeI:RUUUZY2-Sֻ-Ul۬;u]Wy<aXf<S%eY[;=E׵}f]:݆em5 z}v|=qy\~_'ty[:gx|>חz<g|~?W;:ݿњA0\<%p|-B0 0 'CPLAOQlYđWEѤaq}14y!D$ȒT&d%ʒz1)ģ*m|AC<13˓D4˒n>9MO=?N?Д * 0xT" C"P>'c1xb0w;r8jA"#$S%LeS)m5K&y?Pgt)EP(MOTiu*mNUT*R_Xkv*B,v=Qm[V˝w^n7}_W bp8^+ cX̞;)fr9k+gY{IjlF[j=~ev}6}:nxܮ/7s^jZ=ww>}?{?gz 56kAAPd@"t' $BL DBGC SQD]deƑ|fðTkqyG C#L%HrD'ɲd͡ J[()K\K--<s.,3L;h0#7Ӌ7NI:Ns:S=@s><* 0xT" C"P>'c1xaw?AF!Y,;/Le3 ]6M泹s?Pg  }FQ贺U6OTi JVU굺v_Xk I2=n&ZWo\{_0X& `Nc2YC-dW;g4Z&MhխN[k[knw}4;Ϳp<NW7= >dY{]cv/wy=^gz/\9o, A@lL B<+@N) 1P6DPQq4QQ4= |eCcFgGwqȑ_ ȲL%I<)+J2Rĩ+EI5Sl6G#9;J<;O A* 0xT" C"P>'=j9GrE'HTF+.9_6Sw>(:FTeN*:VVUR^,;fV̢M$Y#2%[7[`/& }`8\^d1O-d9\_5h3&Mh:]^^Clv=>kvۭ}\bwoor77'z>WVoZ<=>z>ϗ??C;0,?jA|�@ B0) P- 0E č<ABDOqLY@1lGFpKFkQs 1#G#RDȲl&J\'ʲĮFRԽ)M|/32 ܻ3nt4̓l8Γd=?sAO- CϔED$G * 0xT" =J)A"Xr)Gd1xjE'I0dbYLdٜ34ͧk?')CiU6O)*uFSkv_+*cmUo%eu#^o?}_W~bq.3cXS'fss/gYGju.OB5ڭm[]wo"]py\g>Suvw^%>_G{_?_;.+p @J`P3kABP'NCM-CpA (>L1B\]cƑD_GYG1}Dzk!G !,D$$\)2+Pĥ*˒ĭ-1js$"5 553L9ȳ4=?Ol A CP$PUG4Iԍ,ʔB* 0xT" =J)1x"1H#H|2M Ie1 <],fc7N&s}<OhGR(t5&LSjVWV*uf\WlgZ,v5lȣw;Cw/{_0X& `Nc2YC-dW;g4Z&MhN[k6[mlMO7>w\g4[Uu]nW;y^og=*l~V?ڀFd:L j)Ad Pt* 3 G7?C;‘<E14]eƑk E ZqgHL%2TȲd'ʒ'J27̵3-4Q79\:N K&O% ?TMA]F :1G* 0xT" =J)qv5Hcr BE$IyTY/e)la3Myy?g)CQzU&Oi*mVSUzf_k*cY^5mۮWo\{_0X& `Nc2YC-dW;g4Z&MhN[k6[ml:k'py\^O3$ Mյ{ww>}?{?gF>86fxMd[iA P[A 4LCĐl3<UEpT[E]#P= .qq;ǒw!LhHћ)IluH2|)R!Kr̹/2|,L1L5pI39:NظNS=dA,C ѐ#Gm tu#KRT'LS=MTC * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zbw; amkejZnVۍookz^pWqlf/brX܎S'slo=ftYGumf]jvZݎgcm{px=r8~g' t95V׭zkw?z|_{?ױ|UNo/OkA@4d lBp -A= ECQ EP;E4BE,mQouA%ƫ HK4I! J't* D-2.s,32T491L6N3:t:O) A4>mmHҔe+HR1M:* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb{; dZ,֛=omW;ut^.כoX; b0؜>7qY<vK+f2ٜw9sZ<K4MkZkl۽uo['pܾOg_qO]W;]^s|'x}^_O~9\OÚA0 @PD <\,  0A p{ Đ/EdSьKQh [ FF[ F4!I r,$ɐl!.Q+2|(KR̹/pԩ0Ļ3,4LdLs|42<;S=o4 PT5BPmBє}HҔf* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb{; dZ,֛=omW;ut^.כoX; b0؜>7qY<vK+f2ٜw9sZ<K4MkZkl۽uo['pܾO_,} W׮kkx;|^7|=ֺ\.5d?j@A?4A*B B$C<0# PI1 QDqlYıIte�B1s} CKLk6<o$F\'Ҍ)rT2!&LGRG 1l7M|' s$̳=<PBt3UDm#DRT)K* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zbpw; amkejZnVۍookz^pWqlf/brX܎S'slo=ftYGiZ^Ylt-nml6ypw|-p8zUń]Υo{]^ww'^_G{rxF0ښA@0 P<Ak?4A4& 0°E$=PdőQt`C1 cDkTmGФxGmVCMDFrle'ɒs(ʒ1 C#R["'J$,G3@D728Ns,6N̫/ONSAT,;ETkFQzGR5LӔ=LSЀ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zbpw; amkem\m7;w]oW{`o<aqX6'dq<SesYg9hs=?am6YkZm6=yo[&8>_'ƹVm]ʽѮvk}kx;|^7|=~_O:"9Fd4A0;A?t-«%pt2pl9/̜)<Yь!lKFanjCtD,,DQy#Ēd5$I ʒ!* 4J2rܳ.LK\"92K;Os?ϑ@O <ϴM EP+XϳI?+IM-)M1O =QS-AQ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zbw; amkejZnVۍookz^pWqlf/brX܎S'slo=ftYGiY>Ylu=_mw[ypw>qy\zu˱s:W֮z~kw|>|g{~?t0_xś?Kd30 9,@Ф 'D1,3B1LP- 6$OEQWC|8EgQC+GQk#H\%Jl&J|+H-+K̹Il4$0NS.S:R$=>9<lCD4jQTEҔKҴ-L:* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb {; dZ,֛=omW;ut^.כoX; b0؜>7qY<vK+f2ٜw9sZ<Kj4ڝ>Yu[=vkn6۝yw\= r8ܛ=~V]w\tWw<^'xO{>_µ}'RkA�@P$�L ?\\9e @K<1= ЄCÑ,IqLEqTK .PeLaEqŌ7 F<oȑtH%d&|$ʒt(+KgRC!˲- S\6AQ2u5<3=3AN,<3Gm=!GQe)K'MR=J * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb {; dZ,֛=omW;ut^.כoX; b0؜>7qY<vK+f2ٜw9sZ<Kj4ڝ>Yu[=vkn6۝yw\= 뜺'ʭ9zWu=kx{?y}^7|}?E4O:nkDp$ d@P{'AЌ-.P°É 7BQ,I4S8p eFqdiƱ\}H#H #RD&R|JG+I2-0y+m̽R0S.N M3d$=N=AN>?DяѯIR]'KR1MT* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zbJ{; dZ,֛=o덪t/7[~_X% 8\F7cY/-9\w5gZ&oM:]FUk[m;]uo\&7υn.{sήz^ow<]{z|_G{>^>gd @ APB 6' Ð<-  Q,51DAK5kLa T[FeG+]HqHL"\&d'rt(,4ќI.LƓ2̒7ʓ1M3$9CST}S7IS<N5;t-;cIK?)KӔ1MAQ-:* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zbJ{; dZ,֛=omQKusn}_W bp8^+ cX̞;)fr9k+gY{Ijt:^KkZ͞inv;ko[_D~Eö́r|ew=kx|>ߗz<g|~?W~>S@kC/@C@P d OBP5@p,9C qEċ1Ep4K3g leLuF1y {!$#R,$3qMI3 (rL%d=+K*ɲܿ+ܳLs<7B20N|;ή37>??s@Џ @PBmGQR* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]=f6{Um[,}w.7{p<06'r<W2g=t=946]v=Y6}x>y(|&Ϝs9KSMX9]s|'x}^_O~|_Z0ԫK!dpTA+D$ 0/ 7 B0,D<UC4Yь[DGı_L<5G!Ʋ,#H2L#ɒT%l)3B-K_ 1ʒ2L,3K\0M4;3=st8K>O$Co>QhRT}-J5HS7OSʨ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]=f6{Um[.QK}W~ݰ<Xf2<WYS74=?Z!;=&km[{px= \g_tyo8^僥z|>/{~^~~,+RP/jض tL$L PC͔;D+KđL!AT1 e FpcGjıoG4? H "2d#l'J)Ki{Es [/KR3L3SDL+3 ̓t=͓Nd>Ps<+є].u�Rm!Iԭ1M5O(* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]=f6{Um[.Vv^/Ww`p;aX,N3dr<nSeY,s7ht<?aEWtZMm[Mypw< {qYQ_s SrN傹|/{y=^gz/}?_ö:ӱ0K|ןbA<%BsYD5 3C̓9 ;°SEPTYq]DlmFq;[G1eGā!R,#H2<$ɒ$'ID DJ2|-R/rJ/241tk1L3l9M:͓=6o4"PMEдeF}%ER4* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]=f6{Um[.Vd2yp& `qX\N3rO-dsY\s7t&MhuZ]NWvmlwXEtn< qW7tyKuwx{yWR=?eҿ3}sO> <@dp!  P3 B5q A,=P TEpYы~-MsűÜGMTzƑq!H!l'I|(m%JԽ)r/S,3̓D5L6MSl7SZڱ-;N>>Ps @ДM 7]DQ=%E=m!Kt)oQ5CD%ERuMQUmMWUucXU* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]DtRe6%l[VXq]Wk~p7 a1X<fr8C-e3Y<_7t9Mi5Z6!5:=knwop7'rn? v:U7z=Nv~/z|'_/~~0$k_A<cX^CLT;| C IqLEqTE|KtYF;Fc !I,"I<'ɲ\0(IҼ,˒,K.Ȳ1LL5ACsT1Αd;nOo?OAT-CM DQtU * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]Lse٬Eo\m;etݮW`o;XF/dq<fW!Yo3hs<AZCW뵛-mZmާ}o'W7;G띺ܒt;,a>W{?_|?O�?p /3:$!0ܵ5 Ë,0Bb,DBL%UEq|;ƑmqQKǑ$"rL%l'Rt(I*rIK/ 12LD.M3<64͓5OAKL?O AMAQTEFe%EH* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W gsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4vC!l2-m+=q\'pNQxWvz]fax;/y^/g?}_Ӻp K6\chֵ {W A<Ñ cBLCD#KE\aQdEѴcƌdSG!,#H2L#ɒT%l)KK$[G/ʒ01M, K\5N$7;foP?T- CMEPeEm" * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W gsdZ,[]j[#uw^-|_pb0x6'crW#f2yg=gtCj4z6d?a.~Ÿjx[rx^G/9ΧO!{;=o>'z>ϗ?>O ;<<d60|%9,p[ 04ÎCčnگ1LO1MƑ4CdEdg2w!R,#H2L#ɒT%l) }(Ѽ*r*K.Ls 1DQ,5<3N6QW;ódKA> @PtB=BQt5GԍH?* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W gsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4<]_mw[}y!OUr5<g/>W[wwF-^+{?~P, L@c+Bp) .ͬ/ { C C,? ASCdeDWFKq́G!H%Ȳl'I2'ʒ)Ҭ-'I23SD4͓\/TEl7S=2F+ ?N,/"ltmGtIQԥ!I3KT9O* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W gsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Ud?Ugn6)p5<'p<^_t9F+|]Otoz<ޟ?}_?w~>ߟp ϋ0KApS6np˙ 07 + 9c7QLQKY1K5Bq|I DqoGtcHv̅ L%d'Rl(IҌ)̫-ɲ,!F [-K+<3M,4͒ga;ͳ5sKI9OT+&n D@T]�QF%J5Kt=L * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W"ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Y^*ܓUu۽nq\.p:]כυr>Wav:Ngw]'w<?_{^立ֺ_SA@<p\pt4 -P@,d= P" EKaFk 4YgHnqLR %rl'I2'ʒ)Ҭ-M KR7G.L3L1M\6d#1md[7S7P ;S$y!̳>`QHҔ-I5J7LӔ=P* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W$ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^_VTVYnuoox\ 6s*qz=g:=~cw<]'}>W{>^8߾?Nd4 AZ\#b 1 P+1 B�pL,UAYqa$3Fmq{"L%l'Rt(I*r̰RܯFR-K3L$5Sl8$8Lt:M9GS.SbmUQ=oDєIR-J}4 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W$ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^_imZ{n> dqN+\[Vϭ u=cw%W_??/�KPk02 :&Cd= 8)3AMAFDmE,7sHa ȒL%I\&<&Jr|(ʒu r/r,L,5Sl728M9d:,4 SPp AQ=CQ-DѴEtT* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W$ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^SZ&Y[};]Ȼq3jq}<ϭXv{nUp;={}?{?gO�?Ɗ<NAPl|.B  ! C,CNQ\]EMűgEmŐwR o!ǒ,"H4%I\'Ҍ :QTDdJҔ/J1L 0M5CM3,5SdK3j7>@Д PETm FQuHH* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W&ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=]ֿSZY[};] +sSiHl]n+wl]~oyW|}} �@p<0K:PcT9D"B,*Cn{DPlEQ$CECDd3qtcƐG1yƲ ċHRD$l'r)Ҕ*J 4gpGpĿKLL53d7Sl8Mӌ33;O9%?,#DюFt5#IT!KRT)KӔЀ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W&ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=4c58lsem{}nx[ ծdoo?'뱛JXzmN|=_y^g>?_?| $CA.L) Т 94C0QB1lG24I ƐUt)S s CѬ»܅%Hr\'Ҍ)ɒ*J-Hqc9/A-3,W1$4͒3M5s9B=?<m@̴;E@*ӯEm%R4'FR1MҴ&* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W&ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^lukw[}n.*d28G+l1ӣaw;]'WޟG{~>ϧߟ@@pC3SЊ 03 DCq$8DU 3QLY E\eт1\mwGs!LSBk"2l'Ȓt(I*ṟ- K-42Ls 5Sl7M3|8Β<GOM=Γd?OD  )TMMIK-LӔ=J* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W&ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YkZm6=yovC#{q;,cuN5UoԪZ_w]_z}/{^~[@9'A0\ A+-K)BPtB3«/C 5qD]P4Gq5H܅E+U9 Ȓd: u&r|+̝J2ӣ)-ʫW2KD"L,4\5N8O=.4=PS CÑC1QTG?ԜKS5JS7OSCOUL * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W&ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YkZm6=yovC!pv7usg o_ug{.yW}/o}8M@0#*A*:+T䱐{BPd 0BN+  @q'DpUŌ4LDь4Cb@ͳGWlƫ4v#Rlo&J Jrlڥ*ˎ\A)L-|1$0Sl7͓9Pi7N3?O?ЋԎE ђEDPHRtKR+MT2 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W(ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YkZ5g;!x~#N:,=g|?<7~?>.{+Ӗ3Amp 2Ф0 0kY A0UCKDLQ E]- +EbcGs zGoU!ʶ$R(R #+ʎti-ʳ 1L3͓T5l ;=r>K4"RPtK]#R%HtKR+MN* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W(ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YkYXF (mvz{px=wd27k#q2ӌSUow|>|g{~?~�9p, ۜ0clB.| 4' 3 APkBC\5/\@ EFql} F!G2\$JT!ʎ5'R̫),KrK,33L5T6M;3t7;O)/O "IRF4E GєU H-IS3JS* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W(ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yk&*7}pw 3]\nFeGavoX.y}>W|}/w}?ϓ@| aA<Al l# ,м/9*DP<9 E;-Q,R?ʜTF*gDquq�y!κ&;r,%G\& 'Ȓ*0Y+K,L1,5lSL6M7N$:M1�G 3T@PMEUFP}%HҊB* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W(ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yk&ʹm]w S]>9{oc7 oܱw|ޯ/{~߯n A|/Psˬ3 C+PApL CdD@JET_đMCtF0 1F s.|z%Rl'ԝ!JrdJҤ*\/3 -̓3L3C/MSD8Γd5#9}Pp@ДLEe F}%ER4& * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W(ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yk+=gm}k[ƻ!,^>tu[~ػnow<]{z|_G{>^~~_@LNKu4 B.<+ Ф%Cd/A0dq+w +Q 9cC#r7iDcDQuNj^%Qe\Y IJ$"|'HD!ql+Rs 0M,1M<7ͱ$T7N3=LI -HET IR#KRt+KӔ;B * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W(ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yk]uI1S}ldqOy&VQo[冷ؼy=^_|}߇}?_ FA,Pjn ,":p˖CNkBp? +d:DdU ETS*tWE,oG1},G,yCKj)+JRđDrTaA+̓/2ʓd3M8ΓM.St<ϓ?Od%I0Q4kF@GRtKR+MT3O R* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W(ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yk핍+_⶛-}5 zqx|''z>W;[̷Gv,zl>_?>P+0D @Lo$$Bo(;Ы C 3NDL,H;D2EpqA ѣMmƱuGG ܔK!{ ʒ\$*2S 3$Y3K5S<73/3;͓<M<>OTCM T1P<2')?L/t)LT?QT4KQ%T * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W&ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yk픍mv[Mk5 r9fk72N?jl5jz<~7{~~>?O�ﺰ+0K8n,AP«-8l15 C1$A TDbP+Q4Gm@nFq 9<QgI<#I&QE(Irt'ңA+Գ1,2LD K.Ms49M;Д6H[/xбETe F}%ER4'GR* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W&ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yk)v _[MnykmN8ۊWװ=kx|>ߗz<g|~?W~>ٹ�d 8PCPl¼ RP) ,CP -PA4Кɣ.da ,m{+KQH G,x2,$Rd%T&+"J-J2̽-Ҵ1˳$3,)Nl7344NS96ΓQ#ů^PCB4EETkGQ4}%HҔe'K>(* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W&ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yk)v _5d2mk\~\(tqWװ=kx|>ߗz<g|~?W~>:Ndp v@L n7PD@d&Ž 8P7 D*DlC ŐTGEK ŬdF_G1 ȑ#Hđ%d&zC"2į'KR/RT0Ks2577Ʊ9u:??O@Џ @PME* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W&ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yg+v _5_o< 5pqW#ay.Cu]ngv?y^ogz?l߾9KѮd �37P @ -T'B4Ó Đ1İ4S B{el3eGwGc ԉ#LBr&T)\*JR9'JԽ,,LS,.LKKƑ ̳<j49=M?ϳ@ A* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W&ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yg)v _5_o< Q8[O6[s]Kvzsw|^z|G{~_wr\O⮦d @L?,% A\'B4< pt;l R[E|N1 j1sTsF u!$o"<!4#I|(ʒDq-ʲ.KK,3SL5TItкǓ9Ӑ3SU? AEt BEQ4% * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W&ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yg)v[vm6; <U~t9=O:.w;~'</W=#\?TkC,ͼ Al38plP o42 P HDL.Ak?Ot)Fq m�sƎ;A dA1}$T%Ҍ)R<*I̥+˒ԱD/K/,D$3S5ӴQN>!Nl_>=]FQ4H)J * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W&ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yc+v1m5(pu=Y_U8W^EoXy.'u;]cv/wy=^gz/{y7vkC,K@cLHCuAP @0 ,м l?7 I /$IFFM3G.djGu 1 8rl t'R+p,/0KP40̓<4M\5Il93;M,C1OsB1@tmGTu#HQt-Jڀ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W$ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yg+v[m6ik[n j\~.rz\Gvzsw|]z|/{~^OU̺7Oϊݹ�dk5P< @j Bd*C0,9@DPA1<GCP|\Q{1QD; Cpu6QM1lHQ4%J!KL R/ȭ,/L3,3L<45d9:Ҝ=S;O@u@2c%T9dgItKT5LR9M * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W$ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yg+v[m63{pu>[R1U'sz>Wz~kw|>|g{~8 2ҏʾl6*HA|B0 BP4°'  D|LD) p|; EQK uF+фY E-H2lw!ID(I9#ʒ-ʲ/K,,0K0̳DȒT338NsT;҄:1?SG+dC4Dq@Q4mEQ}HҔ-I* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W$ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yc+MmF6!do5=evug/a9.Su].[?y^g?q?k~ )+n>c! TCpB+ 80|Md;C,QMU܅q#Qԉ&J|%ĕ+2D).ʓ 13L4MsTƑ9:7Ok;MQ^>AquETlAe#GR%KR* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W"ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yg+=~]v9V!p7j\eع.Ot;]N_x{/w^O_|})_~8Ҿ S0Kh$4U  B\đL# CYTe;1K{GqG,#BW 0a Cs%H<!J2,JR*˒Խ0̒1r|5Sl6Mt9N 49KAOT =B%Ct5Dѓ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W"ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yk+Mm q7[ok\~]oz6.Wv:g|?<7~?9<�89! RP@$ Co "BK4(Ő\ZEM 7-NjqE ,u"H4?ɒ$H|񴚻JԵ˒̻+Ҥ/3JL4Ms<Cd7ͳT;NK<O;>,P+BGqu*tEt}+HS547KS AQӵ"p* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W"ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yk+Mm M(pu= Ļl|W6]Kvz=sw|]z|/{~^c}_t?w@L  B C-HC|A 9A;P /?C >kB1hEz MQ ERLr "34 )Rk-+I'/"Rܕ1I1,5d)QA-M3$:\?7K?N4<4%?+QQ[G|PC-H5I47ITCOU-ISΚ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W"ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yk+Mmkkvf&8moXy.]S=y^g>߇:@S ޷ 9p">j0;/A5C35 p04�$>qKAd-#UCќEðdE dGHQ?H %IJk!ܙ 2#F(ɒJr0̒-5-RDs78M3,5˳?t AT%CPPK4_D-Kԕ1Ht3NENTtIS* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W"ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yk+MmZsM_x\ 6ax.W#s\Gtݾ_w]'x޿OR8|'}}X!�?$pLOtOB PU -?AD Bkő QK ƍcMGFMH\C ɑH|s)òTN2*JR/IJ<1rl2K<4͓44I7N#L<9 A,BP%4yQ# Rq44IS!MAQ-EST5J* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W"ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yk+v[}_o8oXxM]3=^ww^'o>_GF=|/ @0J4>oUB# BK+?SđMDO?0W*iC ű/?QsoG-kdDTG\'I2'Ju+K2/˓0̓/L4s<ĺq93:4Os8JmBM P 7tLcԍIKT5LR9 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W$ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yk'v[}_o< %s[qVO3b9Ot=^_x;'x>__|#!??oM<Ჯs,p4-P@N$ð@C$TELY >O\NFq=GLFgű+ 4 o%@-'Ò4R-Eԫ$ĥ-Jr1$LS,5M3\6$9N3d3Β\/s>< BNsƴlHL4ƬUH5LӔ};LS AQuKRF* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W$ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^Yk%v[[m6}7hEbq6_#t9Ot=^_x;'x>__|"y!?kS�n wϓ@ЬBjP9  2@2)Q$ >1XѬ@DuNEp|x)DHldsAr\o$-G2+IܽK0.̒.LL5T6L|1?w:I=>9O#Y'4] ё!GH"RgGm3KS5OSEPԔL * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W&ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YkZ-_lv}7frl<_*>W:g|?<78|3]P +ښ5P:�@d 5O3P3p==T@(# $\COqjEo; uƱd E$Hq,Jr\'K./r0̓L2#sT8Γ6O:!J3P A(TMdqGԍ HRtJ5JSt8 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W&ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YkZm6=yo~[q6_t9Ot=^_x;'x>__z;]~Ҿs3P O? B|/ .BkdB@ĐTKEZF4BTDm4rCz@ϓ7 4"QD-,(Q;/g FҤ/0K '̳L5l7St8M:s=?Q亻KR &R MQtSuTKҔ'M=NSTAOI* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W&ogsdZ,[]j[V륶q.;z_W% 0<^z1Y<Wr|k1gt<Et}fQkv=~ev}qox<ģWUg+a>Su][?y^g?cksPC A($@6@-D-  BB;LK 4AdeT&B,TIdvD}0 E Hk%+3HTqs$JR$~Kq%G[!L ȻJs<2͓"Mst9:M<?t A BPE D,oR}&ưsJɔ/NEPԕMOOUU5-Z * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W&ogsdZ,[]j[V륶q.;z_W% 0<^&(dq,vWf2yg=gtCj4z6]kvcn6{}iEbx3sz<Wvz}sw|=z|~7{~=dp__NAIT�޸BFܾ + B)6DdEĐM2D ?1/ile<eAKű,Q"|{$%#sA'G2~J */R?-H1R0,3s7ӌ8Ns::Os? @G3 KEHQEE%GT)Kt-MR1M򴀀* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W&ogsdZ,[]j[V륶q.;z_W% 0<^&(dq,vWf2yg=gtCj4z6]kvcn6{}otoy<^G7s]/=^ww^'o>_GvC#~8B?l{o ,>"Bpp{0г @hAq,GD4I0KEdVD)eFq|1Up.F2a#P I$4+r̋-r/R0K$2sL5l7St8HL9@1OOS=A4%CT-DPMEԍ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W$ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YkZm6=y[+*ư8~g'tz>WWv:~gx|>חz<gptvC#{~7/@/r AT$' #/< 0= EDpOİL BTYFqBCmǑO B"T/\R|u)Dz*I+R/˓1 2LS,372<SJ3=?S@Pt AQ=CQ-DѴf* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W$ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YkZm6=yWU' aܾG3s\;ݾsw]'{޿GkF~~w-�=T.?k%N #gCK#"D!DQ,KCqleƑ4kőgGTQ4rHkԁq#DZ< OHLKlJԽ.Kr/S,3̓D5L +Sck&JT?+=($>=P4%>P-CQ]ERM$ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W$ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YkZm6=yث|>qy\~_'ty>oSu{]~gx{>y}^_Ϻ5 oG>+=l7P >OAmb# B- 09CyD1,T@hWFc;GtE ,{ to #A#IḶ"JR*)˒/K/S #5&TY=Ӌ8NkƶE<ϓ9OA%B=@ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W$ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YkZm6=yث|>qy\~_'ty>oSu{]~gx{>y}^_Ϻ5 ~  �k4=l7I ?{BKb  CP9q =C1<#D űDYqKьu?UT|ԇHL% &sFR*t*KR/0Ks22MKӫ63C;SM_==Ps @ДM EQ]F* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W&ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YkZm6=yث|>qy\~_'ty>oSu{]~gx{>y}^_ jFw_o(=r. �bAlc"4D(B ?pL;C Aq+ %E/FtM3;CqG1WG܅ű"kHr %&qԭ'K*K/˲ܽ01M,2B,%F3TF;޺<?T CtM EPmC * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W(ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YkZm6=yzث|>qy\~_'ty>oSu{]~gx{>y}^_ jFw_m41O?A t*+'j@&p%Q9C LR>T[FOqcLWHq>E3-$B2 %Gr)Ҥ+JR+r̹/ 1˳$3LS,ڼD59=M4=AP3 A%Dё* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W*ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YkZm6=y_V\rxܮG/q\Ο?vzݮou]z|ޯG5 .bh+-P&p$O?B P7ÐED 5 ?QC>1L\@SD0Gu1+D܃ȑlh d&I2G(ʒtK-K2-0̓/5@ؽ){Ml:FӤ;A%B=@є5 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W*ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YkZm6=y_V\rxܮG/q\Ο?vzݮoѽw:?G5 ﰾ&�=J@OkBc B0l+ Ф5 Ì/PD-Q+1TOD14X//puCLexEьW HD]"_#| rD+R{-Gr-/S,3L5Ld5kJL،Mk@=@O ?PM EQ]F=%FRt|* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W*ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YkZm6=Y_V\rxܮG/q\Ο?vzݮo݂^'<OjF~7_}c4N@tp*?T- Bp1 P3oBlTJDq:4XQ{<p9Cq=qT!QQRL%Rb!GyJR"J+Kܽ-L.3$/,34|3'SR8@ӫ;ΓO3?N?Д AMETm * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W*ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YkZm6=9_V\rxܮG/q\Ο?vzݮou]z|ޯG5 ~/OcAr-K@B AR)A p1C;MS?KDTqkKtD uG$vF}R Wȑ!|'JL(ʲį)r̹-L/L0̬l3SZ1s9N<-;ϓ;O>-@Д= Dш* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W*ogsdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YkZm6=zث|>qy\~_'ty>oSu{]~gx{>y}^_|ovC#{nwc @+?3A:k - BP1 P2>u$LıDNDUMd'P9Cq=\SQE#C,%rd'(ʒ&*r/˓0̍*0FiCu4Sm6=ӌi9N 4@:ϓ:O At BO= * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,OdZ,[]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YkZm6=c\%9W7]3;w-|GnvC#|[N1/td50?|/t# Cp; C =-/3į#FtAQFuGocGG1Ȓ%T&H)J*|*Kr,˓ 1240|i7ӌ0-3l;<Os?OAT-C(* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,QG65mn;}w]7}p;a8&3r<~We9s5t<=i:&Uv=~]m;M_+|><g/>W=ovF/y]OB{ֻ!|[֞kP,M\<Γ + B3 CP9CoL<8$= ,eqLmS1Qqy%l'IR'ʒ)̱-Rs ː̅1AY4͒5M\8Γ6γ9s=P* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,RG65mn;}w]7}p;a8&3r<~We9s5t<=i:&Uv=~]m;M_+|><g/>W=o}>ӻ͵ W(m\ Al"B-C3 pC5 D1+�,;p[Eы>d+<hq||Hq""Ir<$ɒ)J*|@D1OE22 »/Nl4s|;Γ<ϓ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,SG65mn;}w]7}p;a8&3r<~We9s5t<=i:&Uv=~]m;5'a8.W79}O:.w;~'</WCC;h$Ap:O,B1 P BDK/0DFıO>QTrOđѲ#HLIҌ)R*)K2+K 1˳$Ek317N43;ňJ<U;P4%<P-CQ]ERJt* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,SG65mn;}w]7}p;a8&3r<~We9s5t<=i:&Uv=~]m;5'a8.W79}O:.w;~'</WCC7[ߏz/|*ݣP/.pT) C7CAQ+0M=#1FqlQEQSǏqs -GC &H\&R+2ħ,˒ܽ+K-LS,33DEl\+\)Ӭ;QbG8<M AP BBQt=D* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,UG65mn;}w]7}p;a8&3r<~We9s5t<=i:&Uv=~]m;S7_+|><g/>W=o=_>W Fu?Vot?/L1o@./p-p A Cp/C:־oKNS>hQuq0o0 -!$1̗'J)K*2+/L16Δ#AM!̫9͓:As[>O?P-CP=Dє * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U65mn;}w]7}p;a8&3r<~We9s5t<=i:&Uv=~]m;#!_,.%yW7]3;w]<W^F_@?o5@BPMU > }7 Ð=AKĐR DcqlFQnq,UD11ñ܂ȍH &&JR(+Kܽ-L.3$/,7t\j63t[;ӌ7;PCд D]� * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U65mn;}w]7}p;a8&3r<~We9s5t<=i:&Uv=~]m;#_,.%yW7]3;w^'s=W5 }??,T�@)% U$l 5p9DK<3QD-F ME hIǒzHϼ2$Go)2(-2.˒/L 0M5JDO1TMDO\+S#;SA4-CP4M CєUEk* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U٭Mk[.Wo\{_0X& `Nc2YC-dW;g4Z&MhN[k6[ml_7q\ng9Gu]nW;y^oeSy|kz}/1"@ t AP- B/ >G=D,G<CC]ATp3doY/īkHHz&2L)HrTCtIq.K1S,33D5LL5l9S)]Dϐ=5P/EtMFQTm!GT#KҔ& * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U٭Mk[.Wo\{_0X& `Nc2YC-dW;g4Z&MhN[k6[ml_7q\ng9Gu]nW;y^oeSy|kz}-؜? s@lDAh#8A + Cp,>/BqQ$SDQ\RET[Q\ñ?.uGr = 4$oȲD%ɱi(QČImdbKk<0̒'LD1sL5N|7Nl8γ9sGYДT?Bt5Gu#HQ-J3JST8 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U#٭Mk[.Wo\{_0X& `Nc2YC-dW;g4Z&MhN[k6[mlzc8<; q\gtz>_K][x|gg|c<]z=O,+HX/d>P=xPAt&7! CE3411EP,k=DYO1|BQHqYGLI\F܍"-҄SQ&ʲ̣/1R'L,4\5Nl6N|;γ<=1 % OC OITKR45LӔ7OS@ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U#٭Mk[.Wo\{_0X& `Nc2YC-dW;g4Z&MhN[k6[mlc8<; q\gtz>_K][x|>ߋ^g|vۿnЯPkC@[௏AT *C- D MdQ8Epmo pxEF4{#9 Ő['Ҍ)rƒT"IԽ.Kr/S,3̓D5L6MSl7S.5O0\N4 o>Г ETm FQuHҔ, * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U٭Mk[.Wo\{_0X& `Nc2YC-dW;g4Z&MhN[k6[mlzc8<; q\gtz>_K][x|>ߋ^gۼ[|w{]A�@O =CQA1 ϛ-.C0)C̼(0Y7| E,DFF}ԅ2$#kts%DzDG2|"ʏRԧ'K 1s,3LSD3͓L5ӌ9S;NS,S=?O,Q@4eCm!GR-ISf* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U٭Mk[.Wo\{_0X& `Nc2YC-dW;g4Z&MhN[k6[mlzc8<; q\gtz>_K][x|>ߋ^gg=k?]d�+o&kb0A$ :y O�q CM?<Wűd]F/ıeưy yF%24%I|(ʒ)*,˒0rj7\6N9Ol<s?OA* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U٭Mk[.Wo\{_0X& `Nc2YC-dW;g4Z&MhN[k6[mlκc8<; q\gtz>_K][x|>ߋ^gۼ{Rkv!@p$< :{Y @7CGD<KQkE DQLmEьiEKs2,#rL%T&I(+r̥-4A<LLR}3̓d0M\68Γ<ϓ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U#٭Mk[.Wo\{_0X& `Nc2YC-dW;g4Z&MhN[k6[mlc8<; q\gtz>_K][x|>ߋ^gz=8F};]d?0 o ;&lc@SAlc�BpB 4.;A$UElWt9Q_E1dIQrq!#Gq%l'IR'ʒ)̱-R/KS̐,Lj4<M"pd9N:> * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U#٭Mk[.Wo\{_0X& `Nc2YC-dW;g4Z&MhN[k6[ml:c8<; q\gtz>_K][x|>ߋ^gz=#yw]d�>\>PlcA|!p�Cp 5OLCQL9CC4cıkF tId;qy!HQFLGc&r[)%J\#Kܽ-L.3$/,3M\5-19ko9O'8M3 PA3BД=CQMDR "* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U#٭Mk[.Wo\{_0X& `Nc2YC-dW;g4Z&MhN[k6[mlc8<; q\gtz>_K][x|>ߋ^gz=Mkߜ]d� C-;OzA+}0+KdCp5LđEő\]QZD11gEqq,Q"@2<PIl"Ǒ(ʒ +J+r̹/ 1˳$3LL-Mpd3 G2=“>O@Д @PEJR* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U$aw?]n[;w^n~_<bp^+ c<W#frk-g=Cjt^Mk=cnvcl<.rx'7].Ovzw^/z|'{,m{~wF!l=P#l/\j@0,޿) M3BEq IL@K?\_kFTűzr "G2Lw%F\&ԣ&JR+,Jrܽ.1ʤ(A5˓:B,9N3:$=O3? * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U$w?]n[;w^n~_<bp^+ c<W#frk-g=Cjt^Mk=cnv&cl<.rx'7].Ovzw^/z|'|6ֻ!_TAD ެ|"T*@ 0p4E71 CEU1dW$Nϱ|f] [F܅ {%$+J-R/ 0Ls3L/͊Mst9MPOsl8 A%CPT-CiR* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U$w?]n[;w^n~_<bp^+ c<W#frk-g=Cjt^Mk=cnv_,q\ng9Gu]nW;y^ogXv!|[O=/lpd@Њk�/\% @PC,;ÍD UE1dWű<mFtuGq|1 C#ѻ#CT!|(ʑ(J̱-rԻ.J0̒ M{26Ls4z7t;<Os>OAT,C* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U$w?]n[;w^n~_<bp^+ c<W#frk-g=Cjt^Mk=cnvݖþ;q9\>gz<Cu;]>_|=y=^?gm-vC!|w/p ?CpZl PB4o9 | D,7CQLCE\]DYEllq[/zƋlQ'ɲd()K*K/˲ܼBdʪLSl 9S:N<Os? Aϴ"* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U$w?]n[;w^n~_<bp^+ c<W#frk-g=Cjt^Mk=cnvm~Ǿx;q9\>gz<Cu;]>_|=y=^?g m8!xpp+-so\O "5�| P?$AE<UEq [ŋ|?ѤaS-l Ē!DLȒL%M|#I"Q|J-R.K0̓0L5 *sK373d;BC>/? @Pt'CДE Dє]BH* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U$w?]n[;w^n~_<bp^+ c<W#frk-g=Cjt^Mk=cnvlc{a+>q\ng9Gu]nW;y^ogn[o!d}_/? / ok|%Bnp! C�D5D34Kp]Te/D_uNjmHő ȒL%/1_#lHq*2+K 1˳$2<1J *sJA TNO6/C[=3u sCдE EMFQTm!GJ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U$w?]n[;w^n~_<bp^+ c<W#frk-g=Cjt^Mk=cnv{e7x\7+t9Wz]kx;|^5w|5 vC#~?2>?{=CLЌ! 0# | C0 >C=D,QE[[ETeƑjqg 1QA! 1tw'HҌm)+R,J̹- 1#SJ12͈RڄMӔ%5Os)?OAT-CM DQi* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~w;Uinr\oW[wp& `qX\N3rO-dsY\s7t&MhuZ]NWvmlwW5þx[rx/3sz\Gvzsw|]z|,k vC#_<>.l =DApLB|$@O P+C(;@qMUEm5ELYlDQ31yH~Hq#F%Rl'I2|(ʒd+J-R쮵A LHx-R43,7ӌ#8Ns';N=S? * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~w;Uinr\oW[wp& `qX\N3rO-dsY\s7t&MhuZ]NWvmlwZ5þx[rx/3sz\Gvzsw|]z|,k!|?ľ@sd=Pdp! t?* 3 /P9ñM$UE;3űLcћU>ѼsFqGq{D Lm!ƒ$&\)J2d+̧-Jܽ.ĿA,%.B1! NsD;<ϓ;O=PT- * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~w;Ui[W w^m}^/, bpx./b1,3)fryo=f3-sIjtz.]j5-invy5þx[rx/3sz\Gvzsw|]z|,k{X&!~7_?>CA/Td%l#BDBCqSEDUŭT3F1iqtK Cg twȍ}H2,I)J*|*Kr,˓ 1J| ܔ=3DLsZL:D=S>O@Д @P* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~8{;Ml\-}wnW|`/ pX6+d1~W)rYk;h3ItZ6[l5~ilݟyfx=}q<'3z>Wu=s|>y1=۲kGq}ևD <Ap4,?? @0ð?D;LKďEEU1t1Ƒ7ǐup!G1" I2d#l'J)K*20/^LT҂Kl9B3:N:<ϓ@Ћ"* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~X{;Ml\-}wnW|`/ pX6+d1~W)rYk;h3ItZ6[l5~i[Ͻx=}q<'3z>Wu=s|>y{mZGn>߿+$ @$Dp 0>1PD9DKDKB]qliq5quH} k#Gr<$ɒ 'ID)R+J2,˒p|jDLzp̰l!6St7S;Γ=>ONj* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~({;KMmW u]WK`o8  aXL^dq9 KeYL[9hs: ;iZM^Ylu; [j[Ͻx=}q<'3z>Wu=s|>y{m{Gs?_ޯ$ @$Dp�¯) B<3�D0AQ4SőDTBlWFQ|k1tDq}/qF܁ȲD$l'r)Ҕ*Jĭ,[0$z/-kDB/$8Ns ;<Os>>@* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~f=n6u]/W;~p7 a1X<fr8C-e3Y<_7t9Mi5Z=fWv:mf {\&ry+];v{k^'{zg}g|.MvC!|[? oT<|%t*@p 6@ E�D ÑM1,[EQ|F1]Fuw2Q}ȑ|qāRl'Ȳt(Ir**KR/½LĶOֹM08³9N=γ>=P4"Ȁ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~({;KMmW u]WK`o8  aXL^dq9 KeYL[9hs: ;iZM^Ylu; [^[Ͻx=}q<'3z>Wu=s|>y{m{1vC#_><$APDd$,3G? D+ DMQl9őW0eF1ik QEGHDm#ɑܛ!J4)2|*ʒ+K̻,Lܽ1, ZH#?6sLS:NӬ=?O4 ?ДA* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~({;KMmW u]WK`o8  aXL^dq9 KeYL[9hs: ;iZM^Ylu; [٬ݟyo[&8>_'s\7:>gw];im{5vC#@<pb /\%oD*14,EĐoMq,OEta eűc1w{GQ !C|$&Ȳt(ʒ'-K2-0̑/3k<L9Nt8:?O@Г  * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~f=nvC"uݮ`o % obq3cXS'fss/gYGju.OkZgnwoo[rl6^_*s\Ο;vz=kw]{z|>_{VMF8]`?p+@ @$t&BǰKLq,Q EpBdbEQ_epBQ{!R,tH2<.TrdJ<Ŗ%ȒԻ-0̓/5M3,5Ѽ= NsN+Q;3: E?Pt APM EQ]F=$ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~f5 nt^.כ|\/% ~0<^'cX7-2<g9gY&wM4=^YkZm6=yZ8V/gry/3s\Sv{sw]z}/V7={}4_?M@?Tý-$=O3 0LL(Dp| ő\]-,DiűsEMGQw!Kle"2K3HLɑ#Jq K$K2%K/L1M 23d3 ΉNp Os? @PtB=BQt5G* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~f=n6u]/W;]߰+q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}rpl6^ q\HÍs\S{nov|]}ogzgw~7'�?P ,2B5 = IB-c�DL  4q,A1l EWFiѴs6q,yF1܅ 1< IU#Hʒ&ʲį$r̹-L/L0̳D1P97*T 3;Ӵ<N>t A,CT5 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~f=n6u]/W;d2 q7/b8̖W)9o=f9I:]j:͖i;}8V/gry/3s\Sv{sw]z}/waX >>Lk3P|pS P!5>1޸0$  Bl9E1CQecF#DZ܅ ȍKHrD5ƒTa&@R,})2*'J/Kr/s 3L$C ?729S:N=><Г @h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~f=n6u]/W;~5 ^oMdqy,nO-d2S9hsz,Mh4NYlu{-nml6ѿx< ?p<NW7=_Ot=Nw>ߏx>OW7? ~>0@,Pdm t20R 0#õQ4ME  ]Em ƱhCo|H<lQ%H\"ʒ)K*2+/L1M/ Cjs79Ӕ:M=O>>Ps @* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fžsmۭ+w^n|ZCᰗ3r<~WsYc=brYm;Me4NYlu{-nml6ypw|-n s\Gtݾ_w]'x޿O{^|'?36mKdAPkŸ, BC5DOm+DЌ*tdű ?Fћ1q u!G{ "H"P,j’\&A+-R,K /L2$3s44͓6$O;Do<Q<O ?PB%Ct5Dє * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~f=n6u]/W;~p7!8<f,^G;hs,Aiu:}VYlu{-vamw;}yZ8V/gry/3s\Sv{sw]z}/s=}f_?@ 3D k| TB-@0 7hC $4/\D$Rs_±t[FLI1qQuEG,)Da"G2lHR4IY!'Kr/S 1K$1,3Sl7ѬA9O ΐ;Os? AO BEQ4%G* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fžsmۭ+w\l"t_Wd20^+c<W#fr 3yEZf[lv=^k[{px= \gϰlOu{=N_y}>Og}?Oް8lm%@P,�\BL%P; Bp|3kP;K1C@Į,V,DQ<[ oG1Aǒ }ȑ!H[ I$HҌu$ʒFҬ ɭ$+ 1Ks3̳$4\5Nl6N|;|i=>Д AQ B4eCm!GR, * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fƞsmۭ+w/[{ݰWa؜f#C'fqYnk;Z&{Kju[[knwBѿlqy<NgOu{=N_y}>Og6/|_ �@o@\=O|A$PfB Rh#!qD*PWl-ѪF_G1wGY H,}?1%ą'2.H҄%Ic*H./S,3L5Ld5l7Q|8=ZN><PCд D]ERm#FP* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fƞsmۭ+w\t_p7 q|V7d1w6!dsY<s1tZ IjtFOkv[ vinv݆gox=x~g+sz>Wz~kw|>|yqv_~?<p$LbUA @0$T- B(@48DPG4q,7Eqj‘T;FqtOFjFQ},w"0Q#DG(\&JD,˒Ľ+ܿ1L21$4ps=7N3;=>OS?T-CДEE* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fΞsmۭ+qB.kt^, a1Xf#bvC!f28?%gY{Ijt:^KkZ͞inv;_ylqy<NgOu{=N_y}>Og8~_er �@p3P<A4! T#0=DCTK 4<?lECEQeFqǑDZԋ $!I24'rD#ʒd+Jl-K2ܽ..Lr0̒otMst6Γ6N=s>N@Г @P* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fΞsmۭ+qB.kt^, a1Xf#b!9ns'gZ&MhN[k6[mlsylqy<NgOu{=N_y}>Og8o>_w7f??] #lC@P,@l -- C Ð|3C /6Q4A[EbmdsQ; HQT mU"I&Jr,)J̭-Kܽ..Lr0{ZPMSl6N7O=3>ϓ?P @Q* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fΞsmۭ+w!`.; aq|V7d1y;k]c9g=gtCj4z6]kvcn6xՆgox=x~g+sz>Wz~kw|>|zFm{}_3  ?l p]Є+ 5 1B<GE1lHd_ѤgFnmDZ̅ȒeKd!,)J+̫-ʒ.K1LS<Ԍ7T4N\Ns:N<ϓ<OAT,B"h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fҞsmۭ+qF.kt^, a1Xf#b!2yk=g4Y&Gu:}V]k6Z,#c;͆gox=x~g+sz>Wz~kw|>|zFw{uw2\�BL|05 Ð; @C BI LKDK2leEѬgƑlYǑADZć#H.D2$Ȓ%K+R̹/s 1K,12/S.od;=>O@- CtMERp* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fҞsmۭ+qF.kt^, a1Xf#bF!2yk=g4Y&Gu:}V]fkk[nu{a\&ry+];v{k^'{z}#qX _|? �@p2K@\d%oC) 04C59"C<$ !/t[1tuEQs@rLI Il'dƒt%Jį+KR/30̓/LD17=cΩ9;O<ϴ=t AQ=CQ*f* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~f֞smۭ+qB.kt^, a1Xf#bF!2yk=g4Y&Gu:}V]l6Mf1s+>yix=}q<'3z>Wu=s|>y{~ݺr'~@@od|%<'B50>-MD/E,NQ#=qK  Tr1[G\  <q#ɒƒ\&2]"-J|/Ҭ/L3$0L,3M\5NL3=O#;=3=S? @PtCP= ETmG* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~f֞smۭ+w!`.; aq|V7d1y;k]c7c:r 1fuZ֧Ylu=_muW 'n6ۜϽo\g#r.7u;]cv/wy=^gz) u鴙.@0$,A\3| T- BP1 P20?DMD OE|Rьm?KG}HRF ȏOR<$G2t&ʏW'2,)Ҭ/K1S,3L4MsT7Mo::OS?@Ot BBQTm * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~f_gsmۭ+wB.ךU`o  aV7dq d?vKn wEjuOhg_nmQV'k%iry3s\Sv{sw]z}/u;^SI~>ϯ۾p? ,PkB A 3 P$дE q D !9ıYEq4ClgǑ}FR2Ԍ]I<' %Jm(ʒ̰J'K1S,2L44MsT7ӌ9ͳ;NKo|>u>PT- C5DPt]FU#FRT( * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fbgsl\-۝r]Wkt|o+aq8|V7dqy,vd?O7gnCh5Zf+Z-=O[<[ww|7+t9Wz]kx;|^7p~[lc>|o�?p AMl 0! P5 B̫3DQ H|G3\MDO>dE1l(&_} 1=Ēɑ̛%ra)HQ)"̈Jܩ/2Rt2LSD7͓8Ns;N!ODA3BД=CQMDR]I4}%JH* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~8{;[ k7;Ut]`o; 8|V#c2XK]W/Me4:>fP:\#gl7Sxr8|7'szWv:}gw|z<{ ݮm5'|?@P, A0D|%Bpt) ϼ 0;B>DJEŐ[EϤSF3EkԕEqm̅Cr!1%E<'r'J0l*I-ɒm+lH/KSD4l7s9[;Gs=?S@O AM EeGTk* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~8{;Me[mw^.כu_WxF/dq<fW!tko;e-cCju[l1Lt"~=Y`7=wǸr87'z>W:g|?<7Sk\v?}>,�< B|%Bd# ' @pt1 1 AhEUq$[C3ќm s=kqEd ȒG%El'q"r\I22*l)L1s 1Md8Γ7oOd> @PtCP= ETmGHRtK,* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~8{;Me[mw^.H`o8;XF/dq<fW!Y]ΗIj3 ϭv=}Ul{>q\g>Su][︎~LME>^Ϗ>@|PL A\<%>4) 3 B/"5 CEđMDϋҒE1,QQe1lo1mG XǑ 1ԁ"A%Hd%ʐd)$$J2ܱ.L/L0q|Mo7Ӌ9ͳ;NS;s? Aϴ"* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~flgsl\-۝rJ/HEo+a|V'q,nW!e|S]s9&55V]Ylm0MFO[w;q9\>gz<Cu;]>_ޜ`U09M>^>?@4/s0$pT|%3 C5+' A Q,CĐ <iMeqT-1uFx{!qc "3RC@HR\ʒ3$(ʯ+Js0ɓ2$1͑[79N.;=N>AP3 CM * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm177 uu.w`o  aV7dq KevC#1sZ<ΖקjmZ>]i4,.Q7;qp7'ry7t9Gv{#kZ~EOi|6>/0οp A0Ќ\% - 9 C0AQ,?00UEobq$O1e ,Z‘}G Dz#23ȲDɑd 'ʒTIL)3u.KS 1J,3L<4͓A;03;S<ϓ;O=PT- C4EDєZh* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fbgslN.ms]o7U`oX;aqX|^'dq<nS!esY{s]hs:,ƗhZ6}VY{=5WmZwx'py\^O3zOt{]^s/^iO|4>/0p A0ЌB\%1 °/E D1$G<DKDlYq B<eFlFuGr1 ȌtG\s'rl#oԝ$C;)ɍ-*,3344Ls\6K9D:;9OS?ϔA BPT-CTmG* 0xT" C"PCqF;G$R$MHL[+K&Sm/L{;O(T%?PMKS*UBOTV[W,V%_XM+'hw^nxn, _XL^dq,O-cYF!y}g)jmګ^][j] nw~{7x\7+t9Wz]kl嚉i6ެ>|}0=pD \AT 3l' C3D9ECq IJ<qTQ|eƌ#ѬcFqm ǒ }q1,I ~#/(kA$p$/ҔKl1sD5SL6MSl7NX;ώ;O A4 BO=Dє5DQԍ!I* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fbgslN.ms]o7{v_W% 0<^'cX7-2<]֗IjmZ>]Zlz|/nw~{7x\7+t9Wz]k~5}Zi߳K{~_?_?�@p, BPl5 Ð7<"CKñ4SDl&qdUFQWƌL1Ǒ}3C!Gp Gē {'T !$"FK3$%͑,*Mr)N6γ9OS@QCДMETmFQuIR#K+MҔ1E * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~ffgsl\-۝r]Wkgy.<8f/<W7F!t;FզZe]6vm6yo[&8>_'s\77.%݊l>=ˇ'|}?o}_/K+@D LP  P3DE D1$G DK\]2BQYF%3x|H!DzLW dM!Jlʲ--H,3KD3͓L5LRN;N=S?O3@ГCPETmG!H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~ffgsl\-۝r]Wkh^o+ {0<V71yO-2+],sMڰe[ilv8FoQ[ypw|-p8Oty}.oOt:Sߵa<V͟<?W=7?P $<AKA! + 01CPDBCU.WF<eqdcG CƢG1m !q,ȑi#2d'R)I1JIЛйK214Ll7LS|8Γ<;N$w=?AO A-ETm G4IQԍ- * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fhgsl\-۝r]Wkh^o+ {0<V71yO-2,]4ZMՀtڽ.Q369=~Umw[}ypw=qy\~_'ty>oSu{]~fUxt~w?z<W_?׷<>0#@P,pKFЌ Ѹ% Ð7CQ ;oDQEq\!ETeƇaőcqx<Hq#ȏ<{섋%2,JD%GK(G,0105SlLNd9N3t9Ӥ<ϓ;AP3뤀* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~flgsl\-۝r]WkGy.<8f/<W7F!t%MjVi2Z.knvۭ}m[rxܮG/q\Ο?vzݮkeh/ ;|?W{>^?/@pL@0t%Bl+.$1 p= AèB*$91dUoLd<Ѥ_QaG H?1?"TcGY(ɒ#'K%Ҥ!J)L 1LM637;O=P>4%?H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~flgsl\-۝r]Wk#p7Xf/<W7F!t%MjVi2Z.knvۭ}m[rxܮG/q\Ο?vzݮkeh/ ;y폗|~?}?o �L ApTA,) 0B;DE D1$>4<TK{DѬc2PoFQyGr {Tu!23r$#B%F)Jt(˒Ի!Kܽ1Q3sK5l6Mt9N;=Γ>O * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm177 uuok^+ |0<V71yO-2!f%KgjuilvU7;f{o\&ry+];v{j h>=)=_|__�L0lAt@'5 A3BQ?đM į3DEL]e1GQ{E ȑ<DILĎIҜ2\o,Ȳ+ 1˳$}2<1M-W7غ:S=?S@O%BtMER* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm377 uuo_7l& |0,V71yO-2!f%Kgjulrt#aZnwx'py\^O3zOt{]^s4Z&||/Oz?_O @;,$\  B1 0(0= DpEđDM ]Caő[8= ıi61qѬ HL%I Ą̡!lDyJ2̨R)LdJ3E+ʲl1L7M\7LD\O.? @PtB=BQt5GԍHRt * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm677 uuo[Dw]Wa|V'q,nW!e-vC#)a/Ijmz-S3di5j5Ϋ{o8\'pOs:]CtW[h|[5yp^_7}ߟ �A 0<|%@'5C 3q7D<Jj#MuQ:G*@L}HsGQ#F#RDol-R#2̋&˒dJ\01LL4MsT6 9Ӣ)N˷=E>t A,CT5DPeFn2* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6xۮ+s]/WkDx]W bp\F/c2X;-fr!h3nj5Vf[P].]Xm:^{o8\'pOs:]CtWیlYi೺?'|}??w~>ߟp >$@\ B|%Bl-A0/ B0; [C,91LATZFPFqDYC 3Gy{Cȑ#Ȳ$H|!Ԥo-R. %̒0d3M\�Ol$:F3<N>>PT- C5DPt] * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6yۮ+s]-`n; b0؜>7qY<vK+f2ٖ!;զjmzFO3{<l5ڭux=}q<'3z>Wu=sf^&g˴|~oe=__3 �AA<\/|! 5 p0ED1$;<TҡM5;ъ˯S>MG}Qԁ!q"GD$;!.| !JM+oܡ,Hr/ɲ,2Ls,IM܉S{9ͱ:NS<ϓ<O At BO:Ѐ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6yۮ+s]-`n; b0؜>7qY<vK+f2ٜ;]-Ki4Vٯu-nևg1;:yl7.rx'7].Ovzw^/ufzOQ}n}?O�@P pL @l+IA|)+ /PDBq ADLQpƊDlYƑTeƱl#QE 4ITsGp|KID#\)L+Jī+˒9)?KrԸH\7L9˳:MO =->-@Д= DєEEU%F'? * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6zۮ+sZ#Kx]W bp\F/c2X;-fr\-d?զjmzFO泹m k[yo[&8>_'s\7:>fx|M7v~o^S{}^ϧ~?P<A0,'5 ÐCp/1$;DQ,T;LAO{@'<WIGD}$gH#Ȳ $\ p5ITJRd*KR|/˲0K2q5Sl7;ӌ7Γ9Ӭ=?O4 ?Дڀ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6zۮ+sZ#Kx]W bp\F/c2X;-fr\o zh-;^EtGOj5{mmw;Muqy<NgOIv{F!xs?w{/{__=@P, 0D\@0T p|% 㪊B1 C1 A>P6=D$>;єMtű]H2$,w'˴(q*IR̡$Kܵ./Τ:SLU3Sd4Ml7N9O:3;Ѐ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6zۮ+s]-`n; b0؜>7qY<vK+f2ٜv{h-;^Et'OaVinv{}n7.rx|//r9.3גg}udw{^-os0]z_|c$L @lpA! C2颐)AD1E Ӫ;dD$%16F4tqs HR,#<%$q&=(Krԫ..Lr^CLW5c7Sl8Mӌ9=?S@:* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6zSۮ+s].E`n; b0؜>7qY<vK+f2ٜj4V&KhΛWveڝ>invoox\ rxG3sz]wGӑ3}udw{^,痹yO~_?�, D\A0T% + N)C5q IE<I61S6J E,23TeDQMǑw!R,"H4̜I%GdI|-2/J /̓˭5la6Ms9:8ϓ<A% * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6zSۮ+s]/Wq{`n<plF/c2X;-fr\.j4V&KhHEMFOk;oo< y?7s=gS{,k;?G|gт~>}?0 +@Pl ЋBФ% P9'đ= <U1d 7taLؠs|]Ѽ[HȒL"\ >r1O+/-Jܽ&@ěK1t4LL5ӌq;=Gs=?T- CMEPeE * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6zSۮ+s]/W{`n<plF/c2X;-fr\~m;^AZR;=^QmZ{>q\g>Sg{Y]v|9w=<G@@Ld%pt-#P/ AîEĐQQlOE1{-hǎ|F2 XÑ!HLe$Ir<%Io"ɲ,\,ܟ*/S,3L7v9:3;O Aϴ$B= * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6zSۮ+s]/W{`n<plF/c2X;-fr\՞hmz=?iuRхumi6{}78|g/9W93mvC#|^'#x/C~?/>ߟ/k?p+D@L,Bl+C3  AQ,9Q3@Qd&Ftm+Q$QESQ Ȓg!T{"2|(Ir$̧-/R ?QG3d6s9;S<N>t * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6zSۮ+s]/WhEh_<bp^+ c<W#frj逵h-;^Et}d-[FUm7[}}pwq9\~_tyއOՒkidw3=f'݃>O~=o >PC�lt#@P% B\' /‘<:;LCqlQ@TϺCCƱ묩Qto _!HL%l'ԝ%BĦ҄9,ʒԯ/ 1ɓ2Lӯ Ǒ67N;N<ϓ<O>-C"h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Sۮ+s]/W{`n<plF/c2X;-fr;;lZY{MjgYGiu}cn6{}oxr8|7'szSYfV!v^>ϗÛ^o^y>?o~OzOl?|%cBp+CP9-DCL=EqTK*D9AqGqʩƐGd_#L%Ųl&?'1rҤ+J/ 1S,2L.mM9:N<ϓ<O At B9* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Tw?v]|o<aqX6'dq<SesX=lZYGiY1_uUvmo>rx_+s>V'fsdw{}'w;/ۃ>}?0 c@Pl 0<% P897Q,;$QB={dDˋ AoHo E$lSŒ)Ҕ*Ed*'KЌ,'sD+Ms 6Nt7HE}=N?Ǔ@Ot BBQTmGu#H&* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{U!w?v]*`o8;XF/dq<fW!X[=kgt6&EyElv=NMm[-wpx=q\.O3ttYofFkxz.ς^_%ϗ}?_??ž/�A<A \+Д5 Ì۠CE ,Gđ<L‘L]Fp<>|p> W!ER,_!4#RLYsI,*<-҄(ɳ,%5M34G(Q8Αu;S<N>t A,CT5DPe * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Uaw?v]Ez^pW%q8|V#c2X?'pnvٟs =V]f[j6Zmnv]uo8[rx^G/:Y_׸ [u|=gxXs|.kA<A, AL B0\+ ˞B)1 1/D$%D$7ы3YEqıSH.o"<ILlId%2ĵ"Kq/ 2L5ST6Fs8;s=>O * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Uw?v]uy^0W\%q8|V#c2X?'o=kf-wKftMkZm6=yo[&8>_'s9GU-vC#u>-y=^o/g0?�,Pl$!Ь) д3:*7q5đM D{DT%-cFllDQduǑ}H!H1-ȏžlVIL#I-T),*r.5;̓<4͑7MD9S;N3<ϓ?O†* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{U0w; qoUxްW& `ؼNcXG+d=tYGim^7Mj6Zmnv]uo8[rx^G/p<_'Cu^'W~ogz>@>.>P LT#P(Ad- B= 窑MEOE1 Y4W2gttĎ$qG!Ų$"<!CqILdJp&Ir4kJĽ-L|,S,3uQvNl7S;=N=?T- Ch* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{U0w; qol*`/X;p|f+cr<~W%pfvןh/Gi;Qlu[=Na[spw=\G/ϬeYSkou|]Szn]G[|pg}_o?L;O>j @p ! CK Cq9ñM ;DlGtcE1dCgA}nlHԍ%I1ܗ'I|A-:/rĭ0I,s45̳d7R?2,NS<ϓ<O At BO=Dє5A * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{UPw; qm.& ~0,V71yO-ۭfvZ)Vc/]ze#h6:Me۝}ox;&ܞG/syZGW+ʵ k'wg??>ߟp =O@->OP3 P"0- B= C>:*7E<UqYό!+ƑkGd|GR aHs!,%k/o ңɒT Jp$-2%+0S$3SL4I1*6DZ7N9=S?OT?Д AME* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{UPw; w]Wu`p;aX,N3dr<nS[sV7jy}&K+寚-ߌls-mkypw|-p8Oty|NM_G[Ux{>|?z~?g4ϔ m<$$l-�Ad1 p+ CGLQQlIQs/PL#ATYFM4L:r F1"ܓɒ<'ɲ\kCR1Fr3*GR'Kġ0Lo,˒1K1l~A Hs=>N@Г @PMEtUFPB* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{UmPsuݮ`o;XF/dq<fVofmyrJ2M[%i|w] Dmh7[M{pw.o\N_ty.NUvu=+]Qz{^_<??�AL / \5C A=0KDQ;((4SьQEQg0 @ k0d:J(!$HR!*$ԯ1J (M,dzly74.3<2E;ON|>DAP2U A%DєEC]IR4m+Ih* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{UmTsuݮ`o;XF/dq<fVlZY|;d2,,cIeuM69i6 ?nvq\.rx'7].WX!|^'=_g}_o<+S@P; pd- Cp+C j$ADQő\]FK FQlb:14u$w"rL%l R|+ܫ&JRħ+ F q)s3˳CДĵK9O N =>O@Г @PMEtUFPzt* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{UmTsuݮ`o;XF/dq<fVlZY|;e44M%h<3mw[}ypw=qy\~_'ty>njvC#Q>>;g^O}_o@p@ 3Xl%A00/ Bp; D9ALGEqTCő] Qlm:stc o Hrk#ȒDI1=r4)Fp"n!+KKTs 1(!KtG9Ǒ8N:?O@Г @PBm * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6fgs<P'u8QTjeI)FRUUjVY+bYVkei-r]+A`p:aX,N3dr<nSyfnrc=KGi9mU;e-?nwoo[ry/3s\Skd2;>ϗ~_#{_? A0 T-A+ P;ÏëqLEEqTIE|[c ǑoƑă FR,#H<$#|@r|!rtP%-J 1.r\+4SjHMc8Ӥ9:3;?P AQ B* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6fgs<P'u8QTjeI)FRUUjVY+bYVkei-r]+A`p:aX,N3dr<nSu^nټ9eZ %i|=m[]wo'\^G7sNjGWu?B|O?e=?>|o@�A40�;(+ Ð= CAQ,;D4Cő\]ETaQ[F+BPq ȒK,Jܢ+R,Iܽ.&LL:QF3,5K"+6L/3:O\)O_3O΍)s @ДM EQ]F=%FRt}+HҔ-M9* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6bgsw=')u8QTjeI)FRUUjVY+bYVkei-r]PJ%~X%1V7Y3'nٻw5&y .qMf]v5Fm[w8>\g:>V4dv.Ϗy=^wy^ҁ?>ϴ�H?3pTPt @C5 q7C$M DqLKDleqi=GL9\DZH$ɑ̋'Ir' 2-Ќ ?-Jp2A"M|M Γ7Ns<N= A$CT-D3* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y!w?{GRgt5*LT)}VWjUj\X+glV5l\-}QШ~/X pX6+d1~W)ܳWkw7w`-~ggYg49KmZ{pw.o\N_ty.O뵽od2;[w|Gy}?/>?p 0@PD1AT- Aʃ !PEC 4UőWE$aQь_9&h1ԍ!rLQx0$K% G lJK̻'Mʼr|-HS;Γ=>OS?T-CДEEMFQM* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3yϨ* wGRgT6KSFWjժv[Wgl֫-k[wK~X% bq+Y;+n٫v=YoMNcs&h:\mnv]uo8[rx^G/s:\;Y=w/ĵ w<O{>^璘a~�PLACЌ B Ð=  ;DmSő\]ETaG+ENq발G1 a2,#Dk#I,*GCC CrT%ЌKq .0K2lC2(LJ,J19:8ϓ<A%B=@є5D* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y!w?8OiSeNj4BUU+U:^^l5eY-V;enn6ul[~0<Xf2<W]3W<ޟt<gt&cKj:mFmj;=}xr8|7'szWPd2s|'x}^_OkZ|خ? +?LPD@d Ь% 0/ (B0ElL5IQlSFeFqG}DN:!lj"G|(I+24f.ҋs 1J3a5Lح'KS-<Os? Aϴ%CPT-CtMGԍIѩ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3ypw; {GRgt5*LT)}VWjUj\X+glV5l\-}w(t `/& }`8\^d1O-]yv1h4Y]^59~/gn7Zޯ}pwq9\~_tyއOjFǽm^><ޟ;|}?WϿ??OD@pl"@|%C Ð\= ?D0E4SQlYıVq];.Nf6ȑo#HrDȲ<$p'+/*,yI,3Gl5Ll5t7S;s=N=?I* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3yPw; Ai6yOi JVU굺v_Xk fY춻Uo\m v]՞`)X:Np|f+cr<~W%﷜=s9MGgu9{Klv]^OFw:yp7|'8.W79}O:F!v=z<ޟ?g^~�+DA0l @̬s - B)Ñ M ,SEQlYWn۲;Qp"r !"ARDHcI%5ܵ,JT?o1S,u2L4w4MsT7ӌ9ͳ;NS;s?r* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3yPw; Aii<NTڍROkjnZVlU _mkejZnVۍookuFRT%' 0<^'cX7-0vhry}3Hg:zi[]n6۝yw\= r8ܞ?7y]>wK_ vC")i|[?Ǵ<g^{̫@ �K@p4@S;!l/ #93n_SEq$]TdQdf˯Q .|o,#H<ɋĕ$ °-+ID}M53<6͓|7N8O=3>ϓ?P h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}{; DNS6=SFWjժv[Wgl֫-k[wnҊ=~_X%# bq+Y;+ޮ1Z 5iWVGltNQw[ypw>qy\7'ty>S$i{Zgxv>k/{>O^o/@@E�0<L�?!d # C;Β'DPCdU|dQRμs1]r,#r4UGM"ITA2&Ҥٺs&L.ɳ$3Ls,3sL7ӌ9ͳ;NS;s& * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{UmTsuݮ`o;XF/dq<fW!3V&_-3<^g9\t&Azim[m}7q\ng9auݽc=%dx^gzO}G�?P,@0$2At0\%  p0:$= C,?D<Uő= CƎjEG\cGlL$o6$!Ɏ+=I+(>#m/2$Ls2<2Ms47ӌ8Ns::Os * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}== ?RgtE2JiNUU+UzZYXkeY-V{]i\mۅuѨ;`/& }`8\^d1O-d{w98hrAgڻ{Yi2_5۝yw\= r8ܞ?7y]>wKr=/wx{~.cG~/>p+@ @ T#BP m 3 CD+DqLKEq$YьUAg TO:To!Ų$i"<6 ɒ\(P=O7*Jlԭ)NJc0$ L|2l7M|8Γ\8N:?O( * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}== FtLS FWjժv[Wgl֫-k[wnЊE~X%' bq+Y;+fqv:hryMv[.kw;Nqp7'ry7t9Gvdza<cZG>_/@ �@?ppL @/d М# BQ A,<:ODdWElaF5G ۴GL}c!Ʊ̋"FrL%6&rD)JDo=ī#2 Lj/0M<(Ld7Msl7s;=γ?OS?* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}== F4zTyOi*BW*՚nZWl5%~g֛Ej[n6˥wכ HR4%/ X\F7cC-YZEB3<g9hoY6X]M%M=U8<=q\.O3tz>oSu].sbnv'ͽz<?nd2=޿~}>KAp4 #BP�A# CT-CAQ+|$?D1\]Tc 3QΌe!Œ$s"<H2l|HĤFjD)'+S'̑ LD0MSl738Γ7N9OS?4 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}== F4zU"<NTTUzf_k*cY{Uom+ms]{HSpT%/ 0<^'cX7-2=fY<gINo[k=6d24}l\&9W7]3;k{vyyVs}?gy?o p3I�LS�T+Pt57 ÐlQ MEOE1\B|/ůLHǑ Ƒd Ȓԕ<-ԢJQjDg'@R+?̖KD}5Sl7M3|8Γd;N=S?O3@Г􀀀* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}== F4zTyOi*BW*՚nZWl5%~g֛Ej[n6˥wכ HR4%/ X\F7cC-Y[=f4YWG_5W[(:M>diw[]}k;.&ܞG/sz<Χ?ݛ׽i;z<ޟfsy~^{wwڿ?0 ,?Bd ApB# Ð) @;KE<UőS@0t[DJ;qnGtWqi!R,gQĐ2l]slH̬B%239%L3LL5Sl7M3|8Γd;N=S?O3 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}== F4zTyOi*BW*՚nZWl5%~g֛Ej[n6˥wכGHR4%/ X\F7cC-Y[=rhsy _5Wn?ߵM6Ydi7[]gpv= r8ܞ?7y]>wKv:ݞCy|?w>go}/W{~o* �/A<o@d%BpL+) 1 CĐ4KQlYQ@\e<C}GDqHHC GFTCRLR;rbQ-7R1H34L|4͓47st8M:s= D;PA* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}== FtLS FWjժv[Wgl֫-k[wn:E~X%' bq+Y;+fivdZ-W9xs}fQis-vC#Gntn}ox;&ܞG/sz<Χ?mwuw?yT|~?G?j?0#?< J$A0 ++ 05ÐE;|=1DAqK6[EQJGtlkѤȒ1䔧,CID!�HrBQ(ԗ$s 3LL5̳l7MS7Γ9=Sꀀ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}== ?RgtE2JiNUU+UzZYXkeY-V{]i\mۅuI(Z{_p7 bpx63cr8W)fqw{v1e9E]WNW4M]v{[px=cq<'3z>Wu=s?m<[z|_G{^ߧ>oA<A+L#Д+' P-‘9>ӧSEq$\ cQXD˽qE mF,#}%Gԅ#C 3$Hq�t$ǒt˲d0̊}2ɳ4MSL7s9M9;S?q* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{U!wZVUo~p<Xf2<W]m<_=e3-5sf>Sityf!lZKYl8<>q<'3z>Wu=wx<[z}o~~>~�?P $\6PLp+ 3 BkCPEĐBE lUqEƎjFpMQ =1#ć Ñd}&A|%qTI+K1ܑKS.3,3D5LL5l9S;3=NR* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{U!wZVuo~p<Xf2<Ww|js,Ə;ujszF]fa d2֓=o; 8ܾG3s\;ݾswUy>O|n;o|>߿+4@A\%}3 p;B=kGQL?o]ETQDY3Q+ǎ{dq!r$o"du%cT"r4Bƫc) ̯)JR'$0Ll 4Mr6<9N3d;=N>AP("* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.SG7}p;a8&3r<~WeS;hs-d?箵v&/mwZ<Un>77kgWG25Ow>' {^|o @0$A0d {BP\# Bt053đM6Sa<EdC|?ő<d{=1 ̍Hu$IHI1fI[K,\򤺾̲5M)v1sl(S;Γ=>OS?T-CДEE* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.TG7}p;a8&3r<~WeS;hs-ydgׯV4cZ\6SaY¸6ܝtvKu]N[x{>q[|~?o}p �L @pDlBP|+ 0) p-C1DđLCoPQTZEdK3qu<mGȰy Ir |I#F2<q*ƍL ƬlmT߿jp|&MIԭd8Γ\6s<N= A$CT- * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.V7}p;a8&3r<~We9s5t;]z]qi3<gh7:]>n[-c8q_/ky.3vz}ov;/rig[OO{~>M?^>@P< 3,p- 3 C Añ$><DOQ,\7dMBQleE/rQyHű%Rju!7(Ȭ {-Jl  K Ld}5MTsL8Γl6O=O3=@Д ?€* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vݯ{_0X& `Nc2YC-dW;5 I:}Vj}ktn1M{{xm{px.g/q\ޏS{nov|]toZf=}_o@>O�$AЌ  B P EDM H<GDC^FQ^Ƒu<Y !a#$Go"I,I[Jl9,KÏ3R4;6MsL9S;3=N=AT,C.* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vݯ{_0X& `Nc2YC-dWd23vE3}[tn6Mfemw5|q&y񷼞g/>W=nx4=|g{~?p @ ?TA<#PcC 5 Ð= ñ>CqCLKRPðFOzE cQGēIM'l)Hqdhmԛ/ɓ 1=1GL2MsT6|6Nst;<Os> * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vݯ{_0X& `Nc2YC-dWd23Ac#}[tn; ]Jmw[}{(n=q[_ty=Ku]IVKxt~>z<ޟ>sO{}?_Y ?P  C�@dAЌ - |3 Cp5M <N qCEXF7:uǑ|]ȒFq!ISȱUJ<K/jI 1ɓ"-42͒t5ӌ9S;NS;ϓ= � * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vaw?~_<bp^+ c<W#frkd23̶'Aa[o5~iv[p7[8|g/9W,/sI{.y ?{4??@p ,A<B 01 C< ˛5CD\\Bp20mQqĮ {!IwòDe$ IɲdsR̫%/3)$l2͓<549S:N<ϓ<O@ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vw?~_<bp^+ c<W#fr%d?k-isEsn;-cnvqCJۭq\ng'r>?kt~[c9z|~7c^ߏ~}߿o$<AkB4#pl)45 C= D?Ap|:DpI #EECőy $qFR<u%2$rRK2*ˏi. '̒t)*3sd4Mӌ9ͳ:9O3;O A* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vaw?~_<bp^+ c<W#frk][-=]k=cnvF7wp7x\7+t9'?7s9wZ'{MG{_=?� ̿p<\P 5 pLD :; R8D-'|= %FpcG}r {G1G#LsRd&D)1lK+HєI(L O(+*>45Il7̓9MӤ9;S? 򀀀* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.V&w;yp& `qX\N3rO-dsY\]_Cn[kv:inv{qox;rx|73savjzN曻|^'{>\|~?}Z/P,O@l AtAp' % B01 84A2SEQdWP^D˴GӱDZ۫r,#ƱIH2'T2+I,]Jnt1S,M)ē$53d6|3N37N=γ>z* 0xT" C"P>'c1xb=G$Q$~G&_gsS'J&Sm/L{;O(T%?PMKS*UBOTV[W,V%_XMk[.Wo\ruW-p& `qX\N3rO-dsY\9df9^n]v=Y۝q;q9\>gCh\Wsݯ&wˢz}?gg�@o<Ap3AL Ь% ?0) Ð= AO5pOC>q cFjEQ} Ȓa%G[!҄!7LHF<&˒\r-<ǒ5/6LҌ9s;N3;ϓ=A-CP)B* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.V{;|`/ pX6+d1~W)rY!٫7I5Sln-nml6spx=q\.O3tz?sMvYyZO^|},~}^> D\#P 3 N)Ñ -q$ADQ,<T:6=\ LiP\`HH2$쬑Q%Ʋdy'H,(ʍ%gl.̜Fq7<5JLZ19ͳ6N=Γ>N@Г @PL* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.V{;|`/ pX6+d1~W)rY!b.WWwlv=n_Z4e'W7zW:ѿ;ƃYz}/v>ߧ>>/ $ OT BL+|- 'C/ď\5=qı>M$QűL:uǑT}G]!$k# { IܔHJ;1+Ȱ-.?|%t1Ll7͓9ӌ:NS;S?ϔAB* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.VH{;|`/ pX5̞C-ɵ k99Ad4;㮻=cnvuvq9\~_tyއO{vzR=^1e<76Ew^O{^~~>� A, plAt# ! BP E D1$GDLPD<BQTKEleGaQ G$o#q!|I s<#9*ɒ\<Ժ-)Ȓt4r'4J3\6Ns;S=N=AT,Ch* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.VX{;|`/ pXF2X!xFG;sm^h/fs]ݮim[m}!\-yng/rz\ޏS{|[۝h<Z݇{yOW?_Ѥ}_?o�2L�;A\BKB0l+P3 CPd AðMDC1# 8iDYFlu.QH""U%Ʋlv<(ʒ%6.I|,GR4R5MlJl4Γ5γ9OS?4@Д ?PBT* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vv=~7b/f/k<++ټr:=;j2[[[knw{\&ry+].SjMgvXzt^_Gy^d +=<ApT A{ɻ 405Cl= D?=pE ": $CPGE1lE˦:}GƱ|o"ƨDYRl'+SLK‘<J(̒ʬH̴3M\(M3S;3<ϓ;O2 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vv=x_`FbrY?'3^7;hr,ΏMh0 [[kneg'W7=NGj{>o?j{޼{^?~|?,�/ \Bl#B|$AP- P/C40AQ4SőDUűEы"\kQmǑ7HHL$IrR5J 74+̙-IH20̑(tu,Ksl7C76N;<Os>>Ps CMD.h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo178 klfX܆W'_8g=e-_Ijqe[wlv;_Y3}{8'py\^O30}:5Gg=d/||>]ߟk~~?s0#,�AЌ! pA) Ð; =,5DIDLSE\2qte1Y1:ȑ Qy%Fӱ#r$JR0'IF0+Ji&sD5L|8Γt8N=s>N@Г󂀀* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo278 da0X\7qY<vK+s9Ls-t<=iwe[wlv;_Y5{yo< p<NW75:~wG4tkU7{/{?g|OG@0$,<LB\%BK 0'p9 D>MID [EsFjG\sQFR G,m#rD}%- Hq|/ܡ)&KL%r12KD4w5T6͓:N=OB* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo378 da0X\7qY<vKr [9gY&wM0؍^'Ux^7}iv{qox;rx|73sz7cQݾO|=._Y</{>^~}z?l ;DT% Bp1 P+ ?DpAđDMő[ ,dHDgU!G !w%d]")ȒD04-Rx@^K+Lt5M3|5s;l8O<O;P A* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo47C/ث'r<W9s-gt9w3aFvl.m{l;[&oup6-rx'7UDc}tZI|//35>||?o}_Wӿo@ LpT<!@|-  B'ñ3C M*kD,]FGˠG}Dz~Fq"Ir '7FRk$Jд+\&r1A0M5M35#]6N8O|:3;Z* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo57k جF/dq<fW2K;g4Z%1pΗ+x^7}iv{9ox;q\ng9Gҝhww^^ x>O_{_?? +P4@ APl P# \ C! -Dq;?3Lq$OQïsGt,E\%rd&zED">RL!JS$̜K3s6,9N3d;=Nۊ</* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo66!{; qlf/bpwS9~k;gylCf/ֲkWki{m{'py\^O3zVAu]n棵w{>.߇}W_g ׻p ?,@$%/# A/ Bp1 BĬQc+{mv:q2 y Hr}#Dqԓ%RD"<"JK G2dq-.Q1E\e3KLԟ*ʓl֒K3|)sd7N=O>>Ps @ДJ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo778 q>7 kO+c9fs5p|?joֲkWk۽uo[&ܾG3szmOSj:C%z|~7wo�?$ ,lԿ' A- 9q 7 ď5 5bLmoG.wGUȑ#ǒL%GjAR!A13-+<̣-E2Er+$IsL&'<SD5NS;Γ=>OS?T-CГ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7xS߰, a1Xfd?-d2ؼFw7糙,W Z ^Ax^7ͥm[]wo'\^G7sCH{]泽vMOogz~^ܾ5y}?~?�@ A 0cAp<#Pt- $5 Ð)ðCCL4dSDC DOF$j:n}GQHgI<"H2l'r=/Ʋ?Ep+3IҒI2I-zT9L:L:OS?@Ot Bh* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7yS߰, a0vC#brX33Xs#d9\oul/;ev{Fynr8|7'szWth;:owwZo>gz>7~|>@P,KAmu@Є)4М5 C7C?D1LIC/Zp!Q,eDsΣGwG̀Fq\ !I\%J I<ҿh E(ɳ$!r,!7<89O:O?ϳ@f* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{aw?CF/dq<`px\W9-SCbou ]vio[&ܾG3sVMFSrޮv;z[<_{^ ~>?P#@d�t#LQ 5 C01 @7ĐGDQLKőTPD1\]Lb|u@.s Hr#H;orlk I)R+'I'Ǔ Kԩ,L3"q57 +I5M;3=N=?T CtM * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{w? aV7k3\vs/gt9{Ɩjoz6[l5~iv[{p7x\Fg1>SuYN{&͟}Wߏ}?ϲ? �?<4ocå!1 C= Dq IE<UE+/ L[BPLBEqrTz9} ,#mw%rc#I2(JhS *K F.II$J5#Lͬ44OsdOA BPT-CTl* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{aw? aVdb2XNd\s3oz;Ɩjt^Mfm]~mk7; uqy<MV=˿=<K2]vt{?z|_Gx:\s}^0@P+;/A, �lsЛ1DC$?E$ODq\]L_D4cF iu{R+"H#Il$ )i&It-#,?GE2JS420˲8"1/MΓ9P?I$A E4-FQTm!GT(* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{0w; qlf/kObsY|?;a%M{hN[g--vml7Zwx;q9\;&+t2|GCuz}_Awη?z<ޟg|={|?>@O@pL @/;켐D>|B0t35= ApE$SD1\]TcFLDi<\GÎnd#24$H\&r uǒ&IR-L/OLL)L/ -M䞊HHShN8Ns>O3COtME4UFP}$ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{w; ]NఙO-w+o%M4=^ѓ5mkw[]wx'plx=h:<Wvr|ηkv<>qx'=gsw~/@ +?k=O$@+ 02==C? DQ,I1DG qL]4Z#|L9.,rQ{G !r,{EQc$$#HRҊFprQ$;p<.IrD/R'i“ !*<839N=γ>=P4% * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{w; qlf/brX܎S'={f-wKi5Zf]j-km7[}nyn&cry75 3u{]g'{x=9o~?zoSp (A0dp$#Pt- 5 ÐC3A/8D.{෱clcQi$ung l2p;G&qG%CqT#H3 >-2<1L5d7Sl8Mӌ9H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{{; b0؜>7qY<vK+w5ް&9f]=[;}~&C1kO/t9Wz\~%wx'͖W}/w~y \8lKAT- d5CpC ,ED<UDqaBŏkQgGQ#rJq HT)JҢdjd:LRtsK|-K27\pɩ)M=ͳ>=P4%?PMEг* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{*{; b0؜>7qY<vK+|=_p _C|gZ>Ylu=_mw[ypw>c/kO/t9>k9}|[t'|}N{_>�@KApT |%p#BP5Cp C0ED KLQp$ADla@oK% G$"rJ5ɑR<#JM$K Q 4k.F3 i1L(ʲ)+r'D5Nd=S?4AO A-E(* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{:{; b0؜>7qY<vK+3Wg;e48zƒUj/{]vcn6{}oxǤ5 +hYnO躙.wx;^>o_'W||ޯO|?P 纯[?dЌ @nМ A=d3Q$91<UEL[@WFgO dCD;Ȓ} ,%$k|W%I$T+r{ qK,m�BK-Ԝ- 9N(ͳ7N A BO=Dє5DQԍ!& * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{J{; b0؜>7qY<vKfoysh2Nqh3 k6:ml;My< pdFvt>É}=|to~~߯P?<A\#o,-B! P3o9DpMOE1$XlWFgTtGiK1, Ȓ:FRl^L$J%K @.̭ k':P0̎ģ*3d54JQ+p11Ms=Js? Aϴ%CPT-CtM * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{Z{; b0p>7cY+-foyruh4Na k6:ml;My< p\3CaG?uOWew;=ogy~oO>o<ALB\p%5 ÐCqKD<UQDM|eы9KCGo ȒF\g<&{RJ2*Ƭ\׽r]/rK*Ҵ> TLw9DD5T4ϓ<PA3BД=C,* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{j{; I0N3 cXr٨V;)5 Igٽe]5͖i6{}7)Zt|?u;]_w<]gz|ޮ{^G'>߯?p l;�A,ЌЬ!P3 P=/C,7 BL\^FnTiGuG$OG1"Gq$HDl0DY ΓOˍ$!J1I+V=Rd2M23;s<N= A* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{j{; b0q>7cY-frCõ &c4c7kZkl۽uo['p0<#QZN{\sx|>g;g=/߿.о?A,A<=; AL B1 + 5Dq9D<)E,]Q\ n2Li1uǑ&|S#ŭ\ Ȓdr\Di=FLI&S/*,4L|,8Γ<ϓ=> * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}= b1X<.3c/̥-XnC= 9LƷl5}im[m}7q,kt4:=3:w3.ozq^{_u?=>,@0L SB $ A\ 5 B 7 D9q4QSőWŰ2KF/4vԂG"Hr*Ƒ%JL#L*)RD%ɲc?.3+?/TbLQ92:MS;S?ϔI64,C5 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}= d209&dq,%rܞw!r,f#hZ ^]{;Vc{o8\'pOs:P泽=ůvgG|}8> m@0P B40=C pEK4IEPbSPő|Ǒƒ{!G 8ȪD]%1'$ʒ<1Il ɳ -Ҭ4Mm3|3Ns,8Γ:>?j* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}5 ఘN 0،?)vѕf4Y}&[MqF!tzNeg=5d[sqW7tyKuN [o|[o&=^^C}??^G" ,@4>B Ь1 A Đ5|E<]_ƑaLWǑq1\?GA#;2k'rd)J2tI2 ʒ/Jr0̎f33,[6KT+Β2JNs9<Ps @ДM EQ]F=%FRt{* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}= 8F!q,;!_vqb8}I8̶WkZk殘Uk r8ܞ?7y]>wKv:ݞO)o-Ǔy};|[z:}~_c?L�+@;ApSA| O-+Ð= CK+pSEQD]c\mQbDдIӄGs"rK%%II+r*R/ԟ07lScG{S|k6\-h̐O5>O3 2P-ETlDe#GR%KR5L* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}= 8|V#kO+^Wvhqz=ir]fMkv=~Kb-yuێ&=|G/ty>gW]nGo[z|]VgeY_rg4o?O �l C9 k 2o|GUő WEDNBm1|qƱBH̅ɒ<'I"Hm'2(!N..mfrCrw+LܼHJc*I8l>T?Г @дEAtMER}%G!* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}= 8|V#c2Wcy^w9ZCGf:]kv:ͦee]Y(3' +W7]3;qo|]{͡鴛O{}_}o'6ϓs?Kd APk'A)°1   C%DpKLIYETMƍd/7(ge;.!R,#4G2"G'Ir+,7LDnrVQtL3L1MJ HT08(943l5S?˔@Д ?PEAQTmGȈ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}= 8|V#c2Xas)ds!ٽVSlt; ]^6"eX y~W7t9}>wGu{{qxw=?_>O}???ؾ/3 '?L?DP AP!  63 °9?C >$OEWETc4mGsLyԅ Gm[#RK%d'IRl Ȓ}'Rĵ(r,oj5# 4ڵ7˳s)5IC69A BPT-CTmG2!EҔq* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}= 8|V#c2X"|^Xs+t!gf]ju-ke!}ov9|</3z>Wu=sx|=tGݦ}3ϓ? #?pL͜?М#Cl3 ?\ 07C,IqL5YETMF sǎr !;R"(IM\{L&ʒ#ʲJRH#QԹ,˳,3m- g7G$+r;<N>>PT- C3* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}= 8|V#c2X? fowLW#tY!ge=Ylu=_mw[yf3|.&5|G/ty>gW]Si]?z|^ ﷁi||_^+@s=P >Tl#P>+ p A 'B# CDqlKEQ4eFq{)Fьi1tGH˻K%rc'Rl(IT(R/ʳ I K+S3MS+9M~>sI;Id5ϓ?s@O%BtMEm GH* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}= 8|V#c2X"|^s+t!eYf]ju-km7[}<<g<~W#s:\?{=zoރ/>yڏ'ip�p<A|Aٿ0-0|1 P43A ĐMQCT]q|S@g1u5|ĄHq ȒJq-HT(ʒ#oD,.cu-R12.ǑQ̓639;S<N>t � * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}=& 1X<N3cC'r|g4Y:>=:ltQm[Mypw<?pG/t9Wz]kx0<]gWrOOٿ_/GzW�@ A$A<! PKTA5 Ð:CDФ? qDMlqUєk /oőm5ȏ HL%rRgH I<&J̫-pKG(= ,-J[!3`Ӭ3S;O3; Aϴ$B=* * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}DsᰘF/ŵ K)^ nw3=i:cUknvqo<+̾ty.Os]N_x{*G+uw=oYO?o;=Ⱦp< kPt#0 wPd) Ð�'@pGEOE1[E]EqmA1|uGqv<r !+#HRD#qx2\&Jr+KS,JD˒.k_0[,2N7S;=N=) * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}LsᰘF/d21<MGcXS7<wKC%i8ƫglw[mwx'h\ ̾tyއOu;]~[x{l8^Yq~~K ? p4\ADB% ,B0 Đ;ıMpYqUtGFaA,|H!H/4!*.RU)Ȏ+*I++ʲʩ&JR/Lr[2tӥl1K|8Γ9:-6?PT, * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}Tsᰘ+]dq8FOHb1yo=gt9sMjt=F;!6Vinuqox[poez<އWu]O=cfӐ{~9'~{O/ƽP׽Ppl ?,$AP/ Bml cDo7ð<!ql9EXC1_gFQ,}Gr { 5/3<ɒ4$[KEy'K)KR츹Ȍ(2LLƴL\ "U6D:S;OS?4@Д ?PE2 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}Xsᰏ!bNW)eyw5gY|~3ڭFSd1ݦm6wo[&_79Gv{wx;'1zwݟ=~^ȿ+@oK@\@C>P C3�CpEĐ;ADqdQ1`l]Q|t¼ !Dz$#HNf9'(ʒ%7Խ*rLS m542d93|:Γ;O<P * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}Tsᰘ+]dq9<^SeY,s78gZvBQgu9^Ubivmo>79Gv{wx;'q6?O=^F|�@O@pD0dt2\ ? Ð# D; C$M DCZUьS= !FuQ !"Gxй'҄(ʒ%r8Խ*rLS &L+Ld78Γ6:k>OT A* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}Tsᰘ+]dq9<^SeY,s XgX&1gu9^[b펳knw{\&nzl tyއOu;]~[x{q|ݏV}=G?O�@O AФ°G40EC<CDpSQDI�4ƑdmtkoOQ<+#<L#ɒT%ȜxȯC(K|&2䶚Jͼ(3DLHh MS$;<Ms>O At,CPTE * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}\skN/d0G+fswH²wga=f[69v-mr8|7'o:W{=~cw<]'}>Vit>+q}q;> ߿ 9\ op- ¯ C м:QC DpDL]4dĬ|kqY1}B1{ Ho#K%rl&IrT.w+H%JR- 33L5R4/O12BT;N<O=P>4%?-C;* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_"ogsd2"L4#p K ewc=b&gMuZ]FWh1; c۝}ox;&>Qz<Ku=w{~.y{<nO#Qn<Ý~=g?O lPdB B, Cl pӖ+đE T/D]D{_clsQ Ƒm <T"42d#L|#=vJr̟-I[7- K3M,'S ҵJ'5:Ӵ<ϓ;AP3 A"* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_$mvC"w;V3ru'rY g495Zfs?5{=U6}{px=|t9Ov:g|?s8\vՊ'~rwA� @K�\< 405BtEC0I1<UQ qYF|ml:yG Ho HL%d'섋 2t&!K2G. 9+L-LJ0Kj1G13T4O:O<A%B;* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0QG863q&KfZFg-hs&Aiuo;v=NY[spw=7]p`y.u;]cv/wdp7~?\}Y+ϛ^ 0�pl AM40 >C 0BA3 D1LIDd]Ñ\Uq|eƑmx< !#"<!I2dGM)Ҥ3򴞑iDe-L+̒۽,s2q(͑43,7S:9ϓ?O?J* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0O8L63r%cvC#5: &Cius=v=NY[spw=ֻ7o9Y`y.u;]cv/wDp6n7[齟}߾/#Î>0 @A�BP,k?#đLC<EıdUa]qiGq37<H4L%rT&:Q'ʒ<'J̰- 1Sʌ6DJQ52LNS;3<ϓ;O=PT- * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0O݄M0|^#oL%d?;=s &Aiu>-l5ڝUmwuw' sgz<K:ݞw{^>z1\.㕲p}?/_{~<0+plA|%Cap Cq ' Dq+D1E,]KQlaƱm|qӊH<4%Rl&Is@r$K*9-L,Д4Ñ6G5S.L;M3>>PT- C5 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0O݄M0|^#vC#q9~w1gItLKimmw;Mu}go|W7}.Ovzw^*#wFU\oֿlo A[gT$= 3 B04¯{DMıD]EY!Ao$tǏzG !r";#ɑ#-M$*rT+̡-ʎ[g,K5)+RTs-KT69N3L9ӤN<˨* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%aw?^+c<W#frk-gֻ!/^Mt[=A7{o8\'ok<Cu;]>_|=o:~g?=@p<ACAl5,) AP1 'MCQ$9D+lQEQSFPG|Dzr ȒG0'ҌI)Kr/O|/!MID1˳l7s9Ӕ:N<>Pڴ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w?^+c<W#frk-gֻ!mFWuZ-mhoo>p9\Mz<Cu;]>_|=cv<7=?ۏ?b\@ ?DAO5{ Ad, p=CC0EL?3Uq|YFm7q,cqH !LF$I<3I4-.KS0J$5,6L362L=S?δ 4* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w?^+c<W#frk-g=C̵ I-cnvVk8< yo>^s>Wvzkw?rs?G{>|_X@ob?p1SB4 B,5 p$Ñ 3C,:4Iő\]TcBql< tG$wG̃Qĉ#i$Zl'I$ -/JT .GnC )C;2L26d0Ns|8Γ?;ϓ?O@* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rO-dsY\s7t&MfF]5}im[mw-y8>G7s]/=^ww\mi<?/z=_z_ σ�$޿+3�1PLB tЬ B5 Ð{CCqJq4;Eq<]SE ;qqO }GHr q7$%Rl'Ȭ$BqL 'J2d-K2<Y,:#$3H=0M.Sl7˓9MӤ9;Sf* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rO-dsY\s7t&Mh_vC#U絚톿Osl=ap<'z>W:g|?}8q>o~8_]O6 6O\ ۿoKp[3P 1 ,@05CG<IdOı\AQlG rQwGR x1!U#Gl'END'Kr.:T.L3;s M0N|2MӤ;Ns;s? Ah* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w?^+c<W#frk-g=CfZCW뵛-cnvNQ;xNg},.u;]cv/wy=^Cn7oӟ9_>MK=iDdA0p-3 P9 7 $AKuELOlac<uǏcq G$"MD%l'rơE²d-JRt*0-Sl79MӤ9;S?* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w?^+c<W#frk-g=CjZCWj69~gm;}mwnc-z<Cu;]>_|=Zqgz|/{5~/K�? p @lpBPl +  PME,SB$YO,dFlFs CRQ܍" Iic&J<$ʩV #.qS?0J,3J<4͓$7MD9S;N3怀* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rO-dsY\s7t&MhuZ]N4d25z}im[mcnw.q3l.ty.Os]N_x{/kfv/_|x߇;>@o0$Pl @C B1 CoCQ 3$;O4\,dkF1mCǒ w!R*1R2tBc&0 H*(DWtCr1,1LD2MsL5N|7Nl8h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w?^+c<W#frk-g=Cjt^dj-f[nvv7-q<z<Cu;]>_|=*rxro3$O:0 4Bpp+ P)C0E DpKD}Ō|dƏcqq2 !*ȑ&>\TL#JrTDL-RD.J1L02l7+9 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w?^+c<W#frk-g=Cjt^ed?nM}={qy\~^0wGu]nW;s[~'|8wW_1�?,P3plAP|%0L 3 k`C!CM,-OQgFp1}ԅȑ84Ɍ|'2,ɱdI(H,˒,K 1s2K<4͓44Mˢ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rO-dsY\s7t&MhuZ]Nd25z}im[mUp7s\.O7ws96{]~gx{>y}^]ϝr? 4p AP<%L-BC 3 ,E54?őD[$b1 etGLzq G !L%d'IIq7'KRu+rTJ&/Ms<7͓8Γ!Ӭ=S>* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rO-dsY\s7t&MhuZ]Nd25z}im[m}p5 sms9v ݾsw]'{޿Gd:<OOB>>s S@0<BP|->[ / 0ӠD.\I QLMC1FtcBm|nO}EpsTIr<'ɒ(ʒ&*܉.$rJ0M êLqԇ5mt4s:<=O3? AO B( * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rO-dsY\s7t&MhuZ]Nd25z}im[m}lrv:^{8\nC 0}~gx|>חz<gs~Touk龰+�@C|0LPT-Д5 C505 ,ADS:QD]EdaCp;ƱÛG3H Hl'IR|(ʒLǬԍ,Eq+J8˲5ʳ 6LSl7S;Γ=>OS?h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rO-dsY\s7t&MhuZ]Nd25z}im[mUp5s\f}syv ݾsw]'{޿Gp=M$}^5/ ? A0<P{!kB0d=P>ÐAEFDQ<UEqaCqQf?oSH{!G$!,#Rl'ҌEU)ʲi)˒t/EKQۓ.D4T6d5Γ|;N;S> * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rO-dsY\s7t&MhuZ]Nd25z}im[m_-wqnO#w9ަ 0}~gx|>חz<gۃ[{_p ?#<>p,MT�30| NBPd!pD,C#AM CIkDDO FQhSmR2$L%Ȳd&|%J/u+D9t)μI P_2Dz}*3bM9N8:?O@Гܒ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w?^+c<W#frk-g=Cjt^edj-f[nvNcm7gx#yu{=~cw<]'}>W*q:><@|m@-3<Bp p >p p]CL94X֡eET;$g kCHR+#ȒD%&ɒT)R+26r/˲1ʏųDDGSlyˍD2LJ;9,O3:O Aϴ$B=AQ/* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w?^+c<W#frk-g=Cjt^edj-f[ַ} jxNf7z<ݷ uz[;;|^7|=~_Z˷$\NcAL Ыs Bl# CDAĐ CnLC9FFQ/|]|?~Hr !I"ɒL'ɲ<(I4u+,w3ĝ63\)411l?8d9l*:O3>t A,CT5DP"* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w?^+c<W#frk-g=Cjt^edj-f[aw烶muN]s>o sE|=y=^?g~>}?_?"; l1.Ž 1 *BPEcčnYE[S iQ|u30|~R,#2D$ɒ\#I%<QsH`Jrd .;ty23L5ӌ9;S<N= * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rO-dsY\s7t&MhuZ]Nd25^kk,gpvwsrv7+uk\_OSu:ܾW!|8?y^g>߇}_?ۼ;P, pK40tBp|% - Ð2NqDA ;hD+pIEduGp �HR,#L%Hd%l'QxԾ= rs.T-G[)ML3T6L7N;N<ϓ<Oڈ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%&w;V3rO-dsY\s7t&MhuZ]Nd25^kk-v!7<=UoFӕsZOl.x{/w^O_|}/{_Oݫ\:np ;0< 9㶐LBp,)  Cp+B1 7{BNMD`E1|9C|[G1yȮ#H<%Rl'(Jr+J}g F2ĂL2̒KL* 7Γ;N<;S>=ГCPJ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rO-dsY\s7t&MhuZ]NTd2 m3Mη!['uܞGzO/ap=g|?<7~?+\G?�:M7[d:< P+ @p- @Pt9qH!7A1lD MCQ=3/t?OwG{!R,#L$IrT'Iqܧ)l,Q6 .J3*L-d4ӌ9ͳ:9O3쀀* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w?^+c<W#frk-g=Cjt^d2 mk3Moorv<~g<N_8\s|>y>'~?}݊WKp�6A0$pT%B0'BzB0CE DM@KD>iqd1uGrH2$Q\FϿqd"ET%<-+ #L1L21$4͓D3\9F(* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w?^+c<W#frk-g=Cjt^d256mlin_-{q8/ymE{=~cw<]'}>W{>^9C@ bl-| AL- @<) 4 C1 qD UaFmGhk{ ȒĒKjIQ\ Hg&ő<|-R/J /̓1,5l7M3ح * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w?^+c<W#frk-g=Cjt^dj-f[vm}nx3rw<#s;:ݞw{^>z<ޟ?}_?wTt\?΃a�9KA\, ?n B0CP|1ð9D1HKEqS|eFhFiu+M ď G,| G%İd,rC)I/r0F22MSl7t8Mk* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%aw?^+c<W#frk-g=Cjt^d2 mk7ݦ}pwqw|G33v{?W0gw]'w<?_{^立(o;?׺k:P<pBd 0|$5 9. °A E1KEEaQ_F1uǑwGĀEjI 4:Ԛd鶲2J2!r3L3SD6d5Γ|; * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W$w?^+c<W#frk-g=Cjt^Mk[5wpwZq<nVegf<F&p>/z|'_/~~?#;lK籮AT % 5Ð:C 30GCqDHQlO d?Ѥg�FqƱoH2$HSF3Il" +Q';L*L ;)̒3L3SD6d5Γ|;/* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W$aw?^+c<W#frk-g=Cjt^M5 ik:k7Í7\7Sp-t8#8\}?{?gO;@AK0, P!/ Cp9 ;D,= Q<;3[őt[;l@oGQy2r "%I2֩hHq&rrG)KBDr(I,,$,M46st7S;Γ= * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W$!w?^+c<W#frk-g=Cjt^McFmk9wpv:p}3q<׋zO?8\}?{?gO; ,Ap<|滎S;*B93D1,GD;S DL]C|[FlƺTuGl @R""IRl't(Ir1{njz-*sd4D+i#7̓;N<ϓ?OAT,C-H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3yw;t9<Q(MKS*UBOTV[W,V%_XMk[.Wo\{_0X& (X3A1W)2yo=3I4zf]5 i ~ypw[c7Nf1pByݮo7`/z|~/z=/~~t뻍˦AÆ7N ˩c @$507 CADQ DU 4W1te4�QyR #rL%Hl%rF'k+TRKLSo LqQ.͒|)Ó|&MӬ;s=>O@,* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3yw?8OiSeNj4BUU+U:^^l5eY-V;enn6u]/W;~p7 a1X8@d1LW)2yo=3I4zf] kn6][ ry_v-W}q\gsd18>/^g|~?__? iS.s/ :p@<C pEDl/DK1T[F OƑ,6$qQ}GQHҋ!,%Ȓd'IRk ҫ8Fd)%i#u*EҴW-͒ƴ|7N9:<ϓ@Д * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3yw; {GRgt5*LT)}VWjUj\X+glV5l\-}wnW|`/ pT%crXG)frs1gtYIjt.d?amv&YW'{9^wx;~<~=XO|~?o}_/? "ο ;/Ap{ȡ:p# 7Д5C= D?D0,D$TESы ,dA1Ǒ !,#H2L#ɒT%juJ[6ʬԣ(K1jų JLA\5JS\9s9N=><ЉR* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0WNc2YC-dW;g4Z&Mhƻ!5{_nu[vqm8[>&OW39=7Wrs `{/wz|~/z=/~~s;Lß�8s:PL p@0|%T' B0˹m|/ Dl C0M1ce?ikoQ G ?O Ů*Q%r24Cl*s,ԡ/Ҕ7qL1sl7S9Mӌ9=S耀* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W# N-d1|G)eYlW=3IiZmf]b ~kl=}pqm[N3q9|~'v:ݞ"<><y^g|~?__>.Ӫ7P s;c Ќ- BP1 P! 2C9K[ 3�F/eƑuG{H}!1"msE<AS@qcmҳy'LlG :P%Jr$39Ӥ;NS;sL * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W#Nd21n/eYlW=3IiZmf]2[ ~kl{=ie7&㋷p]/6s `{/wz|~/z=/~~s�@N\ pt!P# A'wCд3Q@\?q^Feuq}ǒ 9DY%Į:IQQ$W-D,Dl"͒$#8N9Ӭ=?O)* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0WNc1vC!f1G=g3-wKi5Zf]j+浻coxol;W7ty}.wSu{=~w0/&}W_??/h8+nAABP 0 =CM)Đ:,AEQ<;ő�ƏqQsǒw! "HR,#ȱtZУ\,DA0$/K11Jqԡ 7D$S+S&N;O?O@Г @P* 0xT" C"P>&w;N-GQzI'Jd2\K-KRɜi7Nf3k=OSGRh4]*MSTʝ:WVj5j]WUzgZl6]m[V˝w^n7}_W lF/^63YO,kC/ht<KZf[lv ok{-5gq|9W7}]3;x{.yW}/o}NP+Ќ @! 09 8PEpđK�?]eFq|kƑmG}Hj@LK#|IMl7(\J+ʲ)'ɮ"L3L 3SD6d5Γ|;'* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0WNc2YC- o13]IiZmf]3;m-_Ycq\ng9GuZp>y^O_|}?}_O˭�n, lt#A-8+ q DC P\I2TlVő|]ƑmuwǑ|4J9DL%R<'J$Hd'P܇ L/L 0̳D1sL5N| * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W#Nc2YC- o1泚,WKiZf[lv=V_n6}{px=r8~g'tz>WW0|?^g>?j~8^[#l,lA0$ P P) \9L>LNE\UdencGtuq{ǑD=Hā-R%I$"ќ(I~IR$K<-K-s 1M<3M,܄ * 0xT" C"P>'{;Xr/GR$MHL[+K&Sm/L{;O(T%?PMKS*UBOTV[W,V%_XMk[.Wo\{_0X& Fcx31W)1vC!h3{7uZf[W=_;}}78|g/9W:x<?sa{/wz|~/z=/~~p uN@Tp|BP) m;M C0A= đKîqlYqEѤaGo!,E14$i\"FdG%rK$.rږ#L(H3,344Ls\6T6NS;* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7yS߰+b/<&6yO-w+kK:f]<֟e7;}n;</r<ΗW b{Xs|^z|G{~_w?E�:p 6< ,APl!PL)I% = p@?oLSq<Uő]Ƒmsqt:9nǑ|%ñ&AII2˭ {-/K/s 3L5̳dм * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7yS߰(b/<W#frk-gvC!j4]^;lt;=au[m8>\g:>W[V7qyW|}}4mcwAPl@0+ t1 -Ð%dD?1KT[?ф]iqe{G|3CDȏ)s&Rg"RG' s 3L4MsT6|6F* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7x߰, a/2a2X#-dW;g4Xf!tFAv[ v/mw[=wo'\^G7sC1׾od;/wy=^gz/}?_'K p50#sD� A°P51 (C?oU?\SEla ьuFQy zD=HPd'4(DQ'3lCG "J܅3HsD͓<4\9: * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6bgss7N(T%?PMKS*UBOTV[W,V%_XMk[.Wo\wO/{;e{SXLNWeYO=9]=VOh6[mlnk>\g:>W]>xr9'>W{>^?:@lx׷ 0LA Bp B Ì ðE D_CTŏWEeqiaƱqGQJDq 64ru$D)P>/ $-!L$s,33D3M3l5M|8Γ9H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7y߰, )N1k6Xx<6O eYlW=3Ydi4X >[hv:]ga5}oxr8|7'szWv2ю#do~<y}^_|}?o}_n;0,̷p$KB|%B0'$ @ 0APCQ;plU?ьYƑaNmoǒw!t1D*4rI2I%DkDR2 $:)30't/H\6M38,d; * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7yS߰, a0Vzdr;7eX|[;=EkfSkt=>eu}i'W7=Ob_<^ z}/{^~;P ;0P;#Pl L B0t*") CKEqT9ő]ƑmsquǒD$A I, Ұ#TCIkKr LrD2$3Ml4͓|8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7yS߰, a0e|,O-aYL_;hs-d?^]5-ml Fs>q\g>Su][^&;͐>/~?}?hn Mmc$%'--xA AÑ,�AU Őq;ѬFoGqyHH ȲD!i8EܢR5)Ų| ' KL+  *hl8Γ<3O=O3= * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0UG863r<~We9s5͵ 7U5cm{}n.q9\g#r.7^Ws|'x}^_O~Y;?K�1m?ΤpLЌ  O(4'!�C+ST[E|eƑtkFqq{F뒬Dq '"ɐ̛IS' \q-'Rg! %ML23d3l7N΀* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{!w^W% Cq/^7YO-w+F3`tz][[t=Si7op7'ry7t9Gv{.<X<?z}/{^~N;P#pKr7P4;P) ,[ PDAÍ,' <T͜GdF1gFqG}H̅2$+-\1'ETHġ+LrĞn\KI/KN5d79t;<Osƀ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0UG863r<~We9s5ŵ Ih5Ym6{]uCv}m;</r<ΗW<{{wXz}/{^~oӦ. �AA0dl"@cp®'DD/DKőTQlaeF1iǑqɣDp|$܂3jD4Hԟ+ĕ*r~w"K/$˓D5?4\6Ns;S* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0UG863r<~We9s5k73}.{]vZ[l{o\&ry+];v{{wXz}/{^~'O;p6ۺL0T@Pt"4P{]n' °7Q  >M1<Uő|eFkGm1uB9ͧ$-'J3%!R+ mԲN<)A'̱M7M7S: * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0VG863r<~We9s,d23<ޗ;_ If:Yk[=soxܮ/7sGzٻ{wXz}/{^~k?ֻ̼noLs B"q*E‘+QQL]EQlaQcƑg}GQ1I H1kD'HHԡ$H +rjҜ#LR/H3Jh7MSl7s;* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0VG863r<~We9s,d23<ޗ;gt-FOuml6{o8\'pOs:]Cr>`{/sz|~/z=/~b.տ�3p#@3lpBpP@ 5P CJ;ŏUű\]mGsGuDZ} BĒK?$=%D҄6Rr5)R'#*l\7|,iT&̲45s9OԀ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0UG863r<~We9s,d23<ޗ;gt-^Ot/gk~}nx[yng/rz\ޏS{novswzp>_{^ϟ~~?<N7mfŶ6\ + <05 p9 *Bl 9ƭCkU4QtAD,[@qu�wǑ} Ȓ!"l$ɒ|Eji+îJQ-J+Ա3 JRjO4) .@s|ELl.s=l<O@Д @ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0VG863r<~We9]dg3YޗI[[k; oik6{6[p8Z8g/r<ޟ?v:ݞov=-~߷?_|?O�?p o37m0~ƶS P! <5C7DlGő\\EQ,e8$Fm{G} ,#rL%T&Iͩ[+EKi+켥/LDJ|(N=$2<;Ȝ53?O@Г * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W863r<~We-vC!h395u>Mk:-kl7;}o8[&y<~W#s:\?{=~c0/&}W_?(m+@ �APL|%3*Cp= 0m C?/ŏUű\]mGsGuDZ} SPD2LO%BrCɑ)Di(-R#R˂LR A$.>M0Mr"Sd;=* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W863r<~W o;g2K-iVSlu ck;M}o8[&y<~W#s:\?{=~BwqR"=>{_~>#q7<L) ,A6+#Q4D@ь[qkFmyr u!"HkJEp&ðJT2 *-$KL$J2,'j5<L37S9;Os=OB* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0WlF3dr<nQd21\o=3mI4zf]3Z-Ukwuw' qy?7yKu{w_~,'́<?W=>/8�<4l At 1MB/ Bp= 2B /UőD\E_qiGuG}Dzƭq’LL$Ir'HHT# tKJԦ/K3DK*H˨#23t7̷=?G* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W#Nc2Y!dcY<w7糚&MVK:=]nwoo[ry/3s\Sv{s_~,'́<?W=>/4,;P,Apl AtPA 3 Pd1DMEOE1,[deƑmoG1z) ;(Cp;{$H9%LjԜI{(p1)˒.iLn?-K}4GL5ΓT9T* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W]gs㱙,O#aN#-r<ƋKj4ڝ>Yu[=v9m[]ypw|-p8Oty}.oOt:Sx{~.n=>{_~>kt@T\ AЬ# -1Pl/ 0E3lTGQlSqtcEeqqmQ G"()<A%K-#/*1%J4*Ҝ(J T#s 'LRd/<I3E"l!N;˳<Ns0* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0WGF# r<Ws9Lw#gZ&[G5VOX͎O7mw}nw.rx|//r9.3vz}ov9wzp>_{^ϟ~~?N[7o@Ld%|&A#°->LKDYETcQmuǑwĜC,.# &!R3$Ȓ;a* ̨CD/1JQ3m1 N $!Γ%O:3h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0UG83dc1X^W)q w--Cjt&Qq]7}nx[yng/rz\ޏS{novuzp>_{^ϟ~~?M lŶ; A0D|$0'B< +B#9  ?LQlEф_FqiGuG}DziD?#,l"HQTH>Ic-=r$Òē;%2l6T7N * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0UG83dc1X^W)K=-Ijtz.]j5!u-}x>y87'z>W:g|?O/~W??�M"LݷO$Ap$B0' = A7-FPQlSdaF1tkѤuǑ}!H1슜DBr4Aw&ܫ%4Ң,P2E1$,R|Kt7s9N;,h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0TG/!b0,VOfr|n?1hs,֓Aiu:}VYlu{-vCnv{ao>rx_+s>Wvzkw?>~?}?p �<+-4A AМ,!q B; CLM@qDWűd]mGsGuDZ}  G$I$% Cg'4̩/2; ,6S7Γt * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0SG83dc,?#cs8n[)ht<ޓ5iuZ6Ylu=_[_ownq9\~_tyއOu;]~[x{y=Z[{{X~@0$@Sm*ɶs?4,°/CP907 MD\%,ь[1iFsQ}ȑ#H E1;#RD~Ir&Isk(KJKS,<Lq,˲-LZ18Ml;O:S * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0SG83dc,?+c1X^/34Y&kM4=^YkZMnrq.mxOty}.oOt:Sx{~.x<Ok/???P+@4O[)ml80  1CPDP-Ql*ɺpTƑmGdkqoG{!R,#L$IrT'>QtRI|+0*,!LO4œCY0̊231<ϓ<'* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0SG863rֻ!erKEi5Z}^]eanuoox\ rxG3sz]wGvzsw|^Z^f>?_?�6ͣdڶ,dA  ˱p{0- ,5 Cp:!9$EГ�]dd4_F0oG1}ąHq ȒL%0)Iq*<A)˒//<'2Lq3򤾢K(#m7N:;SF* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0SG863rֻ!er,~w1 &Ciu>A6vmnv]uo8[rx^G/s:\;vz^ow<]}_~>ײ͌ 3l2w0B °- <#5Q,9�@1lYqQtk@QsGQy w!G$!,DKM#J\%E"&*Kr,LC L2tKSJ4D,l.M9: * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0TG863rֻ!8KEi5Z}^]l2Nmnv]uo8[rx^G/s:\;vz^ow<].^f>?_?�3l- /$%<) *#7DE D,<:/QlSqdaF1tkѤuǑ}!H1İ!$&;$;rd#|q$ˑ9ĒHCL,3d6St8Αj* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0SG863r<~We9s5t<=͵ F[l5~iv[{p7x\7+t9Wz]kܿ7'́</W=>*T; @Pl ΥLBP 6/=DDGD SQD]deƑ|gFsoG ! Qw%Q&0?- ;'rBg#J(K2M<3>* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0TG863r<~We9s5t<=k}[l5~iv[{p7x\7+t9Wz]k˿7'́</W=>+VoRջ @p<Ap4ӣt% 9:/=DDGD SQD]deƑ|gFͯq!HGZ%Hl L<0².+#Ci}K|)L4Ms< * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0UG863r<~We9s5t<=k}[l5~iv[{p7x\7+t9Wz]kۿ7'́</W=>*oRջ @p<Ap4ݡt% 7C6/=DDGD SQD]deƑ|gFƼpOQą ȈChT3lI+"Ĭ?-Bp͌"rŒ\'Mr|7ʓ8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0UG863r<~We9s5t<=k}[l5~iv[{p7x\7+t9Wz]kۿ7'́</W=>*֧V ;<4AB\# ~/=DDGD SQD]deƑ|gFr;Q,Sw%R RCcCR3-D/#"r2Ld)SD6H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0TG863r<~We9s5t<=kNE;=&km[{px= \gtz>_K][xzzp>_{^ϟ~~?5 Md 5pD lp<B Ð<1Q,;(C6?]ddƑ|gFsQ}ȑ#H Eh8ě$J#;#R'r/K*1J3̴4d <C+S|I8LӁ,O̿?3AP** 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0SG863r<~We9s5t<=k}[l5~iv[{p7x\7+t9Wz]k~+ߗ>z>ϗ?Եp�DAp|+ Bm׿ ;q,AD4EE\Sь[őaFeG $,Dz y!2,w#HRDH $BDJ C.s1,3!L\΀* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0TG863r<~We9s5t<=k}[l5~iv[{p7x\7+t9Wz]k~+ߗ>z>ϗ?kԵp�DDAp|+ Bm$ؿ ;q,AD4EE\Sь[őaFeG $2Dz y!2,w#HRDHZ$/),ż̒ɲT#'L2* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0VG863r<~We9s5t<.d23ڽ[l5~iv[{p7x\7+t9Wz]kۿ7'́</W=>+W;mCT@L c~@ 9q KDDMlYqUєkFlBЫcq܅H9R} ʒ׼l\-P|$L122h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W863r<~We9s5t<)d?&{] ivۭqoxܮ/7sGzݮwww `|O|}/o|>;-\0L @pl zQAt) 0no=DKD1DMlYqUєkFm4D1 8ϫ1Q܍Ir<\$~4+2(ˑĠGL1˲l2̓<p* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W#Nc2YC-dW;g4Zs]=?l4gm۝}[qܞg#\އWuݞcX˄p>_{^ϟ~~?O,CUA0$Ћ.B\%0? ;IDSQD]deƑ|gFs07# bHQGLIԛ%$nH<*R Ȳ|'0s,3KL4MkR* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W#Nc2YC-dW;g4Zs]tz fIcn6{}oxr8|7'szWv:}g~,'́<?W=>/kL@p @KNP$p )D- C= c,IqKEQdWElaFmGu1wNP;ÒL '2})pJ T-$*̏$H2s6S* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W#Nc2YC-dW;g4X!hN]kvcn6{}oxr8|7'szWv:}g_~,'́<?W=>/kҴ 4ά �A<ڡ- C/ 8DEDC4GE\Sь[őaFeGڇ 0 Iɑ%4;$1Tr3"KMd{/ʋ8633J<5Sk* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W#Nc2YC-dW;g3vC!h:?k; fewmo< y?7s=gS{www `|O|}/o|></1 D 3A+OA4#@p - B= C@￯LKDYETcHGuG}Dzr DRL3LD8RF+Ȭ#)K4R\1Pܭ,˓D3l7K|8Ή* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W#Nc2YC-dW;g1vC!h:?k; fewmo< y?7s=gS{www `|O|}/o|></2D  pTP٣t# p- DEDC4GEZFEY1]QsFu܅ Hw#L%䐡T)%G 3d"Ò'ʳ)3ģ&LsD43\(1B* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0WNc2YC-dW;g1vC#?huZ fWv:mm7[=wx;q9\>gz<Cu;]>_ֿ8O^g??Wg;̻H@,+S|$!t # 5EDC4GE\Sь[őaFeGa Br8®|{#ǒLr9$*n,0A 7+P/R:6*LD4͋* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0WNc2YC-dW;g3vC#?huZ fWv:mm7[=wx;q9\>gz<Cu;]>_ƿ8O^g??Wg;̻H@,�< o-Bê?=DCKD1DMlYqUєkFmͪ 0̂Gr,u#ǰČGԛ!6T5+*3\y/P,0L450* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W#Nc2YC-dW;g1vC#?huZ fWv:mm7[=wx;q9\>gz<Cu;]>_ƿ8O^g??g;̻H@g 4@\@� ?𻾄C5 BOLKDYETcQmuǑwG̃Ro1$I&I9'ש "rLFD-4/͒+mMl0N=h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W#Nc2YC-dW;gFMhuZ fWv:mm7[=wx;q9\>gz<Cu;]>_8O^g??g;kF+4 ?< !d3 EDC4GE\Sь[őaFeGs Hl0ڧ*HbEoR$Ga"Í|%0@dzLJTK9Ms};* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W#Nc2YC-dW;gCGjt:?k; fewmo< y?7s=gS{ws?>'z>ϗ?@,4@<A0HBpP#dpl=đMEKqTOE|[QciGqmG{!ԍ6pˊHIPJiIrPK-KJç'"M,ܽI211S= * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W#Nc2YC-dW;g1vC#?huZ fWv:mm7[=wx;q9\>gz<Cu;]>_8O^g??g;�@sH@�I, p 7EDC4GE\Sь[őaFeGsϜ�:$4H\ r;j1ZQ:Kt+,0,'Sd3|  * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS(ogsTSTjQ;eYVei;u]Wy<aRJ^crXG)frs1gtYk]=]h6Z͞knvۭ}m[rxܮG/q\Ο?vzݮou] 1~g|~?W~>/$p$KO4 UB, 0 p4Q A,Q4SDdUqa]QsFur :C#$Ckc I2,)Ҭ*8Pĝ%J蜢HhS0si&C,L6dT* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS(ogsTSTjQ;eYVei;u]Wy<aRJ^crXG)frs1gtYYdh5Z]^]v=Y6}x>y87'z>W:g|Xo'ˋz|ޯGy^ϟ~~߯۸0#Xӵ0 Pk1,A 5 C˨> Aq+Q4SDdUqa]QsFur !L1 ͪơb$H#G}+RhP(rI\ʶJM3 5\9MS:* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W$aw?^+c<W#frk-gֻ!hZS[-cnvq\.rx'7].Ovzw8\}?{?gk;�JL@Nd AMB5Ðl&ĿODD JDMdU|eƑtkmuȏH6Il$rrfC0 )&\> Cm.:KT(3L5ll* 0xT" C"P>'c1xb=G$Q#GrL[+K&Sm/L{;O(T%?PMKS*UBOTV[W,V%_XMk[.Wo\{_0X& I3'1W)2yo=3mvC!gZ-f]=[;}>{<g/>W=o<?Dž}ogz~^ߏo<P @MD A<T BJ p<㿯D1 KEqTGE|[QciGqmG{!R,#*%H>$Jr͡D %w&JkKiB11Ll7˳ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W$w?^+c<W#frk-gvC!j4]^Yhmmw;-}xr8|7'szWv:}gw|~.{>_|�<pKSAl4! CCd/ DC Lő\]ű_FqiGuG}Dzr !I<#I4I"U$ɲ+K\-'R@ܫ..s SL1͓TȺ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*TSuF[W,V%_XMk[.Wo\{_0X& B*Ռ[9 fO-d9Lw9: ޅdhSlt-Ym}yw-q~W'y.oWu~g{ˉ<ޟ?}_?w~>ߟh#+@3bAKC A # A@/MDSlUE|eƑ\mFsuG ȑ܍ Ht>Hj$$Jl"rL)+\6r,,TK+M,ҷ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*TrQl%bXmV[Mgnr\oW[wp& `qQcYV<W#frk-g=id?&cWfuiw[]~c6ۋ8ܞ?7y]>wKv:ݞw{^>z<ޟ? /~~?@L PkB\%<  19 !MplWAQYƑkqQoGRyȒ !L%Rl'.;w'C*IR,Kr̹-1RS+L3ҌQ*D7t4(* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W$w?^+c<W#frk-g<]N[guMAn4[Nyo۞&ry7t9Gv{wx;'zy ~|__�@ &o;PkA{XBD- T)B =1+ UEp<[ő]Fm|uGq{ǒ }!H""Iqt=&!|&2+JĐB72ĩ1Ōl3s$4K1J* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W$w?^+c<W#frk-g=C̵ IVkl{n8[rx^G/s:\;vz^ow:W }ogz~^ߏo(n@ wpd-AЬ(M[A-D�đJMdU|eƑtkmuȑ@R4#I !ɲ2ziB *˒˲+L3$ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%!w?^+c<W#frk-g=C Iڝ^YlwYe=x~g+sz>Wz~kw|>Vp>G|}?g_ O, 0K5 APЌ C= D l,G@QDIőL[ьaQ_FQiǑ{ Fԍ""-QI2#RIҜî,*u 2/SLε * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%!w?^+c<W#frk-g=C Ifekv{m[rx^G/s:\;vz^ow8W }ogz~^ߏo.n@ Cwpd0\B0BMjÐ C/�đJMdU|eƑtkmu;G2,#2,Iq#I2D)J$*7KR)N$0L̿3L* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%aw?^+c<W#frk-g=Ck fOu{'ik}6}ox;</r<ΗW=ov=}>W{>^? A,淐\B$6%sQ 9HD3 C?qLO@1dQlcQigFqR,#L%H˛%l$Jrdq'R̨@C*);2L5H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-=\_,My;Pg:GQiT5&KTi:RWUkUf[Xk;gYmV5k\m;w]oW{`o<LfoY;+fsk;Z&{K5 Yku{-fm;=֣}i:~rx^G/s:\;vz^ow<]{z|6'a~^~~_o �J([d$o;nײ#psw CCp؅DL9P*A< ƑmFoGQy2w ȒHD!IRl'2(ʒ7-JRܯ.d1$3 ?3&\7d * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w?^+c<W#frk-g=CkN[j~eizmmx\&ܾG3s\;ݾsw]'{8\~?}?p *Ho4l7\0eA{C ;ۼCLIPI@уQ FcǑ}Gԁ!R,{"H4$ɒ\$IT)R*J |,J2,03M3d3l * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w?^+c<W#frk-g=CjqvC#U4-m[]}n.q9\g#r.7u;]c8\}?{?gHP+Է#mk3t|'�0B N"Co E ?cыFq[uGqy s Hr{"<"Ir4'Ҍ(Jrs:6-12ҢFL3,3s1M45l9h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w?^+c<W#frk-g=CjqvC#U4-wYw[=}ox;&ܞG/sz<Χ?ݞo8\}?{?gh@@ �Z̷0l5D70-B+#7҆O]_F/kѤuǑ}!H1!$$ɒD#\)J1\BC+K1ICxLȕET7Nl9MH* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%&w;V3rO-dsY\s7t&MhsMvC#U5}!l[M}ox;&ܞG/sz<Χ?ݞoap>,}W=/w(P +@[AM 7"Bp|A,# D7t9 D,D1$OE/�?*#=,th>nGqqHq#L$IrT&|&Jrt+̣,Kq,#4K *̩ӥ4˓Dܡs|LتLSl9s* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%&w;V3rO-dsY\s7t&MhuMvC#U5}Yw[-{px= \gtz>_K][ap>,}W=/wHn@p s�1ֻP[! A@ 9)D4 D02?*#=ŏůcEќmsGQy Gr""IRl't(!PJr�K)Lrș˓<53T6Gh* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%&w;V3rO-dsY\s7t&MhuMvC!iu;-Vml5q\&ׇ9W7]3;w^V ޿G{^߿<<D;hA+u ]4 Apt= ­㔌BK<(tY\ƑFqQoG1 ȑ#H%Rl'I2|(ʒd+.r@dRK3sL5ʳT6M8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%&w;V3rO-dsY\s7t&MhuX!5:]i;-}mx[yng/rz\ޏS{noap>,}W=/wH0 @+w)pt" t 𛘌B|?/{=ocыFq[uGqy THQs H,#I\%JLö)?5(C-8w+1K2$3s44h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%Fw;V3rO-dsY\s7t&MhuX!5:]ikpw }qW7tyKuw|8?y^g>߇}_Sn �c\PT0,@l2BN:1 AC/CM@[sF1|igF}!H1#L%H\&DDdE+;S)J=.Ld)S,3344LsZh* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%fw;V3rO-dsY\s7t&MhuMvC#U5}inwpv-kr8|7'szWv:}gw|6}^_|}?o}_ HP+CKuc޷. 7t##DLQQ\EtFckƑqGu!H#L%Ȓl&ItD J̥1</s0̓-2g* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rO-dsY\s7t&Mh_vC#U5}ik5ۭ^km[n'y<~W#s:\?{=~caz<ޟgz>ߟ~>ߟ<@ 7Ttp\,Bz1/3O3GdWEьaű_uG1wG !Dz$"<!I2bIJt}(2-Iܽ.\1L23* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rO-dsY\s7t&MfCWv:m6~eo[&ܾG3s\;ݾsaz<ޟgz>ߟ~>ߟ;� @޷,L@Pl: #=  >IcDeƑ|kmuȑ %dʎJ.$˒t&ܽ122̉B* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rO-dsY\s7t&MfF]5}im5z{pv>oqy\7'ty>Su{]gap>,}W=/wH #M7dAЌ! l 3R߹ :P41GD3R\]okFmG}Hq ȒL%I\&<&JqQʲ+R*L|3L5Sl7!H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rO-dsY\s7t&M?F]5}imnUw;n' u~W7t9}>wGu{~wap>,}W=/whﻐ ;-<Sv7Д ApC DDD+?]laQY1iF}!R,y#2D%HLtJ.&/ɓ 1K$1R* 0xT" C"P>'=F;F$R$ J#Y%˥m0̧k<ϧ4%@ЩU6Lө5NPԫv\׫6%`حUlۭ7pܯ|߯8& V6W*FNK)frs/gtZ Ijtƻ!6Z}gw;}K[qx\nW3zOt{]^s8\gy}>W|}/w}?@n KA kNsE 4S.Cp%LEBDktFckƑqGu!H#L%Ȓl&IW)Đ'IJJ2/J0̒0LLЅ * 0xT" C"P>'c1xb=G"ogs$J$Xܶ?"Hf3 |m5L3Iy?Ϩ4 EP4JU6OӪ5 ]NUT5Jv_׬6 ݎeX6KUoۮ7 ]u\7K߰8  `8LV7JR̜)feyo=f3-sIjtrf!iv:en6۝\< my\f\Gvzsw|]wz2g|~?W~>  KcAT - BP|-! BE LðtKQ<[@]iqe{G} ,#rL%T1)R+#Rđ!J.- 1$2<1M(* 0xT" C"P>'c1xb=G$O$J$Y\?#Sg6'o>T$F)U6NU2V+v^V%rf-UnWv/~X%1V7%Y<VSr|k1gt<EtmvC#Ijivۭp7qy~W7t9}>wGu{~wbq?g??<; Kl@Ž] C8?O%E1Uő|eFkGm1uǑH IJ'D,%)@tW(;%Kr</ w\3L* 0xT" C"P>'c1xb=G$QɥLI%i2MSi}9'BQTjeI)FRUUjVY+bYVkei-r]Wky/ aXlfK2R윯)feo=f3-sIjty!m6yo{<+tz>_Wv:~gd17z<ޟgz>ߟ~>ߟ< #N4Ќ $ <(Y ; 6oPEIE/[deƑmoG1{ Ȓ 7CDҌA)’s$%K\./Id2MԌ * 0xT" C"P>'c1xb=G$Q$!w?[%%|i7fS{<P'GhT5*LT)}VWjUj\X+glV5l\-}wnW|`/ pX4W*d%8G+fsw/h3&Kjuƻ!i:knvo7&ry7t9Gv{w1,W}W=/wH;P c]AL8-"P% DC DqKqSE|[QciGqmG{!R,#L$#Q;`Ҍ= LQ%,ɒ41,$53j* 0xT" =\V Ej9Hc9?'Id(S(LeS m2NfYu=O(SARhZE.MS*T:QVjZn]W,UzaZl[Em[.Vq^n[}_0W bp\DVXby J)ew3hs =i6!j6ZVc{su&p8Os:]CtWq<W^g|~?__B; p#ND l!7× ®5?+p?qclcQigFqR,#L%Hc!KlQU+-{(Ir *2/I$3L5.7̳Ђ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rO-dsY\s7t&M5 Ki; ~ml;MCU' pܾOs\Gtݽ ?y^g?}RN_@ 2LpT:D3PV} 1*D D\]_F1digF}!H1#L%HQQ<S'҄rʵ*K$Kd&̓1M 2Ĩ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rO-dsY\s7t&MkfE; vml;MCS' pܾOs\Gtݼv ?y^g?}SN_@ 2LpT�ATN DBpĊC 5KQlYqtcEqmsGQy Gr""/<A'CR+#\&L1M 2* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%{;N/d1~W)rYk;h3Ik-fGem7[}Sw=x~g+sz>Wz~f 'x}^_O~|]o? �@D A T5¬; 4SEQlYtcEqmsGQy Gr"9IP',!-l)˒</K qK̻3?H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%({;N/d1~W)rYk;h3"d2VGlu-&am}yj<-nwܮ?3sz<Wvz}swql.ˇy=^gz/}?_ @ A80Tp< ABp 5 i$C EKT[D|eƑtkFqq{F ȑ HL%Q<? JL)0D#ɲT/K 1Zp˳L5=* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%({;N/d1~W)rYk;h3Bd24Z6]lu݆em7[|Upw;' qy?7yKu{ 'x}^_O~|}]k.;}@$col%: A0 1$9 41LQ<?EQLYq]EaiQyr }!G,!7%RlIdK#ɜ(R-K"Kӎ63q* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%8{;N/d1~W)rYk;h3#d2V]hZ-gw;}}7|=qW'y.oWu~gap>,?z|'_/~~ � $A|;Bp$3 C ?; DEOQ1\UdeqtmƑouq ȉ=p&\*U)J2d$r/J #\.KLf* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%H{;N/d1~W)rYk;h3!dhYf]j-km7[ΟSpv= r8ܞ?7y]>wKv:ݝ 'x}^_O~|}]o@.c}D SU AB p 1oD9EWEaQ_F1uǑwGā!R,#H2<$, D)J42c+K$H\/S̊E(T3̓l * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%x{;N/d1~W)rYk;h3MZ-f[j=ebF}8[~'pܾOs\Gtl.w<^'xO{>_vz[mA0)A#c7 ,1 BD= DST[D1|eƑtkFqq{F ȑ HLDpKJt&ʒ{!+1\/H0̒RTϥD3Lr* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%x{;N/d1~W)rYk;h3|#?jtzQ[-chZF}wq\ng'r>?uXl.w<^'xOџ|}/_U:߾O-{A$mx5|+P-ñ 2ؾjAL4DkFsF1|igF}!H1#L%H\E\G)R*JRC$</ɳ 1I2 4L'* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e3Y<_7t9Mi5Z=fWv:m5 oo rxG3sz]wGoq^'{z}!~u]_쿰7Mo7-1) BP\BD)C0/ 8D6DACAc|eFkGm1uǑH I%2:iQ<=)E2U+̪ĩ/ &IRl1LʒDԡ5M\2* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e3Y<_7t9Mi5Z=fWv:mk{p77yKu{w{~#́<W=>/0<O<AK8Ќ pWBk90,D 9 BLտp Iő<H1FPgƑuG{H}!1"Ȓ<#IL$J\lK+*˒ĴP-͔'3L5s<ڕAt5M* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e3Y<_7t9Mi5Z=fWv:mm1vC#g q\N_ty=Kb;X/sx|>y^/O|~?oұu?=o7$@P4 AN$p:|B= C EGQ$XE|]ƑmuwǑ} Ȓ!"čJLO2*rˮLD/%32DԤ6$3L="042 b8|VE1r5d8='I2$U-f9|]7M3u=h9}GQ4%2Mj:}VWU5r]l:gY6%mn;}w]7}p;a7`y KeYL[95 gKgZf]j-km7[Ipv>yxnG/s:\;vrxLGsxq^.x<O|}/oukp 4 �@pKkGS44$B̜3Ap<>/ðDSlCEQYƑkqQoGRyȒ !<DI,)R�(+*J!L<$,3#L|Ll7="042 b8|VE1r5d8='I2$U-f9|]7M3u=h9}GJE2FjNRTkUZrWl%bXmV[Mgnr\oW[wp& `qX\N2Ҳ9 W)e9o=dF9g>Uuamw?7[q\g<އWu]Lww'W?ۻ}?c -@9<AP$&­,`? ;Ñ,$DKOWő|eFkGm1uǑH I$OC|(ʒt(Jc,%$T#L1* D0͓*5-!R ="042 b8|VE1r5d8='I2$U-f9|]7M3u=h9}GQ4%2Mj:}VWU5r]l:gY6%mn;}w]7}p;a8 2P<S'fsqdgtY}kKjtڭF]iZ͞knv۬op7|=q\g>SrWox{>^G|}?gZ3˭;0#K)�40T zD# 90. ~1  1ď]1|eƑuG{H}!1"Ȓ<#IJ"LE)ErJ-QO.J%,3̓D5LL5M"* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%Ҟs㱙,O#fr]hs5iVSlu ]m>{Aw>uqy\7'ty>Suvw|>|g{~?oރk�7ìlT 8p) Bnd CP ĎCSc1a]QsFur !,}#R4$HOJ|E2*J2ĭ,KD/Q1ɳ$2<&Ms47H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ڞs㱙,O#fqvC#)etZ ֓Gju.OkZgnw{z-nOty}.oOt:N#z<~7{~~)]N~�7 APlt"o- p pgCClIJŏOE1|CѣqqmQ G$"rL%l'Rt(IDe-Ra/31K̊0_*JR7ӌ9͓:'O* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$FM.LS): TUZXXl:݊dVeh\n;]tWx`p; Xfdr?-S5 9de&Kju[[knw?߿;;rxG3sz]wGvzs'x;<~g=>v8.@0;{8|%t+:4CpCPE CL$=Dq,PD^FQi1gǑ}GHR,#2D$ɒ\#?,Y)RW+E,˒/$,Lj'S<4͒l֢5D6qb* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$F=*NHUUjVY+bYVkei-r]Wky/ aXlf1VYc]Ȩs&cK5:6Ql5knwoh8uq~W'y.oWu}FK|z<~7{~~*n4!@ A A<$A.M МPd/DLİ]4K?QUGuGwG̃R"$!ɒ<'ILEla*ĵ+˒,˳-s sL5Sd6 e5N33;"* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$F=*HPh*WVjun]V++ rgZlv-mZ-+w^nw}^/, bpx./S3%dFU3ٌgMhNYlu{-nml6yk\{q\O3tz>oSu].r2/&3z}_~o[ ;n(A ?A- Ќ A,@,B+ð9 @q,3E1DX>Ƒtk1`GQcǒw! "HR,#Rl'ɒ)Ҍ*JRq1K 1,5Sl7,Β;NڼN,1>%H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&RawMf3{;O(T%?PMKS*UBOTV[W,V%_XMk[.Wo\{_0X& `N 7,]Ig/2:&MVK;mk\ q9[O3zOt{]^sx1~'͍W?�rPC~A7Ь ϸPw49�@EDl?E+o1Kd]Gsquǒ} Ȓ"r<'ɒ(ʒRU-Fg/˓1 2LS,Il7J7Γ9|צT* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%fgsd21K!c/o/3ZMhZ]NWvmlw[]wxp\gz<Cu;]>_xq^,?b}>OW?_|?OӼ0�, ,Al7L3'C4 0 C4?+DqLCM L{FmGoG1{ Ȓ%I2,%T[)Œ+Er,˒/K1ʲt3L5l6Mrp1H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%jgsd1ܞG)k\K=eYGumf]jvZݎgwowpw<=\G/ty>gW;Xxq>.x<O|}/ot= z$@ B|%t 5o4>=6CE,UE<WELcQmuǑwG̃ ? H4A$ɒ\$IT)R*J̉-r/S1K 1* 0xT" C"P>'c1xb= {;ѹ$~9'eR4Y+Le9_7MgSy;Pg:GQiT5&KTi:RWUkUf[Xk;gYmV5k\m;w]oW{`o<aqX6&q!,'5 G1hs<Kj4ڝ>Yu[=vkn6۝k9o8[&8>_'s\7򱽼^;w|z<~7{~u F?,�$ A0d,>pB; DqIL7D\]D_F1digF}~C,#C<$ɑ$IҌ)rǒ,˒-ʃO/S,Ȟ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%jgsd1ܞG)ko%r<AZFSlu=fa[1pw<={q<'3z>Wu8+x|<Oy^/O|~?ou;@ο,A @4WA|7o4?0% D9 MIDdSlcQigFqC"2d#l'J)2R}-R/ .+H* 0xT" C"P>'c1xb=G$Q$~G&=Y(Hd)i7Nfs}=N'* GRht-.MR)*2WVjun]V++ rgZlv-mZ-+w^nw}^/, bpx./˥%dC7e:=+46]v=Y6}糛&{qy?7yKu{w<|_{?~~Gg;N@nL D�T  BP>' |BCq,;?<UŐ]E\ceFuǑ}G܃GRL1%I\&<&Jr|(ʒ˝"R.!L2Lk$ * 0xT" C"P>'c1xb=G$Q$~G&=Y(Hd)i7Nfs}=N'* GRht-.MR)*2WVjun]V++ rgZlv-mZ-+w^nw}^/, bpx./˥%f%vC!f=3j46]v=Y6}rx|73sz<Wvz}~#d<>?y>'~?}?�M͸0LМ,?/ 'P/3q#<UE4[\]euǑ{}C "I2d#l'J)6R-HRܽ. .Lrf * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%jgsd1ܞG)eC7Y]&KhڽNUkZkg3۬;o8Z {qv>O3z>Wu=s| G^f'|~?__? +P4@sA\%d! ' 74?pC�)MDIŏ[EьaqkEuǑ{G !r"G<E0&Dr|(ʒ̭-Kܽ.T#I3,3DƊ2S\3M*"* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%jgsd1ܞG)eC7Y]&KhڽNUkZ=sm びx_+ty=>oSu{]~gx{,G^f'|~?__? #<P,08N4/ 6pt3 DJ9Qg$Yűa]QsFur !,}#R4$0<Eʒ)Ҭ-/K3 O%Hd3L5D7L* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%lgsd1ܞG)5 w1eYGumf]jty[;6k\-W7=O;x0'͉W?Gg?+J4@|A pYB:CBPCpDOSYFqUƑmǑ}ԃq# Iq'ҌI)ɲ+JR+r̸HD0̓"ō\4LSbp* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3yԡwNS$<PMKS*UBOTV[W,V%_XMk[.Wo\{_0X& `NG?,'rvC#/gYcMjt]FUk6ZL{_nv;}o;7{{q~W'y.oWu};xq~,ox<O|}/o|>./�;M@Ln A%BkN1°%q$9<U ő4[\]euǑ{} 4AD0%Rl'I2|(ʒd+J-PL K1S,33Dȡ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y!wNS$<PMKS*UBOTV[W,V%_XMk[.Wo\{_0X& `N?,'5 k9s=C:&Uv=~Olۭvy3{wq\ng'r>?u]ngx|<_y^/O|~?o}_/͋ �@pp$\̸n9B4+  @ϳ/Ð[D@5qT?ьSqaFeGs {!ǒ,"H|KDl'r)IҤ)+R/ ;$HR4$<S\2N * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%lgsd1ܞG)5 w1eYGumf]hY~m6\pw<-n\N_ty.OsZGw^&'z}_~mN_쿐 8 �@@D0o o B8C0NdE DqLQlIEф_FqiGuG}Dz2,"H4=%I\'Ҍ)ɒ*J-2R wŷ2Ls45 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%lgsd1ܞG)5 w1eYGumf]hY~m6]fupw<-p8Oty}.oOk1WswX{z|>_{^ϟu:g}�?  }oA;;Ns /C<3IqLEQdQEQleqiaƱqGQ;pL%d'Rl(IҌ)̪G. LS,32* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%lgsd1ܞG)5 k9r<AZFSlu<oYm7;i'\^G7sC]^v#?^g>?Wo@ 0DK\!6|% 4?j' B0Si H2Q<UE,]\ceFuǑ}G܃E0CC%2dA&|%J2'J̱-ʲ.<{ L1"mL7 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%jgsd1ܞG)evC#+Z ֏Ciu>U_Yl۽i[qy<NgOu{:Gw^&'z}_~}S뿰7 A<7,B{{A0FCB\% 0 ' <E qLQlIQtcEeqqmOLC,?DL%T&H|(ʒt(J̱-rӵH2y1L $ Hh13l7* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%lgsd1ܞG)eFW=hs}&Aiu>Uy݆_;]un8.rx|//r9.3;Xxq>.x<O|}/ouz}o@}�#@@lAp, 't% .t*C SM$U\[E1]iqe%;!H#H#RD&d%ʒ|+J)Gy/G1 3SL‰ * 0xT" C"P>'c178Ԓ/%IQd[)9e5MS{9Hd}GR(Ԛe.ER4ڝ>WV*՚nUV5~gZ,֛eeZ6۝w^.כu^7b0؜f/b8 -D4<bd23<ޗ=i4N[k6[Enu{w=}q\ng'r>?u\ܗw)2~|^7|=~R -P4 D$#7Cj/D ?"L;ıd9|eF1gFqƱoDPC#Hĕ#rL'Ҍ)ɲ+JR+r̸GR !5Sdȝ * 0xT" C"P>'c178Ԓ/%IQd[)9e5MS{9HgFQTeH4څVVUUNX5fYVeh6ۅv]Wx7aXf,zA9|c,d23<ޗ=i4N[k6Ycnu{[ry/3s\SvuyK|'x}^_O~|jc8/K80,@p{}B0>2BD% :)4IqLGCQ\]D_F1digF};!A"Ȓ<#IL$J\)2|*ʒ+Kq y0$̓0G* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%lgsd1ܞG)eX!fr=oKiZf[e3~cm;]=ow{~y?7s=gSb;Xxq>.x<O|}/ou]oO@ g�#,pB[iBK2Op|= .4Cq9E<UE,]ű_qiGuG}Ǫ? D2$"<Ir4'Ҍ(Jr**Ko0:L5H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%lgsd1ܞG)eX!fr=oKiZf[gs^mmw;Mum.rx|//r9.3b;Xxq>.x<O|}/ouz}o@ }�#@+ApD @p-9OP/l4Cq9E<UE,]ű_qiGuG}ǩ= D0"Ȓ<#IL$J\)2|*ʒ+K q LO 532͏* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3yawNS$<PMKS*UBOTV[W,V%_XMk[.Wo\{_0X& `Ng?,'s ]Z&gKh5/^]-Yv۽io pW7tyKuvx|<_y^/O|~?o}_/;0 #5< PlACq@΄? Dt4C+?qD=őL[ьaQ_FQiǑ{ ܡ 3#Dq%Rl'I2|(ʒd+J-R/K-u1$3C5̳lε * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%jgsd1ܞG)eYls]WMhMV?y^wclkpv-/m?Yty<ާKݞow|='W{X~~?@o \m$B A ÎtC"pE A0 ılOıL FQ\gkƑqGu!H#L%Ȓl8D]E4+̧-Jܽ.Ŀ1L23L5L\6d'IS:=s * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%jgsd1ܞG)eYldetYK?z.Ml4mv}[aq\fӝp<NGzݮwwb8W=>/0�<pLkAT#<% BD98p;CM3]NUEqYGuG}Dzr !I<#I,$|Q)̫-/R0K 1L5d I%s N=J* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%jgsd1ܞG)eYldetYC9&El5ZݦQl[k|.[rx<77s=gS{x0'͉W?: P<@p, 46D*ж05 BpDDD\]eFq|kƑmG}Hq IDIL(ʒt(J*/K0̒0L #Hl7#Γt֭ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%jgsd1ܞG)eYlUd23ٜvE9F)v:}VYl6ڽ}w n~/7x.wSu{=~wwb8<~g=>2NS@ :l sPiAd B0<?C,?1 QlYQWEѤasQy w!G$DĕILҌ)r*I,˒,K 1s"sL5%6Hӌ6H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%jgsd1ܞG)eYldetY=fsNo[i=vamw[}~m7'YܾW7=gS{;x0'͉W?45Ӻ@ 0<Att'B?/ ApEÏ=<Uő4[\]euǑ{?± ""IRl't(Ir**KR/; G,3SD5Lܙ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%hgsd1ܞG)eYlW<d2 ?fsNo[k6[ml~y< Mqy\g#r.7u;[Gw^&'z}_~K۱-;E@P,\?L%) oL3 Y PIL9ıdQEQleqiaƱqGOEHċ%d&|$ʒt(-.{1S,3HL3͉* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%fgsd1ܞG)eYlW=vC#?u-f]jvZvM;uo[mpy\_tyކJ1b;]x|>ߋ^g|~?_8NK @,KB[A#24= B6C$LDQQlKEtSƑmFqQkC/P#rL%Hl%t'R+r̭-J G02$1H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%fgsd1ܞG)eYlW=CGgzSlu=fEn6Meo>Oq8<OCdWswX{z|>_{^ϟ~~4NKo�8 �A,Pl,% <> (C,;4SC\]TcFQisFq}R$GHL%Ȳd&|%J2'J̱-ʲ.HS,344LsZ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%fgsd1ܞG)eYlW=F7f]jvZ>K5=ypw=o\~_'ty>oS=b8~w;~'</W=t[ @L<pL :ϻBȤ' D3 /KDDMlYqUєkFm G!R,; $#Il'I|(ʒ\(J*̒3E* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%hgsd1ܞG)eYlW=ε oKiZf[lv=VI;Muiwrw7]-#w^'s=W_@0$Ըo\@Ќ㾯 Pd55P= D1$G,QE\]FLe1gpBq7 ÑR"$!ɒ<'IL'R*&ru/3 m1 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%hgsd1ܞG)eYlW=5 oKiZf[lv=^SEۿ;~il>wy\/s[;vu8+x|<Oy^/O|~?o}_/GG;N�8L@nCAp6|) P?' 6ñ,9đDGL]EQlaQcƑg}0pHq #LA%Ȳd'IRl'r+̡-ʲ/KMdz22MSi* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%hgsd1ܞG)eYlW=5 oKiZf[lv=^=nֿkpv.y77x.wS2X+x|<Oy^/O|~?o}_/Gc:�dAp;%A { t CQ $C=ñLMDlQtYQiqmFqDq#2,$HL%Ҍ)+R,J̹- HR 2<Ms4 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%hgsd1ܞG)eYlUd233:ޫ[k[knw u'o79v0o?>g?uz}KNSp+@4@PT�A;0 ھϋ Д;1E ĐLDSlUE|eƑ\mFstм?!R,#$%I24%d(ʒ'-K2-LqLL2* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zbw;v:v\Y,Mk[.Wo\{_0X& `Mbǿ9;K+eY]sKjsz^Mk=cnvGm;q8W7s= c;]cv/wy=^gz/tOηP,9 $ !BoC >q1 MDQ,QQlSőWьmFQqL9 +!C$!,#Rl'Ҍ)IҤ)+R3 y1Gs,{2L * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%fgsd1ܞG)eYls]WM:]FUk[m;]?>k77s=Nv0o?>g?:]_9n?5 $ЋM�Pl> P=6 đMEKqTOE|[QciGqlCA ,#rL%T&I(+r̥-Ի.Kydz,3sL}5L* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%fgsd1ܞG)eYls]s9oKZf[lv=^kwnx[n㉔o?\V#w^'s=W_t=OCO3?l@~BP4ЌC3Q,Cq4SDdUqa]QsF !!HD"IrL%J|'Jl(ʲį)r̹-H)C%L5Sj0* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%hgsd1ܞG)eX!fr=oKiZf[lv=^kYv-)qy['3u8+v{Osw]z}/{^q:?87@ p,nD7OC ) / -C1$A,SQlYьWEѤas C'Hq#L$IrT&|&Jrt+̣,Kr2PS o1F,w3L<f* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5z!wVU%v\XMk[.Wo\{_0X& `NG_,'s ]kMi5YNWvmlw[]c:=o8's:\nuX7x{>y^O_|}?R:|W?[-?+KAP4@ Bs,2A$Q DMSEQlYtcEqmsGL = Hp#L$IrT&|&Jrt+̣,Krԫ.cǓ,o2L4w4͓Z(* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%hgsd1ܞG)eX!fr=oKiZf[lv=^k[sp7My\>g'e1<WSuX[x{>y^O_|}?#_L? t?K?0T?pl$A{l=5 p >C,7D4EE\Sь[őaFeG\= 0 ȑ#H%Rl'I2|(ʒd+J-R/K2y13,w3GL3͇* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%fgsd1ܞG)eX!fr=oKiZf[lv=^k[w?-{񸛎_txzLGW]'x|>ߋ^g|~?_X9 K?PD OA\%A|20pCQ 9$7<UE1dWEьaű_uG1=Ȑ"4%I\'Ҍ)ɒ*J-Kܳ/{G3sL5FH* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%fgsd1ܞG)eYls]s9oKZf[lv=^k[{Ap7s<#w^'s=W_u9/-L@+i?A T8\!4+ ?�DD: =SD\]TcFQisFq}Ԃ2HRC2L-%C\&)I)+R/ 1K$1,3q7Ǔ8Γ!* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%fgsd1ܞG)eYls]s9oKZf[lv=^k[sp7my\>g'tq],?Ob{=Nw>ߏx>OW7Gח}N> 4> �ЋT-9Ð<CAQ,;D4Cő\]ETaQ[FcǑ{RG%A,#L%Hd%l'R+̧-J-/S,GQw5Sl7dzt * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%fgsd1ܞG)eYldetYGumf]jvZݎgwlCw\=sr7.?:+v{Osw]z}/{^t\G68KApT͔ -2>os PC0EĐGDQQlOE1|eƑdgFq"pl$"<!2d#IҌ)ɲ*)K2+K 1ˮdsSL5ly6M* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%fgsd1ܞG)eYls]WM:]FUk[m;])w\^g5+v{Osw]z}/{^?_?@/@l�A+ϴ- 3 CP9CCqMSEQlYtcEqm hTrAT{@ }!H""Ir<$ɒ)J*|*Kr,1e̓1M5!* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%fgsd1ܞG)eX!9m&WM:]FUk[m;]Cow\-Sg<>g5+v{Osw]z}/{^?_7.S0<2PO>1 /E D1$GDLQıdO|eF1gFp:hTA!H2""Ir<$ɒ)J*|*Kr,˓ qƱ3̓Lu4Ms"* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%fgsd1ܞG)eX!9m&WM:]FUk[m;]Cow\-p[_:Xvq=ov;/sz|~/z=.C~y߭G'J?m�>�D< 3 >) p' Ð= C? DQ,I1DGő\]E_FQh4uGqy !Dz$#HR,#rL'Ҍ)ɲ+JR+qg/̑3K* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%dgsd1ܞG)eYldetYGumf]jvZݎgwlmwY{Aqx>G/1<WSuX[x{>y^O_|}?{~9G+P;x-pCl6/@[1 /E D1$GDLQıdO|eF1gFpdqȒ#Ȳ$\%Jl&J|+ʲ,ܽ-L os$15Lh* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%dgsd1ܞG)eYlUd23ٜGumf]jvZݎgwm{m[q|G8|V#u;]>_|=y=^?g~>s=B8@P+DLA:9?B#D>q 9Dq=D<KQlSYFq]FkQsd!BR,#2D$ɒ\#I%JR+2ħ,˒ܽ+K-LPLy L4͑7F* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Uw; w^mw|`/ pX6+].w%f2ٜnd2 GsZ=jZݞknvۭ}j~&pܽ~pz<~Cq wow<]{z|_G{>^~~XS߹  APD n?p P3 9Dq=D<KQlSYFq]FjAd}q#ȒD$ɒ\"T&r|+ʒĭ,˒ܽ*̑s< * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Uw; w^mw|`/ pX6+].w%f2ٜnd22<֓;j5Z]f[=em[.E8Zy8._#s}.>tFCw]'x޿O{^|߿&Ê@0,AplAtŽ~C?DDKMdU|eƑtkmu %Br,#rL+$IrT'I|)R+̩,Krԭ/K1S,G3L53T6G* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%dgsd1ܞG)eX!fr=oKiZf[lv=^k[Nw?8Yd7/t7OWswX{z|>_{^ϟ~~?ߛ@N| 0< AD! M1 /E D1$GDLQıdO|eF1gFp°|{ !’"G<$ɒ4$IҌ)r*I,˒,4Ѽks,3S4 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%bgsd1ܞG)eX!fr=oKiZf[lv=^k[{nL[3r8+v{Osw]z}/{^?~K@P, D>Ќ!  5 C07 C Añ$?<UE1dWEь`4kF\uǑ}!H1!$$ɒD#\)J2lElg-K̽K.* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%_gs㱙,O#fr vC!f<WMiu}VSl5{=vmmw}sp7zM;x|_ b:Xvq=ov;/sz|~/z=/t??w9� ?>!  P3 B5q A,=Q4SDdUqgqmQ G$"rL%l'Rt(IK_-1.KOj* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%_gs㱙,O#eC7tYM&cGu:}V]k6Zgw;}}o8Xy+tq],?Ob{=Nw>ߏx>OW? ?[g9ߊ� �@LpS >O[ P# ) Cp-C;Q,CLIEqTME|[pdtoQs y Hr}#H<%Rl'(Jr+AF2L * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%_gs㱙,O#eFc+hs,΃G4ڝF]kv:ͦe۝}x;rw^t0Ow>'W|56dP+@0<#=/%-/ C0; EđMOE1,[ddp$kFlquG2 yȒ!,%l'I2'ʒ)1| * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%_gs㱙,O#5 W=gt9m&EڝF]kv:ͦe۝}g8;rw^t0Ow>'W|wYx|3? @ �O|%Bl-°/ p9 DEDMıDOqLYF p$ikoQ G !L%d'Rl(IҋC]-1|.KN* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ޞs㱙,O#ɵ w1g=EiZmf[j=em[m{g8;qr7g/#`q8~Gzݮww|ޯ/{<pm߄?nS� A,APl oBO- 5 Ð7CCQM$Uő<WELcQA1qyHH ȲD!rL%J|'Jl(ʲįƒg/Ѭ/L3#ր* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ޞs㱙,O#ɵ w1g=EiZmf[j=em[m{g8;qr7g/#`q8~Gzݮww|ޯ/{vg6~]894@P Cp< o$) + /PEC ILKdOQleEыB1u1wGH!I "2d#l'J)KFq.L* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ڞs㱙,O#dFS=sGiZmf[j=em[m{wqr8|6'tq>Su{]gx{?y}^7|e͏g>w90 #8o  P5 B9 ;$?Q,UDLYь[^@Ќuǐ{}!1"Ȓ<#IL$J\)2|*ʒ+8qe1K, * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ڞs㱙,O#ɵ k9r=-iuZ6Ylu=_mw[yh\O3:XNvzsw|^z|G{~_wƕr#? >- / C09 7CMOE1$Yь'dGuG}Dzr !I<#I,$ɲ%rQl-ìK˴* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ڞs㱙,O#ko/etYM&Gu:}V]k6Zgw;}}h&yy<7/I`q8~Gzݮww|ޯ/{7?pP3Tk-B/ CP917đMDDOEQlY0 FpLmuGq{ǒ }!H""Ir<$ɒ)J c+r]-F̽-H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ޞs㱙,O"d2G=etYM&Gu:}V]k6Zgw;}}g3yq?+tp8?Ou;]~[x{y=^_|}߆+s_? 8O�ƸP, >p- / C09 7CMOE1$YьV@Ѭ@quǐdqGr{Ȓ !L%Rl'IR'ʒ)lg-Ra.Kd * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ޞs㱙,O#kL_-s =iVSlu ]m3x[&y:LG7C]^ww'^_Gs\__7l@|! P B# Ð= CAQ,;D4Cő\]$$eFoiq{G }!H""Ir<$ɒ)I1Jl * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ޞs㱙,O#kL_-s =iVSlu ]mc4;qr7nO7pOu{=N_y}>Og_+?_ۆ7@ ! P B# Ð= CAQ,;D4Cő\]&De�p,iƱqGQr #L%Ȳd'IRl'pTUK2H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ޞs㱙,O#kL_-s =iVSlu ]mc5w>{uXfsz>Wz~kw|>|gq܏+~߯h̳o�$ ?o|lA|- 5 7 Ð=đMUlVAOgƑuG{H}!1"Ȓ<#IL$J\)qLYҼ+K̻ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ޞs㱙,O#ko/etYM&Gu:}V]k6Zgw;}}3ZN9[g'ru{w{'y}?}s]K #@< Ⱦ$*B1 p;BEĐKDLQqT[D|eƑr@}!H1#L%H\&D)J2d+̧-9K, * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%֞s㱙,O#ɵ k9r=-iuZ6Ylu=_mw[ygs|,Ko[f9<GWݞc]yޟg^߇}//,?CnL  % ?P) Ð1 A,ED1LIőTQladB upDy s Hr{"<"Ir4'Ҍ(Jr**Kmo/3 i0Lsm3B* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%֞s㱙,O#ko/etYM&Gu:}V]k6Zgw;}}Ysrx{g+n1<'u]ngv?y^ogz?y|?.#=�c%o-/ 5EpMđLO\Ude4G}Hq ȒL%I\&<&Jr|(ʒi-c.Kg1B* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%֞s㱙,O#kL_-s =iVSlu ]mg7m7qr88ƫpOu{=N_y}>OgG/~xߏոoALB\ 0|% 5 C; D=0Eđ<UEJF 0kFQuǑ{G !r"G<$ɒ4$IҌҬQ+r,E* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%֞s㱙,O#kL_-s =iVSlu ]mg7m7o7<OXGtݾ_w]'x޿O{^G;s ">0CpLAPl!P# ' =CPAQ,CđDG @P,aQcƑg}GQR,#ȒD%L&IRkIEd+2̭-J* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%֞s㱙,O"d2G=etYM&Gu:}V]k6Zgw;}}n[3r8|Ou{=N_y}>Ogt\o3?P,co% 5 p= Ñ ?E$Uq4]4AgFqƱoH2$HL%Ȳd&|%J2L[EK̻,C* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%֞s㱙,O"d22w-s =iVSlu ]mc5nxZ-rwp#Wv:}gw|z<~7{~+}\ �?{0L >pltP) p- B1 9Q IqLL$cQigFqR,#L%Hd%\ʑD+JT * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ڞs㱙,k]fr9s!gYGju.OkZgnw\Qtp8?Ou;]~[x{y=^_|}߇s9\?� ѾOALB\ 0|% 5 C; D=0Eđ<UEL<ƑmFqQkGs Ȓ H%Rl&It"ҬQ+r,E<* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ڞs㱙,k]fr9s!gYGju.OkZgnwq⛌G7C]^ww'^_G{? >>0+CLAPl!P# ' =CPAQ,Cđ<E[ьaQ|kFmuȑ %cJ2J* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ڞs㱙,Mde3YO;f=EiZmf[j=em[lg{\&79\ #Wv:}gw|z<~7{~'~x? AAp< B- |5 Cp; Ñ =DMU@l �t1|eƑGuH̃Hq#ȒD$ɒ\ǒOrS+J* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ڞs㱙,Md?w'r=?iuZ6Ylu=_mw[Yw{' yp\#Wv:}gw|z<~7{~+?06OKPlAt B# + 1C5DCLK@1l?ф Q_1Ã>m}!1"Ȓ<#IL$8QĒ+JR̩ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ڞs㱙,O"d22w-s =iVSlu ]mkuw=ޫ{n's\Gtݾ_w]'x޿OPO#M@ A|0dl!B- C5 07 ADMC �EoUő]Ƒl"FQl}!H1!$$ɒCıDC)2+Q"* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ڞs㱙,O"d22w-s =iVSlu ]mkuw={bpW7t9}>wGu{~wx;~>y}WrxO#}_oc LPlAP+ 1 P/CQ9đ J?R\]TcFMG.|kG{ !r"G<FlE')I** 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ޞs㱙,O"d22w-s =iVSlu ]mkuw=z6Xfsz>Wz~kw|>|g{l|/ ~~߯P#L @ltP) p- B1 9Q IjEqkEtF K $i1gF yȒ!,%qSIt)Rr * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ޞs㱙,O"d22w-s =iVSlu ]mspw c59XNty>Su{]gx{?y}^7aӇ}_ S t0dl!B- C5 07 ADME p E|[MO $iǑ}{ H!,%qK̝) * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ڞs㱙,O#ko/etYM&Gu:}V]k6Zgw;}}o8[&qrxfsz>Wz~kw|>|g{j|nW}?_S 0dl!B- C5 07 ADME �?\]�űYq<C|cƑuǑH IyDLI)Jj* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%֞s㱙,O#ɵ w1g=EiZmf[j=em[m{n=k9cq's\Gtݾ_w]'x޿OX>ܾ/t� A0,d%-/ C0; EđL?QKkQtqEe1}ȑ#7Q,?%Ʋd&|#H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%֞s㱙,O#ɵ k9hs]&-ڝF]kv:ͦe۝}ox;&p8fsz>Wz~kw|>|g{n|ߟ5ϓP+L ApT A| P# ) Cp-C;Q,CoQkEsm!QgDuRyȒ Fo&D)2|* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%֞s㱙,O#fqvC#)etZ ֓Gju.OkZgnwoo[.s=<f#\އWuݞc]yޟg|x<N}?_G[� A,A<\- C3 C5ð=oKEqTLqEq|[uGqty orqDLeIrT&z* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%֞s㱙,O#dFS=sGiZmf[j=em[m{n=o;rp8?/s:\;vz^ow<]{z|_Go\׉}֫@@4A\Ќ ! B% C3 ;ÊK1T[E lE"QGt{G !1!?kIRlm'I|(* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%֞s㱙,O#dFS=sGiZmf[j=em[m{n=o;b9XNty>Su{]gx{?y}^7D.~~_4A\Ќ ! B% C3 ;Ë?KdOQIDa?oǑ}ą,QI\T * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%Ҟs㱙,O#fqvC#)etZ ֓Gju.OkZgnwoo['rqG3sz]wGvzsw|^z|D}\_<W?O�P,DLAPl!P# ' =CODoJE $I ]ìX4guGLwĜa"2L%l * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%Ξs㱙,O#frֻ!f3z֓Gju.OkZgnwoo[pG/sz<Χ?ݞow|='ޟGGp>/G(qZod? @0D lp Д+ B- 9q 5 ?1+QC21GDQg>ThuGqL}ǒ  l]I<q|$(* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%Ҟs㱙,O#dC74YGi4F]kv:ͦe۝}n[9XNty>Su{]gx{?y}^7P<'׏c~O  @D lp Д+ B- 9q 5#U4$ADQ,`ELrQyq GrFRL_%F2\& * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%Ξs㱙,O#fqvC#)etZ ֓Gju.OkZgnwcy\&7pG/sz<Χ?ݞow|='ޟGia7~}P, L@dl#P) ' B8nE0MRD >n,IQGFquqyȑDHQ"z* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%Ξs㱙,O#dFS=sGiZmf[j=em[mNpw{#~W7t9}>wGu{~wx;~>y}Wz~_>?@@ �DpLB|%Bl-°CC0/CQ*>EŰ]mGs6 }4HCM! * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ʞs㱙,O#fqvC#)etZ ֓Gju.OkZgnwXn\Gܞg#\އWuݞc]yޟdӃ|~?W_ ,@4A\Ќ ! BӃ m' BPC ĎsޥCP]LcFQirDQ},!CM,* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ʞs㱙,O#fqvC#)etZ ֓Gju.OkZgnwgh5&qy?7yKu{w{'y}?}}?0 ,lA0 z°- PˆCmS EQlY\cFqeƑ\A=Qǒp* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ƞs㱙,O#dC74YGi4F]kv:ͦe۝}owX&qy?7yKu{w{'y}?}}?0 ,lA0! T+ C= ӂڥ~E Uq4]ő_d-CCQaD* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ƞs㱙,O#fqvC#)etZ ֓Gju.OkZgnwopp8?q9\~_tyއOu;]~[x{y=^_|}߇}?_ $p4% 5 p|7 $?Q,UDLYC-1k.{qCH* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%žs㱙,O#frֻ!f3z֓Gju.OkZgnwo8XNrxG3sz]wGvzsw|^z|G{~_w~~O�? L dPl%AЌ) + # t7,GDQLIőTQlWƐm Fn-Ds * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%žs㱙,O#frֻ!Gj4}f[lv=V_n6}{pt&qy?7yKu{w{'y}?}}?0 ,lA0! Ь1 5%MuEQ$S8lUE|eƍ?19Gq:* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e3O!dY|ޓGumf]jvZݎgwm}ap<,?rx'7].Ovzw^/z|'_/~~?@L lAt B# + ޸-71,I4SD1\]Tc C= Fq�ōm * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e1vC!eY=&KڽFUkZk۽ul<\gtz>_K][x|>ߋ^g|~?__? p ?<4AЌ! p+ A5 Ð:7ͣĎ sĭUDLYыq CѬiqs�FLbPG * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e1vC#'CiZM^Ylu; [m[Myb8X/ry/3s\Sv{sw]z}/{^~@0$@Ld|%B0'B1 °.ĸ BMM$Uő<VC5Ƒ=zh"* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-cC7Y|G鴚f]=[;}<f#8~W79}O:.w;~'</W=>/0� @DAPl0-B/ CP9168-8QLQılOEQWƐCƱm ICW* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e1vC#'CiZM^Ylu; [m[Myc1<\gtz>_K][x|>ߋ^g|~?__? p ?<4AЌ! p+ A5 Ð; 0rDn KQLIDdPD7F?Pˢ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-cFO=hsAiZM^Ylu; [m[Myc1<\gtz>_K][x|>ߋ^g|~?__? p ?<4AЌ! p+ A5 Ð; 0rDn KQLIDdPD7F?|ZG+B* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-cFO=hsAiZM^Ylu; [m[Myc1<\gtz>_K][x|>ߋ^g|~?__? p ?<4AЌ! p+ A5 Ð; 0rDn KQLIDdPD7F?$]G** 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e3Y7]ez-gKi5Zf]j-km7[}m1<\gtz>_K][x|>ߋ^g|~?__? p ?<4AЌ! p+ A5 Ð; :-8-K$UőD]ьAqkCTW "* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e3Y7]ez-gKi5Zf]j-km7[}i1<\gtz>_K][x|>ߋ^g|~?__? p ?<4AЌ! p+ A5 Ð; <-8-K$UőD]ьAqkCV "* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e3Y7]ez-gKi5Zf]j-km7[}d1<\gtz>_K][x|>ߋ^g|~?__? p ?<4AЌ! p+ A5 Ð; @-8-K$UőD\D7F?$W * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e3Y7]ez-gKi5Zf]j-km7[}b8X/ry/3s\Sv{sw]z}/{^~@0$@Ld|%B0'B1 °/8$LıDOQkAєiQ\Rͫ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e3O!dY|ޓGumf]jvZݎgwm}npq\ng9Gu]nW;y^og=}_op A<A,p) C5 C= éCznK4SD[qCcQmdUDt/* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e3Y7]ez-gKi5Zf]j-km7[}b8X/ry/3s\Sv{sw]z}/{^~@0$@Ld|%B0'B1 °/8$L#<F޸] D|=FQhEQ,YB* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e3Y7]ez-gKi5Zf]j-km7[}x8~#q9\>gz<Cu;]>_|=y=^?g~>}?_??P $<AL#P- 5 Ð67mBDm#mC[deƈQE1T1* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e3Y7]|ޓGumf]jvZݎgwm}8X/ry/3s\Sv{sw]z}/{^~@0$@Ld|%B0'B1 °/ 20޸ dD4SCQ?ű=ƑGTs3lB* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e3Y<]ez-gKi5Zf]j-km7[`p.rx|//r9.3vz}ov;/sz|~/z=/~~@/ L@\D B0d) ' B<7m+!?E0YɜI4j1* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-cC7Y|G鴚f]=[;}b8X/ry/3s\Sv{sw]z}/{^~@0$@Ld|%B0'B1 °/~;C DQő\],q4dFj * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-cFO=hsAiZM^Ylu; [m >\g:>W]S<?^g>?_?P+@0<$AD! P B05 ÊO7DCɣtEmYc* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-cFO=hsAiZM^Ylu; [7X.wpx=q\.O3tz>oSu].sx|>y^/O|~?o}_/? #<A0dAЌ!  5 5-CA,D6Ki6\\:* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-5 w/gIjtFOkv[ vab7X.wpx=q\.O3tz>oSu].sx|>y^/O|~?o}_/? #<A0dAЌ!  5 C07 C Añ"P mCr * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-ko;e=WMiu}VSl5{=vmmv >\g:>W]S<?^g>?_?P+@0<$AD! P B05 ÉS!7DCKs\ĨB* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-ko/dYWMjt]FUk6Zmm1{\&ry+];v{k^'{z}_~>� �@LpT@|%t+B1 M$8М5C/E;ܶq1Q* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-cC74Y=&KڽFUkZk؍ >\g:>W]S<?^g>?_?P+@0<$AD! P B05 Éw *; D7$T6kq6q2* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-cFO=hsAiZM^Ylu; [np8]o[rx<_+s\Ο;vz=kw]{z|>_{^ϟ~~?@o LApT |%Bpt) ʔJoC QMmTCB&* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-cFO=hsAiZM^Ylu; [np8]o[rx<_+s\Ο;vz=kw]{z|>_{^ϟ~~?@o LApT |%Bpt) #+ A+ !* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-cFO=hsAiZM^Ylu; [np8]o[rx<_+s\Ο;vz=kw]{z|>_{^ϟ~~?@o LApT |%Bpt) # + A 6Ki* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-cFO=hsAiZM^Ylu; [b7X.wpx=q\.O3tz>oSu].sx|>y^/O|~?o}_/? #<A0dAЌ!  44FC%BC@EM;'H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-cFO=hsAiZM^Ylu; [b7X.wpx=q\.O3tz>oSu].sx|>y^/O|~?o}_/? #<A0dAЌ!  46;- C1$Eo@% N * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e1vC#'CiZM^Ylsnab7X.wpx=q\.O3tz>oSu].sx|>y^/O|~?o}_/? #<A0dAЌ!  46$C͔C Q$-q<TDm;h۲[4J* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-cFO=hsAiZM^YllN }nx[yng/rz\ޏS{nov|]}ogz~^ߏo@0$,A\BL%0'M4Cm:B 1BM0NEM$YF H * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-cFO=hsAiZM^Yls؍ o\&9W7]3;w^'s=W_??/�@PlA0|%cֵ-2C% A Q,BC5 #L6"* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-cFO=hsAiZM^Yls؍ o\&9W7]3;w^'s=W_??/�@PlA0|%cֵ-2C% A Q,BC5c!* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+ K d228w9r =iVSlq<k[{px= \gtz>_K][x|>ߋ^g|~?__? p ?<4AЌ! o XB3 Д+ AEĎ 9 C<4' @ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8#!f1vC!fz=3jt^Mk=w;>}n;</r<ΗW=ov=>z>ϗ?@P, 4@p\T#BP) +jÍ<C1 1-" dA4(* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+ K+5 c=e9m&EڝF]kl F}>{<g/>W=o?>g???P+@4\AT! P6PY _ B0A DQ,B͌9C\G * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%N/d1&S-5 k9r-&1}VSl5{=vYap;>pw=\G/ty>gW]ox{>^G|}?g_ ,@4A\Ќ ! B% *m<6BpMS*k|Yh* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%N/d1S-k_%Z IjtFOkv[ vspw }qW7tyKuwx{yW|}} �@p@< PlBp *m4ٶ-9 C DQ,HpU0 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%N/d1&S-5 ~w/gIjtFOkv[ vww;>}n;</r<ΗW=ov=>z>ϗ?@P, 4@p\T#BP) #k mi' PIj9ŐS R* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+ K d228w9r =iVSltfw;>}n;</r<ΗW=ov=>z>ϗ?@P, 4@p\T#BP) j5a ' PIjAp; * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%N/d1Ҍ?-k|vW=dYKjtڭF]iZ͞Ww;>}n;</r<ΗW=ov=>z>ϗ?@P, 4@p\T#BP) #^ڶ-R5p' PIi7Eql;2* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%N/d1ь?-ʵ k9-&KM:]FUk[mnp8]o[rx<_+s\Ο;vz=kw]{z|>_{^ϟ~~?@o LApT |%Bpt) "m:C̜7 BMUōA$T * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%x{;N/d1q~W#e-vC!f2Z=5i4N[k6[G 0yw\= r8ܞ?7y]>wKv:ݞw{^>z<ޟ?}_?w~>ߟp  @D lp Д+ Bڵd4PE pI$8ٶl<İӆ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%X{;N.Qd2XfS'5 c-hs<AiuZ}^Ylu<6spw }qW7tyKuwx{yW|}} �@p@< PlBp 8 kg B/BEpLCqDNDpÂ* 0xT" C"P>&w;Z+9E%IRd[)9e5MS{9:EQTeI:RUUUZY;eYVei;u]Wy<aXfYq K+˿FG1gY&gM4=^YkXNmw;}ypw|-qy<~W7ty}.wSu{=~wx{~.y}>W|}/w}? ?$,PlЌ AФ!5 p9[[-tM6pA /* 0xT" C"P>&w;r+$M ȥTK,˥3m0̧k<ϧ4%@ЩU6Lө5NPԫv\׫6%`حUlۭ7pܯ|߯8& V7 `Gyo+Q!t<Ɠ7iuZ}^Ylu<N?c6۽uo['pܾOs\Gtݾ_w]'x޿O{^|߿@ �A 0<|%B+C- 05ÈSZq+aDEj* 0xT" C"P>&w;r+$M ȥTK,˥3m0̧k<ϧ4%@ЩU6Lө5NPԫv\׫6%`حUlۭ7pܯ|߯8& V7 `dc1J;eYL]hr,Γ7iu:}VYluxv'inqko[rx<_+s\Ο;vz=kw]{z|>_{^ϟ~~?@o LApT |%Bpt) # Cp+q \Dq`C怀* 0xT" C"P>&w;Z+9E%IRd[)9e5MS{9:EQTeI:RUUUZY;eYVei;u]Wy<aXfr1W%eYddYoKjtڭF]iZn'knvۭ}m[rxܮG/q\Ο?vzݮou]z|ޯGy^ϟ~~߯@o �L A\<%Bp|+- C=-D׶q$FÐT* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%h{;N/d1?-Y']: 3sޫ[l5~iap;>spw=\G/ty>gW]ox{>^G|}?g_ ,@4A\Ќ ! B% C3 ;LE ND$Z * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%h{;N/d1F?-Y,g8d23&o=ڝF]kvl.km7[}n.q9\g#r.7u;]cv/wy=^gz/}?_@/ $D\ B0l+ Ф5 Ð<6Q YJpR * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%8{;LN/qY KeYL]-KeV3{-cf\x=}q<'3z>Wu=s|>y>'~?}?p +P4@dp!  P3 B5q A+E k-XQ4b * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%8{;N.1b8W%eYdg-Cuޫ[5~i᰸yo[&8>_'s\7:>gw]'w<?_{^立>?@@ �DpLB|%Bl-°/ p9 DED3e͜U7csñ0* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%x{;N/d1p~W#eYddYoKjtڭF]I4l.km7[}n.q9\g#r.7u;]cv/wy=^gz/}?_@/ $D\ B0l+ Ф5 Ð<5<Eč|GD0?$* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%x{;N/d1p~W#eYId23ٍoKjtڭF]p,6m[m}7q\ng9Gu]nW;y^og=}_op A<A,p) C5 CXD1$? ʈ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%x{;N/d1~W)rY!٭oKi:&]ap;,>cnvq\.rx'7].Ovzw^/z|'_/~~?@L lAt B# + S[ Y5$@R * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%X{;N/d1~W)rY-dg3,wIjtz.#v8}mm7[=wx;q9\>gz<Cu;]>_|=y=^?g~>}?_??P $<AL#P- 5 s[ñYČ|/ "* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%8{;N/d1~W)rYkd23{Iu>5v8}mm7[=wx;q9\>gz<Cu;]>_|=y=^?g~>}?_??P $<AL#P- 5 Mt:DDD-D/ "* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%8{;N/d1~W)rYkd2 w9mf]aim[m}7q\ng9Gu]nW;y^og=}_op A<A,p) C5 C(ֶ LEDm|KĐ;(* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%8{;N/d1~W)rYkd23{Iu>v8}mm7[=wx;q9\>gz<Cu;]>_|=y=^?g~>}?_??P $<AL#P- 5 cMMtCC/ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%({;N/d1~W)rYk:kƓ=u>M06mm7[=wx;q9\>gz<Cu;]>_|=y=^?gUz}/w}?_ $p4% 5 pǣ_D; Í* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%{;N/d1~W)rYk;ȵ {1gZ}^]ap;,>cnvq\.rx'7].Ovzw^/z|'4w~~߯@o �L A\<%Bp|+- C= ZԵ?  * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%{;N/d1~W)rYk;k?g5:]j8l.km7[}n.q9\g#r.7u;]cv/wy=^gz/}?_@/ $D\ B0l+ Ф5 Ð= b1?<* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%{;N/41X̞?-c9Lw8k{KZf[lpiwmo< y?7s=gS{ww>m?{?G}_?,@<A\#% B5 Ð= ;-[=D> * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%x{;N/d1~W)rO!f: ƓEu>M᰸im[m}7q\ng9Gu]nW;y^og=}_op A<A,p) C5 CsTC0C * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%x{;N/d1~W)_vC#7hr٭1iVSltl.km7[}n.q9\g#r.7u;]cv/wy=^gz/}?_@/ $D\ B0l+ Ф5 Ð<5\7p* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%x{;N/d1~W)C7frZ=1iuZ}^Ylu<6spw }qW7tyKuwx{yW|}} �@p@< PlBp B+ P3 9Dj* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%8{;N.b8W%eY[]I:[lv=^K 0yw\= r8ܞ?7y]>wKv:ݞw{^>z<ޟ?}_?w~>ߟp  @D lp Д+ B- 9q 5J * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%({;N/d1~W)rY{]f49Eu>Mk8l.km7[}n.q9\g#r.7u;]cv/wy=^gz/}?_@/ $D\ B0l+ Ф5 Ð= ?** 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%{;N.b8W%eYMd23ٍoKjtڭF]iZ͖ m}nx[yng/rz\ޏS{nov|]}ogz~^ߏo@0$,A\BL%0'1 C= DE1"* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%{;N/d1~W)rYidg3,wIjtz.]j4xl.km7[}n.q9\g#r.7u;]cv/wy=^gz/}?_@/ $D\ B0l+ Ф5 Ð= ?,* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%{;N/d1~W)rY-d?s1iuZ}^Ylu=. m}nx[yng/rz\ޏS{nov|]}ogz~^ߏo@0$,A\BL%0'1 C= DE1#* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%{;N/d1~W)rY-d?s1iuZ}^Ylu<~ m}nx[yng/rz\ޏS{nov|]}ogz~^ߏo@0$,A\BL%0'1 C= DE1#* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%{;N/d1~W)rY-dg3,wIjtz.]ap;,> m[m}7q\ng9Gu]nW;y^og=t}_o@@/ $D\ B0l+ Ф5 Ð= ?&* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%{;N/d1~W)rY!9kKj4ڝ>YuY6spw }qW7tyKuwx{yW|}}@@@ PDd%|' B3 P=E ĐG"* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%{;N/d1~W)rY!f: ƓEu>Map;,>cnvq\.rx'7].Ovzw^/z|'_/Ѫc  @D lp Д+ B- 9q 5ڀ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%{;N/d1~W)C7YlΏ15VOl.km7[}n.q9\g#r.7u;]cv/wy=^gz/^6͖ �DpLB|%Bl-°/ p9 DEDMį* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%{;N/d1~W)ŵ w-g-Ijtz.]ap;,>cnvq\.rx'7].Ovzw^/z|'_/ck0$,A\BL%0'1 C= DE/ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%{;N/d1~W)FK=-Ijtz.]ap;,>cnvq\.rx'7].Ovzw^/z|'_/ck0$,A\BL%0'1 C= DE*CL * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%{;N/d1~W)ŵ w-g-Ijtz.Gv8}mm7[=wx;q9\>gz<Cu;]>_|=y=^?g~>M8|_@@/ $D\ B0l+ Ф5 Ð= >>* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%({;N/d1~W)k,['Ei5Z}^v8}mm7[=wx;q9\>gz<Cu;]>_|=y=^?g~>}?_??P $<AL#P- 5 Ð7CR* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%({;N/d1~W)ko-dY_Ci}VYv8}gnvq\.rx'7].Ovzw^/z|'_/~~?@L lAt B# + 1C0* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%{;N/d1~W)FK=-Ijtz mlw[]wx'py\^O3zOt{]^s|'x}^_O~|__�@ A 0dl!B- C5 06 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%({;N.b8W%dFO=Y&Khڼ6=cnvmo>rx_+s>Wvzkw?z|_{?~~?P,L ApT A| P# A C2 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%{;N/d1~W)_vC#7糚-%f:ƳU\wmo< y?7s=gS{ww>}?{?gO�?$pLl Pt#A% p1 ,5p=C* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%{;N/d1~W)_vC#7hq[5f5:}VQv8}mm7[=wx;q9\>gz<Cu;]>_|=y=^?g~>}?_??P $<AL#P- 5 s# q9� * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%H{;N/d1~W)rO!f٭1i6=cnvmo>rx_+s>Wvzkw?z|_{?~~?P,L ApT A| P# ) Cp^* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%8{;LN/qY KeO!e3ymI:L6ֱF.Qw[}n.q9\g#r.7u;]cv/wy=^gz/}?_@/ $D\ B0l+ Ф5 Ð= ?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%8{;N/E1<SeY []hr,Γ7itxl.[jtkZ{n>q\ng'r>?u]ngv?y^ogz?}_o@/<ALB\ 0|% 5 C; D=*B* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%({;N/M1<SemvC!eE:^ ZViu۽ew-q~W'y.oWu~g{.yW}/o}p ?,4 PLp A! ) P9q =C*f* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%8{;N/1<V3+eY[]sKjsz^v7=$c]mZ^}>g87'z>W:g|?<7~?>P+0D @Ll! P 0) B= AQ,9.* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%8{;N/d1~>frywd2 Gumf]f3, {#6{ۍa;gOu{=N_y}>Og}?O� A,A<\- C3 C5ð=ME,SE<UÈ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%H{;N/$qX̞KeYL[9hs/!j4]^Y᰸Emܞ}>k87'z>W:g|?<7~?>P+0D @Ll! P 0) B= AQ,91:* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%X{;LN/qY KeYL[9hs: =d?^Q0}#k [-{px= \gtz>_K][x|>ߋ^g|~?__? p ?<4AЌ! p+ A5 Ð; C AqF* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e3Y<_7t9#M4}VY5{m6-y7|'8.W79}O:.w;~'</W=>/0� @DAPl04-:* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%X{;N.1b8W%eYO=9FMk6=cnvmo>rx_+s>Wvzkw?z|_{?~~?P,L ApT A| P# B: * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%X{;N/DqX̞KeYL[9hs9-di2xl.[k6[ml{o8\'pOs:]CtWw<^'xO{>_|� A0,d%-/ C)* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%h{;N/d1~W)rY.14<sKkl k mlw[]wx'py\^O3zOt{]^s|'x}^_O~_I~_?@L lAt B# + 1C* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%N/d1~W)rYk;f3,(d22f =_[w8>\g:>W]S<?^g>&S~?@p A<A,p) C5 C< * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%N/d1~W)rYk+g49ydi3.lp-nml6ypw|-p8Oty}.oOt:Sx{~.x<O|}/o|> ? A0$Ќ A- / ;* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e3Y<_g' ]tX.lp-nml6ypw|-p8Oty}.oOt:Sx{~.x<O|}/o|> ? A0$Ќ A- / 9* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e3Y<#/fsdiszL#]5}i6{}78|g/9W:}o;<~g=>?@P, 0D\ABP) 0' Ð* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8C-e3Y<_gs:,]jt9 FmC8< p<NW7=_Ot=Nw>ߏx>OW?_|?O�?p APlt#Ap- 3 CP؀* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=&+2XS'fss/gvC#Cf =_[ƋQc7Mry/3s\Sv{sw]z}/{^~@0$@Ld|%B0'B1 °/ B* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%žs㱙,O#frw1mvC#EiZFm[]#u;y9\~g9Gu]nW;y^og=}_op A<A,p) C5 C= ñ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ƞs㱙,O#frw1ZF{5i:#]cn6{ѬwrxG3sz]wGݾw{'y}?}}?0 ,lA0! Ь040/ 3h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%Ξs㱙,O#frw1ȵ kKgVMH6XNinvoZ5ܞg#\އWuݞc]yޟg^߇}ߟ,�< DT%',P1 5h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ޞs㱙,O#frudgs5icYb6XNinvoV5xܮ/7sGzݮww|ޯ/{~߯P pL @ltP) pP= B@ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ޞs㱙,O#frw1Z-CdFm[]wo'\^G7sC]^ww'^_G{__� l|- 5 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%fgsd",7sw/Z#MV[g7o\&9W7]3;w^'s=W_??/�@PlA0|%‰R* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ngsd1ܞG)eXFg-s؜>+jt&Q[-cnvq\.rx'7].Ovzw^/z|'_/~~?@L lAt * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q17;+frL[h0&Mh:]^Ul5ml;]up7'p<^_t9Ot=^_x;'x>__|=|?_� p:0* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q779 vS%3X9hqz<AiuZ}^Ylu=namw[}ypw=qy\~_'ty>oSu{]~gx{>y}^_|}?o}_ $@HB* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8ySc++bY|[=hsEi5Z}^]lu݆em7[}}pwq9\~_tyއOu;]~[x{y=^_|}߇}?_ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4YgzN[k6[ml{o8\'pOs:]CtWw<^'xO{>_|۠ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'Ҟs7r1j4z6]kvcn6{}oxr8|7'szWv:}gw|z<~7{~~>?O� * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'֞s749&G3iu>Uuamwuw' qy?7yKu{w{'y}?}}?0 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2VG971z=#:f]=[;}>{<g/>W=o?>g???P+* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2WG[: Eu>Mk; fewmo< y?7s=gS{ww>}?{?gO�?"* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c"ogsf1y~K9糺&MVK;mk<'W7=Ow>'W?? * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#Xs'岙o34X&KڽFUkZk۽uo[&ܾG3s\;ݾsw]'{޿G{^߿ �* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#Ps'岙o3hqz=#iuZ}^Ylu=namw[}ypw=qy\~_'ty>oSu{]~gx{>y}^_|}?o}_ $@I* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#=K)♌kbYCCi}VYu-nam}yw-q~W'y.oWu~g{.yW}/o}p ?,h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#=K)9|c=c<^Ei4NUkZkl۽uo['pܾOs\Gtݾ_w]'x޿O{^|߿@ �A H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#=K)!O4Z Ciu>Uuamwuw' qy?7yKu{w{'y}?}}?0 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#:{;Ndyc=4YnGiڝf]Z݆gm۝}[qܞg#\އWuݞc]yޟg^߇}ߟ,�* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#*{;OSw%yojtڭ.Qkivۭqoxܮ/7sGzݮww|ޯ/{~߯P pL <* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#Z{;ؼ##˿9k;f3MuXf[=em[{>q\g>Su][?y^g?}_$<�4* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#Ts'岙o3hs<A4f?v; vml;My< p<NW7=_Ot=Nw>ߏx>OW?_|?O�?p APlt#'* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#=K)Xeryg=t<+Cif/]5 cmwuw' qy?7yKu{w{'y}?}}?0 ,lA0 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#=K)eryg=t=9^Uk5=em[m{n>q\ng'r>?u]ngv?y^ogz?}_o@/<ALB\ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#:{;O+f2sw3gZ&kM:]F?u,nam}yw-q~W'y.oWu~g{.yW}/o}p ?,4 PLp A * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V"w; )2YzF_==5B:&M㱻<fm;ux=}q<'3z>Wu=s|>y>'~?}?p +P4@dp!  P3 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V"w; S'lbQ4&MhuRM>[Xn;ux=}q<'3z>Wu=s|>y>'~?}?p +P4@dp!  P3 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V"pw; S'shF[=Y&gM#ZU3tzlv7mb[]wx'py\^O3zOt{]^s|'x}^_O~|__�@ A 0dl!B- C5 06 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V"pw; S'shF[=fY&Gq^l5͞im[m}7q\ng9Gu]nW;y^og=}_op A<A,* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V"w; S'slo=ftYܖ;jqz6[l5~iv[{p7x\7+t9Wz]kx;|^7|=~_6-#D�@,lA0נ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V"w; S'slo=ftYܕcIcuXf/]5im[m}7q\ng9Gu]nW;y^og=ɧ~~m< OLAPl!P# * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V"w; S'slo=fqz,Kc5Z=>[5~iv[{p7x\7+t9Wz]kx;|^7|=FE}?_?@ A\BL%0* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|Tw?FO%rټs5gY&#Mc5XfWv:mm7[=wx;q9\>gz<Cu;]>_|=y=^?g~>V{Ib?> #?m@P, - BP0 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|Tw?+d9o=f9/McuXfWv:mm7[=wx;q9\>gz<Cu;]>_|=y=^?g=>ߜSI?__? nѿ,\A% 怀* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|Taw?FO%rټs5gY^q6[l5~iv[{p7x\7+t9Wz]kI<=瓿z{ޯ/z;f=4-$�> C@p@L%p) ! °0 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|TawQ1+e9o=f9gf3]b6Zݎgwm}nx[yng/rz\ޏS{nov|] Syg//}_o?/;0[A0D?m pC3CP$p M$UE1dWl` * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8{GesY|g9hs<AiuY|Flq{=_mw[ypw>qy\7'ty>Su{]gx{?gzt^_>o+�?iC0cB\$A/ #p= @Ap91D7ő\CeDqgmFqH* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8{SGesY|g9hbƗIea#]6Xkl۽uo['pܾOs\Gtݾ_w]' h:m~??^?7�2pkW1j?*B- C=oCMD,Ő47DE$qKESxE HG#Ȱ!L& * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8xGesY|g9hs<;4f+[bZmnv]uo8[rx^G/s:\;vz^ow<]Oj4^_{^立?]?,O>SAlp! u90CAMN IEd];GZ1_G !r$"Q%@d 'JZ \&|((* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q879 vS%dY\_=gt9&~jqZ>]bZ͞knvۭ}m[rxܮG/q\Ο?vzݮou-EkɥG|}?gw<_? /L2j \Al! P 0) @$3q-C,IhQ1lYtc @lDWt:aG1!R,#"tk�IJ[I*sb* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q679 vSr<o=YGbXf+[lv=^k[{px= \gtz>_K][x|MOCHi:V{>^x@@=Ќ  P5 B9 ;$?Q,UDLYыReEqDuGHR,#ȏZqo�(+r˔* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q579 vS%dY\_=gt9&j0f]j:ݞen6۝}n;r8ܞg/r<ޟ?v:ݞoF4^=.?y|W|}/w}~}w￐ @TOA\BT#p|% - Ð= CpEđDMő\]Tcq|eƑmǑ}ԃq#ȒD>Đ#'Ҍ ʒ+J* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q479 vS%sw-g: j0f]j:ݞen6۝}n;r8ܞg/r<ޟ?v:ݞo՚hYZǏEi<W|}}7w?P+A0dBl#P) ' B1 CQ,ILGDdQlcQigFqR,#p I΃G&ʒ'* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q279 vS%w/hs =jqZ>]bZ͞knvۭ}m[rxܮG/q\Ο?vzݮou_&5j<޿WM_??/<P$ D0kA- C3 C5ð=ME,SE<Uű\]mGsGuDZ} !I,"B\Ҍ)-,(J|+* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q279 vS%2yw/hs 5jqZ>]bZ͞knvۭ}m[rxܮG/q\Ο?vzݮou_&{EytoW|}?g_ ,@3<PdAP- L5 Cp; Ñ =DMUEq<[ő]Fm|uGq{ǒ }!H""Ir<$/ )B=*˒ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q379 t'2Yo=z<FZfW6=_[w8>\g:>W[w;w=|ޯ/{~߯P oRq9,%@L+ p3 B=CDQ,I4SDq\]TcFQisFq}ԃHR,#4$Fp[|ʐ)** 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8zS,?+e3YB1hqZ,fj4z6]kvcn6{}oxr8|7'szW׼fЮ_g{/c}W=/w0? ,Pl:ç pt Cp-EDpILCEqTK|eFqticGqkHq#L$IrT& B2) :Ҵ+RĽ. * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8zS,?+e3Yc=q<ViuZ6Ylu=_mw[ypw>qy\7'ty>Sעfs;<~g=>?@P, 0D$ d)B- Ð= E,Gđ<MőD]TegƑmǑ}ԅ, Ȓ<$ɒCJJ2*ṟ-H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8{S,?+e3Y7eYLFjqzFOkv[ vinvoox\ rxG3sz]wGvzL9{y=^_|}߇}?_ $p4"03 P=E ĐGD SQD]deƑ|gFsQ}ȑ#H #RD&ɪCHOd'*;R,BR.i* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8zS,?+e3YBhr8FIjufk; fewmo< y?7s=gSgZnwt^-W??� �@Pl At; 3 CP91 7C$A,SQlYьWEѤasQy w!G$!,#Rl'Ҍ)2 У-R/€* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8z,?+e3Yc=f-[8iZfl5{=vmmw}sp7|=qy~W7t9}>wGu{NwK}{y^og=}_op A<A,.,Ap# P9q 5KDDMlYqUєkFmyr u!"HD$l'r)JIJBԽ.Kr * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{o;aqXE2WS'a|c=g4Ym&Gu9f/kv=~ev}qox=x~g+sz>Wz~k?u>'z^ߟ~~߯@o �L A\<%@/) ;CPEĐKDLQqT[D|eƑtkFqq{F ȑ HL%rT&H|(ʒs30ĵ ˏ</K1 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%Ξs㱙,O#frMO14Z&kG4ԍ#]u}em7[}}pwq9\~_tyއOu;]~[ٚjt'͑^G/~~?@L lAt Bʱ Ð=E1$G,QE\]FLe1gqG}H̅2$,#I\%JL&2'PVC/51C* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ʞs㱙,O#frvј45鳚F'(b6XNinvoox\ rxG3sz]wGvzsw|^ &ͩkZfG?y/o}?_@/ $D\ B0l+ Ф4׼…CpE đ K M1<Uő|eFkGm1uǑH I%2<&ɒ|'J(K-2;0̓* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%Ξs㱙,O#frvqh3-&kGuVOYF۝}[qܞg#\އWuݞc]dzz6ٓ{{?0�, pLTA) p<<1 D5D0ILGD\]D_F1digF}!H1#L%H\&D)J2d+̧C ;/ 1* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%=+8#!f2w5eY&9f]U`pypw|-p8Oty}.oOt:Sx{~.n{mo_N߿> � d|%t+- 4 L3$;LMDlQtYQiqmFqyR #rL%Hl%t'R+r̭-J-KQ3Jp* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%{;N/d14S1xw'hsZ,7JtMlu{=nCewX.wpx=q\.O3tz>oSu].sx|>y-a{Z @ Ap< B- |5 Cp; Í;C KD?L]EQlaQcƑg}GQR,#ȒD%L&IRl'R+ʒħ-̽.KRLq̓L΄ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rC TYg;fƏCiڝf]Z݅#I2<'W7=Ow;La{>ǟg{?}_o@/<ALB\ 0|% 5 C; 5 ,ADQQlMEtSƑmFqQkGs Ȓ H%Rl&It(ʒ(J-R.>Lod3R* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rC TYg;fFCiڝf]Z݆[w8>\g:>W]kw}gxЏWgi|?_߿ �@p<Ap4ЌBp 5 Cp9 3DqҾN C,]deFq|kƑmG}Hq ȒL%I\&<&Jr|(ʒ̭-Kܽ..LrO4͏N* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%Ҟs㱙,O#frw13֓Au>Mk8>invۭqoxܮ/7sGtz~;(}az}|4N?~}� p<-3 p5Ñ<O3:TGñlED1YƑaѬquG2 yȒ!,%l'I2'ʒ)Ҭ-/K3 /̐NL5Sj* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%ƞs㱙,O#frw1SMGiZf[lvF'`q8}yw-q~W'y.oVgI6Οvp<=^5g???P+@4\AT! P B# Ð= CAQ+0!Q4Cđ]iqe{G} ,#rL%T&I(+r̥-Ի.K0,oFC::c7ӊ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%8{;N/d1~W)eyw53=E4}f]6Z݆g{a>rx_+s>Wvw˞sx{M=>߷i|=~?P LPlAP+ 1 P/CQ9đ KLQOIYűmFoQy2w ȒHD!IRl'2(ʒ'Jį)KR/30̓/LD<b:|H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rO-dsX4+-CJ5]f]Z݆g6 ;q9\>gz<CsG::LJͷ^/O~_w~~O�? L dPl%AЌ) + /PEC ILQDKьOQkFmyr u!"HD$l'r)Ҕ*Jĭ,/s 1U;#5M)B* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3rO-dsW*qh4Y}GgڽFKkZ}ik\ox;rx|73sz<Wslz{]g7֊wݽVz}=g}?O� A,A<\- C3 C5ð=ME,SA"5QYFq\ieGqkHq#L$IrT&|&Jrt+̣,Krԫ..Lr3qsMTڅ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%w;V3r5SrYw1Z-CJ5]f]Z݆gwX.wx'py\^O3z)Zm6;Ѥwz}ŷ]O~_w~~O�? L dPl%AЌ) + /PEC ILK5E<eFgƑmǑ}ԅ, Ȓ<$ɒD%T&(ʒ,˒Ľ-.,0ɱs5Sk** 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%x{;N/qX̞KeYL[9hs: ;i}f]ivZݎg`p6o[&8>_'s\cku[~߷n<=ɪy޿{~^~~?Op LdAPl%p) ! °1CPEq IKFTKF|eF1gFqƱoH2$HL%Ȳd&|%J2'J̱-ʲ.-L3#6n5EB* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%({;N/E1<SeY [9hs: ;ixNUi:ݖi\x=}q<'3z>W;=w='s^_G{__� l|- 5 7 Ð=đMlEıtcE1msGQy Gr""IRl't(Ir**KR/0I[3* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vw;q& V6I~^oy,)fryo=f3-sIjtwFWlu UmX.3{pw.o\N_ty.Ovvv)x7>?>g???P+@4\AT! P B# Ð= CAQ,;M\IdeqtmƑouq ȒL"\&d'rt(ʒ̯*ܵ.̎ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.V#ݯ{_/boLF3cm<+9o=tY ^#M5:FO8Fawof.'8>_'s\7:>f o|['x޿O{^|߿@ �A 0<|%B+C- 05ÐED KEM-'QlYFQigǑ}GHR,#2D$ɒ\#I%JR+2ħ,˒ܽ+K-LS,3/ӻ5Sj怀* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.V#ݯ{_0X& `Nc2Ys39k;gZO!砚mN]5~kl[}px= q<W7y}.wSu{={߽w/z|~/z=/~~@/ L@\D B0d) ' B=?D0I CEMьKEmoG1y w!G"%I2$'Ҍ)I*-K2/ 1BM* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vݯ{_0X& `Nc2Ys39k;gZ&?85ZmN+qknw[h3^Gq~W'y.oWu~fUn;y^g>߇}_?,@<A\#% B5 Ð= CC,ED<Tա 5DqaqkE1mG}Hq ȒL%I\&<&Jr|(ʒ̭-Kܽ..Lr;K5h"* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vw;y_X  bo./`%۵UesW7B3kG~l|FkZS7[=wo&j_+s>Wvzkޡ>>z|g{~?~,@0L Tl! % B0) Ð1 A,ED1LIőTQlaeF1iǑq!,#H2L#ɒT%l)+J2̩+˒Ա-1,3An* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.V!w?~_<bo&#U1&r<;#t=k;jum-AfZgu{{n=V]rxܮG/q\Ο?vzݮou<Ny^O_|}?}_O �@p<Ap4ЌBp 5 Cp9 3Dq;<UEq4YьSFq[uGqy s Hr{"<"Ir4'Ҍ(Jr**Kr/ 0Ls2nMsRh* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.SG7}L _X\LkZ1+<w9]U$kQixǯj:wpwci6ܽ7yKu{w{|Ny^ogz?}_o@/<ALB\ 0|% 5 C; D=0Eđ<UEL[F\]1|eƑuG{H}!1"Ȓ<#IL$J\)2|*ʒ+K̻,Lܽ122̓<36* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um["ogstZ/{{_p7c~a|f bq+חe܎'hovfU4ڬ#[ vSivM~}h.rv?3QzOt{]^s|'Cqx~G{~>ϧߟ@@ \Bl#B|% °- = DCDEıM\]FlcF|eƱm}HH#Ȳ$\%Jl&J|+ʲ,ܽ-L.L3̳4N * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]=f6Jr[[n6 }to{ԎZ+ > ZXL^dq,O-bL~w*hr2Q4UvY.Wskwvj[_ty _:wx{yWD]~P, L@dl#P) ' B1 CQ,ILGDdQlcQigFqR,#L%Hd%l'R+̧-J-/S,3L5L8!* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb:{; dZ,֛=o:vn{{_p;u jaq7 ^d1O-d9\_5h3&Mh:]F jZTcgqƶO5Hv=? rxܮFu5=aox{>^Gy>?י~> P+@PD LЌ! P BP) Ð; AQ,?DQDIőL[ьaQ_FQiǑ{ !R,#HRD#ɒL%Ҍ)R+JRĩ+˒̻- 1S,35N.Ml<* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb:{; dZ,֛=omU%]+ ^qW "ܲ7<W!f2g=t=945j;=Qicym7.q9\g#u=Gu{~wx;~>y}~;?oO�?$pLl Pt#A% p1 -PCC$EqLQlMQtcEeqqmQ G$"rL%l'Rt(I*ṟ-/R$=L4͌** 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zbJ{; dZ,֛=omW;uqu\/7+~B%~pت7c<-|2k3gt<Et}fQkv=}##l <= 8ܞ?7ϹKu;]>_|=y=^?g|yܿˡ?/�@PlA0|%d' B1 P/C0EĐGDQQlOE1|eƑdgFqQoG1 ȑ#H%Rl'I2|(ʒd+J-R�> ot̨* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]=f6{Um[.V%v^/Ww`nuaJ7W2X+e_5gY&KhڽNUkZkl۽uo['pܾOd.Ovzw^/z|'>>w~,@0L Tl! % B0) Ð1 A,ED1LIőTQlaeF1iǑq!,#H2L#ɒT%l)+J2̩+S/=d/J* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]Dse٬Eo\ll]o7+^,ka1N5qo5g4Y{Mjt]FUk6Zmnv]uo8[rx^G/i:Y.Gvr^cx{/w^O\{79߿?O�P,DLAPl!P# ' =CPAQ,CđDGL]EQlaQcƑg}GQR,#ȒD%L&IRl'R+ʒħ-̽.KNko;2:t* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk275%"gX-6:Ŷh.u]/W;~DpZaok dq FW8,3=d-wKi5Zf]j-km7[}n.q9\g#rLof9_x;'x>__Jw =?@ PDd%|' B3 P=E ĐGD SQD]deƑ|gFsQ}ȑ#H #RD&d%ʒ|+J+RĽ.-lL53b* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk0G/dUiWzo]V `n5yؼEc/\-nwgZ&KKju[[knw{\&ry+9S5{ww>}?ͅzwGt?<� A,A<\- C3 C5ð=ME,SE<Uű\]mGsGuDZ} !I,"I<'ɲ\()K*K/˱[s+2L3.* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>({;n\X+aUiVkno[,W;m]7+b/f/{b8ܞ? YWZ$O9iVSlu ]mspw }qW7ty ޏAzݭ/sw|=z|~7{~2>u}z}/?� �@lA|%\-B3 5CEĐMDSlUE|eƑ\mFsuG ȑ܍ H"l'I|(ʒ\(J*/K03K͓B4* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>fw;rYl%bXmV[Mgnr\oW[wp& `qX\N3rO-djNg\Γ5eNYlu{-nml6ypw|-993z<އWu]O=yZ<q?'|?O�?p APlt#Ap- 3 CP9CCqMSEQlYtcEqmsGQy Gr""IRl't(ImRP=Ko\,˓ H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*Tw?j^W;gZl]n[;w^n~_<bp^+ c<W#bi<VDf/F3eNYlu{-nml6ypw|-p$&tz<Su].sx|>y^/O9_?}?O� A,A<\- C3 C5ð=ME,SE<Uű\]mGsGuDZ} !I,"I<'ɲ\( t,˒Ľ+* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*SG5r]l:gY6%mn;}w]7}p;a8&3r<~WeŶChrܵn{h=V]k6Zgw;}}o8[&y7/Ty.Ou;]cv/wy=^gz~W#}?\?P $<AL#P- 5 Ð7CCQM$Uő<WELcQmuǑwG̃R"$!ɒ<'IL'RKR/3* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*QG5r]l:gY6%mn;}w]7}p;a8&3r<~We9s5t<=i:&Uv=~]m;ux=oO)|W6=Ow>'U#_??/�@PlA0|%d' B1 P/C0EĐGDQQlOE1|eƑdgFqQoG1 ȑ#H%Rl=+)J/L+̧- * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4yӪ*>WB+0v^V%V`ZmlWp^o|X% bq+Y;+fsk;Z&{Kju[[knw{\&9T]3W9>Gu{~wx;~>y}WQ9> @P,Pl Ќ- BP1 P3Ñ7 MDQ,QQlSőWьmFQqQsǒw! "HR,#Rl'ɒpʏ\JĮKrހ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4yӪ*>PU+UjN_Xj:fYmV{]o\m;mv]oW{`o;aqX|^'dq<nS!esY|g9hs<AiuZ}^Ylu=namw[}ypw=펑ǥr)_7yKu{w{'y}? xO˅} �@p@< PlBp B+ P3 9Dq=D<KQlSYFq]FkQs y Hr}#H<%Rl'Ol)2*J-#* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi374/VTժUnX֬;d٬6ehڮ;tݮ7xް<8f/<W9o==;:f]=[;}:Gƣ\e/<އWu]O=yT̼#}?_ $p4% 5 p= Ñ ?E$Uq4]ő_euq}ǒ "$#r4(ʏ\+JL+h* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$FΞsMөJVQUznR֬;d٬6ehڮ;tݮ7xް<8f/<W9o==;:f]=[co\#A~W7t9}>wGu{~wx;~>y}|8/w0? ,Pl 0 AЌ- 1 P)19C M,QQlI1YEьmqQi2y!G !,%Rl=r)2*J-;* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$F=*N4BUU+U:B1W+bYVkei-r]Wky/ aXlf1G)eYlW=3IiZmf]5iR7P}msۺ=qW7tyKuwx{Q.Pw}_O �@p<Ap4ЌBp 5 Cp9 3Dq;<UEq4YьSFq[uGqy s Hr{"<"Ir4'OLJ"*,,˒ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$F=*N4BUU+U:^^l5eY-V;enn6u]/W;~p7 a1X<fr8C-e3Y<_7t9Mi5Z=fWv:mna[}gn/y?7s=gS{ww>8_f}?O� A,A<\- C3 C5ð=ME,SE<Uű\]mGsGuDZ} !I,"I;'ҋ)*JT* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S${;M.LT)tjVOU5un]U+ rgZlv-mZ-+w^nw}^/, bpx./b1,3)fryo=f3-sIjtz.]j5-inpuM+u=qW7tyKuwx{M8^{?gO�?$pLl Pt#A% p1 -PCC$EqLQlMQtcEeqqmQ G$"rL%l'LJ,* "* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S${;M.LT)tjV8j5unHWlUk \Zm-m[Vn^o}_W~bq.3cXS'fss/gYGju.OkZgnw-S}A7xVcry?7s=gS{ww>y{;ٺ|}?}_ #P,@LЌ  P5 B9 ;$?Q,UDLYь[_QuFy {!$#R,$HL%Ҍ+R,=/%H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S${;M.LT)}"8eUv_Xk fY춻Uo\m v]`o  aV7dq Kew3hs =iVSlu ]m=A'py\^O3zOt{]^s|'n=[Ϸ׺{~߯P pL @ltP) p- B1 9Q IqLMDlQtYQiqmFqyR #rL%Hl%o *<-K2* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3yԡw? ;QiTz]OTh*mN8FvVWueY-V;eZmۭw+w^n|߯X,bp&7Y,O#frw1Z-Cjt&Q[-cnv}Wwq9\~_tyއOu;]~[x{Xw[Ofw~>?O�P,DLAPl!P# ' =CPAQ,CđDGL]EQlaQcƑg}GQR,#ȒD%L&IQ)LKK+R̸ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3yԡw? FQ贺U6OTi JVN!Z^T֣UŖg- eor]o7K aq8LfO-es9L_5Miu:MfUmilS}x[qܞg#\އWuݞc]uzv_G{>^~~_o �L\d%pt-/ 5EpMđLO\UdeqtmƑouq ȒL"[Z; ̫-* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3yԡw? FQ贺U6OTi JVU굺vPF+zg,֛e_\-+}so/+ qV7 1,vG-sw)3,MuVI5-vmm6yw }qW7tyKuwx{.ͺm=[_|}/{_O @ Ap< B- |5 Cp; Ñ =DMUEq<[ő]Fm|uGq{ǒ }!H":; ɏ#(ʒ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3yaw? FQ贺U6OTi JVU굺v_Xk fY춻Uo\m v]`o  aV7dq Kew3hs =iVSlu ];N7S}7q\ng9Gu]nW|[zvޯ/z=/~~@/ L@\D B0d) ' B=?D0ILGD\]D_F1digF}!H1nr*$<'l * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y!w? FQ贺U6OTi JVU굺v_Xk fY춻Uo\m v]`o  aV7dq Kew3hs =iVSN͆c7S}< y?7s=gRGzouv^g|~?__? p ?<4AЌ! p+ A5 Ð; C AqKC<Uő4[EьaqkEuǑ{G !r"G뻸*\R{)J2 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3yaw? FQ贺U6OTi JVU굺v_Xk fY춻Uo\m v]`o  aV7dq Kew3hs =iVShg9GQv};q\g<އCqz]oM:=wc^g|~?__? p ?<4AЌ! p+ A5 Ð; C AqKC<Uő4[EьaqkEuǑ{G !r"G +|2* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y0w; Aije.JRfڍRVSV_Xkv*eX,Mo\mw+mu\.`ox+ `0Ndqy,nO-d2S9hsz,Mh4NYlu{*{v}8;q\g<ބ[u^sw}gy^g|~?__? p ?<4AЌ! p+ A5 Ð; C AqKC<Uő4[EьaqkEuǑ{G !r"G;4.'ҋ(JrĊ * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O&ogsDR(Z]&JST6Q*:fZWU%va,;]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YN6?N[{pa[ q[g>klNj|_zv__|}/{_O @ Ap< B- |5 Cp; Ñ =DMUEq<[ő]Fm|uGq{ǒ }!H" k'(Jr * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}== F4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]N5ͦw7[s&ܞG/sz< :'_z;oG{^߿ � d|%t+- 5E ĐKMdU|eƑtkmuȑ CI\I)(* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rw?q>O:s/&]&UDh:RVUkUzf_Xk:fYmV{]o\m;mv]oW{`o;aqX|^'dq<nS!esY|g9hs<AiuZ}^YR F֫n)ۺnukvsq</r<ΗVm;7.?Ӊ~#z}?{?gO�?$pLl Pt#A% p1 -PCC$EqLQlMQtcEeqqmQ G$"rLɮ)J(򜲂 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rͧ{;O(T%?O%:\қOӡT:=REkjnZVlU _mkejZnVۍookz^pWqlf/brX܎S'slo=ftYGumf])KgnvqM,[uqW7tyuNwKs{Zϓ}ogz~^ߏo@0$,A\BL%0'1 C= DE1$G,QE\]FLe1gqG}H̅2$.Io |&Js* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rͧ{;O(T%?PDgNT*SjWk5]n]V5g٭6mZ6˕wݯ7}^7 8/b8̖W)9o=f9I:]ejtΫm[m֭Q}W79.t+YuSw:>y^g|~?__? p ?<4AЌ! p+ A5 Ð; C AqKC<Uő4[EьaqkEuǑ{G !r"E%rl'<R|(ʒd+%H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rͧ{;O(T%?PMKKu)R1*Jev^Xi;gYmV5k\m;w]oW{`o<aqX6'dq<SesYg9hs=?iuZ6YluMk<junx[q8G/sz<ΥSou\wwܾ۱v|_gz~^ߏo@0$,A\BL%0'1 C= DE1$G,QE\]FLe1gqG}H̅2$o IIrt(I)* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rͧ{;O(T%?PMG3JVcTժRev^V%>`6[En[Wp7[~_X% 8\F7cY/-9\w5gZ&oM:]FUk[MZV[ Vx[8g/r<WgYy>Kz{ǂy=[_G{__� l|- 5 7 Ð=đMUlWő|]ƑmuwǑ} Ȓ!3%k'IR'ʒ)B* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rw;w9h%BPiTZM2GΦYRgSUk5zv'NT,4glv5k[n6w^nw{_p7 bpx63cr8W)frys1gt9Ijtz6Qkv:i۽gJ׷. su'7ty]>#r?{v]W{?_|?O�?p APlt#Ap- 3 CP9CCqMSEQlYtcEqmsGQy Gr"pI<JD)IҬ)H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6{<P'GhT4qOj5 NUT5I%"^V%cحV[Ei[sܯW[y_& X\F7cC-Y\w7g&MZ]FWkm+k}xr!/y3lWNKw]O'{\;^ϳ~?}?p +P4@dp!  P3 B5q A,=Q4SDdUqa]QsFur !,}#R3'ɒ(ʒ&f* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi475 uRUkv_W6 em=o[7 euo_8 q>7 c9 fS%sw-g: Eu>Mk; feVoT&r%['<'3ovzwx:>[gc>}?_??P $<AL#P- 5 Ð7CCQM$Uő<WELcQmuǑwG̃R"$!/+ҋ)J*| * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4xӪ*>SU+UbWV+ vcY-VegZ+s]/Ww^, a1Xf#b,7+e3Yc=f-wKi5Zf]j-km6+{LR[MĔqFy[~O_<>s|>_{^ϟ~~?@o LApT |%Bpt) # Cp+EDpILCEqTK|eFqticGqkHq#K<c'J$)J2l+(* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zSӪ*>SU+UbWV+ vcY-VegZ+s]/Ww^, a1Xf#b,7+e3Yc=f-wKi5Zf]j-km6+{LRT獸\7=78z;~Oyow<\K}ogz~^ߏo@0$,A\BL%0'1 C= DE1$G,QE\]FLe1gqG}H̅2"CNI 'ɲ\()&* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4yӪ*>SU+UbWV+ vcY-VegZ+s]/Ww^, a1Xf#b,7+e3Yc=f-wKi5Zf]j-km7WjFpi|>wPq/7F9]=Wq9w<^'zޯG|}?g_ ,@4A\Ќ ! B% C3 ;Ñ,AD4EE\Sь[őaFeGs {!ǒ,"H+%k&Is)J+Ȣ* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi375 uRUkv_W6 em=o[7 euo_8 q>7 c9 fS%sw-g: Eu>Mk; few}#}J>DŽn'#S7n+vy7k{N>W}/w}? ?$,PlЌ AФ! 3 P9 7C$A,SQlYьWEѤasQy w!G$! {%c'Rl(IҌ)* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$FhgsLT)ڝFRUUjVY+bYVkei-r]Wky/ aXlf1G)eYlW=3IiZmf]5im[l#}J>CpxW7$6w][>=ߋz<ޟ?}_?w~>ߟp  @D lp Д+ B- 9q 5KDDMlYqUєkFmyr u!nIrL'ҋ)I * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3ypw; Aije.JRjTڍROkj4{_A+%jYXMk[.Wo\{_0X& `Nc2YC-dW;g4Z&MhN[k6[mlͺaw+qy<~W7ty}.wSu{=~vGmw|ޯ/{~߯P pL @ltP) p- B1 9Q IqLMDlQtYQiqmFqyMI<I2dJl'N* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3ypw; Aije.JRjTڍROkjnZM*ЊYYUMf\n;mu]W+v`p;aX,N3dr<nSeY,s7ht<?iZ-NWlv=n_m[-"}=O8S&y<~W#s:\?{=xmo{?z|_{?~~?P,L ApT A| P# ) Cp-C;Q,CLIEqTME|[QciGqmGz;+#;K%d'Rl * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}== F4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;|yw*8ܞG/sz<Χ?וn;[w|='ޟG{~>ϧߟ@@ \Bl#B|% °- = DCDEıM\]FlcF|eƱm|;R,#2D$ɒ\##* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O$ogsDR(Z]&JST6Q*:fZWU%va,;]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YkZm6=9?N\rxܮG/q\Ο?єn[w|='ޟG{~>ϧߟ@@ \Bl#B|% °- = DCDEıM\]FlcF|eƱm}*ΤHnĉ#K%Ȳd'8(* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=HsEѨE.OTi:eVTժUn_Xk:d٬VEo\m;etݮW`o;XF/dq<fW!Yo3hs<AZFSlu=fa[sI8S'AܾG3o=Wyu=s|>y>'~?}?p +P4@dp!  P3 B5q A,=Q4SDdUqa]Q91y|H2$ H, * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=HsEѨE.OTi:eVTժUn_Xk:d٬VEo\m;etݮW`o;XF/dq<fW!Yo3hs<AZFSlu=fa[s9Ơ8~d+o:\vz^ow<]{z|_G{>^~~_o �L\d%pt-/ 5EpMđLO\Udeqtm.kNT}ȑ#H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O"ogsDR(Z]&JST6Q*:fZWU%va,;]j[V륶q.;z_W% 0<^'cX7-2<g9gY&wM4=^YkZm6=yg')Ơ 7{t7>wGu{~wx;~>y}W|=?w} @P,Pl Ќ- BP1 P3Ñ7 MDQ,QQlSőWы1É9Qy2 w!G#* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(RG452Mj:}VWU5r]l:gY6%mn;}w]7}p;a8&3r<~We9s5t<=i:&Uv=~]m;ux;p79>Cu]ngv?y^ogz?}_o@/<ALB\ 0|% 5 C; D=0Eđ<UEL[F\]<lGQyr }!G* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S#ѩMKS*UBOTV[W,V%_XMk[.Wo\{_0X& `Nc2YC-dW;g4Z&MhN[k6[ml{o8[pOszWv:}gw|z<~7{~~>?O�P,DLAPl!P# ' =CPAQ,CđDGL]EQl`8񪂢F4o}H삜 * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$!w?]*NS:VWVjj^W;gZl]n[;w^n~_<bp^+ c<W#frk-g=Cjt^Mk=cnvmo=xG3sz]wGvzsw|^z|G{~_w~~O�? L dPl%AЌ) + /PEC ILKdOQle/.2mu * 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S#ѩMKS*UBOTV[W,V%_XMk[.Wo\{_0X& `Nc2YC-dW;g4Z&MhN[k6[ml{o8\'rwG3yOu;]~[x{y=^_|}߇}?_ $p4% 5 p= Ñ ?E$Uq4]ő_ B(t1v%H* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S452Mj:}VWU5r]l:gY6%mn;}w]7}p;a8&3r<~We9s5t<=i:&Uv=~]m;ux=}q<'3z>Wu=s|>y>'~?}?p +P4@dp!  P3 B5q A,=Q4SDdUl ~j$k1sFr* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S452Mj:}VWU5r]l:gY6%mn;}w]7}p;a8&3r<~We9s5t<=i:&Uv=~]m;ux=}q<'3z>Wu=s|>y>'~?}?p +P4@dp!  P3 B5q A,=Q4SDdUm~j$k1sF4* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(SѩMKS*UBOTV[W,V%_XMk[.Wo\{_0X& `Nc2YC-dW;g4Z&MhN[k6[ml{o8\'pOs:]CtWw<^'xO{>_|� A0,d%-/ C0; EđMOE1,[dd'jFʃGq* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(SѩMKS*UBOTV[W,V%_XMk[.Wo\{_0X& `Nc2YC-dW;g4Z&MhN[k6[ml{o8\'pOs:]CtWw<^'xO{>_|� A0,d%-/ C0; EđMOE1,[dd'jFʃGh* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(SG452Mj:}VWU5r]l:gY6%mn;}w]7}p;a8&3r<~We9s5t<=i:&Uv=~]m;ux=}q<'3z>Wu=s|>y>'~?}?p +P4@dp!  P3 B5q A,=Q4SDdUq:9i'qp* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(SG452Mj:}VWU5r]l:gY6%mn;}w]7}p;a8&3r<~We9s5t<=i:&Uv=~]m;ux=}q<'3z>Wu=s|>y>'~?}?p +P4@dp!  P3 B5q A,=Q4SDdUqa&* 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S#ѩMKS*UBOTV[W,V%_XMk[.Wo\{_0X& `Nc2YC-dW;g4Z&MhN[k6[ml{o8\'pOs:]CtWw<^'xO{>_|� A0,d%-/ C0; EđMOE1,[deƑ = 0xT" 9UN+F"јv9cR8K$J$ҙ<Y/eS9tk4N&әy?gT9 DR(Ԛ=6Oau8|2TjZn]W,UzaZl[Em[.Vq^n[}_0W bp\F/c2X;-fr\o5g4Y{Mjt]FUk6Zmnv]uo8[rx^G/s:\;vz^ow<]{z|_G{>^~~_o �L\d%pt-/ 5EpMđLO\Uden:= 0xT" C"P>'c1xb=G$Q$~G9UL[,L%|i7fS{<P'GhT5*LT)}VWjUj\RY Oem=o[7 euo_8 q>7 c9 fS%sw-g: Eu>Mk; fewmo< y?7s=gS{ww>}?{?gO�?$pLl Pt#A% p1 -PCC$EqLQlL = 0xT" C"P>'c1xb=G$Q$~G&e2x"˦))4M39y?'t%>(*U6O)uNN**v_+v%(J2dkڮVۅq]כ{ްWa؜f#X܆W'eٜc=YGiڝf]Z݆gm۝}[qܞg#\އWuݞc]yޟg^߇}ߟ,�< DT%'- Ð= E,Gđ<MőD\ = 0xT" C"P>'c1xb=G$Q$~G&e2yT]-*i63y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Ub_,JVt]{o+a|V'q,nW!e|g9s,Ai}VYu-nam}yw-q~W'y.oWu~g{.yW}/o}p ?,4 PLp A! ) P9q =C,A4IQLYq = 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&RVq>O:GRh]*NS:VWVjj^W;~_3f6DjaX.ViZ6{ްWa؜f#X܆W'eٜc=YGiڝf]Z݆gm۝}[qܞg#\އWuݞc]yޟg^߇}ߟ,�< DT%'- Ð= E,Gđ<MőD]� = 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6*y>沪FTeHTj:]JTUZXXl ŖcC֛ekڮVۅq]כ{ްWa؜f#X܆W'eٜc=YGiڝf]Z݆gm۝}[qܞg#\އWuݞc]yޟg^߇}ߟ,�< DT%'- Ð= D = 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8= 0xT" C"P>'c1xb=G$Q$~G&e2yT]-K&Rg6g3y}=O(S$Fi4zU"MS*T>Vk5zb]W,U%~fm6{Um[.Vvo7{}_0W%q8|V#c2X?'s9|c=g4Y&Gu:}V]k6Zgw;}}o8[&y<~W#s:\?{=~cw<]'}>W{>^?8�����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/simple_map_plot/world_map.map����������������������������������000644 �001751 �001751 �00000010302 12557600613 026577� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������# OpenVAS # $Id$ # Description: mapfile to render IPs with threat data on a world map. # # Authors: # Raimund Renkert <raimund.renkert@greenbone.net> # # Copyright: # Copyright (C) 2010 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. MAP IMAGETYPE PNG EXTENT -180 -90 180 90 SIZE 2000 1000 UNITS DD SHAPEPATH "." FONTSET "__RWD__/fonts.txt" # Output format is PNG OUTPUTFORMAT NAME "AGG" DRIVER "AGG/PNG" IMAGEMODE RGB FORMATOPTION "QUANTIZE_FORCE=ON" FORMATOPTION "QUANTIZE_DITHER=OFF" FORMATOPTION "QUANTIZE_COLORS=256" END #Symbol for host location SYMBOL NAME 'point' TYPE ELLIPSE POINTS 1 1 END FILLED TRUE END # Start of LAYER DEFINITIONS LAYER # Map NAME "map_picture" DATA "__RWD__/world_map.tiff" STATUS DEFAULT TYPE RASTER END LAYER # IPs high NAME "IPs_high" STATUS DEFAULT TYPE POINT PROJECTION "init=epsg:4326" END DATA "ip_layer.shp" FILTER "red" FILTERITEM "color" CLASS NAME "IP_medium" MINSIZE 15 MAXSIZE 15 TEXT ([IP]# [high] | [medium] | [low]) LABEL WRAP "#" BACKGROUNDCOLOR 255 0 0 BACKGROUNDSHADOWCOLOR 0 0 0 TYPE TRUETYPE FONT "FreeSans" COLOR 0 0 0 SIZE 14 POSITION AUTO END STYLE SYMBOL 'point' SIZE 10 COLOR 255 0 0 OUTLINECOLOR 255 255 255 END END END LAYER # IPs medium NAME "IPs_medium" STATUS DEFAULT TYPE POINT PROJECTION "init=epsg:4326" END DATA "ip_layer.shp" FILTER "orange" FILTERITEM "color" CLASS NAME "IP_medium" MINSIZE 15 MAXSIZE 15 TEXT ([IP]# [high] | [medium] | [low]) LABEL BACKGROUNDCOLOR 255 150 0 BACKGROUNDSHADOWCOLOR 0 0 0 WRAP "#" TYPE TRUETYPE FONT "FreeSans" COLOR 0 0 0 SIZE 14 POSITION AUTO END STYLE SYMBOL 'point' SIZE 10 COLOR 255 0 0 OUTLINECOLOR 255 255 255 END END END LAYER # IPs low NAME "IPs_low" STATUS DEFAULT TYPE POINT PROJECTION "init=epsg:4326" END DATA "ip_layer.shp" FILTER "blue" FILTERITEM "color" CLASS NAME "IP_low" MINSIZE 15 MAXSIZE 15 TEXT ([IP]# [high] | [medium] | [low]) LABEL BACKGROUNDCOLOR 0 150 255 BACKGROUNDSHADOWCOLOR 0 0 0 WRAP "#" TYPE TRUETYPE FONT "FreeSans" COLOR 0 0 0 SIZE 14 POSITION AUTO END STYLE SYMBOL 'point' SIZE 10 COLOR 255 0 0 OUTLINECOLOR 255 255 255 END END END LAYER # IPs other NAME "IPs_other" STATUS DEFAULT TYPE POINT PROJECTION "init=epsg:4326" END DATA "ip_layer.shp" FILTER "white" FILTERITEM "color" CLASS NAME "IP_other" MINSIZE 15 MAXSIZE 15 TEXT ([IP]) LABEL BACKGROUNDCOLOR 50 255 50 BACKGROUNDSHADOWCOLOR 0 0 0 TYPE TRUETYPE FONT "FreeSans" COLOR 0 0 0 SIZE 14 POSITION AUTO END STYLE SYMBOL 'point' SIZE 10 COLOR 255 0 0 OUTLINECOLOR 255 255 255 END END END INCLUDE "non-georeferenced.map" END ������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/simple_map_plot/locations.csv����������������������������������000644 �001751 �001751 �00000000250 12557600613 026625� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������IP, lon, lat, comment 127.0.0.1, 7.415, 52.85, Osnabrueck 192.168.46.1, -73.58, 40.47, New York 192.168.46.10, -43.12, -22.57, Rio 192.168.46.43, 139.45, 35.40, Tokyo ��������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/simple_map_plot/README.txt�������������������������������������000644 �001751 �001751 �00000001644 12557600613 025623� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������Required tools: To execute the Report Format plugin properly, the special tools "shp2img" of the UMN MapServer project and "ogr2ogr" of the GDAL project are required to be available for the environment where openvasmd is running. Mapping IPs: This simple map report generator uses a static list of georeferenced IPs in the file "locations.csv". You need to extend this file for your network for a respective map. Origin of background map: VMAP0 is a public domain data set (http://en.wikipedia.org/wiki/Vector_Map) and can be downloaded and processed e.g. this way: curl "http://vmap0.tiles.osgeo.org/wms/vmap0?LAYERS=basic&SERVICE=WMS&VERSION=1.1.1&REQUEST=GetMap&STYLES=&EXCEPTIONS=application%2Fvnd.ogc.se_inimage&FORMAT=image%2Fpng&SRS=EPSG%3A4326&BBOX=-180,-90,180,90&WIDTH=2000&HEIGHT=1000" > world_map.png gdal_translate -of gtiff -co "compress=LZW" -a_ullr 90 -180 -90 180 -a_srs "wgs84" world_map.png world_map.tiff ��������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/simple_map_plot/non-georeferenced.dot��������������������������000644 �001751 �001751 �00000000770 12557600613 030221� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������graph targets { "Targets" [shape=none, margin=0, label= <<TABLE BORDER="0" CELLBORDER="1" CELLSPACING="0" CELLPADDING="4"> <TR> <TD COLSPAN="2">Non-georeferenced IPs</TD> </TR> <TR> <TD BGCOLOR="red">High</TD> <TD>target_count_high</TD> </TR> <TR> <TD BGCOLOR="orange">Medium</TD> <TD>target_count_med</TD> </TR> <TR> <TD BGCOLOR="dodgerblue">Low</TD> <TD>target_count_low</TD> </TR> </TABLE>>]; } ��������openvas-manager-6.0.9/report_formats/tls-map/generate�����������������������������������������������000755 �001751 �001751 �00000002173 12557600613 024034� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������#!/bin/sh # # OpenVAS # $Id$ # Description: Report generator script: TLS-Map. # # This report format plugin extracts the tables of ports using TLS or a # variation thereof from the given XML scan report using a XSL transformation # with the tool xsltproc. # # Authors: # Michael Wiegand <michael.wiegand@greenbone.net> # # Copyright: # Copyright (C) 2013 Greenbone Networks GmbH # # This program is free software; you can redistribute it and/or modify # it under the terms of the GNU General Public License as published by # the Free Software Foundation; either version 2 of the License, or # (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. xsltproc ./tls-map.xsl $1 | awk '!($0 in a) && NF {a[$0];print}' �����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������openvas-manager-6.0.9/report_formats/tls-map/create_report_import�����������������������������������000644 �001751 �001751 �00000001726 12557600613 026472� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������NAME="TLS Map" UUID=`uuid -v4` EXTENSION=csv CONTENT_TYPE="text/csv" VERSION="1.0.0" SUMMARY="TLS Map report $VERSION" DESCRIPTION="TLS Mapping results in CSV format, version $VERSION" RFP_FILE_NAME="tls-map.xml" # Names must be in alphabetical order. FNAME1=generate FILE1=`base64 -w 0 $FNAME1` FNAME2=tls-map.xsl FILE2=`base64 -w 0 $FNAME2` echo ${UUID}${EXTENSION}${CONTENT_TYPE}0${FNAME1}${FILE1}${FNAME2}${FILE2}> ${UUID} gpg --detach-sign --armor ${UUID} rm ${UUID} echo -n '<get_report_formats_response status="200" status_text="OK"><report_format id="'$UUID'"><name>'$NAME'</name><extension>'$EXTENSION'</extension><content_type>'$CONTENT_TYPE'</content_type><summary>'$SUMMARY'</summary><description>'$DESCRIPTION'</description><global>0</global><file name="'$FNAME1'">'$FILE1'</file><file name="'$FNAME2'">'$FILE2'</file><signature>' > $RFP_FILE_NAME cat ${UUID}.asc >> $RFP_FILE_NAME echo '</signature></report_format></get_report_formats_response>' >> $RFP_FILE_NAME ������������������������������������������openvas-manager-6.0.9/report_formats/tls-map/tls-map.xsl��������������������������������������������000644 �001751 �001751 �00000002723 12557600613 024422� 0����������������������������������������������������������������������������������������������������ustar�00michael�������������������������michael�������������������������000000 �000000 ������������������������������������������������������������������������������������������������������������������������������������������������������������������������<?xml version="1.0" encoding="UTF-8"?> <xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method="text" encoding="UTF-8" /> <!-- OpenVAS Manager $Id$ Description: Report stylesheet for TLS Map CSV format. Authors: Michael Wiegand <michael.wiegand@greenbone.net> Copyright: Copyright (C) 2013 Greenbone Networks GmbH This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. --> <xsl:template match="report"> <xsl:choose> <xsl:when test = "@extension = 'xml'"> <xsl:apply-templates select="report"/> </xsl:when> <xsl:otherwise> <xsl:apply-templates select="results/result[nvt/@oid='1.3.6.1.4.1.25623.1.0.103823']/description"/> </xsl:otherwise> </xsl:choose> </xsl:template> <xsl:template match="/"> <xsl:apply-templates select="report"/> </xsl:template> </xsl:stylesheet> �������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������